@themoltnet/pi-runtime 0.3.0 → 0.4.0

package/dist/index.d.ts

@@ -46,6 +46,7 @@ export declare interface AllowedToolsClient {
             allowedShellCommands: Array<{
                 argvPrefix: string[];
             }>;
+            runtimeKind: string;
         }>;
     };
 }
@@ -1072,6 +1073,8 @@ declare interface ResolveSessionToolPolicyInput {
     agent: AllowedToolsClient;
     profileId: string;
     teamId: string;
+    /** Runtime kind supplied by the trusted daemon adapter for this session. */
+    runtimeKind: string;
     /**
      * The profile's enforcement mode, already known to the daemon from the
      * resolved runtime profile. Used to decide fail-open vs fail-closed when the

package/dist/index.js

@@ -10046,7 +10046,11 @@ var ProblemDetailsSchema = _Object_({
 	}),
 	code: ProblemCodeSchema,
 	detail: Optional(String$1()),
-	instance: Optional(String$1())
+	instance: Optional(String$1()),
+	retryAfter: Optional(Integer({
+		minimum: 0,
+		description: "Non-negative delay in seconds before retrying, matching the Retry-After response header when present."
+	}))
 }, {
 	$id: "ProblemDetails",
 	additionalProperties: true
@@ -14991,6 +14995,10 @@ var TaskAttempt = _Object_({
 	taskId: Uuid,
 	attemptN: Number$1({ minimum: 1 }),
 	claimedByAgentId: Uuid,
+	leaseId: Union([Uuid, Null()]),
+	runtimeProfileId: Union([Uuid, Null()]),
+	runtimeProfileRevision: Union([Integer({ minimum: 1 }), Null()]),
+	policySnapshotHash: Union([String$1({ pattern: "^sha256:[0-9a-f]{64}$" }), Null()]),
 	runtimeId: Union([Uuid, Null()]),
 	claimedAt: IsoTimestamp,
 	startedAt: Union([IsoTimestamp, Null()]),
@@ -32559,6 +32567,10 @@ async function resolveSessionToolPolicy(input) {
 	try {
 		const resolved = await withTimeout$1(input.agent.runtimeProfiles.allowedTools(input.profileId, { teamId: input.teamId }), timeoutMs);
 		const shellCommands = resolved.allowedShellCommands ?? [];
+		if (resolved.runtimeKind !== input.runtimeKind) throw new RuntimeKindMismatchError({
+			expectedRuntimeKind: input.runtimeKind,
+			receivedRuntimeKind: resolved.runtimeKind
+		});
 		return {
 			enforcement: resolved.enforcement,
 			allowedTools: new Set(resolved.allowedTools),
@@ -32592,6 +32604,12 @@ var ToolPolicyResolveTimeoutError = class extends Error {
 		this.name = "ToolPolicyResolveTimeoutError";
 	}
 };
+var RuntimeKindMismatchError = class extends Error {
+	constructor(input) {
+		super(`runtime kind mismatch: expected ${input.expectedRuntimeKind}, received ${input.receivedRuntimeKind}`);
+		this.name = "RuntimeKindMismatchError";
+	}
+};
 /**
 * Reject with {@link ToolPolicyResolveTimeoutError} if `promise` does not settle
 * within `timeoutMs`. A non-positive `timeoutMs` disables the deadline. The
@@ -34302,6 +34320,7 @@ async function executePiTask(claimedTask, reporter, opts) {
 					agent: moltnetAgent,
 					profileId: opts.runtimeProfileId,
 					teamId: taskTeamId,
+					runtimeKind: opts.runtimeDefinition?.runtimeKind ?? "gondolin_pi",
 					enforcement: opts.toolEnforcement,
 					logger: toolPolicyLogger
 				})]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@themoltnet/pi-runtime",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "license": "MIT",
   "type": "module",
   "description": "Composable MoltNet runtime kernel for Pi agents in Gondolin VMs",
@@ -26,7 +26,7 @@
     "@earendil-works/gondolin": "^0.9.1",
     "@opentelemetry/api": "^1.9.0",
     "typebox": "^1.2.8",
-    "@themoltnet/agent-runtime": "0.38.0",
+    "@themoltnet/agent-runtime": "0.39.0",
     "@themoltnet/shell-command-analyzer": "0.3.0",
     "@themoltnet/sdk": "0.128.0"
   },
@@ -45,9 +45,9 @@
     "vite": "^8.0.0",
     "vite-plugin-dts": "^4.5.4",
     "vitest": "^3.0.0",
-    "@moltnet/models": "0.1.0",
+    "@moltnet/tasks": "0.1.0",
     "@moltnet/crypto-service": "0.1.0",
-    "@moltnet/tasks": "0.1.0"
+    "@moltnet/models": "0.1.0"
   },
   "engines": {
     "node": ">=22"