@noopolis/daimon 0.2.0 → 0.2.1

package/dist/runtime/wakeAcceptanceProcessIdentity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wakeAcceptanceProcessIdentity.d.ts","sourceRoot":"","sources":["../../src/runtime/wakeAcceptanceProcessIdentity.ts"],"names":[],"mappings":"AACA,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC3L,qBAAa,8BAA+B,SAAQ,KAAK;IAAG,QAAQ,CAAC,IAAI,EAAG,iCAAiC,CAAU;;CAAmF;AAC1M,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,mBAAmB,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,mBAAmB,GAAG,mBAAmB,CAAC,GAAG,OAAO,CAAqH;AAC1S,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC,CAKvG;AACD,wBAAsB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAO3E"}
+{"version":3,"file":"wakeAcceptanceProcessIdentity.d.ts","sourceRoot":"","sources":["../../src/runtime/wakeAcceptanceProcessIdentity.ts"],"names":[],"mappings":"AACA,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC3L,KAAK,iBAAiB,GAAG,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,CAAC;AAC/J,qBAAa,8BAA+B,SAAQ,KAAK;IAE3C,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB;IAD/C,QAAQ,CAAC,IAAI,EAAG,iCAAiC,CAAU;gBACtC,MAAM,CAAC,EAAE,iBAAiB,YAAA;CAChD;AACD,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,mBAAmB,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,mBAAmB,GAAG,mBAAmB,CAAC,GAAG,OAAO,CAAqH;AAC1S,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC,CAKvG;AACD,wBAAsB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAO3E"}

package/dist/runtime/wakeAcceptanceProcessIdentity.js

@@ -1,7 +1,11 @@
 import { readFile, stat } from "node:fs/promises";
 export class WakeTransitionLockBlockedError extends Error {
+    detail;
     code = "offline_reconciliation_required";
-    constructor() { super("wake transition lock requires offline reconciliation"); }
+    constructor(detail) {
+        super(`wake transition lock requires offline reconciliation${detail === undefined ? "" : `: step=${detail.step} assertion=transition_lock_namespace ${JSON.stringify(detail)}`}`);
+        this.detail = detail;
+    }
 }
 export function sameNamespace(left, right) { return left.pid_namespace_dev === right.pid_namespace_dev && left.pid_namespace_ino === right.pid_namespace_ino; }
 export async function currentProcessIdentity() {

package/dist/runtime/wakeAcceptanceRecord.d.ts

@@ -6,6 +6,8 @@ export type StoredWakeAcceptanceRecord = Readonly<{
     request_digest: string;
     event: OrganizationRuntimeWakeAcceptanceRequest["event"];
     state: WakeReceiptState;
+    /** Set only through native scheduler acceptance; absent means a real delivery instant. */
+    native_schedule?: true;
     accepted_at: string;
     updated_at: string;
     claim_generation?: string;

package/dist/runtime/wakeAcceptanceRecord.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wakeAcceptanceRecord.d.ts","sourceRoot":"","sources":["../../src/runtime/wakeAcceptanceRecord.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,iCAAiC,EACtC,KAAK,wCAAwC,EAC7C,KAAK,oCAAoC,EACzC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAEtB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAChD,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IACrF,KAAK,EAAE,wCAAwC,CAAC,OAAO,CAAC,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAClF,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,eAAe,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CAChL,CAAC,CAAC;AAEH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,0BAA0B,GAAG,iCAAiC,CAEtG;AACD,wBAAgB,YAAY,CAAC,MAAM,EAAE,0BAA0B,GAAG,oCAAoC,CAErG;AACD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,0BAA0B,CA0BpF;AAMD,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5D"}
+{"version":3,"file":"wakeAcceptanceRecord.d.ts","sourceRoot":"","sources":["../../src/runtime/wakeAcceptanceRecord.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,iCAAiC,EACtC,KAAK,wCAAwC,EAC7C,KAAK,oCAAoC,EACzC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAEtB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAChD,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IACrF,KAAK,EAAE,wCAAwC,CAAC,OAAO,CAAC,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAClF,0FAA0F;IAC1F,eAAe,CAAC,EAAE,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,eAAe,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CAChL,CAAC,CAAC;AAEH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,0BAA0B,GAAG,iCAAiC,CAEtG;AACD,wBAAgB,YAAY,CAAC,MAAM,EAAE,0BAA0B,GAAG,oCAAoC,CAErG;AACD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,0BAA0B,CA2BpF;AAMD,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5D"}

package/dist/runtime/wakeAcceptanceRecord.js

@@ -10,10 +10,12 @@ export function parseStoredWakeAcceptance(value) {
     if (value === null || typeof value !== "object" || Array.isArray(value))
         throw new Error("wake acceptance record is invalid");
     const record = value;
-    const keys = ["acceptance_id", "agent_id", "delivery_id", "request_digest", "event", "state", "accepted_at", "updated_at", "claim_generation", "execution_id", "deferred", "execution_error", "code", "text"];
+    const keys = ["acceptance_id", "agent_id", "delivery_id", "request_digest", "event", "state", "accepted_at", "updated_at", "claim_generation", "execution_id", "deferred", "execution_error", "code", "text", "native_schedule"];
     if (Object.keys(record).some((key) => !keys.includes(key)))
         throw new Error("wake acceptance record is invalid");
     const parsed = parseWakeAcceptanceRequest({ token: undefined, agent_id: string(record.agent_id), delivery_id: string(record.delivery_id), event: record.event });
+    if (record.native_schedule !== undefined && (record.native_schedule !== true || parsed.event.kind !== "schedule"))
+        throw new Error("wake acceptance schedule provenance is invalid");
     const state = string(record.state);
     if (!["accepted", "running", "completed", "failed", "stopped"].includes(state))
         throw new Error("wake acceptance record is invalid");
@@ -42,7 +44,7 @@ export function parseStoredWakeAcceptance(value) {
         throw new Error("wake acceptance record is invalid");
     if (string(record.request_digest) !== wakeAcceptanceDigest(parsed) || !uuid(string(record.acceptance_id)))
         throw new Error("wake acceptance record is invalid");
-    return { acceptance_id: string(record.acceptance_id), agent_id: parsed.agent_id, delivery_id: parsed.delivery_id, request_digest: string(record.request_digest), event: parsed.event, state, accepted_at: timestamp(record.accepted_at), updated_at: timestamp(record.updated_at), ...(claimGeneration === undefined ? {} : { claim_generation: claimGeneration }), ...(executionId === undefined ? {} : { execution_id: executionId }), ...(record.deferred === undefined ? {} : { deferred: record.deferred }), ...(code === undefined ? {} : { code }), ...(completionText === undefined ? {} : { text: completionText }), ...(executionError === undefined ? {} : { execution_error: executionError }) };
+    return { acceptance_id: string(record.acceptance_id), agent_id: parsed.agent_id, delivery_id: parsed.delivery_id, request_digest: string(record.request_digest), event: parsed.event, state, accepted_at: timestamp(record.accepted_at), updated_at: timestamp(record.updated_at), ...(record.native_schedule === true ? { native_schedule: true } : {}), ...(claimGeneration === undefined ? {} : { claim_generation: claimGeneration }), ...(executionId === undefined ? {} : { execution_id: executionId }), ...(record.deferred === undefined ? {} : { deferred: record.deferred }), ...(code === undefined ? {} : { code }), ...(completionText === undefined ? {} : { text: completionText }), ...(executionError === undefined ? {} : { execution_error: executionError }) };
 }
 function string(value) { if (typeof value !== "string")
     throw new Error("wake acceptance record is invalid"); return value; }

package/dist/runtime/wakeAcceptanceRetention.d.ts

@@ -1,12 +1,36 @@
 export declare const TERMINAL_RECEIPT_IDEMPOTENCY_HORIZON = 2048;
 export declare const WAKE_ACCEPTANCE_COMPACTION_THRESHOLD = 2112;
 export declare const MAX_WAKE_ACCEPTANCE_RECORDS = 2176;
+/**
+ * How long a delivery may sit in `accepted` before the store stops it.
+ *
+ * Inbox agents return every delivery they did not dispose of to `accepted`
+ * (deferred), and a failed execution keeps its batch for retry. Nothing ever
+ * ended either, so by 2026-10-05 213 deliveries up to two weeks old sat in the
+ * queue, were re-offered on every wake, and kept the store at its bound. A
+ * day is longer than any delivery stays actionable in a daily organization: at
+ * two days, deliveries from 2026-10-05 were still being retried — and failing —
+ * through 10-07's edition. The dispatcher stops an expired delivery
+ * `queued_wake_stopped` the first time it meets one and says so on stderr
+ * (`attentionDispatcher.ts`), rather than leaving it hidden until compaction.
+ */
+export declare const STALE_QUEUED_DELIVERY_MS: number;
 export type RetentionCandidate = Readonly<{
     file: string;
     state: "accepted" | "running" | "completed" | "failed" | "stopped";
     updatedAt: string;
+    acceptedAt?: string;
     acceptanceId: string;
 }>;
-/** Active work is never eligible; the newest terminal receipt horizon survives. */
+/** Queued, unclaimed deliveries accepted before the staleness horizon. Running or claimed work never qualifies. */
+export declare function staleQueuedFilesToStop(records: readonly (RetentionCandidate & Readonly<{
+    claimed: boolean;
+}>)[], nowMs: number): readonly string[];
+/**
+ * Active work is never eligible. The newest terminal receipts survive up to the
+ * idempotency horizon, but never so many that active work plus kept receipts
+ * still sits at the compaction threshold: a horizon that ignores active work
+ * lets parked deliveries hold the store at its bound with nothing to compact.
+ */
 export declare function terminalFilesToCompact(records: readonly RetentionCandidate[]): readonly string[];
 //# sourceMappingURL=wakeAcceptanceRetention.d.ts.map

package/dist/runtime/wakeAcceptanceRetention.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wakeAcceptanceRetention.d.ts","sourceRoot":"","sources":["../../src/runtime/wakeAcceptanceRetention.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oCAAoC,OAAQ,CAAC;AAC1D,eAAO,MAAM,oCAAoC,OAAQ,CAAC;AAC1D,eAAO,MAAM,2BAA2B,OAAQ,CAAC;AAEjD,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAEH,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,MAAM,EAAE,CAMhG"}
+{"version":3,"file":"wakeAcceptanceRetention.d.ts","sourceRoot":"","sources":["../../src/runtime/wakeAcceptanceRetention.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oCAAoC,OAAQ,CAAC;AAC1D,eAAO,MAAM,oCAAoC,OAAQ,CAAC;AAC1D,eAAO,MAAM,2BAA2B,OAAQ,CAAC;AACjD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,wBAAwB,QAAmB,CAAC;AAEzD,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAEH,mHAAmH;AACnH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,SAAS,CAAC,kBAAkB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAIlJ;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,MAAM,EAAE,CAOhG"}

package/dist/runtime/wakeAcceptanceRetention.js

@@ -1,12 +1,38 @@
 export const TERMINAL_RECEIPT_IDEMPOTENCY_HORIZON = 2_048;
 export const WAKE_ACCEPTANCE_COMPACTION_THRESHOLD = 2_112;
 export const MAX_WAKE_ACCEPTANCE_RECORDS = 2_176;
-/** Active work is never eligible; the newest terminal receipt horizon survives. */
+/**
+ * How long a delivery may sit in `accepted` before the store stops it.
+ *
+ * Inbox agents return every delivery they did not dispose of to `accepted`
+ * (deferred), and a failed execution keeps its batch for retry. Nothing ever
+ * ended either, so by 2026-10-05 213 deliveries up to two weeks old sat in the
+ * queue, were re-offered on every wake, and kept the store at its bound. A
+ * day is longer than any delivery stays actionable in a daily organization: at
+ * two days, deliveries from 2026-10-05 were still being retried — and failing —
+ * through 10-07's edition. The dispatcher stops an expired delivery
+ * `queued_wake_stopped` the first time it meets one and says so on stderr
+ * (`attentionDispatcher.ts`), rather than leaving it hidden until compaction.
+ */
+export const STALE_QUEUED_DELIVERY_MS = 24 * 60 * 60_000;
+/** Queued, unclaimed deliveries accepted before the staleness horizon. Running or claimed work never qualifies. */
+export function staleQueuedFilesToStop(records, nowMs) {
+    return records
+        .filter((record) => record.state === "accepted" && !record.claimed && record.acceptedAt !== undefined && Date.parse(record.acceptedAt) <= nowMs - STALE_QUEUED_DELIVERY_MS)
+        .map((record) => record.file);
+}
+/**
+ * Active work is never eligible. The newest terminal receipts survive up to the
+ * idempotency horizon, but never so many that active work plus kept receipts
+ * still sits at the compaction threshold: a horizon that ignores active work
+ * lets parked deliveries hold the store at its bound with nothing to compact.
+ */
 export function terminalFilesToCompact(records) {
     if (records.length < WAKE_ACCEPTANCE_COMPACTION_THRESHOLD)
         return [];
     const terminal = records
         .filter((record) => record.state === "completed" || record.state === "failed" || record.state === "stopped")
         .sort((left, right) => right.updatedAt.localeCompare(left.updatedAt) || right.acceptanceId.localeCompare(left.acceptanceId));
-    return terminal.slice(TERMINAL_RECEIPT_IDEMPOTENCY_HORIZON).map((record) => record.file);
+    const keep = Math.max(0, Math.min(TERMINAL_RECEIPT_IDEMPOTENCY_HORIZON, WAKE_ACCEPTANCE_COMPACTION_THRESHOLD - 1 - (records.length - terminal.length)));
+    return terminal.slice(keep).map((record) => record.file);
 }

package/dist/runtime/wakeAcceptanceStore.d.ts

@@ -43,10 +43,12 @@ export declare class WakeAcceptanceStore {
     private readonly ownerLiveness;
     private readonly afterFinalLockAssertion?;
     private mutations;
-    private readonly acceptanceFiles;
+    private readonly index;
+    private onRecordRead?;
+    private claimTransitionLockTiming?;
     private constructor();
     static open(root: string, options?: WakeAcceptanceStoreTestOptions): Promise<WakeAcceptanceStore>;
-    accept(request: OrganizationRuntimeWakeAcceptanceRequest): Promise<{
+    accept(request: OrganizationRuntimeWakeAcceptanceRequest, nativeSchedule?: boolean): Promise<{
         readonly record: Stored;
         readonly created: boolean;
     }>;
@@ -56,10 +58,10 @@ export declare class WakeAcceptanceStore {
     /** Internal availability view; diagnostics never enter the public receipt wire. */
     activityWithExecutionErrors(): Promise<readonly ActivityRow[]>;
     private activityRows;
-    recoverable(agentIds: ReadonlySet<string>): Promise<readonly Stored[]>;
+    recoverable(agentIds: ReadonlySet<string>, onStale?: (record: Stored) => void): Promise<readonly Stored[]>;
     transition(acceptanceId: string, state: WakeReceiptState, code?: WakeReceiptCode): Promise<Stored>;
     /** Fuse race seam: never stops a record that was claimed after enumeration. */
-    transitionAcceptedToStopped(acceptanceId: string): Promise<Stored>;
+    transitionAcceptedToStopped(acceptanceId: string, code?: "host_stopping" | "queued_wake_stopped"): Promise<Stored>;
     acquireClaim(acceptanceId: string, ownerId: string, acceptanceIds?: readonly string[], executionId?: string): Promise<WakeExecutionClaimResult>;
     claimHeartbeatIntervalMs(): number;
     renewClaim(acceptanceId: string, claim: WakeExecutionClaim): Promise<WakeExecutionClaim>;
@@ -99,14 +101,12 @@ export declare class WakeAcceptanceStore {
     private verify;
 }
 export declare class WakeInboxFullError extends Error {
-    constructor();
+    constructor(message?: string);
 }
 export declare class WakeAcceptanceConflictError extends Error {
     constructor();
 }
-export declare class WakeExecutionClaimLostError extends Error {
-    constructor();
-}
+export { WakeExecutionClaimLostError, WakeTransitionLockContentionError } from "./wakeAcceptanceClaimDiagnostics.js";
 /** A container boundary requires deployment-authorized offline reconciliation. */
 export { WakeTransitionLockBlockedError } from "./wakeAcceptanceProcessIdentity.js";
 export { publicAcceptance } from "./wakeAcceptanceRecord.js";

package/dist/runtime/wakeAcceptanceStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wakeAcceptanceStore.d.ts","sourceRoot":"","sources":["../../src/runtime/wakeAcceptanceStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyF,KAAK,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAKhK,OAAO,EAIL,KAAK,wCAAwC,EAC7C,KAAK,oCAAoC,EACzC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAEtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAqF,KAAK,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAI/J,KAAK,MAAM,GAAG,0BAA0B,CAAC;AACzC,KAAK,WAAW,GAAG,oCAAoC,GAAG,QAAQ,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC3I,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC1L,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAA;CAAE,CAAC,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AAEpL,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,uBAAuB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC,CAAA;CAAE,CAAC,CAAC;AAIvS,qFAAqF;AACrF,qBAAa,mBAAmB;IAGV,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAU,OAAO,CAAC,QAAQ,CAAC,SAAS;IAAoC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAAqB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAAyB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAAU,OAAO,CAAC,QAAQ,CAAC,GAAG;IAAgB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAmD,OAAO,CAAC,QAAQ,CAAC,aAAa;IAA8C,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAF5d,OAAO,CAAC,SAAS,CAAoC;IACrD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA6B;IAC7D,OAAO;WACM,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,8BAAmC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAsB3G,MAAM,CAAC,OAAO,EAAE,wCAAwC,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;YAG5G,SAAS;IA6BjB,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,oCAAoC,GAAG,SAAS,CAAC;IAIvF,QAAQ,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,CAAC;IAC1E,mFAAmF;IAC7E,2BAA2B,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;YACtD,YAAY;IAcpB,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;IAY5E,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAGlG,+EAA+E;IAC/E,2BAA2B,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAUlE,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA8B/I,wBAAwB,IAAI,MAAM;IAClC,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAexF,+FAA+F;IAC/F,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,eAAe,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAmCnR,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAatD,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAS/B,aAAa;IAQrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAC5B,OAAO,CAAC,SAAS;YAKH,kBAAkB;YAWlB,mBAAmB;IAKjC,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,OAAO;YACD,qBAAqB;YAerB,oBAAoB;YAIpB,qBAAqB;IAKnC,OAAO,CAAC,OAAO;YAGD,KAAK;YAOL,UAAU;YACV,YAAY;YACZ,IAAI;YAOJ,iBAAiB;YACjB,SAAS;YAcT,gBAAgB;YAChB,QAAQ;YAWR,oBAAoB;YAOpB,sBAAsB;YAWtB,QAAQ;YAIR,OAAO;YACP,YAAY;YAIZ,MAAM;CAMrB;AACD,qBAAa,kBAAmB,SAAQ,KAAK;;CAAmG;AAChJ,qBAAa,2BAA4B,SAAQ,KAAK;;CAAoF;AAC1I,qBAAa,2BAA4B,SAAQ,KAAK;;CAA8D;AACpH,kFAAkF;AAClF,OAAO,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"wakeAcceptanceStore.d.ts","sourceRoot":"","sources":["../../src/runtime/wakeAcceptanceStore.ts"],"names":[],"mappings":"AACA,OAAO,EAAyF,KAAK,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAKhK,OAAO,EAIL,KAAK,wCAAwC,EAC7C,KAAK,oCAAoC,EACzC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAEtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAqF,KAAK,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AAK/J,KAAK,MAAM,GAAG,0BAA0B,CAAC;AACzC,KAAK,WAAW,GAAG,oCAAoC,GAAG,QAAQ,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC3I,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC1L,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAA;CAAE,CAAC,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AAEpL,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,uBAAuB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC,CAAA;CAAE,CAAC,CAAC;AAIvS,qFAAqF;AACrF,qBAAa,mBAAmB;IAKV,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAU,OAAO,CAAC,QAAQ,CAAC,SAAS;IAAoC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAAqB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAAyB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAAU,OAAO,CAAC,QAAQ,CAAC,GAAG;IAAgB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAmD,OAAO,CAAC,QAAQ,CAAC,aAAa;IAA8C,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAJ5d,OAAO,CAAC,SAAS,CAAoC;IACrD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsB;IAC5C,OAAO,CAAC,YAAY,CAAC,CAAyB;IAC9C,OAAO,CAAC,yBAAyB,CAAC,CAAmD;IACrF,OAAO;WAGM,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,8BAAmC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAyB3G,MAAM,CAAC,OAAO,EAAE,wCAAwC,EAAE,cAAc,UAAQ,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;YAGpI,SAAS;IA6BjB,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,oCAAoC,GAAG,SAAS,CAAC;IAIvF,QAAQ,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,CAAC;IAC1E,mFAAmF;IAC7E,2BAA2B,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;YACtD,YAAY;IAcpB,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;IAchH,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAGlG,+EAA+E;IAC/E,2BAA2B,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,GAAE,eAAe,GAAG,qBAAuC,GAAG,OAAO,CAAC,MAAM,CAAC;IAUnI,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA8B/I,wBAAwB,IAAI,MAAM;IAClC,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAaxF,+FAA+F;IAC/F,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,eAAe,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAkCnR,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAYtD,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAS/B,aAAa;IAQrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAC5B,OAAO,CAAC,SAAS;YAKH,kBAAkB;YAKlB,mBAAmB;IAKjC,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,OAAO;YACD,qBAAqB;YAerB,oBAAoB;YAIpB,qBAAqB;IAKnC,OAAO,CAAC,OAAO;YAGD,KAAK;YAOL,UAAU;YACV,YAAY;YACZ,IAAI;YAQJ,iBAAiB;YACjB,SAAS;YAcT,gBAAgB;YAChB,QAAQ;YAWR,oBAAoB;YAMpB,sBAAsB;YAatB,QAAQ;YAIR,OAAO;YACP,YAAY;YAIZ,MAAM;CAMrB;AACD,qBAAa,kBAAmB,SAAQ,KAAK;gBAAe,OAAO,SAAuE;CAAuB;AACjK,qBAAa,2BAA4B,SAAQ,KAAK;;CAAoF;AAC1I,OAAO,EAAE,2BAA2B,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AACrH,kFAAkF;AAClF,OAAO,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/runtime/wakeAcceptanceStore.js

@@ -1,3 +1,4 @@
+import { WakeExecutionClaimLostError, readExpectedClaim, waitForClaimTransitionLock } from "./wakeAcceptanceClaimDiagnostics.js";
 import { sameNamespace, currentProcessIdentity, processIsAlive, WakeTransitionLockBlockedError } from "./wakeAcceptanceProcessIdentity.js";
 import { constants } from "node:fs";
 import { link, lstat, open, readFile, readdir, realpath, rename, unlink } from "node:fs/promises";
@@ -6,8 +7,9 @@ import { createHash, randomUUID } from "node:crypto";
 import { MAX_WAKE_ACCEPTANCE_RECORD_BYTES, sanitizeWakeCompletionText, wakeAcceptanceDigest } from "./wakeAcceptanceTypes.js";
 import { sanitizeExecutionError, parseStoredWakeAcceptance, publicStatus } from "./wakeAcceptanceRecord.js";
 import { assertOfflineReconciliationLeaseAvailable } from "./wakeAcceptanceReconciliation.js";
-import { acquireHostRegistration, releaseHostRegistration } from "./storeCoordination.js";
-import { MAX_WAKE_ACCEPTANCE_RECORDS, terminalFilesToCompact } from "./wakeAcceptanceRetention.js";
+import { acquireHostRegistration, pruneDeadHostRegistrations, releaseHostRegistration } from "./storeCoordination.js";
+import { WakeAcceptanceIndex } from "./wakeAcceptanceIndex.js";
+import { MAX_WAKE_ACCEPTANCE_RECORDS, WAKE_ACCEPTANCE_COMPACTION_THRESHOLD, staleQueuedFilesToStop, terminalFilesToCompact } from "./wakeAcceptanceRetention.js";
 const DEFAULT_CLAIM_TTL_MS = 240_000;
 /** Durable, private idempotency authority; callers must pre-create its 0700 root. */
 export class WakeAcceptanceStore {
@@ -21,7 +23,9 @@ export class WakeAcceptanceStore {
     ownerLiveness;
     afterFinalLockAssertion;
     mutations = Promise.resolve();
-    acceptanceFiles = new Map();
+    index;
+    onRecordRead;
+    claimTransitionLockTiming;
     constructor(root, directory, identity, registration, claimTtlMs, now, owner, ownerLiveness, afterFinalLockAssertion) {
         this.root = root;
         this.directory = directory;
@@ -32,6 +36,8 @@ export class WakeAcceptanceStore {
         this.owner = owner;
         this.ownerLiveness = ownerLiveness;
         this.afterFinalLockAssertion = afterFinalLockAssertion;
+        this.index = new WakeAcceptanceIndex(root, { directoryStat: async () => await this.directory.stat({ bigint: true }), files: async () => await this.files(), readId: async (file) => (await this.read(file)).acceptance_id, fileStat: async (file) => await lstat(file, { bigint: true }).catch((error) => { if (error.code === "ENOENT")
+                return undefined; throw error; }) }, () => BigInt(this.now()) * 1000000n);
     }
     static async open(root, options = {}) {
         const claimTtlMs = options.claimTtlMs ?? DEFAULT_CLAIM_TTL_MS;
@@ -53,23 +59,27 @@ export class WakeAcceptanceStore {
             if (!same(identity(before), identity(after)))
                 throw new Error("wake acceptance store changed during validation");
             const registration = await acquireHostRegistration(real, directory, owner);
-            return new WakeAcceptanceStore(real, directory, identity(before), registration, claimTtlMs, options.nowForTest ?? Date.now, owner, options.ownerLiveness ?? processIsAlive, options.afterFinalLockAssertion);
+            await pruneDeadHostRegistrations(real, directory, registration, options.ownerLiveness ?? processIsAlive);
+            const store = new WakeAcceptanceStore(real, directory, identity(before), registration, claimTtlMs, options.nowForTest ?? Date.now, owner, options.ownerLiveness ?? processIsAlive, options.afterFinalLockAssertion);
+            store.claimTransitionLockTiming = options.claimTransitionLockTimingForTest;
+            store.onRecordRead = options.onRecordReadForTest;
+            return store;
         }
         catch (error) {
             await directory.close().catch(() => undefined);
             throw error;
         }
     }
-    accept(request) {
-        return this.serialize(async () => await this.acceptNow(request));
+    accept(request, nativeSchedule = false) {
+        return this.serialize(async () => await this.acceptNow(request, nativeSchedule));
     }
-    async acceptNow(request) {
+    async acceptNow(request, nativeSchedule) {
         await this.verify();
         const request_digest = wakeAcceptanceDigest(request);
         const target = this.fileFor(request.agent_id, request.delivery_id);
         const existing = await this.readOptional(target);
         if (existing !== undefined) {
-            if (existing.request_digest !== request_digest)
+            if (existing.request_digest !== request_digest || existing.native_schedule !== (nativeSchedule ? true : undefined))
                 throw new WakeAcceptanceConflictError();
             return { record: existing, created: false };
         }
@@ -77,7 +87,7 @@ export class WakeAcceptanceStore {
         if ((await this.files()).length >= MAX_WAKE_ACCEPTANCE_RECORDS)
             throw new WakeInboxFullError();
         const now = new Date().toISOString();
-        const record = { acceptance_id: randomUUID(), agent_id: request.agent_id, delivery_id: request.delivery_id, request_digest, event: request.event, state: "accepted", accepted_at: now, updated_at: now };
+        const record = { acceptance_id: randomUUID(), agent_id: request.agent_id, delivery_id: request.delivery_id, request_digest, event: request.event, state: "accepted", accepted_at: now, updated_at: now, ...(nativeSchedule ? { native_schedule: true } : {}) };
         const temporary = path.join(this.root, `.pending-${randomUUID()}`);
         try {
             await this.writeNew(temporary, record);
@@ -88,12 +98,12 @@ export class WakeAcceptanceStore {
                 if (error.code !== "EEXIST")
                     throw error;
                 const winner = await this.read(target);
-                if (winner.request_digest !== request_digest)
+                if (winner.request_digest !== request_digest || winner.native_schedule !== (nativeSchedule ? true : undefined))
                     throw new WakeAcceptanceConflictError();
                 return { record: winner, created: false };
             }
             await this.directory.sync();
-            this.acceptanceFiles.set(record.acceptance_id, target);
+            this.index.set(record.acceptance_id, target);
             return { record, created: true };
         }
         finally {
@@ -123,7 +133,7 @@ export class WakeAcceptanceStore {
                 ...(includeExecutionErrors && record.execution_error !== undefined ? { execution_error: record.execution_error } : {}) };
         });
     }
-    async recoverable(agentIds) {
+    async recoverable(agentIds, onStale) {
         const result = [];
         for (const file of await this.files()) {
             const record = await this.read(path.join(this.root, file));
@@ -131,7 +141,12 @@ export class WakeAcceptanceStore {
                 throw new Error("wake acceptance store contains an unknown agent authority");
             if (record.state === "accepted" || record.state === "running") {
                 const claim = await this.readClaimOptional(this.claimFor(record));
-                result.push(!record.deferred && record.execution_id === undefined && claim?.acceptance_ids?.includes(record.acceptance_id) && claim.execution_id !== undefined ? { ...record, execution_id: claim.execution_id } : record);
+                // A long-parked delivery is no longer offered: it would head every batch ahead of today's mail. Compaction stops it.
+                if (staleQueuedFilesToStop([{ file, state: record.state, updatedAt: record.updated_at, acceptedAt: record.accepted_at, acceptanceId: record.acceptance_id, claimed: claim !== undefined && !expired(claim, this.now()) }], this.now()).length) {
+                    onStale?.(record);
+                    continue;
+                }
+                result.push(!record.deferred && record.execution_id === undefined && record.execution_error === undefined && claim?.acceptance_ids?.includes(record.acceptance_id) && claim.execution_id !== undefined ? { ...record, execution_id: claim.execution_id } : record);
             }
         }
         return result.sort((left, right) => left.accepted_at.localeCompare(right.accepted_at) || left.acceptance_id.localeCompare(right.acceptance_id));
@@ -140,13 +155,14 @@ export class WakeAcceptanceStore {
         return this.serialize(async () => await this.transitionNow(acceptanceId, state, code));
     }
     /** Fuse race seam: never stops a record that was claimed after enumeration. */
-    transitionAcceptedToStopped(acceptanceId) {
+    transitionAcceptedToStopped(acceptanceId, code = "host_stopping") {
         return this.serialize(async () => {
             const target = await this.pathForAcceptanceId(acceptanceId);
             const prior = await this.read(target);
-            if (prior.state !== "accepted")
+            const claim = prior.state === "accepted" ? await this.readClaimOptional(this.claimFor(prior)) : undefined;
+            if (prior.state !== "accepted" || (claim !== undefined && !expired(claim, this.now())))
                 return prior;
-            const record = { ...prior, state: "stopped", code: "host_stopping", updated_at: new Date().toISOString() };
+            const record = { ...prior, state: "stopped", code, updated_at: new Date().toISOString() };
             await this.replace(target, record);
             return record;
         });
@@ -216,13 +232,9 @@ export class WakeAcceptanceStore {
             const record = await this.findByAcceptanceId(acceptanceId);
             if (record === undefined)
                 throw new Error("wake acceptance receipt is unavailable");
-            const lock = await this.acquireTransitionLock(record, claim.owner_id);
-            if (lock === undefined)
-                throw new WakeExecutionClaimLostError();
+            const lock = await waitForClaimTransitionLock(() => this.acquireTransitionLock(record, claim.owner_id), () => this.readLockOptional(this.lockFor(record)), acceptanceId, claim, "renew", this.claimTransitionLockTiming);
             try {
-                const current = await this.readClaim(this.claimFor(record));
-                if (!(current.acceptance_id === acceptanceId || current.acceptance_ids?.includes(acceptanceId)) || current.acceptance_id !== claim.acceptance_id || current.owner_id !== claim.owner_id || current.generation !== claim.generation || current.expires_at !== claim.expires_at || expired(current, this.now()))
-                    throw new WakeExecutionClaimLostError();
+                const current = await readExpectedClaim(() => this.readClaim(this.claimFor(record)), acceptanceId, claim, "renew", this.now, lock);
                 const renewed = { ...current, expires_at: new Date(this.now() + this.claimTtlMs).toISOString() };
                 await this.replaceValue(this.claimFor(record), renewed);
                 return renewed;
@@ -240,24 +252,22 @@ export class WakeAcceptanceStore {
             const initial = await this.findByAcceptanceId(acceptanceId);
             if (initial === undefined)
                 throw new Error("wake acceptance receipt is unavailable");
-            const lock = await this.acquireTransitionLock(initial, claim.owner_id);
-            if (lock === undefined)
-                throw new WakeExecutionClaimLostError();
+            const lock = await waitForClaimTransitionLock(() => this.acquireTransitionLock(initial, claim.owner_id), () => this.readLockOptional(this.lockFor(initial)), acceptanceId, claim, `transition:${state}`, this.claimTransitionLockTiming);
             try {
-                let record = await this.transitionNowClaimed(acceptanceId, claim);
+                let record = await this.transitionNowClaimed(acceptanceId, claim, `transition:${state}:initial`, lock);
                 if (isTerminal(record.state))
                     return record;
                 if (state !== "running" && record.claim_generation !== claim.generation)
-                    throw new WakeExecutionClaimLostError();
-                await this.assertTransitionLock(record, lock);
-                record = await this.transitionNowClaimed(acceptanceId, claim);
+                    throw new WakeExecutionClaimLostError({ step: `transition:${state}`, assertion: "record_claim_generation", acceptance_id: acceptanceId, expected: claim.generation, current: record.claim_generation ?? null, lock });
+                await this.assertTransitionLock(record, lock, `transition:${state}`);
+                record = await this.transitionNowClaimed(acceptanceId, claim, `transition:${state}:final`, lock);
                 if (isTerminal(record.state))
                     return record;
                 if (state !== "running" && record.claim_generation !== claim.generation)
-                    throw new WakeExecutionClaimLostError();
-                await this.assertTransitionLock(record, lock);
+                    throw new WakeExecutionClaimLostError({ step: `transition:${state}`, assertion: "record_claim_generation", acceptance_id: acceptanceId, expected: claim.generation, current: record.claim_generation ?? null, lock });
+                await this.assertTransitionLock(record, lock, `transition:${state}`);
                 await this.afterFinalLockAssertion?.();
-                await this.assertTransitionLock(record, lock);
+                await this.assertTransitionLock(record, lock, `transition:${state}:before_write`);
                 const target = this.fileFor(record.agent_id, record.delivery_id);
                 // The code explains the transition that produced the CURRENT state, so a
                 // transition that names none clears it. While codes existed only on terminal
@@ -285,14 +295,12 @@ export class WakeAcceptanceStore {
         return this.serialize(async () => {
             const record = await this.findByAcceptanceId(claim.acceptance_id);
             if (!record)
-                throw new WakeExecutionClaimLostError();
-            const lock = await this.acquireTransitionLock(record, claim.owner_id);
-            if (!lock)
-                throw new WakeExecutionClaimLostError();
+                throw new WakeExecutionClaimLostError({ step: "release", assertion: "record_missing", acceptance_id: claim.acceptance_id, expected: claim, current: null });
+            const lock = await waitForClaimTransitionLock(() => this.acquireTransitionLock(record, claim.owner_id), () => this.readLockOptional(this.lockFor(record)), claim.acceptance_id, claim, "release", this.claimTransitionLockTiming);
             try {
                 const current = await this.readClaimOptional(this.claimFor(record));
                 if (current?.generation !== claim.generation || current.owner_id !== claim.owner_id)
-                    throw new WakeExecutionClaimLostError();
+                    throw new WakeExecutionClaimLostError({ step: "release", assertion: "claim_identity", acceptance_id: claim.acceptance_id, expected: claim, current: current ?? null, lock });
                 await unlink(this.claimFor(record));
                 await this.directory.sync();
             }
@@ -329,16 +337,8 @@ export class WakeAcceptanceStore {
     async findByAcceptanceId(acceptanceId) {
         if (!uuid(acceptanceId))
             return undefined;
-        const known = this.acceptanceFiles.get(acceptanceId);
-        if (known !== undefined)
-            return await this.readOptional(known);
-        for (const file of await this.files()) {
-            const record = await this.read(path.join(this.root, file));
-            this.acceptanceFiles.set(record.acceptance_id, path.join(this.root, file));
-            if (record.acceptance_id === acceptanceId)
-                return record;
-        }
-        return undefined;
+        await this.verify();
+        return await this.index.find(acceptanceId, async (file) => await this.readOptional(file));
     }
     async pathForAcceptanceId(acceptanceId) {
         const record = await this.findByAcceptanceId(acceptanceId);
@@ -352,7 +352,7 @@ export class WakeAcceptanceStore {
         const target = this.lockFor(record);
         const current = await this.readLockOptional(target);
         if (current !== undefined && !sameNamespace(current, this.owner))
-            throw new WakeTransitionLockBlockedError();
+            throw new WakeTransitionLockBlockedError({ step: "acquire_transition_lock", acceptance_id: record.acceptance_id, expected: this.owner, current });
         if (current !== undefined && await this.ownerLiveness(current))
             return undefined;
         if (current !== undefined) {
@@ -378,10 +378,10 @@ export class WakeAcceptanceStore {
             await unlink(temporary).catch(() => undefined);
         }
     }
-    async assertTransitionLock(record, lock) {
-        const current = await this.readLock(this.lockFor(record)).catch(() => { throw new WakeExecutionClaimLostError(); });
+    async assertTransitionLock(record, lock, step) {
+        const current = await this.readLock(this.lockFor(record)).catch((cause) => { throw new WakeExecutionClaimLostError({ step, assertion: "transition_lock_read", acceptance_id: record.acceptance_id, expected: lock, current: null }, cause); });
         if (current.owner_id !== lock.owner_id || current.generation !== lock.generation || current.pid !== lock.pid || current.process_start !== lock.process_start || current.boot_id !== lock.boot_id || !sameNamespace(current, lock))
-            throw new WakeExecutionClaimLostError();
+            throw new WakeExecutionClaimLostError({ step, assertion: "transition_lock_identity", acceptance_id: record.acceptance_id, expected: lock, current });
     }
     async releaseTransitionLock(record, lock) {
         const target = this.lockFor(record);
@@ -399,7 +399,7 @@ export class WakeAcceptanceStore {
         const entries = await readdir(this.root);
         const files = entries.filter((entry) => /^[a-f0-9]{64}\.json$/.test(entry));
         if (files.length > MAX_WAKE_ACCEPTANCE_RECORDS || entries.length > MAX_WAKE_ACCEPTANCE_RECORDS + 128)
-            throw new Error("wake acceptance store exceeds its bounded record limit");
+            throw new WakeInboxFullError("wake acceptance store exceeds its bounded record limit");
         return files;
     }
     async claimFiles() { return (await readdir(this.root)).filter((entry) => /^[a-f0-9]{64}\.agent-claim$/.test(entry)); }
@@ -415,6 +415,7 @@ export class WakeAcceptanceStore {
         const entry = await lstat(file);
         if (!entry.isFile() || entry.isSymbolicLink() || entry.uid !== process.getuid?.() || (entry.mode & 0o777) !== 0o600 || entry.size > MAX_WAKE_ACCEPTANCE_RECORD_BYTES)
             throw new Error("wake acceptance record is unsafe");
+        this.onRecordRead?.(file);
         const bytes = await readFile(file);
         if (bytes.length > MAX_WAKE_ACCEPTANCE_RECORD_BYTES)
             throw new Error("wake acceptance record exceeds its bound");
@@ -471,25 +472,29 @@ export class WakeAcceptanceStore {
             throw new Error("wake transition lock is invalid");
         return result;
     }
-    async transitionNowClaimed(acceptanceId, claim) {
+    async transitionNowClaimed(acceptanceId, claim, step, lock) {
         const record = await this.findByAcceptanceId(acceptanceId);
         if (record === undefined)
             throw new Error("wake acceptance receipt is unavailable");
-        const current = await this.readClaim(this.claimFor(record));
-        if (!(current.acceptance_id === acceptanceId || current.acceptance_ids?.includes(acceptanceId)) || current.acceptance_id !== claim.acceptance_id || current.owner_id !== claim.owner_id || current.generation !== claim.generation || current.expires_at !== claim.expires_at || expired(current, this.now()))
-            throw new WakeExecutionClaimLostError();
+        await readExpectedClaim(() => this.readClaim(this.claimFor(record)), acceptanceId, claim, step, this.now, lock);
         return record;
     }
     async compactTerminalRecords() {
         const files = await this.files();
-        if (files.length < 2_112)
+        if (files.length < WAKE_ACCEPTANCE_COMPACTION_THRESHOLD)
             return;
         const records = await Promise.all(files.map(async (file) => ({ file, record: await this.read(path.join(this.root, file)) })));
+        const candidates = await Promise.all(records.map(async ({ file, record }) => ({ file, state: record.state, updatedAt: record.updated_at, acceptedAt: record.accepted_at, acceptanceId: record.acceptance_id, claimed: await this.readClaimOptional(this.claimFor(record)).then((claim) => claim !== undefined && !expired(claim, this.now())) })));
+        for (const file of staleQueuedFilesToStop(candidates, this.now())) {
+            const entry = records.find((candidate) => candidate.file === file);
+            entry.record = { ...entry.record, state: "stopped", code: "queued_wake_stopped", updated_at: new Date(this.now()).toISOString() };
+            await this.replace(path.join(this.root, file), entry.record);
+        }
         for (const file of terminalFilesToCompact(records.map(({ file, record }) => ({ file, state: record.state, updatedAt: record.updated_at, acceptanceId: record.acceptance_id })))) {
             const record = records.find((candidate) => candidate.file === file)?.record;
-            if (record !== undefined)
-                this.acceptanceFiles.delete(record.acceptance_id);
             await unlink(path.join(this.root, file));
+            if (record !== undefined)
+                this.index.forget(path.join(this.root, file));
         }
         await this.directory.sync();
     }
@@ -524,14 +529,12 @@ export class WakeAcceptanceStore {
     }
 }
 export class WakeInboxFullError extends Error {
-    constructor() { super("wake acceptance store has no capacity without deleting active work"); }
+    constructor(message = "wake acceptance store has no capacity without deleting active work") { super(message); }
 }
 export class WakeAcceptanceConflictError extends Error {
     constructor() { super("delivery id is already bound to a different request"); }
 }
-export class WakeExecutionClaimLostError extends Error {
-    constructor() { super("wake execution claim was lost"); }
-}
+export { WakeExecutionClaimLostError, WakeTransitionLockContentionError } from "./wakeAcceptanceClaimDiagnostics.js";
 /** A container boundary requires deployment-authorized offline reconciliation. */
 export { WakeTransitionLockBlockedError } from "./wakeAcceptanceProcessIdentity.js";
 export { publicAcceptance } from "./wakeAcceptanceRecord.js";

package/dist/runtime/wakeFuse.d.ts

@@ -1,5 +1,6 @@
 export declare const WAKE_FUSE_VERSION: "noopolis.daimon.wake-fuse.v1";
 export declare const WAKE_FUSE_DIRECTORY_ENV: "DAIMON_WAKE_FUSE_DIRECTORY";
+export declare const WAKE_FUSE_EPOCH_ZONE_ENV: "DAIMON_WAKE_FUSE_EPOCH_ZONE";
 export declare const DEFAULT_WAKE_FUSE_MAX_WAKES = 100;
 export declare const DEFAULT_WAKE_FUSE_MAX_TOKENS = 5000000;
 export type WakeFuseTripReason = "wake_ceiling" | "token_ceiling" | "operator_stop" | "ledger_unavailable";
@@ -30,6 +31,26 @@ export type WakeFuseVerdict = Readonly<{
     state: "paused";
     reason: "agent_execution_ceiling" | "agent_token_ceiling";
 }>;
+/**
+ * The counting window, when the operator has not named one.
+ *
+ * WHY THIS IS DERIVED AND NOT CONFIGURED
+ * --------------------------------------
+ * `DAIMON_WAKE_FUSE_EPOCH` is read from the container's env file, and an env
+ * file is applied at container CREATION only. So an operator who wants a daily
+ * budget has to rewrite that file and RECREATE THE CONTAINER every day, and
+ * the only thing that ever did that was a daily rebuild. The budget was
+ * therefore coupled to a deploy: stop deploying daily and the wake ceiling
+ * never resets, and the organization stops admitting wakes for good.
+ *
+ * A date-derived epoch removes the coupling instead of moving it. There is no
+ * file to rewrite, no deploy, no restart, and no clock for anybody to forget.
+ *
+ * An explicitly configured epoch still wins, unchanged: an operator pinning one
+ * window is doing it deliberately, and this must not roll it out from under
+ * them.
+ */
+export declare function derivedEpoch(organizationKey: string, at: Date, zone: string): string;
 export type WakeFuseOptions = Readonly<{
     organizationKey: string;
     environment?: NodeJS.ProcessEnv;
@@ -45,23 +66,57 @@ export type WakeFuseOptions = Readonly<{
 export declare class WakeFuse {
     private readonly armed;
     private readonly directory;
-    private readonly epoch;
-    private readonly epochStartedAt;
+    private epoch;
+    private epochStartedAt;
     private readonly maxWakes;
     private readonly maxTokens;
-    private readonly admissions;
+    private admissions;
     private readonly usageLedgerPath;
     private readonly now;
+    private readonly nextEpoch;
     private serial;
     private reason;
     private tripMarkerMissing;
     private constructor();
     static open(options: WakeFuseOptions): Promise<WakeFuse>;
     admit(agentId: string, deliveryId: string, limits?: WakeBudgetLimits): Promise<WakeFuseVerdict>;
+    /**
+     * The budget as the caller should act on it NOW — which means after the day
+     * has been allowed to roll.
+     *
+     * This is the gate the scheduler actually consults: `AttentionDispatcher.drain()`
+     * returns at `snapshot().state !== "available"` before it ever reaches
+     * `admit()`. Rolling only inside `admitNow` therefore never fired for an
+     * organization that had hit its ceiling — it stayed paused across midnight
+     * and only a process restart could renew the budget. The roll is serialized
+     * with admissions so a snapshot and an admission never see two windows.
+     */
     snapshot(agentId: string, limits?: WakeBudgetLimits): Promise<WakeBudgetSnapshot>;
+    private snapshotNow;
     pollOperatorStop(): Promise<WakeFuseTripReason | undefined>;
     tripped(): WakeFuseTripReason | undefined;
     close(): Promise<void>;
+    /**
+     * Moves the counting window when the derived day has changed.
+     *
+     * Called at admission, which is the only moment the answer can matter: the
+     * organization runtime is a long-lived process, so an epoch computed once at
+     * open() would be the same epoch a week later.
+     *
+     * WHAT ROLLS AND WHAT DOES NOT
+     * ----------------------------
+     * A new window clears a CEILING trip, exactly as selecting a new epoch by
+     * hand always did: `readTripMarker` only honours a marker belonging to the
+     * current epoch. It does NOT clear an operator stop. `fuse.stop` is checked
+     * by existence and is deliberately not epoch-scoped, so a parked newsroom
+     * stays parked across midnight. That asymmetry is the whole point: a budget
+     * is a thing that renews, an operator stop is a decision that does not.
+     *
+     * Admissions are rebuilt from the ledger rather than emptied, so a clock that
+     * steps BACKWARD into a window that already spent wakes does not hand the
+     * organization a fresh budget.
+     */
+    private rollEpochIfDue;
     private admitNow;
     private trip;
 }