@noopolis/daimon 0.2.0 → 0.2.1

package/dist/runtime/engineBrokerProtocol.d.ts

@@ -1,17 +1,27 @@
+import { type BrokerClockObservation } from "./grokBrokerTaskClock.js";
 import { type EngineBrokerInferenceRequest, type EngineBrokerInferenceResponse } from "./engineBrokerInferenceProtocol.js";
 import { type EngineBrokerMcpCallObservation } from "./engineBrokerMcpCallLog.js";
 import { type EngineBrokerTurnAccounting, type EngineBrokerTurnLimitOverrides } from "./engineBrokerTurnAccounting.js";
 /**
- * Control protocol v2. Both ends ship in the same Daimon package and image
- * (organization runtime client, broker service), so the wire moved to v2 in
- * one step: v1 frames are refused. v1 survives only as a *durable record*
- * shape, which {@link parseEngineBrokerV1TerminalResponse} still reads so
- * turns sealed before the upgrade keep replaying.
+ * Control protocol v4 adds slot routing and reset. Both ends ship in the same
+ * package; v1/v2/v3 frames are refused on the wire. Durable terminal adapters
+ * retain those record formats. A missing slot is allowed only for a unique
+ * agent registration (unclocked production compatibility).
  */
-declare const VERSION: "noopolis.daimon.engine-broker.v2";
-export declare const ENGINE_BROKER_VERSION: "noopolis.daimon.engine-broker.v2";
+declare const VERSION: "noopolis.daimon.engine-broker.v4";
+export declare const ENGINE_BROKER_VERSION: "noopolis.daimon.engine-broker.v4";
 declare const V1: "noopolis.daimon.engine-broker.v1";
 export declare const ENGINE_BROKER_MAX_FRAME_BYTES = 1048576;
+/** Version refusal is independent of the incompatible operation's schema. */
+export type EngineBrokerProtocolDiagnostic = Readonly<{
+    kind: "protocol_mismatch";
+    receivedVersion: string;
+    expectedVersion: string;
+}>;
+export declare class EngineBrokerProtocolMismatch extends TypeError {
+    readonly diagnostic: EngineBrokerProtocolDiagnostic;
+    constructor(received: unknown, expected?: unknown);
+}
 export type EngineBrokerRequest = Readonly<{
     version: typeof VERSION;
     kind: "health";
@@ -21,16 +31,23 @@ export type EngineBrokerRequest = Readonly<{
     kind: "start_turn";
     requestId: string;
     turnId: string;
+    slot?: number;
     agentId: string;
     wakeId: string;
     prompt: string;
     mcpEndpoint: string;
     limits?: EngineBrokerTurnLimitOverrides;
+    processClock?: string;
 }> | Readonly<{
     version: typeof VERSION;
     kind: "cancel_turn";
     requestId: string;
     turnId: string;
+}> | Readonly<{
+    version: typeof VERSION;
+    kind: "reset_slot";
+    requestId: string;
+    slot: number;
 }> | EngineBrokerInferenceRequest;
 /**
  * `reason` is the worker's own last words (`engineBrokerNativeClient.ts`),
@@ -52,6 +69,11 @@ export interface EngineBrokerFailureDiagnostic {
     startTicks: string;
 }
 export declare const ENGINE_BROKER_MAX_DIAGNOSTIC_REASON_BYTES = 768;
+/** Operational state after sealing; never raw filesystem errors or worker text. */
+export declare const ENGINE_BROKER_TASK_CLOCK_RESET_FAILED = "task clock reset failed; slot fenced until restart";
+export type EngineBrokerCleanupObservation = Readonly<{
+    cleanupDiagnostic?: typeof ENGINE_BROKER_TASK_CLOCK_RESET_FAILED;
+}>;
 export type EngineBrokerResponse = Readonly<{
     version: typeof VERSION;
     kind: "ready";
@@ -77,7 +99,7 @@ export type EngineBrokerResponse = Readonly<{
     workerPid: number;
     workerUid: number;
     workerStartTime: string;
-}> & EngineBrokerTurnAccounting) | (Readonly<{
+}> & EngineBrokerTurnAccounting & BrokerClockObservation & EngineBrokerCleanupObservation) | (Readonly<{
     version: typeof VERSION;
     kind: "failed";
     requestId: string;
@@ -85,7 +107,12 @@ export type EngineBrokerResponse = Readonly<{
     code: EngineBrokerFailureCode;
     diagnostic?: EngineBrokerFailureDiagnostic;
     mcpCalls?: EngineBrokerMcpCallObservation;
-}> & EngineBrokerTurnAccounting) | EngineBrokerInferenceResponse;
+}> & EngineBrokerTurnAccounting & BrokerClockObservation & EngineBrokerCleanupObservation) | Readonly<{
+    version: typeof VERSION;
+    kind: "slot_reset";
+    requestId: string;
+    slot: number;
+}> | EngineBrokerInferenceResponse;
 /**
  * The one name for a fenced credential realm. The turn's failure code, the
  * proxy's refusal reason on a worker request, and the grant path's 401 body
@@ -125,7 +152,12 @@ export declare function parseEngineBrokerResponse(value: unknown): EngineBrokerR
  * the wire.
  */
 export declare function parseEngineBrokerV1TerminalResponse(value: unknown): EngineBrokerV1TerminalResponse;
-export declare function encodeEngineBrokerFrame(value: EngineBrokerRequest | EngineBrokerResponse): Buffer;
+export declare function parseEngineBrokerSlot(value: unknown): number;
+/** v3 survives only in durable records. */
+export declare function parseEngineBrokerV3TerminalResponse(value: unknown): EngineBrokerTerminalResponse;
+/** v2 survives only in durable records. The wire always refuses it. */
+export declare function parseEngineBrokerV2TerminalResponse(value: unknown): EngineBrokerTerminalResponse;
+export declare function encodeEngineBrokerFrame(value: EngineBrokerRequest | EngineBrokerResponse | EngineBrokerProtocolDiagnostic): Buffer;
 export declare class EngineBrokerFrameDecoder {
     private buffered;
     push(chunk: Uint8Array): unknown[];

package/dist/runtime/engineBrokerProtocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engineBrokerProtocol.d.ts","sourceRoot":"","sources":["../../src/runtime/engineBrokerProtocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkJ,KAAK,4BAA4B,EAAE,KAAK,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAC3Q,OAAO,EAAmI,KAAK,8BAA8B,EAAiF,MAAM,6BAA6B,CAAC;AAClS,OAAO,EAAwE,KAAK,0BAA0B,EAAE,KAAK,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AAE7L;;;;;;GAMG;AACH,QAAA,MAAM,OAAO,EAAG,kCAA2C,CAAC;AAC5D,eAAO,MAAM,qBAAqB,oCAAU,CAAC;AAC7C,QAAA,MAAM,EAAE,EAAG,kCAA2C,CAAC;AACvD,eAAO,MAAM,6BAA6B,UAAY,CAAC;AAGvD,MAAM,MAAM,mBAAmB,GAC3B,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,GACxE,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,8BAA8B,CAAA;CAAE,CAAC,GAC3M,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,GAC7F,4BAA4B,CAAC;AAEjC;;;;;;GAMG;AACH,MAAM,WAAW,6BAA6B;IAAG,MAAM,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,YAAY,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,OAAO,CAAC;IAAA,MAAM,CAAC,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAA;CAAE;AAC7N,eAAO,MAAM,yCAAyC,MAAM,CAAC;AAE7D,MAAM,MAAM,oBAAoB,GAC5B,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAC;IAAC,iBAAiB,EAAE,KAAK,CAAC;IAAC,aAAa,EAAE,KAAK,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,IAAI,CAAC;IAAC,eAAe,EAAE,IAAI,CAAA;CAAE,CAAC,GAChO,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,GAC1F,CAAC,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,0BAA0B,CAAC,GACvM,CAAC,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,uBAAuB,CAAC;IAAC,UAAU,CAAC,EAAE,6BAA6B,CAAC;IAAC,QAAQ,CAAC,EAAE,8BAA8B,CAAA;CAAE,CAAC,GAAG,0BAA0B,CAAC,GAC7O,6BAA6B,CAAC;AAClC;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,EAAG,YAAqB,CAAC;AAC9D,eAAO,MAAM,2BAA2B,4HAAyI,CAAC;AAClL,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AACnF,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAAC,oBAAoB,EAAE;IAAE,IAAI,EAAE,WAAW,GAAG,QAAQ,CAAA;CAAE,CAAC,CAAC;AAC3G,KAAK,WAAW,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACvL,KAAK,QAAQ,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IAAC,UAAU,CAAC,EAAE,6BAA6B,CAAA;CAAE,CAAC,CAAC;AAC1M,MAAM,MAAM,8BAA8B,GAAG,WAAW,GAAG,QAAQ,CAAC;AAkBpE,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAiB5E;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAU9E;AAED;;;;GAIG;AACH,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CAGlG;AA8GD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,mBAAmB,GAAG,oBAAoB,GAAG,MAAM,CAIjG;AAED,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAmB;IACnC,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,EAAE;IAYlC,MAAM,IAAI,IAAI;CACf"}
+{"version":3,"file":"engineBrokerProtocol.d.ts","sourceRoot":"","sources":["../../src/runtime/engineBrokerProtocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,KAAK,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAEhG,OAAO,EAAkJ,KAAK,4BAA4B,EAAE,KAAK,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAC3Q,OAAO,EAAmI,KAAK,8BAA8B,EAAiF,MAAM,6BAA6B,CAAC;AAClS,OAAO,EAAwE,KAAK,0BAA0B,EAAE,KAAK,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AAE7L;;;;;GAKG;AACH,QAAA,MAAM,OAAO,EAAG,kCAA2C,CAAC;AAC5D,eAAO,MAAM,qBAAqB,oCAAU,CAAC;AAC7C,QAAA,MAAM,EAAE,EAAG,kCAA2C,CAAC;AACvD,eAAO,MAAM,6BAA6B,UAAY,CAAC;AAKvD,6EAA6E;AAC7E,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IACpD,IAAI,EAAE,mBAAmB,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;CAC7E,CAAC,CAAC;AAEH,qBAAa,4BAA6B,SAAQ,SAAS;IACzD,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;gBACxC,QAAQ,EAAE,OAAO,EAAE,QAAQ,GAAE,OAAiB;CAM3D;AAGD,MAAM,MAAM,mBAAmB,GAC3B,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,GACxE,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,8BAA8B,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GACjP,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,GAC7F,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAC1F,4BAA4B,CAAC;AAEjC;;;;;;GAMG;AACH,MAAM,WAAW,6BAA6B;IAAG,MAAM,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,YAAY,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,OAAO,CAAC;IAAA,MAAM,CAAC,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAA;CAAE;AAC7N,eAAO,MAAM,yCAAyC,MAAM,CAAC;AAE7D,mFAAmF;AACnF,eAAO,MAAM,qCAAqC,uDAAuD,CAAC;AAC1G,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IACpD,iBAAiB,CAAC,EAAE,OAAO,qCAAqC,CAAC;CAClE,CAAC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAC5B,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAC;IAAC,iBAAiB,EAAE,KAAK,CAAC;IAAC,aAAa,EAAE,KAAK,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,IAAI,CAAC;IAAC,eAAe,EAAE,IAAI,CAAA;CAAE,CAAC,GAChO,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,GAC1F,CAAC,QAAQ,CAAC;IACV,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAC9E,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;CAC7E,CAAC,GAAG,0BAA0B,GAAG,sBAAsB,GAAG,8BAA8B,CAAC,GACxF,CAAC,QAAQ,CAAC;IACV,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAC3E,IAAI,EAAE,uBAAuB,CAAC;IAAC,UAAU,CAAC,EAAE,6BAA6B,CAAC;IAC1E,QAAQ,CAAC,EAAE,8BAA8B,CAAC;CAC3C,CAAC,GAAG,0BAA0B,GAAG,sBAAsB,GAAG,8BAA8B,CAAC,GACxF,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,OAAO,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAC1F,6BAA6B,CAAC;AAClC;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,EAAG,YAAqB,CAAC;AAC9D,eAAO,MAAM,2BAA2B,4HAAyI,CAAC;AAClL,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AACnF,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAAC,oBAAoB,EAAE;IAAE,IAAI,EAAE,WAAW,GAAG,QAAQ,CAAA;CAAE,CAAC,CAAC;AAC3G,KAAK,WAAW,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACvL,KAAK,QAAQ,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IAAC,UAAU,CAAC,EAAE,6BAA6B,CAAA;CAAE,CAAC,CAAC;AAC1M,MAAM,MAAM,8BAA8B,GAAG,WAAW,GAAG,QAAQ,CAAC;AAqBpE,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAuB5E;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAsB9E;AAED;;;;GAIG;AACH,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CAGlG;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAG5D;AAED,2CAA2C;AAC3C,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,OAAO,GAAG,4BAA4B,CAIhG;AAED,uEAAuE;AACvE,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,OAAO,GAAG,4BAA4B,CAShG;AA8HD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,mBAAmB,GAAG,oBAAoB,GAAG,8BAA8B,GACjF,MAAM,CAIR;AAED,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAmB;IACnC,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,EAAE;IAYlC,MAAM,IAAI,IAAI;CACf"}

package/dist/runtime/engineBrokerProtocol.js

@@ -1,19 +1,33 @@
+import { parseBrokerProcessClock } from "./grokBrokerTaskClock.js";
+import { parseGrokBrokerProviderClockObservation } from "./grokBrokerProviderClock.js";
 import { isEngineBrokerInferenceRequestKind, isEngineBrokerInferenceResponseKind, parseEngineBrokerInferenceRequest, parseEngineBrokerInferenceResponse } from "./engineBrokerInferenceProtocol.js";
 import { ENGINE_BROKER_MCP_CALL_NAME, ENGINE_BROKER_MCP_OUTSTANDING_MAX, ENGINE_BROKER_MCP_REFUSAL_REASONS, ENGINE_BROKER_MCP_TUNNEL_MAX } from "./engineBrokerMcpCallLog.js";
 import { parseEngineBrokerTurnAccounting, parseEngineBrokerTurnLimitOverrides } from "./engineBrokerTurnAccounting.js";
 /**
- * Control protocol v2. Both ends ship in the same Daimon package and image
- * (organization runtime client, broker service), so the wire moved to v2 in
- * one step: v1 frames are refused. v1 survives only as a *durable record*
- * shape, which {@link parseEngineBrokerV1TerminalResponse} still reads so
- * turns sealed before the upgrade keep replaying.
+ * Control protocol v4 adds slot routing and reset. Both ends ship in the same
+ * package; v1/v2/v3 frames are refused on the wire. Durable terminal adapters
+ * retain those record formats. A missing slot is allowed only for a unique
+ * agent registration (unclocked production compatibility).
  */
-const VERSION = "noopolis.daimon.engine-broker.v2";
+const VERSION = "noopolis.daimon.engine-broker.v4";
 export const ENGINE_BROKER_VERSION = VERSION;
 const V1 = "noopolis.daimon.engine-broker.v1";
 export const ENGINE_BROKER_MAX_FRAME_BYTES = 1_048_576;
+const PROTOCOL_NAME = /^noopolis\.daimon\.engine-broker\.v[0-9]{1,6}$/u;
+const boundedProtocol = (value) => typeof value === "string" && PROTOCOL_NAME.test(value) ? value : "<invalid>";
+export class EngineBrokerProtocolMismatch extends TypeError {
+    diagnostic;
+    constructor(received, expected = VERSION) {
+        const receivedVersion = boundedProtocol(received);
+        const expectedVersion = boundedProtocol(expected);
+        super(`invalid broker frame: protocol version mismatch (received ${receivedVersion}; expected ${expectedVersion})`);
+        this.diagnostic = { kind: "protocol_mismatch", receivedVersion, expectedVersion };
+    }
+}
 const ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u;
 export const ENGINE_BROKER_MAX_DIAGNOSTIC_REASON_BYTES = 768;
+/** Operational state after sealing; never raw filesystem errors or worker text. */
+export const ENGINE_BROKER_TASK_CLOCK_RESET_FAILED = "task clock reset failed; slot fenced until restart";
 /**
  * The one name for a fenced credential realm. The turn's failure code, the
  * proxy's refusal reason on a worker request, and the grant path's 401 body
@@ -39,8 +53,11 @@ const text = (value, maxBytes) => {
 };
 const id = (value) => { const result = text(value, 128); if (!ID.test(result))
     throw new TypeError("invalid broker frame"); return result; };
-const version = (value) => { if (value !== VERSION)
-    throw new TypeError("invalid broker frame"); return VERSION; };
+const version = (value) => {
+    if (value !== VERSION)
+        throw new EngineBrokerProtocolMismatch(value);
+    return VERSION;
+};
 export function parseEngineBrokerRequest(value) {
     const input = record(value);
     version(input.version);
@@ -50,7 +67,16 @@ export function parseEngineBrokerRequest(value) {
     }
     if (input.kind === "start_turn") {
         const fields = ["version", "kind", "requestId", "turnId", "agentId", "wakeId", "prompt", "mcpEndpoint"];
-        exact(input, input.limits === undefined ? fields : [...fields, "limits"]);
+        exact(input, [...fields, ...(input.slot === undefined ? [] : ["slot"]), ...(input.limits === undefined ? [] : ["limits"]), ...(input.processClock === undefined ? [] : ["processClock"])]);
+        let processClock;
+        if (input.processClock !== undefined) {
+            try {
+                processClock = parseBrokerProcessClock(input.processClock);
+            }
+            catch {
+                throw new TypeError("invalid broker frame");
+            }
+        }
         const mcpEndpoint = text(input.mcpEndpoint, 2048);
         const url = new URL(mcpEndpoint);
         if (url.protocol !== "http:" || url.hostname !== "127.0.0.1" || url.pathname !== "/mcp")
@@ -64,7 +90,11 @@ export function parseEngineBrokerRequest(value) {
                 throw new TypeError("invalid broker frame");
             }
         }
-        return { version: VERSION, kind: "start_turn", requestId: id(input.requestId), turnId: id(input.turnId), agentId: id(input.agentId), wakeId: id(input.wakeId), prompt: text(input.prompt, 65_536), mcpEndpoint, ...(limits === undefined ? {} : { limits }) };
+        return { version: VERSION, kind: "start_turn", ...(input.slot === undefined ? {} : { slot: parseEngineBrokerSlot(input.slot) }), requestId: id(input.requestId), turnId: id(input.turnId), agentId: id(input.agentId), wakeId: id(input.wakeId), prompt: text(input.prompt, 65_536), mcpEndpoint, ...(limits === undefined ? {} : { limits }), ...(processClock === undefined ? {} : { processClock }) };
+    }
+    if (input.kind === "reset_slot") {
+        exact(input, ["version", "kind", "requestId", "slot"]);
+        return { version: VERSION, kind: "reset_slot", requestId: id(input.requestId), slot: parseEngineBrokerSlot(input.slot) };
     }
     if (input.kind === "cancel_turn") {
         exact(input, ["version", "kind", "requestId", "turnId"]);
@@ -76,6 +106,14 @@ export function parseEngineBrokerRequest(value) {
 }
 export function parseEngineBrokerResponse(value) {
     const input = record(value);
+    if (input.kind === "protocol_mismatch") {
+        exact(input, ["kind", "receivedVersion", "expectedVersion"]);
+        for (const field of [input.receivedVersion, input.expectedVersion]) {
+            if (field !== "<invalid>" && boundedProtocol(field) !== field)
+                throw new TypeError("invalid broker frame");
+        }
+        throw new EngineBrokerProtocolMismatch(input.receivedVersion, input.expectedVersion);
+    }
     version(input.version);
     if (input.kind === "ready") {
         exact(input, ["version", "kind", "requestId", "brokerUid", "providerProxyPort", "mcpFacadePort", "registrations", "credentialStale", "realmLease", "workerIsolation"]);
@@ -83,6 +121,10 @@ export function parseEngineBrokerResponse(value) {
             throw new TypeError("invalid broker frame");
         return { version: VERSION, kind: "ready", requestId: id(input.requestId), brokerUid: 2100, providerProxyPort: 43123, mcpFacadePort: 43124, registrations: input.registrations, credentialStale: false, realmLease: true, workerIsolation: true };
     }
+    if (input.kind === "slot_reset") {
+        exact(input, ["version", "kind", "requestId", "slot"]);
+        return { version: VERSION, kind: "slot_reset", requestId: id(input.requestId), slot: parseEngineBrokerSlot(input.slot) };
+    }
     if (input.kind === "accepted") {
         exact(input, ["version", "kind", "requestId", "turnId"]);
         return { version: VERSION, kind: "accepted", requestId: id(input.requestId), turnId: id(input.turnId) };
@@ -104,21 +146,62 @@ export function parseEngineBrokerV1TerminalResponse(value) {
         throw new TypeError("invalid broker frame");
     return parseTerminal(input, V1);
 }
+export function parseEngineBrokerSlot(value) {
+    if (!Number.isSafeInteger(value) || value < 0)
+        throw new TypeError("invalid broker slot");
+    return value;
+}
+/** v3 survives only in durable records. */
+export function parseEngineBrokerV3TerminalResponse(value) {
+    const input = record(value);
+    if (input.version !== "noopolis.daimon.engine-broker.v3" || (input.kind !== "completed" && input.kind !== "failed"))
+        throw new TypeError("invalid broker frame");
+    return parseTerminal({ ...input, version: VERSION }, VERSION);
+}
+/** v2 survives only in durable records. The wire always refuses it. */
+export function parseEngineBrokerV2TerminalResponse(value) {
+    const input = record(value);
+    if (input.version !== "noopolis.daimon.engine-broker.v2" ||
+        (input.kind !== "completed" && input.kind !== "failed") ||
+        Object.hasOwn(input, "shellClock") || Object.hasOwn(input, "providerClock") ||
+        Object.hasOwn(input, "cleanupDiagnostic")) {
+        throw new TypeError("invalid broker frame");
+    }
+    return parseTerminal({ ...input, version: VERSION }, VERSION);
+}
 function parseTerminal(input, expected) {
     const accounting = expected === VERSION ? ACCOUNTING : [];
+    const shellClock = input.shellClock;
+    if (shellClock !== undefined && (expected !== VERSION || !["task", "real", "gap"].includes(shellClock)))
+        throw new TypeError("invalid broker frame");
+    if (input.providerClock !== undefined && expected !== VERSION)
+        throw new TypeError("invalid broker frame");
+    const cleanupDiagnostic = input.cleanupDiagnostic;
+    if (cleanupDiagnostic !== undefined &&
+        (expected !== VERSION || cleanupDiagnostic !== ENGINE_BROKER_TASK_CLOCK_RESET_FAILED)) {
+        throw new TypeError("invalid broker frame");
+    }
+    const observation = {
+        ...(cleanupDiagnostic === undefined ? {} : { cleanupDiagnostic }),
+        ...(shellClock === undefined ? {} : { shellClock: shellClock }),
+        ...(input.providerClock === undefined ? {} : {
+            providerClock: parseGrokBrokerProviderClockObservation(input.providerClock)
+        })
+    };
+    const clockFields = Object.keys(observation);
     if (input.kind === "completed") {
-        exact(input, ["version", "kind", "requestId", "turnId", "text", "workerPid", "workerUid", "workerStartTime", ...accounting]);
+        exact(input, ["version", "kind", "requestId", "turnId", "text", "workerPid", "workerUid", "workerStartTime", ...accounting, ...clockFields]);
         if (!Number.isSafeInteger(input.workerPid) || input.workerPid < 1 || !Number.isSafeInteger(input.workerUid) || input.workerUid < 1)
             throw new TypeError("invalid broker frame");
         const base = { kind: "completed", requestId: id(input.requestId), turnId: id(input.turnId), text: text(input.text, 262_144), workerPid: input.workerPid, workerUid: input.workerUid, workerStartTime: id(input.workerStartTime) };
-        return expected === VERSION ? { version: VERSION, ...base, ...parseEngineBrokerTurnAccounting(input, "completed") } : { version: V1, ...base };
+        return expected === VERSION ? { version: VERSION, ...base, ...observation, ...parseEngineBrokerTurnAccounting(input, "completed") } : { version: V1, ...base };
     }
     // `mcpCalls` is the broker's own observation of the worker's tool calls
     // (`engineBrokerMcpCallLog.ts`), additive in v2 and never part of a v1
     // record, which predates the instrument entirely.
     if (expected === V1 && input.mcpCalls !== undefined)
         throw new TypeError("invalid broker frame");
-    const fields = ["version", "kind", "requestId", "turnId", "code", ...accounting, ...(input.diagnostic === undefined ? [] : ["diagnostic"]), ...(input.mcpCalls === undefined ? [] : ["mcpCalls"])];
+    const fields = ["version", "kind", "requestId", "turnId", "code", ...accounting, ...clockFields, ...(input.diagnostic === undefined ? [] : ["diagnostic"]), ...(input.mcpCalls === undefined ? [] : ["mcpCalls"])];
     exact(input, fields);
     const codes = expected === VERSION ? ENGINE_BROKER_FAILURE_CODES : ENGINE_BROKER_FAILURE_CODES.filter((code) => code !== "limit_exceeded");
     if (!codes.includes(input.code))
@@ -142,7 +225,7 @@ function parseTerminal(input, expected) {
     if ((input.code === "limit_exceeded") !== (accountingValue.limitReason !== "none"))
         throw new TypeError("invalid broker frame");
     const mcpCalls = input.mcpCalls === undefined ? undefined : parseMcpCallObservation(input.mcpCalls);
-    return { version: VERSION, ...base, ...(mcpCalls === undefined ? {} : { mcpCalls }), ...accountingValue };
+    return { version: VERSION, ...base, ...observation, ...(mcpCalls === undefined ? {} : { mcpCalls }), ...accountingValue };
 }
 /**
  * Names and timings, bounded, and internally consistent: a report can never

package/dist/runtime/engineBrokerSealLedger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engineBrokerSealLedger.d.ts","sourceRoot":"","sources":["../../src/runtime/engineBrokerSealLedger.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAG9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,eAAO,MAAM,wBAAwB,EAAG,8BAAuC,CAAC;AAEhF,iFAAiF;AACjF,eAAO,MAAM,gBAAgB;;;;;;CAMnB,CAAC;AAEX,qHAAqH;AACrH,eAAO,MAAM,wBAAwB,OAAQ,CAAC;AAE9C,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAIxF;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,GAAI,UAAU,4BAA4B,EAAE,OAAO,mBAAmB,KAAG,MAyDxG,CAAC"}
+{"version":3,"file":"engineBrokerSealLedger.d.ts","sourceRoot":"","sources":["../../src/runtime/engineBrokerSealLedger.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAG9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,eAAO,MAAM,wBAAwB,EAAG,8BAAuC,CAAC;AAEhF,iFAAiF;AACjF,eAAO,MAAM,gBAAgB;;;;;;CAMnB,CAAC;AAEX,qHAAqH;AACrH,eAAO,MAAM,wBAAwB,OAAQ,CAAC;AAE9C,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAIxF;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,GAAI,UAAU,4BAA4B,EAAE,OAAO,mBAAmB,KAAG,MAkExG,CAAC"}

package/dist/runtime/engineBrokerSealLedger.js

@@ -74,6 +74,15 @@ export const renderBrokerTurnSealLine = (terminal, entry) => `${JSON.stringify({
     requests: terminal.requests,
     model: terminal.model,
     limit_reason: terminal.limitReason,
+    ...(terminal.shellClock === undefined ? {} : { shell_clock: terminal.shellClock }),
+    ...(terminal.providerClock === undefined ? {} : { provider_clock: {
+            requests: terminal.providerClock.requests,
+            linesRewritten: terminal.providerClock.linesRewritten,
+            requestsWithoutDateLine: terminal.providerClock.requestsWithoutDateLine,
+            ...(terminal.providerClock.linesIgnored === undefined ? {} : { linesIgnored: terminal.providerClock.linesIgnored }),
+            injectedDate: terminal.providerClock.injectedDate,
+            taskDate: terminal.providerClock.taskDate
+        } }),
     ...(terminal.kind === "failed" ? { code: terminal.code } : {}),
     ...(terminal.kind === "failed" && terminal.diagnostic !== undefined
         ? {

package/dist/runtime/engineBrokerService.d.ts

@@ -1,12 +1,15 @@
+import { type BrokerClockObservation } from "./grokBrokerTaskClock.js";
+import { type Socket } from "node:net";
+import { type EngineBrokerCleanupObservation } from "./engineBrokerProtocol.js";
 import type { EngineBrokerTurnAccounting, EngineBrokerTurnLimitOverrides } from "./engineBrokerTurnAccounting.js";
 import { type GrokInferenceGrantIssued, type GrokInferenceGrantRequest } from "./grokInferenceGrants.js";
 export interface EngineBrokerServiceEngine {
-    turn(agentId: string, wakeId: string, prompt: string, mcpEndpoint: string, signal?: AbortSignal, limits?: EngineBrokerTurnLimitOverrides): Promise<Readonly<{
+    turn(agentId: string, wakeId: string, prompt: string, mcpEndpoint: string, signal?: AbortSignal, limits?: EngineBrokerTurnLimitOverrides, processClock?: string, slot?: number): Promise<Readonly<{
         text: string;
         workerPid: number;
         workerUid: number;
         workerStartTime: string;
-    }> & EngineBrokerTurnAccounting>;
+    }> & EngineBrokerTurnAccounting & BrokerClockObservation & EngineBrokerCleanupObservation>;
     readiness(): Readonly<{
         providerProxyPort: number;
         mcpFacadePort: number;
@@ -16,6 +19,7 @@ export interface EngineBrokerServiceEngine {
         workerIsolation: boolean;
     }>;
     close(): Promise<void>;
+    resetSlot?(slot: number): Promise<void>;
     /** Evaluator inference grants; an engine without them refuses every grant request as `unavailable`. Refusals throw {@link GrokInferenceGrantRefused}. */
     requestInferenceGrant?(request: GrokInferenceGrantRequest): GrokInferenceGrantIssued;
     releaseInferenceGrant?(grantId: string): boolean;
@@ -34,4 +38,6 @@ export declare function startEngineBrokerServiceWithIdentity(broker: EngineBroke
         socketPath: string;
     };
 }>;
+/** @internal The production connection handler, also exercised over an in-memory transport. */
+export declare function serveEngineBrokerConnection(socket: Socket, broker: EngineBrokerServiceEngine, active?: Map<string, AbortController>): void;
 //# sourceMappingURL=engineBrokerService.d.ts.map

package/dist/runtime/engineBrokerService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engineBrokerService.d.ts","sourceRoot":"","sources":["../../src/runtime/engineBrokerService.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AAGlH,OAAO,EAA6B,KAAK,wBAAwB,EAAE,KAAK,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACpI,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,OAAO,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,WAAW,EAAC,MAAM,EAAC,MAAM,CAAC,EAAC,WAAW,EAAC,MAAM,CAAC,EAAC,8BAA8B,GAAE,OAAO,CAAC,QAAQ,CAAC;QAAC,IAAI,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAC;QAAA,eAAe,EAAC,MAAM,CAAA;KAAC,CAAC,GAAC,0BAA0B,CAAC,CAAC;IACpP,SAAS,IAAG,QAAQ,CAAC;QAAC,iBAAiB,EAAC,MAAM,CAAC;QAAA,aAAa,EAAC,MAAM,CAAC;QAAA,aAAa,EAAC,MAAM,CAAC;QAAA,eAAe,EAAC,OAAO,CAAC;QAAA,UAAU,EAAC,OAAO,CAAC;QAAA,eAAe,EAAC,OAAO,CAAA;KAAC,CAAC,CAAC;IAC9J,KAAK,IAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,yJAAyJ;IACzJ,qBAAqB,CAAC,CAAC,OAAO,EAAC,yBAAyB,GAAE,wBAAwB,CAAC;IACnF,qBAAqB,CAAC,CAAC,OAAO,EAAC,MAAM,GAAE,OAAO,CAAC;CAChD;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAC,yBAAyB,EAAC,UAAU,SAAyC;;;;;;GAE5H;AACD,wBAAsB,oCAAoC,CAAC,MAAM,EAAC,yBAAyB,EAAC,UAAU,EAAC,MAAM,EAAC,WAAW,EAAC,MAAM;;;;;;GAK/H"}
+{"version":3,"file":"engineBrokerService.d.ts","sourceRoot":"","sources":["../../src/runtime/engineBrokerService.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAE/F,OAAO,EAA6B,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AAClE,OAAO,EAEqB,KAAK,8BAA8B,EAC9D,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AAGlH,OAAO,EAA6B,KAAK,wBAAwB,EAAE,KAAK,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACpI,MAAM,WAAW,yBAAyB;IACxC,IAAI,CACF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EACpE,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,8BAA8B,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAClG,OAAO,CAAC,QAAQ,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;KAC7E,CAAC,GAAG,0BAA0B,GAAG,sBAAsB,GAAG,8BAA8B,CAAC,CAAC;IAC3F,SAAS,IAAG,QAAQ,CAAC;QAAC,iBAAiB,EAAC,MAAM,CAAC;QAAA,aAAa,EAAC,MAAM,CAAC;QAAA,aAAa,EAAC,MAAM,CAAC;QAAA,eAAe,EAAC,OAAO,CAAC;QAAA,UAAU,EAAC,OAAO,CAAC;QAAA,eAAe,EAAC,OAAO,CAAA;KAAC,CAAC,CAAC;IAC9J,KAAK,IAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,SAAS,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,yJAAyJ;IACzJ,qBAAqB,CAAC,CAAC,OAAO,EAAC,yBAAyB,GAAE,wBAAwB,CAAC;IACnF,qBAAqB,CAAC,CAAC,OAAO,EAAC,MAAM,GAAE,OAAO,CAAC;CAChD;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAC,yBAAyB,EAAC,UAAU,SAAyC;;;;;;GAE5H;AACD,wBAAsB,oCAAoC,CAAC,MAAM,EAAC,yBAAyB,EAAC,UAAU,EAAC,MAAM,EAAC,WAAW,EAAC,MAAM;;;;;;GAU/H;AAoBD,+FAA+F;AAC/F,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,EAAE,MAAM,+BAAqC,GAC7F,IAAI,CA0EN"}

package/dist/runtime/engineBrokerService.js

@@ -1,6 +1,7 @@
+import { brokerClockObservation } from "./grokBrokerTaskClock.js";
 import { chmod, lstat, unlink } from "node:fs/promises";
 import { createServer } from "node:net";
-import { encodeEngineBrokerFrame, EngineBrokerFrameDecoder, parseEngineBrokerRequest } from "./engineBrokerProtocol.js";
+import { encodeEngineBrokerFrame, EngineBrokerFrameDecoder, EngineBrokerProtocolMismatch, parseEngineBrokerRequest } from "./engineBrokerProtocol.js";
 import { EngineBrokerTurnFailure } from "./grokEngineBroker.js";
 import { GROK_INFERENCE_PROXY_BASE_URL } from "./engineBrokerInferenceProtocol.js";
 import { GrokInferenceGrantRefused } from "./grokInferenceGrants.js";
@@ -12,7 +13,11 @@ export async function startEngineBrokerServiceWithIdentity(broker, socketPath, e
         throw new Error("engine broker service requires broker identity");
     await removeOwnedSocket(socketPath, expectedUid);
     const active = new Map(), connections = new Set();
-    const server = createServer((socket) => { connections.add(socket); socket.once("close", () => connections.delete(socket)); handle(socket, broker, active); });
+    const server = createServer((socket) => {
+        connections.add(socket);
+        socket.once("close", () => connections.delete(socket));
+        serveEngineBrokerConnection(socket, broker, active);
+    });
     await listen(server, socketPath);
     try {
         await chmod(socketPath, 0o600);
@@ -48,43 +53,88 @@ export async function startEngineBrokerServiceWithIdentity(broker, socketPath, e
  * reader has disconnected.
  */
 function handleSocketError(socket, owned) { socket.on("error", () => { owned()?.controller.abort(); socket.destroy(); }); }
-function handle(socket, broker, active) { const decoder = new EngineBrokerFrameDecoder(); let started = false, owned; handleSocketError(socket, () => owned); socket.once("close", () => owned?.controller.abort()); socket.on("data", (chunk) => { try {
-    for (const value of decoder.push(chunk)) {
-        const request = parseEngineBrokerRequest(value);
-        if (request.kind === "health") {
-            if (started)
-                throw new Error();
-            started = true;
-            const ready = broker.readiness();
-            if (ready.providerProxyPort !== 43123 || ready.mcpFacadePort !== 43124 || ready.registrations < 1 || ready.credentialStale || !ready.realmLease || !ready.workerIsolation)
-                throw new Error();
-            return send(socket, { version: request.version, kind: "ready", requestId: request.requestId, brokerUid: 2100, providerProxyPort: 43123, mcpFacadePort: 43124, registrations: ready.registrations, credentialStale: false, realmLease: true, workerIsolation: true });
+/** @internal The production connection handler, also exercised over an in-memory transport. */
+export function serveEngineBrokerConnection(socket, broker, active = new Map()) {
+    const decoder = new EngineBrokerFrameDecoder();
+    let started = false;
+    let owned;
+    handleSocketError(socket, () => owned);
+    socket.once("close", () => owned?.controller.abort());
+    socket.on("data", (chunk) => {
+        try {
+            for (const value of decoder.push(chunk)) {
+                const request = parseEngineBrokerRequest(value);
+                if (request.kind === "health") {
+                    if (started)
+                        throw new Error();
+                    started = true;
+                    const ready = broker.readiness();
+                    if (ready.providerProxyPort !== 43123 || ready.mcpFacadePort !== 43124 ||
+                        ready.registrations < 1 || ready.credentialStale || !ready.realmLease || !ready.workerIsolation) {
+                        throw new Error();
+                    }
+                    return send(socket, {
+                        version: request.version, kind: "ready", requestId: request.requestId, brokerUid: 2100,
+                        providerProxyPort: 43123, mcpFacadePort: 43124, registrations: ready.registrations,
+                        credentialStale: false, realmLease: true, workerIsolation: true
+                    });
+                }
+                if (request.kind === "cancel_turn") {
+                    if (owned?.turnId !== request.turnId)
+                        throw new Error("turn not owned by connection");
+                    owned.controller.abort();
+                    continue;
+                }
+                if (request.kind === "request_inference_grant" || request.kind === "release_inference_grant") {
+                    if (started)
+                        throw new Error();
+                    started = true;
+                    serveInferenceGrant(socket, broker, request);
+                    continue;
+                }
+                if (request.kind === "reset_slot") {
+                    if (started || broker.resetSlot === undefined)
+                        throw new Error();
+                    started = true;
+                    void broker.resetSlot(request.slot).then(() => send(socket, {
+                        version: request.version, kind: "slot_reset", requestId: request.requestId, slot: request.slot
+                    }), () => socket.destroy());
+                    continue;
+                }
+                const key = `${request.slot ?? request.agentId}:${request.turnId}`;
+                if (started || active.has(key))
+                    throw new Error();
+                started = true;
+                const controller = new AbortController();
+                owned = { turnId: request.turnId, controller };
+                active.set(key, controller);
+                socket.write(encodeEngineBrokerFrame({
+                    version: request.version, kind: "accepted", requestId: request.requestId, turnId: request.turnId
+                }));
+                void broker.turn(request.agentId, request.wakeId, request.prompt, request.mcpEndpoint, controller.signal, request.limits, request.processClock, request.slot).then((result) => send(socket, {
+                    version: request.version, kind: "completed", requestId: request.requestId, turnId: request.turnId,
+                    text: result.text, ...brokerClockObservation(result.shellClock, result.providerClock),
+                    ...(result.cleanupDiagnostic === undefined ? {} : { cleanupDiagnostic: result.cleanupDiagnostic }),
+                    workerPid: result.workerPid, workerUid: result.workerUid, workerStartTime: result.workerStartTime,
+                    outcome: "completed", usage: result.usage, model: result.model, requests: result.requests, limitReason: "none"
+                }), (error) => failed(socket, request, error, controller.signal.aborted)).finally(() => {
+                    if (active.get(key) === controller)
+                        active.delete(key);
+                    owned = undefined;
+                });
+            }
         }
-        if (request.kind === "cancel_turn") {
-            active.get(request.turnId)?.abort();
-            continue;
+        catch (error) {
+            if (error instanceof EngineBrokerProtocolMismatch && !socket.writableEnded) {
+                // Flush one small, closed diagnostic before FIN; destroy would lose it.
+                socket.pause();
+                socket.end(encodeEngineBrokerFrame(error.diagnostic));
+            }
+            else
+                socket.destroy();
         }
-        if (request.kind === "request_inference_grant" || request.kind === "release_inference_grant") {
-            if (started)
-                throw new Error();
-            started = true;
-            serveInferenceGrant(socket, broker, request);
-            continue;
-        }
-        if (started || active.has(request.turnId))
-            throw new Error();
-        started = true;
-        const controller = new AbortController();
-        owned = { turnId: request.turnId, controller };
-        active.set(request.turnId, controller);
-        socket.write(encodeEngineBrokerFrame({ version: request.version, kind: "accepted", requestId: request.requestId, turnId: request.turnId }));
-        void broker.turn(request.agentId, request.wakeId, request.prompt, request.mcpEndpoint, controller.signal, request.limits).then((result) => send(socket, { version: request.version, kind: "completed", requestId: request.requestId, turnId: request.turnId, text: result.text, workerPid: result.workerPid, workerUid: result.workerUid, workerStartTime: result.workerStartTime, outcome: "completed", usage: result.usage, model: result.model, requests: result.requests, limitReason: "none" }), (error) => failed(socket, request, error, controller.signal.aborted)).finally(() => { if (active.get(request.turnId) === controller)
-            active.delete(request.turnId); owned = undefined; });
-    }
+    });
 }
-catch {
-    socket.destroy();
-} }); }
 /**
  * Every failure the broker raises for a known registration carries its
  * accounting (a wake that tried to raise a limit: `usage: null`, zero
@@ -99,7 +149,15 @@ function failed(socket, request, error, aborted) {
         return;
     }
     const code = error instanceof EngineBrokerTurnFailure ? error.code : aborted ? "cancelled" : "engine_failed";
-    send(socket, { version: request.version, kind: "failed", requestId: request.requestId, turnId: request.turnId, code, ...(error instanceof EngineBrokerTurnFailure && error.diagnostic ? { diagnostic: error.diagnostic } : {}), ...(error instanceof EngineBrokerTurnFailure && error.mcpCalls ? { mcpCalls: error.mcpCalls } : {}), outcome: "failed", usage: accounting.usage, model: accounting.model, requests: accounting.requests, limitReason: accounting.limitReason });
+    send(socket, {
+        version: request.version, kind: "failed", requestId: request.requestId, turnId: request.turnId, code,
+        ...(error instanceof EngineBrokerTurnFailure ? brokerClockObservation(error.shellClock, error.providerClock) : {}),
+        ...(error instanceof EngineBrokerTurnFailure && error.diagnostic ? { diagnostic: error.diagnostic } : {}),
+        ...(error instanceof EngineBrokerTurnFailure && error.mcpCalls ? { mcpCalls: error.mcpCalls } : {}),
+        ...(error instanceof EngineBrokerTurnFailure && error.cleanupDiagnostic ? { cleanupDiagnostic: error.cleanupDiagnostic } : {}),
+        outcome: "failed", usage: accounting.usage, model: accounting.model,
+        requests: accounting.requests, limitReason: accounting.limitReason
+    });
 }
 /** One grant verb per connection, answered and closed; any failure becomes a closed-code refusal and never touches turn state. */
 function serveInferenceGrant(socket, broker, request) {

package/dist/runtime/engineBrokerServiceCli.js

@@ -10,7 +10,7 @@ export async function runEngineBrokerServiceCli() {
     if (process.getuid?.() !== 2100)
         throw new Error("engine broker service requires broker identity");
     const config = parseEngineBrokerServiceConfig(await readRootConfig(ENGINE_BROKER_SERVICE_CONFIG));
-    const broker = await startGrokEngineBroker({ grokCommand: "/usr/local/bin/grok", nativeClient: "/opt/daimon/bin/daimon-engine-broker", credentialHome: config.credentialHome, turnStore: config.turnStore, registrations: config.registrations, ...(config.inferenceLedgerPath === undefined ? {} : { inferenceLedgerPath: config.inferenceLedgerPath }) });
+    const broker = await startGrokEngineBroker({ grokCommand: "/usr/local/bin/grok", nativeClient: "/opt/daimon/bin/daimon-engine-broker", credentialHome: config.credentialHome, turnStore: config.turnStore, registrations: config.registrations, maxRunRequests: config.maxRunRequests, runRequestStore: config.runRequestStore, ...(config.inferenceLedgerPath === undefined ? {} : { inferenceLedgerPath: config.inferenceLedgerPath }) });
     const service = await startEngineBrokerService(broker);
     let stopping;
     const stop = () => { stopping ??= service.close(); return stopping; };

package/dist/runtime/engineBrokerServiceConfig.d.ts

@@ -1,6 +1,7 @@
 import { type EngineBrokerTurnLimits } from "./engineBrokerTurnAccounting.js";
 import { type GrokBrokerModelPolicy } from "./grokBrokerModelPolicy.js";
 export declare const ENGINE_BROKER_SERVICE_V1: "noopolis.daimon.engine-broker-service.v1";
+export declare const ENGINE_BROKER_SERVICE_V3: "noopolis.daimon.engine-broker-service.v3";
 export declare const ENGINE_BROKER_SERVICE_V2: "noopolis.daimon.engine-broker-service.v2";
 /** One root-provisioned broker slot. Every field is fixed at provisioning time; a wake can only lower `limits`. */
 export type EngineBrokerServiceRegistration = Readonly<{
@@ -28,6 +29,8 @@ export type EngineBrokerServiceConfig = Readonly<{
     turnStore: string;
     registrations: readonly EngineBrokerServiceRegistration[];
     inferenceLedgerPath?: string;
+    maxRunRequests?: number;
+    runRequestStore?: string;
 }>;
 /** The per-request stream written beside a registration's usage ledger. */
 export declare const engineBrokerRequestLedgerPathFor: (usageLedgerPath: string) => string;
@@ -40,6 +43,8 @@ export declare const engineBrokerSealLedgerPathFor: (usageLedgerPath: string) =>
 /**
  * Strict `service.json` parser.
  *
+ * v3 retains seven-field registrations and binds slotPolicies by slot; agent IDs
+ * may repeat, while worker UIDs, slots and ledger streams must be distinct.
  * v2 requires every registration to declare its usage ledger, limits and model
  * (`model.id`/`model.reasoningEffort` from the closed lists); unknown keys at
  * any level are refused. v1 is still accepted and receives today's defaults:

package/dist/runtime/engineBrokerServiceConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engineBrokerServiceConfig.d.ts","sourceRoot":"","sources":["../../src/runtime/engineBrokerServiceConfig.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgE,KAAK,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC5I,OAAO,EAAuF,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAK7J,eAAO,MAAM,wBAAwB,EAAG,0CAAmD,CAAC;AAC5F,eAAO,MAAM,wBAAwB,EAAG,0CAAmD,CAAC;AAE5F,mHAAmH;AACnH,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IACpI,oJAAoJ;IACpJ,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,KAAK,EAAE,qBAAqB,CAAC;CAC9B,CAAC,CAAC;AACH;;;;;;GAMG;AACH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAczL,2EAA2E;AAC3E,eAAO,MAAM,gCAAgC,GAAI,iBAAiB,MAAM,KAAG,MAAgF,CAAC;AAE5J;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,GAAI,iBAAiB,MAAM,KAAG,MAA6E,CAAC;AAEtJ;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,CA6BxF"}
+{"version":3,"file":"engineBrokerServiceConfig.d.ts","sourceRoot":"","sources":["../../src/runtime/engineBrokerServiceConfig.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgE,KAAK,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC5I,OAAO,EAAuF,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAK7J,eAAO,MAAM,wBAAwB,EAAG,0CAAmD,CAAC;AAC5F,eAAO,MAAM,wBAAwB,EAAG,0CAAmD,CAAC;AAC5F,eAAO,MAAM,wBAAwB,EAAG,0CAAmD,CAAC;AAE5F,mHAAmH;AACnH,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IACpI,oJAAoJ;IACpJ,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,KAAK,EAAE,qBAAqB,CAAC;CAC9B,CAAC,CAAC;AACH;;;;;;GAMG;AACH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAc5O,2EAA2E;AAC3E,eAAO,MAAM,gCAAgC,GAAI,iBAAiB,MAAM,KAAG,MAAgF,CAAC;AAE5J;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,GAAI,iBAAiB,MAAM,KAAG,MAA6E,CAAC;AAEtJ;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,CAwDxF"}