@prismer/runtime 2.0.5 → 2.0.6

package/dist/cli.cjs

@@ -2268,7 +2268,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@prismer/runtime",
-      version: "2.0.5",
+      version: "2.0.6",
       description: "Prismer Cloud daemon runtime \u2014 TS-only adapter host for hosted IM agents",
       type: "module",
       main: "dist/index.js",
@@ -12795,6 +12795,7 @@ var Runner = class extends import_node_events3.EventEmitter {
   workspaceId = "";
   wsConnected = false;
   hostedAgents = /* @__PURE__ */ new Map();
+  rejectedHostedAgentIds = /* @__PURE__ */ new Map();
   runningTasks = /* @__PURE__ */ new Map();
   lastTaskError;
   heartbeatTimer;
@@ -13240,6 +13241,9 @@ var Runner = class extends import_node_events3.EventEmitter {
       profilesByAgent.set(p.agent_im_user_id, list);
     }
     for (const a of agents) {
+      if (this.rejectedHostedAgentIds.has(a.im_user_id)) {
+        continue;
+      }
       let caps = [];
       try {
         caps = JSON.parse(a.capabilities);
@@ -13289,6 +13293,7 @@ var Runner = class extends import_node_events3.EventEmitter {
    * Used to populate the `agents` list in agent.host.declare.
    */
   setHostedAgent(agent) {
+    this.rejectedHostedAgentIds.delete(agent.imUserId);
     this.hostedAgents.set(agent.imUserId, {
       imUserId: agent.imUserId,
       name: agent.name,
@@ -13321,6 +13326,7 @@ var Runner = class extends import_node_events3.EventEmitter {
       );
     });
     tx(payload);
+    this.rejectedHostedAgentIds.delete(payload.imUserId);
     this.loadAgentsFromDb();
     if (this.wsConnected) this.sendDeclare();
     return {
@@ -13568,6 +13574,7 @@ var Runner = class extends import_node_events3.EventEmitter {
   }
   async onHostAcked(payload) {
     this.workspaceId = payload.workspaceId;
+    const ownershipLockChanged = await this.applyHostAckOwnershipLock(payload);
     void this.reportTransport().catch((err) => {
       process.stderr.write(
         `[daemon] transport-probe report failed: ${err.message}
@@ -13583,7 +13590,9 @@ var Runner = class extends import_node_events3.EventEmitter {
       (err) => log7.error("Asset sync failed", err.message)
     );
     await this.ensureDropFolderRuntime(this.workspaceId);
-    for (const id of payload.profilesToSync) {
+    const profilesToSync = payload.profilesToSync ?? [];
+    const profilesToDelete = payload.profilesToDelete ?? [];
+    for (const id of profilesToSync) {
       try {
         await this.servicePool.drop(id);
         await this.syncProfileFromCloud(id);
@@ -13591,7 +13600,7 @@ var Runner = class extends import_node_events3.EventEmitter {
         this.emit("sync-error", err);
       }
     }
-    for (const id of payload.profilesToDelete ?? []) {
+    for (const id of profilesToDelete) {
       const row = this.db.prepare("SELECT agent_im_user_id FROM agent_profiles WHERE id = ?").get(id);
       this.db.prepare("DELETE FROM agent_profiles WHERE id = ?").run(id);
       if (row) {
@@ -13600,10 +13609,37 @@ var Runner = class extends import_node_events3.EventEmitter {
       process.stderr.write(`[daemon] tombstone profile=${id}
 `);
     }
-    if (payload.profilesToDelete?.length) this.loadAgentsFromDb();
-    if ((payload.profilesToSync.length > 0 || (payload.profilesToDelete?.length ?? 0) > 0) && this.wsConnected) this.sendDeclare();
+    if (profilesToDelete.length) this.loadAgentsFromDb();
+    if ((ownershipLockChanged || profilesToSync.length > 0 || profilesToDelete.length > 0) && this.wsConnected) {
+      this.sendDeclare();
+    }
     this.emit("host-acked", payload);
   }
+  async applyHostAckOwnershipLock(payload) {
+    const rejected = payload.rejectedAgents ?? [];
+    if (rejected.length === 0) return false;
+    let changed = false;
+    for (const rejection of rejected) {
+      if (!rejection?.imUserId) continue;
+      const agentImUserId = rejection.imUserId;
+      this.rejectedHostedAgentIds.set(agentImUserId, {
+        ...rejection,
+        rejectedAt: Date.now()
+      });
+      const wasHosted = this.hostedAgents.delete(agentImUserId);
+      const profiles = this.db.prepare("SELECT id FROM agent_profiles WHERE agent_im_user_id = ?").all(agentImUserId);
+      const deleted = this.db.prepare("DELETE FROM agents WHERE im_user_id = ?").run(agentImUserId);
+      await Promise.all(profiles.map((profile) => this.servicePool.drop(profile.id)));
+      if (wasHosted || deleted.changes > 0) {
+        changed = true;
+        process.stderr.write(
+          `[daemon] ownership rejected agent=${agentImUserId} reason=${rejection.reason} owner=${rejection.ownerDaemonId ?? "(unknown)"} \u2014 stop declaring locally
+`
+        );
+      }
+    }
+    return changed;
+  }
   async onTaskDispatch(payload, requestId) {
     const targetDaemonId = readTargetDaemonId(payload);
     if (targetDaemonId && targetDaemonId !== this.config.daemon_id) {
@@ -13886,18 +13922,22 @@ var Runner = class extends import_node_events3.EventEmitter {
     const name = agent?.card?.name || agent?.displayName || agent?.username || profile.agentImUserId;
     const now = Date.now();
     const tx = this.db.transaction(() => {
-      this.db.prepare(
-        `INSERT OR REPLACE INTO agents
-           (im_user_id, workspace_id, name, adapter_name, capabilities, status, version, synced_at, dirty)
-           VALUES (?, ?, ?, ?, ?, 'offline', 1, ?, 0)`
-      ).run(
-        profile.agentImUserId,
-        profile.workspaceId,
-        name,
-        profile.adapterName,
-        JSON.stringify(capabilities),
-        now
-      );
+      if (this.rejectedHostedAgentIds.has(profile.agentImUserId)) {
+        this.db.prepare("DELETE FROM agents WHERE im_user_id = ?").run(profile.agentImUserId);
+      } else {
+        this.db.prepare(
+          `INSERT OR REPLACE INTO agents
+             (im_user_id, workspace_id, name, adapter_name, capabilities, status, version, synced_at, dirty)
+             VALUES (?, ?, ?, ?, ?, 'offline', 1, ?, 0)`
+        ).run(
+          profile.agentImUserId,
+          profile.workspaceId,
+          name,
+          profile.adapterName,
+          JSON.stringify(capabilities),
+          now
+        );
+      }
       this.db.prepare(
         `INSERT OR REPLACE INTO agent_profiles
            (id, workspace_id, agent_im_user_id, adapter_name, name, config, version, synced_at, dirty, deleted_at)
@@ -16837,7 +16877,7 @@ async function readResponseError(res) {
 
 // src/cli/index.ts
 init_ui();
-var VERSION = "2.0.5";
+var VERSION = "2.0.6";
 function buildProgram() {
   const program = new import_commander20.Command("prismer").description("Prismer Cloud daemon CLI (TS-only).").version(VERSION);
   program.addCommand(buildBannerCommand());

package/dist/cli.js

@@ -2245,7 +2245,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@prismer/runtime",
-      version: "2.0.5",
+      version: "2.0.6",
       description: "Prismer Cloud daemon runtime \u2014 TS-only adapter host for hosted IM agents",
       type: "module",
       main: "dist/index.js",
@@ -12778,6 +12778,7 @@ var Runner = class extends EventEmitter3 {
   workspaceId = "";
   wsConnected = false;
   hostedAgents = /* @__PURE__ */ new Map();
+  rejectedHostedAgentIds = /* @__PURE__ */ new Map();
   runningTasks = /* @__PURE__ */ new Map();
   lastTaskError;
   heartbeatTimer;
@@ -13223,6 +13224,9 @@ var Runner = class extends EventEmitter3 {
       profilesByAgent.set(p.agent_im_user_id, list);
     }
     for (const a of agents) {
+      if (this.rejectedHostedAgentIds.has(a.im_user_id)) {
+        continue;
+      }
       let caps = [];
       try {
         caps = JSON.parse(a.capabilities);
@@ -13272,6 +13276,7 @@ var Runner = class extends EventEmitter3 {
    * Used to populate the `agents` list in agent.host.declare.
    */
   setHostedAgent(agent) {
+    this.rejectedHostedAgentIds.delete(agent.imUserId);
     this.hostedAgents.set(agent.imUserId, {
       imUserId: agent.imUserId,
       name: agent.name,
@@ -13304,6 +13309,7 @@ var Runner = class extends EventEmitter3 {
       );
     });
     tx(payload);
+    this.rejectedHostedAgentIds.delete(payload.imUserId);
     this.loadAgentsFromDb();
     if (this.wsConnected) this.sendDeclare();
     return {
@@ -13551,6 +13557,7 @@ var Runner = class extends EventEmitter3 {
   }
   async onHostAcked(payload) {
     this.workspaceId = payload.workspaceId;
+    const ownershipLockChanged = await this.applyHostAckOwnershipLock(payload);
     void this.reportTransport().catch((err) => {
       process.stderr.write(
         `[daemon] transport-probe report failed: ${err.message}
@@ -13566,7 +13573,9 @@ var Runner = class extends EventEmitter3 {
       (err) => log7.error("Asset sync failed", err.message)
     );
     await this.ensureDropFolderRuntime(this.workspaceId);
-    for (const id of payload.profilesToSync) {
+    const profilesToSync = payload.profilesToSync ?? [];
+    const profilesToDelete = payload.profilesToDelete ?? [];
+    for (const id of profilesToSync) {
       try {
         await this.servicePool.drop(id);
         await this.syncProfileFromCloud(id);
@@ -13574,7 +13583,7 @@ var Runner = class extends EventEmitter3 {
         this.emit("sync-error", err);
       }
     }
-    for (const id of payload.profilesToDelete ?? []) {
+    for (const id of profilesToDelete) {
       const row = this.db.prepare("SELECT agent_im_user_id FROM agent_profiles WHERE id = ?").get(id);
       this.db.prepare("DELETE FROM agent_profiles WHERE id = ?").run(id);
       if (row) {
@@ -13583,10 +13592,37 @@ var Runner = class extends EventEmitter3 {
       process.stderr.write(`[daemon] tombstone profile=${id}
 `);
     }
-    if (payload.profilesToDelete?.length) this.loadAgentsFromDb();
-    if ((payload.profilesToSync.length > 0 || (payload.profilesToDelete?.length ?? 0) > 0) && this.wsConnected) this.sendDeclare();
+    if (profilesToDelete.length) this.loadAgentsFromDb();
+    if ((ownershipLockChanged || profilesToSync.length > 0 || profilesToDelete.length > 0) && this.wsConnected) {
+      this.sendDeclare();
+    }
     this.emit("host-acked", payload);
   }
+  async applyHostAckOwnershipLock(payload) {
+    const rejected = payload.rejectedAgents ?? [];
+    if (rejected.length === 0) return false;
+    let changed = false;
+    for (const rejection of rejected) {
+      if (!rejection?.imUserId) continue;
+      const agentImUserId = rejection.imUserId;
+      this.rejectedHostedAgentIds.set(agentImUserId, {
+        ...rejection,
+        rejectedAt: Date.now()
+      });
+      const wasHosted = this.hostedAgents.delete(agentImUserId);
+      const profiles = this.db.prepare("SELECT id FROM agent_profiles WHERE agent_im_user_id = ?").all(agentImUserId);
+      const deleted = this.db.prepare("DELETE FROM agents WHERE im_user_id = ?").run(agentImUserId);
+      await Promise.all(profiles.map((profile) => this.servicePool.drop(profile.id)));
+      if (wasHosted || deleted.changes > 0) {
+        changed = true;
+        process.stderr.write(
+          `[daemon] ownership rejected agent=${agentImUserId} reason=${rejection.reason} owner=${rejection.ownerDaemonId ?? "(unknown)"} \u2014 stop declaring locally
+`
+        );
+      }
+    }
+    return changed;
+  }
   async onTaskDispatch(payload, requestId) {
     const targetDaemonId = readTargetDaemonId(payload);
     if (targetDaemonId && targetDaemonId !== this.config.daemon_id) {
@@ -13869,18 +13905,22 @@ var Runner = class extends EventEmitter3 {
     const name = agent?.card?.name || agent?.displayName || agent?.username || profile.agentImUserId;
     const now = Date.now();
     const tx = this.db.transaction(() => {
-      this.db.prepare(
-        `INSERT OR REPLACE INTO agents
-           (im_user_id, workspace_id, name, adapter_name, capabilities, status, version, synced_at, dirty)
-           VALUES (?, ?, ?, ?, ?, 'offline', 1, ?, 0)`
-      ).run(
-        profile.agentImUserId,
-        profile.workspaceId,
-        name,
-        profile.adapterName,
-        JSON.stringify(capabilities),
-        now
-      );
+      if (this.rejectedHostedAgentIds.has(profile.agentImUserId)) {
+        this.db.prepare("DELETE FROM agents WHERE im_user_id = ?").run(profile.agentImUserId);
+      } else {
+        this.db.prepare(
+          `INSERT OR REPLACE INTO agents
+             (im_user_id, workspace_id, name, adapter_name, capabilities, status, version, synced_at, dirty)
+             VALUES (?, ?, ?, ?, ?, 'offline', 1, ?, 0)`
+        ).run(
+          profile.agentImUserId,
+          profile.workspaceId,
+          name,
+          profile.adapterName,
+          JSON.stringify(capabilities),
+          now
+        );
+      }
       this.db.prepare(
         `INSERT OR REPLACE INTO agent_profiles
            (id, workspace_id, agent_im_user_id, adapter_name, name, config, version, synced_at, dirty, deleted_at)
@@ -16820,7 +16860,7 @@ async function readResponseError(res) {
 
 // src/cli/index.ts
 init_ui();
-var VERSION = "2.0.5";
+var VERSION = "2.0.6";
 function buildProgram() {
   const program = new Command20("prismer").description("Prismer Cloud daemon CLI (TS-only).").version(VERSION);
   program.addCommand(buildBannerCommand());

package/dist/index.cjs

@@ -2657,7 +2657,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@prismer/runtime",
-      version: "2.0.5",
+      version: "2.0.6",
       description: "Prismer Cloud daemon runtime \u2014 TS-only adapter host for hosted IM agents",
       type: "module",
       main: "dist/index.js",
@@ -11046,6 +11046,7 @@ var Runner = class extends import_node_events3.EventEmitter {
   workspaceId = "";
   wsConnected = false;
   hostedAgents = /* @__PURE__ */ new Map();
+  rejectedHostedAgentIds = /* @__PURE__ */ new Map();
   runningTasks = /* @__PURE__ */ new Map();
   lastTaskError;
   heartbeatTimer;
@@ -11491,6 +11492,9 @@ var Runner = class extends import_node_events3.EventEmitter {
       profilesByAgent.set(p.agent_im_user_id, list);
     }
     for (const a of agents) {
+      if (this.rejectedHostedAgentIds.has(a.im_user_id)) {
+        continue;
+      }
       let caps = [];
       try {
         caps = JSON.parse(a.capabilities);
@@ -11540,6 +11544,7 @@ var Runner = class extends import_node_events3.EventEmitter {
    * Used to populate the `agents` list in agent.host.declare.
    */
   setHostedAgent(agent) {
+    this.rejectedHostedAgentIds.delete(agent.imUserId);
     this.hostedAgents.set(agent.imUserId, {
       imUserId: agent.imUserId,
       name: agent.name,
@@ -11572,6 +11577,7 @@ var Runner = class extends import_node_events3.EventEmitter {
       );
     });
     tx(payload);
+    this.rejectedHostedAgentIds.delete(payload.imUserId);
     this.loadAgentsFromDb();
     if (this.wsConnected) this.sendDeclare();
     return {
@@ -11819,6 +11825,7 @@ var Runner = class extends import_node_events3.EventEmitter {
   }
   async onHostAcked(payload) {
     this.workspaceId = payload.workspaceId;
+    const ownershipLockChanged = await this.applyHostAckOwnershipLock(payload);
     void this.reportTransport().catch((err) => {
       process.stderr.write(
         `[daemon] transport-probe report failed: ${err.message}
@@ -11834,7 +11841,9 @@ var Runner = class extends import_node_events3.EventEmitter {
       (err) => log7.error("Asset sync failed", err.message)
     );
     await this.ensureDropFolderRuntime(this.workspaceId);
-    for (const id of payload.profilesToSync) {
+    const profilesToSync = payload.profilesToSync ?? [];
+    const profilesToDelete = payload.profilesToDelete ?? [];
+    for (const id of profilesToSync) {
       try {
         await this.servicePool.drop(id);
         await this.syncProfileFromCloud(id);
@@ -11842,7 +11851,7 @@ var Runner = class extends import_node_events3.EventEmitter {
         this.emit("sync-error", err);
       }
     }
-    for (const id of payload.profilesToDelete ?? []) {
+    for (const id of profilesToDelete) {
       const row = this.db.prepare("SELECT agent_im_user_id FROM agent_profiles WHERE id = ?").get(id);
       this.db.prepare("DELETE FROM agent_profiles WHERE id = ?").run(id);
       if (row) {
@@ -11851,10 +11860,37 @@ var Runner = class extends import_node_events3.EventEmitter {
       process.stderr.write(`[daemon] tombstone profile=${id}
 `);
     }
-    if (payload.profilesToDelete?.length) this.loadAgentsFromDb();
-    if ((payload.profilesToSync.length > 0 || (payload.profilesToDelete?.length ?? 0) > 0) && this.wsConnected) this.sendDeclare();
+    if (profilesToDelete.length) this.loadAgentsFromDb();
+    if ((ownershipLockChanged || profilesToSync.length > 0 || profilesToDelete.length > 0) && this.wsConnected) {
+      this.sendDeclare();
+    }
     this.emit("host-acked", payload);
   }
+  async applyHostAckOwnershipLock(payload) {
+    const rejected = payload.rejectedAgents ?? [];
+    if (rejected.length === 0) return false;
+    let changed = false;
+    for (const rejection of rejected) {
+      if (!rejection?.imUserId) continue;
+      const agentImUserId = rejection.imUserId;
+      this.rejectedHostedAgentIds.set(agentImUserId, {
+        ...rejection,
+        rejectedAt: Date.now()
+      });
+      const wasHosted = this.hostedAgents.delete(agentImUserId);
+      const profiles = this.db.prepare("SELECT id FROM agent_profiles WHERE agent_im_user_id = ?").all(agentImUserId);
+      const deleted = this.db.prepare("DELETE FROM agents WHERE im_user_id = ?").run(agentImUserId);
+      await Promise.all(profiles.map((profile) => this.servicePool.drop(profile.id)));
+      if (wasHosted || deleted.changes > 0) {
+        changed = true;
+        process.stderr.write(
+          `[daemon] ownership rejected agent=${agentImUserId} reason=${rejection.reason} owner=${rejection.ownerDaemonId ?? "(unknown)"} \u2014 stop declaring locally
+`
+        );
+      }
+    }
+    return changed;
+  }
   async onTaskDispatch(payload, requestId) {
     const targetDaemonId = readTargetDaemonId(payload);
     if (targetDaemonId && targetDaemonId !== this.config.daemon_id) {
@@ -12137,18 +12173,22 @@ var Runner = class extends import_node_events3.EventEmitter {
     const name = agent?.card?.name || agent?.displayName || agent?.username || profile.agentImUserId;
     const now = Date.now();
     const tx = this.db.transaction(() => {
-      this.db.prepare(
-        `INSERT OR REPLACE INTO agents
-           (im_user_id, workspace_id, name, adapter_name, capabilities, status, version, synced_at, dirty)
-           VALUES (?, ?, ?, ?, ?, 'offline', 1, ?, 0)`
-      ).run(
-        profile.agentImUserId,
-        profile.workspaceId,
-        name,
-        profile.adapterName,
-        JSON.stringify(capabilities),
-        now
-      );
+      if (this.rejectedHostedAgentIds.has(profile.agentImUserId)) {
+        this.db.prepare("DELETE FROM agents WHERE im_user_id = ?").run(profile.agentImUserId);
+      } else {
+        this.db.prepare(
+          `INSERT OR REPLACE INTO agents
+             (im_user_id, workspace_id, name, adapter_name, capabilities, status, version, synced_at, dirty)
+             VALUES (?, ?, ?, ?, ?, 'offline', 1, ?, 0)`
+        ).run(
+          profile.agentImUserId,
+          profile.workspaceId,
+          name,
+          profile.adapterName,
+          JSON.stringify(capabilities),
+          now
+        );
+      }
       this.db.prepare(
         `INSERT OR REPLACE INTO agent_profiles
            (id, workspace_id, agent_im_user_id, adapter_name, name, config, version, synced_at, dirty, deleted_at)
@@ -17012,7 +17052,7 @@ async function readResponseError(res) {
 
 // src/cli/index.ts
 init_ui();
-var VERSION = "2.0.5";
+var VERSION = "2.0.6";
 function buildProgram() {
   const program = new import_commander20.Command("prismer").description("Prismer Cloud daemon CLI (TS-only).").version(VERSION);
   program.addCommand(buildBannerCommand());

package/dist/index.d.cts

@@ -21,6 +21,11 @@ interface AgentHostDeclarePayload {
     platform: 'darwin' | 'linux' | 'win32';
     agents: HostedAgentDeclaration[];
 }
+interface RejectedHostedAgent {
+    imUserId: string;
+    reason: 'bound-to-other-daemon' | 'not-owned' | 'unknown';
+    ownerDaemonId?: string;
+}
 interface HostAckedPayload {
     workspaceId: string;
     syncCursor: {
@@ -32,6 +37,8 @@ interface HostAckedPayload {
     /** Profile IDs the daemon declared but that no longer exist on the cloud
      *  (soft-deleted). The daemon should remove these from its local store. */
     profilesToDelete: string[];
+    acceptedAgents?: string[];
+    rejectedAgents?: RejectedHostedAgent[];
 }
 interface AgentStatusChangedPayload {
     agentImUserId: string;
@@ -2307,6 +2314,7 @@ declare class Runner extends EventEmitter {
     private workspaceId;
     private wsConnected;
     private readonly hostedAgents;
+    private readonly rejectedHostedAgentIds;
     private readonly runningTasks;
     private lastTaskError?;
     private heartbeatTimer?;
@@ -2417,6 +2425,7 @@ declare class Runner extends EventEmitter {
      */
     private onWebhookDispatch;
     private onHostAcked;
+    private applyHostAckOwnershipLock;
     private onTaskDispatch;
     private onTaskCancel;
     private findMessageDispatchAgent;
@@ -2646,4 +2655,4 @@ declare const codexAdapter: AdapterDef;
 declare function buildProgram(): Command;
 declare function runCli(argv?: string[]): Promise<void>;
 
-export { type AcquireResult, type AdapterDef, type AdapterKind, AdapterRegistry, type AdapterService, type AgentChangedPayload, type AgentDispatchReplyAttachment, type AgentDispatchReplyPayload, type AgentDispatchReplyStatus, type AgentDispatchRequest, type AgentDispatchResponse, type AgentHostDeclarePayload, type AgentProfile, type AgentProfileChangedPayload, type AgentStatusChangedPayload, AssetCache, type AssetCacheOptions, type AssetChangedPayload, type AssetDispatchObservation, type AssetDispatchStrategy, type AssetRef, BUILTIN_ROLE_TEMPLATES, type CachedAsset, type ClaudeCodeConfig, CloudClient, type CloudClientOptions, CloudError, type CloudResponse, type CodexConfig, type Config, type ConfigPaths, ConfigSchema, type DispatchDeps, type Envelope, type FlushFn, type FlushResult, type HealthStatus, type HermesProfileConfig, type HostAckedPayload, type HostedAgentDeclaration, type IMAgentStatus, type IMWSMessage, type LocalDb, LocalServer, type LocalServerOptions, type LocalServerState, type MessageDispatchAgent, type MessageDispatchDeps, type MessageDispatchHandle, type MessageDispatchTaskInput, type NormalizedContent, type OpenClawProfileConfig, type PairOptions, type PairResult, type ParseClaim, ParseClaimController, type ParseClaimControllerOptions, type ParsedPrismerUri, type PrismerUriType, type RoleTemplate, Runner, type RunnerOptions, ServicePool, type SyncOperation, SyncQueue, type SyncQueueRow, type SyncResourceType, type SyncStatus, SyncWorker, type SyncWorkerOptions, TARGET_SCHEMA_VERSION, type TaskCancelPayload, type TaskDispatchContextEntry, type TaskDispatchProgressPayload, type TaskDispatchReplyPayload, type TaskDispatchRequestPayload, type TaskInput, type TaskResult, UriResolver, type UriResolverOptions, type UrlResolution, type ValidationResult, WS_CLOSE, type WorkspaceChangedPayload, type WorkspaceFileBinding, type WorkspaceFileChangedPayload, WorkspaceMirror, type WorkspaceMirrorOptions, WsClient, type WsClientOptions, buildProgram, claudeCodeAdapter, codexAdapter, composePrompt, configExists, currentSchemaVersion, deriveWsUrl, envelope, extractHttpUrls, getRoleTemplate, handleAgentMessageDispatch, handleDispatch, hermesAdapter, isDaemonId, listRoleTemplates, loadConfig, newDaemonId, nextBackoffMs, openLocalDb, openclawAdapter, pair, parseCodexOutput, parseUris, resolvePaths, runCli, runMigrations, saveConfig };
+export { type AcquireResult, type AdapterDef, type AdapterKind, AdapterRegistry, type AdapterService, type AgentChangedPayload, type AgentDispatchReplyAttachment, type AgentDispatchReplyPayload, type AgentDispatchReplyStatus, type AgentDispatchRequest, type AgentDispatchResponse, type AgentHostDeclarePayload, type AgentProfile, type AgentProfileChangedPayload, type AgentStatusChangedPayload, AssetCache, type AssetCacheOptions, type AssetChangedPayload, type AssetDispatchObservation, type AssetDispatchStrategy, type AssetRef, BUILTIN_ROLE_TEMPLATES, type CachedAsset, type ClaudeCodeConfig, CloudClient, type CloudClientOptions, CloudError, type CloudResponse, type CodexConfig, type Config, type ConfigPaths, ConfigSchema, type DispatchDeps, type Envelope, type FlushFn, type FlushResult, type HealthStatus, type HermesProfileConfig, type HostAckedPayload, type HostedAgentDeclaration, type IMAgentStatus, type IMWSMessage, type LocalDb, LocalServer, type LocalServerOptions, type LocalServerState, type MessageDispatchAgent, type MessageDispatchDeps, type MessageDispatchHandle, type MessageDispatchTaskInput, type NormalizedContent, type OpenClawProfileConfig, type PairOptions, type PairResult, type ParseClaim, ParseClaimController, type ParseClaimControllerOptions, type ParsedPrismerUri, type PrismerUriType, type RejectedHostedAgent, type RoleTemplate, Runner, type RunnerOptions, ServicePool, type SyncOperation, SyncQueue, type SyncQueueRow, type SyncResourceType, type SyncStatus, SyncWorker, type SyncWorkerOptions, TARGET_SCHEMA_VERSION, type TaskCancelPayload, type TaskDispatchContextEntry, type TaskDispatchProgressPayload, type TaskDispatchReplyPayload, type TaskDispatchRequestPayload, type TaskInput, type TaskResult, UriResolver, type UriResolverOptions, type UrlResolution, type ValidationResult, WS_CLOSE, type WorkspaceChangedPayload, type WorkspaceFileBinding, type WorkspaceFileChangedPayload, WorkspaceMirror, type WorkspaceMirrorOptions, WsClient, type WsClientOptions, buildProgram, claudeCodeAdapter, codexAdapter, composePrompt, configExists, currentSchemaVersion, deriveWsUrl, envelope, extractHttpUrls, getRoleTemplate, handleAgentMessageDispatch, handleDispatch, hermesAdapter, isDaemonId, listRoleTemplates, loadConfig, newDaemonId, nextBackoffMs, openLocalDb, openclawAdapter, pair, parseCodexOutput, parseUris, resolvePaths, runCli, runMigrations, saveConfig };

package/dist/index.d.ts

@@ -21,6 +21,11 @@ interface AgentHostDeclarePayload {
     platform: 'darwin' | 'linux' | 'win32';
     agents: HostedAgentDeclaration[];
 }
+interface RejectedHostedAgent {
+    imUserId: string;
+    reason: 'bound-to-other-daemon' | 'not-owned' | 'unknown';
+    ownerDaemonId?: string;
+}
 interface HostAckedPayload {
     workspaceId: string;
     syncCursor: {
@@ -32,6 +37,8 @@ interface HostAckedPayload {
     /** Profile IDs the daemon declared but that no longer exist on the cloud
      *  (soft-deleted). The daemon should remove these from its local store. */
     profilesToDelete: string[];
+    acceptedAgents?: string[];
+    rejectedAgents?: RejectedHostedAgent[];
 }
 interface AgentStatusChangedPayload {
     agentImUserId: string;
@@ -2307,6 +2314,7 @@ declare class Runner extends EventEmitter {
     private workspaceId;
     private wsConnected;
     private readonly hostedAgents;
+    private readonly rejectedHostedAgentIds;
     private readonly runningTasks;
     private lastTaskError?;
     private heartbeatTimer?;
@@ -2417,6 +2425,7 @@ declare class Runner extends EventEmitter {
      */
     private onWebhookDispatch;
     private onHostAcked;
+    private applyHostAckOwnershipLock;
     private onTaskDispatch;
     private onTaskCancel;
     private findMessageDispatchAgent;
@@ -2646,4 +2655,4 @@ declare const codexAdapter: AdapterDef;
 declare function buildProgram(): Command;
 declare function runCli(argv?: string[]): Promise<void>;
 
-export { type AcquireResult, type AdapterDef, type AdapterKind, AdapterRegistry, type AdapterService, type AgentChangedPayload, type AgentDispatchReplyAttachment, type AgentDispatchReplyPayload, type AgentDispatchReplyStatus, type AgentDispatchRequest, type AgentDispatchResponse, type AgentHostDeclarePayload, type AgentProfile, type AgentProfileChangedPayload, type AgentStatusChangedPayload, AssetCache, type AssetCacheOptions, type AssetChangedPayload, type AssetDispatchObservation, type AssetDispatchStrategy, type AssetRef, BUILTIN_ROLE_TEMPLATES, type CachedAsset, type ClaudeCodeConfig, CloudClient, type CloudClientOptions, CloudError, type CloudResponse, type CodexConfig, type Config, type ConfigPaths, ConfigSchema, type DispatchDeps, type Envelope, type FlushFn, type FlushResult, type HealthStatus, type HermesProfileConfig, type HostAckedPayload, type HostedAgentDeclaration, type IMAgentStatus, type IMWSMessage, type LocalDb, LocalServer, type LocalServerOptions, type LocalServerState, type MessageDispatchAgent, type MessageDispatchDeps, type MessageDispatchHandle, type MessageDispatchTaskInput, type NormalizedContent, type OpenClawProfileConfig, type PairOptions, type PairResult, type ParseClaim, ParseClaimController, type ParseClaimControllerOptions, type ParsedPrismerUri, type PrismerUriType, type RoleTemplate, Runner, type RunnerOptions, ServicePool, type SyncOperation, SyncQueue, type SyncQueueRow, type SyncResourceType, type SyncStatus, SyncWorker, type SyncWorkerOptions, TARGET_SCHEMA_VERSION, type TaskCancelPayload, type TaskDispatchContextEntry, type TaskDispatchProgressPayload, type TaskDispatchReplyPayload, type TaskDispatchRequestPayload, type TaskInput, type TaskResult, UriResolver, type UriResolverOptions, type UrlResolution, type ValidationResult, WS_CLOSE, type WorkspaceChangedPayload, type WorkspaceFileBinding, type WorkspaceFileChangedPayload, WorkspaceMirror, type WorkspaceMirrorOptions, WsClient, type WsClientOptions, buildProgram, claudeCodeAdapter, codexAdapter, composePrompt, configExists, currentSchemaVersion, deriveWsUrl, envelope, extractHttpUrls, getRoleTemplate, handleAgentMessageDispatch, handleDispatch, hermesAdapter, isDaemonId, listRoleTemplates, loadConfig, newDaemonId, nextBackoffMs, openLocalDb, openclawAdapter, pair, parseCodexOutput, parseUris, resolvePaths, runCli, runMigrations, saveConfig };
+export { type AcquireResult, type AdapterDef, type AdapterKind, AdapterRegistry, type AdapterService, type AgentChangedPayload, type AgentDispatchReplyAttachment, type AgentDispatchReplyPayload, type AgentDispatchReplyStatus, type AgentDispatchRequest, type AgentDispatchResponse, type AgentHostDeclarePayload, type AgentProfile, type AgentProfileChangedPayload, type AgentStatusChangedPayload, AssetCache, type AssetCacheOptions, type AssetChangedPayload, type AssetDispatchObservation, type AssetDispatchStrategy, type AssetRef, BUILTIN_ROLE_TEMPLATES, type CachedAsset, type ClaudeCodeConfig, CloudClient, type CloudClientOptions, CloudError, type CloudResponse, type CodexConfig, type Config, type ConfigPaths, ConfigSchema, type DispatchDeps, type Envelope, type FlushFn, type FlushResult, type HealthStatus, type HermesProfileConfig, type HostAckedPayload, type HostedAgentDeclaration, type IMAgentStatus, type IMWSMessage, type LocalDb, LocalServer, type LocalServerOptions, type LocalServerState, type MessageDispatchAgent, type MessageDispatchDeps, type MessageDispatchHandle, type MessageDispatchTaskInput, type NormalizedContent, type OpenClawProfileConfig, type PairOptions, type PairResult, type ParseClaim, ParseClaimController, type ParseClaimControllerOptions, type ParsedPrismerUri, type PrismerUriType, type RejectedHostedAgent, type RoleTemplate, Runner, type RunnerOptions, ServicePool, type SyncOperation, SyncQueue, type SyncQueueRow, type SyncResourceType, type SyncStatus, SyncWorker, type SyncWorkerOptions, TARGET_SCHEMA_VERSION, type TaskCancelPayload, type TaskDispatchContextEntry, type TaskDispatchProgressPayload, type TaskDispatchReplyPayload, type TaskDispatchRequestPayload, type TaskInput, type TaskResult, UriResolver, type UriResolverOptions, type UrlResolution, type ValidationResult, WS_CLOSE, type WorkspaceChangedPayload, type WorkspaceFileBinding, type WorkspaceFileChangedPayload, WorkspaceMirror, type WorkspaceMirrorOptions, WsClient, type WsClientOptions, buildProgram, claudeCodeAdapter, codexAdapter, composePrompt, configExists, currentSchemaVersion, deriveWsUrl, envelope, extractHttpUrls, getRoleTemplate, handleAgentMessageDispatch, handleDispatch, hermesAdapter, isDaemonId, listRoleTemplates, loadConfig, newDaemonId, nextBackoffMs, openLocalDb, openclawAdapter, pair, parseCodexOutput, parseUris, resolvePaths, runCli, runMigrations, saveConfig };

package/dist/index.js

@@ -2633,7 +2633,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@prismer/runtime",
-      version: "2.0.5",
+      version: "2.0.6",
       description: "Prismer Cloud daemon runtime \u2014 TS-only adapter host for hosted IM agents",
       type: "module",
       main: "dist/index.js",
@@ -10971,6 +10971,7 @@ var Runner = class extends EventEmitter3 {
   workspaceId = "";
   wsConnected = false;
   hostedAgents = /* @__PURE__ */ new Map();
+  rejectedHostedAgentIds = /* @__PURE__ */ new Map();
   runningTasks = /* @__PURE__ */ new Map();
   lastTaskError;
   heartbeatTimer;
@@ -11416,6 +11417,9 @@ var Runner = class extends EventEmitter3 {
       profilesByAgent.set(p.agent_im_user_id, list);
     }
     for (const a of agents) {
+      if (this.rejectedHostedAgentIds.has(a.im_user_id)) {
+        continue;
+      }
       let caps = [];
       try {
         caps = JSON.parse(a.capabilities);
@@ -11465,6 +11469,7 @@ var Runner = class extends EventEmitter3 {
    * Used to populate the `agents` list in agent.host.declare.
    */
   setHostedAgent(agent) {
+    this.rejectedHostedAgentIds.delete(agent.imUserId);
     this.hostedAgents.set(agent.imUserId, {
       imUserId: agent.imUserId,
       name: agent.name,
@@ -11497,6 +11502,7 @@ var Runner = class extends EventEmitter3 {
       );
     });
     tx(payload);
+    this.rejectedHostedAgentIds.delete(payload.imUserId);
     this.loadAgentsFromDb();
     if (this.wsConnected) this.sendDeclare();
     return {
@@ -11744,6 +11750,7 @@ var Runner = class extends EventEmitter3 {
   }
   async onHostAcked(payload) {
     this.workspaceId = payload.workspaceId;
+    const ownershipLockChanged = await this.applyHostAckOwnershipLock(payload);
     void this.reportTransport().catch((err) => {
       process.stderr.write(
         `[daemon] transport-probe report failed: ${err.message}
@@ -11759,7 +11766,9 @@ var Runner = class extends EventEmitter3 {
       (err) => log7.error("Asset sync failed", err.message)
     );
     await this.ensureDropFolderRuntime(this.workspaceId);
-    for (const id of payload.profilesToSync) {
+    const profilesToSync = payload.profilesToSync ?? [];
+    const profilesToDelete = payload.profilesToDelete ?? [];
+    for (const id of profilesToSync) {
       try {
         await this.servicePool.drop(id);
         await this.syncProfileFromCloud(id);
@@ -11767,7 +11776,7 @@ var Runner = class extends EventEmitter3 {
         this.emit("sync-error", err);
       }
     }
-    for (const id of payload.profilesToDelete ?? []) {
+    for (const id of profilesToDelete) {
       const row = this.db.prepare("SELECT agent_im_user_id FROM agent_profiles WHERE id = ?").get(id);
       this.db.prepare("DELETE FROM agent_profiles WHERE id = ?").run(id);
       if (row) {
@@ -11776,10 +11785,37 @@ var Runner = class extends EventEmitter3 {
       process.stderr.write(`[daemon] tombstone profile=${id}
 `);
     }
-    if (payload.profilesToDelete?.length) this.loadAgentsFromDb();
-    if ((payload.profilesToSync.length > 0 || (payload.profilesToDelete?.length ?? 0) > 0) && this.wsConnected) this.sendDeclare();
+    if (profilesToDelete.length) this.loadAgentsFromDb();
+    if ((ownershipLockChanged || profilesToSync.length > 0 || profilesToDelete.length > 0) && this.wsConnected) {
+      this.sendDeclare();
+    }
     this.emit("host-acked", payload);
   }
+  async applyHostAckOwnershipLock(payload) {
+    const rejected = payload.rejectedAgents ?? [];
+    if (rejected.length === 0) return false;
+    let changed = false;
+    for (const rejection of rejected) {
+      if (!rejection?.imUserId) continue;
+      const agentImUserId = rejection.imUserId;
+      this.rejectedHostedAgentIds.set(agentImUserId, {
+        ...rejection,
+        rejectedAt: Date.now()
+      });
+      const wasHosted = this.hostedAgents.delete(agentImUserId);
+      const profiles = this.db.prepare("SELECT id FROM agent_profiles WHERE agent_im_user_id = ?").all(agentImUserId);
+      const deleted = this.db.prepare("DELETE FROM agents WHERE im_user_id = ?").run(agentImUserId);
+      await Promise.all(profiles.map((profile) => this.servicePool.drop(profile.id)));
+      if (wasHosted || deleted.changes > 0) {
+        changed = true;
+        process.stderr.write(
+          `[daemon] ownership rejected agent=${agentImUserId} reason=${rejection.reason} owner=${rejection.ownerDaemonId ?? "(unknown)"} \u2014 stop declaring locally
+`
+        );
+      }
+    }
+    return changed;
+  }
   async onTaskDispatch(payload, requestId) {
     const targetDaemonId = readTargetDaemonId(payload);
     if (targetDaemonId && targetDaemonId !== this.config.daemon_id) {
@@ -12062,18 +12098,22 @@ var Runner = class extends EventEmitter3 {
     const name = agent?.card?.name || agent?.displayName || agent?.username || profile.agentImUserId;
     const now = Date.now();
     const tx = this.db.transaction(() => {
-      this.db.prepare(
-        `INSERT OR REPLACE INTO agents
-           (im_user_id, workspace_id, name, adapter_name, capabilities, status, version, synced_at, dirty)
-           VALUES (?, ?, ?, ?, ?, 'offline', 1, ?, 0)`
-      ).run(
-        profile.agentImUserId,
-        profile.workspaceId,
-        name,
-        profile.adapterName,
-        JSON.stringify(capabilities),
-        now
-      );
+      if (this.rejectedHostedAgentIds.has(profile.agentImUserId)) {
+        this.db.prepare("DELETE FROM agents WHERE im_user_id = ?").run(profile.agentImUserId);
+      } else {
+        this.db.prepare(
+          `INSERT OR REPLACE INTO agents
+             (im_user_id, workspace_id, name, adapter_name, capabilities, status, version, synced_at, dirty)
+             VALUES (?, ?, ?, ?, ?, 'offline', 1, ?, 0)`
+        ).run(
+          profile.agentImUserId,
+          profile.workspaceId,
+          name,
+          profile.adapterName,
+          JSON.stringify(capabilities),
+          now
+        );
+      }
       this.db.prepare(
         `INSERT OR REPLACE INTO agent_profiles
            (id, workspace_id, agent_im_user_id, adapter_name, name, config, version, synced_at, dirty, deleted_at)
@@ -16944,7 +16984,7 @@ async function readResponseError(res) {
 
 // src/cli/index.ts
 init_ui();
-var VERSION = "2.0.5";
+var VERSION = "2.0.6";
 function buildProgram() {
   const program = new Command20("prismer").description("Prismer Cloud daemon CLI (TS-only).").version(VERSION);
   program.addCommand(buildBannerCommand());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prismer/runtime",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Prismer Cloud daemon runtime — TS-only adapter host for hosted IM agents",
   "type": "module",
   "main": "dist/index.js",