@noopolis/daimon 0.2.0 → 0.2.1

package/dist/runtime/grokWorkerAttestation.js

@@ -100,11 +100,11 @@ export async function prepareGrokWorkerAttestation(input, profileOwner = { uid:
     if (workers.some((worker) => worker.home === undefined))
         throw new Error("Grok worker isolation attestation unavailable");
     await verifyGrokWorkerTmp(workers, profileOwner.tmp);
-    await verifyGrokWorkerHome(path.dirname(input.profilePath), input.configSha256);
+    const configVariant = await verifyGrokWorkerHome(path.dirname(input.profilePath), input.configSha256);
     const events = await secureOpen(input.eventsPath, input.workerUid, input.brokerGid, 0o640, 16 * 1024 * 1024);
     try {
         const stat = await events.stat();
-        return { dev: Number(stat.dev), ino: Number(stat.ino), size: Number(stat.size), denyPaths };
+        return { dev: Number(stat.dev), ino: Number(stat.ino), size: Number(stat.size), denyPaths, configVariant };
     }
     finally {
         await events.close();

package/dist/runtime/grokWorkerHomeAttestation.d.ts

@@ -1,4 +1,6 @@
 import { type Stats } from "node:fs";
+import type { GrokWorkerConfigVariant } from "../contracts/grokBrokerTaskClock.js";
+export type GrokWorkerConfigPins = string | Readonly<Record<GrokWorkerConfigVariant, string>>;
 type Entry = Pick<Stats, "uid" | "mode" | "nlink"> & Partial<Pick<Stats, "dev" | "ino">> & Readonly<{
     isFile(): boolean;
     isDirectory(): boolean;
@@ -20,11 +22,11 @@ type Entry = Pick<Stats, "uid" | "mode" | "nlink"> & Partial<Pick<Stats, "dev" |
  */
 export declare function assertGrokWorkerHomeEntries(entries: Readonly<Record<string, Entry | undefined>>, rootUid?: number): void;
 /** The worker's `config.toml` must be exactly the renderer's bytes for the declared policy. */
-export declare function assertGrokWorkerConfigBytes(bytes: Uint8Array, configSha256: string): void;
+export declare function assertGrokWorkerConfigBytes(bytes: Uint8Array, pins: GrokWorkerConfigPins): GrokWorkerConfigVariant;
 /**
  * Attests the worker home layout and that `config.toml` is exactly the
  * renderer's bytes for the declared model policy (`configSha256`).
  */
-export declare function verifyGrokWorkerHome(grokHome: string, configSha256: string, rootUid?: number): Promise<void>;
+export declare function verifyGrokWorkerHome(grokHome: string, configSha256: GrokWorkerConfigPins, rootUid?: number): Promise<GrokWorkerConfigVariant>;
 export {};
 //# sourceMappingURL=grokWorkerHomeAttestation.d.ts.map

package/dist/runtime/grokWorkerHomeAttestation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grokWorkerHomeAttestation.d.ts","sourceRoot":"","sources":["../../src/runtime/grokWorkerHomeAttestation.ts"],"names":[],"mappings":"AACA,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAMhD,KAAK,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,QAAQ,CAAC;IAAE,MAAM,IAAI,OAAO,CAAC;IAAC,WAAW,IAAI,OAAO,CAAC;IAAC,cAAc,IAAI,OAAO,CAAA;CAAE,CAAC,CAAC;AAG9K;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,OAAO,GAAE,MAA2B,GAAG,IAAI,CAS5I;AAED,+FAA+F;AAC/F,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAEzF;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,GAAE,MAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAetI"}
+{"version":3,"file":"grokWorkerHomeAttestation.d.ts","sourceRoot":"","sources":["../../src/runtime/grokWorkerHomeAttestation.ts"],"names":[],"mappings":"AACA,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAKhD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAEnF,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC,CAAC;AAE9F,KAAK,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,QAAQ,CAAC;IAAE,MAAM,IAAI,OAAO,CAAC;IAAC,WAAW,IAAI,OAAO,CAAC;IAAC,cAAc,IAAI,OAAO,CAAA;CAAE,CAAC,CAAC;AAG9K;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,OAAO,GAAE,MAA2B,GAAG,IAAI,CAS5I;AAED,+FAA+F;AAC/F,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,oBAAoB,GAAG,uBAAuB,CAQlH;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,oBAAoB,EAAE,OAAO,GAAE,MAA2B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAevK"}

package/dist/runtime/grokWorkerHomeAttestation.js

@@ -30,9 +30,15 @@ export function assertGrokWorkerHomeEntries(entries, rootUid = HOME.directory.ui
     }
 }
 /** The worker's `config.toml` must be exactly the renderer's bytes for the declared policy. */
-export function assertGrokWorkerConfigBytes(bytes, configSha256) {
-    if (!/^[0-9a-f]{64}$/u.test(configSha256) || createHash("sha256").update(bytes).digest("hex") !== configSha256)
-        throw unavailable();
+export function assertGrokWorkerConfigBytes(bytes, pins) {
+    const digest = createHash("sha256").update(bytes).digest("hex");
+    const variants = typeof pins === "string" ? { unclocked: pins } : pins;
+    for (const variant of ["unclocked", "clocked"]) {
+        const pin = variants[variant];
+        if (pin !== undefined && /^[0-9a-f]{64}$/u.test(pin) && digest === pin)
+            return variant;
+    }
+    throw unavailable();
 }
 /**
  * Attests the worker home layout and that `config.toml` is exactly the
@@ -57,7 +63,7 @@ export async function verifyGrokWorkerHome(grokHome, configSha256, rootUid = HOM
         // Same inode as the lstat above, as in `secureOpen`: a rename between the two cannot swap in other bytes.
         if (!opened.isFile() || opened.size > 65_536 || opened.dev !== before.dev || opened.ino !== before.ino || opened.uid !== before.uid || opened.mode !== before.mode || opened.nlink !== 1)
             throw unavailable();
-        assertGrokWorkerConfigBytes(await handle.readFile(), configSha256);
+        return assertGrokWorkerConfigBytes(await handle.readFile(), configSha256);
     }
     catch {
         throw unavailable();

package/dist/runtime/index.d.ts

@@ -1,4 +1,8 @@
+export { brokerTaskClockFileFor } from "./grokBrokerSlot.js";
+export { GROK_BROKER_TASK_CLOCK, GROK_BROKER_TASK_CLOCK_PRELOAD_PATH, GROK_BROKER_TASK_CLOCK_FILE_PATH, type GrokWorkerConfigVariant } from "../contracts/grokBrokerTaskClock.js";
 export * from "./organizationRuntime.js";
+export { relocateRuntimeConfig, type RuntimeConfigLocation } from "./relocateRuntimeConfig.js";
+export { parseTaskClock, TASK_CLOCK_VERSION } from "./taskClock.js";
 export * from "./contractManifest.js";
 export * from "./agySubscriptionRealm.js";
 export { createOrganizationRuntimeHost } from "./organizationRuntimeHost.js";
@@ -14,7 +18,7 @@ export { GROK_INFERENCE_AUTH_STALE_BODY } from "./grokInferenceProxy.js";
 export { assertGrokWorkerDenyPathPlacement, assertGrokWorkerDenyPathShape, assertGrokWorkerDenyPathsPlaceable, GROK_WORKER_BASE_PROFILE_GRANTS, grokWorkerCanSearch, grokWorkerDenyPathChain, GrokWorkerDenyPlacementError, readGrokWorkerDenyPathChain } from "./grokWorkerDenyPlacement.js";
 export type { GrokWorkerDenyPathEntry, GrokWorkerDenyPathStep, GrokWorkerDenyPathWorker } from "./grokWorkerDenyPlacement.js";
 export { grokWorkerSandboxProfileSha256, renderGrokWorkerSandboxProfile } from "./grokWorkerSandboxProfile.js";
-export { engineBrokerRequestLedgerPathFor, engineBrokerSealLedgerPathFor, parseEngineBrokerServiceConfig, type EngineBrokerServiceConfig, type EngineBrokerServiceRegistration } from "./engineBrokerServiceConfig.js";
+export { ENGINE_BROKER_SERVICE_V3, engineBrokerRequestLedgerPathFor, engineBrokerSealLedgerPathFor, parseEngineBrokerServiceConfig, type EngineBrokerServiceConfig, type EngineBrokerServiceRegistration } from "./engineBrokerServiceConfig.js";
 export { TURN_SEAL_LEDGER, TURN_SEAL_LEDGER_VERSION } from "./engineBrokerSealLedger.js";
 export { DEFAULT_GROK_BROKER_TURN_LIMITS, ENGINE_BROKER_LIMIT_REASONS, type EngineBrokerLimitReason, type EngineBrokerTurnAccounting, type EngineBrokerTurnLimits, type EngineBrokerTurnUsage } from "./engineBrokerTurnAccounting.js";
 export { dedupeTurnUsageRows } from "./turnUsageLedger.js";
@@ -22,5 +26,6 @@ export { WakeTransitionLockBlockedError } from "./wakeAcceptanceStore.js";
 export { OFFLINE_RECONCILIATION_BLOCKED_CODE, OFFLINE_RECONCILIATION_REQUEST_SCHEMA, OFFLINE_RECONCILIATION_VERSION, assertOfflineReconciliationLeaseAvailable, OfflineTransitionReconciliationBlockedError, parseOfflineTransitionReconciliationRequest, reconcileOfflineWakeTransition, type OfflineDeploymentAttestation, type OfflineTransitionReconciliationAuthorizationContext, type OfflineTransitionReconciliationOptions, type OfflineTransitionReconciliationProofReceipt, type OfflineTransitionReconciliationReceipt, type OfflineTransitionReconciliationRequest, type OfflineTransitionReconciliationResult } from "./wakeAcceptanceReconciliation.js";
 export { MAX_WAKE_ACCEPTANCE_BYTES, MAX_WAKE_ACCEPTANCE_RECORD_BYTES, WAKE_ACCEPTANCE_VERSION, WAKE_ACCEPTANCE_REQUEST_SCHEMA, WAKE_RECEIPT_STATUS_VERSION, WAKE_RECEIPT_STATUS_SCHEMA, WAKE_V2_VERSION, parseWakeAcceptanceRequest, wakeAcceptanceDigest, type OrganizationRuntimeWakeAcceptance, type OrganizationRuntimeWakeAcceptanceRequest, type OrganizationRuntimeWakeAcceptanceResult, type OrganizationRuntimeWakeReceiptStatus, type WakeReceiptCode, type WakeReceiptState } from "./wakeAcceptanceTypes.js";
 export type { OrganizationRuntimeControlHost, OrganizationRuntimeControlOptions } from "./organizationRuntimeControl.js";
-export { EngineBrokerControlClient, EngineBrokerInferenceGrantRefused, type EngineBrokerInferenceGrant } from "./engineBrokerControlClient.js";
+export { EngineBrokerControlClient, EngineBrokerInferenceGrantRefused, type EngineBrokerInferenceGrant, type EngineBrokerTurnOptions } from "./engineBrokerControlClient.js";
+export type { GrokBrokerProviderClockObservation } from "./grokBrokerProviderClock.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,oCAAoC,EAAE,MAAM,iCAAiC,CAAC;AACvF,OAAO,EAAE,gCAAgC,EAAE,yCAAyC,EAClF,KAAK,kCAAkC,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,8BAA8B,EAAE,0BAA0B,EAAE,gCAAgC,EAAE,uCAAuC,EAC5I,6CAA6C,EAAE,KAAK,gCAAgC,EAAE,KAAK,uCAAuC,EAAE,MAAM,2BAA2B,CAAC;AACxK,OAAO,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,6BAA6B,EAAE,KAAK,0BAA0B,EACjK,8BAA8B,EAAE,KAAK,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACvG,OAAO,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AACzG,OAAO,EAAE,8BAA8B,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,yCAAyC,EAAE,KAAK,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAC5P,OAAO,EAAE,6BAA6B,EAAE,qCAAqC,EAAE,KAAK,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACjK,OAAO,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,uBAAuB,EAAE,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACzJ,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,iCAAiC,EAAE,6BAA6B,EAAE,kCAAkC,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC9R,YAAY,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAC9H,OAAO,EAAE,8BAA8B,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/G,OAAO,EAAE,gCAAgC,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,KAAK,yBAAyB,EAAE,KAAK,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACvN,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACzF,OAAO,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,KAAK,uBAAuB,EAAE,KAAK,0BAA0B,EAClI,KAAK,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EACL,mCAAmC,EACnC,qCAAqC,EACrC,8BAA8B,EAC9B,yCAAyC,EACzC,2CAA2C,EAC3C,2CAA2C,EAC3C,8BAA8B,EAC9B,KAAK,4BAA4B,EACjC,KAAK,mDAAmD,EACxD,KAAK,sCAAsC,EAC3C,KAAK,2CAA2C,EAChD,KAAK,sCAAsC,EAC3C,KAAK,sCAAsC,EAC3C,KAAK,qCAAqC,EAC3C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,uBAAuB,EACvB,8BAA8B,EAC9B,2BAA2B,EAC3B,0BAA0B,EAC1B,eAAe,EACf,0BAA0B,EAC1B,oBAAoB,EACpB,KAAK,iCAAiC,EACtC,KAAK,wCAAwC,EAC7C,KAAK,uCAAuC,EAC5C,KAAK,oCAAoC,EACzC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,8BAA8B,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AACzH,OAAO,EAAE,yBAAyB,EAAE,iCAAiC,EAAE,KAAK,0BAA0B,EAAE,MAAM,gCAAgC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,mCAAmC,EAAE,gCAAgC,EAAE,KAAK,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAClL,cAAc,0BAA0B,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpE,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,oCAAoC,EAAE,MAAM,iCAAiC,CAAC;AACvF,OAAO,EAAE,gCAAgC,EAAE,yCAAyC,EAClF,KAAK,kCAAkC,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,8BAA8B,EAAE,0BAA0B,EAAE,gCAAgC,EAAE,uCAAuC,EAC5I,6CAA6C,EAAE,KAAK,gCAAgC,EAAE,KAAK,uCAAuC,EAAE,MAAM,2BAA2B,CAAC;AACxK,OAAO,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,6BAA6B,EAAE,KAAK,0BAA0B,EACjK,8BAA8B,EAAE,KAAK,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACvG,OAAO,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AACzG,OAAO,EAAE,8BAA8B,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,yCAAyC,EAAE,KAAK,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAC5P,OAAO,EAAE,6BAA6B,EAAE,qCAAqC,EAAE,KAAK,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACjK,OAAO,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,uBAAuB,EAAE,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACzJ,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,iCAAiC,EAAE,6BAA6B,EAAE,kCAAkC,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC9R,YAAY,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAC9H,OAAO,EAAE,8BAA8B,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/G,OAAO,EAAE,wBAAwB,EAAE,gCAAgC,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,KAAK,yBAAyB,EAAE,KAAK,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjP,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACzF,OAAO,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,KAAK,uBAAuB,EAAE,KAAK,0BAA0B,EAClI,KAAK,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EACL,mCAAmC,EACnC,qCAAqC,EACrC,8BAA8B,EAC9B,yCAAyC,EACzC,2CAA2C,EAC3C,2CAA2C,EAC3C,8BAA8B,EAC9B,KAAK,4BAA4B,EACjC,KAAK,mDAAmD,EACxD,KAAK,sCAAsC,EAC3C,KAAK,2CAA2C,EAChD,KAAK,sCAAsC,EAC3C,KAAK,sCAAsC,EAC3C,KAAK,qCAAqC,EAC3C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,uBAAuB,EACvB,8BAA8B,EAC9B,2BAA2B,EAC3B,0BAA0B,EAC1B,eAAe,EACf,0BAA0B,EAC1B,oBAAoB,EACpB,KAAK,iCAAiC,EACtC,KAAK,wCAAwC,EAC7C,KAAK,uCAAuC,EAC5C,KAAK,oCAAoC,EACzC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,8BAA8B,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AACzH,OAAO,EAAE,yBAAyB,EAAE,iCAAiC,EAAE,KAAK,0BAA0B,EAAE,KAAK,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC7K,YAAY,EAAE,kCAAkC,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/runtime/index.js

@@ -1,4 +1,8 @@
+export { brokerTaskClockFileFor } from "./grokBrokerSlot.js";
+export { GROK_BROKER_TASK_CLOCK, GROK_BROKER_TASK_CLOCK_PRELOAD_PATH, GROK_BROKER_TASK_CLOCK_FILE_PATH } from "../contracts/grokBrokerTaskClock.js";
 export * from "./organizationRuntime.js";
+export { relocateRuntimeConfig } from "./relocateRuntimeConfig.js";
+export { parseTaskClock, TASK_CLOCK_VERSION } from "./taskClock.js";
 export * from "./contractManifest.js";
 export * from "./agySubscriptionRealm.js";
 export { createOrganizationRuntimeHost } from "./organizationRuntimeHost.js";
@@ -13,7 +17,7 @@ export { dedupeInferenceUsageRows, INFERENCE_USAGE_LEDGER_VERSION, GROK_INFERENC
 export { GROK_INFERENCE_AUTH_STALE_BODY } from "./grokInferenceProxy.js";
 export { assertGrokWorkerDenyPathPlacement, assertGrokWorkerDenyPathShape, assertGrokWorkerDenyPathsPlaceable, GROK_WORKER_BASE_PROFILE_GRANTS, grokWorkerCanSearch, grokWorkerDenyPathChain, GrokWorkerDenyPlacementError, readGrokWorkerDenyPathChain } from "./grokWorkerDenyPlacement.js";
 export { grokWorkerSandboxProfileSha256, renderGrokWorkerSandboxProfile } from "./grokWorkerSandboxProfile.js";
-export { engineBrokerRequestLedgerPathFor, engineBrokerSealLedgerPathFor, parseEngineBrokerServiceConfig } from "./engineBrokerServiceConfig.js";
+export { ENGINE_BROKER_SERVICE_V3, engineBrokerRequestLedgerPathFor, engineBrokerSealLedgerPathFor, parseEngineBrokerServiceConfig } from "./engineBrokerServiceConfig.js";
 export { TURN_SEAL_LEDGER, TURN_SEAL_LEDGER_VERSION } from "./engineBrokerSealLedger.js";
 export { DEFAULT_GROK_BROKER_TURN_LIMITS, ENGINE_BROKER_LIMIT_REASONS } from "./engineBrokerTurnAccounting.js";
 export { dedupeTurnUsageRows } from "./turnUsageLedger.js";

package/dist/runtime/organizationRuntime.d.ts

@@ -1,4 +1,6 @@
 import type { AttentionConfig } from "../contracts/attentionContract.js";
+import type { WakeMomentRecording } from "../contracts/wakeMomentContract.js";
+export type { WakeMomentRecording } from "../contracts/wakeMomentContract.js";
 import { ORGANIZATION_RUNTIME_CODEX_REASONING_EFFORTS, ORGANIZATION_RUNTIME_CODEX_WORKSPACE_NO_NETWORK_POLICY, ORGANIZATION_RUNTIME_CONFIG_SCHEMA, ORGANIZATION_RUNTIME_CONFIG_V2_SCHEMA, ORGANIZATION_RUNTIME_MAX_AGENTS, ORGANIZATION_RUNTIME_MAX_CONFIG_BYTES, ORGANIZATION_RUNTIME_MAX_INSTRUCTIONS_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_STRING_BYTES, ORGANIZATION_RUNTIME_MAX_STRING_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_WAKE_TEXT_BYTES, ORGANIZATION_RUNTIME_MAX_SCHEDULE_INTERVAL_MS, ORGANIZATION_RUNTIME_MAX_SCHEDULE_JITTER_SECONDS, ORGANIZATION_RUNTIME_V2_VERSION, ORGANIZATION_RUNTIME_VERSION } from "../contracts/organizationRuntimeContract.js";
 export { ORGANIZATION_RUNTIME_CODEX_REASONING_EFFORTS, ORGANIZATION_RUNTIME_CODEX_WORKSPACE_NO_NETWORK_POLICY, ORGANIZATION_RUNTIME_CONFIG_SCHEMA, ORGANIZATION_RUNTIME_CONFIG_V2_SCHEMA, ORGANIZATION_RUNTIME_MAX_AGENTS, ORGANIZATION_RUNTIME_MAX_CONFIG_BYTES, ORGANIZATION_RUNTIME_MAX_INSTRUCTIONS_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_STRING_BYTES, ORGANIZATION_RUNTIME_MAX_STRING_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_WAKE_TEXT_BYTES, ORGANIZATION_RUNTIME_MAX_SCHEDULE_INTERVAL_MS, ORGANIZATION_RUNTIME_MAX_SCHEDULE_JITTER_SECONDS, ORGANIZATION_RUNTIME_V2_VERSION, ORGANIZATION_RUNTIME_VERSION };
 export type OrganizationRuntimeEngineKind = "codex" | "grok" | "agy";
@@ -67,6 +69,7 @@ export type OrganizationRuntimeAgentConfig = Readonly<{
     runtimeHomePath: string;
     engine: OrganizationRuntimeEngineIntent;
     attention?: AttentionConfig;
+    recording?: WakeMomentRecording;
     schedule?: OrganizationRuntimeSchedule;
     mcp?: readonly OrganizationRuntimeMcpServer[];
     moltnet?: OrganizationRuntimeMoltnet;

package/dist/runtime/organizationRuntime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizationRuntime.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EACL,4CAA4C,EAC5C,sDAAsD,EACtD,kCAAkC,EAClC,qCAAqC,EACrC,+BAA+B,EAC/B,qCAAqC,EACrC,gDAAgD,EAChD,qCAAqC,EACrC,0CAA0C,EAC1C,wCAAwC,EACxC,6CAA6C,EAC7C,gDAAgD,EAChD,+BAA+B,EAC/B,4BAA4B,EAC7B,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACL,4CAA4C,EAC5C,sDAAsD,EACtD,kCAAkC,EAClC,qCAAqC,EACrC,+BAA+B,EAC/B,qCAAqC,EACrC,gDAAgD,EAChD,qCAAqC,EACrC,0CAA0C,EAC1C,wCAAwC,EACxC,6CAA6C,EAC7C,gDAAgD,EAChD,+BAA+B,EAC/B,4BAA4B,EAC7B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AACrE;;;;;;;GAOG;AACH,MAAM,MAAM,qCAAqC,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,aAAa,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AACvI,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,6BAA6B,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,qCAAqC,CAAA;CAAE,CAAC,CAAC;AAChM,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,GAAG,KAAK,GAAG,iBAAiB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AACxQ,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,SAAS,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,CAAC,EAAE,CAAA;CAAE,CAAC,CAAC;AAClL,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACrH,MAAM,MAAM,2BAA2B,GACnC,QAAQ,CAAC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,GAC9B,QAAQ,CAAC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GACzF,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACxG,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,+BAA+B,CAAC;IAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IAAC,GAAG,CAAC,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,0BAA0B,CAAC;IAAC,MAAM,CAAC,EAAE,yBAAyB,CAAA;CAAE,CAAC,CAAC;AACjY,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,CAAC,2DAA2D;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC9K,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,4BAA4B,GAAG,OAAO,+BAA+B,CAAC;IAAC,IAAI,EAAE,6BAA6B,CAAC;IAAC,MAAM,EAAE,SAAS,8BAA8B,EAAE,CAAA;CAAE,CAAC,CAAC;AACpO,MAAM,MAAM,iCAAiC,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAChG,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,yBAAyB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAChM,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,4BAA4B,CAAA;CAAE,CAAC,CAAC;AAC3I,MAAM,MAAM,6BAA6B,GACrC,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,GAC/I,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,iBAAiB,GAAG,cAAc,GAAG,eAAe,GAAG,YAAY,GAAG,wBAAwB,CAAA;CAAE,CAAC,GAClN,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,GAAG,cAAc,GAAG,qBAAqB,GAAG,qBAAqB,CAAA;CAAE,CAAC,GACnM,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACvJ,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,+BAA+B,CAAC,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,iCAAiC,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAA;CAAE,CAAC,CAAC;AACtM,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,gDAAgD,CAAC;IAAC,KAAK,EAAE,iCAAiC,CAAC;IAAC,MAAM,EAAE,SAAS,8BAA8B,EAAE,CAAA;CAAE,CAAC,CAAC;AAC7M,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAChH,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,GAAG,gBAAgB,GAAG,eAAe,GAAG,cAAc,GAAG,eAAe,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACvN,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,kDAAkD,CAAC;IAAC,KAAK,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC5L,MAAM,MAAM,qCAAqC,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,8CAA8C,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC,CAAC;AAE5I,sEAAsE;AACtE,MAAM,WAAW,uBAAuB;IACtC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACtF,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC7D,QAAQ,CAAC,OAAO,EAAE,kCAAkC,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAChG,IAAI,IAAI,OAAO,CAAC,qCAAqC,CAAC,CAAC;CACxD;AAED,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,mCAAmC,EACnC,iCAAiC,EAClC,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"organizationRuntime.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,YAAY,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EACL,4CAA4C,EAC5C,sDAAsD,EACtD,kCAAkC,EAClC,qCAAqC,EACrC,+BAA+B,EAC/B,qCAAqC,EACrC,gDAAgD,EAChD,qCAAqC,EACrC,0CAA0C,EAC1C,wCAAwC,EACxC,6CAA6C,EAC7C,gDAAgD,EAChD,+BAA+B,EAC/B,4BAA4B,EAC7B,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACL,4CAA4C,EAC5C,sDAAsD,EACtD,kCAAkC,EAClC,qCAAqC,EACrC,+BAA+B,EAC/B,qCAAqC,EACrC,gDAAgD,EAChD,qCAAqC,EACrC,0CAA0C,EAC1C,wCAAwC,EACxC,6CAA6C,EAC7C,gDAAgD,EAChD,+BAA+B,EAC/B,4BAA4B,EAC7B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AACrE;;;;;;;GAOG;AACH,MAAM,MAAM,qCAAqC,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,aAAa,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AACvI,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,6BAA6B,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,qCAAqC,CAAA;CAAE,CAAC,CAAC;AAChM,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,GAAG,KAAK,GAAG,iBAAiB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AACxQ,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,SAAS,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,CAAC,EAAE,CAAA;CAAE,CAAC,CAAC;AAClL,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACrH,MAAM,MAAM,2BAA2B,GACnC,QAAQ,CAAC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,GAC9B,QAAQ,CAAC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GACzF,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACxG,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,+BAA+B,CAAC;IAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IAAC,GAAG,CAAC,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,0BAA0B,CAAC;IAAC,MAAM,CAAC,EAAE,yBAAyB,CAAA;CAAE,CAAC,CAAC;AACla,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,CAAC,2DAA2D;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC9K,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,4BAA4B,GAAG,OAAO,+BAA+B,CAAC;IAAC,IAAI,EAAE,6BAA6B,CAAC;IAAC,MAAM,EAAE,SAAS,8BAA8B,EAAE,CAAA;CAAE,CAAC,CAAC;AACpO,MAAM,MAAM,iCAAiC,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAChG,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,yBAAyB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAChM,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,4BAA4B,CAAA;CAAE,CAAC,CAAC;AAC3I,MAAM,MAAM,6BAA6B,GACrC,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,GAC/I,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,iBAAiB,GAAG,cAAc,GAAG,eAAe,GAAG,YAAY,GAAG,wBAAwB,CAAA;CAAE,CAAC,GAClN,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,GAAG,cAAc,GAAG,qBAAqB,GAAG,qBAAqB,CAAA;CAAE,CAAC,GACnM,QAAQ,CAAC;IAAE,OAAO,EAAE,gCAAgC,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACvJ,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,+BAA+B,CAAC,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,iCAAiC,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAA;CAAE,CAAC,CAAC;AACtM,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,gDAAgD,CAAC;IAAC,KAAK,EAAE,iCAAiC,CAAC;IAAC,MAAM,EAAE,SAAS,8BAA8B,EAAE,CAAA;CAAE,CAAC,CAAC;AAC7M,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAChH,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,GAAG,gBAAgB,GAAG,eAAe,GAAG,cAAc,GAAG,eAAe,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACvN,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,kDAAkD,CAAC;IAAC,KAAK,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC5L,MAAM,MAAM,qCAAqC,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,8CAA8C,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC,CAAC;AAE5I,sEAAsE;AACtE,MAAM,WAAW,uBAAuB;IACtC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACtF,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC7D,QAAQ,CAAC,OAAO,EAAE,kCAAkC,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAChG,IAAI,IAAI,OAAO,CAAC,qCAAqC,CAAC,CAAC;CACxD;AAED,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,mCAAmC,EACnC,iCAAiC,EAClC,MAAM,iCAAiC,CAAC"}

package/dist/runtime/organizationRuntimeAdmission.d.ts

@@ -0,0 +1,6 @@
+import type { OrganizationRuntimeHost, OrganizationRuntimeWakeRequest, OrganizationRuntimeWakeResult } from "./organizationRuntime.js";
+export declare function wakeFromDurableInbox(host: OrganizationRuntimeHost, request: OrganizationRuntimeWakeRequest): Promise<OrganizationRuntimeWakeResult>;
+export declare function consumeDurableAdmission(request: OrganizationRuntimeWakeRequest): boolean;
+export declare function registerRecordingVerifier(host: OrganizationRuntimeHost, verify: (agentId: string) => Promise<void>): OrganizationRuntimeHost;
+export declare function verifyHostRecordingStore(host: OrganizationRuntimeHost, agentId: string): Promise<void>;
+//# sourceMappingURL=organizationRuntimeAdmission.d.ts.map

package/dist/runtime/organizationRuntimeAdmission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationRuntimeAdmission.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeAdmission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAMvI,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAIzJ;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAExF;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAG5I;AAED,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5G"}

package/dist/runtime/organizationRuntimeAdmission.js

@@ -0,0 +1,22 @@
+// Internal capabilities are object identities, never caller-provided wire fields.
+const durableRequests = new WeakSet();
+const recordingVerifiers = new WeakMap();
+export async function wakeFromDurableInbox(host, request) {
+    durableRequests.add(request);
+    try {
+        return await host.wake(request);
+    }
+    finally {
+        durableRequests.delete(request);
+    }
+}
+export function consumeDurableAdmission(request) {
+    return durableRequests.delete(request);
+}
+export function registerRecordingVerifier(host, verify) {
+    recordingVerifiers.set(host, verify);
+    return host;
+}
+export async function verifyHostRecordingStore(host, agentId) {
+    await recordingVerifiers.get(host)?.(agentId);
+}

package/dist/runtime/organizationRuntimeControl.d.ts

@@ -4,6 +4,10 @@ import type { AttentionRegistry } from "./attention.js";
 import { type ScheduleControllerOptions } from "./schedule.js";
 import { type WakeAcceptanceStoreTestOptions } from "./wakeAcceptanceStore.js";
 import { type OrganizationRuntimeActivityV2, type OrganizationRuntimeWakeAcceptanceResult, type OrganizationRuntimeWakeReceiptStatus } from "./wakeAcceptanceTypes.js";
+export type WorkDrain = Readonly<{
+    state: "draining" | "drained";
+    since: string;
+}>;
 export type WorkAvailability = Readonly<{
     version: "noopolis.daimon.work-availability.v1";
     state: "running" | "paused" | "stopped";
@@ -15,12 +19,17 @@ export type WorkAvailability = Readonly<{
         budget: WakeBudgetSnapshot;
         error?: string;
     }>[];
+    drain?: WorkDrain;
 }>;
 export type OrganizationRuntimeControlHost = OrganizationRuntimeHost & Readonly<{
     accept(request: unknown): Promise<OrganizationRuntimeWakeAcceptanceResult>;
     wakeReceipt(token: string | undefined, acceptanceId: string): Promise<OrganizationRuntimeWakeReceiptStatus | undefined>;
     activityV2(token: string | undefined): Promise<OrganizationRuntimeActivityV2 | undefined>;
     availability(token: string | undefined): Promise<WorkAvailability | undefined>;
+    /** Reversible operator drain: new wakes answer work-blocked, queued ones stay durable, running turns finish. */
+    drain(token: string | undefined): Promise<WorkAvailability | undefined>;
+    /** Ends a drain and dispatches the queue. Never clears the latched `fuse.stop`. */
+    resume(token: string | undefined): Promise<WorkAvailability | undefined>;
 }>;
 export type OrganizationRuntimeControlOptions = Readonly<{
     acceptanceStorePath: string;

package/dist/runtime/organizationRuntimeControl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizationRuntimeControl.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeControl.ts"],"names":[],"mappings":"AACA,OAAO,EAAuG,KAAK,uBAAuB,EAA8C,MAAM,0BAA0B,CAAC;AAEzN,OAAO,EAAY,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAqD,KAAK,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAClH,OAAO,EAA0F,KAAK,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AACvK,OAAO,EAAmD,KAAK,6BAA6B,EAAE,KAAK,uCAAuC,EAAE,KAAK,oCAAoC,EAAE,MAAM,0BAA0B,CAAC;AAGxN,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,sCAAsC,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IAAC,MAAM,EAAE,SAAS,QAAQ,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAA;CAAE,CAAC,CAAC;AAC1R,MAAM,MAAM,8BAA8B,GAAG,uBAAuB,GAAG,QAAQ,CAAC;IAC9E,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,uCAAuC,CAAC,CAAC;IAC3E,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,oCAAoC,GAAG,SAAS,CAAC,CAAC;IACxH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAAC;IAC1F,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;CAChF,CAAC,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,QAAQ,CAAC;IAAE,mBAAmB,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACjH,KAAK,kBAAkB,GAAG,iCAAiC,GAAG,QAAQ,CAAC;IACrE,eAAe,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,YAAY,GAAG,KAAK,GAAG,UAAU,CAAC,CAAC;IACrF,YAAY,CAAC,EAAE,8BAA8B,CAAC;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACpC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,wBAAwB,CAAC,EAAE,iBAAiB,CAAC;CAC9C,CAAC,CAAC;AAEH,sFAAsF;AACtF,wBAAgB,oCAAoC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,iCAAiC,GAAG,8BAA8B,CAIhJ;AACD,gFAAgF;AAChF,wBAAgB,mDAAmD,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,kBAAkB,GAAG,8BAA8B,CAE/K;AA4JD,eAAO,MAAM,0BAA0B,OAAO,CAAC"}
+{"version":3,"file":"organizationRuntimeControl.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeControl.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuG,KAAK,uBAAuB,EAA8C,MAAM,0BAA0B,CAAC;AAEzN,OAAO,EAAY,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAqD,KAAK,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAClH,OAAO,EAA0F,KAAK,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AACvK,OAAO,EAAmD,KAAK,6BAA6B,EAAE,KAAK,uCAAuC,EAAE,KAAK,oCAAoC,EAAE,MAAM,0BAA0B,CAAC;AAGxN,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,UAAU,GAAG,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACnF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,sCAAsC,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IAAC,MAAM,EAAE,SAAS,QAAQ,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,CAAC,CAAC;AAC7S,MAAM,MAAM,8BAA8B,GAAG,uBAAuB,GAAG,QAAQ,CAAC;IAC9E,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,uCAAuC,CAAC,CAAC;IAC3E,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,oCAAoC,GAAG,SAAS,CAAC,CAAC;IACxH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAAC;IAC1F,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IAC/E,gHAAgH;IAChH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IACxE,mFAAmF;IACnF,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;CAC1E,CAAC,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,QAAQ,CAAC;IAAE,mBAAmB,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACjH,KAAK,kBAAkB,GAAG,iCAAiC,GAAG,QAAQ,CAAC;IACrE,eAAe,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,YAAY,GAAG,KAAK,GAAG,UAAU,CAAC,CAAC;IACrF,YAAY,CAAC,EAAE,8BAA8B,CAAC;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACpC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,wBAAwB,CAAC,EAAE,iBAAiB,CAAC;CAC9C,CAAC,CAAC;AAEH,sFAAsF;AACtF,wBAAgB,oCAAoC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,iCAAiC,GAAG,8BAA8B,CAIhJ;AACD,gFAAgF;AAChF,wBAAgB,mDAAmD,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,kBAAkB,GAAG,8BAA8B,CAE/K;AAoMD,eAAO,MAAM,0BAA0B,OAAO,CAAC"}

package/dist/runtime/organizationRuntimeControl.js

@@ -1,4 +1,5 @@
 import { createHash, timingSafeEqual } from "node:crypto";
+import { readTaskClock } from "./taskClock.js";
 import { parseOrganizationRuntimeConfig, parseOrganizationRuntimeWakeRequest } from "./organizationRuntime.js";
 import { createOrganizationRuntimeHostWithAttention } from "./organizationRuntimeHost.js";
 import { WakeFuse } from "./wakeFuse.js";
@@ -28,6 +29,10 @@ function createControl(config, host, options, registry) {
     let started = false;
     let stopping = false;
     let sealedActivity;
+    /** In-process only: a restarted host admits, so a drained release ends drained-free. */
+    let drainedSince;
+    /** Synchronous v1 turns bypass the dispatcher; a drain is not drained while one is admitted or running. */
+    let v1Turns = 0;
     /**
      * One projection, read the same way live and at shutdown. `active` is decided by
      * the dispatcher's own execution authority rather than the record's flag alone,
@@ -47,7 +52,7 @@ function createControl(config, host, options, registry) {
         const reason = fuse?.tripped();
         return reason === "operator_stop" || reason === "ledger_unavailable" ? reason : undefined;
     };
-    const accept = async (value) => {
+    const accept = async (value, nativeSchedule = false) => {
         let request;
         try {
             request = parseWakeAcceptanceRequest(value);
@@ -64,9 +69,12 @@ function createControl(config, host, options, registry) {
         const reason = hardReason();
         if (reason)
             return blocked(reason);
+        // A drain is an operator stop that can be undone; bridges already defer on this reason.
+        if (drainedSince !== undefined)
+            return blocked("operator_stop");
         const operation = (async () => {
             try {
-                const accepted = await store.accept(request);
+                const accepted = await store.accept(request, nativeSchedule);
                 // A stop racing this fsync cannot revoke already durable ownership.
                 // It remains accepted for restart instead of being terminalized.
                 dispatcher?.notify(request.agent_id, accepted.created);
@@ -88,6 +96,25 @@ function createControl(config, host, options, registry) {
             persistence.delete(operation);
         }
     };
+    const availability = async (token) => {
+        if (!tokensEqual(expectedToken, token) || !store || !fuse)
+            return undefined;
+        await fuse.pollOperatorStop();
+        const items = await store.activityWithExecutionErrors();
+        const executionErrors = new Map(items.filter((record) => (record.state === "accepted" || record.state === "running")
+            && record.execution_error !== undefined).map((record) => [record.agent_id, record.execution_error]));
+        const agents = await Promise.all(config.agents.map(async (agent) => ({
+            agent_id: agent.id, pending: items.filter((item) => item.agent_id === agent.id && (item.state === "accepted" || item.state === "running" && !dispatcher?.activeExecutions().some((execution) => execution.agent_id === agent.id))).length,
+            running: dispatcher?.activeExecutions().some((execution) => execution.agent_id === agent.id) ?? false,
+            deferred: items.filter((item) => item.agent_id === agent.id && item.state === "accepted" && item.deferred).length,
+            budget: await fuse.snapshot(agent.id, agent.attention),
+            ...((dispatcher?.failure(agent.id) ?? executionErrors.get(agent.id))
+                ? { error: dispatcher?.failure(agent.id) ?? executionErrors.get(agent.id) } : {})
+        })));
+        // "drained" only once no inbox loop is alive: nothing runs and nothing can start until resume.
+        const drain = drainedSince === undefined ? undefined : { state: dispatcher?.quiescent() === false || v1Turns > 0 ? "draining" : "drained", since: drainedSince };
+        return { version: "noopolis.daimon.work-availability.v1", state: hardReason() ? "stopped" : drain !== undefined || agents.some((agent) => agent.budget.state !== "available" || agent.error) ? "paused" : "running", agents, ...(drain === undefined ? {} : { drain }) };
+    };
     return {
         wake: async (request) => {
             try {
@@ -96,23 +123,33 @@ function createControl(config, host, options, registry) {
             catch {
                 return { version: "noopolis.daimon.wake-result.v1", status: "rejected", agentId: "", wakeId: "", code: "invalid_request" };
             }
-            // Inbox attention requires durable ownership; synchronous v1 cannot
-            // provide a receipt or leave deferred messages pending.
+            // Attention and recording require durable ownership and dispatcher admission.
             if (!tokensEqual(expectedToken, request.token))
                 return { version: "noopolis.daimon.wake-result.v1", status: "rejected", agentId: request.agentId, wakeId: request.event.id, code: "unauthorized" };
             if (!knownAgents.has(request.agentId))
                 return { version: "noopolis.daimon.wake-result.v1", status: "rejected", agentId: request.agentId, wakeId: request.event.id, code: "unknown_agent" };
-            if (config.agents.find((agent) => agent.id === request.agentId)?.attention !== undefined)
+            const agent = config.agents.find((candidate) => candidate.id === request.agentId);
+            if (agent.attention !== undefined || agent.recording !== undefined)
                 return { version: "noopolis.daimon.wake-result.v1", status: "rejected", agentId: request.agentId, wakeId: request.event.id, code: "durable_inbox_required" };
-            if (hardReason() || (await fuse.admit(request.agentId, request.event.id, config.agents.find((agent) => agent.id === request.agentId)?.attention)).state !== "admitted")
+            // v1 has no `blocked` member on its wire; a drain answers it exactly as the latched stop does.
+            if (hardReason() || drainedSince !== undefined)
                 return { version: "noopolis.daimon.wake-result.v1", status: "stopped", agentId: request.agentId, wakeId: request.event.id, code: "host_stopping" };
-            return await host.wake(request);
+            v1Turns += 1;
+            try {
+                if ((await fuse.admit(request.agentId, request.event.id, config.agents.find((agent) => agent.id === request.agentId)?.attention)).state !== "admitted")
+                    return { version: "noopolis.daimon.wake-result.v1", status: "stopped", agentId: request.agentId, wakeId: request.event.id, code: "host_stopping" };
+                return await host.wake(request);
+            }
+            finally {
+                v1Turns -= 1;
+            }
         },
         health: async (agentId) => await host.health(agentId),
         activity: async (request) => await host.activity(request),
         async start() {
             if (started)
                 return;
+            const clock = readTaskClock();
             if (stopping)
                 throw new Error("organization runtime control host has been stopped");
             if (!expectedToken?.trim())
@@ -138,10 +175,12 @@ function createControl(config, host, options, registry) {
                 fusePoll.unref();
                 if (config.version === "noopolis.daimon.organization-runtime.v2") {
                     schedules = createScheduleController({ acceptanceStorePath: options.acceptanceStorePath, agents: config.agents, ...options.scheduleOptions,
+                        // Calendar selection/state use task instants; due - taskNow remains a real delay.
+                        now: () => { const realNow = (options.scheduleOptions?.now ?? Date.now)(); return clock?.at(realNow) ?? realNow; },
                         accept: async (occurrence) => {
-                            if (dispatcher?.busy(occurrence.agentId) || hardReason())
+                            if (dispatcher?.busy(occurrence.agentId) || hardReason() || drainedSince !== undefined)
                                 return false;
-                            const result = await accept({ token: expectedToken, agent_id: occurrence.agentId, delivery_id: occurrence.deliveryId, event: { version: "noopolis.daimon.wake.v2", kind: "schedule", text: occurrence.prompt, occurred_at: occurrence.occurredAt } });
+                            const result = await accept({ token: expectedToken, agent_id: occurrence.agentId, delivery_id: occurrence.deliveryId, event: { version: "noopolis.daimon.wake.v2", kind: "schedule", text: occurrence.prompt, occurred_at: occurrence.occurredAt } }, true);
                             return result.state === "accepted";
                         }
                     });
@@ -157,7 +196,8 @@ function createControl(config, host, options, registry) {
                 throw error;
             }
         },
-        accept,
+        // Do not expose the private provenance argument, even to JavaScript callers.
+        accept: (value) => accept(value),
         async wakeReceipt(token, acceptanceId) {
             if (!tokensEqual(expectedToken, token) || store === undefined)
                 return undefined;
@@ -176,22 +216,30 @@ function createControl(config, host, options, registry) {
                 return sealedActivity;
             return await projectActivity(store, "running");
         },
-        async availability(token) {
+        availability,
+        async drain(token) {
             if (!tokensEqual(expectedToken, token) || !store || !fuse)
                 return undefined;
-            await fuse.pollOperatorStop();
-            const items = await store.activityWithExecutionErrors();
-            const executionErrors = new Map(items.filter((record) => (record.state === "accepted" || record.state === "running")
-                && record.execution_error !== undefined).map((record) => [record.agent_id, record.execution_error]));
-            const agents = await Promise.all(config.agents.map(async (agent) => ({
-                agent_id: agent.id, pending: items.filter((item) => item.agent_id === agent.id && (item.state === "accepted" || item.state === "running" && !dispatcher?.activeExecutions().some((execution) => execution.agent_id === agent.id))).length,
-                running: dispatcher?.activeExecutions().some((execution) => execution.agent_id === agent.id) ?? false,
-                deferred: items.filter((item) => item.agent_id === agent.id && item.state === "accepted" && item.deferred).length,
-                budget: await fuse.snapshot(agent.id, agent.attention),
-                ...((dispatcher?.failure(agent.id) ?? executionErrors.get(agent.id))
-                    ? { error: dispatcher?.failure(agent.id) ?? executionErrors.get(agent.id) } : {})
-            })));
-            return { version: "noopolis.daimon.work-availability.v1", state: hardReason() ? "stopped" : agents.some((agent) => agent.budget.state !== "available" || agent.error) ? "paused" : "running", agents };
+            drainedSince ??= new Date().toISOString();
+            dispatcher?.pause();
+            return await availability(token);
+        },
+        async resume(token) {
+            if (!tokensEqual(expectedToken, token) || !store || !fuse)
+                return undefined;
+            if (drainedSince !== undefined) {
+                drainedSince = undefined;
+                // A latched operator stop or fatal fault outlives the drain: resume never reopens it.
+                if (!hardReason()) {
+                    // An owed pass for every agent the drain withheld or that holds queued work;
+                    // owed passes never count as new input, so deferred deliveries stay deferred.
+                    const queued = new Set((await store.recoverable(knownAgents).catch(() => [])).filter((record) => !record.deferred).map((record) => record.agent_id));
+                    if (drainedSince === undefined && !hardReason())
+                        dispatcher?.resume(queued);
+                    void schedules?.drain().catch(() => undefined);
+                }
+            }
+            return await availability(token);
         },
         async stop() {
             if (!started && stopping)

package/dist/runtime/organizationRuntimeHost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizationRuntimeHost.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeHost.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGxD,OAAO,KAAK,EAAE,WAAW,EAA0B,MAAM,kBAAkB,CAAC;AAI5E,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAK/E,OAAO,EAML,KAAK,8BAA8B,EAInC,KAAK,uBAAuB,EAK7B,MAAM,0BAA0B,CAAC;AAElC,KAAK,gCAAgC,GAAG,CACtC,KAAK,EAAE,8BAA8B,EACrC,KAAK,CAAC,EAAE,UAAU,CAAC,gCAAgC,CAAC,UAAU,CAAC,CAAC,KAC7D,OAAO,CAAC,WAAW,CAAC,CAAC;AAG1B,KAAK,qBAAqB,GAAG,QAAQ,CAAC;IAAE,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AAmBpF,iFAAiF;AACjF,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,GAAE,qBAA0B,GAAG,uBAAuB,CAI3H;AAED,uFAAuF;AACvF,wBAAgB,0CAA0C,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,iBAAiB,GAAG,uBAAuB,CAmBjK;AAED,uFAAuF;AACvF,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,gCAAgC,EACzC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,gCAAgC,CAAC,GAC1D,uBAAuB,CAKzB;AA2RD,uFAAuF;AACvF,eAAO,MAAM,+BAA+B,OAAQ,CAAC;AAOrD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAMtE"}
+{"version":3,"file":"organizationRuntimeHost.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeHost.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAIxD,OAAO,KAAK,EAAE,WAAW,EAA0B,MAAM,kBAAkB,CAAC;AAG5E,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAK/E,OAAO,EAML,KAAK,8BAA8B,EAInC,KAAK,uBAAuB,EAK7B,MAAM,0BAA0B,CAAC;AAClC,KAAK,gCAAgC,GAAG,CACtC,KAAK,EAAE,8BAA8B,EACrC,KAAK,CAAC,EAAE,UAAU,CAAC,gCAAgC,CAAC,UAAU,CAAC,CAAC,KAC7D,OAAO,CAAC,WAAW,CAAC,CAAC;AAE1B,KAAK,qBAAqB,GAAG,QAAQ,CAAC;IAAE,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AAgBpF,iFAAiF;AACjF,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,GAAE,qBAA0B,GAAG,uBAAuB,CAI3H;AACD,uFAAuF;AACvF,wBAAgB,0CAA0C,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,iBAAiB,GAAG,uBAAuB,CAmBjK;AAED,uFAAuF;AACvF,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,gCAAgC,EACzC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,gCAAgC,CAAC,GAC1D,uBAAuB,CAKzB;AA8RD,uFAAuF;AACvF,eAAO,MAAM,+BAA+B,OAAQ,CAAC;AAOrD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAMtE"}

package/dist/runtime/organizationRuntimeHost.js

@@ -1,3 +1,5 @@
+import { consumeDurableAdmission, registerRecordingVerifier } from "./organizationRuntimeAdmission.js";
+import { readTaskClock, taskClockChildEnvironment } from "./taskClock.js";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import { sanitizeWakeCompletionText } from "./wakeAcceptanceTypes.js";
 import { startOrganizationRuntimeEngine } from "./engineDispatcher.js";
@@ -123,6 +125,10 @@ function createHost(config, factory, preflight = undefined) {
             return startPromise;
         if (stopRequested)
             throw new Error("organization runtime host has been stopped");
+        const clock = readTaskClock();
+        for (const agent of config.agents)
+            for (const server of agent.mcp ?? [])
+                taskClockChildEnvironment(server.env, clock);
         if (controlToken === undefined || !controlToken.trim()) {
             throw new Error(`required control token ${config.host.controlTokenEnv} is missing or blank`);
         }
@@ -200,6 +206,7 @@ function createHost(config, factory, preflight = undefined) {
         return startPromise;
     };
     const wake = async (request) => {
+        const durable = consumeDurableAdmission(request);
         let parsed;
         try {
             parsed = parseOrganizationRuntimeWakeRequest(request);
@@ -218,6 +225,8 @@ function createHost(config, factory, preflight = undefined) {
             addActivity(parsed.agentId, "wake_rejected", parsed.event.id);
             return rejected(parsed, "unknown_agent");
         }
+        if (agent.config.recording && !durable)
+            return rejected(parsed, "durable_inbox_required");
         if (agent.pending.length >= maxPendingWakes) {
             addActivity(parsed.agentId, "wake_rejected", parsed.event.id);
             return rejected(parsed, "queue_full");
@@ -304,13 +313,13 @@ function createHost(config, factory, preflight = undefined) {
             stopPromise = undefined; });
         return attempt;
     };
-    return { start, wake, health, activity: activityPage, stop };
+    return registerRecordingVerifier({ start, wake, health, activity: activityPage, stop }, async (id) => {
+        await readiness?.paths.forAgent(agents.get(id).config).verifyRecording?.();
+    });
 }
 function toCoreWake(request) {
     return {
-        id: request.event.id,
-        kind: request.event.kind === "external" ? "manual" : request.event.kind,
-        text: request.event.text
+        id: request.event.id, kind: request.event.kind === "external" ? "manual" : request.event.kind, text: request.event.text
     };
 }
 function agentHealthState(agent) {

package/dist/runtime/organizationRuntimeParsing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizationRuntimeParsing.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeParsing.ts"],"names":[],"mappings":"AAEA,OAAO,EAcL,KAAK,yBAAyB,EAK9B,KAAK,8BAA8B,EACpC,MAAM,0BAA0B,CAAC;AAOlC,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,CAuBxF;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CAWlG;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,yBAAyB,CAEpG;AAED,eAAO,MAAM,2BAA2B,0CAAoC,CAAC"}
+{"version":3,"file":"organizationRuntimeParsing.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeParsing.ts"],"names":[],"mappings":"AAGA,OAAO,EAcL,KAAK,yBAAyB,EAK9B,KAAK,8BAA8B,EACpC,MAAM,0BAA0B,CAAC;AAOlC,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,CAwBxF;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CAWlG;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,yBAAyB,CAEpG;AAED,eAAO,MAAM,2BAA2B,0CAAoC,CAAC"}

package/dist/runtime/organizationRuntimeParsing.js

@@ -1,5 +1,6 @@
 import { GROK_BROKER_MODELS, GROK_BROKER_REASONING_EFFORTS } from "../contracts/grokWorkerContract.js";
 import { parseAttention } from "./attention.js";
+import { isolateRecording, parseRecording } from "./organizationRuntimeRecording.js";
 import { ORGANIZATION_RUNTIME_CODEX_REASONING_EFFORTS, ORGANIZATION_RUNTIME_CODEX_WORKSPACE_NO_NETWORK_POLICY, ORGANIZATION_RUNTIME_MAX_AGENTS, ORGANIZATION_RUNTIME_MAX_CONFIG_BYTES, ORGANIZATION_RUNTIME_MAX_INSTRUCTIONS_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_STRING_BYTES, ORGANIZATION_RUNTIME_MAX_STRING_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_WAKE_TEXT_BYTES, ORGANIZATION_RUNTIME_MAX_SCHEDULE_INTERVAL_MS, ORGANIZATION_RUNTIME_MAX_SCHEDULE_JITTER_SECONDS, ORGANIZATION_RUNTIME_V2_VERSION, ORGANIZATION_RUNTIME_VERSION } from "./organizationRuntime.js";
 const ENV_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
 const ENGINE_KINDS = new Set(["codex", "grok", "agy"]);
@@ -29,6 +30,7 @@ export function parseOrganizationRuntimeConfig(value) {
     });
     isolated(agents);
     isolatedMemory(agents);
+    isolateRecording(agents);
     return { version: version, host, agents };
 }
 export function parseOrganizationRuntimeWakeRequest(value) {
@@ -58,10 +60,11 @@ export function validateOrganizationRuntimeConfig(value) {
 export const isOrganizationRuntimeConfig = validateOrganizationRuntimeConfig;
 function parseAgent(value, label, v2) {
     const agent = object(value, label);
-    exactOptional(agent, v2 ? ["id", "name", "instructions", "workspacePath", "runtimeHomePath", "engine", "schedule"] : ["id", "name", "instructions", "workspacePath", "runtimeHomePath", "engine"], ["mcp", "moltnet", "memory", "attention"], label);
+    exactOptional(agent, v2 ? ["id", "name", "instructions", "workspacePath", "runtimeHomePath", "engine", "schedule"] : ["id", "name", "instructions", "workspacePath", "runtimeHomePath", "engine"], ["mcp", "moltnet", "memory", "attention", "recording"], label);
     return {
         id: nonEmpty(agent.id, `${label}.id`), name: nonEmpty(agent.name, `${label}.name`), instructions: nonEmpty(agent.instructions, `${label}.instructions`, ORGANIZATION_RUNTIME_MAX_INSTRUCTIONS_CODEPOINTS), workspacePath: absolute(agent.workspacePath, `${label}.workspacePath`), runtimeHomePath: absolute(agent.runtimeHomePath, `${label}.runtimeHomePath`), engine: engine(agent.engine, `${label}.engine`),
         ...(agent.attention === undefined ? {} : { attention: parseAttention(agent.attention) }),
+        ...(agent.recording === undefined ? {} : { recording: parseRecording(agent.recording) }),
         ...(v2 ? { schedule: schedule(agent.schedule, `${label}.schedule`) } : {}),
         ...(agent.mcp === undefined ? {} : { mcp: mcpServers(agent.mcp, `${label}.mcp`) }),
         ...(agent.moltnet === undefined ? {} : { moltnet: moltnet(agent.moltnet, `${label}.moltnet`) }),

package/dist/runtime/organizationRuntimeReadiness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizationRuntimeReadiness.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeReadiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAmC,KAAK,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAEhH,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IACtD,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC,KAAK,EAAE,gCAAgC,CAAC;IACxC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC,CAAC;AAEH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,gCAAgC,CAAC,CA8D3C"}
+{"version":3,"file":"organizationRuntimeReadiness.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeReadiness.ts"],"names":[],"mappings":"AACA,OAAO,EAA6B,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAIjG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAmC,KAAK,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAEhH,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IACtD,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC,KAAK,EAAE,gCAAgC,CAAC;IACxC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC,CAAC;AAEH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,gCAAgC,CAAC,CAiE3C"}

package/dist/runtime/organizationRuntimeReadiness.js

@@ -1,9 +1,17 @@
+import { reportEngineTaskClockGap } from "../pi/engineTaskClock.js";
 import { startAgySubscriptionRealm } from "./agySubscriptionRealm.js";
 import { prepareEngineExecutable, verifyAgySubscriptionEnrollment } from "./engineReadiness.js";
+import { readTaskClock } from "./taskClock.js";
+import { memoryClockOptions } from "../pi/memoryClock.js";
 import { prepareOrganizationRuntimePaths } from "./physicalReadiness.js";
 import { materializePortableCredential } from "./portableCredentialMaterial.js";
 import { EngineBrokerControlClient } from "./engineBrokerControlClient.js";
 export async function prepareProductionReadiness(config) {
+    const clock = readTaskClock();
+    for (const agent of config.agents)
+        reportEngineTaskClockGap(agent.engine.kind);
+    if (config.agents.some((agent) => agent.memory !== undefined))
+        memoryClockOptions(clock);
     const paths = await prepareOrganizationRuntimePaths(config.agents);
     let realm;
     let grokBroker;

package/dist/runtime/organizationRuntimeRecording.d.ts

@@ -0,0 +1,7 @@
+import { type WakeMomentRecording } from "../contracts/wakeMomentContract.js";
+import type { OrganizationRuntimeAgentConfig } from "./organizationRuntime.js";
+/** Receives the parser's already cloned JSON data; no I/O or caller hooks. */
+export declare function parseRecording(value: unknown): WakeMomentRecording;
+export declare function isolateRecording(agents: readonly OrganizationRuntimeAgentConfig[]): void;
+export declare function pathsOverlap(left: string, right: string): boolean;
+//# sourceMappingURL=organizationRuntimeRecording.d.ts.map

package/dist/runtime/organizationRuntimeRecording.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationRuntimeRecording.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeRecording.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAE/E,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAgBlE;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,8BAA8B,EAAE,GAAG,IAAI,CAYxF;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEjE"}