@adjudicate/adapter-core 0.1.0 → 0.1.1

package/dist/loop.js

@@ -0,0 +1,422 @@
+/**
+ * `createAdjudicatedAgent` — the provider-neutral message-loop orchestrator.
+ *
+ * Wires the planner, renderer, provider bridge, kernel, and Decision
+ * translator into a single send/resume/confirm surface.
+ *
+ * Invariants the loop preserves:
+ * - `pack.planner.plan(state, context)` is called every iteration. State
+ *   may change mid-turn (a refund executes, freeing a previously-locked
+ *   tool); the visible-tool surface MUST update accordingly.
+ * - The Pack passed in MUST already be `safePlan` + `withBasisAudit`
+ *   wrapped (Pack-author convention). The loop does NOT double-wrap.
+ * - Every intent envelope crosses `adjudicateAndAudit()` from
+ *   `@adjudicate/core/kernel`. The loop never bypasses the kernel,
+ *   never raises taint, and never short-circuits the guard ordering.
+ * - First non-continue Decision wins: subsequent tool_use blocks in the
+ *   same assistant turn are surfaced as `not_processed_due_to_pause`.
+ * - History `H` is opaque. The bridge is the only thing that knows the
+ *   conversation-history shape; the loop threads it.
+ */
+import { noopAuditSink, sha256Canonical, } from "@adjudicate/core";
+import { adjudicateAndAudit } from "@adjudicate/core/kernel";
+import { resumeDeferredIntent } from "@adjudicate/runtime";
+import { buildEnvelopeFromToolUse, classifyIncomingToolUse, } from "./bridge.js";
+import { makeOutOfPlanToolResult, translateDecision, } from "./decisions.js";
+import { AdapterError, AdapterErrorCode } from "./errors.js";
+import { noopTraceSink } from "./trace.js";
+const DEFAULT_MAX_ITERATIONS = 8;
+export function createAdjudicatedAgent(options) {
+    const maxIterations = options.maxIterations ?? DEFAULT_MAX_ITERATIONS;
+    const rk = options.rk ?? ((raw) => raw);
+    const deriveNonce = options.deriveNonce ?? ((args) => args.toolUseId);
+    const bridge = options.bridge;
+    const traceSink = options.traceSink ?? noopTraceSink;
+    function pauseActionToReason(kind) {
+        switch (kind) {
+            case "pause_for_defer":
+                return "deferred";
+            case "pause_for_user_confirmation":
+                return "awaiting_confirmation";
+            case "complete_for_escalation":
+                return "escalated";
+            default:
+                return undefined;
+        }
+    }
+    async function runLoop(sessionId, initialHistory, state, context, seedEvents, 
+    /**
+     * Optional pre-seeded Decision injected before the first provider
+     * call — used by `confirm()` and `resume()` to splice an authoritative
+     * Decision (from the user's confirmation or the resumed envelope) back
+     * into the conversation without consulting the LLM again first.
+     */
+    seedDecision) {
+        const events = [...seedEvents];
+        let history = initialHistory;
+        let lastDecision = null;
+        if (seedDecision !== null) {
+            const single = await processSingleDecision({
+                decision: seedDecision.decision,
+                envelope: seedDecision.envelope,
+                toolUseId: seedDecision.toolUseId,
+                sessionId,
+                state,
+                historySnapshot: history,
+            });
+            lastDecision = seedDecision.decision;
+            events.push(...single.events);
+            if (single.toolResult !== null) {
+                history = bridge.appendToolResults(history, [single.toolResult]);
+            }
+            if (single.loopAction.kind !== "continue") {
+                return {
+                    events,
+                    history,
+                    outcome: pauseToOutcome(single.loopAction, lastDecision),
+                };
+            }
+        }
+        for (let iter = 0; iter < maxIterations; iter++) {
+            traceSink.onTrace({
+                phase: "iteration_start",
+                sessionId,
+                iteration: iter + 1,
+            });
+            const plan = options.pack.planner.plan(state, context);
+            const rendered = options.renderer.render(state, context, plan);
+            const sent = await bridge.send(history, {
+                systemPrompt: rendered.systemPrompt,
+                maxTokens: rendered.maxTokens,
+                toolSchemas: rendered.toolSchemas,
+            });
+            history = sent.history;
+            for (const text of sent.turn.textBlocks) {
+                events.push({ kind: "assistant_text", text });
+            }
+            if (sent.turn.toolUses.length === 0) {
+                traceSink.onTrace({
+                    phase: "completed",
+                    sessionId,
+                    iteration: iter + 1,
+                });
+                return {
+                    events,
+                    history,
+                    outcome: {
+                        kind: "completed",
+                        assistantText: sent.turn.textBlocks.join(""),
+                    },
+                };
+            }
+            const toolResults = [];
+            let pauseAction = null;
+            for (const tu of sent.turn.toolUses) {
+                events.push({
+                    kind: "tool_use",
+                    toolUseId: tu.id,
+                    toolName: tu.name,
+                    input: tu.input,
+                });
+                if (pauseAction !== null) {
+                    // First non-continue Decision wins: surface remaining tool_uses
+                    // as not-processed so the LLM (on resume) understands they were
+                    // skipped this turn.
+                    toolResults.push({
+                        toolUseId: tu.id,
+                        content: "Not processed: prior tool_use paused this turn.",
+                        isError: true,
+                    });
+                    continue;
+                }
+                const cls = classifyIncomingToolUse({ name: tu.name, input: tu.input }, plan);
+                if (cls.kind === "out_of_plan") {
+                    const result = makeOutOfPlanToolResult(tu.id, tu.name);
+                    toolResults.push(result);
+                    events.push({ kind: "tool_result", toolUseId: tu.id, payload: result });
+                    continue;
+                }
+                if (cls.kind === "read") {
+                    let readResult;
+                    try {
+                        readResult = await options.executor.invokeRead(cls.name, cls.input, state);
+                    }
+                    catch (err) {
+                        const message = err instanceof Error ? err.message : "executor read failed";
+                        const errResult = {
+                            toolUseId: tu.id,
+                            content: `Tool failed: ${message}`,
+                            isError: true,
+                        };
+                        toolResults.push(errResult);
+                        events.push({
+                            kind: "tool_result",
+                            toolUseId: tu.id,
+                            payload: errResult,
+                        });
+                        continue;
+                    }
+                    const result = {
+                        toolUseId: tu.id,
+                        content: JSON.stringify({ ok: true, result: readResult }),
+                    };
+                    toolResults.push(result);
+                    events.push({
+                        kind: "handler_result",
+                        toolUseId: tu.id,
+                        result: readResult,
+                    });
+                    events.push({ kind: "tool_result", toolUseId: tu.id, payload: result });
+                    continue;
+                }
+                // cls.kind === "intent"
+                const envelope = buildEnvelopeFromToolUse({
+                    intentKind: cls.intentKind,
+                    payload: cls.payload,
+                    sessionId,
+                    taint: "UNTRUSTED",
+                    nonce: deriveNonce({
+                        sessionId,
+                        toolUseId: tu.id,
+                        payload: cls.payload,
+                    }),
+                });
+                events.push({ kind: "intent_proposed", envelope });
+                const { decision } = await adjudicateAndAudit(envelope, state, options.pack.policy, {
+                    sink: options.auditSink ?? noopAuditSink(),
+                    ledger: options.ledger,
+                    context: options.runtimeContext,
+                    plan: () => ({
+                        visibleReadTools: plan.visibleReadTools,
+                        allowedIntents: plan.allowedIntents,
+                    }),
+                });
+                lastDecision = decision;
+                events.push({ kind: "decision", decision, envelope });
+                traceSink.onTrace({
+                    phase: "decision_emitted",
+                    sessionId,
+                    iteration: iter + 1,
+                    decisionKind: decision.kind,
+                });
+                const single = await processSingleDecision({
+                    decision,
+                    envelope: envelope,
+                    toolUseId: tu.id,
+                    sessionId,
+                    state,
+                    historySnapshot: history,
+                });
+                events.push(...single.events);
+                if (single.toolResult)
+                    toolResults.push(single.toolResult);
+                if (single.loopAction.kind !== "continue") {
+                    pauseAction = single.loopAction;
+                }
+            }
+            if (toolResults.length > 0) {
+                history = bridge.appendToolResults(history, toolResults);
+            }
+            if (pauseAction !== null) {
+                const reason = pauseActionToReason(pauseAction.kind);
+                traceSink.onTrace({
+                    phase: "paused",
+                    sessionId,
+                    iteration: iter + 1,
+                    ...(reason !== undefined ? { pauseReason: reason } : {}),
+                    ...(lastDecision !== null
+                        ? { decisionKind: lastDecision.kind }
+                        : {}),
+                });
+                return {
+                    events,
+                    history,
+                    outcome: pauseToOutcome(pauseAction, lastDecision),
+                };
+            }
+        }
+        traceSink.onTrace({
+            phase: "max_iterations_exceeded",
+            sessionId,
+            iteration: maxIterations,
+            ...(lastDecision !== null ? { decisionKind: lastDecision.kind } : {}),
+        });
+        return {
+            events,
+            history,
+            outcome: { kind: "max_iterations_exceeded", lastDecision },
+        };
+        async function processSingleDecision(args) {
+            const t = await translateDecision({
+                decision: args.decision,
+                envelope: args.envelope,
+                toolUseId: args.toolUseId,
+                sessionId: args.sessionId,
+                state: args.state,
+                executor: options.executor,
+                deferStore: options.deferStore,
+                confirmationStore: options.confirmationStore,
+                historySnapshot: args.historySnapshot,
+                rk,
+                log: options.log,
+                generateToken: () => globalThis.crypto?.randomUUID?.() ??
+                    `ct-${Math.random().toString(36).slice(2)}-${Date.now()}`,
+            });
+            return {
+                events: [...t.extraEvents],
+                toolResult: t.toolResult,
+                loopAction: t.loopAction,
+            };
+        }
+    }
+    return {
+        async send(input) {
+            const baseHistory = input.history ?? bridge.emptyHistory();
+            const initialHistory = bridge.appendUserMessage(baseHistory, input.userMessage);
+            const seedEvents = [
+                { kind: "user_message", text: input.userMessage },
+            ];
+            return runLoop(input.sessionId, initialHistory, input.state, input.context, seedEvents, null);
+        },
+        async resume(args) {
+            const result = await resumeDeferredIntent({
+                sessionId: args.sessionId,
+                signal: args.signal,
+                redis: options.deferStore,
+                rk,
+                log: options.log,
+                verifyHash: options.verifyParkedHash ?? "warn",
+            });
+            if (!result.resumed || !result.parked) {
+                throw new AdapterError(AdapterErrorCode.RESUME_NO_PARKED, `No parked envelope for session "${args.sessionId}" and signal "${args.signal}" (reason: ${result.reason ?? "unknown"})`, { sessionId: args.sessionId, signal: args.signal, reason: result.reason });
+            }
+            const envelope = {
+                version: 2,
+                kind: result.parked.envelope.kind,
+                payload: result.parked.envelope.payload,
+                createdAt: new Date().toISOString(),
+                nonce: result.parked.envelope.intentHash,
+                actor: {
+                    principal: "system",
+                    sessionId: result.parked.envelope.actor.sessionId,
+                },
+                taint: "TRUSTED",
+                intentHash: result.parked.envelope.intentHash,
+            };
+            const resumePlan = options.pack.planner.plan(args.state, args.context);
+            const { decision } = await adjudicateAndAudit(envelope, args.state, options.pack.policy, {
+                sink: options.auditSink ?? noopAuditSink(),
+                ledger: options.ledger,
+                context: options.runtimeContext,
+                plan: () => ({
+                    visibleReadTools: resumePlan.visibleReadTools,
+                    allowedIntents: resumePlan.allowedIntents,
+                }),
+            });
+            const seedEvents = [
+                { kind: "intent_proposed", envelope },
+                { kind: "decision", decision, envelope },
+            ];
+            const fauxToolUseId = `resume-${result.parked.envelope.intentHash.slice(0, 8)}`;
+            const seedDecision = {
+                decision,
+                envelope,
+                toolUseId: fauxToolUseId,
+            };
+            return runLoop(args.sessionId, args.history ?? bridge.emptyHistory(), args.state, args.context, seedEvents, seedDecision);
+        },
+        async confirm(args) {
+            const pending = await options.confirmationStore.take(args.confirmationToken);
+            if (pending === null) {
+                throw new AdapterError(AdapterErrorCode.CONFIRMATION_TOKEN_INVALID, `Confirmation token "${args.confirmationToken}" is unknown or expired.`, { confirmationToken: args.confirmationToken });
+            }
+            const verifyMode = options.verifyParkedHash ?? "warn";
+            if (verifyMode !== "off") {
+                const derived = sha256Canonical({
+                    version: pending.envelope.version,
+                    kind: pending.envelope.kind,
+                    payload: pending.envelope.payload,
+                    nonce: pending.envelope.nonce,
+                    actor: pending.envelope.actor,
+                    taint: pending.envelope.taint,
+                });
+                if (derived !== pending.envelope.intentHash) {
+                    options.log?.warn?.({
+                        sessionId: pending.sessionId,
+                        stored: pending.envelope.intentHash,
+                        derived,
+                        confirmationToken: args.confirmationToken,
+                    }, "[adjudicated-agent] confirmation blob tampered — refusing to resume");
+                    throw new AdapterError(AdapterErrorCode.CONFIRMATION_TOKEN_INVALID, `Confirmation token "${args.confirmationToken}" failed hash verification (envelope was modified after persistence).`, {
+                        confirmationToken: args.confirmationToken,
+                        reason: "confirmation_blob_tampered",
+                    });
+                }
+            }
+            if (!args.accepted) {
+                const declineEvent = {
+                    kind: "assistant_text",
+                    text: "User declined the confirmation. Action skipped.",
+                };
+                return {
+                    events: [declineEvent],
+                    history: pending.assistantHistorySnapshot,
+                    outcome: {
+                        kind: "completed",
+                        assistantText: "User declined the confirmation. Action skipped.",
+                    },
+                };
+            }
+            const envelope = pending.envelope;
+            const confirmPlan = options.pack.planner.plan(args.state, args.context);
+            const { decision } = await adjudicateAndAudit(envelope, args.state, options.pack.policy, {
+                sink: options.auditSink ?? noopAuditSink(),
+                ledger: options.ledger,
+                context: options.runtimeContext,
+                plan: () => ({
+                    visibleReadTools: confirmPlan.visibleReadTools,
+                    allowedIntents: confirmPlan.allowedIntents,
+                }),
+                confirmationReceipt: {
+                    intentHash: envelope.intentHash,
+                    at: new Date().toISOString(),
+                },
+            });
+            const seedEvents = [
+                { kind: "intent_proposed", envelope },
+                { kind: "decision", decision, envelope },
+            ];
+            const seedDecision = {
+                decision,
+                envelope,
+                toolUseId: pending.toolUseId,
+            };
+            return runLoop(pending.sessionId, pending.assistantHistorySnapshot, args.state, args.context, seedEvents, seedDecision);
+        },
+    };
+}
+function pauseToOutcome(action, lastDecision) {
+    switch (action.kind) {
+        case "continue":
+            return { kind: "max_iterations_exceeded", lastDecision };
+        case "pause_for_user_confirmation":
+            return {
+                kind: "awaiting_confirmation",
+                prompt: action.prompt,
+                confirmationToken: action.token,
+            };
+        case "pause_for_defer":
+            return {
+                kind: "deferred",
+                signal: action.signal,
+                intentHash: action.intentHash,
+            };
+        case "complete_for_escalation":
+            return {
+                kind: "escalated",
+                to: action.to,
+                reason: action.reason,
+            };
+    }
+}
+//# sourceMappingURL=loop.js.map

package/dist/loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop.js","sourceRoot":"","sources":["../src/loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACL,aAAa,EACb,eAAe,GAGhB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACL,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,uBAAuB,EACvB,iBAAiB,GAElB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,aAAa,EAA2B,MAAM,YAAY,CAAC;AAapE,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,MAAM,UAAU,sBAAsB,CACpC,OAA+C;IAE/C,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACtE,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC;IAErD,SAAS,mBAAmB,CAAC,IAAwB;QACnD,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,iBAAiB;gBACpB,OAAO,UAAU,CAAC;YACpB,KAAK,6BAA6B;gBAChC,OAAO,uBAAuB,CAAC;YACjC,KAAK,yBAAyB;gBAC5B,OAAO,WAAW,CAAC;YACrB;gBACE,OAAO,SAAS,CAAC;QACrB,CAAC;IACH,CAAC;IAED,KAAK,UAAU,OAAO,CACpB,SAAiB,EACjB,cAAiB,EACjB,KAAQ,EACR,OAAU,EACV,UAAqC;IACrC;;;;;OAKG;IACH,YAAuC;QAEvC,MAAM,MAAM,GAAiB,CAAC,GAAG,UAAU,CAAC,CAAC;QAC7C,IAAI,OAAO,GAAG,cAAc,CAAC;QAC7B,IAAI,YAAY,GAAoB,IAAI,CAAC;QAEzC,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;gBACzC,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,SAAS;gBACT,KAAK;gBACL,eAAe,EAAE,OAAO;aACzB,CAAC,CAAC;YACH,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9B,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBAC/B,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC1C,OAAO;oBACL,MAAM;oBACN,OAAO;oBACP,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC;iBACzD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC;YAChD,SAAS,CAAC,OAAO,CAAC;gBAChB,KAAK,EAAE,iBAAiB;gBACxB,SAAS;gBACT,SAAS,EAAE,IAAI,GAAG,CAAC;aACpB,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YAE/D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE;gBACtC,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;aAClC,CAAC,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAEvB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpC,SAAS,CAAC,OAAO,CAAC;oBAChB,KAAK,EAAE,WAAW;oBAClB,SAAS;oBACT,SAAS,EAAE,IAAI,GAAG,CAAC;iBACpB,CAAC,CAAC;gBACH,OAAO;oBACL,MAAM;oBACN,OAAO;oBACP,OAAO,EAAE;wBACP,IAAI,EAAE,WAAW;wBACjB,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;qBAC7C;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAsB,EAAE,CAAC;YAC1C,IAAI,WAAW,GAAsB,IAAI,CAAC;YAE1C,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,UAAU;oBAChB,SAAS,EAAE,EAAE,CAAC,EAAE;oBAChB,QAAQ,EAAE,EAAE,CAAC,IAAI;oBACjB,KAAK,EAAE,EAAE,CAAC,KAAK;iBAChB,CAAC,CAAC;gBAEH,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;oBACzB,gEAAgE;oBAChE,gEAAgE;oBAChE,qBAAqB;oBACrB,WAAW,CAAC,IAAI,CAAC;wBACf,SAAS,EAAE,EAAE,CAAC,EAAE;wBAChB,OAAO,EAAE,iDAAiD;wBAC1D,OAAO,EAAE,IAAI;qBACd,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBAED,MAAM,GAAG,GAAG,uBAAuB,CACjC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,EAClC,IAAI,CACL,CAAC;gBAEF,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBAC/B,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;oBACvD,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;oBACxE,SAAS;gBACX,CAAC;gBAED,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBACxB,IAAI,UAAmB,CAAC;oBACxB,IAAI,CAAC;wBACH,UAAU,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,UAAU,CAC5C,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,KAAK,EACT,KAAK,CACN,CAAC;oBACJ,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC;wBAC9D,MAAM,SAAS,GAAoB;4BACjC,SAAS,EAAE,EAAE,CAAC,EAAE;4BAChB,OAAO,EAAE,gBAAgB,OAAO,EAAE;4BAClC,OAAO,EAAE,IAAI;yBACd,CAAC;wBACF,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBAC5B,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,aAAa;4BACnB,SAAS,EAAE,EAAE,CAAC,EAAE;4BAChB,OAAO,EAAE,SAAS;yBACnB,CAAC,CAAC;wBACH,SAAS;oBACX,CAAC;oBACD,MAAM,MAAM,GAAoB;wBAC9B,SAAS,EAAE,EAAE,CAAC,EAAE;wBAChB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;qBAC1D,CAAC;oBACF,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,gBAAgB;wBACtB,SAAS,EAAE,EAAE,CAAC,EAAE;wBAChB,MAAM,EAAE,UAAU;qBACnB,CAAC,CAAC;oBACH,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;oBACxE,SAAS;gBACX,CAAC;gBAED,wBAAwB;gBACxB,MAAM,QAAQ,GAAG,wBAAwB,CAAC;oBACxC,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,SAAS;oBACT,KAAK,EAAE,WAAW;oBAClB,KAAK,EAAE,WAAW,CAAC;wBACjB,SAAS;wBACT,SAAS,EAAE,EAAE,CAAC,EAAE;wBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;qBACrB,CAAC;iBACH,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAEnD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,kBAAkB,CAC3C,QAAgC,EAChC,KAAK,EACL,OAAO,CAAC,IAAI,CAAC,MAAM,EACnB;oBACE,IAAI,EAAE,OAAO,CAAC,SAAS,IAAI,aAAa,EAAE;oBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,OAAO,EAAE,OAAO,CAAC,cAAc;oBAC/B,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;wBACX,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;wBACvC,cAAc,EAAE,IAAI,CAAC,cAAc;qBACpC,CAAC;iBACH,CACF,CAAC;gBACF,YAAY,GAAG,QAAQ,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACtD,SAAS,CAAC,OAAO,CAAC;oBAChB,KAAK,EAAE,kBAAkB;oBACzB,SAAS;oBACT,SAAS,EAAE,IAAI,GAAG,CAAC;oBACnB,YAAY,EAAE,QAAQ,CAAC,IAAI;iBAC5B,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;oBACzC,QAAQ;oBACR,QAAQ,EAAE,QAAgC;oBAC1C,SAAS,EAAE,EAAE,CAAC,EAAE;oBAChB,SAAS;oBACT,KAAK;oBACL,eAAe,EAAE,OAAO;iBACzB,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC9B,IAAI,MAAM,CAAC,UAAU;oBAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC3D,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC1C,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC;gBAClC,CAAC;YACH,CAAC;YAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC3D,CAAC;YAED,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBACrD,SAAS,CAAC,OAAO,CAAC;oBAChB,KAAK,EAAE,QAAQ;oBACf,SAAS;oBACT,SAAS,EAAE,IAAI,GAAG,CAAC;oBACnB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxD,GAAG,CAAC,YAAY,KAAK,IAAI;wBACvB,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,IAAI,EAAE;wBACrC,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;gBACH,OAAO;oBACL,MAAM;oBACN,OAAO;oBACP,OAAO,EAAE,cAAc,CAAC,WAAW,EAAE,YAAY,CAAC;iBACnD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,SAAS,CAAC,OAAO,CAAC;YAChB,KAAK,EAAE,yBAAyB;YAChC,SAAS;YACT,SAAS,EAAE,aAAa;YACxB,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,CAAC;QACH,OAAO;YACL,MAAM;YACN,OAAO;YACP,OAAO,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,YAAY,EAAE;SAC3D,CAAC;QAOF,KAAK,UAAU,qBAAqB,CAAC,IAOpC;YACC,MAAM,CAAC,GAAG,MAAM,iBAAiB,CAAC;gBAChC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC5C,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,EAAE;gBACF,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,aAAa,EAAE,GAAG,EAAE,CAClB,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE;oBACjC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;aAC5D,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;gBAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAyB;YAClC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YAC3D,MAAM,cAAc,GAAG,MAAM,CAAC,iBAAiB,CAC7C,WAAW,EACX,KAAK,CAAC,WAAW,CAClB,CAAC;YACF,MAAM,UAAU,GAAiB;gBAC/B,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE;aAClD,CAAC;YACF,OAAO,OAAO,CACZ,KAAK,CAAC,SAAS,EACf,cAAc,EACd,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,EACb,UAAU,EACV,IAAI,CACL,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,IAAyB;YACpC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC;gBACxC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,OAAO,CAAC,UAAU;gBACzB,EAAE;gBACF,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,UAAU,EAAE,OAAO,CAAC,gBAAgB,IAAI,MAAM;aAC/C,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtC,MAAM,IAAI,YAAY,CACpB,gBAAgB,CAAC,gBAAgB,EACjC,mCAAmC,IAAI,CAAC,SAAS,iBAAiB,IAAI,CAAC,MAAM,cAAc,MAAM,CAAC,MAAM,IAAI,SAAS,GAAG,EACxH,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1E,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAyB;gBACrC,OAAO,EAAE,CAAC;gBACV,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAS;gBACtC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAY;gBAC5C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU;gBACxC,KAAK,EAAE;oBACL,SAAS,EAAE,QAAQ;oBACnB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS;iBAClD;gBACD,KAAK,EAAE,SAAS;gBAChB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU;aAC9C,CAAC;YACF,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACvE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,kBAAkB,CAC3C,QAAQ,EACR,IAAI,CAAC,KAAK,EACV,OAAO,CAAC,IAAI,CAAC,MAAM,EACnB;gBACE,IAAI,EAAE,OAAO,CAAC,SAAS,IAAI,aAAa,EAAE;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,OAAO,CAAC,cAAc;gBAC/B,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;oBACX,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;oBAC7C,cAAc,EAAE,UAAU,CAAC,cAAc;iBAC1C,CAAC;aACH,CACF,CAAC;YAEF,MAAM,UAAU,GAAiB;gBAC/B,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE;gBACrC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE;aACzC,CAAC;YAEF,MAAM,aAAa,GAAG,UAAU,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAChF,MAAM,YAAY,GAAuB;gBACvC,QAAQ;gBACR,QAAQ;gBACR,SAAS,EAAE,aAAa;aACzB,CAAC;YACF,OAAO,OAAO,CACZ,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,YAAY,EAAE,EACrC,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,UAAU,EACV,YAAY,CACb,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,IAAuB;YACnC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAClD,IAAI,CAAC,iBAAiB,CACvB,CAAC;YACF,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,IAAI,YAAY,CACpB,gBAAgB,CAAC,0BAA0B,EAC3C,uBAAuB,IAAI,CAAC,iBAAiB,0BAA0B,EACvE,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAC9C,CAAC;YACJ,CAAC;YAED,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;YACtD,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,eAAe,CAAC;oBAC9B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;oBACjC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;oBAC3B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;oBACjC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK;oBAC7B,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK;oBAC7B,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK;iBAC9B,CAAC,CAAC;gBACH,IAAI,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;oBAC5C,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,CACjB;wBACE,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU;wBACnC,OAAO;wBACP,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;qBAC1C,EACD,qEAAqE,CACtE,CAAC;oBACF,MAAM,IAAI,YAAY,CACpB,gBAAgB,CAAC,0BAA0B,EAC3C,uBAAuB,IAAI,CAAC,iBAAiB,uEAAuE,EACpH;wBACE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;wBACzC,MAAM,EAAE,4BAA4B;qBACrC,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,YAAY,GAAe;oBAC/B,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,iDAAiD;iBACxD,CAAC;gBACF,OAAO;oBACL,MAAM,EAAE,CAAC,YAAY,CAAC;oBACtB,OAAO,EAAE,OAAO,CAAC,wBAAwB;oBACzC,OAAO,EAAE;wBACP,IAAI,EAAE,WAAoB;wBAC1B,aAAa,EAAE,iDAAiD;qBACjE;iBACF,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAgC,CAAC;YAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,kBAAkB,CAC3C,QAAQ,EACR,IAAI,CAAC,KAAK,EACV,OAAO,CAAC,IAAI,CAAC,MAAM,EACnB;gBACE,IAAI,EAAE,OAAO,CAAC,SAAS,IAAI,aAAa,EAAE;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,OAAO,CAAC,cAAc;gBAC/B,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;oBACX,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;oBAC9C,cAAc,EAAE,WAAW,CAAC,cAAc;iBAC3C,CAAC;gBACF,mBAAmB,EAAE;oBACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBAC7B;aACF,CACF,CAAC;YACF,MAAM,UAAU,GAAiB;gBAC/B,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE;gBACrC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE;aACzC,CAAC;YACF,MAAM,YAAY,GAAuB;gBACvC,QAAQ;gBACR,QAAQ;gBACR,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC;YACF,OAAO,OAAO,CACZ,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,wBAAwB,EAChC,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,UAAU,EACV,YAAY,CACb,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAQD,SAAS,cAAc,CACrB,MAAkB,EAClB,YAA6B;IAE7B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,YAAY,EAAE,CAAC;QAC3D,KAAK,6BAA6B;YAChC,OAAO;gBACL,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,iBAAiB,EAAE,MAAM,CAAC,KAAK;aAChC,CAAC;QACJ,KAAK,iBAAiB;YACpB,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC;QACJ,KAAK,yBAAyB;YAC5B,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/persistence-redis.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Redis-backed `ConfirmationStore` — restart-durable pending confirmations.
+ *
+ * The in-memory `createInMemoryConfirmationStore` (see `./persistence.ts`)
+ * is suitable for tests and the quickstart, but a process restart loses
+ * every pending confirmation. Adopters running the adapter loop in a
+ * production process need restart durability so user-held tokens
+ * (REQUEST_CONFIRMATION flows that block for hours) survive deploys.
+ *
+ * This module ships a Redis-backed implementation that uses the same
+ * minimal `RedisLedgerClient` surface (`get`/`set`) as the rest of the
+ * audit + ledger stack. The store is generic over `H` (the conversation-
+ * history shape) — the caller supplies a serializer for their provider's
+ * history type.
+ *
+ * # Wire format
+ *
+ * Each pending confirmation is JSON-encoded under the key
+ * `${prefix}:confirm:${token}`. The TTL on the key matches the
+ * adopter-supplied `ttlSeconds` from `put()`.
+ *
+ * # Get-and-delete (take semantics)
+ *
+ * `take()` is single-use: a successful take deletes the key. Two
+ * concurrent `take(token)` calls race — Redis `GET` + `DEL` is not atomic
+ * without scripting, so at most one caller receives the pending
+ * confirmation. Production adopters needing strict at-most-once semantics
+ * across replicas should wire a Lua script; the JS implementation here
+ * accepts a tiny race window where two `take` calls might both return
+ * the same pending (the LATER one's adjudication then fails on
+ * `REPLAY_SUPPRESSED` via the kernel's ledger — fail-closed by design).
+ *
+ * # Replay safety
+ *
+ * Confirmation tokens are NOT inputs to the kernel's adjudication —
+ * they're externally-held opaque references. The kernel's
+ * `confirmationReceipt` (which IS adjudicated against) is reconstructed
+ * from the persisted envelope, not from the token. So storing them in
+ * Redis does not change replay determinism.
+ */
+import type { ConfirmationStore } from "./persistence.js";
+/**
+ * Minimal Redis surface required by the Redis confirmation store. Same
+ * shape as `@adjudicate/audit`'s `RedisLedgerClient` so adopters can
+ * reuse the same connection.
+ */
+export interface ConfirmationRedisClient {
+    set(key: string, value: string, options?: {
+        NX?: boolean;
+        EX?: number;
+    }): Promise<string | null>;
+    get(key: string): Promise<string | null>;
+    del(key: string): Promise<unknown>;
+}
+export interface CreateRedisConfirmationStoreOptions<H> {
+    readonly client: ConfirmationRedisClient;
+    /**
+     * Adopter-supplied key namespacer. Adjudicate convention: wrap the
+     * raw suffix into a tenant/env-namespaced key (e.g.,
+     * `${APP_ENV}:adjudicate:${suffix}`). Defaults to identity.
+     */
+    readonly keyFor?: (suffix: string) => string;
+    /**
+     * Serializer for the assistant history snapshot. Required because `H`
+     * is the provider's opaque history shape — Anthropic's MessageParam[]
+     * and OpenAI's ChatCompletionMessageParam[] are both JSON-serializable
+     * by default. Adopters who use richer types (Date, BigInt) should plug
+     * in a custom serializer.
+     *
+     * Default: `JSON.stringify` / `JSON.parse`.
+     */
+    readonly serializeHistory?: (h: H) => string;
+    readonly deserializeHistory?: (s: string) => H;
+}
+/**
+ * Redis-backed `ConfirmationStore<H>`. Wraps the minimal `set/get/del`
+ * surface. `put` writes with EX (TTL); `take` does GET then DEL.
+ *
+ * Adopters share the underlying Redis client across the ledger, the
+ * kill switch, and the confirmation store — one connection per role
+ * (read/write vs subscribe) is the typical production wiring.
+ */
+export declare function createRedisConfirmationStore<H = unknown>(opts: CreateRedisConfirmationStoreOptions<H>): ConfirmationStore<H>;
+//# sourceMappingURL=persistence-redis.d.ts.map

package/dist/persistence-redis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence-redis.d.ts","sourceRoot":"","sources":["../src/persistence-redis.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAGH,OAAO,KAAK,EACV,iBAAiB,EAElB,MAAM,kBAAkB,CAAC;AAE1B;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,GAAG,CACD,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,OAAO,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,GACtC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,mCAAmC,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IAC7C;;;;;;;;OAQG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC;IAC7C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,CAAC,CAAC;CAChD;AAUD;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,CAAC,GAAG,OAAO,EACtD,IAAI,EAAE,mCAAmC,CAAC,CAAC,CAAC,GAC3C,iBAAiB,CAAC,CAAC,CAAC,CAwDtB"}

package/dist/persistence-redis.js

@@ -0,0 +1,97 @@
+/**
+ * Redis-backed `ConfirmationStore` — restart-durable pending confirmations.
+ *
+ * The in-memory `createInMemoryConfirmationStore` (see `./persistence.ts`)
+ * is suitable for tests and the quickstart, but a process restart loses
+ * every pending confirmation. Adopters running the adapter loop in a
+ * production process need restart durability so user-held tokens
+ * (REQUEST_CONFIRMATION flows that block for hours) survive deploys.
+ *
+ * This module ships a Redis-backed implementation that uses the same
+ * minimal `RedisLedgerClient` surface (`get`/`set`) as the rest of the
+ * audit + ledger stack. The store is generic over `H` (the conversation-
+ * history shape) — the caller supplies a serializer for their provider's
+ * history type.
+ *
+ * # Wire format
+ *
+ * Each pending confirmation is JSON-encoded under the key
+ * `${prefix}:confirm:${token}`. The TTL on the key matches the
+ * adopter-supplied `ttlSeconds` from `put()`.
+ *
+ * # Get-and-delete (take semantics)
+ *
+ * `take()` is single-use: a successful take deletes the key. Two
+ * concurrent `take(token)` calls race — Redis `GET` + `DEL` is not atomic
+ * without scripting, so at most one caller receives the pending
+ * confirmation. Production adopters needing strict at-most-once semantics
+ * across replicas should wire a Lua script; the JS implementation here
+ * accepts a tiny race window where two `take` calls might both return
+ * the same pending (the LATER one's adjudication then fails on
+ * `REPLAY_SUPPRESSED` via the kernel's ledger — fail-closed by design).
+ *
+ * # Replay safety
+ *
+ * Confirmation tokens are NOT inputs to the kernel's adjudication —
+ * they're externally-held opaque references. The kernel's
+ * `confirmationReceipt` (which IS adjudicated against) is reconstructed
+ * from the persisted envelope, not from the token. So storing them in
+ * Redis does not change replay determinism.
+ */
+/**
+ * Redis-backed `ConfirmationStore<H>`. Wraps the minimal `set/get/del`
+ * surface. `put` writes with EX (TTL); `take` does GET then DEL.
+ *
+ * Adopters share the underlying Redis client across the ledger, the
+ * kill switch, and the confirmation store — one connection per role
+ * (read/write vs subscribe) is the typical production wiring.
+ */
+export function createRedisConfirmationStore(opts) {
+    const keyFor = opts.keyFor ?? ((s) => s);
+    const serialize = opts.serializeHistory ?? ((h) => JSON.stringify(h));
+    const deserialize = opts.deserializeHistory ?? ((s) => JSON.parse(s));
+    return {
+        async put(token, pending, ttlSeconds) {
+            const wire = {
+                envelope: pending.envelope,
+                sessionId: pending.sessionId,
+                historyJson: serialize(pending.assistantHistorySnapshot),
+                toolUseId: pending.toolUseId,
+                prompt: pending.prompt,
+            };
+            await opts.client.set(keyFor(`confirm:${token}`), JSON.stringify(wire), { EX: ttlSeconds });
+        },
+        async take(token) {
+            const key = keyFor(`confirm:${token}`);
+            const raw = await opts.client.get(key);
+            if (raw === null)
+                return null;
+            // Get-and-delete: a single use. Concurrent takes may race; the
+            // kernel's ledger backstops with REPLAY_SUPPRESSED on the second
+            // adjudication.
+            await opts.client.del(key);
+            let wire;
+            try {
+                wire = JSON.parse(raw);
+            }
+            catch {
+                return null;
+            }
+            let history;
+            try {
+                history = deserialize(wire.historyJson);
+            }
+            catch {
+                return null;
+            }
+            return {
+                envelope: wire.envelope,
+                sessionId: wire.sessionId,
+                assistantHistorySnapshot: history,
+                toolUseId: wire.toolUseId,
+                prompt: wire.prompt,
+            };
+        },
+    };
+}
+//# sourceMappingURL=persistence-redis.js.map

package/dist/persistence-redis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence-redis.js","sourceRoot":"","sources":["../src/persistence-redis.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAoDH;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAA4C;IAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,SAAS,GACb,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,WAAW,GACf,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAM,CAAC,CAAC;IAEjE,OAAO;QACL,KAAK,CAAC,GAAG,CACP,KAAa,EACb,OAA+B,EAC/B,UAAkB;YAElB,MAAM,IAAI,GAAe;gBACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,wBAAwB,CAAC;gBACxD,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC;YACF,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACnB,MAAM,CAAC,WAAW,KAAK,EAAE,CAAC,EAC1B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EACpB,EAAE,EAAE,EAAE,UAAU,EAAE,CACnB,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAa;YACtB,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;YACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC9B,+DAA+D;YAC/D,iEAAiE;YACjE,gBAAgB;YAChB,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,IAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,OAAU,CAAC;YACf,IAAI,CAAC;gBACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,wBAAwB,EAAE,OAAO;gBACjC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}