@alneas/eaos-server 0.0.0-stage → 0.2.0

package/dist/chunk-3NLSWP2Y.js

@@ -0,0 +1,223 @@
+import {
+  assertPrincipal,
+  atomicHash
+} from "./chunk-INCHXAFK.js";
+
+// src/agentic/atomic-checkpointer.ts
+import { BaseCheckpointSaver } from "@langchain/langgraph";
+var specialWrites = { __error__: -1, __scheduled__: -2, __interrupt__: -3, __resume__: -4 };
+function identifier(value, empty = false) {
+  if (typeof value !== "string" || !empty && !value || value.length > 512 || [...value].some((c) => c.charCodeAt(0) < 32 || c.charCodeAt(0) === 127)) throw Error("Invalid checkpoint identifier");
+  return value;
+}
+var AtomicCheckpointSaver = class extends BaseCheckpointSaver {
+  /**
+   * Captures a verified plugin principal and required current-admission callback.
+   * @param options - Scoped repository; principal is validated/cloned; verifyCurrent must reject on revoked admission; prefix defaults to graph-checkpoint and must contain 1–64 lowercase letters/digits/underscore/hyphen.
+   * @throws Invalid principal, absent repository/verifier, invalid prefix, or clone failure.
+   */
+  constructor(options) {
+    super();
+    this.options = options;
+    assertPrincipal(options.principal);
+    this.principal = structuredClone(options.principal);
+    if (!options.repository || typeof options.verifyCurrent !== "function" || !/^[a-z0-9_-]{1,64}$/.test(options.prefix ?? "graph-checkpoint")) throw Error("Scoped checkpoint repository and current verifier required");
+  }
+  options;
+  principal;
+  pending = Promise.resolve();
+  scope(config) {
+    const threadId = identifier(config.configurable?.thread_id), namespace = identifier(config.configurable?.checkpoint_ns ?? "", true);
+    const checkpointId = config.configurable?.checkpoint_id === void 0 ? void 0 : identifier(config.configurable.checkpoint_id);
+    const prefix = `${this.options.prefix ?? "graph-checkpoint"}/${atomicHash([threadId, namespace])}/`;
+    return { threadId, namespace, checkpointId, prefix };
+  }
+  config(s, id) {
+    return { configurable: { thread_id: s.threadId, checkpoint_ns: s.namespace, checkpoint_id: id } };
+  }
+  async encode(value) {
+    const [kind, bytes] = await this.serde.dumpsTyped(value);
+    return [kind, Buffer.from(bytes).toString("base64")];
+  }
+  async decode(value) {
+    return this.serde.loadsTyped(value[0], Buffer.from(value[1], "base64"));
+  }
+  async run(work) {
+    const result = this.pending.then(async () => {
+      await this.options.verifyCurrent();
+      return this.options.repository.run(this.principal, async (tx) => {
+        await this.options.verifyCurrent();
+        const result2 = await work(tx);
+        await this.options.verifyCurrent();
+        return result2;
+      });
+    });
+    this.pending = result.then(() => void 0, () => void 0);
+    return result;
+  }
+  async tuple(v, s) {
+    if (v.tenantId !== this.principal.tenantId || v.threadId !== s.threadId || v.namespace !== s.namespace) throw Error("Checkpoint identity differs");
+    const checkpoint = await this.decode(v.checkpoint);
+    if (checkpoint.id !== v.checkpointId || checkpoint.v !== 4) throw Error("Checkpoint format or identity differs");
+    return {
+      config: this.config(s, v.checkpointId),
+      checkpoint,
+      metadata: await this.decode(v.metadata),
+      ...v.parentId ? { parentConfig: this.config(s, v.parentId) } : {},
+      pendingWrites: await Promise.all(v.writes.map(async (w) => [w.taskId, w.channel, await this.decode(w.value)]))
+    };
+  }
+  /**
+   * Reads one scoped checkpoint and its separately stored pending writes.
+   * @param config - LangGraph config with required thread_id, optional checkpoint_ns (default empty), and optional checkpoint_id (default latest lexicographic ID). Identifiers are bounded to 512 characters without control characters.
+   * @returns Decoded checkpoint tuple or undefined if no selected checkpoint exists.
+   * @throws Rejects invalid identifiers, tenant/thread/namespace or format mismatch, and admission/repository/serialization failures.
+   * @example
+   * ```typescript
+   * import { AtomicCheckpointSaver } from "@alneas/eaos-server/agentic/atomic-checkpointer";
+   * export async function read(saver: AtomicCheckpointSaver, config: Parameters<AtomicCheckpointSaver["getTuple"]>[0]) { return saver.getTuple(config); }
+   * ```
+   */
+  async getTuple(config) {
+    const s = this.scope(config);
+    return this.run(async (tx) => {
+      const id = s.checkpointId ?? (await tx.get(s.prefix + "latest"))?.value.id;
+      if (!id) return void 0;
+      const row = await tx.get(s.prefix + "item-" + id);
+      if (!row) return void 0;
+      const writes = await tx.get(s.prefix + "writes-" + id);
+      if (writes && (writes.value.tenantId !== this.principal.tenantId || writes.value.threadId !== s.threadId || writes.value.namespace !== s.namespace || writes.value.checkpointId !== id)) throw Error("Pending write identity differs");
+      return this.tuple({ ...row.value, writes: writes?.value.writes ?? [] }, s);
+    });
+  }
+  /**
+   * Lists scoped checkpoint history in descending lexicographic checkpoint-ID order.
+   * @param config - Required thread scope, optional namespace, and optional exact checkpoint ID filter.
+   * @param options - limit defaults to 100 and must be a safe integer 1–2000; before must use the same thread/namespace and excludes its ID and newer IDs; filter compares metadata fields by atomic hash.
+   * @returns Async sequence of decoded tuples, possibly empty, with admission rechecked before each yield.
+   * @throws Iteration rejects invalid scope/limits, more than 2000 scanned checkpoint rows, identity/format mismatch, or admission/repository/serialization errors.
+   * @remarks History is collected in a bounded repository transaction before yielding; changing authorization can still stop later yields.
+   * @example
+   * ```typescript
+   * import { AtomicCheckpointSaver } from "@alneas/eaos-server/agentic/atomic-checkpointer";
+   * export async function history(saver: AtomicCheckpointSaver, config: Parameters<AtomicCheckpointSaver["list"]>[0]) {
+   *   const tuples = [];
+   *   for await (const tuple of saver.list(config, { limit: 10 })) tuples.push(tuple);
+   *   return tuples;
+   * }
+   * ```
+   */
+  async *list(config, options = {}) {
+    const s = this.scope(config), limit = options?.limit ?? 100, before = options?.before ? this.scope(options.before) : void 0;
+    if (!Number.isSafeInteger(limit) || limit < 1 || limit > 2e3 || before && (before.threadId !== s.threadId || before.namespace !== s.namespace)) throw Error("Invalid scoped checkpoint history request");
+    const values = await this.run(async (tx) => {
+      const rows = [];
+      let after = "";
+      while (true) {
+        const page = await tx.list(s.prefix + "item-", after, 100);
+        rows.push(...page.map((r) => r.value));
+        if (rows.length > 2e3) throw Error("Checkpoint history exceeds bounded capacity");
+        if (page.length < 100) break;
+        after = page.at(-1).id;
+      }
+      const out = [];
+      for (const value of rows.sort((a, b) => b.checkpointId.localeCompare(a.checkpointId))) {
+        if (s.checkpointId && value.checkpointId !== s.checkpointId || before?.checkpointId && value.checkpointId >= before.checkpointId) continue;
+        const writes = await tx.get(s.prefix + "writes-" + value.checkpointId);
+        if (writes && (writes.value.tenantId !== this.principal.tenantId || writes.value.threadId !== s.threadId || writes.value.namespace !== s.namespace || writes.value.checkpointId !== value.checkpointId)) throw Error("Pending write identity differs");
+        const tuple = await this.tuple({ ...value, writes: writes?.value.writes ?? [] }, s);
+        if (options?.filter && Object.entries(options.filter).some(([k, v]) => atomicHash(tuple.metadata?.[k] ?? null) !== atomicHash(v ?? null))) continue;
+        out.push(tuple);
+        if (out.length === limit) break;
+      }
+      return out;
+    });
+    for (const value of values) {
+      await this.options.verifyCurrent();
+      yield value;
+    }
+  }
+  /**
+   * Writes an immutable version-4 checkpoint and advances the scoped latest pointer when its ID sorts later.
+   * @param config - Thread/namespace scope; optional checkpoint_id becomes the new checkpoint's parent ID.
+   * @param checkpoint - Current LangGraph version-4 checkpoint with valid nonempty bounded ID.
+   * @param metadata - Serializer-supported checkpoint metadata.
+   * @returns A config selecting the stored checkpoint ID.
+   * @throws Rejects unsupported format, ID reuse with different content, admission/CAS/repository errors, or serialization failures.
+   * @remarks Repeating identical content is accepted; latest ordering is lexicographic, so host checkpoint IDs must reflect desired chronology.
+   * @example
+   * ```typescript
+   * import { AtomicCheckpointSaver } from "@alneas/eaos-server/agentic/atomic-checkpointer";
+   * export async function write(saver: AtomicCheckpointSaver, ...args: Parameters<AtomicCheckpointSaver["put"]>) { return saver.put(...args); }
+   * ```
+   */
+  async put(config, checkpoint, metadata) {
+    const s = this.scope(config), id = identifier(checkpoint.id);
+    if (checkpoint.v !== 4) throw Error("Only the current LangGraph checkpoint format is supported");
+    const checkpointBytes = await this.encode(checkpoint), metadataBytes = await this.encode(metadata);
+    await this.run(async (tx) => {
+      const key = s.prefix + "item-" + id, existing = await tx.get(key);
+      const value = { tenantId: this.principal.tenantId, threadId: s.threadId, namespace: s.namespace, checkpointId: id, checkpoint: checkpointBytes, metadata: metadataBytes, ...s.checkpointId ? { parentId: s.checkpointId } : {}, writes: existing?.value.writes ?? [] };
+      if (existing && atomicHash({ ...existing.value, writes: [] }) !== atomicHash({ ...value, writes: [] })) throw Error("Checkpoint ID reused with different content");
+      if (!existing) await tx.put(key, value, 0);
+      const latest = await tx.get(s.prefix + "latest");
+      if (!latest || id > latest.value.id) await tx.put(s.prefix + "latest", { id }, latest?.revision ?? 0);
+    });
+    return this.config(s, id);
+  }
+  /**
+   * Merges pending channel writes by task/index for one scoped checkpoint.
+   * @param config - Thread/namespace with required checkpoint_id.
+   * @param writes - At most 256 channel/value pairs; channels are valid bounded identifiers. Ordinary task/index duplicates retain their first value; reserved negative-index channels replace prior values.
+   * @param taskId - Nonempty bounded task identifier associating writes.
+   * @returns No value; resolves after the merged writes are durably stored.
+   * @throws Rejects missing checkpoint ID, invalid task/channel, identity mismatch, more than 2000 stored pending writes, or admission/repository/serialization errors.
+   * @example
+   * ```typescript
+   * import { AtomicCheckpointSaver } from "@alneas/eaos-server/agentic/atomic-checkpointer";
+   * export async function writePending(saver: AtomicCheckpointSaver, ...args: Parameters<AtomicCheckpointSaver["putWrites"]>) { await saver.putWrites(...args); }
+   * ```
+   */
+  async putWrites(config, writes, taskId) {
+    const s = this.scope(config);
+    identifier(taskId);
+    if (!s.checkpointId || !Array.isArray(writes) || writes.length > 256) throw Error("Checkpoint and bounded writes required");
+    const prepared = await Promise.all(writes.map(async ([channel, value], index) => ({ taskId, index: Object.hasOwn(specialWrites, channel) ? specialWrites[channel] : index, channel: identifier(channel), value: await this.encode(value) })));
+    await this.run(async (tx) => {
+      const key = s.prefix + "writes-" + s.checkpointId, row = await tx.get(key);
+      if (row && (row.value.tenantId !== this.principal.tenantId || row.value.threadId !== s.threadId || row.value.namespace !== s.namespace || row.value.checkpointId !== s.checkpointId)) throw Error("Pending write identity differs");
+      const value = row ? structuredClone(row.value) : { tenantId: this.principal.tenantId, threadId: s.threadId, namespace: s.namespace, checkpointId: s.checkpointId, writes: [] };
+      for (const write of prepared) {
+        const index = value.writes.findIndex((w) => w.taskId === taskId && w.index === write.index);
+        if (index < 0) value.writes.push(write);
+        else if (write.index < 0) value.writes[index] = write;
+      }
+      if (value.writes.length > 2e3) throw Error("Checkpoint pending writes exceed bounded capacity");
+      await tx.put(key, value, row?.revision ?? 0);
+    });
+  }
+  /**
+   * Rejects thread deletion because this repository contract provides no approved erasure operation.
+   * @param _threadId - Requested thread ID; not read or deleted.
+   * @returns No value; this operation always rejects before performing storage work.
+   * @throws Always rejects with an error directing the caller to the host retention executor.
+   * @example
+   * ```typescript
+   * import { AtomicCheckpointSaver } from "@alneas/eaos-server/agentic/atomic-checkpointer";
+   * export async function erase(saver: AtomicCheckpointSaver, threadId: string) {
+   *   try { await saver.deleteThread(threadId); } catch (error) {
+   *     // Host retention tooling must perform reviewed erasure.
+   *     throw error;
+   *   }
+   * }
+   * ```
+   */
+  async deleteThread(_threadId) {
+    throw Error("Checkpoint erasure requires the host retention executor; this repository exposes no delete contract");
+  }
+};
+
+export {
+  AtomicCheckpointSaver
+};
+//# sourceMappingURL=chunk-3NLSWP2Y.js.map

package/dist/chunk-3NLSWP2Y.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/agentic/atomic-checkpointer.ts"],"sourcesContent":["import { BaseCheckpointSaver, type Checkpoint, type CheckpointMetadata, type CheckpointTuple } from '@langchain/langgraph'\nimport { atomicHash, type AtomicRepository, type AtomicSession } from '../plugin-data/atomic'\nimport { assertPrincipal, type PluginPrincipal } from '../plugin-data/index'\n\ntype Config = Parameters<BaseCheckpointSaver['getTuple']>[0]\ntype ListOptions = Parameters<BaseCheckpointSaver['list']>[1]\ntype Writes = Parameters<BaseCheckpointSaver['putWrites']>[1]\ntype Encoded = [string, string]\ninterface StoredCheckpoint {\n  tenantId: string; threadId: string; namespace: string; checkpointId: string\n  checkpoint: Encoded; metadata: Encoded; parentId?: string\n  writes: Array<{ taskId: string; index: number; channel: string; value: Encoded }>\n}\nconst specialWrites: Record<string, number> = { __error__: -1, __scheduled__: -2, __interrupt__: -3, __resume__: -4 }\nfunction identifier(value: unknown, empty = false): string {\n  if (typeof value !== 'string' || (!empty && !value) || value.length > 512 || [...value].some(c => c.charCodeAt(0) < 32 || c.charCodeAt(0) === 127)) throw Error('Invalid checkpoint identifier')\n  return value\n}\n\n/**\n * Stores LangGraph checkpoints and pending writes in an existing scoped atomic repository.\n * @remarks Admission and workflow writer serialization remain host-owned. Each saver instance serializes repository work through an internal Promise chain and calls verifyCurrent before the transaction and before/after its work. This does not serialize other saver instances or whole graph invocations. The repository owns durability/CAS; this saver installs no timers and does not close host storage. Checkpoint erasure requires a separate host retention executor.\n * @example\n * ```typescript\n * import { AtomicCheckpointSaver } from \"@alneas/eaos-server/agentic/atomic-checkpointer\";\n * export function saver(options: ConstructorParameters<typeof AtomicCheckpointSaver>[0]) {\n *   return new AtomicCheckpointSaver(options);\n * }\n * ```\n */\nexport class AtomicCheckpointSaver extends BaseCheckpointSaver {\n  private readonly principal: PluginPrincipal\n  private pending: Promise<void> = Promise.resolve()\n  /**\n   * Captures a verified plugin principal and required current-admission callback.\n   * @param options - Scoped repository; principal is validated/cloned; verifyCurrent must reject on revoked admission; prefix defaults to graph-checkpoint and must contain 1–64 lowercase letters/digits/underscore/hyphen.\n   * @throws Invalid principal, absent repository/verifier, invalid prefix, or clone failure.\n   */\n  constructor(private readonly options: { \n  /**\n   * Connected host atomic repository used for scoped checkpoint and pending-write transactions; this saver does not close it.\n   */\n  repository: AtomicRepository; \n  /**\n   * Verified plugin principal validated and cloned at construction; fixes the tenant/plugin/user scope used for repository transactions.\n   */\n  principal: PluginPrincipal; \n  /**\n   * Recheck current host admission before repository work and at transaction boundaries.\n   * @returns No value; resolve only while the captured principal remains admitted and reject when admission is revoked.\n   * @remarks Required callback; called before the repository transaction and before/after its work, and before each history yield. The host owns the live policy lookup.\n   * @see {@link AtomicCheckpointSaver}\n   */\n  verifyCurrent: () => Promise<void>; \n  /**\n   * Optional repository key prefix; defaults to graph-checkpoint and must contain 1–64 lowercase letters, digits, underscores or hyphens.\n   */\n  prefix?: string }) {\n    super(); assertPrincipal(options.principal); this.principal = structuredClone(options.principal)\n    if (!options.repository || typeof options.verifyCurrent !== 'function' || !/^[a-z0-9_-]{1,64}$/.test(options.prefix ?? 'graph-checkpoint')) throw Error('Scoped checkpoint repository and current verifier required')\n  }\n  private scope(config: Config) {\n    const threadId = identifier(config.configurable?.thread_id), namespace = identifier(config.configurable?.checkpoint_ns ?? '', true)\n    const checkpointId = config.configurable?.checkpoint_id === undefined ? undefined : identifier(config.configurable.checkpoint_id)\n    const prefix = `${this.options.prefix ?? 'graph-checkpoint'}/${atomicHash([threadId, namespace])}/`\n    return { threadId, namespace, checkpointId, prefix }\n  }\n  private config(s: ReturnType<AtomicCheckpointSaver['scope']>, id: string): Config { return { configurable: { thread_id: s.threadId, checkpoint_ns: s.namespace, checkpoint_id: id } } }\n  private async encode(value: unknown): Promise<Encoded> { const [kind, bytes] = await this.serde.dumpsTyped(value); return [kind, Buffer.from(bytes).toString('base64')] }\n  private async decode(value: Encoded) { return this.serde.loadsTyped(value[0], Buffer.from(value[1], 'base64')) }\n  private async run<T>(work: (tx: AtomicSession) => Promise<T>): Promise<T> {\n    const result = this.pending.then(async () => {\n      await this.options.verifyCurrent()\n      return this.options.repository.run(this.principal, async tx => { await this.options.verifyCurrent(); const result = await work(tx); await this.options.verifyCurrent(); return result })\n    })\n    this.pending = result.then(() => undefined, () => undefined)\n    return result\n  }\n  private async tuple(v: StoredCheckpoint, s: ReturnType<AtomicCheckpointSaver['scope']>): Promise<CheckpointTuple> {\n    if (v.tenantId !== this.principal.tenantId || v.threadId !== s.threadId || v.namespace !== s.namespace) throw Error('Checkpoint identity differs')\n    const checkpoint = await this.decode(v.checkpoint) as Checkpoint\n    if (checkpoint.id !== v.checkpointId || checkpoint.v !== 4) throw Error('Checkpoint format or identity differs')\n    return { config: this.config(s, v.checkpointId), checkpoint, metadata: await this.decode(v.metadata) as CheckpointMetadata,\n      ...(v.parentId ? { parentConfig: this.config(s, v.parentId) } : {}),\n      pendingWrites: await Promise.all(v.writes.map(async w => [w.taskId, w.channel, await this.decode(w.value)] as [string, string, unknown])) }\n  }\n  /**\n   * Reads one scoped checkpoint and its separately stored pending writes.\n   * @param config - LangGraph config with required thread_id, optional checkpoint_ns (default empty), and optional checkpoint_id (default latest lexicographic ID). Identifiers are bounded to 512 characters without control characters.\n   * @returns Decoded checkpoint tuple or undefined if no selected checkpoint exists.\n   * @throws Rejects invalid identifiers, tenant/thread/namespace or format mismatch, and admission/repository/serialization failures.\n   * @example\n   * ```typescript\n   * import { AtomicCheckpointSaver } from \"@alneas/eaos-server/agentic/atomic-checkpointer\";\n   * export async function read(saver: AtomicCheckpointSaver, config: Parameters<AtomicCheckpointSaver[\"getTuple\"]>[0]) { return saver.getTuple(config); }\n   * ```\n   */\n  async getTuple(config: Config): Promise<CheckpointTuple | undefined> {\n    const s = this.scope(config)\n    return this.run(async tx => {\n      const id = s.checkpointId ?? (await tx.get<{ id: string }>(s.prefix + 'latest'))?.value.id\n      if (!id) return undefined\n      const row = await tx.get<StoredCheckpoint>(s.prefix + 'item-' + id)\n      if (!row) return undefined\n      const writes = await tx.get<Pick<StoredCheckpoint, 'tenantId' | 'threadId' | 'namespace' | 'checkpointId' | 'writes'>>(s.prefix + 'writes-' + id)\n      if (writes && (writes.value.tenantId !== this.principal.tenantId || writes.value.threadId !== s.threadId || writes.value.namespace !== s.namespace || writes.value.checkpointId !== id)) throw Error('Pending write identity differs')\n      return this.tuple({ ...row.value, writes: writes?.value.writes ?? [] }, s)\n    })\n  }\n  /**\n   * Lists scoped checkpoint history in descending lexicographic checkpoint-ID order.\n   * @param config - Required thread scope, optional namespace, and optional exact checkpoint ID filter.\n   * @param options - limit defaults to 100 and must be a safe integer 1–2000; before must use the same thread/namespace and excludes its ID and newer IDs; filter compares metadata fields by atomic hash.\n   * @returns Async sequence of decoded tuples, possibly empty, with admission rechecked before each yield.\n   * @throws Iteration rejects invalid scope/limits, more than 2000 scanned checkpoint rows, identity/format mismatch, or admission/repository/serialization errors.\n   * @remarks History is collected in a bounded repository transaction before yielding; changing authorization can still stop later yields.\n   * @example\n   * ```typescript\n   * import { AtomicCheckpointSaver } from \"@alneas/eaos-server/agentic/atomic-checkpointer\";\n   * export async function history(saver: AtomicCheckpointSaver, config: Parameters<AtomicCheckpointSaver[\"list\"]>[0]) {\n   *   const tuples = [];\n   *   for await (const tuple of saver.list(config, { limit: 10 })) tuples.push(tuple);\n   *   return tuples;\n   * }\n   * ```\n   */\n  async *list(config: Config, options: ListOptions = {}): AsyncGenerator<CheckpointTuple> {\n    const s = this.scope(config), limit = options?.limit ?? 100, before = options?.before ? this.scope(options.before) : undefined\n    if (!Number.isSafeInteger(limit) || limit < 1 || limit > 2000 || before && (before.threadId !== s.threadId || before.namespace !== s.namespace)) throw Error('Invalid scoped checkpoint history request')\n    const values = await this.run(async tx => {\n      const rows: StoredCheckpoint[] = []; let after = ''\n      while (true) { const page = await tx.list<StoredCheckpoint>(s.prefix + 'item-', after, 100); rows.push(...page.map(r => r.value)); if (rows.length > 2000) throw Error('Checkpoint history exceeds bounded capacity'); if (page.length < 100) break; after = page.at(-1)!.id }\n      const out: CheckpointTuple[] = []\n      for (const value of rows.sort((a, b) => b.checkpointId.localeCompare(a.checkpointId))) {\n        if (s.checkpointId && value.checkpointId !== s.checkpointId || before?.checkpointId && value.checkpointId >= before.checkpointId) continue\n        const writes = await tx.get<Pick<StoredCheckpoint, 'tenantId' | 'threadId' | 'namespace' | 'checkpointId' | 'writes'>>(s.prefix + 'writes-' + value.checkpointId)\n        if (writes && (writes.value.tenantId !== this.principal.tenantId || writes.value.threadId !== s.threadId || writes.value.namespace !== s.namespace || writes.value.checkpointId !== value.checkpointId)) throw Error('Pending write identity differs')\n        const tuple = await this.tuple({ ...value, writes: writes?.value.writes ?? [] }, s)\n        if (options?.filter && Object.entries(options.filter).some(([k, v]) => atomicHash((tuple.metadata as any)?.[k] ?? null) !== atomicHash(v ?? null))) continue\n        out.push(tuple); if (out.length === limit) break\n      }\n      return out\n    })\n    for (const value of values) { await this.options.verifyCurrent(); yield value }\n  }\n  /**\n   * Writes an immutable version-4 checkpoint and advances the scoped latest pointer when its ID sorts later.\n   * @param config - Thread/namespace scope; optional checkpoint_id becomes the new checkpoint's parent ID.\n   * @param checkpoint - Current LangGraph version-4 checkpoint with valid nonempty bounded ID.\n   * @param metadata - Serializer-supported checkpoint metadata.\n   * @returns A config selecting the stored checkpoint ID.\n   * @throws Rejects unsupported format, ID reuse with different content, admission/CAS/repository errors, or serialization failures.\n   * @remarks Repeating identical content is accepted; latest ordering is lexicographic, so host checkpoint IDs must reflect desired chronology.\n   * @example\n   * ```typescript\n   * import { AtomicCheckpointSaver } from \"@alneas/eaos-server/agentic/atomic-checkpointer\";\n   * export async function write(saver: AtomicCheckpointSaver, ...args: Parameters<AtomicCheckpointSaver[\"put\"]>) { return saver.put(...args); }\n   * ```\n   */\n  async put(config: Config, checkpoint: Checkpoint, metadata: CheckpointMetadata): Promise<Config> {\n    const s = this.scope(config), id = identifier(checkpoint.id)\n    if (checkpoint.v !== 4) throw Error('Only the current LangGraph checkpoint format is supported')\n    const checkpointBytes = await this.encode(checkpoint), metadataBytes = await this.encode(metadata)\n    await this.run(async tx => {\n      const key = s.prefix + 'item-' + id, existing = await tx.get<StoredCheckpoint>(key)\n      const value: StoredCheckpoint = { tenantId: this.principal.tenantId, threadId: s.threadId, namespace: s.namespace, checkpointId: id, checkpoint: checkpointBytes, metadata: metadataBytes, ...(s.checkpointId ? { parentId: s.checkpointId } : {}), writes: existing?.value.writes ?? [] }\n      if (existing && atomicHash({ ...existing.value, writes: [] }) !== atomicHash({ ...value, writes: [] })) throw Error('Checkpoint ID reused with different content')\n      if (!existing) await tx.put(key, value, 0)\n      const latest = await tx.get<{ id: string }>(s.prefix + 'latest')\n      if (!latest || id > latest.value.id) await tx.put(s.prefix + 'latest', { id }, latest?.revision ?? 0)\n    })\n    return this.config(s, id)\n  }\n  /**\n   * Merges pending channel writes by task/index for one scoped checkpoint.\n   * @param config - Thread/namespace with required checkpoint_id.\n   * @param writes - At most 256 channel/value pairs; channels are valid bounded identifiers. Ordinary task/index duplicates retain their first value; reserved negative-index channels replace prior values.\n   * @param taskId - Nonempty bounded task identifier associating writes.\n   * @returns No value; resolves after the merged writes are durably stored.\n   * @throws Rejects missing checkpoint ID, invalid task/channel, identity mismatch, more than 2000 stored pending writes, or admission/repository/serialization errors.\n   * @example\n   * ```typescript\n   * import { AtomicCheckpointSaver } from \"@alneas/eaos-server/agentic/atomic-checkpointer\";\n   * export async function writePending(saver: AtomicCheckpointSaver, ...args: Parameters<AtomicCheckpointSaver[\"putWrites\"]>) { await saver.putWrites(...args); }\n   * ```\n   */\n  async putWrites(config: Config, writes: Writes, taskId: string): Promise<void> {\n    const s = this.scope(config); identifier(taskId)\n    if (!s.checkpointId || !Array.isArray(writes) || writes.length > 256) throw Error('Checkpoint and bounded writes required')\n    const prepared = await Promise.all(writes.map(async ([channel, value], index) => ({ taskId, index: Object.hasOwn(specialWrites, channel) ? specialWrites[channel] : index, channel: identifier(channel), value: await this.encode(value) })))\n    await this.run(async tx => {\n      const key = s.prefix + 'writes-' + s.checkpointId, row = await tx.get<Pick<StoredCheckpoint, 'tenantId' | 'threadId' | 'namespace' | 'checkpointId' | 'writes'>>(key)\n      if (row && (row.value.tenantId !== this.principal.tenantId || row.value.threadId !== s.threadId || row.value.namespace !== s.namespace || row.value.checkpointId !== s.checkpointId)) throw Error('Pending write identity differs')\n      const value = row ? structuredClone(row.value) : { tenantId: this.principal.tenantId, threadId: s.threadId, namespace: s.namespace, checkpointId: s.checkpointId, writes: [] as StoredCheckpoint['writes'] }\n      for (const write of prepared) {\n        const index = value.writes.findIndex(w => w.taskId === taskId && w.index === write.index)\n        if (index < 0) value.writes.push(write)\n        else if (write.index < 0) value.writes[index] = write\n      }\n      if (value.writes.length > 2000) throw Error('Checkpoint pending writes exceed bounded capacity')\n      await tx.put(key, value, row?.revision ?? 0)\n    })\n  }\n  /**\n   * Rejects thread deletion because this repository contract provides no approved erasure operation.\n   * @param _threadId - Requested thread ID; not read or deleted.\n   * @returns No value; this operation always rejects before performing storage work.\n   * @throws Always rejects with an error directing the caller to the host retention executor.\n   * @example\n   * ```typescript\n   * import { AtomicCheckpointSaver } from \"@alneas/eaos-server/agentic/atomic-checkpointer\";\n   * export async function erase(saver: AtomicCheckpointSaver, threadId: string) {\n   *   try { await saver.deleteThread(threadId); } catch (error) {\n   *     // Host retention tooling must perform reviewed erasure.\n   *     throw error;\n   *   }\n   * }\n   * ```\n   */\n  async deleteThread(_threadId: string): Promise<void> { throw Error('Checkpoint erasure requires the host retention executor; this repository exposes no delete contract') }\n}\n"],"mappings":";;;;;;AAAA,SAAS,2BAA2F;AAapG,IAAM,gBAAwC,EAAE,WAAW,IAAI,eAAe,IAAI,eAAe,IAAI,YAAY,GAAG;AACpH,SAAS,WAAW,OAAgB,QAAQ,OAAe;AACzD,MAAI,OAAO,UAAU,YAAa,CAAC,SAAS,CAAC,SAAU,MAAM,SAAS,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,OAAK,EAAE,WAAW,CAAC,IAAI,MAAM,EAAE,WAAW,CAAC,MAAM,GAAG,EAAG,OAAM,MAAM,+BAA+B;AAC/L,SAAO;AACT;AAaO,IAAM,wBAAN,cAAoC,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ7D,YAA6B,SAmBV;AACjB,UAAM;AApBqB;AAoBlB,oBAAgB,QAAQ,SAAS;AAAG,SAAK,YAAY,gBAAgB,QAAQ,SAAS;AAC/F,QAAI,CAAC,QAAQ,cAAc,OAAO,QAAQ,kBAAkB,cAAc,CAAC,qBAAqB,KAAK,QAAQ,UAAU,kBAAkB,EAAG,OAAM,MAAM,4DAA4D;AAAA,EACtN;AAAA,EAtB6B;AAAA,EAPZ;AAAA,EACT,UAAyB,QAAQ,QAAQ;AAAA,EA6BzC,MAAM,QAAgB;AAC5B,UAAM,WAAW,WAAW,OAAO,cAAc,SAAS,GAAG,YAAY,WAAW,OAAO,cAAc,iBAAiB,IAAI,IAAI;AAClI,UAAM,eAAe,OAAO,cAAc,kBAAkB,SAAY,SAAY,WAAW,OAAO,aAAa,aAAa;AAChI,UAAM,SAAS,GAAG,KAAK,QAAQ,UAAU,kBAAkB,IAAI,WAAW,CAAC,UAAU,SAAS,CAAC,CAAC;AAChG,WAAO,EAAE,UAAU,WAAW,cAAc,OAAO;AAAA,EACrD;AAAA,EACQ,OAAO,GAA+C,IAAoB;AAAE,WAAO,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,eAAe,EAAE,WAAW,eAAe,GAAG,EAAE;AAAA,EAAE;AAAA,EACtL,MAAc,OAAO,OAAkC;AAAE,UAAM,CAAC,MAAM,KAAK,IAAI,MAAM,KAAK,MAAM,WAAW,KAAK;AAAG,WAAO,CAAC,MAAM,OAAO,KAAK,KAAK,EAAE,SAAS,QAAQ,CAAC;AAAA,EAAE;AAAA,EACxK,MAAc,OAAO,OAAgB;AAAE,WAAO,KAAK,MAAM,WAAW,MAAM,CAAC,GAAG,OAAO,KAAK,MAAM,CAAC,GAAG,QAAQ,CAAC;AAAA,EAAE;AAAA,EAC/G,MAAc,IAAO,MAAqD;AACxE,UAAM,SAAS,KAAK,QAAQ,KAAK,YAAY;AAC3C,YAAM,KAAK,QAAQ,cAAc;AACjC,aAAO,KAAK,QAAQ,WAAW,IAAI,KAAK,WAAW,OAAM,OAAM;AAAE,cAAM,KAAK,QAAQ,cAAc;AAAG,cAAMA,UAAS,MAAM,KAAK,EAAE;AAAG,cAAM,KAAK,QAAQ,cAAc;AAAG,eAAOA;AAAA,MAAO,CAAC;AAAA,IACzL,CAAC;AACD,SAAK,UAAU,OAAO,KAAK,MAAM,QAAW,MAAM,MAAS;AAC3D,WAAO;AAAA,EACT;AAAA,EACA,MAAc,MAAM,GAAqB,GAAyE;AAChH,QAAI,EAAE,aAAa,KAAK,UAAU,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,UAAW,OAAM,MAAM,6BAA6B;AACjJ,UAAM,aAAa,MAAM,KAAK,OAAO,EAAE,UAAU;AACjD,QAAI,WAAW,OAAO,EAAE,gBAAgB,WAAW,MAAM,EAAG,OAAM,MAAM,uCAAuC;AAC/G,WAAO;AAAA,MAAE,QAAQ,KAAK,OAAO,GAAG,EAAE,YAAY;AAAA,MAAG;AAAA,MAAY,UAAU,MAAM,KAAK,OAAO,EAAE,QAAQ;AAAA,MACjG,GAAI,EAAE,WAAW,EAAE,cAAc,KAAK,OAAO,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC;AAAA,MACjE,eAAe,MAAM,QAAQ,IAAI,EAAE,OAAO,IAAI,OAAM,MAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,MAAM,KAAK,OAAO,EAAE,KAAK,CAAC,CAA8B,CAAC;AAAA,IAAE;AAAA,EAC9I;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,SAAS,QAAsD;AACnE,UAAM,IAAI,KAAK,MAAM,MAAM;AAC3B,WAAO,KAAK,IAAI,OAAM,OAAM;AAC1B,YAAM,KAAK,EAAE,iBAAiB,MAAM,GAAG,IAAoB,EAAE,SAAS,QAAQ,IAAI,MAAM;AACxF,UAAI,CAAC,GAAI,QAAO;AAChB,YAAM,MAAM,MAAM,GAAG,IAAsB,EAAE,SAAS,UAAU,EAAE;AAClE,UAAI,CAAC,IAAK,QAAO;AACjB,YAAM,SAAS,MAAM,GAAG,IAA+F,EAAE,SAAS,YAAY,EAAE;AAChJ,UAAI,WAAW,OAAO,MAAM,aAAa,KAAK,UAAU,YAAY,OAAO,MAAM,aAAa,EAAE,YAAY,OAAO,MAAM,cAAc,EAAE,aAAa,OAAO,MAAM,iBAAiB,IAAK,OAAM,MAAM,gCAAgC;AACrO,aAAO,KAAK,MAAM,EAAE,GAAG,IAAI,OAAO,QAAQ,QAAQ,MAAM,UAAU,CAAC,EAAE,GAAG,CAAC;AAAA,IAC3E,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,OAAO,KAAK,QAAgB,UAAuB,CAAC,GAAoC;AACtF,UAAM,IAAI,KAAK,MAAM,MAAM,GAAG,QAAQ,SAAS,SAAS,KAAK,SAAS,SAAS,SAAS,KAAK,MAAM,QAAQ,MAAM,IAAI;AACrH,QAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,KAAK,QAAQ,OAAQ,WAAW,OAAO,aAAa,EAAE,YAAY,OAAO,cAAc,EAAE,WAAY,OAAM,MAAM,2CAA2C;AACxM,UAAM,SAAS,MAAM,KAAK,IAAI,OAAM,OAAM;AACxC,YAAM,OAA2B,CAAC;AAAG,UAAI,QAAQ;AACjD,aAAO,MAAM;AAAE,cAAM,OAAO,MAAM,GAAG,KAAuB,EAAE,SAAS,SAAS,OAAO,GAAG;AAAG,aAAK,KAAK,GAAG,KAAK,IAAI,OAAK,EAAE,KAAK,CAAC;AAAG,YAAI,KAAK,SAAS,IAAM,OAAM,MAAM,6CAA6C;AAAG,YAAI,KAAK,SAAS,IAAK;AAAO,gBAAQ,KAAK,GAAG,EAAE,EAAG;AAAA,MAAG;AAC7Q,YAAM,MAAyB,CAAC;AAChC,iBAAW,SAAS,KAAK,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,cAAc,EAAE,YAAY,CAAC,GAAG;AACrF,YAAI,EAAE,gBAAgB,MAAM,iBAAiB,EAAE,gBAAgB,QAAQ,gBAAgB,MAAM,gBAAgB,OAAO,aAAc;AAClI,cAAM,SAAS,MAAM,GAAG,IAA+F,EAAE,SAAS,YAAY,MAAM,YAAY;AAChK,YAAI,WAAW,OAAO,MAAM,aAAa,KAAK,UAAU,YAAY,OAAO,MAAM,aAAa,EAAE,YAAY,OAAO,MAAM,cAAc,EAAE,aAAa,OAAO,MAAM,iBAAiB,MAAM,cAAe,OAAM,MAAM,gCAAgC;AACrP,cAAM,QAAQ,MAAM,KAAK,MAAM,EAAE,GAAG,OAAO,QAAQ,QAAQ,MAAM,UAAU,CAAC,EAAE,GAAG,CAAC;AAClF,YAAI,SAAS,UAAU,OAAO,QAAQ,QAAQ,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,WAAY,MAAM,WAAmB,CAAC,KAAK,IAAI,MAAM,WAAW,KAAK,IAAI,CAAC,EAAG;AACpJ,YAAI,KAAK,KAAK;AAAG,YAAI,IAAI,WAAW,MAAO;AAAA,MAC7C;AACA,aAAO;AAAA,IACT,CAAC;AACD,eAAW,SAAS,QAAQ;AAAE,YAAM,KAAK,QAAQ,cAAc;AAAG,YAAM;AAAA,IAAM;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,IAAI,QAAgB,YAAwB,UAA+C;AAC/F,UAAM,IAAI,KAAK,MAAM,MAAM,GAAG,KAAK,WAAW,WAAW,EAAE;AAC3D,QAAI,WAAW,MAAM,EAAG,OAAM,MAAM,2DAA2D;AAC/F,UAAM,kBAAkB,MAAM,KAAK,OAAO,UAAU,GAAG,gBAAgB,MAAM,KAAK,OAAO,QAAQ;AACjG,UAAM,KAAK,IAAI,OAAM,OAAM;AACzB,YAAM,MAAM,EAAE,SAAS,UAAU,IAAI,WAAW,MAAM,GAAG,IAAsB,GAAG;AAClF,YAAM,QAA0B,EAAE,UAAU,KAAK,UAAU,UAAU,UAAU,EAAE,UAAU,WAAW,EAAE,WAAW,cAAc,IAAI,YAAY,iBAAiB,UAAU,eAAe,GAAI,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,IAAI,CAAC,GAAI,QAAQ,UAAU,MAAM,UAAU,CAAC,EAAE;AACzR,UAAI,YAAY,WAAW,EAAE,GAAG,SAAS,OAAO,QAAQ,CAAC,EAAE,CAAC,MAAM,WAAW,EAAE,GAAG,OAAO,QAAQ,CAAC,EAAE,CAAC,EAAG,OAAM,MAAM,6CAA6C;AACjK,UAAI,CAAC,SAAU,OAAM,GAAG,IAAI,KAAK,OAAO,CAAC;AACzC,YAAM,SAAS,MAAM,GAAG,IAAoB,EAAE,SAAS,QAAQ;AAC/D,UAAI,CAAC,UAAU,KAAK,OAAO,MAAM,GAAI,OAAM,GAAG,IAAI,EAAE,SAAS,UAAU,EAAE,GAAG,GAAG,QAAQ,YAAY,CAAC;AAAA,IACtG,CAAC;AACD,WAAO,KAAK,OAAO,GAAG,EAAE;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,UAAU,QAAgB,QAAgB,QAA+B;AAC7E,UAAM,IAAI,KAAK,MAAM,MAAM;AAAG,eAAW,MAAM;AAC/C,QAAI,CAAC,EAAE,gBAAgB,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,SAAS,IAAK,OAAM,MAAM,wCAAwC;AAC1H,UAAM,WAAW,MAAM,QAAQ,IAAI,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,GAAG,WAAW,EAAE,QAAQ,OAAO,OAAO,OAAO,eAAe,OAAO,IAAI,cAAc,OAAO,IAAI,OAAO,SAAS,WAAW,OAAO,GAAG,OAAO,MAAM,KAAK,OAAO,KAAK,EAAE,EAAE,CAAC;AAC5O,UAAM,KAAK,IAAI,OAAM,OAAM;AACzB,YAAM,MAAM,EAAE,SAAS,YAAY,EAAE,cAAc,MAAM,MAAM,GAAG,IAA+F,GAAG;AACpK,UAAI,QAAQ,IAAI,MAAM,aAAa,KAAK,UAAU,YAAY,IAAI,MAAM,aAAa,EAAE,YAAY,IAAI,MAAM,cAAc,EAAE,aAAa,IAAI,MAAM,iBAAiB,EAAE,cAAe,OAAM,MAAM,gCAAgC;AAClO,YAAM,QAAQ,MAAM,gBAAgB,IAAI,KAAK,IAAI,EAAE,UAAU,KAAK,UAAU,UAAU,UAAU,EAAE,UAAU,WAAW,EAAE,WAAW,cAAc,EAAE,cAAc,QAAQ,CAAC,EAAgC;AAC3M,iBAAW,SAAS,UAAU;AAC5B,cAAM,QAAQ,MAAM,OAAO,UAAU,OAAK,EAAE,WAAW,UAAU,EAAE,UAAU,MAAM,KAAK;AACxF,YAAI,QAAQ,EAAG,OAAM,OAAO,KAAK,KAAK;AAAA,iBAC7B,MAAM,QAAQ,EAAG,OAAM,OAAO,KAAK,IAAI;AAAA,MAClD;AACA,UAAI,MAAM,OAAO,SAAS,IAAM,OAAM,MAAM,mDAAmD;AAC/F,YAAM,GAAG,IAAI,KAAK,OAAO,KAAK,YAAY,CAAC;AAAA,IAC7C,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,MAAM,aAAa,WAAkC;AAAE,UAAM,MAAM,qGAAqG;AAAA,EAAE;AAC5K;","names":["result"]}

package/dist/chunk-3P4XTTQH.js

@@ -0,0 +1,346 @@
+// src/agentic/event-bridge.ts
+var InMemoryEventAgentTaskStore = class {
+  pending = /* @__PURE__ */ new Map();
+  claimed = /* @__PURE__ */ new Map();
+  completed = /* @__PURE__ */ new Map();
+  results = /* @__PURE__ */ new Map();
+  maxTasks;
+  /**
+   * Creates an empty local queue with an active pending/claimed capacity limit.
+   * @param options - maxTasks defaults to 10000 and must be a safe integer 1–1000000.
+   * @throws Invalid capacity.
+   */
+  constructor(options = {}) {
+    this.maxTasks = options.maxTasks ?? 1e4;
+    if (!Number.isSafeInteger(this.maxTasks) || this.maxTasks < 1 || this.maxTasks > 1e6) throw new Error("Invalid in-memory agent task store limit");
+  }
+  /**
+   * Clones a queued task unless its ID is already identically retained.
+   * @param task - Nonempty task ID and event name with structured-cloneable payload/task.
+   * @returns No value; resolves after local insertion or matching duplicate detection.
+   * @throws Missing identifiers, conflicting duplicate, active capacity exhaustion, or clone/JSON failure.
+   * @example
+   * ```typescript
+   * import { InMemoryEventAgentTaskStore } from "@alneas/eaos-server/agentic/event-bridge";
+   * import type { QueuedEventTask } from "@alneas/eaos-server/agentic/event-bridge";
+   * export async function enqueue(store: InMemoryEventAgentTaskStore, task: QueuedEventTask) { await store.enqueue(task); }
+   * ```
+   */
+  async enqueue(task) {
+    if (!task?.task?.id || !task.eventName) throw new Error("Invalid queued event task");
+    const existing = this.pending.get(task.task.id) ?? this.claimed.get(task.task.id) ?? this.completed.get(task.task.id);
+    if (existing) {
+      if (JSON.stringify(existing) !== JSON.stringify(task)) throw new Error("Conflicting duplicate event agent task");
+      return;
+    }
+    if (this.pending.size + this.claimed.size >= this.maxTasks) throw new Error("In-memory agent task store is full");
+    this.pending.set(task.task.id, structuredClone(task));
+  }
+  /**
+   * Moves pending items into the claimed map in insertion order.
+   * @param limit - Positive safe-integer maximum item count.
+   * @returns Cloned claimed items, or an empty array.
+   * @throws Invalid limit or clone failure; an item may already have moved before clone failure.
+   * @example
+   * ```typescript
+   * import { InMemoryEventAgentTaskStore } from "@alneas/eaos-server/agentic/event-bridge";
+   * const store = new InMemoryEventAgentTaskStore();
+   * console.log(await store.claim(1)); // []
+   * ```
+   */
+  async claim(limit) {
+    if (!Number.isSafeInteger(limit) || limit < 1) throw new Error("Invalid in-memory agent task claim limit");
+    const claimed = [];
+    for (const [taskId, task] of this.pending) {
+      this.pending.delete(taskId);
+      this.claimed.set(taskId, task);
+      claimed.push(structuredClone(task));
+      if (claimed.length >= limit) break;
+    }
+    return claimed;
+  }
+  /**
+   * Moves a claimed task into retained completion history and clones its result.
+   * @param taskId - Current claimed task identifier.
+   * @param result - Normalized runtime outcome, including FAILED or PENDING_APPROVAL data.
+   * @returns No value; completes after retaining history and result.
+   * @throws Unknown/already completed task or clone failure; history can already have changed.
+   * @example
+   * ```typescript
+   * import { InMemoryEventAgentTaskStore } from "@alneas/eaos-server/agentic/event-bridge";
+   * import type { ServerAgentTaskResult } from "@alneas/eaos-server/agentic/types";
+   * export async function complete(store: InMemoryEventAgentTaskStore, taskId: string, result: ServerAgentTaskResult) { await store.complete(taskId, result); }
+   * ```
+   */
+  async complete(taskId, result) {
+    const task = this.claimed.get(taskId);
+    if (!task) throw new Error("Unknown or already completed event agent task");
+    this.claimed.delete(taskId);
+    this.completed.set(taskId, task);
+    this.results.set(taskId, structuredClone(result));
+  }
+  /**
+   * Removes a claimed task without retaining failure history or rescheduling it.
+   * @param taskId - Current claimed task identifier.
+   * @param _error - Failure value accepted for interface compatibility and ignored.
+   * @returns No value; resolves after removal.
+   * @throws Unknown/already failed task.
+   * @example
+   * ```typescript
+   * import { InMemoryEventAgentTaskStore } from "@alneas/eaos-server/agentic/event-bridge";
+   * export async function fail(store: InMemoryEventAgentTaskStore, taskId: string, error: unknown) { await store.fail(taskId, error); }
+   * ```
+   */
+  async fail(taskId, _error) {
+    if (!this.claimed.delete(taskId)) throw new Error("Unknown or already failed event agent task");
+  }
+  /**
+  * Inspects a cloned retained completion result for local tests/development.
+  * @param taskId - Previously completed task identifier.
+  * @returns Cloned result, or undefined if no completion result exists.
+  * @throws If a retained result cannot be cloned.
+  * @example
+  * ```typescript
+  * import { InMemoryEventAgentTaskStore } from "@alneas/eaos-server/agentic/event-bridge";
+  * console.log(new InMemoryEventAgentTaskStore().getResult("missing")); // undefined
+  * ```
+  */
+  getResult(taskId) {
+    const result = this.results.get(taskId);
+    return result ? structuredClone(result) : void 0;
+  }
+};
+var EventAgentBridge = class {
+  eventBus;
+  worker;
+  rules = /* @__PURE__ */ new Map();
+  subscriptions = /* @__PURE__ */ new Map();
+  queue = [];
+  activeCount = 0;
+  maxConcurrent;
+  maxQueueSize;
+  onPendingApproval;
+  onError;
+  taskStore;
+  taskCounter = 0;
+  /**
+   * Captures an event bus and worker and validates local backpressure limits.
+   * @param eventBus - Host domain bus; subscriptions begin only on registerRule.
+   * @param worker - Host worker performing gatekeeper/runtime execution.
+   * @param options - Queue limits, notification/error callbacks, and optional durable store.
+   * @throws Invalid limits or malformed durable store.
+   */
+  constructor(eventBus, worker, options = {}) {
+    this.eventBus = eventBus;
+    this.worker = worker;
+    this.maxConcurrent = options.maxConcurrent ?? 1;
+    this.maxQueueSize = options.maxQueueSize ?? 100;
+    if (!Number.isSafeInteger(this.maxConcurrent) || this.maxConcurrent < 1 || this.maxConcurrent > 1024) throw new Error("Invalid EventAgentBridge maxConcurrent");
+    if (!Number.isSafeInteger(this.maxQueueSize) || this.maxQueueSize < 0 || this.maxQueueSize > 1e6) throw new Error("Invalid EventAgentBridge maxQueueSize");
+    this.onPendingApproval = options.onPendingApproval;
+    this.onError = options.onError;
+    if (options.taskStore) this.withDurableTaskStore(options.taskStore);
+  }
+  /**
+   * Persisted event work is deliberately drained by the host scheduler. The
+   * bridge never treats its in-memory queue as a durable workflow checkpoint.
+   * @param store - Host durable queue with enqueue/claim/complete/fail functions.
+   * @returns This bridge after replacing its store reference.
+   * @throws Missing/malformed store functions.
+   * @remarks Existing local queued work is not migrated by changing this store.
+   * @example
+   * ```typescript
+   * import { EventAgentBridge } from "@alneas/eaos-server/agentic/event-bridge";
+   * import type { EventAgentTaskStore } from "@alneas/eaos-server/agentic/event-bridge";
+   * export function persist(bridge: EventAgentBridge, store: EventAgentTaskStore) { return bridge.withDurableTaskStore(store); }
+   * ```
+   */
+  withDurableTaskStore(store) {
+    if (!store || typeof store.enqueue !== "function" || typeof store.claim !== "function" || typeof store.complete !== "function" || typeof store.fail !== "function") throw new Error("Invalid durable event agent task store");
+    this.taskStore = store;
+    return this;
+  }
+  /**
+   * Claims one bounded durable batch and processes it sequentially.
+   * @param limit - Safe integer 1–maxConcurrent; defaults to maxConcurrent.
+   * @returns Claim/completion/failure persistence counts; a worker FAILED result counts completed if stored successfully.
+   * @throws Missing store, invalid limit, claim/fail persistence errors, or synchronous error-sink errors.
+   * @remarks Calls are not globally serialized. Notification failures are reported after result persistence. No periodic scheduler or automatic retry is installed.
+   * @example
+   * ```typescript
+   * import { EventAgentBridge } from "@alneas/eaos-server/agentic/event-bridge";
+   * export async function drain(bridge: EventAgentBridge) { return bridge.runDurableOnce(); }
+   * ```
+   */
+  async runDurableOnce(limit = this.maxConcurrent) {
+    if (!this.taskStore) throw new Error("Durable event agent task store is not configured");
+    if (!Number.isSafeInteger(limit) || limit < 1 || limit > this.maxConcurrent) throw new Error("Invalid durable event agent task limit");
+    const tasks = await this.taskStore.claim(limit);
+    let completed = 0, failed = 0;
+    for (const queued of tasks) {
+      let result;
+      try {
+        result = await this.worker.runTask(queued.task);
+      } catch (error) {
+        failed++;
+        await this.taskStore.fail(queued.task.id, error);
+        this.reportError({ eventName: queued.eventName, taskId: queued.task.id, phase: "runTask", error });
+        continue;
+      }
+      try {
+        await this.taskStore.complete(queued.task.id, result);
+        completed++;
+      } catch (error) {
+        failed++;
+        await this.taskStore.fail(queued.task.id, error);
+        this.reportError({ eventName: queued.eventName, taskId: queued.task.id, phase: "result", error, result });
+        continue;
+      }
+      if (result.status === "PENDING_APPROVAL" && this.onPendingApproval) {
+        try {
+          await this.onPendingApproval({ eventName: queued.eventName, payload: queued.payload, task: queued.task, result });
+        } catch (error) {
+          this.reportError({ eventName: queued.eventName, taskId: queued.task.id, phase: "notification", error, result });
+        }
+      }
+      if (result.status === "FAILED") this.reportError({ eventName: queued.eventName, taskId: queued.task.id, phase: "result", error: result.error ?? new Error("Agent task failed"), result });
+    }
+    return { claimed: tasks.length, completed, failed };
+  }
+  /**
+   * Subscribes a task-conversion rule and returns its individual unsubscribe callback.
+   * @param rule - Exact event name and synchronous createTask callback; callback receives payload and returns verified task fields or null to skip.
+   * @returns A no-argument callback returning no value; removes this rule and unsubscribes the bus handler when no rules remain.
+   * @throws Event bus subscription/unsubscription errors can propagate. Event conversion errors are reported through onError.
+   * @remarks The rule is retained by reference; do not mutate its eventName after registration. Already accepted tasks keep running after unsubscribe.
+   * @example
+   * ```typescript
+   * import { EventAgentBridge } from "@alneas/eaos-server/agentic/event-bridge";
+   * import type { EventAgentRule } from "@alneas/eaos-server/agentic/event-bridge";
+   * export function listen(bridge: EventAgentBridge, rule: EventAgentRule) { return bridge.registerRule(rule); }
+   * ```
+   */
+  registerRule(rule) {
+    if (!this.rules.has(rule.eventName)) {
+      this.rules.set(rule.eventName, []);
+      const handler = (payload) => {
+        void this.handleEvent(rule.eventName, payload).catch((error) => {
+          this.reportError({ eventName: rule.eventName, phase: "createTask", error });
+        });
+      };
+      this.subscriptions.set(rule.eventName, handler);
+      this.eventBus.subscribe(rule.eventName, handler);
+    }
+    this.rules.get(rule.eventName).push(rule);
+    return () => {
+      const list = this.rules.get(rule.eventName);
+      if (list) {
+        const index = list.indexOf(rule);
+        if (index >= 0) list.splice(index, 1);
+        if (list.length === 0) {
+          this.rules.delete(rule.eventName);
+          const handler = this.subscriptions.get(rule.eventName);
+          if (handler) this.eventBus.unsubscribe(rule.eventName, handler);
+          this.subscriptions.delete(rule.eventName);
+        }
+      }
+    };
+  }
+  /**
+  * Waits until the bridge's local active count and waiting queue are empty.
+  * @returns No value; resolves when local work is idle. It does not wait for durable queue persistence/draining or asynchronous error sinks.
+  * @remarks Polls with zero-delay timers and has no timeout/cancellation; continuously arriving work can delay completion indefinitely.
+  * @example
+  * ```typescript
+  * import { EventAgentBridge } from "@alneas/eaos-server/agentic/event-bridge";
+  * export async function idle(bridge: EventAgentBridge) { await bridge.whenIdle(); }
+  * ```
+  */
+  async whenIdle() {
+    while (this.activeCount > 0 || this.queue.length > 0) await new Promise((resolve) => setTimeout(resolve, 0));
+  }
+  async handleEvent(eventName, payload) {
+    const list = this.rules.get(eventName);
+    if (!list || list.length === 0) return;
+    for (const rule of [...list]) {
+      let taskSpec;
+      try {
+        taskSpec = rule.createTask(payload);
+      } catch (error) {
+        this.reportError({ eventName, phase: "createTask", error });
+        continue;
+      }
+      if (!taskSpec) continue;
+      const taskId = `evt_${Date.now()}_${++this.taskCounter}`;
+      const task = {
+        ...taskSpec,
+        id: taskId,
+        executionContext: {
+          ...taskSpec.executionContext,
+          idempotencyKey: taskSpec.executionContext?.idempotencyKey ?? `event-agent:${eventName}:${taskId}`
+        }
+      };
+      if (this.taskStore) {
+        try {
+          await this.taskStore.enqueue({ eventName, payload: structuredClone(payload), task: structuredClone(task) });
+        } catch (error) {
+          this.reportError({ eventName, taskId: task.id, phase: "queue", error });
+        }
+        continue;
+      }
+      if (this.queue.length >= this.maxQueueSize && this.activeCount >= this.maxConcurrent) {
+        this.reportError({ eventName, taskId: task.id, phase: "queue", error: new Error("EventAgentBridge queue is full") });
+        continue;
+      }
+      this.queue.push({ eventName, payload, task });
+    }
+    this.drain();
+  }
+  drain() {
+    while (this.activeCount < this.maxConcurrent && this.queue.length > 0) {
+      const queued = this.queue.shift();
+      this.activeCount += 1;
+      void this.execute(queued).finally(() => {
+        this.activeCount -= 1;
+        this.drain();
+      });
+    }
+  }
+  async execute(queued) {
+    let result;
+    try {
+      result = await this.worker.runTask(queued.task);
+    } catch (error) {
+      this.reportError({ eventName: queued.eventName, taskId: queued.task.id, phase: "runTask", error });
+      return;
+    }
+    if (result.status === "PENDING_APPROVAL") {
+      try {
+        if (this.onPendingApproval) await this.onPendingApproval({ eventName: queued.eventName, payload: queued.payload, task: queued.task, result });
+        else console.warn("[EventAgentBridge] Agent task pending approval", { eventName: queued.eventName, taskId: queued.task.id, approvalTicketId: result.approvalTicketId });
+      } catch (error) {
+        this.reportError({ eventName: queued.eventName, taskId: queued.task.id, phase: "notification", error, result });
+      }
+      return;
+    }
+    if (result.status === "FAILED") this.reportError({ eventName: queued.eventName, taskId: queued.task.id, phase: "result", error: result.error ?? new Error("Agent task failed"), result });
+  }
+  reportError(detail) {
+    if (this.onError) {
+      void Promise.resolve(this.onError(detail)).catch((error) => console.error("[EventAgentBridge] Error sink failed", error));
+      return;
+    }
+    console.error("[EventAgentBridge] Event task failed", {
+      eventName: detail.eventName,
+      taskId: detail.taskId,
+      phase: detail.phase,
+      error: detail.error instanceof Error ? detail.error.message : String(detail.error)
+    });
+  }
+};
+
+export {
+  InMemoryEventAgentTaskStore,
+  EventAgentBridge
+};
+//# sourceMappingURL=chunk-3P4XTTQH.js.map