memeloop 0.2.4 → 0.2.5

package/dist/index.cjs

@@ -1567,12 +1567,13 @@ function createFleetRolloutController(_store, options) {
   const now = options.now ?? (() => /* @__PURE__ */ new Date());
   async function reconcileRollout(request) {
     const rollout = request.resource;
-    const status = rollout.status ?? {};
+    const previousStatus = rollout.status;
+    const status = previousStatus?.observedGeneration !== void 0 && previousStatus.observedGeneration !== rollout.metadata.generation ? void 0 : previousStatus;
     const spec = rollout.spec;
-    if (status.phase === "Completed" || status.phase === "Failed" || status.phase === "RolledBack") {
-      return { ready: true };
+    if (status?.phase === "Completed" || status?.phase === "Failed" || status?.phase === "RolledBack") {
+      return status.observedGeneration === rollout.metadata.generation ? { ready: true } : { status, ready: true };
     }
-    if (!status.phase) {
+    if (!status || status.phase === "Pending") {
       return {
         status: {
           ...status,
@@ -1907,6 +1908,7 @@ function createFleetRolloutController(_store, options) {
       if (result.status) {
         result.status = {
           ...result.status,
+          observedGeneration: request.resource.metadata.generation,
           consumedBudget: sumEvidenceUsage(result.status.evidence)
         };
       }
@@ -3522,6 +3524,81 @@ var init_secretRedaction = __esm({
   }
 });
 
+// src/orchestration/drivers/driverState.ts
+function assertFencedDriverRequestEnvelope(request, options) {
+  assertDriverRequestEnvelope(request, {
+    now: options.now,
+    requireRun: options.requireRun,
+    requireFencing: true,
+    requireCapability: true,
+    expectedMethod: options.expectedMethod
+  });
+  if (options.actorKinds && !options.actorKinds.includes(request.actor.kind)) {
+    throw new OrchestrationError({
+      code: "FORBIDDEN",
+      message: options.forbiddenMessage?.(request.actor.kind) ?? `actor kind '${request.actor.kind}' cannot call ${options.expectedMethod}`,
+      retryable: false
+    });
+  }
+  const epoch = request.fencingEpoch;
+  const current = options.fences.get(request.resource.uid) ?? 0;
+  if (epoch < current) {
+    throw new OrchestrationError({
+      code: "STALE_EPOCH",
+      message: `stale ${options.fenceName} fencing epoch ${epoch}; current epoch is ${current}`,
+      retryable: false
+    });
+  }
+  options.fences.set(request.resource.uid, epoch);
+  return epoch;
+}
+function driverOperationKey(request, operation) {
+  return `${request.resource.uid}:${operation}:${request.idempotencyKey}`;
+}
+function findIdempotentDriverHandle(state, request, operation, driverName) {
+  const key = driverOperationKey(request, operation);
+  const handle = state.idempotency.get(key);
+  if (handle === void 0) return void 0;
+  if (state.idempotencyFingerprints.get(key) !== canonicalDriverValue(request.payload)) {
+    throw new OrchestrationError({
+      code: "CONFLICT",
+      message: `${driverName} ${operation} idempotency key was reused with different input`,
+      retryable: false
+    });
+  }
+  return handle;
+}
+function rememberIdempotentDriverHandle(state, request, operation, handle) {
+  const key = driverOperationKey(request, operation);
+  state.idempotency.set(key, handle);
+  state.idempotencyFingerprints.set(key, canonicalDriverValue(request.payload));
+}
+function getOwnedDriverValue(collection, handle, resourceUid, kind) {
+  const value = collection.get(handle);
+  if (!value) {
+    throw new OrchestrationError({
+      code: "NOT_FOUND",
+      message: `${kind} handle '${handle}' was not found`,
+      retryable: false
+    });
+  }
+  if (value.resourceUid !== resourceUid) {
+    throw new OrchestrationError({
+      code: "FORBIDDEN",
+      message: `${kind} handle '${handle}' belongs to another resource`,
+      retryable: false
+    });
+  }
+  return value;
+}
+var init_driverState = __esm({
+  "src/orchestration/drivers/driverState.ts"() {
+    "use strict";
+    init_errors();
+    init_driverRequest();
+  }
+});
+
 // src/orchestration/drivers/auditTelemetryManagement.ts
 function createFakeAuditTelemetryState() {
   return {
@@ -3535,16 +3612,8 @@ function createFakeAuditTelemetryState() {
 function invalid3(message) {
   throw new OrchestrationError({ code: "INVALID", message, retryable: false });
 }
-function stable(value) {
-  if (value === void 0) return "undefined";
-  if (Array.isArray(value)) return `[${value.map(stable).join(",")}]`;
-  if (value !== null && typeof value === "object") {
-    return `{${Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${stable(item)}`).join(",")}}`;
-  }
-  return JSON.stringify(value) ?? typeof value;
-}
 async function digest(value) {
-  const bytes = new TextEncoder().encode(stable(value));
+  const bytes = new TextEncoder().encode(canonicalDriverValue(value));
   const result = await globalThis.crypto.subtle.digest("SHA-256", bytes);
   return `sha256:${[...new Uint8Array(result)].map((byte) => byte.toString(16).padStart(2, "0")).join("")}`;
 }
@@ -3562,29 +3631,13 @@ function createFakeAuditTelemetryManagementDriver(options = {}) {
   const maxRecordsPerResource = options.maxRecordsPerResource ?? 1e4;
   const maxAttributes = options.maxAttributes ?? 16;
   function validate(request, expectedMethod, actorKinds) {
-    assertDriverRequestEnvelope(request, {
+    assertFencedDriverRequestEnvelope(request, {
       now,
-      requireFencing: true,
-      requireCapability: true,
-      expectedMethod
+      fences: state.fences,
+      expectedMethod,
+      fenceName: "audit",
+      actorKinds
     });
-    if (!actorKinds.includes(request.actor.kind)) {
-      throw new OrchestrationError({
-        code: "FORBIDDEN",
-        message: `actor kind '${request.actor.kind}' cannot call ${expectedMethod}`,
-        retryable: false
-      });
-    }
-    const epoch = request.fencingEpoch;
-    const current = state.fences.get(request.resource.uid) ?? 0;
-    if (epoch < current) {
-      throw new OrchestrationError({
-        code: "STALE_EPOCH",
-        message: `stale audit fencing epoch ${epoch}; current epoch is ${current}`,
-        retryable: false
-      });
-    }
-    state.fences.set(request.resource.uid, epoch);
   }
   function common(request) {
     const policyDigest = requiredString2(request.payload, "policyDigest", 80);
@@ -3614,7 +3667,7 @@ function createFakeAuditTelemetryManagementDriver(options = {}) {
   }
   async function append(request, kind, data) {
     const idempotencyKey = `${request.resource.uid}:${request.method}:${request.idempotencyKey}`;
-    const fingerprint = stable(request.payload);
+    const fingerprint = canonicalDriverValue(request.payload);
     let release;
     const previousAppend = state.appendTail;
     state.appendTail = new Promise((resolve) => {
@@ -3953,6 +4006,7 @@ var init_auditTelemetryManagement = __esm({
     init_errors();
     init_secretRedaction();
     init_driverRequest();
+    init_driverState();
     SHA256 = /^sha256:[a-f0-9]{64}$/;
     FORBIDDEN_ATTRIBUTE = /(?:secret|token|password|credential|authorization|cookie|private[-_]?key)/i;
   }
@@ -6399,24 +6453,6 @@ function requiredString4(payload, field) {
   if (payload === null || typeof payload !== "object" || typeof payload[field] !== "string" || !payload[field]) invalid9(`identity payload '${field}' is required`);
   return payload[field];
 }
-function owned(collection, handle, resourceUid, kind) {
-  const value = collection.get(handle);
-  if (!value) {
-    throw new OrchestrationError({
-      code: "NOT_FOUND",
-      message: `${kind} handle '${handle}' was not found`,
-      retryable: false
-    });
-  }
-  if (value.resourceUid !== resourceUid) {
-    throw new OrchestrationError({
-      code: "FORBIDDEN",
-      message: `${kind} handle '${handle}' belongs to another resource`,
-      retryable: false
-    });
-  }
-  return value;
-}
 function createFakeIdentityAttestationManagementDriver(options = {}) {
   const state = options.state ?? createFakeIdentityAttestationState();
   const now = options.now ?? (() => /* @__PURE__ */ new Date());
@@ -6433,29 +6469,13 @@ function createFakeIdentityAttestationManagementDriver(options = {}) {
     `sha256:${"a".repeat(64)}`
   ];
   function validate(request, expectedMethod, actorKinds) {
-    assertDriverRequestEnvelope(request, {
+    assertFencedDriverRequestEnvelope(request, {
       now,
-      requireFencing: true,
-      requireCapability: true,
-      expectedMethod
+      fences: state.fences,
+      expectedMethod,
+      fenceName: "identity",
+      actorKinds
     });
-    if (!actorKinds.includes(request.actor.kind)) {
-      throw new OrchestrationError({
-        code: "FORBIDDEN",
-        message: `actor kind '${request.actor.kind}' cannot call ${expectedMethod}`,
-        retryable: false
-      });
-    }
-    const fence = request.fencingEpoch;
-    const current = state.fences.get(request.resource.uid) ?? 0;
-    if (fence < current) {
-      throw new OrchestrationError({
-        code: "STALE_EPOCH",
-        message: `stale identity fencing epoch ${fence}; current epoch is ${current}`,
-        retryable: false
-      });
-    }
-    state.fences.set(request.resource.uid, fence);
   }
   function ttl(payload, field, maximum) {
     if (payload === null || typeof payload !== "object") {
@@ -6470,34 +6490,11 @@ function createFakeIdentityAttestationManagementDriver(options = {}) {
     state.nextHandle += 1;
     return handle;
   }
-  function key(request, operation) {
-    return `${request.resource.uid}:${operation}:${request.idempotencyKey}`;
-  }
-  function stable6(value) {
-    if (value === void 0) return "undefined";
-    if (Array.isArray(value)) return `[${value.map(stable6).join(",")}]`;
-    if (value !== null && typeof value === "object") {
-      return `{${Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([name, item]) => `${JSON.stringify(name)}:${stable6(item)}`).join(",")}}`;
-    }
-    return JSON.stringify(value) ?? typeof value;
-  }
   function previous(request, operation) {
-    const idempotency = key(request, operation);
-    const handle = state.idempotency.get(idempotency);
-    if (!handle) return void 0;
-    if (state.idempotencyFingerprints.get(idempotency) !== stable6(request.payload)) {
-      throw new OrchestrationError({
-        code: "CONFLICT",
-        message: `identity ${operation} idempotency key was reused with different input`,
-        retryable: false
-      });
-    }
-    return handle;
+    return findIdempotentDriverHandle(state, request, operation, "identity");
   }
   function remember(request, operation, handle) {
-    const idempotency = key(request, operation);
-    state.idempotency.set(idempotency, handle);
-    state.idempotencyFingerprints.set(idempotency, stable6(request.payload));
+    rememberIdempotentDriverHandle(state, request, operation, handle);
   }
   function assertActiveIdentity(identity) {
     if (identity.revoked) {
@@ -6541,7 +6538,7 @@ function createFakeIdentityAttestationManagementDriver(options = {}) {
       const ttlMs = ttl(request.payload, "ttlMs", maxSessionTtlMs);
       const existing = previous(request, "enroll");
       if (existing) {
-        return structuredClone(owned(
+        return structuredClone(getOwnedDriverValue(
           state.enrollments,
           existing,
           request.resource.uid,
@@ -6565,7 +6562,7 @@ function createFakeIdentityAttestationManagementDriver(options = {}) {
     },
     async challenge(request) {
       validate(request, "identity.challenge", ["controller", "admin"]);
-      const enrollment = owned(
+      const enrollment = getOwnedDriverValue(
         state.enrollments,
         requiredString4(request.payload, "enrollmentHandle"),
         request.resource.uid,
@@ -6578,7 +6575,7 @@ function createFakeIdentityAttestationManagementDriver(options = {}) {
       const ttlMs = ttl(request.payload, "ttlMs", maxChallengeTtlMs);
       const existing = previous(request, "challenge");
       if (existing) {
-        return structuredClone(owned(
+        return structuredClone(getOwnedDriverValue(
           state.challenges,
           existing,
           request.resource.uid,
@@ -6608,13 +6605,13 @@ function createFakeIdentityAttestationManagementDriver(options = {}) {
     },
     async attest(request) {
       validate(request, "identity.attest", ["controller", "verifier"]);
-      const challenge = owned(
+      const challenge = getOwnedDriverValue(
         state.challenges,
         requiredString4(request.payload, "challengeHandle"),
         request.resource.uid,
         "challenge"
       );
-      const enrollment = owned(
+      const enrollment = getOwnedDriverValue(
         state.enrollments,
         challenge.enrollmentHandle,
         request.resource.uid,
@@ -6650,7 +6647,7 @@ function createFakeIdentityAttestationManagementDriver(options = {}) {
       }
       const existing = previous(request, "attest");
       if (existing) {
-        return structuredClone(owned(
+        return structuredClone(getOwnedDriverValue(
           state.identities,
           existing,
           request.resource.uid,
@@ -6685,7 +6682,7 @@ function createFakeIdentityAttestationManagementDriver(options = {}) {
     },
     async issueSession(request) {
       validate(request, "identity.issue-session", ["controller", "admin"]);
-      const identity = owned(
+      const identity = getOwnedDriverValue(
         state.identities,
         requiredString4(request.payload, "identityHandle"),
         request.resource.uid,
@@ -6714,7 +6711,7 @@ function createFakeIdentityAttestationManagementDriver(options = {}) {
       const ttlMs = ttl(request.payload, "ttlMs", maxSessionTtlMs);
       const existing = previous(request, "issue-session");
       if (existing) {
-        return structuredClone(owned(
+        return structuredClone(getOwnedDriverValue(
           state.sessions,
           existing,
           request.resource.uid,
@@ -6738,7 +6735,7 @@ function createFakeIdentityAttestationManagementDriver(options = {}) {
     },
     async rotate(request) {
       validate(request, "identity.rotate", ["controller", "admin"]);
-      const identity = owned(
+      const identity = getOwnedDriverValue(
         state.identities,
         requiredString4(request.payload, "identityHandle"),
         request.resource.uid,
@@ -6755,7 +6752,7 @@ function createFakeIdentityAttestationManagementDriver(options = {}) {
       );
       const existing = previous(request, "rotate");
       if (existing) {
-        return structuredClone(owned(
+        return structuredClone(getOwnedDriverValue(
           state.identities,
           existing,
           request.resource.uid,
@@ -6783,7 +6780,7 @@ function createFakeIdentityAttestationManagementDriver(options = {}) {
     },
     async revoke(request) {
       validate(request, "identity.revoke", ["controller", "admin"]);
-      const identity = owned(
+      const identity = getOwnedDriverValue(
         state.identities,
         requiredString4(request.payload, "identityHandle"),
         request.resource.uid,
@@ -7139,7 +7136,7 @@ var init_identityAttestationManagement = __esm({
   "src/orchestration/drivers/identityAttestationManagement.ts"() {
     "use strict";
     init_errors();
-    init_driverRequest();
+    init_driverState();
   }
 });
 
@@ -8345,12 +8342,12 @@ function createManagedCredentialBrokerAdapter(broker, options) {
           retryable: false
         });
       }
-      const stable6 = options.stableHandleFor?.(request) ?? stableHandle();
-      if (!stable6 || stable6.length > 2048) {
+      const stable = options.stableHandleFor?.(request) ?? stableHandle();
+      if (!stable || stable.length > 2048) {
         invalid11("credential stable handle is empty or too long");
       }
       if (options.handleStore) {
-        const adopted = await options.handleStore.get(stable6);
+        const adopted = await options.handleStore.get(stable);
         if (adopted) {
           const inspection = await broker.inspect(adopted.token);
           const exact = inspection.grantId === request.resource.uid && canonicalDriverValue(inspection.scope) === canonicalDriverValue({
@@ -8370,13 +8367,13 @@ function createManagedCredentialBrokerAdapter(broker, options) {
             });
           }
           const adoptedRecord = {
-            stableHandle: stable6,
+            stableHandle: stable,
             token: adopted.token,
             resourceUid: request.resource.uid,
             targetDriver: request.payload.targetDriver
           };
-          records.set(stable6, adoptedRecord);
-          await rememberIdempotency(key, request, stable6);
+          records.set(stable, adoptedRecord);
+          await rememberIdempotency(key, request, stable);
           return managed(adoptedRecord, inspection);
         }
       }
@@ -8392,7 +8389,7 @@ function createManagedCredentialBrokerAdapter(broker, options) {
         grantId: request.resource.uid
       });
       const record2 = {
-        stableHandle: stable6,
+        stableHandle: stable,
         token: issued.token,
         resourceUid: request.resource.uid,
         targetDriver: request.payload.targetDriver
@@ -9544,13 +9541,6 @@ function createFakeNetworkManagementState() {
     nextHandle: 1
   };
 }
-function stable2(value) {
-  if (Array.isArray(value)) return `[${value.map(stable2).join(",")}]`;
-  if (value !== null && typeof value === "object") {
-    return `{${Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${stable2(item)}`).join(",")}}`;
-  }
-  return JSON.stringify(value) ?? typeof value;
-}
 function invalid12(message) {
   throw new OrchestrationError({ code: "INVALID", message, retryable: false });
 }
@@ -9751,31 +9741,15 @@ function createFakeNetworkManagementDriver(options = {}) {
     ...options.capabilities
   };
   function validate(request, method) {
-    assertDriverRequestEnvelope(request, {
+    return assertFencedDriverRequestEnvelope(request, {
       now,
+      fences: state.fences,
       requireRun: true,
-      requireFencing: true,
-      requireCapability: true,
-      expectedMethod: method
+      expectedMethod: method,
+      fenceName: "network",
+      actorKinds: ["controller", "admin"],
+      forbiddenMessage: () => "network lifecycle requires a controller or admin actor"
     });
-    if (request.actor.kind !== "controller" && request.actor.kind !== "admin") {
-      throw new OrchestrationError({
-        code: "FORBIDDEN",
-        message: "network lifecycle requires a controller or admin actor",
-        retryable: false
-      });
-    }
-    const fence = request.fencingEpoch;
-    const current = state.fences.get(request.resource.uid) ?? 0;
-    if (fence < current) {
-      throw new OrchestrationError({
-        code: "STALE_EPOCH",
-        message: `stale network fencing epoch ${fence}; current epoch is ${current}`,
-        retryable: false
-      });
-    }
-    state.fences.set(request.resource.uid, fence);
-    return fence;
   }
   function nextHandle(prefix) {
     const handle = `${prefix}:${state.nextHandle}`;
@@ -9839,7 +9813,7 @@ function createFakeNetworkManagementDriver(options = {}) {
   }
   function idempotent(request, operation) {
     const key = `${request.resource.uid}:${operation}:${request.idempotencyKey}`;
-    const fingerprint = stable2(request.payload);
+    const fingerprint = canonicalDriverValue(request.payload);
     const existing = state.idempotency.get(key);
     if (existing) {
       if (existing.fingerprint !== fingerprint) {
@@ -9856,7 +9830,7 @@ function createFakeNetworkManagementDriver(options = {}) {
   function remember(request, operation, resultHandle) {
     state.idempotency.set(
       `${request.resource.uid}:${operation}:${request.idempotencyKey}`,
-      { fingerprint: stable2(request.payload), resultHandle }
+      { fingerprint: canonicalDriverValue(request.payload), resultHandle }
     );
   }
   return {
@@ -10151,6 +10125,7 @@ var init_networkManagement = __esm({
     "use strict";
     init_errors();
     init_driverRequest();
+    init_driverState();
     ENFORCEMENT_RANK = {
       none: 0,
       process: 1,
@@ -10940,18 +10915,10 @@ function requiredString6(value, field, maximum = 256) {
   if (!result || result.length > maximum) invalid14(`tool payload '${field}' is invalid`);
   return result;
 }
-function stable3(value) {
-  if (value === void 0) return "undefined";
-  if (Array.isArray(value)) return `[${value.map(stable3).join(",")}]`;
-  if (value !== null && typeof value === "object") {
-    return `{${Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${stable3(item)}`).join(",")}}`;
-  }
-  return JSON.stringify(value) ?? typeof value;
-}
 async function digest3(value) {
   const result = await globalThis.crypto.subtle.digest(
     "SHA-256",
-    new TextEncoder().encode(stable3(value))
+    new TextEncoder().encode(canonicalDriverValue(value))
   );
   return `sha256:${[...new Uint8Array(result)].map((byte) => byte.toString(16).padStart(2, "0")).join("")}`;
 }
@@ -11034,37 +11001,21 @@ function createFakeToolManagementDriver(options = {}) {
         if (!SHA2567.test(descriptor.schemaDigest) || descriptor.schemaDigest !== actualSchemaDigest || !descriptor.name || !descriptor.version || !descriptor.targets.length) invalid14(`tool catalog descriptor '${descriptor.name}' is invalid`);
       }
       return digest3(
-        tools.map(descriptorInput).sort((left, right) => stable3(left).localeCompare(stable3(right)))
+        tools.map(descriptorInput).sort((left, right) => canonicalDriverValue(left).localeCompare(canonicalDriverValue(right)))
       );
     })();
     return catalogDigestPromise;
   }
   function validate(request, expectedMethod, actorKinds = ["controller"]) {
-    assertDriverRequestEnvelope(request, {
+    assertFencedDriverRequestEnvelope(request, {
       now,
-      requireFencing: true,
-      requireCapability: true,
-      expectedMethod
+      fences: state.fences,
+      expectedMethod,
+      fenceName: "tool",
+      actorKinds
     });
-    if (!actorKinds.includes(request.actor.kind)) {
-      throw new OrchestrationError({
-        code: "FORBIDDEN",
-        message: `actor kind '${request.actor.kind}' cannot call ${expectedMethod}`,
-        retryable: false
-      });
-    }
-    const epoch = request.fencingEpoch;
-    const current = state.fences.get(request.resource.uid) ?? 0;
-    if (epoch < current) {
-      throw new OrchestrationError({
-        code: "STALE_EPOCH",
-        message: `stale tool fencing epoch ${epoch}; current epoch is ${current}`,
-        retryable: false
-      });
-    }
-    state.fences.set(request.resource.uid, epoch);
   }
-  function owned2(collection, handle, resourceUid, kind) {
+  function owned(collection, handle, resourceUid, kind) {
     const value = collection.get(handle);
     if (!value) {
       throw new OrchestrationError({
@@ -11089,21 +11040,10 @@ function createFakeToolManagementDriver(options = {}) {
     return `${prefix}:${state.nextHandle++}`;
   }
   function idempotency(request, operation) {
-    const key = `${request.resource.uid}:${operation}:${request.idempotencyKey}`;
-    const previous = state.idempotency.get(key);
-    if (previous && state.idempotencyFingerprints.get(key) !== stable3(request.payload)) {
-      throw new OrchestrationError({
-        code: "CONFLICT",
-        message: `tool ${operation} idempotency key was reused with different input`,
-        retryable: false
-      });
-    }
-    return previous;
+    return findIdempotentDriverHandle(state, request, operation, "tool");
   }
   function remember(request, operation, handle) {
-    const key = `${request.resource.uid}:${operation}:${request.idempotencyKey}`;
-    state.idempotency.set(key, handle);
-    state.idempotencyFingerprints.set(key, stable3(request.payload));
+    rememberIdempotentDriverHandle(state, request, operation, handle);
   }
   async function* defaultExecutor(descriptor, target, arguments_) {
     yield JSON.stringify({ tool: descriptor.name, target, arguments: arguments_ });
@@ -11186,7 +11126,7 @@ function createFakeToolManagementDriver(options = {}) {
       if (request.payload.operationIdempotencyKey && !descriptor.supportsIdempotency) invalid14("tool does not support operation idempotency");
       const previous = idempotency(request, "prepare");
       if (previous) {
-        return structuredClone(owned2(
+        return structuredClone(owned(
           state.preparations,
           previous,
           request.resource.uid,
@@ -11211,7 +11151,7 @@ function createFakeToolManagementDriver(options = {}) {
     },
     async authorize(request) {
       validate(request, "tool.authorize", ["controller", "admin"]);
-      const preparation = owned2(
+      const preparation = owned(
         state.preparations,
         requiredString6(request.payload, "preparationHandle"),
         request.resource.uid,
@@ -11242,7 +11182,7 @@ function createFakeToolManagementDriver(options = {}) {
       }
       const previous = idempotency(request, "authorize");
       if (previous) {
-        return structuredClone(owned2(
+        return structuredClone(owned(
           state.authorizations,
           previous,
           request.resource.uid,
@@ -11264,13 +11204,13 @@ function createFakeToolManagementDriver(options = {}) {
     },
     async *invoke(request, invokeOptions = {}) {
       validate(request, "tool.invoke");
-      const preparation = owned2(
+      const preparation = owned(
         state.preparations,
         requiredString6(request.payload, "preparationHandle"),
         request.resource.uid,
         "tool preparation"
       );
-      const authorization = owned2(
+      const authorization = owned(
         state.authorizations,
         requiredString6(request.payload, "authorizationHandle"),
         request.resource.uid,
@@ -11290,7 +11230,7 @@ function createFakeToolManagementDriver(options = {}) {
       }
       const previous = idempotency(request, "invoke");
       if (previous) {
-        const execution2 = owned2(
+        const execution2 = owned(
           state.executions,
           previous,
           request.resource.uid,
@@ -11395,14 +11335,14 @@ function createFakeToolManagementDriver(options = {}) {
     },
     async reconcileUnknownEffect(request) {
       validate(request, "tool.reconcile-unknown", ["controller", "verifier", "admin"]);
-      const execution = owned2(
+      const execution = owned(
         state.executions,
         requiredString6(request.payload, "executionHandle"),
         request.resource.uid,
         "tool execution"
       );
       if (execution.phase !== "Unknown") return structuredClone(execution);
-      const preparation = owned2(
+      const preparation = owned(
         state.preparations,
         execution.preparationHandle,
         request.resource.uid,
@@ -11428,14 +11368,14 @@ function createFakeToolManagementDriver(options = {}) {
     },
     async collectEvidence(request) {
       validate(request, "tool.collect-evidence", ["controller", "verifier", "admin"]);
-      const execution = owned2(
+      const execution = owned(
         state.executions,
         requiredString6(request.payload, "executionHandle"),
         request.resource.uid,
         "tool execution"
       );
       const descriptor = tool(
-        owned2(
+        owned(
           state.preparations,
           execution.preparationHandle,
           request.resource.uid,
@@ -11445,7 +11385,7 @@ function createFakeToolManagementDriver(options = {}) {
       if (!descriptor?.supportsEvidence) invalid14("tool does not support evidence");
       const previous = idempotency(request, "evidence");
       if (previous) {
-        return structuredClone(owned2(
+        return structuredClone(owned(
           state.evidence,
           previous,
           request.resource.uid,
@@ -11466,14 +11406,14 @@ function createFakeToolManagementDriver(options = {}) {
     },
     async cleanup(request) {
       validate(request, "tool.cleanup");
-      const preparation = owned2(
+      const preparation = owned(
         state.preparations,
         requiredString6(request.payload, "preparationHandle"),
         request.resource.uid,
         "tool preparation"
       );
       if (request.payload.executionHandle) {
-        const execution = owned2(
+        const execution = owned(
           state.executions,
           request.payload.executionHandle,
           request.resource.uid,
@@ -11632,7 +11572,7 @@ function createToolManagementConformanceSuite(options) {
             { executionHandle: first[0].executionHandle },
             "inspect-invoke"
           ));
-          if (!first.at(-1)?.final || stable3(first) !== stable3(replay) || execution?.phase !== "Completed") throw new Error("tool streaming or retry did not converge");
+          if (!first.at(-1)?.final || canonicalDriverValue(first) !== canonicalDriverValue(replay) || execution?.phase !== "Completed") throw new Error("tool streaming or retry did not converge");
         }
       },
       {
@@ -11804,6 +11744,7 @@ var init_toolManagement = __esm({
     import__4 = require("ajv/dist/2020.js");
     init_errors();
     init_driverRequest();
+    init_driverState();
     SHA2567 = /^sha256:[a-f0-9]{64}$/;
   }
 });
@@ -12470,7 +12411,7 @@ function createManagedWorkerIdentityAdapter(options) {
     fences.set(request.resource.uid, fence);
     return resource;
   }
-  function owned2(values, handle, resourceUid, kind) {
+  function owned(values, handle, resourceUid, kind) {
     const value = values.get(handle);
     if (!value) {
       throw new OrchestrationError({
@@ -12540,7 +12481,7 @@ function createManagedWorkerIdentityAdapter(options) {
         "channelBinding",
         "ttlMs"
       ]);
-      const enrollment = owned2(
+      const enrollment = owned(
         enrollments,
         requireBoundedString2(
           request.payload.enrollmentHandle,
@@ -12589,7 +12530,7 @@ function createManagedWorkerIdentityAdapter(options) {
         ["format", "evidenceDigest"],
         "attestation"
       );
-      const challenge = owned2(
+      const challenge = owned(
         challenges,
         requireBoundedString2(
           request.payload.challengeHandle,
@@ -12647,7 +12588,7 @@ function createManagedWorkerIdentityAdapter(options) {
         "channelBinding",
         "ttlMs"
       ]);
-      const identity = owned2(
+      const identity = owned(
         identities,
         requireBoundedString2(request.payload.identityHandle, "identityHandle"),
         resource.metadata.uid,
@@ -12712,7 +12653,7 @@ function createManagedWorkerIdentityAdapter(options) {
         "identityHandle",
         "reason"
       ]);
-      const identity = owned2(
+      const identity = owned(
         identities,
         requireBoundedString2(request.payload.identityHandle, "identityHandle"),
         resource.metadata.uid,
@@ -13327,14 +13268,6 @@ function createFakeModelManagementState() {
     nextHandle: 1
   };
 }
-function stable4(value) {
-  if (value === void 0) return "undefined";
-  if (Array.isArray(value)) return `[${value.map(stable4).join(",")}]`;
-  if (value !== null && typeof value === "object") {
-    return `{${Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${stable4(item)}`).join(",")}}`;
-  }
-  return JSON.stringify(value) ?? typeof value;
-}
 function invalid17(message) {
   throw new OrchestrationError({ code: "INVALID", message, retryable: false });
 }
@@ -13393,31 +13326,15 @@ function createFakeModelManagementDriver(options = {}) {
   };
   const active = /* @__PURE__ */ new Map();
   function validate(request, method) {
-    assertDriverRequestEnvelope(request, {
+    return assertFencedDriverRequestEnvelope(request, {
       now,
+      fences: state.fences,
       requireRun: true,
-      requireFencing: true,
-      requireCapability: true,
-      expectedMethod: method
+      expectedMethod: method,
+      fenceName: "model",
+      actorKinds: ["controller", "admin"],
+      forbiddenMessage: () => "model provider access requires a controller or admin actor"
     });
-    if (request.actor.kind !== "controller" && request.actor.kind !== "admin") {
-      throw new OrchestrationError({
-        code: "FORBIDDEN",
-        message: "model provider access requires a controller or admin actor",
-        retryable: false
-      });
-    }
-    const fence = request.fencingEpoch;
-    const current = state.fences.get(request.resource.uid) ?? 0;
-    if (fence < current) {
-      throw new OrchestrationError({
-        code: "STALE_EPOCH",
-        message: `stale model fencing epoch ${fence}; current epoch is ${current}`,
-        retryable: false
-      });
-    }
-    state.fences.set(request.resource.uid, fence);
-    return fence;
   }
   function modelFor(payload) {
     assertOnlyFields2(
@@ -13544,7 +13461,7 @@ function createFakeModelManagementDriver(options = {}) {
       const fence = validate(request, "model.generate");
       const model = modelFor(request.payload);
       await authorize(request, model);
-      const inputFingerprint = stable4({
+      const inputFingerprint = canonicalDriverValue({
         payload: request.payload,
         run: request.run,
         session: request.session,
@@ -13783,7 +13700,9 @@ function createModelManagementConformanceSuite(options) {
           );
           const first = await collect(driver, request);
           const second = await collect(driver, request);
-          if (stable4(first) !== stable4(second)) throw new Error("model generation did not replay");
+          if (canonicalDriverValue(first) !== canonicalDriverValue(second)) {
+            throw new Error("model generation did not replay");
+          }
           if (first.at(-1)?.type !== "done") throw new Error("model stream did not complete");
           let driftRejected = false;
           try {
@@ -13899,6 +13818,7 @@ var init_modelManagement = __esm({
     "use strict";
     init_errors();
     init_driverRequest();
+    init_driverState();
     init_modelProviderDriver();
     SHA2568 = /^sha256:[a-f0-9]{64}$/;
   }
@@ -13921,16 +13841,8 @@ function requiredString7(value, field) {
   if (value === null || typeof value !== "object" || typeof value[field] !== "string" || !value[field]) invalid18(`policy payload '${field}' is required`);
   return value[field];
 }
-function stable5(value) {
-  if (value === void 0) return "undefined";
-  if (Array.isArray(value)) return `[${value.map(stable5).join(",")}]`;
-  if (value !== null && typeof value === "object") {
-    return `{${Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${stable5(item)}`).join(",")}}`;
-  }
-  return JSON.stringify(value) ?? typeof value;
-}
 async function digest6(value) {
-  const bytes = new TextEncoder().encode(stable5(value));
+  const bytes = new TextEncoder().encode(canonicalDriverValue(value));
   const result = await globalThis.crypto.subtle.digest("SHA-256", bytes);
   return `sha256:${[...new Uint8Array(result)].map((byte) => byte.toString(16).padStart(2, "0")).join("")}`;
 }
@@ -13951,34 +13863,18 @@ function createFakePolicyApprovalManagementDriver(options = {}) {
     ]
   );
   function validate(request, expectedMethod, actorKinds) {
-    assertDriverRequestEnvelope(request, {
+    assertFencedDriverRequestEnvelope(request, {
       now,
-      requireFencing: true,
-      requireCapability: true,
-      expectedMethod
+      fences: state.fences,
+      expectedMethod,
+      fenceName: "policy",
+      actorKinds
     });
-    if (!actorKinds.includes(request.actor.kind)) {
-      throw new OrchestrationError({
-        code: "FORBIDDEN",
-        message: `actor kind '${request.actor.kind}' cannot call ${expectedMethod}`,
-        retryable: false
-      });
-    }
-    const epoch = request.fencingEpoch;
-    const current = state.fences.get(request.resource.uid) ?? 0;
-    if (epoch < current) {
-      throw new OrchestrationError({
-        code: "STALE_EPOCH",
-        message: `stale policy fencing epoch ${epoch}; current epoch is ${current}`,
-        retryable: false
-      });
-    }
-    state.fences.set(request.resource.uid, epoch);
   }
   function assertPolicyDigest(value) {
     if (!SHA2569.test(value)) invalid18("policyDigest must be a canonical sha256 digest");
   }
-  function owned2(handle, resourceUid) {
+  function owned(handle, resourceUid) {
     const decision = state.decisions.get(handle);
     if (!decision) {
       throw new OrchestrationError({
@@ -13998,18 +13894,14 @@ function createFakePolicyApprovalManagementDriver(options = {}) {
   }
   async function decide(request, operation, kind, outcome, policyDigest, reasons, obligations = [], approval) {
     assertPolicyDigest(policyDigest);
-    const key = `${request.resource.uid}:${operation}:${request.idempotencyKey}`;
-    const fingerprint = stable5(request.payload);
-    const previousHandle = state.idempotency.get(key);
+    const previousHandle = findIdempotentDriverHandle(
+      state,
+      request,
+      operation,
+      "policy"
+    );
     if (previousHandle) {
-      if (state.idempotencyFingerprints.get(key) !== fingerprint) {
-        throw new OrchestrationError({
-          code: "CONFLICT",
-          message: `policy ${operation} idempotency key was reused with different input`,
-          retryable: false
-        });
-      }
-      return structuredClone(owned2(previousHandle, request.resource.uid));
+      return structuredClone(owned(previousHandle, request.resource.uid));
     }
     const decision = {
       decisionHandle: `policy-decision:${state.nextHandle++}`,
@@ -14025,8 +13917,12 @@ function createFakePolicyApprovalManagementDriver(options = {}) {
       approval
     };
     state.decisions.set(decision.decisionHandle, decision);
-    state.idempotency.set(key, decision.decisionHandle);
-    state.idempotencyFingerprints.set(key, fingerprint);
+    rememberIdempotentDriverHandle(
+      state,
+      request,
+      operation,
+      decision.decisionHandle
+    );
     return structuredClone(decision);
   }
   return {
@@ -14099,7 +13995,7 @@ function createFakePolicyApprovalManagementDriver(options = {}) {
       }
       let approval;
       if (request.payload.approvalDecisionHandle) {
-        approval = owned2(request.payload.approvalDecisionHandle, request.resource.uid);
+        approval = owned(request.payload.approvalDecisionHandle, request.resource.uid);
       }
       const needsApproval = effect !== "read";
       const approvalValid = !needsApproval || approval?.kind === "approval" && approval.outcome === "allow" && approval.policyDigest === policyDigest && approval.approval?.subjectDigest === operationDigest && Date.parse(approval.approval.expiresAt) > now().getTime();
@@ -14147,7 +14043,7 @@ function createFakePolicyApprovalManagementDriver(options = {}) {
       if (!["allow", "deny"].includes(request.payload.outcome)) {
         invalid18("approval outcome must be allow or deny");
       }
-      const decision = owned2(handle, request.resource.uid);
+      const decision = owned(handle, request.resource.uid);
       if (decision.kind !== "approval") invalid18("decision is not an approval");
       if (decision.approval && Date.parse(decision.approval.expiresAt) <= now().getTime()) {
         decision.outcome = "deny";
@@ -14210,7 +14106,7 @@ function createFakePolicyApprovalManagementDriver(options = {}) {
         "verifier",
         "admin"
       ]);
-      const decision = owned2(
+      const decision = owned(
         requiredString7(request.payload, "decisionHandle"),
         request.resource.uid
       );
@@ -14443,6 +14339,7 @@ var init_policyApprovalManagement = __esm({
     "use strict";
     init_errors();
     init_driverRequest();
+    init_driverState();
     SHA2569 = /^sha256:[a-f0-9]{64}$/;
     TRUST_RANK3 = {
       quarantine: 0,
@@ -14461,6 +14358,7 @@ function createFakeStorageManagementState() {
     stages: /* @__PURE__ */ new Map(),
     publications: /* @__PURE__ */ new Map(),
     idempotency: /* @__PURE__ */ new Map(),
+    idempotencyFingerprints: /* @__PURE__ */ new Map(),
     fences: /* @__PURE__ */ new Map(),
     nextHandle: 1
   };
@@ -14488,32 +14386,18 @@ function createFakeStorageManagementDriver(options = {}) {
   const state = options.state ?? createFakeStorageManagementState();
   const now = options.now ?? (() => /* @__PURE__ */ new Date());
   function validate(request, expectedMethod) {
-    assertDriverRequestEnvelope(request, {
+    return assertFencedDriverRequestEnvelope(request, {
       now,
-      requireFencing: true,
-      requireCapability: true,
-      expectedMethod
+      fences: state.fences,
+      expectedMethod,
+      fenceName: "storage"
     });
-    const fence = request.fencingEpoch;
-    const current = state.fences.get(request.resource.uid) ?? 0;
-    if (fence < current) {
-      throw new OrchestrationError({
-        code: "STALE_EPOCH",
-        message: `stale storage fencing epoch ${fence}; current epoch is ${current}`,
-        retryable: false
-      });
-    }
-    state.fences.set(request.resource.uid, fence);
-    return fence;
   }
   function nextHandle(prefix) {
     const handle = `${prefix}:${state.nextHandle}`;
     state.nextHandle += 1;
     return handle;
   }
-  function operationKey2(request, operation) {
-    return `${request.resource.uid}:${operation}:${request.idempotencyKey}`;
-  }
   function getVolume(handle, resourceUid) {
     const record2 = state.volumes.get(handle);
     if (!record2 || record2.volume.phase === "Deleted") {
@@ -14532,27 +14416,8 @@ function createFakeStorageManagementDriver(options = {}) {
     }
     return record2;
   }
-  function owned2(collection, handle, resourceUid, kind) {
-    const value = collection.get(handle);
-    if (!value) {
-      throw new OrchestrationError({
-        code: "NOT_FOUND",
-        message: `${kind} handle '${handle}' was not found`,
-        retryable: false
-      });
-    }
-    if (value.resourceUid !== resourceUid) {
-      throw new OrchestrationError({
-        code: "FORBIDDEN",
-        message: `${kind} handle '${handle}' belongs to another resource`,
-        retryable: false
-      });
-    }
-    return value;
-  }
   function createVolume(request, capacityBytes, accessMode, replicaCount, operation) {
-    const key = operationKey2(request, operation);
-    const existing = state.idempotency.get(key);
+    const existing = findIdempotentDriverHandle(state, request, operation, "storage");
     if (existing) return getVolume(existing, request.resource.uid).volume;
     const volume = {
       volumeHandle: nextHandle("volume"),
@@ -14563,7 +14428,7 @@ function createFakeStorageManagementDriver(options = {}) {
       phase: "Available"
     };
     state.volumes.set(volume.volumeHandle, { volume, desiredReplicas: replicaCount });
-    state.idempotency.set(key, volume.volumeHandle);
+    rememberIdempotentDriverHandle(state, request, operation, volume.volumeHandle);
     return volume;
   }
   return {
@@ -14619,9 +14484,10 @@ function createFakeStorageManagementDriver(options = {}) {
       validate(request, "storage.snapshot");
       const volumeHandle = requiredString8(request.payload, "volumeHandle");
       getVolume(volumeHandle, request.resource.uid);
-      const key = operationKey2(request, "snapshot");
-      const existing = state.idempotency.get(key);
-      if (existing) return owned2(state.snapshots, existing, request.resource.uid, "snapshot");
+      const existing = findIdempotentDriverHandle(state, request, "snapshot", "storage");
+      if (existing) {
+        return getOwnedDriverValue(state.snapshots, existing, request.resource.uid, "snapshot");
+      }
       const snapshot = {
         snapshotHandle: nextHandle("snapshot"),
         volumeHandle,
@@ -14629,12 +14495,12 @@ function createFakeStorageManagementDriver(options = {}) {
         createdAt: now().toISOString()
       };
       state.snapshots.set(snapshot.snapshotHandle, snapshot);
-      state.idempotency.set(key, snapshot.snapshotHandle);
+      rememberIdempotentDriverHandle(state, request, "snapshot", snapshot.snapshotHandle);
       return snapshot;
     },
     async restoreSnapshot(request) {
       validate(request, "storage.restore");
-      const snapshot = owned2(
+      const snapshot = getOwnedDriverValue(
         state.snapshots,
         requiredString8(request.payload, "snapshotHandle"),
         request.resource.uid,
@@ -14697,9 +14563,10 @@ function createFakeStorageManagementDriver(options = {}) {
       validate(request, "storage.backup");
       const volumeHandle = requiredString8(request.payload, "volumeHandle");
       getVolume(volumeHandle, request.resource.uid);
-      const key = operationKey2(request, "backup");
-      const existing = state.idempotency.get(key);
-      if (existing) return owned2(state.backups, existing, request.resource.uid, "backup");
+      const existing = findIdempotentDriverHandle(state, request, "backup", "storage");
+      if (existing) {
+        return getOwnedDriverValue(state.backups, existing, request.resource.uid, "backup");
+      }
       const backup = {
         backupHandle: nextHandle("backup"),
         volumeHandle,
@@ -14707,7 +14574,7 @@ function createFakeStorageManagementDriver(options = {}) {
         createdAt: now().toISOString()
       };
       state.backups.set(backup.backupHandle, backup);
-      state.idempotency.set(key, backup.backupHandle);
+      rememberIdempotentDriverHandle(state, request, "backup", backup.backupHandle);
       return backup;
     },
     async stage(request) {
@@ -14715,9 +14582,10 @@ function createFakeStorageManagementDriver(options = {}) {
       const volumeHandle = requiredString8(request.payload, "volumeHandle");
       getVolume(volumeHandle, request.resource.uid);
       const nodeId = requiredString8(request.payload, "nodeId");
-      const key = operationKey2(request, "stage");
-      const existing = state.idempotency.get(key);
-      if (existing) return owned2(state.stages, existing, request.resource.uid, "stage");
+      const existing = findIdempotentDriverHandle(state, request, "stage", "storage");
+      if (existing) {
+        return getOwnedDriverValue(state.stages, existing, request.resource.uid, "stage");
+      }
       const stage = {
         stageHandle: nextHandle("stage"),
         volumeHandle,
@@ -14725,12 +14593,12 @@ function createFakeStorageManagementDriver(options = {}) {
         nodeId
       };
       state.stages.set(stage.stageHandle, stage);
-      state.idempotency.set(key, stage.stageHandle);
+      rememberIdempotentDriverHandle(state, request, "stage", stage.stageHandle);
       return stage;
     },
     async publish(request) {
       validate(request, "storage.publish");
-      const stage = owned2(
+      const stage = getOwnedDriverValue(
         state.stages,
         requiredString8(request.payload, "stageHandle"),
         request.resource.uid,
@@ -14739,10 +14607,14 @@ function createFakeStorageManagementDriver(options = {}) {
       getVolume(stage.volumeHandle, request.resource.uid);
       const workloadUid = requiredString8(request.payload, "workloadUid");
       if (typeof request.payload.readOnly !== "boolean") invalid19("publish readOnly is required");
-      const key = operationKey2(request, "publish");
-      const existing = state.idempotency.get(key);
+      const existing = findIdempotentDriverHandle(state, request, "publish", "storage");
       if (existing) {
-        return owned2(state.publications, existing, request.resource.uid, "publication");
+        return getOwnedDriverValue(
+          state.publications,
+          existing,
+          request.resource.uid,
+          "publication"
+        );
       }
       const publication = {
         publishHandle: nextHandle("publication"),
@@ -14752,7 +14624,7 @@ function createFakeStorageManagementDriver(options = {}) {
         readOnly: request.payload.readOnly
       };
       state.publications.set(publication.publishHandle, publication);
-      state.idempotency.set(key, publication.publishHandle);
+      rememberIdempotentDriverHandle(state, request, "publish", publication.publishHandle);
       return publication;
     },
     async unpublish(request) {
@@ -14760,7 +14632,7 @@ function createFakeStorageManagementDriver(options = {}) {
       const handle = requiredString8(request.payload, "publishHandle");
       const publication = state.publications.get(handle);
       if (!publication) return;
-      owned2(state.publications, handle, request.resource.uid, "publication");
+      getOwnedDriverValue(state.publications, handle, request.resource.uid, "publication");
       state.publications.delete(handle);
     },
     async unstage(request) {
@@ -14768,7 +14640,7 @@ function createFakeStorageManagementDriver(options = {}) {
       const handle = requiredString8(request.payload, "stageHandle");
       const stage = state.stages.get(handle);
       if (!stage) return;
-      owned2(state.stages, handle, request.resource.uid, "stage");
+      getOwnedDriverValue(state.stages, handle, request.resource.uid, "stage");
       if ([...state.publications.values()].some(
         (publication) => publication.stageHandle === handle
       )) {
@@ -14782,13 +14654,13 @@ function createFakeStorageManagementDriver(options = {}) {
     },
     async getStats(request) {
       validate(request, "storage.stats");
-      const publication = owned2(
+      const publication = getOwnedDriverValue(
         state.publications,
         requiredString8(request.payload, "publishHandle"),
         request.resource.uid,
         "publication"
       );
-      const stage = owned2(
+      const stage = getOwnedDriverValue(
         state.stages,
         publication.stageHandle,
         request.resource.uid,
@@ -14990,7 +14862,7 @@ var init_storageManagement = __esm({
   "src/orchestration/drivers/storageManagement.ts"() {
     "use strict";
     init_errors();
-    init_driverRequest();
+    init_driverState();
   }
 });
 
@@ -17773,6 +17645,9 @@ function resolveMaxIterations(context) {
   const configured = context.agentToolLoop?.maxIterations;
   return configured != null && configured > 0 ? configured : DEFAULT_MAX_ITERATIONS;
 }
+function resolveLocalNodeId(context, input) {
+  return context.localNodeId?.trim() || input?.userMessage?.originNodeId?.trim() || "local";
+}
 function pluginToolCallSignature(calls) {
   return calls.map((call) => `${call.toolId}:${JSON.stringify(call.parameters)}`).join("|");
 }
@@ -17794,7 +17669,7 @@ async function blockRepeatedPluginToolCalls(context, input, state, calls, hookCo
   const toolMessage = createChatMessage({
     messageId: `${input.conversationId}:t:doom-loop:${state.iteration}:${Date.now().toString(36)}`,
     conversationId: input.conversationId,
-    originNodeId: "local",
+    originNodeId: resolveLocalNodeId(context, input),
     lamportClock,
     role: "tool",
     parts: [{
@@ -17839,11 +17714,12 @@ async function startAgentToolLoopTurn(context, input, state) {
     input.conversationId
   );
   const hostUserMessage = input.userMessage;
+  const localNodeId = resolveLocalNodeId(context, input);
   const userMessage = context.normalizeMessage?.({
     ...hostUserMessage,
     messageId: hostUserMessage?.messageId ?? `${input.conversationId}:${now.toString(36)}`,
     conversationId: input.conversationId,
-    originNodeId: hostUserMessage?.originNodeId ?? "local",
+    originNodeId: hostUserMessage?.originNodeId ?? localNodeId,
     timestamp: hostUserMessage?.timestamp ?? now,
     lamportClock: hostUserMessage?.lamportClock ?? lamportClock,
     role: "user",
@@ -17852,7 +17728,7 @@ async function startAgentToolLoopTurn(context, input, state) {
     ...hostUserMessage,
     messageId: hostUserMessage?.messageId ?? `${input.conversationId}:${now.toString(36)}`,
     conversationId: input.conversationId,
-    originNodeId: hostUserMessage?.originNodeId ?? "local",
+    originNodeId: hostUserMessage?.originNodeId ?? localNodeId,
     timestamp: hostUserMessage?.timestamp ?? now,
     lamportClock: hostUserMessage?.lamportClock ?? lamportClock,
     role: "user",
@@ -17963,10 +17839,11 @@ async function* runAgentToolLoopIteration(context, input, state) {
     context.storage,
     input.conversationId
   );
+  const localNodeId = resolveLocalNodeId(context, input);
   const buildAssistantMessage = (content) => context.normalizeMessage?.({
     messageId: assistantMessageId,
     conversationId: input.conversationId,
-    originNodeId: "local",
+    originNodeId: localNodeId,
     timestamp: Date.now(),
     lamportClock: assistantLamportClock,
     role: "assistant",
@@ -17974,7 +17851,7 @@ async function* runAgentToolLoopIteration(context, input, state) {
   }) ?? {
     messageId: assistantMessageId,
     conversationId: input.conversationId,
-    originNodeId: "local",
+    originNodeId: localNodeId,
     timestamp: Date.now(),
     lamportClock: assistantLamportClock,
     role: "assistant",
@@ -18192,6 +18069,44 @@ var init_directRunner = __esm({
   }
 });
 
+// src/loopAPI/scriptRuntime.ts
+function messageStep(message) {
+  return { type: "message", data: message };
+}
+function createScriptStepEmitter(emittedSteps, onEmit) {
+  return (step) => {
+    emittedSteps.push(step);
+    onEmit?.(step);
+  };
+}
+function isAsyncIterable3(value) {
+  return Boolean(value && typeof value === "object" && Symbol.asyncIterator in value);
+}
+async function* drainEmittedSteps(steps) {
+  while (steps.length > 0) {
+    const step = steps.shift();
+    if (step) yield step;
+  }
+}
+async function* yieldScriptResult(result, emittedSteps) {
+  yield* drainEmittedSteps(emittedSteps);
+  if (isAsyncIterable3(result)) {
+    yield* result;
+    yield* drainEmittedSteps(emittedSteps);
+  } else if (typeof result === "string") {
+    yield messageStep(result);
+  } else if (Array.isArray(result)) {
+    yield* result;
+  } else if (result) {
+    yield result;
+  }
+}
+var init_scriptRuntime2 = __esm({
+  "src/loopAPI/scriptRuntime.ts"() {
+    "use strict";
+  }
+});
+
 // src/loops/agent-tool-loop/builtinLoopSources.ts
 function getBuiltinAgentToolLoopSource(id) {
   return builtinAgentToolLoopSources[id];
@@ -18410,6 +18325,18 @@ var init_scriptValidation = __esm({
 });
 
 // src/loopAPI/scriptLoader.ts
+function createBuiltinAgentLoopScriptLoader(loaderOptions) {
+  let builtinDigestsRegistered;
+  return async (scriptReference, policy = {}) => {
+    builtinDigestsRegistered ??= registerBuiltinScriptSources(loaderOptions.sources);
+    await builtinDigestsRegistered;
+    return loadAgentLoopScript(scriptReference, {
+      ...policy,
+      getBuiltinScriptSource: loaderOptions.getBuiltinScriptSource,
+      scriptType: loaderOptions.scriptType
+    });
+  };
+}
 function isLoadedScriptFunction(value) {
   return typeof value === "function";
 }
@@ -18591,40 +18518,24 @@ var init_scriptLoader = __esm({
 });
 
 // src/loopAPI/agent-tool-loop/scriptLoader.ts
-function ensureBuiltinDigestsRegistered() {
-  builtinDigestsRegistered ??= registerBuiltinScriptSources(builtinAgentToolLoopSources);
-  return builtinDigestsRegistered;
-}
 async function loadAgentToolLoopScript(scriptReference, options = {}) {
-  await ensureBuiltinDigestsRegistered();
-  return loadAgentLoopScript(scriptReference, {
-    ...options,
-    getBuiltinScriptSource: getBuiltinAgentToolLoopSource,
-    scriptType: "AgentToolLoop script"
-  });
+  return loadScript(scriptReference, options);
 }
-var builtinDigestsRegistered;
+var loadScript;
 var init_scriptLoader2 = __esm({
   "src/loopAPI/agent-tool-loop/scriptLoader.ts"() {
     "use strict";
     init_builtinLoopSources2();
     init_scriptLoader();
+    loadScript = createBuiltinAgentLoopScriptLoader({
+      sources: builtinAgentToolLoopSources,
+      getBuiltinScriptSource: getBuiltinAgentToolLoopSource,
+      scriptType: "AgentToolLoop script"
+    });
   }
 });
 
 // src/loopAPI/agent-tool-loop/scriptRunner.ts
-function isAsyncIterable3(value) {
-  return Boolean(value && typeof value === "object" && Symbol.asyncIterator in value);
-}
-function messageStep(message) {
-  return { type: "message", data: message };
-}
-async function* drainEmittedSteps(steps) {
-  while (steps.length > 0) {
-    const step = steps.shift();
-    if (step) yield step;
-  }
-}
 function asAgentToolLoopContext(rawContext) {
   return rawContext;
 }
@@ -18636,10 +18547,7 @@ async function resolveAgentToolLoopScript(context) {
   return loadAgentToolLoopScript(scriptReference, context.scriptPolicy);
 }
 function createAgentToolLoopScriptContext(input, context, emittedSteps) {
-  const emit = (step) => {
-    emittedSteps.push(step);
-    context.runtime?.emit?.(step);
-  };
+  const emit = createScriptStepEmitter(emittedSteps, context.runtime?.emit);
   return {
     input,
     context,
@@ -18662,21 +18570,12 @@ function createAgentToolLoopScriptContext(input, context, emittedSteps) {
 async function* runAgentToolLoopScript(script, input, context) {
   const emittedSteps = [];
   const result = await script(createAgentToolLoopScriptContext(input, context, emittedSteps));
-  yield* drainEmittedSteps(emittedSteps);
-  if (isAsyncIterable3(result)) {
-    yield* result;
-    yield* drainEmittedSteps(emittedSteps);
-  } else if (typeof result === "string") {
-    yield messageStep(result);
-  } else if (Array.isArray(result)) {
-    yield* result;
-  } else if (result) {
-    yield result;
-  }
+  yield* yieldScriptResult(result, emittedSteps);
 }
 var init_scriptRunner = __esm({
   "src/loopAPI/agent-tool-loop/scriptRunner.ts"() {
     "use strict";
+    init_scriptRuntime2();
     init_scriptLoader2();
     init_turnPrimitives();
   }
@@ -23926,6 +23825,16 @@ function createWorkerProtocolGateway(options) {
   const rateLimit = options.maxRequestsPerMinute ?? DEFAULT_RATE_PER_MINUTE2;
   const maxResponseBytes = options.maxResponseBytes ?? DEFAULT_MAX_RESPONSE_BYTES;
   const requestLog = /* @__PURE__ */ new Map();
+  let nextRequestLogSweepAt = 0;
+  function pruneInactiveRequestLogs(windowStart, receivedAtMs) {
+    if (receivedAtMs < nextRequestLogSweepAt) return;
+    for (const [sessionName, timestamps] of requestLog) {
+      if (timestamps.length === 0 || timestamps[timestamps.length - 1] < windowStart) {
+        requestLog.delete(sessionName);
+      }
+    }
+    nextRequestLogSweepAt = receivedAtMs + 6e4;
+  }
   async function audit(request, accepted, receivedAt, code) {
     try {
       await options.onAudit?.({
@@ -23984,6 +23893,7 @@ function createWorkerProtocolGateway(options) {
           throw protocolError("CONFLICT", "worker request sequence or nonce was already consumed");
         }
         const windowStart = received.getTime() - 6e4;
+        pruneInactiveRequestLogs(windowStart, received.getTime());
         const log = (requestLog.get(session.name) ?? []).filter((time) => time >= windowStart);
         if (log.length >= rateLimit) {
           throw new OrchestrationError({
@@ -26165,34 +26075,24 @@ var init_orchestration2 = __esm({
 });
 
 // src/loopAPI/agent-agent-loop/scriptLoader.ts
-function ensureBuiltinDigestsRegistered2() {
-  builtinDigestsRegistered2 ??= registerBuiltinScriptSources(builtinAgentAgentLoopSources);
-  return builtinDigestsRegistered2;
-}
 async function loadAgentAgentLoopScript(scriptReference, options = {}) {
-  await ensureBuiltinDigestsRegistered2();
-  return loadAgentLoopScript(scriptReference, {
-    ...options,
-    getBuiltinScriptSource: getBuiltinAgentAgentLoopSource,
-    scriptType: "AgentAgentLoop script"
-  });
+  return loadScript2(scriptReference, options);
 }
-var builtinDigestsRegistered2;
+var loadScript2;
 var init_scriptLoader3 = __esm({
   "src/loopAPI/agent-agent-loop/scriptLoader.ts"() {
     "use strict";
     init_builtinLoopSources();
     init_scriptLoader();
+    loadScript2 = createBuiltinAgentLoopScriptLoader({
+      sources: builtinAgentAgentLoopSources,
+      getBuiltinScriptSource: getBuiltinAgentAgentLoopSource,
+      scriptType: "AgentAgentLoop script"
+    });
   }
 });
 
 // src/loopAPI/agent-agent-loop/loop.ts
-function isAsyncIterable4(value) {
-  return Boolean(value && typeof value === "object" && Symbol.asyncIterator in value);
-}
-function messageStep2(message) {
-  return { type: "message", data: message };
-}
 function stepText(step) {
   if (step.type !== "message") return void 0;
   if (typeof step.data === "string") return step.data;
@@ -26246,10 +26146,7 @@ function createScriptArguments(input, context, emittedSteps) {
     if (key === "agents") return agentEntries;
     return readProfileAgentEntries(context.profile, key) ?? [];
   };
-  const emit = (step) => {
-    emittedSteps.push(step);
-    context.runtime?.emit?.(step);
-  };
+  const emit = createScriptStepEmitter(emittedSteps, context.runtime?.emit);
   const log = (event, data) => {
     context.runtime?.log?.(event, data);
   };
@@ -26347,11 +26244,11 @@ function createScriptArguments(input, context, emittedSteps) {
     runParallel: (batchInput) => runBatch(batchInput, "parallel"),
     formatAgentResults,
     finishAgentResults: (result, options) => {
-      emit(messageStep2(formatAgentResults(result, options)));
+      emit(messageStep(formatAgentResults(result, options)));
     },
     emit,
     finish: (message) => {
-      emit(typeof message === "string" ? messageStep2(message) : message);
+      emit(typeof message === "string" ? messageStep(message) : message);
     },
     isCancelled,
     log,
@@ -26364,27 +26261,11 @@ function createScriptArguments(input, context, emittedSteps) {
     loadCheckpoint: context.runtime?.loadCheckpoint ?? (async () => void 0)
   };
 }
-async function* drainEmittedSteps2(steps) {
-  while (steps.length > 0) {
-    const step = steps.shift();
-    if (step) yield step;
-  }
-}
 async function* runScript(script, input, context) {
   const emittedSteps = [];
   const scriptArguments = createScriptArguments(input, context, emittedSteps);
   const result = await script(scriptArguments);
-  yield* drainEmittedSteps2(emittedSteps);
-  if (isAsyncIterable4(result)) {
-    yield* result;
-    yield* drainEmittedSteps2(emittedSteps);
-  } else if (typeof result === "string") {
-    yield messageStep2(result);
-  } else if (Array.isArray(result)) {
-    yield* result;
-  } else if (result) {
-    yield result;
-  }
+  yield* yieldScriptResult(result, emittedSteps);
 }
 function asAgentAgentContext(context) {
   return context;
@@ -26447,6 +26328,7 @@ var init_loop2 = __esm({
   "src/loopAPI/agent-agent-loop/loop.ts"() {
     "use strict";
     init_orchestration2();
+    init_scriptRuntime2();
     init_scriptLoader3();
     LOOP_ID = "agent-agent-loop";
     LOOP_NAME = "AgentAgent Loop";
@@ -27293,7 +27175,8 @@ var ChatSyncEngine = class {
     }
   }
   /**
-   * Anti-entropy：先 syncOnce，再对已知会话逐个向各 peer 拉取缺失消息（参考审查单「定期对账」）。
+   * Anti-entropy 的定期对账入口。`syncOnce` 本身已经遍历全部已知会话，
+   * 并在 metadata 对账后向各 peer 拉取缺失消息，因此这里无需第二次重复拉取。
    */
   async antiEntropyOnce() {
     await this.syncOnce();
@@ -30231,6 +30114,18 @@ function createPeerDriverRpcHandler(handlers) {
 }
 
 // src/device-network/syncCloudDevices.ts
+function warnAboutCloudKeyRotation(logger3, record2) {
+  const message = "[device-network] Cloud directory rotated a cloud-account device public key";
+  const details = {
+    peerId: record2.peerId,
+    accountId: record2.accountId
+  };
+  if (logger3) {
+    logger3.warn(message, details);
+    return;
+  }
+  console.warn(message, details);
+}
 async function syncCloudDevices(input) {
   const cloudDevices = await input.cloudClient.listDevices();
   const existingRecords = await input.trustStore.loadTrustedDevices();
@@ -30248,6 +30143,9 @@ async function syncCloudDevices(input) {
   for (const cloudDevice of activeCloudDevices) {
     const existing = existingByPeerId.get(cloudDevice.peerId);
     if (existing?.trustMode === "local-pairing") continue;
+    if (existing?.trustMode === "cloud-account" && existing.publicKeyMultibase !== cloudDevice.publicKeyMultibase) {
+      warnAboutCloudKeyRotation(input.logger, existing);
+    }
     const record2 = {
       peerId: cloudDevice.peerId,
       publicKeyMultibase: cloudDevice.publicKeyMultibase,