@noopolis/daimon 0.2.0 → 0.2.2

package/dist/runtime/organizationRuntimeAdmission.js

@@ -0,0 +1,22 @@
+// Internal capabilities are object identities, never caller-provided wire fields.
+const durableRequests = new WeakSet();
+const recordingVerifiers = new WeakMap();
+export async function wakeFromDurableInbox(host, request) {
+    durableRequests.add(request);
+    try {
+        return await host.wake(request);
+    }
+    finally {
+        durableRequests.delete(request);
+    }
+}
+export function consumeDurableAdmission(request) {
+    return durableRequests.delete(request);
+}
+export function registerRecordingVerifier(host, verify) {
+    recordingVerifiers.set(host, verify);
+    return host;
+}
+export async function verifyHostRecordingStore(host, agentId) {
+    await recordingVerifiers.get(host)?.(agentId);
+}

package/dist/runtime/organizationRuntimeControl.d.ts

@@ -4,6 +4,10 @@ import type { AttentionRegistry } from "./attention.js";
 import { type ScheduleControllerOptions } from "./schedule.js";
 import { type WakeAcceptanceStoreTestOptions } from "./wakeAcceptanceStore.js";
 import { type OrganizationRuntimeActivityV2, type OrganizationRuntimeWakeAcceptanceResult, type OrganizationRuntimeWakeReceiptStatus } from "./wakeAcceptanceTypes.js";
+export type WorkDrain = Readonly<{
+    state: "draining" | "drained";
+    since: string;
+}>;
 export type WorkAvailability = Readonly<{
     version: "noopolis.daimon.work-availability.v1";
     state: "running" | "paused" | "stopped";
@@ -15,12 +19,17 @@ export type WorkAvailability = Readonly<{
         budget: WakeBudgetSnapshot;
         error?: string;
     }>[];
+    drain?: WorkDrain;
 }>;
 export type OrganizationRuntimeControlHost = OrganizationRuntimeHost & Readonly<{
     accept(request: unknown): Promise<OrganizationRuntimeWakeAcceptanceResult>;
     wakeReceipt(token: string | undefined, acceptanceId: string): Promise<OrganizationRuntimeWakeReceiptStatus | undefined>;
     activityV2(token: string | undefined): Promise<OrganizationRuntimeActivityV2 | undefined>;
     availability(token: string | undefined): Promise<WorkAvailability | undefined>;
+    /** Reversible operator drain: new wakes answer work-blocked, queued ones stay durable, running turns finish. */
+    drain(token: string | undefined): Promise<WorkAvailability | undefined>;
+    /** Ends a drain and dispatches the queue. Never clears the latched `fuse.stop`. */
+    resume(token: string | undefined): Promise<WorkAvailability | undefined>;
 }>;
 export type OrganizationRuntimeControlOptions = Readonly<{
     acceptanceStorePath: string;

package/dist/runtime/organizationRuntimeControl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizationRuntimeControl.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeControl.ts"],"names":[],"mappings":"AACA,OAAO,EAAuG,KAAK,uBAAuB,EAA8C,MAAM,0BAA0B,CAAC;AAEzN,OAAO,EAAY,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAqD,KAAK,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAClH,OAAO,EAA0F,KAAK,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AACvK,OAAO,EAAmD,KAAK,6BAA6B,EAAE,KAAK,uCAAuC,EAAE,KAAK,oCAAoC,EAAE,MAAM,0BAA0B,CAAC;AAGxN,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,sCAAsC,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IAAC,MAAM,EAAE,SAAS,QAAQ,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAA;CAAE,CAAC,CAAC;AAC1R,MAAM,MAAM,8BAA8B,GAAG,uBAAuB,GAAG,QAAQ,CAAC;IAC9E,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,uCAAuC,CAAC,CAAC;IAC3E,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,oCAAoC,GAAG,SAAS,CAAC,CAAC;IACxH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAAC;IAC1F,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;CAChF,CAAC,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,QAAQ,CAAC;IAAE,mBAAmB,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACjH,KAAK,kBAAkB,GAAG,iCAAiC,GAAG,QAAQ,CAAC;IACrE,eAAe,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,YAAY,GAAG,KAAK,GAAG,UAAU,CAAC,CAAC;IACrF,YAAY,CAAC,EAAE,8BAA8B,CAAC;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACpC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,wBAAwB,CAAC,EAAE,iBAAiB,CAAC;CAC9C,CAAC,CAAC;AAEH,sFAAsF;AACtF,wBAAgB,oCAAoC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,iCAAiC,GAAG,8BAA8B,CAIhJ;AACD,gFAAgF;AAChF,wBAAgB,mDAAmD,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,kBAAkB,GAAG,8BAA8B,CAE/K;AA4JD,eAAO,MAAM,0BAA0B,OAAO,CAAC"}
+{"version":3,"file":"organizationRuntimeControl.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeControl.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuG,KAAK,uBAAuB,EAA8C,MAAM,0BAA0B,CAAC;AAEzN,OAAO,EAAY,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAqD,KAAK,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAClH,OAAO,EAA0F,KAAK,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AACvK,OAAO,EAAmD,KAAK,6BAA6B,EAAE,KAAK,uCAAuC,EAAE,KAAK,oCAAoC,EAAE,MAAM,0BAA0B,CAAC;AAGxN,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,UAAU,GAAG,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACnF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IAAE,OAAO,EAAE,sCAAsC,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IAAC,MAAM,EAAE,SAAS,QAAQ,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,CAAC,CAAC;AAC7S,MAAM,MAAM,8BAA8B,GAAG,uBAAuB,GAAG,QAAQ,CAAC;IAC9E,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,uCAAuC,CAAC,CAAC;IAC3E,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,oCAAoC,GAAG,SAAS,CAAC,CAAC;IACxH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAAC;IAC1F,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IAC/E,gHAAgH;IAChH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IACxE,mFAAmF;IACnF,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;CAC1E,CAAC,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,QAAQ,CAAC;IAAE,mBAAmB,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACjH,KAAK,kBAAkB,GAAG,iCAAiC,GAAG,QAAQ,CAAC;IACrE,eAAe,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,YAAY,GAAG,KAAK,GAAG,UAAU,CAAC,CAAC;IACrF,YAAY,CAAC,EAAE,8BAA8B,CAAC;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACpC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,wBAAwB,CAAC,EAAE,iBAAiB,CAAC;CAC9C,CAAC,CAAC;AAEH,sFAAsF;AACtF,wBAAgB,oCAAoC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,iCAAiC,GAAG,8BAA8B,CAIhJ;AACD,gFAAgF;AAChF,wBAAgB,mDAAmD,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,kBAAkB,GAAG,8BAA8B,CAE/K;AAoMD,eAAO,MAAM,0BAA0B,OAAO,CAAC"}

package/dist/runtime/organizationRuntimeControl.js

@@ -1,4 +1,5 @@
 import { createHash, timingSafeEqual } from "node:crypto";
+import { readTaskClock } from "./taskClock.js";
 import { parseOrganizationRuntimeConfig, parseOrganizationRuntimeWakeRequest } from "./organizationRuntime.js";
 import { createOrganizationRuntimeHostWithAttention } from "./organizationRuntimeHost.js";
 import { WakeFuse } from "./wakeFuse.js";
@@ -28,6 +29,10 @@ function createControl(config, host, options, registry) {
     let started = false;
     let stopping = false;
     let sealedActivity;
+    /** In-process only: a restarted host admits, so a drained release ends drained-free. */
+    let drainedSince;
+    /** Synchronous v1 turns bypass the dispatcher; a drain is not drained while one is admitted or running. */
+    let v1Turns = 0;
     /**
      * One projection, read the same way live and at shutdown. `active` is decided by
      * the dispatcher's own execution authority rather than the record's flag alone,
@@ -47,7 +52,7 @@ function createControl(config, host, options, registry) {
         const reason = fuse?.tripped();
         return reason === "operator_stop" || reason === "ledger_unavailable" ? reason : undefined;
     };
-    const accept = async (value) => {
+    const accept = async (value, nativeSchedule = false) => {
         let request;
         try {
             request = parseWakeAcceptanceRequest(value);
@@ -64,9 +69,12 @@ function createControl(config, host, options, registry) {
         const reason = hardReason();
         if (reason)
             return blocked(reason);
+        // A drain is an operator stop that can be undone; bridges already defer on this reason.
+        if (drainedSince !== undefined)
+            return blocked("operator_stop");
         const operation = (async () => {
             try {
-                const accepted = await store.accept(request);
+                const accepted = await store.accept(request, nativeSchedule);
                 // A stop racing this fsync cannot revoke already durable ownership.
                 // It remains accepted for restart instead of being terminalized.
                 dispatcher?.notify(request.agent_id, accepted.created);
@@ -88,6 +96,25 @@ function createControl(config, host, options, registry) {
             persistence.delete(operation);
         }
     };
+    const availability = async (token) => {
+        if (!tokensEqual(expectedToken, token) || !store || !fuse)
+            return undefined;
+        await fuse.pollOperatorStop();
+        const items = await store.activityWithExecutionErrors();
+        const executionErrors = new Map(items.filter((record) => (record.state === "accepted" || record.state === "running")
+            && record.execution_error !== undefined).map((record) => [record.agent_id, record.execution_error]));
+        const agents = await Promise.all(config.agents.map(async (agent) => ({
+            agent_id: agent.id, pending: items.filter((item) => item.agent_id === agent.id && (item.state === "accepted" || item.state === "running" && !dispatcher?.activeExecutions().some((execution) => execution.agent_id === agent.id))).length,
+            running: dispatcher?.activeExecutions().some((execution) => execution.agent_id === agent.id) ?? false,
+            deferred: items.filter((item) => item.agent_id === agent.id && item.state === "accepted" && item.deferred).length,
+            budget: await fuse.snapshot(agent.id, agent.attention),
+            ...((dispatcher?.failure(agent.id) ?? executionErrors.get(agent.id))
+                ? { error: dispatcher?.failure(agent.id) ?? executionErrors.get(agent.id) } : {})
+        })));
+        // "drained" only once no inbox loop is alive: nothing runs and nothing can start until resume.
+        const drain = drainedSince === undefined ? undefined : { state: dispatcher?.quiescent() === false || v1Turns > 0 ? "draining" : "drained", since: drainedSince };
+        return { version: "noopolis.daimon.work-availability.v1", state: hardReason() ? "stopped" : drain !== undefined || agents.some((agent) => agent.budget.state !== "available" || agent.error) ? "paused" : "running", agents, ...(drain === undefined ? {} : { drain }) };
+    };
     return {
         wake: async (request) => {
             try {
@@ -96,23 +123,33 @@ function createControl(config, host, options, registry) {
             catch {
                 return { version: "noopolis.daimon.wake-result.v1", status: "rejected", agentId: "", wakeId: "", code: "invalid_request" };
             }
-            // Inbox attention requires durable ownership; synchronous v1 cannot
-            // provide a receipt or leave deferred messages pending.
+            // Attention and recording require durable ownership and dispatcher admission.
             if (!tokensEqual(expectedToken, request.token))
                 return { version: "noopolis.daimon.wake-result.v1", status: "rejected", agentId: request.agentId, wakeId: request.event.id, code: "unauthorized" };
             if (!knownAgents.has(request.agentId))
                 return { version: "noopolis.daimon.wake-result.v1", status: "rejected", agentId: request.agentId, wakeId: request.event.id, code: "unknown_agent" };
-            if (config.agents.find((agent) => agent.id === request.agentId)?.attention !== undefined)
+            const agent = config.agents.find((candidate) => candidate.id === request.agentId);
+            if (agent.attention !== undefined || agent.recording !== undefined)
                 return { version: "noopolis.daimon.wake-result.v1", status: "rejected", agentId: request.agentId, wakeId: request.event.id, code: "durable_inbox_required" };
-            if (hardReason() || (await fuse.admit(request.agentId, request.event.id, config.agents.find((agent) => agent.id === request.agentId)?.attention)).state !== "admitted")
+            // v1 has no `blocked` member on its wire; a drain answers it exactly as the latched stop does.
+            if (hardReason() || drainedSince !== undefined)
                 return { version: "noopolis.daimon.wake-result.v1", status: "stopped", agentId: request.agentId, wakeId: request.event.id, code: "host_stopping" };
-            return await host.wake(request);
+            v1Turns += 1;
+            try {
+                if ((await fuse.admit(request.agentId, request.event.id, config.agents.find((agent) => agent.id === request.agentId)?.attention)).state !== "admitted")
+                    return { version: "noopolis.daimon.wake-result.v1", status: "stopped", agentId: request.agentId, wakeId: request.event.id, code: "host_stopping" };
+                return await host.wake(request);
+            }
+            finally {
+                v1Turns -= 1;
+            }
         },
         health: async (agentId) => await host.health(agentId),
         activity: async (request) => await host.activity(request),
         async start() {
             if (started)
                 return;
+            const clock = readTaskClock();
             if (stopping)
                 throw new Error("organization runtime control host has been stopped");
             if (!expectedToken?.trim())
@@ -138,10 +175,12 @@ function createControl(config, host, options, registry) {
                 fusePoll.unref();
                 if (config.version === "noopolis.daimon.organization-runtime.v2") {
                     schedules = createScheduleController({ acceptanceStorePath: options.acceptanceStorePath, agents: config.agents, ...options.scheduleOptions,
+                        // Calendar selection/state use task instants; due - taskNow remains a real delay.
+                        now: () => { const realNow = (options.scheduleOptions?.now ?? Date.now)(); return clock?.at(realNow) ?? realNow; },
                         accept: async (occurrence) => {
-                            if (dispatcher?.busy(occurrence.agentId) || hardReason())
+                            if (dispatcher?.busy(occurrence.agentId) || hardReason() || drainedSince !== undefined)
                                 return false;
-                            const result = await accept({ token: expectedToken, agent_id: occurrence.agentId, delivery_id: occurrence.deliveryId, event: { version: "noopolis.daimon.wake.v2", kind: "schedule", text: occurrence.prompt, occurred_at: occurrence.occurredAt } });
+                            const result = await accept({ token: expectedToken, agent_id: occurrence.agentId, delivery_id: occurrence.deliveryId, event: { version: "noopolis.daimon.wake.v2", kind: "schedule", text: occurrence.prompt, occurred_at: occurrence.occurredAt } }, true);
                             return result.state === "accepted";
                         }
                     });
@@ -157,7 +196,8 @@ function createControl(config, host, options, registry) {
                 throw error;
             }
         },
-        accept,
+        // Do not expose the private provenance argument, even to JavaScript callers.
+        accept: (value) => accept(value),
         async wakeReceipt(token, acceptanceId) {
             if (!tokensEqual(expectedToken, token) || store === undefined)
                 return undefined;
@@ -176,22 +216,30 @@ function createControl(config, host, options, registry) {
                 return sealedActivity;
             return await projectActivity(store, "running");
         },
-        async availability(token) {
+        availability,
+        async drain(token) {
             if (!tokensEqual(expectedToken, token) || !store || !fuse)
                 return undefined;
-            await fuse.pollOperatorStop();
-            const items = await store.activityWithExecutionErrors();
-            const executionErrors = new Map(items.filter((record) => (record.state === "accepted" || record.state === "running")
-                && record.execution_error !== undefined).map((record) => [record.agent_id, record.execution_error]));
-            const agents = await Promise.all(config.agents.map(async (agent) => ({
-                agent_id: agent.id, pending: items.filter((item) => item.agent_id === agent.id && (item.state === "accepted" || item.state === "running" && !dispatcher?.activeExecutions().some((execution) => execution.agent_id === agent.id))).length,
-                running: dispatcher?.activeExecutions().some((execution) => execution.agent_id === agent.id) ?? false,
-                deferred: items.filter((item) => item.agent_id === agent.id && item.state === "accepted" && item.deferred).length,
-                budget: await fuse.snapshot(agent.id, agent.attention),
-                ...((dispatcher?.failure(agent.id) ?? executionErrors.get(agent.id))
-                    ? { error: dispatcher?.failure(agent.id) ?? executionErrors.get(agent.id) } : {})
-            })));
-            return { version: "noopolis.daimon.work-availability.v1", state: hardReason() ? "stopped" : agents.some((agent) => agent.budget.state !== "available" || agent.error) ? "paused" : "running", agents };
+            drainedSince ??= new Date().toISOString();
+            dispatcher?.pause();
+            return await availability(token);
+        },
+        async resume(token) {
+            if (!tokensEqual(expectedToken, token) || !store || !fuse)
+                return undefined;
+            if (drainedSince !== undefined) {
+                drainedSince = undefined;
+                // A latched operator stop or fatal fault outlives the drain: resume never reopens it.
+                if (!hardReason()) {
+                    // An owed pass for every agent the drain withheld or that holds queued work;
+                    // owed passes never count as new input, so deferred deliveries stay deferred.
+                    const queued = new Set((await store.recoverable(knownAgents).catch(() => [])).filter((record) => !record.deferred).map((record) => record.agent_id));
+                    if (drainedSince === undefined && !hardReason())
+                        dispatcher?.resume(queued);
+                    void schedules?.drain().catch(() => undefined);
+                }
+            }
+            return await availability(token);
         },
         async stop() {
             if (!started && stopping)

package/dist/runtime/organizationRuntimeHost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizationRuntimeHost.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeHost.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGxD,OAAO,KAAK,EAAE,WAAW,EAA0B,MAAM,kBAAkB,CAAC;AAI5E,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAK/E,OAAO,EAML,KAAK,8BAA8B,EAInC,KAAK,uBAAuB,EAK7B,MAAM,0BAA0B,CAAC;AAElC,KAAK,gCAAgC,GAAG,CACtC,KAAK,EAAE,8BAA8B,EACrC,KAAK,CAAC,EAAE,UAAU,CAAC,gCAAgC,CAAC,UAAU,CAAC,CAAC,KAC7D,OAAO,CAAC,WAAW,CAAC,CAAC;AAG1B,KAAK,qBAAqB,GAAG,QAAQ,CAAC;IAAE,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AAmBpF,iFAAiF;AACjF,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,GAAE,qBAA0B,GAAG,uBAAuB,CAI3H;AAED,uFAAuF;AACvF,wBAAgB,0CAA0C,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,iBAAiB,GAAG,uBAAuB,CAmBjK;AAED,uFAAuF;AACvF,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,gCAAgC,EACzC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,gCAAgC,CAAC,GAC1D,uBAAuB,CAKzB;AA2RD,uFAAuF;AACvF,eAAO,MAAM,+BAA+B,OAAQ,CAAC;AAOrD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAMtE"}
+{"version":3,"file":"organizationRuntimeHost.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeHost.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAIxD,OAAO,KAAK,EAAE,WAAW,EAA0B,MAAM,kBAAkB,CAAC;AAG5E,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAK/E,OAAO,EAML,KAAK,8BAA8B,EAInC,KAAK,uBAAuB,EAK7B,MAAM,0BAA0B,CAAC;AAClC,KAAK,gCAAgC,GAAG,CACtC,KAAK,EAAE,8BAA8B,EACrC,KAAK,CAAC,EAAE,UAAU,CAAC,gCAAgC,CAAC,UAAU,CAAC,CAAC,KAC7D,OAAO,CAAC,WAAW,CAAC,CAAC;AAE1B,KAAK,qBAAqB,GAAG,QAAQ,CAAC;IAAE,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AAgBpF,iFAAiF;AACjF,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,GAAE,qBAA0B,GAAG,uBAAuB,CAI3H;AACD,uFAAuF;AACvF,wBAAgB,0CAA0C,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,iBAAiB,GAAG,uBAAuB,CAmBjK;AAED,uFAAuF;AACvF,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,gCAAgC,EACzC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,gCAAgC,CAAC,GAC1D,uBAAuB,CAKzB;AA8RD,uFAAuF;AACvF,eAAO,MAAM,+BAA+B,OAAQ,CAAC;AAOrD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAMtE"}

package/dist/runtime/organizationRuntimeHost.js

@@ -1,3 +1,5 @@
+import { consumeDurableAdmission, registerRecordingVerifier } from "./organizationRuntimeAdmission.js";
+import { readTaskClock, taskClockChildEnvironment } from "./taskClock.js";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import { sanitizeWakeCompletionText } from "./wakeAcceptanceTypes.js";
 import { startOrganizationRuntimeEngine } from "./engineDispatcher.js";
@@ -123,6 +125,10 @@ function createHost(config, factory, preflight = undefined) {
             return startPromise;
         if (stopRequested)
             throw new Error("organization runtime host has been stopped");
+        const clock = readTaskClock();
+        for (const agent of config.agents)
+            for (const server of agent.mcp ?? [])
+                taskClockChildEnvironment(server.env, clock);
         if (controlToken === undefined || !controlToken.trim()) {
             throw new Error(`required control token ${config.host.controlTokenEnv} is missing or blank`);
         }
@@ -200,6 +206,7 @@ function createHost(config, factory, preflight = undefined) {
         return startPromise;
     };
     const wake = async (request) => {
+        const durable = consumeDurableAdmission(request);
         let parsed;
         try {
             parsed = parseOrganizationRuntimeWakeRequest(request);
@@ -218,6 +225,8 @@ function createHost(config, factory, preflight = undefined) {
             addActivity(parsed.agentId, "wake_rejected", parsed.event.id);
             return rejected(parsed, "unknown_agent");
         }
+        if (agent.config.recording && !durable)
+            return rejected(parsed, "durable_inbox_required");
         if (agent.pending.length >= maxPendingWakes) {
             addActivity(parsed.agentId, "wake_rejected", parsed.event.id);
             return rejected(parsed, "queue_full");
@@ -304,13 +313,13 @@ function createHost(config, factory, preflight = undefined) {
             stopPromise = undefined; });
         return attempt;
     };
-    return { start, wake, health, activity: activityPage, stop };
+    return registerRecordingVerifier({ start, wake, health, activity: activityPage, stop }, async (id) => {
+        await readiness?.paths.forAgent(agents.get(id).config).verifyRecording?.();
+    });
 }
 function toCoreWake(request) {
     return {
-        id: request.event.id,
-        kind: request.event.kind === "external" ? "manual" : request.event.kind,
-        text: request.event.text
+        id: request.event.id, kind: request.event.kind === "external" ? "manual" : request.event.kind, text: request.event.text
     };
 }
 function agentHealthState(agent) {

package/dist/runtime/organizationRuntimeParsing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizationRuntimeParsing.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeParsing.ts"],"names":[],"mappings":"AAEA,OAAO,EAcL,KAAK,yBAAyB,EAK9B,KAAK,8BAA8B,EACpC,MAAM,0BAA0B,CAAC;AAOlC,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,CAuBxF;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CAWlG;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,yBAAyB,CAEpG;AAED,eAAO,MAAM,2BAA2B,0CAAoC,CAAC"}
+{"version":3,"file":"organizationRuntimeParsing.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeParsing.ts"],"names":[],"mappings":"AAGA,OAAO,EAcL,KAAK,yBAAyB,EAK9B,KAAK,8BAA8B,EACpC,MAAM,0BAA0B,CAAC;AAOlC,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,CAwBxF;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CAWlG;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,yBAAyB,CAEpG;AAED,eAAO,MAAM,2BAA2B,0CAAoC,CAAC"}

package/dist/runtime/organizationRuntimeParsing.js

@@ -1,5 +1,6 @@
 import { GROK_BROKER_MODELS, GROK_BROKER_REASONING_EFFORTS } from "../contracts/grokWorkerContract.js";
 import { parseAttention } from "./attention.js";
+import { isolateRecording, parseRecording } from "./organizationRuntimeRecording.js";
 import { ORGANIZATION_RUNTIME_CODEX_REASONING_EFFORTS, ORGANIZATION_RUNTIME_CODEX_WORKSPACE_NO_NETWORK_POLICY, ORGANIZATION_RUNTIME_MAX_AGENTS, ORGANIZATION_RUNTIME_MAX_CONFIG_BYTES, ORGANIZATION_RUNTIME_MAX_INSTRUCTIONS_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_STRING_BYTES, ORGANIZATION_RUNTIME_MAX_STRING_CODEPOINTS, ORGANIZATION_RUNTIME_MAX_WAKE_TEXT_BYTES, ORGANIZATION_RUNTIME_MAX_SCHEDULE_INTERVAL_MS, ORGANIZATION_RUNTIME_MAX_SCHEDULE_JITTER_SECONDS, ORGANIZATION_RUNTIME_V2_VERSION, ORGANIZATION_RUNTIME_VERSION } from "./organizationRuntime.js";
 const ENV_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
 const ENGINE_KINDS = new Set(["codex", "grok", "agy"]);
@@ -29,6 +30,7 @@ export function parseOrganizationRuntimeConfig(value) {
     });
     isolated(agents);
     isolatedMemory(agents);
+    isolateRecording(agents);
     return { version: version, host, agents };
 }
 export function parseOrganizationRuntimeWakeRequest(value) {
@@ -58,10 +60,11 @@ export function validateOrganizationRuntimeConfig(value) {
 export const isOrganizationRuntimeConfig = validateOrganizationRuntimeConfig;
 function parseAgent(value, label, v2) {
     const agent = object(value, label);
-    exactOptional(agent, v2 ? ["id", "name", "instructions", "workspacePath", "runtimeHomePath", "engine", "schedule"] : ["id", "name", "instructions", "workspacePath", "runtimeHomePath", "engine"], ["mcp", "moltnet", "memory", "attention"], label);
+    exactOptional(agent, v2 ? ["id", "name", "instructions", "workspacePath", "runtimeHomePath", "engine", "schedule"] : ["id", "name", "instructions", "workspacePath", "runtimeHomePath", "engine"], ["mcp", "moltnet", "memory", "attention", "recording"], label);
     return {
         id: nonEmpty(agent.id, `${label}.id`), name: nonEmpty(agent.name, `${label}.name`), instructions: nonEmpty(agent.instructions, `${label}.instructions`, ORGANIZATION_RUNTIME_MAX_INSTRUCTIONS_CODEPOINTS), workspacePath: absolute(agent.workspacePath, `${label}.workspacePath`), runtimeHomePath: absolute(agent.runtimeHomePath, `${label}.runtimeHomePath`), engine: engine(agent.engine, `${label}.engine`),
         ...(agent.attention === undefined ? {} : { attention: parseAttention(agent.attention) }),
+        ...(agent.recording === undefined ? {} : { recording: parseRecording(agent.recording) }),
         ...(v2 ? { schedule: schedule(agent.schedule, `${label}.schedule`) } : {}),
         ...(agent.mcp === undefined ? {} : { mcp: mcpServers(agent.mcp, `${label}.mcp`) }),
         ...(agent.moltnet === undefined ? {} : { moltnet: moltnet(agent.moltnet, `${label}.moltnet`) }),

package/dist/runtime/organizationRuntimeReadiness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizationRuntimeReadiness.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeReadiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAmC,KAAK,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAEhH,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IACtD,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC,KAAK,EAAE,gCAAgC,CAAC;IACxC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC,CAAC;AAEH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,gCAAgC,CAAC,CA8D3C"}
+{"version":3,"file":"organizationRuntimeReadiness.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeReadiness.ts"],"names":[],"mappings":"AACA,OAAO,EAA6B,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAIjG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAmC,KAAK,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAEhH,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IACtD,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC,KAAK,EAAE,gCAAgC,CAAC;IACxC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC,CAAC;AAEH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,gCAAgC,CAAC,CAiE3C"}

package/dist/runtime/organizationRuntimeReadiness.js

@@ -1,9 +1,17 @@
+import { reportEngineTaskClockGap } from "../pi/engineTaskClock.js";
 import { startAgySubscriptionRealm } from "./agySubscriptionRealm.js";
 import { prepareEngineExecutable, verifyAgySubscriptionEnrollment } from "./engineReadiness.js";
+import { readTaskClock } from "./taskClock.js";
+import { memoryClockOptions } from "../pi/memoryClock.js";
 import { prepareOrganizationRuntimePaths } from "./physicalReadiness.js";
 import { materializePortableCredential } from "./portableCredentialMaterial.js";
 import { EngineBrokerControlClient } from "./engineBrokerControlClient.js";
 export async function prepareProductionReadiness(config) {
+    const clock = readTaskClock();
+    for (const agent of config.agents)
+        reportEngineTaskClockGap(agent.engine.kind);
+    if (config.agents.some((agent) => agent.memory !== undefined))
+        memoryClockOptions(clock);
     const paths = await prepareOrganizationRuntimePaths(config.agents);
     let realm;
     let grokBroker;

package/dist/runtime/organizationRuntimeRecording.d.ts

@@ -0,0 +1,7 @@
+import { type WakeMomentRecording } from "../contracts/wakeMomentContract.js";
+import type { OrganizationRuntimeAgentConfig } from "./organizationRuntime.js";
+/** Receives the parser's already cloned JSON data; no I/O or caller hooks. */
+export declare function parseRecording(value: unknown): WakeMomentRecording;
+export declare function isolateRecording(agents: readonly OrganizationRuntimeAgentConfig[]): void;
+export declare function pathsOverlap(left: string, right: string): boolean;
+//# sourceMappingURL=organizationRuntimeRecording.d.ts.map

package/dist/runtime/organizationRuntimeRecording.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationRuntimeRecording.d.ts","sourceRoot":"","sources":["../../src/runtime/organizationRuntimeRecording.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC5F,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAE/E,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAgBlE;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,8BAA8B,EAAE,GAAG,IAAI,CAYxF;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEjE"}

package/dist/runtime/organizationRuntimeRecording.js

@@ -0,0 +1,58 @@
+import path from "node:path";
+import { WAKE_MOMENTS } from "../contracts/wakeMomentContract.js";
+/** Receives the parser's already cloned JSON data; no I/O or caller hooks. */
+export function parseRecording(value) {
+    const input = exact(value, ["directory", "keepMs", "snapshots"]);
+    const directory = absolute(input.directory);
+    if (typeof input.keepMs !== "number" || !Number.isSafeInteger(input.keepMs) || input.keepMs <= 0)
+        throw new TypeError("recording.keepMs must be a positive safe integer");
+    if (!Array.isArray(input.snapshots) || input.snapshots.length > WAKE_MOMENTS.maxSnapshotRoots)
+        throw new TypeError("recording.snapshots must have 0..16 roots");
+    const ids = new Set(), paths = new Set();
+    const snapshots = input.snapshots.map((value) => {
+        const root = exact(value, ["id", "path"]);
+        if (typeof root.id !== "string" || !/^[A-Za-z0-9._-]{1,128}$/.test(root.id))
+            throw new TypeError("recording snapshot id is invalid");
+        const source = absolute(root.path);
+        if (ids.has(root.id) || paths.has(source))
+            throw new TypeError("recording snapshots must have unique ids and paths");
+        if (pathsOverlap(source, directory))
+            throw new TypeError("recording snapshot and directory must not overlap");
+        ids.add(root.id);
+        paths.add(source);
+        return { id: root.id, path: source };
+    });
+    return { directory, keepMs: input.keepMs, snapshots };
+}
+export function isolateRecording(agents) {
+    for (const agent of agents) {
+        if (!agent.recording)
+            continue;
+        for (const peer of agents) {
+            for (const root of [peer.workspacePath, peer.runtimeHomePath, ...(peer.id === agent.id || !peer.recording ? [] : [peer.recording.directory])]) {
+                if (pathsOverlap(agent.recording.directory, root))
+                    throw new TypeError("recording.directory must not overlap runtime roots");
+            }
+            for (const snapshot of peer.recording?.snapshots ?? []) {
+                if (pathsOverlap(agent.recording.directory, snapshot.path))
+                    throw new TypeError("recording.directory must not overlap snapshot roots");
+            }
+        }
+    }
+}
+export function pathsOverlap(left, right) {
+    return left === right || left === "/" || right === "/" || left.startsWith(`${right}/`) || right.startsWith(`${left}/`);
+}
+function exact(value, keys) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new TypeError("recording requires objects");
+    if (Object.keys(value).length !== keys.length || keys.some((key) => !Object.hasOwn(value, key)))
+        throw new TypeError("recording has invalid fields");
+    return value;
+}
+function absolute(value) {
+    if (typeof value !== "string" || !path.posix.isAbsolute(value) || value.includes("\0") || [...value].length > 4_096 || Buffer.byteLength(value) > 16_384)
+        throw new TypeError("recording paths must be bounded absolute POSIX paths");
+    // Match workspacePath/runtimeHomePath: canonicalize before testing equality/overlap.
+    return path.posix.normalize(value).replace(/\/+$/, "") || "/";
+}

package/dist/runtime/physicalReadiness.d.ts

@@ -1,4 +1,12 @@
+import { type Stats } from "node:fs";
+import { lstat } from "node:fs/promises";
 import type { OrganizationRuntimeAgentConfig } from "./organizationRuntime.js";
+type Identity = Readonly<{
+    dev: number;
+    ino: number;
+    uid: number;
+    mode: number;
+}>;
 /**
  * `private` is every engine's runtime home: 0700, nothing but the runtime user.
  *
@@ -24,10 +32,12 @@ export type OrganizationRuntimePathAuthority = Readonly<{
         workspacePath: string;
         runtimeHomePath: string;
         verify(): Promise<void>;
+        verifyRecording?(): Promise<void>;
     }>;
     close(): Promise<void>;
 }>;
 export declare function prepareOrganizationRuntimePaths(agents: readonly OrganizationRuntimeAgentConfig[]): Promise<OrganizationRuntimePathAuthority>;
+export declare function assertNoSymlinkComponents(target: string, stat?: typeof lstat): Promise<void>;
 /** Identity of the process Daimon runs as; a seam so every refusal is testable unprivileged. */
 export type RuntimeIdentity = Readonly<{
     uid: number;
@@ -43,5 +53,7 @@ type DirectoryEntry = Readonly<{
 }>;
 /** Pure shape check for a caller-prepared runtime root. */
 export declare function assertRuntimeDirectory(entry: DirectoryEntry, label: string, shape: DirectoryShape, runtime: RuntimeIdentity): void;
+export declare function identity(entry: Stats): Identity;
+export declare function sameIdentity(left: Identity, right: Identity): boolean;
 export {};
 //# sourceMappingURL=physicalReadiness.d.ts.map

package/dist/runtime/physicalReadiness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"physicalReadiness.d.ts","sourceRoot":"","sources":["../../src/runtime/physicalReadiness.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAG/E;;;;;;;;;;;;;;GAcG;AACH,KAAK,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,oBAAoB,CAAC;AAGhE;;;GAGG;AACH,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,8BAA8B,GAAG,QAAQ,CAAC;QACxD,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;KACzB,CAAC,CAAC;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC,CAAC;AAOH,wBAAsB,+BAA+B,CACnD,MAAM,EAAE,SAAS,8BAA8B,EAAE,GAChD,OAAO,CAAC,gCAAgC,CAAC,CA8C3C;AA4CD,gGAAgG;AAChG,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC9F,KAAK,cAAc,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,IAAI,OAAO,CAAC;IAAC,cAAc,IAAI,OAAO,CAAA;CAAE,CAAC,CAAC;AAE9H,2DAA2D;AAC3D,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI,CAalI"}
+{"version":3,"file":"physicalReadiness.d.ts","sourceRoot":"","sources":["../../src/runtime/physicalReadiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAU,KAAK,EAAkB,MAAM,kBAAkB,CAAC;AAIjE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAG/E,KAAK,QAAQ,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAClF;;;;;;;;;;;;;;GAcG;AACH,KAAK,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,oBAAoB,CAAC;AAGhE;;;GAGG;AACH,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,8BAA8B,GAAG,QAAQ,CAAC;QACxD,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QACxB,eAAe,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;KACnC,CAAC,CAAC;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC,CAAC;AAOH,wBAAsB,+BAA+B,CACnD,MAAM,EAAE,SAAS,8BAA8B,EAAE,GAChD,OAAO,CAAC,gCAAgC,CAAC,CA0D3C;AAiCD,wBAAsB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,OAAO,KAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CASzG;AAgBD,gGAAgG;AAChG,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC9F,KAAK,cAAc,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,IAAI,OAAO,CAAC;IAAC,cAAc,IAAI,OAAO,CAAA;CAAE,CAAC,CAAC;AAE9H,2DAA2D;AAC3D,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI,CAalI;AAMD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,QAAQ,CAA0F;AAC1I,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAmH"}

package/dist/runtime/physicalReadiness.js

@@ -1,7 +1,8 @@
 import { constants } from "node:fs";
-import { lstat, open, realpath } from "node:fs/promises";
+import { access, lstat, open, realpath } from "node:fs/promises";
 import path from "node:path";
 import { GROK_ENGINE_BROKER } from "../contracts/runtimeContractManifest.js";
+import { pathsOverlap } from "./organizationRuntimeRecording.js";
 /** Only a brokered Grok agent's home is worker-traversable; every other engine keeps 0700. */
 function runtimeHomeShape(agent) {
     return agent.engine.kind === "grok" ? "worker-traversable" : "private";
@@ -9,12 +10,15 @@ function runtimeHomeShape(agent) {
 export async function prepareOrganizationRuntimePaths(agents) {
     const workspaces = new Map();
     const homes = new Map();
+    const recordings = new Map();
     try {
         for (const agent of agents) {
             workspaces.set(agent.id, await verifyDirectory(agent.workspacePath, "workspacePath", "safe"));
             homes.set(agent.id, await verifyDirectory(agent.runtimeHomePath, "runtimeHomePath", runtimeHomeShape(agent)));
+            if (agent.recording)
+                recordings.set(agent.id, await verifyDirectory(agent.recording.directory, "recording.directory", "private"));
         }
-        const roots = [...workspaces.values(), ...homes.values()];
+        const roots = [...workspaces.values(), ...homes.values(), ...recordings.values()];
         for (let left = 0; left < roots.length; left += 1)
             for (let right = left + 1; right < roots.length; right += 1) {
                 const first = roots[left];
@@ -23,9 +27,15 @@ export async function prepareOrganizationRuntimePaths(agents) {
                     throw new Error(`physical runtime paths overlap: ${first.configured} and ${second.configured}`);
                 }
             }
+        for (const agent of agents)
+            for (const source of agent.recording?.snapshots ?? []) {
+                const real = await readableSnapshotDirectory(source.path);
+                if (real !== undefined && [...recordings.values()].some((store) => pathsOverlap(store.real, real)))
+                    throw new Error("physical recording and snapshot paths overlap");
+            }
     }
     catch (error) {
-        const closeError = await closeAll([...workspaces.values(), ...homes.values()]);
+        const closeError = await closeAll([...workspaces.values(), ...homes.values(), ...recordings.values()]);
         if (closeError !== undefined)
             throw new AggregateError([error, closeError], "runtime path validation cleanup failed");
         throw error;
@@ -49,12 +59,20 @@ export async function prepareOrganizationRuntimePaths(agents) {
             const home = homes.get(agent.id);
             if (workspace === undefined || home === undefined)
                 throw new Error(`no runtime path authority for ${agent.id}`);
-            return { workspacePath: workspace.real, runtimeHomePath: home.real, verify: () => verify(agent) };
+            return { workspacePath: workspace.real, runtimeHomePath: home.real, verify: () => verify(agent),
+                verifyRecording: async () => {
+                    if (closed)
+                        throw new Error("runtime path authority is closed");
+                    const recording = recordings.get(agent.id);
+                    if (recording)
+                        await verifyIdentity(recording, "recording.directory", "private");
+                }
+            };
         },
         async close() {
             if (closed)
                 return;
-            const failure = await closeAll([...workspaces.values(), ...homes.values()]);
+            const failure = await closeAll([...workspaces.values(), ...homes.values(), ...recordings.values()]);
             if (failure !== undefined)
                 throw failure;
             closed = true;
@@ -93,17 +111,33 @@ async function verifyIdentity(directory, label, shape) {
     if (await realpath(directory.configured) !== directory.real)
         throw new Error(`${label} changed after readiness validation`);
 }
-async function assertNoSymlinkComponents(target) {
+export async function assertNoSymlinkComponents(target, stat = lstat) {
     const parsed = path.parse(target);
     let current = parsed.root;
     for (const part of path.relative(parsed.root, target).split(path.sep).filter(Boolean)) {
         current = path.join(current, part);
         // macOS exposes /var as a system compatibility symlink to /private/var.
         // It is an OS-root alias, not a caller-controlled component.
-        if ((await lstat(current)).isSymbolicLink() && current !== "/var")
+        if ((await stat(current)).isSymbolicLink() && current !== "/var")
             throw new Error(`path contains symlink: ${current}`);
     }
 }
+/** Shared sources have no owner/privacy requirement. Missing sources are empty captures. */
+async function readableSnapshotDirectory(target) {
+    try {
+        await assertNoSymlinkComponents(target);
+        const entry = await lstat(target);
+        if (!entry.isDirectory() || entry.isSymbolicLink())
+            throw new Error("recording snapshot must be a readable real directory");
+        await access(target, constants.R_OK | constants.X_OK);
+        return await realpath(target);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+}
 /** Pure shape check for a caller-prepared runtime root. */
 export function assertRuntimeDirectory(entry, label, shape, runtime) {
     if (!entry.isDirectory() || entry.isSymbolicLink())
@@ -127,8 +161,8 @@ export function assertRuntimeDirectory(entry, label, shape, runtime) {
 function assertDirectory(entry, label, shape) {
     assertRuntimeDirectory(entry, label, shape, { uid: process.getuid?.() ?? -1, gid: process.getgid?.() ?? -1 });
 }
-function identity(entry) { return { dev: entry.dev, ino: entry.ino, uid: entry.uid, mode: entry.mode & 0o7777 }; }
-function sameIdentity(left, right) { return left.dev === right.dev && left.ino === right.ino && left.uid === right.uid && left.mode === right.mode; }
+export function identity(entry) { return { dev: entry.dev, ino: entry.ino, uid: entry.uid, mode: entry.mode & 0o7777 }; }
+export function sameIdentity(left, right) { return left.dev === right.dev && left.ino === right.ino && left.uid === right.uid && left.mode === right.mode; }
 function overlaps(left, right) { return left === right || left.startsWith(`${right}${path.sep}`) || right.startsWith(`${left}${path.sep}`); }
 function noFollow() { return constants.O_NOFOLLOW ?? 0; }
 function directoryFlag() { return constants.O_DIRECTORY ?? 0; }

package/dist/runtime/productionAgentTools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"productionAgentTools.d.ts","sourceRoot":"","sources":["../../src/runtime/productionAgentTools.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAMtE,OAAO,KAAK,EAAE,8BAA8B,EAAgC,MAAM,0BAA0B,CAAC;AAM7G,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAe/E,wBAAsB,0BAA0B,CAAC,KAAK,EAAE,8BAA8B,EAAE,WAAW,GAAE,2BAAgC,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAUhK"}
+{"version":3,"file":"productionAgentTools.d.ts","sourceRoot":"","sources":["../../src/runtime/productionAgentTools.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAMtE,OAAO,KAAK,EAAE,8BAA8B,EAAgC,MAAM,0BAA0B,CAAC;AAO7G,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAe/E,wBAAsB,0BAA0B,CAAC,KAAK,EAAE,8BAA8B,EAAE,WAAW,GAAE,2BAAgC,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAahK"}