@noopolis/daimon 0.1.2 → 0.2.1

package/dist/runtime/codexSandboxProjection.js

@@ -0,0 +1,40 @@
+import path from "node:path";
+import { renderCodexArgs } from "../pi/cliEngineSpawn.js";
+import { codexSandboxProtectedPaths, codexSandboxReadablePaths } from "./engineDispatcher.js";
+import { engineHomeName, prepareEngineExecutable } from "./engineReadiness.js";
+import { parseOrganizationRuntimeConfig } from "./organizationRuntime.js";
+import { prepareOrganizationRuntimePaths } from "./physicalReadiness.js";
+export const CODEX_SANDBOX_PROJECTION_VERSION = "noopolis.daimon.codex-sandbox-projection.v1";
+/** Resolves the production command policy without importing auth or accepting a wake. */
+export async function resolveOrganizationCodexSandboxProjection(config, agentId, options) {
+    const parsed = parseOrganizationRuntimeConfig(config);
+    const selected = parsed.agents.find(agent => agent.id === agentId);
+    if (!selected || selected.engine.kind !== "codex" || selected.engine.codexSandbox === undefined) {
+        throw new Error("Sandbox projection requires a known strict Codex agent");
+    }
+    if (!path.isAbsolute(options.acceptanceStorePath))
+        throw new Error("Sandbox projection requires an absolute acceptance store path");
+    const authority = await prepareOrganizationRuntimePaths(parsed.agents);
+    try {
+        const paths = authority.forAgent(selected);
+        await paths.verify();
+        const agent = { ...selected, workspacePath: paths.workspacePath, runtimeHomePath: paths.runtimeHomePath };
+        const engineHomePath = path.join(agent.runtimeHomePath, engineHomeName("codex"));
+        const executable = await prepareEngineExecutable(agent.id, "codex");
+        // These are the same collectors, canonical roots and renderer used by
+        // startOrganizationRuntimeEngine and its strict production invocation.
+        const args = renderCodexArgs({ codexSandbox: agent.engine.codexSandbox,
+            codexSandboxProtectedPaths: codexSandboxProtectedPaths(agent.id, agent, engineHomePath, parsed.agents, [options.acceptanceStorePath]),
+            codexSandboxReadablePaths: codexSandboxReadablePaths(agent) }, agent.workspacePath, undefined);
+        const permissionConfig = args.find(arg => arg.startsWith("permissions="));
+        const profileName = JSON.parse(args.find(arg => arg.startsWith("default_permissions=")).slice("default_permissions=".length));
+        await paths.verify();
+        await executable.verify();
+        return { version: CODEX_SANDBOX_PROJECTION_VERSION, agentId, workspacePath: agent.workspacePath,
+            runtimeHomePath: agent.runtimeHomePath, engineHomePath, executablePath: executable.executablePath, profileName, permissionConfig,
+            sandboxArgs: ["sandbox", "-P", profileName, "-C", agent.workspacePath, "-c", permissionConfig] };
+    }
+    finally {
+        await authority.close();
+    }
+}

package/dist/runtime/contract-manifest.json

@@ -0,0 +1 @@
+{"activityResponseSchema":{"additionalProperties":false,"properties":{"items":{"items":{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"id":{"format":"uuid","pattern":"^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$","type":"string"},"kind":{"enum":["wake_started","wake_completed","wake_rejected","wake_aborted","agent_stopped"]},"occurredAt":{"format":"date-time","pattern":"^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$","type":"string"},"wakeId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"}},"required":["id","agentId","kind","occurredAt"],"type":"object"},"maxItems":100,"type":"array"},"nextCursor":{"maxLength":16,"minLength":1,"pattern":"^(0|[1-9][0-9]{0,15})$","type":"string"},"version":{"const":"noopolis.daimon.organization-runtime-activity.v1"}},"required":["version","items"],"type":"object"},"activityV2ResponseSchema":{"additionalProperties":false,"properties":{"executions":{"items":{"additionalProperties":false,"properties":{"agent_id":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"delivery_ids":{"items":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"maxItems":32,"type":"array"},"execution_id":{"type":"string"},"state":{"const":"running"}},"required":["agent_id","execution_id","state","delivery_ids"],"type":"object"},"maxItems":32,"type":"array"},"items":{"items":{"additionalProperties":false,"properties":{"acceptance_id":{"type":"string"},"accepted_at":{"format":"date-time","pattern":"^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$","type":"string"},"active":{"type":"boolean"},"agent_id":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"code":{"enum":["engine_failed","host_stopped","host_stopping","queued_wake_stopped","active_wake_aborted","queue_full","unknown_agent"]},"deferred":{"type":"boolean"},"delivery_id":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"execution_id":{"type":"string"},"queue_position":{"minimum":1,"type":"integer"},"request_digest":{"type":"string"},"state":{"enum":["accepted","running","completed","failed","stopped"]},"text":{"maxLength":16384,"type":"string"},"updated_at":{"format":"date-time","pattern":"^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$","type":"string"},"version":{"const":"noopolis.daimon.wake-receipt-status.v2"}},"required":["version","acceptance_id","agent_id","delivery_id","request_digest","state","accepted_at","updated_at","active"],"type":"object"},"maxItems":2112,"type":"array"},"state":{"enum":["running","stopped"]},"version":{"const":"noopolis.daimon.organization-runtime-activity.v2"}},"required":["version","items"],"type":"object"},"agySubscriptionRealm":{"directoryMode":448,"durableMountPath":"/var/lib/spawnfile/daimon/agy-subscription-realm","fileMode":384,"maxUnlockBytes":4096,"unlockMountPath":"/var/lib/spawnfile/daimon/agy-unlock-secret","unlockSourceSlot":"agy-unlock-secret"},"attention":{"accounting":"execution-start-reservations","busyDispatch":"bounded-pending-message-batch","completion":"explicit-per-delivery","defaultMaxBatchBytes":12000,"defaultMaxBatchMessages":8,"enabledBy":"agents[].attention","idleDispatch":"immediate","unhandled":"deferred-until-new-input"},"consumedConfigFields":["version","host.bindHost","host.port","host.controlTokenEnv","agents[].id","agents[].name","agents[].instructions","agents[].workspacePath","agents[].runtimeHomePath","agents[].engine.kind","agents[].engine.model","agents[].engine.reasoningEffort","agents[].engine.codexSandbox","agents[].schedule.kind","agents[].schedule.interval_ms","agents[].schedule.cron","agents[].schedule.timezone","agents[].schedule.prompt","agents[].schedule.jitter_seconds","agents[].mcp","agents[].moltnet","agents[].memory","agents[].attention","agents[].recording"],"deliverySemantics":{"activeDeliveryIdempotency":"unbounded-until-terminal","concurrentSameAgentTurns":false,"externalEffectsExactlyOnce":false,"recovery":"at-least-once-with-stable-wake-id","terminalReceiptHorizon":2048},"engineCredentialMaterial":{"codex":{"destinationRelativePath":".codex/auth.json","directoryMode":448,"fileMode":384,"sourceRelativePath":".daimon-inbound/codex-auth","sourceSlot":"codex-auth"}},"grokEngineBroker":{"artifacts":{"arm64Sha256":"d0dc1c03197c3e90f09b66ad7c89b4f7b448d06dc84c03b247dce976d6018d6e","sourceSha256":"15836d7ad69f12ef581a6e5b8635c9db43b2177dac609160c0749d3d1fefbaa8","x64Sha256":"95aa9c272225e74ff9f45f54dde4bc30aee324e9ba24d8a876db9151c81b454d"},"backendSocketPath":"/run/daimon-engine-broker/backend.sock","bounds":{"capabilityBundleBytes":8196,"capabilityBytes":4096,"outputBytes":262144,"promptBytes":65536},"controlProtocolVersion":"noopolis.daimon.engine-broker.v4","controlSocketPath":"/run/daimon-engine-broker/control.sock","credentialHomePath":"/var/lib/spawnfile/daimon/grok-subscription-realm","grokCliArtifacts":{"arm64":{"bytes":136090504,"sha256":"39ab87666877d64ef3a40aa60fbe0c3b6a6acd7001b78fe60e2c76bb6cfc4a94","url":"https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-aarch64"},"x64":{"bytes":163035648,"sha256":"be5905e107d2b8b5f3c142d21ecfe4c8fd32a913d2fd551b788707930c4dc80d","url":"https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-x86_64"}},"grokCliBuild":"3736acbc8658","grokCliVersion":"1.0.34","grokExecutablePath":"/usr/local/bin/grok","identities":{"brokerUid":2100,"firstWorkerUid":2200,"organizationUid":2000},"inferenceGrants":{"bodyMembers":["messages","model","reasoning_effort","response_format","stream","stream_options"],"client":{"configSha256":{"grok-4.5":{"high":"ffbc33728b821e9854fbc7c93601e599225da421ecfd6ebf10d314afcc28d6f2","low":"a07f7436f1268bb399ec233c65d3b3d8fb99a11a1f175f8da1ca133c9367bc74","medium":"1f4c0d4dad1f3b09419b5739db6423a09e0049abc091594c64123a75dd53dfb9"},"grok-4.6":{"high":"5652656effa82f0c4f09cf8226b16e6140332a5a358b571194bb5563312367ac","low":"79314d039f787e4ebfec7dacf57adc969086b948f564dec008f0ed6367e6062f","medium":"6f538de0547c0c4e6a3f04ae08595ceadadabb06b75f6b6ee4c428744bb95cd8"},"grok-build":{"high":"98d16f2b7d12f4eb540d625c853e51d227933e204923e43e8b9b4176f10aca2c","low":"ca15c6a562a008227d39c51d3a3a83715663089b3784e8b46debb1fb67b3c4a1","medium":"01783fb6beadcf6f8486fff0836820ad43fab5662b812a907fe9cfdb83e9804d"}},"envKey":"DAIMON_INFERENCE_GRANT","modelId":"daimon-inference-grok"},"failureCodes":["auth_stale","grant_limit","invalid_request","unavailable"],"ledgerDedupeKey":["grant","request"],"ledgerVersion":"noopolis.daimon.inference-usage.v1","limits":{"maxRequests":64,"maxTokens":2000000},"maxInFlightRequestsPerGrant":1,"maxLiveGrants":8,"messageRoles":["system","user","assistant"],"purposes":["judge","optimizer"],"requestKinds":["request_inference_grant","release_inference_grant"],"tokenPrefix":"inference_","ttlMs":600000},"launcherSocketPath":"/run/daimon-engine-broker/launcher.sock","mcpFacade":{"host":"127.0.0.1","path":"/mcp","port":43124},"nativeAbiVersion":2,"nativeExecutablePath":"/opt/daimon/bin/daimon-engine-broker","projectionVersion":"noopolis.daimon.grok-broker-projection.v3","providerProxy":{"host":"127.0.0.1","port":43123},"registrationPath":"/etc/daimon-engine-broker/registrations.bin","runRequestBudget":{"countsCredentialRetries":true,"fileName":"run-requests.json","includesInferenceGrants":true,"maximumField":"maxRunRequests","storeField":"runRequestStore"},"serviceConfigPath":"/etc/daimon-engine-broker/service.json","serviceConfigVersions":["noopolis.daimon.engine-broker-service.v1","noopolis.daimon.engine-broker-service.v2","noopolis.daimon.engine-broker-service.v3"],"slotPreflightVersion":"noopolis.daimon.grok-slot-preflight.v2","slotRouting":{"controlCaller":"organization","key":"slot","repeatedAgentIds":true,"resetRequest":"reset_slot","resetResponse":"slot_reset","slotEnvironment":"DAIMON_ENGINE_BROKER_SLOT","turnStoreDirectory":"slot-{slot}","workersMayControl":false},"turnLimits":{"bounds":{"maxRequests":[1,48],"maxTokens":[1,10000000],"timeoutMs":[1000,3600000]},"keys":["maxRequests","maxTokens","timeoutMs"],"limitReasons":["tokens","requests","timeout","none"],"maxInFlightRequests":1,"missingUsageEstimate":{"inputBytesPerToken":2,"outputTokens":4096},"requestUsageMaxTokens":500000,"tokenCeilingOvershoot":"at-most-one-request","v1Defaults":{"maxRequests":32,"maxTokens":300000,"timeoutMs":240000},"wakeMayOnlyLower":true},"turnRecordVersions":["noopolis.daimon.engine-broker-turn.v1","noopolis.daimon.engine-broker-turn.v2"],"turnStorePath":"/var/lib/spawnfile/daimon/grok-subscription-realm/turns","wakeLimitEnvironment":{"maxTokens":"DAIMON_ENGINE_WAKE_TOKEN_CEILING","timeoutMs":"DAIMON_ENGINE_WAKE_TIMEOUT_MS"},"worker":{"clockedConfigSha256":{"grok-4.5":{"high":"907d8967960c342b442d6d256b2585f3c85bd846a78578f596f0b605403d6d34","low":"3c4f3515b21c1bffb3fb770e2ecb4b918b6c43d5e77c1fd47e1e6698d1fedee7","medium":"9117e12b2f3f6fa045799592969cbaae1c2f3b1ea79330badac8655b9b41dd7a"},"grok-4.6":{"high":"203744f6f0dfc0bc80cfb896880497edfd9b3de4dcf33060e8ef4d2ef5f220a7","low":"751f1dcd04983e5e5883df5a8fefa04f201e187e5ef1f344d3bf83f950830432","medium":"f1406f93a8091eb0c09e07321254a9c783a89b0bbf5548d9613d53a8d087a517"},"grok-build":{"high":"6efddadc82c38020d3351829e54bb09fa456cd6d76ea1247902794d82a4a3ffa","low":"a8c63ba910623a0686930c27db0733f4a2588c7fca9dd7da25c3f18027720ab5","medium":"6afcd2b90c0d19794f8c0d22147a0f011946a92e613f89dae98b0ca729313101"}},"configSha256":{"grok-4.5":{"high":"c63c3387ce92d94ec3f690abfe98942afcd7c9e17ff84816bbe751f340ab251f","low":"8247127c3625ff7c5d8d527a53596b89ec6557a821ac46cfd00bd122b90daff6","medium":"59288cee61297bb8c002097061a48f77b09d310754187a253ee089f7172a9155"},"grok-4.6":{"high":"65b0212564fb74042b1503d293fb8d3620276033264c0efade2a539ca09218e3","low":"ab58499ac32678097c146479896f2b8a8e2b0e39aea22dc0a60b6227e370538e","medium":"df1a5cc84346e7f6bf6090492fbd19faaefb42953e3bb2e8c6cbc0572242403f"},"grok-build":{"high":"a23724e00d670caee185ba7690d2daa868173e53905cf446f5329666f01ab4e3","low":"fb343f2809903f26d21681470943235031f946e99085542fd89555eb7782cbb5","medium":"8a587ef75c90eab70d19b24583e60051d6fba9d90c558839fdbb15588b4cc656"}},"defaultModel":"grok-4.6","defaultReasoningEffort":"low","home":{"directory":{"group":"worker","mode":1017,"uid":0},"organizationRuntimeHome":{"group":"worker","mode":456,"owner":"organization"},"privateTmp":{"mode":448,"owner":"worker","relativeToWorkerHome":"tmp"},"readOnlyFiles":{"gid":0,"mode":292,"names":["config.toml","managed_config.toml","requirements.toml","sandbox.toml","trusted_folders.toml"],"uid":0},"sandboxEvents":{"group":"broker","mode":416,"owner":"worker","relativePath":"sessions/sandbox-events.jsonl"},"sessionsDirectory":{"group":"worker","mode":1017,"relativePath":"sessions","uid":0},"sharedTmp":{"maxGroupExclusive":2200,"mode":1020,"otherMode":4,"paths":["/tmp","/var/tmp"],"uid":0},"spillDirectory":{"fileMode":416,"group":"worker","mode":1512,"owner":"organization","relativeToRuntimeHome":"tool-output"}},"maxTurns":48,"modelId":"daimon-broker-grok","models":["grok-4.6","grok-4.5","grok-build"],"reasoningEfforts":["low","medium","high"],"systemPromptSha256":"2c31c0085a54a4efbf9c0cf0b8124c56e47f38691b7f0c7fa233a74abaa8ddf8","taskClock":{"directoryMode":493,"directoryPath":"/run/daimon-engine-broker/task-clock/slot-0","fileMode":420,"ownerUid":2100,"preloadPath":"/usr/local/lib/daimon/libfaketime.so.1","rootDirectoryPath":"/run/daimon-engine-broker/task-clock","slotDirectoryPattern":"/run/daimon-engine-broker/task-clock/slot-{slot}","slotFilePattern":"/run/daimon-engine-broker/task-clock/slot-{slot}/faketime","timestampFilePath":"/run/daimon-engine-broker/task-clock/slot-0/faketime","version":"noopolis.daimon.grok-broker-task-clock.v2","workerView":"own-directory-visible-sibling-directories-denied"},"toolIds":["run_terminal_cmd","read_file","grep","list_dir","search_tool","use_tool"],"visibleTools":["grep","list_dir","read_file","run_terminal_command","search_tool","use_tool"]}},"grokSubscriptionRealm":{"agentCredentialRelativePath":".grok/auth.json","bootstrapMountPath":"/var/lib/spawnfile/daimon/grok-bootstrap-auth","bootstrapSourceSlot":"grok-auth","directoryMode":448,"durableMountPath":"/var/lib/spawnfile/daimon/grok-subscription-realm","fileMode":384,"maxCredentialBytes":65536},"healthResponseSchema":{"additionalProperties":false,"properties":{"agents":{"items":{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"state":{"enum":["starting","running","stopping","stopped","idle","failed"]}},"required":["agentId","state"],"type":"object"},"maxItems":32,"type":"array"},"state":{"enum":["starting","running","stopping","stopped"]},"version":{"const":"noopolis.daimon.organization-runtime-health.v1"}},"required":["version","state","agents"],"type":"object"},"operatorDrain":{"authorization":"control-bearer","blockedReason":"operator_stop","drainRoute":"POST /v2/drain","queuedWakes":"retained","response":"workAvailabilityResponseSchema","resumeClearsOperatorStop":false,"resumeRoute":"POST /v2/resume","runningTurns":"finish","scope":"process"},"organizationRuntimeConfigSchema":{"$id":"noopolis.daimon.organization-runtime.v1","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"agents":{"items":{"additionalProperties":false,"properties":{"attention":{"additionalProperties":false,"properties":{"maxBatchBytes":{"maximum":12000,"minimum":1024,"type":"integer"},"maxBatchMessages":{"maximum":32,"minimum":1,"type":"integer"},"maxExecutions":{"maximum":9007199254740991,"minimum":1,"type":"integer"},"maxTokens":{"maximum":9007199254740991,"minimum":1,"type":"integer"}},"type":"object"},"engine":{"additionalProperties":false,"allOf":[{"if":{"properties":{"kind":{"const":"grok"}}},"then":{"dependentRequired":{"model":["reasoningEffort"],"reasoningEffort":["model"]},"properties":{"codexSandbox":false,"model":{"enum":["grok-4.6","grok-4.5","grok-build"]},"reasoningEffort":{"enum":["low","medium","high"]}}}},{"if":{"properties":{"kind":{"const":"agy"}}},"then":{"properties":{"codexSandbox":false,"model":false,"reasoningEffort":false}}}],"properties":{"codexSandbox":{"additionalProperties":false,"properties":{"mode":{"const":"workspace-write"},"networkAccess":{"const":false},"webSearch":{"const":"disabled"}},"required":["mode","networkAccess","webSearch"],"type":"object"},"kind":{"enum":["codex","grok","agy"]},"model":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"reasoningEffort":{"enum":["none","minimal","low","medium","high","xhigh","max","ultra","persistent"]}},"required":["kind"],"type":"object"},"id":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"instructions":{"maxLength":16384,"minLength":1,"pattern":"\\S","type":"string"},"mcp":{"items":{"additionalProperties":false,"properties":{"args":{"items":{"maxLength":4096,"type":"string"},"maxItems":32,"type":"array"},"authSecretEnv":{"pattern":"^[A-Za-z_][A-Za-z0-9_]*$","type":"string"},"command":{"pattern":"^/","type":"string"},"env":{"additionalProperties":{"type":"string"},"type":"object"},"name":{"maxLength":4096,"minLength":1,"type":"string"},"tools":{"items":{"maxLength":4096,"minLength":1,"type":"string"},"maxItems":32,"minItems":1,"type":"array","uniqueItems":true},"transport":{"enum":["stdio","sse","streamable_http"]},"url":{"type":"string"}},"required":["name","transport","args","env","tools"],"type":"object"},"maxItems":8,"type":"array"},"memory":{"additionalProperties":false,"properties":{"runtimeHomePath":{"maxLength":4096,"pattern":"^/","type":"string"},"source":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"tokenBudget":{"maximum":1000000,"minimum":1,"type":"integer"}},"required":["runtimeHomePath"],"type":"object"},"moltnet":{"additionalProperties":false,"properties":{"cliPath":{"pattern":"^/","type":"string"},"configPath":{"pattern":"^/","type":"string"},"networks":{"items":{"additionalProperties":false,"properties":{"dms":{"type":"boolean"},"id":{"minLength":1,"type":"string"},"rooms":{"items":{"minLength":1,"type":"string"},"type":"array","uniqueItems":true}},"required":["id","rooms","dms"],"type":"object"},"maxItems":16,"type":"array"}},"required":["cliPath","configPath","networks"],"type":"object"},"name":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"recording":{"additionalProperties":false,"properties":{"directory":{"maxLength":4096,"pattern":"^/[^\\u0000]*$","type":"string"},"keepMs":{"maximum":9007199254740991,"minimum":1,"type":"integer"},"snapshots":{"items":{"additionalProperties":false,"properties":{"id":{"pattern":"^[A-Za-z0-9._-]{1,128}$","type":"string"},"path":{"maxLength":4096,"pattern":"^/[^\\u0000]*$","type":"string"}},"required":["id","path"],"type":"object"},"maxItems":16,"type":"array","uniqueItems":true}},"required":["directory","keepMs","snapshots"],"type":"object"},"runtimeHomePath":{"maxLength":4096,"pattern":"^/","type":"string"},"workspacePath":{"maxLength":4096,"pattern":"^/","type":"string"}},"required":["id","name","instructions","workspacePath","runtimeHomePath","engine"],"type":"object"},"maxItems":32,"minItems":1,"type":"array"},"host":{"additionalProperties":false,"properties":{"bindHost":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"controlTokenEnv":{"maxLength":4096,"pattern":"^[A-Za-z_][A-Za-z0-9_]*$","type":"string"},"port":{"maximum":65535,"minimum":1,"type":"integer"}},"required":["bindHost","port","controlTokenEnv"],"type":"object"},"version":{"const":"noopolis.daimon.organization-runtime.v1"}},"required":["version","host","agents"],"type":"object"},"organizationRuntimeConfigV2Schema":{"$id":"noopolis.daimon.organization-runtime.v2","$schema":"https://json-schema.org/draft/2020-12/schema","additionalProperties":false,"properties":{"agents":{"items":{"additionalProperties":false,"properties":{"attention":{"additionalProperties":false,"properties":{"maxBatchBytes":{"maximum":12000,"minimum":1024,"type":"integer"},"maxBatchMessages":{"maximum":32,"minimum":1,"type":"integer"},"maxExecutions":{"maximum":9007199254740991,"minimum":1,"type":"integer"},"maxTokens":{"maximum":9007199254740991,"minimum":1,"type":"integer"}},"type":"object"},"engine":{"additionalProperties":false,"allOf":[{"if":{"properties":{"kind":{"const":"grok"}}},"then":{"dependentRequired":{"model":["reasoningEffort"],"reasoningEffort":["model"]},"properties":{"codexSandbox":false,"model":{"enum":["grok-4.6","grok-4.5","grok-build"]},"reasoningEffort":{"enum":["low","medium","high"]}}}},{"if":{"properties":{"kind":{"const":"agy"}}},"then":{"properties":{"codexSandbox":false,"model":false,"reasoningEffort":false}}}],"properties":{"codexSandbox":{"additionalProperties":false,"properties":{"mode":{"const":"workspace-write"},"networkAccess":{"const":false},"webSearch":{"const":"disabled"}},"required":["mode","networkAccess","webSearch"],"type":"object"},"kind":{"enum":["codex","grok","agy"]},"model":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"reasoningEffort":{"enum":["none","minimal","low","medium","high","xhigh","max","ultra","persistent"]}},"required":["kind"],"type":"object"},"id":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"instructions":{"maxLength":16384,"minLength":1,"pattern":"\\S","type":"string"},"mcp":{"items":{"additionalProperties":false,"properties":{"args":{"items":{"maxLength":4096,"type":"string"},"maxItems":32,"type":"array"},"authSecretEnv":{"pattern":"^[A-Za-z_][A-Za-z0-9_]*$","type":"string"},"command":{"pattern":"^/","type":"string"},"env":{"additionalProperties":{"type":"string"},"type":"object"},"name":{"maxLength":4096,"minLength":1,"type":"string"},"tools":{"items":{"maxLength":4096,"minLength":1,"type":"string"},"maxItems":32,"minItems":1,"type":"array","uniqueItems":true},"transport":{"enum":["stdio","sse","streamable_http"]},"url":{"type":"string"}},"required":["name","transport","args","env","tools"],"type":"object"},"maxItems":8,"type":"array"},"memory":{"additionalProperties":false,"properties":{"runtimeHomePath":{"maxLength":4096,"pattern":"^/","type":"string"},"source":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"tokenBudget":{"maximum":1000000,"minimum":1,"type":"integer"}},"required":["runtimeHomePath"],"type":"object"},"moltnet":{"additionalProperties":false,"properties":{"cliPath":{"pattern":"^/","type":"string"},"configPath":{"pattern":"^/","type":"string"},"networks":{"items":{"additionalProperties":false,"properties":{"dms":{"type":"boolean"},"id":{"minLength":1,"type":"string"},"rooms":{"items":{"minLength":1,"type":"string"},"type":"array","uniqueItems":true}},"required":["id","rooms","dms"],"type":"object"},"maxItems":16,"type":"array"}},"required":["cliPath","configPath","networks"],"type":"object"},"name":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"recording":{"additionalProperties":false,"properties":{"directory":{"maxLength":4096,"pattern":"^/[^\\u0000]*$","type":"string"},"keepMs":{"maximum":9007199254740991,"minimum":1,"type":"integer"},"snapshots":{"items":{"additionalProperties":false,"properties":{"id":{"pattern":"^[A-Za-z0-9._-]{1,128}$","type":"string"},"path":{"maxLength":4096,"pattern":"^/[^\\u0000]*$","type":"string"}},"required":["id","path"],"type":"object"},"maxItems":16,"type":"array","uniqueItems":true}},"required":["directory","keepMs","snapshots"],"type":"object"},"runtimeHomePath":{"maxLength":4096,"pattern":"^/","type":"string"},"schedule":{"oneOf":[{"additionalProperties":false,"properties":{"kind":{"const":"disabled"}},"required":["kind"],"type":"object"},{"additionalProperties":false,"properties":{"interval_ms":{"maximum":31536000000,"minimum":1,"type":"integer"},"jitter_seconds":{"maximum":3600,"minimum":0,"type":"integer"},"kind":{"const":"every"},"prompt":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"}},"required":["kind","interval_ms","prompt"],"type":"object"},{"additionalProperties":false,"properties":{"cron":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"jitter_seconds":{"maximum":3600,"minimum":0,"type":"integer"},"kind":{"const":"cron"},"prompt":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"timezone":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"}},"required":["kind","cron","timezone","prompt"],"type":"object"}]},"workspacePath":{"maxLength":4096,"pattern":"^/","type":"string"}},"required":["id","name","instructions","workspacePath","runtimeHomePath","engine","schedule"],"type":"object"},"maxItems":32,"minItems":1,"type":"array"},"host":{"additionalProperties":false,"properties":{"bindHost":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"controlTokenEnv":{"maxLength":4096,"pattern":"^[A-Za-z_][A-Za-z0-9_]*$","type":"string"},"port":{"maximum":65535,"minimum":1,"type":"integer"}},"required":["bindHost","port","controlTokenEnv"],"type":"object"},"version":{"const":"noopolis.daimon.organization-runtime.v2"}},"required":["version","host","agents"],"type":"object"},"supportedEngineKinds":["agy","codex","grok"],"version":"noopolis.daimon.runtime-contract-manifest.v5","wakeAcceptanceTypes":["manual","message","schedule","external"],"wakeMoments":{"captureDeadlineMs":60000,"completionSuffix":".complete","configField":"agents[].recording","finalizationDeadlineMs":1000,"maxManifestBytes":134217728,"maxRowBytes":4194304,"maxSnapshotEntries":200000,"maxSnapshotRoots":16,"rowsFile":"wake-moments.jsonl","snapshotsDirectory":"snapshots","version":"noopolis.daimon.wake-moment.v1"},"wakeRequestSchema":{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"event":{"additionalProperties":false,"properties":{"id":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"kind":{"enum":["manual","message","schedule","external"]},"occurredAt":{"format":"date-time","pattern":"^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$","type":"string"},"text":{"maxLength":4096,"type":"string"},"version":{"const":"noopolis.daimon.wake.v1"}},"required":["version","id","kind","text","occurredAt"],"type":"object"}},"required":["agentId","event"],"type":"object"},"wakeResultSchema":{"oneOf":[{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"durationMs":{"minimum":0,"type":"integer"},"status":{"const":"completed"},"text":{"maxLength":4096,"type":"string"},"version":{"const":"noopolis.daimon.wake-result.v1"},"wakeId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"}},"required":["version","status","agentId","wakeId","text","durationMs"],"type":"object"},{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"code":{"enum":["unauthorized","unknown_agent","queue_full","durable_inbox_required"]},"status":{"const":"rejected"},"version":{"const":"noopolis.daimon.wake-result.v1"},"wakeId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"}},"required":["version","status","agentId","wakeId","code"],"type":"object"},{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"type":"string"},"code":{"const":"invalid_request"},"status":{"const":"rejected"},"version":{"const":"noopolis.daimon.wake-result.v1"},"wakeId":{"maxLength":4096,"type":"string"}},"required":["version","status","agentId","wakeId","code"],"type":"object"},{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"code":{"enum":["host_stopping","host_stopped","queued_wake_stopped","active_wake_aborted"]},"status":{"const":"stopped"},"version":{"const":"noopolis.daimon.wake-result.v1"},"wakeId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"}},"required":["version","status","agentId","wakeId","code"],"type":"object"},{"additionalProperties":false,"properties":{"agentId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"},"code":{"const":"engine_failed"},"status":{"const":"failed"},"version":{"const":"noopolis.daimon.wake-result.v1"},"wakeId":{"maxLength":4096,"minLength":1,"pattern":"\\S","type":"string"}},"required":["version","status","agentId","wakeId","code"],"type":"object"}]},"workAvailabilityResponseSchema":{"additionalProperties":false,"properties":{"agents":{"items":{"additionalProperties":false,"properties":{"agent_id":{"type":"string"},"budget":{"additionalProperties":false,"properties":{"agent_executions_remaining":{"minimum":0,"type":"integer"},"agent_executions_used":{"minimum":0,"type":"integer"},"agent_tokens_remaining":{"minimum":0,"type":"integer"},"agent_tokens_used":{"minimum":0,"type":"integer"},"armed":{"type":"boolean"},"epoch":{"type":"string"},"executions_remaining":{"minimum":0,"type":"integer"},"executions_used":{"minimum":0,"type":"integer"},"reason":{"type":"string"},"state":{"enum":["available","paused","stopped"]},"tokens_remaining":{"minimum":0,"type":"integer"},"tokens_used":{"minimum":0,"type":"integer"}},"required":["armed","epoch","state","executions_used","executions_remaining","tokens_used","tokens_remaining","agent_executions_used","agent_tokens_used"],"type":"object"},"deferred":{"minimum":0,"type":"integer"},"error":{"type":"string"},"pending":{"minimum":0,"type":"integer"},"running":{"type":"boolean"}},"required":["agent_id","pending","running","deferred","budget"],"type":"object"},"maxItems":32,"type":"array"},"drain":{"additionalProperties":false,"properties":{"since":{"type":"string"},"state":{"enum":["draining","drained"]}},"required":["state","since"],"type":"object"},"state":{"enum":["running","paused","stopped"]},"version":{"const":"noopolis.daimon.work-availability.v1"}},"required":["version","state","agents"],"type":"object"},"workBlockedSchema":{"additionalProperties":false,"properties":{"reason":{"enum":["operator_stop","ledger_unavailable","host_stopping","host_stopped","queue_full"]},"retry_after_ms":{"maximum":300000,"minimum":1000,"type":"integer"},"version":{"const":"noopolis.daimon.work-blocked.v1"}},"required":["version","reason","retry_after_ms"],"type":"object"}}

package/dist/runtime/contract-manifest.sha256

@@ -0,0 +1 @@
+sha256:e39551277c6727c8807b1247e759f57addcee3f17f1405ebc927179647d64de6

package/dist/runtime/contractManifest.d.ts

@@ -0,0 +1,8 @@
+import { canonicalJson } from "../contracts/canonicalJson.js";
+import { AGY_SUBSCRIPTION_REALM, ENGINE_CREDENTIAL_MATERIAL, GROK_ENGINE_BROKER, GROK_SUBSCRIPTION_REALM, ORGANIZATION_RUNTIME_ACTIVITY_V2_VERSION, RUNTIME_CONTRACT_MANIFEST, RUNTIME_CONTRACT_MANIFEST_VERSION } from "../contracts/runtimeContractManifest.js";
+export { AGY_SUBSCRIPTION_REALM, canonicalJson, ENGINE_CREDENTIAL_MATERIAL, GROK_ENGINE_BROKER, GROK_SUBSCRIPTION_REALM, ORGANIZATION_RUNTIME_ACTIVITY_V2_VERSION, RUNTIME_CONTRACT_MANIFEST, RUNTIME_CONTRACT_MANIFEST_VERSION };
+export type RuntimeContractManifest = typeof RUNTIME_CONTRACT_MANIFEST;
+export type EngineCredentialKind = keyof typeof ENGINE_CREDENTIAL_MATERIAL;
+export type EngineCredentialSlot = (typeof ENGINE_CREDENTIAL_MATERIAL)[EngineCredentialKind]["sourceSlot"];
+export declare const canonicalRuntimeContractManifest: () => string;
+//# sourceMappingURL=contractManifest.d.ts.map

package/dist/runtime/contractManifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contractManifest.d.ts","sourceRoot":"","sources":["../../src/runtime/contractManifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,EACvB,wCAAwC,EACxC,yBAAyB,EACzB,iCAAiC,EAClC,MAAM,yCAAyC,CAAC;AAEjD,OAAO,EACL,sBAAsB,EACtB,aAAa,EACb,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,EACvB,wCAAwC,EACxC,yBAAyB,EACzB,iCAAiC,EAClC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,OAAO,yBAAyB,CAAC;AACvE,MAAM,MAAM,oBAAoB,GAAG,MAAM,OAAO,0BAA0B,CAAC;AAC3E,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,oBAAoB,CAAC,CAAC,YAAY,CAAC,CAAC;AAE3G,eAAO,MAAM,gCAAgC,QAAO,MAAkD,CAAC"}

package/dist/runtime/contractManifest.js

@@ -0,0 +1,4 @@
+import { canonicalJson } from "../contracts/canonicalJson.js";
+import { AGY_SUBSCRIPTION_REALM, ENGINE_CREDENTIAL_MATERIAL, GROK_ENGINE_BROKER, GROK_SUBSCRIPTION_REALM, ORGANIZATION_RUNTIME_ACTIVITY_V2_VERSION, RUNTIME_CONTRACT_MANIFEST, RUNTIME_CONTRACT_MANIFEST_VERSION } from "../contracts/runtimeContractManifest.js";
+export { AGY_SUBSCRIPTION_REALM, canonicalJson, ENGINE_CREDENTIAL_MATERIAL, GROK_ENGINE_BROKER, GROK_SUBSCRIPTION_REALM, ORGANIZATION_RUNTIME_ACTIVITY_V2_VERSION, RUNTIME_CONTRACT_MANIFEST, RUNTIME_CONTRACT_MANIFEST_VERSION };
+export const canonicalRuntimeContractManifest = () => canonicalJson(RUNTIME_CONTRACT_MANIFEST);

package/dist/runtime/engineBrokerCapabilities.d.ts

@@ -0,0 +1,40 @@
+/**
+ * How long a turn's capabilities outlive the turn's own wall-clock limit.
+ *
+ * A capability that expires before its turn does strands the worker mid-turn:
+ * on 2026-10-05 a 30-minute turn kept a fixed 15-minute grant, lost every tool
+ * at minute 16 (MCP 403, mcp_refused=expired) and then timed out unfiled. The
+ * turn timer is what ends a turn; the grant only has to not end it first.
+ */
+export declare const ENGINE_BROKER_CAPABILITY_TTL_MARGIN_MS = 60000;
+export declare const engineBrokerCapabilityTtlMs: (turnTimeoutMs: number) => number;
+export declare class EngineBrokerCapabilities {
+    private readonly grants;
+    issue(agentId: string, turnId: string, ttlMs?: number, maxRequests?: number): string;
+    authorize(agentId: string, turnId: string, token: string): boolean;
+    authorizeToken(token: string): Readonly<{
+        agentId: string;
+        turnId: string;
+    }> | undefined;
+    /**
+     * Which grant a token names and why it would be refused, *without* spending
+     * it.
+     *
+     * The facade needs this on its refusal path alone. A 403 it cannot attribute
+     * to a turn is a 403 that seals as nothing at all, and a turn whose every
+     * request was refused then reads exactly like a healthy one — the silence
+     * `engineBrokerMcpCallLog.ts` exists to end. A token no grant matches names
+     * no turn and stays unattributed; nothing here returns the token, the grant
+     * or the agent's capability, only the turn id and a closed reason.
+     */
+    classifyToken(token: string): Readonly<{
+        turnId: string;
+        state: "live" | "expired" | "exhausted";
+    }> | undefined;
+    inspectToken(token: string): Readonly<{
+        agentId: string;
+        turnId: string;
+    }> | undefined;
+    revoke(turnId: string): void;
+}
+//# sourceMappingURL=engineBrokerCapabilities.d.ts.map

package/dist/runtime/engineBrokerCapabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engineBrokerCapabilities.d.ts","sourceRoot":"","sources":["../../src/runtime/engineBrokerCapabilities.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,eAAO,MAAM,sCAAsC,QAAS,CAAC;AAC7D,eAAO,MAAM,2BAA2B,GAAI,eAAe,MAAM,KAAG,MAAgE,CAAC;AAIrI,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmD;IAC1E,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,SAAc,EAAE,WAAW,SAAK,GAAG,MAAM;IAMrF,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO;IAKlE,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,SAAS;IAQxF;;;;;;;;;;OAUG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAAA;KAAE,CAAC,GAAG,SAAS;IAW/G,YAAY,CAAC,KAAK,EAAC,MAAM,GAAE,QAAQ,CAAC;QAAC,OAAO,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,MAAM,CAAA;KAAC,CAAC,GAAC,SAAS;IAC7E,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;CAC7B"}

package/dist/runtime/engineBrokerCapabilities.js

@@ -0,0 +1,69 @@
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
+/**
+ * How long a turn's capabilities outlive the turn's own wall-clock limit.
+ *
+ * A capability that expires before its turn does strands the worker mid-turn:
+ * on 2026-10-05 a 30-minute turn kept a fixed 15-minute grant, lost every tool
+ * at minute 16 (MCP 403, mcp_refused=expired) and then timed out unfiled. The
+ * turn timer is what ends a turn; the grant only has to not end it first.
+ */
+export const ENGINE_BROKER_CAPABILITY_TTL_MARGIN_MS = 60_000;
+export const engineBrokerCapabilityTtlMs = (turnTimeoutMs) => turnTimeoutMs + ENGINE_BROKER_CAPABILITY_TTL_MARGIN_MS;
+export class EngineBrokerCapabilities {
+    grants = new Map();
+    issue(agentId, turnId, ttlMs = 15 * 60_000, maxRequests = 64) {
+        if (ttlMs < 1 || maxRequests < 1)
+            throw new TypeError("invalid broker capability policy");
+        const token = randomBytes(32).toString("base64url");
+        this.grants.set(turnId, { agentId, turnId, digest: hash(token), expiresAt: Date.now() + ttlMs, maxRequests, requests: 0 });
+        return token;
+    }
+    authorize(agentId, turnId, token) {
+        const grant = this.grants.get(turnId);
+        const candidate = hash(token);
+        if (grant === undefined || grant.agentId !== agentId || grant.expiresAt <= Date.now() || grant.requests >= grant.maxRequests || !timingSafeEqual(grant.digest, candidate))
+            return false;
+        grant.requests += 1;
+        return true;
+    }
+    authorizeToken(token) {
+        const candidate = hash(token);
+        for (const grant of this.grants.values()) {
+            if (grant.expiresAt <= Date.now() || grant.requests >= grant.maxRequests || !timingSafeEqual(grant.digest, candidate))
+                continue;
+            grant.requests += 1;
+            return { agentId: grant.agentId, turnId: grant.turnId };
+        }
+        return undefined;
+    }
+    /**
+     * Which grant a token names and why it would be refused, *without* spending
+     * it.
+     *
+     * The facade needs this on its refusal path alone. A 403 it cannot attribute
+     * to a turn is a 403 that seals as nothing at all, and a turn whose every
+     * request was refused then reads exactly like a healthy one — the silence
+     * `engineBrokerMcpCallLog.ts` exists to end. A token no grant matches names
+     * no turn and stays unattributed; nothing here returns the token, the grant
+     * or the agent's capability, only the turn id and a closed reason.
+     */
+    classifyToken(token) {
+        const candidate = hash(token);
+        for (const grant of this.grants.values()) {
+            if (!timingSafeEqual(grant.digest, candidate))
+                continue;
+            // Budget before expiry: the TTL outlives every declared turn limit, so an
+            // exhausted grant is the reachable refusal and the actionable answer.
+            if (grant.requests >= grant.maxRequests)
+                return { turnId: grant.turnId, state: "exhausted" };
+            return { turnId: grant.turnId, state: grant.expiresAt <= Date.now() ? "expired" : "live" };
+        }
+        return undefined;
+    }
+    inspectToken(token) { const candidate = hash(token); for (const grant of this.grants.values()) {
+        if (grant.expiresAt > Date.now() && grant.requests < grant.maxRequests && timingSafeEqual(grant.digest, candidate))
+            return { agentId: grant.agentId, turnId: grant.turnId };
+    } return undefined; }
+    revoke(turnId) { const grant = this.grants.get(turnId); grant?.digest.fill(0); this.grants.delete(turnId); }
+}
+const hash = (value) => createHash("sha256").update(value).digest();

package/dist/runtime/engineBrokerControlClient.d.ts

@@ -0,0 +1,55 @@
+import { type Socket } from "node:net";
+import type { EngineBrokerInferenceFailureCode, EngineBrokerInferenceResponse } from "./engineBrokerInferenceProtocol.js";
+import type { EngineBrokerTurnLimitOverrides } from "./engineBrokerTurnAccounting.js";
+import type { GrokBrokerModel, GrokBrokerReasoningEffort } from "./grokBrokerModelPolicy.js";
+import type { GrokInferencePurpose } from "./inferenceUsageLedger.js";
+import type { GrokBrokerProviderClockObservation } from "./grokBrokerProviderClock.js";
+export type EngineBrokerInferenceGrant = Omit<Extract<EngineBrokerInferenceResponse, {
+    kind: "inference_grant";
+}>, "version" | "kind" | "requestId">;
+/** A refused grant request; `code` is closed (`auth_stale` is the stale shared realm, `grant_limit` the live-grant cap). */
+export declare class EngineBrokerInferenceGrantRefused extends Error {
+    readonly code: EngineBrokerInferenceFailureCode;
+    constructor(code: EngineBrokerInferenceFailureCode);
+}
+/**
+ * What the organization runtime asks of a brokered turn beyond the prompt:
+ * `limits` may only lower the registration's declared limits, and `model`,
+ * when the agent declared one, must equal the model the broker sealed.
+ */
+export type EngineBrokerTurnOptions = Readonly<{
+    limits?: EngineBrokerTurnLimitOverrides;
+    model?: string;
+    processClock?: string;
+    slot?: number;
+    /** Sealed observation on completion, failure and replay; sink errors never change the turn. */
+    onProviderClock?: (observation: GrokBrokerProviderClockObservation) => void;
+}>;
+export interface EngineBrokerTurnClient {
+    turn(agentId: string, wakeId: string, prompt: string, mcpEndpoint: string, signal?: AbortSignal, options?: EngineBrokerTurnOptions): Promise<string>;
+}
+export declare class EngineBrokerControlClient implements EngineBrokerTurnClient {
+    private readonly socketPath;
+    /** Internal transport seam; the production client always opens the Unix socket. */
+    private readonly connect;
+    constructor(socketPath?: string, 
+    /** Internal transport seam; the production client always opens the Unix socket. */
+    connect?: (path: string) => Socket);
+    ready(): Promise<void>;
+    /**
+     * Evaluator side (organization uid only; the native relay enforces it):
+     * borrow the broker credential for one sequential lane of judge or optimizer
+     * requests. Refusals reject with {@link EngineBrokerInferenceGrantRefused};
+     * a broker that cannot answer rejects with `engine broker unavailable`.
+     */
+    requestInferenceGrant(request: Readonly<{
+        model: GrokBrokerModel;
+        reasoningEffort: GrokBrokerReasoningEffort;
+        purpose: GrokInferencePurpose;
+    }>): Promise<EngineBrokerInferenceGrant>;
+    releaseInferenceGrant(grantId: string): Promise<boolean>;
+    resetSlot(slot: number): Promise<void>;
+    private exchange;
+    turn(agentId: string, wakeId: string, prompt: string, mcpEndpoint: string, signal?: AbortSignal, options?: EngineBrokerTurnOptions): Promise<string>;
+}
+//# sourceMappingURL=engineBrokerControlClient.d.ts.map

package/dist/runtime/engineBrokerControlClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engineBrokerControlClient.d.ts","sourceRoot":"","sources":["../../src/runtime/engineBrokerControlClient.ts"],"names":[],"mappings":"AACA,OAAO,EAAoB,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AAEzD,OAAO,KAAK,EAAE,gCAAgC,EAAgC,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAExJ,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACtF,OAAO,KAAK,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAC7F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8BAA8B,CAAC;AAevF,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,WAAW,CAAC,CAAC;AACrJ,4HAA4H;AAC5H,qBAAa,iCAAkC,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,gCAAgC;gBAAtC,IAAI,EAAE,gCAAgC;CAC5D;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAC7C,MAAM,CAAC,EAAE,8BAA8B,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAC9F,+FAA+F;IAC/F,eAAe,CAAC,EAAE,CAAC,WAAW,EAAE,kCAAkC,KAAK,IAAI,CAAC;CAC7E,CAAC,CAAC;AACH,MAAM,WAAW,sBAAsB;IAAG,IAAI,CAAC,OAAO,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,WAAW,EAAC,MAAM,EAAC,MAAM,CAAC,EAAC,WAAW,EAAC,OAAO,CAAC,EAAC,uBAAuB,GAAE,OAAO,CAAC,MAAM,CAAC,CAAC;CAAE;AACrL,qBAAa,yBAA0B,YAAW,sBAAsB;IAEpE,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,mFAAmF;IACnF,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAFP,UAAU,SAA2C;IACtE,mFAAmF;IAClE,OAAO,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAA6C;IAErF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA8B5B;;;;;OAKG;IACG,qBAAqB,CAAC,OAAO,EAAC,QAAQ,CAAC;QAAC,KAAK,EAAC,eAAe,CAAC;QAAA,eAAe,EAAC,yBAAyB,CAAC;QAAA,OAAO,EAAC,oBAAoB,CAAA;KAAC,CAAC,GAAE,OAAO,CAAC,0BAA0B,CAAC;IAM3K,qBAAqB,CAAC,OAAO,EAAC,MAAM,GAAE,OAAO,CAAC,OAAO,CAAC;IAMtD,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5C,OAAO,CAAC,QAAQ;IA6BV,IAAI,CACR,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EACpE,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,GAAE,uBAA4B,GAC1D,OAAO,CAAC,MAAM,CAAC;CA+EnB"}

package/dist/runtime/engineBrokerControlClient.js

@@ -0,0 +1,228 @@
+import { createHash, randomUUID } from "node:crypto";
+import { createConnection } from "node:net";
+import { ENGINE_BROKER_VERSION, EngineBrokerProtocolMismatch, encodeEngineBrokerFrame, EngineBrokerFrameDecoder, parseEngineBrokerResponse, parseEngineBrokerSlot } from "./engineBrokerProtocol.js";
+import { ENGINE_BROKER_MCP_REFUSAL_REASONS } from "./engineBrokerMcpCallLog.js";
+/**
+ * What the broker saw of the worker's MCP tool calls on a failed turn
+ * (`engineBrokerMcpCallLog.ts`). Absent for a turn with no observation at all;
+ * `outstanding` names every call that started and was never answered, with how
+ * long it had been waiting — the one thing a completion-only tool receipt can
+ * never say.
+ */
+const renderMcpCalls = (calls) => calls === undefined ? "" : `; mcp=${calls.answered}/${calls.started} answered${calls.undecoded === 0 ? "" : `; mcp_undecoded=${calls.undecoded}`}${calls.outstanding.length === 0 ? "" : `; mcp_outstanding=${calls.outstanding.map((call) => `${call.name}@${call.outstandingMs}ms`).join(",")}`}${renderMcpRefusals(calls.refusals)}${renderMcpTunnels(calls.tunnels)}`;
+/** The refusals the facade never relayed, by reason class, and only the classes that happened: a turn refused 403 must not read as a turn that was served. */
+const renderMcpRefusals = (refusals) => { if (refusals === undefined)
+    return ""; const named = ENGINE_BROKER_MCP_REFUSAL_REASONS.filter((reason) => refusals[reason] > 0); return named.length === 0 ? "" : `; mcp_refused=${named.map((reason) => `${reason}:${refusals[reason]}`).join(",")}`; };
+/** The session's GET SSE tunnels: how many closed of how many opened, and each one still open with its age and whether the mount ever pushed through it. */
+const renderMcpTunnels = (tunnels) => tunnels === undefined ? "" : `; mcp_get=${tunnels.closed}/${tunnels.opened} closed, ${tunnels.delivered} delivered${tunnels.open.length === 0 ? "" : `; mcp_get_open=${tunnels.open.map((tunnel) => `${tunnel.openMs}ms/${tunnel.delivered ? "delivered" : "silent"}`).join(",")}`}`;
+/** A refused grant request; `code` is closed (`auth_stale` is the stale shared realm, `grant_limit` the live-grant cap). */
+export class EngineBrokerInferenceGrantRefused extends Error {
+    code;
+    constructor(code) {
+        super(`engine broker inference grant refused (${code})`);
+        this.code = code;
+    }
+}
+export class EngineBrokerControlClient {
+    socketPath;
+    connect;
+    constructor(socketPath = "/run/daimon-engine-broker/control.sock", 
+    /** Internal transport seam; the production client always opens the Unix socket. */
+    connect = (path) => createConnection({ path })) {
+        this.socketPath = socketPath;
+        this.connect = connect;
+    }
+    async ready() {
+        const requestId = randomUUID();
+        const socket = this.connect(this.socketPath);
+        const decoder = new EngineBrokerFrameDecoder();
+        await new Promise((resolve, reject) => {
+            let settled = false;
+            const fail = (error) => {
+                if (settled)
+                    return;
+                settled = true;
+                socket.destroy();
+                reject(controlFailure(error));
+            };
+            socket.once("error", fail);
+            socket.once("close", fail);
+            socket.once("connect", () => socket.write(encodeEngineBrokerFrame({
+                version: ENGINE_BROKER_VERSION, kind: "health", requestId
+            })));
+            socket.on("data", (chunk) => {
+                try {
+                    for (const value of decoder.push(chunk)) {
+                        const response = parseEngineBrokerResponse(value);
+                        if (response.kind !== "ready" || response.requestId !== requestId || settled)
+                            throw new Error();
+                        settled = true;
+                        socket.destroy();
+                        resolve();
+                    }
+                }
+                catch (error) {
+                    fail(error);
+                }
+            });
+        });
+    }
+    /**
+     * Evaluator side (organization uid only; the native relay enforces it):
+     * borrow the broker credential for one sequential lane of judge or optimizer
+     * requests. Refusals reject with {@link EngineBrokerInferenceGrantRefused};
+     * a broker that cannot answer rejects with `engine broker unavailable`.
+     */
+    async requestInferenceGrant(request) {
+        const response = await this.exchange({ version: ENGINE_BROKER_VERSION, kind: "request_inference_grant", requestId: randomUUID(), model: request.model, reasoningEffort: request.reasoningEffort, purpose: request.purpose });
+        if (response.kind === "inference_grant_refused")
+            throw new EngineBrokerInferenceGrantRefused(response.code);
+        if (response.kind !== "inference_grant" || response.model !== request.model || response.reasoningEffort !== request.reasoningEffort || response.purpose !== request.purpose)
+            throw new Error(`engine broker unavailable (requires control protocol ${ENGINE_BROKER_VERSION})`);
+        const { version: _version, kind: _kind, requestId: _requestId, ...grant } = response;
+        return grant;
+    }
+    async releaseInferenceGrant(grantId) {
+        const response = await this.exchange({ version: ENGINE_BROKER_VERSION, kind: "release_inference_grant", requestId: randomUUID(), grantId });
+        if (response.kind === "inference_grant_refused")
+            throw new EngineBrokerInferenceGrantRefused(response.code);
+        if (response.kind !== "inference_grant_released" || response.grantId !== grantId)
+            throw new Error(`engine broker unavailable (requires control protocol ${ENGINE_BROKER_VERSION})`);
+        return response.released;
+    }
+    async resetSlot(slot) {
+        const response = await this.exchange({ version: ENGINE_BROKER_VERSION, kind: "reset_slot", requestId: randomUUID(), slot: parseEngineBrokerSlot(slot) });
+        if (response.kind !== "slot_reset" || response.slot !== slot)
+            throw new Error("engine broker reset unavailable");
+    }
+    exchange(request) {
+        const socket = this.connect(this.socketPath);
+        const decoder = new EngineBrokerFrameDecoder();
+        return new Promise((resolve, reject) => {
+            let settled = false;
+            const fail = (error) => {
+                if (settled)
+                    return;
+                settled = true;
+                socket.destroy();
+                reject(controlFailure(error));
+            };
+            socket.once("error", fail);
+            socket.once("close", fail);
+            socket.once("connect", () => socket.write(encodeEngineBrokerFrame(request)));
+            socket.on("data", (chunk) => {
+                try {
+                    for (const value of decoder.push(chunk)) {
+                        const response = parseEngineBrokerResponse(value);
+                        if (settled || response.requestId !== request.requestId ||
+                            (response.kind !== "inference_grant" && response.kind !== "inference_grant_released" &&
+                                response.kind !== "inference_grant_refused" && response.kind !== "slot_reset"))
+                            throw new Error();
+                        settled = true;
+                        socket.destroy();
+                        resolve(response);
+                    }
+                }
+                catch (error) {
+                    fail(error);
+                }
+            });
+        });
+    }
+    async turn(agentId, wakeId, prompt, mcpEndpoint, signal, options = {}) {
+        const configured = process.env.DAIMON_ENGINE_BROKER_SLOT;
+        const slot = options.slot ?? (configured === undefined ? undefined : parseEngineBrokerSlot(/^(0|[1-9][0-9]*)$/u.test(configured) ? Number(configured) : NaN));
+        if (slot !== undefined)
+            parseEngineBrokerSlot(slot);
+        const turnId = createHash("sha256").update(`${slot === undefined ? "" : `${slot}\0`}${agentId}\0${wakeId}`).digest("hex");
+        const requestId = randomUUID();
+        const request = {
+            version: ENGINE_BROKER_VERSION, kind: "start_turn", requestId, turnId, agentId, wakeId, prompt, mcpEndpoint,
+            ...(slot === undefined ? {} : { slot }),
+            ...(options.limits === undefined ? {} : { limits: options.limits }),
+            ...(options.processClock === undefined ? {} : { processClock: options.processClock })
+        };
+        const socket = this.connect(this.socketPath);
+        const decoder = new EngineBrokerFrameDecoder();
+        return new Promise((resolve, reject) => {
+            let accepted = false;
+            let settled = false;
+            const fail = (error) => {
+                if (settled)
+                    return;
+                settled = true;
+                cleanup();
+                reject(controlFailure(error));
+            };
+            const cleanup = () => {
+                signal?.removeEventListener("abort", abort);
+                socket.destroy();
+            };
+            const abort = () => fail();
+            signal?.addEventListener("abort", abort, { once: true });
+            if (signal?.aborted)
+                return abort();
+            socket.once("connect", () => socket.write(encodeEngineBrokerFrame(request)));
+            socket.on("data", (chunk) => {
+                try {
+                    for (const value of decoder.push(chunk)) {
+                        const response = parseEngineBrokerResponse(value);
+                        if ((response.kind !== "accepted" && response.kind !== "completed" && response.kind !== "failed") ||
+                            response.requestId !== requestId || response.turnId !== turnId)
+                            throw new Error();
+                        if (response.kind === "accepted") {
+                            if (accepted)
+                                throw new Error();
+                            accepted = true;
+                            continue;
+                        }
+                        if (!accepted || settled)
+                            throw new Error();
+                        settled = true;
+                        cleanup();
+                        if (response.providerClock !== undefined) {
+                            try {
+                                options.onProviderClock?.(response.providerClock);
+                            }
+                            catch { /* Observation cannot discard a terminal result. */ }
+                        }
+                        if (options.model !== undefined && response.model !== options.model) {
+                            reject(new Error(`engine broker turn used model ${response.model}, not the declared ${options.model}`));
+                            return;
+                        }
+                        if (response.kind === "completed") {
+                            if (response.cleanupDiagnostic !== undefined) {
+                                try {
+                                    console.warn(`daimon: engine broker ${response.cleanupDiagnostic}`);
+                                }
+                                catch {
+                                    // An operational warning must not discard completed work.
+                                }
+                            }
+                            resolve(response.text);
+                        }
+                        else {
+                            const limit = response.limitReason === "none" ? "" : `; limit=${response.limitReason}`;
+                            const detail = response.diagnostic;
+                            const reason = detail?.reason === undefined ? "" : `; reason=${detail.reason}`;
+                            const diagnostic = detail === undefined ? "" :
+                                `; ${detail.stage}/${detail.failureClass}; exit=${detail.exitCode}; signal=${detail.termSignal}${reason}`;
+                            const cleanupDiagnostic = response.cleanupDiagnostic === undefined ? "" : `; ${response.cleanupDiagnostic}`;
+                            reject(new Error(`engine broker turn failed (${response.code}${limit}${diagnostic}${renderMcpCalls(response.mcpCalls)}${cleanupDiagnostic})`));
+                        }
+                    }
+                }
+                catch (error) {
+                    fail(error);
+                }
+            });
+            socket.once("error", fail);
+            socket.once("close", () => { if (!settled)
+                fail(); });
+        });
+    }
+}
+function controlFailure(error) {
+    return error instanceof EngineBrokerProtocolMismatch ? error :
+        new Error(`engine broker unavailable (requires control protocol ${ENGINE_BROKER_VERSION})`);
+}

package/dist/runtime/engineBrokerCredentialJournal.d.ts

@@ -0,0 +1,12 @@
+export type BrokerCredentialJournal = Readonly<{
+    version: "noopolis.daimon.broker-credential-journal.v1";
+    state: "refreshing" | "promoted" | "stale";
+    generation: number;
+    sourceDigest: string;
+    promotedDigest?: string;
+    ancestorDigests?: readonly string[];
+}>;
+export declare const BROKER_CREDENTIAL_MAX_ANCESTORS = 900;
+export declare function parseBrokerCredentialJournal(value: unknown): BrokerCredentialJournal;
+export declare function recoverBrokerCredentialJournal(journal: BrokerCredentialJournal, authorityDigest: string): "ready" | "stale";
+//# sourceMappingURL=engineBrokerCredentialJournal.d.ts.map

package/dist/runtime/engineBrokerCredentialJournal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engineBrokerCredentialJournal.d.ts","sourceRoot":"","sources":["../../src/runtime/engineBrokerCredentialJournal.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,8CAA8C,CAAC;IAAC,KAAK,EAAE,YAAY,GAAG,UAAU,GAAG,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AAEhQ,eAAO,MAAM,+BAA+B,MAAM,CAAC;AAGnD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAWpF;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAI3H"}

package/dist/runtime/engineBrokerCredentialJournal.js

@@ -0,0 +1,26 @@
+// At most 61 KiB including the rest of the record; all readers allow 64 KiB.
+export const BROKER_CREDENTIAL_MAX_ANCESTORS = 900;
+const DIGEST = /^[a-f0-9]{64}$/u;
+export function parseBrokerCredentialJournal(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        throw new TypeError("invalid credential journal");
+    const input = value;
+    const fields = input.state === "refreshing" ? ["version", "state", "generation", "sourceDigest"] : ["version", "state", "generation", "sourceDigest", "promotedDigest"];
+    if (Object.hasOwn(input, "ancestorDigests")) {
+        fields.push("ancestorDigests");
+        if (!Array.isArray(input.ancestorDigests) || input.ancestorDigests.length > BROKER_CREDENTIAL_MAX_ANCESTORS ||
+            input.ancestorDigests.some((entry) => typeof entry !== "string" || !DIGEST.test(entry)) ||
+            new Set(input.ancestorDigests).size !== input.ancestorDigests.length)
+            throw new TypeError("invalid credential journal");
+    }
+    if (Object.keys(input).length !== fields.length || fields.some((key) => !Object.hasOwn(input, key)) || input.version !== "noopolis.daimon.broker-credential-journal.v1" || !["refreshing", "promoted", "stale"].includes(String(input.state)) || !Number.isSafeInteger(input.generation) || input.generation < 0 || !DIGEST.test(String(input.sourceDigest)) || (input.state !== "refreshing" && !DIGEST.test(String(input.promotedDigest))))
+        throw new TypeError("invalid credential journal");
+    return input;
+}
+export function recoverBrokerCredentialJournal(journal, authorityDigest) {
+    if (journal.state === "stale")
+        return "stale";
+    if (journal.state === "refreshing")
+        return authorityDigest === journal.sourceDigest ? "ready" : "stale";
+    return authorityDigest === journal.promotedDigest ? "ready" : "stale";
+}