pi-radar 0.6.0 → 0.7.0

package/README.md

@@ -19,9 +19,13 @@ The baseline reports session presence through one flat request. The first manage
 
 ## Daemon contract
 
+**Managed execution:** a launch Radar admits arrives with `PI_RADAR_REGISTRATION_ID` in its environment. The baseline captures it, removes it from this process's environment before any child starts, and reports it as `registration_id`, so a managed launch binds the registration Radar already allocated instead of registering itself. A session claim is still fresh per load, and a reload or `/resume` takes a new one under the same registration; nothing about the process identity is presented or reused as a claim. `launch.admit` is the method `radar run` uses and is not part of the client surface. `agent.list` entries and observation agents carry `scoped`: `true` for a process Radar launched into a scope, `false` for an observed process it did not.
+
+**0.7.0 upgrade:** update Radar (0.3.0) and pi-radar together; the floor is wire revision 6. A managed launch now carries `PI_RADAR_REGISTRATION_ID` instead of a claim id, and pi-radar always presents its own fresh claim. Nothing in your code changes unless you read the launch environment directly.
+
 **0.6.0 upgrade:** update Radar and pi-radar together. Lifecycle controls require both `subject_id` and `claim_id`; handoff identities and spawn edges use `claim_id`, with no execution generation. Do not pass an agent's subject id where an attempt is required. Existing private launch records remain readable.
 
-pi-radar 0.6.0 speaks protocol 2 and requires wire revision 5. Revision 4 added Pi presence (`agent.presence`/`agent.release`), which is how a session acquires its subject. Revision 5 names the agent `subject_id` and one attempt `claim_id`, drops the execution-generation ordinal, and requires lifecycle controls to name the claim they were issued against, so a revision-4 client would read those fields with the old meanings: the floor is 5. Handoff methods additionally require the independently negotiated `communication.handoff.v1` contract; its timestamps remain exactly representable as JSON numbers. Clients that control managed executions must not target the legacy per-execution ID semantics. It reads `revision` and the public `contracts` list from `daemon.ping`, preserves unfamiliar contract names, and preflights only contracts needed for a multi-step or versioned operation. Backend `mux.*` primitives are private to the daemon; direct mux methods are dispatched and return the daemon's backend refusal when unavailable.
+pi-radar 0.7.0 speaks protocol 2 and requires wire revision 6. Revision 6 gives a managed launch its process identity up front: Radar mints the `registration_id`, passes it as `PI_RADAR_REGISTRATION_ID`, and holds a `reserved` claim that grants nothing until the first verified report replaces it with the session's own claim, so a 0.6.0 client, which spends the spawn token as its first claim, cannot bind. Revision 4 added Pi presence (`agent.presence`/`agent.release`), which is how a session acquires its subject. Revision 5 names the agent `subject_id` and one attempt `claim_id`, drops the execution-generation ordinal, and requires lifecycle controls to name the claim they were issued against, so a revision-4 client would read those fields with the old meanings. Handoff methods additionally require the independently negotiated `communication.handoff.v1` contract; its timestamps remain exactly representable as JSON numbers. Clients that control managed executions must not target the legacy per-execution ID semantics. It reads `revision` and the public `contracts` list from `daemon.ping`, preserves unfamiliar contract names, and preflights only contracts needed for a multi-step or versioned operation. Backend `mux.*` primitives are private to the daemon; direct mux methods are dispatched and return the daemon's backend refusal when unavailable.
 
 The client uses `registry.v1` for registry operations and additionally requires `registry.facts.v1` for the facts channel and assignment extensions. Managed children require `spawn.v1`, child-pane removal requires `spawn.close.v1`, event reads require `events.v1`, and handoff operations require `communication.handoff.v1`. The expected wire examples are maintained in this repository's `docs/control-plane.fixture.jsonl` and `docs/agent-registration.fixture.jsonl` and are exercised by the package tests.
 

package/dist/extension/baseline.js

@@ -8,7 +8,7 @@ import { lstatSync } from "node:fs";
 import { createConnection } from "node:net";
 import { dirname, join } from "node:path";
 var RADAR_PROTOCOL_VERSION = 2;
-var RADAR_MINIMUM_REVISION = 5;
+var RADAR_MINIMUM_REVISION = 6;
 var RADAR_REGISTRY_CONTRACT = "registry.v1";
 var RADAR_REGISTRY_FACTS_CONTRACT = "registry.facts.v1";
 var RADAR_SPAWN_CONTRACT = "spawn.v1";
@@ -119,7 +119,7 @@ function decodePresenceAnswer(value) {
   const claimId = recordAt(value, "claim_id");
   const standing = recordAt(value, "standing");
   const subjectId = recordAt(value, "subject_id");
-  if (!isUuid(registrationId) || !isUuid(claimId) || !["pending", "granted", "duplicate", "released"].includes(String(standing)) || subjectId !== void 0 && !isUuid(subjectId) || standing === "granted" && !isUuid(subjectId))
+  if (!isUuid(registrationId) || !isUuid(claimId) || !["reserved", "pending", "granted", "duplicate", "released"].includes(String(standing)) || subjectId !== void 0 && !isUuid(subjectId) || standing === "granted" && !isUuid(subjectId))
     return protocol("presence reply carries no valid claim standing");
   return { ok: true, value };
 }
@@ -264,7 +264,7 @@ function unresolvedOperation(requestId, detail) {
     message: `focus ${requestId} is unresolved (${detail})`
   };
 }
-var RADAR_SPAWN_TOKEN_ENV = "PI_RADAR_SPAWN_TOKEN";
+var RADAR_REGISTRATION_ENV = "PI_RADAR_REGISTRATION_ID";
 var RADAR_MANAGED_IDENTITY_ENV = /* @__PURE__ */ new Set([
   "PI_RADAR_MANAGED_SUBJECT_ID",
   "PI_RADAR_MANAGED_LAUNCH_ID",
@@ -413,8 +413,8 @@ function spawnRequestShape(request) {
   const env = Object.entries(request.env ?? {});
   if (env.length > 256) return "spawn env names more than 256 entries";
   for (const [name, value] of env) {
-    if (name === RADAR_SPAWN_TOKEN_ENV)
-      return `spawn env cannot set the reserved ${RADAR_SPAWN_TOKEN_ENV}`;
+    if (name === RADAR_REGISTRATION_ENV)
+      return `spawn env cannot set the reserved ${RADAR_REGISTRATION_ENV}`;
     if (RADAR_MANAGED_IDENTITY_ENV.has(name))
       return `spawn env cannot set Radar-issued identity variable ${name}`;
     if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name) || new RegExp("\\p{Cc}", "u").test(value))
@@ -1418,7 +1418,13 @@ function createRadarProcessSlot() {
 }
 function radarProcessSlot() {
   const host = globalThis;
-  return host[PROCESS_SLOT] ??= createRadarProcessSlot();
+  if (!host[PROCESS_SLOT]) {
+    const slot = createRadarProcessSlot();
+    slot.launchRegistrationId = process.env.PI_RADAR_REGISTRATION_ID;
+    delete process.env.PI_RADAR_REGISTRATION_ID;
+    host[PROCESS_SLOT] = slot;
+  }
+  return host[PROCESS_SLOT];
 }
 function radarProcessIncarnation(slot = radarProcessSlot()) {
   return slot.incarnation ??= randomUUID2();
@@ -1848,11 +1854,6 @@ function createPresenceReporter(input) {
       await releasePending();
       const registration = await input.registration();
       if (!registration?.process || state !== claim || stopped) return void 0;
-      if (claim.initial_load) {
-        if (registration.spawn_token) claim.claim_id = registration.spawn_token;
-        claim.initial_load = false;
-        if (!save()) return void 0;
-      }
       const answer = await client.presence({
         ...registration,
         process: registration.process,
@@ -1891,7 +1892,7 @@ function createPresenceReporter(input) {
         releases.push({ registration_id: state.registration_id, claim_id: state.claim_id });
       }
       standing = void 0;
-      state = { version: 2, session, claim_id: randomUUID2(), initial_load: state === void 0, releases };
+      state = { version: 2, session, claim_id: randomUUID2(), releases };
       save();
       stopped = false;
       void ensure();
@@ -1974,8 +1975,8 @@ function createRadarPublicationInner(options) {
   const store = options.store ?? createPublicationStore(dataRoot);
   const scheduler = options.scheduler ?? systemScheduler;
   const client = options.client;
-  const spawnToken = options.spawnToken;
   const slot = options.slot ?? radarProcessSlot();
+  const launchRegistrationId = options.launchRegistrationId ?? slot.launchRegistrationId;
   const incarnation = options.incarnation ?? radarProcessIncarnation(slot);
   const cacheKey = `${options.store === void 0 ? dataRoot : storeIdentity(options.store)}\0${incarnation}`;
   const cached = slot.publications.get(cacheKey);
@@ -2099,7 +2100,7 @@ function createRadarPublicationInner(options) {
       return {
         ...identity,
         ...location?.state === "resolved" ? { location: location.location } : {},
-        ...spawnToken ? { spawn_token: spawnToken } : {}
+        ...launchRegistrationId ? { registration_id: launchRegistrationId } : {}
       };
     },
     heartbeatMs: options.heartbeatMs ?? RADAR_HEARTBEAT_MS
@@ -2286,7 +2287,7 @@ function createRadarExecutionAdapter(pi, options) {
       },
       ...options.location !== void 0 ? { location: options.location } : {},
       ...managed !== void 0 ? { binding: managed } : {},
-      ...options.spawnToken !== void 0 ? { spawnToken: options.spawnToken } : {}
+      ...options.launchRegistrationId !== void 0 ? { launchRegistrationId: options.launchRegistrationId } : {}
     });
   } catch {
     publication = unavailablePublication2();

package/dist/extension/radar-client.js

@@ -4,7 +4,7 @@ import { lstatSync } from "node:fs";
 import { createConnection } from "node:net";
 import { dirname, join } from "node:path";
 var RADAR_PROTOCOL_VERSION = 2;
-var RADAR_MINIMUM_REVISION = 5;
+var RADAR_MINIMUM_REVISION = 6;
 var RADAR_REGISTRY_CONTRACT = "registry.v1";
 var RADAR_REGISTRY_FACTS_CONTRACT = "registry.facts.v1";
 var RADAR_SPAWN_CONTRACT = "spawn.v1";
@@ -115,7 +115,7 @@ function decodePresenceAnswer(value) {
   const claimId = recordAt(value, "claim_id");
   const standing = recordAt(value, "standing");
   const subjectId = recordAt(value, "subject_id");
-  if (!isUuid(registrationId) || !isUuid(claimId) || !["pending", "granted", "duplicate", "released"].includes(String(standing)) || subjectId !== void 0 && !isUuid(subjectId) || standing === "granted" && !isUuid(subjectId))
+  if (!isUuid(registrationId) || !isUuid(claimId) || !["reserved", "pending", "granted", "duplicate", "released"].includes(String(standing)) || subjectId !== void 0 && !isUuid(subjectId) || standing === "granted" && !isUuid(subjectId))
     return protocol("presence reply carries no valid claim standing");
   return { ok: true, value };
 }
@@ -264,7 +264,7 @@ function unresolvedOperation(requestId, detail) {
     message: `focus ${requestId} is unresolved (${detail})`
   };
 }
-var RADAR_SPAWN_TOKEN_ENV = "PI_RADAR_SPAWN_TOKEN";
+var RADAR_REGISTRATION_ENV = "PI_RADAR_REGISTRATION_ID";
 var RADAR_MANAGED_IDENTITY_ENV = /* @__PURE__ */ new Set([
   "PI_RADAR_MANAGED_SUBJECT_ID",
   "PI_RADAR_MANAGED_LAUNCH_ID",
@@ -413,8 +413,8 @@ function spawnRequestShape(request) {
   const env = Object.entries(request.env ?? {});
   if (env.length > 256) return "spawn env names more than 256 entries";
   for (const [name, value] of env) {
-    if (name === RADAR_SPAWN_TOKEN_ENV)
-      return `spawn env cannot set the reserved ${RADAR_SPAWN_TOKEN_ENV}`;
+    if (name === RADAR_REGISTRATION_ENV)
+      return `spawn env cannot set the reserved ${RADAR_REGISTRATION_ENV}`;
     if (RADAR_MANAGED_IDENTITY_ENV.has(name))
       return `spawn env cannot set Radar-issued identity variable ${name}`;
     if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name) || new RegExp("\\p{Cc}", "u").test(value))
@@ -1270,6 +1270,7 @@ export {
   RADAR_MAX_LINE_BYTES,
   RADAR_MINIMUM_REVISION,
   RADAR_PROTOCOL_VERSION,
+  RADAR_REGISTRATION_ENV,
   RADAR_REGISTRY_CONTRACT,
   RADAR_REGISTRY_FACTS_CONTRACT,
   RADAR_REQUESTER,
@@ -1277,7 +1278,6 @@ export {
   RADAR_SPAWN_CONTRACT,
   RADAR_SPAWN_LAUNCH_CONTEXT_CONTRACT,
   RADAR_SPAWN_LIST_CONTRACT,
-  RADAR_SPAWN_TOKEN_ENV,
   boundedRadarAssignment,
   boundedRadarFacts,
   boundedRadarSnapshot,

package/dist/extension/radar-execution.js

@@ -272,7 +272,13 @@ function createRadarProcessSlot() {
 }
 function radarProcessSlot() {
   const host = globalThis;
-  return host[PROCESS_SLOT] ??= createRadarProcessSlot();
+  if (!host[PROCESS_SLOT]) {
+    const slot = createRadarProcessSlot();
+    slot.launchRegistrationId = process.env.PI_RADAR_REGISTRATION_ID;
+    delete process.env.PI_RADAR_REGISTRATION_ID;
+    host[PROCESS_SLOT] = slot;
+  }
+  return host[PROCESS_SLOT];
 }
 function radarProcessIncarnation(slot = radarProcessSlot()) {
   return slot.incarnation ??= randomUUID();
@@ -702,11 +708,6 @@ function createPresenceReporter(input) {
       await releasePending();
       const registration = await input.registration();
       if (!registration?.process || state !== claim || stopped) return void 0;
-      if (claim.initial_load) {
-        if (registration.spawn_token) claim.claim_id = registration.spawn_token;
-        claim.initial_load = false;
-        if (!save()) return void 0;
-      }
       const answer = await client.presence({
         ...registration,
         process: registration.process,
@@ -745,7 +746,7 @@ function createPresenceReporter(input) {
         releases.push({ registration_id: state.registration_id, claim_id: state.claim_id });
       }
       standing = void 0;
-      state = { version: 2, session, claim_id: randomUUID(), initial_load: state === void 0, releases };
+      state = { version: 2, session, claim_id: randomUUID(), releases };
       save();
       stopped = false;
       void ensure();
@@ -828,8 +829,8 @@ function createRadarPublicationInner(options) {
   const store = options.store ?? createPublicationStore(dataRoot);
   const scheduler = options.scheduler ?? systemScheduler;
   const client = options.client;
-  const spawnToken = options.spawnToken;
   const slot = options.slot ?? radarProcessSlot();
+  const launchRegistrationId = options.launchRegistrationId ?? slot.launchRegistrationId;
   const incarnation = options.incarnation ?? radarProcessIncarnation(slot);
   const cacheKey = `${options.store === void 0 ? dataRoot : storeIdentity(options.store)}\0${incarnation}`;
   const cached = slot.publications.get(cacheKey);
@@ -953,7 +954,7 @@ function createRadarPublicationInner(options) {
       return {
         ...identity,
         ...location?.state === "resolved" ? { location: location.location } : {},
-        ...spawnToken ? { spawn_token: spawnToken } : {}
+        ...launchRegistrationId ? { registration_id: launchRegistrationId } : {}
       };
     },
     heartbeatMs: options.heartbeatMs ?? RADAR_HEARTBEAT_MS
@@ -1146,7 +1147,7 @@ function createRadarExecutionAdapter(pi, options) {
       },
       ...options.location !== void 0 ? { location: options.location } : {},
       ...managed !== void 0 ? { binding: managed } : {},
-      ...options.spawnToken !== void 0 ? { spawnToken: options.spawnToken } : {}
+      ...options.launchRegistrationId !== void 0 ? { launchRegistrationId: options.launchRegistrationId } : {}
     });
   } catch {
     publication = unavailablePublication2();

package/dist/extension/radar-publication.js

@@ -274,7 +274,13 @@ function createRadarProcessSlot() {
 }
 function radarProcessSlot() {
   const host = globalThis;
-  return host[PROCESS_SLOT] ??= createRadarProcessSlot();
+  if (!host[PROCESS_SLOT]) {
+    const slot = createRadarProcessSlot();
+    slot.launchRegistrationId = process.env.PI_RADAR_REGISTRATION_ID;
+    delete process.env.PI_RADAR_REGISTRATION_ID;
+    host[PROCESS_SLOT] = slot;
+  }
+  return host[PROCESS_SLOT];
 }
 function radarProcessIncarnation(slot = radarProcessSlot()) {
   return slot.incarnation ??= randomUUID();
@@ -707,11 +713,6 @@ function createPresenceReporter(input) {
       await releasePending();
       const registration = await input.registration();
       if (!registration?.process || state !== claim || stopped) return void 0;
-      if (claim.initial_load) {
-        if (registration.spawn_token) claim.claim_id = registration.spawn_token;
-        claim.initial_load = false;
-        if (!save()) return void 0;
-      }
       const answer = await client.presence({
         ...registration,
         process: registration.process,
@@ -750,7 +751,7 @@ function createPresenceReporter(input) {
         releases.push({ registration_id: state.registration_id, claim_id: state.claim_id });
       }
       standing = void 0;
-      state = { version: 2, session, claim_id: randomUUID(), initial_load: state === void 0, releases };
+      state = { version: 2, session, claim_id: randomUUID(), releases };
       save();
       stopped = false;
       void ensure();
@@ -833,8 +834,8 @@ function createRadarPublicationInner(options) {
   const store = options.store ?? createPublicationStore(dataRoot);
   const scheduler = options.scheduler ?? systemScheduler;
   const client = options.client;
-  const spawnToken = options.spawnToken;
   const slot = options.slot ?? radarProcessSlot();
+  const launchRegistrationId = options.launchRegistrationId ?? slot.launchRegistrationId;
   const incarnation = options.incarnation ?? radarProcessIncarnation(slot);
   const cacheKey = `${options.store === void 0 ? dataRoot : storeIdentity(options.store)}\0${incarnation}`;
   const cached = slot.publications.get(cacheKey);
@@ -958,7 +959,7 @@ function createRadarPublicationInner(options) {
       return {
         ...identity,
         ...location?.state === "resolved" ? { location: location.location } : {},
-        ...spawnToken ? { spawn_token: spawnToken } : {}
+        ...launchRegistrationId ? { registration_id: launchRegistrationId } : {}
       };
     },
     heartbeatMs: options.heartbeatMs ?? RADAR_HEARTBEAT_MS

package/dist/index.js

@@ -16,6 +16,7 @@ __export(radar_client_exports, {
   RADAR_MAX_LINE_BYTES: () => RADAR_MAX_LINE_BYTES,
   RADAR_MINIMUM_REVISION: () => RADAR_MINIMUM_REVISION,
   RADAR_PROTOCOL_VERSION: () => RADAR_PROTOCOL_VERSION,
+  RADAR_REGISTRATION_ENV: () => RADAR_REGISTRATION_ENV,
   RADAR_REGISTRY_CONTRACT: () => RADAR_REGISTRY_CONTRACT,
   RADAR_REGISTRY_FACTS_CONTRACT: () => RADAR_REGISTRY_FACTS_CONTRACT,
   RADAR_REQUESTER: () => RADAR_REQUESTER,
@@ -23,7 +24,6 @@ __export(radar_client_exports, {
   RADAR_SPAWN_CONTRACT: () => RADAR_SPAWN_CONTRACT,
   RADAR_SPAWN_LAUNCH_CONTEXT_CONTRACT: () => RADAR_SPAWN_LAUNCH_CONTEXT_CONTRACT,
   RADAR_SPAWN_LIST_CONTRACT: () => RADAR_SPAWN_LIST_CONTRACT,
-  RADAR_SPAWN_TOKEN_ENV: () => RADAR_SPAWN_TOKEN_ENV,
   boundedRadarAssignment: () => boundedRadarAssignment,
   boundedRadarFacts: () => boundedRadarFacts,
   boundedRadarSnapshot: () => boundedRadarSnapshot,
@@ -40,7 +40,7 @@ import { lstatSync } from "node:fs";
 import { createConnection } from "node:net";
 import { dirname, join } from "node:path";
 var RADAR_PROTOCOL_VERSION = 2;
-var RADAR_MINIMUM_REVISION = 5;
+var RADAR_MINIMUM_REVISION = 6;
 var RADAR_REGISTRY_CONTRACT = "registry.v1";
 var RADAR_REGISTRY_FACTS_CONTRACT = "registry.facts.v1";
 var RADAR_SPAWN_CONTRACT = "spawn.v1";
@@ -151,7 +151,7 @@ function decodePresenceAnswer(value) {
   const claimId = recordAt(value, "claim_id");
   const standing = recordAt(value, "standing");
   const subjectId = recordAt(value, "subject_id");
-  if (!isUuid(registrationId) || !isUuid(claimId) || !["pending", "granted", "duplicate", "released"].includes(String(standing)) || subjectId !== void 0 && !isUuid(subjectId) || standing === "granted" && !isUuid(subjectId))
+  if (!isUuid(registrationId) || !isUuid(claimId) || !["reserved", "pending", "granted", "duplicate", "released"].includes(String(standing)) || subjectId !== void 0 && !isUuid(subjectId) || standing === "granted" && !isUuid(subjectId))
     return protocol("presence reply carries no valid claim standing");
   return { ok: true, value };
 }
@@ -300,7 +300,7 @@ function unresolvedOperation(requestId, detail) {
     message: `focus ${requestId} is unresolved (${detail})`
   };
 }
-var RADAR_SPAWN_TOKEN_ENV = "PI_RADAR_SPAWN_TOKEN";
+var RADAR_REGISTRATION_ENV = "PI_RADAR_REGISTRATION_ID";
 var RADAR_MANAGED_IDENTITY_ENV = /* @__PURE__ */ new Set([
   "PI_RADAR_MANAGED_SUBJECT_ID",
   "PI_RADAR_MANAGED_LAUNCH_ID",
@@ -449,8 +449,8 @@ function spawnRequestShape(request) {
   const env = Object.entries(request.env ?? {});
   if (env.length > 256) return "spawn env names more than 256 entries";
   for (const [name, value] of env) {
-    if (name === RADAR_SPAWN_TOKEN_ENV)
-      return `spawn env cannot set the reserved ${RADAR_SPAWN_TOKEN_ENV}`;
+    if (name === RADAR_REGISTRATION_ENV)
+      return `spawn env cannot set the reserved ${RADAR_REGISTRATION_ENV}`;
     if (RADAR_MANAGED_IDENTITY_ENV.has(name))
       return `spawn env cannot set Radar-issued identity variable ${name}`;
     if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name) || new RegExp("\\p{Cc}", "u").test(value))
@@ -1538,7 +1538,13 @@ function createRadarProcessSlot() {
 }
 function radarProcessSlot() {
   const host = globalThis;
-  return host[PROCESS_SLOT] ??= createRadarProcessSlot();
+  if (!host[PROCESS_SLOT]) {
+    const slot = createRadarProcessSlot();
+    slot.launchRegistrationId = process.env.PI_RADAR_REGISTRATION_ID;
+    delete process.env.PI_RADAR_REGISTRATION_ID;
+    host[PROCESS_SLOT] = slot;
+  }
+  return host[PROCESS_SLOT];
 }
 function radarProcessIncarnation(slot = radarProcessSlot()) {
   return slot.incarnation ??= randomUUID2();
@@ -1971,11 +1977,6 @@ function createPresenceReporter(input) {
       await releasePending();
       const registration = await input.registration();
       if (!registration?.process || state !== claim || stopped) return void 0;
-      if (claim.initial_load) {
-        if (registration.spawn_token) claim.claim_id = registration.spawn_token;
-        claim.initial_load = false;
-        if (!save()) return void 0;
-      }
       const answer = await client.presence({
         ...registration,
         process: registration.process,
@@ -2014,7 +2015,7 @@ function createPresenceReporter(input) {
         releases.push({ registration_id: state.registration_id, claim_id: state.claim_id });
       }
       standing = void 0;
-      state = { version: 2, session, claim_id: randomUUID2(), initial_load: state === void 0, releases };
+      state = { version: 2, session, claim_id: randomUUID2(), releases };
       save();
       stopped = false;
       void ensure();
@@ -2097,8 +2098,8 @@ function createRadarPublicationInner(options) {
   const store = options.store ?? createPublicationStore(dataRoot);
   const scheduler = options.scheduler ?? systemScheduler;
   const client = options.client;
-  const spawnToken = options.spawnToken;
   const slot = options.slot ?? radarProcessSlot();
+  const launchRegistrationId = options.launchRegistrationId ?? slot.launchRegistrationId;
   const incarnation = options.incarnation ?? radarProcessIncarnation(slot);
   const cacheKey = `${options.store === void 0 ? dataRoot : storeIdentity(options.store)}\0${incarnation}`;
   const cached = slot.publications.get(cacheKey);
@@ -2222,7 +2223,7 @@ function createRadarPublicationInner(options) {
       return {
         ...identity,
         ...location?.state === "resolved" ? { location: location.location } : {},
-        ...spawnToken ? { spawn_token: spawnToken } : {}
+        ...launchRegistrationId ? { registration_id: launchRegistrationId } : {}
       };
     },
     heartbeatMs: options.heartbeatMs ?? RADAR_HEARTBEAT_MS
@@ -2415,7 +2416,7 @@ function createRadarExecutionAdapter(pi, options) {
       },
       ...options.location !== void 0 ? { location: options.location } : {},
       ...managed !== void 0 ? { binding: managed } : {},
-      ...options.spawnToken !== void 0 ? { spawnToken: options.spawnToken } : {}
+      ...options.launchRegistrationId !== void 0 ? { launchRegistrationId: options.launchRegistrationId } : {}
     });
   } catch {
     publication = unavailablePublication2();

package/extension/generated-contracts.ts

@@ -11,7 +11,6 @@ export interface PresenceReportDeserialize {
   run?: string | null;
   session_id: string;
   source: string;
-  spawn_token?: string | null;
   subject_id?: string | null;
 }
 /**
@@ -54,7 +53,7 @@ export interface PresenceReportProcessIdentity {
   start_ticks: number;
   [k: string]: unknown;
 }
-export type PresenceAnswerStanding = "pending" | "granted" | "duplicate" | "released";
+export type PresenceAnswerStanding = "reserved" | "pending" | "granted" | "duplicate" | "released";
 
 /**
  * The small public receipt; session/location context stays inside Radar.
@@ -284,7 +283,7 @@ export type Freshness = "fresh" | "stale";
  * refused rather than silently dropped.
  */
 export type Report = Snapshot | AssignmentSnapshot | FactsSnapshot;
-export type Standing = "pending" | "granted" | "duplicate" | "released";
+export type Standing = "reserved" | "pending" | "granted" | "duplicate" | "released";
 /**
  * How a registration relates to the live panes.
  */
@@ -675,6 +674,11 @@ export interface RegistryAgent {
   facts: PublicChannelFacts | null;
   process: ProcessEvidence;
   registration: PublicRegistration;
+  /**
+   * Whether this process runs inside a Radar-established execution scope. A
+   * process started outside the managed launch path has none and is observed.
+   */
+  scoped?: boolean | null;
 }
 /**
  * A channel read for a reader that is not its writer: the same identity,

package/extension/radar-client.ts

@@ -36,7 +36,7 @@ export const RADAR_PROTOCOL_VERSION = 2;
  * Revision 5 names attempts by claim_id and requires exact-claim controls.
  * Earlier daemons expose different identity fields; require a coordinated update.
  */
-export const RADAR_MINIMUM_REVISION = 5;
+export const RADAR_MINIMUM_REVISION = 6;
 /** Public daemon contracts this client may preflight. */
 export const RADAR_REGISTRY_CONTRACT = "registry.v1";
 export const RADAR_REGISTRY_FACTS_CONTRACT = "registry.facts.v1";
@@ -517,7 +517,7 @@ function decodePresenceAnswer(value: unknown): RadarResult<RadarPresenceAnswer>
 	if (
 		!isUuid(registrationId) ||
 		!isUuid(claimId) ||
-		!["pending", "granted", "duplicate", "released"].includes(String(standing)) ||
+		!["reserved", "pending", "granted", "duplicate", "released"].includes(String(standing)) ||
 		(subjectId !== undefined && !isUuid(subjectId)) ||
 		(standing === "granted" && !isUuid(subjectId))
 	)
@@ -745,7 +745,7 @@ function unresolvedOperation(requestId: string, detail: string): RadarResult<nev
 	};
 }
 
-export const RADAR_SPAWN_TOKEN_ENV = "PI_RADAR_SPAWN_TOKEN";
+export const RADAR_REGISTRATION_ENV = "PI_RADAR_REGISTRATION_ID";
 const RADAR_MANAGED_IDENTITY_ENV = new Set([
 	"PI_RADAR_MANAGED_SUBJECT_ID",
 	"PI_RADAR_MANAGED_LAUNCH_ID",
@@ -975,8 +975,8 @@ function spawnRequestShape(request: {
 	const env = Object.entries(request.env ?? {});
 	if (env.length > 256) return "spawn env names more than 256 entries";
 	for (const [name, value] of env) {
-		if (name === RADAR_SPAWN_TOKEN_ENV)
-			return `spawn env cannot set the reserved ${RADAR_SPAWN_TOKEN_ENV}`;
+		if (name === RADAR_REGISTRATION_ENV)
+			return `spawn env cannot set the reserved ${RADAR_REGISTRATION_ENV}`;
 		if (RADAR_MANAGED_IDENTITY_ENV.has(name))
 			return `spawn env cannot set Radar-issued identity variable ${name}`;
 		if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name) || /\p{Cc}/u.test(value))

package/extension/radar-execution.ts

@@ -51,10 +51,10 @@ export type RadarExecutionOptions = {
 	 */
 	location?: () => Promise<RadarLocationResolution>;
 	/**
-	 * A daemon-spawned child's one-use launch token, captured before this process
-	 * could observe anything else. It travels with the registration request only.
+	 * Registration allocated by Radar before this process launched. Normally
+	 * captured from the launch environment by the process-local publication.
 	 */
-	spawnToken?: string;
+	launchRegistrationId?: string;
 	/** Only a real fixed managed assignment is part of immutable registration. */
 	managedBinding?: { key: string; run: string; owner: string; label: string };
 	/**
@@ -207,8 +207,8 @@ export function createRadarExecutionAdapter(
 				? { location: options.location }
 				: {}),
 			...(managed !== undefined ? { binding: managed } : {}),
-			...(options.spawnToken !== undefined
-				? { spawnToken: options.spawnToken }
+			...(options.launchRegistrationId !== undefined
+				? { launchRegistrationId: options.launchRegistrationId }
 				: {}),
 		});
 	} catch {

package/extension/radar-publication.ts

@@ -269,6 +269,7 @@ export function createPublicationStore(root: string): PublicationStore {
  */
 export type RadarProcessSlot = {
 	incarnation?: string;
+	launchRegistrationId?: string;
 	publications: Map<string, RadarPublication>;
 };
 
@@ -280,7 +281,13 @@ export function radarProcessSlot(): RadarProcessSlot {
 	const host = globalThis as typeof globalThis & {
 		[PROCESS_SLOT]?: RadarProcessSlot;
 	};
-	return (host[PROCESS_SLOT] ??= createRadarProcessSlot());
+	if (!host[PROCESS_SLOT]) {
+		const slot = createRadarProcessSlot();
+		slot.launchRegistrationId = process.env.PI_RADAR_REGISTRATION_ID;
+		delete process.env.PI_RADAR_REGISTRATION_ID;
+		host[PROCESS_SLOT] = slot;
+	}
+	return host[PROCESS_SLOT];
 }
 
 /** The process incarnation, created on first use and kept for the process. */
@@ -975,7 +982,6 @@ function createPresenceReporter(input: PresenceReporterInput): RadarPresenceRepo
 	type State = {
 		version: 2;
 		claim_id: string;
-	initial_load?: boolean;
 		session: string;
 		registration_id?: string;
 		subject_id?: string;
@@ -1033,13 +1039,6 @@ function createPresenceReporter(input: PresenceReporterInput): RadarPresenceRepo
 			await releasePending();
 			const registration = await input.registration();
 			if (!registration?.process || state !== claim || stopped) return undefined;
-			// The first load spends the pre-minted launch claim. Reloads get a fresh
-			// claim; they must not reuse the released launch credential.
-			if (claim.initial_load) {
-				if (registration.spawn_token) claim.claim_id = registration.spawn_token;
-				claim.initial_load = false;
-				if (!save()) return undefined;
-			}
 			const answer = await client.presence({
 				...registration, process: registration.process,
 				session_id: claim.session, claim_id: claim.claim_id,
@@ -1079,7 +1078,7 @@ function createPresenceReporter(input: PresenceReporterInput): RadarPresenceRepo
 				releases.push({ registration_id: state.registration_id, claim_id: state.claim_id });
 			}
 			standing = undefined;
-			state = { version: 2, session, claim_id: randomUUID(), initial_load: state === undefined, releases };
+			state = { version: 2, session, claim_id: randomUUID(), releases };
 			save(); stopped = false;
 			void ensure();
 		},
@@ -1159,7 +1158,7 @@ export type RadarPublicationOptions = {
 	/** Set on a managed child: the sidecar its owner correlates the subject with. */
 	binding?: { key: string; run: string; owner: string; label: string };
 	/** A daemon-spawned child's one-use launch token; sent privately, never stored in the process record. */
-	spawnToken?: string;
+	launchRegistrationId?: string;
 	leaseMs?: number;
 	heartbeatMs?: number;
 };
@@ -1234,8 +1233,8 @@ function createRadarPublicationInner(
 	const store = options.store ?? createPublicationStore(dataRoot);
 	const scheduler = options.scheduler ?? systemScheduler;
 	const client = options.client;
-	const spawnToken = options.spawnToken;
 	const slot = options.slot ?? radarProcessSlot();
+	const launchRegistrationId = options.launchRegistrationId ?? slot.launchRegistrationId;
 	const incarnation = options.incarnation ?? radarProcessIncarnation(slot);
 
 	const cacheKey = `${
@@ -1424,7 +1423,7 @@ function createRadarPublicationInner(
 			const { location: _initialLocation, ...identity } = record.registration;
 			return { ...identity,
 				...(location?.state === "resolved" ? { location: location.location } : {}),
-				...(spawnToken ? { spawn_token: spawnToken } : {}),
+				...(launchRegistrationId ? { registration_id: launchRegistrationId } : {}),
 			};
 		},
 		heartbeatMs: options.heartbeatMs ?? RADAR_HEARTBEAT_MS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-radar",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "type": "module",
   "description": "Radar daemon client, communication, publication, execution, location, launch and inspection surface for Pi extensions.",
   "license": "Apache-2.0",

package/schema/public/v1/observation-get-response.deserialize.schema.json

@@ -2098,6 +2098,13 @@
         },
         "registration": {
           "$ref": "#/$defs/PublicRegistration"
+        },
+        "scoped": {
+          "description": "Whether this process runs inside a Radar-established execution scope. A\nprocess started outside the managed launch path has none and is observed.",
+          "type": [
+            "boolean",
+            "null"
+          ]
         }
       },
       "required": [
@@ -2424,6 +2431,7 @@
     },
     "Standing": {
       "enum": [
+        "reserved",
         "pending",
         "granted",
         "duplicate",

package/schema/public/v1/observation-get-response.serialize.schema.json

@@ -2201,6 +2201,13 @@
         },
         "registration": {
           "$ref": "#/$defs/PublicRegistration"
+        },
+        "scoped": {
+          "description": "Whether this process runs inside a Radar-established execution scope. A\nprocess started outside the managed launch path has none and is observed.",
+          "type": [
+            "boolean",
+            "null"
+          ]
         }
       },
       "required": [
@@ -2543,6 +2550,7 @@
     },
     "Standing": {
       "enum": [
+        "reserved",
         "pending",
         "granted",
         "duplicate",

package/schema/public/v1/observation-snapshot.deserialize.schema.json

@@ -1963,6 +1963,13 @@
         },
         "registration": {
           "$ref": "#/$defs/PublicRegistration"
+        },
+        "scoped": {
+          "description": "Whether this process runs inside a Radar-established execution scope. A\nprocess started outside the managed launch path has none and is observed.",
+          "type": [
+            "boolean",
+            "null"
+          ]
         }
       },
       "required": [
@@ -2289,6 +2296,7 @@
     },
     "Standing": {
       "enum": [
+        "reserved",
         "pending",
         "granted",
         "duplicate",

package/schema/public/v1/observation-snapshot.serialize.schema.json

@@ -2057,6 +2057,13 @@
         },
         "registration": {
           "$ref": "#/$defs/PublicRegistration"
+        },
+        "scoped": {
+          "description": "Whether this process runs inside a Radar-established execution scope. A\nprocess started outside the managed launch path has none and is observed.",
+          "type": [
+            "boolean",
+            "null"
+          ]
         }
       },
       "required": [
@@ -2399,6 +2406,7 @@
     },
     "Standing": {
       "enum": [
+        "reserved",
         "pending",
         "granted",
         "duplicate",

package/schema/public/v1/presence-answer.deserialize.schema.json

@@ -2,6 +2,7 @@
   "$defs": {
     "Standing": {
       "enum": [
+        "reserved",
         "pending",
         "granted",
         "duplicate",

package/schema/public/v1/presence-answer.serialize.schema.json

@@ -2,6 +2,7 @@
   "$defs": {
     "Standing": {
       "enum": [
+        "reserved",
         "pending",
         "granted",
         "duplicate",

package/schema/public/v1/presence-report.deserialize.schema.json

@@ -122,13 +122,6 @@
     "source": {
       "type": "string"
     },
-    "spawn_token": {
-      "default": null,
-      "type": [
-        "string",
-        "null"
-      ]
-    },
     "subject_id": {
       "default": null,
       "type": [

package/schema/public/v1/presence-report.serialize.schema.json

@@ -123,13 +123,6 @@
     "source": {
       "type": "string"
     },
-    "spawn_token": {
-      "default": null,
-      "type": [
-        "string",
-        "null"
-      ]
-    },
     "subject_id": {
       "default": null,
       "type": [
@@ -147,7 +140,6 @@
     "registration_id",
     "subject_id",
     "location",
-    "spawn_token",
     "owner",
     "run",
     "label"