@caupulican/pi-agent-core 0.80.103 → 0.81.0

package/dist/node.js

@@ -1,3 +1,11 @@
-export { NodeExecutionEnv } from "./harness/env/nodejs.js";
+// Compaction + branch summarization (Node-only: transitively imports session storage via buildSessionContext)
+export * from "./compaction/index.js";
 export * from "./index.js";
+export * from "./reliability/node.js";
+// Session storage (Node-only: fs/readline)
+export * from "./session/session-manager.js";
+// Path normalization/resolution (Node-only: node:os/node:path/node:url)
+export * from "./utils/paths.js";
+// Truncation utilities (Node-only: Buffer-based byte-length math)
+export * from "./utils/truncate.js";
 //# sourceMappingURL=node.js.map

package/dist/node.js.map

@@ -1 +1 @@
-{"version":3,"file":"node.js","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,cAAc,YAAY,CAAC","sourcesContent":["export { NodeExecutionEnv } from \"./harness/env/nodejs.ts\";\nexport * from \"./index.ts\";\n"]}
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,2CAA2C;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,wEAAwE;AACxE,cAAc,kBAAkB,CAAC;AACjC,kEAAkE;AAClE,cAAc,qBAAqB,CAAC","sourcesContent":["// Compaction + branch summarization (Node-only: transitively imports session storage via buildSessionContext)\nexport * from \"./compaction/index.ts\";\nexport * from \"./index.ts\";\nexport * from \"./reliability/node.ts\";\n// Session storage (Node-only: fs/readline)\nexport * from \"./session/session-manager.ts\";\n// Path normalization/resolution (Node-only: node:os/node:path/node:url)\nexport * from \"./utils/paths.ts\";\n// Truncation utilities (Node-only: Buffer-based byte-length math)\nexport * from \"./utils/truncate.ts\";\n"]}

package/dist/reliability/classifier.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Pure provider-failure classifier.
+ *
+ * One classification produces four independent action booleans (hermes-derived design):
+ * the retry loop, compaction, credential rotation, and provider failover each read their
+ * own flag, so one pipeline can route a 429 to rotation, an overflow to compaction, and a
+ * billing error to failover without re-parsing error text at each site.
+ *
+ * Pattern sources: AgentSession._isRetryableError / _isNonRetryableProviderLimitError
+ * (the live, battle-tested regexes), split by reason so each maps to distinct actions.
+ * Detection of context overflow stays in @caupulican/pi-ai (needs model state); hosts pass
+ * `contextOverflow` in.
+ */
+export type FailureReason = "overloaded" | "rate_limit" | "server_error" | "network" | "stream_stall" | "context_overflow" | "auth" | "billing_or_quota" | "aborted" | "unknown";
+export interface ClassifiedError {
+    reason: FailureReason;
+    retryable: boolean;
+    shouldCompact: boolean;
+    shouldRotateCredential: boolean;
+    shouldFallback: boolean;
+    /** Provider-suggested delay parsed from the message, capped by the retry policy at use site. */
+    retryAfterMs?: number;
+    message: string;
+}
+export interface ClassifyFailureInput {
+    message: string;
+    /** Host-computed via pi-ai isContextOverflow(message, contextWindow). */
+    contextOverflow?: boolean;
+    /** True when the failure came from an intentional abort (stopReason "aborted"). */
+    aborted?: boolean;
+}
+export declare function classifyFailure(input: ClassifyFailureInput): ClassifiedError;
+//# sourceMappingURL=classifier.d.ts.map

package/dist/reliability/classifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier.d.ts","sourceRoot":"","sources":["../../src/reliability/classifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,MAAM,aAAa,GACtB,YAAY,GACZ,YAAY,GACZ,cAAc,GACd,SAAS,GACT,cAAc,GACd,kBAAkB,GAClB,MAAM,GACN,kBAAkB,GAClB,SAAS,GACT,SAAS,CAAC;AAEb,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB,sBAAsB,EAAE,OAAO,CAAC;IAChC,cAAc,EAAE,OAAO,CAAC;IACxB,gGAAgG;IAChG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mFAAmF;IACnF,OAAO,CAAC,EAAE,OAAO,CAAC;CAClB;AAwBD,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,eAAe,CAsC5E","sourcesContent":["/**\n * Pure provider-failure classifier.\n *\n * One classification produces four independent action booleans (hermes-derived design):\n * the retry loop, compaction, credential rotation, and provider failover each read their\n * own flag, so one pipeline can route a 429 to rotation, an overflow to compaction, and a\n * billing error to failover without re-parsing error text at each site.\n *\n * Pattern sources: AgentSession._isRetryableError / _isNonRetryableProviderLimitError\n * (the live, battle-tested regexes), split by reason so each maps to distinct actions.\n * Detection of context overflow stays in @caupulican/pi-ai (needs model state); hosts pass\n * `contextOverflow` in.\n */\n\nexport type FailureReason =\n\t| \"overloaded\"\n\t| \"rate_limit\"\n\t| \"server_error\"\n\t| \"network\"\n\t| \"stream_stall\"\n\t| \"context_overflow\"\n\t| \"auth\"\n\t| \"billing_or_quota\"\n\t| \"aborted\"\n\t| \"unknown\";\n\nexport interface ClassifiedError {\n\treason: FailureReason;\n\tretryable: boolean;\n\tshouldCompact: boolean;\n\tshouldRotateCredential: boolean;\n\tshouldFallback: boolean;\n\t/** Provider-suggested delay parsed from the message, capped by the retry policy at use site. */\n\tretryAfterMs?: number;\n\tmessage: string;\n}\n\nexport interface ClassifyFailureInput {\n\tmessage: string;\n\t/** Host-computed via pi-ai isContextOverflow(message, contextWindow). */\n\tcontextOverflow?: boolean;\n\t/** True when the failure came from an intentional abort (stopReason \"aborted\"). */\n\taborted?: boolean;\n}\n\nconst BILLING_OR_QUOTA =\n\t/GoUsageLimitError|FreeUsageLimitError|Monthly usage limit reached|available balance|insufficient_quota|out of budget|quota exceeded|billing/i;\nconst AUTH = /\\b401\\b|unauthorized|invalid.?api.?key|authentication.?error|forbidden|permission.?denied/i;\nconst RATE_LIMIT = /rate.?limit|too many requests|429/i;\nconst OVERLOADED = /overloaded/i;\nconst STREAM_STALL = /stream stalled|ended without|stream ended before message_stop|reset before headers/i;\nconst SERVER_ERROR =\n\t/500|502|503|504|service.?unavailable|server.?error|internal.?error|provider.?returned.?error|upstream.?connect|http2 request did not get a response|retry delay/i;\nconst NETWORK =\n\t/network.?error|connection.?error|connection.?refused|connection.?lost|websocket.?closed|websocket.?error|other side closed|fetch failed|socket hang up|timed? out|timeout|terminated/i;\n\nconst RETRY_AFTER_S = /retry.?(?:after|in)\\s+(\\d+(?:\\.\\d+)?)\\s*s\\b|\"retryDelay\"\\s*:\\s*\"(\\d+(?:\\.\\d+)?)s\"/i;\nconst RETRY_AFTER_MS = /retry.?(?:after|in)\\s+(\\d+)\\s*ms\\b/i;\n\nfunction parseRetryAfterMs(message: string): number | undefined {\n\tconst ms = RETRY_AFTER_MS.exec(message);\n\tif (ms) return Number(ms[1]);\n\tconst s = RETRY_AFTER_S.exec(message);\n\tif (s) return Math.round(Number(s[1] ?? s[2]) * 1000);\n\treturn undefined;\n}\n\nexport function classifyFailure(input: ClassifyFailureInput): ClassifiedError {\n\tconst message = input.message;\n\tconst retryAfterMs = parseRetryAfterMs(message);\n\n\tconst base = {\n\t\tretryable: false,\n\t\tshouldCompact: false,\n\t\tshouldRotateCredential: false,\n\t\tshouldFallback: false,\n\t\tmessage,\n\t};\n\n\tconst withRetry = <T extends { reason: FailureReason }>(obj: T): T | (T & { retryAfterMs: number }) =>\n\t\tretryAfterMs !== undefined ? { ...obj, retryAfterMs } : obj;\n\n\tif (input.aborted) return withRetry({ ...base, reason: \"aborted\" });\n\tif (input.contextOverflow) return withRetry({ ...base, reason: \"context_overflow\", shouldCompact: true });\n\tif (BILLING_OR_QUOTA.test(message)) return withRetry({ ...base, reason: \"billing_or_quota\", shouldFallback: true });\n\tif (AUTH.test(message))\n\t\treturn withRetry({ ...base, reason: \"auth\", shouldRotateCredential: true, shouldFallback: true });\n\n\tconst isRateLimit = RATE_LIMIT.test(message);\n\tif (isRateLimit || OVERLOADED.test(message)) {\n\t\treturn withRetry({\n\t\t\t...base,\n\t\t\treason: isRateLimit ? \"rate_limit\" : \"overloaded\",\n\t\t\tretryable: true,\n\t\t\tshouldRotateCredential: true,\n\t\t\tshouldFallback: true,\n\t\t});\n\t}\n\tif (STREAM_STALL.test(message))\n\t\treturn withRetry({ ...base, reason: \"stream_stall\", retryable: true, shouldFallback: true });\n\tif (SERVER_ERROR.test(message))\n\t\treturn withRetry({ ...base, reason: \"server_error\", retryable: true, shouldFallback: true });\n\tif (NETWORK.test(message)) return withRetry({ ...base, reason: \"network\", retryable: true, shouldFallback: true });\n\n\treturn withRetry({ ...base, reason: \"unknown\" });\n}\n"]}

package/dist/reliability/classifier.js

@@ -0,0 +1,69 @@
+/**
+ * Pure provider-failure classifier.
+ *
+ * One classification produces four independent action booleans (hermes-derived design):
+ * the retry loop, compaction, credential rotation, and provider failover each read their
+ * own flag, so one pipeline can route a 429 to rotation, an overflow to compaction, and a
+ * billing error to failover without re-parsing error text at each site.
+ *
+ * Pattern sources: AgentSession._isRetryableError / _isNonRetryableProviderLimitError
+ * (the live, battle-tested regexes), split by reason so each maps to distinct actions.
+ * Detection of context overflow stays in @caupulican/pi-ai (needs model state); hosts pass
+ * `contextOverflow` in.
+ */
+const BILLING_OR_QUOTA = /GoUsageLimitError|FreeUsageLimitError|Monthly usage limit reached|available balance|insufficient_quota|out of budget|quota exceeded|billing/i;
+const AUTH = /\b401\b|unauthorized|invalid.?api.?key|authentication.?error|forbidden|permission.?denied/i;
+const RATE_LIMIT = /rate.?limit|too many requests|429/i;
+const OVERLOADED = /overloaded/i;
+const STREAM_STALL = /stream stalled|ended without|stream ended before message_stop|reset before headers/i;
+const SERVER_ERROR = /500|502|503|504|service.?unavailable|server.?error|internal.?error|provider.?returned.?error|upstream.?connect|http2 request did not get a response|retry delay/i;
+const NETWORK = /network.?error|connection.?error|connection.?refused|connection.?lost|websocket.?closed|websocket.?error|other side closed|fetch failed|socket hang up|timed? out|timeout|terminated/i;
+const RETRY_AFTER_S = /retry.?(?:after|in)\s+(\d+(?:\.\d+)?)\s*s\b|"retryDelay"\s*:\s*"(\d+(?:\.\d+)?)s"/i;
+const RETRY_AFTER_MS = /retry.?(?:after|in)\s+(\d+)\s*ms\b/i;
+function parseRetryAfterMs(message) {
+    const ms = RETRY_AFTER_MS.exec(message);
+    if (ms)
+        return Number(ms[1]);
+    const s = RETRY_AFTER_S.exec(message);
+    if (s)
+        return Math.round(Number(s[1] ?? s[2]) * 1000);
+    return undefined;
+}
+export function classifyFailure(input) {
+    const message = input.message;
+    const retryAfterMs = parseRetryAfterMs(message);
+    const base = {
+        retryable: false,
+        shouldCompact: false,
+        shouldRotateCredential: false,
+        shouldFallback: false,
+        message,
+    };
+    const withRetry = (obj) => retryAfterMs !== undefined ? { ...obj, retryAfterMs } : obj;
+    if (input.aborted)
+        return withRetry({ ...base, reason: "aborted" });
+    if (input.contextOverflow)
+        return withRetry({ ...base, reason: "context_overflow", shouldCompact: true });
+    if (BILLING_OR_QUOTA.test(message))
+        return withRetry({ ...base, reason: "billing_or_quota", shouldFallback: true });
+    if (AUTH.test(message))
+        return withRetry({ ...base, reason: "auth", shouldRotateCredential: true, shouldFallback: true });
+    const isRateLimit = RATE_LIMIT.test(message);
+    if (isRateLimit || OVERLOADED.test(message)) {
+        return withRetry({
+            ...base,
+            reason: isRateLimit ? "rate_limit" : "overloaded",
+            retryable: true,
+            shouldRotateCredential: true,
+            shouldFallback: true,
+        });
+    }
+    if (STREAM_STALL.test(message))
+        return withRetry({ ...base, reason: "stream_stall", retryable: true, shouldFallback: true });
+    if (SERVER_ERROR.test(message))
+        return withRetry({ ...base, reason: "server_error", retryable: true, shouldFallback: true });
+    if (NETWORK.test(message))
+        return withRetry({ ...base, reason: "network", retryable: true, shouldFallback: true });
+    return withRetry({ ...base, reason: "unknown" });
+}
+//# sourceMappingURL=classifier.js.map

package/dist/reliability/classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier.js","sourceRoot":"","sources":["../../src/reliability/classifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAiCH,MAAM,gBAAgB,GACrB,8IAA8I,CAAC;AAChJ,MAAM,IAAI,GAAG,4FAA4F,CAAC;AAC1G,MAAM,UAAU,GAAG,oCAAoC,CAAC;AACxD,MAAM,UAAU,GAAG,aAAa,CAAC;AACjC,MAAM,YAAY,GAAG,qFAAqF,CAAC;AAC3G,MAAM,YAAY,GACjB,kKAAkK,CAAC;AACpK,MAAM,OAAO,GACZ,uLAAuL,CAAC;AAEzL,MAAM,aAAa,GAAG,oFAAoF,CAAC;AAC3G,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAE7D,SAAS,iBAAiB,CAAC,OAAe,EAAsB;IAC/D,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACtD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,UAAU,eAAe,CAAC,KAA2B,EAAmB;IAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAEhD,MAAM,IAAI,GAAG;QACZ,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,KAAK;QACpB,sBAAsB,EAAE,KAAK;QAC7B,cAAc,EAAE,KAAK;QACrB,OAAO;KACP,CAAC;IAEF,MAAM,SAAS,GAAG,CAAsC,GAAM,EAAsC,EAAE,CACrG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAE7D,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,eAAe;QAAE,OAAO,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1G,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IACpH,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QACrB,OAAO,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnG,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,OAAO,SAAS,CAAC;YAChB,GAAG,IAAI;YACP,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY;YACjD,SAAS,EAAE,IAAI;YACf,sBAAsB,EAAE,IAAI;YAC5B,cAAc,EAAE,IAAI;SACpB,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAC7B,OAAO,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9F,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAC7B,OAAO,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9F,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnH,OAAO,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAAA,CACjD","sourcesContent":["/**\n * Pure provider-failure classifier.\n *\n * One classification produces four independent action booleans (hermes-derived design):\n * the retry loop, compaction, credential rotation, and provider failover each read their\n * own flag, so one pipeline can route a 429 to rotation, an overflow to compaction, and a\n * billing error to failover without re-parsing error text at each site.\n *\n * Pattern sources: AgentSession._isRetryableError / _isNonRetryableProviderLimitError\n * (the live, battle-tested regexes), split by reason so each maps to distinct actions.\n * Detection of context overflow stays in @caupulican/pi-ai (needs model state); hosts pass\n * `contextOverflow` in.\n */\n\nexport type FailureReason =\n\t| \"overloaded\"\n\t| \"rate_limit\"\n\t| \"server_error\"\n\t| \"network\"\n\t| \"stream_stall\"\n\t| \"context_overflow\"\n\t| \"auth\"\n\t| \"billing_or_quota\"\n\t| \"aborted\"\n\t| \"unknown\";\n\nexport interface ClassifiedError {\n\treason: FailureReason;\n\tretryable: boolean;\n\tshouldCompact: boolean;\n\tshouldRotateCredential: boolean;\n\tshouldFallback: boolean;\n\t/** Provider-suggested delay parsed from the message, capped by the retry policy at use site. */\n\tretryAfterMs?: number;\n\tmessage: string;\n}\n\nexport interface ClassifyFailureInput {\n\tmessage: string;\n\t/** Host-computed via pi-ai isContextOverflow(message, contextWindow). */\n\tcontextOverflow?: boolean;\n\t/** True when the failure came from an intentional abort (stopReason \"aborted\"). */\n\taborted?: boolean;\n}\n\nconst BILLING_OR_QUOTA =\n\t/GoUsageLimitError|FreeUsageLimitError|Monthly usage limit reached|available balance|insufficient_quota|out of budget|quota exceeded|billing/i;\nconst AUTH = /\\b401\\b|unauthorized|invalid.?api.?key|authentication.?error|forbidden|permission.?denied/i;\nconst RATE_LIMIT = /rate.?limit|too many requests|429/i;\nconst OVERLOADED = /overloaded/i;\nconst STREAM_STALL = /stream stalled|ended without|stream ended before message_stop|reset before headers/i;\nconst SERVER_ERROR =\n\t/500|502|503|504|service.?unavailable|server.?error|internal.?error|provider.?returned.?error|upstream.?connect|http2 request did not get a response|retry delay/i;\nconst NETWORK =\n\t/network.?error|connection.?error|connection.?refused|connection.?lost|websocket.?closed|websocket.?error|other side closed|fetch failed|socket hang up|timed? out|timeout|terminated/i;\n\nconst RETRY_AFTER_S = /retry.?(?:after|in)\\s+(\\d+(?:\\.\\d+)?)\\s*s\\b|\"retryDelay\"\\s*:\\s*\"(\\d+(?:\\.\\d+)?)s\"/i;\nconst RETRY_AFTER_MS = /retry.?(?:after|in)\\s+(\\d+)\\s*ms\\b/i;\n\nfunction parseRetryAfterMs(message: string): number | undefined {\n\tconst ms = RETRY_AFTER_MS.exec(message);\n\tif (ms) return Number(ms[1]);\n\tconst s = RETRY_AFTER_S.exec(message);\n\tif (s) return Math.round(Number(s[1] ?? s[2]) * 1000);\n\treturn undefined;\n}\n\nexport function classifyFailure(input: ClassifyFailureInput): ClassifiedError {\n\tconst message = input.message;\n\tconst retryAfterMs = parseRetryAfterMs(message);\n\n\tconst base = {\n\t\tretryable: false,\n\t\tshouldCompact: false,\n\t\tshouldRotateCredential: false,\n\t\tshouldFallback: false,\n\t\tmessage,\n\t};\n\n\tconst withRetry = <T extends { reason: FailureReason }>(obj: T): T | (T & { retryAfterMs: number }) =>\n\t\tretryAfterMs !== undefined ? { ...obj, retryAfterMs } : obj;\n\n\tif (input.aborted) return withRetry({ ...base, reason: \"aborted\" });\n\tif (input.contextOverflow) return withRetry({ ...base, reason: \"context_overflow\", shouldCompact: true });\n\tif (BILLING_OR_QUOTA.test(message)) return withRetry({ ...base, reason: \"billing_or_quota\", shouldFallback: true });\n\tif (AUTH.test(message))\n\t\treturn withRetry({ ...base, reason: \"auth\", shouldRotateCredential: true, shouldFallback: true });\n\n\tconst isRateLimit = RATE_LIMIT.test(message);\n\tif (isRateLimit || OVERLOADED.test(message)) {\n\t\treturn withRetry({\n\t\t\t...base,\n\t\t\treason: isRateLimit ? \"rate_limit\" : \"overloaded\",\n\t\t\tretryable: true,\n\t\t\tshouldRotateCredential: true,\n\t\t\tshouldFallback: true,\n\t\t});\n\t}\n\tif (STREAM_STALL.test(message))\n\t\treturn withRetry({ ...base, reason: \"stream_stall\", retryable: true, shouldFallback: true });\n\tif (SERVER_ERROR.test(message))\n\t\treturn withRetry({ ...base, reason: \"server_error\", retryable: true, shouldFallback: true });\n\tif (NETWORK.test(message)) return withRetry({ ...base, reason: \"network\", retryable: true, shouldFallback: true });\n\n\treturn withRetry({ ...base, reason: \"unknown\" });\n}\n"]}

package/dist/reliability/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./classifier.ts";
+export * from "./retry.ts";
+export * from "./retry-controller.ts";
+export * from "./watchdogs.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/reliability/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/reliability/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC","sourcesContent":["export * from \"./classifier.ts\";\nexport * from \"./retry.ts\";\nexport * from \"./retry-controller.ts\";\nexport * from \"./watchdogs.ts\";\n"]}

package/dist/reliability/index.js

@@ -0,0 +1,5 @@
+export * from "./classifier.js";
+export * from "./retry.js";
+export * from "./retry-controller.js";
+export * from "./watchdogs.js";
+//# sourceMappingURL=index.js.map

package/dist/reliability/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/reliability/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC","sourcesContent":["export * from \"./classifier.ts\";\nexport * from \"./retry.ts\";\nexport * from \"./retry-controller.ts\";\nexport * from \"./watchdogs.ts\";\n"]}

package/dist/reliability/node.d.ts

@@ -0,0 +1,2 @@
+export * from "./process-tree.ts";
+//# sourceMappingURL=node.d.ts.map

package/dist/reliability/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/reliability/node.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC","sourcesContent":["export * from \"./process-tree.ts\";\n"]}

package/dist/reliability/node.js

@@ -0,0 +1,2 @@
+export * from "./process-tree.js";
+//# sourceMappingURL=node.js.map

package/dist/reliability/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../../src/reliability/node.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC","sourcesContent":["export * from \"./process-tree.ts\";\n"]}

package/dist/reliability/process-tree.d.ts

@@ -0,0 +1,10 @@
+export declare function isProcessAlive(pid: number): boolean;
+export interface KillTreeOptions {
+    /** How long to wait for SIGTERM to work before SIGKILL. Default 5000ms. */
+    graceMs?: number;
+}
+/** Graceful tree kill: SIGTERM → poll liveness → SIGKILL. */
+export declare function killTree(pid: number, opts?: KillTreeOptions): Promise<"already_dead" | "terminated" | "killed">;
+/** Immediate tree kill (SIGKILL / taskkill). Port of coding-agent's killProcessTree. */
+export declare function killTreeNow(pid: number): void;
+//# sourceMappingURL=process-tree.d.ts.map

package/dist/reliability/process-tree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-tree.d.ts","sourceRoot":"","sources":["../../src/reliability/process-tree.ts"],"names":[],"mappings":"AAaA,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQnD;AAgBD,MAAM,WAAW,eAAe;IAC/B,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,iEAA6D;AAC7D,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,GAAG,YAAY,GAAG,QAAQ,CAAC,CAiBrH;AAED,wFAAwF;AACxF,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAU7C","sourcesContent":["/**\n * Process-tree kill primitives.\n *\n * WHY: node's ChildProcess.killed flag is set the moment a signal is SENT, not when\n * the process dies — gating SIGKILL escalation on it (as the legacy exec path did)\n * makes escalation dead code, so a SIGTERM-trapping child survives forever. These\n * primitives escalate based on actual liveness probes instead.\n *\n * Group kill (-pid) requires the target to be a process-group leader (spawned with\n * detached: true). Both functions fall back to single-pid signaling otherwise.\n */\nimport { spawn } from \"node:child_process\";\n\nexport function isProcessAlive(pid: number): boolean {\n\ttry {\n\t\tprocess.kill(pid, 0);\n\t\treturn true;\n\t} catch (err) {\n\t\t// EPERM means it exists but we lack permission — still alive.\n\t\treturn (err as NodeJS.ErrnoException).code === \"EPERM\";\n\t}\n}\n\nfunction signalTree(pid: number, signal: NodeJS.Signals): boolean {\n\ttry {\n\t\tprocess.kill(-pid, signal);\n\t\treturn true;\n\t} catch {\n\t\ttry {\n\t\t\tprocess.kill(pid, signal);\n\t\t\treturn true;\n\t\t} catch {\n\t\t\treturn false;\n\t\t}\n\t}\n}\n\nexport interface KillTreeOptions {\n\t/** How long to wait for SIGTERM to work before SIGKILL. Default 5000ms. */\n\tgraceMs?: number;\n}\n\n/** Graceful tree kill: SIGTERM → poll liveness → SIGKILL. */\nexport async function killTree(pid: number, opts?: KillTreeOptions): Promise<\"already_dead\" | \"terminated\" | \"killed\"> {\n\tif (process.platform === \"win32\") {\n\t\tif (!isProcessAlive(pid)) return \"already_dead\";\n\t\tkillTreeNow(pid);\n\t\treturn \"killed\";\n\t}\n\tif (!isProcessAlive(pid)) return \"already_dead\";\n\tsignalTree(pid, \"SIGTERM\");\n\tconst graceMs = opts?.graceMs ?? 5000;\n\tconst deadline = Date.now() + graceMs;\n\twhile (Date.now() < deadline) {\n\t\tif (!isProcessAlive(pid)) return \"terminated\";\n\t\tawait new Promise((resolve) => setTimeout(resolve, Math.min(50, graceMs)));\n\t}\n\tif (!isProcessAlive(pid)) return \"terminated\";\n\tsignalTree(pid, \"SIGKILL\");\n\treturn \"killed\";\n}\n\n/** Immediate tree kill (SIGKILL / taskkill). Port of coding-agent's killProcessTree. */\nexport function killTreeNow(pid: number): void {\n\tif (process.platform === \"win32\") {\n\t\ttry {\n\t\t\tspawn(\"taskkill\", [\"/F\", \"/T\", \"/PID\", String(pid)], { stdio: \"ignore\", detached: true, windowsHide: true });\n\t\t} catch {\n\t\t\t// Ignore errors if taskkill fails.\n\t\t}\n\t} else {\n\t\tsignalTree(pid, \"SIGKILL\");\n\t}\n}\n"]}

package/dist/reliability/process-tree.js

@@ -0,0 +1,75 @@
+/**
+ * Process-tree kill primitives.
+ *
+ * WHY: node's ChildProcess.killed flag is set the moment a signal is SENT, not when
+ * the process dies — gating SIGKILL escalation on it (as the legacy exec path did)
+ * makes escalation dead code, so a SIGTERM-trapping child survives forever. These
+ * primitives escalate based on actual liveness probes instead.
+ *
+ * Group kill (-pid) requires the target to be a process-group leader (spawned with
+ * detached: true). Both functions fall back to single-pid signaling otherwise.
+ */
+import { spawn } from "node:child_process";
+export function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        // EPERM means it exists but we lack permission — still alive.
+        return err.code === "EPERM";
+    }
+}
+function signalTree(pid, signal) {
+    try {
+        process.kill(-pid, signal);
+        return true;
+    }
+    catch {
+        try {
+            process.kill(pid, signal);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+/** Graceful tree kill: SIGTERM → poll liveness → SIGKILL. */
+export async function killTree(pid, opts) {
+    if (process.platform === "win32") {
+        if (!isProcessAlive(pid))
+            return "already_dead";
+        killTreeNow(pid);
+        return "killed";
+    }
+    if (!isProcessAlive(pid))
+        return "already_dead";
+    signalTree(pid, "SIGTERM");
+    const graceMs = opts?.graceMs ?? 5000;
+    const deadline = Date.now() + graceMs;
+    while (Date.now() < deadline) {
+        if (!isProcessAlive(pid))
+            return "terminated";
+        await new Promise((resolve) => setTimeout(resolve, Math.min(50, graceMs)));
+    }
+    if (!isProcessAlive(pid))
+        return "terminated";
+    signalTree(pid, "SIGKILL");
+    return "killed";
+}
+/** Immediate tree kill (SIGKILL / taskkill). Port of coding-agent's killProcessTree. */
+export function killTreeNow(pid) {
+    if (process.platform === "win32") {
+        try {
+            spawn("taskkill", ["/F", "/T", "/PID", String(pid)], { stdio: "ignore", detached: true, windowsHide: true });
+        }
+        catch {
+            // Ignore errors if taskkill fails.
+        }
+    }
+    else {
+        signalTree(pid, "SIGKILL");
+    }
+}
+//# sourceMappingURL=process-tree.js.map

package/dist/reliability/process-tree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-tree.js","sourceRoot":"","sources":["../../src/reliability/process-tree.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,UAAU,cAAc,CAAC,GAAW,EAAW;IACpD,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,gEAA8D;QAC9D,OAAQ,GAA6B,CAAC,IAAI,KAAK,OAAO,CAAC;IACxD,CAAC;AAAA,CACD;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,MAAsB,EAAW;IACjE,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,IAAI,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1B,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;AAAA,CACD;AAOD,iEAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,IAAsB,EAAqD;IACtH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO,cAAc,CAAC;QAChD,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,cAAc,CAAC;IAChD,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IACtC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO,YAAY,CAAC;QAC9C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAC;IAC9C,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC3B,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,wFAAwF;AACxF,MAAM,UAAU,WAAW,CAAC,GAAW,EAAQ;IAC9C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC;YACJ,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9G,CAAC;QAAC,MAAM,CAAC;YACR,mCAAmC;QACpC,CAAC;IACF,CAAC;SAAM,CAAC;QACP,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC5B,CAAC;AAAA,CACD","sourcesContent":["/**\n * Process-tree kill primitives.\n *\n * WHY: node's ChildProcess.killed flag is set the moment a signal is SENT, not when\n * the process dies — gating SIGKILL escalation on it (as the legacy exec path did)\n * makes escalation dead code, so a SIGTERM-trapping child survives forever. These\n * primitives escalate based on actual liveness probes instead.\n *\n * Group kill (-pid) requires the target to be a process-group leader (spawned with\n * detached: true). Both functions fall back to single-pid signaling otherwise.\n */\nimport { spawn } from \"node:child_process\";\n\nexport function isProcessAlive(pid: number): boolean {\n\ttry {\n\t\tprocess.kill(pid, 0);\n\t\treturn true;\n\t} catch (err) {\n\t\t// EPERM means it exists but we lack permission — still alive.\n\t\treturn (err as NodeJS.ErrnoException).code === \"EPERM\";\n\t}\n}\n\nfunction signalTree(pid: number, signal: NodeJS.Signals): boolean {\n\ttry {\n\t\tprocess.kill(-pid, signal);\n\t\treturn true;\n\t} catch {\n\t\ttry {\n\t\t\tprocess.kill(pid, signal);\n\t\t\treturn true;\n\t\t} catch {\n\t\t\treturn false;\n\t\t}\n\t}\n}\n\nexport interface KillTreeOptions {\n\t/** How long to wait for SIGTERM to work before SIGKILL. Default 5000ms. */\n\tgraceMs?: number;\n}\n\n/** Graceful tree kill: SIGTERM → poll liveness → SIGKILL. */\nexport async function killTree(pid: number, opts?: KillTreeOptions): Promise<\"already_dead\" | \"terminated\" | \"killed\"> {\n\tif (process.platform === \"win32\") {\n\t\tif (!isProcessAlive(pid)) return \"already_dead\";\n\t\tkillTreeNow(pid);\n\t\treturn \"killed\";\n\t}\n\tif (!isProcessAlive(pid)) return \"already_dead\";\n\tsignalTree(pid, \"SIGTERM\");\n\tconst graceMs = opts?.graceMs ?? 5000;\n\tconst deadline = Date.now() + graceMs;\n\twhile (Date.now() < deadline) {\n\t\tif (!isProcessAlive(pid)) return \"terminated\";\n\t\tawait new Promise((resolve) => setTimeout(resolve, Math.min(50, graceMs)));\n\t}\n\tif (!isProcessAlive(pid)) return \"terminated\";\n\tsignalTree(pid, \"SIGKILL\");\n\treturn \"killed\";\n}\n\n/** Immediate tree kill (SIGKILL / taskkill). Port of coding-agent's killProcessTree. */\nexport function killTreeNow(pid: number): void {\n\tif (process.platform === \"win32\") {\n\t\ttry {\n\t\t\tspawn(\"taskkill\", [\"/F\", \"/T\", \"/PID\", String(pid)], { stdio: \"ignore\", detached: true, windowsHide: true });\n\t\t} catch {\n\t\t\t// Ignore errors if taskkill fails.\n\t\t}\n\t} else {\n\t\tsignalTree(pid, \"SIGKILL\");\n\t}\n}\n"]}

package/dist/reliability/retry-controller.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Host-agnostic auto-retry driver.
+ *
+ * Owns the retry attempt counter and the abortable backoff for one agent run. It reads the
+ * failure verdict from {@link classifyFailure} (fed a host-computed context-overflow flag), so
+ * billing/auth are terminal and overflow routes to compaction — never to a pointless retry.
+ * The controller only ever touches `agent.state.messages` (it drops the trailing assistant error
+ * before retrying); durable history stays the host session's responsibility.
+ *
+ * Ported from AgentSession._prepareRetry / _isRetryableError so the exact event ordering and
+ * exhaustion semantics carry over: the retry window is marked active (isRetrying) before the
+ * start event fires, so prompts arriving inside start handlers queue as steering instead of
+ * racing the retry continuation.
+ */
+import { type AssistantMessage } from "@caupulican/pi-ai";
+import type { AgentMessage } from "../types.ts";
+import { type RetryPolicy } from "./retry.ts";
+/** The slice of an Agent the retry driver reads and mutates: just the live transcript. */
+export interface RetryAgent {
+    readonly state: {
+        messages: AgentMessage[];
+    };
+}
+export interface RetryStartInfo {
+    attempt: number;
+    maxAttempts: number;
+    delayMs: number;
+    errorMessage: string;
+}
+export interface RetryEndInfo {
+    success: boolean;
+    attempt: number;
+    finalError?: string;
+}
+export interface RetryEvents {
+    onRetryStart(info: RetryStartInfo): void;
+    onRetryEnd(info: RetryEndInfo): void;
+}
+/** Runtime retry policy: the backoff shape plus the on/off switch the host resolves per call. */
+export type RetryControllerPolicy = RetryPolicy & {
+    enabled: boolean;
+};
+export declare class RetryController {
+    private _attempt;
+    private _abortController;
+    private readonly agent;
+    private readonly getPolicy;
+    private readonly events;
+    private readonly getContextWindow;
+    constructor(agent: RetryAgent, getPolicy: () => RetryControllerPolicy, events: RetryEvents, getContextWindow: () => number);
+    /** Completed retry attempts for the current run (0 when not retrying). */
+    get attempt(): number;
+    /** True from the instant onRetryStart fires until the backoff sleep resolves or is aborted. */
+    get isRetrying(): boolean;
+    /** Clear the attempt counter — the host calls this after a successful turn or a final failure. */
+    reset(): void;
+    /** Cancel an in-progress backoff; the pending prepareRetry resolves false. */
+    abort(): void;
+    /**
+     * Classify `message`; if it is retryable and attempts remain, drop the trailing assistant
+     * error from agent state, emit the start event, and wait out the backoff (abortable).
+     * @returns true if the caller should continue the agent, false otherwise.
+     */
+    prepareRetry(message: AssistantMessage): Promise<boolean>;
+}
+//# sourceMappingURL=retry-controller.d.ts.map

package/dist/reliability/retry-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-controller.d.ts","sourceRoot":"","sources":["../../src/reliability/retry-controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,KAAK,gBAAgB,EAAqB,MAAM,mBAAmB,CAAC;AAC7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,EAAuB,KAAK,WAAW,EAAkB,MAAM,YAAY,CAAC;AAEnF,0FAA0F;AAC1F,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;KAAE,CAAC;CAC7C;AAED,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC3B,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAAC;IACzC,UAAU,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;CACrC;AAED,iGAAiG;AACjG,MAAM,MAAM,qBAAqB,GAAG,WAAW,GAAG;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAEvE,qBAAa,eAAe;IAC3B,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,gBAAgB,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8B;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAe;IAEhD,YACC,KAAK,EAAE,UAAU,EACjB,SAAS,EAAE,MAAM,qBAAqB,EACtC,MAAM,EAAE,WAAW,EACnB,gBAAgB,EAAE,MAAM,MAAM,EAM9B;IAED,0EAA0E;IAC1E,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,+FAA+F;IAC/F,IAAI,UAAU,IAAI,OAAO,CAExB;IAED,oGAAkG;IAClG,KAAK,IAAI,IAAI,CAEZ;IAED,8EAA8E;IAC9E,KAAK,IAAI,IAAI,CAEZ;IAED;;;;OAIG;IACG,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAwD9D;CACD","sourcesContent":["/**\n * Host-agnostic auto-retry driver.\n *\n * Owns the retry attempt counter and the abortable backoff for one agent run. It reads the\n * failure verdict from {@link classifyFailure} (fed a host-computed context-overflow flag), so\n * billing/auth are terminal and overflow routes to compaction — never to a pointless retry.\n * The controller only ever touches `agent.state.messages` (it drops the trailing assistant error\n * before retrying); durable history stays the host session's responsibility.\n *\n * Ported from AgentSession._prepareRetry / _isRetryableError so the exact event ordering and\n * exhaustion semantics carry over: the retry window is marked active (isRetrying) before the\n * start event fires, so prompts arriving inside start handlers queue as steering instead of\n * racing the retry continuation.\n */\n\nimport { type AssistantMessage, isContextOverflow } from \"@caupulican/pi-ai\";\nimport type { AgentMessage } from \"../types.ts\";\nimport { classifyFailure } from \"./classifier.ts\";\nimport { computeRetryDelayMs, type RetryPolicy, sleepAbortable } from \"./retry.ts\";\n\n/** The slice of an Agent the retry driver reads and mutates: just the live transcript. */\nexport interface RetryAgent {\n\treadonly state: { messages: AgentMessage[] };\n}\n\nexport interface RetryStartInfo {\n\tattempt: number;\n\tmaxAttempts: number;\n\tdelayMs: number;\n\terrorMessage: string;\n}\n\nexport interface RetryEndInfo {\n\tsuccess: boolean;\n\tattempt: number;\n\tfinalError?: string;\n}\n\nexport interface RetryEvents {\n\tonRetryStart(info: RetryStartInfo): void;\n\tonRetryEnd(info: RetryEndInfo): void;\n}\n\n/** Runtime retry policy: the backoff shape plus the on/off switch the host resolves per call. */\nexport type RetryControllerPolicy = RetryPolicy & { enabled: boolean };\n\nexport class RetryController {\n\tprivate _attempt = 0;\n\tprivate _abortController: AbortController | undefined;\n\tprivate readonly agent: RetryAgent;\n\tprivate readonly getPolicy: () => RetryControllerPolicy;\n\tprivate readonly events: RetryEvents;\n\tprivate readonly getContextWindow: () => number;\n\n\tconstructor(\n\t\tagent: RetryAgent,\n\t\tgetPolicy: () => RetryControllerPolicy,\n\t\tevents: RetryEvents,\n\t\tgetContextWindow: () => number,\n\t) {\n\t\tthis.agent = agent;\n\t\tthis.getPolicy = getPolicy;\n\t\tthis.events = events;\n\t\tthis.getContextWindow = getContextWindow;\n\t}\n\n\t/** Completed retry attempts for the current run (0 when not retrying). */\n\tget attempt(): number {\n\t\treturn this._attempt;\n\t}\n\n\t/** True from the instant onRetryStart fires until the backoff sleep resolves or is aborted. */\n\tget isRetrying(): boolean {\n\t\treturn this._abortController !== undefined;\n\t}\n\n\t/** Clear the attempt counter — the host calls this after a successful turn or a final failure. */\n\treset(): void {\n\t\tthis._attempt = 0;\n\t}\n\n\t/** Cancel an in-progress backoff; the pending prepareRetry resolves false. */\n\tabort(): void {\n\t\tthis._abortController?.abort();\n\t}\n\n\t/**\n\t * Classify `message`; if it is retryable and attempts remain, drop the trailing assistant\n\t * error from agent state, emit the start event, and wait out the backoff (abortable).\n\t * @returns true if the caller should continue the agent, false otherwise.\n\t */\n\tasync prepareRetry(message: AssistantMessage): Promise<boolean> {\n\t\tconst policy = this.getPolicy();\n\t\tif (!policy.enabled) {\n\t\t\treturn false;\n\t\t}\n\n\t\t// The classifier is the single source of the retry verdict: context overflow (host-computed\n\t\t// from the live window) routes to compaction, billing/auth are terminal, transient failures retry.\n\t\tconst classified = classifyFailure({\n\t\t\tmessage: message.errorMessage ?? \"\",\n\t\t\tcontextOverflow: isContextOverflow(message, this.getContextWindow()),\n\t\t});\n\t\tif (!classified.retryable) {\n\t\t\treturn false;\n\t\t}\n\n\t\tthis._attempt++;\n\t\tif (this._attempt > policy.maxAttempts) {\n\t\t\t// Preserve the completed attempt count so the host can emit the final failure.\n\t\t\tthis._attempt--;\n\t\t\treturn false;\n\t\t}\n\n\t\tconst delayMs = computeRetryDelayMs(policy, this._attempt);\n\n\t\t// The retry window counts as active work from the instant listeners hear about it:\n\t\t// isRetrying must already be true inside onRetryStart handlers so prompts arriving there\n\t\t// queue as steering instead of racing the retry continuation.\n\t\tthis._abortController = new AbortController();\n\n\t\tthis.events.onRetryStart({\n\t\t\tattempt: this._attempt,\n\t\t\tmaxAttempts: policy.maxAttempts,\n\t\t\tdelayMs,\n\t\t\terrorMessage: message.errorMessage || \"Unknown error\",\n\t\t});\n\n\t\t// Remove the trailing assistant error from live agent state (the host session keeps it in history).\n\t\tconst messages = this.agent.state.messages;\n\t\tif (messages.length > 0 && messages[messages.length - 1].role === \"assistant\") {\n\t\t\tthis.agent.state.messages = messages.slice(0, -1);\n\t\t}\n\n\t\ttry {\n\t\t\tawait sleepAbortable(delayMs, this._abortController.signal);\n\t\t} catch {\n\t\t\t// Aborted mid-backoff: report the cancellation and reset so the next turn starts clean.\n\t\t\tconst attempt = this._attempt;\n\t\t\tthis._attempt = 0;\n\t\t\tthis.events.onRetryEnd({ success: false, attempt, finalError: \"Retry cancelled\" });\n\t\t\treturn false;\n\t\t} finally {\n\t\t\tthis._abortController = undefined;\n\t\t}\n\n\t\treturn true;\n\t}\n}\n"]}

package/dist/reliability/retry-controller.js

@@ -0,0 +1,104 @@
+/**
+ * Host-agnostic auto-retry driver.
+ *
+ * Owns the retry attempt counter and the abortable backoff for one agent run. It reads the
+ * failure verdict from {@link classifyFailure} (fed a host-computed context-overflow flag), so
+ * billing/auth are terminal and overflow routes to compaction — never to a pointless retry.
+ * The controller only ever touches `agent.state.messages` (it drops the trailing assistant error
+ * before retrying); durable history stays the host session's responsibility.
+ *
+ * Ported from AgentSession._prepareRetry / _isRetryableError so the exact event ordering and
+ * exhaustion semantics carry over: the retry window is marked active (isRetrying) before the
+ * start event fires, so prompts arriving inside start handlers queue as steering instead of
+ * racing the retry continuation.
+ */
+import { isContextOverflow } from "@caupulican/pi-ai";
+import { classifyFailure } from "./classifier.js";
+import { computeRetryDelayMs, sleepAbortable } from "./retry.js";
+export class RetryController {
+    _attempt = 0;
+    _abortController;
+    agent;
+    getPolicy;
+    events;
+    getContextWindow;
+    constructor(agent, getPolicy, events, getContextWindow) {
+        this.agent = agent;
+        this.getPolicy = getPolicy;
+        this.events = events;
+        this.getContextWindow = getContextWindow;
+    }
+    /** Completed retry attempts for the current run (0 when not retrying). */
+    get attempt() {
+        return this._attempt;
+    }
+    /** True from the instant onRetryStart fires until the backoff sleep resolves or is aborted. */
+    get isRetrying() {
+        return this._abortController !== undefined;
+    }
+    /** Clear the attempt counter — the host calls this after a successful turn or a final failure. */
+    reset() {
+        this._attempt = 0;
+    }
+    /** Cancel an in-progress backoff; the pending prepareRetry resolves false. */
+    abort() {
+        this._abortController?.abort();
+    }
+    /**
+     * Classify `message`; if it is retryable and attempts remain, drop the trailing assistant
+     * error from agent state, emit the start event, and wait out the backoff (abortable).
+     * @returns true if the caller should continue the agent, false otherwise.
+     */
+    async prepareRetry(message) {
+        const policy = this.getPolicy();
+        if (!policy.enabled) {
+            return false;
+        }
+        // The classifier is the single source of the retry verdict: context overflow (host-computed
+        // from the live window) routes to compaction, billing/auth are terminal, transient failures retry.
+        const classified = classifyFailure({
+            message: message.errorMessage ?? "",
+            contextOverflow: isContextOverflow(message, this.getContextWindow()),
+        });
+        if (!classified.retryable) {
+            return false;
+        }
+        this._attempt++;
+        if (this._attempt > policy.maxAttempts) {
+            // Preserve the completed attempt count so the host can emit the final failure.
+            this._attempt--;
+            return false;
+        }
+        const delayMs = computeRetryDelayMs(policy, this._attempt);
+        // The retry window counts as active work from the instant listeners hear about it:
+        // isRetrying must already be true inside onRetryStart handlers so prompts arriving there
+        // queue as steering instead of racing the retry continuation.
+        this._abortController = new AbortController();
+        this.events.onRetryStart({
+            attempt: this._attempt,
+            maxAttempts: policy.maxAttempts,
+            delayMs,
+            errorMessage: message.errorMessage || "Unknown error",
+        });
+        // Remove the trailing assistant error from live agent state (the host session keeps it in history).
+        const messages = this.agent.state.messages;
+        if (messages.length > 0 && messages[messages.length - 1].role === "assistant") {
+            this.agent.state.messages = messages.slice(0, -1);
+        }
+        try {
+            await sleepAbortable(delayMs, this._abortController.signal);
+        }
+        catch {
+            // Aborted mid-backoff: report the cancellation and reset so the next turn starts clean.
+            const attempt = this._attempt;
+            this._attempt = 0;
+            this.events.onRetryEnd({ success: false, attempt, finalError: "Retry cancelled" });
+            return false;
+        }
+        finally {
+            this._abortController = undefined;
+        }
+        return true;
+    }
+}
+//# sourceMappingURL=retry-controller.js.map

package/dist/reliability/retry-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-controller.js","sourceRoot":"","sources":["../../src/reliability/retry-controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAyB,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE7E,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAoB,cAAc,EAAE,MAAM,YAAY,CAAC;AA4BnF,MAAM,OAAO,eAAe;IACnB,QAAQ,GAAG,CAAC,CAAC;IACb,gBAAgB,CAA8B;IACrC,KAAK,CAAa;IAClB,SAAS,CAA8B;IACvC,MAAM,CAAc;IACpB,gBAAgB,CAAe;IAEhD,YACC,KAAiB,EACjB,SAAsC,EACtC,MAAmB,EACnB,gBAA8B,EAC7B;QACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAAA,CACzC;IAED,0EAA0E;IAC1E,IAAI,OAAO,GAAW;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC;IAAA,CACrB;IAED,+FAA+F;IAC/F,IAAI,UAAU,GAAY;QACzB,OAAO,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC;IAAA,CAC3C;IAED,oGAAkG;IAClG,KAAK,GAAS;QACb,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;IAAA,CAClB;IAED,8EAA8E;IAC9E,KAAK,GAAS;QACb,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC;IAAA,CAC/B;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,OAAyB,EAAoB;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACd,CAAC;QAED,4FAA4F;QAC5F,mGAAmG;QACnG,MAAM,UAAU,GAAG,eAAe,CAAC;YAClC,OAAO,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE;YACnC,eAAe,EAAE,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;SACpE,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YACxC,+EAA+E;YAC/E,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE3D,mFAAmF;QACnF,yFAAyF;QACzF,8DAA8D;QAC9D,IAAI,CAAC,gBAAgB,GAAG,IAAI,eAAe,EAAE,CAAC;QAE9C,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YACxB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,OAAO;YACP,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,eAAe;SACrD,CAAC,CAAC;QAEH,oGAAoG;QACpG,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC3C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/E,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACR,wFAAwF;YACxF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC9B,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACnF,OAAO,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;QACnC,CAAC;QAED,OAAO,IAAI,CAAC;IAAA,CACZ;CACD","sourcesContent":["/**\n * Host-agnostic auto-retry driver.\n *\n * Owns the retry attempt counter and the abortable backoff for one agent run. It reads the\n * failure verdict from {@link classifyFailure} (fed a host-computed context-overflow flag), so\n * billing/auth are terminal and overflow routes to compaction — never to a pointless retry.\n * The controller only ever touches `agent.state.messages` (it drops the trailing assistant error\n * before retrying); durable history stays the host session's responsibility.\n *\n * Ported from AgentSession._prepareRetry / _isRetryableError so the exact event ordering and\n * exhaustion semantics carry over: the retry window is marked active (isRetrying) before the\n * start event fires, so prompts arriving inside start handlers queue as steering instead of\n * racing the retry continuation.\n */\n\nimport { type AssistantMessage, isContextOverflow } from \"@caupulican/pi-ai\";\nimport type { AgentMessage } from \"../types.ts\";\nimport { classifyFailure } from \"./classifier.ts\";\nimport { computeRetryDelayMs, type RetryPolicy, sleepAbortable } from \"./retry.ts\";\n\n/** The slice of an Agent the retry driver reads and mutates: just the live transcript. */\nexport interface RetryAgent {\n\treadonly state: { messages: AgentMessage[] };\n}\n\nexport interface RetryStartInfo {\n\tattempt: number;\n\tmaxAttempts: number;\n\tdelayMs: number;\n\terrorMessage: string;\n}\n\nexport interface RetryEndInfo {\n\tsuccess: boolean;\n\tattempt: number;\n\tfinalError?: string;\n}\n\nexport interface RetryEvents {\n\tonRetryStart(info: RetryStartInfo): void;\n\tonRetryEnd(info: RetryEndInfo): void;\n}\n\n/** Runtime retry policy: the backoff shape plus the on/off switch the host resolves per call. */\nexport type RetryControllerPolicy = RetryPolicy & { enabled: boolean };\n\nexport class RetryController {\n\tprivate _attempt = 0;\n\tprivate _abortController: AbortController | undefined;\n\tprivate readonly agent: RetryAgent;\n\tprivate readonly getPolicy: () => RetryControllerPolicy;\n\tprivate readonly events: RetryEvents;\n\tprivate readonly getContextWindow: () => number;\n\n\tconstructor(\n\t\tagent: RetryAgent,\n\t\tgetPolicy: () => RetryControllerPolicy,\n\t\tevents: RetryEvents,\n\t\tgetContextWindow: () => number,\n\t) {\n\t\tthis.agent = agent;\n\t\tthis.getPolicy = getPolicy;\n\t\tthis.events = events;\n\t\tthis.getContextWindow = getContextWindow;\n\t}\n\n\t/** Completed retry attempts for the current run (0 when not retrying). */\n\tget attempt(): number {\n\t\treturn this._attempt;\n\t}\n\n\t/** True from the instant onRetryStart fires until the backoff sleep resolves or is aborted. */\n\tget isRetrying(): boolean {\n\t\treturn this._abortController !== undefined;\n\t}\n\n\t/** Clear the attempt counter — the host calls this after a successful turn or a final failure. */\n\treset(): void {\n\t\tthis._attempt = 0;\n\t}\n\n\t/** Cancel an in-progress backoff; the pending prepareRetry resolves false. */\n\tabort(): void {\n\t\tthis._abortController?.abort();\n\t}\n\n\t/**\n\t * Classify `message`; if it is retryable and attempts remain, drop the trailing assistant\n\t * error from agent state, emit the start event, and wait out the backoff (abortable).\n\t * @returns true if the caller should continue the agent, false otherwise.\n\t */\n\tasync prepareRetry(message: AssistantMessage): Promise<boolean> {\n\t\tconst policy = this.getPolicy();\n\t\tif (!policy.enabled) {\n\t\t\treturn false;\n\t\t}\n\n\t\t// The classifier is the single source of the retry verdict: context overflow (host-computed\n\t\t// from the live window) routes to compaction, billing/auth are terminal, transient failures retry.\n\t\tconst classified = classifyFailure({\n\t\t\tmessage: message.errorMessage ?? \"\",\n\t\t\tcontextOverflow: isContextOverflow(message, this.getContextWindow()),\n\t\t});\n\t\tif (!classified.retryable) {\n\t\t\treturn false;\n\t\t}\n\n\t\tthis._attempt++;\n\t\tif (this._attempt > policy.maxAttempts) {\n\t\t\t// Preserve the completed attempt count so the host can emit the final failure.\n\t\t\tthis._attempt--;\n\t\t\treturn false;\n\t\t}\n\n\t\tconst delayMs = computeRetryDelayMs(policy, this._attempt);\n\n\t\t// The retry window counts as active work from the instant listeners hear about it:\n\t\t// isRetrying must already be true inside onRetryStart handlers so prompts arriving there\n\t\t// queue as steering instead of racing the retry continuation.\n\t\tthis._abortController = new AbortController();\n\n\t\tthis.events.onRetryStart({\n\t\t\tattempt: this._attempt,\n\t\t\tmaxAttempts: policy.maxAttempts,\n\t\t\tdelayMs,\n\t\t\terrorMessage: message.errorMessage || \"Unknown error\",\n\t\t});\n\n\t\t// Remove the trailing assistant error from live agent state (the host session keeps it in history).\n\t\tconst messages = this.agent.state.messages;\n\t\tif (messages.length > 0 && messages[messages.length - 1].role === \"assistant\") {\n\t\t\tthis.agent.state.messages = messages.slice(0, -1);\n\t\t}\n\n\t\ttry {\n\t\t\tawait sleepAbortable(delayMs, this._abortController.signal);\n\t\t} catch {\n\t\t\t// Aborted mid-backoff: report the cancellation and reset so the next turn starts clean.\n\t\t\tconst attempt = this._attempt;\n\t\t\tthis._attempt = 0;\n\t\t\tthis.events.onRetryEnd({ success: false, attempt, finalError: \"Retry cancelled\" });\n\t\t\treturn false;\n\t\t} finally {\n\t\t\tthis._abortController = undefined;\n\t\t}\n\n\t\treturn true;\n\t}\n}\n"]}

package/dist/reliability/retry.d.ts

@@ -0,0 +1,19 @@
+/** Retry backoff policy. jitterRatio 0 reproduces legacy fixed 2s/4s/8s behavior. */
+export interface RetryPolicy {
+    maxAttempts: number;
+    baseDelayMs: number;
+    maxDelayMs: number;
+    /** Fraction of the computed delay added as uniform random jitter (0..1). */
+    jitterRatio: number;
+}
+export declare const DEFAULT_RETRY_POLICY: RetryPolicy;
+export interface ComputeRetryDelayOptions {
+    /** Provider-suggested delay (e.g. from Retry-After); wins over backoff but is capped. */
+    retryAfterMs?: number;
+    /** Injectable RNG for deterministic tests. Defaults to Math.random. */
+    random?: () => number;
+}
+export declare function computeRetryDelayMs(policy: RetryPolicy, attempt: number, opts?: ComputeRetryDelayOptions): number;
+/** Abortable sleep: resolves after ms, rejects with the abort reason if the signal fires. */
+export declare function sleepAbortable(ms: number, signal?: AbortSignal): Promise<void>;
+//# sourceMappingURL=retry.d.ts.map

package/dist/reliability/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../src/reliability/retry.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,MAAM,WAAW,WAAW;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,oBAAoB,EAAE,WAKlC,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACxC,yFAAyF;IACzF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,wBAAwB,GAAG,MAAM,CAQjH;AAED,6FAA6F;AAC7F,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB9E","sourcesContent":["/** Retry backoff policy. jitterRatio 0 reproduces legacy fixed 2s/4s/8s behavior. */\nexport interface RetryPolicy {\n\tmaxAttempts: number;\n\tbaseDelayMs: number;\n\tmaxDelayMs: number;\n\t/** Fraction of the computed delay added as uniform random jitter (0..1). */\n\tjitterRatio: number;\n}\n\nexport const DEFAULT_RETRY_POLICY: RetryPolicy = {\n\tmaxAttempts: 3,\n\tbaseDelayMs: 2000,\n\tmaxDelayMs: 120_000,\n\tjitterRatio: 0,\n};\n\nexport interface ComputeRetryDelayOptions {\n\t/** Provider-suggested delay (e.g. from Retry-After); wins over backoff but is capped. */\n\tretryAfterMs?: number;\n\t/** Injectable RNG for deterministic tests. Defaults to Math.random. */\n\trandom?: () => number;\n}\n\nexport function computeRetryDelayMs(policy: RetryPolicy, attempt: number, opts?: ComputeRetryDelayOptions): number {\n\tif (opts?.retryAfterMs !== undefined) {\n\t\treturn Math.min(opts.retryAfterMs, policy.maxDelayMs);\n\t}\n\tconst exponential = Math.min(policy.baseDelayMs * 2 ** (Math.max(1, attempt) - 1), policy.maxDelayMs);\n\tif (policy.jitterRatio <= 0) return exponential;\n\tconst random = opts?.random ?? Math.random;\n\treturn Math.round(exponential + policy.jitterRatio * exponential * random());\n}\n\n/** Abortable sleep: resolves after ms, rejects with the abort reason if the signal fires. */\nexport function sleepAbortable(ms: number, signal?: AbortSignal): Promise<void> {\n\treturn new Promise((resolve, reject) => {\n\t\tif (signal?.aborted) {\n\t\t\treject(signal.reason instanceof Error ? signal.reason : new Error(\"Aborted\"));\n\t\t\treturn;\n\t\t}\n\t\tconst timer = setTimeout(() => {\n\t\t\tsignal?.removeEventListener(\"abort\", onAbort);\n\t\t\tresolve();\n\t\t}, ms);\n\t\tconst onAbort = () => {\n\t\t\tclearTimeout(timer);\n\t\t\treject(signal?.reason instanceof Error ? signal.reason : new Error(\"Aborted\"));\n\t\t};\n\t\tsignal?.addEventListener(\"abort\", onAbort, { once: true });\n\t});\n}\n"]}

package/dist/reliability/retry.js

@@ -0,0 +1,35 @@
+export const DEFAULT_RETRY_POLICY = {
+    maxAttempts: 3,
+    baseDelayMs: 2000,
+    maxDelayMs: 120_000,
+    jitterRatio: 0,
+};
+export function computeRetryDelayMs(policy, attempt, opts) {
+    if (opts?.retryAfterMs !== undefined) {
+        return Math.min(opts.retryAfterMs, policy.maxDelayMs);
+    }
+    const exponential = Math.min(policy.baseDelayMs * 2 ** (Math.max(1, attempt) - 1), policy.maxDelayMs);
+    if (policy.jitterRatio <= 0)
+        return exponential;
+    const random = opts?.random ?? Math.random;
+    return Math.round(exponential + policy.jitterRatio * exponential * random());
+}
+/** Abortable sleep: resolves after ms, rejects with the abort reason if the signal fires. */
+export function sleepAbortable(ms, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal?.aborted) {
+            reject(signal.reason instanceof Error ? signal.reason : new Error("Aborted"));
+            return;
+        }
+        const timer = setTimeout(() => {
+            signal?.removeEventListener("abort", onAbort);
+            resolve();
+        }, ms);
+        const onAbort = () => {
+            clearTimeout(timer);
+            reject(signal?.reason instanceof Error ? signal.reason : new Error("Aborted"));
+        };
+        signal?.addEventListener("abort", onAbort, { once: true });
+    });
+}
+//# sourceMappingURL=retry.js.map

package/dist/reliability/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../src/reliability/retry.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAChD,WAAW,EAAE,CAAC;IACd,WAAW,EAAE,IAAI;IACjB,UAAU,EAAE,OAAO;IACnB,WAAW,EAAE,CAAC;CACd,CAAC;AASF,MAAM,UAAU,mBAAmB,CAAC,MAAmB,EAAE,OAAe,EAAE,IAA+B,EAAU;IAClH,IAAI,IAAI,EAAE,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACtG,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,GAAG,WAAW,GAAG,MAAM,EAAE,CAAC,CAAC;AAAA,CAC7E;AAED,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,MAAoB,EAAiB;IAC/E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;QACvC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACrB,MAAM,CAAC,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9E,OAAO;QACR,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YAC9B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QAAA,CACV,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;YACrB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,MAAM,EAAE,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAAA,CAC/E,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAAA,CAC3D,CAAC,CAAC;AAAA,CACH","sourcesContent":["/** Retry backoff policy. jitterRatio 0 reproduces legacy fixed 2s/4s/8s behavior. */\nexport interface RetryPolicy {\n\tmaxAttempts: number;\n\tbaseDelayMs: number;\n\tmaxDelayMs: number;\n\t/** Fraction of the computed delay added as uniform random jitter (0..1). */\n\tjitterRatio: number;\n}\n\nexport const DEFAULT_RETRY_POLICY: RetryPolicy = {\n\tmaxAttempts: 3,\n\tbaseDelayMs: 2000,\n\tmaxDelayMs: 120_000,\n\tjitterRatio: 0,\n};\n\nexport interface ComputeRetryDelayOptions {\n\t/** Provider-suggested delay (e.g. from Retry-After); wins over backoff but is capped. */\n\tretryAfterMs?: number;\n\t/** Injectable RNG for deterministic tests. Defaults to Math.random. */\n\trandom?: () => number;\n}\n\nexport function computeRetryDelayMs(policy: RetryPolicy, attempt: number, opts?: ComputeRetryDelayOptions): number {\n\tif (opts?.retryAfterMs !== undefined) {\n\t\treturn Math.min(opts.retryAfterMs, policy.maxDelayMs);\n\t}\n\tconst exponential = Math.min(policy.baseDelayMs * 2 ** (Math.max(1, attempt) - 1), policy.maxDelayMs);\n\tif (policy.jitterRatio <= 0) return exponential;\n\tconst random = opts?.random ?? Math.random;\n\treturn Math.round(exponential + policy.jitterRatio * exponential * random());\n}\n\n/** Abortable sleep: resolves after ms, rejects with the abort reason if the signal fires. */\nexport function sleepAbortable(ms: number, signal?: AbortSignal): Promise<void> {\n\treturn new Promise((resolve, reject) => {\n\t\tif (signal?.aborted) {\n\t\t\treject(signal.reason instanceof Error ? signal.reason : new Error(\"Aborted\"));\n\t\t\treturn;\n\t\t}\n\t\tconst timer = setTimeout(() => {\n\t\t\tsignal?.removeEventListener(\"abort\", onAbort);\n\t\t\tresolve();\n\t\t}, ms);\n\t\tconst onAbort = () => {\n\t\t\tclearTimeout(timer);\n\t\t\treject(signal?.reason instanceof Error ? signal.reason : new Error(\"Aborted\"));\n\t\t};\n\t\tsignal?.addEventListener(\"abort\", onAbort, { once: true });\n\t});\n}\n"]}