@noopolis/daimon 0.1.2 → 0.2.1

package/dist/pi/piHarness.js

@@ -1,31 +1,50 @@
 import { mkdir } from "node:fs/promises";
 import path from "node:path";
-import { AuthStorage, createAgentSession, SessionManager, SettingsManager } from "@earendil-works/pi-coding-agent";
-import { createMemoryRuntime } from "@noopolis/mneme";
+import { AuthStorage, createBashTool, createAgentSession, SessionManager, SettingsManager } from "@earendil-works/pi-coding-agent";
+import { resolveRunId } from "../observability/causalEvents.js";
 import { resolvePiHarnessModel } from "./modelConfig.js";
 import { createPiModelRegistry } from "./modelRegistry.js";
 import { createPiMemoryTools, piMemoryToolNames } from "./memoryTools.js";
 import { createResourceLoader } from "./prompts.js";
 import { PiAgentHandle } from "./piAgentHandle.js";
+import { DAIMON_WAKE_ID_ENV } from "./cliEnvironment.js";
 import { createPiWorldTools, piWorldToolNames } from "./worldTools.js";
+import { ensureRuntimeHome, ensureRuntimeHomeDirectory } from "../runtime/runtimeHomeLayout.js";
+import { readyTaskClockEnvironment } from "../runtime/taskClockProcess.js";
+import { readTaskClock, taskClockChildEnvironment, taskClockProcessEnvironment } from "../runtime/taskClock.js";
+import { createClockedMemoryRuntime, memoryClockOptions } from "./memoryClock.js";
+import { verifyTaskClockProcess } from "./taskClockProcess.js";
 import { bindPiRawTrainingCapture, validatePiRawTrainingCaptureOptions } from "./rawTrainingCapture.js";
 export class PiHarnessAdapter {
     options;
+    taskClockProbe;
+    static capabilities = Object.freeze({ causalRunId: true, memoryCausalRunId: false });
     authStorage;
     modelRegistry;
     sessionFactory;
-    constructor(options) {
+    constructor(options, /** @internal */ taskClockProbe) {
         this.options = options;
+        this.taskClockProbe = taskClockProbe;
         this.authStorage = AuthStorage.create(options.authPath);
         this.modelRegistry = createPiModelRegistry(this.authStorage, options);
         this.sessionFactory = options.sessionFactory ?? createAgentSession;
     }
     async startAgent(input) {
+        const taskClock = readTaskClock();
+        if (this.options.memory !== undefined)
+            memoryClockOptions(taskClock);
+        if (input.causalRunId !== undefined && this.options.memory !== undefined) {
+            throw new Error("Per-agent causalRunId requires a memory runtime with explicit causal context; configured memory is currently unsupported");
+        }
+        const causalRunId = input.causalRunId === undefined ? undefined : resolveRunId(undefined, input.causalRunId);
         validatePiRawTrainingCaptureOptions(this.options.rawTrainingCapture);
-        await mkdir(input.runtimeHomePath, { recursive: true });
+        await verifyTaskClockProcess(input.runtimeHomePath, taskClock, this.taskClockProbe);
+        await ensureRuntimeHome(input.runtimeHomePath);
+        await Promise.all([".config", ".local/share", ".local/state", ".cache", ".tmp", "tool-state"]
+            .map((relative) => ensureRuntimeHomeDirectory(input.runtimeHomePath, relative)));
         await mkdir(input.workspacePath, { recursive: true });
         const memoryRuntimeHomePath = this.options.memory?.runtimeHomePath ?? input.runtimeHomePath;
-        await mkdir(memoryRuntimeHomePath, { recursive: true });
+        await ensureRuntimeHome(memoryRuntimeHomePath);
         const modelSpec = this.options.model ?? {
             auth: { method: "codex" },
             provider: "openai",
@@ -38,17 +57,22 @@ export class PiHarnessAdapter {
         }
         const memory = this.options.memory === undefined
             ? undefined
-            : createMemoryRuntime({
+            : createClockedMemoryRuntime({
                 agentId: input.id,
                 authority: this.options.memory.authority,
                 embeddingProvider: this.options.memory.embeddingProvider,
                 runtimeHomePath: memoryRuntimeHomePath,
                 source: this.options.memory.source,
                 tokenBudget: this.options.memory.tokenBudget
-            });
+            }, taskClock);
         const memoryToolContext = memory === undefined ? undefined : {};
         const worldToolContext = this.options.world === undefined ? undefined : {};
         const rawTrainingCaptureRef = this.options.rawTrainingCapture === undefined ? undefined : {};
+        const wakeEnvironmentContext = this.options.wakeEnvironmentContext ?? {};
+        // Fixed for the life of this agent, not per wake: whether it can publish
+        // through `moltnet_send` at all. Gates the terminal-text fallback in
+        // `PiAgentHandle.runWake` (see `PiWakeEnvironmentContextRef.hasSendCapability`).
+        wakeEnvironmentContext.hasSendCapability = (this.options.productionTools ?? []).some((tool) => tool.name === "moltnet_send");
         const sessionInput = (mode, sessionDirectory) => {
             const memoryTools = memory === undefined || memoryToolContext === undefined
                 ? []
@@ -64,14 +88,26 @@ export class PiHarnessAdapter {
                     world: this.options.world,
                     contextRef: worldToolContext
                 });
+            // Every child tool inherits the same denylist: host control values,
+            // Daimon-held world/model secrets, and caller-protected names.
+            const protectedNames = [...new Set([
+                    ...(this.options.protectedEnvironmentNames ?? []),
+                    ...(this.options.world === undefined ? [] : [this.options.world.tokenEnv])
+                ])];
+            const requestedTools = this.options.toolNames ?? input.tools;
+            const protectedBash = (protectedNames.length === 0 && taskClock === undefined) || requestedTools?.includes("bash") === false
+                ? []
+                : [createProtectedBashTool(input.workspacePath, input.runtimeHomePath, protectedNames, wakeEnvironmentContext, taskClockChildEnvironment({}, taskClock))];
             const toolNames = [
-                ...(input.tools ?? ["read", "write", "edit", "bash", "grep", "find", "ls"]),
+                ...(requestedTools ?? ["read", "write", "edit", "bash", "grep", "find", "ls"]),
                 ...piMemoryToolNames(memoryTools),
-                ...(worldTools === undefined ? [] : piWorldToolNames(worldTools))
+                ...(worldTools === undefined ? [] : piWorldToolNames(worldTools)),
+                ...(this.options.productionTools ?? []).map((tool) => tool.name)
             ];
             return {
                 cwd: input.workspacePath,
                 agentDir: input.runtimeHomePath,
+                runtimeHomePath: input.runtimeHomePath,
                 daimonSecretEnvironmentNames: this.options.world === undefined ? [] : [this.options.world.tokenEnv],
                 authStorage: this.authStorage,
                 modelRegistry: this.modelRegistry,
@@ -82,7 +118,9 @@ export class PiHarnessAdapter {
                     world: worldTools !== undefined
                 }),
                 tools: [...new Set(toolNames)],
-                customTools: worldTools === undefined ? memoryTools : [...memoryTools, ...worldTools],
+                customTools: worldTools === undefined
+                    ? [...protectedBash, ...memoryTools, ...(this.options.productionTools ?? [])]
+                    : [...protectedBash, ...memoryTools, ...worldTools, ...(this.options.productionTools ?? [])],
                 sessionManager: SessionManager.create(input.workspacePath, sessionDirectory),
                 settingsManager: SettingsManager.inMemory({
                     compaction: { enabled: false },
@@ -103,9 +141,9 @@ export class PiHarnessAdapter {
                 authMethod: modelSpec.auth?.method ?? "none",
                 model: resolvedModel.name,
                 provider: resolvedModel.provider
-            }, memory, memoryToolContext, {}, worldToolContext, rawTrainingCaptureRef, this.options.rawTrainingCapture, worldToolContext === undefined
+            }, memory, memoryToolContext, { causalRunId }, worldToolContext, rawTrainingCaptureRef, this.options.rawTrainingCapture, worldToolContext === undefined
                 ? undefined
-                : { instructions: input.instructions, thinkingLevel: this.options.thinkingLevel ?? "off" }, session);
+                : { instructions: input.instructions, thinkingLevel: this.options.thinkingLevel ?? "off" }, session, wakeEnvironmentContext);
         }
         const createSession = async (mode, sessionDirectory) => {
             const { session } = await (this.options.sessionFactory ?? createAgentSession)(sessionInput(mode, sessionDirectory));
@@ -116,11 +154,42 @@ export class PiHarnessAdapter {
             authMethod: modelSpec.auth?.method ?? "none",
             model: resolvedModel.name,
             provider: resolvedModel.provider
-        }, memory, memoryToolContext, {}, worldToolContext, undefined, undefined, worldToolContext === undefined
+        }, memory, memoryToolContext, { causalRunId }, worldToolContext, undefined, undefined, worldToolContext === undefined
             ? undefined
             : {
                 instructions: input.instructions,
                 thinkingLevel: this.options.thinkingLevel ?? "off"
-            }, undefined);
+            }, undefined, wakeEnvironmentContext);
     }
 }
+function createProtectedBashTool(workspacePath, runtimeHomePath, protectedNames, wakeEnvironmentContext, clockEnvironment) {
+    const bash = createBashTool(workspacePath, {
+        spawnHook: (context) => ({
+            ...context,
+            env: readyTaskClockEnvironment({
+                ...Object.fromEntries(Object.entries(taskClockProcessEnvironment(context.env, clockEnvironment)).filter(([name]) => !protectedNames.includes(name))),
+                HOME: runtimeHomePath,
+                XDG_CONFIG_HOME: `${runtimeHomePath}/.config`,
+                XDG_DATA_HOME: `${runtimeHomePath}/.local/share`,
+                XDG_STATE_HOME: `${runtimeHomePath}/.local/state`,
+                XDG_CACHE_HOME: `${runtimeHomePath}/.cache`,
+                TMPDIR: `${runtimeHomePath}/.tmp`,
+                ...clockEnvironment,
+                ...(wakeEnvironmentContext.current === undefined
+                    ? {}
+                    : { [DAIMON_WAKE_ID_ENV]: wakeEnvironmentContext.current })
+            })
+        })
+    });
+    return {
+        name: bash.name,
+        label: bash.label,
+        description: bash.description,
+        parameters: bash.parameters,
+        ...(bash.prepareArguments === undefined ? {} : { prepareArguments: bash.prepareArguments }),
+        ...(bash.executionMode === undefined ? {} : { executionMode: bash.executionMode }),
+        async execute(toolCallId, params, signal, onUpdate) {
+            return bash.execute(toolCallId, params, signal, onUpdate);
+        }
+    };
+}

package/dist/pi/prompts.d.ts

@@ -2,6 +2,7 @@ import { type ResourceLoader } from "@earendil-works/pi-coding-agent";
 import { type MemoryWakeMode } from "@noopolis/mneme";
 import type { AgentStartInput, WakeEvent } from "../core/types.js";
 export declare const formatWakePrompt: (event: WakeEvent) => string;
+export declare const preserveModelFacingWakeIdentity: (promptText: string, event: WakeEvent, memoryEventId: string) => string;
 export declare const createResourceLoader: (input: AgentStartInput, mode: MemoryWakeMode, capabilities: Readonly<{
     memory: boolean;
     world: boolean;

package/dist/pi/prompts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../src/pi/prompts.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEnE,eAAO,MAAM,gBAAgB,GAAI,OAAO,SAAS,KAAG,MAKtC,CAAC;AAEf,eAAO,MAAM,oBAAoB,GAC/B,OAAO,eAAe,EACtB,MAAM,cAAc,EACpB,cAAc,QAAQ,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,KAC1D,cA+BF,CAAC"}
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../src/pi/prompts.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEnE,eAAO,MAAM,gBAAgB,GAAI,OAAO,SAAS,KAAG,MAKtC,CAAC;AAYf,eAAO,MAAM,+BAA+B,GAC1C,YAAY,MAAM,EAClB,OAAO,SAAS,EAChB,eAAe,MAAM,KACpB,MAiBF,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,OAAO,eAAe,EACtB,MAAM,cAAc,EACpB,cAAc,QAAQ,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,KAC1D,cA+BF,CAAC"}

package/dist/pi/prompts.js

@@ -6,6 +6,30 @@ export const formatWakePrompt = (event) => `Wake event:
 - from: ${event.from === undefined ? "[no attribution supplied] (absence)" : JSON.stringify(event.from)}
 
 ${event.text}`;
+const WAKE_HEADER_PATTERN = /(^|\r?\n)## Wake\r?\nid: ([^\r\n]*)(?=\r?\n|$)/u;
+const formatAuthoritativeWakeIdentity = (event) => [
+    "Wake identity:",
+    "Use this exact wake id as the delivery id/event key when a tool asks for event_key.",
+    `- id: ${event.id}`,
+    `- kind: ${event.kind}`,
+    `- from: ${event.from === undefined ? "[no attribution supplied] (absence)" : JSON.stringify(event.from)}`
+].join("\n");
+export const preserveModelFacingWakeIdentity = (promptText, event, memoryEventId) => {
+    if (event.id === memoryEventId)
+        return promptText;
+    const match = WAKE_HEADER_PATTERN.exec(promptText);
+    if (match === null) {
+        return `${formatAuthoritativeWakeIdentity(event)}\n\n${promptText}`;
+    }
+    const currentId = match[2];
+    if (currentId === event.id)
+        return promptText;
+    if (currentId !== memoryEventId) {
+        throw new Error("memory-prepared wake prompt carried an unexpected wake id");
+    }
+    const idStart = match.index + match[0].length - currentId.length;
+    return `${promptText.slice(0, idStart)}${event.id}${promptText.slice(idStart + currentId.length)}`;
+};
 export const createResourceLoader = (input, mode, capabilities) => {
     const systemPrompt = [
         `You are ${input.name} (${input.id}).`,

package/dist/pi/taskClockProcess.d.ts

@@ -0,0 +1,6 @@
+import { type TaskClock } from "../runtime/taskClock.js";
+import { type TaskClockProcessProbe } from "../runtime/taskClockProcess.js";
+export type { TaskClockProcessProbe } from "../runtime/taskClockProcess.js";
+/** Eager Pi readiness uses the same gate as every later child launch. */
+export declare function verifyTaskClockProcess(runtimeHomePath: string, clock?: TaskClock | undefined, probe?: TaskClockProcessProbe): Promise<void>;
+//# sourceMappingURL=taskClockProcess.d.ts.map

package/dist/pi/taskClockProcess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"taskClockProcess.d.ts","sourceRoot":"","sources":["../../src/pi/taskClockProcess.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAA6B,KAAK,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEvG,YAAY,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAE5E,yEAAyE;AACzE,wBAAsB,sBAAsB,CAC1C,eAAe,EAAE,MAAM,EAAE,KAAK,GAAE,SAAS,GAAG,SAA2B,EAAE,KAAK,CAAC,EAAE,qBAAqB,GACrG,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/dist/pi/taskClockProcess.js

@@ -0,0 +1,8 @@
+import { cliChildEnvironment } from "./cliEnvironment.js";
+import { readTaskClock } from "../runtime/taskClock.js";
+import { readyTaskClockEnvironment } from "../runtime/taskClockProcess.js";
+/** Eager Pi readiness uses the same gate as every later child launch. */
+export async function verifyTaskClockProcess(runtimeHomePath, clock = readTaskClock(), probe) {
+    if (clock !== undefined)
+        readyTaskClockEnvironment(cliChildEnvironment([], runtimeHomePath), clock, probe);
+}

package/dist/pi/turnCausal.d.ts

@@ -15,6 +15,7 @@ export interface StampTurnInputSubmittedInput {
     prepared?: MemoryPrepareTurnResult;
     promptText: string;
     runtimeHomePath: string;
+    runId?: string;
 }
 /**
  * Stamps `turn.input.submitted` for one Pi turn, wiring piHarness's own
@@ -51,8 +52,8 @@ export interface StampTurnInputSubmittedInput {
  *   the actual `event_id`s of the `memory.recalled` events it appended for
  *   this turn, so this cause link is id-joined the same way the moltnet
  *   link above is.
- * - `run_id` always comes from `resolveRunId()` (`NOOPOLIS_RUN_ID`), never
- *   from `event` or model output.
+ * - `run_id` comes from trusted per-instance host context, with the historical
+ *   environment fallback. Never from `event` or model output.
  */
 export declare const stampTurnInputSubmitted: (input: StampTurnInputSubmittedInput) => Promise<CausalEvent<TurnInputSubmittedPayload>>;
 export interface StampTurnOutputCompletedInput {
@@ -61,6 +62,7 @@ export interface StampTurnOutputCompletedInput {
     outputText: string;
     runtimeHomePath: string;
     turnId: string;
+    runId?: string;
 }
 /**
  * Stamps `turn.output.completed` once a Pi turn finishes successfully,

package/dist/pi/turnCausal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"turnCausal.d.ts","sourceRoot":"","sources":["../../src/pi/turnCausal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAKL,KAAK,WAAW,EAChB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAChC,MAAM,kCAAkC,CAAC;AAG1C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAAI,SAAS,MAAM,KAAG,MAA4B,CAAC;AAEhF,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,eAAO,MAAM,uBAAuB,GAClC,OAAO,4BAA4B,KAClC,OAAO,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAW7C,CAAC;AAEL,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,GACnC,OAAO,6BAA6B,KACnC,OAAO,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAS9C,CAAC"}
+{"version":3,"file":"turnCausal.d.ts","sourceRoot":"","sources":["../../src/pi/turnCausal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAKL,KAAK,WAAW,EAChB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAChC,MAAM,kCAAkC,CAAC;AAG1C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAAI,SAAS,MAAM,KAAG,MAA4B,CAAC;AAEhF,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,eAAO,MAAM,uBAAuB,GAClC,OAAO,4BAA4B,KAClC,OAAO,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAW7C,CAAC;AAEL,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,GACnC,OAAO,6BAA6B,KACnC,OAAO,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAS9C,CAAC"}

package/dist/pi/turnCausal.js

@@ -43,8 +43,8 @@ export const agentPrincipalId = (agentId) => `agent:${agentId}`;
  *   the actual `event_id`s of the `memory.recalled` events it appended for
  *   this turn, so this cause link is id-joined the same way the moltnet
  *   link above is.
- * - `run_id` always comes from `resolveRunId()` (`NOOPOLIS_RUN_ID`), never
- *   from `event` or model output.
+ * - `run_id` comes from trusted per-instance host context, with the historical
+ *   environment fallback. Never from `event` or model output.
  */
 export const stampTurnInputSubmitted = (input) => emitTurnInputSubmitted({
     agentId: input.agentId,
@@ -53,7 +53,7 @@ export const stampTurnInputSubmitted = (input) => emitTurnInputSubmitted({
     inputMessageIds: [input.event.id],
     principalId: agentPrincipalId(input.agentId),
     promptSha256: summarizePrompt(input.promptText).sha256,
-    runId: resolveRunId(),
+    runId: resolveRunId(undefined, input.runId),
     runtimeHomePath: input.runtimeHomePath,
     turnId: input.event.id
 });
@@ -69,7 +69,7 @@ export const stampTurnOutputCompleted = (input) => emitTurnOutputCompleted({
     causeEventIds: [input.causeEventId],
     outputSha256: sha256Hex(input.outputText),
     principalId: agentPrincipalId(input.agentId),
-    runId: resolveRunId(),
+    runId: resolveRunId(undefined, input.runId),
     runtimeHomePath: input.runtimeHomePath,
     turnId: input.turnId
 });

package/dist/pi/turnTrace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"turnTrace.d.ts","sourceRoot":"","sources":["../../src/pi/turnTrace.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEpE,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE;QACN,WAAW,EAAE,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,EAAE,IAAI,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,MAAM,EAAE;QACN,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE;YACR,WAAW,EAAE,MAAM,CAAC;YACpB,SAAS,CAAC,EAAE;gBACV,QAAQ,EAAE,MAAM,CAAC;gBACjB,SAAS,CAAC,EAAE,MAAM,CAAC;gBACnB,KAAK,EAAE,MAAM,CAAC;aACf,CAAC;YACF,MAAM,CAAC,EAAE;gBACP,eAAe,EAAE,MAAM,CAAC;gBACxB,cAAc,EAAE,MAAM,CAAC;gBACvB,iBAAiB,EAAE,MAAM,CAAC;gBAC1B,gBAAgB,EAAE,MAAM,CAAC;aAC1B,CAAC;YACF,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;SAChC,CAAC;KACH,CAAC;IACF,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,sBAAsB,EAAE,OAAO,CAAC;QAChC,cAAc,EAAE,OAAO,CAAC;QACxB,kBAAkB,EAAE,OAAO,CAAC;QAC5B,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,KAAK,EAAE;QACL,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,MAAM,EAAE,sBAAsB,CAAC;IAC/B,OAAO,EAAE;QACP,kBAAkB,EAAE,OAAO,CAAC;QAC5B,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,UAAU,EAAE;QACV,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QACJ,OAAO,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/B,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QACxB,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,mBAAmB,CAAC,EAAE,OAAO,CAAC;KAC/B,CAAC;CACH;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;CAChC;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,IAAI,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,KAAK,EAAE,SAAS,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,KAAK,EAAE,gBAAgB,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QACP,gBAAgB,EAAE,OAAO,CAAC;QAC1B,IAAI,EAAE,cAAc,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAwB,SAAQ,IAAI,CAAC,2BAA2B,EAAE,aAAa,GAAG,SAAS,CAAC;IAC3G,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,2BAA2B,CAAC,SAAS,CAAC,CAAC;CAClD;AAED,eAAO,MAAM,eAAe,GAAI,OAAO,OAAO,KAAG,MAWhD,CAAC;AAIF,eAAO,MAAM,eAAe,GAAI,QAAQ,MAAM,KAAG,iBAAiB,CAAC,QAAQ,CAOzE,CAAC;AA+BH,eAAO,MAAM,qBAAqB,GAAI,OAAO,OAAO,KAAG,oBAAoB,GAAG,SAsB7E,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,OAAO,MAAM,KAAG,MAGnD,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAI,OAAO,2BAA2B,KAAG,iBAuD1E,CAAC;AAEH,eAAO,MAAM,oBAAoB,GAC/B,iBAAiB,MAAM,EACvB,QAAQ,iBAAiB,KACxB,OAAO,CAAC,IAAI,CAOd,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAU,OAAO,uBAAuB,KAAG,OAAO,CAAC,IAAI,CAWrF,CAAC"}
+{"version":3,"file":"turnTrace.d.ts","sourceRoot":"","sources":["../../src/pi/turnTrace.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAIpE,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE;QACN,WAAW,EAAE,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,EAAE,IAAI,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,MAAM,EAAE;QACN,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE;YACR,WAAW,EAAE,MAAM,CAAC;YACpB,SAAS,CAAC,EAAE;gBACV,QAAQ,EAAE,MAAM,CAAC;gBACjB,SAAS,CAAC,EAAE,MAAM,CAAC;gBACnB,KAAK,EAAE,MAAM,CAAC;aACf,CAAC;YACF,MAAM,CAAC,EAAE;gBACP,eAAe,EAAE,MAAM,CAAC;gBACxB,cAAc,EAAE,MAAM,CAAC;gBACvB,iBAAiB,EAAE,MAAM,CAAC;gBAC1B,gBAAgB,EAAE,MAAM,CAAC;aAC1B,CAAC;YACF,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;SAChC,CAAC;KACH,CAAC;IACF,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,sBAAsB,EAAE,OAAO,CAAC;QAChC,cAAc,EAAE,OAAO,CAAC;QACxB,kBAAkB,EAAE,OAAO,CAAC;QAC5B,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,KAAK,EAAE;QACL,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,MAAM,EAAE,sBAAsB,CAAC;IAC/B,OAAO,EAAE;QACP,kBAAkB,EAAE,OAAO,CAAC;QAC5B,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,UAAU,EAAE;QACV,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QACJ,OAAO,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/B,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QACxB,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,mBAAmB,CAAC,EAAE,OAAO,CAAC;KAC/B,CAAC;CACH;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;CAChC;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,IAAI,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,KAAK,EAAE,SAAS,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,KAAK,EAAE,gBAAgB,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QACP,gBAAgB,EAAE,OAAO,CAAC;QAC1B,IAAI,EAAE,cAAc,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAwB,SAAQ,IAAI,CAAC,2BAA2B,EAAE,aAAa,GAAG,SAAS,CAAC;IAC3G,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,2BAA2B,CAAC,SAAS,CAAC,CAAC;CAClD;AAED,eAAO,MAAM,eAAe,GAAI,OAAO,OAAO,KAAG,MAIhD,CAAC;AAIF,eAAO,MAAM,eAAe,GAAI,QAAQ,MAAM,KAAG,iBAAiB,CAAC,QAAQ,CAOzE,CAAC;AA+BH,eAAO,MAAM,qBAAqB,GAAI,OAAO,OAAO,KAAG,oBAAoB,GAAG,SAsB7E,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,OAAO,MAAM,KAAG,MAGnD,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAI,OAAO,2BAA2B,KAAG,iBAuD1E,CAAC;AAEH,eAAO,MAAM,oBAAoB,GAC/B,iBAAiB,MAAM,EACvB,QAAQ,iBAAiB,KACxB,OAAO,CAAC,IAAI,CAMd,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAU,OAAO,uBAAuB,KAAG,OAAO,CAAC,IAAI,CAWrF,CAAC"}

package/dist/pi/turnTrace.js

@@ -1,12 +1,10 @@
 import { createHash } from "node:crypto";
-import { appendFile, mkdir, writeFile } from "node:fs/promises";
+import { appendFile, writeFile } from "node:fs/promises";
 import path from "node:path";
+import { redactCredentialText } from "../core/credentialRedaction.js";
+import { ensureRuntimeHomeDirectory } from "../runtime/runtimeHomeLayout.js";
 export const redactTraceText = (value) => {
-    let redacted = String(value);
-    redacted = redacted.replace(/\bBearer\s+[A-Za-z0-9._~+/=-]{12,}/giu, "Bearer [REDACTED]");
-    redacted = redacted.replace(/\bmagt_v1_[A-Za-z0-9_-]{16,}\b/gu, "[REDACTED]");
-    redacted = redacted.replace(/\b(?:sk|sk-proj)-[A-Za-z0-9_-]{20,}\b/gu, "[REDACTED]");
-    redacted = redacted.replace(/("([^"]*(?:api[_-]?key|token|secret|password)[^"]*)"\s*:\s*")([^"]+)(")/giu, "$1[REDACTED]$4");
+    let redacted = redactCredentialText(value, [], 4_096);
     redacted = redacted.replace(/\/(?:Users|home|private|tmp|var|opt|run)\/[^\s"']+/gu, "[path]");
     return redacted.length > 1000 ? `${redacted.slice(0, 1000)}...` : redacted;
 };
@@ -121,8 +119,7 @@ export const buildPiTurnTraceRecord = (input) => ({
 });
 export const writeTurnTraceRecord = async (runtimeHomePath, record) => {
     const telemetryPath = path.join(runtimeHomePath, "telemetry");
-    const turnsPath = path.join(telemetryPath, "turns");
-    await mkdir(turnsPath, { recursive: true });
+    const turnsPath = await ensureRuntimeHomeDirectory(runtimeHomePath, "telemetry/turns");
     const body = `${JSON.stringify(record, null, 2)}\n`;
     await writeFile(path.join(turnsPath, `${sanitizeTraceFileId(record.turn_id)}.json`), body, "utf8");
     await appendFile(path.join(telemetryPath, "turns.ndjson"), `${JSON.stringify(record)}\n`, "utf8");

package/dist/pi/wakeAcceptance.d.ts

@@ -24,7 +24,7 @@ export declare class WakeAcceptanceStore {
     private readonly fs;
     readonly runId: string;
     private readonly capabilities;
-    constructor(runtimeHomePath: string, agentId: string, fs?: WakeAcceptanceFs);
+    constructor(runtimeHomePath: string, agentId: string, fs?: WakeAcceptanceFs, causalRunId?: string);
     getAcceptanceFilePath(): string;
     candidateFromDelivery(event: WakeEvent): WakeAcceptanceAttempt;
     candidateFromEvent(event: WakeEvent): WakeAcceptanceAttempt;

package/dist/pi/wakeAcceptance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wakeAcceptance.d.ts","sourceRoot":"","sources":["../../src/pi/wakeAcceptance.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAEL,KAAK,qBAAqB,EAG1B,KAAK,wBAAwB,EAQ9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAMzD,MAAM,MAAM,uBAAuB,GAC/B;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAE1D,QAAA,MAAM,gBAAgB,eAAuC,CAAC;AAE9D,MAAM,WAAW,wBAAwB;IACvC,CAAC,gBAAgB,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;CAC7C;AAWD,MAAM,WAAW,uBAAuB;IACtC,qBAAqB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB,CAAC;IAC/D,KAAK,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC1D,YAAY,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtF,aAAa,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,cAAc,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,qBAAa,mBAAmB;IAK5B,QAAQ,CAAC,eAAe,EAAE,MAAM;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE;IANrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyD;gBAG3E,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EACP,EAAE,GAAE,gBAAwD;IAK/E,qBAAqB,IAAI,MAAM;IAI/B,qBAAqB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB;IAQ9D,kBAAkB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB;IAIrD,KAAK,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,uBAAuB,CAAC;YAKjD,gBAAgB;IAoDxB,YAAY,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAsBrF,aAAa,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlE,cAAc,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUnE,SAAS,IAAI,OAAO,CAAC,wBAAwB,CAAC;YAmBtC,eAAe;IAI7B,OAAO,CAAC,UAAU;IAmBlB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,UAAU;YAQJ,SAAS;IAuCvB,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,iBAAiB;YAcX,iBAAiB;YAwDjB,YAAY;IAsB1B,OAAO,CAAC,YAAY;CAMrB;AAED,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC9B,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"wakeAcceptance.d.ts","sourceRoot":"","sources":["../../src/pi/wakeAcceptance.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAEL,KAAK,qBAAqB,EAG1B,KAAK,wBAAwB,EAQ9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAMzD,MAAM,MAAM,uBAAuB,GAC/B;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAE1D,QAAA,MAAM,gBAAgB,eAAuC,CAAC;AAE9D,MAAM,WAAW,wBAAwB;IACvC,CAAC,gBAAgB,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;CAC7C;AAWD,MAAM,WAAW,uBAAuB;IACtC,qBAAqB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB,CAAC;IAC/D,KAAK,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC1D,YAAY,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtF,aAAa,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,cAAc,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,qBAAa,mBAAmB;IAK5B,QAAQ,CAAC,eAAe,EAAE,MAAM;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE;IANrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyD;gBAG3E,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EACP,EAAE,GAAE,gBAAwD,EAC7E,WAAW,CAAC,EAAE,MAAM;IAKtB,qBAAqB,IAAI,MAAM;IAI/B,qBAAqB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB;IAQ9D,kBAAkB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB;IAIrD,KAAK,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,uBAAuB,CAAC;YAKjD,gBAAgB;IAoDxB,YAAY,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAsBrF,aAAa,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlE,cAAc,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUnE,SAAS,IAAI,OAAO,CAAC,wBAAwB,CAAC;YAmBtC,eAAe;IAI7B,OAAO,CAAC,UAAU;IAmBlB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,UAAU;YAQJ,SAAS;IAuCvB,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,iBAAiB;YAcX,iBAAiB;YAwDjB,YAAY;IAsB1B,OAAO,CAAC,YAAY;CAMrB;AAED,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC9B,MAAM,2BAA2B,CAAC"}

package/dist/pi/wakeAcceptance.js

@@ -11,11 +11,11 @@ export class WakeAcceptanceStore {
     fs;
     runId;
     capabilities = new WeakMap();
-    constructor(runtimeHomePath, agentId, fs = new WakeAcceptanceFs(runtimeHomePath)) {
+    constructor(runtimeHomePath, agentId, fs = new WakeAcceptanceFs(runtimeHomePath), causalRunId) {
         this.runtimeHomePath = runtimeHomePath;
         this.agentId = agentId;
         this.fs = fs;
-        this.runId = resolveRunId();
+        this.runId = resolveRunId(undefined, causalRunId);
     }
     getAcceptanceFilePath() {
         return this.fs.stateFilePath;

package/dist/pi/worldTrajectory.d.ts

@@ -5,7 +5,7 @@ export declare const WORLD_TRAJECTORY_SCHEMA: "daimon.world_trajectory.v1";
  * Pi's SessionManager remains the private raw session recorder. This module
  * derives a minimized public/evaluation projection from the same subscribed
  * session events. Raw training capture is deliberately separate; see
- * docs/WORLD_TRAJECTORIES.md.
+ * docs/observability.md.
  */
 export interface PiWorldTrajectoryToolCall {
     arguments?: unknown;

package/dist/pi/worldTrajectory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worldTrajectory.d.ts","sourceRoot":"","sources":["../../src/pi/worldTrajectory.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,eAAO,MAAM,uBAAuB,EAAG,4BAAqC,CAAC;AAE7E;;;;;GAKG;AAEH,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,wBAAwB,CAAC;IAClC,WAAW,EAAE,IAAI,CAAC;IAClB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,gBAAgB,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAaD;;;GAGG;AACH,eAAO,MAAM,0BAA0B,GACrC,OAAO,OAAO,EACd,cAAS,KACR,OAsBF,CAAC;AAKF,eAAO,MAAM,8BAA8B,QAAO,wBAGhD,CAAC;AAEH,eAAO,MAAM,6BAA6B,GACxC,SAAS,wBAAwB,EACjC,OAAO,OAAO,EACd,UAAgB,KACf,IAqCF,CAAC;AAKF,eAAO,MAAM,wBAAwB,GACnC,OAAO,6BAA6B,KACnC,OAAO,CAAC,IAAI,CAkDd,CAAC"}
+{"version":3,"file":"worldTrajectory.d.ts","sourceRoot":"","sources":["../../src/pi/worldTrajectory.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAG1D,eAAO,MAAM,uBAAuB,EAAG,4BAAqC,CAAC;AAE7E;;;;;GAKG;AAEH,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,wBAAwB,CAAC;IAClC,WAAW,EAAE,IAAI,CAAC;IAClB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,gBAAgB,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAaD;;;GAGG;AACH,eAAO,MAAM,0BAA0B,GACrC,OAAO,OAAO,EACd,cAAS,KACR,OAsBF,CAAC;AAKF,eAAO,MAAM,8BAA8B,QAAO,wBAGhD,CAAC;AAEH,eAAO,MAAM,6BAA6B,GACxC,SAAS,wBAAwB,EACjC,OAAO,OAAO,EACd,UAAgB,KACf,IAqCF,CAAC;AAKF,eAAO,MAAM,wBAAwB,GACnC,OAAO,6BAA6B,KACnC,OAAO,CAAC,IAAI,CAiDd,CAAC"}

package/dist/pi/worldTrajectory.js

@@ -1,7 +1,8 @@
 import { createHash } from "node:crypto";
-import { appendFile, mkdir, writeFile } from "node:fs/promises";
+import { appendFile, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { redactTraceText, sanitizeTraceFileId } from "./turnTrace.js";
+import { ensureRuntimeHomeDirectory } from "../runtime/runtimeHomeLayout.js";
 export const WORLD_TRAJECTORY_SCHEMA = "daimon.world_trajectory.v1";
 const asObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value)
     ? value
@@ -123,8 +124,7 @@ export const persistPiWorldTrajectory = async (input) => {
         }
     };
     const telemetryPath = path.join(input.runtimeHomePath, "telemetry");
-    const trajectoriesPath = path.join(telemetryPath, "world-trajectories");
-    await mkdir(trajectoriesPath, { recursive: true });
+    const trajectoriesPath = await ensureRuntimeHomeDirectory(input.runtimeHomePath, "telemetry/world-trajectories");
     const bytes = `${JSON.stringify(record, null, 2)}\n`;
     await writeFile(path.join(trajectoriesPath, `${sanitizeTraceFileId(input.turnId)}.json`), bytes, { encoding: "utf8", mode: 0o600 });
     await appendFile(path.join(telemetryPath, "world-trajectories.ndjson"), `${JSON.stringify(record)}\n`, { encoding: "utf8", mode: 0o600 });

package/dist/runtime/agySubscriptionBootstrap.d.ts

@@ -0,0 +1,16 @@
+import { type AgySubscriptionRealm } from "./agySubscriptionRealm.js";
+import type { OrganizationRuntimeConfig } from "./organizationRuntime.js";
+export type AgyBootstrapInvocation = Readonly<{
+    args: readonly string[];
+    command: string;
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+}>;
+export declare const createAgyBootstrapInvocation: (input: {
+    busAddress: string;
+    executablePath: string;
+    runtimeHomePath: string;
+    workspacePath: string;
+}) => AgyBootstrapInvocation;
+export declare function runAgySubscriptionBootstrap(config: OrganizationRuntimeConfig, startRealm?: () => Promise<AgySubscriptionRealm>): Promise<void>;
+//# sourceMappingURL=agySubscriptionBootstrap.d.ts.map

package/dist/runtime/agySubscriptionBootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agySubscriptionBootstrap.d.ts","sourceRoot":"","sources":["../../src/runtime/agySubscriptionBootstrap.ts"],"names":[],"mappings":"AAGA,OAAO,EAA6B,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAG1E,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB,CAAC,CAAC;AAEH,eAAO,MAAM,4BAA4B,GAAI,OAAO;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;CACvB,KAAG,sBAaF,CAAC;AAEH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,yBAAyB,EACjC,UAAU,GAAE,MAAM,OAAO,CAAC,oBAAoB,CAA6B,GAC1E,OAAO,CAAC,IAAI,CAAC,CA2Cf"}

package/dist/runtime/agySubscriptionBootstrap.js

@@ -0,0 +1,80 @@
+import { spawnRealTime as spawn } from "./taskClockProcess.js";
+import { cliChildEnvironment } from "../pi/cliEnvironment.js";
+import { startAgySubscriptionRealm } from "./agySubscriptionRealm.js";
+import { prepareEngineExecutable, verifyAgySubscriptionEnrollment } from "./engineReadiness.js";
+import { prepareOrganizationRuntimePaths } from "./physicalReadiness.js";
+export const createAgyBootstrapInvocation = (input) => ({
+    args: [],
+    command: input.executablePath,
+    cwd: input.workspacePath,
+    env: {
+        ...cliChildEnvironment([], input.runtimeHomePath, {
+            dbusSessionBusAddress: input.busAddress,
+            engine: "agy",
+            engineHomePath: input.runtimeHomePath,
+            executablePath: input.executablePath
+        }),
+        TERM: process.env.TERM ?? "xterm-256color"
+    }
+});
+export async function runAgySubscriptionBootstrap(config, startRealm = startAgySubscriptionRealm) {
+    const agy = config.agents.find((agent) => agent.engine.kind === "agy");
+    if (agy === undefined)
+        throw new Error("AGY bootstrap requires an AGY agent in the runtime config");
+    const paths = await prepareOrganizationRuntimePaths(config.agents);
+    let realm;
+    let failure;
+    try {
+        realm = await startRealm();
+        const canonical = paths.forAgent(agy);
+        await canonical.verify();
+        const executable = await prepareEngineExecutable(agy.id, "agy");
+        const invocation = createAgyBootstrapInvocation({
+            busAddress: realm.busAddress,
+            executablePath: executable.executablePath,
+            runtimeHomePath: canonical.runtimeHomePath,
+            workspacePath: canonical.workspacePath
+        });
+        const child = spawn(invocation.command, invocation.args, {
+            cwd: invocation.cwd,
+            env: invocation.env,
+            stdio: "inherit"
+        });
+        const code = await waitForInteractiveChild(child);
+        if (code !== 0)
+            throw new Error("AGY interactive subscription enrollment did not complete");
+        await executable.verify();
+        await verifyAgySubscriptionEnrollment(agy.id, executable.executablePath, canonical.runtimeHomePath, realm.busAddress);
+        await canonical.verify();
+    }
+    catch (error) {
+        failure = error;
+    }
+    const cleanup = await Promise.allSettled([
+        realm?.close(),
+        paths.close()
+    ].filter((value) => value !== undefined));
+    const cleanupFailures = cleanup.flatMap((result) => result.status === "rejected" ? [result.reason] : []);
+    if (cleanupFailures.length > 0)
+        throw new AggregateError([
+            ...(failure === undefined ? [] : [failure]),
+            ...cleanupFailures
+        ], "AGY bootstrap cleanup failed");
+    if (failure !== undefined)
+        throw failure;
+}
+function waitForInteractiveChild(child) {
+    return new Promise((resolve, reject) => {
+        const forward = (signal) => { child.kill(signal); };
+        const onInterrupt = () => forward("SIGINT");
+        const onTerminate = () => forward("SIGTERM");
+        const cleanup = () => {
+            process.off("SIGINT", onInterrupt);
+            process.off("SIGTERM", onTerminate);
+        };
+        process.once("SIGINT", onInterrupt);
+        process.once("SIGTERM", onTerminate);
+        child.once("error", () => { cleanup(); reject(new Error("AGY interactive subscription enrollment could not start")); });
+        child.once("close", (code) => { cleanup(); resolve(code); });
+    });
+}

package/dist/runtime/agySubscriptionRealm.d.ts

@@ -0,0 +1,38 @@
+export type AgySubscriptionRealm = Readonly<{
+    busAddress: string;
+    close(): Promise<void>;
+}>;
+export type AgySubscriptionRealmOptions = Readonly<{
+    dbusDaemon?: string;
+    durablePath?: string;
+    flock?: string;
+    gnomeKeyringDaemon?: string;
+    shell?: string;
+    socketReady?: (socketPath: string) => Promise<boolean>;
+    temporaryRoot?: string;
+    unlockSecretPath?: string;
+}>;
+export declare const createAgyRealmCommands: (input: {
+    busSocketPath: string;
+    controlDirectory: string;
+    dbusDaemon?: string;
+    flock?: string;
+    gnomeKeyringDaemon?: string;
+    shell?: string;
+}) => Readonly<{
+    bus: {
+        command: string;
+        args: string[];
+    };
+    keyring: {
+        command: string;
+        args: string[];
+    };
+    lease: {
+        command: string;
+        args: string[];
+    };
+}>;
+export declare function startAgySubscriptionRealm(options?: AgySubscriptionRealmOptions): Promise<AgySubscriptionRealm>;
+export declare function readAgyRealmUnlockSecret(sourcePath: string): Promise<Buffer>;
+//# sourceMappingURL=agySubscriptionRealm.d.ts.map

package/dist/runtime/agySubscriptionRealm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agySubscriptionRealm.d.ts","sourceRoot":"","sources":["../../src/runtime/agySubscriptionRealm.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC,CAAC;AAUH,eAAO,MAAM,sBAAsB,GAAI,OAAO;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,KAAG,QAAQ,CAAC;IACX,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACzC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC7C,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC5C,CAkBC,CAAC;AAEH,wBAAsB,yBAAyB,CAC7C,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,oBAAoB,CAAC,CA6C/B;AAED,wBAAsB,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBlF"}