@noopolis/daimon 0.1.2 → 0.2.1

package/dist/runtime/wakeAcceptanceTypes.d.ts

@@ -0,0 +1,179 @@
+export declare const WAKE_ACCEPTANCE_VERSION: "noopolis.daimon.wake-acceptance.v2";
+export declare const WAKE_RECEIPT_STATUS_VERSION: "noopolis.daimon.wake-receipt-status.v2";
+export declare const WAKE_V2_VERSION: "noopolis.daimon.wake.v2";
+export declare const ACTIVITY_V2_VERSION: "noopolis.daimon.organization-runtime-activity.v2";
+export declare const MAX_WAKE_ACCEPTANCE_BYTES = 16384;
+export declare const MAX_WAKE_ACCEPTANCE_RECORD_BYTES = 65536;
+export declare const MAX_WAKE_COMPLETION_TEXT_BYTES = 16384;
+/** Public HTTP body schema; bearer authentication is intentionally a header. */
+export declare const WAKE_ACCEPTANCE_REQUEST_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "noopolis.daimon.wake-request.v2";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["agent_id", "delivery_id", "event"];
+    readonly properties: {
+        readonly agent_id: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 16384;
+            readonly pattern: "\\S";
+        };
+        readonly delivery_id: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 16384;
+            readonly pattern: "\\S";
+        };
+        readonly event: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["version", "kind", "text", "occurred_at"];
+            readonly properties: {
+                readonly version: {
+                    readonly const: "noopolis.daimon.wake.v2";
+                };
+                readonly kind: {
+                    readonly enum: readonly ["manual", "message", "schedule", "external"];
+                };
+                readonly text: {
+                    readonly type: "string";
+                    readonly maxLength: 16384;
+                };
+                readonly occurred_at: {
+                    readonly type: "string";
+                    readonly pattern: "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$";
+                };
+            };
+        };
+    };
+};
+export declare const WAKE_RECEIPT_STATUS_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "noopolis.daimon.wake-receipt-status.v2";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["version", "acceptance_id", "agent_id", "delivery_id", "request_digest", "state", "accepted_at", "updated_at"];
+    readonly properties: {
+        readonly version: {
+            readonly const: "noopolis.daimon.wake-receipt-status.v2";
+        };
+        readonly acceptance_id: {
+            readonly type: "string";
+            readonly pattern: "^[0-9a-f-]{36}$";
+        };
+        readonly agent_id: {
+            readonly type: "string";
+        };
+        readonly delivery_id: {
+            readonly type: "string";
+        };
+        readonly request_digest: {
+            readonly type: "string";
+            readonly pattern: "^[a-f0-9]{64}$";
+        };
+        readonly state: {
+            readonly enum: readonly ["accepted", "running", "completed", "failed", "stopped"];
+        };
+        readonly accepted_at: {
+            readonly type: "string";
+        };
+        readonly updated_at: {
+            readonly type: "string";
+        };
+        readonly execution_id: {
+            readonly type: "string";
+            readonly pattern: "^[0-9a-f-]{36}$";
+        };
+        readonly deferred: {
+            readonly type: "boolean";
+        };
+        readonly code: {
+            readonly enum: readonly ["engine_failed", "host_stopped", "host_stopping", "queued_wake_stopped", "active_wake_aborted", "queue_full", "unknown_agent"];
+        };
+        readonly text: {
+            readonly type: "string";
+            readonly maxLength: 16384;
+        };
+    };
+};
+export type WakeReceiptState = "accepted" | "running" | "completed" | "failed" | "stopped";
+/**
+ * Why a receipt reached its state, and every member is a state the runtime really
+ * produces: `queued_wake_stopped` and `active_wake_aborted` are the two shapes a
+ * shutdown gives a wake (`organizationRuntimeHost.ts` settles a queued job with the
+ * first and the in-flight one with the second), and a delivery reclaimed for restart
+ * used to record neither, because the only caller that could name them passed no
+ * code at all. A code that cannot be determined stays ABSENT: a plausible name for
+ * an undetermined cause is worse than no name, because it is acted on.
+ */
+export type WakeReceiptCode = "engine_failed" | "host_stopped" | "host_stopping" | "queued_wake_stopped" | "active_wake_aborted" | "queue_full" | "unknown_agent";
+export type OrganizationRuntimeWakeAcceptanceRequest = Readonly<{
+    token: string | undefined;
+    agent_id: string;
+    delivery_id: string;
+    event: Readonly<{
+        version: typeof WAKE_V2_VERSION;
+        kind: "manual" | "message" | "schedule" | "external";
+        text: string;
+        occurred_at: string;
+    }>;
+}>;
+export type OrganizationRuntimeWakeAcceptance = Readonly<{
+    version: typeof WAKE_ACCEPTANCE_VERSION;
+    acceptance_id: string;
+    agent_id: string;
+    delivery_id: string;
+    request_digest: string;
+    state: "accepted";
+    accepted_at: string;
+}>;
+export type OrganizationRuntimeWakeReceiptStatus = Readonly<{
+    version: typeof WAKE_RECEIPT_STATUS_VERSION;
+    acceptance_id: string;
+    agent_id: string;
+    delivery_id: string;
+    request_digest: string;
+    state: WakeReceiptState;
+    accepted_at: string;
+    updated_at: string;
+    execution_id?: string;
+    deferred?: boolean;
+    code?: WakeReceiptCode;
+    text?: string;
+}>;
+/** Bounded authenticated reply payload; strips common credential shapes before persistence. */
+export declare function sanitizeWakeCompletionText(value: string): string;
+export type OrganizationRuntimeActivityV2Item = OrganizationRuntimeWakeReceiptStatus & Readonly<{
+    active: boolean;
+    queue_position?: number;
+}>;
+export type OrganizationRuntimeActivityV2 = Readonly<{
+    version: typeof ACTIVITY_V2_VERSION;
+    /**
+     * Whether this projection was read from a live runtime or sealed as the host
+     * stopped. Optional on the wire because a projection published before the seal
+     * existed must still parse; its absence means "not stated", never "running".
+     */
+    state?: "running" | "stopped";
+    items: readonly OrganizationRuntimeActivityV2Item[];
+    executions?: readonly Readonly<{
+        agent_id: string;
+        execution_id: string;
+        state: "running";
+        delivery_ids: readonly string[];
+    }>[];
+}>;
+export type OrganizationRuntimeWakeAcceptanceResult = OrganizationRuntimeWakeAcceptance | Readonly<{
+    version: typeof WAKE_ACCEPTANCE_VERSION;
+    state: "rejected" | "stopped";
+    blocked?: Readonly<{
+        version: "noopolis.daimon.work-blocked.v1";
+        reason: "operator_stop" | "ledger_unavailable" | "host_stopping" | "host_stopped" | "queue_full";
+        retry_after_ms: number;
+    }>;
+    code: "unauthorized" | "invalid_request" | "unknown_agent" | "host_stopping" | "host_stopped" | "delivery_conflict";
+}>;
+export declare function parseWakeAcceptanceRequest(value: unknown): OrganizationRuntimeWakeAcceptanceRequest;
+export declare function wakeAcceptanceDigest(request: OrganizationRuntimeWakeAcceptanceRequest): string;
+//# sourceMappingURL=wakeAcceptanceTypes.d.ts.map

package/dist/runtime/wakeAcceptanceTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wakeAcceptanceTypes.d.ts","sourceRoot":"","sources":["../../src/runtime/wakeAcceptanceTypes.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,uBAAuB,EAAG,oCAA6C,CAAC;AACrF,eAAO,MAAM,2BAA2B,EAAG,wCAAiD,CAAC;AAC7F,eAAO,MAAM,eAAe,EAAG,yBAAkC,CAAC;AAClE,eAAO,MAAM,mBAAmB,oDAA2C,CAAC;AAC5E,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAChD,eAAO,MAAM,gCAAgC,QAAS,CAAC;AACvD,eAAO,MAAM,8BAA8B,QAAS,CAAC;AAErD,gFAAgF;AAChF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CASjC,CAAC;AACX,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAK7B,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;AAC3F;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,eAAe,GAAG,cAAc,GAAG,eAAe,GAAG,qBAAqB,GAAG,qBAAqB,GAAG,YAAY,GAAG,eAAe,CAAC;AAClK,MAAM,MAAM,wCAAwC,GAAG,QAAQ,CAAC;IAC9D,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,OAAO,eAAe,CAAC;QAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/I,CAAC,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,QAAQ,CAAC;IACvD,OAAO,EAAE,OAAO,uBAAuB,CAAC;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAAC;AACH,MAAM,MAAM,oCAAoC,GAAG,QAAQ,CAAC;IAC1D,OAAO,EAAE,OAAO,2BAA2B,CAAC;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,gBAAgB,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC,CAAC;AAEH,+FAA+F;AAC/F,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhE;AACD,MAAM,MAAM,iCAAiC,GAAG,oCAAoC,GAAG,QAAQ,CAAC;IAC9F,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IACnD,OAAO,EAAE,OAAO,mBAAmB,CAAC;IACpC;;;;OAIG;IACH,KAAK,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,KAAK,EAAE,SAAS,iCAAiC,EAAE,CAAC;IACpD,UAAU,CAAC,EAAE,SAAS,QAAQ,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,CAAC;QAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC,EAAE,CAAC;CACjI,CAAC,CAAC;AACH,MAAM,MAAM,uCAAuC,GAAG,iCAAiC,GAAG,QAAQ,CAAC;IACjG,OAAO,EAAE,OAAO,uBAAuB,CAAC;IACxC,KAAK,EAAE,UAAU,GAAG,SAAS,CAAC;IAC9B,OAAO,CAAC,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,iCAAiC,CAAC;QAAC,MAAM,EAAE,eAAe,GAAG,oBAAoB,GAAG,eAAe,GAAG,cAAc,GAAG,YAAY,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7L,IAAI,EAAE,cAAc,GAAG,iBAAiB,GAAG,eAAe,GAAG,eAAe,GAAG,cAAc,GAAG,mBAAmB,CAAC;CACrH,CAAC,CAAC;AAEH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,wCAAwC,CAgBnG;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,wCAAwC,GAAG,MAAM,CAG9F"}

package/dist/runtime/wakeAcceptanceTypes.js

@@ -0,0 +1,95 @@
+import { createHash } from "node:crypto";
+import { ORGANIZATION_RUNTIME_ACTIVITY_V2_VERSION } from "../contracts/runtimeContractManifest.js";
+import { redactCredentialText } from "../core/credentialRedaction.js";
+export const WAKE_ACCEPTANCE_VERSION = "noopolis.daimon.wake-acceptance.v2";
+export const WAKE_RECEIPT_STATUS_VERSION = "noopolis.daimon.wake-receipt-status.v2";
+export const WAKE_V2_VERSION = "noopolis.daimon.wake.v2";
+export const ACTIVITY_V2_VERSION = ORGANIZATION_RUNTIME_ACTIVITY_V2_VERSION;
+export const MAX_WAKE_ACCEPTANCE_BYTES = 16_384;
+export const MAX_WAKE_ACCEPTANCE_RECORD_BYTES = 65_536;
+export const MAX_WAKE_COMPLETION_TEXT_BYTES = 16_384;
+/** Public HTTP body schema; bearer authentication is intentionally a header. */
+export const WAKE_ACCEPTANCE_REQUEST_SCHEMA = {
+    $schema: "https://json-schema.org/draft/2020-12/schema", $id: "noopolis.daimon.wake-request.v2", type: "object", additionalProperties: false,
+    required: ["agent_id", "delivery_id", "event"], properties: {
+        agent_id: { type: "string", minLength: 1, maxLength: MAX_WAKE_ACCEPTANCE_BYTES, pattern: "\\S" },
+        delivery_id: { type: "string", minLength: 1, maxLength: MAX_WAKE_ACCEPTANCE_BYTES, pattern: "\\S" },
+        event: { type: "object", additionalProperties: false, required: ["version", "kind", "text", "occurred_at"], properties: {
+                version: { const: WAKE_V2_VERSION }, kind: { enum: ["manual", "message", "schedule", "external"] }, text: { type: "string", maxLength: MAX_WAKE_ACCEPTANCE_BYTES }, occurred_at: { type: "string", pattern: "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$" }
+            } }
+    }
+};
+export const WAKE_RECEIPT_STATUS_SCHEMA = {
+    $schema: "https://json-schema.org/draft/2020-12/schema", $id: WAKE_RECEIPT_STATUS_VERSION, type: "object", additionalProperties: false,
+    required: ["version", "acceptance_id", "agent_id", "delivery_id", "request_digest", "state", "accepted_at", "updated_at"], properties: {
+        version: { const: WAKE_RECEIPT_STATUS_VERSION }, acceptance_id: { type: "string", pattern: "^[0-9a-f-]{36}$" }, agent_id: { type: "string" }, delivery_id: { type: "string" }, request_digest: { type: "string", pattern: "^[a-f0-9]{64}$" }, state: { enum: ["accepted", "running", "completed", "failed", "stopped"] }, accepted_at: { type: "string" }, updated_at: { type: "string" }, execution_id: { type: "string", pattern: "^[0-9a-f-]{36}$" }, deferred: { type: "boolean" }, code: { enum: ["engine_failed", "host_stopped", "host_stopping", "queued_wake_stopped", "active_wake_aborted", "queue_full", "unknown_agent"] }, text: { type: "string", maxLength: MAX_WAKE_COMPLETION_TEXT_BYTES }
+    }
+};
+/** Bounded authenticated reply payload; strips common credential shapes before persistence. */
+export function sanitizeWakeCompletionText(value) {
+    return redactCredentialText(value, [], MAX_WAKE_COMPLETION_TEXT_BYTES);
+}
+export function parseWakeAcceptanceRequest(value) {
+    const root = record(snapshot(value, "wake acceptance"), "wake acceptance");
+    exact(root, ["token", "agent_id", "delivery_id", "event"], "wake acceptance");
+    const event = record(root.event, "wake acceptance.event");
+    exact(event, ["version", "kind", "text", "occurred_at"], "wake acceptance.event");
+    const kind = text(event.kind, "wake acceptance.event.kind");
+    if (kind !== "manual" && kind !== "message" && kind !== "schedule" && kind !== "external")
+        throw new TypeError("wake acceptance.event.kind is not supported");
+    const body = text(event.text, "wake acceptance.event.text");
+    if (Buffer.byteLength(body, "utf8") > MAX_WAKE_ACCEPTANCE_BYTES)
+        throw new TypeError("wake acceptance.event.text exceeds the wake text limit");
+    if (text(event.version, "wake acceptance.event.version") !== WAKE_V2_VERSION)
+        throw new TypeError("wake acceptance.event.version is not supported");
+    return {
+        token: root.token === undefined ? undefined : text(root.token, "wake acceptance.token"),
+        agent_id: nonBlank(root.agent_id, "wake acceptance.agent_id"),
+        delivery_id: nonBlank(root.delivery_id, "wake acceptance.delivery_id"),
+        event: { version: WAKE_V2_VERSION, kind, text: body, occurred_at: rfc3339(event.occurred_at) }
+    };
+}
+export function wakeAcceptanceDigest(request) {
+    const canonical = JSON.stringify({ agent_id: request.agent_id, delivery_id: request.delivery_id, event: request.event });
+    return createHash("sha256").update(canonical).digest("hex");
+}
+function snapshot(value, label) {
+    if (value === undefined || value === null || typeof value === "string" || typeof value === "boolean" || typeof value === "number")
+        return value;
+    if (Array.isArray(value))
+        throw new TypeError(`${label} must be an object`);
+    if (typeof value !== "object" || Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null)
+        throw new TypeError(`${label} must be a plain own-properties object`);
+    const copied = Object.create(null);
+    for (const key of Reflect.ownKeys(value)) {
+        if (typeof key !== "string")
+            throw new TypeError(`${label} must not contain symbol properties`);
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        if (descriptor === undefined || !descriptor.enumerable || !("value" in descriptor))
+            throw new TypeError(`${label}.${key} must be an enumerable data property`);
+        copied[key] = snapshot(descriptor.value, `${label}.${key}`);
+    }
+    return copied;
+}
+function record(value, label) {
+    if (value === null || typeof value !== "object" || Array.isArray(value) || Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null)
+        throw new TypeError(`${label} must be a plain own-properties object`);
+    return value;
+}
+function exact(value, expected, label) {
+    if (Object.keys(value).some((key) => !expected.includes(key)) || expected.some((key) => !Object.hasOwn(value, key)))
+        throw new TypeError(`${label} must contain exactly ${expected.join(", ")}`);
+}
+function text(value, label) {
+    if (typeof value !== "string" || Buffer.byteLength(value, "utf8") > MAX_WAKE_ACCEPTANCE_BYTES)
+        throw new TypeError(`${label} must be a bounded string`);
+    return value;
+}
+function nonBlank(value, label) { const result = text(value, label); if (!result.trim())
+    throw new TypeError(`${label} must not be blank`); return result; }
+function rfc3339(value) {
+    const result = nonBlank(value, "wake acceptance.event.occurred_at");
+    if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(result) || Number.isNaN(Date.parse(result)) || new Date(result).toISOString() !== result)
+        throw new TypeError("wake acceptance.event.occurred_at must be an exact RFC3339 timestamp");
+    return result;
+}

package/dist/runtime/wakeFuse.d.ts

@@ -0,0 +1,124 @@
+export declare const WAKE_FUSE_VERSION: "noopolis.daimon.wake-fuse.v1";
+export declare const WAKE_FUSE_DIRECTORY_ENV: "DAIMON_WAKE_FUSE_DIRECTORY";
+export declare const WAKE_FUSE_EPOCH_ZONE_ENV: "DAIMON_WAKE_FUSE_EPOCH_ZONE";
+export declare const DEFAULT_WAKE_FUSE_MAX_WAKES = 100;
+export declare const DEFAULT_WAKE_FUSE_MAX_TOKENS = 5000000;
+export type WakeFuseTripReason = "wake_ceiling" | "token_ceiling" | "operator_stop" | "ledger_unavailable";
+export type WakeBudgetLimits = Readonly<{
+    maxExecutions?: number;
+    maxTokens?: number;
+}>;
+export type WakeBudgetSnapshot = Readonly<{
+    armed: boolean;
+    epoch: string;
+    state: "available" | "paused" | "stopped";
+    reason?: string;
+    executions_used: number;
+    executions_remaining: number;
+    tokens_used: number;
+    tokens_remaining: number;
+    agent_executions_used: number;
+    agent_executions_remaining?: number;
+    agent_tokens_used: number;
+    agent_tokens_remaining?: number;
+}>;
+export type WakeFuseVerdict = Readonly<{
+    state: "admitted";
+}> | Readonly<{
+    state: "tripped";
+    reason: WakeFuseTripReason;
+}> | Readonly<{
+    state: "paused";
+    reason: "agent_execution_ceiling" | "agent_token_ceiling";
+}>;
+/**
+ * The counting window, when the operator has not named one.
+ *
+ * WHY THIS IS DERIVED AND NOT CONFIGURED
+ * --------------------------------------
+ * `DAIMON_WAKE_FUSE_EPOCH` is read from the container's env file, and an env
+ * file is applied at container CREATION only. So an operator who wants a daily
+ * budget has to rewrite that file and RECREATE THE CONTAINER every day, and
+ * the only thing that ever did that was a daily rebuild. The budget was
+ * therefore coupled to a deploy: stop deploying daily and the wake ceiling
+ * never resets, and the organization stops admitting wakes for good.
+ *
+ * A date-derived epoch removes the coupling instead of moving it. There is no
+ * file to rewrite, no deploy, no restart, and no clock for anybody to forget.
+ *
+ * An explicitly configured epoch still wins, unchanged: an operator pinning one
+ * window is doing it deliberately, and this must not roll it out from under
+ * them.
+ */
+export declare function derivedEpoch(organizationKey: string, at: Date, zone: string): string;
+export type WakeFuseOptions = Readonly<{
+    organizationKey: string;
+    environment?: NodeJS.ProcessEnv;
+    now?: () => Date;
+}>;
+/**
+ * Durable catastrophic-wake admission fuse for one organization/container.
+ *
+ * Operator trip: `docker exec <container> touch /var/lib/spawnfile/daimon/usage/fuse.stop`.
+ * Unlike `recordTurnUsage` ("advisory: never rejects"), every storage or
+ * evaluation failure here rejects admission: this safety boundary fails closed.
+ */
+export declare class WakeFuse {
+    private readonly armed;
+    private readonly directory;
+    private epoch;
+    private epochStartedAt;
+    private readonly maxWakes;
+    private readonly maxTokens;
+    private admissions;
+    private readonly usageLedgerPath;
+    private readonly now;
+    private readonly nextEpoch;
+    private serial;
+    private reason;
+    private tripMarkerMissing;
+    private constructor();
+    static open(options: WakeFuseOptions): Promise<WakeFuse>;
+    admit(agentId: string, deliveryId: string, limits?: WakeBudgetLimits): Promise<WakeFuseVerdict>;
+    /**
+     * The budget as the caller should act on it NOW — which means after the day
+     * has been allowed to roll.
+     *
+     * This is the gate the scheduler actually consults: `AttentionDispatcher.drain()`
+     * returns at `snapshot().state !== "available"` before it ever reaches
+     * `admit()`. Rolling only inside `admitNow` therefore never fired for an
+     * organization that had hit its ceiling — it stayed paused across midnight
+     * and only a process restart could renew the budget. The roll is serialized
+     * with admissions so a snapshot and an admission never see two windows.
+     */
+    snapshot(agentId: string, limits?: WakeBudgetLimits): Promise<WakeBudgetSnapshot>;
+    private snapshotNow;
+    pollOperatorStop(): Promise<WakeFuseTripReason | undefined>;
+    tripped(): WakeFuseTripReason | undefined;
+    close(): Promise<void>;
+    /**
+     * Moves the counting window when the derived day has changed.
+     *
+     * Called at admission, which is the only moment the answer can matter: the
+     * organization runtime is a long-lived process, so an epoch computed once at
+     * open() would be the same epoch a week later.
+     *
+     * WHAT ROLLS AND WHAT DOES NOT
+     * ----------------------------
+     * A new window clears a CEILING trip, exactly as selecting a new epoch by
+     * hand always did: `readTripMarker` only honours a marker belonging to the
+     * current epoch. It does NOT clear an operator stop. `fuse.stop` is checked
+     * by existence and is deliberately not epoch-scoped, so a parked newsroom
+     * stays parked across midnight. That asymmetry is the whole point: a budget
+     * is a thing that renews, an operator stop is a decision that does not.
+     *
+     * Admissions are rebuilt from the ledger rather than emptied, so a clock that
+     * steps BACKWARD into a window that already spent wakes does not hand the
+     * organization a fresh budget.
+     */
+    private rollEpochIfDue;
+    private admitNow;
+    private trip;
+}
+export declare function resolveWakeFuseDirectory(environment?: NodeJS.ProcessEnv): string;
+//# sourceMappingURL=wakeFuse.d.ts.map

package/dist/runtime/wakeFuse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wakeFuse.d.ts","sourceRoot":"","sources":["../../src/runtime/wakeFuse.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,iBAAiB,EAAG,8BAAuC,CAAC;AACzE,eAAO,MAAM,uBAAuB,EAAG,4BAAqC,CAAC;AAC7E,eAAO,MAAM,wBAAwB,EAAG,6BAAsC,CAAC;AAC/E,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAC/C,eAAO,MAAM,4BAA4B,UAAY,CAAC;AAEtD,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG,eAAe,GAAG,eAAe,GAAG,oBAAoB,CAAC;AAC3G,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IAAE,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACxF,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,qBAAqB,EAAE,MAAM,CAAC;IAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,sBAAsB,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC/W,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,yBAAyB,GAAG,qBAAqB,CAAA;CAAE,CAAC,CAAC;AACtN;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAKpF;AAED,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC,CAAC;AAQH;;;;;;GAMG;AACH,qBAAa,QAAQ;IAMjB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAd5B,OAAO,CAAC,MAAM,CAAoC;IAClD,OAAO,CAAC,MAAM,CAAiC;IAC/C,OAAO,CAAC,iBAAiB,CAAS;IAElC,OAAO;WAaM,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC;IAwC9D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAE,gBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC;IASnG;;;;;;;;;;OAUG;IACG,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,gBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAS7E,WAAW;IASnB,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAQjE,OAAO,IAAI,kBAAkB,GAAG,SAAS;IACnC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAE5B;;;;;;;;;;;;;;;;;;;OAmBG;YACW,cAAc;YAyBd,QAAQ;YAuBR,IAAI;CAiBnB;AAED,wBAAgB,wBAAwB,CAAC,WAAW,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAG7F"}