@code-yeongyu/senpi 2026.9.9 → 2026.9.10

package/dist/core/credential-pool/rotation-stream.js.map

@@ -1 +1 @@
-{"version":3,"file":"rotation-stream.js","sourceRoot":"","sources":["../../../src/core/credential-pool/rotation-stream.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,eAAe,EAAmB,MAAM,wCAAwC,CAAC;AAC1F,OAAO,EAAE,SAAS,IAAI,mBAAmB,EAAyB,MAAM,uCAAuC,CAAC;AAChH,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAwB,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAgB,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAA2D,MAAM,kBAAkB,CAAC;AAEjH,sFAAsF;AACtF,MAAM,CAAC,MAAM,gBAAgB,GAAe,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;AAyBtH,SAAS,YAAY,CAAC,IAAkB,EAAE,KAAsC;IAC/E,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO;QACN,GAAG,IAAI;QACP,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC9E,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;KAC5D,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,OAAwB,EACxB,UAAuC,EAAE;IAEzC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC;IACtD,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE;QACvF,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,IAAI,eAAe,IAAI,EAAE,CAAC;QACpD,MAAM,GAAG,GACR,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChH,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAmB,EAAE,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IACC,aAAa;gBACb,OAAO,EAAE,YAAY,KAAK,SAAS;gBACnC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAClD,CAAC;gBACF,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;oBACrF,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;iBAChC,CAAC,CAAC;gBACH,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACrB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBAChE,KAAK,CAAC,IAAI,CACT,YAAY,CACX;oBACC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAG,UAA+B,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI;iBAC7D,EACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CACjB,CACD,CAAC;gBACF,SAAS;YACV,CAAC;YACD,KAAK,CAAC,IAAI,CACT,YAAY,CACX;gBACC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAG,UAA+B,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI;aAC7D,EACD,OAAO,CACP,CACD,CAAC;QACH,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,YAAY,GAAoB;YACrC,GAAG,OAAO;YACV,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;SACxC,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,YAAY,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QACxF,OAAO,CAAC,GAAG,KAAK,EAAE,GAAG,UAAU,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC;IACxE,OAAO,oBAAoB,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,oBAAoB,CAClC,OAAwB,EACxB,QAAsE,EACtE,aAAa,GAAG,IAAI;IAEpB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACnF,IAAI,UAAU,GAAG,SAAS,EAAE,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACpF,IACC,aAAa;YACb,UAAU,EAAE,YAAY,KAAK,SAAS;YACtC,UAAU,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EACrD,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;gBAClF,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;aAChC,CAAC,CAAC;YACH,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC7D,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,IAAI,CACT,YAAY,CACX;YACC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,IAAI,CAAC,GAAG;YAChB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC3B,EACD,UAAU,CACV,CACD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAClB,KAAsB,EACtB,OAAwC,EACxC,GAAW,EACX,kBAA2B,EAC3B,MAA4D;IAE5D,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG;QACZ,YAAY;QACZ,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;KACzF,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO;YACN,GAAG,IAAI;YACP,YAAY,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC;YACzF,WAAW,EAAE,YAAY;SACzB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AAC/C,CAAC;AAYD,SAAS,cAAc,CAAC,KAA4B;IACnD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,IAAI,uBAAuB,CAAC;IACpE,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC3C,OAAkC;IAElC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAC;IAClD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,UAAU,EAAE,CAAC;IACxD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,KAAK,KAAK,CAAC;IACvD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAEpC,OAAO,qBAAqB,CAAsC;QACjE,SAAS,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC;QAC3C,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE;YACtB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;YACzE,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YAC1B,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;YAE5F,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YACzF,OAAO,MAAM,CAAC;QACf,CAAC;QACD,UAAU;QACV,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO;QACpD,cAAc;QACd,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAC5B,yBAAyB,CAAC,KAAK,EAAE;YAChC,GAAG,OAAO;YACV,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc;YAC9C,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa;SAC5C,CAAC;QACH,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACzB,MAAM,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAC9F,OAAO;gBACN,CAAC,CAAC;oBACA,GAAG,OAAO;oBACV,aAAa,EAAE,GAAG,EAAE;oBACpB,KAAK,EAAE,SAAS;oBAChB,YAAY,EAAE,SAAS;oBACvB,WAAW,EAAE,SAAS;iBACtB;gBACF,CAAC,CAAC,SAAS,CACZ,CAAC;QACH,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;YACnC,MAAM,QAAQ,GACb,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAChF,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;gBAC9E,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAC9F,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAC3D,CAAC;QACH,CAAC;QACD,GAAG;KACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport type { AssistantMessageEvent, Credential } from \"@earendil-works/pi-ai\";\nimport { rendezvousOrder, type SlotHasher } from \"@earendil-works/pi-ai/auth/pool/select\";\nimport { listSlots as listCredentialSlots, type PooledCredential } from \"@earendil-works/pi-ai/auth/pool/slots\";\nimport { resolveConfigValue } from \"../resolve-config-value.ts\";\nimport { type CredentialBlock, classifyCredentialFailure } from \"./classify.ts\";\nimport { discoverEnvSlots } from \"./env-slots.ts\";\nimport { type RunSlot, runCredentialFailover } from \"./failover.ts\";\nimport { acquireHalfOpenLease, type CredentialSlotRepository, type CredentialSlotState } from \"./state-store.ts\";\n\n/** The exact hash the claude-sdk-oauth affinity oracle uses, so pools never remap. */\nexport const sha256SlotHasher: SlotHasher = (input) => createHash(\"sha256\").update(input).digest().readBigUInt64BE(0);\n\nexport type RotationLane = \"stored\" | \"env\";\n\nexport type RotationSlot = RunSlot & {\n\tlane: RotationLane;\n\t/** Env-lane key material for the attempt; never serialized or persisted. */\n\tenvKey?: string;\n\tenvVarName?: string;\n};\n\nexport type RotationSources = {\n\tproviderId: string;\n\tcredential: Credential | undefined;\n\tenv: (name: string) => string | undefined;\n\trepository: CredentialSlotRepository;\n\tpolicy?: {\n\t\taffinity?: boolean;\n\t\tcooldownBaseMs?: number;\n\t\tcooldownCapMs?: number;\n\t\tslots?: Record<string, { env?: string; value?: string }>;\n\t};\n\tnow?: () => number;\n};\n\nfunction overlayState(slot: RotationSlot, state: CredentialSlotState | undefined): RotationSlot {\n\tif (!state) return slot;\n\treturn {\n\t\t...slot,\n\t\t...(state.blockedUntil === undefined ? {} : { blockedUntil: state.blockedUntil }),\n\t\t...(state.blockReason === undefined ? {} : { blockReason: state.blockReason }),\n\t\t...(state.failureCount === undefined ? {} : { failureCount: state.failureCount }),\n\t\t...(state.lease === undefined ? {} : { lease: state.lease }),\n\t};\n}\n\n/**\n * Lists the provider's rotation slots with sidecar health overlaid. Stored\n * credentials own the lane when present; env slots participate only when\n * nothing is stored, preserving today's resolution precedence. An env slot's\n * persisted health applies only while its HMAC revision still matches the\n * current env value, so rotating a key in place clears its own stale block.\n */\nexport async function listRotationSlots(\n\tsources: RotationSources,\n\toptions: { acquireLeases?: boolean } = {},\n): Promise<RotationSlot[]> {\n\tconst acquireLeases = options.acquireLeases !== false;\n\tconst { providerId, credential, env, repository } = sources;\n\tconst policySlots = Object.entries(sources.policy?.slots ?? {}).flatMap(([name, ref]) => {\n\t\tconst envVarName = ref.env ?? `models.json:${name}`;\n\t\tconst key =\n\t\t\tref.env !== undefined ? env(ref.env) : ref.value !== undefined ? resolveConfigValue(ref.value, {}) : undefined;\n\t\tif (!key) return [];\n\t\treturn [{ name, envVarName, key, source: \"env\" as const }];\n\t});\n\tif (credential) {\n\t\tconst state = await repository.listSlots(providerId, \"stored\");\n\t\tconst slots: RotationSlot[] = [];\n\t\tfor (const slot of listCredentialSlots(credential)) {\n\t\t\tconst current = state[slot.name];\n\t\t\tif (\n\t\t\t\tacquireLeases &&\n\t\t\t\tcurrent?.blockedUntil !== undefined &&\n\t\t\t\tcurrent.blockedUntil <= (sources.now ?? Date.now)()\n\t\t\t) {\n\t\t\t\tconst lease = await acquireHalfOpenLease(repository, providerId, \"stored\", slot.name, {\n\t\t\t\t\tnow: (sources.now ?? Date.now)(),\n\t\t\t\t});\n\t\t\t\tif (!lease) continue;\n\t\t\t\tconst leased = await repository.listSlots(providerId, \"stored\");\n\t\t\t\tslots.push(\n\t\t\t\t\toverlayState(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tname: slot.name,\n\t\t\t\t\t\t\tlane: \"stored\",\n\t\t\t\t\t\t\tpinned: (credential as PooledCredential).pinned === slot.name,\n\t\t\t\t\t\t},\n\t\t\t\t\t\tleased[slot.name],\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tslots.push(\n\t\t\t\toverlayState(\n\t\t\t\t\t{\n\t\t\t\t\t\tname: slot.name,\n\t\t\t\t\t\tlane: \"stored\",\n\t\t\t\t\t\tpinned: (credential as PooledCredential).pinned === slot.name,\n\t\t\t\t\t},\n\t\t\t\t\tcurrent,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tif (policySlots.length === 0) return slots;\n\t\tconst namedSources: RotationSources = {\n\t\t\t...sources,\n\t\t\tcredential: undefined,\n\t\t\tpolicy: { ...sources.policy, slots: {} },\n\t\t};\n\t\tconst namedSlots = await listEnvRotationSlots(namedSources, policySlots, acquireLeases);\n\t\treturn [...slots, ...namedSlots];\n\t}\n\tconst envSlots = [...discoverEnvSlots(providerId, env), ...policySlots];\n\treturn listEnvRotationSlots(sources, envSlots, acquireLeases);\n}\n\nasync function listEnvRotationSlots(\n\tsources: RotationSources,\n\tenvSlots: readonly { name: string; envVarName: string; key: string }[],\n\tacquireLeases = true,\n): Promise<RotationSlot[]> {\n\tif (envSlots.length === 0) return [];\n\tconst { providerId, repository } = sources;\n\tconst state = await repository.listSlots(providerId, \"env\");\n\tconst slots: RotationSlot[] = [];\n\tfor (const slot of envSlots) {\n\t\tconst persisted = state[slot.name];\n\t\tconst revision = await repository.envCredentialRevision(slot.envVarName, slot.key);\n\t\tlet applicable = persisted?.credentialRevision === revision ? persisted : undefined;\n\t\tif (\n\t\t\tacquireLeases &&\n\t\t\tapplicable?.blockedUntil !== undefined &&\n\t\t\tapplicable.blockedUntil <= (sources.now ?? Date.now)()\n\t\t) {\n\t\t\tconst lease = await acquireHalfOpenLease(repository, providerId, \"env\", slot.name, {\n\t\t\t\tnow: (sources.now ?? Date.now)(),\n\t\t\t});\n\t\t\tif (!lease) continue;\n\t\t\tconst leased = await repository.listSlots(providerId, \"env\");\n\t\t\tapplicable = leased[slot.name];\n\t\t}\n\t\tslots.push(\n\t\t\toverlayState(\n\t\t\t\t{\n\t\t\t\t\tname: slot.name,\n\t\t\t\t\tlane: \"env\",\n\t\t\t\t\tenvKey: slot.key,\n\t\t\t\t\tenvVarName: slot.envVarName,\n\t\t\t\t},\n\t\t\t\tapplicable,\n\t\t\t),\n\t\t);\n\t}\n\treturn slots;\n}\n\nfunction blockPatch(\n\tblock: CredentialBlock,\n\tcurrent: CredentialSlotState | undefined,\n\tnow: number,\n\tcredentialRevision?: string,\n\tpolicy?: { cooldownBaseMs?: number; cooldownCapMs?: number },\n): Omit<CredentialSlotState, \"stateVersion\"> {\n\tconst failureCount = (current?.failureCount ?? 0) + 1;\n\tconst base = {\n\t\tfailureCount,\n\t\t...(credentialRevision === undefined ? {} : { credentialRevision }),\n\t\t...(current?.lastSuccessAt === undefined ? {} : { lastSuccessAt: current.lastSuccessAt }),\n\t};\n\tif (block.reason === \"rate_limit\") {\n\t\treturn {\n\t\t\t...base,\n\t\t\tblockedUntil: now + Math.min(policy?.cooldownCapMs ?? block.cooldownMs, block.cooldownMs),\n\t\t\tblockReason: \"rate_limit\",\n\t\t};\n\t}\n\treturn { ...base, blockReason: block.reason };\n}\n\nexport type CredentialRotationOptions = {\n\tsources: RotationSources;\n\t/** Stable session key keeps a session on its slot; absent, each request distributes. */\n\taffinityKey?: string;\n\thasher?: SlotHasher;\n\trunAttempt: (\n\t\tslot: RotationSlot,\n\t) => AsyncIterable<AssistantMessageEvent> | Promise<AsyncIterable<AssistantMessageEvent>>;\n};\n\nfunction errorFromEvent(event: AssistantMessageEvent): unknown {\n\tif (event.type !== \"error\") return undefined;\n\tconst message = event.error.errorMessage ?? \"provider stream error\";\n\treturn new Error(message);\n}\n\n/**\n * In-lane credential rotation for one provider request. Selection follows the\n * HRW order for the affinity key; only the `start` bookkeeping event counts as\n * pre-commit, so any delta bars silent rotation (default-DENY) and failures\n * after output carry the turn-retry suppression marker.\n */\nexport function streamWithCredentialRotation(\n\toptions: CredentialRotationOptions,\n): AsyncGenerator<AssistantMessageEvent> {\n\tconst { sources, runAttempt } = options;\n\tconst hasher = options.hasher ?? sha256SlotHasher;\n\tconst affinityKey = options.affinityKey ?? randomUUID();\n\tconst useAffinity = sources.policy?.affinity !== false;\n\tconst now = sources.now ?? Date.now;\n\n\treturn runCredentialFailover<AssistantMessageEvent, RotationSlot>({\n\t\tlistSlots: () => listRotationSlots(sources),\n\t\tselect: (candidates) => {\n\t\t\tconst pinned = candidates.find((candidate) => candidate.pinned === true);\n\t\t\tif (pinned) return pinned;\n\t\t\tconst ordered = useAffinity ? rendezvousOrder(affinityKey, candidates, hasher) : candidates;\n\n\t\t\tconst winner = ordered[0];\n\t\t\tif (!winner) throw new Error(\"credential rotation selected from an empty candidate set\");\n\t\t\treturn winner;\n\t\t},\n\t\trunAttempt,\n\t\tisCommittedOutput: (event) => event.type !== \"start\",\n\t\terrorFromEvent,\n\t\tclassify: (error, context) =>\n\t\t\tclassifyCredentialFailure(error, {\n\t\t\t\t...context,\n\t\t\t\tcooldownBaseMs: sources.policy?.cooldownBaseMs,\n\t\t\t\tcooldownCapMs: sources.policy?.cooldownCapMs,\n\t\t\t}),\n\t\tonSuccess: async (slot) => {\n\t\t\tawait sources.repository.mutateSlotState(sources.providerId, slot.lane, slot.name, (current) =>\n\t\t\t\tcurrent\n\t\t\t\t\t? {\n\t\t\t\t\t\t\t...current,\n\t\t\t\t\t\t\tlastSuccessAt: now(),\n\t\t\t\t\t\t\tlease: undefined,\n\t\t\t\t\t\t\tblockedUntil: undefined,\n\t\t\t\t\t\t\tblockReason: undefined,\n\t\t\t\t\t\t}\n\t\t\t\t\t: undefined,\n\t\t\t);\n\t\t},\n\t\tpersistBlock: async (slot, block) => {\n\t\t\tconst revision =\n\t\t\t\tslot.lane === \"env\" && slot.envVarName !== undefined && slot.envKey !== undefined\n\t\t\t\t\t? await sources.repository.envCredentialRevision(slot.envVarName, slot.envKey)\n\t\t\t\t\t: undefined;\n\t\t\tawait sources.repository.mutateSlotState(sources.providerId, slot.lane, slot.name, (current) =>\n\t\t\t\tblockPatch(block, current, now(), revision, sources.policy),\n\t\t\t);\n\t\t},\n\t\tnow,\n\t});\n}\n"]}
+{"version":3,"file":"rotation-stream.js","sourceRoot":"","sources":["../../../src/core/credential-pool/rotation-stream.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,eAAe,EAAmB,MAAM,wCAAwC,CAAC;AAC1F,OAAO,EAAE,SAAS,IAAI,mBAAmB,EAAyB,MAAM,uCAAuC,CAAC;AAChH,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAwB,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAgB,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAA2D,MAAM,kBAAkB,CAAC;AAEjH,sFAAsF;AACtF,MAAM,CAAC,MAAM,gBAAgB,GAAe,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;AAyBtH,SAAS,YAAY,CAAC,IAAkB,EAAE,KAAsC;IAC/E,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO;QACN,GAAG,IAAI;QACP,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC9E,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;KAC5D,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,OAAwB,EACxB,OAAO,GAAgC,EAAE;IAEzC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC;IACtD,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE;QACvF,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,IAAI,eAAe,IAAI,EAAE,CAAC;QACpD,MAAM,GAAG,GACR,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChH,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAmB,EAAE,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IACC,aAAa;gBACb,OAAO,EAAE,YAAY,KAAK,SAAS;gBACnC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAClD,CAAC;gBACF,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;oBACrF,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;iBAChC,CAAC,CAAC;gBACH,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACrB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBAChE,KAAK,CAAC,IAAI,CACT,YAAY,CACX;oBACC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAG,UAA+B,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI;iBAC7D,EACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CACjB,CACD,CAAC;gBACF,SAAS;YACV,CAAC;YACD,KAAK,CAAC,IAAI,CACT,YAAY,CACX;gBACC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAG,UAA+B,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI;aAC7D,EACD,OAAO,CACP,CACD,CAAC;QACH,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,YAAY,GAAoB;YACrC,GAAG,OAAO;YACV,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;SACxC,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,YAAY,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QACxF,OAAO,CAAC,GAAG,KAAK,EAAE,GAAG,UAAU,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC;IACxE,OAAO,oBAAoB,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,oBAAoB,CAClC,OAAwB,EACxB,QAAsE,EACtE,aAAa,GAAG,IAAI;IAEpB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACnF,IAAI,UAAU,GAAG,SAAS,EAAE,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACpF,IACC,aAAa;YACb,UAAU,EAAE,YAAY,KAAK,SAAS;YACtC,UAAU,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EACrD,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;gBAClF,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;aAChC,CAAC,CAAC;YACH,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC7D,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,IAAI,CACT,YAAY,CACX;YACC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,IAAI,CAAC,GAAG;YAChB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC3B,EACD,UAAU,CACV,CACD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAClB,KAAsB,EACtB,OAAwC,EACxC,GAAW,EACX,kBAA2B,EAC3B,MAA4D;IAE5D,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG;QACZ,YAAY;QACZ,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;KACzF,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO;YACN,GAAG,IAAI;YACP,YAAY,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC;YACzF,WAAW,EAAE,YAAY;SACzB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AAC/C,CAAC;AAYD,SAAS,cAAc,CAAC,KAA4B;IACnD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,IAAI,uBAAuB,CAAC;IACpE,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC3C,OAAkC;IAElC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAC;IAClD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,UAAU,EAAE,CAAC;IACxD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,KAAK,KAAK,CAAC;IACvD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAEpC,OAAO,qBAAqB,CAAsC;QACjE,SAAS,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC;QAC3C,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE;YACtB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;YACzE,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YAC1B,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;YAE5F,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YACzF,OAAO,MAAM,CAAC;QACf,CAAC;QACD,UAAU;QACV,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO;QACpD,cAAc;QACd,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAC5B,yBAAyB,CAAC,KAAK,EAAE;YAChC,GAAG,OAAO;YACV,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc;YAC9C,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa;SAC5C,CAAC;QACH,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACzB,MAAM,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAC9F,OAAO;gBACN,CAAC,CAAC;oBACA,GAAG,OAAO;oBACV,aAAa,EAAE,GAAG,EAAE;oBACpB,KAAK,EAAE,SAAS;oBAChB,YAAY,EAAE,SAAS;oBACvB,WAAW,EAAE,SAAS;iBACtB;gBACF,CAAC,CAAC,SAAS,CACZ,CAAC;QACH,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;YACnC,MAAM,QAAQ,GACb,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAChF,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;gBAC9E,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAC9F,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAC3D,CAAC;QACH,CAAC;QACD,GAAG;KACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport type { AssistantMessageEvent, Credential } from \"@earendil-works/pi-ai\";\nimport { rendezvousOrder, type SlotHasher } from \"@earendil-works/pi-ai/auth/pool/select\";\nimport { listSlots as listCredentialSlots, type PooledCredential } from \"@earendil-works/pi-ai/auth/pool/slots\";\nimport { resolveConfigValue } from \"../resolve-config-value.ts\";\nimport { type CredentialBlock, classifyCredentialFailure } from \"./classify.ts\";\nimport { discoverEnvSlots } from \"./env-slots.ts\";\nimport { type RunSlot, runCredentialFailover } from \"./failover.ts\";\nimport { acquireHalfOpenLease, type CredentialSlotRepository, type CredentialSlotState } from \"./state-store.ts\";\n\n/** The exact hash the claude-sdk-oauth affinity oracle uses, so pools never remap. */\nexport const sha256SlotHasher: SlotHasher = (input) => createHash(\"sha256\").update(input).digest().readBigUInt64BE(0);\n\nexport type RotationLane = \"stored\" | \"env\";\n\nexport type RotationSlot = RunSlot & {\n\tlane: RotationLane;\n\t/** Env-lane key material for the attempt; never serialized or persisted. */\n\tenvKey?: string;\n\tenvVarName?: string;\n};\n\nexport type RotationSources = {\n\tproviderId: string;\n\tcredential: Credential | undefined;\n\tenv: (name: string) => string | undefined;\n\trepository: CredentialSlotRepository;\n\tpolicy?: {\n\t\taffinity?: boolean;\n\t\tcooldownBaseMs?: number;\n\t\tcooldownCapMs?: number;\n\t\tslots?: Record<string, { env?: string; value?: string }>;\n\t};\n\tnow?: () => number;\n};\n\nfunction overlayState(slot: RotationSlot, state: CredentialSlotState | undefined): RotationSlot {\n\tif (!state) return slot;\n\treturn {\n\t\t...slot,\n\t\t...(state.blockedUntil === undefined ? {} : { blockedUntil: state.blockedUntil }),\n\t\t...(state.blockReason === undefined ? {} : { blockReason: state.blockReason }),\n\t\t...(state.failureCount === undefined ? {} : { failureCount: state.failureCount }),\n\t\t...(state.lease === undefined ? {} : { lease: state.lease }),\n\t};\n}\n\n/**\n * Lists the provider's rotation slots with sidecar health overlaid. Stored\n * credentials own the lane when present; env slots participate only when\n * nothing is stored, preserving today's resolution precedence. An env slot's\n * persisted health applies only while its HMAC revision still matches the\n * current env value, so rotating a key in place clears its own stale block.\n */\nexport async function listRotationSlots(\n\tsources: RotationSources,\n\toptions: { acquireLeases?: boolean } = {},\n): Promise<RotationSlot[]> {\n\tconst acquireLeases = options.acquireLeases !== false;\n\tconst { providerId, credential, env, repository } = sources;\n\tconst policySlots = Object.entries(sources.policy?.slots ?? {}).flatMap(([name, ref]) => {\n\t\tconst envVarName = ref.env ?? `models.json:${name}`;\n\t\tconst key =\n\t\t\tref.env !== undefined ? env(ref.env) : ref.value !== undefined ? resolveConfigValue(ref.value, {}) : undefined;\n\t\tif (!key) return [];\n\t\treturn [{ name, envVarName, key, source: \"env\" as const }];\n\t});\n\tif (credential) {\n\t\tconst state = await repository.listSlots(providerId, \"stored\");\n\t\tconst slots: RotationSlot[] = [];\n\t\tfor (const slot of listCredentialSlots(credential)) {\n\t\t\tconst current = state[slot.name];\n\t\t\tif (\n\t\t\t\tacquireLeases &&\n\t\t\t\tcurrent?.blockedUntil !== undefined &&\n\t\t\t\tcurrent.blockedUntil <= (sources.now ?? Date.now)()\n\t\t\t) {\n\t\t\t\tconst lease = await acquireHalfOpenLease(repository, providerId, \"stored\", slot.name, {\n\t\t\t\t\tnow: (sources.now ?? Date.now)(),\n\t\t\t\t});\n\t\t\t\tif (!lease) continue;\n\t\t\t\tconst leased = await repository.listSlots(providerId, \"stored\");\n\t\t\t\tslots.push(\n\t\t\t\t\toverlayState(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tname: slot.name,\n\t\t\t\t\t\t\tlane: \"stored\",\n\t\t\t\t\t\t\tpinned: (credential as PooledCredential).pinned === slot.name,\n\t\t\t\t\t\t},\n\t\t\t\t\t\tleased[slot.name],\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tslots.push(\n\t\t\t\toverlayState(\n\t\t\t\t\t{\n\t\t\t\t\t\tname: slot.name,\n\t\t\t\t\t\tlane: \"stored\",\n\t\t\t\t\t\tpinned: (credential as PooledCredential).pinned === slot.name,\n\t\t\t\t\t},\n\t\t\t\t\tcurrent,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tif (policySlots.length === 0) return slots;\n\t\tconst namedSources: RotationSources = {\n\t\t\t...sources,\n\t\t\tcredential: undefined,\n\t\t\tpolicy: { ...sources.policy, slots: {} },\n\t\t};\n\t\tconst namedSlots = await listEnvRotationSlots(namedSources, policySlots, acquireLeases);\n\t\treturn [...slots, ...namedSlots];\n\t}\n\tconst envSlots = [...discoverEnvSlots(providerId, env), ...policySlots];\n\treturn listEnvRotationSlots(sources, envSlots, acquireLeases);\n}\n\nasync function listEnvRotationSlots(\n\tsources: RotationSources,\n\tenvSlots: readonly { name: string; envVarName: string; key: string }[],\n\tacquireLeases = true,\n): Promise<RotationSlot[]> {\n\tif (envSlots.length === 0) return [];\n\tconst { providerId, repository } = sources;\n\tconst state = await repository.listSlots(providerId, \"env\");\n\tconst slots: RotationSlot[] = [];\n\tfor (const slot of envSlots) {\n\t\tconst persisted = state[slot.name];\n\t\tconst revision = await repository.envCredentialRevision(slot.envVarName, slot.key);\n\t\tlet applicable = persisted?.credentialRevision === revision ? persisted : undefined;\n\t\tif (\n\t\t\tacquireLeases &&\n\t\t\tapplicable?.blockedUntil !== undefined &&\n\t\t\tapplicable.blockedUntil <= (sources.now ?? Date.now)()\n\t\t) {\n\t\t\tconst lease = await acquireHalfOpenLease(repository, providerId, \"env\", slot.name, {\n\t\t\t\tnow: (sources.now ?? Date.now)(),\n\t\t\t});\n\t\t\tif (!lease) continue;\n\t\t\tconst leased = await repository.listSlots(providerId, \"env\");\n\t\t\tapplicable = leased[slot.name];\n\t\t}\n\t\tslots.push(\n\t\t\toverlayState(\n\t\t\t\t{\n\t\t\t\t\tname: slot.name,\n\t\t\t\t\tlane: \"env\",\n\t\t\t\t\tenvKey: slot.key,\n\t\t\t\t\tenvVarName: slot.envVarName,\n\t\t\t\t},\n\t\t\t\tapplicable,\n\t\t\t),\n\t\t);\n\t}\n\treturn slots;\n}\n\nfunction blockPatch(\n\tblock: CredentialBlock,\n\tcurrent: CredentialSlotState | undefined,\n\tnow: number,\n\tcredentialRevision?: string,\n\tpolicy?: { cooldownBaseMs?: number; cooldownCapMs?: number },\n): Omit<CredentialSlotState, \"stateVersion\"> {\n\tconst failureCount = (current?.failureCount ?? 0) + 1;\n\tconst base = {\n\t\tfailureCount,\n\t\t...(credentialRevision === undefined ? {} : { credentialRevision }),\n\t\t...(current?.lastSuccessAt === undefined ? {} : { lastSuccessAt: current.lastSuccessAt }),\n\t};\n\tif (block.reason === \"rate_limit\") {\n\t\treturn {\n\t\t\t...base,\n\t\t\tblockedUntil: now + Math.min(policy?.cooldownCapMs ?? block.cooldownMs, block.cooldownMs),\n\t\t\tblockReason: \"rate_limit\",\n\t\t};\n\t}\n\treturn { ...base, blockReason: block.reason };\n}\n\nexport type CredentialRotationOptions = {\n\tsources: RotationSources;\n\t/** Stable session key keeps a session on its slot; absent, each request distributes. */\n\taffinityKey?: string;\n\thasher?: SlotHasher;\n\trunAttempt: (\n\t\tslot: RotationSlot,\n\t) => AsyncIterable<AssistantMessageEvent> | Promise<AsyncIterable<AssistantMessageEvent>>;\n};\n\nfunction errorFromEvent(event: AssistantMessageEvent): unknown {\n\tif (event.type !== \"error\") return undefined;\n\tconst message = event.error.errorMessage ?? \"provider stream error\";\n\treturn new Error(message);\n}\n\n/**\n * In-lane credential rotation for one provider request. Selection follows the\n * HRW order for the affinity key; only the `start` bookkeeping event counts as\n * pre-commit, so any delta bars silent rotation (default-DENY) and failures\n * after output carry the turn-retry suppression marker.\n */\nexport function streamWithCredentialRotation(\n\toptions: CredentialRotationOptions,\n): AsyncGenerator<AssistantMessageEvent> {\n\tconst { sources, runAttempt } = options;\n\tconst hasher = options.hasher ?? sha256SlotHasher;\n\tconst affinityKey = options.affinityKey ?? randomUUID();\n\tconst useAffinity = sources.policy?.affinity !== false;\n\tconst now = sources.now ?? Date.now;\n\n\treturn runCredentialFailover<AssistantMessageEvent, RotationSlot>({\n\t\tlistSlots: () => listRotationSlots(sources),\n\t\tselect: (candidates) => {\n\t\t\tconst pinned = candidates.find((candidate) => candidate.pinned === true);\n\t\t\tif (pinned) return pinned;\n\t\t\tconst ordered = useAffinity ? rendezvousOrder(affinityKey, candidates, hasher) : candidates;\n\n\t\t\tconst winner = ordered[0];\n\t\t\tif (!winner) throw new Error(\"credential rotation selected from an empty candidate set\");\n\t\t\treturn winner;\n\t\t},\n\t\trunAttempt,\n\t\tisCommittedOutput: (event) => event.type !== \"start\",\n\t\terrorFromEvent,\n\t\tclassify: (error, context) =>\n\t\t\tclassifyCredentialFailure(error, {\n\t\t\t\t...context,\n\t\t\t\tcooldownBaseMs: sources.policy?.cooldownBaseMs,\n\t\t\t\tcooldownCapMs: sources.policy?.cooldownCapMs,\n\t\t\t}),\n\t\tonSuccess: async (slot) => {\n\t\t\tawait sources.repository.mutateSlotState(sources.providerId, slot.lane, slot.name, (current) =>\n\t\t\t\tcurrent\n\t\t\t\t\t? {\n\t\t\t\t\t\t\t...current,\n\t\t\t\t\t\t\tlastSuccessAt: now(),\n\t\t\t\t\t\t\tlease: undefined,\n\t\t\t\t\t\t\tblockedUntil: undefined,\n\t\t\t\t\t\t\tblockReason: undefined,\n\t\t\t\t\t\t}\n\t\t\t\t\t: undefined,\n\t\t\t);\n\t\t},\n\t\tpersistBlock: async (slot, block) => {\n\t\t\tconst revision =\n\t\t\t\tslot.lane === \"env\" && slot.envVarName !== undefined && slot.envKey !== undefined\n\t\t\t\t\t? await sources.repository.envCredentialRevision(slot.envVarName, slot.envKey)\n\t\t\t\t\t: undefined;\n\t\t\tawait sources.repository.mutateSlotState(sources.providerId, slot.lane, slot.name, (current) =>\n\t\t\t\tblockPatch(block, current, now(), revision, sources.policy),\n\t\t\t);\n\t\t},\n\t\tnow,\n\t});\n}\n"]}

package/dist/core/credential-pool/state-store.d.ts

@@ -4,8 +4,8 @@ declare const slotStateSchema: z.ZodObject<{
     stateVersion: z.ZodNumber;
     blockedUntil: z.ZodOptional<z.ZodNumber>;
     blockReason: z.ZodOptional<z.ZodEnum<{
-        auth_error: "auth_error";
         account_disabled: "account_disabled";
+        auth_error: "auth_error";
         rate_limit: "rate_limit";
     }>>;
     failureCount: z.ZodOptional<z.ZodNumber>;
@@ -26,8 +26,8 @@ declare const documentSchema: z.ZodObject<{
                 stateVersion: z.ZodNumber;
                 blockedUntil: z.ZodOptional<z.ZodNumber>;
                 blockReason: z.ZodOptional<z.ZodEnum<{
-                    auth_error: "auth_error";
                     account_disabled: "account_disabled";
+                    auth_error: "auth_error";
                     rate_limit: "rate_limit";
                 }>>;
                 failureCount: z.ZodOptional<z.ZodNumber>;

package/dist/core/credential-pool/state-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state-store.d.ts","sourceRoot":"","sources":["../../../src/core/credential-pool/state-store.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,8BAA8B,+BAA+B,CAAC;AAS3E,QAAA,MAAM,eAAe;;;;;;;;;;;;;;;kBAQnB,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC;AAE5E,QAAA,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;kBAclB,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEzE,wBAAgB,uBAAuB,CAAC,QAAQ,GAAE,MAAsB,GAAG,MAAM,CAEhF;AAsBD,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,WAAW,CAAC;AAE3D,uFAAuF;AACvF,wBAAgB,UAAU,CAAC,KAAK,EAAE,mBAAmB,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAS1F;AAED;;;;;GAKG;AACH,qBAAa,wBAAwB;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;gBAElB,IAAI,GAAE,MAAkC;IAIpD,OAAO,CAAC,UAAU;YAMJ,YAAY;YAeZ,OAAO;IAuBf,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;IAIxC;;;;OAIG;IACG,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK5E,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAMjG;;;;OAIG;IACG,eAAe,CACpB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,CAAC,OAAO,EAAE,mBAAmB,GAAG,SAAS,KAAK,IAAI,CAAC,mBAAmB,EAAE,cAAc,CAAC,GAAG,SAAS,GACrG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;CAwB3C;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE;;;;GAIG;AACH,wBAAsB,oBAAoB,CACzC,UAAU,EAAE,wBAAwB,EACpC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACjD,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAapC"}
+{"version":3,"file":"state-store.d.ts","sourceRoot":"","sources":["../../../src/core/credential-pool/state-store.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,8BAA8B,+BAA+B,CAAC;AAS3E,QAAA,MAAM,eAAe;;;;;;;;;;;;;;;kBAQnB,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC;AAE5E,QAAA,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;kBAclB,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEzE,wBAAgB,uBAAuB,CAAC,QAAQ,GAAE,MAAsB,GAAG,MAAM,CAEhF;AAsBD,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,WAAW,CAAC;AAE3D,uFAAuF;AACvF,wBAAgB,UAAU,CAAC,KAAK,EAAE,mBAAmB,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAS1F;AAED;;;;;GAKG;AACH,qBAAa,wBAAwB;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAE9B,YAAY,IAAI,GAAE,MAAkC,EAEnD;IAED,OAAO,CAAC,UAAU;YAMJ,YAAY;YAeZ,OAAO;IAuBf,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAEvC;IAED;;;;OAIG;IACG,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGjF;IAEK,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAIhG;IAED;;;;OAIG;IACG,eAAe,CACpB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,CAAC,OAAO,EAAE,mBAAmB,GAAG,SAAS,KAAK,IAAI,CAAC,mBAAmB,EAAE,cAAc,CAAC,GAAG,SAAS,GACrG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAuB1C;CACD;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE;;;;GAIG;AACH,wBAAsB,oBAAoB,CACzC,UAAU,EAAE,wBAAwB,EACpC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACjD,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAapC"}

package/dist/core/credential-pool/state-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"state-store.js","sourceRoot":"","sources":["../../../src/core/credential-pool/state-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EACN,wBAAwB,EACxB,yBAAyB,EACzB,iCAAiC,EACjC,oCAAoC,EACpC,oCAAoC,EACpC,WAAW,GACX,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,8BAA8B,GAAG,4BAA4B,CAAC;AAE3E,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAErC,MAAM,WAAW,GAAG,CAAC,CAAC,YAAY,CAAC;IAClC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,YAAY,CAAC;IACtC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACvD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE;IAC5D,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAIH,MAAM,cAAc,GAAG,CAAC,CAAC,YAAY,CAAC;IACrC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,CAClB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,YAAY,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,CACd,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,YAAY,CAAC;YACd,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC;SAC5C,CAAC,CACF;KACD,CAAC,CACF;CACD,CAAC,CAAC;AAIH,MAAM,UAAU,uBAAuB,CAAC,WAAmB,WAAW,EAAE;IACvE,OAAO,IAAI,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,kBAAkB,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAW,CAAC;AAEvE,SAAS,aAAa;IACrB,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,eAAe,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAC9F,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,OAAe;IACrC,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,aAAa,EAAE,CAAC;IACxB,CAAC;AACF,CAAC;AAID,uFAAuF;AACvF,MAAM,UAAU,UAAU,CAAC,KAAsC,EAAE,GAAW;IAC7E,IAAI,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC;IAC3B,mFAAmF;IACnF,IAAI,KAAK,CAAC,WAAW,KAAK,YAAY,IAAI,KAAK,CAAC,WAAW,KAAK,kBAAkB;QAAE,OAAO,SAAS,CAAC;IACrG,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IACnF,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QAClG,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,wBAAwB;IAGpC,YAAY,OAAe,uBAAuB,EAAE;QACnD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,CAAC;IAEO,UAAU;QACjB,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO;QAClC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACxF,CAAC;IAEO,KAAK,CAAC,YAAY,CACzB,EAAgG;QAEhG,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YACjE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,IAAI;gBAAE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;YACtF,OAAO,MAAM,CAAC;QACf,CAAC;gBAAS,CAAC;YACV,MAAM,OAAO,EAAE,CAAC;QACjB,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,OAAO;QACpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,EAAE,CAAC;YACb,IAAI,CAAC;gBACJ,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,IAAI,QAAQ,IAAI,iCAAiC,EAAE,CAAC;oBACnD,MAAM,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAChE,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CACvB,oCAAoC,GAAG,CAAC,IAAI,OAAO,EACnD,oCAAoC,EACpC,iCAAiC,GAAG,QAAQ,CAC5C,CAAC;gBACF,OAAO,EAAE,CAAC;gBACV,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YACpE,CAAC;QACF,CAAC;IACF,CAAC;IAED,KAAK,CAAC,eAAe;QACpB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAChG,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,qBAAqB,CAAC,UAAkB,EAAE,QAAgB;QAC/D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QACzC,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,UAAU,KAAK,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB,EAAE,MAAc;QACjD,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE;SACnE,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CACpB,UAAkB,EAClB,MAAc,EACd,MAAc,EACd,EAAuG;QAEvG,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,EAAE;YACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,MAAuC,CAAC;YAC5C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACP,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,CAAC,OAAO,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;YACxB,CAAC;YACD,MAAM,IAAI,GAAgC;gBACzC,GAAG,QAAQ;gBACX,SAAS,EAAE;oBACV,GAAG,QAAQ,CAAC,SAAS;oBACrB,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;iBACnE;aACD,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC,CAAC,CAAC;IACJ,CAAC;CACD;AAID;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,UAAoC,EACpC,UAAkB,EAClB,MAAc,EACd,MAAc,EACd,UAAiD,EAAE;IAEnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IAChD,IAAI,KAAgC,CAAC;IACrC,MAAM,UAAU,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE;QACxE,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC;QAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC;QAClF,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC;QAC/E,IAAI,CAAC,OAAO,IAAI,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,YAAY;YAAE,OAAO,OAAO,CAAC;QAClF,KAAK,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,GAAG,GAAG,UAAU,EAAE,CAAC;QAC/D,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;IACjF,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACd,CAAC","sourcesContent":["import { createHmac, randomBytes, randomUUID } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport lockfile from \"proper-lockfile\";\nimport { z } from \"zod\";\nimport { getAgentDir } from \"../../config.ts\";\nimport {\n\tCredentialStoreBusyError,\n\tFILE_STORAGE_LOCK_OPTIONS,\n\tFILE_STORAGE_LOCK_RETRY_BUDGET_MS,\n\tFILE_STORAGE_LOCK_RETRY_MAX_DELAY_MS,\n\tFILE_STORAGE_LOCK_RETRY_MIN_DELAY_MS,\n\tisLockError,\n} from \"../lockfile-policy.ts\";\n\nexport const CREDENTIAL_POOL_STATE_FILENAME = \"credential-pool-state.json\";\n\nconst HEX_256_BIT = /^[0-9a-f]{64}$/;\n\nconst leaseSchema = z.strictObject({\n\tid: z.string().min(1).max(128),\n\texpiresAt: z.number().int().positive(),\n});\n\nconst slotStateSchema = z.strictObject({\n\tstateVersion: z.number().int().nonnegative(),\n\tblockedUntil: z.number().int().positive().optional(),\n\tblockReason: z.enum([\"auth_error\", \"rate_limit\", \"account_disabled\"]).optional(),\n\tfailureCount: z.number().int().nonnegative().optional(),\n\tlastSuccessAt: z.number().int().positive().optional(),\n\tcredentialRevision: z.string().regex(HEX_256_BIT).optional(),\n\tlease: leaseSchema.optional(),\n});\n\nexport type CredentialSlotState = Readonly<z.infer<typeof slotStateSchema>>;\n\nconst documentSchema = z.strictObject({\n\tschemaVersion: z.literal(1),\n\tinstallationKey: z.string().regex(HEX_256_BIT),\n\tproviders: z.record(\n\t\tz.string(),\n\t\tz.strictObject({\n\t\t\tlanes: z.record(\n\t\t\t\tz.string(),\n\t\t\t\tz.strictObject({\n\t\t\t\t\tslots: z.record(z.string(), slotStateSchema),\n\t\t\t\t}),\n\t\t\t),\n\t\t}),\n\t),\n});\n\nexport type CredentialPoolStateDocument = z.infer<typeof documentSchema>;\n\nexport function credentialPoolStatePath(agentDir: string = getAgentDir()): string {\n\treturn join(agentDir, CREDENTIAL_POOL_STATE_FILENAME);\n}\n\nconst FILE_WRITE_OPTIONS = { encoding: \"utf-8\", mode: 0o600 } as const;\n\nfunction freshDocument(): CredentialPoolStateDocument {\n\treturn { schemaVersion: 1, installationKey: randomBytes(32).toString(\"hex\"), providers: {} };\n}\n\n/**\n * The sidecar holds only health, so an unreadable or invalid document resets to\n * a fresh one instead of failing auth resolution; the worst outcome of a reset\n * is a cleared cooldown, never lost credential material.\n */\nfunction parseDocument(content: string): CredentialPoolStateDocument {\n\ttry {\n\t\tconst parsed = documentSchema.safeParse(JSON.parse(content));\n\t\treturn parsed.success ? parsed.data : freshDocument();\n\t} catch {\n\t\treturn freshDocument();\n\t}\n}\n\nexport type SlotHealth = \"ready\" | \"blocked\" | \"half_open\";\n\n/** Deadlines are absolute so a restart never re-enables a cooling credential early. */\nexport function slotHealth(state: CredentialSlotState | undefined, now: number): SlotHealth {\n\tif (!state) return \"ready\";\n\t// Auth and billing blocks have no expiry; only credential replacement clears them.\n\tif (state.blockReason === \"auth_error\" || state.blockReason === \"account_disabled\") return \"blocked\";\n\tif (state.blockedUntil !== undefined && state.blockedUntil > now) return \"blocked\";\n\tif (state.blockedUntil !== undefined && state.lease !== undefined && state.lease.expiresAt > now) {\n\t\treturn \"half_open\";\n\t}\n\treturn \"ready\";\n}\n\n/**\n * File-locked health sidecar for credential pools. Never stores credential\n * material: env slots are keyed by an installation-local HMAC revision so a\n * rotated env value clears its own stale block without persisting a raw key\n * hash anywhere.\n */\nexport class CredentialSlotRepository {\n\tprivate readonly path: string;\n\n\tconstructor(path: string = credentialPoolStatePath()) {\n\t\tthis.path = path;\n\t}\n\n\tprivate ensureFile(): void {\n\t\tif (existsSync(this.path)) return;\n\t\tmkdirSync(dirname(this.path), { recursive: true, mode: 0o700 });\n\t\twriteFileSync(this.path, JSON.stringify(freshDocument(), null, 2), FILE_WRITE_OPTIONS);\n\t}\n\n\tprivate async withDocument<T>(\n\t\tfn: (document: CredentialPoolStateDocument) => { result: T; next?: CredentialPoolStateDocument },\n\t): Promise<T> {\n\t\tthis.ensureFile();\n\t\tconst release = await this.acquire();\n\t\ttry {\n\t\t\tconst document = parseDocument(readFileSync(this.path, \"utf-8\"));\n\t\t\tconst { result, next } = fn(document);\n\t\t\tif (next) writeFileSync(this.path, JSON.stringify(next, null, 2), FILE_WRITE_OPTIONS);\n\t\t\treturn result;\n\t\t} finally {\n\t\t\tawait release();\n\t\t}\n\t}\n\n\tprivate async acquire(): Promise<() => Promise<void>> {\n\t\tconst startedAt = Date.now();\n\t\tlet attempt = 0;\n\t\twhile (true) {\n\t\t\ttry {\n\t\t\t\treturn await lockfile.lock(this.path, FILE_STORAGE_LOCK_OPTIONS);\n\t\t\t} catch (error) {\n\t\t\t\tif (!isLockError(error)) throw error;\n\t\t\t\tconst waitedMs = Date.now() - startedAt;\n\t\t\t\tif (waitedMs >= FILE_STORAGE_LOCK_RETRY_BUDGET_MS) {\n\t\t\t\t\tthrow new CredentialStoreBusyError(this.path, waitedMs, error);\n\t\t\t\t}\n\t\t\t\tconst delayMs = Math.min(\n\t\t\t\t\tFILE_STORAGE_LOCK_RETRY_MIN_DELAY_MS * 2 ** attempt,\n\t\t\t\t\tFILE_STORAGE_LOCK_RETRY_MAX_DELAY_MS,\n\t\t\t\t\tFILE_STORAGE_LOCK_RETRY_BUDGET_MS - waitedMs,\n\t\t\t\t);\n\t\t\t\tattempt++;\n\t\t\t\tawait new Promise<void>((resolve) => setTimeout(resolve, delayMs));\n\t\t\t}\n\t\t}\n\t}\n\n\tasync installationKey(): Promise<string> {\n\t\treturn this.withDocument((document) => ({ result: document.installationKey, next: document }));\n\t}\n\n\t/**\n\t * Derives the persistence key for an env slot's health. HMAC over the\n\t * installation key means the revision is useless outside this installation\n\t * and never equals a raw hash of the key material.\n\t */\n\tasync envCredentialRevision(envVarName: string, envValue: string): Promise<string> {\n\t\tconst key = await this.installationKey();\n\t\treturn createHmac(\"sha256\", key).update(`${envVarName}\\0${envValue}`).digest(\"hex\");\n\t}\n\n\tasync listSlots(providerId: string, laneId: string): Promise<Record<string, CredentialSlotState>> {\n\t\treturn this.withDocument((document) => ({\n\t\t\tresult: { ...document.providers[providerId]?.lanes[laneId]?.slots },\n\t\t}));\n\t}\n\n\t/**\n\t * Atomic read-modify-write for one slot's health. `stateVersion` increments\n\t * on every write so concurrent mutators can detect lost updates; returning\n\t * undefined removes the slot state entirely.\n\t */\n\tasync mutateSlotState(\n\t\tproviderId: string,\n\t\tlaneId: string,\n\t\tslotId: string,\n\t\tfn: (current: CredentialSlotState | undefined) => Omit<CredentialSlotState, \"stateVersion\"> | undefined,\n\t): Promise<CredentialSlotState | undefined> {\n\t\treturn this.withDocument((document) => {\n\t\t\tconst provider = document.providers[providerId] ?? { lanes: {} };\n\t\t\tconst lane = provider.lanes[laneId] ?? { slots: {} };\n\t\t\tconst current = lane.slots[slotId];\n\t\t\tconst mutated = fn(current);\n\t\t\tconst slots = { ...lane.slots };\n\t\t\tlet result: CredentialSlotState | undefined;\n\t\t\tif (mutated === undefined) {\n\t\t\t\tdelete slots[slotId];\n\t\t\t} else {\n\t\t\t\tresult = { ...mutated, stateVersion: (current?.stateVersion ?? 0) + 1 };\n\t\t\t\tslots[slotId] = result;\n\t\t\t}\n\t\t\tconst next: CredentialPoolStateDocument = {\n\t\t\t\t...document,\n\t\t\t\tproviders: {\n\t\t\t\t\t...document.providers,\n\t\t\t\t\t[providerId]: { lanes: { ...provider.lanes, [laneId]: { slots } } },\n\t\t\t\t},\n\t\t\t};\n\t\t\treturn { result, next };\n\t\t});\n\t}\n}\n\nexport type HalfOpenLease = { leaseId: string; expiresAt: number };\n\n/**\n * Transitions an expired cooldown atomically to half_open: exactly one caller\n * wins the probe lease; everyone else keeps treating the slot as unavailable\n * until the lease expires or the probe settles the block.\n */\nexport async function acquireHalfOpenLease(\n\trepository: CredentialSlotRepository,\n\tproviderId: string,\n\tlaneId: string,\n\tslotId: string,\n\toptions: { now?: number; leaseTtlMs?: number } = {},\n): Promise<HalfOpenLease | undefined> {\n\tconst now = options.now ?? Date.now();\n\tconst leaseTtlMs = options.leaseTtlMs ?? 30_000;\n\tlet lease: HalfOpenLease | undefined;\n\tawait repository.mutateSlotState(providerId, laneId, slotId, (current) => {\n\t\tif (!current) return current;\n\t\tconst expired = current.blockedUntil !== undefined && current.blockedUntil <= now;\n\t\tconst leaseLive = current.lease !== undefined && current.lease.expiresAt > now;\n\t\tif (!expired || leaseLive || current.blockReason === \"auth_error\") return current;\n\t\tlease = { leaseId: randomUUID(), expiresAt: now + leaseTtlMs };\n\t\treturn { ...current, lease: { id: lease.leaseId, expiresAt: lease.expiresAt } };\n\t});\n\treturn lease;\n}\n"]}
+{"version":3,"file":"state-store.js","sourceRoot":"","sources":["../../../src/core/credential-pool/state-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EACN,wBAAwB,EACxB,yBAAyB,EACzB,iCAAiC,EACjC,oCAAoC,EACpC,oCAAoC,EACpC,WAAW,GACX,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,8BAA8B,GAAG,4BAA4B,CAAC;AAE3E,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAErC,MAAM,WAAW,GAAG,CAAC,CAAC,YAAY,CAAC;IAClC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,YAAY,CAAC;IACtC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACvD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE;IAC5D,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAIH,MAAM,cAAc,GAAG,CAAC,CAAC,YAAY,CAAC;IACrC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,CAClB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,YAAY,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,CACd,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,YAAY,CAAC;YACd,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC;SAC5C,CAAC,CACF;KACD,CAAC,CACF;CACD,CAAC,CAAC;AAIH,MAAM,UAAU,uBAAuB,CAAC,QAAQ,GAAW,WAAW,EAAE;IACvE,OAAO,IAAI,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,kBAAkB,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAW,CAAC;AAEvE,SAAS,aAAa;IACrB,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,eAAe,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAC9F,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,OAAe;IACrC,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,aAAa,EAAE,CAAC;IACxB,CAAC;AACF,CAAC;AAID,uFAAuF;AACvF,MAAM,UAAU,UAAU,CAAC,KAAsC,EAAE,GAAW;IAC7E,IAAI,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC;IAC3B,mFAAmF;IACnF,IAAI,KAAK,CAAC,WAAW,KAAK,YAAY,IAAI,KAAK,CAAC,WAAW,KAAK,kBAAkB;QAAE,OAAO,SAAS,CAAC;IACrG,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IACnF,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QAClG,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,wBAAwB;IAGpC,YAAY,IAAI,GAAW,uBAAuB,EAAE;QACnD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,CAAC;IAEO,UAAU;QACjB,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO;QAClC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACxF,CAAC;IAEO,KAAK,CAAC,YAAY,CACzB,EAAgG;QAEhG,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YACjE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,IAAI;gBAAE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;YACtF,OAAO,MAAM,CAAC;QACf,CAAC;gBAAS,CAAC;YACV,MAAM,OAAO,EAAE,CAAC;QACjB,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,OAAO;QACpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,EAAE,CAAC;YACb,IAAI,CAAC;gBACJ,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,IAAI,QAAQ,IAAI,iCAAiC,EAAE,CAAC;oBACnD,MAAM,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAChE,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CACvB,oCAAoC,GAAG,CAAC,IAAI,OAAO,EACnD,oCAAoC,EACpC,iCAAiC,GAAG,QAAQ,CAC5C,CAAC;gBACF,OAAO,EAAE,CAAC;gBACV,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YACpE,CAAC;QACF,CAAC;IACF,CAAC;IAED,KAAK,CAAC,eAAe;QACpB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAChG,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,qBAAqB,CAAC,UAAkB,EAAE,QAAgB;QAC/D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QACzC,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,UAAU,KAAK,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB,EAAE,MAAc;QACjD,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE;SACnE,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CACpB,UAAkB,EAClB,MAAc,EACd,MAAc,EACd,EAAuG;QAEvG,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,EAAE;YACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,MAAuC,CAAC;YAC5C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACP,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,CAAC,OAAO,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;YACxB,CAAC;YACD,MAAM,IAAI,GAAgC;gBACzC,GAAG,QAAQ;gBACX,SAAS,EAAE;oBACV,GAAG,QAAQ,CAAC,SAAS;oBACrB,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;iBACnE;aACD,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC,CAAC,CAAC;IACJ,CAAC;CACD;AAID;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,UAAoC,EACpC,UAAkB,EAClB,MAAc,EACd,MAAc,EACd,OAAO,GAA0C,EAAE;IAEnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IAChD,IAAI,KAAgC,CAAC;IACrC,MAAM,UAAU,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE;QACxE,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC;QAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC;QAClF,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC;QAC/E,IAAI,CAAC,OAAO,IAAI,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,YAAY;YAAE,OAAO,OAAO,CAAC;QAClF,KAAK,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,GAAG,GAAG,UAAU,EAAE,CAAC;QAC/D,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;IACjF,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACd,CAAC","sourcesContent":["import { createHmac, randomBytes, randomUUID } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport lockfile from \"proper-lockfile\";\nimport { z } from \"zod\";\nimport { getAgentDir } from \"../../config.ts\";\nimport {\n\tCredentialStoreBusyError,\n\tFILE_STORAGE_LOCK_OPTIONS,\n\tFILE_STORAGE_LOCK_RETRY_BUDGET_MS,\n\tFILE_STORAGE_LOCK_RETRY_MAX_DELAY_MS,\n\tFILE_STORAGE_LOCK_RETRY_MIN_DELAY_MS,\n\tisLockError,\n} from \"../lockfile-policy.ts\";\n\nexport const CREDENTIAL_POOL_STATE_FILENAME = \"credential-pool-state.json\";\n\nconst HEX_256_BIT = /^[0-9a-f]{64}$/;\n\nconst leaseSchema = z.strictObject({\n\tid: z.string().min(1).max(128),\n\texpiresAt: z.number().int().positive(),\n});\n\nconst slotStateSchema = z.strictObject({\n\tstateVersion: z.number().int().nonnegative(),\n\tblockedUntil: z.number().int().positive().optional(),\n\tblockReason: z.enum([\"auth_error\", \"rate_limit\", \"account_disabled\"]).optional(),\n\tfailureCount: z.number().int().nonnegative().optional(),\n\tlastSuccessAt: z.number().int().positive().optional(),\n\tcredentialRevision: z.string().regex(HEX_256_BIT).optional(),\n\tlease: leaseSchema.optional(),\n});\n\nexport type CredentialSlotState = Readonly<z.infer<typeof slotStateSchema>>;\n\nconst documentSchema = z.strictObject({\n\tschemaVersion: z.literal(1),\n\tinstallationKey: z.string().regex(HEX_256_BIT),\n\tproviders: z.record(\n\t\tz.string(),\n\t\tz.strictObject({\n\t\t\tlanes: z.record(\n\t\t\t\tz.string(),\n\t\t\t\tz.strictObject({\n\t\t\t\t\tslots: z.record(z.string(), slotStateSchema),\n\t\t\t\t}),\n\t\t\t),\n\t\t}),\n\t),\n});\n\nexport type CredentialPoolStateDocument = z.infer<typeof documentSchema>;\n\nexport function credentialPoolStatePath(agentDir: string = getAgentDir()): string {\n\treturn join(agentDir, CREDENTIAL_POOL_STATE_FILENAME);\n}\n\nconst FILE_WRITE_OPTIONS = { encoding: \"utf-8\", mode: 0o600 } as const;\n\nfunction freshDocument(): CredentialPoolStateDocument {\n\treturn { schemaVersion: 1, installationKey: randomBytes(32).toString(\"hex\"), providers: {} };\n}\n\n/**\n * The sidecar holds only health, so an unreadable or invalid document resets to\n * a fresh one instead of failing auth resolution; the worst outcome of a reset\n * is a cleared cooldown, never lost credential material.\n */\nfunction parseDocument(content: string): CredentialPoolStateDocument {\n\ttry {\n\t\tconst parsed = documentSchema.safeParse(JSON.parse(content));\n\t\treturn parsed.success ? parsed.data : freshDocument();\n\t} catch {\n\t\treturn freshDocument();\n\t}\n}\n\nexport type SlotHealth = \"ready\" | \"blocked\" | \"half_open\";\n\n/** Deadlines are absolute so a restart never re-enables a cooling credential early. */\nexport function slotHealth(state: CredentialSlotState | undefined, now: number): SlotHealth {\n\tif (!state) return \"ready\";\n\t// Auth and billing blocks have no expiry; only credential replacement clears them.\n\tif (state.blockReason === \"auth_error\" || state.blockReason === \"account_disabled\") return \"blocked\";\n\tif (state.blockedUntil !== undefined && state.blockedUntil > now) return \"blocked\";\n\tif (state.blockedUntil !== undefined && state.lease !== undefined && state.lease.expiresAt > now) {\n\t\treturn \"half_open\";\n\t}\n\treturn \"ready\";\n}\n\n/**\n * File-locked health sidecar for credential pools. Never stores credential\n * material: env slots are keyed by an installation-local HMAC revision so a\n * rotated env value clears its own stale block without persisting a raw key\n * hash anywhere.\n */\nexport class CredentialSlotRepository {\n\tprivate readonly path: string;\n\n\tconstructor(path: string = credentialPoolStatePath()) {\n\t\tthis.path = path;\n\t}\n\n\tprivate ensureFile(): void {\n\t\tif (existsSync(this.path)) return;\n\t\tmkdirSync(dirname(this.path), { recursive: true, mode: 0o700 });\n\t\twriteFileSync(this.path, JSON.stringify(freshDocument(), null, 2), FILE_WRITE_OPTIONS);\n\t}\n\n\tprivate async withDocument<T>(\n\t\tfn: (document: CredentialPoolStateDocument) => { result: T; next?: CredentialPoolStateDocument },\n\t): Promise<T> {\n\t\tthis.ensureFile();\n\t\tconst release = await this.acquire();\n\t\ttry {\n\t\t\tconst document = parseDocument(readFileSync(this.path, \"utf-8\"));\n\t\t\tconst { result, next } = fn(document);\n\t\t\tif (next) writeFileSync(this.path, JSON.stringify(next, null, 2), FILE_WRITE_OPTIONS);\n\t\t\treturn result;\n\t\t} finally {\n\t\t\tawait release();\n\t\t}\n\t}\n\n\tprivate async acquire(): Promise<() => Promise<void>> {\n\t\tconst startedAt = Date.now();\n\t\tlet attempt = 0;\n\t\twhile (true) {\n\t\t\ttry {\n\t\t\t\treturn await lockfile.lock(this.path, FILE_STORAGE_LOCK_OPTIONS);\n\t\t\t} catch (error) {\n\t\t\t\tif (!isLockError(error)) throw error;\n\t\t\t\tconst waitedMs = Date.now() - startedAt;\n\t\t\t\tif (waitedMs >= FILE_STORAGE_LOCK_RETRY_BUDGET_MS) {\n\t\t\t\t\tthrow new CredentialStoreBusyError(this.path, waitedMs, error);\n\t\t\t\t}\n\t\t\t\tconst delayMs = Math.min(\n\t\t\t\t\tFILE_STORAGE_LOCK_RETRY_MIN_DELAY_MS * 2 ** attempt,\n\t\t\t\t\tFILE_STORAGE_LOCK_RETRY_MAX_DELAY_MS,\n\t\t\t\t\tFILE_STORAGE_LOCK_RETRY_BUDGET_MS - waitedMs,\n\t\t\t\t);\n\t\t\t\tattempt++;\n\t\t\t\tawait new Promise<void>((resolve) => setTimeout(resolve, delayMs));\n\t\t\t}\n\t\t}\n\t}\n\n\tasync installationKey(): Promise<string> {\n\t\treturn this.withDocument((document) => ({ result: document.installationKey, next: document }));\n\t}\n\n\t/**\n\t * Derives the persistence key for an env slot's health. HMAC over the\n\t * installation key means the revision is useless outside this installation\n\t * and never equals a raw hash of the key material.\n\t */\n\tasync envCredentialRevision(envVarName: string, envValue: string): Promise<string> {\n\t\tconst key = await this.installationKey();\n\t\treturn createHmac(\"sha256\", key).update(`${envVarName}\\0${envValue}`).digest(\"hex\");\n\t}\n\n\tasync listSlots(providerId: string, laneId: string): Promise<Record<string, CredentialSlotState>> {\n\t\treturn this.withDocument((document) => ({\n\t\t\tresult: { ...document.providers[providerId]?.lanes[laneId]?.slots },\n\t\t}));\n\t}\n\n\t/**\n\t * Atomic read-modify-write for one slot's health. `stateVersion` increments\n\t * on every write so concurrent mutators can detect lost updates; returning\n\t * undefined removes the slot state entirely.\n\t */\n\tasync mutateSlotState(\n\t\tproviderId: string,\n\t\tlaneId: string,\n\t\tslotId: string,\n\t\tfn: (current: CredentialSlotState | undefined) => Omit<CredentialSlotState, \"stateVersion\"> | undefined,\n\t): Promise<CredentialSlotState | undefined> {\n\t\treturn this.withDocument((document) => {\n\t\t\tconst provider = document.providers[providerId] ?? { lanes: {} };\n\t\t\tconst lane = provider.lanes[laneId] ?? { slots: {} };\n\t\t\tconst current = lane.slots[slotId];\n\t\t\tconst mutated = fn(current);\n\t\t\tconst slots = { ...lane.slots };\n\t\t\tlet result: CredentialSlotState | undefined;\n\t\t\tif (mutated === undefined) {\n\t\t\t\tdelete slots[slotId];\n\t\t\t} else {\n\t\t\t\tresult = { ...mutated, stateVersion: (current?.stateVersion ?? 0) + 1 };\n\t\t\t\tslots[slotId] = result;\n\t\t\t}\n\t\t\tconst next: CredentialPoolStateDocument = {\n\t\t\t\t...document,\n\t\t\t\tproviders: {\n\t\t\t\t\t...document.providers,\n\t\t\t\t\t[providerId]: { lanes: { ...provider.lanes, [laneId]: { slots } } },\n\t\t\t\t},\n\t\t\t};\n\t\t\treturn { result, next };\n\t\t});\n\t}\n}\n\nexport type HalfOpenLease = { leaseId: string; expiresAt: number };\n\n/**\n * Transitions an expired cooldown atomically to half_open: exactly one caller\n * wins the probe lease; everyone else keeps treating the slot as unavailable\n * until the lease expires or the probe settles the block.\n */\nexport async function acquireHalfOpenLease(\n\trepository: CredentialSlotRepository,\n\tproviderId: string,\n\tlaneId: string,\n\tslotId: string,\n\toptions: { now?: number; leaseTtlMs?: number } = {},\n): Promise<HalfOpenLease | undefined> {\n\tconst now = options.now ?? Date.now();\n\tconst leaseTtlMs = options.leaseTtlMs ?? 30_000;\n\tlet lease: HalfOpenLease | undefined;\n\tawait repository.mutateSlotState(providerId, laneId, slotId, (current) => {\n\t\tif (!current) return current;\n\t\tconst expired = current.blockedUntil !== undefined && current.blockedUntil <= now;\n\t\tconst leaseLive = current.lease !== undefined && current.lease.expiresAt > now;\n\t\tif (!expired || leaseLive || current.blockReason === \"auth_error\") return current;\n\t\tlease = { leaseId: randomUUID(), expiresAt: now + leaseTtlMs };\n\t\treturn { ...current, lease: { id: lease.leaseId, expiresAt: lease.expiresAt } };\n\t});\n\treturn lease;\n}\n"]}

package/dist/core/dynamic-prompt/verification.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verification.d.ts","sourceRoot":"","sources":["../../../src/core/dynamic-prompt/verification.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG;IAChC,EAAE,EACC,qBAAqB,GACrB,gBAAgB,GAChB,uBAAuB,GACvB,yBAAyB,GACzB,0BAA0B,GAC1B,oBAAoB,CAAC;IACxB,OAAO,EAAE,kBAAkB,GAAG,0BAA0B,GAAG,gBAAgB,GAAG,cAAc,GAAG,aAAa,CAAC;IAC7G,SAAS,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;EAoCgB,CAAC;AAEnD,wBAAgB,0BAA0B,IAAI,MAAM,CAMnD;AAED,wBAAgB,wBAAwB,IAAI,MAAM,CAYjD"}
+{"version":3,"file":"verification.d.ts","sourceRoot":"","sources":["../../../src/core/dynamic-prompt/verification.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG;IAChC,EAAE,EACC,qBAAqB,GACrB,gBAAgB,GAChB,uBAAuB,GACvB,yBAAyB,GACzB,0BAA0B,GAC1B,oBAAoB,CAAC;IACxB,OAAO,EAAE,kBAAkB,GAAG,0BAA0B,GAAG,gBAAgB,GAAG,cAAc,GAAG,aAAa,CAAC;IAC7G,SAAS,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,qBAAqB;iBAE5B,qBAAqB;sBAChB,kBAAkB;wBAChB,qGAAqG;;iBAG5G,gBAAgB;sBACX,0BAA0B;wBAElC,wHAAwH;;iBAGrH,uBAAuB;sBAClB,0BAA0B;wBAElC,+IAA+I;;iBAG5I,yBAAyB;sBACpB,gBAAgB;wBAExB,yHAAyH;;iBAGtH,0BAA0B;sBACrB,cAAc;wBAEtB,kMAAkM;;iBAG/L,oBAAoB;sBACf,aAAa;wBAErB,2HAA2H;EAE5E,CAAC;AAEnD,wBAAgB,0BAA0B,IAAI,MAAM,CAMnD;AAED,wBAAgB,wBAAwB,IAAI,MAAM,CAYjD"}

package/dist/core/edited-assistant-message.d.ts

@@ -0,0 +1,24 @@
+import type { AssistantMessage } from "@earendil-works/pi-ai";
+export type AssistantEditReason = "empty" | "not-assistant" | "not-found" | "stale-leaf";
+/** Wire-level code for an assistant-edit failure; stable across transports. */
+export type AssistantEditCode = "empty" | "not_assistant" | "not_found" | "stale_leaf";
+export declare class AssistantEditError extends Error {
+    readonly reason: AssistantEditReason;
+    constructor(reason: AssistantEditReason, message: string);
+    get code(): AssistantEditCode;
+}
+/** Thrown by every tree mutation while a response is streaming; outranks the stale-leaf guard. */
+export declare class SessionStreamingError extends Error {
+    readonly code: "streaming";
+    constructor();
+}
+/** Optimistic-concurrency guard: the caller's leaf token must equal the session's current leaf. */
+export declare function assertExpectedLeaf(expectedLeafId: string | undefined, currentLeafId: string | null): void;
+export declare function assistantTextEquals(original: AssistantMessage, text: string): boolean;
+/**
+ * Text replaces every content block: thinking signatures and tool calls belong to the abandoned
+ * response, and a leaf ending in tool calls without results is rejected by providers.
+ * Model identity and usage stay so per-path cost and context estimates remain accurate.
+ */
+export declare function buildEditedAssistantMessage(original: AssistantMessage, text: string): AssistantMessage;
+//# sourceMappingURL=edited-assistant-message.d.ts.map

package/dist/core/edited-assistant-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edited-assistant-message.d.ts","sourceRoot":"","sources":["../../src/core/edited-assistant-message.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAG9D,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,eAAe,GAAG,WAAW,GAAG,YAAY,CAAC;AAEzF,+EAA+E;AAC/E,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,eAAe,GAAG,WAAW,GAAG,YAAY,CAAC;AASvF,qBAAa,kBAAmB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IAErC,YAAY,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAIvD;IAED,IAAI,IAAI,IAAI,iBAAiB,CAE5B;CACD;AAED,kGAAkG;AAClG,qBAAa,qBAAsB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAG,WAAW,CAAU;IAErC,cAGC;CACD;AAED,mGAAmG;AACnG,wBAAgB,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAMzG;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAErF;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAgBtG"}

package/dist/core/edited-assistant-message.js

@@ -0,0 +1,57 @@
+import { contentText } from "@earendil-works/pi-ai";
+const EDIT_CODES = {
+    empty: "empty",
+    "not-assistant": "not_assistant",
+    "not-found": "not_found",
+    "stale-leaf": "stale_leaf",
+};
+export class AssistantEditError extends Error {
+    constructor(reason, message) {
+        super(message);
+        this.name = "AssistantEditError";
+        this.reason = reason;
+    }
+    get code() {
+        return EDIT_CODES[this.reason];
+    }
+}
+/** Thrown by every tree mutation while a response is streaming; outranks the stale-leaf guard. */
+export class SessionStreamingError extends Error {
+    constructor() {
+        super("Wait for the current response to finish before navigating the session tree.");
+        this.code = "streaming";
+        this.name = "SessionStreamingError";
+    }
+}
+/** Optimistic-concurrency guard: the caller's leaf token must equal the session's current leaf. */
+export function assertExpectedLeaf(expectedLeafId, currentLeafId) {
+    if (expectedLeafId === undefined || expectedLeafId === currentLeafId)
+        return;
+    throw new AssistantEditError("stale-leaf", `Session leaf moved (expected ${expectedLeafId}, now ${currentLeafId ?? "root"})`);
+}
+export function assistantTextEquals(original, text) {
+    return contentText(original.content, "").trim() === text.trim();
+}
+/**
+ * Text replaces every content block: thinking signatures and tool calls belong to the abandoned
+ * response, and a leaf ending in tool calls without results is rejected by providers.
+ * Model identity and usage stay so per-path cost and context estimates remain accurate.
+ */
+export function buildEditedAssistantMessage(original, text) {
+    const trimmed = text.trim();
+    if (trimmed.length === 0) {
+        throw new AssistantEditError("empty", "Edited assistant response cannot be empty");
+    }
+    return {
+        role: "assistant",
+        content: [{ type: "text", text: trimmed }],
+        api: original.api,
+        provider: original.provider,
+        model: original.model,
+        ...(original.responseModel !== undefined ? { responseModel: original.responseModel } : {}),
+        usage: original.usage,
+        stopReason: "stop",
+        timestamp: Date.now(),
+    };
+}
+//# sourceMappingURL=edited-assistant-message.js.map

package/dist/core/edited-assistant-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"edited-assistant-message.js","sourceRoot":"","sources":["../../src/core/edited-assistant-message.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAOpD,MAAM,UAAU,GAA6D;IAC5E,KAAK,EAAE,OAAO;IACd,eAAe,EAAE,eAAe;IAChC,WAAW,EAAE,WAAW;IACxB,YAAY,EAAE,YAAY;CAC1B,CAAC;AAEF,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAG5C,YAAY,MAA2B,EAAE,OAAe;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,IAAI,IAAI;QACP,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;CACD;AAED,kGAAkG;AAClG,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAG/C;QACC,KAAK,CAAC,6EAA6E,CAAC,CAAC;QAH7E,SAAI,GAAG,WAAoB,CAAC;QAIpC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACrC,CAAC;CACD;AAED,mGAAmG;AACnG,MAAM,UAAU,kBAAkB,CAAC,cAAkC,EAAE,aAA4B;IAClG,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,aAAa;QAAE,OAAO;IAC7E,MAAM,IAAI,kBAAkB,CAC3B,YAAY,EACZ,gCAAgC,cAAc,SAAS,aAAa,IAAI,MAAM,GAAG,CACjF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAA0B,EAAE,IAAY;IAC3E,OAAO,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,QAA0B,EAAE,IAAY;IACnF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,kBAAkB,CAAC,OAAO,EAAE,2CAA2C,CAAC,CAAC;IACpF,CAAC;IACD,OAAO;QACN,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC1C,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,GAAG,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,CAAC;AACH,CAAC","sourcesContent":["import type { AssistantMessage } from \"@earendil-works/pi-ai\";\nimport { contentText } from \"@earendil-works/pi-ai\";\n\nexport type AssistantEditReason = \"empty\" | \"not-assistant\" | \"not-found\" | \"stale-leaf\";\n\n/** Wire-level code for an assistant-edit failure; stable across transports. */\nexport type AssistantEditCode = \"empty\" | \"not_assistant\" | \"not_found\" | \"stale_leaf\";\n\nconst EDIT_CODES: Readonly<Record<AssistantEditReason, AssistantEditCode>> = {\n\tempty: \"empty\",\n\t\"not-assistant\": \"not_assistant\",\n\t\"not-found\": \"not_found\",\n\t\"stale-leaf\": \"stale_leaf\",\n};\n\nexport class AssistantEditError extends Error {\n\treadonly reason: AssistantEditReason;\n\n\tconstructor(reason: AssistantEditReason, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"AssistantEditError\";\n\t\tthis.reason = reason;\n\t}\n\n\tget code(): AssistantEditCode {\n\t\treturn EDIT_CODES[this.reason];\n\t}\n}\n\n/** Thrown by every tree mutation while a response is streaming; outranks the stale-leaf guard. */\nexport class SessionStreamingError extends Error {\n\treadonly code = \"streaming\" as const;\n\n\tconstructor() {\n\t\tsuper(\"Wait for the current response to finish before navigating the session tree.\");\n\t\tthis.name = \"SessionStreamingError\";\n\t}\n}\n\n/** Optimistic-concurrency guard: the caller's leaf token must equal the session's current leaf. */\nexport function assertExpectedLeaf(expectedLeafId: string | undefined, currentLeafId: string | null): void {\n\tif (expectedLeafId === undefined || expectedLeafId === currentLeafId) return;\n\tthrow new AssistantEditError(\n\t\t\"stale-leaf\",\n\t\t`Session leaf moved (expected ${expectedLeafId}, now ${currentLeafId ?? \"root\"})`,\n\t);\n}\n\nexport function assistantTextEquals(original: AssistantMessage, text: string): boolean {\n\treturn contentText(original.content, \"\").trim() === text.trim();\n}\n\n/**\n * Text replaces every content block: thinking signatures and tool calls belong to the abandoned\n * response, and a leaf ending in tool calls without results is rejected by providers.\n * Model identity and usage stay so per-path cost and context estimates remain accurate.\n */\nexport function buildEditedAssistantMessage(original: AssistantMessage, text: string): AssistantMessage {\n\tconst trimmed = text.trim();\n\tif (trimmed.length === 0) {\n\t\tthrow new AssistantEditError(\"empty\", \"Edited assistant response cannot be empty\");\n\t}\n\treturn {\n\t\trole: \"assistant\",\n\t\tcontent: [{ type: \"text\", text: trimmed }],\n\t\tapi: original.api,\n\t\tprovider: original.provider,\n\t\tmodel: original.model,\n\t\t...(original.responseModel !== undefined ? { responseModel: original.responseModel } : {}),\n\t\tusage: original.usage,\n\t\tstopReason: \"stop\",\n\t\ttimestamp: Date.now(),\n\t};\n}\n"]}

package/dist/core/experimental.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"experimental.d.ts","sourceRoot":"","sources":["../../src/core/experimental.ts"],"names":[],"mappings":"AAGA,wBAAgB,8BAA8B,IAAI,OAAO,CAExD;AAED,wBAAgB,2BAA2B;;;cAE1C"}
+{"version":3,"file":"experimental.d.ts","sourceRoot":"","sources":["../../src/core/experimental.ts"],"names":[],"mappings":"AAGA,wBAAgB,8BAA8B,IAAI,OAAO,CAExD;AAED,wBAAgB,2BAA2B;mBALC,aAAa;qBAAU,QAAQ;cAO1E"}

package/dist/core/extensions/builtin/ask-user/extension.d.ts

@@ -0,0 +1,3 @@
+import type { ExtensionAPI } from "../../types.ts";
+export default function askUserExtension(pi: ExtensionAPI): void;
+//# sourceMappingURL=extension.d.ts.map

package/dist/core/extensions/builtin/ask-user/extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/ask-user/extension.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAoB,MAAM,gBAAgB,CAAC;AAMrE,MAAM,CAAC,OAAO,UAAU,gBAAgB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAwC/D"}

package/dist/core/extensions/builtin/ask-user/extension.js

@@ -0,0 +1,47 @@
+import { pickVariant, TOOL_NAMES } from "./family.js";
+import { getPendingQuestions } from "./registry.js";
+import { resumeDanglingQuestion } from "./resume.js";
+import { createAskUserTool } from "./tool.js";
+export default function askUserExtension(pi) {
+    pi.registerFlag("no-ask-user", {
+        description: "Disable the built-in question tool.",
+        type: "boolean",
+        default: false,
+    });
+    const state = { timedOut: false, unavailable: false };
+    let registered = false;
+    const cancelPending = (ctx, message) => {
+        for (const entry of getPendingQuestions(ctx.sessionManager.getSessionId()))
+            entry.cancel(message);
+    };
+    const sync = (ctx, model = ctx.model) => {
+        const rest = pi.getActiveTools().filter((name) => !Object.values(TOOL_NAMES).includes(name));
+        if (ctx.getAskUserSettings?.().enabled === false || pi.getFlag("no-ask-user") === true) {
+            cancelPending(ctx, "The pending question was cancelled because ask-user is disabled.");
+            pi.setActiveTools(rest);
+            return;
+        }
+        if (!registered) {
+            pi.registerTool(createAskUserTool("codex", pi, state));
+            pi.registerTool(createAskUserTool("claude", pi, state));
+            registered = true;
+        }
+        pi.setActiveTools(state.unavailable ? rest : [...rest, TOOL_NAMES[pickVariant(model)]]);
+    };
+    pi.on("session_start", async (event, ctx) => {
+        state.timedOut = false;
+        state.unavailable = false;
+        sync(ctx);
+        void resumeDanglingQuestion(pi, event, ctx);
+    });
+    pi.on("model_select", async (event, ctx) => {
+        sync(ctx, event.model);
+    });
+    pi.on("agent_end", async () => {
+        state.timedOut = false;
+    });
+    pi.on("session_shutdown", async (_event, ctx) => {
+        cancelPending(ctx, "The pending question was cancelled because the session closed.");
+    });
+}
+//# sourceMappingURL=extension.js.map

package/dist/core/extensions/builtin/ask-user/extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/ask-user/extension.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAqB,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAEjE,MAAM,CAAC,OAAO,UAAU,gBAAgB,CAAC,EAAgB;IACxD,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE;QAC9B,WAAW,EAAE,qCAAqC;QAClD,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;KACd,CAAC,CAAC;IACH,MAAM,KAAK,GAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACpE,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,MAAM,aAAa,GAAG,CAAC,GAAqB,EAAE,OAAe,EAAE,EAAE;QAChE,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC;YAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnG,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,GAAqB,EAAE,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,EAAE;QACzD,MAAM,IAAI,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7F,IAAI,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC;YACxF,aAAa,CAAC,GAAG,EAAE,kEAAkE,CAAC,CAAC;YACvF,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO;QACR,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,EAAE,CAAC,YAAY,CAAC,iBAAiB,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;YACvD,EAAE,CAAC,YAAY,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;YACxD,UAAU,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC;IACF,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3C,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC;QACvB,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,sBAAsB,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1C,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;QAC7B,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC/C,aAAa,CAAC,GAAG,EAAE,gEAAgE,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { ExtensionAPI, ExtensionContext } from \"../../types.ts\";\nimport { pickVariant, TOOL_NAMES } from \"./family.ts\";\nimport { getPendingQuestions } from \"./registry.ts\";\nimport { resumeDanglingQuestion } from \"./resume.ts\";\nimport { type AskUserState, createAskUserTool } from \"./tool.ts\";\n\nexport default function askUserExtension(pi: ExtensionAPI): void {\n\tpi.registerFlag(\"no-ask-user\", {\n\t\tdescription: \"Disable the built-in question tool.\",\n\t\ttype: \"boolean\",\n\t\tdefault: false,\n\t});\n\tconst state: AskUserState = { timedOut: false, unavailable: false };\n\tlet registered = false;\n\tconst cancelPending = (ctx: ExtensionContext, message: string) => {\n\t\tfor (const entry of getPendingQuestions(ctx.sessionManager.getSessionId())) entry.cancel(message);\n\t};\n\tconst sync = (ctx: ExtensionContext, model = ctx.model) => {\n\t\tconst rest = pi.getActiveTools().filter((name) => !Object.values(TOOL_NAMES).includes(name));\n\t\tif (ctx.getAskUserSettings?.().enabled === false || pi.getFlag(\"no-ask-user\") === true) {\n\t\t\tcancelPending(ctx, \"The pending question was cancelled because ask-user is disabled.\");\n\t\t\tpi.setActiveTools(rest);\n\t\t\treturn;\n\t\t}\n\t\tif (!registered) {\n\t\t\tpi.registerTool(createAskUserTool(\"codex\", pi, state));\n\t\t\tpi.registerTool(createAskUserTool(\"claude\", pi, state));\n\t\t\tregistered = true;\n\t\t}\n\t\tpi.setActiveTools(state.unavailable ? rest : [...rest, TOOL_NAMES[pickVariant(model)]]);\n\t};\n\tpi.on(\"session_start\", async (event, ctx) => {\n\t\tstate.timedOut = false;\n\t\tstate.unavailable = false;\n\t\tsync(ctx);\n\t\tvoid resumeDanglingQuestion(pi, event, ctx);\n\t});\n\tpi.on(\"model_select\", async (event, ctx) => {\n\t\tsync(ctx, event.model);\n\t});\n\tpi.on(\"agent_end\", async () => {\n\t\tstate.timedOut = false;\n\t});\n\tpi.on(\"session_shutdown\", async (_event, ctx) => {\n\t\tcancelPending(ctx, \"The pending question was cancelled because the session closed.\");\n\t});\n}\n"]}

package/dist/core/extensions/builtin/ask-user/family.d.ts

@@ -0,0 +1,8 @@
+import type { Model } from "@earendil-works/pi-ai";
+import type { AskUserVariant } from "./schema.ts";
+export declare function pickVariant(model: Pick<Model<string>, "api" | "id"> | undefined): AskUserVariant;
+export declare const TOOL_NAMES: {
+    codex: string;
+    claude: string;
+};
+//# sourceMappingURL=family.d.ts.map

package/dist/core/extensions/builtin/ask-user/family.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"family.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/ask-user/family.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,wBAAgB,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,SAAS,GAAG,cAAc,CAEhG;AACD,eAAO,MAAM,UAAU;IAAK,KAAK;IAAwB,MAAM;CAAuB,CAAC"}

package/dist/core/extensions/builtin/ask-user/family.js

@@ -0,0 +1,6 @@
+import { getApplyPatchWireMode } from "../gpt-apply-patch/index.js";
+export function pickVariant(model) {
+    return getApplyPatchWireMode(model) !== "none" ? "codex" : "claude";
+}
+export const TOOL_NAMES = { codex: "request_user_input", claude: "ask_user_question" };
+//# sourceMappingURL=family.js.map

package/dist/core/extensions/builtin/ask-user/family.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"family.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/ask-user/family.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,MAAM,UAAU,WAAW,CAAC,KAAoD;IAC/E,OAAO,qBAAqB,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AACrE,CAAC;AACD,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC","sourcesContent":["import type { Model } from \"@earendil-works/pi-ai\";\nimport { getApplyPatchWireMode } from \"../gpt-apply-patch/index.ts\";\nimport type { AskUserVariant } from \"./schema.ts\";\n\nexport function pickVariant(model: Pick<Model<string>, \"api\" | \"id\"> | undefined): AskUserVariant {\n\treturn getApplyPatchWireMode(model) !== \"none\" ? \"codex\" : \"claude\";\n}\nexport const TOOL_NAMES = { codex: \"request_user_input\", claude: \"ask_user_question\" };\n"]}

package/dist/core/extensions/builtin/ask-user/format.d.ts

@@ -0,0 +1,22 @@
+import { type AskUserVariant, type QuestionRequest, type QuestionResponse } from "./schema.ts";
+export type CodexResultDetails = {
+    answers: Record<string, {
+        answers: string[];
+    }>;
+    comment?: string;
+    unanswered: string[];
+    status: QuestionResponse["status"];
+};
+export type ClaudeResultDetails = {
+    questions: QuestionRequest["questions"];
+    answers: Record<string, string>;
+    freeText?: string;
+    unanswered: string[];
+    status: QuestionResponse["status"];
+};
+type Questions = QuestionRequest["questions"];
+export declare function formatResultText(_variant: AskUserVariant, response: QuestionResponse, questions?: Questions): string;
+export declare function formatUserMessage(response: QuestionResponse, requestId: string, questions?: Questions): string;
+export declare function formatResultDetails(variant: AskUserVariant, response: QuestionResponse, questions?: Questions): CodexResultDetails | ClaudeResultDetails;
+export {};
+//# sourceMappingURL=format.d.ts.map

package/dist/core/extensions/builtin/ask-user/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/ask-user/format.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,cAAc,EAEnB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,kBAAkB,GAAG;IAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IACjC,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;CACnC,CAAC;AAEF,KAAK,SAAS,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;AAkE9C,wBAAgB,gBAAgB,CAC/B,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,gBAAgB,EAC1B,SAAS,GAAE,SAAc,GACvB,MAAM,CAER;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,GAAE,SAAc,GAAG,MAAM,CAElH;AAQD,wBAAgB,mBAAmB,CAClC,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,gBAAgB,EAC1B,SAAS,GAAE,SAAc,GACvB,kBAAkB,GAAG,mBAAmB,CA2B1C"}

package/dist/core/extensions/builtin/ask-user/format.js

@@ -0,0 +1,109 @@
+import { DEFAULT_ASK_USER_TIMEOUT_MS, } from "./schema.js";
+function headerFor(id, questions) {
+    return questions.find((question) => question.id === id)?.header ?? id;
+}
+function questionTextFor(id, questions) {
+    return questions.find((question) => question.id === id)?.question ?? id;
+}
+function answerBody(answer) {
+    if (!answer)
+        return undefined;
+    if (answer.selected.length > 0)
+        return answer.selected.join(", ");
+    const text = answer.text?.trim();
+    return text === undefined || text.length === 0 ? undefined : text;
+}
+function answeredLines(response, questions) {
+    const lines = [];
+    const seen = new Set();
+    for (const question of questions) {
+        const body = answerBody(response.answers[question.id]);
+        if (body !== undefined) {
+            lines.push(`${question.header}: ${body}`);
+            seen.add(question.id);
+        }
+    }
+    for (const [id, answer] of Object.entries(response.answers)) {
+        if (seen.has(id))
+            continue;
+        const body = answerBody(answer);
+        if (body !== undefined)
+            lines.push(`${headerFor(id, questions)}: ${body}`);
+    }
+    return lines;
+}
+function formatBody(response, questions) {
+    switch (response.status) {
+        case "answered":
+            return answeredLines(response, questions).join("\n");
+        case "comment-submitted": {
+            const lines = [`The user responded: ${response.comment?.trim() ?? ""}`, ...answeredLines(response, questions)];
+            const unanswered = response.unanswered.map((id) => headerFor(id, questions));
+            if (unanswered.length > 0)
+                lines.push(`Unanswered: ${unanswered.join(", ")}`);
+            return lines.join("\n");
+        }
+        case "timed_out": {
+            const minutes = Math.round((response.autoResolvedAfterMs ?? DEFAULT_ASK_USER_TIMEOUT_MS) / 60_000);
+            const lines = [
+                `The user did not answer within ${minutes} minutes. (사용자가 답변을 안하고 timeout 으로 종료됨)`,
+            ];
+            const selected = answeredLines(response, questions);
+            if (selected.length > 0) {
+                lines.push(`Before going idle the user had selected: ${selected.join("; ")}`);
+            }
+            lines.push("Continue the work to completion on your best judgment; do not ask this question again this turn.");
+            return lines.join("\n");
+        }
+        case "cancelled":
+            return "The user dismissed the question.";
+        case "orphaned-after-restart":
+            return "The pending question could not be resumed after a restart; continue on best judgment.";
+        case "unavailable":
+            return "This session has no user attached (subagent or headless); decide on best judgment.";
+    }
+}
+export function formatResultText(_variant, response, questions = []) {
+    return formatBody(response, questions);
+}
+export function formatUserMessage(response, requestId, questions = []) {
+    return `[Answer to question ${requestId}]\n${formatBody(response, questions)}`;
+}
+function selectedAnswers(answer) {
+    if (answer.selected.length > 0)
+        return answer.selected;
+    const text = answer.text?.trim();
+    return text === undefined || text.length === 0 ? [] : [text];
+}
+export function formatResultDetails(variant, response, questions = []) {
+    if (variant === "codex") {
+        const answers = {};
+        for (const [id, answer] of Object.entries(response.answers)) {
+            answers[id] = { answers: selectedAnswers(answer) };
+        }
+        const details = {
+            answers,
+            unanswered: response.unanswered,
+            status: response.status,
+        };
+        if (response.comment !== undefined)
+            details.comment = response.comment;
+        return details;
+    }
+    const answers = {};
+    for (const [id, answer] of Object.entries(response.answers)) {
+        const body = answerBody(answer);
+        if (body !== undefined)
+            answers[questionTextFor(id, questions)] = body;
+    }
+    const details = {
+        questions,
+        answers,
+        unanswered: response.unanswered.map((id) => questionTextFor(id, questions)),
+        status: response.status,
+    };
+    if (response.comment !== undefined)
+        details.freeText = response.comment;
+    return details;
+}
+//# sourceMappingURL=format.js.map

package/dist/core/extensions/builtin/ask-user/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/ask-user/format.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,2BAA2B,GAG3B,MAAM,aAAa,CAAC;AAmBrB,SAAS,SAAS,CAAC,EAAU,EAAE,SAAoB;IAClD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,eAAe,CAAC,EAAU,EAAE,SAAoB;IACxD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,UAAU,CAAC,MAAyD;IAC5E,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,QAA0B,EAAE,SAAoB;IACtE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACvD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;IACF,CAAC;IACD,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,QAA0B,EAAE,SAAoB;IACnE,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzB,KAAK,UAAU;YACd,OAAO,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,KAAK,mBAAmB,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,CAAC,uBAAuB,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;YAC/G,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;YAC7E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,eAAe,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9E,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,KAAK,WAAW,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,mBAAmB,IAAI,2BAA2B,CAAC,GAAG,MAAM,CAAC,CAAC;YACnG,MAAM,KAAK,GAAG;gBACb,kCAAkC,OAAO,yCAAyC;aAClF,CAAC;YACF,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACpD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,4CAA4C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAC;YAC/G,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,KAAK,WAAW;YACf,OAAO,kCAAkC,CAAC;QAC3C,KAAK,wBAAwB;YAC5B,OAAO,uFAAuF,CAAC;QAChG,KAAK,aAAa;YACjB,OAAO,oFAAoF,CAAC;IAC9F,CAAC;AACF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC/B,QAAwB,EACxB,QAA0B,EAC1B,SAAS,GAAc,EAAE;IAEzB,OAAO,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAA0B,EAAE,SAAiB,EAAE,SAAS,GAAc,EAAE;IACzG,OAAO,uBAAuB,SAAS,MAAM,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,eAAe,CAAC,MAA6C;IACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,mBAAmB,CAClC,OAAuB,EACvB,QAA0B,EAC1B,SAAS,GAAc,EAAE;IAEzB,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,OAAO,GAAkC,EAAE,CAAC;QAClD,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,OAAO,GAAuB;YACnC,OAAO;YACP,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;SACvB,CAAC;QACF,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACvE,OAAO,OAAO,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAwB;QACpC,SAAS;QACT,OAAO;QACP,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC3E,MAAM,EAAE,QAAQ,CAAC,MAAM;KACvB,CAAC;IACF,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC;IACxE,OAAO,OAAO,CAAC;AAChB,CAAC","sourcesContent":["import {\n\ttype AskUserVariant,\n\tDEFAULT_ASK_USER_TIMEOUT_MS,\n\ttype QuestionRequest,\n\ttype QuestionResponse,\n} from \"./schema.ts\";\n\nexport type CodexResultDetails = {\n\tanswers: Record<string, { answers: string[] }>;\n\tcomment?: string;\n\tunanswered: string[];\n\tstatus: QuestionResponse[\"status\"];\n};\n\nexport type ClaudeResultDetails = {\n\tquestions: QuestionRequest[\"questions\"];\n\tanswers: Record<string, string>;\n\tfreeText?: string;\n\tunanswered: string[];\n\tstatus: QuestionResponse[\"status\"];\n};\n\ntype Questions = QuestionRequest[\"questions\"];\n\nfunction headerFor(id: string, questions: Questions): string {\n\treturn questions.find((question) => question.id === id)?.header ?? id;\n}\n\nfunction questionTextFor(id: string, questions: Questions): string {\n\treturn questions.find((question) => question.id === id)?.question ?? id;\n}\n\nfunction answerBody(answer: { selected: string[]; text?: string } | undefined): string | undefined {\n\tif (!answer) return undefined;\n\tif (answer.selected.length > 0) return answer.selected.join(\", \");\n\tconst text = answer.text?.trim();\n\treturn text === undefined || text.length === 0 ? undefined : text;\n}\n\nfunction answeredLines(response: QuestionResponse, questions: Questions): string[] {\n\tconst lines: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const question of questions) {\n\t\tconst body = answerBody(response.answers[question.id]);\n\t\tif (body !== undefined) {\n\t\t\tlines.push(`${question.header}: ${body}`);\n\t\t\tseen.add(question.id);\n\t\t}\n\t}\n\tfor (const [id, answer] of Object.entries(response.answers)) {\n\t\tif (seen.has(id)) continue;\n\t\tconst body = answerBody(answer);\n\t\tif (body !== undefined) lines.push(`${headerFor(id, questions)}: ${body}`);\n\t}\n\treturn lines;\n}\n\nfunction formatBody(response: QuestionResponse, questions: Questions): string {\n\tswitch (response.status) {\n\t\tcase \"answered\":\n\t\t\treturn answeredLines(response, questions).join(\"\\n\");\n\t\tcase \"comment-submitted\": {\n\t\t\tconst lines = [`The user responded: ${response.comment?.trim() ?? \"\"}`, ...answeredLines(response, questions)];\n\t\t\tconst unanswered = response.unanswered.map((id) => headerFor(id, questions));\n\t\t\tif (unanswered.length > 0) lines.push(`Unanswered: ${unanswered.join(\", \")}`);\n\t\t\treturn lines.join(\"\\n\");\n\t\t}\n\t\tcase \"timed_out\": {\n\t\t\tconst minutes = Math.round((response.autoResolvedAfterMs ?? DEFAULT_ASK_USER_TIMEOUT_MS) / 60_000);\n\t\t\tconst lines = [\n\t\t\t\t`The user did not answer within ${minutes} minutes. (사용자가 답변을 안하고 timeout 으로 종료됨)`,\n\t\t\t];\n\t\t\tconst selected = answeredLines(response, questions);\n\t\t\tif (selected.length > 0) {\n\t\t\t\tlines.push(`Before going idle the user had selected: ${selected.join(\"; \")}`);\n\t\t\t}\n\t\t\tlines.push(\"Continue the work to completion on your best judgment; do not ask this question again this turn.\");\n\t\t\treturn lines.join(\"\\n\");\n\t\t}\n\t\tcase \"cancelled\":\n\t\t\treturn \"The user dismissed the question.\";\n\t\tcase \"orphaned-after-restart\":\n\t\t\treturn \"The pending question could not be resumed after a restart; continue on best judgment.\";\n\t\tcase \"unavailable\":\n\t\t\treturn \"This session has no user attached (subagent or headless); decide on best judgment.\";\n\t}\n}\n\nexport function formatResultText(\n\t_variant: AskUserVariant,\n\tresponse: QuestionResponse,\n\tquestions: Questions = [],\n): string {\n\treturn formatBody(response, questions);\n}\n\nexport function formatUserMessage(response: QuestionResponse, requestId: string, questions: Questions = []): string {\n\treturn `[Answer to question ${requestId}]\\n${formatBody(response, questions)}`;\n}\n\nfunction selectedAnswers(answer: { selected: string[]; text?: string }): string[] {\n\tif (answer.selected.length > 0) return answer.selected;\n\tconst text = answer.text?.trim();\n\treturn text === undefined || text.length === 0 ? [] : [text];\n}\n\nexport function formatResultDetails(\n\tvariant: AskUserVariant,\n\tresponse: QuestionResponse,\n\tquestions: Questions = [],\n): CodexResultDetails | ClaudeResultDetails {\n\tif (variant === \"codex\") {\n\t\tconst answers: CodexResultDetails[\"answers\"] = {};\n\t\tfor (const [id, answer] of Object.entries(response.answers)) {\n\t\t\tanswers[id] = { answers: selectedAnswers(answer) };\n\t\t}\n\t\tconst details: CodexResultDetails = {\n\t\t\tanswers,\n\t\t\tunanswered: response.unanswered,\n\t\t\tstatus: response.status,\n\t\t};\n\t\tif (response.comment !== undefined) details.comment = response.comment;\n\t\treturn details;\n\t}\n\tconst answers: Record<string, string> = {};\n\tfor (const [id, answer] of Object.entries(response.answers)) {\n\t\tconst body = answerBody(answer);\n\t\tif (body !== undefined) answers[questionTextFor(id, questions)] = body;\n\t}\n\tconst details: ClaudeResultDetails = {\n\t\tquestions,\n\t\tanswers,\n\t\tunanswered: response.unanswered.map((id) => questionTextFor(id, questions)),\n\t\tstatus: response.status,\n\t};\n\tif (response.comment !== undefined) details.freeText = response.comment;\n\treturn details;\n}\n"]}

package/dist/core/extensions/builtin/ask-user/index.d.ts

@@ -0,0 +1,4 @@
+export { default } from "./extension.ts";
+export { pickVariant } from "./family.ts";
+export { getPendingQuestions, type PendingQuestionEntry, type QuestionDialogOptions } from "./registry.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/core/extensions/builtin/ask-user/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/ask-user/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,KAAK,oBAAoB,EAAE,KAAK,qBAAqB,EAAE,MAAM,eAAe,CAAC"}

package/dist/core/extensions/builtin/ask-user/index.js

@@ -0,0 +1,4 @@
+export { default } from "./extension.js";
+export { pickVariant } from "./family.js";
+export { getPendingQuestions } from "./registry.js";
+//# sourceMappingURL=index.js.map

package/dist/core/extensions/builtin/ask-user/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/ask-user/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAyD,MAAM,eAAe,CAAC","sourcesContent":["export { default } from \"./extension.ts\";\nexport { pickVariant } from \"./family.ts\";\nexport { getPendingQuestions, type PendingQuestionEntry, type QuestionDialogOptions } from \"./registry.ts\";\n"]}