@masons/runtime-broker 0.2.8 → 0.2.10

package/dist/broker/broker-daemon.d.ts

@@ -58,6 +58,7 @@ export interface BrokerDaemonOptions {
     runtimeInboundRoutedBackoffMaxMs?: number;
     runtimeInboundRoutedMaxRetries?: number;
     runtimeAssignmentAcceptanceTimeoutMs?: number;
+    pushReceiptAckTimeoutMs?: number;
 }
 export interface RunningBroker {
     bearerToken: string;

package/dist/broker/broker-daemon.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"broker-daemon.d.ts","sourceRoot":"","sources":["../../src/broker/broker-daemon.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAqB,KAAK,IAAI,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAQjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,KAAK,sBAAsB,EAE5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EACV,UAAU,EAIX,MAAM,0BAA0B,CAAC;AAKlC,OAAO,EACL,KAAK,eAAe,EAKrB,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EAEL,KAAK,aAAa,EAEnB,MAAM,6BAA6B,CAAC;AAiBrC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AAM7F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAO9C,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAEV,mBAAmB,EACpB,MAAM,4BAA4B,CAAC;AAMpC,OAAO,KAAK,EACV,6BAA6B,EAC7B,yBAAyB,EAC1B,MAAM,yCAAyC,CAAC;AAKjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAKtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAG7D,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,uCAAuC,CAAC;AAM/C,OAAO,EAEL,KAAK,iBAAiB,EAEvB,MAAM,yBAAyB,CAAC;AAqDjC,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,WAAW,CAAC;IACvB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,MAAM,EAAE,YAAY,CAAC;IAGrB,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAE5C,aAAa,CAAC,EAAE,MAAM,CAAC;IAGvB,OAAO,CAAC,EAAE,MAAM,CAAC;IAGjB,aAAa,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IAKhD,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAG1C,OAAO,CAAC,EAAE,OAAO,UAAU,CAAC;IAG5B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAGhC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAGnC,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAK5B,0BAA0B,CAAC,EAAE,CAAC,IAAI,EAAE;QAClC,UAAU,EAAE,sBAAsB,CAAC;QACnC,MAAM,EAAE,YAAY,CAAC;KACtB,KAAK,mBAAmB,CAAC;IAK1B,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAQpD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAI/B,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAIxC,uBAAuB,CAAC,EAAE,CACxB,KAAK,EAAE,wBAAwB,KAC5B,OAAO,CAAC,OAAO,4BAA4B,EAAE,WAAW,CAAC,CAAC;IAG/D,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAErC,mCAAmC,CAAC,EAAE,MAAM,CAAC;IAE7C,+BAA+B,CAAC,EAAE,MAAM,CAAC;IAEzC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IAIvC,0BAA0B,CAAC,EAAE,CAC3B,KAAK,EAAE,2BAA2B,KAC/B,OAAO,CAAC,OAAO,4BAA4B,EAAE,WAAW,CAAC,CAAC;IAI/D,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAExC,sCAAsC,CAAC,EAAE,MAAM,CAAC;IAEhD,kCAAkC,CAAC,EAAE,MAAM,CAAC;IAE5C,gCAAgC,CAAC,EAAE,MAAM,CAAC;IAG1C,wBAAwB,CAAC,EAAE,CACzB,KAAK,EAAE,yBAAyB,KAC7B,OAAO,CAAC,OAAO,4BAA4B,EAAE,WAAW,CAAC,CAAC;IAG/D,4BAA4B,CAAC,EAAE,CAC7B,KAAK,EAAE,6BAA6B,KACjC,OAAO,CACV,OAAO,+BAA+B,EAAE,+BAA+B,CACxE,CAAC;IAEF,4BAA4B,CAAC,EAAE,MAAM,CAAC;IAEtC,oCAAoC,CAAC,EAAE,MAAM,CAAC;IAE9C,gCAAgC,CAAC,EAAE,MAAM,CAAC;IAE1C,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAExC,oCAAoC,CAAC,EAAE,MAAM,CAAC;CAC/C;AAgBD,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAExC,YAAY,IAAI,MAAM,CAAC;IAGvB,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IAEtD,iBAAiB,EAAE,iBAAiB,CAAC;IAErC,sBAAsB,EAAE,sBAAsB,CAAC;IAE/C,eAAe,IAAI,eAAe,CAAC;IAEnC,iBAAiB,IAAI,MAAM,CAAC;IAE5B,cAAc,IAAI,MAAM,CAAC;IAGzB,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAGvD,4BAA4B,IAAI,MAAM,CAAC;IAGvC,+BAA+B,IAAI,MAAM,CAAC;IAE1C,6BAA6B,IAAI,MAAM,CAAC;CACzC;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;gBAExB,SAAS,EAAE,eAAe;CAOvC;AA4BD,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,aAAa,CAAC,CAwlFxB;AAGD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAMvE;AAED,YAAY,EAAE,eAAe,EAAE,CAAC"}
+{"version":3,"file":"broker-daemon.d.ts","sourceRoot":"","sources":["../../src/broker/broker-daemon.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAqB,KAAK,IAAI,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAQjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,KAAK,sBAAsB,EAE5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EACV,UAAU,EAIX,MAAM,0BAA0B,CAAC;AAKlC,OAAO,EACL,KAAK,eAAe,EAKrB,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EAEL,KAAK,aAAa,EAEnB,MAAM,6BAA6B,CAAC;AAmBrC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AAM7F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAO9C,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAEV,mBAAmB,EACpB,MAAM,4BAA4B,CAAC;AAMpC,OAAO,KAAK,EACV,6BAA6B,EAC7B,yBAAyB,EAC1B,MAAM,yCAAyC,CAAC;AAMjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAKtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAG7D,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,uCAAuC,CAAC;AAM/C,OAAO,EAEL,KAAK,iBAAiB,EAEvB,MAAM,yBAAyB,CAAC;AAgIjC,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,WAAW,CAAC;IACvB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,MAAM,EAAE,YAAY,CAAC;IAGrB,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAE5C,aAAa,CAAC,EAAE,MAAM,CAAC;IAGvB,OAAO,CAAC,EAAE,MAAM,CAAC;IAGjB,aAAa,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IAKhD,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAG1C,OAAO,CAAC,EAAE,OAAO,UAAU,CAAC;IAG5B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAGhC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAGnC,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAK5B,0BAA0B,CAAC,EAAE,CAAC,IAAI,EAAE;QAClC,UAAU,EAAE,sBAAsB,CAAC;QACnC,MAAM,EAAE,YAAY,CAAC;KACtB,KAAK,mBAAmB,CAAC;IAK1B,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAQpD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAI/B,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAIxC,uBAAuB,CAAC,EAAE,CACxB,KAAK,EAAE,wBAAwB,KAC5B,OAAO,CAAC,OAAO,4BAA4B,EAAE,WAAW,CAAC,CAAC;IAG/D,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAErC,mCAAmC,CAAC,EAAE,MAAM,CAAC;IAE7C,+BAA+B,CAAC,EAAE,MAAM,CAAC;IAEzC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IAIvC,0BAA0B,CAAC,EAAE,CAC3B,KAAK,EAAE,2BAA2B,KAC/B,OAAO,CAAC,OAAO,4BAA4B,EAAE,WAAW,CAAC,CAAC;IAI/D,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAExC,sCAAsC,CAAC,EAAE,MAAM,CAAC;IAEhD,kCAAkC,CAAC,EAAE,MAAM,CAAC;IAE5C,gCAAgC,CAAC,EAAE,MAAM,CAAC;IAG1C,wBAAwB,CAAC,EAAE,CACzB,KAAK,EAAE,yBAAyB,KAC7B,OAAO,CAAC,OAAO,4BAA4B,EAAE,WAAW,CAAC,CAAC;IAG/D,4BAA4B,CAAC,EAAE,CAC7B,KAAK,EAAE,6BAA6B,KACjC,OAAO,CACV,OAAO,+BAA+B,EAAE,+BAA+B,CACxE,CAAC;IAEF,4BAA4B,CAAC,EAAE,MAAM,CAAC;IAEtC,oCAAoC,CAAC,EAAE,MAAM,CAAC;IAE9C,gCAAgC,CAAC,EAAE,MAAM,CAAC;IAE1C,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAExC,oCAAoC,CAAC,EAAE,MAAM,CAAC;IAE9C,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAgBD,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAExC,YAAY,IAAI,MAAM,CAAC;IAGvB,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IAEtD,iBAAiB,EAAE,iBAAiB,CAAC;IAErC,sBAAsB,EAAE,sBAAsB,CAAC;IAE/C,eAAe,IAAI,eAAe,CAAC;IAEnC,iBAAiB,IAAI,MAAM,CAAC;IAE5B,cAAc,IAAI,MAAM,CAAC;IAGzB,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAGvD,4BAA4B,IAAI,MAAM,CAAC;IAGvC,+BAA+B,IAAI,MAAM,CAAC;IAE1C,6BAA6B,IAAI,MAAM,CAAC;CACzC;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;gBAExB,SAAS,EAAE,eAAe;CAOvC;AA4BD,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,aAAa,CAAC,CAmmGxB;AAGD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAMvE;AAED,YAAY,EAAE,eAAe,EAAE,CAAC"}

package/dist/broker/broker-daemon.js

@@ -24,6 +24,7 @@ import { createUndispatchedChangedEmitter, postUndispatchedChangedViaPort, } fro
 import { createUndispatchedInbox, } from "./undispatched-inbox.js";
 const REMOTE_SPAWN_CAPABILITY = "remote_spawn_v1";
 const DEFAULT_RUNTIME_ASSIGNMENT_ACCEPTANCE_TIMEOUT_MS = 30_000;
+const DEFAULT_PUSH_RECEIPT_ACK_TIMEOUT_MS = 2_000;
 const RUNTIME_ASSIGNMENT_REPLY_RECORD_TTL_MS = 24 * 60 * 60 * 1000;
 const RUNTIME_PROCESSING_RETRY_INITIAL_MS = 1_000;
 const RUNTIME_PROCESSING_RETRY_MAX_MS = 30_000;
@@ -46,6 +47,52 @@ function buildLocalDispatchTargetRef(targetEndpointId, target) {
         background_exchange_mode: "resident_endpoint",
     };
 }
+function buildRuntimeAssignmentTargetRef(entry) {
+    if (!entry.runtime_capabilities?.includes("background_exchange_v1")) {
+        return null;
+    }
+    if (entry.background_exchange_mode === "resident_endpoint") {
+        return {
+            kind: "projection_endpoint",
+            projection_endpoint_id: entry.endpoint_id,
+            background_exchange_mode: "resident_endpoint",
+        };
+    }
+    if (entry.background_exchange_mode === "adapter_managed_turn" &&
+        typeof entry.runtime_session_id === "string" &&
+        entry.runtime_session_id.trim().length > 0) {
+        return {
+            kind: "projection_endpoint",
+            projection_endpoint_id: entry.endpoint_id,
+            runtime_session_id: entry.runtime_session_id,
+            background_exchange_mode: "adapter_managed_turn",
+        };
+    }
+    return null;
+}
+function sameRuntimeWorkTargetRef(left, right) {
+    return (left.kind === right.kind &&
+        left.projection_endpoint_id === right.projection_endpoint_id &&
+        left.background_exchange_mode === right.background_exchange_mode &&
+        (left.background_exchange_mode !== "adapter_managed_turn" ||
+            right.background_exchange_mode !== "adapter_managed_turn" ||
+            left.runtime_session_id === right.runtime_session_id));
+}
+function tokenMatches(left, right) {
+    if (left.length !== right.length)
+        return false;
+    let mismatch = 0;
+    for (let i = 0; i < left.length; i++) {
+        mismatch |= left.charCodeAt(i) ^ right.charCodeAt(i);
+    }
+    return mismatch === 0;
+}
+function assertEndpointOwnerToken(entry, candidate) {
+    if (typeof candidate !== "string" ||
+        !tokenMatches(candidate, entry.endpoint_owner_token)) {
+        throw new BrokerHttpError(403, "endpoint_owner_token_mismatch", "endpoint_owner_token does not own endpoint_id");
+    }
+}
 function derivePublicDisplayLabel(body) {
     const parts = [
         body.kind,
@@ -100,6 +147,7 @@ export async function startBrokerDaemon(opts) {
     const presenceGraceMs = opts.presenceGraceMs;
     const runtimeAssignmentAcceptanceTimeoutMs = opts.runtimeAssignmentAcceptanceTimeoutMs ??
         DEFAULT_RUNTIME_ASSIGNMENT_ACCEPTANCE_TIMEOUT_MS;
+    const pushReceiptAckTimeoutMs = opts.pushReceiptAckTimeoutMs ?? DEFAULT_PUSH_RECEIPT_ACK_TIMEOUT_MS;
     const postControlAck = opts.postControlAck ??
         (async () => {
         });
@@ -539,6 +587,65 @@ export async function startBrokerDaemon(opts) {
         }
     };
     const channels = new Map();
+    const channelCapabilities = new WeakMap();
+    const pendingPushAcks = new Map();
+    const settlePushAck = (pushId, ok) => {
+        const pending = pendingPushAcks.get(pushId);
+        if (!pending)
+            return;
+        pendingPushAcks.delete(pushId);
+        clearTimeout(pending.timer);
+        pending.resolve(ok);
+    };
+    const waitForPushAck = (plugin_pid, ipc_ws, pushId, event, endpoint_id) => new Promise((resolve) => {
+        const timer = setTimeout(() => {
+            logger.warn("ipc_push_ack_timeout", {
+                push_id: pushId,
+                plugin_pid,
+                event,
+                endpoint_id,
+            });
+            settlePushAck(pushId, false);
+        }, pushReceiptAckTimeoutMs);
+        timer.unref?.();
+        pendingPushAcks.set(pushId, {
+            plugin_pid,
+            ipc_ws,
+            endpoint_id,
+            event,
+            timer,
+            resolve,
+        });
+    });
+    const pushToPluginWithReceipt = async (entry, event) => {
+        const capabilities = channelCapabilities.get(entry.ipc_ws);
+        if (capabilities?.push_receipt_ack_v1 !== true) {
+            return pushToPlugin(entry.ipc_ws, event);
+        }
+        const pushId = `push_${randomUUID()}`;
+        const ack = waitForPushAck(entry.plugin_pid, entry.ipc_ws, pushId, event.event, entry.endpoint_id);
+        let pushed = false;
+        try {
+            pushed = pushToPlugin(entry.ipc_ws, {
+                ...event,
+                push_id: pushId,
+            });
+        }
+        catch (err) {
+            logger.warn("ipc_push_send_failed", {
+                push_id: pushId,
+                endpoint_id: entry.endpoint_id,
+                plugin_pid: entry.plugin_pid,
+                event: event.event,
+                err: err instanceof Error ? err.message : String(err),
+            });
+        }
+        if (!pushed) {
+            settlePushAck(pushId, false);
+            return false;
+        }
+        return ack;
+    };
     let networkPresence = "offline";
     let presenceGraceTimer;
     const applyPresenceTransition = (event) => {
@@ -918,7 +1025,6 @@ export async function startBrokerDaemon(opts) {
         storedAssignment.lastStateSequence = Math.max(storedAssignment.lastStateSequence, processingEvent.state_sequence);
         runtimeAssignments.set(assignmentKey, storedAssignment);
         scheduleAcceptanceTimeout(assignmentKey);
-        rememberRuntimeAssignmentCorrelation(target.endpoint_id, taken.metadata.correlation_id, assignmentKey);
         const stamped = {
             event: "message_received",
             from: taken.sender_address,
@@ -932,15 +1038,26 @@ export async function startBrokerDaemon(opts) {
             sourceMessageId: taken.source_message_id,
             runtimeAssignment,
         };
-        recordInboundCorrelation(target.endpoint_id, stamped.metadata);
         if (target.state === "active") {
-            if (!pushToPlugin(target.ipc_ws, stamped)) {
-                await restorePendingAssignmentsForEndpoint(target.endpoint_id, "ipc_push_failed");
-                return {
-                    ok: false,
-                    detail: `target endpoint not writable: ${targetEndpointId}`,
-                };
+            if (!(await pushToPluginWithReceipt(target, stamped))) {
+                const current = runtimeAssignments.get(assignmentKey);
+                if (current?.accepted) {
+                    logger.info("ipc_push_ack_missing_after_adapter_accept", {
+                        assignment_id: runtimeAssignment.assignmentId,
+                        source_message_id: runtimeAssignment.sourceMessageId,
+                        target_endpoint_id: target.endpoint_id,
+                    });
+                }
+                else {
+                    await restorePendingAssignmentsForEndpoint(target.endpoint_id, "ipc_push_not_received");
+                    return {
+                        ok: false,
+                        detail: `target endpoint did not acknowledge push receipt: ${targetEndpointId}`,
+                    };
+                }
             }
+            rememberRuntimeAssignmentCorrelation(target.endpoint_id, taken.metadata.correlation_id, assignmentKey);
+            recordInboundCorrelation(target.endpoint_id, stamped.metadata);
         }
         else {
             try {
@@ -1070,9 +1187,11 @@ export async function startBrokerDaemon(opts) {
                 ? Array.from(runtimeCapabilitiesSet)
                 : undefined;
             const runtimeSessionId = body.runtime_session_id?.trim() || undefined;
+            const endpointNonce = randomUUID();
+            const endpointOwnerToken = randomUUID();
             const apiResp = await apiPort.register({
                 runtime_kind: body.kind,
-                endpoint_nonce: randomUUID(),
+                endpoint_nonce: endpointNonce,
                 display_label: derivePublicDisplayLabel(body),
                 workspace: body.workspace
                     ? { root: body.workspace, cwd: body.workspace }
@@ -1087,6 +1206,8 @@ export async function startBrokerDaemon(opts) {
             });
             registry.register({
                 endpoint_id: apiResp.endpoint_id,
+                endpoint_nonce: endpointNonce,
+                endpoint_owner_token: endpointOwnerToken,
                 agent_id: body.agent_id,
                 plugin_pid: body.plugin_pid,
                 ipc_ws: boundWs,
@@ -1135,7 +1256,10 @@ export async function startBrokerDaemon(opts) {
                 plugin_pid: body.plugin_pid,
                 kind: body.kind,
             });
-            return { endpoint_id: apiResp.endpoint_id };
+            return {
+                endpoint_id: apiResp.endpoint_id,
+                endpoint_owner_token: endpointOwnerToken,
+            };
         },
         async heartbeatEndpoint(endpoint_id) {
             const entry = registry.get(endpoint_id);
@@ -1215,6 +1339,266 @@ export async function startBrokerDaemon(opts) {
             }
             return { messageId: ack.messageId, status: ack.status };
         },
+        async claimRuntimeAssignment(body) {
+            const entry = registry.get(body.endpoint_id);
+            if (!entry) {
+                throw new BrokerHttpError(404, "unknown_endpoint", `unknown endpoint_id: ${body.endpoint_id}`);
+            }
+            if (entry.plugin_pid !== body.plugin_pid) {
+                throw new BrokerHttpError(403, "endpoint_pid_mismatch", "plugin_pid does not own endpoint_id");
+            }
+            assertEndpointOwnerToken(entry, body.endpoint_owner_token);
+            if (entry.state !== "active") {
+                throw new BrokerHttpError(409, "endpoint_not_active", `endpoint ${body.endpoint_id} is ${entry.state}; assignment claim is only allowed from Active`);
+            }
+            const expectedTargetRef = buildRuntimeAssignmentTargetRef(entry);
+            if (!expectedTargetRef) {
+                throw new BrokerHttpError(409, "missing_background_exchange_v1", "endpoint does not expose an assignment-capable runtime work target");
+            }
+            if (typeof body.undispatched_id !== "string" ||
+                body.undispatched_id.length === 0) {
+                throw new BrokerHttpError(400, "undispatched_id_invalid", "undispatched_id is required");
+            }
+            const existingAssignment = Array.from(runtimeAssignments.values()).find((assignment) => assignment.context.undispatchedId === body.undispatched_id &&
+                assignment.context.targetRef.projection_endpoint_id ===
+                    body.endpoint_id);
+            if (existingAssignment) {
+                if (body.recover_existing !== true || existingAssignment.accepted) {
+                    throw new BrokerHttpError(409, "runtime_assignment_in_progress", "runtime assignment already exists for this undispatched message and endpoint");
+                }
+                return {
+                    assignment: existingAssignment.context,
+                    message: {
+                        from: existingAssignment.message.sender_address,
+                        content: existingAssignment.message.content,
+                        contentType: existingAssignment.message.content_type,
+                        metadata: existingAssignment.message.metadata,
+                        ...(existingAssignment.message.source_message_id !== undefined && {
+                            sourceMessageId: existingAssignment.message.source_message_id,
+                        }),
+                    },
+                };
+            }
+            if (!apiPort.claimRuntimeSelfAssignment) {
+                throw new BrokerHttpError(503, "runtime_self_claim_unsupported", "apps/api self-claim route is not available", { retryable: true });
+            }
+            const claimOutcome = await apiPort.claimRuntimeSelfAssignment({
+                undispatched_id: body.undispatched_id,
+                target_endpoint_id: body.endpoint_id,
+                endpoint_nonce: entry.endpoint_nonce,
+                ...(body.recover_existing === true && { recover_existing: true }),
+            });
+            if (!claimOutcome.ok && claimOutcome.postCasInvalidClaim !== undefined) {
+                const invalidClaim = claimOutcome.postCasInvalidClaim;
+                if (typeof invalidClaim.undispatched_id === "string" &&
+                    typeof invalidClaim.source_message_id === "string" &&
+                    typeof invalidClaim.assignment_id === "string" &&
+                    typeof invalidClaim.broker_projection_token === "string" &&
+                    invalidClaim.target_ref !== undefined) {
+                    const released = apiPort.releaseRuntimeSelfAssignment
+                        ? await apiPort
+                            .releaseRuntimeSelfAssignment({
+                            undispatched_id: invalidClaim.undispatched_id,
+                            source_message_id: invalidClaim.source_message_id,
+                            assignment_id: invalidClaim.assignment_id,
+                            target_ref: invalidClaim.target_ref,
+                            endpoint_nonce: entry.endpoint_nonce,
+                            broker_projection_token: invalidClaim.broker_projection_token,
+                        })
+                            .catch((err) => ({
+                            ok: false,
+                            terminal: false,
+                            detail: err instanceof Error ? err.message : String(err),
+                        }))
+                        : { ok: false, terminal: false };
+                    if (!released.ok) {
+                        logger.error("runtime_self_claim_compensation_failed", {
+                            reason_code: "invalid_2xx_claim_response",
+                            release_detail: released.detail,
+                            undispatched_id: invalidClaim.undispatched_id,
+                            source_message_id: invalidClaim.source_message_id,
+                            assignment_id: invalidClaim.assignment_id,
+                            target_endpoint_id: body.endpoint_id,
+                        });
+                        throw new BrokerHttpError(503, "runtime_self_claim_outcome_unknown", "runtime self-claim returned an invalid post-CAS response and the broker could not release it; retry the claim", {
+                            retryable: true,
+                            outcome_unknown: true,
+                            reason_code: "invalid_2xx_claim_response",
+                        });
+                    }
+                }
+                else {
+                    logger.error("runtime_self_claim_invalid_response_unreleasable", {
+                        target_endpoint_id: body.endpoint_id,
+                        detail: claimOutcome.detail,
+                    });
+                    throw new BrokerHttpError(503, "runtime_self_claim_outcome_unknown", "runtime self-claim returned an invalid post-CAS response without enough release data; retry the claim", {
+                        retryable: true,
+                        outcome_unknown: true,
+                        reason_code: "invalid_2xx_claim_response_unreleasable",
+                    });
+                }
+            }
+            if (!claimOutcome.ok) {
+                const rejectedStatus = claimOutcome.status !== undefined && claimOutcome.status >= 400
+                    ? claimOutcome.status
+                    : 502;
+                throw new BrokerHttpError(claimOutcome.terminal ? rejectedStatus : 503, "runtime_self_claim_rejected", claimOutcome.detail ?? "runtime self-claim was rejected", { retryable: !claimOutcome.terminal });
+            }
+            const claim = claimOutcome.claim;
+            const releaseClaimAfterFailure = async (reasonCode, detail) => {
+                if (!apiPort.releaseRuntimeSelfAssignment) {
+                    logger.error("runtime_self_claim_compensation_unavailable", {
+                        reason_code: reasonCode,
+                        detail,
+                        undispatched_id: claim.undispatched_id,
+                        source_message_id: claim.source_message_id,
+                        assignment_id: claim.assignment_id,
+                        target_endpoint_id: body.endpoint_id,
+                    });
+                    return false;
+                }
+                try {
+                    const released = await apiPort.releaseRuntimeSelfAssignment({
+                        undispatched_id: claim.undispatched_id,
+                        source_message_id: claim.source_message_id,
+                        assignment_id: claim.assignment_id,
+                        target_ref: claim.target_ref,
+                        endpoint_nonce: entry.endpoint_nonce,
+                        broker_projection_token: claim.broker_projection_token,
+                    });
+                    if (!released.ok) {
+                        logger.error("runtime_self_claim_compensation_failed", {
+                            reason_code: reasonCode,
+                            detail,
+                            terminal: released.terminal,
+                            release_detail: released.detail,
+                            undispatched_id: claim.undispatched_id,
+                            source_message_id: claim.source_message_id,
+                            assignment_id: claim.assignment_id,
+                            target_endpoint_id: body.endpoint_id,
+                        });
+                        return false;
+                    }
+                    logger.warn("runtime_self_claim_compensated", {
+                        reason_code: reasonCode,
+                        detail,
+                        undispatched_id: claim.undispatched_id,
+                        source_message_id: claim.source_message_id,
+                        assignment_id: claim.assignment_id,
+                        target_endpoint_id: body.endpoint_id,
+                    });
+                    return true;
+                }
+                catch (err) {
+                    logger.error("runtime_self_claim_compensation_error", {
+                        reason_code: reasonCode,
+                        detail,
+                        err: err instanceof Error ? err.message : String(err),
+                        undispatched_id: claim.undispatched_id,
+                        source_message_id: claim.source_message_id,
+                        assignment_id: claim.assignment_id,
+                        target_endpoint_id: body.endpoint_id,
+                    });
+                    return false;
+                }
+            };
+            const throwAfterClaimFailure = async (error, reasonCode) => {
+                const released = await releaseClaimAfterFailure(reasonCode, error.message);
+                if (!released) {
+                    throw new BrokerHttpError(503, "runtime_self_claim_outcome_unknown", "runtime self-claim was durably assigned but the broker could not expose or release it; retry the claim", {
+                        retryable: true,
+                        outcome_unknown: true,
+                        reason_code: reasonCode,
+                        original_error: error.code,
+                    });
+                }
+                throw error;
+            };
+            if (claim.undispatched_id !== body.undispatched_id) {
+                await throwAfterClaimFailure(new BrokerHttpError(502, "runtime_self_claim_response_invalid", "self-claim response undispatched_id does not match request", { retryable: false }), "response_undispatched_id_mismatch");
+            }
+            if (!sameRuntimeWorkTargetRef(claim.target_ref, expectedTargetRef)) {
+                await throwAfterClaimFailure(new BrokerHttpError(502, "runtime_self_claim_response_invalid", "self-claim response target_ref does not match registered endpoint work target", { retryable: false }), "response_target_ref_mismatch");
+            }
+            if (claim.message.sourceMessageId !== claim.source_message_id) {
+                await throwAfterClaimFailure(new BrokerHttpError(502, "runtime_self_claim_response_invalid", "self-claim response message sourceMessageId does not match source_message_id", { retryable: false }), "response_message_source_mismatch");
+            }
+            const cached = undispatchedInbox.take(claim.undispatched_id);
+            if (cached && cached.source_message_id !== claim.source_message_id) {
+                logger.warn("runtime_self_claim_cache_mismatch", {
+                    undispatched_id: claim.undispatched_id,
+                    claimed_source_message_id: claim.source_message_id,
+                    cached_source_message_id: cached.source_message_id,
+                });
+            }
+            const message = {
+                id: claim.undispatched_id,
+                source_message_id: claim.source_message_id,
+                arrived_at: new Date(claim.assigned_at).toISOString(),
+                sender_address: claim.message.from,
+                content: claim.message.content,
+                content_type: claim.message.contentType,
+                metadata: claim.message.metadata ?? {},
+                reason: "unaddressed",
+            };
+            const runtimeAssignment = {
+                undispatchedId: claim.undispatched_id,
+                sourceMessageId: claim.source_message_id,
+                assignmentId: claim.assignment_id,
+                targetRef: claim.target_ref,
+                deliveryIntent: "external_handoff",
+                ...(typeof message.metadata.correlation_id === "string" && {
+                    replyCorrelationId: message.metadata.correlation_id,
+                }),
+            };
+            const assignmentKey = runtimeAssignmentKey(claim.source_message_id, claim.assignment_id);
+            const processingEvent = {
+                type: "runtime_processing_state",
+                version: 1,
+                source_message_id: claim.source_message_id,
+                assignment_id: claim.assignment_id,
+                state_event_id: `${claim.assignment_id}:assigned`,
+                state_sequence: 1,
+                target_ref: claim.target_ref,
+                state: "assigned_to_runtime_target",
+                occurred_at: claim.assigned_at,
+                undispatched_id: claim.undispatched_id,
+                broker_projection_token: claim.broker_projection_token,
+            };
+            const processingResult = await emitRuntimeProcessingState(processingEvent);
+            if (!processingResult.ok) {
+                await throwAfterClaimFailure(new BrokerHttpError(processingResult.terminal ? 409 : 503, "runtime_self_claim_assignment_projection_failed", processingResult.detail ??
+                    "assigned_to_runtime_target projection was not accepted", { retryable: !processingResult.terminal }), "assigned_state_projection_failed");
+            }
+            runtimeAssignments.set(assignmentKey, {
+                context: runtimeAssignment,
+                message,
+                brokerProjectionToken: claim.broker_projection_token,
+                accepted: false,
+                assignedAt: claim.assigned_at,
+                lastStateSequence: processingEvent.state_sequence,
+            });
+            scheduleAcceptanceTimeout(assignmentKey);
+            rememberRuntimeAssignmentCorrelation(entry.endpoint_id, message.metadata.correlation_id, assignmentKey);
+            recordInboundCorrelation(entry.endpoint_id, message.metadata);
+            logger.info("runtime_self_claimed", {
+                undispatched_id: claim.undispatched_id,
+                source_message_id: claim.source_message_id,
+                assignment_id: claim.assignment_id,
+                target_endpoint_id: entry.endpoint_id,
+            });
+            return {
+                assignment: runtimeAssignment,
+                message: {
+                    from: message.sender_address,
+                    content: message.content,
+                    contentType: message.content_type,
+                    metadata: message.metadata,
+                    sourceMessageId: message.source_message_id,
+                },
+            };
+        },
         async sendRuntimeAssignmentReply(body) {
             const entry = registry.get(body.endpoint_id);
             if (!entry) {
@@ -1223,6 +1607,7 @@ export async function startBrokerDaemon(opts) {
             if (entry.plugin_pid !== body.plugin_pid) {
                 throw new BrokerHttpError(403, "endpoint_pid_mismatch", "plugin_pid does not own endpoint_id");
             }
+            assertEndpointOwnerToken(entry, body.endpoint_owner_token);
             if (entry.state !== "active") {
                 throw new BrokerHttpError(409, "endpoint_not_active", `endpoint ${body.endpoint_id} is ${entry.state}; assignment reply is only allowed from Active`);
             }
@@ -1392,6 +1777,7 @@ export async function startBrokerDaemon(opts) {
             if (entry.plugin_pid !== body.plugin_pid) {
                 throw new BrokerHttpError(403, "endpoint_pid_mismatch", "plugin_pid does not own endpoint_id");
             }
+            assertEndpointOwnerToken(entry, body.endpoint_owner_token);
             const key = runtimeAssignmentKey(body.source_message_id, body.assignment_id);
             const assignment = runtimeAssignments.get(key);
             if (!assignment) {
@@ -1483,10 +1869,10 @@ export async function startBrokerDaemon(opts) {
             const buf = reconnectingBuffers.forEndpoint(endpoint_id);
             const drained = buf.read();
             graceTimers.cancel(endpoint_id);
-            registry.markActive(endpoint_id, ipcWs);
+            const activeEntry = registry.markActive(endpoint_id, ipcWs);
             let allPushed = true;
             for (const msg of drained) {
-                const pushed = pushToPlugin(ipcWs, {
+                const pushed = await pushToPluginWithReceipt(activeEntry, {
                     event: "message_received",
                     from: msg.envelope.from,
                     content: msg.envelope.content,
@@ -1582,7 +1968,7 @@ export async function startBrokerDaemon(opts) {
         handlers,
         logger,
         getNetworkPresence: () => networkPresence,
-        onChannelOpened: (plugin_pid, ws) => {
+        onChannelOpened: (plugin_pid, ws, clientCapabilities) => {
             const prior = channels.get(plugin_pid);
             if (prior && prior !== ws) {
                 displacedWs.add(prior);
@@ -1593,11 +1979,50 @@ export async function startBrokerDaemon(opts) {
                 }
             }
             channels.set(plugin_pid, ws);
+            channelCapabilities.set(ws, clientCapabilities);
+        },
+        onPushAck: (plugin_pid, ws, push_id) => {
+            const pending = pendingPushAcks.get(push_id);
+            if (!pending) {
+                logger.debug("ipc_push_ack_unknown", { plugin_pid, push_id });
+                return;
+            }
+            if (pending.plugin_pid !== plugin_pid) {
+                logger.warn("ipc_push_ack_pid_mismatch", {
+                    push_id,
+                    expected_plugin_pid: pending.plugin_pid,
+                    actual_plugin_pid: plugin_pid,
+                    event: pending.event,
+                    endpoint_id: pending.endpoint_id,
+                });
+                return;
+            }
+            if (pending.ipc_ws !== ws) {
+                logger.warn("ipc_push_ack_ws_mismatch", {
+                    push_id,
+                    plugin_pid,
+                    event: pending.event,
+                    endpoint_id: pending.endpoint_id,
+                });
+                return;
+            }
+            settlePushAck(push_id, true);
         },
         onChannelClosed: (plugin_pid, ws) => {
             if (channels.get(plugin_pid) === ws) {
                 channels.delete(plugin_pid);
             }
+            for (const [pushId, pending] of Array.from(pendingPushAcks.entries())) {
+                if (pending.plugin_pid === plugin_pid && pending.ipc_ws === ws) {
+                    logger.warn("ipc_push_ack_channel_closed", {
+                        push_id: pushId,
+                        plugin_pid,
+                        event: pending.event,
+                        endpoint_id: pending.endpoint_id,
+                    });
+                    settlePushAck(pushId, false);
+                }
+            }
             if (displacedWs.has(ws))
                 return;
             const bound = wsEndpoints.get(ws);
@@ -1786,9 +2211,8 @@ export async function startBrokerDaemon(opts) {
                     routed_at: Date.now(),
                 };
             }
-            recordInboundCorrelation(decision.entry.endpoint_id, meta);
             if (decision.entry.state === "active") {
-                const pushed = pushToPlugin(decision.entry.ipc_ws, {
+                const pushed = await pushToPluginWithReceipt(decision.entry, {
                     event: "message_received",
                     from: payload.from,
                     content: payload.content,
@@ -1800,6 +2224,7 @@ export async function startBrokerDaemon(opts) {
                 });
                 if (!pushed)
                     return false;
+                recordInboundCorrelation(decision.entry.endpoint_id, meta);
             }
             else {
                 const buf = reconnectingBuffers.forEndpoint(decision.entry.endpoint_id);
@@ -1825,6 +2250,7 @@ export async function startBrokerDaemon(opts) {
                     });
                     return false;
                 }
+                recordInboundCorrelation(decision.entry.endpoint_id, meta);
                 logger.info("buffered_for_reconnecting_endpoint", {
                     endpoint_id: decision.entry.endpoint_id,
                     buffer_size: buf.size(),

package/dist/broker/endpoint-registry.d.ts

@@ -11,6 +11,8 @@ export interface DisplayMetadata {
 }
 export interface BrokerEndpointEntry {
     endpoint_id: string;
+    endpoint_nonce: string;
+    endpoint_owner_token: string;
     agent_id: string;
     plugin_pid: number;
     ipc_ws: WebSocket;
@@ -26,6 +28,8 @@ export interface BrokerEndpointEntry {
 }
 export interface RegisterArgs {
     endpoint_id: string;
+    endpoint_nonce?: string;
+    endpoint_owner_token?: string;
     agent_id: string;
     plugin_pid: number;
     ipc_ws: WebSocket;

package/dist/broker/endpoint-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"endpoint-registry.d.ts","sourceRoot":"","sources":["../../src/broker/endpoint-registry.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,SAAS,MAAM,IAAI,CAAC;AAChC,OAAO,KAAK,EACV,8BAA8B,EAC9B,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAG9D,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,QAAQ,GAAG,cAAc,CAAC;IACjC,WAAW,EAAE,IAAI,CAAC;IAElB,cAAc,CAAC,EAAE,IAAI,CAAC;IACtB,oBAAoB,CAAC,EAAE,yBAAyB,EAAE,CAAC;IACnD,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IAC7C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wBAAwB,CAAC,EAAE,8BAA8B,CAAC;IAC1D,gBAAgB,EAAE,eAAe,CAAC;IAClC,gBAAgB,EAAE,qBAAqB,CAAC;CACzC;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,CAAC;IAClB,oBAAoB,CAAC,EAAE,yBAAyB,EAAE,CAAC;IACnD,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IAC7C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wBAAwB,CAAC,EAAE,8BAA8B,CAAC;IAC1D,gBAAgB,EAAE,eAAe,CAAC;CACnC;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0C;IAG/D,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,mBAAmB;IAsBjD,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAKzD,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAWhE,gBAAgB,CACd,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,IAAI,GACnB,mBAAmB;IAoBtB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,mBAAmB;IA8BvE,uBAAuB,CACrB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,mBAAmB,GAAG,SAAS;IAYlC,iBAAiB,CACf,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GAEhB;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,KAAK,EAAE,mBAAmB,CAAA;KAAE,GACxC;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAA;KAAE,GACzC;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,uBAAuB,CAAA;KAAE,GAC9C;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,2BAA2B,CAAA;KAAE;IAWtD,IAAI,IAAI,mBAAmB,EAAE;IAK7B,IAAI,IAAI,MAAM;CAGf"}
+{"version":3,"file":"endpoint-registry.d.ts","sourceRoot":"","sources":["../../src/broker/endpoint-registry.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,SAAS,MAAM,IAAI,CAAC;AAChC,OAAO,KAAK,EACV,8BAA8B,EAC9B,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAG9D,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,QAAQ,GAAG,cAAc,CAAC;IACjC,WAAW,EAAE,IAAI,CAAC;IAElB,cAAc,CAAC,EAAE,IAAI,CAAC;IACtB,oBAAoB,CAAC,EAAE,yBAAyB,EAAE,CAAC;IACnD,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IAC7C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wBAAwB,CAAC,EAAE,8BAA8B,CAAC;IAC1D,gBAAgB,EAAE,eAAe,CAAC;IAClC,gBAAgB,EAAE,qBAAqB,CAAC;CACzC;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,CAAC;IAClB,oBAAoB,CAAC,EAAE,yBAAyB,EAAE,CAAC;IACnD,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IAC7C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wBAAwB,CAAC,EAAE,8BAA8B,CAAC;IAC1D,gBAAgB,EAAE,eAAe,CAAC;CACnC;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0C;IAG/D,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,mBAAmB;IAyBjD,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAKzD,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAWhE,gBAAgB,CACd,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,IAAI,GACnB,mBAAmB;IAoBtB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,mBAAmB;IA8BvE,uBAAuB,CACrB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,mBAAmB,GAAG,SAAS;IAYlC,iBAAiB,CACf,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GAEhB;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,KAAK,EAAE,mBAAmB,CAAA;KAAE,GACxC;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAA;KAAE,GACzC;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,uBAAuB,CAAA;KAAE,GAC9C;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,2BAA2B,CAAA;KAAE;IAWtD,IAAI,IAAI,mBAAmB,EAAE;IAK7B,IAAI,IAAI,MAAM;CAGf"}

package/dist/broker/endpoint-registry.js

@@ -7,6 +7,8 @@ export class EndpointRegistry {
         }
         const entry = {
             endpoint_id: args.endpoint_id,
+            endpoint_nonce: args.endpoint_nonce ?? `broker-local:${args.endpoint_id}`,
+            endpoint_owner_token: args.endpoint_owner_token ?? `broker-local-owner:${args.endpoint_id}`,
             agent_id: args.agent_id,
             plugin_pid: args.plugin_pid,
             ipc_ws: args.ipc_ws,

package/dist/broker/entry.d.ts

@@ -15,6 +15,7 @@ interface RuntimePrincipal {
 export declare function resolveCredentialsFromFile(filePath: string, accountId: string, envApiHost: string | undefined): Promise<ResolvedCredentials>;
 export declare function resolveRuntimePrincipal(apiHost: string, runtimeKey: string, fetchImpl?: typeof globalThis.fetch): Promise<RuntimePrincipal>;
 export declare function buildApiPort(apiHost: string, runtimeKey: string, logger: BrokerLogger): RuntimeEndpointPort;
+export declare function installFatalExitHandlers(logger: BrokerLogger): void;
 export declare function main(): Promise<void>;
 export {};
 //# sourceMappingURL=entry.d.ts.map