@decionis/agent-safe-pipeline 0.3.7 → 0.4.0

package/dist/execution/PostgresExecutionJournal.d.ts

@@ -0,0 +1,54 @@
+import { type DispatchedAuthorization, type ExecutionJournal, type JournalRecord, type OpenAttempt } from "./ExecutionJournal.js";
+import type { SqlClient } from "./PostgresReplayStore.js";
+export interface PostgresExecutionJournalOptions {
+    readonly client: SqlClient;
+    /**
+     * Whose attempts these are: the organisation the executor runs for. Two
+     * deployments that share a database never read each other's records, and
+     * an idempotency key is single-use within one namespace.
+     */
+    readonly namespace: string;
+    /** The journal table, optionally schema-qualified; `agentsafe_execution_journal` by default. */
+    readonly table?: string;
+}
+export declare const DEFAULT_JOURNAL_TABLE = "agentsafe_execution_journal";
+/**
+ * The execution journal every replica shares: one row per record, appended
+ * and never updated, read back in insertion order and folded with the same
+ * functions the file journal uses, so the two cannot disagree about which
+ * attempts are open or what an intent was dispatched under.
+ *
+ * It is the durable form of what `journaledActionHandler` does in the
+ * runtime: the `GRANT_CLAIMED` record is written after the grant is consumed
+ * and before the provider is touched, and a write that fails throws, so the
+ * runner reports a failure before dispatch rather than an effect nobody
+ * journaled. Single use of an idempotency key is the database's decision: a
+ * partial unique index on `(namespace, idempotency_key)` over claim records
+ * refuses the second claim, so two replicas racing on one key dispatch once,
+ * and the loser is told `IDEMPOTENCY_KEY_DISPATCHED`.
+ *
+ * The operator creates the table (`PostgresExecutionJournal.schema()`); the
+ * executor's role needs SELECT and INSERT on it and nothing else. Rows hold
+ * the captured intent, parameters included, so the table is as sensitive as
+ * the requests themselves.
+ */
+export declare class PostgresExecutionJournal implements ExecutionJournal {
+    private readonly client;
+    private readonly namespace;
+    private readonly table;
+    constructor(options: PostgresExecutionJournalOptions);
+    /** The DDL an operator runs once, before the first replica starts. */
+    static schema(table?: string): string;
+    append(record: JournalRecord): Promise<void>;
+    openAttempts(): Promise<readonly OpenAttempt[]>;
+    authorizationsOf(intentId: string): Promise<readonly DispatchedAuthorization[]>;
+    dispatchedUnder(idempotencyKey: string): Promise<readonly DispatchedAuthorization[]>;
+    /** Throws unless the table exists with the columns this journal uses. */
+    probe(): Promise<void>;
+    /** The client belongs to the caller, who opened it and closes it. */
+    close(): void;
+    /** The rows' records that parse, in order; a row that does not is skipped, as a bad file line is. */
+    private read;
+    private static json;
+}
+//# sourceMappingURL=PostgresExecutionJournal.d.ts.map

package/dist/execution/PostgresExecutionJournal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresExecutionJournal.d.ts","sourceRoot":"","sources":["../../src/execution/PostgresExecutionJournal.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,WAAW,EACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,gGAAgG;IAChG,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,qBAAqB,gCAAgC,CAAC;AAOnE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,wBAAyB,YAAW,gBAAgB;IAC/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEZ,OAAO,EAAE,+BAA+B;IAW3D,sEAAsE;WACxD,MAAM,CAAC,KAAK,SAAwB,GAAG,MAAM;IAmB9C,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAoB5C,YAAY,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;IAc/C,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC;IAQ/E,eAAe,CAC1B,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC;IAU9C,yEAAyE;IAC5D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAOnC,qEAAqE;IAC9D,KAAK,IAAI,IAAI;IAEpB,qGAAqG;YACvF,IAAI;IAelB,OAAO,CAAC,MAAM,CAAC,IAAI;CAQpB"}

package/dist/execution/PostgresExecutionJournal.js

@@ -0,0 +1,131 @@
+import { authorizationsFrom, dispatchedUnderFrom, IDEMPOTENCY_KEY_DISPATCHED, JournalError, JournalRecordSchema, openAttemptsFrom, } from "./ExecutionJournal.js";
+export const DEFAULT_JOURNAL_TABLE = "agentsafe_execution_journal";
+/** A lowercase SQL identifier, or `schema.table`: interpolated into SQL, so nothing else is. */
+const TABLE = /^[a-z_][a-z0-9_]{0,62}(?:\.[a-z_][a-z0-9_]{0,62})?$/;
+/** The SQLSTATE a unique index answers a second insert with. */
+const UNIQUE_VIOLATION = "23505";
+/**
+ * The execution journal every replica shares: one row per record, appended
+ * and never updated, read back in insertion order and folded with the same
+ * functions the file journal uses, so the two cannot disagree about which
+ * attempts are open or what an intent was dispatched under.
+ *
+ * It is the durable form of what `journaledActionHandler` does in the
+ * runtime: the `GRANT_CLAIMED` record is written after the grant is consumed
+ * and before the provider is touched, and a write that fails throws, so the
+ * runner reports a failure before dispatch rather than an effect nobody
+ * journaled. Single use of an idempotency key is the database's decision: a
+ * partial unique index on `(namespace, idempotency_key)` over claim records
+ * refuses the second claim, so two replicas racing on one key dispatch once,
+ * and the loser is told `IDEMPOTENCY_KEY_DISPATCHED`.
+ *
+ * The operator creates the table (`PostgresExecutionJournal.schema()`); the
+ * executor's role needs SELECT and INSERT on it and nothing else. Rows hold
+ * the captured intent, parameters included, so the table is as sensitive as
+ * the requests themselves.
+ */
+export class PostgresExecutionJournal {
+    client;
+    namespace;
+    table;
+    constructor(options) {
+        const table = options.table ?? DEFAULT_JOURNAL_TABLE;
+        if (!TABLE.test(table))
+            throw new Error("JOURNAL_TABLE_INVALID");
+        if (options.namespace.length === 0 || options.namespace.length > 200) {
+            throw new Error("JOURNAL_NAMESPACE_INVALID");
+        }
+        this.client = options.client;
+        this.namespace = options.namespace;
+        this.table = table;
+    }
+    /** The DDL an operator runs once, before the first replica starts. */
+    static schema(table = DEFAULT_JOURNAL_TABLE) {
+        if (!TABLE.test(table))
+            throw new Error("JOURNAL_TABLE_INVALID");
+        const index = table.replace(".", "_");
+        return [
+            `CREATE TABLE IF NOT EXISTS ${table} (`,
+            "  seq bigserial PRIMARY KEY,",
+            "  namespace text NOT NULL,",
+            "  intent_id text NOT NULL,",
+            "  record_kind text NOT NULL,",
+            "  idempotency_key text,",
+            "  record jsonb NOT NULL,",
+            "  recorded_at timestamptz NOT NULL DEFAULT now()",
+            ");",
+            `CREATE INDEX IF NOT EXISTS ${index}_intent ON ${table} (namespace, intent_id, seq);`,
+            `CREATE UNIQUE INDEX IF NOT EXISTS ${index}_claim_once ON ${table} (namespace, idempotency_key) WHERE record_kind = 'GRANT_CLAIMED';`,
+            "",
+        ].join("\n");
+    }
+    async append(record) {
+        const parsed = JournalRecordSchema.safeParse(record);
+        if (!parsed.success)
+            throw new JournalError("JOURNAL_RECORD_INVALID");
+        const value = parsed.data;
+        // Only a claim carries the key into its indexed column: the unique index
+        // is over claims, and an opening record with the same key is not a use.
+        const key = value.record === "GRANT_CLAIMED" ? value.idempotency_key : null;
+        try {
+            await this.client.query(`INSERT INTO ${this.table} (namespace, intent_id, record_kind, idempotency_key, record) VALUES ($1, $2, $3, $4, $5)`, [this.namespace, value.intent_id, value.record, key, JSON.stringify(value)]);
+        }
+        catch (error) {
+            if (error?.code === UNIQUE_VIOLATION) {
+                throw new JournalError(IDEMPOTENCY_KEY_DISPATCHED);
+            }
+            throw new JournalError("JOURNAL_WRITE_FAILED");
+        }
+    }
+    async openAttempts() {
+        // An attempt is open until its intent has a closing record. Intent ids
+        // are fresh per capture and opened once, so excluding every intent that
+        // has one is exactly the fold's answer, without reading closed history.
+        const rows = await this.read(`SELECT record FROM ${this.table} WHERE namespace = $1 AND intent_id IN (` +
+            `SELECT intent_id FROM ${this.table} WHERE namespace = $1 AND record_kind = 'ATTEMPT_OPENED' ` +
+            `EXCEPT SELECT intent_id FROM ${this.table} WHERE namespace = $1 AND record_kind IN ('ATTEMPT_CLOSED', 'RECONCILED')` +
+            `) ORDER BY seq`, [this.namespace]);
+        return openAttemptsFrom(rows);
+    }
+    async authorizationsOf(intentId) {
+        const rows = await this.read(`SELECT record FROM ${this.table} WHERE namespace = $1 AND intent_id = $2 ORDER BY seq`, [this.namespace, intentId]);
+        return authorizationsFrom(rows, intentId);
+    }
+    async dispatchedUnder(idempotencyKey) {
+        const rows = await this.read(`SELECT record FROM ${this.table} WHERE namespace = $1 AND intent_id IN (` +
+            `SELECT intent_id FROM ${this.table} WHERE namespace = $1 AND record_kind = 'GRANT_CLAIMED' AND idempotency_key = $2` +
+            `) ORDER BY seq`, [this.namespace, idempotencyKey]);
+        return dispatchedUnderFrom(rows, idempotencyKey);
+    }
+    /** Throws unless the table exists with the columns this journal uses. */
+    async probe() {
+        await this.client.query(`SELECT seq, namespace, intent_id, record_kind, idempotency_key, record FROM ${this.table} LIMIT 0`, []);
+    }
+    /** The client belongs to the caller, who opened it and closes it. */
+    close() { }
+    /** The rows' records that parse, in order; a row that does not is skipped, as a bad file line is. */
+    async read(text, values) {
+        const result = await this.client.query(text, values);
+        // Stryker disable next-line ArrayDeclaration: a seed element is not a record, and every fold ignores what is not one.
+        const records = [];
+        // Stryker disable next-line ArrayDeclaration: an element of the fallback is not a row with a record, and is skipped.
+        for (const row of result.rows ?? []) {
+            const raw = row.record;
+            const value = typeof raw === "string" ? PostgresExecutionJournal.json(raw) : raw;
+            const parsed = JournalRecordSchema.safeParse(value);
+            if (parsed.success)
+                records.push(parsed.data);
+        }
+        return records;
+    }
+    // Stryker disable all: an unparsable row is skipped either way, read as null or as undefined.
+    static json(text) {
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=PostgresExecutionJournal.js.map

package/dist/execution/PostgresExecutionJournal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgresExecutionJournal.js","sourceRoot":"","sources":["../../src/execution/PostgresExecutionJournal.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,GAKjB,MAAM,uBAAuB,CAAC;AAe/B,MAAM,CAAC,MAAM,qBAAqB,GAAG,6BAA6B,CAAC;AAEnE,gGAAgG;AAChG,MAAM,KAAK,GAAG,qDAAqD,CAAC;AACpE,gEAAgE;AAChE,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAEjC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,wBAAwB;IAClB,MAAM,CAAY;IAClB,SAAS,CAAS;IAClB,KAAK,CAAS;IAE/B,YAAmB,OAAwC;QACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,qBAAqB,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,sEAAsE;IAC/D,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,qBAAqB;QAChD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,OAAO;YACL,8BAA8B,KAAK,IAAI;YACvC,8BAA8B;YAC9B,4BAA4B;YAC5B,4BAA4B;YAC5B,8BAA8B;YAC9B,yBAAyB;YACzB,0BAA0B;YAC1B,kDAAkD;YAClD,IAAI;YACJ,8BAA8B,KAAK,cAAc,KAAK,+BAA+B;YACrF,qCAAqC,KAAK,kBAAkB,KAAK,oEAAoE;YACrI,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,MAAqB;QACvC,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5E,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CACrB,eAAe,IAAI,CAAC,KAAK,2FAA2F,EACpH,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAC5E,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA4C,EAAE,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC7E,MAAM,IAAI,YAAY,CAAC,0BAA0B,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,IAAI,YAAY,CAAC,sBAAsB,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,YAAY;QACvB,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAC1B,sBAAsB,IAAI,CAAC,KAAK,0CAA0C;YACxE,yBAAyB,IAAI,CAAC,KAAK,2DAA2D;YAC9F,gCAAgC,IAAI,CAAC,KAAK,2EAA2E;YACrH,gBAAgB,EAClB,CAAC,IAAI,CAAC,SAAS,CAAC,CACjB,CAAC;QACF,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAC1B,sBAAsB,IAAI,CAAC,KAAK,uDAAuD,EACvF,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAC3B,CAAC;QACF,OAAO,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,cAAsB;QAEtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAC1B,sBAAsB,IAAI,CAAC,KAAK,0CAA0C;YACxE,yBAAyB,IAAI,CAAC,KAAK,kFAAkF;YACrH,gBAAgB,EAClB,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CACjC,CAAC;QACF,OAAO,mBAAmB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACnD,CAAC;IAED,yEAAyE;IAClE,KAAK,CAAC,KAAK;QAChB,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CACrB,+EAA+E,IAAI,CAAC,KAAK,UAAU,EACnG,EAAE,CACH,CAAC;IACJ,CAAC;IAED,qEAAqE;IAC9D,KAAK,KAAU,CAAC;IAEvB,qGAAqG;IAC7F,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,MAA0B;QACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrD,sHAAsH;QACtH,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,qHAAqH;QACrH,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;YACpC,MAAM,GAAG,GAAI,GAAqC,CAAC,MAAM,CAAC;YAC1D,MAAM,KAAK,GAAY,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAC1F,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,8FAA8F;IACtF,MAAM,CAAC,IAAI,CAAC,IAAY;QAC9B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CAEF"}

package/dist/execution/RegistryExecutor.d.ts

@@ -0,0 +1,35 @@
+import type { CapturedIntent } from "../intent/ExecutionIntent.js";
+import type { ActionExecutionAttempt, ActionRegistry } from "./ActionRegistry.js";
+import type { ClaimedExecution, EffectObservation, ExecutionCapability, ExecutionEffect, NativeExecutor, PreparedAction, ReconcileContext, ReconcileResult } from "./NativeExecutor.js";
+/**
+ * The dispatch-style executor an `ActionRegistry` already is: every
+ * registered handler, run by intent, behind the contract. It is how
+ * `SafeExecutor` and the runtime's registry reach `GovernedExecutionRunner`
+ * without a change to a single handler: the registry keeps its dispatch
+ * tracking, its refusals and its single-flight reconciliation, and this
+ * class only reads what it reports into the contract's terms.
+ *
+ * The action it executes is the captured intent itself, so what it prepares
+ * is exactly what was decided: there is no second description of the action
+ * that could drift from the one the authority bound.
+ */
+export declare class RegistryExecutor implements NativeExecutor<CapturedIntent, ActionExecutionAttempt, unknown> {
+    private readonly registry;
+    readonly platform: string;
+    readonly version = "registry/1";
+    readonly style: "dispatch";
+    readonly actionTypes: readonly string[];
+    constructor(registry: ActionRegistry, platform?: string);
+    /** The registry knows its handlers, not a connection; it states no capability to check. */
+    capabilities(): Promise<readonly ExecutionCapability[]>;
+    /**
+     * Refuses an unregistered action or parameters its handler's schema does
+     * not accept, by throwing exactly as the registry's own validation does.
+     */
+    prepare(captured: CapturedIntent): Promise<PreparedAction>;
+    /** The registry tracks its own dispatch boundary; what it reports is carried through verbatim. */
+    execute(run: ClaimedExecution<CapturedIntent>): Promise<ExecutionEffect<ActionExecutionAttempt>>;
+    observe(effect: ExecutionEffect<ActionExecutionAttempt>): Promise<EffectObservation<unknown>>;
+    reconcile(context: ReconcileContext): Promise<ReconcileResult<unknown>>;
+}
+//# sourceMappingURL=RegistryExecutor.d.ts.map

package/dist/execution/RegistryExecutor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RegistryExecutor.d.ts","sourceRoot":"","sources":["../../src/execution/RegistryExecutor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,eAAe,EAChB,MAAM,qBAAqB,CAAC;AAG7B;;;;;;;;;;;GAWG;AACH,qBAAa,gBAAiB,YAAW,cAAc,CACrD,cAAc,EACd,sBAAsB,EACtB,OAAO,CACR;IAOG,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAN3B,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,OAAO,gBAAgB;IACvC,SAAgB,KAAK,EAAG,UAAU,CAAU;IAC5C,SAAgB,WAAW,EAAE,SAAS,MAAM,EAAE,CAAM;gBAGjC,QAAQ,EAAE,cAAc,EACzC,QAAQ,SAAoB;IAK9B,2FAA2F;IAC9E,YAAY,IAAI,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC;IAIpE;;;OAGG;IACU,OAAO,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAkBvE,kGAAkG;IACrF,OAAO,CAClB,GAAG,EAAE,gBAAgB,CAAC,cAAc,CAAC,GACpC,OAAO,CAAC,eAAe,CAAC,sBAAsB,CAAC,CAAC;IAQtC,OAAO,CAClB,MAAM,EAAE,eAAe,CAAC,sBAAsB,CAAC,GAC9C,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAwBzB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;CAGrF"}

package/dist/execution/RegistryExecutor.js

@@ -0,0 +1,84 @@
+import { CanonicalIntentHasher } from "../intent/CanonicalIntentHasher.js";
+import { createHash } from "node:crypto";
+/**
+ * The dispatch-style executor an `ActionRegistry` already is: every
+ * registered handler, run by intent, behind the contract. It is how
+ * `SafeExecutor` and the runtime's registry reach `GovernedExecutionRunner`
+ * without a change to a single handler: the registry keeps its dispatch
+ * tracking, its refusals and its single-flight reconciliation, and this
+ * class only reads what it reports into the contract's terms.
+ *
+ * The action it executes is the captured intent itself, so what it prepares
+ * is exactly what was decided: there is no second description of the action
+ * that could drift from the one the authority bound.
+ */
+export class RegistryExecutor {
+    registry;
+    platform;
+    version = "registry/1";
+    style = "dispatch";
+    actionTypes = [];
+    constructor(registry, platform = "action-registry") {
+        this.registry = registry;
+        this.platform = platform;
+    }
+    /** The registry knows its handlers, not a connection; it states no capability to check. */
+    async capabilities() {
+        return await Promise.resolve([]);
+    }
+    /**
+     * Refuses an unregistered action or parameters its handler's schema does
+     * not accept, by throwing exactly as the registry's own validation does.
+     */
+    async prepare(captured) {
+        this.registry.validate(captured);
+        const intent = captured.intent;
+        const canonical = CanonicalIntentHasher.stringify(intent.parameters);
+        return await Promise.resolve({
+            actionType: intent.action,
+            proposal: { action: intent.action, target: intent.target, parameters: intent.parameters },
+            downstreamTarget: intent.downstreamTarget,
+            idempotencyKey: intent.idempotencyKey,
+            expectedEffectDigest: intent.expectedEffectDigest === undefined
+                ? null
+                : intent.expectedEffectDigest,
+            requestDigest: `sha256:${createHash("sha256").update(canonical).digest("hex")}`,
+            facts: {},
+        });
+    }
+    /** The registry tracks its own dispatch boundary; what it reports is carried through verbatim. */
+    async execute(run) {
+        const attempt = await this.registry.executeTracked(run.action, run.authorization);
+        if (attempt.status === "FAILED_BEFORE_DISPATCH") {
+            return { kind: "NOT_DISPATCHED", code: attempt.code };
+        }
+        return { kind: "DISPATCHED", receipt: attempt, signedReceipt: attempt.receipt };
+    }
+    async observe(effect) {
+        const attempt = effect.kind === "DISPATCHED" ? effect.receipt : null;
+        if (attempt === null || attempt.status === "FAILED_BEFORE_DISPATCH") {
+            return await Promise.resolve({ status: "INDETERMINATE", reason: null, result: null });
+        }
+        if (attempt.status === "COMPLETED") {
+            return {
+                status: "COMMITTED",
+                reason: null,
+                result: attempt.result,
+                signedReceipt: attempt.receipt,
+            };
+        }
+        if (attempt.status === "REFUSED_AFTER_DISPATCH") {
+            return {
+                status: "FAILED",
+                reason: attempt.reason,
+                result: null,
+                signedReceipt: attempt.receipt,
+            };
+        }
+        return { status: "INDETERMINATE", reason: null, result: null, signedReceipt: attempt.receipt };
+    }
+    async reconcile(context) {
+        return await this.registry.reconcile(context.intent, context.idempotencyKey);
+    }
+}
+//# sourceMappingURL=RegistryExecutor.js.map

package/dist/execution/RegistryExecutor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RegistryExecutor.js","sourceRoot":"","sources":["../../src/execution/RegistryExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAc3E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,gBAAgB;IAWR;IANH,QAAQ,CAAS;IACjB,OAAO,GAAG,YAAY,CAAC;IACvB,KAAK,GAAG,UAAmB,CAAC;IAC5B,WAAW,GAAsB,EAAE,CAAC;IAEpD,YACmB,QAAwB,EACzC,QAAQ,GAAG,iBAAiB;QADX,aAAQ,GAAR,QAAQ,CAAgB;QAGzC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,2FAA2F;IACpF,KAAK,CAAC,YAAY;QACvB,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,OAAO,CAAC,QAAwB;QAC3C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,MAAM,SAAS,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,UAAuB,CAAC,CAAC;QAClF,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC;YAC3B,UAAU,EAAE,MAAM,CAAC,MAAM;YACzB,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;YACzF,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,oBAAoB,EAClB,MAAM,CAAC,oBAAoB,KAAK,SAAS;gBACvC,CAAC,CAAC,IAAI;gBACN,CAAC,CAAE,MAAM,CAAC,oBAA2C;YACzD,aAAa,EAAE,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YAC/E,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;IACL,CAAC;IAED,kGAAkG;IAC3F,KAAK,CAAC,OAAO,CAClB,GAAqC;QAErC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QAClF,IAAI,OAAO,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;YAChD,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACxD,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IAClF,CAAC;IAEM,KAAK,CAAC,OAAO,CAClB,MAA+C;QAE/C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACrE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;YACpE,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACnC,OAAO;gBACL,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,aAAa,EAAE,OAAO,CAAC,OAAO;aAC/B,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;YAChD,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,IAAI;gBACZ,aAAa,EAAE,OAAO,CAAC,OAAO;aAC/B,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACjG,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,OAAyB;QAC9C,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/E,CAAC;CACF"}

package/dist/execution/SafeExecutor.d.ts

@@ -4,7 +4,8 @@ import type { CapturedIntent } from "../intent/ExecutionIntent.js";
 import type { JsonObject } from "../intent/JsonValue.js";
 import type { ActionRegistry } from "./ActionRegistry.js";
 import type { AuthorizationVerifier, ExecutionCommitOutcome, ExecutionFinalization, VerifiedAuthorization } from "./AuthorizationVerifier.js";
-export type ExecutionBlockReason = "DECISION_NOT_AUTHORITATIVE" | "DECISION_NOT_ALLOW" | "INTENT_BINDING_MISMATCH" | "INTENT_CONFORMANCE_FAILED" | "AUTHORIZATION_MISSING" | "AUTHORIZATION_INVALID" | "RECOVERY_BINDING_MISMATCH" | "RECOVERY_ATTEMPT_UNKNOWN" | "BOUNDARY_MISMATCH" | "WORKLOAD_MISMATCH" | "AUDIT_UNAVAILABLE";
+import type { DispatchedAttempts, ExecutionBlockedResult, ExecutionHeldResult, ExecutionReconciliationResult, ExecutionRecoveryReference, HeldClaimResult, HeldExecution, SafeExecutionResult } from "./ExecutionOutcome.js";
+export type { DispatchedAttempts, ExecutionBlockedResult, ExecutionBlockReason, ExecutionHeldResult, ExecutionPreDispatchFailureReason, ExecutionReconciliationResult, ExecutionRecoveryReference, HeldClaimResult, HeldExecution, ProviderOutcomeUnknownResult, ProviderRefusedResult, SafeExecutionResult, } from "./ExecutionOutcome.js";
 /**
  * What this executor is, beyond the registry and the verifier it was given.
  *
@@ -35,155 +36,24 @@ export interface SafeExecutorOptions {
      */
     readonly attempts?: DispatchedAttempts;
 }
-/** Where an executor reads back the authorizations it dispatched an intent under. */
-export interface DispatchedAttempts {
-    /** Every authorization journaled for this intent, oldest first; none when it was never dispatched here. */
-    authorizationsOf(captured: CapturedIntent): Promise<readonly VerifiedAuthorization[]>;
-}
-export type ExecutionPreDispatchFailureReason = "HANDLER_FAILED_BEFORE_DISPATCH" | "AUDIT_UNAVAILABLE";
 /**
- * What a caller presents back to reconcile an attempt whose outcome was
- * lost. The fields are listed rather than inherited, because this is a
- * versioned wire object: a field that appears on `VerifiedAuthorization`
- * later must be added here deliberately or not at all.
- */
-export interface ExecutionRecoveryReference {
-    readonly version: "agent-safe.recovery/1";
-    readonly decisionId: string;
-    readonly dossierId: string;
-    readonly grantId: string;
-    readonly intentHash: string;
-    readonly expiresAt: string;
-    readonly idempotencyKey: string;
-}
-export interface ExecutionBlockedResult {
-    readonly outcome: "BLOCKED";
-    readonly executed: false;
-    readonly reason: ExecutionBlockReason;
-    readonly result: null;
-    readonly authorization: null;
-}
-/**
- * The provider refused, definitively, after the dispatch boundary. The grant
- * was consumed and the request was sent, and nothing was effected: the
- * outcome is a fact, not an unknown, so there is nothing to reconcile and no
- * recovery reference to present. A caller that wants the action after all
- * needs a fresh decision and a fresh grant, because the refusal was about
- * this attempt.
- */
-export interface ProviderRefusedResult {
-    readonly outcome: "DEFINITELY_NOT_EXECUTED";
-    readonly executed: false;
-    readonly recovered: false;
-    /** The provider's own reason, as the handler reported it. */
-    readonly reason: string;
-    readonly result: null;
-    readonly authorization: VerifiedAuthorization;
-}
-export interface ProviderOutcomeUnknownResult {
-    readonly outcome: "UNKNOWN_AFTER_DISPATCH";
-    readonly executed: null;
-    readonly reason: "PROVIDER_OUTCOME_UNKNOWN";
-    readonly result: null;
-    readonly authorization: VerifiedAuthorization;
-    readonly recovery: ExecutionRecoveryReference;
-}
-/**
- * Every outcome that consumed a grant reports whether the attempt's commit
- * evidence reached the authority. Finalization is evidence, not authority;
- * it never changes `outcome` or `executed`.
- */
-export type SafeExecutionResult<TResult = unknown> = {
-    readonly outcome: "COMPLETED";
-    readonly executed: true;
-    readonly recovered: false;
-    readonly result: TResult;
-    readonly authorization: VerifiedAuthorization;
-    readonly finalization: ExecutionFinalization;
-} | ExecutionBlockedResult | {
-    readonly outcome: "FAILED_BEFORE_DISPATCH";
-    readonly executed: false;
-    readonly reason: ExecutionPreDispatchFailureReason;
-    /** Why the handler refused, when it threw a `PreDispatchRefusal`. */
-    readonly code?: string;
-    readonly result: null;
-    readonly authorization: VerifiedAuthorization;
-    readonly finalization: ExecutionFinalization;
-} | (ProviderRefusedResult & {
-    readonly finalization: ExecutionFinalization;
-}) | (ProviderOutcomeUnknownResult & {
-    readonly finalization: ExecutionFinalization;
-});
-export type ExecutionReconciliationResult<TResult = unknown> = {
-    readonly outcome: "COMPLETED";
-    readonly executed: true;
-    readonly recovered: true;
-    readonly result: TResult;
-    readonly authorization: VerifiedAuthorization;
-} | {
-    readonly outcome: "DEFINITELY_NOT_EXECUTED";
-    readonly executed: false;
-    readonly recovered: true;
-    readonly reason: "PROVIDER_CONFIRMED_NOT_EXECUTED";
-    readonly result: null;
-    readonly authorization: VerifiedAuthorization;
-} | ExecutionBlockedResult | ProviderOutcomeUnknownResult;
-/**
- * A grant admitted for a later claim. Every check `run` makes before it
- * consumes a grant has passed, and nothing has been consumed: the grant is
- * still the authority's to hand out once. Only `hold` issues one, only the
- * executor that issued it can claim it, and it is claimed at most once.
+ * The registry-shaped face of `GovernedExecutionRunner`, kept so that every
+ * caller written against it keeps its signatures and its outcomes exactly.
+ * Each method is the runner's, with the registry as the executor: admission,
+ * the claim, finalization, holds and reconciliation all happen in the
+ * runner, and nothing here decides anything.
  *
- * This is for an effect that another system performs at a moment this
- * process does not choose, such as a card authorization the issuer asks
- * about in milliseconds: the decision is made before, the grant waits here,
- * and the claim happens when that system asks for it.
+ * Two runner behaviours stay off behind this face, because they did not
+ * exist when it was written: the runner does not refuse a dispatch whose
+ * window closed (the registry's handlers bound their own dispatch), and it
+ * does not report reconciliations to the authority. Code that wants either
+ * uses the runner, with a `NativeExecutor`, directly.
  */
-export interface HeldExecution {
-    readonly captured: CapturedIntent;
-    readonly decision: DecisionGate;
-    /** The grant's own expiry: after it there is nothing left to claim. */
-    readonly expiresAt: string;
-}
-export interface ExecutionHeldResult {
-    readonly outcome: "HELD";
-    readonly executed: false;
-    readonly result: null;
-    readonly authorization: null;
-    readonly held: HeldExecution;
-}
-export type HeldClaimResult = {
-    readonly outcome: "CLAIMED";
-    readonly authorization: VerifiedAuthorization;
-} | ExecutionBlockedResult | Extract<SafeExecutionResult<never>, {
-    outcome: "FAILED_BEFORE_DISPATCH";
-}>;
 export declare class SafeExecutor {
-    private readonly registry;
-    private readonly verifier;
-    private readonly audit?;
-    private readonly hasher;
-    private readonly boundaryId;
-    private readonly workloadDigest;
-    /** The holds this executor issued and nobody has claimed, keyed by the frozen handle. */
-    private readonly holds;
-    /** The holds claimed and not yet settled, with the authorization each one consumed. */
-    private readonly claims;
-    private readonly attempts;
-    constructor(registry: ActionRegistry, verifier: AuthorizationVerifier, audit?: AuditRecorder | undefined, options?: SafeExecutorOptions);
+    private readonly runner;
+    private readonly executor;
+    constructor(registry: ActionRegistry, verifier: AuthorizationVerifier, audit?: AuditRecorder, options?: SafeExecutorOptions);
     run<TResult = unknown>(captured: CapturedIntent, decision: DecisionGate): Promise<SafeExecutionResult<TResult>>;
-    /**
-     * Every check made before a grant may be consumed, with the evidence that
-     * the intent was captured and decided. A refusal is recorded and returned;
-     * null means the decision passed, and so carries a grant.
-     */
-    private admit;
-    /**
-     * Consumes the grant through the verifier, checks what came back against
-     * the decision and the intent, and records the consumption and the start
-     * of execution. Nothing here dispatches.
-     */
-    private consume;
     /**
      * Admits a decision exactly as `run` would and holds its grant instead of
      * consuming it. The intent, the decision and the hold are recorded; the
@@ -195,18 +65,14 @@ export declare class SafeExecutor {
      * Admits a hold this executor did not make: one another replica made, or
      * this process made before a restart, read back from a store the replicas
      * share. Every check `hold` makes is made again on the way in, and the
-     * record says the hold was adopted. Adoption adds no authority: the grant
-     * is still the authority's to hand out once, so a hold claimed elsewhere
-     * is refused at the claim by the authority or the shared replay store,
-     * never admitted twice by this executor's own memory.
+     * record says the hold was adopted.
      */
     adoptHold(captured: CapturedIntent, decision: DecisionGate): Promise<ExecutionHeldResult | ExecutionBlockedResult>;
     /**
      * Registers a claim this executor did not make, so that `settleHeld` can
-     * finalize it here: the hold's intent and decision, and the authorization
-     * the claim returned, as the store that shared them kept them. Nothing is
-     * consumed and nothing is checked against the authority; the finalization
-     * is, as always, the authority's to accept or refuse.
+     * finalize it here. Nothing is consumed and nothing is checked against the
+     * authority; the finalization is, as always, the authority's to accept or
+     * refuse.
      */
     adoptClaim(captured: CapturedIntent, decision: DecisionGate, authorization: VerifiedAuthorization, material?: JsonObject | null): HeldExecution;
     /**
@@ -215,13 +81,10 @@ export declare class SafeExecutor {
      * verifier keeps its claims to itself or did not make this one.
      */
     claimMaterial(authorization: VerifiedAuthorization): JsonObject | null;
-    private holdWith;
     /**
-     * Claims a held grant, once. The handle is forgotten before the verifier
-     * is asked, so a second claim of the same hold, concurrent or later, is
-     * refused here without reaching the authority; a handle this executor did
-     * not issue is refused the same way. What the claim returns is checked
-     * exactly as `run` checks it.
+     * Claims a held grant, once. A second claim of the same hold, concurrent or
+     * later, is refused without reaching the authority; a handle this executor
+     * did not issue is refused the same way.
      */
     claimHeld(held: HeldExecution): Promise<HeldClaimResult>;
     /**
@@ -230,40 +93,6 @@ export declare class SafeExecutor {
      * nobody can say. The terminal record names the outcome, as `run`'s do.
      */
     settleHeld(held: HeldExecution, outcome: ExecutionCommitOutcome, receipt?: string | null): Promise<ExecutionFinalization>;
-    private static settledEvent;
-    /**
-     * Reports the attempt outcome to the verifier's authority, with the
-     * provider's effect receipt when the attempt brought one back. A missing,
-     * failing, or malformed finalization can never alter the execution result.
-     */
-    private finalize;
-    private static finalizationCode;
     reconcile<TResult = unknown>(captured: CapturedIntent, recovery: ExecutionRecoveryReference): Promise<ExecutionReconciliationResult<TResult>>;
-    /**
-     * Observational artifacts carry an explicit non-authoritative marker. They
-     * must never be interpreted as a `DecisionGate`, even after an unsafe cast
-     * or a JSON round trip.
-     */
-    private static isAuthoritativeDecision;
-    /**
-     * Whether this boundary is the one the intent was captured through. The
-     * boundary is read back out of the hashed context, so an intent whose
-     * boundary was edited after capture fails conformance before it reaches
-     * here, and one that never named a boundary cannot acquire one now.
-     */
-    private boundaryMatches;
-    /**
-     * Whether the workload that proposed the intent is the one running it. Like
-     * the boundary, the digest is read back out of the hashed context, so an
-     * intent whose workload was edited after capture fails conformance first.
-     */
-    private workloadMatches;
-    private intentConforms;
-    private block;
-    private failedBeforeDispatch;
-    private record;
-    private static recoveryReference;
-    private static sameBinding;
-    private static authorizationFrom;
 }
 //# sourceMappingURL=SafeExecutor.d.ts.map

package/dist/execution/SafeExecutor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SafeExecutor.d.ts","sourceRoot":"","sources":["../../src/execution/SafeExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAkC,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EACV,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,MAAM,oBAAoB,GAC5B,4BAA4B,GAC5B,oBAAoB,GACpB,yBAAyB,GACzB,2BAA2B,GAC3B,uBAAuB,GACvB,uBAAuB,GACvB,2BAA2B,GAC3B,0BAA0B,GAC1B,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,CAAC;AAExB;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CACxC;AAED,qFAAqF;AACrF,MAAM,WAAW,kBAAkB;IACjC,2GAA2G;IAC3G,gBAAgB,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAAC;CACvF;AAED,MAAM,MAAM,iCAAiC,GAC3C,gCAAgC,GAAG,mBAAmB,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;CAC/C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CAC/C;AAED;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,CAAC,OAAO,GAAG,OAAO,IAC7C;IACE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;CAC9C,GACD,sBAAsB,GACtB;IACE,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAC;IACnD,qEAAqE;IACrE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;CAC9C,GACD,CAAC,qBAAqB,GAAG;IAAE,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAA;CAAE,CAAC,GAC1E,CAAC,4BAA4B,GAAG;IAAE,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAA;CAAE,CAAC,CAAC;AAEtF,MAAM,MAAM,6BAA6B,CAAC,OAAO,GAAG,OAAO,IACvD;IACE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;CAC/C,GACD;IACE,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;CAC/C,GACD,sBAAsB,GACtB,4BAA4B,CAAC;AAEjC;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,uEAAuE;IACvE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAA;CAAE,GAC9E,sBAAsB,GACtB,OAAO,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE;IAAE,OAAO,EAAE,wBAAwB,CAAA;CAAE,CAAC,CAAC;AAO/E,qBAAa,YAAY;IAYrB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IAbzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IAEtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgB;IAC/C,yFAAyF;IACzF,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkD;IACxE,uFAAuF;IACvF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuD;IAC9E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;gBAGlC,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,qBAAqB,EAC/B,KAAK,CAAC,EAAE,aAAa,YAAA,EACtC,OAAO,CAAC,EAAE,mBAAmB;IAOlB,GAAG,CAAC,OAAO,GAAG,OAAO,EAChC,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IA2GxC;;;;OAIG;YACW,KAAK;IAiDnB;;;;OAIG;YACW,OAAO;IAqErB;;;;;OAKG;IACU,IAAI,CACf,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC,mBAAmB,GAAG,sBAAsB,CAAC;IAIxD;;;;;;;;OAQG;IACU,SAAS,CACpB,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC,mBAAmB,GAAG,sBAAsB,CAAC;IAIxD;;;;;;OAMG;IACI,UAAU,CACf,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,YAAY,EACtB,aAAa,EAAE,qBAAqB,EACpC,QAAQ,GAAE,UAAU,GAAG,IAAW,GACjC,aAAa;IAuBhB;;;;OAIG;IACI,aAAa,CAAC,aAAa,EAAE,qBAAqB,GAAG,UAAU,GAAG,IAAI;YAK/D,QAAQ;IA8BtB;;;;;;OAMG;IACU,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC;IAYrE;;;;OAIG;IACU,UAAU,CACrB,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,sBAAsB,EAC/B,OAAO,GAAE,MAAM,GAAG,IAAW,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IA0BjC,OAAO,CAAC,MAAM,CAAC,YAAY;IAM3B;;;;OAIG;YACW,QAAQ;IAuBtB,OAAO,CAAC,MAAM,CAAC,gBAAgB;IAIlB,SAAS,CAAC,OAAO,GAAG,OAAO,EACtC,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,0BAA0B,GACnC,OAAO,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAwFlD;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAQtC;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAKvB;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,cAAc;YAeR,KAAK;YAkBL,oBAAoB;YAmCpB,MAAM;IAOpB,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAoBhC,OAAO,CAAC,MAAM,CAAC,WAAW;IAa1B,OAAO,CAAC,MAAM,CAAC,iBAAiB;CASjC"}
+{"version":3,"file":"SafeExecutor.d.ts","sourceRoot":"","sources":["../../src/execution/SafeExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EACV,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EACV,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,6BAA6B,EAC7B,0BAA0B,EAC1B,eAAe,EACf,aAAa,EACb,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAI/B,YAAY,EACV,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,iCAAiC,EACjC,6BAA6B,EAC7B,0BAA0B,EAC1B,eAAe,EACf,aAAa,EACb,4BAA4B,EAC5B,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CACxC;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmB;gBAG1C,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,qBAAqB,EAC/B,KAAK,CAAC,EAAE,aAAa,EACrB,OAAO,CAAC,EAAE,mBAAmB;IAclB,GAAG,CAAC,OAAO,GAAG,OAAO,EAChC,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAQxC;;;;;OAKG;IACU,IAAI,CACf,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC,mBAAmB,GAAG,sBAAsB,CAAC;IAIxD;;;;;OAKG;IACU,SAAS,CACpB,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC,mBAAmB,GAAG,sBAAsB,CAAC;IAIxD;;;;;OAKG;IACI,UAAU,CACf,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,YAAY,EACtB,aAAa,EAAE,qBAAqB,EACpC,QAAQ,GAAE,UAAU,GAAG,IAAW,GACjC,aAAa;IAShB;;;;OAIG;IACI,aAAa,CAAC,aAAa,EAAE,qBAAqB,GAAG,UAAU,GAAG,IAAI;IAI7E;;;;OAIG;IACU,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC;IAIrE;;;;OAIG;IACU,UAAU,CACrB,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,sBAAsB,EAC/B,OAAO,GAAE,MAAM,GAAG,IAAW,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAMpB,SAAS,CAAC,OAAO,GAAG,OAAO,EACtC,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,0BAA0B,GACnC,OAAO,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC;CAOnD"}