@agentqueue/worker 0.0.0 → 0.3.1-ci.g02c90ca5cd192c5a75a7d1d19329683cefb22d6e

package/dist/src/app-server/process-group.js

@@ -0,0 +1,122 @@
+import { spawn } from "node:child_process";
+import { readdirSync, readFileSync } from "node:fs";
+const groups = new WeakMap();
+export function spawnProcessGroup(command, args, options, termination = {}) {
+    if (process.platform === "win32")
+        throw new Error("Core harness process groups require a POSIX host");
+    const child = spawn(command, args, { ...options, detached: true });
+    const closed = new Promise((resolve) => {
+        child.once("error", () => resolve());
+        child.once("close", () => resolve());
+    });
+    const group = { closed, graceMs: termination.graceMs ?? 2_000, killMs: termination.killMs ?? 2_000 };
+    groups.set(child, group);
+    child.once("exit", () => startStopping(child, group));
+    return child;
+}
+function signalGroup(pid, signal) {
+    try {
+        process.kill(-pid, signal);
+        return true;
+    }
+    catch (error) {
+        if (error.code === "ESRCH")
+            return false;
+        throw error;
+    }
+}
+function groupRunning(pid) {
+    if (!signalGroup(pid, 0))
+        return false;
+    if (process.platform !== "linux")
+        return true;
+    for (let inspection = 0; inspection < 2; inspection++) {
+        for (const entry of readdirSync("/proc")) {
+            if (!/^\d+$/.test(entry))
+                continue;
+            let stat;
+            try {
+                stat = readFileSync(`/proc/${entry}/stat`, "utf8");
+            }
+            catch (error) {
+                if (["ENOENT", "ESRCH", "EACCES"].includes(error.code ?? ""))
+                    continue;
+                throw error;
+            }
+            const [state, , group] = stat.slice(stat.lastIndexOf(")") + 2).split(" ");
+            if (Number(group) === pid && state !== "Z" && state !== "X")
+                return true;
+        }
+    }
+    return false;
+}
+async function waitForGroup(pid, deadline, group) {
+    let absentSince;
+    while (!group.gone) {
+        if (!signalGroup(pid, 0))
+            break;
+        if (groupRunning(pid)) {
+            absentSince = undefined;
+            if (Date.now() >= deadline())
+                return false;
+        }
+        else {
+            absentSince ??= Date.now();
+            if (Date.now() - absentSince >= 100)
+                break;
+        }
+        await sleep(25);
+    }
+    group.gone = true;
+    return true;
+}
+function startStopping(child, group) {
+    if (group.stopping)
+        return;
+    group.stopping = true;
+    if (child.pid && signalGroup(child.pid, "SIGTERM")) {
+        group.graceUntil ??= Date.now() + group.graceMs;
+        group.retiring = (async () => {
+            if (!(await waitForGroup(child.pid, () => group.graceUntil, group))) {
+                signalGroup(child.pid, "SIGKILL");
+                const killDeadline = Date.now() + group.killMs;
+                if (!(await waitForGroup(child.pid, () => killDeadline, group)))
+                    throw new Error("Process group did not stop after SIGKILL");
+            }
+        })();
+        void group.retiring.catch(() => { });
+    }
+    else
+        group.gone = true;
+}
+export function closeProcessGroup(child, graceMs, killMs) {
+    const group = groups.get(child);
+    if (!group)
+        return Promise.reject(new Error("Process was not created as an owned process group"));
+    group.closing ??= (async () => {
+        group.graceUntil = Date.now() + (graceMs ?? group.graceMs);
+        group.killMs = killMs ?? group.killMs;
+        startStopping(child, group);
+        if (group.retiring)
+            await group.retiring;
+        await withTimeout(() => group.closed, group.killMs, "Process group stdio close");
+    })();
+    return group.closing;
+}
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+async function withTimeout(start, ms, label) {
+    let timer;
+    try {
+        await Promise.race([
+            start(),
+            new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new Error(`${label} timed out after ${ms}ms`)), ms);
+                timer.unref();
+            }),
+        ]);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=process-group.js.map

package/dist/src/app-server/process-group.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-group.js","sourceRoot":"","sources":["../../../src/app-server/process-group.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAwC,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAYpD,MAAM,MAAM,GAAG,IAAI,OAAO,EAA8B,CAAC;AAEzD,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,IAAc,EACd,OAAqB,EACrB,cAAqD,EAAE;IAEvD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtG,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC3C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;IACnH,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,MAA0B;IAC1D,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,KAAK,IAAI,UAAU,GAAG,CAAC,EAAE,UAAU,GAAG,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,SAAS;YACnC,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,YAAY,CAAC,SAAS,KAAK,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC;oBAAE,SAAS;gBAClG,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,CAAC,KAAK,EAAE,AAAD,EAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1E,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,QAAsB,EAAE,KAAmB;IAClF,IAAI,WAA+B,CAAC;IACpC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;YAAE,MAAM;QAChC,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,WAAW,GAAG,SAAS,CAAC;YACxB,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE;gBAAE,OAAO,KAAK,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,WAAW,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,IAAI,GAAG;gBAAE,MAAM;QAC7C,CAAC;QACD,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,KAAmB,EAAE,KAAmB;IAC7D,IAAI,KAAK,CAAC,QAAQ;QAAE,OAAO;IAC3B,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;IACtB,IAAI,KAAK,CAAC,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;QACnD,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;QAChD,KAAK,CAAC,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3B,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,GAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,UAAW,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBACtE,WAAW,CAAC,KAAK,CAAC,GAAI,EAAE,SAAS,CAAC,CAAC;gBACnC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC;gBAC/C,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,GAAI,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;oBAC9D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAChE,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,KAAK,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACtC,CAAC;;QAAM,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAmB,EAAE,OAAgB,EAAE,MAAe;IACtF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC;IAClG,KAAK,CAAC,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;QAC5B,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3D,KAAK,CAAC,MAAM,GAAG,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;QACtC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,QAAQ;YAAE,MAAM,KAAK,CAAC,QAAQ,CAAC;QACzC,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;IACnF,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,KAAK,CAAC,OAAO,CAAC;AACvB,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEtF,KAAK,UAAU,WAAW,CAAC,KAA0B,EAAE,EAAU,EAAE,KAAa;IAC9E,IAAI,KAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,KAAK,EAAE;YACP,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpF,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/src/app-server/transports.d.ts

@@ -0,0 +1,68 @@
+import type { ChildProcess } from "node:child_process";
+import type { TLSSocket } from "node:tls";
+export interface AppServerTransport {
+    readonly ready: Promise<void>;
+    listen(message: (frame: string) => void, failure: (error: Error) => void): void;
+    write(frame: string): Promise<void>;
+    close(): Promise<void>;
+}
+export interface StdioOptions {
+    binaryPath: string;
+    cwd: string;
+    env?: NodeJS.ProcessEnv;
+    args?: string[];
+    expectedVersion?: string;
+    launch?: {
+        command: string;
+        args: string[];
+    };
+    maxFrameBytes?: number;
+    redactValues?: readonly string[];
+}
+export declare function stdioRedactions(options: StdioOptions): string[];
+export declare function frameLimit(limit?: number): number;
+export declare class StdioTransport implements AppServerTransport {
+    readonly process: ChildProcess;
+    readonly ready: Promise<void>;
+    private message;
+    private failure;
+    private readonly maxFrameBytes;
+    private pending;
+    private stderr;
+    private outputEnded;
+    private outputError;
+    private endTimer;
+    private closing;
+    constructor(options: StdioOptions);
+    listen(message: (frame: string) => void, failure: (error: Error) => void): void;
+    write(frame: string): Promise<void>;
+    close(): Promise<void>;
+    private endOutput;
+    private finishOutput;
+    private receive;
+    private deliver;
+}
+export interface WebSocketOptions {
+    url: string;
+    headers?: Record<string, string>;
+    tls?: {
+        ca: Buffer;
+        certificate: Buffer;
+        privateKey: Buffer;
+        servername: string;
+    };
+    socket?: TLSSocket;
+    connectTimeoutMs?: number;
+    maxFrameBytes?: number;
+}
+export declare class WebSocketTransport implements AppServerTransport {
+    readonly ready: Promise<void>;
+    private readonly socket;
+    private message;
+    private failure;
+    private closing;
+    constructor(options: WebSocketOptions);
+    listen(message: (frame: string) => void, failure: (error: Error) => void): void;
+    write(frame: string): Promise<void>;
+    close(): Promise<void>;
+}

package/dist/src/app-server/transports.js

@@ -0,0 +1,228 @@
+import { spawnSync } from "node:child_process";
+import WebSocket from "ws";
+import { closeProcessGroup, spawnProcessGroup } from "./process-group.js";
+export function stdioRedactions(options) {
+    const environment = options.env ?? process.env;
+    return [
+        ...(options.redactValues ?? []),
+        ...["AWS_BEARER_TOKEN_BEDROCK", "OPENAI_API_KEY", "CODEX_ACCESS_TOKEN"].flatMap((name) => environment[name] ? [environment[name]] : []),
+    ];
+}
+const DEFAULT_MAX_FRAME_BYTES = 16 * 1024 * 1024;
+export function frameLimit(limit = DEFAULT_MAX_FRAME_BYTES) {
+    if (!Number.isSafeInteger(limit) || limit < 64 || limit > 64 * 1024 * 1024)
+        throw new Error("App Server frame limit must be between 64 bytes and 64 MiB");
+    return limit;
+}
+export class StdioTransport {
+    process;
+    ready;
+    message = () => { };
+    failure = () => { };
+    maxFrameBytes;
+    pending = Buffer.alloc(0);
+    stderr = "";
+    outputEnded = false;
+    outputError = Promise.withResolvers();
+    endTimer;
+    closing;
+    constructor(options) {
+        this.maxFrameBytes = frameLimit(options.maxFrameBytes);
+        if (options.expectedVersion) {
+            const version = spawnSync(options.binaryPath, ["--version"], {
+                cwd: options.cwd,
+                ...(options.env ? { env: options.env } : {}),
+                encoding: "utf8",
+                timeout: 5000,
+                maxBuffer: 65536,
+            });
+            if (version.status !== 0 || version.stdout.trim() !== `codex-cli ${options.expectedVersion}`)
+                throw new Error("Codex binary does not match the expected official version");
+        }
+        this.process = spawnProcessGroup(options.launch?.command ?? options.binaryPath, options.launch?.args ?? ["app-server", ...(options.args ?? [])], {
+            cwd: options.cwd,
+            ...(options.env ? { env: options.env } : {}),
+            stdio: ["pipe", "pipe", "pipe"],
+        });
+        this.ready = new Promise((resolve, reject) => {
+            this.process.once("spawn", resolve);
+            this.process.once("error", reject);
+        });
+        void this.ready.catch(() => { });
+        this.process.stdout.on("data", (chunk) => this.receive(chunk));
+        this.process.stdout.on("end", () => {
+            if (this.pending.length)
+                this.deliver(this.pending);
+            this.pending = Buffer.alloc(0);
+            this.endOutput("stdout ended");
+        });
+        this.process.stdout.on("error", () => this.endOutput("stdout failed"));
+        this.process.stdin.on("error", () => this.endOutput("stdin failed"));
+        this.process.stderr.setEncoding("utf8");
+        const secrets = stdioRedactions(options);
+        const capacity = 16384 + Math.max(0, ...secrets.map((value) => value.length));
+        this.process.stderr.on("data", (chunk) => {
+            let next = `${this.stderr}${chunk}`;
+            for (const secret of secrets)
+                if (secret)
+                    next = next.replaceAll(secret, "[redacted]");
+            this.stderr = next.slice(-capacity);
+        });
+        this.process.once("error", () => this.failure(new Error("Codex app-server spawn failed")));
+        this.process.once("close", (code, signal) => {
+            this.finishOutput(new Error(`Codex app-server exited (${code ?? signal ?? "unknown"})${this.stderr ? `: ${this.stderr}` : ""}`));
+        });
+    }
+    listen(message, failure) {
+        this.message = message;
+        this.failure = failure;
+    }
+    async write(frame) {
+        await this.ready;
+        if (this.outputEnded)
+            throw await this.outputError.promise;
+        if (!this.process.stdin?.writable) {
+            this.endOutput("stdin is closed");
+            throw await this.outputError.promise;
+        }
+        await new Promise((resolve, reject) => this.process.stdin.write(`${frame}\n`, (error) => {
+            if (!error)
+                return resolve();
+            this.endOutput("stdin failed");
+            void this.outputError.promise.then(reject);
+        }));
+    }
+    close() {
+        clearTimeout(this.endTimer);
+        this.outputError.resolve(new Error("Codex app-server is closed"));
+        this.pending = Buffer.alloc(0);
+        this.closing ??= closeProcessGroup(this.process);
+        return this.closing;
+    }
+    endOutput(reason) {
+        if (this.outputEnded)
+            return;
+        this.outputEnded = true;
+        this.endTimer = setTimeout(() => this.finishOutput(new Error(`Codex app-server ${reason}${this.stderr ? `: ${this.stderr}` : ""}`)), 250);
+        this.endTimer.unref();
+    }
+    finishOutput(error) {
+        clearTimeout(this.endTimer);
+        this.outputError.resolve(error);
+        this.failure(error);
+    }
+    receive(chunk) {
+        if (this.closing)
+            return;
+        this.pending = Buffer.concat([this.pending, chunk]);
+        let newline;
+        while ((newline = this.pending.indexOf(10)) >= 0) {
+            const frame = this.pending.subarray(0, newline);
+            this.pending = this.pending.subarray(newline + 1);
+            this.deliver(frame);
+        }
+        if (this.pending.length > this.maxFrameBytes)
+            this.failure(new Error("Codex app-server frame exceeds the byte limit"));
+    }
+    deliver(frame) {
+        if (frame.length > this.maxFrameBytes)
+            return this.failure(new Error("Codex app-server frame exceeds the byte limit"));
+        try {
+            this.message(new TextDecoder("utf-8", { fatal: true }).decode(frame));
+        }
+        catch {
+            this.failure(new Error("Codex app-server emitted invalid UTF-8"));
+        }
+    }
+}
+export class WebSocketTransport {
+    ready;
+    socket;
+    message = () => { };
+    failure = () => { };
+    closing;
+    constructor(options) {
+        let url;
+        try {
+            url = new URL(options.url);
+        }
+        catch {
+            throw new Error("Invalid App Server WebSocket URL");
+        }
+        const timeout = options.connectTimeoutMs ?? 10000;
+        if (!Number.isSafeInteger(timeout) || timeout < 1 || timeout > 120000)
+            throw new Error("Invalid App Server connection timeout");
+        const loopback = ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+        if (url.username ||
+            url.password ||
+            url.hash ||
+            !["ws:", "wss:"].includes(url.protocol) ||
+            (url.protocol === "ws:" && !loopback))
+            throw new Error("App Server requires WSS remotely or loopback WS without URL credentials");
+        if (options.socket && (url.protocol !== "wss:" || !options.socket.encrypted || !options.socket.authorized))
+            throw new Error("App Server requires a verified TLS socket");
+        this.socket = new WebSocket(url, {
+            headers: options.headers,
+            ...(options.socket ? { createConnection: () => options.socket } : {}),
+            ...(options.tls
+                ? {
+                    ca: options.tls.ca,
+                    cert: options.tls.certificate,
+                    key: options.tls.privateKey,
+                    servername: options.tls.servername,
+                    rejectUnauthorized: true,
+                }
+                : {}),
+            maxPayload: frameLimit(options.maxFrameBytes),
+            handshakeTimeout: timeout,
+            perMessageDeflate: false,
+            followRedirects: false,
+        });
+        this.ready = new Promise((resolve, reject) => {
+            this.socket.once("open", resolve);
+            this.socket.once("error", () => reject(new Error("App Server WebSocket handshake failed")));
+            this.socket.once("close", () => reject(new Error("App Server WebSocket closed before connecting")));
+        });
+        void this.ready.catch(() => { });
+        this.socket.on("error", () => this.failure(new Error("App Server WebSocket failed")));
+        this.socket.on("close", (code) => this.failure(new Error(`App Server WebSocket closed (${code})`)));
+        this.socket.on("message", (data, binary) => {
+            if (binary)
+                return this.failure(new Error("App Server WebSocket emitted a binary frame"));
+            try {
+                this.message(new TextDecoder("utf-8", { fatal: true }).decode(Buffer.from(data)));
+            }
+            catch {
+                this.failure(new Error("App Server WebSocket emitted invalid UTF-8"));
+            }
+        });
+    }
+    listen(message, failure) {
+        this.message = message;
+        this.failure = failure;
+    }
+    async write(frame) {
+        await this.ready;
+        if (this.socket.readyState !== WebSocket.OPEN)
+            throw new Error("App Server WebSocket is closed");
+        await new Promise((resolve, reject) => this.socket.send(frame, (error) => (error ? reject(error) : resolve())));
+    }
+    close() {
+        this.closing ??= new Promise((resolve) => {
+            if (this.socket.readyState === WebSocket.CLOSED)
+                return resolve();
+            const timer = setTimeout(() => this.socket.terminate(), 1000);
+            timer.unref();
+            this.socket.once("close", () => {
+                clearTimeout(timer);
+                resolve();
+            });
+            if (this.socket.readyState === WebSocket.OPEN)
+                this.socket.close();
+            else
+                this.socket.terminate();
+        });
+        return this.closing;
+    }
+}
+//# sourceMappingURL=transports.js.map

package/dist/src/app-server/transports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transports.js","sourceRoot":"","sources":["../../../src/app-server/transports.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,SAAS,MAAM,IAAI,CAAC;AAE3B,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAoB1E,MAAM,UAAU,eAAe,CAAC,OAAqB;IACnD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAC/C,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;QAC/B,GAAG,CAAC,0BAA0B,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACvF,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAC9C;KACF,CAAC;AACJ,CAAC;AAED,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD,MAAM,UAAU,UAAU,CAAC,KAAK,GAAG,uBAAuB;IACxD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;QACxE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,cAAc;IAChB,OAAO,CAAe;IACtB,KAAK,CAAgB;IACtB,OAAO,GAA4B,GAAG,EAAE,GAAE,CAAC,CAAC;IAC5C,OAAO,GAA2B,GAAG,EAAE,GAAE,CAAC,CAAC;IAClC,aAAa,CAAS;IAC/B,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,GAAG,EAAE,CAAC;IACZ,WAAW,GAAG,KAAK,CAAC;IACpB,WAAW,GAAG,OAAO,CAAC,aAAa,EAAS,CAAC;IAC7C,QAAQ,CAA4C;IACpD,OAAO,CAA4B;IAE3C,YAAY,OAAqB;QAC/B,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE;gBAC3D,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,aAAa,OAAO,CAAC,eAAe,EAAE;gBAC1F,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,iBAAiB,CAC9B,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,UAAU,EAC7C,OAAO,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAC/D;YACE,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CACF,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,MAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAClC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,MAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,KAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,CAAC,MAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAChD,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;YACpC,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,IAAI,MAAM;oBAAE,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACvF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC;QAC3F,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,YAAY,CACf,IAAI,KAAK,CAAC,4BAA4B,IAAI,IAAI,MAAM,IAAI,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAC9G,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,OAAgC,EAAE,OAA+B;QACtE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa;QACvB,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,IAAI,IAAI,CAAC,WAAW;YAAE,MAAM,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAClC,MAAM,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAC1C,IAAI,CAAC,OAAO,CAAC,KAAM,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;YAChD,IAAI,CAAC,KAAK;gBAAE,OAAO,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAC/B,KAAK,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK;QACH,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,KAAK,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAEO,SAAS,CAAC,MAAc;QAC9B,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,UAAU,CACxB,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,oBAAoB,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EACxG,GAAG,CACJ,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAEO,YAAY,CAAC,KAAY;QAC/B,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAEO,OAAO,CAAC,KAAa;QAC3B,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QACpD,IAAI,OAAe,CAAC;QACpB,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa;YAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC;IAC7E,CAAC;IAEO,OAAO,CAAC,KAAa;QAC3B,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa;YACnC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;CACF;AAWD,MAAM,OAAO,kBAAkB;IACpB,KAAK,CAAgB;IACb,MAAM,CAAY;IAC3B,OAAO,GAA4B,GAAG,EAAE,GAAE,CAAC,CAAC;IAC5C,OAAO,GAA2B,GAAG,EAAE,GAAE,CAAC,CAAC;IAC3C,OAAO,CAA4B;IAE3C,YAAY,OAAyB;QACnC,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,IAAI,KAAK,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,MAAM;YACnE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5E,IACE,GAAG,CAAC,QAAQ;YACZ,GAAG,CAAC,QAAQ;YACZ,GAAG,CAAC,IAAI;YACR,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YACvC,CAAC,GAAG,CAAC,QAAQ,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC;YAErC,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;YACxG,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,EAAE;YAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,OAAO,CAAC,GAAG;gBACb,CAAC,CAAC;oBACE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE;oBAClB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;oBAC7B,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;oBAC3B,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;oBAClC,kBAAkB,EAAE,IAAI;iBACzB;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,aAAa,CAAC;YAC7C,gBAAgB,EAAE,OAAO;YACzB,iBAAiB,EAAE,KAAK;YACxB,eAAe,EAAE,KAAK;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC,CAAC;YAC5F,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC,CAAC;QACtG,CAAC,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,gCAAgC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACpG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACzC,IAAI,MAAM;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC;YAC1F,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,CAAC,CAAC;YAC9F,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,OAAgC,EAAE,OAA+B;QACtE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa;QACvB,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACjG,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CACxE,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,KAAK,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC7C,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,MAAM;gBAAE,OAAO,OAAO,EAAE,CAAC;YAClE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9D,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;gBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;;gBAC9D,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF"}

package/dist/src/app-server/worker-checkpoint.d.ts

@@ -0,0 +1,15 @@
+export declare const WORKER_CODEX_VERSION = "0.166.0";
+export declare const WORKER_CODEX_NATIVE_FORMAT = "qm-worker-codex.v1";
+export declare const WORKER_CODEX_STATE = ".aq-codex";
+export declare const WORKER_CODEX_FEATURES: readonly ["codexAppServerV1", "codexNativeV1"];
+export declare function codexWorkspaceRootFeature(root: string, platform?: string): string;
+export declare const CODEX_RESUMES_OLDER_FEATURE = "codexResumesOlderV1";
+export declare function codexVersionFeature(version: string): string;
+export declare function codexResumes(running: string, recorded: string): boolean;
+export declare function codexCheckpointBinding(archive: string): Record<string, unknown> | null;
+export type CodexCheckpointRequirement = {
+    codexVersion: string;
+    workspaceRootFeature: string;
+};
+export declare function codexCheckpointRequirement(archive: string): CodexCheckpointRequirement | null;
+export declare function featuresResumeCheckpoint(features: readonly string[] | undefined, requirement: CodexCheckpointRequirement): boolean;

package/dist/src/app-server/worker-checkpoint.js

@@ -0,0 +1,76 @@
+import { decodeCheckpoint } from "./checkpoint-codec.js";
+import { createHash } from "node:crypto";
+import { resolve } from "node:path";
+export const WORKER_CODEX_VERSION = "0.166.0";
+export const WORKER_CODEX_NATIVE_FORMAT = "qm-worker-codex.v1";
+export const WORKER_CODEX_STATE = ".aq-codex";
+export const WORKER_CODEX_FEATURES = ["codexAppServerV1", "codexNativeV1"];
+export function codexWorkspaceRootFeature(root, platform = process.platform) {
+    return `codexRoot:${createHash("sha256")
+        .update(JSON.stringify([platform, resolve(root)]))
+        .digest("hex")}`;
+}
+const CODEX_VERSION_FEATURE = "codexVersion:";
+export const CODEX_RESUMES_OLDER_FEATURE = "codexResumesOlderV1";
+const CODEX_RELEASE = /^(0|[1-9]\d{0,8})\.(0|[1-9]\d{0,8})\.(0|[1-9]\d{0,8})$/;
+export function codexVersionFeature(version) {
+    return `${CODEX_VERSION_FEATURE}${version}`;
+}
+export function codexResumes(running, recorded) {
+    if (running === recorded)
+        return true;
+    const current = CODEX_RELEASE.exec(running);
+    const previous = CODEX_RELEASE.exec(recorded);
+    if (!current || !previous)
+        return false;
+    for (let part = 1; part <= 3; part++) {
+        const difference = Number(current[part]) - Number(previous[part]);
+        if (difference)
+            return difference > 0;
+    }
+    return false;
+}
+export function codexCheckpointBinding(archive) {
+    const entries = decodeCheckpoint(archive);
+    const bindings = entries.filter((entry) => entry?.path === `${WORKER_CODEX_STATE}/qm-thread.json`);
+    if (!bindings.length)
+        return null;
+    const entry = bindings[0];
+    if (!entry ||
+        bindings.length !== 1 ||
+        entry.type !== "file" ||
+        typeof entry.data !== "string" ||
+        entry.data.length > 32768)
+        throw new Error("Native worker checkpoint binding is invalid");
+    const binding = JSON.parse(Buffer.from(entry.data, "base64").toString("utf8"));
+    if (binding.format !== WORKER_CODEX_NATIVE_FORMAT ||
+        typeof binding.codexVersion !== "string" ||
+        !/^[0-9A-Za-z.+-]{1,64}$/.test(binding.codexVersion) ||
+        typeof binding.nativeHome !== "string" ||
+        !["linux", "darwin"].includes(String(binding.platform)) ||
+        binding.workspaceRootFeature !==
+            codexWorkspaceRootFeature(resolve(binding.nativeHome, "../.."), String(binding.platform)))
+        throw new Error("Native worker checkpoint format is unsupported");
+    return binding;
+}
+export function codexCheckpointRequirement(archive) {
+    const binding = codexCheckpointBinding(archive);
+    if (!binding)
+        return null;
+    return {
+        codexVersion: binding.codexVersion,
+        workspaceRootFeature: binding.workspaceRootFeature,
+    };
+}
+export function featuresResumeCheckpoint(features, requirement) {
+    if (!features?.includes(requirement.workspaceRootFeature))
+        return false;
+    const resumesOlder = features.includes(CODEX_RESUMES_OLDER_FEATURE);
+    return features.some((feature) => {
+        if (!feature.startsWith(CODEX_VERSION_FEATURE))
+            return false;
+        const version = feature.slice(CODEX_VERSION_FEATURE.length);
+        return resumesOlder ? codexResumes(version, requirement.codexVersion) : version === requirement.codexVersion;
+    });
+}
+//# sourceMappingURL=worker-checkpoint.js.map

package/dist/src/app-server/worker-checkpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-checkpoint.js","sourceRoot":"","sources":["../../../src/app-server/worker-checkpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAC9C,MAAM,CAAC,MAAM,0BAA0B,GAAG,oBAAoB,CAAC;AAC/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAAC;AAC9C,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,kBAAkB,EAAE,eAAe,CAAU,CAAC;AAEpF,MAAM,UAAU,yBAAyB,CAAC,IAAY,EAAE,WAAmB,OAAO,CAAC,QAAQ;IACzF,OAAO,aAAa,UAAU,CAAC,QAAQ,CAAC;SACrC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SACjD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAC9C,MAAM,CAAC,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AACjE,MAAM,aAAa,GAAG,wDAAwD,CAAC;AAE/E,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,OAAO,GAAG,qBAAqB,GAAG,OAAO,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,QAAgB;IAC5D,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,IAAI,UAAU;YAAE,OAAO,UAAU,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAC7B,CAAC,KAAK,EAAE,EAAE,CAAE,KAAmC,EAAE,IAAI,KAAK,GAAG,kBAAkB,iBAAiB,CAC/D,CAAC;IACpC,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1B,IACE,CAAC,KAAK;QACN,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,KAAK,CAAC,IAAI,KAAK,MAAM;QACrB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK;QAEzB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAC;IAC1G,IACE,OAAO,CAAC,MAAM,KAAK,0BAA0B;QAC7C,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ;QACxC,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QACpD,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ;QACtC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvD,OAAO,CAAC,oBAAoB;YAC1B,yBAAyB,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE3F,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,OAAO,OAAO,CAAC;AACjB,CAAC;AAID,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,YAAsB;QAC5C,oBAAoB,EAAE,OAAO,CAAC,oBAA8B;KAC7D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,QAAuC,EACvC,WAAuC;IAEvC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,oBAAoB,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC;IACpE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAC/B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC5D,OAAO,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,YAAY,CAAC;IAC/G,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/broker.d.ts

@@ -0,0 +1,4 @@
+import { AgentQueueClient } from "./client.ts";
+import type { ActiveAssignment } from "./types.ts";
+export declare function brokerOperation(provider: string, raw: string, active: ActiveAssignment, client: AgentQueueClient): Promise<unknown>;
+export declare function broker(provider: string, raw: string): Promise<void>;

package/dist/src/broker.js

@@ -0,0 +1,104 @@
+import { createHash } from "node:crypto";
+import { request as httpRequest } from "node:http";
+import { AgentQueueClient } from "./client.js";
+function canonical(value) {
+    if (Array.isArray(value))
+        return value.map(canonical);
+    if (!value || typeof value !== "object")
+        return value;
+    return Object.fromEntries(Object.entries(value)
+        .sort(([a], [b]) => a.localeCompare(b))
+        .map(([key, entry]) => [key, canonical(entry)]));
+}
+function operationHash(provider, operation) {
+    return createHash("sha256")
+        .update(provider)
+        .update("\0")
+        .update(JSON.stringify(canonical(operation)))
+        .digest("hex");
+}
+export async function brokerOperation(provider, raw, active, client) {
+    if (!["agentqueue", "linear", "github", "git", "publication"].includes(provider))
+        throw new Error("broker provider must be agentqueue, linear, github, git, or publication");
+    const body = JSON.parse(raw);
+    if (!body || typeof body !== "object" || Array.isArray(body))
+        throw new Error("broker operation must be an object");
+    if (provider === "agentqueue") {
+        const capability = active.capabilities.find((entry) => entry.audience === "worker-control-plane-broker" &&
+            entry.toolIds.includes("agentqueue.control_plane") &&
+            entry.actionIds.includes("invoke"));
+        if (!capability)
+            throw new Error("this assignment has no Agent Queue control-plane capability");
+        const response = await client.request("POST", "/v1/self-hosted-workers/brokers/agentqueue", body, { "x-aq-capability": capability.token });
+        return response.value?.value ?? null;
+    }
+    let brokerName = provider;
+    if (provider === "github")
+        brokerName = "github-api";
+    else if (provider === "git")
+        brokerName = "git-http";
+    const audience = `worker-${brokerName}-broker`;
+    const action = "action" in body && typeof body.action === "string" ? body.action : "";
+    if (provider === "git" && !active.repository)
+        throw new Error("this assignment has no repository");
+    const boundedBody = provider === "git" ? { action, branch: active.repository.branch } : body;
+    const hash = operationHash(provider, boundedBody);
+    const capability = active.capabilities.find((entry) => entry.audience === audience &&
+        entry.actionIds.includes(action) &&
+        (!entry.approvalId || entry.operationHash === hash));
+    if (!capability) {
+        const requested = await client.request("POST", `/v1/self-hosted-workers/runs/${encodeURIComponent(active.runId)}/approvals`, {
+            leaseToken: active.leaseToken,
+            provider,
+            operation: boundedBody,
+            summary: `${provider} ${action || "operation"}`,
+        });
+        throw new Error(`Agent Queue approval ${requested.value?.approval.id ?? "requested"} is ${requested.value?.approval.status ?? "pending"}; retry this operation after approval`);
+    }
+    if (provider === "git") {
+        return { approved: true, action, branch: active.repository.branch };
+    }
+    const response = await client.request("POST", `/v1/self-hosted-workers/brokers/${provider}`, body, { "x-aq-capability": capability.token });
+    return response.value?.value ?? null;
+}
+async function supervisorRequest(provider, raw) {
+    const socketPath = process.env.AQ_SUPERVISOR_SOCKET;
+    const secret = process.env.AQ_SUPERVISOR_SECRET;
+    if (!socketPath || !secret)
+        throw new Error("broker commands are available only inside an active workflow");
+    return await new Promise((resolve, reject) => {
+        const request = httpRequest({
+            socketPath,
+            path: "/broker",
+            method: "POST",
+            headers: {
+                authorization: `Bearer ${secret}`,
+                "content-type": "application/json",
+            },
+        }, (response) => {
+            let value = "";
+            response.setEncoding("utf8");
+            response.on("data", (chunk) => (value += chunk));
+            response.on("end", () => {
+                let parsed;
+                try {
+                    parsed = JSON.parse(value);
+                }
+                catch {
+                    return reject(new Error("invalid response from worker supervisor"));
+                }
+                if ((response.statusCode ?? 500) >= 400)
+                    reject(new Error(parsed.error ?? "broker request failed"));
+                else
+                    resolve(parsed.value);
+            });
+        });
+        request.once("error", reject);
+        request.end(JSON.stringify({ provider, raw }));
+    });
+}
+export async function broker(provider, raw) {
+    const value = await supervisorRequest(provider, raw);
+    process.stdout.write(`${JSON.stringify(value, null, 2)}\n`);
+}
+//# sourceMappingURL=broker.js.map