@acme-engine/core 0.1.0

package/dist/model.d.ts

@@ -0,0 +1,125 @@
+import type { ExecutionId, IsoTimestamp, JsonValue } from './common.js';
+import type { AcmeErrorData } from './errors.js';
+export interface ModelCapabilities {
+    readonly structuredOutput: boolean;
+    readonly tools: boolean;
+    readonly vision: boolean;
+    readonly maxInputTokens?: number;
+    readonly maxOutputTokens?: number;
+}
+export type ModelContentPart = {
+    readonly type: 'text';
+    readonly text: string;
+} | {
+    readonly type: 'image';
+    readonly mediaType: string;
+    readonly dataRef: string;
+} | {
+    readonly type: 'tool-result';
+    readonly toolCallId: string;
+    readonly value: JsonValue;
+} | {
+    readonly type: 'tool-call';
+    readonly toolCallId: string;
+    readonly name: string;
+    readonly arguments: JsonValue;
+};
+export interface ModelMessage {
+    readonly role: 'system' | 'user' | 'assistant' | 'tool';
+    readonly content: readonly ModelContentPart[];
+}
+export type ModelJsonOutput = {
+    readonly mode: 'json';
+    readonly schemaName: string;
+    readonly jsonSchema: JsonValue;
+};
+export type ModelTextOutput = {
+    readonly mode: 'text';
+};
+export type ModelOutputSpec = ModelJsonOutput | ModelTextOutput;
+export interface ModelFunctionTool {
+    readonly type: 'function';
+    readonly name: string;
+    readonly description?: string;
+    readonly parameters: JsonValue;
+}
+export interface ModelRequest {
+    readonly messages: readonly ModelMessage[];
+    readonly output: ModelOutputSpec;
+    readonly tools?: readonly ModelFunctionTool[];
+    readonly temperature?: number;
+    readonly topP?: number;
+    readonly maxOutputTokens?: number;
+    readonly stop?: readonly string[];
+    readonly reasoningBudget?: number;
+    readonly enableThinking?: boolean;
+    readonly reasoningEffort?: string;
+    readonly seed?: number;
+}
+export declare function isJsonModelOutput(output: ModelOutputSpec): output is ModelJsonOutput;
+export interface ModelSelection {
+    readonly profile: string;
+    readonly providerHint?: string;
+    readonly modelHint?: string;
+}
+export interface GatewayCallContext {
+    readonly executionId: ExecutionId;
+    readonly callKey: string;
+    readonly selection: ModelSelection;
+    readonly requiredCapabilities: Partial<ModelCapabilities>;
+    readonly timeoutMs: number;
+    readonly signal: AbortSignal;
+}
+export interface NormalizedUsage {
+    readonly inputTokens?: number;
+    readonly outputTokens?: number;
+    readonly totalTokens?: number;
+    readonly estimatedCostMinor?: number;
+    readonly currency?: string;
+}
+export interface NormalizedToolCall {
+    readonly toolCallId: string;
+    readonly name: string;
+    readonly arguments: JsonValue;
+}
+export interface NormalizedModelResponse {
+    readonly provider: string;
+    readonly model: string;
+    readonly providerResponseId?: string;
+    readonly receivedAt: IsoTimestamp;
+    readonly finishReason: 'stop' | 'length' | 'tool' | 'content-filter' | 'unknown';
+    readonly text: string;
+    readonly toolCalls?: readonly NormalizedToolCall[];
+    readonly usage: NormalizedUsage;
+    readonly metadata: Readonly<Record<string, JsonValue>>;
+}
+export type ModelStreamEvent = {
+    readonly type: 'reasoning-delta';
+    readonly sequence: number;
+    readonly text: string;
+} | {
+    readonly type: 'content-delta';
+    readonly sequence: number;
+    readonly text: string;
+} | {
+    readonly type: 'tool-call-delta';
+    readonly sequence: number;
+    readonly index: number;
+    readonly toolCallId?: string;
+    readonly name?: string;
+    readonly argumentsDelta?: string;
+} | {
+    readonly type: 'completed';
+    readonly sequence: number;
+    readonly response: NormalizedModelResponse;
+} | {
+    readonly type: 'failed';
+    readonly sequence: number;
+    readonly error: AcmeErrorData;
+};
+export interface ModelGateway {
+    capabilities(selection: ModelSelection): Promise<ModelCapabilities>;
+    generate(request: ModelRequest, context: GatewayCallContext): Promise<NormalizedModelResponse>;
+    stream?(request: ModelRequest, context: GatewayCallContext): AsyncIterable<ModelStreamEvent>;
+}
+//# sourceMappingURL=model.d.ts.map

package/dist/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IACE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B,CAAC;AAEN,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC/C;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,eAAe,GAAG,eAAe,CAAC;AAEhE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC9C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,eAAe,GACtB,MAAM,IAAI,eAAe,CAE3B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC1D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC;IAClC,QAAQ,CAAC,YAAY,EACnB,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACnD,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;CACxD;AAED,MAAM,MAAM,gBAAgB,GACxB;IACE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;CAC5C,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;CAC/B,CAAC;AAEN,MAAM,WAAW,YAAY;IAC3B,YAAY,CAAC,SAAS,EAAE,cAAc,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACpE,QAAQ,CACN,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,MAAM,CAAC,CACL,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,kBAAkB,GAC1B,aAAa,CAAC,gBAAgB,CAAC,CAAC;CACpC"}

package/dist/model.js

@@ -0,0 +1,4 @@
+export function isJsonModelOutput(output) {
+    return output.mode === 'json';
+}
+//# sourceMappingURL=model.js.map

package/dist/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAoEA,MAAM,UAAU,iBAAiB,CAC/B,MAAuB;IAEvB,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC;AAChC,CAAC"}

package/dist/modules.d.ts

@@ -0,0 +1,83 @@
+import type { DiagnosticFact, EntityId, ExecutionId, IsoTimestamp, JsonValue, Namespace, Schema, StoredDocument } from './common.js';
+import type { ContractRef } from './contracts.js';
+import type { AppliedMemoryResolution, DomainMemoryPolicy, MemoryCandidate, MemoryRecord } from './memory.js';
+import type { DomainIssue, StateSnapshot } from './state.js';
+export type ModuleRole = 'producer' | 'analyzer' | 'transformer';
+export interface ExecutionReadContext<TState> {
+    readonly executionId: ExecutionId;
+    readonly entityId: EntityId;
+    readonly now: IsoTimestamp;
+    readonly state: StateSnapshot<TState> | null;
+    readonly memories: readonly MemoryRecord[];
+    readonly documents: readonly StoredDocument[];
+}
+export interface CandidateDocument {
+    readonly key: string;
+    readonly kind: string;
+    readonly schemaVersion: string;
+    readonly value: JsonValue;
+    readonly contentHash: string;
+}
+export interface CandidateEvent {
+    readonly key: string;
+    readonly type: string;
+    readonly schemaVersion: string;
+    readonly payload: JsonValue;
+}
+export interface StateDelta<TDelta> {
+    readonly schemaVersion: string;
+    readonly value: TDelta;
+}
+export interface ModuleResult<TDelta> {
+    readonly documents: readonly CandidateDocument[];
+    readonly memories: readonly MemoryCandidate[];
+    readonly stateIntent?: StateDelta<TDelta>;
+    readonly events: readonly CandidateEvent[];
+    readonly diagnostics: readonly DiagnosticFact[];
+}
+export interface StateProjectionMemoryDecision {
+    readonly candidate: MemoryCandidate;
+    readonly identityKey: string;
+    readonly resolution: AppliedMemoryResolution;
+    readonly affectedMemoryIds: readonly string[];
+}
+export interface StateProjectionInput<TDelta> {
+    readonly stateIntent?: StateDelta<TDelta>;
+    readonly memory: readonly StateProjectionMemoryDecision[];
+}
+export interface TaskDefinition<TInput, TContractInput, TContractOutput, TState, TDelta> {
+    readonly role: ModuleRole;
+    readonly inputSchema: Schema<TInput>;
+    readonly contract: ContractRef;
+    project(input: TInput, context: ExecutionReadContext<TState>): Promise<TContractInput> | TContractInput;
+    interpret(output: TContractOutput, input: TInput, context: ExecutionReadContext<TState>): Promise<ModuleResult<TDelta>> | ModuleResult<TDelta>;
+    projectState(input: StateProjectionInput<TDelta>, context: ExecutionReadContext<TState>): StateDelta<TDelta> | undefined;
+}
+export type AnyTaskDefinition<TState, TDelta> = TaskDefinition<any, any, any, TState, TDelta>;
+export type TaskMap<TState, TDelta> = Readonly<Record<string, AnyTaskDefinition<TState, TDelta>>>;
+export interface DomainModule<TState, TDelta, TTasks extends TaskMap<TState, TDelta>> {
+    readonly namespace: Namespace;
+    readonly stateSchemaVersion: string;
+    readonly deltaSchemaVersion: string;
+    readonly stateSchema: Schema<TState>;
+    readonly deltaSchema: Schema<TDelta>;
+    readonly tasks: TTasks;
+    readonly memoryPolicy: DomainMemoryPolicy;
+    initialState(context: {
+        readonly entityId: EntityId;
+        readonly now: IsoTimestamp;
+    }): TState;
+    reduce(state: TState, delta: TDelta): TState;
+    invariants(next: TState, previous: TState | null): readonly DomainIssue[];
+}
+export type AnyDomainModule = DomainModule<any, any, TaskMap<any, any>>;
+export type TaskName<M extends AnyDomainModule> = Extract<keyof M['tasks'], string>;
+export type TaskInput<M extends AnyDomainModule, K extends TaskName<M>> = M['tasks'][K] extends TaskDefinition<infer TInput, any, any, any, any> ? TInput : never;
+export type TaskContractOutput<M extends AnyDomainModule, K extends TaskName<M>> = M['tasks'][K] extends TaskDefinition<any, any, infer TContractOutput, any, any> ? TContractOutput : never;
+export interface ModuleRegistry {
+    get(namespace: Namespace): AnyDomainModule;
+    list(): readonly Namespace[];
+}
+export declare function defineTask<TInput, TContractInput, TContractOutput, TState, TDelta>(task: TaskDefinition<TInput, TContractInput, TContractOutput, TState, TDelta>): TaskDefinition<TInput, TContractInput, TContractOutput, TState, TDelta>;
+export declare function defineModule<TState, TDelta, const TTasks extends TaskMap<TState, TDelta>>(module: DomainModule<TState, TDelta, TTasks>): DomainModule<TState, TDelta, TTasks>;
+//# sourceMappingURL=modules.d.ts.map

package/dist/modules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modules.d.ts","sourceRoot":"","sources":["../src/modules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,SAAS,EACT,SAAS,EACT,MAAM,EACN,cAAc,EACf,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EACV,uBAAuB,EACvB,kBAAkB,EAClB,eAAe,EACf,YAAY,EACb,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE7D,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,CAAC;AAEjE,MAAM,WAAW,oBAAoB,CAAC,MAAM;IAC1C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU,CAAC,MAAM;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,YAAY,CAAC,MAAM;IAClC,QAAQ,CAAC,SAAS,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,SAAS,cAAc,EAAE,CAAC;CACjD;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,oBAAoB,CAAC,MAAM;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,SAAS,6BAA6B,EAAE,CAAC;CAC3D;AAED,MAAM,WAAW,cAAc,CAC7B,MAAM,EACN,cAAc,EACd,eAAe,EACf,MAAM,EACN,MAAM;IAEN,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,OAAO,CACL,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC,GACpC,OAAO,CAAC,cAAc,CAAC,GAAG,cAAc,CAAC;IAC5C,SAAS,CACP,MAAM,EAAE,eAAe,EACvB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC,GACpC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACxD,YAAY,CACV,KAAK,EAAE,oBAAoB,CAAC,MAAM,CAAC,EACnC,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC,GACpC,UAAU,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;CACnC;AAGD,MAAM,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,IAAI,cAAc,CAE5D,GAAG,EAEH,GAAG,EAEH,GAAG,EACH,MAAM,EACN,MAAM,CACP,CAAC;AAEF,MAAM,MAAM,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,QAAQ,CAC5C,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAClD,CAAC;AAEF,MAAM,WAAW,YAAY,CAC3B,MAAM,EACN,MAAM,EACN,MAAM,SAAS,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC;IAEtC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,YAAY,CAAC,OAAO,EAAE;QACpB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC5B,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;KAC5B,GAAG,MAAM,CAAC;IACX,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7C,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,WAAW,EAAE,CAAC;CAC3E;AAID,MAAM,MAAM,eAAe,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAExE,MAAM,MAAM,QAAQ,CAAC,CAAC,SAAS,eAAe,IAAI,OAAO,CACvD,MAAM,CAAC,CAAC,OAAO,CAAC,EAChB,MAAM,CACP,CAAC;AAEF,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,eAAe,EAAE,CAAC,SAAS,QAAQ,CAAC,CAAC,CAAC,IACpE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,cAAc,CAClC,MAAM,MAAM,EAEZ,GAAG,EAEH,GAAG,EAEH,GAAG,EAEH,GAAG,CACJ,GACG,MAAM,GACN,KAAK,CAAC;AAEZ,MAAM,MAAM,kBAAkB,CAC5B,CAAC,SAAS,eAAe,EACzB,CAAC,SAAS,QAAQ,CAAC,CAAC,CAAC,IAErB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,cAAc,CAElC,GAAG,EAEH,GAAG,EACH,MAAM,eAAe,EAErB,GAAG,EAEH,GAAG,CACJ,GACG,eAAe,GACf,KAAK,CAAC;AAEZ,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,SAAS,EAAE,SAAS,GAAG,eAAe,CAAC;IAC3C,IAAI,IAAI,SAAS,SAAS,EAAE,CAAC;CAC9B;AAED,wBAAgB,UAAU,CACxB,MAAM,EACN,cAAc,EACd,eAAe,EACf,MAAM,EACN,MAAM,EAEN,IAAI,EAAE,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,GAC5E,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,CAEzE;AAED,wBAAgB,YAAY,CAC1B,MAAM,EACN,MAAM,EACN,KAAK,CAAC,MAAM,SAAS,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAE5C,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAC3C,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAEtC"}

package/dist/modules.js

@@ -0,0 +1,7 @@
+export function defineTask(task) {
+    return task;
+}
+export function defineModule(module) {
+    return module;
+}
+//# sourceMappingURL=modules.js.map

package/dist/modules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modules.js","sourceRoot":"","sources":["../src/modules.ts"],"names":[],"mappings":"AAkLA,MAAM,UAAU,UAAU,CAOxB,IAA6E;IAE7E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAK1B,MAA4C;IAE5C,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/outbox.d.ts

@@ -0,0 +1,88 @@
+import type { Clock, DiagnosticFact, IsoTimestamp } from './common.js';
+import { type AcmeErrorData } from './errors.js';
+import type { DomainEventRecord, ExecutionRepository } from './repository.js';
+/** Versioned drain report identity. */
+export declare const ACME_OUTBOX_DRAIN_REPORT = "acme-outbox-drain-report/1";
+/** Versioned redrive report identity. */
+export declare const ACME_OUTBOX_REDRIVE_REPORT = "acme-outbox-redrive-report/1";
+/**
+ * Delivers one committed domain event. A rejected promise is a delivery
+ * failure. Transports live in composition roots, never in core (ADR-0018).
+ */
+export interface OutboxDispatcher {
+    deliver(event: DomainEventRecord): Promise<void>;
+}
+/**
+ * Decides what happens after a failed delivery. Returning a delay retries the
+ * entry that many milliseconds later; returning `null` gives up and marks the
+ * entry `failed`. The repository owns no retry policy.
+ */
+export type OutboxRetryPolicy = (attemptCount: number) => number | null;
+export interface OutboxDrainOptions {
+    readonly repository: ExecutionRepository;
+    readonly dispatcher: OutboxDispatcher;
+    readonly clock: Clock;
+    /** Maximum entries leased by this call. */
+    readonly limit: number;
+    /** How long a lease stays exclusive before the entry is available again. */
+    readonly leaseTimeoutMs: number;
+    /** Defaults to a single retry after the lease timeout, then `failed`. */
+    readonly retry?: OutboxRetryPolicy;
+}
+export type OutboxDeliveryOutcome = 'delivered' | 'retry-scheduled' | 'failed';
+export interface OutboxDrainEntryReport {
+    readonly eventId: string;
+    readonly attemptCount: number;
+    readonly outcome: OutboxDeliveryOutcome;
+    readonly retryAt?: IsoTimestamp;
+    readonly error?: AcmeErrorData;
+}
+export interface OutboxDrainReport {
+    readonly report: typeof ACME_OUTBOX_DRAIN_REPORT;
+    readonly leasedAt: IsoTimestamp;
+    readonly leased: number;
+    readonly delivered: number;
+    readonly retryScheduled: number;
+    readonly failed: number;
+    readonly entries: readonly OutboxDrainEntryReport[];
+    readonly diagnostics: readonly DiagnosticFact[];
+}
+export interface OutboxRedriveOptions {
+    readonly repository: ExecutionRepository;
+    readonly clock: Clock;
+    /**
+     * Specific event ids to redrive. When omitted, every `failed` entry up to
+     * `limit` is selected in list order.
+     */
+    readonly eventIds?: readonly string[];
+    /** Maximum entries to redrive in this call. */
+    readonly limit: number;
+}
+export interface OutboxRedriveEntryReport {
+    readonly eventId: string;
+    readonly outcome: 'redriven';
+    readonly availableAt: IsoTimestamp;
+    readonly attemptCount: number;
+}
+export interface OutboxRedriveReport {
+    readonly report: typeof ACME_OUTBOX_REDRIVE_REPORT;
+    readonly redrivenAt: IsoTimestamp;
+    readonly redriven: number;
+    readonly entries: readonly OutboxRedriveEntryReport[];
+}
+/**
+ * Leases one bounded batch of due outbox entries, delivers each through the
+ * dispatcher and settles every outcome (ADR-0018).
+ *
+ * Exactly one leased batch per call: no internal loop and no recursion. A
+ * caller that wants the outbox emptied calls again and sees each batch.
+ * Delivery is at-least-once — a crash between `deliver` and its settlement
+ * re-delivers once the lease expires.
+ */
+export declare function drainOutbox(options: OutboxDrainOptions): Promise<OutboxDrainReport>;
+/**
+ * Move terminal `failed` outbox entries back to `pending` so a later drain
+ * may lease them (ACME-0059). One bounded batch; never redrives `delivered`.
+ */
+export declare function redriveOutbox(options: OutboxRedriveOptions): Promise<OutboxRedriveReport>;
+//# sourceMappingURL=outbox.d.ts.map

package/dist/outbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.d.ts","sourceRoot":"","sources":["../src/outbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAa,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,KAAK,EAEV,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,iBAAiB,CAAC;AAEzB,uCAAuC;AACvC,eAAO,MAAM,wBAAwB,+BAA+B,CAAC;AAErE,yCAAyC;AACzC,eAAO,MAAM,0BAA0B,iCAAiC,CAAC;AAEzE;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClD;AAED;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;AAExE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,2CAA2C;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,yEAAyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC;CACpC;AAED,MAAM,MAAM,qBAAqB,GAAG,WAAW,GAAG,iBAAiB,GAAG,QAAQ,CAAC;AAE/E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,OAAO,wBAAwB,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACpD,QAAQ,CAAC,WAAW,EAAE,SAAS,cAAc,EAAE,CAAC;CACjD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,OAAO,0BAA0B,CAAC;IACnD,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACvD;AAsDD;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CA4C5B;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAyD9B"}

package/dist/outbox.js

@@ -0,0 +1,180 @@
+import { AcmeError } from './errors.js';
+/** Versioned drain report identity. */
+export const ACME_OUTBOX_DRAIN_REPORT = 'acme-outbox-drain-report/1';
+/** Versioned redrive report identity. */
+export const ACME_OUTBOX_REDRIVE_REPORT = 'acme-outbox-redrive-report/1';
+const TIMESTAMP = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u;
+function invalid(message, details) {
+    throw new AcmeError({
+        code: 'INVALID_REQUEST',
+        message,
+        stage: 'accepted',
+        retryable: false,
+        ...(details === undefined ? {} : { details: details }),
+    });
+}
+function requireTimestamp(value) {
+    if (!TIMESTAMP.test(value) ||
+        Number.isNaN(Date.parse(value)) ||
+        new Date(value).toISOString() !== value) {
+        invalid('Clock returned a non-canonical UTC timestamp.');
+    }
+    return value;
+}
+function shift(from, milliseconds) {
+    return new Date(Date.parse(from) + milliseconds).toISOString();
+}
+function failureData(error) {
+    if (error instanceof AcmeError) {
+        return error.data;
+    }
+    return Object.freeze({
+        code: 'INTERNAL',
+        message: error instanceof Error
+            ? `Outbox delivery failed: ${error.message}`
+            : 'Outbox delivery failed with a non-Error value.',
+        stage: 'committed',
+        retryable: true,
+    });
+}
+function deepFreeze(value) {
+    if (value !== null && typeof value === 'object' && !Object.isFrozen(value)) {
+        Object.freeze(value);
+        for (const child of Object.values(value)) {
+            deepFreeze(child);
+        }
+    }
+    return value;
+}
+/**
+ * Leases one bounded batch of due outbox entries, delivers each through the
+ * dispatcher and settles every outcome (ADR-0018).
+ *
+ * Exactly one leased batch per call: no internal loop and no recursion. A
+ * caller that wants the outbox emptied calls again and sees each batch.
+ * Delivery is at-least-once — a crash between `deliver` and its settlement
+ * re-delivers once the lease expires.
+ */
+export async function drainOutbox(options) {
+    if (!Number.isSafeInteger(options.limit) || options.limit <= 0) {
+        invalid('Outbox drain limit must be a positive integer.', {
+            limit: options.limit,
+        });
+    }
+    if (!Number.isSafeInteger(options.leaseTimeoutMs) ||
+        options.leaseTimeoutMs <= 0) {
+        invalid('Outbox lease timeout must be a positive integer.', {
+            leaseTimeoutMs: options.leaseTimeoutMs,
+        });
+    }
+    const now = requireTimestamp(options.clock.now());
+    const leaseExpiresAt = shift(now, options.leaseTimeoutMs);
+    const retry = options.retry ??
+        ((attempt) => (attempt <= 1 ? options.leaseTimeoutMs : null));
+    const leased = await options.repository.leaseOutbox({
+        now,
+        limit: options.limit,
+        leaseExpiresAt,
+    });
+    const entries = [];
+    for (const entry of leased) {
+        entries.push(await settle(options, entry, now, retry));
+    }
+    return deepFreeze({
+        report: ACME_OUTBOX_DRAIN_REPORT,
+        leasedAt: now,
+        leased: leased.length,
+        delivered: entries.filter((entry) => entry.outcome === 'delivered').length,
+        retryScheduled: entries.filter((entry) => entry.outcome === 'retry-scheduled').length,
+        failed: entries.filter((entry) => entry.outcome === 'failed').length,
+        entries,
+        diagnostics: [],
+    });
+}
+/**
+ * Move terminal `failed` outbox entries back to `pending` so a later drain
+ * may lease them (ACME-0059). One bounded batch; never redrives `delivered`.
+ */
+export async function redriveOutbox(options) {
+    if (!Number.isSafeInteger(options.limit) || options.limit <= 0) {
+        invalid('Outbox redrive limit must be a positive integer.', {
+            limit: options.limit,
+        });
+    }
+    const now = requireTimestamp(options.clock.now());
+    const entries = [];
+    if (options.eventIds !== undefined && options.eventIds.length > 0) {
+        if (options.eventIds.length > options.limit) {
+            invalid('eventIds length exceeds redrive limit.', {
+                count: options.eventIds.length,
+                limit: options.limit,
+            });
+        }
+        for (const eventId of options.eventIds) {
+            if (typeof eventId !== 'string' || eventId.trim().length === 0) {
+                invalid('eventIds must be non-empty strings.');
+            }
+            await options.repository.redriveOutbox({
+                eventId,
+                availableAt: now,
+            });
+            entries.push({
+                eventId,
+                outcome: 'redriven',
+                availableAt: now,
+                attemptCount: 0,
+            });
+        }
+    }
+    else {
+        const failed = await options.repository.listOutbox({
+            status: 'failed',
+            limit: options.limit,
+        });
+        for (const entry of failed) {
+            await options.repository.redriveOutbox({
+                eventId: entry.record.eventId,
+                availableAt: now,
+            });
+            entries.push({
+                eventId: entry.record.eventId,
+                outcome: 'redriven',
+                availableAt: now,
+                attemptCount: entry.record.attemptCount,
+            });
+        }
+    }
+    return deepFreeze({
+        report: ACME_OUTBOX_REDRIVE_REPORT,
+        redrivenAt: now,
+        redriven: entries.length,
+        entries,
+    });
+}
+async function settle(options, entry, now, retry) {
+    const { eventId, attemptCount } = entry.record;
+    try {
+        await options.dispatcher.deliver(entry.event);
+    }
+    catch (error) {
+        const data = failureData(error);
+        const delay = retry(attemptCount);
+        const retryAt = delay === null ? undefined : shift(now, delay);
+        await options.repository.markOutboxFailed({
+            eventId,
+            error: data,
+            failedAt: now,
+            ...(retryAt === undefined ? {} : { retryAt }),
+        });
+        return {
+            eventId,
+            attemptCount,
+            outcome: retryAt === undefined ? 'failed' : 'retry-scheduled',
+            ...(retryAt === undefined ? {} : { retryAt }),
+            error: data,
+        };
+    }
+    await options.repository.markOutboxDelivered({ eventId, deliveredAt: now });
+    return { eventId, attemptCount, outcome: 'delivered' };
+}
+//# sourceMappingURL=outbox.js.map

package/dist/outbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.js","sourceRoot":"","sources":["../src/outbox.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAsB,MAAM,aAAa,CAAC;AAO5D,uCAAuC;AACvC,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AAErE,yCAAyC;AACzC,MAAM,CAAC,MAAM,0BAA0B,GAAG,8BAA8B,CAAC;AA4EzE,MAAM,SAAS,GAAG,gDAAgD,CAAC;AAEnE,SAAS,OAAO,CAAC,OAAe,EAAE,OAAiC;IACjE,MAAM,IAAI,SAAS,CAAC;QAClB,IAAI,EAAE,iBAAiB;QACvB,OAAO;QACP,KAAK,EAAE,UAAU;QACjB,SAAS,EAAE,KAAK;QAChB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAgB,EAAE,CAAC;KAChE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IACE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EACvC,CAAC;QACD,OAAO,CAAC,+CAA+C,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,IAAkB,EAAE,YAAoB;IACrD,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,OAAO,EACL,KAAK,YAAY,KAAK;YACpB,CAAC,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE;YAC5C,CAAC,CAAC,gDAAgD;QACtD,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAA2B;IAE3B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/D,OAAO,CAAC,gDAAgD,EAAE;YACxD,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IACD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC;QAC7C,OAAO,CAAC,cAAc,IAAI,CAAC,EAC3B,CAAC;QACD,OAAO,CAAC,kDAAkD,EAAE;YAC1D,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1D,MAAM,KAAK,GACT,OAAO,CAAC,KAAK;QACb,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC;QAClD,GAAG;QACH,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,cAAc;KACf,CAAC,CAAC;IAEH,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,UAAU,CAAC;QAChB,MAAM,EAAE,wBAAwB;QAChC,QAAQ,EAAE,GAAG;QACb,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,MAAM;QAC1E,cAAc,EAAE,OAAO,CAAC,MAAM,CAC5B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,iBAAiB,CAC/C,CAAC,MAAM;QACR,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,MAAM;QACpE,OAAO;QACP,WAAW,EAAE,EAAE;KAChB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA6B;IAE7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/D,OAAO,CAAC,kDAAkD,EAAE;YAC1D,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAElD,MAAM,OAAO,GAA+B,EAAE,CAAC;IAE/C,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;YAC5C,OAAO,CAAC,wCAAwC,EAAE;gBAChD,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/D,OAAO,CAAC,qCAAqC,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC;gBACrC,OAAO;gBACP,WAAW,EAAE,GAAG;aACjB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO;gBACP,OAAO,EAAE,UAAU;gBACnB,WAAW,EAAE,GAAG;gBAChB,YAAY,EAAE,CAAC;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;YACjD,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC;gBACrC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;gBAC7B,WAAW,EAAE,GAAG;aACjB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;gBAC7B,OAAO,EAAE,UAAU;gBACnB,WAAW,EAAE,GAAG;gBAChB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY;aACxC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;QAChB,MAAM,EAAE,0BAA0B;QAClC,UAAU,EAAE,GAAG;QACf,QAAQ,EAAE,OAAO,CAAC,MAAM;QACxB,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,OAA2B,EAC3B,KAAwB,EACxB,GAAiB,EACjB,KAAwB;IAExB,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/D,MAAM,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC;YACxC,OAAO;YACP,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,GAAG;YACb,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;SAC9C,CAAC,CAAC;QACH,OAAO;YACL,OAAO;YACP,YAAY;YACZ,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB;YAC7D,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;YAC7C,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5E,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACzD,CAAC"}

package/dist/payload-encryptor.d.ts

@@ -0,0 +1,92 @@
+import type { JsonValue } from './common.js';
+import type { NormalizedModelResponse } from './model.js';
+export declare const ACME_PAYLOAD_ENCRYPTION_ALGORITHM: "aes-256-gcm";
+export declare const ACME_PAYLOAD_ENVELOPE_VERSION: "acme-payload-envelope-1";
+/**
+ * Ciphertext at rest for `retention: 'encrypted-payload'`.
+ * Stored as canonical JSON in `ModelCallRecord.protectedResponse`.
+ */
+export interface ProtectedPayloadEnvelope {
+    readonly v: typeof ACME_PAYLOAD_ENVELOPE_VERSION;
+    readonly algorithm: typeof ACME_PAYLOAD_ENCRYPTION_ALGORITHM;
+    readonly keyId: string;
+    readonly iv: string;
+    readonly authTag: string;
+    readonly ciphertext: string;
+}
+/**
+ * Composition-owned crypto. Core defines the port; adapters call it when
+ * policy demands encryption. Implementations must not read environment or
+ * key stores themselves—callers inject key material.
+ */
+export interface PayloadEncryptor {
+    readonly keyId: string;
+    encrypt(plaintext: JsonValue): ProtectedPayloadEnvelope;
+    /**
+     * Returns plaintext when this encryptor can open the envelope.
+     * Returns `null` when the key is missing, `keyId` is unknown, or
+     * authentication fails—never invents plaintext.
+     */
+    decrypt(envelope: ProtectedPayloadEnvelope): JsonValue | null;
+}
+export interface Aes256GcmPayloadEncryptorOptions {
+    /** Exactly 32 bytes. */
+    readonly key: Uint8Array;
+    readonly keyId: string;
+}
+export declare function isProtectedPayloadEnvelope(value: unknown): value is ProtectedPayloadEnvelope;
+export declare function parseProtectedPayloadEnvelope(protectedResponse: string): ProtectedPayloadEnvelope;
+export declare function serializeProtectedPayloadEnvelope(envelope: ProtectedPayloadEnvelope): string;
+/**
+ * Pure AES-256-GCM encryptor. Key material is supplied by the composition
+ * root; this function never reads the environment.
+ */
+export declare function createAes256GcmPayloadEncryptor(options: Aes256GcmPayloadEncryptorOptions): PayloadEncryptor;
+export interface ModelCallRetentionFields {
+    readonly response?: NormalizedModelResponse;
+    readonly responseHash: string;
+    readonly protectedResponse?: string;
+    readonly callMetadata?: ModelCallMetadata;
+}
+/**
+ * Content-free evidence about a completed call, retained under every retention
+ * mode including `none` and `hash-only`.
+ *
+ * Provider, model id and token counts are operational metadata, not model
+ * output: they describe that a call happened and what it consumed, never what
+ * it said. Retaining them is what makes cost measurable from recorded evidence
+ * instead of inferred, which ADR-0044 requires now that no campaign ceiling
+ * stands in for measurement. Usage stays optional because a provider may not
+ * report it, and an absent count must read as absent rather than as zero.
+ */
+export interface ModelCallMetadata {
+    readonly provider: string;
+    readonly model: string;
+    readonly finishReason: NormalizedModelResponse['finishReason'];
+    readonly usage: NormalizedModelResponse['usage'];
+}
+/**
+ * Apply retention at the repository write boundary. Engine stays dumb:
+ * plaintext arrives on `completed.response`; this decides what rests at rest.
+ */
+export declare function applyModelCallRetention(options: {
+    readonly retention: 'none' | 'hash-only' | 'encrypted-payload';
+    readonly completed: {
+        readonly response: NormalizedModelResponse;
+        readonly responseHash: string;
+    };
+    readonly payloadEncryptor?: PayloadEncryptor;
+}): ModelCallRetentionFields;
+/**
+ * Reveal plaintext for replay when an encryptor can open the envelope.
+ * At-rest records keep `response` absent; this is only for read paths that
+ * feed `replayVerify()`.
+ */
+export declare function revealModelCallResponse(options: {
+    readonly call: {
+        readonly response?: NormalizedModelResponse;
+        readonly protectedResponse?: string;
+    };
+    readonly payloadEncryptor?: PayloadEncryptor;
+}): NormalizedModelResponse | undefined;
+//# sourceMappingURL=payload-encryptor.d.ts.map

package/dist/payload-encryptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-encryptor.d.ts","sourceRoot":"","sources":["../src/payload-encryptor.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAG7C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAG1D,eAAO,MAAM,iCAAiC,EAAG,aAAsB,CAAC;AACxE,eAAO,MAAM,6BAA6B,EAAG,yBAAkC,CAAC;AAEhF;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,CAAC,EAAE,OAAO,6BAA6B,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,OAAO,iCAAiC,CAAC;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,SAAS,EAAE,SAAS,GAAG,wBAAwB,CAAC;IACxD;;;;OAIG;IACH,OAAO,CAAC,QAAQ,EAAE,wBAAwB,GAAG,SAAS,GAAG,IAAI,CAAC;CAC/D;AAED,MAAM,WAAW,gCAAgC;IAC/C,wBAAwB;IACxB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AA2BD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,wBAAwB,CAcnC;AAED,wBAAgB,6BAA6B,CAC3C,iBAAiB,EAAE,MAAM,GACxB,wBAAwB,CAW1B;AAED,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,wBAAwB,GACjC,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,gCAAgC,GACxC,gBAAgB,CAkDlB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAC3C;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAC,cAAc,CAAC,CAAC;IAC/D,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC;CAClD;AAWD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;QAC3C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CAC9C,GAAG,wBAAwB,CAoB3B;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE;IAC/C,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,QAAQ,CAAC,EAAE,uBAAuB,CAAC;QAC5C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;KACrC,CAAC;IACF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CAC9C,GAAG,uBAAuB,GAAG,SAAS,CA2BtC"}