@noopolis/daimon 0.2.0 → 0.2.1

package/dist/runtime/organizationRuntimeRecording.js

@@ -0,0 +1,58 @@
+import path from "node:path";
+import { WAKE_MOMENTS } from "../contracts/wakeMomentContract.js";
+/** Receives the parser's already cloned JSON data; no I/O or caller hooks. */
+export function parseRecording(value) {
+    const input = exact(value, ["directory", "keepMs", "snapshots"]);
+    const directory = absolute(input.directory);
+    if (typeof input.keepMs !== "number" || !Number.isSafeInteger(input.keepMs) || input.keepMs <= 0)
+        throw new TypeError("recording.keepMs must be a positive safe integer");
+    if (!Array.isArray(input.snapshots) || input.snapshots.length > WAKE_MOMENTS.maxSnapshotRoots)
+        throw new TypeError("recording.snapshots must have 0..16 roots");
+    const ids = new Set(), paths = new Set();
+    const snapshots = input.snapshots.map((value) => {
+        const root = exact(value, ["id", "path"]);
+        if (typeof root.id !== "string" || !/^[A-Za-z0-9._-]{1,128}$/.test(root.id))
+            throw new TypeError("recording snapshot id is invalid");
+        const source = absolute(root.path);
+        if (ids.has(root.id) || paths.has(source))
+            throw new TypeError("recording snapshots must have unique ids and paths");
+        if (pathsOverlap(source, directory))
+            throw new TypeError("recording snapshot and directory must not overlap");
+        ids.add(root.id);
+        paths.add(source);
+        return { id: root.id, path: source };
+    });
+    return { directory, keepMs: input.keepMs, snapshots };
+}
+export function isolateRecording(agents) {
+    for (const agent of agents) {
+        if (!agent.recording)
+            continue;
+        for (const peer of agents) {
+            for (const root of [peer.workspacePath, peer.runtimeHomePath, ...(peer.id === agent.id || !peer.recording ? [] : [peer.recording.directory])]) {
+                if (pathsOverlap(agent.recording.directory, root))
+                    throw new TypeError("recording.directory must not overlap runtime roots");
+            }
+            for (const snapshot of peer.recording?.snapshots ?? []) {
+                if (pathsOverlap(agent.recording.directory, snapshot.path))
+                    throw new TypeError("recording.directory must not overlap snapshot roots");
+            }
+        }
+    }
+}
+export function pathsOverlap(left, right) {
+    return left === right || left === "/" || right === "/" || left.startsWith(`${right}/`) || right.startsWith(`${left}/`);
+}
+function exact(value, keys) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new TypeError("recording requires objects");
+    if (Object.keys(value).length !== keys.length || keys.some((key) => !Object.hasOwn(value, key)))
+        throw new TypeError("recording has invalid fields");
+    return value;
+}
+function absolute(value) {
+    if (typeof value !== "string" || !path.posix.isAbsolute(value) || value.includes("\0") || [...value].length > 4_096 || Buffer.byteLength(value) > 16_384)
+        throw new TypeError("recording paths must be bounded absolute POSIX paths");
+    // Match workspacePath/runtimeHomePath: canonicalize before testing equality/overlap.
+    return path.posix.normalize(value).replace(/\/+$/, "") || "/";
+}

package/dist/runtime/physicalReadiness.d.ts

@@ -1,4 +1,12 @@
+import { type Stats } from "node:fs";
+import { lstat } from "node:fs/promises";
 import type { OrganizationRuntimeAgentConfig } from "./organizationRuntime.js";
+type Identity = Readonly<{
+    dev: number;
+    ino: number;
+    uid: number;
+    mode: number;
+}>;
 /**
  * `private` is every engine's runtime home: 0700, nothing but the runtime user.
  *
@@ -24,10 +32,12 @@ export type OrganizationRuntimePathAuthority = Readonly<{
         workspacePath: string;
         runtimeHomePath: string;
         verify(): Promise<void>;
+        verifyRecording?(): Promise<void>;
     }>;
     close(): Promise<void>;
 }>;
 export declare function prepareOrganizationRuntimePaths(agents: readonly OrganizationRuntimeAgentConfig[]): Promise<OrganizationRuntimePathAuthority>;
+export declare function assertNoSymlinkComponents(target: string, stat?: typeof lstat): Promise<void>;
 /** Identity of the process Daimon runs as; a seam so every refusal is testable unprivileged. */
 export type RuntimeIdentity = Readonly<{
     uid: number;
@@ -43,5 +53,7 @@ type DirectoryEntry = Readonly<{
 }>;
 /** Pure shape check for a caller-prepared runtime root. */
 export declare function assertRuntimeDirectory(entry: DirectoryEntry, label: string, shape: DirectoryShape, runtime: RuntimeIdentity): void;
+export declare function identity(entry: Stats): Identity;
+export declare function sameIdentity(left: Identity, right: Identity): boolean;
 export {};
 //# sourceMappingURL=physicalReadiness.d.ts.map

package/dist/runtime/physicalReadiness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"physicalReadiness.d.ts","sourceRoot":"","sources":["../../src/runtime/physicalReadiness.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAG/E;;;;;;;;;;;;;;GAcG;AACH,KAAK,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,oBAAoB,CAAC;AAGhE;;;GAGG;AACH,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,8BAA8B,GAAG,QAAQ,CAAC;QACxD,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;KACzB,CAAC,CAAC;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC,CAAC;AAOH,wBAAsB,+BAA+B,CACnD,MAAM,EAAE,SAAS,8BAA8B,EAAE,GAChD,OAAO,CAAC,gCAAgC,CAAC,CA8C3C;AA4CD,gGAAgG;AAChG,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC9F,KAAK,cAAc,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,IAAI,OAAO,CAAC;IAAC,cAAc,IAAI,OAAO,CAAA;CAAE,CAAC,CAAC;AAE9H,2DAA2D;AAC3D,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI,CAalI"}
+{"version":3,"file":"physicalReadiness.d.ts","sourceRoot":"","sources":["../../src/runtime/physicalReadiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAU,KAAK,EAAkB,MAAM,kBAAkB,CAAC;AAIjE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAG/E,KAAK,QAAQ,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAClF;;;;;;;;;;;;;;GAcG;AACH,KAAK,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,oBAAoB,CAAC;AAGhE;;;GAGG;AACH,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,8BAA8B,GAAG,QAAQ,CAAC;QACxD,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QACxB,eAAe,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;KACnC,CAAC,CAAC;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC,CAAC;AAOH,wBAAsB,+BAA+B,CACnD,MAAM,EAAE,SAAS,8BAA8B,EAAE,GAChD,OAAO,CAAC,gCAAgC,CAAC,CA0D3C;AAiCD,wBAAsB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,OAAO,KAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CASzG;AAgBD,gGAAgG;AAChG,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC9F,KAAK,cAAc,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,IAAI,OAAO,CAAC;IAAC,cAAc,IAAI,OAAO,CAAA;CAAE,CAAC,CAAC;AAE9H,2DAA2D;AAC3D,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI,CAalI;AAMD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,QAAQ,CAA0F;AAC1I,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAmH"}

package/dist/runtime/physicalReadiness.js

@@ -1,7 +1,8 @@
 import { constants } from "node:fs";
-import { lstat, open, realpath } from "node:fs/promises";
+import { access, lstat, open, realpath } from "node:fs/promises";
 import path from "node:path";
 import { GROK_ENGINE_BROKER } from "../contracts/runtimeContractManifest.js";
+import { pathsOverlap } from "./organizationRuntimeRecording.js";
 /** Only a brokered Grok agent's home is worker-traversable; every other engine keeps 0700. */
 function runtimeHomeShape(agent) {
     return agent.engine.kind === "grok" ? "worker-traversable" : "private";
@@ -9,12 +10,15 @@ function runtimeHomeShape(agent) {
 export async function prepareOrganizationRuntimePaths(agents) {
     const workspaces = new Map();
     const homes = new Map();
+    const recordings = new Map();
     try {
         for (const agent of agents) {
             workspaces.set(agent.id, await verifyDirectory(agent.workspacePath, "workspacePath", "safe"));
             homes.set(agent.id, await verifyDirectory(agent.runtimeHomePath, "runtimeHomePath", runtimeHomeShape(agent)));
+            if (agent.recording)
+                recordings.set(agent.id, await verifyDirectory(agent.recording.directory, "recording.directory", "private"));
         }
-        const roots = [...workspaces.values(), ...homes.values()];
+        const roots = [...workspaces.values(), ...homes.values(), ...recordings.values()];
         for (let left = 0; left < roots.length; left += 1)
             for (let right = left + 1; right < roots.length; right += 1) {
                 const first = roots[left];
@@ -23,9 +27,15 @@ export async function prepareOrganizationRuntimePaths(agents) {
                     throw new Error(`physical runtime paths overlap: ${first.configured} and ${second.configured}`);
                 }
             }
+        for (const agent of agents)
+            for (const source of agent.recording?.snapshots ?? []) {
+                const real = await readableSnapshotDirectory(source.path);
+                if (real !== undefined && [...recordings.values()].some((store) => pathsOverlap(store.real, real)))
+                    throw new Error("physical recording and snapshot paths overlap");
+            }
     }
     catch (error) {
-        const closeError = await closeAll([...workspaces.values(), ...homes.values()]);
+        const closeError = await closeAll([...workspaces.values(), ...homes.values(), ...recordings.values()]);
         if (closeError !== undefined)
             throw new AggregateError([error, closeError], "runtime path validation cleanup failed");
         throw error;
@@ -49,12 +59,20 @@ export async function prepareOrganizationRuntimePaths(agents) {
             const home = homes.get(agent.id);
             if (workspace === undefined || home === undefined)
                 throw new Error(`no runtime path authority for ${agent.id}`);
-            return { workspacePath: workspace.real, runtimeHomePath: home.real, verify: () => verify(agent) };
+            return { workspacePath: workspace.real, runtimeHomePath: home.real, verify: () => verify(agent),
+                verifyRecording: async () => {
+                    if (closed)
+                        throw new Error("runtime path authority is closed");
+                    const recording = recordings.get(agent.id);
+                    if (recording)
+                        await verifyIdentity(recording, "recording.directory", "private");
+                }
+            };
         },
         async close() {
             if (closed)
                 return;
-            const failure = await closeAll([...workspaces.values(), ...homes.values()]);
+            const failure = await closeAll([...workspaces.values(), ...homes.values(), ...recordings.values()]);
             if (failure !== undefined)
                 throw failure;
             closed = true;
@@ -93,17 +111,33 @@ async function verifyIdentity(directory, label, shape) {
     if (await realpath(directory.configured) !== directory.real)
         throw new Error(`${label} changed after readiness validation`);
 }
-async function assertNoSymlinkComponents(target) {
+export async function assertNoSymlinkComponents(target, stat = lstat) {
     const parsed = path.parse(target);
     let current = parsed.root;
     for (const part of path.relative(parsed.root, target).split(path.sep).filter(Boolean)) {
         current = path.join(current, part);
         // macOS exposes /var as a system compatibility symlink to /private/var.
         // It is an OS-root alias, not a caller-controlled component.
-        if ((await lstat(current)).isSymbolicLink() && current !== "/var")
+        if ((await stat(current)).isSymbolicLink() && current !== "/var")
             throw new Error(`path contains symlink: ${current}`);
     }
 }
+/** Shared sources have no owner/privacy requirement. Missing sources are empty captures. */
+async function readableSnapshotDirectory(target) {
+    try {
+        await assertNoSymlinkComponents(target);
+        const entry = await lstat(target);
+        if (!entry.isDirectory() || entry.isSymbolicLink())
+            throw new Error("recording snapshot must be a readable real directory");
+        await access(target, constants.R_OK | constants.X_OK);
+        return await realpath(target);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+}
 /** Pure shape check for a caller-prepared runtime root. */
 export function assertRuntimeDirectory(entry, label, shape, runtime) {
     if (!entry.isDirectory() || entry.isSymbolicLink())
@@ -127,8 +161,8 @@ export function assertRuntimeDirectory(entry, label, shape, runtime) {
 function assertDirectory(entry, label, shape) {
     assertRuntimeDirectory(entry, label, shape, { uid: process.getuid?.() ?? -1, gid: process.getgid?.() ?? -1 });
 }
-function identity(entry) { return { dev: entry.dev, ino: entry.ino, uid: entry.uid, mode: entry.mode & 0o7777 }; }
-function sameIdentity(left, right) { return left.dev === right.dev && left.ino === right.ino && left.uid === right.uid && left.mode === right.mode; }
+export function identity(entry) { return { dev: entry.dev, ino: entry.ino, uid: entry.uid, mode: entry.mode & 0o7777 }; }
+export function sameIdentity(left, right) { return left.dev === right.dev && left.ino === right.ino && left.uid === right.uid && left.mode === right.mode; }
 function overlaps(left, right) { return left === right || left.startsWith(`${right}${path.sep}`) || right.startsWith(`${left}${path.sep}`); }
 function noFollow() { return constants.O_NOFOLLOW ?? 0; }
 function directoryFlag() { return constants.O_DIRECTORY ?? 0; }

package/dist/runtime/productionAgentTools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"productionAgentTools.d.ts","sourceRoot":"","sources":["../../src/runtime/productionAgentTools.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAMtE,OAAO,KAAK,EAAE,8BAA8B,EAAgC,MAAM,0BAA0B,CAAC;AAM7G,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAe/E,wBAAsB,0BAA0B,CAAC,KAAK,EAAE,8BAA8B,EAAE,WAAW,GAAE,2BAAgC,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAUhK"}
+{"version":3,"file":"productionAgentTools.d.ts","sourceRoot":"","sources":["../../src/runtime/productionAgentTools.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAMtE,OAAO,KAAK,EAAE,8BAA8B,EAAgC,MAAM,0BAA0B,CAAC;AAO7G,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAe/E,wBAAsB,0BAA0B,CAAC,KAAK,EAAE,8BAA8B,EAAE,WAAW,GAAE,2BAAgC,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAahK"}

package/dist/runtime/productionAgentTools.js

@@ -1,4 +1,4 @@
-import { spawn } from "node:child_process";
+import { spawn, readyTaskClockEnvironment } from "./taskClockProcess.js";
 import { createHash } from "node:crypto";
 import { constants } from "node:fs";
 import { lstat, open, readdir, rename, unlink } from "node:fs/promises";
@@ -12,6 +12,7 @@ import { McpToolCallError, MCP_TOOL_RESULT_MAX_BYTES, renderMcpToolResult, repla
 import { ensureRuntimeHomeDirectory } from "./runtimeHomeLayout.js";
 import { capToolResult, resolveExemptToolNames, resolveToolResultMaxBytes, TOOL_OUTPUT_DIRECTORY_NAME } from "./toolResultSpill.js";
 import { cliChildEnvironment } from "../pi/cliEnvironment.js";
+import { taskClockChildEnvironment, taskClockProcessEnvironment, taskClockTimestamp } from "./taskClock.js";
 const MAX_RESULT = 65_536;
 const TIMEOUT = 10_000;
 /**
@@ -25,6 +26,10 @@ const TIMEOUT = 10_000;
  */
 const DAIMON_ACTION_ID_PREFIX = "daimon-";
 export async function createProductionAgentTools(agent, wakeContext = {}) {
+    taskClockChildEnvironment();
+    for (const server of agent.mcp ?? [])
+        taskClockChildEnvironment(server.env);
+    readyTaskClockEnvironment(cliChildEnvironment([], agent.runtimeHomePath));
     await ensureRuntimeHomeDirectory(agent.runtimeHomePath, "tool-state");
     // Resolved once, at agent start: a malformed bound is a configuration error
     // that should refuse the agent, not a surprise thrown from the middle of a
@@ -202,7 +207,8 @@ function moltnetTool(agent, wakeContext) {
             const prior = await priorReceipt(agent, deliveryId);
             if (prior !== undefined) {
                 wakeContext.spokeFor = wakeContext.current;
-                return { content: [{ type: "text", text: JSON.stringify(prior) }], details: prior };
+                const visible = typeof prior.at === "string" ? { ...prior, at: taskClockTimestamp(prior.at) } : prior;
+                return { content: [{ type: "text", text: JSON.stringify(visible) }], details: visible };
             }
             const response = await machine(agent.moltnet.cliPath, agent.moltnet.configPath, input.network, { version: "moltnet.machine.v1", correlation_id: deliveryId, operation: "send_nudge", send_nudge: { delivery_id: deliveryId, target: { kind, id: target }, body: input.text } });
             const result = moltnetOperationResult(response, "send_nudge", "send");
@@ -219,10 +225,11 @@ function moltnetTool(agent, wakeContext) {
     };
 }
 async function connect(agent, server) {
-    const client = new Client({ name: "daimon-production", version: "0.2.0" });
+    taskClockChildEnvironment(server.env);
+    const client = new Client({ name: "daimon-production", version: "0.2.1" });
     const headers = server.authSecretEnv === undefined ? {} : { authorization: `Bearer ${requiredSecret(server.authSecretEnv)}` };
     const transport = server.transport === "stdio"
-        ? new StdioClientTransport({ command: server.command, args: [...server.args], env: stringEnvironment({ ...server.env, ...cliChildEnvironment([], agent.runtimeHomePath, { executablePath: server.command }) }) })
+        ? new StdioClientTransport({ command: server.command, args: [...server.args], env: stringEnvironment(readyTaskClockEnvironment({ ...server.env, ...cliChildEnvironment([], agent.runtimeHomePath, { executablePath: server.command }) })) })
         : server.transport === "sse" ? new SSEClientTransport(new URL(server.url), { requestInit: { headers } })
             : new StreamableHTTPClientTransport(new URL(server.url), { requestInit: { headers } });
     await client.connect(transport);
@@ -286,8 +293,9 @@ finally {
  * no longer cancel it.
  */
 async function machine(cli, config, network, request) {
+    const clockEnvironment = taskClockChildEnvironment();
     return await new Promise((resolve, reject) => {
-        const child = spawn(cli, ["machine", "--config", config, "--network", network], { stdio: ["pipe", "pipe", "pipe"] });
+        const child = spawn(cli, ["machine", "--config", config, "--network", network], { stdio: ["pipe", "pipe", "pipe"], env: taskClockProcessEnvironment(process.env, clockEnvironment) });
         let output = "", error = "", settled = false;
         const settle = (action) => { if (settled)
             return; settled = true; clearTimeout(timer); action(); };

package/dist/runtime/relocateRuntimeConfig.d.ts

@@ -0,0 +1,14 @@
+import { type OrganizationRuntimeConfig } from "./organizationRuntime.js";
+export type RuntimeConfigLocation = Readonly<{
+    workspace: string;
+    home: string;
+    memory: string;
+    /** Both paths are explicit: runtime config declares no control-token file. */
+    controlToken: Readonly<{
+        from: string;
+        to: string;
+    }>;
+}>;
+/** Rebase one memory-backed agent's path prefixes, preserving instructions verbatim. */
+export declare function relocateRuntimeConfig(config: OrganizationRuntimeConfig, location: RuntimeConfigLocation): OrganizationRuntimeConfig;
+//# sourceMappingURL=relocateRuntimeConfig.d.ts.map

package/dist/runtime/relocateRuntimeConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relocateRuntimeConfig.d.ts","sourceRoot":"","sources":["../../src/runtime/relocateRuntimeConfig.ts"],"names":[],"mappings":"AACA,OAAO,EAAkC,KAAK,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAE1G,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,YAAY,EAAE,QAAQ,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtD,CAAC,CAAC;AAEH,wFAAwF;AACxF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,yBAAyB,EAAE,QAAQ,EAAE,qBAAqB,GAAG,yBAAyB,CA8BnI"}

package/dist/runtime/relocateRuntimeConfig.js

@@ -0,0 +1,38 @@
+import { posix } from "node:path";
+import { parseOrganizationRuntimeConfig } from "./organizationRuntime.js";
+/** Rebase one memory-backed agent's path prefixes, preserving instructions verbatim. */
+export function relocateRuntimeConfig(config, location) {
+    const parsed = parseOrganizationRuntimeConfig(config);
+    const agent = parsed.agents[0];
+    if (parsed.agents.length !== 1 || !agent?.memory)
+        throw new TypeError("Relocation requires one memory-backed agent");
+    const mappings = [
+        [agent.workspacePath, location.workspace],
+        [agent.runtimeHomePath, location.home],
+        [agent.memory.runtimeHomePath, location.memory],
+        [location.controlToken.from, location.controlToken.to]
+    ];
+    for (const pair of mappings)
+        for (const value of pair) {
+            if (typeof value !== "string" || !posix.isAbsolute(value) || posix.normalize(value) !== value || value === "/" || value.endsWith("/") || value.includes("\\") || value.includes("\0")) {
+                throw new TypeError("Relocation paths must be canonical absolute POSIX paths other than root");
+            }
+        }
+    // Memory may live below home; the most specific source must own that subtree.
+    const ordered = [...mappings].sort(([a], [b]) => b.length - a.length);
+    if (new Set(ordered.map(([source]) => source)).size !== ordered.length)
+        throw new TypeError("Relocation source paths must be distinct");
+    const relocate = (value) => {
+        if (typeof value === "string") {
+            const mapping = ordered.find(([source]) => value === source || value.startsWith(`${source}/`));
+            return mapping ? mapping[1] + value.slice(mapping[0].length) : value;
+        }
+        if (Array.isArray(value))
+            return value.map(relocate);
+        if (value !== null && typeof value === "object") {
+            return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, key === "instructions" ? item : relocate(item)]));
+        }
+        return value;
+    };
+    return parseOrganizationRuntimeConfig(relocate(parsed));
+}

package/dist/runtime/schedule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schedule.d.ts","sourceRoot":"","sources":["../../src/runtime/schedule.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,8BAA8B,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAK5G,eAAO,MAAM,kBAAkB,aAAgB,CAAC;AAKhD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACxH,KAAK,cAAc,GAAG,OAAO,CAAC,2BAA2B,EAAE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AAGjF,KAAK,KAAK,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;AAE3C,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IAAE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAAC;AACrI,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,SAAS,8BAA8B,EAAE,CAAC;IAClD,8EAA8E;IAC9E,MAAM,CAAC,UAAU,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACjE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,iJAAiJ;IACjJ,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,KAAK,CAAC;IAC5D,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACpC,4EAA4E;IAC5E,qBAAqB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,gBAAgB,KAAK,IAAI,CAAC;CAC9F,CAAC,CAAC;AAEH,wFAAwF;AACxF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,kBAAkB,CA8F/F;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,mBAAmB,CAGxG;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAKpE;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAU1H;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAA8E;AAEnI,iHAAiH;AACjH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,cAAc,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,MAAM,GAAG,MAAM,CAKjG"}
+{"version":3,"file":"schedule.d.ts","sourceRoot":"","sources":["../../src/runtime/schedule.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,8BAA8B,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAK5G,eAAO,MAAM,kBAAkB,aAAgB,CAAC;AAKhD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACxH,KAAK,cAAc,GAAG,OAAO,CAAC,2BAA2B,EAAE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AAGjF,KAAK,KAAK,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;AAE3C,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IAAE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAAC;AACrI,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,SAAS,8BAA8B,EAAE,CAAC;IAClD,8EAA8E;IAC9E,MAAM,CAAC,UAAU,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACjE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,iJAAiJ;IACjJ,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,KAAK,CAAC;IAC5D,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACpC,4EAA4E;IAC5E,qBAAqB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,gBAAgB,KAAK,IAAI,CAAC;CAC9F,CAAC,CAAC;AAEH,wFAAwF;AACxF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,kBAAkB,CA8F/F;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,mBAAmB,CAIxG;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAKpE;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAY1H;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAA8E;AAEnI,iHAAiH;AACjH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,cAAc,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,MAAM,GAAG,MAAM,CAKjG"}

package/dist/runtime/schedule.js

@@ -1,3 +1,4 @@
+import { assertTaskInstant, validTaskInstant } from "./taskClock.js";
 import { createHash, randomUUID } from "node:crypto";
 import { constants } from "node:fs";
 import { lstat, open, readFile, rename, unlink } from "node:fs/promises";
@@ -11,7 +12,7 @@ const MAX_SEARCH_CHECKS = 1_000_000;
 const CRON_FIELD_BOUNDS = [[0, 59], [0, 23], [1, 31], [1, 12], [0, 7]];
 /** Schedules create durable pending occurrences; engine execution remains elsewhere. */
 export function createScheduleController(options) {
-    const now = options.now ?? Date.now;
+    const now = () => assertTaskInstant((options.now ?? Date.now)());
     const random = options.random ?? Math.random;
     const setTimer = options.setTimer ?? ((callback, delay) => setTimeout(callback, delay));
     const clearTimer = options.clearTimer ?? clearTimeout;
@@ -131,6 +132,7 @@ export function createScheduleController(options) {
     };
 }
 export function occurrenceFor(agentId, schedule, at) {
+    assertTaskInstant(at);
     const local = schedule.kind === "cron" ? occurrenceForOffset(at, schedule.timezone) : new Date(at).toISOString();
     return { agentId, occurredAt: new Date(at).toISOString(), prompt: schedule.prompt, deliveryId: `schedule:${identity(agentId, schedule)}:${local}` };
 }
@@ -142,16 +144,19 @@ export function isCanonicalScheduleDeliveryId(value) {
         || /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}@(?:GMT(?:[+-]\d{2}:\d{2})?|UTC)$/u.test(occurrence);
 }
 export function nextOccurrence(agentId, schedule, anchor, from) {
+    assertTaskInstant(from);
+    if (anchor !== undefined)
+        assertTaskInstant(anchor);
     if (schedule.kind === "every") {
         const base = anchor ?? from;
-        return base > from ? base : base + (Math.floor((from - base) / schedule.interval_ms) + 1) * schedule.interval_ms;
+        return assertTaskInstant(base > from ? base : base + (Math.floor((from - base) / schedule.interval_ms) + 1) * schedule.interval_ms);
     }
     const fields = parseCron(schedule.cron);
     if (!calendarPossible(fields))
         throw new Error(`schedule ${agentId} is impossible`);
     const found = searchCron(fields, schedule.timezone, from, from + SEARCH_HORIZON_MS, 1);
     if (found !== undefined)
-        return found;
+        return assertTaskInstant(found);
     throw new Error(`schedule ${agentId} has no occurrence within the deterministic search bound`);
 }
 export function cronIsPossible(cron) { try {
@@ -170,7 +175,7 @@ export function jitterOffsetMs(schedule, random) {
 }
 function withFireTarget(entry, schedule, random) {
     const offset = jitterOffsetMs(schedule, random);
-    return offset === 0 ? entry : { ...entry, fire_at_ms: entry.next_due_ms + offset };
+    return offset === 0 ? entry : { ...entry, fire_at_ms: assertTaskInstant(entry.next_due_ms + offset) };
 }
 function withoutPending(entry) {
     return { next_due_ms: entry.next_due_ms, ...(entry.fire_at_ms === undefined ? {} : { fire_at_ms: entry.fire_at_ms }) };
@@ -306,13 +311,13 @@ async function restore(file, allowed) {
         const keys = Object.keys(entry).sort().join();
         if (!["fire_at_ms,next_due_ms", "fire_at_ms,latest_pending,next_due_ms", "latest_pending,next_due_ms", "next_due_ms"].includes(keys))
             throw new Error("schedule state is invalid");
-        if (!Number.isSafeInteger(entry.next_due_ms) || entry.next_due_ms < 0)
+        if (!validTaskInstant(entry.next_due_ms))
             throw new Error("schedule state is invalid");
         const nextDue = entry.next_due_ms;
         const fireAt = entry.fire_at_ms;
         if (fireAt !== undefined) {
             const maximumFireAt = nextDue + jitterOffsetMs(allowed.get(key).schedule, () => 0.999_999_999);
-            if (!Number.isSafeInteger(fireAt) || fireAt < nextDue || fireAt > maximumFireAt)
+            if (!validTaskInstant(fireAt) || fireAt < nextDue || fireAt > maximumFireAt)
                 throw new Error("schedule state is invalid");
         }
         const pending = entry.latest_pending === undefined ? undefined : parseOccurrence(entry.latest_pending);
@@ -338,7 +343,7 @@ function parseOccurrence(value) {
     if (Object.keys(item).sort().join() !== "agentId,deliveryId,occurredAt,prompt" || Object.values(item).some((entry) => typeof entry !== "string" || Buffer.byteLength(entry, "utf8") > 16_384))
         throw new Error("schedule state is invalid");
     const occurredAt = item.occurredAt;
-    if (Number.isNaN(Date.parse(occurredAt)) || new Date(occurredAt).toISOString() !== occurredAt || !/^schedule:[a-f0-9]{64}:/u.test(item.deliveryId))
+    if (!validTaskInstant(Date.parse(occurredAt)) || new Date(occurredAt).toISOString() !== occurredAt || !/^schedule:[a-f0-9]{64}:/u.test(item.deliveryId))
         throw new Error("schedule state is invalid");
     return item;
 }

package/dist/runtime/storeCoordination.d.ts

@@ -15,6 +15,16 @@ export type StoreHostRegistrationIdentity = StoreHostRegistration & Readonly<{
 }>;
 export declare function acquireHostRegistration(root: string, directory: Awaited<ReturnType<typeof open>>, identity: StoreProcessIdentity): Promise<StoreHostRegistration>;
 export declare function releaseHostRegistration(root: string, directory: Awaited<ReturnType<typeof open>>, registration: StoreHostRegistration): Promise<void>;
+/**
+ * Remove `.host-online-*` markers left by hosts that are provably dead in this
+ * PID namespace. A host only ever removes its own marker on a clean close, so
+ * every crash, kill or container recreate left one behind (148 by 2026-10-05),
+ * and the markers count against the store's directory bound. The opening host,
+ * live owners, other namespaces and anything unreadable are left untouched.
+ */
+export declare function pruneDeadHostRegistrations(root: string, directory: Awaited<ReturnType<typeof open>>, self: StoreHostRegistration, liveness: (owner: StoreHostRegistration & Readonly<{
+    generation: string;
+}>) => Promise<boolean>): Promise<number>;
 /** Admin callers hold their durable offline lease before calling this. */
 export declare function listHostRegistrations(root: string): Promise<readonly StoreHostRegistrationIdentity[]>;
 /** Returns undefined when any registration is live, unknown, or changed. */

package/dist/runtime/storeCoordination.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storeCoordination.d.ts","sourceRoot":"","sources":["../../src/runtime/storeCoordination.ts"],"names":[],"mappings":"AAEA,OAAO,EAAS,IAAI,EAA6B,MAAM,kBAAkB,CAAC;AAG1E,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC3J,MAAM,MAAM,qBAAqB,GAAG,oBAAoB,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC1F,MAAM,MAAM,6BAA6B,GAAG,qBAAqB,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE3G,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAWvK;AAED,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,YAAY,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAM3J;AAED,0EAA0E;AAC1E,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,6BAA6B,EAAE,CAAC,CAA0O;AACtV,4EAA4E;AAC5E,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,OAAO,CAAC,OAAO,CAAC,EAAE,wBAAwB,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,CAgB/R;AAkBD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,6BAA6B,GAAG,MAAM,CAA6E"}
+{"version":3,"file":"storeCoordination.d.ts","sourceRoot":"","sources":["../../src/runtime/storeCoordination.ts"],"names":[],"mappings":"AAEA,OAAO,EAAS,IAAI,EAA6B,MAAM,kBAAkB,CAAC;AAG1E,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC3J,MAAM,MAAM,qBAAqB,GAAG,oBAAoB,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC1F,MAAM,MAAM,6BAA6B,GAAG,qBAAqB,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE3G,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAWvK;AAED,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,YAAY,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAM3J;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,qBAAqB,GAAG,QAAQ,CAAC;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAWzP;AAED,0EAA0E;AAC1E,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,6BAA6B,EAAE,CAAC,CAA0O;AACtV,4EAA4E;AAC5E,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,OAAO,CAAC,OAAO,CAAC,EAAE,wBAAwB,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,CAgB/R;AAkBD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,6BAA6B,GAAG,MAAM,CAA6E"}

package/dist/runtime/storeCoordination.js

@@ -22,6 +22,29 @@ export async function releaseHostRegistration(root, directory, registration) {
     await unlink(target);
     await directory.sync();
 }
+/**
+ * Remove `.host-online-*` markers left by hosts that are provably dead in this
+ * PID namespace. A host only ever removes its own marker on a clean close, so
+ * every crash, kill or container recreate left one behind (148 by 2026-10-05),
+ * and the markers count against the store's directory bound. The opening host,
+ * live owners, other namespaces and anything unreadable are left untouched.
+ */
+export async function pruneDeadHostRegistrations(root, directory, self, liveness) {
+    let pruned = 0;
+    for (const entry of await readdir(root)) {
+        if (!/^\.host-online-[0-9a-f-]{36}\.json$/iu.test(entry) || entry === `.host-online-${self.owner_id}.json`)
+            continue;
+        const owner = await readRegistration(path.join(root, entry)).catch(() => undefined);
+        // This very process is alive by definition, whichever store in it registered the marker.
+        if (owner === undefined || !sameNamespace(owner, self) || (owner.pid === self.pid && owner.process_start === self.process_start && owner.boot_id === self.boot_id) || await liveness({ ...owner, generation: owner.owner_id }).catch(() => true))
+            continue;
+        await unlink(path.join(root, entry)).catch(() => undefined);
+        pruned += 1;
+    }
+    if (pruned > 0)
+        await directory.sync();
+    return pruned;
+}
 /** Admin callers hold their durable offline lease before calling this. */
 export async function listHostRegistrations(root) { const result = []; for (const entry of await readdir(root)) {
     if (/^\.host-online-[0-9a-f-]{36}\.json$/iu.test(entry))

package/dist/runtime/taskClock.d.ts

@@ -0,0 +1,42 @@
+export declare const TASK_CLOCK_ENV = "NOOPOLIS_TASK_CLOCK";
+export declare const TASK_CLOCK_VERSION = "noopolis.task-clock.v1";
+export declare const TASK_CLOCK_MIN_MS = 0;
+export declare const TASK_CLOCK_MAX_MS = 253402300799999;
+export declare function validTaskInstant(value: unknown): value is number;
+export declare function assertTaskInstant(value: number): number;
+export type TaskClock = Readonly<{
+    raw: string;
+    origin: string;
+    anchorEpochMs: number;
+    /** Convert a real epoch timestamp without resetting the shared anchor. */
+    at(realEpochMs: number): number;
+    now(): number;
+}>;
+/** Environment-only contract: no clock callbacks or compiler config in the public API. */
+export declare function readTaskClock(environment?: NodeJS.ProcessEnv): TaskClock | undefined;
+export declare function parseTaskClock(raw: string | undefined): TaskClock | undefined;
+/** The caller installs libfaketime; Daimon derives one process-independent offset. */
+export declare function taskClockChildEnvironment(declared?: NodeJS.ProcessEnv, clock?: Readonly<{
+    raw: string;
+    origin: string;
+    anchorEpochMs: number;
+    /** Convert a real epoch timestamp without resetting the shared anchor. */
+    at(realEpochMs: number): number;
+    now(): number;
+}> | undefined, environment?: NodeJS.ProcessEnv): Record<string, string>;
+/** Inherited environments must not reintroduce another offset owner or loader controls. */
+export declare function taskClockProcessEnvironment(inherited: NodeJS.ProcessEnv, derived?: Record<string, string>): NodeJS.ProcessEnv;
+/** Provider/auth/control processes must never inherit the agent's process clock. */
+export declare function realTimeProcessEnvironment(inherited: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/** Reject mixed loader lists: unrelated libraries must never ride this exception. */
+export declare function taskClockPreload(value: string | undefined): string | undefined;
+/** Project real delivery/receipt timestamps, never historical dates inside tool payloads. */
+export declare function taskClockTimestamp(realTimestamp: string, clock?: Readonly<{
+    raw: string;
+    origin: string;
+    anchorEpochMs: number;
+    /** Convert a real epoch timestamp without resetting the shared anchor. */
+    at(realEpochMs: number): number;
+    now(): number;
+}> | undefined): string;
+//# sourceMappingURL=taskClock.d.ts.map

package/dist/runtime/taskClock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"taskClock.d.ts","sourceRoot":"","sources":["../../src/runtime/taskClock.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc,wBAAwB,CAAC;AACpD,eAAO,MAAM,kBAAkB,2BAA2B,CAAC;AAC3D,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC,eAAO,MAAM,iBAAiB,kBAAsB,CAAC;AAErD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEhE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGvD;AAED,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,EAAE,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,GAAG,IAAI,MAAM,CAAC;CACf,CAAC,CAAC;AAEH,0FAA0F;AAC1F,wBAAgB,aAAa,CAAC,WAAW,GAAE,MAAM,CAAC,UAAwB,GAAG,SAAS,GAAG,SAAS,CAEjG;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAc7E;AAED,sFAAsF;AACtF,wBAAgB,yBAAyB,CACvC,QAAQ,GAAE,MAAM,CAAC,UAAe,EAAE,KAAK;SA/BlC,MAAM;YACH,MAAM;mBACC,MAAM;IACrB,0EAA0E;oBAC1D,MAAM,GAAG,MAAM;WACxB,MAAM;cA0B4C,EAAE,WAAW,GAAE,MAAM,CAAC,UAAwB,GACtG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAqBxB;AAED,2FAA2F;AAC3F,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,yBAA8B,GAClE,MAAM,CAAC,UAAU,CAGnB;AAMD,oFAAoF;AACpF,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAG1F;AAED,qFAAqF;AACrF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAG9E;AAED,6FAA6F;AAC7F,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK;SAhFxD,MAAM;YACH,MAAM;mBACC,MAAM;IACrB,0EAA0E;oBAC1D,MAAM,GAAG,MAAM;WACxB,MAAM;cA2EkE,GAAG,MAAM,CAEzF"}