@noopolis/daimon 0.1.1 → 0.1.2

package/dist/pi/turnCausal.d.ts

@@ -0,0 +1,73 @@
+import type { MemoryPrepareTurnResult } from "@noopolis/mneme";
+import type { WakeEvent } from "../core/types.js";
+import { type CausalEvent, type TurnInputSubmittedPayload, type TurnOutputCompletedPayload } from "../observability/causalEvents.js";
+/**
+ * Principal grammar per `specs/CAUSAL.md` §3
+ * (`^(agent|operator|system):.+`): the authenticated agent identity this
+ * harness instance was started under, never a bare id and never model
+ * output. See `stampTurnInputSubmitted`/`stampTurnOutputCompleted` below for
+ * why `agentId` itself is trustworthy at this layer.
+ */
+export declare const agentPrincipalId: (agentId: string) => string;
+export interface StampTurnInputSubmittedInput {
+    agentId: string;
+    event: WakeEvent;
+    prepared?: MemoryPrepareTurnResult;
+    promptText: string;
+    runtimeHomePath: string;
+}
+/**
+ * Stamps `turn.input.submitted` for one Pi turn, wiring piHarness's own
+ * variables into `@noopolis/daimon`'s causal envelope (`../observability/
+ * causalEvents.ts`).
+ *
+ * - `principal_id` is `agent:<agentId>` (`agentPrincipalId`, per the
+ *   `specs/CAUSAL.md` §3 principal grammar). `src/pi/auth.ts` scopes LLM
+ *   provider auth (Codex / Claude / API key) per harness instance rather
+ *   than exposing a separate network identity token, so `agentId` — the
+ *   identity this harness instance was started under (`AgentStartInput.id`,
+ *   which also scopes its own `authPath`/`runtimeHomePath`) — is the
+ *   truthful authenticated identity available at this layer.
+ * - `cause_event_ids` chains to `event.id` (the WakeEvent id) plus any mneme
+ *   recall ids from `prepared.recalledCausalEventIds`. `event.id` is no
+ *   longer a same-process stand-in for the upstream moltnet
+ *   `message.accepted` id: moltnet's bridge control POST now carries a real
+ *   `event_id` (`protocol.MessageEventID`-shaped, `"moltnet:<messageID>"`)
+ *   for every non-bootstrap wake, and the Pi control source
+ *   (`src/runtime/pi/appControlSource.ts` `formatControlEventId`) threads
+ *   that value verbatim into `WakeEvent.id` in preference to its own
+ *   `context_id`+timestamp fallback. `WakeEvent` still does not carry a
+ *   separately namespaced moltnet field — Daimon stays detached from
+ *   Moltnet wiring (see repo `AGENTS.md`) — but `event.id` is now the same
+ *   id moltnet itself stamped on `message.accepted`, so this chain is
+ *   id-joined across authorities rather than merely locally consistent.
+ *   `prepared.recalledCausalEventIds` (not `prepared.recall.selectedEventIds`)
+ *   for the same reason: `recall.selectedEventIds` are mneme's raw
+ *   kernel-log recall ids (`evt_<...>`), a different id namespace than the
+ *   `mneme:<uuid>` ids mneme's own `memory.recalled` causal events are
+ *   stamped under (`contract/causal.ts` `mnemeCausalEventId`). Chaining the
+ *   raw recall id would never resolve against mneme's causal stream; the
+ *   `recalledCausalEventIds` mneme exposes on `MemoryPrepareTurnResult` are
+ *   the actual `event_id`s of the `memory.recalled` events it appended for
+ *   this turn, so this cause link is id-joined the same way the moltnet
+ *   link above is.
+ * - `run_id` always comes from `resolveRunId()` (`NOOPOLIS_RUN_ID`), never
+ *   from `event` or model output.
+ */
+export declare const stampTurnInputSubmitted: (input: StampTurnInputSubmittedInput) => Promise<CausalEvent<TurnInputSubmittedPayload>>;
+export interface StampTurnOutputCompletedInput {
+    agentId: string;
+    causeEventId: string;
+    outputText: string;
+    runtimeHomePath: string;
+    turnId: string;
+}
+/**
+ * Stamps `turn.output.completed` once a Pi turn finishes successfully,
+ * chained back via `cause_event_ids` to the `turn.input.submitted` id for
+ * the same turn. `output_sha256` is over the harness-extracted reply text;
+ * the model has no path to influence `cause_event_ids`, `run_id`, or
+ * `principal_id` here.
+ */
+export declare const stampTurnOutputCompleted: (input: StampTurnOutputCompletedInput) => Promise<CausalEvent<TurnOutputCompletedPayload>>;
+//# sourceMappingURL=turnCausal.d.ts.map

package/dist/pi/turnCausal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turnCausal.d.ts","sourceRoot":"","sources":["../../src/pi/turnCausal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAKL,KAAK,WAAW,EAChB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAChC,MAAM,kCAAkC,CAAC;AAG1C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAAI,SAAS,MAAM,KAAG,MAA4B,CAAC;AAEhF,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,eAAO,MAAM,uBAAuB,GAClC,OAAO,4BAA4B,KAClC,OAAO,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAW7C,CAAC;AAEL,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,GACnC,OAAO,6BAA6B,KACnC,OAAO,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAS9C,CAAC"}

package/dist/pi/turnCausal.js

@@ -0,0 +1,75 @@
+import { emitTurnInputSubmitted, emitTurnOutputCompleted, resolveRunId, sha256Hex } from "../observability/causalEvents.js";
+import { summarizePrompt } from "./turnTrace.js";
+/**
+ * Principal grammar per `specs/CAUSAL.md` §3
+ * (`^(agent|operator|system):.+`): the authenticated agent identity this
+ * harness instance was started under, never a bare id and never model
+ * output. See `stampTurnInputSubmitted`/`stampTurnOutputCompleted` below for
+ * why `agentId` itself is trustworthy at this layer.
+ */
+export const agentPrincipalId = (agentId) => `agent:${agentId}`;
+/**
+ * Stamps `turn.input.submitted` for one Pi turn, wiring piHarness's own
+ * variables into `@noopolis/daimon`'s causal envelope (`../observability/
+ * causalEvents.ts`).
+ *
+ * - `principal_id` is `agent:<agentId>` (`agentPrincipalId`, per the
+ *   `specs/CAUSAL.md` §3 principal grammar). `src/pi/auth.ts` scopes LLM
+ *   provider auth (Codex / Claude / API key) per harness instance rather
+ *   than exposing a separate network identity token, so `agentId` — the
+ *   identity this harness instance was started under (`AgentStartInput.id`,
+ *   which also scopes its own `authPath`/`runtimeHomePath`) — is the
+ *   truthful authenticated identity available at this layer.
+ * - `cause_event_ids` chains to `event.id` (the WakeEvent id) plus any mneme
+ *   recall ids from `prepared.recalledCausalEventIds`. `event.id` is no
+ *   longer a same-process stand-in for the upstream moltnet
+ *   `message.accepted` id: moltnet's bridge control POST now carries a real
+ *   `event_id` (`protocol.MessageEventID`-shaped, `"moltnet:<messageID>"`)
+ *   for every non-bootstrap wake, and the Pi control source
+ *   (`src/runtime/pi/appControlSource.ts` `formatControlEventId`) threads
+ *   that value verbatim into `WakeEvent.id` in preference to its own
+ *   `context_id`+timestamp fallback. `WakeEvent` still does not carry a
+ *   separately namespaced moltnet field — Daimon stays detached from
+ *   Moltnet wiring (see repo `AGENTS.md`) — but `event.id` is now the same
+ *   id moltnet itself stamped on `message.accepted`, so this chain is
+ *   id-joined across authorities rather than merely locally consistent.
+ *   `prepared.recalledCausalEventIds` (not `prepared.recall.selectedEventIds`)
+ *   for the same reason: `recall.selectedEventIds` are mneme's raw
+ *   kernel-log recall ids (`evt_<...>`), a different id namespace than the
+ *   `mneme:<uuid>` ids mneme's own `memory.recalled` causal events are
+ *   stamped under (`contract/causal.ts` `mnemeCausalEventId`). Chaining the
+ *   raw recall id would never resolve against mneme's causal stream; the
+ *   `recalledCausalEventIds` mneme exposes on `MemoryPrepareTurnResult` are
+ *   the actual `event_id`s of the `memory.recalled` events it appended for
+ *   this turn, so this cause link is id-joined the same way the moltnet
+ *   link above is.
+ * - `run_id` always comes from `resolveRunId()` (`NOOPOLIS_RUN_ID`), never
+ *   from `event` or model output.
+ */
+export const stampTurnInputSubmitted = (input) => emitTurnInputSubmitted({
+    agentId: input.agentId,
+    causeEventIds: [input.event.id, ...(input.prepared?.recalledCausalEventIds ?? [])],
+    inputContentSha256: sha256Hex(input.event.text),
+    inputMessageIds: [input.event.id],
+    principalId: agentPrincipalId(input.agentId),
+    promptSha256: summarizePrompt(input.promptText).sha256,
+    runId: resolveRunId(),
+    runtimeHomePath: input.runtimeHomePath,
+    turnId: input.event.id
+});
+/**
+ * Stamps `turn.output.completed` once a Pi turn finishes successfully,
+ * chained back via `cause_event_ids` to the `turn.input.submitted` id for
+ * the same turn. `output_sha256` is over the harness-extracted reply text;
+ * the model has no path to influence `cause_event_ids`, `run_id`, or
+ * `principal_id` here.
+ */
+export const stampTurnOutputCompleted = (input) => emitTurnOutputCompleted({
+    agentId: input.agentId,
+    causeEventIds: [input.causeEventId],
+    outputSha256: sha256Hex(input.outputText),
+    principalId: agentPrincipalId(input.agentId),
+    runId: resolveRunId(),
+    runtimeHomePath: input.runtimeHomePath,
+    turnId: input.turnId
+});

package/dist/pi/turnTrace.d.ts

@@ -0,0 +1,128 @@
+import type { MemoryPrepareTurnResult, MemoryWakeMode } from "@noopolis/mneme";
+import type { HarnessModelSpec, WakeEvent } from "../core/types.js";
+export interface PiTurnTraceModel {
+    authMethod: NonNullable<HarnessModelSpec["auth"]>["method"];
+    model: string;
+    provider: string;
+}
+export interface PiTurnTraceToolEvent {
+    contentCount?: number;
+    decision?: string;
+    durationMs?: number;
+    error?: string;
+    kind: "memory" | "session";
+    name: string;
+    redactionCount?: number;
+    status?: string;
+    type?: string;
+}
+export interface PiTurnTraceRecord {
+    agent_id: string;
+    completed_at: string;
+    engine: {
+        auth_method: NonNullable<HarnessModelSpec["auth"]>["method"];
+        kind: "pi";
+        model: string;
+        provider: string;
+    };
+    error?: {
+        message: string;
+        stage: string;
+    };
+    memory: {
+        enabled: boolean;
+        prepare?: {
+            duration_ms: number;
+            principal?: {
+                agent_id: string;
+                qualifier?: string;
+                scope: string;
+            };
+            recall?: {
+                redaction_count: number;
+                selected_count: number;
+                token_budget_used: number;
+                total_candidates: number;
+            };
+            status: "completed" | "failed";
+        };
+    };
+    prompt: {
+        chars: number;
+        has_active_environment: boolean;
+        has_dream_mode: boolean;
+        has_memory_context: boolean;
+        lines: number;
+        sha256: string;
+    };
+    reply: {
+        output_chars: number;
+        reply_given: boolean;
+    };
+    schema: "daimon.turn_trace.v1";
+    session: {
+        dispose_after_wake: boolean;
+        mode: "awake" | "dream";
+        thread_id: string;
+    };
+    started_at: string;
+    status: "completed" | "failed";
+    timings_ms: {
+        engine_prompt?: number;
+        memory_prepare?: number;
+        total: number;
+    };
+    tools: PiTurnTraceToolEvent[];
+    turn_id: string;
+    wake: {
+        context?: WakeEvent["context"];
+        delivery_authenticated?: boolean;
+        event_id: string;
+        from?: string;
+        kind: WakeEvent["kind"];
+        transport_text_present?: boolean;
+        world_context_bound?: boolean;
+    };
+}
+export interface PiMemoryPrepareTraceInput {
+    durationMs?: number;
+    prepared?: MemoryPrepareTurnResult;
+    status: "completed" | "failed";
+}
+export interface BuildPiTurnTraceRecordInput {
+    agentId: string;
+    completedAt: Date;
+    enginePromptMs?: number;
+    error?: {
+        message: string;
+        stage: string;
+    };
+    event: WakeEvent;
+    memoryEnabled: boolean;
+    memoryPrepare?: PiMemoryPrepareTraceInput;
+    model: PiTurnTraceModel;
+    outputText: string;
+    promptText: string;
+    session: {
+        disposeAfterWake: boolean;
+        mode: MemoryWakeMode;
+        threadId: string;
+    };
+    startedAt: Date;
+    status: "completed" | "failed";
+    tools: PiTurnTraceToolEvent[];
+    totalMs: number;
+    worldContextBound?: boolean;
+}
+export interface PersistPiTurnTraceInput extends Omit<BuildPiTurnTraceRecordInput, "completedAt" | "session"> {
+    runtimeHomePath: string;
+    session?: BuildPiTurnTraceRecordInput["session"];
+}
+export declare const redactTraceText: (value: unknown) => string;
+export declare const summarizePrompt: (prompt: string) => PiTurnTraceRecord["prompt"];
+export declare const summarizeSessionEvent: (event: unknown) => PiTurnTraceToolEvent | undefined;
+export declare const sanitizeTraceFileId: (value: string) => string;
+export declare const buildPiTurnTraceRecord: (input: BuildPiTurnTraceRecordInput) => PiTurnTraceRecord;
+export declare const writeTurnTraceRecord: (runtimeHomePath: string, record: PiTurnTraceRecord) => Promise<void>;
+export declare const persistPiTurnTrace: (input: PersistPiTurnTraceInput) => Promise<void>;
+//# sourceMappingURL=turnTrace.d.ts.map

package/dist/pi/turnTrace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turnTrace.d.ts","sourceRoot":"","sources":["../../src/pi/turnTrace.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEpE,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE;QACN,WAAW,EAAE,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,EAAE,IAAI,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,MAAM,EAAE;QACN,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE;YACR,WAAW,EAAE,MAAM,CAAC;YACpB,SAAS,CAAC,EAAE;gBACV,QAAQ,EAAE,MAAM,CAAC;gBACjB,SAAS,CAAC,EAAE,MAAM,CAAC;gBACnB,KAAK,EAAE,MAAM,CAAC;aACf,CAAC;YACF,MAAM,CAAC,EAAE;gBACP,eAAe,EAAE,MAAM,CAAC;gBACxB,cAAc,EAAE,MAAM,CAAC;gBACvB,iBAAiB,EAAE,MAAM,CAAC;gBAC1B,gBAAgB,EAAE,MAAM,CAAC;aAC1B,CAAC;YACF,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;SAChC,CAAC;KACH,CAAC;IACF,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,sBAAsB,EAAE,OAAO,CAAC;QAChC,cAAc,EAAE,OAAO,CAAC;QACxB,kBAAkB,EAAE,OAAO,CAAC;QAC5B,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,KAAK,EAAE;QACL,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,MAAM,EAAE,sBAAsB,CAAC;IAC/B,OAAO,EAAE;QACP,kBAAkB,EAAE,OAAO,CAAC;QAC5B,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,UAAU,EAAE;QACV,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QACJ,OAAO,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/B,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QACxB,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,mBAAmB,CAAC,EAAE,OAAO,CAAC;KAC/B,CAAC;CACH;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;CAChC;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,IAAI,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,KAAK,EAAE,SAAS,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,KAAK,EAAE,gBAAgB,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QACP,gBAAgB,EAAE,OAAO,CAAC;QAC1B,IAAI,EAAE,cAAc,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAwB,SAAQ,IAAI,CAAC,2BAA2B,EAAE,aAAa,GAAG,SAAS,CAAC;IAC3G,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,2BAA2B,CAAC,SAAS,CAAC,CAAC;CAClD;AAED,eAAO,MAAM,eAAe,GAAI,OAAO,OAAO,KAAG,MAWhD,CAAC;AAIF,eAAO,MAAM,eAAe,GAAI,QAAQ,MAAM,KAAG,iBAAiB,CAAC,QAAQ,CAOzE,CAAC;AA+BH,eAAO,MAAM,qBAAqB,GAAI,OAAO,OAAO,KAAG,oBAAoB,GAAG,SAsB7E,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,OAAO,MAAM,KAAG,MAGnD,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAI,OAAO,2BAA2B,KAAG,iBAuD1E,CAAC;AAEH,eAAO,MAAM,oBAAoB,GAC/B,iBAAiB,MAAM,EACvB,QAAQ,iBAAiB,KACxB,OAAO,CAAC,IAAI,CAOd,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAU,OAAO,uBAAuB,KAAG,OAAO,CAAC,IAAI,CAWrF,CAAC"}

package/dist/pi/turnTrace.js

@@ -0,0 +1,141 @@
+import { createHash } from "node:crypto";
+import { appendFile, mkdir, writeFile } from "node:fs/promises";
+import path from "node:path";
+export const redactTraceText = (value) => {
+    let redacted = String(value);
+    redacted = redacted.replace(/\bBearer\s+[A-Za-z0-9._~+/=-]{12,}/giu, "Bearer [REDACTED]");
+    redacted = redacted.replace(/\bmagt_v1_[A-Za-z0-9_-]{16,}\b/gu, "[REDACTED]");
+    redacted = redacted.replace(/\b(?:sk|sk-proj)-[A-Za-z0-9_-]{20,}\b/gu, "[REDACTED]");
+    redacted = redacted.replace(/("([^"]*(?:api[_-]?key|token|secret|password)[^"]*)"\s*:\s*")([^"]+)(")/giu, "$1[REDACTED]$4");
+    redacted = redacted.replace(/\/(?:Users|home|private|tmp|var|opt|run)\/[^\s"']+/gu, "[path]");
+    return redacted.length > 1000 ? `${redacted.slice(0, 1000)}...` : redacted;
+};
+const sha256 = (value) => createHash("sha256").update(value, "utf8").digest("hex");
+export const summarizePrompt = (prompt) => ({
+    chars: prompt.length,
+    has_active_environment: prompt.includes("Active environment context:"),
+    has_dream_mode: prompt.includes("## Dream Mode"),
+    has_memory_context: prompt.includes("Memory context") || prompt.includes("# Mneme"),
+    lines: prompt.length === 0 ? 0 : prompt.split(/\r?\n/u).length,
+    sha256: sha256(prompt)
+});
+const summarizeMemoryPrepare = (input) => ({
+    duration_ms: input.durationMs ?? 0,
+    ...(input.prepared ? {
+        principal: {
+            agent_id: input.prepared.principal.agentId,
+            ...(input.prepared.principal.qualifier ? { qualifier: input.prepared.principal.qualifier } : {}),
+            scope: input.prepared.principal.scope
+        },
+        recall: {
+            redaction_count: input.prepared.recall.redactionCount,
+            selected_count: input.prepared.recall.selectedEventIds.length,
+            token_budget_used: input.prepared.recall.tokenBudgetUsed,
+            total_candidates: input.prepared.recall.totalCandidates
+        }
+    } : {}),
+    status: input.status
+});
+const asObject = (value) => typeof value === "object" && value !== null ? value : undefined;
+const asString = (value) => typeof value === "string" && value.trim().length > 0 ? value.trim() : undefined;
+const asNumber = (value) => typeof value === "number" && Number.isFinite(value) ? value : undefined;
+export const summarizeSessionEvent = (event) => {
+    const record = asObject(event);
+    const type = asString(record?.type);
+    if (!record || !type || type === "turn_end") {
+        return undefined;
+    }
+    const tool = asObject(record.tool) ?? asObject(record.toolCall) ?? asObject(record.call);
+    const name = asString(record.tool_name) ??
+        asString(record.toolName) ??
+        asString(record.name) ??
+        asString(tool?.name) ??
+        "session_event";
+    return {
+        durationMs: asNumber(record.durationMs) ?? asNumber(record.duration_ms),
+        kind: "session",
+        name,
+        status: asString(record.status),
+        type
+    };
+};
+export const sanitizeTraceFileId = (value) => {
+    const normalized = value.replace(/[^A-Za-z0-9._-]+/gu, "_").slice(0, 128);
+    return normalized.length > 0 ? normalized : "turn";
+};
+export const buildPiTurnTraceRecord = (input) => ({
+    agent_id: input.agentId,
+    completed_at: input.completedAt.toISOString(),
+    engine: {
+        auth_method: input.model.authMethod,
+        kind: "pi",
+        model: input.model.model,
+        provider: input.model.provider
+    },
+    ...(input.error ? {
+        error: {
+            message: redactTraceText(input.error.message),
+            stage: input.error.stage
+        }
+    } : {}),
+    memory: {
+        enabled: input.memoryEnabled,
+        ...(input.memoryPrepare ? { prepare: summarizeMemoryPrepare(input.memoryPrepare) } : {})
+    },
+    prompt: summarizePrompt(input.promptText),
+    reply: {
+        output_chars: input.outputText.length,
+        reply_given: input.outputText.trim().length > 0
+    },
+    schema: "daimon.turn_trace.v1",
+    session: {
+        dispose_after_wake: input.session.disposeAfterWake,
+        mode: input.session.mode,
+        thread_id: input.session.threadId
+    },
+    started_at: input.startedAt.toISOString(),
+    status: input.status,
+    timings_ms: {
+        ...(input.enginePromptMs !== undefined ? { engine_prompt: input.enginePromptMs } : {}),
+        ...(input.memoryPrepare?.durationMs !== undefined ? { memory_prepare: input.memoryPrepare.durationMs } : {}),
+        total: input.totalMs
+    },
+    tools: input.tools.map((tool) => ({
+        ...tool,
+        ...(tool.error ? { error: redactTraceText(tool.error) } : {})
+    })),
+    turn_id: input.event.id,
+    wake: {
+        ...(input.event.context ? { context: input.event.context } : {}),
+        ...(input.worldContextBound === undefined
+            ? {}
+            : {
+                delivery_authenticated: input.event.delivery !== undefined,
+                transport_text_present: typeof input.event.transportText === "string",
+                world_context_bound: input.worldContextBound
+            }),
+        event_id: input.event.id,
+        ...(input.event.from ? { from: input.event.from } : {}),
+        kind: input.event.kind
+    }
+});
+export const writeTurnTraceRecord = async (runtimeHomePath, record) => {
+    const telemetryPath = path.join(runtimeHomePath, "telemetry");
+    const turnsPath = path.join(telemetryPath, "turns");
+    await mkdir(turnsPath, { recursive: true });
+    const body = `${JSON.stringify(record, null, 2)}\n`;
+    await writeFile(path.join(turnsPath, `${sanitizeTraceFileId(record.turn_id)}.json`), body, "utf8");
+    await appendFile(path.join(telemetryPath, "turns.ndjson"), `${JSON.stringify(record)}\n`, "utf8");
+};
+export const persistPiTurnTrace = async (input) => {
+    const record = buildPiTurnTraceRecord({
+        ...input,
+        completedAt: new Date(),
+        session: input.session ?? {
+            disposeAfterWake: false,
+            mode: "awake",
+            threadId: "unavailable"
+        }
+    });
+    await writeTurnTraceRecord(input.runtimeHomePath, record);
+};

package/dist/pi/wakeAcceptance.d.ts

@@ -0,0 +1,49 @@
+import type { WakeEvent } from "../core/types.js";
+import { type WakeAcceptanceAttempt, type WakeAcceptanceStoreState } from "./wakeAcceptanceSchema.js";
+import { WakeAcceptanceFs } from "./wakeAcceptanceFs.js";
+export type WakeAcceptanceAdmission = {
+    mode: "replay";
+} | {
+    mode: "run";
+    capability: WakeAcceptanceCapability;
+};
+declare const CAPABILITY_BRAND: unique symbol;
+export interface WakeAcceptanceCapability {
+    [CAPABILITY_BRAND]: "accepted" | "invoking";
+}
+export interface WakeAcceptanceStoreLike {
+    candidateFromDelivery(event: WakeEvent): WakeAcceptanceAttempt;
+    begin(event: WakeEvent): Promise<WakeAcceptanceAdmission>;
+    markInvoking(capability: WakeAcceptanceCapability): Promise<WakeAcceptanceCapability>;
+    markCompleted(capability: WakeAcceptanceCapability): Promise<void>;
+    markIncomplete(capability: WakeAcceptanceCapability): Promise<void>;
+}
+export declare class WakeAcceptanceStore {
+    readonly runtimeHomePath: string;
+    readonly agentId: string;
+    private readonly fs;
+    readonly runId: string;
+    private readonly capabilities;
+    constructor(runtimeHomePath: string, agentId: string, fs?: WakeAcceptanceFs);
+    getAcceptanceFilePath(): string;
+    candidateFromDelivery(event: WakeEvent): WakeAcceptanceAttempt;
+    candidateFromEvent(event: WakeEvent): WakeAcceptanceAttempt;
+    begin(event: WakeEvent): Promise<WakeAcceptanceAdmission>;
+    private beginFromAttempt;
+    markInvoking(capability: WakeAcceptanceCapability): Promise<WakeAcceptanceCapability>;
+    markCompleted(capability: WakeAcceptanceCapability): Promise<void>;
+    markIncomplete(capability: WakeAcceptanceCapability): Promise<void>;
+    loadState(): Promise<WakeAcceptanceStoreState>;
+    private loadStateUnsafe;
+    private makeRecord;
+    private makeError;
+    private canRelease;
+    private withClaim;
+    private createCapability;
+    private consumeCapability;
+    private transitionAttempt;
+    private persistState;
+    private nextSequence;
+}
+export { WAKE_ACCEPTANCE_VERSION, WakeAcceptanceError, type WakeAcceptanceAttempt, type WakeAcceptanceRecord, type WakeAcceptanceState, type WakeAcceptanceStoreState } from "./wakeAcceptanceSchema.js";
+//# sourceMappingURL=wakeAcceptance.d.ts.map

package/dist/pi/wakeAcceptance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wakeAcceptance.d.ts","sourceRoot":"","sources":["../../src/pi/wakeAcceptance.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAEL,KAAK,qBAAqB,EAG1B,KAAK,wBAAwB,EAQ9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAMzD,MAAM,MAAM,uBAAuB,GAC/B;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAE1D,QAAA,MAAM,gBAAgB,eAAuC,CAAC;AAE9D,MAAM,WAAW,wBAAwB;IACvC,CAAC,gBAAgB,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;CAC7C;AAWD,MAAM,WAAW,uBAAuB;IACtC,qBAAqB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB,CAAC;IAC/D,KAAK,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC1D,YAAY,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtF,aAAa,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,cAAc,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,qBAAa,mBAAmB;IAK5B,QAAQ,CAAC,eAAe,EAAE,MAAM;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE;IANrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyD;gBAG3E,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EACP,EAAE,GAAE,gBAAwD;IAK/E,qBAAqB,IAAI,MAAM;IAI/B,qBAAqB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB;IAQ9D,kBAAkB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB;IAIrD,KAAK,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,uBAAuB,CAAC;YAKjD,gBAAgB;IAoDxB,YAAY,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAsBrF,aAAa,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlE,cAAc,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUnE,SAAS,IAAI,OAAO,CAAC,wBAAwB,CAAC;YAmBtC,eAAe;IAI7B,OAAO,CAAC,UAAU;IAmBlB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,UAAU;YAQJ,SAAS;IAuCvB,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,iBAAiB;YAcX,iBAAiB;YAwDjB,YAAY;IAsB1B,OAAO,CAAC,YAAY;CAMrB;AAED,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC9B,MAAM,2BAA2B,CAAC"}