pi-onlyne 0.8.0 → 0.8.1

package/README.md

@@ -189,14 +189,14 @@ The extension also supports `.onlyne/channels/loopback/in` when FIFO IO is enabl
 
 ## Swarm mode
 
-Swarm mode lets `onlyne-swarm` own task routing for a generated agent workspace. Enable it in `.onlyne/config.toml`:
+Swarm mode lets `onlyne-swarm >= 0.5.0` own task routing for a generated agent workspace. `pi-onlyne 0.8.1` uses the scheduler's `delivery: scheduler` header for task claims, so these versions upgrade together. Enable it in `.onlyne/config.toml`:
 
 ```toml
 [swarm]
 enabled = true
 ```
 
-A swarm Pi session subscribes to loopback events, reports `swarm_ready`, accepts one hop atomically, spawns continuations with `swarm_send` (fire-and-forget), and writes `swarm_complete` (done signal). Scheduler then sends a header-only recycle control wire; pi-onlyne intercepts it before model delivery, sends `swarm_recycled`, stops the watch, clears the slot, and self-exits. `swarm_quit` sends the same ack with `quit:<reason>` then self-exits, so the scheduler records failed immediately. Downstream results travel through files and the ledger; nothing waits.
+A swarm Pi session subscribes to loopback events, reports `swarm_ready`, accepts one scheduler-delivered hop atomically, spawns continuations with `swarm_send` (fire-and-forget), and writes `swarm_complete` (done signal). A raw `swarm_send` relay carries no `delivery` header and only creates the scheduler task row; the scheduler's second delivery adds `delivery: scheduler`, which pi-onlyne uses as the claim gate. This keeps arbitrary role prose out of transport authentication. Scheduler then sends a header-only recycle control wire; pi-onlyne intercepts it before model delivery, sends `swarm_recycled`, stops the watch, clears the slot, and self-exits. `swarm_quit` sends the same ack with `quit:<reason>` then self-exits, so the scheduler records failed immediately. Downstream results travel through files and the ledger; nothing waits.
 
 For automatic startup in a generated workspace, add `.pi/onlyne.json`:
 

package/SPEC.md

@@ -84,10 +84,12 @@ One session sees one toolset. The surface is chosen at `session_start` from
 - When swarm is on, generic in/out auto-handling is disabled: the scheduler owns
   input/output. Only loopback messages carrying a `---swarm` body header enter
   the session, via the `followUp` task queue.
-- Session model: one session carries exactly one hop, no exceptions. A new
-  header claims the slot; any further header while claimed is ignored
-  (the scheduler always opens a new session, so this guard never fires
-  on the normal path). No waiting, no callbacks, no parent bookkeeping.
+- Session model: one session carries exactly one scheduler-delivered hop. A
+  `delivery: scheduler` header field claims the slot; raw `swarm_send` relay
+  wires and out wires omit it and never claim. Any further delivered header
+  while claimed is ignored (the scheduler always opens a new session, so this
+  guard never fires on the normal path). No waiting, no callbacks, no parent
+  bookkeeping.
 - Startup handshake: swarm watch sends the `swarm_ready` op
   (`{workspace, terminal_handle}`) so the scheduler can match a pending task.
   `ONLYNE_SWARM_TASK` env and `ORCA_TERMINAL_HANDLE`/`ONLYNE_TERMINAL_HANDLE`

package/dist/swarm-slot.js

@@ -15,7 +15,12 @@ export class SwarmSlot {
         const parsed = parseSwarmHeader(text);
         if (!parsed)
             return "not-swarm";
-        const { header, payload } = parsed;
+        const { header, delivery, payload } = parsed;
+        // Only the scheduler's second delivery is claimable. A worker's raw
+        // swarm_send relay and every out wire omit this structured field, so
+        // history catchup cannot claim either one as an executable task.
+        if (delivery !== "scheduler")
+            return "not-swarm";
         if (!this.taskId) {
             this.taskId = header.task_id;
             this.from = header.from;

package/dist/swarm.d.ts

@@ -5,8 +5,11 @@ export interface SwarmHeader {
     transfer_send_to: string;
     attempt: number;
 }
+/** `scheduler` identifies the scheduler's second delivery. Raw relay and out
+ * wires omit it, so a cold-start history scan cannot claim them. */
 export interface SwarmMessage {
     header: SwarmHeader;
+    delivery: string;
     payload: string;
 }
 /** Parse a `---swarm` body header. Returns null for non-swarm messages. */

package/dist/swarm.js

@@ -28,6 +28,7 @@ export function parseSwarmHeader(text) {
     let from = ".";
     let transfer_send_to = "";
     let attempt = 1;
+    let delivery = "";
     let sawTransfer = false;
     for (const line of headRaw.split("\n")) {
         const t = line.trim();
@@ -50,12 +51,14 @@ export function parseSwarmHeader(text) {
             return null;
         else if (k === "attempt")
             attempt = Number.parseInt(v, 10) || 1;
+        else if (k === "delivery")
+            delivery = v;
     }
     if (!sawTransfer)
         return null;
     if (!task_id || !UUID_RE.test(task_id.trim()))
         return null;
-    return { header: { task_id: task_id.trim(), from, transfer_send_to, attempt }, payload };
+    return { header: { task_id: task_id.trim(), from, transfer_send_to, attempt }, delivery, payload };
 }
 export function parseSwarmCtl(text) {
     if (!text.startsWith("---swarm-ctl\n"))
@@ -89,9 +92,13 @@ export function parseSwarmCtl(text) {
 }
 /** Render a swarm body header in front of a Markdown payload. */
 export function renderSwarmHeader(header, role, payloadMarkdown) {
+    // Raw relay and out wires intentionally omit `delivery`. Scheduler owns the
+    // second delivery step and adds `delivery: scheduler` there.
     let s = `---swarm\ntask_id: ${header.task_id}\nfrom: ${header.from}\ntransfer_send_to: ${header.transfer_send_to}\nattempt: ${header.attempt}\n---\n`;
-    if (role)
-        s += `## role: ${role}\n\n${role}\n`;
+    // Flat role text follows the delimiter once, with no duplicate echo.
+    if (role) {
+        s += role.endsWith("\n") ? role + "\n" : role + "\n\n";
+    }
     s += payloadMarkdown;
     if (!s.endsWith("\n"))
         s += "\n";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-onlyne",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Pi extension tools for sending messages through Onlyne.",
   "type": "module",
   "main": "./dist/index.js",