@noopolis/daimon 0.2.0 → 0.2.2

package/dist/pi/cliSessionMcp.js

@@ -0,0 +1,80 @@
+import { randomUUID } from "node:crypto";
+import { createServer } from "node:http";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { createPiToolMcpServer } from "../mcp/toolServer.js";
+export const startMcp = async (tools, maxToolTurns, wakeDeadline, onToolsMounted, onStarted) => {
+    onToolsMounted?.(tools);
+    const mcpServer = createPiToolMcpServer(tools, { maxToolTurns, wakeDeadline });
+    const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: () => randomUUID() });
+    const httpServer = createServer((request, response) => {
+        void transport.handleRequest(request, response);
+    });
+    let lifecycle = "starting";
+    let cancelled = false;
+    let endpoint = "";
+    let closePromise;
+    let settleStartup;
+    const startupSettled = new Promise((resolve) => { settleStartup = resolve; });
+    const close = () => closePromise ??= (async () => {
+        cancelled = true;
+        if (lifecycle !== "closed")
+            lifecycle = "closing";
+        // `listen()` begins synchronously but its callback is pending. Waiting for
+        // startup prevents dispose from returning while that callback can still bind.
+        await startupSettled;
+        await transport.close().catch(() => undefined);
+        await mcpServer.close().catch(() => undefined);
+        // `close` only stops accepting and then waits for every open connection,
+        // including the ones the transport has no record of and so cannot end (a
+        // socket opened before `initialize`, or a client pool's idle keep-alive
+        // socket, which relaying a turn through the broker MCP facade leaves
+        // behind). That wait is unbounded and sits on the wake's own completion
+        // path: measured, one such connection parked a finished broker turn with
+        // its result in hand and published nothing. By here this one wake's engine
+        // has returned, failed or been cancelled, so anything still connected is a
+        // leftover — see `AGENTS.md`, and the facade, which bounds itself the same
+        // way.
+        if (httpServer.listening)
+            await new Promise((resolve) => { httpServer.close(() => resolve()); httpServer.closeAllConnections(); });
+        lifecycle = "closed";
+    })();
+    const mount = { get endpoint() { return endpoint; }, close };
+    onStarted(mount);
+    let startupError;
+    try {
+        if (cancelled)
+            throw new Error("MCP startup was cancelled");
+        await mcpServer.connect(transport);
+        if (cancelled)
+            throw new Error("MCP startup was cancelled");
+        await new Promise((resolve, reject) => {
+            const onError = (error) => reject(error);
+            httpServer.once("error", onError);
+            httpServer.listen(0, "127.0.0.1", () => {
+                httpServer.off("error", onError);
+                // A disposer can run from a Server.prototype.listen interceptor before
+                // this callback. Never publish the server as live in that interleaving.
+                if (!cancelled)
+                    lifecycle = "listening";
+                resolve();
+            });
+        });
+        if (cancelled)
+            throw new Error("MCP startup was cancelled");
+        const address = httpServer.address();
+        if (address === null || typeof address === "string") {
+            throw new Error("MCP server did not receive an ephemeral port");
+        }
+        endpoint = `http://127.0.0.1:${address.port}/mcp`;
+        return mount;
+    }
+    catch (error) {
+        startupError = error;
+        throw error;
+    }
+    finally {
+        settleStartup();
+        if (cancelled || startupError !== undefined)
+            await close();
+    }
+};

package/dist/pi/engineTaskClock.d.ts

@@ -0,0 +1,9 @@
+/** Explicit set is scoped by the engines to shell/tool children, never provider traffic.
+ * Pin an empty allowlist so ambient include filters cannot discard the clock values.
+ * Sources/versions and the broker contract and AGY gap are recorded in docs/runtime.md.
+ */
+export declare function codexTaskClockArgs(): string[];
+export declare function grokTaskClockConfig(): string;
+/** Operational diagnostic only. Brokered Grok reports from its attested per-turn boundary. */
+export declare function reportEngineTaskClockGap(engine: "codex" | "grok" | "agy"): void;
+//# sourceMappingURL=engineTaskClock.d.ts.map

package/dist/pi/engineTaskClock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engineTaskClock.d.ts","sourceRoot":"","sources":["../../src/pi/engineTaskClock.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,EAAE,CAI7C;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAG5C;AAMD,8FAA8F;AAC9F,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,IAAI,CAK/E"}

package/dist/pi/engineTaskClock.js

@@ -0,0 +1,28 @@
+import { readTaskClock, taskClockChildEnvironment } from "../runtime/taskClock.js";
+import { shellEnvironmentPolicyEntries } from "../contracts/shellEnvironmentPolicy.js";
+/** Explicit set is scoped by the engines to shell/tool children, never provider traffic.
+ * Pin an empty allowlist so ambient include filters cannot discard the clock values.
+ * Sources/versions and the broker contract and AGY gap are recorded in docs/runtime.md.
+ */
+export function codexTaskClockArgs() {
+    const env = taskClockChildEnvironment();
+    if (Object.keys(env).length === 0)
+        return [];
+    return ["-c", `shell_environment_policy=${shellPolicy(env)}`];
+}
+export function grokTaskClockConfig() {
+    const env = taskClockChildEnvironment();
+    return Object.keys(env).length === 0 ? "" : `shell_environment_policy = ${shellPolicy(env)}\n`;
+}
+function shellPolicy(env) {
+    return `{${shellEnvironmentPolicyEntries(env).join(",")}}`;
+}
+/** Operational diagnostic only. Brokered Grok reports from its attested per-turn boundary. */
+export function reportEngineTaskClockGap(engine) {
+    if (readTaskClock() === undefined)
+        return;
+    const gap = engine === "agy" ? "no supported tool-only environment setting"
+        : undefined; // Brokered Grok reports after config attestation, from its per-turn processClock field.
+    if (gap)
+        console.warn(`daimon: task clock coverage gap engine=${engine}: ${gap}; native tools remain on real time; wake allowed`);
+}

package/dist/pi/grokHomeMcpRegistration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grokHomeMcpRegistration.d.ts","sourceRoot":"","sources":["../../src/pi/grokHomeMcpRegistration.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE;;;;;;;;;;;;;GAaG;AACH,wBAAsB,yBAAyB,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAE,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAepL"}
+{"version":3,"file":"grokHomeMcpRegistration.d.ts","sourceRoot":"","sources":["../../src/pi/grokHomeMcpRegistration.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAGlE;;;;;;;;;;;;;GAaG;AACH,wBAAsB,yBAAyB,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAE,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAepL"}

package/dist/pi/grokHomeMcpRegistration.js

@@ -3,6 +3,7 @@ import { constants } from "node:fs";
 import { lstat, mkdir, open, rename, unlink } from "node:fs/promises";
 import path from "node:path";
 import { renderGrokLeanBaseConfig } from "../runtime/grokBrokerWorkerConfig.js";
+import { grokTaskClockConfig } from "./engineTaskClock.js";
 /**
  * Per-wake MCP registration for the direct (non-broker) Grok CLI path.
  *
@@ -25,7 +26,7 @@ export async function registerGrokHomeMcpServer(input) {
     if (!/^http:\/\/127\.0\.0\.1:\d{1,5}\/[A-Za-z0-9/_-]*$/u.test(input.endpoint))
         throw new Error("Grok MCP endpoint must be a loopback http URL");
     await input.verify?.();
-    await writeConfig(home, `${renderGrokLeanBaseConfig()}[mcp_servers.daimon]\nurl = ${JSON.stringify(input.endpoint)}\n`);
+    await writeConfig(home, `${grokTaskClockConfig()}${renderGrokLeanBaseConfig()}[mcp_servers.daimon]\nurl = ${JSON.stringify(input.endpoint)}\n`);
     let closePromise;
     return {
         close: () => closePromise ??= (async () => {

package/dist/pi/grokSandbox.js

@@ -1,5 +1,5 @@
 import { randomUUID } from "node:crypto";
-import { spawn } from "node:child_process";
+import { spawnRealTime as spawn } from "../runtime/taskClockProcess.js";
 import { constants } from "node:fs";
 import { lstat, mkdir, open, realpath, rename, unlink } from "node:fs/promises";
 import path from "node:path";

package/dist/pi/memoryClock.d.ts

@@ -0,0 +1,25 @@
+import * as mneme from "@noopolis/mneme";
+import { type TaskClock } from "../runtime/taskClock.js";
+type MnemeClockModule = {
+    readonly createOffsetClock?: unknown;
+};
+type MemoryConfig = Parameters<typeof mneme.createMemoryRuntime>[0];
+type MemoryModule = MnemeClockModule & {
+    createMemoryRuntime(config: MemoryConfig & {
+        clock?: () => number;
+    }): ReturnType<typeof mneme.createMemoryRuntime>;
+};
+/** Keep construction and capability detection together while the published types catch up. */
+export declare function createClockedMemoryRuntime(config: MemoryConfig, clock?: Readonly<{
+    raw: string;
+    origin: string;
+    anchorEpochMs: number;
+    at(realEpochMs: number): number;
+    now(): number;
+}> | undefined, moduleRoot?: MemoryModule): mneme.MemoryRuntime;
+/** The root export is Mneme's capability signal, including across older published versions. */
+export declare function memoryClockOptions(clock?: TaskClock | undefined, moduleRoot?: MnemeClockModule): {
+    clock?: () => number;
+};
+export {};
+//# sourceMappingURL=memoryClock.d.ts.map

package/dist/pi/memoryClock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memoryClock.d.ts","sourceRoot":"","sources":["../../src/pi/memoryClock.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAExE,KAAK,gBAAgB,GAAG;IAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAEjE,KAAK,YAAY,GAAG,UAAU,CAAC,OAAO,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;AACpE,KAAK,YAAY,GAAG,gBAAgB,GAAG;IAAE,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;KAAE,GAAG,UAAU,CAAC,OAAO,KAAK,CAAC,mBAAmB,CAAC,CAAA;CAAE,CAAC;AAE9J,8FAA8F;AAC9F,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK;;;;;;cAAkB,EAAE,UAAU,GAAE,YAAoB,uBAEzH;AAED,+FAA+F;AAC/F,wBAAgB,kBAAkB,CAChC,KAAK,GAAE,SAAS,GAAG,SAA2B,EAC9C,UAAU,GAAE,gBAA4C,GACvD;IAAE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;CAAE,CAQ1B"}

package/dist/pi/memoryClock.js

@@ -0,0 +1,18 @@
+import * as mneme from "@noopolis/mneme";
+import { readTaskClock } from "../runtime/taskClock.js";
+/** Keep construction and capability detection together while the published types catch up. */
+export function createClockedMemoryRuntime(config, clock = readTaskClock(), moduleRoot = mneme) {
+    return moduleRoot.createMemoryRuntime({ ...config, ...memoryClockOptions(clock, moduleRoot) });
+}
+/** The root export is Mneme's capability signal, including across older published versions. */
+export function memoryClockOptions(clock = readTaskClock(), moduleRoot = mneme) {
+    if (clock === undefined)
+        return {};
+    if (typeof moduleRoot.createOffsetClock !== "function") {
+        throw new Error("NOOPOLIS_TASK_CLOCK requires @noopolis/mneme with the root createOffsetClock export and createMemoryRuntime({ clock }) support");
+    }
+    const memoryClock = moduleRoot.createOffsetClock({ origin: clock.origin, anchorMs: clock.anchorEpochMs });
+    if (typeof memoryClock !== "function")
+        throw new Error("@noopolis/mneme createOffsetClock must return an epoch-ms clock function");
+    return { clock: memoryClock };
+}

package/dist/pi/piAgentHandle.d.ts

@@ -6,7 +6,7 @@ import { persistPiTurnTrace, type PiTurnTraceModel } from "./turnTrace.js";
 import { type PiRawTrainingCaptureOptions, type PiRawTrainingCaptureRef } from "./rawTrainingCapture.js";
 import { type PiWorldToolContextRef } from "./worldNudge.js";
 import { type PiWorldTrajectoryIdentity } from "./worldTrajectory.js";
-import { type PiNativeSessionCreator, type PiSession, type PiSessionCreator, type PiSessionLike, type PiWakeEnvironmentContextRef } from "./piAgentWakeSupport.js";
+import type { PiNativeSessionCreator, PiSession, PiSessionCreator, PiSessionLike, PiWakeEnvironmentContextRef } from "./piAgentWakeSupport.js";
 import { type MemoryRuntime } from "@noopolis/mneme";
 export type { PiSession, PiSessionLike, PiSessionCreator, PiNativeSessionCreator } from "./piAgentWakeSupport.js";
 export type WakeAcceptanceInput = {
@@ -14,6 +14,7 @@ export type WakeAcceptanceInput = {
     completeTurn?: typeof stampTurnOutputCompleted;
     traceTurn?: typeof persistPiTurnTrace;
     createWakeAcceptance?: (runtimeHomePath: string, agentId: string) => WakeAcceptanceStoreLike;
+    causalRunId?: string;
 };
 export declare class PiAgentHandle implements AgentHandle {
     readonly id: string;
@@ -36,6 +37,7 @@ export declare class PiAgentHandle implements AgentHandle {
     private readonly stampTurnInputSubmitted;
     private readonly stampTurnOutputCompleted;
     private readonly persistTrace;
+    private readonly causalRunId?;
     constructor(id: string, session: PiSession, createSession: PiNativeSessionCreator, runtimeHomePath: string, traceModel: PiTurnTraceModel, memory?: MemoryRuntime, memoryToolContext?: PiMemoryToolContextRef, dependencies?: WakeAcceptanceInput, worldToolContext?: PiWorldToolContextRef, rawTrainingCaptureRef?: PiRawTrainingCaptureRef, rawTrainingCaptureOptions?: PiRawTrainingCaptureOptions, worldTrajectoryIdentity?: PiWorldTrajectoryIdentity, rawTrainingCaptureSession?: PiSession, wakeEnvironmentContext?: PiWakeEnvironmentContextRef);
     constructor(id: string, session: PiSessionLike, createSession: PiSessionCreator, runtimeHomePath: string, traceModel: PiTurnTraceModel, memory?: MemoryRuntime, memoryToolContext?: PiMemoryToolContextRef, dependencies?: WakeAcceptanceInput, worldToolContext?: PiWorldToolContextRef, rawTrainingCaptureRef?: never, rawTrainingCaptureOptions?: never, worldTrajectoryIdentity?: PiWorldTrajectoryIdentity, rawTrainingCaptureSession?: never, wakeEnvironmentContext?: PiWakeEnvironmentContextRef);
     wake(event: WakeEvent): Promise<WakeResult>;

package/dist/pi/piAgentHandle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"piAgentHandle.d.ts","sourceRoot":"","sources":["../../src/pi/piAgentHandle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAoC,KAAK,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAEjG,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EAGzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAkC,KAAK,gBAAgB,EAA6B,MAAM,gBAAgB,CAAC;AAEtI,OAAO,EAAyD,KAAK,2BAA2B,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAChK,OAAO,EAA2C,KAAK,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACtG,OAAO,EAAkC,KAAK,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACtG,OAAO,EAOL,KAAK,sBAAsB,EAC3B,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,2BAA2B,EAEjC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAmD,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACtG,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAClH,MAAM,MAAM,mBAAmB,GAAG;IAAE,OAAO,CAAC,EAAE,OAAO,uBAAuB,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,wBAAwB,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,kBAAkB,CAAC;IAAC,oBAAoB,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,uBAAuB,CAAC;CAAE,CAAC;AACrQ,qBAAa,aAAc,YAAW,WAAW;IAyC7C,QAAQ,CAAC,EAAE,EAAE,MAAM;IACnB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAEnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAClC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACvC,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAC3C,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACzC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACxC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IArD1C,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAsB;IACxD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAiC;IACzE,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAkC;IAC3E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA4B;gBAEvD,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,SAAS,EAClB,aAAa,EAAE,sBAAsB,EACrC,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,gBAAgB,EAC5B,MAAM,CAAC,EAAE,aAAa,EACtB,iBAAiB,CAAC,EAAE,sBAAsB,EAC1C,YAAY,CAAC,EAAE,mBAAmB,EAClC,gBAAgB,CAAC,EAAE,qBAAqB,EACxC,qBAAqB,CAAC,EAAE,uBAAuB,EAC/C,yBAAyB,CAAC,EAAE,2BAA2B,EACvD,uBAAuB,CAAC,EAAE,yBAAyB,EACnD,yBAAyB,CAAC,EAAE,SAAS,EACrC,sBAAsB,CAAC,EAAE,2BAA2B;gBAGpD,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,aAAa,EACtB,aAAa,EAAE,gBAAgB,EAC/B,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,gBAAgB,EAC5B,MAAM,CAAC,EAAE,aAAa,EACtB,iBAAiB,CAAC,EAAE,sBAAsB,EAC1C,YAAY,CAAC,EAAE,mBAAmB,EAClC,gBAAgB,CAAC,EAAE,qBAAqB,EACxC,qBAAqB,CAAC,EAAE,KAAK,EAC7B,yBAAyB,CAAC,EAAE,KAAK,EACjC,uBAAuB,CAAC,EAAE,yBAAyB,EACnD,yBAAyB,CAAC,EAAE,KAAK,EACjC,sBAAsB,CAAC,EAAE,2BAA2B;IA0BhD,IAAI,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;YAOnC,OAAO;IA+RrB,MAAM,IAAI,WAAW;IAQf,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAM5B"}
+{"version":3,"file":"piAgentHandle.d.ts","sourceRoot":"","sources":["../../src/pi/piAgentHandle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAoC,KAAK,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAEjG,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EAGzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAkC,KAAK,gBAAgB,EAA6B,MAAM,gBAAgB,CAAC;AAEtI,OAAO,EAAyD,KAAK,2BAA2B,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAChK,OAAO,EAA2C,KAAK,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACtG,OAAO,EAAkC,KAAK,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEtG,OAAO,KAAK,EAAE,sBAAsB,EAAE,SAAS,EAAE,gBAAgB,EAAE,aAAa,EAAE,2BAA2B,EAAwB,MAAM,yBAAyB,CAAC;AACrK,OAAO,EAAmD,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACtG,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAClH,MAAM,MAAM,mBAAmB,GAAG;IAAE,OAAO,CAAC,EAAE,OAAO,uBAAuB,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,wBAAwB,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,kBAAkB,CAAC;IAAC,oBAAoB,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,uBAAuB,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAAE,CAAC;AAC3R,qBAAa,aAAc,YAAW,WAAW;IA0C7C,QAAQ,CAAC,EAAE,EAAE,MAAM;IACnB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAEnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAClC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACvC,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAC3C,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACzC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACxC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAtD1C,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAsB;IACxD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAiC;IACzE,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAkC;IAC3E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA4B;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAS;gBAEpC,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,SAAS,EAClB,aAAa,EAAE,sBAAsB,EACrC,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,gBAAgB,EAC5B,MAAM,CAAC,EAAE,aAAa,EACtB,iBAAiB,CAAC,EAAE,sBAAsB,EAC1C,YAAY,CAAC,EAAE,mBAAmB,EAClC,gBAAgB,CAAC,EAAE,qBAAqB,EACxC,qBAAqB,CAAC,EAAE,uBAAuB,EAC/C,yBAAyB,CAAC,EAAE,2BAA2B,EACvD,uBAAuB,CAAC,EAAE,yBAAyB,EACnD,yBAAyB,CAAC,EAAE,SAAS,EACrC,sBAAsB,CAAC,EAAE,2BAA2B;gBAGpD,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,aAAa,EACtB,aAAa,EAAE,gBAAgB,EAC/B,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,gBAAgB,EAC5B,MAAM,CAAC,EAAE,aAAa,EACtB,iBAAiB,CAAC,EAAE,sBAAsB,EAC1C,YAAY,CAAC,EAAE,mBAAmB,EAClC,gBAAgB,CAAC,EAAE,qBAAqB,EACxC,qBAAqB,CAAC,EAAE,KAAK,EAC7B,yBAAyB,CAAC,EAAE,KAAK,EACjC,uBAAuB,CAAC,EAAE,yBAAyB,EACnD,yBAAyB,CAAC,EAAE,KAAK,EACjC,sBAAsB,CAAC,EAAE,2BAA2B;IAyBhD,IAAI,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;YAInC,OAAO;IAiSrB,MAAM,IAAI,WAAW;IAQf,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAM5B"}

package/dist/pi/piAgentHandle.js

@@ -30,6 +30,7 @@ export class PiAgentHandle {
     stampTurnInputSubmitted;
     stampTurnOutputCompleted;
     persistTrace;
+    causalRunId;
     constructor(id, session, createSession, runtimeHomePath, traceModel, memory, memoryToolContext, dependencies = {}, worldToolContext, rawTrainingCaptureRef, rawTrainingCaptureOptions, worldTrajectoryIdentity, piSessionForRawCapture, wakeEnvironmentContext) {
         this.id = id;
         this.session = session;
@@ -47,8 +48,8 @@ export class PiAgentHandle {
         this.stampTurnInputSubmitted = dependencies.runWake ?? stampTurnInputSubmitted;
         this.stampTurnOutputCompleted = dependencies.completeTurn ?? stampTurnOutputCompleted;
         this.persistTrace = dependencies.traceTurn ?? persistPiTurnTrace;
-        const wakeAcceptance = dependencies.createWakeAcceptance?.(runtimeHomePath, id) ??
-            new WakeAcceptanceStore(runtimeHomePath, id);
+        this.causalRunId = dependencies.causalRunId;
+        const wakeAcceptance = dependencies.createWakeAcceptance?.(runtimeHomePath, id) ?? new WakeAcceptanceStore(runtimeHomePath, id, undefined, this.causalRunId);
         this.wakeDeliveryQueue = new PiWakeDeliveryQueue(id, wakeAcceptance);
     }
     async wake(event) {
@@ -163,6 +164,7 @@ export class PiAgentHandle {
             }
             stage = "causal_input";
             const turnInput = await this.stampTurnInputSubmitted({
+                runId: this.causalRunId,
                 agentId: this.id,
                 event,
                 prepared,
@@ -182,6 +184,7 @@ export class PiAgentHandle {
             const outputText = chunks.join("\n").trim();
             stage = "causal_output";
             await this.stampTurnOutputCompleted({
+                runId: this.causalRunId,
                 agentId: this.id,
                 causeEventId: turnInput.event_id,
                 outputText,

package/dist/pi/piHarness.d.ts

@@ -1,9 +1,10 @@
 import { createAgentSession, type ToolDefinition } from "@earendil-works/pi-coding-agent";
-import { type MemoryAuthorityConfig } from "@noopolis/mneme";
+import type { MemoryAuthorityConfig } from "@noopolis/mneme";
 import type { AgentHandle, AgentHarnessAdapter, AgentStartInput, HarnessModelSpec } from "../core/types.js";
 import { type PiSessionLike } from "./piAgentHandle.js";
 import { type PiWakeEnvironmentContextRef } from "./piAgentWakeSupport.js";
 import { type PiWorldBinding } from "./worldTools.js";
+import { type TaskClockProcessProbe } from "./taskClockProcess.js";
 import { type PiRawTrainingCaptureOptions } from "./rawTrainingCapture.js";
 type HarnessMemoryEmbeddingProvider = {
     dimensions?: number;
@@ -52,10 +53,15 @@ export type PiSessionFactory = (input: PiSessionFactoryInput) => Promise<{
 }>;
 export declare class PiHarnessAdapter implements AgentHarnessAdapter {
     private readonly options;
+    private readonly taskClockProbe?;
+    static readonly capabilities: Readonly<{
+        causalRunId: true;
+        memoryCausalRunId: false;
+    }>;
     private readonly authStorage;
     private readonly modelRegistry;
     private readonly sessionFactory;
-    constructor(options: PiHarnessOptions);
+    constructor(options: PiHarnessOptions, /** @internal */ taskClockProbe?: TaskClockProcessProbe | undefined);
     startAgent(input: AgentStartInput): Promise<AgentHandle>;
 }
 export {};

package/dist/pi/piHarness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"piHarness.d.ts","sourceRoot":"","sources":["../../src/pi/piHarness.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,kBAAkB,EAIlB,KAAK,cAAc,EACpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAuB,KAAK,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAElF,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAM5G,OAAO,EAAqE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC3H,OAAO,EAAE,KAAK,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAE3E,OAAO,EAAwC,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAG5F,OAAO,EAGL,KAAK,2BAA2B,EAEjC,MAAM,yBAAyB,CAAC;AAEjC,KAAK,8BAA8B,GAAG;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,WAAW,CACvC,WAAW,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CACvE,CAAC;AAEF,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAChC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACxC,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,MAAM,CAAC,EAAE;QACP,SAAS,CAAC,EAAE,qBAAqB,CAAC;QAClC,iBAAiB,CAAC,EAAE,8BAA8B,CAAC;QACnD,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,yFAAyF;IACzF,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,sBAAsB,CAAC,EAAE,2BAA2B,CAAC;CACtD,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,CAClD;IACA,kBAAkB,CAAC,EAAE,2BAA2B,CAAC;IACjD,cAAc,CAAC,EAAE,KAAK,CAAC;CACxB,GACC;IACA,kBAAkB,CAAC,EAAE,KAAK,CAAC;IAC3B,cAAc,EAAE,gBAAgB,CAAC;CAClC,CACF,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG;IACjG,4BAA4B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,qBAAqB,KAAK,OAAO,CAAC;IAAE,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC,CAAC;AAErG,qBAAa,gBAAiB,YAAW,mBAAmB;IAK9C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAmB;gBAErB,OAAO,EAAE,gBAAgB;IAMhD,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC;CAmK/D"}
+{"version":3,"file":"piHarness.d.ts","sourceRoot":"","sources":["../../src/pi/piHarness.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,kBAAkB,EAIlB,KAAK,cAAc,EACpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAuB,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAElF,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAO5G,OAAO,EAAqE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC3H,OAAO,EAAE,KAAK,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAE3E,OAAO,EAAwC,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAM5F,OAAO,EAA0B,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAGL,KAAK,2BAA2B,EAEjC,MAAM,yBAAyB,CAAC;AAEjC,KAAK,8BAA8B,GAAG;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,WAAW,CACvC,WAAW,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CACvE,CAAC;AAEF,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAChC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACxC,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,MAAM,CAAC,EAAE;QACP,SAAS,CAAC,EAAE,qBAAqB,CAAC;QAClC,iBAAiB,CAAC,EAAE,8BAA8B,CAAC;QACnD,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,yFAAyF;IACzF,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,sBAAsB,CAAC,EAAE,2BAA2B,CAAC;CACtD,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,CAClD;IACA,kBAAkB,CAAC,EAAE,2BAA2B,CAAC;IACjD,cAAc,CAAC,EAAE,KAAK,CAAC;CACxB,GACC;IACA,kBAAkB,CAAC,EAAE,KAAK,CAAC;IAC3B,cAAc,EAAE,gBAAgB,CAAC;CAClC,CACF,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG;IACjG,4BAA4B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,qBAAqB,KAAK,OAAO,CAAC;IAAE,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC,CAAC;AAErG,qBAAa,gBAAiB,YAAW,mBAAmB;IAM9C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAqC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IALzG,MAAM,CAAC,QAAQ,CAAC,YAAY;;;OAAkE;IAC9F,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAmB;gBAErB,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,CAAkB,cAAc,CAAC,EAAE,qBAAqB,YAAA;IAM1H,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC;CA0K/D"}

package/dist/pi/piHarness.js

@@ -1,7 +1,7 @@
 import { mkdir } from "node:fs/promises";
 import path from "node:path";
 import { AuthStorage, createBashTool, createAgentSession, SessionManager, SettingsManager } from "@earendil-works/pi-coding-agent";
-import { createMemoryRuntime } from "@noopolis/mneme";
+import { resolveRunId } from "../observability/causalEvents.js";
 import { resolvePiHarnessModel } from "./modelConfig.js";
 import { createPiModelRegistry } from "./modelRegistry.js";
 import { createPiMemoryTools, piMemoryToolNames } from "./memoryTools.js";
@@ -10,20 +10,35 @@ import { PiAgentHandle } from "./piAgentHandle.js";
 import { DAIMON_WAKE_ID_ENV } from "./cliEnvironment.js";
 import { createPiWorldTools, piWorldToolNames } from "./worldTools.js";
 import { ensureRuntimeHome, ensureRuntimeHomeDirectory } from "../runtime/runtimeHomeLayout.js";
+import { readyTaskClockEnvironment } from "../runtime/taskClockProcess.js";
+import { readTaskClock, taskClockChildEnvironment, taskClockProcessEnvironment } from "../runtime/taskClock.js";
+import { createClockedMemoryRuntime, memoryClockOptions } from "./memoryClock.js";
+import { verifyTaskClockProcess } from "./taskClockProcess.js";
 import { bindPiRawTrainingCapture, validatePiRawTrainingCaptureOptions } from "./rawTrainingCapture.js";
 export class PiHarnessAdapter {
     options;
+    taskClockProbe;
+    static capabilities = Object.freeze({ causalRunId: true, memoryCausalRunId: false });
     authStorage;
     modelRegistry;
     sessionFactory;
-    constructor(options) {
+    constructor(options, /** @internal */ taskClockProbe) {
         this.options = options;
+        this.taskClockProbe = taskClockProbe;
         this.authStorage = AuthStorage.create(options.authPath);
         this.modelRegistry = createPiModelRegistry(this.authStorage, options);
         this.sessionFactory = options.sessionFactory ?? createAgentSession;
     }
     async startAgent(input) {
+        const taskClock = readTaskClock();
+        if (this.options.memory !== undefined)
+            memoryClockOptions(taskClock);
+        if (input.causalRunId !== undefined && this.options.memory !== undefined) {
+            throw new Error("Per-agent causalRunId requires a memory runtime with explicit causal context; configured memory is currently unsupported");
+        }
+        const causalRunId = input.causalRunId === undefined ? undefined : resolveRunId(undefined, input.causalRunId);
         validatePiRawTrainingCaptureOptions(this.options.rawTrainingCapture);
+        await verifyTaskClockProcess(input.runtimeHomePath, taskClock, this.taskClockProbe);
         await ensureRuntimeHome(input.runtimeHomePath);
         await Promise.all([".config", ".local/share", ".local/state", ".cache", ".tmp", "tool-state"]
             .map((relative) => ensureRuntimeHomeDirectory(input.runtimeHomePath, relative)));
@@ -42,14 +57,14 @@ export class PiHarnessAdapter {
         }
         const memory = this.options.memory === undefined
             ? undefined
-            : createMemoryRuntime({
+            : createClockedMemoryRuntime({
                 agentId: input.id,
                 authority: this.options.memory.authority,
                 embeddingProvider: this.options.memory.embeddingProvider,
                 runtimeHomePath: memoryRuntimeHomePath,
                 source: this.options.memory.source,
                 tokenBudget: this.options.memory.tokenBudget
-            });
+            }, taskClock);
         const memoryToolContext = memory === undefined ? undefined : {};
         const worldToolContext = this.options.world === undefined ? undefined : {};
         const rawTrainingCaptureRef = this.options.rawTrainingCapture === undefined ? undefined : {};
@@ -80,9 +95,9 @@ export class PiHarnessAdapter {
                     ...(this.options.world === undefined ? [] : [this.options.world.tokenEnv])
                 ])];
             const requestedTools = this.options.toolNames ?? input.tools;
-            const protectedBash = protectedNames.length === 0 || requestedTools?.includes("bash") === false
+            const protectedBash = (protectedNames.length === 0 && taskClock === undefined) || requestedTools?.includes("bash") === false
                 ? []
-                : [createProtectedBashTool(input.workspacePath, input.runtimeHomePath, protectedNames, wakeEnvironmentContext)];
+                : [createProtectedBashTool(input.workspacePath, input.runtimeHomePath, protectedNames, wakeEnvironmentContext, taskClockChildEnvironment({}, taskClock))];
             const toolNames = [
                 ...(requestedTools ?? ["read", "write", "edit", "bash", "grep", "find", "ls"]),
                 ...piMemoryToolNames(memoryTools),
@@ -126,7 +141,7 @@ export class PiHarnessAdapter {
                 authMethod: modelSpec.auth?.method ?? "none",
                 model: resolvedModel.name,
                 provider: resolvedModel.provider
-            }, memory, memoryToolContext, {}, worldToolContext, rawTrainingCaptureRef, this.options.rawTrainingCapture, worldToolContext === undefined
+            }, memory, memoryToolContext, { causalRunId }, worldToolContext, rawTrainingCaptureRef, this.options.rawTrainingCapture, worldToolContext === undefined
                 ? undefined
                 : { instructions: input.instructions, thinkingLevel: this.options.thinkingLevel ?? "off" }, session, wakeEnvironmentContext);
         }
@@ -139,7 +154,7 @@ export class PiHarnessAdapter {
             authMethod: modelSpec.auth?.method ?? "none",
             model: resolvedModel.name,
             provider: resolvedModel.provider
-        }, memory, memoryToolContext, {}, worldToolContext, undefined, undefined, worldToolContext === undefined
+        }, memory, memoryToolContext, { causalRunId }, worldToolContext, undefined, undefined, worldToolContext === undefined
             ? undefined
             : {
                 instructions: input.instructions,
@@ -147,22 +162,23 @@ export class PiHarnessAdapter {
             }, undefined, wakeEnvironmentContext);
     }
 }
-function createProtectedBashTool(workspacePath, runtimeHomePath, protectedNames, wakeEnvironmentContext) {
+function createProtectedBashTool(workspacePath, runtimeHomePath, protectedNames, wakeEnvironmentContext, clockEnvironment) {
     const bash = createBashTool(workspacePath, {
         spawnHook: (context) => ({
             ...context,
-            env: {
-                ...Object.fromEntries(Object.entries(context.env).filter(([name]) => !protectedNames.includes(name))),
+            env: readyTaskClockEnvironment({
+                ...Object.fromEntries(Object.entries(taskClockProcessEnvironment(context.env, clockEnvironment)).filter(([name]) => !protectedNames.includes(name))),
                 HOME: runtimeHomePath,
                 XDG_CONFIG_HOME: `${runtimeHomePath}/.config`,
                 XDG_DATA_HOME: `${runtimeHomePath}/.local/share`,
                 XDG_STATE_HOME: `${runtimeHomePath}/.local/state`,
                 XDG_CACHE_HOME: `${runtimeHomePath}/.cache`,
                 TMPDIR: `${runtimeHomePath}/.tmp`,
+                ...clockEnvironment,
                 ...(wakeEnvironmentContext.current === undefined
                     ? {}
                     : { [DAIMON_WAKE_ID_ENV]: wakeEnvironmentContext.current })
-            }
+            })
         })
     });
     return {

package/dist/pi/taskClockProcess.d.ts

@@ -0,0 +1,6 @@
+import { type TaskClock } from "../runtime/taskClock.js";
+import { type TaskClockProcessProbe } from "../runtime/taskClockProcess.js";
+export type { TaskClockProcessProbe } from "../runtime/taskClockProcess.js";
+/** Eager Pi readiness uses the same gate as every later child launch. */
+export declare function verifyTaskClockProcess(runtimeHomePath: string, clock?: TaskClock | undefined, probe?: TaskClockProcessProbe): Promise<void>;
+//# sourceMappingURL=taskClockProcess.d.ts.map

package/dist/pi/taskClockProcess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"taskClockProcess.d.ts","sourceRoot":"","sources":["../../src/pi/taskClockProcess.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAA6B,KAAK,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEvG,YAAY,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAE5E,yEAAyE;AACzE,wBAAsB,sBAAsB,CAC1C,eAAe,EAAE,MAAM,EAAE,KAAK,GAAE,SAAS,GAAG,SAA2B,EAAE,KAAK,CAAC,EAAE,qBAAqB,GACrG,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/dist/pi/taskClockProcess.js

@@ -0,0 +1,8 @@
+import { cliChildEnvironment } from "./cliEnvironment.js";
+import { readTaskClock } from "../runtime/taskClock.js";
+import { readyTaskClockEnvironment } from "../runtime/taskClockProcess.js";
+/** Eager Pi readiness uses the same gate as every later child launch. */
+export async function verifyTaskClockProcess(runtimeHomePath, clock = readTaskClock(), probe) {
+    if (clock !== undefined)
+        readyTaskClockEnvironment(cliChildEnvironment([], runtimeHomePath), clock, probe);
+}

package/dist/pi/turnCausal.d.ts

@@ -15,6 +15,7 @@ export interface StampTurnInputSubmittedInput {
     prepared?: MemoryPrepareTurnResult;
     promptText: string;
     runtimeHomePath: string;
+    runId?: string;
 }
 /**
  * Stamps `turn.input.submitted` for one Pi turn, wiring piHarness's own
@@ -51,8 +52,8 @@ export interface StampTurnInputSubmittedInput {
  *   the actual `event_id`s of the `memory.recalled` events it appended for
  *   this turn, so this cause link is id-joined the same way the moltnet
  *   link above is.
- * - `run_id` always comes from `resolveRunId()` (`NOOPOLIS_RUN_ID`), never
- *   from `event` or model output.
+ * - `run_id` comes from trusted per-instance host context, with the historical
+ *   environment fallback. Never from `event` or model output.
  */
 export declare const stampTurnInputSubmitted: (input: StampTurnInputSubmittedInput) => Promise<CausalEvent<TurnInputSubmittedPayload>>;
 export interface StampTurnOutputCompletedInput {
@@ -61,6 +62,7 @@ export interface StampTurnOutputCompletedInput {
     outputText: string;
     runtimeHomePath: string;
     turnId: string;
+    runId?: string;
 }
 /**
  * Stamps `turn.output.completed` once a Pi turn finishes successfully,

package/dist/pi/turnCausal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"turnCausal.d.ts","sourceRoot":"","sources":["../../src/pi/turnCausal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAKL,KAAK,WAAW,EAChB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAChC,MAAM,kCAAkC,CAAC;AAG1C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAAI,SAAS,MAAM,KAAG,MAA4B,CAAC;AAEhF,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,eAAO,MAAM,uBAAuB,GAClC,OAAO,4BAA4B,KAClC,OAAO,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAW7C,CAAC;AAEL,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,GACnC,OAAO,6BAA6B,KACnC,OAAO,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAS9C,CAAC"}
+{"version":3,"file":"turnCausal.d.ts","sourceRoot":"","sources":["../../src/pi/turnCausal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAKL,KAAK,WAAW,EAChB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAChC,MAAM,kCAAkC,CAAC;AAG1C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAAI,SAAS,MAAM,KAAG,MAA4B,CAAC;AAEhF,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,eAAO,MAAM,uBAAuB,GAClC,OAAO,4BAA4B,KAClC,OAAO,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAW7C,CAAC;AAEL,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,GACnC,OAAO,6BAA6B,KACnC,OAAO,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAS9C,CAAC"}

package/dist/pi/turnCausal.js

@@ -43,8 +43,8 @@ export const agentPrincipalId = (agentId) => `agent:${agentId}`;
  *   the actual `event_id`s of the `memory.recalled` events it appended for
  *   this turn, so this cause link is id-joined the same way the moltnet
  *   link above is.
- * - `run_id` always comes from `resolveRunId()` (`NOOPOLIS_RUN_ID`), never
- *   from `event` or model output.
+ * - `run_id` comes from trusted per-instance host context, with the historical
+ *   environment fallback. Never from `event` or model output.
  */
 export const stampTurnInputSubmitted = (input) => emitTurnInputSubmitted({
     agentId: input.agentId,
@@ -53,7 +53,7 @@ export const stampTurnInputSubmitted = (input) => emitTurnInputSubmitted({
     inputMessageIds: [input.event.id],
     principalId: agentPrincipalId(input.agentId),
     promptSha256: summarizePrompt(input.promptText).sha256,
-    runId: resolveRunId(),
+    runId: resolveRunId(undefined, input.runId),
     runtimeHomePath: input.runtimeHomePath,
     turnId: input.event.id
 });
@@ -69,7 +69,7 @@ export const stampTurnOutputCompleted = (input) => emitTurnOutputCompleted({
     causeEventIds: [input.causeEventId],
     outputSha256: sha256Hex(input.outputText),
     principalId: agentPrincipalId(input.agentId),
-    runId: resolveRunId(),
+    runId: resolveRunId(undefined, input.runId),
     runtimeHomePath: input.runtimeHomePath,
     turnId: input.turnId
 });

package/dist/pi/wakeAcceptance.d.ts

@@ -24,7 +24,7 @@ export declare class WakeAcceptanceStore {
     private readonly fs;
     readonly runId: string;
     private readonly capabilities;
-    constructor(runtimeHomePath: string, agentId: string, fs?: WakeAcceptanceFs);
+    constructor(runtimeHomePath: string, agentId: string, fs?: WakeAcceptanceFs, causalRunId?: string);
     getAcceptanceFilePath(): string;
     candidateFromDelivery(event: WakeEvent): WakeAcceptanceAttempt;
     candidateFromEvent(event: WakeEvent): WakeAcceptanceAttempt;

package/dist/pi/wakeAcceptance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wakeAcceptance.d.ts","sourceRoot":"","sources":["../../src/pi/wakeAcceptance.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAEL,KAAK,qBAAqB,EAG1B,KAAK,wBAAwB,EAQ9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAMzD,MAAM,MAAM,uBAAuB,GAC/B;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAE1D,QAAA,MAAM,gBAAgB,eAAuC,CAAC;AAE9D,MAAM,WAAW,wBAAwB;IACvC,CAAC,gBAAgB,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;CAC7C;AAWD,MAAM,WAAW,uBAAuB;IACtC,qBAAqB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB,CAAC;IAC/D,KAAK,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC1D,YAAY,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtF,aAAa,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,cAAc,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,qBAAa,mBAAmB;IAK5B,QAAQ,CAAC,eAAe,EAAE,MAAM;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE;IANrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyD;gBAG3E,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EACP,EAAE,GAAE,gBAAwD;IAK/E,qBAAqB,IAAI,MAAM;IAI/B,qBAAqB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB;IAQ9D,kBAAkB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB;IAIrD,KAAK,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,uBAAuB,CAAC;YAKjD,gBAAgB;IAoDxB,YAAY,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAsBrF,aAAa,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlE,cAAc,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUnE,SAAS,IAAI,OAAO,CAAC,wBAAwB,CAAC;YAmBtC,eAAe;IAI7B,OAAO,CAAC,UAAU;IAmBlB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,UAAU;YAQJ,SAAS;IAuCvB,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,iBAAiB;YAcX,iBAAiB;YAwDjB,YAAY;IAsB1B,OAAO,CAAC,YAAY;CAMrB;AAED,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC9B,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"wakeAcceptance.d.ts","sourceRoot":"","sources":["../../src/pi/wakeAcceptance.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAEL,KAAK,qBAAqB,EAG1B,KAAK,wBAAwB,EAQ9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAMzD,MAAM,MAAM,uBAAuB,GAC/B;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAE1D,QAAA,MAAM,gBAAgB,eAAuC,CAAC;AAE9D,MAAM,WAAW,wBAAwB;IACvC,CAAC,gBAAgB,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;CAC7C;AAWD,MAAM,WAAW,uBAAuB;IACtC,qBAAqB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB,CAAC;IAC/D,KAAK,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC1D,YAAY,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtF,aAAa,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,cAAc,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,qBAAa,mBAAmB;IAK5B,QAAQ,CAAC,eAAe,EAAE,MAAM;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE;IANrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyD;gBAG3E,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EACP,EAAE,GAAE,gBAAwD,EAC7E,WAAW,CAAC,EAAE,MAAM;IAKtB,qBAAqB,IAAI,MAAM;IAI/B,qBAAqB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB;IAQ9D,kBAAkB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB;IAIrD,KAAK,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,uBAAuB,CAAC;YAKjD,gBAAgB;IAoDxB,YAAY,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAsBrF,aAAa,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlE,cAAc,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUnE,SAAS,IAAI,OAAO,CAAC,wBAAwB,CAAC;YAmBtC,eAAe;IAI7B,OAAO,CAAC,UAAU;IAmBlB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,UAAU;YAQJ,SAAS;IAuCvB,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,iBAAiB;YAcX,iBAAiB;YAwDjB,YAAY;IAsB1B,OAAO,CAAC,YAAY;CAMrB;AAED,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC9B,MAAM,2BAA2B,CAAC"}

package/dist/pi/wakeAcceptance.js

@@ -11,11 +11,11 @@ export class WakeAcceptanceStore {
     fs;
     runId;
     capabilities = new WeakMap();
-    constructor(runtimeHomePath, agentId, fs = new WakeAcceptanceFs(runtimeHomePath)) {
+    constructor(runtimeHomePath, agentId, fs = new WakeAcceptanceFs(runtimeHomePath), causalRunId) {
         this.runtimeHomePath = runtimeHomePath;
         this.agentId = agentId;
         this.fs = fs;
-        this.runId = resolveRunId();
+        this.runId = resolveRunId(undefined, causalRunId);
     }
     getAcceptanceFilePath() {
         return this.fs.stateFilePath;

package/dist/runtime/agentSkillsDirectory.d.ts

@@ -0,0 +1,25 @@
+import { type AgentSkill } from "./grokWorkerSkills.js";
+/**
+ * What every entry of a skills tree must satisfy beyond being a plain,
+ * non-symlink directory or regular file. Attesting a root-provisioned
+ * `$GROK_HOME/skills` sets both; reading a compiled workspace leaves them unset.
+ */
+export type AgentSkillsTreePolicy = Readonly<{
+    ownerUid?: number;
+    readOnly?: boolean;
+}>;
+/**
+ * Reads a skills tree — `<root>/<name>/SKILL.md` plus any supporting files —
+ * into the engine-neutral {@link AgentSkill} input, or `undefined` when `root`
+ * does not exist.
+ *
+ * It is the same reader for both ends of the Grok skills path: provisioning
+ * reads the compiled workspace's `.agents/skills` (the tree Codex reads in
+ * place), and the broker re-reads the rendered `$GROK_HOME/skills` before every
+ * turn under a root-owned, read-only policy. Symlinks, special files, hard
+ * links (read-only policy), non-UTF-8 content and anything past the
+ * {@link AGENT_SKILLS_BOUNDS} are refused rather than skipped, because a
+ * skipped entry would make the attested digest describe less than Grok loads.
+ */
+export declare function readAgentSkillsDirectory(root: string, policy?: AgentSkillsTreePolicy): Promise<readonly AgentSkill[] | undefined>;
+//# sourceMappingURL=agentSkillsDirectory.d.ts.map

package/dist/runtime/agentSkillsDirectory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentSkillsDirectory.d.ts","sourceRoot":"","sources":["../../src/runtime/agentSkillsDirectory.ts"],"names":[],"mappings":"AAIA,OAAO,EAAyC,KAAK,UAAU,EAAuB,MAAM,uBAAuB,CAAC;AAEpH;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAKxF;;;;;;;;;;;;GAYG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,qBAA0B,GAAG,OAAO,CAAC,SAAS,UAAU,EAAE,GAAG,SAAS,CAAC,CAqC3I"}