@cotal-ai/runtime 0.47.0 → 0.48.0

package/dist/run-scope-authority.d.ts

@@ -0,0 +1,51 @@
+import { type EffectContext, type JournalEntry } from "@cotal-ai/lang";
+import { type RunHostPlanes, type RunHostLease, type RunJournalActivation } from "@cotal-ai/core";
+interface RunScopeSnapshot {
+    readonly entries: readonly JournalEntry[];
+    readonly activation: RunJournalActivation | undefined;
+}
+/** The reader and its replay durable are host-bound. No request selects another run. */
+export declare function createRunScopeAuthority(broker: RunHostPlanes, runId: string, lease: RunHostLease): RunScopeAuthority;
+export type PauseOperation = "read" | "mint" | "attach" | "rearm" | "heartbeat" | "claim" | "fire";
+export type WaitOperation = "open" | "fetch" | "ack" | "close";
+export declare class RunScopeDenied extends Error {
+    constructor(runId: string, resource: string, operation: string);
+}
+/** The caller supplies a reader already bound to one run's broker journal. Requests cannot
+ *  replace that reader or provide their own entries. Each decision uses a fresh folded snapshot. */
+export declare class RunScopeAuthority {
+    private readonly runId;
+    private readonly readJournal;
+    private readonly attempt;
+    private reading;
+    constructor(runId: string, readJournal: () => Promise<RunScopeSnapshot>, attempt: Pick<RunHostLease, "holder" | "epoch" | "fencingToken">);
+    private entries;
+    /** Fork prefixes keep settled parent ids as history. Such an entry can be replayed but
+     *  cannot authorize this child to operate on a parent's checkpoint or wait consumer. */
+    private owns;
+    journal(): Promise<readonly JournalEntry[]>;
+    effect(kind: string, ctx: Pick<EffectContext, "key" | "requestId" | "attempt">): Promise<JournalEntry>;
+    private cleanup;
+    /** Cleanup authority comes from the settled parent scope. A settled child alone carries none. */
+    cleanupEntries(): Promise<readonly JournalEntry[]>;
+    pause(token: string, operation: PauseOperation): Promise<JournalEntry>;
+    wait(requestId: string, operation: WaitOperation): Promise<JournalEntry>;
+    matchedMessage(requestId: string, sequence: number): Promise<JournalEntry>;
+    /** The driver cannot add tokens to the adoption sweep. Plane status still decides whether
+     *  a derived wait timer exists and needs rearming. This list never authorizes its first mint. */
+    rearmTokens(): Promise<readonly string[]>;
+}
+/** A receipt's identity is held in a WeakMap. Serializing, copying or inventing a receipt
+ *  does not copy the delivery it authorizes. The host never exposes its ACK subject. */
+export interface WaitReceipt {
+    readonly _brand: "WaitReceipt";
+}
+export declare class WaitReceipts {
+    private readonly deliveries;
+    private readonly byWait;
+    issue(requestId: string, ack: () => void | Promise<void>): WaitReceipt;
+    ack(requestId: string, receipt: WaitReceipt): Promise<void>;
+    close(requestId: string): void;
+}
+export {};
+//# sourceMappingURL=run-scope-authority.d.ts.map

package/dist/run-scope-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-scope-authority.d.ts","sourceRoot":"","sources":["../src/run-scope-authority.ts"],"names":[],"mappings":"AACA,OAAO,EAAyD,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9H,OAAO,EAAoB,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEpH,UAAU,gBAAgB;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,oBAAoB,GAAG,SAAS,CAAC;CACvD;AAED,wFAAwF;AACxF,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,YAAY,GAClB,iBAAiB,CAUnB;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,GAAG,OAAO,GAAG,MAAM,CAAC;AACnG,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,OAAO,CAAC;AAE/D,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAI/D;AAED;oGACoG;AACpG,qBAAa,iBAAiB;IAI1B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAL1B,OAAO,CAAC,OAAO,CAAoC;gBAGhC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAC5C,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,OAAO,GAAG,cAAc,CAAC;YAGrE,OAAO;IAgBrB;4FACwF;IACxF,OAAO,CAAC,IAAI;IASN,OAAO,IAAI,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAI3C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,WAAW,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IAU5G,OAAO,CAAC,OAAO;IAaf,iGAAiG;IAC3F,cAAc,IAAI,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAMlD,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IAiBtE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAWxE,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAOhF;qGACiG;IAC3F,WAAW,IAAI,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;CAKhD;AAoBD;wFACwF;AACxF,MAAM,WAAW,WAAW;IAAG,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAAE;AAE/D,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsF;IACjH,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAE9D,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW;IAShE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAWjE,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;CAM/B"}

package/dist/run-scope-authority.js

@@ -0,0 +1,193 @@
+import { createHash } from "node:crypto";
+import { Journal, digest, journalEntryKeyString, stepKeyString } from "@cotal-ai/lang";
+import { replayRunJournal } from "@cotal-ai/core";
+/** The reader and its replay durable are host-bound. No request selects another run. */
+export function createRunScopeAuthority(broker, runId, lease) {
+    const pinned = structuredClone(lease);
+    return new RunScopeAuthority(runId, async () => {
+        const replay = await replayRunJournal(broker.js, broker.jsm, broker.space, runId, pinned.takeoverId);
+        const last = replay.records.findLast(({ record }) => record.kind === "activation")?.record;
+        return {
+            entries: replay.records.flatMap(({ record }) => record.kind === "step" ? [record.entry] : []),
+            activation: last?.kind === "activation" ? last : undefined,
+        };
+    }, pinned);
+}
+export class RunScopeDenied extends Error {
+    constructor(runId, resource, operation) {
+        super(`run ${runId} has no current journal authority to ${operation} ${resource}`);
+        this.name = "RunScopeDenied";
+    }
+}
+/** The caller supplies a reader already bound to one run's broker journal. Requests cannot
+ *  replace that reader or provide their own entries. Each decision uses a fresh folded snapshot. */
+export class RunScopeAuthority {
+    runId;
+    readJournal;
+    attempt;
+    reading = Promise.resolve();
+    constructor(runId, readJournal, attempt) {
+        this.runId = runId;
+        this.readJournal = readJournal;
+        this.attempt = attempt;
+    }
+    async entries() {
+        const reading = this.reading.then(() => this.readJournal());
+        this.reading = reading.then(() => undefined, () => undefined);
+        const snapshot = await reading;
+        const active = snapshot.activation;
+        if (active === undefined || active.run !== this.runId || active.holder !== this.attempt.holder
+            || active.epoch !== this.attempt.epoch || active.fencingToken !== this.attempt.fencingToken)
+            throw new RunScopeDenied(this.runId, "drive attempt", "use superseded host");
+        const entries = new Journal({ run: this.runId, entries: snapshot.entries }).entries();
+        for (const entry of entries) {
+            if (entry.requestId === undefined || entry.state === "settled")
+                continue;
+            if (!this.owns(entry))
+                throw new RunScopeDenied(this.runId, entry.requestId, "load");
+        }
+        return entries;
+    }
+    /** Fork prefixes keep settled parent ids as history. Such an entry can be replayed but
+     *  cannot authorize this child to operate on a parent's checkpoint or wait consumer. */
+    owns(entry) {
+        if (entry.requestId === undefined)
+            return false;
+        const attempt = entry.attempt ?? 0;
+        if (!Number.isSafeInteger(attempt) || attempt < 0)
+            return false;
+        const hash = digest([this.runId, journalEntryKeyString(entry), entry.inputHash, attempt]);
+        const expected = Buffer.from(hash.slice("sha256:".length), "hex").toString("base64url");
+        return entry.requestId === expected;
+    }
+    async journal() {
+        return this.entries();
+    }
+    async effect(kind, ctx) {
+        const entries = await this.entries();
+        const entry = entries.find((candidate) => journalEntryKeyString(candidate) === stepKeyString(ctx.key));
+        if (entry === undefined || entry.kind !== kind || entry.requestId !== ctx.requestId
+            || (entry.attempt ?? 0) !== ctx.attempt || entry.state !== "pending"
+            || this.cleanup(entries).has(journalEntryKeyString(entry)))
+            throw new RunScopeDenied(this.runId, ctx.requestId, `perform ${kind}`);
+        return entry;
+    }
+    cleanup(entries) {
+        const owed = new Set();
+        for (const parent of entries) {
+            if (parent.state !== "settled" || parent.cancel === undefined || parent.cancel.issued)
+                continue;
+            const prefixes = parent.cancel.losers.map((branch) => `${journalEntryKeyString(parent)}/b:${branch}/`);
+            for (const entry of entries) {
+                const key = journalEntryKeyString(entry);
+                if (prefixes.some((prefix) => key.startsWith(prefix)))
+                    owed.add(key);
+            }
+        }
+        return owed;
+    }
+    /** Cleanup authority comes from the settled parent scope. A settled child alone carries none. */
+    async cleanupEntries() {
+        const entries = await this.entries();
+        const owed = this.cleanup(entries);
+        return entries.filter((entry) => this.owns(entry) && owed.has(journalEntryKeyString(entry)));
+    }
+    async pause(token, operation) {
+        const entries = await this.entries();
+        const entry = entries.find((candidate) => this.owns(candidate) && pauseTokens(candidate).includes(token));
+        if (entry !== undefined) {
+            if (entry.kind === "wait" && (operation === "mint" || operation === "heartbeat")) {
+                const timers = entry.external?.waitTimers;
+                if (!Array.isArray(timers) || !timers.includes(token))
+                    throw new RunScopeDenied(this.runId, token, `${operation} unrecorded wait timer`);
+            }
+            if (operation === "read")
+                return entry;
+            const cleaning = this.cleanup(entries).has(journalEntryKeyString(entry));
+            if (operation === "claim" && cleaning)
+                return entry;
+            if (entry.state === "pending" && !cleaning)
+                return entry;
+        }
+        throw new RunScopeDenied(this.runId, token, operation);
+    }
+    async wait(requestId, operation) {
+        const entries = await this.entries();
+        const entry = entries.find((candidate) => this.owns(candidate) && candidate.kind === "wait" && candidate.requestId === requestId);
+        if (entry !== undefined) {
+            const cleaning = this.cleanup(entries).has(journalEntryKeyString(entry));
+            if (operation === "close" && cleaning)
+                return entry;
+            if (entry.state === "pending" && !cleaning)
+                return entry;
+        }
+        throw new RunScopeDenied(this.runId, requestId, operation);
+    }
+    async matchedMessage(requestId, sequence) {
+        const entry = (await this.entries()).find((candidate) => this.owns(candidate) && candidate.kind === "wait" && candidate.requestId === requestId);
+        if (!Number.isSafeInteger(sequence) || sequence <= 0 || entry?.external?.chatSeq !== sequence)
+            throw new RunScopeDenied(this.runId, `${requestId}/${sequence}`, "read message");
+        return entry;
+    }
+    /** The driver cannot add tokens to the adoption sweep. Plane status still decides whether
+     *  a derived wait timer exists and needs rearming. This list never authorizes its first mint. */
+    async rearmTokens() {
+        const entries = await this.entries();
+        const owed = this.cleanup(entries);
+        return entries.filter((entry) => this.owns(entry) && entry.state === "pending" && !owed.has(journalEntryKeyString(entry))).flatMap(pauseTokens);
+    }
+}
+/** Identities a step can own. An ask's old attempt drops out as soon as the next bind lands. */
+function pauseTokens(entry) {
+    const id = entry.requestId;
+    if (id === undefined)
+        return [];
+    if (entry.kind === "sleep" || entry.kind === "checkpoint" || entry.kind === "turn")
+        return [id];
+    if (entry.kind === "wait")
+        return [id, derive(id, "wait-timeout")];
+    if (entry.kind !== "ask")
+        return [];
+    const attempt = entry.external?.attempt ?? 1;
+    if (typeof attempt !== "number" || !Number.isSafeInteger(attempt) || attempt < 1)
+        return [];
+    const expected = attempt === 1 ? id : derive(id, `ask-attempt-${attempt}`);
+    if (entry.external?.askToken !== undefined && entry.external.askToken !== expected)
+        return [];
+    return [expected];
+}
+function derive(requestId, purpose) {
+    return createHash("sha256").update(`${requestId}:${purpose}`, "utf8").digest("base64url");
+}
+export class WaitReceipts {
+    deliveries = new WeakMap();
+    byWait = new Map();
+    issue(requestId, ack) {
+        const receipt = Object.freeze({ _brand: "WaitReceipt" });
+        this.deliveries.set(receipt, { requestId, ack });
+        const held = this.byWait.get(requestId) ?? new Set();
+        held.add(receipt);
+        this.byWait.set(requestId, held);
+        return receipt;
+    }
+    async ack(requestId, receipt) {
+        const delivery = this.deliveries.get(receipt);
+        if (delivery === undefined || delivery.requestId !== requestId)
+            throw new Error(`wait ${requestId} has no live delivery for this receipt`);
+        this.deliveries.delete(receipt);
+        const held = this.byWait.get(requestId);
+        held.delete(receipt);
+        if (held.size === 0)
+            this.byWait.delete(requestId);
+        await delivery.ack();
+    }
+    close(requestId) {
+        const held = this.byWait.get(requestId);
+        if (held === undefined)
+            return;
+        for (const receipt of held)
+            this.deliveries.delete(receipt);
+        this.byWait.delete(requestId);
+    }
+}
+//# sourceMappingURL=run-scope-authority.js.map

package/dist/run-scope-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-scope-authority.js","sourceRoot":"","sources":["../src/run-scope-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,aAAa,EAAyC,MAAM,gBAAgB,CAAC;AAC9H,OAAO,EAAE,gBAAgB,EAAoE,MAAM,gBAAgB,CAAC;AAOpH,wFAAwF;AACxF,MAAM,UAAU,uBAAuB,CACrC,MAAqB,EACrB,KAAa,EACb,KAAmB;IAEnB,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,IAAI,iBAAiB,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QACrG,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,MAAM,CAAC;QAC3F,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7G,UAAU,EAAE,IAAI,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SAC3D,CAAC;IACJ,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC;AAKD,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,KAAa,EAAE,QAAgB,EAAE,SAAiB;QAC5D,KAAK,CAAC,OAAO,KAAK,wCAAwC,SAAS,IAAI,QAAQ,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED;oGACoG;AACpG,MAAM,OAAO,iBAAiB;IAIT;IACA;IACA;IALX,OAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEnD,YACmB,KAAa,EACb,WAA4C,EAC5C,OAAgE;QAFhE,UAAK,GAAL,KAAK,CAAQ;QACb,gBAAW,GAAX,WAAW,CAAiC;QAC5C,YAAO,GAAP,OAAO,CAAyD;IAChF,CAAC;IAEI,KAAK,CAAC,OAAO;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;QAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM;eACzF,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY;YAC3F,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,qBAAqB,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACtF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;gBAAE,SAAS;YACzE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;4FACwF;IAChF,IAAI,CAAC,KAAmB;QAC9B,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxF,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,GAAyD;QAClF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,qBAAqB,CAAC,SAAS,CAAC,KAAK,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACvG,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS;eAC9E,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;eACjE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAC1D,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,OAAO,CAAC,OAAgC;QAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM;gBAAE,SAAS;YAChG,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC;YACvG,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;gBACzC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iGAAiG;IACjG,KAAK,CAAC,cAAc;QAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,SAAyB;QAClD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1G,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,WAAW,CAAC,EAAE,CAAC;gBACjF,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;gBAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACnD,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,SAAS,wBAAwB,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,SAAS,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;YACzE,IAAI,SAAS,KAAK,OAAO,IAAI,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACpD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;QAC3D,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB,EAAE,SAAwB;QACpD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QAClI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;YACzE,IAAI,SAAS,KAAK,OAAO,IAAI,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACpD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;QAC3D,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,QAAgB;QACtD,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QACjJ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,KAAK,EAAE,QAAQ,EAAE,OAAO,KAAK,QAAQ;YAC3F,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,SAAS,IAAI,QAAQ,EAAE,EAAE,cAAc,CAAC,CAAC;QACnF,OAAO,KAAK,CAAC;IACf,CAAC;IAED;qGACiG;IACjG,KAAK,CAAC,WAAW;QACf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAClJ,CAAC;CACF;AAED,gGAAgG;AAChG,SAAS,WAAW,CAAC,KAAmB;IACtC,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;IAC3B,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAChG,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC;IAC7C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5F,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,OAAO,EAAE,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,QAAQ,EAAE,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC9F,OAAO,CAAC,QAAQ,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,MAAM,CAAC,SAAiB,EAAE,OAAe;IAChD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,IAAI,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC5F,CAAC;AAMD,MAAM,OAAO,YAAY;IACN,UAAU,GAAG,IAAI,OAAO,EAAuE,CAAC;IAChG,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE9D,KAAK,CAAC,SAAiB,EAAE,GAA+B;QACtD,MAAM,OAAO,GAAgB,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAe,CAAC;QAClE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,OAAoB;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;YAC5D,MAAM,IAAI,KAAK,CAAC,QAAQ,SAAS,wCAAwC,CAAC,CAAC;QAC7E,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrB,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,SAAiB;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO;QAC/B,KAAK,MAAM,OAAO,IAAI,IAAI;YAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;CACF"}

package/dist/run-wait-host.d.ts

@@ -0,0 +1,22 @@
+import type { JetStreamClient, JetStreamManager } from "@nats-io/jetstream";
+import { RunScopeAuthority, type WaitReceipt } from "./run-scope-authority.js";
+export interface RunWaitMessage {
+    readonly sequence: number;
+    readonly data: Uint8Array;
+    readonly receipt: WaitReceipt;
+}
+/** Only these operations cross from a driver into the trusted wait host. Broker objects,
+ *  consumer names and ACK subjects remain inside the closure. */
+export interface RunWaitHost {
+    open(requestId: string, channel: string): Promise<void>;
+    fetch(requestId: string): Promise<readonly RunWaitMessage[]>;
+    ack(requestId: string, receipt: WaitReceipt): Promise<void>;
+    close(requestId: string): Promise<void>;
+    messageAt(requestId: string, sequence: number): Promise<Uint8Array>;
+}
+export declare function createRunWaitHost(broker: {
+    js: JetStreamClient;
+    jsm: JetStreamManager;
+    space: string;
+}, authority: RunScopeAuthority): RunWaitHost;
+//# sourceMappingURL=run-wait-host.d.ts.map

package/dist/run-wait-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-wait-host.d.ts","sourceRoot":"","sources":["../src/run-wait-host.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE5E,OAAO,EAAE,iBAAiB,EAAgC,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE7G,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;CAC/B;AAED;iEACiE;AACjE,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC,CAAC;IAC7D,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACrE;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE;IAAE,EAAE,EAAE,eAAe,CAAC;IAAC,GAAG,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EACrE,SAAS,EAAE,iBAAiB,GAC3B,WAAW,CA6Db"}

package/dist/run-wait-host.js

@@ -0,0 +1,70 @@
+import { chatStream, chatSubject, subjectMatches, waitConsumerConfig, waitConsumerName } from "@cotal-ai/core";
+import { RunScopeAuthority, RunScopeDenied, WaitReceipts } from "./run-scope-authority.js";
+export function createRunWaitHost(broker, authority) {
+    const stream = chatStream(broker.space);
+    const receipts = new WaitReceipts();
+    return Object.freeze({
+        async open(requestId, channel) {
+            const entry = await authority.wait(requestId, "open");
+            if (entry.external?.waitChannel !== channel)
+                throw new RunScopeDenied(entry.run, channel, "open unrecorded wait channel");
+            await broker.jsm.consumers.add(stream, waitConsumerConfig(broker.space, requestId, channel));
+        },
+        async fetch(requestId) {
+            const entry = await authority.wait(requestId, "fetch");
+            const channel = entry.external?.waitChannel;
+            if (typeof channel !== "string")
+                throw new RunScopeDenied(entry.run, requestId, "fetch unrecorded wait channel");
+            const consumer = await broker.js.consumers.get(stream, waitConsumerName(requestId));
+            const info = await consumer.info();
+            const expected = chatSubject(broker.space, "*", "*", channel);
+            if (info.config.filter_subject !== expected || (info.config.filter_subjects?.length ?? 0) !== 0)
+                throw new RunScopeDenied(entry.run, requestId, "fetch changed wait filter");
+            const messages = [];
+            const batch = await consumer.fetch({ max_messages: 16, expires: 2_000 });
+            try {
+                for await (const message of batch) {
+                    if (!subjectMatches(expected, message.subject))
+                        throw new RunScopeDenied(entry.run, message.subject, "receive outside wait channel");
+                    messages.push(Object.freeze({
+                        sequence: message.seq,
+                        data: message.data.slice(),
+                        receipt: receipts.issue(requestId, () => message.ack()),
+                    }));
+                }
+            }
+            finally {
+                batch.stop();
+            }
+            return messages;
+        },
+        async ack(requestId, receipt) {
+            await authority.wait(requestId, "ack");
+            await receipts.ack(requestId, receipt);
+        },
+        async close(requestId) {
+            await authority.wait(requestId, "close");
+            try {
+                await broker.jsm.consumers.delete(stream, waitConsumerName(requestId));
+            }
+            catch (error) {
+                if (error?.code !== 10014)
+                    throw error;
+            }
+            receipts.close(requestId);
+        },
+        async messageAt(requestId, sequence) {
+            const entry = await authority.matchedMessage(requestId, sequence);
+            const channel = entry.external?.waitChannel;
+            if (typeof channel !== "string")
+                throw new RunScopeDenied(entry.run, requestId, "read unrecorded wait channel");
+            const message = await broker.jsm.streams.getMessage(stream, { seq: sequence });
+            if (message === null || message === undefined)
+                throw new Error(`wait ${requestId}'s recorded message ${sequence} no longer exists`);
+            if (!subjectMatches(chatSubject(broker.space, "*", "*", channel), message.subject))
+                throw new RunScopeDenied(entry.run, requestId, "read outside wait channel");
+            return message.data.slice();
+        },
+    });
+}
+//# sourceMappingURL=run-wait-host.js.map

package/dist/run-wait-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-wait-host.js","sourceRoot":"","sources":["../src/run-wait-host.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC/G,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,YAAY,EAAoB,MAAM,0BAA0B,CAAC;AAkB7G,MAAM,UAAU,iBAAiB,CAC/B,MAAqE,EACrE,SAA4B;IAE5B,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,SAAiB,EAAE,OAAe;YAC3C,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACtD,IAAI,KAAK,CAAC,QAAQ,EAAE,WAAW,KAAK,OAAO;gBACzC,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,8BAA8B,CAAC,CAAC;YAC/E,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/F,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,SAAiB;YAC3B,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC;YAC5C,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,+BAA+B,CAAC,CAAC;YACjH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;YACpF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAC9D,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC;gBAC7F,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,2BAA2B,CAAC,CAAC;YAC9E,MAAM,QAAQ,GAAqB,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;oBAClC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC;wBAC5C,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;oBACvF,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;wBAC1B,QAAQ,EAAE,OAAO,CAAC,GAAG;wBACrB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE;wBAC1B,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;qBACxD,CAAC,CAAC,CAAC;gBACN,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,OAAoB;YAC/C,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACvC,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,SAAiB;YAC3B,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA4B,EAAE,IAAI,KAAK,KAAK;oBAAE,MAAM,KAAK,CAAC;YACjE,CAAC;YACD,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,QAAgB;YACjD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC;YAC5C,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,8BAA8B,CAAC,CAAC;YAChH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/E,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;gBAC3C,MAAM,IAAI,KAAK,CAAC,QAAQ,SAAS,uBAAuB,QAAQ,mBAAmB,CAAC,CAAC;YACvF,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC;gBAChF,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,2BAA2B,CAAC,CAAC;YAC9E,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cotal-ai/runtime",
   "description": "Cotal workflow runtime: hosts cotal-lang runs on the mesh — the durable step-journal store, the effect handler, and the run driver.",
-  "version": "0.47.0",
+  "version": "0.48.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -21,9 +21,9 @@
     "@nats-io/jetstream": "^3.4.0",
     "@nats-io/kv": "^3.4.0",
     "@nats-io/transport-node": "^3.4.0",
-    "@cotal-ai/core": "0.47.0",
-    "@cotal-ai/lang": "0.47.0",
-    "@cotal-ai/workspace": "0.47.0"
+    "@cotal-ai/core": "0.48.0",
+    "@cotal-ai/lang": "0.48.0",
+    "@cotal-ai/workspace": "0.48.0"
   },
   "files": [
     "dist"