@noopolis/daimon 0.1.2 → 0.2.1

package/dist/runtime/organizationRuntime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationRuntime.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,YAAY,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EACL,4CAA4C,EAC5C,sDAAsD,EACtD,kCAAkC,EAClC,qCAAqC,EACrC,+BAA+B,EAC/B,qCAAqC,EACrC,gDAAgD,EAChD,qCAAqC,EACrC,0CAA0C,EAC1C,wCAAwC,EACxC,6CAA6C,EAC7C,gDAAgD,EAChD,+BAA+B,EAC/B,4BAA4B,EAC7B,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACL,4CAA4C,EAC5C,sDAAsD,EACtD,kCAAkC,EAClC,qCAAqC,EACrC,+BAA+B,EAC/B,qCAAqC,EACrC,gDAAgD,EAChD,qCAAqC,EACrC,0CAA0C,EAC1C,wCAAwC,EACxC,6CAA6C,EAC7C,gDAAgD,EAChD,+BAA+B,EAC/B,4BAA4B,EAC7B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AACrE;;;;;;;GAOG;AACH,MAAM,MAAM,qCAAqC,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,aAAa,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AACvI,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,6BAA6B,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,qCAAqC,CAAA;CAAE,CAAC,CAAC;AAChM,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,GAAG,KAAK,GAAG,iBAAiB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AACxQ,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,SAAS,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,CAAC,EAAE,CAAA;CAAE,CAAC,CAAC;AAClL,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACrH,MAAM,MAAM,2BAA2B,GACnC,QAAQ,CAAC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,GAC9B,QAAQ,CAAC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GACzF,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACxG,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,+BAA+B,CAAC;IAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IAAC,GAAG,CAAC,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,0BAA0B,CAAC;IAAC,MAAM,CAAC,EAAE,yBAAyB,CAAA;CAAE,CAAC,CAAC;AACla,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,CAAC,2DAA2D;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC9K,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,4BAA4B,GAAG,OAAO,+BAA+B,CAAC;IAAC,IAAI,EAAE,6BAA6B,CAAC;IAAC,MAAM,EAAE,SAAS,8BAA8B,EAAE,CAAA;CAAE,CAAC,CAAC;AACpO,MAAM,MAAM,iCAAiC,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAChG,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,yBAAyB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAChM,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,4BAA4B,CAAA;CAAE,CAAC,CAAC;AAC3I,MAAM,MAAM,6BAA6B,GACrC,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,GAC/I,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,iBAAiB,GAAG,cAAc,GAAG,eAAe,GAAG,YAAY,GAAG,wBAAwB,CAAA;CAAE,CAAC,GAClN,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,GAAG,cAAc,GAAG,qBAAqB,GAAG,qBAAqB,CAAA;CAAE,CAAC,GACnM,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACvJ,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,+BAA+B,CAAC,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,iCAAiC,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAA;CAAE,CAAC,CAAC;AACtM,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,gDAAgD,CAAC;IAAC,KAAK,EAAE,iCAAiC,CAAC;IAAC,MAAM,EAAE,SAAS,8BAA8B,EAAE,CAAA;CAAE,CAAC,CAAC;AAC7M,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAChH,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,GAAG,gBAAgB,GAAG,eAAe,GAAG,cAAc,GAAG,eAAe,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACvN,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,kDAAkD,CAAC;IAAC,KAAK,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC5L,MAAM,MAAM,qCAAqC,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,8CAA8C,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC,CAAC;AAE5I,sEAAsE;AACtE,MAAM,WAAW,uBAAuB;IACtC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACtF,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC7D,QAAQ,CAAC,OAAO,EAAE,kCAAkC,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAChG,IAAI,IAAI,OAAO,CAAC,qCAAqC,CAAC,CAAC;CACxD;AAED,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,mCAAmC,EACnC,iCAAiC,EAClC,MAAM,iCAAiC,CAAC"}

package/dist/runtime/organizationRuntime.js

@@ -0,0 +1,3 @@
+import { ORGANIZATION_RUNTIME_CODEX_REASONING_EFFORTS, ORGANIZATION_RUNTIME_CODEX_WORKSPACE_NO_NETWORK_POLICY, ORGANIZATION_RUNTIME_CONFIG_SCHEMA, ORGANIZATION_RUNTIME_CONFIG_V2_SCHEMA, ORGANIZATION_RUNTIME_MAX_AGENTS, ORGANIZATION_RUNTIME_MAX_CONFIG_BYTES, ORGANIZATION_RUNTIME_MAX_INSTRUCTIONS_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_STRING_BYTES, ORGANIZATION_RUNTIME_MAX_STRING_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_WAKE_TEXT_BYTES, ORGANIZATION_RUNTIME_MAX_SCHEDULE_INTERVAL_MS, ORGANIZATION_RUNTIME_MAX_SCHEDULE_JITTER_SECONDS, ORGANIZATION_RUNTIME_V2_VERSION, ORGANIZATION_RUNTIME_VERSION } from "../contracts/organizationRuntimeContract.js";
+export { ORGANIZATION_RUNTIME_CODEX_REASONING_EFFORTS, ORGANIZATION_RUNTIME_CODEX_WORKSPACE_NO_NETWORK_POLICY, ORGANIZATION_RUNTIME_CONFIG_SCHEMA, ORGANIZATION_RUNTIME_CONFIG_V2_SCHEMA, ORGANIZATION_RUNTIME_MAX_AGENTS, ORGANIZATION_RUNTIME_MAX_CONFIG_BYTES, ORGANIZATION_RUNTIME_MAX_INSTRUCTIONS_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_STRING_BYTES, ORGANIZATION_RUNTIME_MAX_STRING_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_WAKE_TEXT_BYTES, ORGANIZATION_RUNTIME_MAX_SCHEDULE_INTERVAL_MS, ORGANIZATION_RUNTIME_MAX_SCHEDULE_JITTER_SECONDS, ORGANIZATION_RUNTIME_V2_VERSION, ORGANIZATION_RUNTIME_VERSION };
+export { isOrganizationRuntimeConfig, parseOrganizationRuntimeConfig, parseOrganizationRuntimeWakeRequest, validateOrganizationRuntimeConfig } from "./organizationRuntimeParsing.js";

package/dist/runtime/organizationRuntimeAdmission.d.ts

@@ -0,0 +1,6 @@
+import type { OrganizationRuntimeHost, OrganizationRuntimeWakeRequest, OrganizationRuntimeWakeResult } from "./organizationRuntime.js";
+export declare function wakeFromDurableInbox(host: OrganizationRuntimeHost, request: OrganizationRuntimeWakeRequest): Promise<OrganizationRuntimeWakeResult>;
+export declare function consumeDurableAdmission(request: OrganizationRuntimeWakeRequest): boolean;
+export declare function registerRecordingVerifier(host: OrganizationRuntimeHost, verify: (agentId: string) => Promise<void>): OrganizationRuntimeHost;
+export declare function verifyHostRecordingStore(host: OrganizationRuntimeHost, agentId: string): Promise<void>;
+//# sourceMappingURL=organizationRuntimeAdmission.d.ts.map

package/dist/runtime/organizationRuntimeAdmission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationRuntimeAdmission.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeAdmission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAMvI,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAIzJ;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAExF;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAG5I;AAED,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5G"}

package/dist/runtime/organizationRuntimeAdmission.js

@@ -0,0 +1,22 @@
+// Internal capabilities are object identities, never caller-provided wire fields.
+const durableRequests = new WeakSet();
+const recordingVerifiers = new WeakMap();
+export async function wakeFromDurableInbox(host, request) {
+    durableRequests.add(request);
+    try {
+        return await host.wake(request);
+    }
+    finally {
+        durableRequests.delete(request);
+    }
+}
+export function consumeDurableAdmission(request) {
+    return durableRequests.delete(request);
+}
+export function registerRecordingVerifier(host, verify) {
+    recordingVerifiers.set(host, verify);
+    return host;
+}
+export async function verifyHostRecordingStore(host, agentId) {
+    await recordingVerifiers.get(host)?.(agentId);
+}

package/dist/runtime/organizationRuntimeControl.d.ts

@@ -0,0 +1,51 @@
+import { type OrganizationRuntimeHost } from "./organizationRuntime.js";
+import { type WakeBudgetSnapshot } from "./wakeFuse.js";
+import type { AttentionRegistry } from "./attention.js";
+import { type ScheduleControllerOptions } from "./schedule.js";
+import { type WakeAcceptanceStoreTestOptions } from "./wakeAcceptanceStore.js";
+import { type OrganizationRuntimeActivityV2, type OrganizationRuntimeWakeAcceptanceResult, type OrganizationRuntimeWakeReceiptStatus } from "./wakeAcceptanceTypes.js";
+export type WorkDrain = Readonly<{
+    state: "draining" | "drained";
+    since: string;
+}>;
+export type WorkAvailability = Readonly<{
+    version: "noopolis.daimon.work-availability.v1";
+    state: "running" | "paused" | "stopped";
+    agents: readonly Readonly<{
+        agent_id: string;
+        pending: number;
+        running: boolean;
+        deferred: number;
+        budget: WakeBudgetSnapshot;
+        error?: string;
+    }>[];
+    drain?: WorkDrain;
+}>;
+export type OrganizationRuntimeControlHost = OrganizationRuntimeHost & Readonly<{
+    accept(request: unknown): Promise<OrganizationRuntimeWakeAcceptanceResult>;
+    wakeReceipt(token: string | undefined, acceptanceId: string): Promise<OrganizationRuntimeWakeReceiptStatus | undefined>;
+    activityV2(token: string | undefined): Promise<OrganizationRuntimeActivityV2 | undefined>;
+    availability(token: string | undefined): Promise<WorkAvailability | undefined>;
+    /** Reversible operator drain: new wakes answer work-blocked, queued ones stay durable, running turns finish. */
+    drain(token: string | undefined): Promise<WorkAvailability | undefined>;
+    /** Ends a drain and dispatches the queue. Never clears the latched `fuse.stop`. */
+    resume(token: string | undefined): Promise<WorkAvailability | undefined>;
+}>;
+export type OrganizationRuntimeControlOptions = Readonly<{
+    acceptanceStorePath: string;
+    controlToken?: string;
+}>;
+type TestControlOptions = OrganizationRuntimeControlOptions & Readonly<{
+    scheduleOptions?: Pick<ScheduleControllerOptions, "clearTimer" | "now" | "setTimer">;
+    storeOptions?: WakeAcceptanceStoreTestOptions;
+    fuseEnvironment?: NodeJS.ProcessEnv;
+    fusePollIntervalMsForTest?: number;
+    attentionRegistryForTest?: AttentionRegistry;
+}>;
+/** Durable acceptance owns inbox delivery; only dispatch owns execution admission. */
+export declare function createOrganizationRuntimeControlHost(config: unknown, options: OrganizationRuntimeControlOptions): OrganizationRuntimeControlHost;
+/** @internal Test seam; intentionally absent from the public runtime barrel. */
+export declare function createOrganizationRuntimeControlHostWithCoreForTest(config: unknown, host: OrganizationRuntimeHost, options: TestControlOptions): OrganizationRuntimeControlHost;
+export declare const WAKE_FUSE_OPERATOR_POLL_MS = 1000;
+export {};
+//# sourceMappingURL=organizationRuntimeControl.d.ts.map

package/dist/runtime/organizationRuntimeControl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationRuntimeControl.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeControl.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuG,KAAK,uBAAuB,EAA8C,MAAM,0BAA0B,CAAC;AAEzN,OAAO,EAAY,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAqD,KAAK,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAClH,OAAO,EAA0F,KAAK,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AACvK,OAAO,EAAmD,KAAK,6BAA6B,EAAE,KAAK,uCAAuC,EAAE,KAAK,oCAAoC,EAAE,MAAM,0BAA0B,CAAC;AAGxN,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,UAAU,GAAG,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACnF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,sCAAsC,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IAAC,MAAM,EAAE,SAAS,QAAQ,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,CAAC,CAAC;AAC7S,MAAM,MAAM,8BAA8B,GAAG,uBAAuB,GAAG,QAAQ,CAAC;IAC9E,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,uCAAuC,CAAC,CAAC;IAC3E,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,oCAAoC,GAAG,SAAS,CAAC,CAAC;IACxH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAAC;IAC1F,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IAC/E,gHAAgH;IAChH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IACxE,mFAAmF;IACnF,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;CAC1E,CAAC,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,QAAQ,CAAC;IAAE,mBAAmB,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACjH,KAAK,kBAAkB,GAAG,iCAAiC,GAAG,QAAQ,CAAC;IACrE,eAAe,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,YAAY,GAAG,KAAK,GAAG,UAAU,CAAC,CAAC;IACrF,YAAY,CAAC,EAAE,8BAA8B,CAAC;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACpC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,wBAAwB,CAAC,EAAE,iBAAiB,CAAC;CAC9C,CAAC,CAAC;AAEH,sFAAsF;AACtF,wBAAgB,oCAAoC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,iCAAiC,GAAG,8BAA8B,CAIhJ;AACD,gFAAgF;AAChF,wBAAgB,mDAAmD,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,kBAAkB,GAAG,8BAA8B,CAE/K;AAoMD,eAAO,MAAM,0BAA0B,OAAO,CAAC"}

package/dist/runtime/organizationRuntimeControl.js

@@ -0,0 +1,283 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+import { readTaskClock } from "./taskClock.js";
+import { parseOrganizationRuntimeConfig, parseOrganizationRuntimeWakeRequest } from "./organizationRuntime.js";
+import { createOrganizationRuntimeHostWithAttention } from "./organizationRuntimeHost.js";
+import { WakeFuse } from "./wakeFuse.js";
+import { AttentionDispatcher } from "./attentionDispatcher.js";
+import { createScheduleController } from "./schedule.js";
+import { WakeAcceptanceConflictError, WakeAcceptanceStore, WakeInboxFullError, publicAcceptance } from "./wakeAcceptanceStore.js";
+import { parseWakeAcceptanceRequest, ACTIVITY_V2_VERSION } from "./wakeAcceptanceTypes.js";
+/** Durable acceptance owns inbox delivery; only dispatch owns execution admission. */
+export function createOrganizationRuntimeControlHost(config, options) {
+    const parsed = parseOrganizationRuntimeConfig(config);
+    const registry = new Map();
+    return createControl(parsed, createOrganizationRuntimeHostWithAttention(parsed, { sharedProtectedPaths: [options.acceptanceStorePath] }, registry), options, registry);
+}
+/** @internal Test seam; intentionally absent from the public runtime barrel. */
+export function createOrganizationRuntimeControlHostWithCoreForTest(config, host, options) {
+    return createControl(parseOrganizationRuntimeConfig(config), host, { ...options, fuseEnvironment: options.fuseEnvironment ?? { DAIMON_WAKE_FUSE: "off" } }, options.attentionRegistryForTest ?? new Map());
+}
+function createControl(config, host, options, registry) {
+    const expectedToken = options.controlToken ?? process.env[config.host.controlTokenEnv];
+    const knownAgents = new Set(config.agents.map((agent) => agent.id));
+    const persistence = new Set();
+    let store;
+    let schedules;
+    let fuse;
+    let dispatcher;
+    let fusePoll;
+    let started = false;
+    let stopping = false;
+    let sealedActivity;
+    /** In-process only: a restarted host admits, so a drained release ends drained-free. */
+    let drainedSince;
+    /** Synchronous v1 turns bypass the dispatcher; a drain is not drained while one is admitted or running. */
+    let v1Turns = 0;
+    /**
+     * One projection, read the same way live and at shutdown. `active` is decided by
+     * the dispatcher's own execution authority rather than the record's flag alone,
+     * so a stopped host — whose dispatcher has already awaited every in-flight turn
+     * — reports exactly the executions that were still admitted when it stopped.
+     */
+    const projectActivity = async (current, state) => {
+        const executions = dispatcher?.activeExecutions() ?? [];
+        const items = (await current.activity()).map((item) => ({ ...item, active: item.active && executions.some((execution) => execution.agent_id === item.agent_id && execution.delivery_ids.includes(item.delivery_id)) }));
+        return { version: ACTIVITY_V2_VERSION, state, items, executions };
+    };
+    const hardReason = () => {
+        if (!started || stopping)
+            return stopping ? "host_stopping" : "host_stopped";
+        if (dispatcher?.fatalReason())
+            return dispatcher.fatalReason();
+        const reason = fuse?.tripped();
+        return reason === "operator_stop" || reason === "ledger_unavailable" ? reason : undefined;
+    };
+    const accept = async (value, nativeSchedule = false) => {
+        let request;
+        try {
+            request = parseWakeAcceptanceRequest(value);
+        }
+        catch {
+            return rejected("invalid_request");
+        }
+        if (!tokensEqual(expectedToken, request.token))
+            return rejected("unauthorized");
+        if (!knownAgents.has(request.agent_id))
+            return rejected("unknown_agent");
+        // Check the operator latch before taking ownership, even between polls.
+        await fuse?.pollOperatorStop();
+        const reason = hardReason();
+        if (reason)
+            return blocked(reason);
+        // A drain is an operator stop that can be undone; bridges already defer on this reason.
+        if (drainedSince !== undefined)
+            return blocked("operator_stop");
+        const operation = (async () => {
+            try {
+                const accepted = await store.accept(request, nativeSchedule);
+                // A stop racing this fsync cannot revoke already durable ownership.
+                // It remains accepted for restart instead of being terminalized.
+                dispatcher?.notify(request.agent_id, accepted.created);
+                return publicAcceptance(accepted.record);
+            }
+            catch (error) {
+                if (error instanceof WakeAcceptanceConflictError)
+                    return rejected("delivery_conflict");
+                if (error instanceof WakeInboxFullError)
+                    return blocked("queue_full");
+                throw error;
+            }
+        })();
+        persistence.add(operation);
+        try {
+            return await operation;
+        }
+        finally {
+            persistence.delete(operation);
+        }
+    };
+    const availability = async (token) => {
+        if (!tokensEqual(expectedToken, token) || !store || !fuse)
+            return undefined;
+        await fuse.pollOperatorStop();
+        const items = await store.activityWithExecutionErrors();
+        const executionErrors = new Map(items.filter((record) => (record.state === "accepted" || record.state === "running")
+            && record.execution_error !== undefined).map((record) => [record.agent_id, record.execution_error]));
+        const agents = await Promise.all(config.agents.map(async (agent) => ({
+            agent_id: agent.id, pending: items.filter((item) => item.agent_id === agent.id && (item.state === "accepted" || item.state === "running" && !dispatcher?.activeExecutions().some((execution) => execution.agent_id === agent.id))).length,
+            running: dispatcher?.activeExecutions().some((execution) => execution.agent_id === agent.id) ?? false,
+            deferred: items.filter((item) => item.agent_id === agent.id && item.state === "accepted" && item.deferred).length,
+            budget: await fuse.snapshot(agent.id, agent.attention),
+            ...((dispatcher?.failure(agent.id) ?? executionErrors.get(agent.id))
+                ? { error: dispatcher?.failure(agent.id) ?? executionErrors.get(agent.id) } : {})
+        })));
+        // "drained" only once no inbox loop is alive: nothing runs and nothing can start until resume.
+        const drain = drainedSince === undefined ? undefined : { state: dispatcher?.quiescent() === false || v1Turns > 0 ? "draining" : "drained", since: drainedSince };
+        return { version: "noopolis.daimon.work-availability.v1", state: hardReason() ? "stopped" : drain !== undefined || agents.some((agent) => agent.budget.state !== "available" || agent.error) ? "paused" : "running", agents, ...(drain === undefined ? {} : { drain }) };
+    };
+    return {
+        wake: async (request) => {
+            try {
+                request = parseOrganizationRuntimeWakeRequest(request);
+            }
+            catch {
+                return { version: "noopolis.daimon.wake-result.v1", status: "rejected", agentId: "", wakeId: "", code: "invalid_request" };
+            }
+            // Attention and recording require durable ownership and dispatcher admission.
+            if (!tokensEqual(expectedToken, request.token))
+                return { version: "noopolis.daimon.wake-result.v1", status: "rejected", agentId: request.agentId, wakeId: request.event.id, code: "unauthorized" };
+            if (!knownAgents.has(request.agentId))
+                return { version: "noopolis.daimon.wake-result.v1", status: "rejected", agentId: request.agentId, wakeId: request.event.id, code: "unknown_agent" };
+            const agent = config.agents.find((candidate) => candidate.id === request.agentId);
+            if (agent.attention !== undefined || agent.recording !== undefined)
+                return { version: "noopolis.daimon.wake-result.v1", status: "rejected", agentId: request.agentId, wakeId: request.event.id, code: "durable_inbox_required" };
+            // v1 has no `blocked` member on its wire; a drain answers it exactly as the latched stop does.
+            if (hardReason() || drainedSince !== undefined)
+                return { version: "noopolis.daimon.wake-result.v1", status: "stopped", agentId: request.agentId, wakeId: request.event.id, code: "host_stopping" };
+            v1Turns += 1;
+            try {
+                if ((await fuse.admit(request.agentId, request.event.id, config.agents.find((agent) => agent.id === request.agentId)?.attention)).state !== "admitted")
+                    return { version: "noopolis.daimon.wake-result.v1", status: "stopped", agentId: request.agentId, wakeId: request.event.id, code: "host_stopping" };
+                return await host.wake(request);
+            }
+            finally {
+                v1Turns -= 1;
+            }
+        },
+        health: async (agentId) => await host.health(agentId),
+        activity: async (request) => await host.activity(request),
+        async start() {
+            if (started)
+                return;
+            const clock = readTaskClock();
+            if (stopping)
+                throw new Error("organization runtime control host has been stopped");
+            if (!expectedToken?.trim())
+                throw new Error("required control token is missing or blank");
+            const opened = await WakeAcceptanceStore.open(options.acceptanceStorePath, options.storeOptions);
+            let openedFuse;
+            try {
+                openedFuse = await WakeFuse.open({ organizationKey: [...knownAgents].sort().join("\u0000"), environment: options.fuseEnvironment });
+                await host.start();
+                store = opened;
+                fuse = openedFuse;
+                started = true;
+                dispatcher = new AttentionDispatcher({ store, host, fuse, agents: config.agents, registry, token: expectedToken, onIdle: (agentId) => { void schedules?.drain(agentId).catch(() => undefined); } });
+                if (!hardReason())
+                    for (const agentId of new Set((await opened.recoverable(knownAgents)).filter((record) => !record.deferred).map((record) => record.agent_id)))
+                        dispatcher.notify(agentId);
+                fusePoll = setInterval(() => {
+                    void fuse?.pollOperatorStop().then((reason) => {
+                        if (reason === "operator_stop" || reason === "ledger_unavailable")
+                            dispatcher?.halt();
+                    }).catch(() => undefined);
+                }, options.fusePollIntervalMsForTest ?? WAKE_FUSE_OPERATOR_POLL_MS);
+                fusePoll.unref();
+                if (config.version === "noopolis.daimon.organization-runtime.v2") {
+                    schedules = createScheduleController({ acceptanceStorePath: options.acceptanceStorePath, agents: config.agents, ...options.scheduleOptions,
+                        // Calendar selection/state use task instants; due - taskNow remains a real delay.
+                        now: () => { const realNow = (options.scheduleOptions?.now ?? Date.now)(); return clock?.at(realNow) ?? realNow; },
+                        accept: async (occurrence) => {
+                            if (dispatcher?.busy(occurrence.agentId) || hardReason() || drainedSince !== undefined)
+                                return false;
+                            const result = await accept({ token: expectedToken, agent_id: occurrence.agentId, delivery_id: occurrence.deliveryId, event: { version: "noopolis.daimon.wake.v2", kind: "schedule", text: occurrence.prompt, occurred_at: occurrence.occurredAt } }, true);
+                            return result.state === "accepted";
+                        }
+                    });
+                    await schedules.start();
+                }
+            }
+            catch (error) {
+                dispatcher?.halt();
+                await host.stop().catch(() => undefined);
+                await dispatcher?.stop().catch(() => undefined);
+                await openedFuse?.close().catch(() => undefined);
+                await opened.close().catch(() => undefined);
+                throw error;
+            }
+        },
+        // Do not expose the private provenance argument, even to JavaScript callers.
+        accept: (value) => accept(value),
+        async wakeReceipt(token, acceptanceId) {
+            if (!tokensEqual(expectedToken, token) || store === undefined)
+                return undefined;
+            return await store.status(acceptanceId);
+        },
+        async activityV2(token) {
+            if (!tokensEqual(expectedToken, token))
+                return undefined;
+            // A stopped host is not an unanswerable one. Its sealed projection is a
+            // *stronger* statement about quiescence than a live poll, because nothing
+            // can be admitted after it, and a caller proving that an execution closed
+            // has no other authority to read. A host that never started, or one whose
+            // seal could not be taken, still answers nothing: absence stays absence
+            // rather than becoming a fabricated idle runtime.
+            if (store === undefined)
+                return sealedActivity;
+            return await projectActivity(store, "running");
+        },
+        availability,
+        async drain(token) {
+            if (!tokensEqual(expectedToken, token) || !store || !fuse)
+                return undefined;
+            drainedSince ??= new Date().toISOString();
+            dispatcher?.pause();
+            return await availability(token);
+        },
+        async resume(token) {
+            if (!tokensEqual(expectedToken, token) || !store || !fuse)
+                return undefined;
+            if (drainedSince !== undefined) {
+                drainedSince = undefined;
+                // A latched operator stop or fatal fault outlives the drain: resume never reopens it.
+                if (!hardReason()) {
+                    // An owed pass for every agent the drain withheld or that holds queued work;
+                    // owed passes never count as new input, so deferred deliveries stay deferred.
+                    const queued = new Set((await store.recoverable(knownAgents).catch(() => [])).filter((record) => !record.deferred).map((record) => record.agent_id));
+                    if (drainedSince === undefined && !hardReason())
+                        dispatcher?.resume(queued);
+                    void schedules?.drain().catch(() => undefined);
+                }
+            }
+            return await availability(token);
+        },
+        async stop() {
+            if (!started && stopping)
+                return { version: "noopolis.daimon.organization-runtime-stop.v1", state: "stopped" };
+            stopping = true;
+            dispatcher?.halt();
+            if (fusePoll !== undefined)
+                clearInterval(fusePoll);
+            await schedules?.stop();
+            await Promise.allSettled(persistence);
+            const result = await host.stop();
+            await dispatcher?.stop();
+            // The last moment the store can be read, and the only one at which the
+            // dispatcher has finished every admitted turn. Seal the projection here so
+            // the closure query keeps an accurate answer once the store is closed; a
+            // fault leaves it absent instead of inventing one.
+            if (store) {
+                try {
+                    sealedActivity = await projectActivity(store, "stopped");
+                }
+                catch { /* an unreadable final state stays absent */ }
+            }
+            await store?.close();
+            await fuse?.close();
+            store = undefined;
+            fuse = undefined;
+            schedules = undefined;
+            started = false;
+            return result;
+        }
+    };
+}
+export const WAKE_FUSE_OPERATOR_POLL_MS = 1000;
+function rejected(code) { return { version: "noopolis.daimon.wake-acceptance.v2", state: "rejected", code }; }
+function blocked(reason) { return { version: "noopolis.daimon.wake-acceptance.v2", state: "stopped", code: reason === "host_stopped" ? "host_stopped" : "host_stopping", blocked: { version: "noopolis.daimon.work-blocked.v1", reason, retry_after_ms: 30000 } }; }
+function tokensEqual(expected, actual) {
+    if (!expected?.trim())
+        return false;
+    const digest = (value) => createHash("sha256").update(value).digest();
+    return timingSafeEqual(digest(expected), digest(actual ?? ""));
+}

package/dist/runtime/organizationRuntimeHost.d.ts

@@ -0,0 +1,19 @@
+import type { AttentionRegistry } from "./attention.js";
+import type { AgentHandle } from "../core/types.js";
+import type { OrganizationRuntimePathAuthority } from "./physicalReadiness.js";
+import { type OrganizationRuntimeAgentConfig, type OrganizationRuntimeHost } from "./organizationRuntime.js";
+type OrganizationRuntimeEngineFactory = (agent: OrganizationRuntimeAgentConfig, paths?: ReturnType<OrganizationRuntimePathAuthority["forAgent"]>) => Promise<AgentHandle>;
+type ProductionHostOptions = Readonly<{
+    sharedProtectedPaths?: readonly string[];
+}>;
+/** Creates the public host with Daimon's closed production engine dispatcher. */
+export declare function createOrganizationRuntimeHost(config: unknown, options?: ProductionHostOptions): OrganizationRuntimeHost;
+/** @internal Control-owned attention registry, never a caller-supplied config hook. */
+export declare function createOrganizationRuntimeHostWithAttention(config: unknown, options: ProductionHostOptions, attention: AttentionRegistry): OrganizationRuntimeHost;
+/** @internal Test-only construction seam; it is intentionally not package-exported. */
+export declare function createOrganizationRuntimeHostForTest(config: unknown, factory: OrganizationRuntimeEngineFactory, preflight?: () => Promise<OrganizationRuntimePathAuthority>): OrganizationRuntimeHost;
+/** Engine failures are undiagnosable without the cause, so carry a bounded excerpt. */
+export declare const ENGINE_FAILURE_DETAIL_MAX_BYTES = 2048;
+export declare function engineFailureDetail(error: unknown): string | undefined;
+export {};
+//# sourceMappingURL=organizationRuntimeHost.d.ts.map

package/dist/runtime/organizationRuntimeHost.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationRuntimeHost.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeHost.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAIxD,OAAO,KAAK,EAAE,WAAW,EAA0B,MAAM,kBAAkB,CAAC;AAG5E,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAK/E,OAAO,EAML,KAAK,8BAA8B,EAInC,KAAK,uBAAuB,EAK7B,MAAM,0BAA0B,CAAC;AAClC,KAAK,gCAAgC,GAAG,CACtC,KAAK,EAAE,8BAA8B,EACrC,KAAK,CAAC,EAAE,UAAU,CAAC,gCAAgC,CAAC,UAAU,CAAC,CAAC,KAC7D,OAAO,CAAC,WAAW,CAAC,CAAC;AAE1B,KAAK,qBAAqB,GAAG,QAAQ,CAAC;IAAE,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AAgBpF,iFAAiF;AACjF,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,GAAE,qBAA0B,GAAG,uBAAuB,CAI3H;AACD,uFAAuF;AACvF,wBAAgB,0CAA0C,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,iBAAiB,GAAG,uBAAuB,CAmBjK;AAED,uFAAuF;AACvF,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,gCAAgC,EACzC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,gCAAgC,CAAC,GAC1D,uBAAuB,CAKzB;AA8RD,uFAAuF;AACvF,eAAO,MAAM,+BAA+B,OAAQ,CAAC;AAOrD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAMtE"}