@elie-laloum/outpost 2.0.0 → 4.0.0

package/dist/domain/artifact.js

@@ -0,0 +1,104 @@
+import { artifactLabelMaxLength } from "./artifact.constants.js";
+import { artifactDigest, artifactId, validateArtifactReference, } from "./artifact-reference.js";
+import { checkpointValue } from "./workflow/checkpoint-value.js";
+function identity(options) {
+    if (!options.name.trim() ||
+        !options.version.trim() ||
+        options.name.length > artifactLabelMaxLength ||
+        options.version.length > artifactLabelMaxLength)
+        throw new Error(`Artifact contract name and version must be nonempty and at most ${artifactLabelMaxLength} characters`);
+    return { name: options.name, version: options.version };
+}
+export const artifact = {
+    json(options) {
+        const schema = options.schema;
+        async function validate(value) {
+            if (typeof schema === "function")
+                return schema(value);
+            const result = await schema["~standard"].validate(value);
+            if (result.issues)
+                throw new Error(`Artifact schema validation failed: ${JSON.stringify(result.issues)}`);
+            return result.value;
+        }
+        return Object.freeze({
+            ...identity(options),
+            encoding: "json",
+            async encode(value) {
+                const checked = checkpointValue(await validate(value));
+                if (checked.kind !== "json")
+                    throw new Error("Artifact payload must be JSON");
+                return Buffer.from(JSON.stringify(checked.value));
+            },
+            async decode(bytes) {
+                return validate(JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes)));
+            },
+        });
+    },
+    binary(options) {
+        return Object.freeze({
+            ...identity(options),
+            encoding: "binary",
+            async encode(value) {
+                if (!(value instanceof Uint8Array))
+                    throw new Error("Artifact payload must be Uint8Array");
+                return Uint8Array.from(value);
+            },
+            async decode(bytes) {
+                return Uint8Array.from(bytes);
+            },
+        });
+    },
+};
+export async function publishArtifact(store, contract, value, options) {
+    options.signal?.throwIfAborted();
+    const producer = { ...options.producer };
+    const parents = (options.parents ?? []).map((parent) => validateArtifactReference(parent).id);
+    const bytes = Uint8Array.from(await contract.encode(value));
+    options.signal?.throwIfAborted();
+    const metadata = {
+        format: 1,
+        digest: artifactDigest(bytes),
+        size: bytes.length,
+        contract: {
+            name: contract.name,
+            version: contract.version,
+            encoding: contract.encoding,
+        },
+        producer,
+        parents,
+    };
+    const reference = validateArtifactReference({
+        ...metadata,
+        id: artifactId(metadata),
+    });
+    await store.put(reference.id, bytes, options.signal);
+    options.signal?.throwIfAborted();
+    return reference;
+}
+export async function readStoredArtifact(store, contract, value, options = {}) {
+    options.signal?.throwIfAborted();
+    const reference = validateArtifactReference(value);
+    if (reference.contract.name !== contract.name ||
+        reference.contract.version !== contract.version ||
+        reference.contract.encoding !== contract.encoding)
+        throw new Error("Artifact contract mismatch");
+    const producer = options.producer;
+    if (producer &&
+        (reference.producer.executionId !== producer.executionId ||
+            reference.producer.taskKey !== producer.taskKey ||
+            reference.producer.attempt !== producer.attempt))
+        throw new Error("Artifact producer mismatch");
+    if (options.parents &&
+        JSON.stringify(reference.parents) !==
+            JSON.stringify(options.parents.map((parent) => validateArtifactReference(parent).id)))
+        throw new Error("Artifact lineage mismatch");
+    const bytes = await store.get(reference.id, options.signal);
+    options.signal?.throwIfAborted();
+    if (bytes.length !== reference.size ||
+        artifactDigest(bytes) !== reference.digest)
+        throw new Error("Artifact content integrity mismatch");
+    const result = await contract.decode(bytes);
+    options.signal?.throwIfAborted();
+    return result;
+}
+//# sourceMappingURL=artifact.js.map

package/dist/domain/artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.js","sourceRoot":"","sources":["../../src/domain/artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EACL,cAAc,EACd,UAAU,EACV,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAWjE,SAAS,QAAQ,CAAC,OAAgC;IAChD,IACE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;QACpB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE;QACvB,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,sBAAsB;QAC5C,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,sBAAsB;QAE/C,MAAM,IAAI,KAAK,CACb,mEAAmE,sBAAsB,aAAa,CACvG,CAAC;IACJ,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,IAAI,CAAI,OAA+B;QACrC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,KAAK,UAAU,QAAQ,CAAC,KAAc;YACpC,IAAI,OAAO,MAAM,KAAK,UAAU;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,MAAM;gBACf,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CACtE,CAAC;YACJ,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,QAAQ,CAAC,OAAO,CAAC;YACpB,QAAQ,EAAE,MAAM;YAChB,KAAK,CAAC,MAAM,CAAC,KAAQ;gBACnB,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;oBACzB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACnD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,KAAiB;gBAC5B,OAAO,QAAQ,CACb,IAAI,CAAC,KAAK,CACR,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAC7C,CACb,CAAC;YACJ,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,OAAgC;QACrC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,QAAQ,CAAC,OAAO,CAAC;YACpB,QAAQ,EAAE,QAAQ;YAClB,KAAK,CAAC,MAAM,CAAC,KAAiB;gBAC5B,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;oBAChC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBACzD,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,KAAiB;gBAC5B,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAoB,EACpB,QAA6B,EAC7B,KAAQ,EACR,OAA+B;IAE/B,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CACzC,CAAC,MAAM,EAAE,EAAE,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,EAAE,CACjD,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,CAAU;QAClB,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,MAAM;QAClB,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B;QACD,QAAQ;QACR,OAAO;KACR,CAAC;IACF,MAAM,SAAS,GAAG,yBAAyB,CAAC;QAC1C,GAAG,QAAQ;QACX,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC;KACzB,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAoB,EACpB,QAA6B,EAC7B,KAAc,EACd,UAA+B,EAAE;IAEjC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACnD,IACE,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QACzC,SAAS,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QAC/C,SAAS,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QAEjD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IACE,QAAQ;QACR,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;YACtD,SAAS,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YAC/C,SAAS,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC;QAElD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,IACE,OAAO,CAAC,OAAO;QACf,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC;YAC/B,IAAI,CAAC,SAAS,CACZ,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CACtE;QAEH,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,IACE,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI;QAC/B,cAAc,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,MAAM;QAE1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { artifactLabelMaxLength } from \"./artifact.constants.ts\";\nimport {\n  artifactDigest,\n  artifactId,\n  validateArtifactReference,\n} from \"./artifact-reference.ts\";\nimport { checkpointValue } from \"./workflow/checkpoint-value.ts\";\nimport type {\n  ArtifactContract,\n  ArtifactContractOptions,\n  ArtifactReference,\n  ArtifactStore,\n  JsonArtifactOptions,\n  PublishArtifactOptions,\n  ReadArtifactOptions,\n} from \"./artifact.types.ts\";\n\nfunction identity(options: ArtifactContractOptions): ArtifactContractOptions {\n  if (\n    !options.name.trim() ||\n    !options.version.trim() ||\n    options.name.length > artifactLabelMaxLength ||\n    options.version.length > artifactLabelMaxLength\n  )\n    throw new Error(\n      `Artifact contract name and version must be nonempty and at most ${artifactLabelMaxLength} characters`,\n    );\n  return { name: options.name, version: options.version };\n}\n\nexport const artifact = {\n  json<T>(options: JsonArtifactOptions<T>): ArtifactContract<T> {\n    const schema = options.schema;\n    async function validate(value: unknown): Promise<T> {\n      if (typeof schema === \"function\") return schema(value);\n      const result = await schema[\"~standard\"].validate(value);\n      if (result.issues)\n        throw new Error(\n          `Artifact schema validation failed: ${JSON.stringify(result.issues)}`,\n        );\n      return result.value;\n    }\n    return Object.freeze({\n      ...identity(options),\n      encoding: \"json\",\n      async encode(value: T) {\n        const checked = checkpointValue(await validate(value));\n        if (checked.kind !== \"json\")\n          throw new Error(\"Artifact payload must be JSON\");\n        return Buffer.from(JSON.stringify(checked.value));\n      },\n      async decode(bytes: Uint8Array) {\n        return validate(\n          JSON.parse(\n            new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes),\n          ) as unknown,\n        );\n      },\n    });\n  },\n  binary(options: ArtifactContractOptions): ArtifactContract<Uint8Array> {\n    return Object.freeze({\n      ...identity(options),\n      encoding: \"binary\",\n      async encode(value: Uint8Array) {\n        if (!(value instanceof Uint8Array))\n          throw new Error(\"Artifact payload must be Uint8Array\");\n        return Uint8Array.from(value);\n      },\n      async decode(bytes: Uint8Array) {\n        return Uint8Array.from(bytes);\n      },\n    });\n  },\n};\n\nexport async function publishArtifact<T>(\n  store: ArtifactStore,\n  contract: ArtifactContract<T>,\n  value: T,\n  options: PublishArtifactOptions,\n): Promise<ArtifactReference> {\n  options.signal?.throwIfAborted();\n  const producer = { ...options.producer };\n  const parents = (options.parents ?? []).map(\n    (parent) => validateArtifactReference(parent).id,\n  );\n  const bytes = Uint8Array.from(await contract.encode(value));\n  options.signal?.throwIfAborted();\n  const metadata = {\n    format: 1 as const,\n    digest: artifactDigest(bytes),\n    size: bytes.length,\n    contract: {\n      name: contract.name,\n      version: contract.version,\n      encoding: contract.encoding,\n    },\n    producer,\n    parents,\n  };\n  const reference = validateArtifactReference({\n    ...metadata,\n    id: artifactId(metadata),\n  });\n  await store.put(reference.id, bytes, options.signal);\n  options.signal?.throwIfAborted();\n  return reference;\n}\n\nexport async function readStoredArtifact<T>(\n  store: ArtifactStore,\n  contract: ArtifactContract<T>,\n  value: unknown,\n  options: ReadArtifactOptions = {},\n): Promise<T> {\n  options.signal?.throwIfAborted();\n  const reference = validateArtifactReference(value);\n  if (\n    reference.contract.name !== contract.name ||\n    reference.contract.version !== contract.version ||\n    reference.contract.encoding !== contract.encoding\n  )\n    throw new Error(\"Artifact contract mismatch\");\n  const producer = options.producer;\n  if (\n    producer &&\n    (reference.producer.executionId !== producer.executionId ||\n      reference.producer.taskKey !== producer.taskKey ||\n      reference.producer.attempt !== producer.attempt)\n  )\n    throw new Error(\"Artifact producer mismatch\");\n  if (\n    options.parents &&\n    JSON.stringify(reference.parents) !==\n      JSON.stringify(\n        options.parents.map((parent) => validateArtifactReference(parent).id),\n      )\n  )\n    throw new Error(\"Artifact lineage mismatch\");\n  const bytes = await store.get(reference.id, options.signal);\n  options.signal?.throwIfAborted();\n  if (\n    bytes.length !== reference.size ||\n    artifactDigest(bytes) !== reference.digest\n  )\n    throw new Error(\"Artifact content integrity mismatch\");\n  const result = await contract.decode(bytes);\n  options.signal?.throwIfAborted();\n  return result;\n}\n"]}

package/dist/domain/artifact.types.d.ts

@@ -0,0 +1,44 @@
+import type { StandardValidator } from "./response.types.ts";
+export interface ArtifactIdentity {
+    readonly name: string;
+    readonly version: string;
+    readonly encoding: "json" | "binary";
+}
+export interface ArtifactProducer {
+    readonly executionId: string;
+    readonly taskKey: string;
+    readonly attempt: number;
+}
+export interface ArtifactReference {
+    readonly format: 1;
+    readonly id: string;
+    readonly digest: string;
+    readonly size: number;
+    readonly contract: ArtifactIdentity;
+    readonly producer: ArtifactProducer;
+    readonly parents: readonly string[];
+}
+export interface ArtifactContract<T> extends ArtifactIdentity {
+    encode(value: T): Promise<Uint8Array>;
+    decode(bytes: Uint8Array): Promise<T>;
+}
+export type ArtifactContractOptions = Pick<ArtifactIdentity, "name" | "version">;
+export type JsonArtifactOptions<T> = ArtifactContractOptions & {
+    readonly schema: StandardValidator<T> | ((input: unknown) => T | Promise<T>);
+};
+export interface ArtifactStore {
+    /** Publish atomically; reject conflicting bytes for an existing ID. */
+    put(id: string, bytes: Uint8Array, signal?: AbortSignal): Promise<void>;
+    /** Read bounded bytes or reject missing objects; callers verify integrity. */
+    get(id: string, signal?: AbortSignal): Promise<Uint8Array>;
+}
+export interface PublishArtifactOptions {
+    readonly producer: ArtifactProducer;
+    readonly parents?: readonly ArtifactReference[];
+    readonly signal?: AbortSignal;
+}
+export interface ReadArtifactOptions {
+    readonly producer?: ArtifactProducer;
+    readonly parents?: readonly ArtifactReference[];
+    readonly signal?: AbortSignal;
+}

package/dist/domain/artifact.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=artifact.types.js.map

package/dist/domain/artifact.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.types.js","sourceRoot":"","sources":["../../src/domain/artifact.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { StandardValidator } from \"./response.types.ts\";\n\nexport interface ArtifactIdentity {\n  readonly name: string;\n  readonly version: string;\n  readonly encoding: \"json\" | \"binary\";\n}\n\nexport interface ArtifactProducer {\n  readonly executionId: string;\n  readonly taskKey: string;\n  readonly attempt: number;\n}\n\nexport interface ArtifactReference {\n  readonly format: 1;\n  readonly id: string;\n  readonly digest: string;\n  readonly size: number;\n  readonly contract: ArtifactIdentity;\n  readonly producer: ArtifactProducer;\n  readonly parents: readonly string[];\n}\n\nexport interface ArtifactContract<T> extends ArtifactIdentity {\n  encode(value: T): Promise<Uint8Array>;\n  decode(bytes: Uint8Array): Promise<T>;\n}\n\nexport type ArtifactContractOptions = Pick<\n  ArtifactIdentity,\n  \"name\" | \"version\"\n>;\nexport type JsonArtifactOptions<T> = ArtifactContractOptions & {\n  readonly schema: StandardValidator<T> | ((input: unknown) => T | Promise<T>);\n};\n\nexport interface ArtifactStore {\n  /** Publish atomically; reject conflicting bytes for an existing ID. */\n  put(id: string, bytes: Uint8Array, signal?: AbortSignal): Promise<void>;\n  /** Read bounded bytes or reject missing objects; callers verify integrity. */\n  get(id: string, signal?: AbortSignal): Promise<Uint8Array>;\n}\n\nexport interface PublishArtifactOptions {\n  readonly producer: ArtifactProducer;\n  readonly parents?: readonly ArtifactReference[];\n  readonly signal?: AbortSignal;\n}\n\nexport interface ReadArtifactOptions {\n  readonly producer?: ArtifactProducer;\n  readonly parents?: readonly ArtifactReference[];\n  readonly signal?: AbortSignal;\n}\n"]}

package/dist/domain/egress.constants.d.ts

@@ -0,0 +1 @@
+export declare const egressFields: readonly string[];

package/dist/domain/egress.constants.js

@@ -0,0 +1,7 @@
+export const egressFields = [
+    "mode",
+    "domains",
+    "allowCidrs",
+    "denyCidrs",
+];
+//# sourceMappingURL=egress.constants.js.map

package/dist/domain/egress.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress.constants.js","sourceRoot":"","sources":["../../src/domain/egress.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,MAAM;IACN,SAAS;IACT,YAAY;IACZ,WAAW;CACZ,CAAC","sourcesContent":["export const egressFields: readonly string[] = [\n  \"mode\",\n  \"domains\",\n  \"allowCidrs\",\n  \"denyCidrs\",\n];\n"]}

package/dist/domain/egress.d.ts

@@ -0,0 +1,2 @@
+import type { EgressPolicy } from "./egress.types.ts";
+export declare function validateEgress(value: unknown): EgressPolicy | undefined;

package/dist/domain/egress.js

@@ -0,0 +1,48 @@
+import { isIP } from "node:net";
+import { egressFields } from "./egress.constants.js";
+import { invariant } from "./errors.js";
+function entries(value, label, validate) {
+    if (value === undefined)
+        return [];
+    invariant(Array.isArray(value), `${label} must be an array`);
+    const items = Array.from(value);
+    invariant(items.every((entry) => typeof entry === "string" && validate(entry)), `Invalid ${label} entry`);
+    return [...new Set(items)];
+}
+function domain(value) {
+    const name = value.startsWith("*.") ? value.slice(2) : value;
+    return (name.length <= 253 &&
+        !isIP(name) &&
+        name.includes(".") &&
+        name
+            .split(".")
+            .every((label) => /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/i.test(label)));
+}
+function cidr(value) {
+    const parts = value.split("/");
+    if (parts.length !== 2)
+        return false;
+    const version = isIP(parts[0]);
+    return (version !== 0 &&
+        /^(0|[1-9][0-9]*)$/.test(parts[1]) &&
+        Number(parts[1]) <= (version === 4 ? 32 : 128) &&
+        !parts[0].includes("%"));
+}
+export function validateEgress(value) {
+    if (value === undefined)
+        return undefined;
+    invariant(value !== null && typeof value === "object" && !Array.isArray(value), "egress must be a policy object");
+    invariant("mode" in value, "egress requires a mode");
+    if (value.mode === "deny-all") {
+        invariant(Object.keys(value).every((key) => key === "mode"), "deny-all does not accept allowlist fields");
+        return { mode: "deny-all" };
+    }
+    invariant(value.mode === "allowlist", "egress mode must be deny-all or allowlist");
+    invariant(Object.keys(value).every((key) => egressFields.includes(key)), "Unknown egress policy field");
+    const domains = entries("domains" in value ? value.domains : undefined, "egress domains", domain);
+    const allowCidrs = entries("allowCidrs" in value ? value.allowCidrs : undefined, "egress allowCidrs", cidr);
+    const denyCidrs = entries("denyCidrs" in value ? value.denyCidrs : undefined, "egress denyCidrs", cidr);
+    invariant(domains.length + allowCidrs.length > 0, "egress allowlist requires an allowed domain or CIDR; use deny-all to block everything");
+    return { mode: "allowlist", domains, allowCidrs, denyCidrs };
+}
+//# sourceMappingURL=egress.js.map

package/dist/domain/egress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress.js","sourceRoot":"","sources":["../../src/domain/egress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,SAAS,OAAO,CACd,KAAc,EACd,KAAa,EACb,QAAoC;IAEpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,SAAS,CACP,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EACpE,WAAW,KAAK,QAAQ,CACzB,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,OAAO,CACL,IAAI,CAAC,MAAM,IAAI,GAAG;QAClB,CAAC,IAAI,CAAC,IAAI,CAAC;QACX,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClB,IAAI;aACD,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yCAAyC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAChC,OAAO,CACL,OAAO,KAAK,CAAC;QACb,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9C,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,SAAS,CACP,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACpE,gCAAgC,CACjC,CAAC;IACF,SAAS,CAAC,MAAM,IAAI,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,SAAS,CACP,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,EACjD,2CAA2C,CAC5C,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;IACD,SAAS,CACP,KAAK,CAAC,IAAI,KAAK,WAAW,EAC1B,2CAA2C,CAC5C,CAAC;IACF,SAAS,CACP,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC7D,6BAA6B,CAC9B,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CACrB,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAC9C,gBAAgB,EAChB,MAAM,CACP,CAAC;IACF,MAAM,UAAU,GAAG,OAAO,CACxB,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EACpD,mBAAmB,EACnB,IAAI,CACL,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CACvB,WAAW,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAClD,kBAAkB,EAClB,IAAI,CACL,CAAC;IACF,SAAS,CACP,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EACtC,uFAAuF,CACxF,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AAC/D,CAAC","sourcesContent":["import { isIP } from \"node:net\";\nimport { egressFields } from \"./egress.constants.ts\";\nimport { invariant } from \"./errors.ts\";\nimport type { EgressPolicy } from \"./egress.types.ts\";\n\nfunction entries(\n  value: unknown,\n  label: string,\n  validate: (entry: string) => boolean,\n): string[] {\n  if (value === undefined) return [];\n  invariant(Array.isArray(value), `${label} must be an array`);\n  const items = Array.from(value);\n  invariant(\n    items.every((entry) => typeof entry === \"string\" && validate(entry)),\n    `Invalid ${label} entry`,\n  );\n  return [...new Set<string>(items)];\n}\n\nfunction domain(value: string): boolean {\n  const name = value.startsWith(\"*.\") ? value.slice(2) : value;\n  return (\n    name.length <= 253 &&\n    !isIP(name) &&\n    name.includes(\".\") &&\n    name\n      .split(\".\")\n      .every((label) => /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/i.test(label))\n  );\n}\n\nfunction cidr(value: string): boolean {\n  const parts = value.split(\"/\");\n  if (parts.length !== 2) return false;\n  const version = isIP(parts[0]!);\n  return (\n    version !== 0 &&\n    /^(0|[1-9][0-9]*)$/.test(parts[1]!) &&\n    Number(parts[1]) <= (version === 4 ? 32 : 128) &&\n    !parts[0]!.includes(\"%\")\n  );\n}\n\nexport function validateEgress(value: unknown): EgressPolicy | undefined {\n  if (value === undefined) return undefined;\n  invariant(\n    value !== null && typeof value === \"object\" && !Array.isArray(value),\n    \"egress must be a policy object\",\n  );\n  invariant(\"mode\" in value, \"egress requires a mode\");\n  if (value.mode === \"deny-all\") {\n    invariant(\n      Object.keys(value).every((key) => key === \"mode\"),\n      \"deny-all does not accept allowlist fields\",\n    );\n    return { mode: \"deny-all\" };\n  }\n  invariant(\n    value.mode === \"allowlist\",\n    \"egress mode must be deny-all or allowlist\",\n  );\n  invariant(\n    Object.keys(value).every((key) => egressFields.includes(key)),\n    \"Unknown egress policy field\",\n  );\n  const domains = entries(\n    \"domains\" in value ? value.domains : undefined,\n    \"egress domains\",\n    domain,\n  );\n  const allowCidrs = entries(\n    \"allowCidrs\" in value ? value.allowCidrs : undefined,\n    \"egress allowCidrs\",\n    cidr,\n  );\n  const denyCidrs = entries(\n    \"denyCidrs\" in value ? value.denyCidrs : undefined,\n    \"egress denyCidrs\",\n    cidr,\n  );\n  invariant(\n    domains.length + allowCidrs.length > 0,\n    \"egress allowlist requires an allowed domain or CIDR; use deny-all to block everything\",\n  );\n  return { mode: \"allowlist\", domains, allowCidrs, denyCidrs };\n}\n"]}

package/dist/domain/egress.types.d.ts

@@ -0,0 +1,8 @@
+export type EgressPolicy = {
+    readonly mode: "deny-all";
+} | {
+    readonly mode: "allowlist";
+    readonly domains?: readonly string[];
+    readonly allowCidrs?: readonly string[];
+    readonly denyCidrs?: readonly string[];
+};

package/dist/domain/egress.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=egress.types.js.map

package/dist/domain/egress.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress.types.js","sourceRoot":"","sources":["../../src/domain/egress.types.ts"],"names":[],"mappings":"","sourcesContent":["export type EgressPolicy =\n  | { readonly mode: \"deny-all\" }\n  | {\n      readonly mode: \"allowlist\";\n      readonly domains?: readonly string[];\n      readonly allowCidrs?: readonly string[];\n      readonly denyCidrs?: readonly string[];\n    };\n"]}

package/dist/domain/ports.d.ts

@@ -1,5 +1,5 @@
 export type { AgentAdapter, AgentEvent, AgentInput, AgentObservation, Usage, } from "./agent.types.ts";
 export type { Channel, Command, CommandResult, Variables, } from "./command.types.ts";
 export type { ConversationContext, ConversationRecord, ConversationStore, } from "./conversation.types.ts";
-export type { SandboxContext, SandboxLease, SandboxProvider, TransferOptions, Volume, } from "./sandbox.types.ts";
+export type { FileManifestEntry, FileTransfers, SandboxContext, SandboxLease, SandboxProvider, TransferOptions, Volume, } from "./sandbox.types.ts";
 export type { BranchPolicy, Commit, Disposal, LifecycleHooks, StageLimits, WorkspaceRecord, } from "./workspace.types.ts";

package/dist/domain/ports.js.map

@@ -1 +1 @@
-{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../src/domain/ports.ts"],"names":[],"mappings":"","sourcesContent":["export type {\n  AgentAdapter,\n  AgentEvent,\n  AgentInput,\n  AgentObservation,\n  Usage,\n} from \"./agent.types.ts\";\nexport type {\n  Channel,\n  Command,\n  CommandResult,\n  Variables,\n} from \"./command.types.ts\";\nexport type {\n  ConversationContext,\n  ConversationRecord,\n  ConversationStore,\n} from \"./conversation.types.ts\";\nexport type {\n  SandboxContext,\n  SandboxLease,\n  SandboxProvider,\n  TransferOptions,\n  Volume,\n} from \"./sandbox.types.ts\";\nexport type {\n  BranchPolicy,\n  Commit,\n  Disposal,\n  LifecycleHooks,\n  StageLimits,\n  WorkspaceRecord,\n} from \"./workspace.types.ts\";\n"]}
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../src/domain/ports.ts"],"names":[],"mappings":"","sourcesContent":["export type {\n  AgentAdapter,\n  AgentEvent,\n  AgentInput,\n  AgentObservation,\n  Usage,\n} from \"./agent.types.ts\";\nexport type {\n  Channel,\n  Command,\n  CommandResult,\n  Variables,\n} from \"./command.types.ts\";\nexport type {\n  ConversationContext,\n  ConversationRecord,\n  ConversationStore,\n} from \"./conversation.types.ts\";\nexport type {\n  FileManifestEntry,\n  FileTransfers,\n  SandboxContext,\n  SandboxLease,\n  SandboxProvider,\n  TransferOptions,\n  Volume,\n} from \"./sandbox.types.ts\";\nexport type {\n  BranchPolicy,\n  Commit,\n  Disposal,\n  LifecycleHooks,\n  StageLimits,\n  WorkspaceRecord,\n} from \"./workspace.types.ts\";\n"]}

package/dist/domain/sandbox.types.d.ts

@@ -15,7 +15,20 @@ export interface TransferOptions {
     readonly signal?: AbortSignal;
     readonly deadlineMs?: number;
 }
+export interface FileManifestEntry {
+    readonly path: string;
+    readonly kind: "file" | "link";
+    readonly mode: number;
+    readonly size: number;
+    readonly sha256: string;
+}
+export interface FileTransfers {
+    uploadBatch?(source: string, entries: readonly FileManifestEntry[], destination: string, options?: TransferOptions): Promise<void>;
+    manifest(source: string, paths: readonly string[], options?: TransferOptions): Promise<readonly FileManifestEntry[]>;
+    downloadBatch(source: string, entries: readonly FileManifestEntry[], destination: string, options?: TransferOptions): Promise<void>;
+}
 export interface SandboxLease {
+    readonly fileTransfers?: FileTransfers;
     readonly root: string;
     readonly home: string;
     invoke(command: Command): Promise<CommandResult>;

package/dist/domain/sandbox.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.types.js","sourceRoot":"","sources":["../../src/domain/sandbox.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Command, CommandResult, Variables } from \"./command.types.ts\";\n\nexport interface Volume {\n  readonly source: string;\n  readonly target: string;\n  readonly readOnly?: boolean;\n}\n\nexport interface SandboxContext {\n  readonly repository: string;\n  readonly directory: string;\n  readonly gitDirectories: readonly string[];\n  readonly variables: Variables;\n  readonly signal?: AbortSignal;\n}\n\nexport interface TransferOptions {\n  readonly signal?: AbortSignal;\n  readonly deadlineMs?: number;\n}\n\nexport interface SandboxLease {\n  readonly root: string;\n  readonly home: string;\n  invoke(command: Command): Promise<CommandResult>;\n  upload(\n    source: string,\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n  download(\n    source: string,\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n  release(): Promise<void>;\n}\n\nexport interface SandboxProvider {\n  readonly name: string;\n  readonly placement: \"mounted\" | \"remote\" | \"host\";\n  readonly variables?: Variables;\n  acquire(context: SandboxContext): Promise<SandboxLease>;\n}\n"]}
+{"version":3,"file":"sandbox.types.js","sourceRoot":"","sources":["../../src/domain/sandbox.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Command, CommandResult, Variables } from \"./command.types.ts\";\n\nexport interface Volume {\n  readonly source: string;\n  readonly target: string;\n  readonly readOnly?: boolean;\n}\n\nexport interface SandboxContext {\n  readonly repository: string;\n  readonly directory: string;\n  readonly gitDirectories: readonly string[];\n  readonly variables: Variables;\n  readonly signal?: AbortSignal;\n}\n\nexport interface TransferOptions {\n  readonly signal?: AbortSignal;\n  readonly deadlineMs?: number;\n}\n\nexport interface FileManifestEntry {\n  readonly path: string;\n  readonly kind: \"file\" | \"link\";\n  readonly mode: number;\n  readonly size: number;\n  readonly sha256: string;\n}\n\nexport interface FileTransfers {\n  uploadBatch?(\n    source: string,\n    entries: readonly FileManifestEntry[],\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n  manifest(\n    source: string,\n    paths: readonly string[],\n    options?: TransferOptions,\n  ): Promise<readonly FileManifestEntry[]>;\n  downloadBatch(\n    source: string,\n    entries: readonly FileManifestEntry[],\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n}\n\nexport interface SandboxLease {\n  readonly fileTransfers?: FileTransfers;\n  readonly root: string;\n  readonly home: string;\n  invoke(command: Command): Promise<CommandResult>;\n  upload(\n    source: string,\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n  download(\n    source: string,\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n  release(): Promise<void>;\n}\n\nexport interface SandboxProvider {\n  readonly name: string;\n  readonly placement: \"mounted\" | \"remote\" | \"host\";\n  readonly variables?: Variables;\n  acquire(context: SandboxContext): Promise<SandboxLease>;\n}\n"]}

package/dist/domain/task-queue.constants.d.ts

@@ -0,0 +1,8 @@
+export declare const queueMaxBytes = 1048576;
+export declare const queueMaxValueBytes = 262144;
+export declare const queueDefaultLeaseMs = 30000;
+export declare const queueDefaultPollMs = 250;
+export declare const queueMaxLeaseMs = 300000;
+export declare const queueMaxStringLength = 512;
+export declare const queueMinLeaseMs = 30;
+export declare const queueMaxHandlers = 100;

package/dist/domain/task-queue.constants.js

@@ -0,0 +1,9 @@
+export const queueMaxBytes = 1_048_576;
+export const queueMaxValueBytes = 262_144;
+export const queueDefaultLeaseMs = 30_000;
+export const queueDefaultPollMs = 250;
+export const queueMaxLeaseMs = 300_000;
+export const queueMaxStringLength = 512;
+export const queueMinLeaseMs = 30;
+export const queueMaxHandlers = 100;
+//# sourceMappingURL=task-queue.constants.js.map

package/dist/domain/task-queue.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-queue.constants.js","sourceRoot":"","sources":["../../src/domain/task-queue.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAC1C,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC","sourcesContent":["export const queueMaxBytes = 1_048_576;\nexport const queueMaxValueBytes = 262_144;\nexport const queueDefaultLeaseMs = 30_000;\nexport const queueDefaultPollMs = 250;\nexport const queueMaxLeaseMs = 300_000;\nexport const queueMaxStringLength = 512;\nexport const queueMinLeaseMs = 30;\nexport const queueMaxHandlers = 100;\n"]}

package/dist/domain/task-queue.d.ts

@@ -0,0 +1,11 @@
+import type { QueueClaim, QueueJob, QueueLease, QueueRequest, QueueResult } from "./task-queue.types.ts";
+export declare function queueObject(value: unknown): Record<string, unknown>;
+export declare function queueString(value: unknown): string;
+export declare function queueNumber(value: unknown): number;
+export declare function queueLeaseMs(value: unknown): number;
+export declare function queueJson(value: unknown): import("./workflow/checkpoint.types.ts").WorkflowJson;
+export declare function queueRequest(value: unknown): QueueRequest;
+export declare function queueClaim(value: unknown): QueueClaim;
+export declare function queueLease(value: unknown): QueueLease;
+export declare function queueResult(value: unknown): QueueResult;
+export declare function queueJob(value: unknown): QueueJob;

package/dist/domain/task-queue.js

@@ -0,0 +1,105 @@
+import { queueMaxValueBytes, queueMaxLeaseMs, queueMaxStringLength, queueMinLeaseMs, queueMaxHandlers, } from "./task-queue.constants.js";
+import { checkpointValue } from "./workflow/checkpoint-value.js";
+export function queueObject(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new Error("Invalid queue object");
+    return Object.fromEntries(Object.entries(value));
+}
+export function queueString(value) {
+    if (typeof value !== "string" ||
+        !value.length ||
+        value.length > queueMaxStringLength)
+        throw new Error("Invalid queue identifier");
+    return value;
+}
+export function queueNumber(value) {
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0)
+        throw new Error("Invalid queue number");
+    return value;
+}
+export function queueLeaseMs(value) {
+    const ms = queueNumber(value);
+    if (ms < queueMinLeaseMs || ms > queueMaxLeaseMs)
+        throw new Error("Queue lease must be between 30 and 300000 milliseconds");
+    return ms;
+}
+export function queueJson(value) {
+    const checked = checkpointValue(value);
+    if (checked.kind !== "json")
+        throw new Error("Queue values must be JSON");
+    if (Buffer.byteLength(JSON.stringify(checked.value)) > queueMaxValueBytes)
+        throw new Error("Queue value exceeds size limit");
+    return checked.value;
+}
+export function queueRequest(value) {
+    const data = queueObject(value);
+    return {
+        id: queueString(data.id),
+        handler: queueString(data.handler),
+        input: queueJson(data.input),
+        ...(data.deadline === undefined
+            ? {}
+            : { deadline: queueNumber(data.deadline) }),
+    };
+}
+export function queueClaim(value) {
+    const data = queueObject(value);
+    if (!Array.isArray(data.handlers) ||
+        !data.handlers.length ||
+        data.handlers.length > queueMaxHandlers)
+        throw new Error("Invalid queue handlers");
+    return {
+        worker: queueString(data.worker),
+        handlers: data.handlers.map(queueString),
+        leaseMs: queueLeaseMs(data.leaseMs),
+    };
+}
+export function queueLease(value) {
+    const data = queueObject(value);
+    return {
+        id: queueString(data.id),
+        worker: queueString(data.worker),
+        fence: queueNumber(data.fence),
+    };
+}
+export function queueResult(value) {
+    const data = queueObject(value);
+    const usage = data.usage === undefined ? undefined : queueObject(data.usage);
+    return {
+        value: queueJson(data.value),
+        ...(data.error === undefined ? {} : { error: queueString(data.error) }),
+        ...(usage === undefined
+            ? {}
+            : {
+                usage: {
+                    input: queueNumber(usage.input),
+                    output: queueNumber(usage.output),
+                    cached: queueNumber(usage.cached),
+                    ...(usage.cacheCreated === undefined
+                        ? {}
+                        : { cacheCreated: queueNumber(usage.cacheCreated) }),
+                },
+            }),
+    };
+}
+export function queueJob(value) {
+    const data = queueObject(value);
+    const status = data.status;
+    if (status !== "pending" &&
+        status !== "active" &&
+        status !== "done" &&
+        status !== "failed" &&
+        status !== "cancelled")
+        throw new Error("Invalid queue status");
+    return {
+        ...queueRequest(data),
+        status,
+        fence: queueNumber(data.fence),
+        ...(data.worker === undefined ? {} : { worker: queueString(data.worker) }),
+        ...(data.expires === undefined
+            ? {}
+            : { expires: queueNumber(data.expires) }),
+        ...(data.result === undefined ? {} : { result: queueResult(data.result) }),
+    };
+}
+//# sourceMappingURL=task-queue.js.map

package/dist/domain/task-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-queue.js","sourceRoot":"","sources":["../../src/domain/task-queue.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,MAAM;QACb,KAAK,CAAC,MAAM,GAAG,oBAAoB;QAEnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,EAAE,GAAG,eAAe,IAAI,EAAE,GAAG,eAAe;QAC9C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,OAAO,EAAE,CAAC;AACZ,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,kBAAkB;QACvE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,KAAK,CAAC;AACvB,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QAClC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;YAC7B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC7B,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,gBAAgB;QAEvC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,OAAO;QACL,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;QAChC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;QACxC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;KACpC,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;QAChC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;KAC/B,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7E,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,KAAK,KAAK,SAAS;YACrB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,KAAK,EAAE;oBACL,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC;oBAC/B,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;oBACjC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;oBACjC,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS;wBAClC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;iBACvD;aACF,CAAC;KACP,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,MAAM;QACjB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,WAAW;QAEtB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,OAAO;QACL,GAAG,YAAY,CAAC,IAAI,CAAC;QACrB,MAAM;QACN,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS;YAC5B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;KAC3E,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  QueueClaim,\n  QueueJob,\n  QueueLease,\n  QueueRequest,\n  QueueResult,\n} from \"./task-queue.types.ts\";\nimport {\n  queueMaxValueBytes,\n  queueMaxLeaseMs,\n  queueMaxStringLength,\n  queueMinLeaseMs,\n  queueMaxHandlers,\n} from \"./task-queue.constants.ts\";\nimport { checkpointValue } from \"./workflow/checkpoint-value.ts\";\n\nexport function queueObject(value: unknown): Record<string, unknown> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value))\n    throw new Error(\"Invalid queue object\");\n  return Object.fromEntries(Object.entries(value));\n}\nexport function queueString(value: unknown): string {\n  if (\n    typeof value !== \"string\" ||\n    !value.length ||\n    value.length > queueMaxStringLength\n  )\n    throw new Error(\"Invalid queue identifier\");\n  return value;\n}\nexport function queueNumber(value: unknown): number {\n  if (typeof value !== \"number\" || !Number.isSafeInteger(value) || value < 0)\n    throw new Error(\"Invalid queue number\");\n  return value;\n}\nexport function queueLeaseMs(value: unknown): number {\n  const ms = queueNumber(value);\n  if (ms < queueMinLeaseMs || ms > queueMaxLeaseMs)\n    throw new Error(\"Queue lease must be between 30 and 300000 milliseconds\");\n  return ms;\n}\nexport function queueJson(value: unknown) {\n  const checked = checkpointValue(value);\n  if (checked.kind !== \"json\") throw new Error(\"Queue values must be JSON\");\n  if (Buffer.byteLength(JSON.stringify(checked.value)) > queueMaxValueBytes)\n    throw new Error(\"Queue value exceeds size limit\");\n  return checked.value;\n}\nexport function queueRequest(value: unknown): QueueRequest {\n  const data = queueObject(value);\n  return {\n    id: queueString(data.id),\n    handler: queueString(data.handler),\n    input: queueJson(data.input),\n    ...(data.deadline === undefined\n      ? {}\n      : { deadline: queueNumber(data.deadline) }),\n  };\n}\nexport function queueClaim(value: unknown): QueueClaim {\n  const data = queueObject(value);\n  if (\n    !Array.isArray(data.handlers) ||\n    !data.handlers.length ||\n    data.handlers.length > queueMaxHandlers\n  )\n    throw new Error(\"Invalid queue handlers\");\n  return {\n    worker: queueString(data.worker),\n    handlers: data.handlers.map(queueString),\n    leaseMs: queueLeaseMs(data.leaseMs),\n  };\n}\nexport function queueLease(value: unknown): QueueLease {\n  const data = queueObject(value);\n  return {\n    id: queueString(data.id),\n    worker: queueString(data.worker),\n    fence: queueNumber(data.fence),\n  };\n}\nexport function queueResult(value: unknown): QueueResult {\n  const data = queueObject(value);\n  const usage = data.usage === undefined ? undefined : queueObject(data.usage);\n  return {\n    value: queueJson(data.value),\n    ...(data.error === undefined ? {} : { error: queueString(data.error) }),\n    ...(usage === undefined\n      ? {}\n      : {\n          usage: {\n            input: queueNumber(usage.input),\n            output: queueNumber(usage.output),\n            cached: queueNumber(usage.cached),\n            ...(usage.cacheCreated === undefined\n              ? {}\n              : { cacheCreated: queueNumber(usage.cacheCreated) }),\n          },\n        }),\n  };\n}\nexport function queueJob(value: unknown): QueueJob {\n  const data = queueObject(value);\n  const status = data.status;\n  if (\n    status !== \"pending\" &&\n    status !== \"active\" &&\n    status !== \"done\" &&\n    status !== \"failed\" &&\n    status !== \"cancelled\"\n  )\n    throw new Error(\"Invalid queue status\");\n  return {\n    ...queueRequest(data),\n    status,\n    fence: queueNumber(data.fence),\n    ...(data.worker === undefined ? {} : { worker: queueString(data.worker) }),\n    ...(data.expires === undefined\n      ? {}\n      : { expires: queueNumber(data.expires) }),\n    ...(data.result === undefined ? {} : { result: queueResult(data.result) }),\n  };\n}\n"]}

package/dist/domain/task-queue.types.d.ts

@@ -0,0 +1,41 @@
+import type { Usage } from "./agent.types.ts";
+import type { WorkflowJson } from "./workflow/checkpoint.types.ts";
+export interface QueueRequest {
+    readonly id: string;
+    readonly handler: string;
+    readonly input: WorkflowJson;
+    readonly deadline?: number;
+}
+export interface QueueResult {
+    readonly value: WorkflowJson;
+    readonly usage?: Usage;
+    readonly error?: string;
+}
+export interface QueueJob extends QueueRequest {
+    readonly status: "pending" | "active" | "done" | "failed" | "cancelled";
+    readonly fence: number;
+    readonly worker?: string;
+    readonly expires?: number;
+    readonly result?: QueueResult;
+}
+export interface QueueClaim {
+    readonly worker: string;
+    readonly handlers: readonly string[];
+    readonly leaseMs: number;
+}
+export interface QueueLease {
+    readonly id: string;
+    readonly worker: string;
+    readonly fence: number;
+}
+export interface TaskQueue {
+    enqueue(request: QueueRequest): Promise<QueueJob>;
+    get(id: string): Promise<QueueJob | undefined>;
+    claim(request: QueueClaim): Promise<QueueJob | undefined>;
+    renew(lease: QueueLease, leaseMs: number): Promise<QueueJob>;
+    complete(lease: QueueLease, result: QueueResult): Promise<QueueJob>;
+    cancel(id: string, fence: number): Promise<QueueJob>;
+}
+export interface DurableTaskQueue extends TaskQueue {
+    close(): void;
+}

package/dist/domain/task-queue.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=task-queue.types.js.map

package/dist/domain/task-queue.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-queue.types.js","sourceRoot":"","sources":["../../src/domain/task-queue.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Usage } from \"./agent.types.ts\";\nimport type { WorkflowJson } from \"./workflow/checkpoint.types.ts\";\n\nexport interface QueueRequest {\n  readonly id: string;\n  readonly handler: string;\n  readonly input: WorkflowJson;\n  readonly deadline?: number;\n}\nexport interface QueueResult {\n  readonly value: WorkflowJson;\n  readonly usage?: Usage;\n  readonly error?: string;\n}\nexport interface QueueJob extends QueueRequest {\n  readonly status: \"pending\" | \"active\" | \"done\" | \"failed\" | \"cancelled\";\n  readonly fence: number;\n  readonly worker?: string;\n  readonly expires?: number;\n  readonly result?: QueueResult;\n}\nexport interface QueueClaim {\n  readonly worker: string;\n  readonly handlers: readonly string[];\n  readonly leaseMs: number;\n}\nexport interface QueueLease {\n  readonly id: string;\n  readonly worker: string;\n  readonly fence: number;\n}\nexport interface TaskQueue {\n  enqueue(request: QueueRequest): Promise<QueueJob>;\n  get(id: string): Promise<QueueJob | undefined>;\n  claim(request: QueueClaim): Promise<QueueJob | undefined>;\n  renew(lease: QueueLease, leaseMs: number): Promise<QueueJob>;\n  complete(lease: QueueLease, result: QueueResult): Promise<QueueJob>;\n  cancel(id: string, fence: number): Promise<QueueJob>;\n}\nexport interface DurableTaskQueue extends TaskQueue {\n  close(): void;\n}\n"]}

package/dist/domain/workflow/budget.constants.d.ts

@@ -0,0 +1 @@
+export declare const usageDimensions: readonly ["input", "cached", "cacheCreated", "output"];

package/dist/domain/workflow/budget.constants.js

@@ -0,0 +1,7 @@
+export const usageDimensions = [
+    "input",
+    "cached",
+    "cacheCreated",
+    "output",
+];
+//# sourceMappingURL=budget.constants.js.map

package/dist/domain/workflow/budget.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.constants.js","sourceRoot":"","sources":["../../../src/domain/workflow/budget.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,OAAO;IACP,QAAQ;IACR,cAAc;IACd,QAAQ;CACA,CAAC","sourcesContent":["export const usageDimensions = [\n  \"input\",\n  \"cached\",\n  \"cacheCreated\",\n  \"output\",\n] as const;\n"]}

package/dist/domain/workflow/budget.d.ts

@@ -0,0 +1,9 @@
+import type { Usage } from "../agent.types.ts";
+import type { WorkflowAccounting, WorkflowBudget, WorkflowUsage } from "./budget.types.ts";
+export declare class WorkflowBudgetExceeded extends Error {
+    readonly dimension: "attempts" | keyof Usage;
+    readonly limit: number;
+    readonly observed: number;
+    constructor(dimension: "attempts" | keyof Usage, limit: number, observed: number);
+}
+export declare function workflowAccounting(budget: WorkflowBudget | undefined, exhaust: (error: WorkflowBudgetExceeded) => void, initial?: WorkflowUsage): WorkflowAccounting;