@agent-native/core 0.98.5 → 0.98.6

package/dist/a2a/task-store.js

@@ -165,7 +165,7 @@ export async function getA2ATaskDispatchState(id) {
     await ensureTable();
     const client = getDbExec();
     const { rows } = await client.execute({
-        sql: `SELECT id, status_state, metadata, updated_at FROM a2a_tasks WHERE id = ?`,
+        sql: `SELECT id, status_state, metadata, created_at, updated_at FROM a2a_tasks WHERE id = ?`,
         args: [id],
     });
     const row = rows[0];
@@ -176,6 +176,7 @@ export async function getA2ATaskDispatchState(id) {
         statusState: row.status_state,
         metadata: row.metadata ? JSON.parse(row.metadata) : undefined,
         updatedAt: Number(row.updated_at ?? 0),
+        createdAt: Number(row.created_at ?? 0),
     };
 }
 export async function touchQueuedA2ATaskDispatch(id) {
@@ -224,7 +225,17 @@ export async function resetStuckA2ATaskForRetry(id, processingCutoff) {
     const affected = getAffectedRowCount(result);
     return affected !== 0;
 }
-export async function failStuckA2ATask(id, processingCutoff, reason) {
+/**
+ * Fail a processing task once it is stuck. Two independent conditions can
+ * trigger this, either of which alone is sufficient:
+ *   - `updated_at <= processingCutoff`: no heartbeat/progress touch in a
+ *     while — the processor likely died.
+ *   - `created_at <= createdAtCutoff` — a hard wall on total run time. A
+ *     hung await inside a still-alive process keeps `updated_at` fresh via
+ *     the liveness heartbeat forever, so staleness alone never trips; age
+ *     since creation is the only bound that catches it.
+ */
+export async function failStuckA2ATask(id, processingCutoff, reason, createdAtCutoff) {
     await ensureTable();
     const client = getDbExec();
     const now = Date.now();
@@ -233,6 +244,9 @@ export async function failStuckA2ATask(id, processingCutoff, reason) {
         role: "agent",
         parts: [{ type: "text", text: reason }],
     };
+    const ageCondition = createdAtCutoff !== undefined
+        ? `AND (updated_at <= ? OR created_at <= ?)`
+        : `AND updated_at <= ?`;
     const result = await client.execute({
         sql: `UPDATE a2a_tasks
             SET status_state = 'failed',
@@ -241,8 +255,47 @@ export async function failStuckA2ATask(id, processingCutoff, reason) {
                 updated_at = ?
           WHERE id = ?
             AND status_state = 'processing'
-            AND updated_at <= ?`,
-        args: [JSON.stringify(message), timestamp, now, id, processingCutoff],
+            ${ageCondition}`,
+        args: createdAtCutoff !== undefined
+            ? [
+                JSON.stringify(message),
+                timestamp,
+                now,
+                id,
+                processingCutoff,
+                createdAtCutoff,
+            ]
+            : [JSON.stringify(message), timestamp, now, id, processingCutoff],
+    });
+    const affected = getAffectedRowCount(result);
+    return affected !== 0;
+}
+/**
+ * Fail a queued (submitted/working) task whose age since creation exceeds
+ * `createdAtCutoff` — the dispatch-retry loop kept throttling/refiring
+ * without ever reaching `processing`. Mirrors `failStuckA2ATask` but is
+ * gated on the queued state set and on `created_at` (queued tasks have no
+ * heartbeat, so staleness of `updated_at` isn't a meaningful signal here).
+ */
+export async function failStuckQueuedA2ATask(id, createdAtCutoff, reason) {
+    await ensureTable();
+    const client = getDbExec();
+    const now = Date.now();
+    const timestamp = new Date().toISOString();
+    const message = {
+        role: "agent",
+        parts: [{ type: "text", text: reason }],
+    };
+    const result = await client.execute({
+        sql: `UPDATE a2a_tasks
+            SET status_state = 'failed',
+                status_message = ?,
+                status_timestamp = ?,
+                updated_at = ?
+          WHERE id = ?
+            AND status_state IN ('submitted', 'working')
+            AND created_at <= ?`,
+        args: [JSON.stringify(message), timestamp, now, id, createdAtCutoff],
     });
     const affected = getAffectedRowCount(result);
     return affected !== 0;

package/dist/a2a/task-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"task-store.js","sourceRoot":"","sources":["../../src/a2a/task-store.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAG3E,IAAI,YAAuC,CAAC;AAE5C,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG;;;;;;;;;;uBAUD,OAAO,EAAE;uBACT,OAAO,EAAE;;OAEzB,CAAC;YAEF,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,wEAAwE;gBACxE,kEAAkE;gBAClE,MAAM,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;gBAChD,oEAAoE;gBACpE,sEAAsE;gBACtE,sEAAsE;gBACtE,oEAAoE;gBACpE,uEAAuE;gBACvE,WAAW;gBACX,MAAM,kBAAkB,CACtB,WAAW,EACX,aAAa,EACb,iEAAiE,CAClE,CAAC;gBACF,OAAO;YACT,CAAC;YAED,qEAAqE;YACrE,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,oEAAoE;YACpE,sEAAsE;YACtE,sEAAsE;YACtE,oEAAoE;YACpE,uEAAuE;YACvE,WAAW;YACX,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAClB,mDAAmD,CACpD,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;YACvE,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,sDAAsD;YACtD,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,GAAQ;IAC3B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAY;QACpB,SAAS,EAAG,GAAG,CAAC,UAAqB,IAAI,SAAS;QAClD,MAAM,EAAE;YACN,KAAK,EAAE,GAAG,CAAC,YAAyB;YACpC,OAAO,EAAE,GAAG,CAAC,cAAc;gBACzB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAwB,CAAC;gBAC1C,CAAC,CAAC,SAAS;YACb,SAAS,EAAE,GAAG,CAAC,gBAA0B;SAC1C;QACD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAiB,CAAC;QAC1C,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAmB,CAAC;QAC9C,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAkB,CAAC,CAAC,CAAC,CAAC,SAAS;QACvE,UAAU,EAAG,GAAG,CAAC,WAA6B,IAAI,IAAI;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAe;IAC1C,MAAM,YAAY,GAAG,MAMR,CAAC;IACd,OAAO,CACL,YAAY,EAAE,YAAY,IAAI,YAAY,EAAE,QAAQ,IAAI,YAAY,EAAE,KAAK,CAC5E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAgB,EAChB,SAAkB,EAClB,QAAkC,EAClC,UAA0B;IAE1B,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,MAAM,IAAI,GAAS;QACjB,EAAE;QACF,SAAS;QACT,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE;QACzC,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,SAAS,EAAE,EAAE;QACb,QAAQ;KACT,CAAC;IAEF,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,iLAAiL;QACtL,IAAI,EAAE;YACJ,EAAE;YACF,SAAS,IAAI,IAAI;YACjB,WAAW;YACX,SAAS;YACT,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC;YACzB,IAAI;YACJ,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YAC1C,UAAU,IAAI,IAAI;YAClB,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAU;IAC3C,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,gDAAgD;QACrD,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,UAAU,GAAI,IAAI,CAAC,CAAC,CAAS,CAAC,WAAW,CAAC;IAChD,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAU;IAEV,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE;;;;;yDAKgD;QACrD,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,sCAAsC;QAC3C,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,EAAU;IAMtD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,2EAA2E;QAChF,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAQ,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAY;QACpB,WAAW,EAAE,GAAG,CAAC,YAAsB;QACvC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAkB,CAAC,CAAC,CAAC,CAAC,SAAS;QACvE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,EAAU;IACzD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE;;;yDAGgD;QACrD,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;KAChB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAAU;IACrD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE;;;4CAGmC;QACxC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;KAChB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAU,EACV,gBAAwB;IAExB,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE;;;;;;gCAMuB;QAC5B,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,gBAAgB,CAAC;KAC7C,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAU,EACV,gBAAwB,EACxB,MAAc;IAEd,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAY;QACvB,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;KACxC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE;;;;;;;gCAOuB;QAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,gBAAgB,CAAC;KACtE,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAU;IACtC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,sCAAsC;QAC3C,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,EAAU,EACV,MAIC;IAED,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,oBAAoB;IACpB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,sCAAsC;QAC3C,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG;YACZ,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;YAC9C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,0IAA0I;QAC/I,IAAI,EAAE;YACJ,IAAI,CAAC,MAAM,CAAC,KAAK;YACjB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;YAChE,IAAI,CAAC,MAAM,CAAC,SAAS;YACrB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;YAC9B,GAAG;YACH,EAAE;SACH;KACF,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,EAAU,EACV,OAAgB;IAEhB,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE;;;;;uEAK8D;QACnE,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC;KACpD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,SAAkB;IAChD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,uEAAuE;YAC5E,IAAI,EAAE,CAAC,SAAS,CAAC;SAClB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CACnC,kDAAkD,CACnD,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAC/B,CAAC","sourcesContent":["import crypto from \"crypto\";\n\nimport { getDbExec, intType, isPostgres } from \"../db/client.js\";\nimport { ensureTableExists, ensureColumnExists } from \"../db/ddl-guard.js\";\nimport type { Task, Message, TaskState, Artifact } from \"./types.js\";\n\nlet _initPromise: Promise<void> | undefined;\n\nasync function ensureTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      const createSql = `\n        CREATE TABLE IF NOT EXISTS a2a_tasks (\n          id TEXT PRIMARY KEY,\n          context_id TEXT,\n          status_state TEXT NOT NULL DEFAULT 'submitted',\n          status_message TEXT,\n          status_timestamp TEXT NOT NULL,\n          history TEXT NOT NULL DEFAULT '[]',\n          artifacts TEXT NOT NULL DEFAULT '[]',\n          metadata TEXT,\n          created_at ${intType()} NOT NULL,\n          updated_at ${intType()} NOT NULL\n        )\n      `;\n\n      if (isPostgres()) {\n        // PG-guard: probe information_schema before issuing DDL to avoid ACCESS\n        // EXCLUSIVE lock contention in fresh background-worker processes.\n        await ensureTableExists(\"a2a_tasks\", createSql);\n        // Additive migration: owner_email column. Bound to the JWT-verified\n        // caller at task-creation time so handleGet / handleCancel can reject\n        // mismatched callers (the IDOR class fixed in PR #369). Existing rows\n        // have NULL owner_email and remain accessible to legacy callers via\n        // the legacy-token apiKeyEnv path; new rows are scoped from this point\n        // forward.\n        await ensureColumnExists(\n          \"a2a_tasks\",\n          \"owner_email\",\n          `ALTER TABLE a2a_tasks ADD COLUMN IF NOT EXISTS owner_email TEXT`,\n        );\n        return;\n      }\n\n      // SQLite (local dev): no lock problem — keep the original behaviour.\n      await client.execute(createSql);\n      // Additive migration: owner_email column. Bound to the JWT-verified\n      // caller at task-creation time so handleGet / handleCancel can reject\n      // mismatched callers (the IDOR class fixed in PR #369). Existing rows\n      // have NULL owner_email and remain accessible to legacy callers via\n      // the legacy-token apiKeyEnv path; new rows are scoped from this point\n      // forward.\n      try {\n        await client.execute(\n          `ALTER TABLE a2a_tasks ADD COLUMN owner_email TEXT`,\n        );\n      } catch {\n        // Column already exists — expected on every restart after first run.\n      }\n    })().catch((err) => {\n      // Retry init on the next call after a failed startup.\n      _initPromise = undefined;\n      throw err;\n    });\n  }\n  return _initPromise;\n}\n\nfunction taskFromRow(row: any): Task & { ownerEmail?: string | null } {\n  return {\n    id: row.id as string,\n    contextId: (row.context_id as string) || undefined,\n    status: {\n      state: row.status_state as TaskState,\n      message: row.status_message\n        ? JSON.parse(row.status_message as string)\n        : undefined,\n      timestamp: row.status_timestamp as string,\n    },\n    history: JSON.parse(row.history as string),\n    artifacts: JSON.parse(row.artifacts as string),\n    metadata: row.metadata ? JSON.parse(row.metadata as string) : undefined,\n    ownerEmail: (row.owner_email as string | null) ?? null,\n  };\n}\n\nfunction getAffectedRowCount(result: unknown): number | undefined {\n  const resultRecord = result as\n    | {\n        rowsAffected?: number;\n        rowCount?: number;\n        count?: number;\n      }\n    | undefined;\n  return (\n    resultRecord?.rowsAffected ?? resultRecord?.rowCount ?? resultRecord?.count\n  );\n}\n\nexport async function createTask(\n  message: Message,\n  contextId?: string,\n  metadata?: Record<string, unknown>,\n  ownerEmail?: string | null,\n): Promise<Task> {\n  await ensureTable();\n  const client = getDbExec();\n  const id = crypto.randomUUID();\n  const now = Date.now();\n  const timestamp = new Date().toISOString();\n\n  const task: Task = {\n    id,\n    contextId,\n    status: { state: \"submitted\", timestamp },\n    history: [message],\n    artifacts: [],\n    metadata,\n  };\n\n  await client.execute({\n    sql: `INSERT INTO a2a_tasks (id, context_id, status_state, status_timestamp, history, artifacts, metadata, owner_email, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      contextId ?? null,\n      \"submitted\",\n      timestamp,\n      JSON.stringify([message]),\n      \"[]\",\n      metadata ? JSON.stringify(metadata) : null,\n      ownerEmail ?? null,\n      now,\n      now,\n    ],\n  });\n\n  return task;\n}\n\n/**\n * Fetch the verified owner email recorded against a task at creation time.\n * Returns null when the task has no owner (legacy rows or unauthenticated\n * deployments) or when the task is missing.\n *\n * Used by `handleGet` / `handleCancel` to reject IDOR access — the JWT-\n * verified caller's email must match `owner_email` to read or cancel.\n */\nexport async function getTaskOwner(id: string): Promise<string | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT owner_email FROM a2a_tasks WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return null;\n  const ownerEmail = (rows[0] as any).owner_email;\n  return typeof ownerEmail === \"string\" && ownerEmail ? ownerEmail : null;\n}\n\n/**\n * Atomically claim a task for processing. Only succeeds when the task is in\n * state 'submitted' or 'working' — flipping it to 'processing' so concurrent\n * processors can't pick it up twice. Returns the task if claimed, null if it\n * was already claimed/completed/missing.\n *\n * Used by the cross-platform async processor (`_process-task` route) to avoid\n * duplicate handler runs when retries fire.\n */\nexport async function claimA2ATaskForProcessing(\n  id: string,\n): Promise<Task | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const timestamp = new Date().toISOString();\n\n  const result = await client.execute({\n    sql: `UPDATE a2a_tasks\n            SET status_state = 'processing',\n                status_timestamp = ?,\n                updated_at = ?\n          WHERE id = ?\n            AND status_state IN ('submitted', 'working')`,\n    args: [timestamp, now, id],\n  });\n  const affected = getAffectedRowCount(result);\n  if (affected === 0) return null;\n\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM a2a_tasks WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return null;\n  return taskFromRow(rows[0]);\n}\n\nexport async function getA2ATaskDispatchState(id: string): Promise<{\n  id: string;\n  statusState: string;\n  metadata: Record<string, unknown> | undefined;\n  updatedAt: number;\n} | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT id, status_state, metadata, updated_at FROM a2a_tasks WHERE id = ?`,\n    args: [id],\n  });\n  const row = rows[0] as any;\n  if (!row) return null;\n  return {\n    id: row.id as string,\n    statusState: row.status_state as string,\n    metadata: row.metadata ? JSON.parse(row.metadata as string) : undefined,\n    updatedAt: Number(row.updated_at ?? 0),\n  };\n}\n\nexport async function touchQueuedA2ATaskDispatch(id: string): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const result = await client.execute({\n    sql: `UPDATE a2a_tasks\n            SET updated_at = ?\n          WHERE id = ?\n            AND status_state IN ('submitted', 'working')`,\n    args: [now, id],\n  });\n  const affected = getAffectedRowCount(result);\n  return affected !== 0;\n}\n\nexport async function touchProcessingA2ATask(id: string): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const result = await client.execute({\n    sql: `UPDATE a2a_tasks\n            SET updated_at = ?\n          WHERE id = ?\n            AND status_state = 'processing'`,\n    args: [now, id],\n  });\n  const affected = getAffectedRowCount(result);\n  return affected !== 0;\n}\n\nexport async function resetStuckA2ATaskForRetry(\n  id: string,\n  processingCutoff: number,\n): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const timestamp = new Date().toISOString();\n  const result = await client.execute({\n    sql: `UPDATE a2a_tasks\n            SET status_state = 'working',\n                status_timestamp = ?,\n                updated_at = ?\n          WHERE id = ?\n            AND status_state = 'processing'\n            AND updated_at <= ?`,\n    args: [timestamp, now, id, processingCutoff],\n  });\n  const affected = getAffectedRowCount(result);\n  return affected !== 0;\n}\n\nexport async function failStuckA2ATask(\n  id: string,\n  processingCutoff: number,\n  reason: string,\n): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const timestamp = new Date().toISOString();\n  const message: Message = {\n    role: \"agent\",\n    parts: [{ type: \"text\", text: reason }],\n  };\n  const result = await client.execute({\n    sql: `UPDATE a2a_tasks\n            SET status_state = 'failed',\n                status_message = ?,\n                status_timestamp = ?,\n                updated_at = ?\n          WHERE id = ?\n            AND status_state = 'processing'\n            AND updated_at <= ?`,\n    args: [JSON.stringify(message), timestamp, now, id, processingCutoff],\n  });\n  const affected = getAffectedRowCount(result);\n  return affected !== 0;\n}\n\nexport async function getTask(id: string): Promise<Task | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM a2a_tasks WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return null;\n  return taskFromRow(rows[0]);\n}\n\nexport async function updateTask(\n  id: string,\n  update: {\n    state?: TaskState;\n    message?: Message;\n    artifacts?: Artifact[];\n  },\n): Promise<Task | null> {\n  await ensureTable();\n  const client = getDbExec();\n\n  // Read current task\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM a2a_tasks WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return null;\n\n  const task = taskFromRow(rows[0]);\n  const now = Date.now();\n\n  if (update.state) {\n    task.status = {\n      state: update.state,\n      message: update.message ?? task.status.message,\n      timestamp: new Date().toISOString(),\n    };\n  }\n\n  if (update.message && task.history) {\n    task.history.push(update.message);\n  }\n\n  if (update.artifacts) {\n    task.artifacts = [...(task.artifacts ?? []), ...update.artifacts];\n  }\n\n  await client.execute({\n    sql: `UPDATE a2a_tasks SET status_state = ?, status_message = ?, status_timestamp = ?, history = ?, artifacts = ?, updated_at = ? WHERE id = ?`,\n    args: [\n      task.status.state,\n      task.status.message ? JSON.stringify(task.status.message) : null,\n      task.status.timestamp,\n      JSON.stringify(task.history),\n      JSON.stringify(task.artifacts),\n      now,\n      id,\n    ],\n  });\n\n  return task;\n}\n\nexport async function updateTaskStatusMessage(\n  id: string,\n  message: Message,\n): Promise<void> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const timestamp = new Date().toISOString();\n  await client.execute({\n    sql: `UPDATE a2a_tasks\n            SET status_message = ?,\n                status_timestamp = ?,\n                updated_at = ?\n          WHERE id = ?\n            AND status_state IN ('submitted', 'working', 'processing')`,\n    args: [JSON.stringify(message), timestamp, now, id],\n  });\n}\n\nexport async function listTasks(contextId?: string): Promise<Task[]> {\n  await ensureTable();\n  const client = getDbExec();\n\n  if (contextId) {\n    const { rows } = await client.execute({\n      sql: `SELECT * FROM a2a_tasks WHERE context_id = ? ORDER BY created_at DESC`,\n      args: [contextId],\n    });\n    return rows.map(taskFromRow);\n  }\n\n  const { rows } = await client.execute(\n    `SELECT * FROM a2a_tasks ORDER BY created_at DESC`,\n  );\n  return rows.map(taskFromRow);\n}\n"]}
+{"version":3,"file":"task-store.js","sourceRoot":"","sources":["../../src/a2a/task-store.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAG3E,IAAI,YAAuC,CAAC;AAE5C,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG;;;;;;;;;;uBAUD,OAAO,EAAE;uBACT,OAAO,EAAE;;OAEzB,CAAC;YAEF,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,wEAAwE;gBACxE,kEAAkE;gBAClE,MAAM,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;gBAChD,oEAAoE;gBACpE,sEAAsE;gBACtE,sEAAsE;gBACtE,oEAAoE;gBACpE,uEAAuE;gBACvE,WAAW;gBACX,MAAM,kBAAkB,CACtB,WAAW,EACX,aAAa,EACb,iEAAiE,CAClE,CAAC;gBACF,OAAO;YACT,CAAC;YAED,qEAAqE;YACrE,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,oEAAoE;YACpE,sEAAsE;YACtE,sEAAsE;YACtE,oEAAoE;YACpE,uEAAuE;YACvE,WAAW;YACX,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAClB,mDAAmD,CACpD,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;YACvE,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,sDAAsD;YACtD,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,GAAQ;IAC3B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAY;QACpB,SAAS,EAAG,GAAG,CAAC,UAAqB,IAAI,SAAS;QAClD,MAAM,EAAE;YACN,KAAK,EAAE,GAAG,CAAC,YAAyB;YACpC,OAAO,EAAE,GAAG,CAAC,cAAc;gBACzB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAwB,CAAC;gBAC1C,CAAC,CAAC,SAAS;YACb,SAAS,EAAE,GAAG,CAAC,gBAA0B;SAC1C;QACD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAiB,CAAC;QAC1C,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAmB,CAAC;QAC9C,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAkB,CAAC,CAAC,CAAC,CAAC,SAAS;QACvE,UAAU,EAAG,GAAG,CAAC,WAA6B,IAAI,IAAI;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAe;IAC1C,MAAM,YAAY,GAAG,MAMR,CAAC;IACd,OAAO,CACL,YAAY,EAAE,YAAY,IAAI,YAAY,EAAE,QAAQ,IAAI,YAAY,EAAE,KAAK,CAC5E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAgB,EAChB,SAAkB,EAClB,QAAkC,EAClC,UAA0B;IAE1B,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,MAAM,IAAI,GAAS;QACjB,EAAE;QACF,SAAS;QACT,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE;QACzC,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,SAAS,EAAE,EAAE;QACb,QAAQ;KACT,CAAC;IAEF,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,iLAAiL;QACtL,IAAI,EAAE;YACJ,EAAE;YACF,SAAS,IAAI,IAAI;YACjB,WAAW;YACX,SAAS;YACT,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC;YACzB,IAAI;YACJ,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YAC1C,UAAU,IAAI,IAAI;YAClB,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAU;IAC3C,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,gDAAgD;QACrD,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,UAAU,GAAI,IAAI,CAAC,CAAC,CAAS,CAAC,WAAW,CAAC;IAChD,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAU;IAEV,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE;;;;;yDAKgD;QACrD,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,sCAAsC;QAC3C,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,EAAU;IAOtD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,uFAAuF;QAC5F,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAQ,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAY;QACpB,WAAW,EAAE,GAAG,CAAC,YAAsB;QACvC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAkB,CAAC,CAAC,CAAC,CAAC,SAAS;QACvE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;QACtC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,EAAU;IACzD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE;;;yDAGgD;QACrD,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;KAChB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAAU;IACrD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE;;;4CAGmC;QACxC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;KAChB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAU,EACV,gBAAwB;IAExB,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE;;;;;;gCAMuB;QAC5B,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,gBAAgB,CAAC;KAC7C,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAU,EACV,gBAAwB,EACxB,MAAc,EACd,eAAwB;IAExB,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAY;QACvB,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;KACxC,CAAC;IACF,MAAM,YAAY,GAChB,eAAe,KAAK,SAAS;QAC3B,CAAC,CAAC,0CAA0C;QAC5C,CAAC,CAAC,qBAAqB,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE;;;;;;;cAOK,YAAY,EAAE;QACxB,IAAI,EACF,eAAe,KAAK,SAAS;YAC3B,CAAC,CAAC;gBACE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBACvB,SAAS;gBACT,GAAG;gBACH,EAAE;gBACF,gBAAgB;gBAChB,eAAe;aAChB;YACH,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,gBAAgB,CAAC;KACtE,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,EAAU,EACV,eAAuB,EACvB,MAAc;IAEd,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAY;QACvB,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;KACxC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE;;;;;;;gCAOuB;QAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,eAAe,CAAC;KACrE,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAU;IACtC,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,sCAAsC;QAC3C,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,EAAU,EACV,MAIC;IAED,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,oBAAoB;IACpB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,sCAAsC;QAC3C,IAAI,EAAE,CAAC,EAAE,CAAC;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG;YACZ,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;YAC9C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,0IAA0I;QAC/I,IAAI,EAAE;YACJ,IAAI,CAAC,MAAM,CAAC,KAAK;YACjB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;YAChE,IAAI,CAAC,MAAM,CAAC,SAAS;YACrB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;YAC9B,GAAG;YACH,EAAE;SACH;KACF,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,EAAU,EACV,OAAgB;IAEhB,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE;;;;;uEAK8D;QACnE,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC;KACpD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,SAAkB;IAChD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,uEAAuE;YAC5E,IAAI,EAAE,CAAC,SAAS,CAAC;SAClB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CACnC,kDAAkD,CACnD,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAC/B,CAAC","sourcesContent":["import crypto from \"crypto\";\n\nimport { getDbExec, intType, isPostgres } from \"../db/client.js\";\nimport { ensureTableExists, ensureColumnExists } from \"../db/ddl-guard.js\";\nimport type { Task, Message, TaskState, Artifact } from \"./types.js\";\n\nlet _initPromise: Promise<void> | undefined;\n\nasync function ensureTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      const createSql = `\n        CREATE TABLE IF NOT EXISTS a2a_tasks (\n          id TEXT PRIMARY KEY,\n          context_id TEXT,\n          status_state TEXT NOT NULL DEFAULT 'submitted',\n          status_message TEXT,\n          status_timestamp TEXT NOT NULL,\n          history TEXT NOT NULL DEFAULT '[]',\n          artifacts TEXT NOT NULL DEFAULT '[]',\n          metadata TEXT,\n          created_at ${intType()} NOT NULL,\n          updated_at ${intType()} NOT NULL\n        )\n      `;\n\n      if (isPostgres()) {\n        // PG-guard: probe information_schema before issuing DDL to avoid ACCESS\n        // EXCLUSIVE lock contention in fresh background-worker processes.\n        await ensureTableExists(\"a2a_tasks\", createSql);\n        // Additive migration: owner_email column. Bound to the JWT-verified\n        // caller at task-creation time so handleGet / handleCancel can reject\n        // mismatched callers (the IDOR class fixed in PR #369). Existing rows\n        // have NULL owner_email and remain accessible to legacy callers via\n        // the legacy-token apiKeyEnv path; new rows are scoped from this point\n        // forward.\n        await ensureColumnExists(\n          \"a2a_tasks\",\n          \"owner_email\",\n          `ALTER TABLE a2a_tasks ADD COLUMN IF NOT EXISTS owner_email TEXT`,\n        );\n        return;\n      }\n\n      // SQLite (local dev): no lock problem — keep the original behaviour.\n      await client.execute(createSql);\n      // Additive migration: owner_email column. Bound to the JWT-verified\n      // caller at task-creation time so handleGet / handleCancel can reject\n      // mismatched callers (the IDOR class fixed in PR #369). Existing rows\n      // have NULL owner_email and remain accessible to legacy callers via\n      // the legacy-token apiKeyEnv path; new rows are scoped from this point\n      // forward.\n      try {\n        await client.execute(\n          `ALTER TABLE a2a_tasks ADD COLUMN owner_email TEXT`,\n        );\n      } catch {\n        // Column already exists — expected on every restart after first run.\n      }\n    })().catch((err) => {\n      // Retry init on the next call after a failed startup.\n      _initPromise = undefined;\n      throw err;\n    });\n  }\n  return _initPromise;\n}\n\nfunction taskFromRow(row: any): Task & { ownerEmail?: string | null } {\n  return {\n    id: row.id as string,\n    contextId: (row.context_id as string) || undefined,\n    status: {\n      state: row.status_state as TaskState,\n      message: row.status_message\n        ? JSON.parse(row.status_message as string)\n        : undefined,\n      timestamp: row.status_timestamp as string,\n    },\n    history: JSON.parse(row.history as string),\n    artifacts: JSON.parse(row.artifacts as string),\n    metadata: row.metadata ? JSON.parse(row.metadata as string) : undefined,\n    ownerEmail: (row.owner_email as string | null) ?? null,\n  };\n}\n\nfunction getAffectedRowCount(result: unknown): number | undefined {\n  const resultRecord = result as\n    | {\n        rowsAffected?: number;\n        rowCount?: number;\n        count?: number;\n      }\n    | undefined;\n  return (\n    resultRecord?.rowsAffected ?? resultRecord?.rowCount ?? resultRecord?.count\n  );\n}\n\nexport async function createTask(\n  message: Message,\n  contextId?: string,\n  metadata?: Record<string, unknown>,\n  ownerEmail?: string | null,\n): Promise<Task> {\n  await ensureTable();\n  const client = getDbExec();\n  const id = crypto.randomUUID();\n  const now = Date.now();\n  const timestamp = new Date().toISOString();\n\n  const task: Task = {\n    id,\n    contextId,\n    status: { state: \"submitted\", timestamp },\n    history: [message],\n    artifacts: [],\n    metadata,\n  };\n\n  await client.execute({\n    sql: `INSERT INTO a2a_tasks (id, context_id, status_state, status_timestamp, history, artifacts, metadata, owner_email, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      contextId ?? null,\n      \"submitted\",\n      timestamp,\n      JSON.stringify([message]),\n      \"[]\",\n      metadata ? JSON.stringify(metadata) : null,\n      ownerEmail ?? null,\n      now,\n      now,\n    ],\n  });\n\n  return task;\n}\n\n/**\n * Fetch the verified owner email recorded against a task at creation time.\n * Returns null when the task has no owner (legacy rows or unauthenticated\n * deployments) or when the task is missing.\n *\n * Used by `handleGet` / `handleCancel` to reject IDOR access — the JWT-\n * verified caller's email must match `owner_email` to read or cancel.\n */\nexport async function getTaskOwner(id: string): Promise<string | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT owner_email FROM a2a_tasks WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return null;\n  const ownerEmail = (rows[0] as any).owner_email;\n  return typeof ownerEmail === \"string\" && ownerEmail ? ownerEmail : null;\n}\n\n/**\n * Atomically claim a task for processing. Only succeeds when the task is in\n * state 'submitted' or 'working' — flipping it to 'processing' so concurrent\n * processors can't pick it up twice. Returns the task if claimed, null if it\n * was already claimed/completed/missing.\n *\n * Used by the cross-platform async processor (`_process-task` route) to avoid\n * duplicate handler runs when retries fire.\n */\nexport async function claimA2ATaskForProcessing(\n  id: string,\n): Promise<Task | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const timestamp = new Date().toISOString();\n\n  const result = await client.execute({\n    sql: `UPDATE a2a_tasks\n            SET status_state = 'processing',\n                status_timestamp = ?,\n                updated_at = ?\n          WHERE id = ?\n            AND status_state IN ('submitted', 'working')`,\n    args: [timestamp, now, id],\n  });\n  const affected = getAffectedRowCount(result);\n  if (affected === 0) return null;\n\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM a2a_tasks WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return null;\n  return taskFromRow(rows[0]);\n}\n\nexport async function getA2ATaskDispatchState(id: string): Promise<{\n  id: string;\n  statusState: string;\n  metadata: Record<string, unknown> | undefined;\n  updatedAt: number;\n  createdAt: number;\n} | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT id, status_state, metadata, created_at, updated_at FROM a2a_tasks WHERE id = ?`,\n    args: [id],\n  });\n  const row = rows[0] as any;\n  if (!row) return null;\n  return {\n    id: row.id as string,\n    statusState: row.status_state as string,\n    metadata: row.metadata ? JSON.parse(row.metadata as string) : undefined,\n    updatedAt: Number(row.updated_at ?? 0),\n    createdAt: Number(row.created_at ?? 0),\n  };\n}\n\nexport async function touchQueuedA2ATaskDispatch(id: string): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const result = await client.execute({\n    sql: `UPDATE a2a_tasks\n            SET updated_at = ?\n          WHERE id = ?\n            AND status_state IN ('submitted', 'working')`,\n    args: [now, id],\n  });\n  const affected = getAffectedRowCount(result);\n  return affected !== 0;\n}\n\nexport async function touchProcessingA2ATask(id: string): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const result = await client.execute({\n    sql: `UPDATE a2a_tasks\n            SET updated_at = ?\n          WHERE id = ?\n            AND status_state = 'processing'`,\n    args: [now, id],\n  });\n  const affected = getAffectedRowCount(result);\n  return affected !== 0;\n}\n\nexport async function resetStuckA2ATaskForRetry(\n  id: string,\n  processingCutoff: number,\n): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const timestamp = new Date().toISOString();\n  const result = await client.execute({\n    sql: `UPDATE a2a_tasks\n            SET status_state = 'working',\n                status_timestamp = ?,\n                updated_at = ?\n          WHERE id = ?\n            AND status_state = 'processing'\n            AND updated_at <= ?`,\n    args: [timestamp, now, id, processingCutoff],\n  });\n  const affected = getAffectedRowCount(result);\n  return affected !== 0;\n}\n\n/**\n * Fail a processing task once it is stuck. Two independent conditions can\n * trigger this, either of which alone is sufficient:\n *   - `updated_at <= processingCutoff`: no heartbeat/progress touch in a\n *     while — the processor likely died.\n *   - `created_at <= createdAtCutoff` — a hard wall on total run time. A\n *     hung await inside a still-alive process keeps `updated_at` fresh via\n *     the liveness heartbeat forever, so staleness alone never trips; age\n *     since creation is the only bound that catches it.\n */\nexport async function failStuckA2ATask(\n  id: string,\n  processingCutoff: number,\n  reason: string,\n  createdAtCutoff?: number,\n): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const timestamp = new Date().toISOString();\n  const message: Message = {\n    role: \"agent\",\n    parts: [{ type: \"text\", text: reason }],\n  };\n  const ageCondition =\n    createdAtCutoff !== undefined\n      ? `AND (updated_at <= ? OR created_at <= ?)`\n      : `AND updated_at <= ?`;\n  const result = await client.execute({\n    sql: `UPDATE a2a_tasks\n            SET status_state = 'failed',\n                status_message = ?,\n                status_timestamp = ?,\n                updated_at = ?\n          WHERE id = ?\n            AND status_state = 'processing'\n            ${ageCondition}`,\n    args:\n      createdAtCutoff !== undefined\n        ? [\n            JSON.stringify(message),\n            timestamp,\n            now,\n            id,\n            processingCutoff,\n            createdAtCutoff,\n          ]\n        : [JSON.stringify(message), timestamp, now, id, processingCutoff],\n  });\n  const affected = getAffectedRowCount(result);\n  return affected !== 0;\n}\n\n/**\n * Fail a queued (submitted/working) task whose age since creation exceeds\n * `createdAtCutoff` — the dispatch-retry loop kept throttling/refiring\n * without ever reaching `processing`. Mirrors `failStuckA2ATask` but is\n * gated on the queued state set and on `created_at` (queued tasks have no\n * heartbeat, so staleness of `updated_at` isn't a meaningful signal here).\n */\nexport async function failStuckQueuedA2ATask(\n  id: string,\n  createdAtCutoff: number,\n  reason: string,\n): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const timestamp = new Date().toISOString();\n  const message: Message = {\n    role: \"agent\",\n    parts: [{ type: \"text\", text: reason }],\n  };\n  const result = await client.execute({\n    sql: `UPDATE a2a_tasks\n            SET status_state = 'failed',\n                status_message = ?,\n                status_timestamp = ?,\n                updated_at = ?\n          WHERE id = ?\n            AND status_state IN ('submitted', 'working')\n            AND created_at <= ?`,\n    args: [JSON.stringify(message), timestamp, now, id, createdAtCutoff],\n  });\n  const affected = getAffectedRowCount(result);\n  return affected !== 0;\n}\n\nexport async function getTask(id: string): Promise<Task | null> {\n  await ensureTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM a2a_tasks WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return null;\n  return taskFromRow(rows[0]);\n}\n\nexport async function updateTask(\n  id: string,\n  update: {\n    state?: TaskState;\n    message?: Message;\n    artifacts?: Artifact[];\n  },\n): Promise<Task | null> {\n  await ensureTable();\n  const client = getDbExec();\n\n  // Read current task\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM a2a_tasks WHERE id = ?`,\n    args: [id],\n  });\n  if (rows.length === 0) return null;\n\n  const task = taskFromRow(rows[0]);\n  const now = Date.now();\n\n  if (update.state) {\n    task.status = {\n      state: update.state,\n      message: update.message ?? task.status.message,\n      timestamp: new Date().toISOString(),\n    };\n  }\n\n  if (update.message && task.history) {\n    task.history.push(update.message);\n  }\n\n  if (update.artifacts) {\n    task.artifacts = [...(task.artifacts ?? []), ...update.artifacts];\n  }\n\n  await client.execute({\n    sql: `UPDATE a2a_tasks SET status_state = ?, status_message = ?, status_timestamp = ?, history = ?, artifacts = ?, updated_at = ? WHERE id = ?`,\n    args: [\n      task.status.state,\n      task.status.message ? JSON.stringify(task.status.message) : null,\n      task.status.timestamp,\n      JSON.stringify(task.history),\n      JSON.stringify(task.artifacts),\n      now,\n      id,\n    ],\n  });\n\n  return task;\n}\n\nexport async function updateTaskStatusMessage(\n  id: string,\n  message: Message,\n): Promise<void> {\n  await ensureTable();\n  const client = getDbExec();\n  const now = Date.now();\n  const timestamp = new Date().toISOString();\n  await client.execute({\n    sql: `UPDATE a2a_tasks\n            SET status_message = ?,\n                status_timestamp = ?,\n                updated_at = ?\n          WHERE id = ?\n            AND status_state IN ('submitted', 'working', 'processing')`,\n    args: [JSON.stringify(message), timestamp, now, id],\n  });\n}\n\nexport async function listTasks(contextId?: string): Promise<Task[]> {\n  await ensureTable();\n  const client = getDbExec();\n\n  if (contextId) {\n    const { rows } = await client.execute({\n      sql: `SELECT * FROM a2a_tasks WHERE context_id = ? ORDER BY created_at DESC`,\n      args: [contextId],\n    });\n    return rows.map(taskFromRow);\n  }\n\n  const { rows } = await client.execute(\n    `SELECT * FROM a2a_tasks ORDER BY created_at DESC`,\n  );\n  return rows.map(taskFromRow);\n}\n"]}

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/file-upload/actions/upload-image.d.ts

@@ -17,12 +17,12 @@ declare const _default: import("../../action.js").ActionDefinition<{
     id?: undefined;
     provider?: undefined;
 } | {
-    error?: undefined;
     configured?: undefined;
     connectPath?: undefined;
     url: string;
     id: string;
     provider: string;
+    error?: undefined;
 }>;
 export default _default;
 //# sourceMappingURL=upload-image.d.ts.map

package/dist/integrations/adapters/slack.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/integrations/adapters/slack.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAQhB,MAAM,aAAa,CAAC;AAcrB,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7E,kEAAkE;IAClE,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAC1B,OAAO,GAAE,mBAAwB,GAChC,eAAe,CA2fjB"}
+{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/integrations/adapters/slack.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAQhB,MAAM,aAAa,CAAC;AA+BrB,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7E,kEAAkE;IAClE,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAC1B,OAAO,GAAE,mBAAwB,GAChC,eAAe,CAmgBjB"}

package/dist/integrations/adapters/slack.js

@@ -18,6 +18,13 @@ const SLACK_PERMALINK_TIMEOUT_MS = 1_000;
 const SLACK_CONTEXT_MESSAGE_LIMIT = 15;
 const SLACK_CONTEXT_TEXT_LIMIT = 2_000;
 const SLACK_CALM_PROGRESS_THRESHOLD_SECONDS = 30;
+const SLACK_IDENTITY_TIMEOUT_MS = 1_000;
+const SLACK_IDENTITY_CACHE_TTL_MS = 10 * 60 * 1_000;
+// Failed users.info lookups only get a short negative TTL: a transient Slack
+// API blip must not fail-close a sender's identity (and DMs) for 10 minutes.
+const SLACK_IDENTITY_NEGATIVE_CACHE_TTL_MS = 30 * 1_000;
+const SLACK_IDENTITY_CACHE_MAX_ENTRIES = 1_000;
+const slackIdentityCache = new Map();
 /**
  * Create a Slack platform adapter.
  *
@@ -283,6 +290,12 @@ export function slackAdapter(options = {}) {
                 return incoming;
             return hydrateSlackContext(token, incoming);
         },
+        async hydrateIncomingIdentity(incoming) {
+            const token = await resolveBotToken(incoming);
+            if (!token)
+                return incoming;
+            return hydrateSlackIdentity(token, incoming);
+        },
         async startRunProgress(incoming) {
             const token = await resolveBotToken(incoming);
             if (!token)
@@ -873,6 +886,81 @@ async function slackJson(token, method, params, timeoutMs = 2_000) {
         return null;
     }
 }
+function slackIdentityCacheKey(incoming) {
+    const teamId = incoming.platformContext.teamId;
+    const senderId = incoming.senderId;
+    if (typeof senderId !== "string" || !senderId.trim())
+        return null;
+    return `${typeof teamId === "string" && teamId ? teamId : "unknown"}:${senderId}`;
+}
+async function resolveSlackUserIdentity(token, incoming) {
+    const cacheKey = slackIdentityCacheKey(incoming);
+    if (!cacheKey)
+        return null;
+    const cached = slackIdentityCache.get(cacheKey);
+    if (cached && cached.expiresAt > Date.now())
+        return cached.identity;
+    if (cached)
+        slackIdentityCache.delete(cacheKey);
+    const user = await slackJson(token, "users.info", { user: incoming.senderId }, SLACK_IDENTITY_TIMEOUT_MS);
+    const profile = user?.user?.profile;
+    const identity = user?.user
+        ? {
+            email: typeof profile?.email === "string" && profile.email.trim()
+                ? profile.email.trim().toLowerCase()
+                : null,
+            name: typeof profile?.real_name === "string" && profile.real_name.trim()
+                ? profile.real_name.trim()
+                : typeof profile?.display_name === "string" &&
+                    profile.display_name.trim()
+                    ? profile.display_name.trim()
+                    : typeof user.user.real_name === "string" &&
+                        user.user.real_name.trim()
+                        ? user.user.real_name.trim()
+                        : typeof user.user.name === "string" && user.user.name.trim()
+                            ? user.user.name.trim()
+                            : null,
+            memberType: user.user.is_ultra_restricted
+                ? "external"
+                : user.user.is_restricted
+                    ? "guest"
+                    : user.user.is_owner
+                        ? "owner"
+                        : user.user.is_admin
+                            ? "admin"
+                            : "member",
+        }
+        : null;
+    if (slackIdentityCache.size >= SLACK_IDENTITY_CACHE_MAX_ENTRIES) {
+        const oldestKey = slackIdentityCache.keys().next().value;
+        if (oldestKey)
+            slackIdentityCache.delete(oldestKey);
+    }
+    slackIdentityCache.set(cacheKey, {
+        identity,
+        expiresAt: Date.now() +
+            (identity
+                ? SLACK_IDENTITY_CACHE_TTL_MS
+                : SLACK_IDENTITY_NEGATIVE_CACHE_TTL_MS),
+    });
+    return identity;
+}
+async function hydrateSlackIdentity(token, incoming) {
+    const identity = await resolveSlackUserIdentity(token, incoming);
+    if (!identity)
+        return incoming;
+    return {
+        ...incoming,
+        ...(identity.name ? { senderName: identity.name } : {}),
+        ...(identity.email
+            ? { senderEmail: identity.email, senderVerified: true }
+            : { senderVerified: false }),
+        actorTrust: {
+            memberType: identity.memberType,
+            verified: true,
+        },
+    };
+}
 async function hydrateSlackContext(token, incoming) {
     const channelId = incoming.platformContext.channelId;
     const threadTs = incoming.platformContext.threadTs;
@@ -880,7 +968,7 @@ async function hydrateSlackContext(token, incoming) {
     if (typeof channelId !== "string" || typeof threadTs !== "string") {
         return incoming;
     }
-    const [thread, history, pins, conversation, user] = await Promise.all([
+    const [thread, history, pins, conversation, identity] = await Promise.all([
         slackJson(token, "conversations.replies", {
             channel: channelId,
             ts: threadTs,
@@ -894,7 +982,7 @@ async function hydrateSlackContext(token, incoming) {
         }),
         slackJson(token, "pins.list", { channel: channelId }),
         slackJson(token, "conversations.info", { channel: channelId }),
-        senderId ? slackJson(token, "users.info", { user: senderId }) : null,
+        senderId ? resolveSlackUserIdentity(token, incoming) : null,
     ]);
     // Agent View can attach the Slack surface the user is currently viewing to
     // a DM. Treat it only as a context hint: Slack requires us to prove the bot
@@ -968,9 +1056,9 @@ async function hydrateSlackContext(token, incoming) {
             };
         })
         : [];
-    const profile = user?.user?.profile;
-    const isGuest = user?.user?.is_restricted === true;
-    const isExternal = user?.user?.is_ultra_restricted === true;
+    const profile = identity;
+    const isGuest = identity?.memberType === "guest";
+    const isExternal = identity?.memberType === "external";
     const isPrivate = conversation?.channel?.is_private === true;
     const isExternalShared = conversation?.channel?.is_ext_shared === true;
     const isMpim = conversation?.channel?.is_mpim === true;
@@ -1006,17 +1094,14 @@ async function hydrateSlackContext(token, incoming) {
     const hydratedFiles = hydratedMessages.flatMap((message) => message.files ?? []);
     return {
         ...incoming,
-        ...(typeof profile?.display_name === "string" && profile.display_name
-            ? { senderName: profile.display_name }
-            : typeof profile?.real_name === "string" && profile.real_name
-                ? { senderName: profile.real_name }
-                : {}),
-        ...(typeof profile?.email === "string"
+        ...(profile?.name ? { senderName: profile.name } : {}),
+        ...(profile?.email
             ? { senderEmail: profile.email, senderVerified: true }
-            : {}),
+            : { senderVerified: false }),
         conversationType,
         actorTrust: {
-            memberType: isExternal ? "external" : isGuest ? "guest" : "member",
+            memberType: identity?.memberType ??
+                (isExternal ? "external" : isGuest ? "guest" : "member"),
             verified: true,
         },
         contextMessages: hydratedMessages,