anantham-v2 2.0.0-alpha.1

package/dist/recovery/recovery-record.d.ts

@@ -0,0 +1,103 @@
+import { z } from "zod";
+/**
+ * Anomaly classification types detected during recovery.
+ * PRD Part 1 Section 47.
+ */
+export declare const RecoveryAnomalyTypeSchema: z.ZodEnum<["STALE_LEASE", "ORPHAN_ARTIFACT", "MISSING_ARTIFACT_FILE", "CORRUPTED_CHECKPOINT", "UNCOMMITTED_TASK", "EVENT_SEQUENCE_GAP", "INTEGRITY_VIOLATION"]>;
+export type RecoveryAnomalyType = z.infer<typeof RecoveryAnomalyTypeSchema>;
+/**
+ * An individual anomaly detected during recovery.
+ */
+export declare const RecoveryAnomalySchema: z.ZodObject<{
+    type: z.ZodEnum<["STALE_LEASE", "ORPHAN_ARTIFACT", "MISSING_ARTIFACT_FILE", "CORRUPTED_CHECKPOINT", "UNCOMMITTED_TASK", "EVENT_SEQUENCE_GAP", "INTEGRITY_VIOLATION"]>;
+    entityId: z.ZodString;
+    description: z.ZodString;
+    actionTaken: z.ZodEnum<["REPAIRED", "EVICTED", "PRESERVED", "FLAGGED", "IGNORED"]>;
+    timestamp: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "STALE_LEASE" | "ORPHAN_ARTIFACT" | "MISSING_ARTIFACT_FILE" | "CORRUPTED_CHECKPOINT" | "UNCOMMITTED_TASK" | "EVENT_SEQUENCE_GAP" | "INTEGRITY_VIOLATION";
+    timestamp: string;
+    description: string;
+    entityId: string;
+    actionTaken: "REPAIRED" | "EVICTED" | "PRESERVED" | "FLAGGED" | "IGNORED";
+}, {
+    type: "STALE_LEASE" | "ORPHAN_ARTIFACT" | "MISSING_ARTIFACT_FILE" | "CORRUPTED_CHECKPOINT" | "UNCOMMITTED_TASK" | "EVENT_SEQUENCE_GAP" | "INTEGRITY_VIOLATION";
+    timestamp: string;
+    description: string;
+    entityId: string;
+    actionTaken: "REPAIRED" | "EVICTED" | "PRESERVED" | "FLAGGED" | "IGNORED";
+}>;
+export type RecoveryAnomaly = z.infer<typeof RecoveryAnomalySchema>;
+/**
+ * Structured Recovery Record generated after crash/startup recovery.
+ * PRD Part 1 Section 47.
+ */
+export declare const RecoveryRecordSchema: z.ZodObject<{
+    recoveryId: z.ZodString;
+    startedAt: z.ZodString;
+    completedAt: z.ZodString;
+    status: z.ZodEnum<["SUCCESS", "WARNING", "CRITICAL_ERROR"]>;
+    databaseIntegrityPassed: z.ZodBoolean;
+    eventsValidatedCount: z.ZodNumber;
+    projectionsRebuiltCount: z.ZodNumber;
+    staleLeasesEvictedCount: z.ZodNumber;
+    orphansDetectedCount: z.ZodNumber;
+    anomalies: z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<["STALE_LEASE", "ORPHAN_ARTIFACT", "MISSING_ARTIFACT_FILE", "CORRUPTED_CHECKPOINT", "UNCOMMITTED_TASK", "EVENT_SEQUENCE_GAP", "INTEGRITY_VIOLATION"]>;
+        entityId: z.ZodString;
+        description: z.ZodString;
+        actionTaken: z.ZodEnum<["REPAIRED", "EVICTED", "PRESERVED", "FLAGGED", "IGNORED"]>;
+        timestamp: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        type: "STALE_LEASE" | "ORPHAN_ARTIFACT" | "MISSING_ARTIFACT_FILE" | "CORRUPTED_CHECKPOINT" | "UNCOMMITTED_TASK" | "EVENT_SEQUENCE_GAP" | "INTEGRITY_VIOLATION";
+        timestamp: string;
+        description: string;
+        entityId: string;
+        actionTaken: "REPAIRED" | "EVICTED" | "PRESERVED" | "FLAGGED" | "IGNORED";
+    }, {
+        type: "STALE_LEASE" | "ORPHAN_ARTIFACT" | "MISSING_ARTIFACT_FILE" | "CORRUPTED_CHECKPOINT" | "UNCOMMITTED_TASK" | "EVENT_SEQUENCE_GAP" | "INTEGRITY_VIOLATION";
+        timestamp: string;
+        description: string;
+        entityId: string;
+        actionTaken: "REPAIRED" | "EVICTED" | "PRESERVED" | "FLAGGED" | "IGNORED";
+    }>, "many">;
+    message: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    message: string;
+    status: "SUCCESS" | "WARNING" | "CRITICAL_ERROR";
+    startedAt: string;
+    completedAt: string;
+    recoveryId: string;
+    databaseIntegrityPassed: boolean;
+    eventsValidatedCount: number;
+    projectionsRebuiltCount: number;
+    staleLeasesEvictedCount: number;
+    orphansDetectedCount: number;
+    anomalies: {
+        type: "STALE_LEASE" | "ORPHAN_ARTIFACT" | "MISSING_ARTIFACT_FILE" | "CORRUPTED_CHECKPOINT" | "UNCOMMITTED_TASK" | "EVENT_SEQUENCE_GAP" | "INTEGRITY_VIOLATION";
+        timestamp: string;
+        description: string;
+        entityId: string;
+        actionTaken: "REPAIRED" | "EVICTED" | "PRESERVED" | "FLAGGED" | "IGNORED";
+    }[];
+}, {
+    message: string;
+    status: "SUCCESS" | "WARNING" | "CRITICAL_ERROR";
+    startedAt: string;
+    completedAt: string;
+    recoveryId: string;
+    databaseIntegrityPassed: boolean;
+    eventsValidatedCount: number;
+    projectionsRebuiltCount: number;
+    staleLeasesEvictedCount: number;
+    orphansDetectedCount: number;
+    anomalies: {
+        type: "STALE_LEASE" | "ORPHAN_ARTIFACT" | "MISSING_ARTIFACT_FILE" | "CORRUPTED_CHECKPOINT" | "UNCOMMITTED_TASK" | "EVENT_SEQUENCE_GAP" | "INTEGRITY_VIOLATION";
+        timestamp: string;
+        description: string;
+        entityId: string;
+        actionTaken: "REPAIRED" | "EVICTED" | "PRESERVED" | "FLAGGED" | "IGNORED";
+    }[];
+}>;
+export type RecoveryRecord = z.infer<typeof RecoveryRecordSchema>;
+//# sourceMappingURL=recovery-record.d.ts.map

package/dist/recovery/recovery-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-record.d.ts","sourceRoot":"","sources":["../../src/recovery/recovery-record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,yBAAyB,iKAQpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;EAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/recovery/recovery-record.js

@@ -0,0 +1,42 @@
+import { z } from "zod";
+/**
+ * Anomaly classification types detected during recovery.
+ * PRD Part 1 Section 47.
+ */
+export const RecoveryAnomalyTypeSchema = z.enum([
+    "STALE_LEASE",
+    "ORPHAN_ARTIFACT",
+    "MISSING_ARTIFACT_FILE",
+    "CORRUPTED_CHECKPOINT",
+    "UNCOMMITTED_TASK",
+    "EVENT_SEQUENCE_GAP",
+    "INTEGRITY_VIOLATION",
+]);
+/**
+ * An individual anomaly detected during recovery.
+ */
+export const RecoveryAnomalySchema = z.object({
+    type: RecoveryAnomalyTypeSchema,
+    entityId: z.string().min(1),
+    description: z.string().min(1),
+    actionTaken: z.enum(["REPAIRED", "EVICTED", "PRESERVED", "FLAGGED", "IGNORED"]),
+    timestamp: z.string().min(1),
+});
+/**
+ * Structured Recovery Record generated after crash/startup recovery.
+ * PRD Part 1 Section 47.
+ */
+export const RecoveryRecordSchema = z.object({
+    recoveryId: z.string().min(1),
+    startedAt: z.string().min(1),
+    completedAt: z.string().min(1),
+    status: z.enum(["SUCCESS", "WARNING", "CRITICAL_ERROR"]),
+    databaseIntegrityPassed: z.boolean(),
+    eventsValidatedCount: z.number().int().nonnegative(),
+    projectionsRebuiltCount: z.number().int().nonnegative(),
+    staleLeasesEvictedCount: z.number().int().nonnegative(),
+    orphansDetectedCount: z.number().int().nonnegative(),
+    anomalies: z.array(RecoveryAnomalySchema),
+    message: z.string(),
+});
+//# sourceMappingURL=recovery-record.js.map

package/dist/recovery/recovery-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-record.js","sourceRoot":"","sources":["../../src/recovery/recovery-record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,aAAa;IACb,iBAAiB;IACjB,uBAAuB;IACvB,sBAAsB;IACtB,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;CACtB,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,yBAAyB;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC/E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACxD,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE;IACpC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpD,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvD,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC"}

package/dist/remote/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Anantham V2 — Remote Agents & Multi-Node Execution Subsystem
+ * PRD Part 2 Section 140–165 / P7.4
+ */
+export * from "./remote-auth-verifier.js";
+export * from "./node-registry.js";
+export * from "./remote-dispatch-manager.js";
+export * from "./remote-node-client.js";
+export * from "./remote-recovery-reconciler.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/remote/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/remote/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC"}

package/dist/remote/index.js

@@ -0,0 +1,10 @@
+/**
+ * Anantham V2 — Remote Agents & Multi-Node Execution Subsystem
+ * PRD Part 2 Section 140–165 / P7.4
+ */
+export * from "./remote-auth-verifier.js";
+export * from "./node-registry.js";
+export * from "./remote-dispatch-manager.js";
+export * from "./remote-node-client.js";
+export * from "./remote-recovery-reconciler.js";
+//# sourceMappingURL=index.js.map

package/dist/remote/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/remote/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC"}

package/dist/remote/node-registry.d.ts

@@ -0,0 +1,49 @@
+import { type NodeIdentity, type NodeRegistrationRequest, type NodeHeartbeatRequest } from "../domain/node.js";
+import { EventStore } from "../event-state/event-store.js";
+import { NodeRepository } from "../persistence/repositories/node-repository.js";
+import { RemoteAuthVerifier } from "./remote-auth-verifier.js";
+export interface NodeRegistryOptions {
+    nodeRepo: NodeRepository;
+    eventStore?: EventStore;
+    authVerifier?: RemoteAuthVerifier;
+    supportedRuntimeVersions?: string[];
+}
+/**
+ * Remote Node Registry & Health Monitor.
+ * PRD Part 2 Section 140–165.
+ */
+export declare class NodeRegistry {
+    private readonly nodeRepo;
+    private readonly eventStore?;
+    private readonly authVerifier;
+    private readonly supportedRuntimeVersions;
+    constructor(options: NodeRegistryOptions);
+    /**
+     * Register a new remote worker node. Validates version compatibility and records in SQLite WAL.
+     */
+    registerNode(request: NodeRegistrationRequest): NodeIdentity;
+    /**
+     * Process a node heartbeat.
+     */
+    heartbeat(request: NodeHeartbeatRequest): NodeIdentity;
+    /**
+     * Select an eligible online worker node that satisfies required capabilities and project containment.
+     */
+    findEligibleNode(requiredCapabilities: string[] | undefined, projectId: string, executorProfile?: string): NodeIdentity | null;
+    /**
+     * Mark node as DRAINING (no new dispatches will be sent).
+     */
+    drainNode(nodeId: string): void;
+    /**
+     * Quarantine a compromised or malicious node.
+     */
+    quarantineNode(nodeId: string, reason: string): void;
+    /**
+     * Scan for nodes whose heartbeats have stalled and mark them OFFLINE.
+     */
+    detectStalledNodes(staleThresholdMs?: number): string[];
+    getNode(nodeId: string): NodeIdentity | null;
+    listAllNodes(): NodeIdentity[];
+    private emitEvent;
+}
+//# sourceMappingURL=node-registry.d.ts.map

package/dist/remote/node-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-registry.d.ts","sourceRoot":"","sources":["../../src/remote/node-registry.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EAI1B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,gDAAgD,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,cAAc,CAAC;IACzB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;CACrC;AAED;;;GAGG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAW;gBAExC,OAAO,EAAE,mBAAmB;IAOxC;;OAEG;IACI,YAAY,CAAC,OAAO,EAAE,uBAAuB,GAAG,YAAY;IA4CnE;;OAEG;IACI,SAAS,CAAC,OAAO,EAAE,oBAAoB,GAAG,YAAY;IAyB7D;;OAEG;IACI,gBAAgB,CACrB,oBAAoB,EAAE,MAAM,EAAE,YAAK,EACnC,SAAS,EAAE,MAAM,EACjB,eAAe,CAAC,EAAE,MAAM,GACvB,YAAY,GAAG,IAAI;IAgCtB;;OAEG;IACI,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAStC;;OAEG;IACI,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAS3D;;OAEG;IACI,kBAAkB,CAAC,gBAAgB,SAAQ,GAAG,MAAM,EAAE;IAetD,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAI5C,YAAY,IAAI,YAAY,EAAE;IAIrC,OAAO,CAAC,SAAS;CAiBlB"}

package/dist/remote/node-registry.js

@@ -0,0 +1,168 @@
+import { randomUUID } from "node:crypto";
+import { NodeIdentitySchema, NodeRegistrationRequestSchema, NodeHeartbeatRequestSchema, } from "../domain/node.js";
+import { EventTypes } from "../domain/event.js";
+import { RemoteAuthVerifier } from "./remote-auth-verifier.js";
+/**
+ * Remote Node Registry & Health Monitor.
+ * PRD Part 2 Section 140–165.
+ */
+export class NodeRegistry {
+    nodeRepo;
+    eventStore;
+    authVerifier;
+    supportedRuntimeVersions;
+    constructor(options) {
+        this.nodeRepo = options.nodeRepo;
+        this.eventStore = options.eventStore;
+        this.authVerifier = options.authVerifier ?? new RemoteAuthVerifier();
+        this.supportedRuntimeVersions = options.supportedRuntimeVersions ?? ["2.0.0", "2.0.0-alpha.1"];
+    }
+    /**
+     * Register a new remote worker node. Validates version compatibility and records in SQLite WAL.
+     */
+    registerNode(request) {
+        const validated = NodeRegistrationRequestSchema.parse(request);
+        // 1. Version Compatibility Check
+        if (!this.supportedRuntimeVersions.includes(validated.runtimeVersion)) {
+            throw new Error(`Incompatible node runtime version "${validated.runtimeVersion}". Supported versions: ${this.supportedRuntimeVersions.join(", ")}.`);
+        }
+        const now = new Date().toISOString();
+        let authTokenHash;
+        if (validated.authToken) {
+            authTokenHash = this.authVerifier.signPayload(validated.authToken);
+        }
+        const node = NodeIdentitySchema.parse({
+            id: validated.id,
+            nodeVersion: validated.nodeVersion,
+            runtimeVersion: validated.runtimeVersion,
+            capabilities: validated.capabilities || [],
+            executorProfiles: validated.executorProfiles || ["local"],
+            supportedModels: validated.supportedModels || [],
+            supportedTools: validated.supportedTools || [],
+            projectScope: validated.projectScope || ["*"],
+            status: "ONLINE",
+            endpointUrl: validated.endpointUrl,
+            registeredAt: now,
+            lastHeartbeatAt: now,
+            authTokenHash,
+            metadata: validated.metadata || {},
+        });
+        this.nodeRepo.saveNode(node);
+        this.emitEvent(EventTypes.NODE_REGISTERED, node, {
+            capabilities: node.capabilities,
+            projectScope: node.projectScope,
+        });
+        this.emitEvent(EventTypes.NODE_CONNECTED, node, {});
+        return node;
+    }
+    /**
+     * Process a node heartbeat.
+     */
+    heartbeat(request) {
+        const validated = NodeHeartbeatRequestSchema.parse(request);
+        const node = this.nodeRepo.findNodeById(validated.nodeId);
+        if (!node) {
+            throw new Error(`Node "${validated.nodeId}" not found in registry.`);
+        }
+        if (node.status === "QUARANTINED") {
+            throw new Error(`Node "${validated.nodeId}" is quarantined and cannot send heartbeats.`);
+        }
+        const now = new Date().toISOString();
+        const newStatus = validated.status || (node.status === "OFFLINE" ? "ONLINE" : node.status);
+        this.nodeRepo.updateHeartbeat(node.id, now, newStatus);
+        node.lastHeartbeatAt = now;
+        node.status = newStatus;
+        this.emitEvent(EventTypes.NODE_HEARTBEAT, node, {
+            activeDispatches: validated.activeDispatches,
+        });
+        return node;
+    }
+    /**
+     * Select an eligible online worker node that satisfies required capabilities and project containment.
+     */
+    findEligibleNode(requiredCapabilities = [], projectId, executorProfile) {
+        const onlineNodes = this.nodeRepo.listOnlineNodes();
+        for (const node of onlineNodes) {
+            if (node.status !== "ONLINE" && node.status !== "BUSY") {
+                continue;
+            }
+            // Check project isolation
+            if (!this.authVerifier.isProjectAllowed(node.projectScope, projectId)) {
+                continue;
+            }
+            // Check executor profile
+            if (executorProfile && !node.executorProfiles.includes(executorProfile)) {
+                continue;
+            }
+            // Check capability subset match
+            const hasAllCapabilities = requiredCapabilities.every((cap) => node.capabilities.includes(cap));
+            if (!hasAllCapabilities) {
+                continue;
+            }
+            return node;
+        }
+        return null;
+    }
+    /**
+     * Mark node as DRAINING (no new dispatches will be sent).
+     */
+    drainNode(nodeId) {
+        const node = this.nodeRepo.findNodeById(nodeId);
+        if (node) {
+            node.status = "DRAINING";
+            this.nodeRepo.saveNode(node);
+            this.emitEvent(EventTypes.NODE_DRAINING, node, {});
+        }
+    }
+    /**
+     * Quarantine a compromised or malicious node.
+     */
+    quarantineNode(nodeId, reason) {
+        const node = this.nodeRepo.findNodeById(nodeId);
+        if (node) {
+            node.status = "QUARANTINED";
+            this.nodeRepo.saveNode(node);
+            this.emitEvent(EventTypes.NODE_QUARANTINED, node, { reason });
+        }
+    }
+    /**
+     * Scan for nodes whose heartbeats have stalled and mark them OFFLINE.
+     */
+    detectStalledNodes(staleThresholdMs = 30000) {
+        const staleBefore = new Date(Date.now() - staleThresholdMs).toISOString();
+        const stalled = this.nodeRepo.listStalledNodes(staleBefore);
+        const stalledIds = [];
+        for (const node of stalled) {
+            node.status = "OFFLINE";
+            this.nodeRepo.saveNode(node);
+            stalledIds.push(node.id);
+            this.emitEvent(EventTypes.NODE_DISCONNECTED, node, { reason: "Heartbeat timeout" });
+        }
+        return stalledIds;
+    }
+    getNode(nodeId) {
+        return this.nodeRepo.findNodeById(nodeId);
+    }
+    listAllNodes() {
+        return this.nodeRepo.listAllNodes();
+    }
+    emitEvent(type, node, payload) {
+        if (!this.eventStore)
+            return;
+        this.eventStore.append({
+            id: randomUUID(),
+            schemaVersion: 1,
+            actor: "system",
+            timestamp: new Date().toISOString(),
+            type,
+            payload: {
+                nodeId: node.id,
+                nodeVersion: node.nodeVersion,
+                runtimeVersion: node.runtimeVersion,
+                status: node.status,
+                ...payload,
+            },
+        });
+    }
+}
+//# sourceMappingURL=node-registry.js.map

package/dist/remote/node-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-registry.js","sourceRoot":"","sources":["../../src/remote/node-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAIL,kBAAkB,EAClB,6BAA6B,EAC7B,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAS/D;;;GAGG;AACH,MAAM,OAAO,YAAY;IACN,QAAQ,CAAiB;IACzB,UAAU,CAAc;IACxB,YAAY,CAAqB;IACjC,wBAAwB,CAAW;IAEpD,YAAY,OAA4B;QACtC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACrE,IAAI,CAAC,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACjG,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,OAAgC;QAClD,MAAM,SAAS,GAAG,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE/D,iCAAiC;QACjC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CACb,sCAAsC,SAAS,CAAC,cAAc,0BAA0B,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACpI,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,aAAiC,CAAC;QACtC,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;YACxB,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,IAAI,GAAiB,kBAAkB,CAAC,KAAK,CAAC;YAClD,EAAE,EAAE,SAAS,CAAC,EAAE;YAChB,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,EAAE;YAC1C,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC;YACzD,eAAe,EAAE,SAAS,CAAC,eAAe,IAAI,EAAE;YAChD,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,EAAE;YAC9C,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC;YAC7C,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,YAAY,EAAE,GAAG;YACjB,eAAe,EAAE,GAAG;YACpB,aAAa;YACb,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,EAAE;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE7B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,eAAe,EAAE,IAAI,EAAE;YAC/C,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAEpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACI,SAAS,CAAC,OAA6B;QAC5C,MAAM,SAAS,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,SAAS,SAAS,CAAC,MAAM,0BAA0B,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,SAAS,SAAS,CAAC,MAAM,8CAA8C,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3F,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAEvD,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAExB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,EAAE;YAC9C,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;SAC7C,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACI,gBAAgB,CACrB,uBAAiC,EAAE,EACnC,SAAiB,EACjB,eAAwB;QAExB,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;QAEpD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACvD,SAAS;YACX,CAAC;YAED,0BAA0B;YAC1B,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC;gBACtE,SAAS;YACX,CAAC;YAED,yBAAyB;YACzB,IAAI,eAAe,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;gBACxE,SAAS;YACX,CAAC;YAED,gCAAgC;YAChC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5D,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAChC,CAAC;YACF,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACI,SAAS,CAAC,MAAc;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED;;OAEG;IACI,cAAc,CAAC,MAAc,EAAE,MAAc;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED;;OAEG;IACI,kBAAkB,CAAC,gBAAgB,GAAG,KAAK;QAChD,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,iBAAiB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEM,OAAO,CAAC,MAAc;QAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAEM,YAAY;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;IACtC,CAAC;IAEO,SAAS,CAAC,IAAY,EAAE,IAAkB,EAAE,OAAgC;QAClF,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO;QAC7B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YACrB,EAAE,EAAE,UAAU,EAAE;YAChB,aAAa,EAAE,CAAC;YAChB,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI;YACJ,OAAO,EAAE;gBACP,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,OAAO;aACX;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/remote/remote-auth-verifier.d.ts

@@ -0,0 +1,28 @@
+export interface AuthVerifierOptions {
+    secretKey?: string;
+}
+/**
+ * Remote Authentication & Request Signature Verifier.
+ * PRD Part 2 Section 145 & 161.
+ */
+export declare class RemoteAuthVerifier {
+    private readonly secretKey;
+    constructor(options?: AuthVerifierOptions);
+    /**
+     * Deterministic canonical JSON serialization with sorted object keys.
+     */
+    static canonicalize(val: unknown): string;
+    /**
+     * Compute HMAC-SHA256 signature for a payload.
+     */
+    signPayload(payload: unknown): string;
+    /**
+     * Verify HMAC-SHA256 signature using timing-safe comparison.
+     */
+    verifySignature(payload: unknown, signature: string): boolean;
+    /**
+     * Validate project isolation scope.
+     */
+    isProjectAllowed(projectScope: string[], targetProjectId: string): boolean;
+}
+//# sourceMappingURL=remote-auth-verifier.d.ts.map

package/dist/remote/remote-auth-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-auth-verifier.d.ts","sourceRoot":"","sources":["../../src/remote/remote-auth-verifier.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,OAAO,GAAE,mBAAwB;IAI7C;;OAEG;WACW,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM;IAchD;;OAEG;IACI,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM;IAK5C;;OAEG;IACI,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAapE;;OAEG;IACI,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO;CAMlF"}

package/dist/remote/remote-auth-verifier.js

@@ -0,0 +1,56 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+/**
+ * Remote Authentication & Request Signature Verifier.
+ * PRD Part 2 Section 145 & 161.
+ */
+export class RemoteAuthVerifier {
+    secretKey;
+    constructor(options = {}) {
+        this.secretKey = options.secretKey ?? "anantham-default-node-secret-v2";
+    }
+    /**
+     * Deterministic canonical JSON serialization with sorted object keys.
+     */
+    static canonicalize(val) {
+        if (typeof val !== "object" || val === null) {
+            return JSON.stringify(val);
+        }
+        if (Array.isArray(val)) {
+            return "[" + val.map((item) => RemoteAuthVerifier.canonicalize(item)).join(",") + "]";
+        }
+        const keys = Object.keys(val).sort();
+        const entries = keys.map((k) => JSON.stringify(k) + ":" + RemoteAuthVerifier.canonicalize(val[k]));
+        return "{" + entries.join(",") + "}";
+    }
+    /**
+     * Compute HMAC-SHA256 signature for a payload.
+     */
+    signPayload(payload) {
+        const serialized = typeof payload === "string" ? payload : RemoteAuthVerifier.canonicalize(payload);
+        return createHmac("sha256", this.secretKey).update(serialized).digest("hex");
+    }
+    /**
+     * Verify HMAC-SHA256 signature using timing-safe comparison.
+     */
+    verifySignature(payload, signature) {
+        if (!signature)
+            return false;
+        const expected = this.signPayload(payload);
+        const expectedBuf = Buffer.from(expected, "hex");
+        const actualBuf = Buffer.from(signature, "hex");
+        if (expectedBuf.length !== actualBuf.length) {
+            return false;
+        }
+        return timingSafeEqual(expectedBuf, actualBuf);
+    }
+    /**
+     * Validate project isolation scope.
+     */
+    isProjectAllowed(projectScope, targetProjectId) {
+        if (projectScope.includes("*")) {
+            return true;
+        }
+        return projectScope.includes(targetProjectId);
+    }
+}
+//# sourceMappingURL=remote-auth-verifier.js.map

package/dist/remote/remote-auth-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-auth-verifier.js","sourceRoot":"","sources":["../../src/remote/remote-auth-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAM1D;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IACZ,SAAS,CAAS;IAEnC,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,iCAAiC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,YAAY,CAAC,GAAY;QACrC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;QACxF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CACtB,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,kBAAkB,CAAC,YAAY,CAAE,GAA+B,CAAC,CAAC,CAAC,CAAC,CACtG,CAAC;QACF,OAAO,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACvC,CAAC;IAED;;OAEG;IACI,WAAW,CAAC,OAAgB;QACjC,MAAM,UAAU,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACpG,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/E,CAAC;IAED;;OAEG;IACI,eAAe,CAAC,OAAgB,EAAE,SAAiB;QACxD,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAEhD,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACI,gBAAgB,CAAC,YAAsB,EAAE,eAAuB;QACrE,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAChD,CAAC;CACF"}

package/dist/remote/remote-dispatch-manager.d.ts

@@ -0,0 +1,82 @@
+import { type RemoteWorkRequest, type RemoteResult } from "../domain/node.js";
+import { type WorkflowBudget } from "../domain/workflow.js";
+import { EventStore } from "../event-state/event-store.js";
+import { RemoteDispatchRepository } from "../persistence/repositories/remote-dispatch-repository.js";
+import { TaskRepository } from "../persistence/repositories/task-repository.js";
+import { NodeRegistry } from "./node-registry.js";
+import { RemoteAuthVerifier } from "./remote-auth-verifier.js";
+import { TaskClaimManager } from "../tasks/task-claim-manager.js";
+export interface RemoteDispatchManagerOptions {
+    dispatchRepo: RemoteDispatchRepository;
+    taskRepo: TaskRepository;
+    nodeRegistry: NodeRegistry;
+    claimManager: TaskClaimManager;
+    eventStore?: EventStore;
+    authVerifier?: RemoteAuthVerifier;
+}
+export interface DispatchTaskOptions {
+    dispatchId?: string;
+    jobId?: string;
+    taskId: string;
+    workflowId?: string;
+    runId?: string;
+    agentId: string;
+    instanceId?: string;
+    projectId: string;
+    sessionId: string;
+    planId?: string;
+    requiredCapabilities?: string[];
+    executorProfile?: string;
+    budget?: WorkflowBudget;
+    deadline?: string;
+    payload?: unknown;
+    idempotencyKey?: string;
+    targetNodeId?: string;
+}
+/**
+ * Authoritative Central Controller Remote Dispatch Manager.
+ * PRD Part 2 Section 140–165.
+ */
+export declare class RemoteDispatchManager {
+    private readonly dispatchRepo;
+    private readonly taskRepo;
+    private readonly nodeRegistry;
+    private readonly claimManager;
+    private readonly eventStore?;
+    private readonly authVerifier;
+    constructor(options: RemoteDispatchManagerOptions);
+    /**
+     * Dispatch a task to an eligible remote worker node.
+     * Performs idempotency check and acquires exclusive lease with monotonic generation token.
+     */
+    dispatchTask(options: DispatchTaskOptions): RemoteWorkRequest;
+    /**
+     * Handle authenticated remote heartbeat. Fencing tokens are strictly validated.
+     */
+    handleRemoteHeartbeat(req: {
+        dispatchId: string;
+        nodeId: string;
+        leaseId: string;
+        generation: number;
+        agentId: string;
+        instanceId: string;
+    }): {
+        success: boolean;
+        reason?: string;
+    };
+    /**
+     * 7-Step Verification and acceptance pipeline for untrusted remote results.
+     * PRD Part 2 Section 154.
+     */
+    acceptRemoteResult(result: RemoteResult): {
+        success: boolean;
+        reason?: string;
+    };
+    /**
+     * Cancel an active remote dispatch.
+     */
+    cancelDispatch(dispatchId: string, reason?: string): void;
+    getDispatch(dispatchId: string): RemoteWorkRequest | null;
+    private emitEvent;
+}
+//# sourceMappingURL=remote-dispatch-manager.d.ts.map

package/dist/remote/remote-dispatch-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-dispatch-manager.d.ts","sourceRoot":"","sources":["../../src/remote/remote-dispatch-manager.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,YAAY,EAGlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2DAA2D,CAAC;AACrG,OAAO,EAAE,cAAc,EAAE,MAAM,gDAAgD,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAElE,MAAM,WAAW,4BAA4B;IAC3C,YAAY,EAAE,wBAAwB,CAAC;IACvC,QAAQ,EAAE,cAAc,CAAC;IACzB,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,gBAAgB,CAAC;IAC/B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IACxD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAmB;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;gBAEtC,OAAO,EAAE,4BAA4B;IASjD;;;OAGG;IACI,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,iBAAiB;IAiFpE;;OAEG;IACI,qBAAqB,CAAC,GAAG,EAAE;QAChC,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;IAyCzC;;;OAGG;IACI,kBAAkB,CAAC,MAAM,EAAE,YAAY,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;IA6GtF;;OAEG;IACI,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,SAAsB,GAAG,IAAI;IAetE,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAIhE,OAAO,CAAC,SAAS;CAsBlB"}