@mcoda/mswarm 0.1.76 → 0.1.79

package/README.md

@@ -96,12 +96,69 @@ Keep discovery running but expose only allowlisted agents:
 mswarm node install <MSWARM_API_KEY> --no-expose-all
 ```
 
+Set local scheduling capacity during install:
+
+```sh
+mswarm node install <MSWARM_API_KEY> --max-concurrent-jobs 4 --max-concurrent-llm-jobs 2
+```
+
+The node reports additive load telemetry in each heartbeat: runtime protocol
+version, active and queued work, LLM/generic job concurrency, free slots, drain
+state, recent failures, moving average latency, and a fingerprinted local agent
+catalog revision. Existing gateways can ignore the new fields; the legacy
+`capacity.active_jobs` and `capacity.queued_jobs` values are still present.
+
+Use drain mode before maintenance so new scheduled work avoids the node while
+existing in-flight jobs can finish:
+
+```sh
+MSWARM_SELF_HOSTED_DRAIN_MODE=1 mswarm node run
+```
+
+Detailed host metrics are off by default. If enabled by the node owner, the
+heartbeat includes only coarse pressure telemetry such as CPU load ratio, RAM
+bucket/usage ratio, GPU availability/count/CUDA support, and a coarse VRAM tier
+with no exact memory values. It does not include process lists, usernames,
+filesystem paths, environment variables, raw prompts, GPU names, driver
+versions, serial numbers, or exact VRAM values.
+
 Use direct mode only when the node has a public HTTPS or tunnel URL:
 
 ```sh
 mswarm node install <MSWARM_API_KEY> --mode direct --direct-url https://node.example.com
 ```
 
+## Load-Balanced Routing
+
+When an mswarm account has multiple upgraded self-hosted nodes, the hosted
+control plane can expose synthetic `Auto load-balanced` catalog aliases for
+matching local mcoda agents. Selecting an auto alias lets mswarm choose an
+eligible node at request time based on tenant/API-key scope, model or capability
+match, protocol compatibility, heartbeat freshness, drain state, active work,
+and reservations.
+
+This is additive to direct routing:
+
+- Direct self-hosted slugs keep routing to their pinned node.
+- Existing assignments are not migrated automatically.
+- Older direct-only nodes still work as direct targets but are auto-ineligible
+  until they advertise load-balancer protocol, load telemetry, and catalog
+  fingerprint fields.
+- Load-balanced aliases never require browser-visible node tokens, direct URLs,
+  invocation signing secrets, or API keys.
+
+Use drain mode before maintenance so auto routing avoids the node while direct
+operators can decide whether to keep or move pinned traffic:
+
+```sh
+MSWARM_SELF_HOSTED_DRAIN_MODE=1 mswarm node run
+```
+
+Rollback is done from the control plane or consuming product by switching the
+assignment back to a direct slug or omitting load-balanced aliases during
+catalog sync. Keep the node installed; direct routing does not depend on the
+load-balancer protocol fields.
+
 ## Commands
 
 ```text
@@ -144,6 +201,42 @@ Jobs can additionally scope execution with:
 - `docdex.base_url`, `docdex.repo_root`, `docdex.repo_id`, and Docdex write/web/index flags
 - `policy.allow_tools`, `policy.allowed_tools`, `policy.denied_tools`, write/shell/destructive flags, `policy.max_runtime_ms`, and `policy.max_tool_calls`
 
+## Owner-Local Generic GPU Jobs
+
+mswarm can also expose a separate owner-local generic job plane for trusted GPU
+and package workloads such as Blender rendering, CUDA package jobs, ffmpeg CUDA
+jobs, and Python GPU jobs. This path is separate from the OpenAI-compatible LLM
+execution path and is disabled by default.
+
+Enable it only on a trusted local node:
+
+```sh
+MSWARM_SELF_HOSTED_GENERIC_JOBS_ENABLED=1 \
+MSWARM_SELF_HOSTED_DIRECT_HOST=127.0.0.1 \
+MSWARM_SELF_HOSTED_INVOCATION_SIGNING_SECRET=<local-secret> \
+mswarm node run --enable-generic-jobs
+```
+
+The generic job endpoints require scoped HMAC tokens or the owner-local signing
+secret. They expose capability discovery, artifact upload, lifecycle status,
+logs, events, cancellation, retry, and an ops summary for queue/usage/quota
+inspection. Use `mcoda gpu list`, `mcoda gpu ops`, and the GPU-aware
+`mcoda job artifact upload|run|status|logs|events|artifacts|cancel|retry`
+commands to operate the local node.
+
+Do not expose the node signing secret to browsers or untrusted tenants.
+Production scheduling should issue short-lived scoped tokens from a control
+plane; owner-local direct use is for a trusted operator on the node.
+
 ## Environment
 
 `MSWARM_API_KEY` can replace `--api-key` during legacy `setup`, but the preferred flow is `mswarm node install <MSWARM_API_KEY>` or `mswarm node install --api-key-stdin` so the key is never exported into the shell environment. `MSWARM_GATEWAY_BASE_URL` overrides the gateway. The default discovery mode is `mcoda`, so the node reads `mcoda agent list --json --refresh-health`; set `MSWARM_SELF_HOSTED_DISCOVERY_MODE=ollama` only for raw Ollama fallback discovery. `MSWARM_SELF_HOSTED_EXPOSURE_POLICY=none` disables default exposure while keeping allowlists/blocklists available. `MSWARM_SELF_HOSTED_REQUEST_TIMEOUT_MS` controls short gateway and inventory requests; self-hosted execution jobs default to one hour and can be overridden with `MSWARM_SELF_HOSTED_JOB_TIMEOUT_MS` or `--job-timeout-ms` during install.
+
+Load-balancer telemetry controls:
+
+- `MSWARM_SELF_HOSTED_MAX_CONCURRENT_JOBS`: overall advertised job capacity, default `1`
+- `MSWARM_SELF_HOSTED_MAX_CONCURRENT_LLM_JOBS`: LLM/Codali capacity, default matches overall capacity
+- `MSWARM_SELF_HOSTED_GENERIC_JOB_MAX_CONCURRENCY`: generic job capacity, default `1`
+- `MSWARM_SELF_HOSTED_DRAIN_MODE=1`: report zero free slots for maintenance
+- `MSWARM_SELF_HOSTED_LOAD_REPORTING_ENABLED=0`: fall back to legacy heartbeat capacity shape
+- `MSWARM_SELF_HOSTED_HARDWARE_TELEMETRY_ENABLED=1`: opt in to coarse pressure telemetry

package/dist/invocation-token.d.ts

@@ -8,9 +8,57 @@ export interface SelfHostedInvocationTokenClaims {
     iat: number;
     exp: number;
 }
+export interface SelfHostedGenericJobTokenClaims {
+    node_id: string;
+    job_id: string;
+    request_id: string;
+    schema_version: string;
+    job_type: string;
+    deadline_at: string;
+    scope: "self_hosted.generic_job.invoke";
+    allowed_runner_ids?: string[];
+    capability_names?: string[];
+    policy_id?: string;
+    policy_version?: string;
+    capability_lease_id?: string;
+    capability_snapshot_id?: string;
+    iat: number;
+    exp: number;
+}
+export interface SelfHostedCapabilityTokenClaims {
+    node_id: string;
+    deadline_at: string;
+    scope: "self_hosted.capabilities.read";
+    iat: number;
+    exp: number;
+    nonce?: string;
+}
+export interface SelfHostedGenericJobOpsTokenClaims {
+    node_id: string;
+    deadline_at: string;
+    scope: "self_hosted.generic_job.ops.read";
+    iat: number;
+    exp: number;
+    nonce?: string;
+}
 export declare function verifySelfHostedInvocationToken(input: {
     token: string;
     secret: string;
     nowSeconds?: number;
 }): SelfHostedInvocationTokenClaims;
+export declare function verifySelfHostedGenericJobToken(input: {
+    token: string;
+    secret: string;
+    nowSeconds?: number;
+}): SelfHostedGenericJobTokenClaims;
+export declare function verifySelfHostedCapabilityToken(input: {
+    token: string;
+    secret: string;
+    nowSeconds?: number;
+}): SelfHostedCapabilityTokenClaims;
+export declare function verifySelfHostedGenericJobOpsToken(input: {
+    token: string;
+    secret: string;
+    nowSeconds?: number;
+}): SelfHostedGenericJobOpsTokenClaims;
 //# sourceMappingURL=invocation-token.d.ts.map

package/dist/invocation-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invocation-token.d.ts","sourceRoot":"","sources":["../src/invocation-token.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAuBD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,+BAA+B,CAqClC"}
+{"version":3,"file":"invocation-token.d.ts","sourceRoot":"","sources":["../src/invocation-token.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,gCAAgC,CAAC;IACxC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,+BAA+B,CAAC;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kCAAkC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,kCAAkC,CAAC;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAuBD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,+BAA+B,CAqClC;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,+BAA+B,CAsClC;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,+BAA+B,CAkClC;AAED,wBAAgB,kCAAkC,CAAC,KAAK,EAAE;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,kCAAkC,CAkCrC"}

package/dist/invocation-token.js

@@ -54,4 +54,113 @@ export function verifySelfHostedInvocationToken(input) {
     requireText(payload.model, "model");
     return payload;
 }
+export function verifySelfHostedGenericJobToken(input) {
+    const secret = requireText(input.secret, "self_hosted_invocation_secret");
+    const token = requireText(input.token, "token");
+    const parts = token.split(".");
+    if (parts.length !== 3) {
+        throw new Error("self_hosted_generic_job_token_invalid");
+    }
+    const signingInput = `${parts[0]}.${parts[1]}`;
+    const expected = signHmacSha256(signingInput, secret);
+    const expectedBuffer = Buffer.from(expected);
+    const actualBuffer = Buffer.from(parts[2] || "");
+    if (expectedBuffer.length !== actualBuffer.length || !crypto.timingSafeEqual(expectedBuffer, actualBuffer)) {
+        throw new Error("self_hosted_generic_job_token_invalid");
+    }
+    let payload;
+    try {
+        payload = JSON.parse(base64UrlDecode(parts[1]).toString("utf8"));
+    }
+    catch {
+        throw new Error("self_hosted_generic_job_token_invalid");
+    }
+    const nowSeconds = Math.floor(input.nowSeconds ?? Date.now() / 1000);
+    if (payload.scope !== "self_hosted.generic_job.invoke") {
+        throw new Error("self_hosted_generic_job_token_scope_denied");
+    }
+    if (!payload.exp || payload.exp < nowSeconds) {
+        throw new Error("self_hosted_generic_job_token_expired");
+    }
+    const deadlineMs = Date.parse(payload.deadline_at);
+    if (!Number.isFinite(deadlineMs) || deadlineMs < nowSeconds * 1000) {
+        throw new Error("self_hosted_generic_job_token_expired");
+    }
+    requireText(payload.node_id, "node_id");
+    requireText(payload.job_id, "job_id");
+    requireText(payload.request_id, "request_id");
+    requireText(payload.schema_version, "schema_version");
+    requireText(payload.job_type, "job_type");
+    return payload;
+}
+export function verifySelfHostedCapabilityToken(input) {
+    const secret = requireText(input.secret, "self_hosted_invocation_secret");
+    const token = requireText(input.token, "token");
+    const parts = token.split(".");
+    if (parts.length !== 3) {
+        throw new Error("self_hosted_capability_token_invalid");
+    }
+    const signingInput = `${parts[0]}.${parts[1]}`;
+    const expected = signHmacSha256(signingInput, secret);
+    const expectedBuffer = Buffer.from(expected);
+    const actualBuffer = Buffer.from(parts[2] || "");
+    if (expectedBuffer.length !== actualBuffer.length || !crypto.timingSafeEqual(expectedBuffer, actualBuffer)) {
+        throw new Error("self_hosted_capability_token_invalid");
+    }
+    let payload;
+    try {
+        payload = JSON.parse(base64UrlDecode(parts[1]).toString("utf8"));
+    }
+    catch {
+        throw new Error("self_hosted_capability_token_invalid");
+    }
+    const nowSeconds = Math.floor(input.nowSeconds ?? Date.now() / 1000);
+    if (payload.scope !== "self_hosted.capabilities.read") {
+        throw new Error("self_hosted_capability_token_scope_denied");
+    }
+    if (!payload.exp || payload.exp < nowSeconds) {
+        throw new Error("self_hosted_capability_token_expired");
+    }
+    const deadlineMs = Date.parse(payload.deadline_at);
+    if (!Number.isFinite(deadlineMs) || deadlineMs < nowSeconds * 1000) {
+        throw new Error("self_hosted_capability_token_expired");
+    }
+    requireText(payload.node_id, "node_id");
+    return payload;
+}
+export function verifySelfHostedGenericJobOpsToken(input) {
+    const secret = requireText(input.secret, "self_hosted_invocation_secret");
+    const token = requireText(input.token, "token");
+    const parts = token.split(".");
+    if (parts.length !== 3) {
+        throw new Error("self_hosted_generic_job_ops_token_invalid");
+    }
+    const signingInput = `${parts[0]}.${parts[1]}`;
+    const expected = signHmacSha256(signingInput, secret);
+    const expectedBuffer = Buffer.from(expected);
+    const actualBuffer = Buffer.from(parts[2] || "");
+    if (expectedBuffer.length !== actualBuffer.length || !crypto.timingSafeEqual(expectedBuffer, actualBuffer)) {
+        throw new Error("self_hosted_generic_job_ops_token_invalid");
+    }
+    let payload;
+    try {
+        payload = JSON.parse(base64UrlDecode(parts[1]).toString("utf8"));
+    }
+    catch {
+        throw new Error("self_hosted_generic_job_ops_token_invalid");
+    }
+    const nowSeconds = Math.floor(input.nowSeconds ?? Date.now() / 1000);
+    if (payload.scope !== "self_hosted.generic_job.ops.read") {
+        throw new Error("self_hosted_generic_job_ops_token_scope_denied");
+    }
+    if (!payload.exp || payload.exp < nowSeconds) {
+        throw new Error("self_hosted_generic_job_ops_token_expired");
+    }
+    const deadlineMs = Date.parse(payload.deadline_at);
+    if (!Number.isFinite(deadlineMs) || deadlineMs < nowSeconds * 1000) {
+        throw new Error("self_hosted_generic_job_ops_token_expired");
+    }
+    requireText(payload.node_id, "node_id");
+    return payload;
+}
 //# sourceMappingURL=invocation-token.js.map

package/dist/invocation-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"invocation-token.js","sourceRoot":"","sources":["../src/invocation-token.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAajC,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,MAAc;IACnD,OAAO,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAI/C;IACC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,YAAY,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,YAAY,CAAC,EAAE,CAAC;QAC3G,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,OAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAoC,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,UAAU,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,UAAU,GAAG,IAAI,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACxC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC9C,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"invocation-token.js","sourceRoot":"","sources":["../src/invocation-token.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAiDjC,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,MAAc;IACnD,OAAO,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAI/C;IACC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,YAAY,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,YAAY,CAAC,EAAE,CAAC;QAC3G,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,OAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAoC,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,UAAU,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,UAAU,GAAG,IAAI,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACxC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC9C,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAI/C;IACC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,YAAY,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,YAAY,CAAC,EAAE,CAAC;QAC3G,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,OAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAoC,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,KAAK,KAAK,gCAAgC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,UAAU,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,UAAU,GAAG,IAAI,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACxC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC9C,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IACtD,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAI/C;IACC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,YAAY,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,YAAY,CAAC,EAAE,CAAC;QAC3G,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,OAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAoC,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,KAAK,KAAK,+BAA+B,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,UAAU,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,UAAU,GAAG,IAAI,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,KAIlD;IACC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,YAAY,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,YAAY,CAAC,EAAE,CAAC;QAC3G,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,OAA2C,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAuC,CAAC;IACzG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,KAAK,KAAK,kCAAkC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,UAAU,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,UAAU,GAAG,IAAI,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/runtime.d.ts

@@ -1,4 +1,5 @@
 import { MswarmCodaliExecutor } from "./codali-executor.js";
+import { type MswarmArtifactStoreDescriptor, type MswarmGenericJobValidationIssue, type MswarmJobEvent, type MswarmJobRequest, type MswarmJobResult, type MswarmNodeCapabilitySnapshot, type MswarmOutputSpec, type MswarmPublicCapabilityProjection, type MswarmRegisteredArtifact, type MswarmSandboxProfile, type MswarmSignedCapabilityPayload } from "@mcoda/shared";
 export type FetchLike = typeof fetch;
 export type SelfHostedDiscoveryMode = "mcoda" | "ollama";
 export type SelfHostedRelayMode = "outbound" | "direct";
@@ -7,6 +8,7 @@ export type CommandRunner = (command: string, args: string[], options: {
     timeoutMs: number;
     maxBuffer: number;
     input?: string;
+    signal?: AbortSignal;
 }) => Promise<{
     stdout: string;
     stderr: string;
@@ -65,6 +67,7 @@ export interface SelfHostedNodeConfig {
     ollamaBaseUrl: string;
     statePath: string;
     runtimeTokenPath: string;
+    artifactStorePath?: string;
     invocationSigningSecret?: string | null;
     listenHost: string;
     listenPort: number;
@@ -72,6 +75,15 @@ export interface SelfHostedNodeConfig {
     heartbeatIntervalSeconds: number;
     requestTimeoutMs: number;
     jobTimeoutMs: number;
+    maxConcurrentJobs?: number;
+    maxConcurrentLlmJobs?: number;
+    genericJobsEnabled: boolean;
+    genericJobTimeoutMs: number;
+    genericJobMaxConcurrency: number;
+    capabilityProbeTimeoutMs?: number;
+    drainMode?: boolean;
+    loadReportingEnabled?: boolean;
+    hardwareTelemetryEnabled?: boolean;
     exposeAllModels: boolean;
     modelAllowlist: string[];
     modelBlocklist: string[];
@@ -83,6 +95,7 @@ export interface SelfHostedNodeState {
     machine_fingerprint?: string;
     direct_base_url?: string | null;
     runtime_token?: string;
+    artifact_store_path?: string;
     config_version?: number;
     heartbeat_interval_seconds?: number;
     heartbeat_timeout_seconds?: number;
@@ -96,6 +109,15 @@ export interface SelfHostedNodeState {
     node_version?: string;
     request_timeout_ms?: number;
     job_timeout_ms?: number;
+    max_concurrent_jobs?: number;
+    max_concurrent_llm_jobs?: number;
+    generic_jobs_enabled?: boolean;
+    generic_job_timeout_ms?: number;
+    generic_job_max_concurrency?: number;
+    capability_probe_timeout_ms?: number;
+    drain_mode?: boolean;
+    load_reporting_enabled?: boolean;
+    hardware_telemetry_enabled?: boolean;
     expose_all_models?: boolean;
     exposure_policy?: SelfHostedExposurePolicy;
     model_allowlist?: string[];
@@ -110,6 +132,7 @@ export interface SelfHostedOwnerSetupConfig {
     discoveryMode: SelfHostedDiscoveryMode;
     statePath: string;
     runtimeTokenPath: string;
+    artifactStorePath?: string;
     machineIdPath: string;
     mcodaBin: string;
     mcodaListArgs: string[];
@@ -118,6 +141,15 @@ export interface SelfHostedOwnerSetupConfig {
     heartbeatIntervalSeconds: number;
     requestTimeoutMs: number;
     jobTimeoutMs: number;
+    maxConcurrentJobs: number;
+    maxConcurrentLlmJobs: number;
+    genericJobsEnabled: boolean;
+    genericJobTimeoutMs: number;
+    genericJobMaxConcurrency: number;
+    capabilityProbeTimeoutMs?: number;
+    drainMode: boolean;
+    loadReportingEnabled: boolean;
+    hardwareTelemetryEnabled: boolean;
     exposeAllModels: boolean;
     modelAllowlist: string[];
     modelBlocklist: string[];
@@ -216,10 +248,17 @@ export interface SelfHostedNodeInvocationJob {
         max_tool_calls?: number;
     };
 }
+export interface SelfHostedGenericNodeJob {
+    job_id: string;
+    request_id: string;
+    node_id: string;
+    job: MswarmJobRequest;
+}
 export interface SelfHostedNodeInvocationResult {
     job_id: string;
     request_id: string;
     status: "success" | "failed";
+    pre_start_failure?: boolean;
     openai_response?: Record<string, unknown>;
     stream_events?: Record<string, unknown>[];
     progress_events?: Record<string, unknown>[];
@@ -234,6 +273,14 @@ export interface SelfHostedNodeInvocationResult {
 export interface SelfHostedJobExecutionOptions {
     onOpenAIChunk?: (chunk: Record<string, unknown>) => void | Promise<void>;
     onProgress?: (event: Record<string, unknown>) => void | Promise<void>;
+    onStarted?: (event: {
+        job_id: string;
+        request_id: string;
+        node_id: string;
+        agent_slug: string;
+        source_agent_slug?: string | null;
+        model?: string | null;
+    }) => void | Promise<void>;
     /**
      * Per-invocation owner key attached by the mswarm execution envelope for
      * encrypted Docdex access. This must never be read from local model/provider
@@ -241,6 +288,74 @@ export interface SelfHostedJobExecutionOptions {
      */
     attachedMswarmApiKey?: string;
 }
+export interface MswarmGenericJobRunnerContext {
+    job: MswarmJobRequest;
+    signal: AbortSignal;
+    emitEvent: (event: Omit<MswarmJobEvent, "job_id" | "sequence" | "timestamp">) => Promise<void>;
+    artifacts: MswarmGenericJobArtifactContext;
+    sandbox: MswarmSandboxProfile;
+}
+export interface MswarmGenericJobRunner {
+    readonly id: string;
+    run(context: MswarmGenericJobRunnerContext): Promise<MswarmJobResult>;
+}
+export interface MswarmGenericJobArtifactContext {
+    store: MswarmArtifactStoreDescriptor;
+    workDir: string;
+    inputDir: string;
+    outputDir: string;
+    registeredInputs: MswarmRegisteredArtifact[];
+    outputSpecs: MswarmOutputSpec[];
+    sandbox: MswarmSandboxProfile;
+}
+export interface MswarmGenericJobArtifactStore {
+    prepareJobWorkspace(jobId: string, job: MswarmJobRequest): Promise<MswarmGenericJobArtifactContext>;
+    collectOutputs(context: MswarmGenericJobArtifactContext, jobId: string): Promise<MswarmRegisteredArtifact[]>;
+}
+export interface MswarmGenericJobExecutionOptions {
+    signal?: AbortSignal;
+    onEvent?: (event: MswarmJobEvent) => void | Promise<void>;
+}
+export interface MswarmGenericJobExecutionResult {
+    job_id: string;
+    request_id: string;
+    status: MswarmJobResult["status"];
+    result: MswarmJobResult;
+    events: MswarmJobEvent[];
+    validation_issues?: MswarmGenericJobValidationIssue[];
+    timing: {
+        local_latency_ms: number;
+    };
+}
+export type SelfHostedRuntimeExecutionClass = "chat" | "agentic" | "generic_job";
+export interface SelfHostedRuntimeExecutionClassCapacity {
+    max_concurrency: number;
+    active_jobs: number;
+    queued_jobs: number;
+    free_slots: number;
+}
+export interface SelfHostedRuntimeLoadTelemetry {
+    runtime_protocol_version: number;
+    load_balancer_protocol_version: number;
+    catalog_metadata_version: number;
+    catalog_fingerprint: string;
+    max_concurrency: number;
+    max_concurrent_llm_jobs: number;
+    max_concurrent_generic_jobs: number;
+    active_jobs: number;
+    queued_jobs: number;
+    free_slots: number;
+    drain_mode: boolean;
+    execution_class_capacity: Record<SelfHostedRuntimeExecutionClass, SelfHostedRuntimeExecutionClassCapacity>;
+    avg_latency_ms: number | null;
+    recent_failure_count: number;
+    recent_failures: Array<{
+        execution_class: SelfHostedRuntimeExecutionClass;
+        code: string;
+        at: string;
+    }>;
+    hardware_pressure?: Record<string, unknown>;
+}
 export interface SelfHostedNodeHeartbeatResult {
     enrolled: boolean;
     status: "online" | "degraded";
@@ -248,6 +363,7 @@ export interface SelfHostedNodeHeartbeatResult {
     discovery_source: "mcoda" | "ollama";
     mcoda_agent_count?: number;
     ollama_version?: string | null;
+    capacity?: SelfHostedRuntimeLoadTelemetry;
     heartbeat_response: unknown;
 }
 export interface SelfHostedNodeDaemonHandle {
@@ -412,6 +528,40 @@ export declare class OllamaClient {
         raw: unknown;
     }>;
 }
+export declare class MswarmLocalArtifactStore implements MswarmGenericJobArtifactStore {
+    private readonly rootDir;
+    private readonly now;
+    constructor(input?: {
+        rootDir?: string;
+        now?: () => Date;
+    });
+    prepareJobWorkspace(jobId: string, job: MswarmJobRequest): Promise<MswarmGenericJobArtifactContext>;
+    collectOutputs(context: MswarmGenericJobArtifactContext, jobId: string): Promise<MswarmRegisteredArtifact[]>;
+    private registerInput;
+    private collectDeclaredOutput;
+    private collectOutputDirectory;
+    private collectOutputFile;
+}
+export declare class MswarmTestEchoRunner implements MswarmGenericJobRunner {
+    readonly id = "test.echo";
+    run(context: MswarmGenericJobRunnerContext): Promise<MswarmJobResult>;
+}
+export declare class MswarmBlenderRenderRunner implements MswarmGenericJobRunner {
+    readonly id = "blender.render";
+    private readonly runner;
+    constructor(runner?: CommandRunner);
+    run(context: MswarmGenericJobRunnerContext): Promise<MswarmJobResult>;
+}
+export declare class MswarmCudaPackageRunner implements MswarmGenericJobRunner {
+    readonly id = "cuda.package";
+    private readonly runner;
+    constructor(runner?: CommandRunner);
+    run(context: MswarmGenericJobRunnerContext): Promise<MswarmJobResult>;
+}
+export declare function genericJobCapabilityMismatch(job: MswarmJobRequest, snapshot: MswarmNodeCapabilitySnapshot): {
+    code: string;
+    message: string;
+} | null;
 export declare class McodaLocalAgentExecutor {
     private readonly command;
     private readonly timeoutMs;
@@ -457,6 +607,12 @@ export declare class MswarmSelfHostedNodeClient {
     postJobResult(runtimeToken: string, jobId: string, payload: SelfHostedNodeInvocationResult & {
         node_id: string;
     }): Promise<unknown>;
+    postJobStart(runtimeToken: string, jobId: string, payload: {
+        node_id: string;
+        agent_slug?: string | null;
+        source_agent_slug?: string | null;
+        model?: string | null;
+    }): Promise<unknown>;
     postJobEvents(runtimeToken: string, jobId: string, payload: {
         node_id: string;
         stream_events?: Record<string, unknown>[];
@@ -471,6 +627,15 @@ export declare class SelfHostedNodeRuntime {
     private readonly codaliExecutor;
     private readonly ollama;
     private readonly jobOllama;
+    private readonly genericRunners;
+    private readonly artifactStore;
+    private readonly capabilityRunner;
+    private activeLlmJobs;
+    private activeGenericJobs;
+    private queuedLlmJobs;
+    private queuedGenericJobs;
+    private readonly latencySamplesMs;
+    private readonly recentFailures;
     constructor(config: SelfHostedNodeConfig, deps?: {
         gateway?: MswarmSelfHostedNodeClient;
         mcoda?: McodaAgentInventoryClient;
@@ -478,7 +643,18 @@ export declare class SelfHostedNodeRuntime {
         codaliExecutor?: MswarmCodaliExecutor;
         ollama?: OllamaClient;
         fetchImpl?: FetchLike;
+        genericRunners?: MswarmGenericJobRunner[];
+        artifactStore?: MswarmGenericJobArtifactStore;
+        capabilityRunner?: CommandRunner;
     });
+    updateLocalQueueTelemetry(input: {
+        llmQueuedJobs?: number;
+        genericQueuedJobs?: number;
+    }): void;
+    private beginExecutionTelemetry;
+    private finishExecutionTelemetry;
+    private averageLatencyMs;
+    private buildLoadTelemetry;
     static setup(setupConfig: SelfHostedOwnerSetupConfig, deps?: {
         gateway?: MswarmSelfHostedNodeClient;
         mcoda?: McodaAgentInventoryClient;
@@ -486,14 +662,21 @@ export declare class SelfHostedNodeRuntime {
         codaliExecutor?: MswarmCodaliExecutor;
         ollama?: OllamaClient;
         fetchImpl?: FetchLike;
+        genericRunners?: MswarmGenericJobRunner[];
+        artifactStore?: MswarmGenericJobArtifactStore;
+        capabilityRunner?: CommandRunner;
     }): Promise<SelfHostedNodeSetupResult>;
     private discoverModels;
+    probeCapabilities(): Promise<MswarmNodeCapabilitySnapshot>;
+    publicCapabilityProjection(): Promise<MswarmPublicCapabilityProjection>;
+    buildCapabilityHeartbeatPayload(runtimeToken: string): Promise<MswarmSignedCapabilityPayload>;
     ensureEnrolled(): Promise<{
         runtimeToken: string;
         state: SelfHostedNodeState;
         enrolled: boolean;
     }>;
     private resolveMcodaAgentForJob;
+    executeGenericJob(envelope: SelfHostedGenericNodeJob, options?: MswarmGenericJobExecutionOptions): Promise<MswarmGenericJobExecutionResult>;
     executeJob(job: SelfHostedNodeInvocationJob, options?: SelfHostedJobExecutionOptions): Promise<SelfHostedNodeInvocationResult>;
     runOnce(): Promise<SelfHostedNodeHeartbeatResult>;
     notifyUninstall(input?: {