@elie-laloum/outpost 3.0.0 → 4.0.0

package/dist/domain/agent.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent.types.js","sourceRoot":"","sources":["../../src/domain/agent.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Command, Variables } from \"./command.types.ts\";\nimport type { ConversationStore } from \"./conversation.types.ts\";\n\nexport interface Usage {\n  readonly input: number;\n  readonly cached: number;\n  readonly cacheCreated?: number;\n  readonly output: number;\n}\n\nexport type AgentEvent =\n  | {\n      readonly kind: \"phase\";\n      readonly name: string;\n      readonly agent?: string;\n      readonly branch?: string;\n      readonly directory?: string;\n    }\n  | {\n      readonly kind: \"summary\";\n      readonly durationMs: number;\n      readonly status: number;\n      readonly tokens: Usage;\n    }\n  | { readonly kind: \"warning\"; readonly message: string }\n  | { readonly kind: \"text\"; readonly text: string }\n  | { readonly kind: \"result\"; readonly text: string }\n  | { readonly kind: \"prompt\"; readonly text: string }\n  | { readonly kind: \"tool\"; readonly name: string; readonly input: unknown }\n  | { readonly kind: \"conversation\"; readonly id: string }\n  | { readonly kind: \"usage\"; readonly tokens: Usage }\n  | { readonly kind: \"failure\"; readonly message: string }\n  | { readonly kind: \"finished\" }\n  | { readonly kind: \"raw\"; readonly value: unknown };\n\nexport type AgentObservation = AgentEvent & {\n  readonly pass: number;\n  readonly at: string;\n};\n\nexport type AgentEventHandlers = {\n  readonly [Kind in AgentEvent[\"kind\"]]?: (\n    event: Extract<AgentEvent, { kind: Kind }>,\n  ) => void;\n};\n\nexport interface AgentInput {\n  readonly text?: string;\n  readonly interactive?: boolean;\n  readonly continuation?: { readonly id: string; readonly fork?: boolean };\n}\n\nexport interface AgentAdapter {\n  readonly name: string;\n  readonly variables?: Variables;\n  readonly conversations?: \"claude\" | \"codex\";\n  readonly storage?: ConversationStore;\n  readonly capture?: boolean;\n  readonly resumable?: boolean;\n  transcriptUsage?(text: string): Usage | undefined;\n  request(input: AgentInput): Command;\n  events(line: string): readonly AgentEvent[];\n}\n\nexport interface RequiredAgent {\n  readonly agent: AgentAdapter;\n}\n"]}
+{"version":3,"file":"agent.types.js","sourceRoot":"","sources":["../../src/domain/agent.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Command, Variables } from \"./command.types.ts\";\nimport type { ConversationStore } from \"./conversation.types.ts\";\n\nexport interface Usage {\n  readonly input: number;\n  readonly cached: number;\n  readonly cacheCreated?: number;\n  readonly output: number;\n}\n\nexport type AgentEvent =\n  | {\n      readonly kind: \"phase\";\n      readonly name: string;\n      readonly agent?: string;\n      readonly branch?: string;\n      readonly directory?: string;\n    }\n  | {\n      readonly kind: \"summary\";\n      readonly durationMs: number;\n      readonly status: number;\n      readonly tokens: Usage;\n    }\n  | { readonly kind: \"warning\"; readonly message: string }\n  | { readonly kind: \"text\"; readonly text: string }\n  | { readonly kind: \"result\"; readonly text: string }\n  | { readonly kind: \"prompt\"; readonly text: string }\n  | { readonly kind: \"tool\"; readonly name: string; readonly input: unknown }\n  | { readonly kind: \"conversation\"; readonly id: string }\n  | { readonly kind: \"usage\"; readonly tokens: Usage }\n  | { readonly kind: \"failure\"; readonly message: string }\n  | { readonly kind: \"finished\" }\n  | { readonly kind: \"raw\"; readonly value: unknown };\n\nexport type AgentObservation = AgentEvent & {\n  readonly pass: number;\n  readonly at: string;\n};\n\nexport type AgentEventHandlers = {\n  readonly [Kind in AgentEvent[\"kind\"]]?: (\n    event: Extract<AgentEvent, { kind: Kind }>,\n  ) => void;\n};\n\nexport interface AgentInput {\n  readonly text?: string;\n  readonly interactive?: boolean;\n  readonly continuation?: { readonly id: string; readonly fork?: boolean };\n}\n\nexport interface AgentAdapter {\n  readonly name: string;\n  readonly bootstrap?: string;\n  readonly requiresFinishedEvent?: boolean;\n  readonly variables?: Variables;\n  readonly conversations?: \"claude\" | \"codex\";\n  readonly storage?: ConversationStore;\n  readonly capture?: boolean;\n  readonly resumable?: boolean;\n  transcriptUsage?(text: string): Usage | undefined;\n  request(input: AgentInput): Command;\n  events(line: string): readonly AgentEvent[];\n}\n\nexport interface RequiredAgent {\n  readonly agent: AgentAdapter;\n}\n"]}

package/dist/domain/artifact-reference.d.ts

@@ -0,0 +1,4 @@
+import type { ArtifactReference } from "./artifact.types.ts";
+export declare function artifactDigest(bytes: Uint8Array | string): string;
+export declare function artifactId(reference: Omit<ArtifactReference, "id">): string;
+export declare function validateArtifactReference(value: unknown): ArtifactReference;

package/dist/domain/artifact-reference.js

@@ -0,0 +1,90 @@
+import { artifactDigestPattern, artifactLabelMaxLength, } from "./artifact.constants.js";
+import { createHash } from "node:crypto";
+export function artifactDigest(bytes) {
+    return createHash("sha256").update(bytes).digest("hex");
+}
+export function artifactId(reference) {
+    return artifactDigest(JSON.stringify([
+        reference.format,
+        reference.digest,
+        reference.size,
+        reference.contract.name,
+        reference.contract.version,
+        reference.contract.encoding,
+        reference.producer.executionId,
+        reference.producer.taskKey,
+        reference.producer.attempt,
+        reference.parents,
+    ]));
+}
+export function validateArtifactReference(value) {
+    const invalid = () => new Error("Invalid artifact reference or lineage");
+    if (!value ||
+        typeof value !== "object" ||
+        !("format" in value) ||
+        value.format !== 1 ||
+        !("id" in value) ||
+        !digest(value.id) ||
+        !("digest" in value) ||
+        !digest(value.digest) ||
+        !("size" in value) ||
+        typeof value.size !== "number" ||
+        !Number.isSafeInteger(value.size) ||
+        value.size < 0 ||
+        !("contract" in value) ||
+        !value.contract ||
+        typeof value.contract !== "object" ||
+        !("producer" in value) ||
+        !value.producer ||
+        typeof value.producer !== "object" ||
+        !("parents" in value) ||
+        !Array.isArray(value.parents) ||
+        !value.parents.every(digest) ||
+        new Set(value.parents).size !== value.parents.length)
+        throw invalid();
+    const contract = value.contract, producer = value.producer;
+    if (!("name" in contract) ||
+        !label(contract.name) ||
+        !("version" in contract) ||
+        !label(contract.version) ||
+        !("encoding" in contract) ||
+        (contract.encoding !== "json" && contract.encoding !== "binary") ||
+        !("executionId" in producer) ||
+        !label(producer.executionId) ||
+        !("taskKey" in producer) ||
+        !label(producer.taskKey) ||
+        !("attempt" in producer) ||
+        typeof producer.attempt !== "number" ||
+        !Number.isSafeInteger(producer.attempt) ||
+        producer.attempt < 1)
+        throw invalid();
+    const reference = Object.freeze({
+        format: 1,
+        id: value.id,
+        digest: value.digest,
+        size: value.size,
+        contract: Object.freeze({
+            name: contract.name,
+            version: contract.version,
+            encoding: contract.encoding,
+        }),
+        producer: Object.freeze({
+            executionId: producer.executionId,
+            taskKey: producer.taskKey,
+            attempt: producer.attempt,
+        }),
+        parents: Object.freeze([...value.parents]),
+    });
+    if (artifactId(reference) !== reference.id)
+        throw invalid();
+    return reference;
+}
+function digest(value) {
+    return typeof value === "string" && artifactDigestPattern.test(value);
+}
+function label(value) {
+    return (typeof value === "string" &&
+        value.trim().length > 0 &&
+        value.length <= artifactLabelMaxLength);
+}
+//# sourceMappingURL=artifact-reference.js.map

package/dist/domain/artifact-reference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-reference.js","sourceRoot":"","sources":["../../src/domain/artifact-reference.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAAwC;IACjE,OAAO,cAAc,CACnB,IAAI,CAAC,SAAS,CAAC;QACb,SAAS,CAAC,MAAM;QAChB,SAAS,CAAC,MAAM;QAChB,SAAS,CAAC,IAAI;QACd,SAAS,CAAC,QAAQ,CAAC,IAAI;QACvB,SAAS,CAAC,QAAQ,CAAC,OAAO;QAC1B,SAAS,CAAC,QAAQ,CAAC,QAAQ;QAC3B,SAAS,CAAC,QAAQ,CAAC,WAAW;QAC9B,SAAS,CAAC,QAAQ,CAAC,OAAO;QAC1B,SAAS,CAAC,QAAQ,CAAC,OAAO;QAC1B,SAAS,CAAC,OAAO;KAClB,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACzE,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;QACpB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACjB,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;QACpB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QACrB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;QACjC,KAAK,CAAC,IAAI,GAAG,CAAC;QACd,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC;QACtB,CAAC,KAAK,CAAC,QAAQ;QACf,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC;QACtB,CAAC,KAAK,CAAC,QAAQ;QACf,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC;QACrB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC7B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM;QAEpD,MAAM,OAAO,EAAE,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAC7B,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC5B,IACE,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC;QACrB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC;QACxB,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC,UAAU,IAAI,QAAQ,CAAC;QACzB,CAAC,QAAQ,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAChE,CAAC,CAAC,aAAa,IAAI,QAAQ,CAAC;QAC5B,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5B,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC;QACxB,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC;QACxB,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;QACpC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC;QACvC,QAAQ,CAAC,OAAO,GAAG,CAAC;QAEpB,MAAM,OAAO,EAAE,CAAC;IAClB,MAAM,SAAS,GAAsB,MAAM,CAAC,MAAM,CAAC;QACjD,MAAM,EAAE,CAAC;QACT,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC;QACF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC;QACF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;KAC3C,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,EAAE;QAAE,MAAM,OAAO,EAAE,CAAC;IAC5D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACvB,KAAK,CAAC,MAAM,IAAI,sBAAsB,CACvC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  artifactDigestPattern,\n  artifactLabelMaxLength,\n} from \"./artifact.constants.ts\";\nimport { createHash } from \"node:crypto\";\nimport type { ArtifactReference } from \"./artifact.types.ts\";\n\nexport function artifactDigest(bytes: Uint8Array | string): string {\n  return createHash(\"sha256\").update(bytes).digest(\"hex\");\n}\n\nexport function artifactId(reference: Omit<ArtifactReference, \"id\">): string {\n  return artifactDigest(\n    JSON.stringify([\n      reference.format,\n      reference.digest,\n      reference.size,\n      reference.contract.name,\n      reference.contract.version,\n      reference.contract.encoding,\n      reference.producer.executionId,\n      reference.producer.taskKey,\n      reference.producer.attempt,\n      reference.parents,\n    ]),\n  );\n}\n\nexport function validateArtifactReference(value: unknown): ArtifactReference {\n  const invalid = () => new Error(\"Invalid artifact reference or lineage\");\n  if (\n    !value ||\n    typeof value !== \"object\" ||\n    !(\"format\" in value) ||\n    value.format !== 1 ||\n    !(\"id\" in value) ||\n    !digest(value.id) ||\n    !(\"digest\" in value) ||\n    !digest(value.digest) ||\n    !(\"size\" in value) ||\n    typeof value.size !== \"number\" ||\n    !Number.isSafeInteger(value.size) ||\n    value.size < 0 ||\n    !(\"contract\" in value) ||\n    !value.contract ||\n    typeof value.contract !== \"object\" ||\n    !(\"producer\" in value) ||\n    !value.producer ||\n    typeof value.producer !== \"object\" ||\n    !(\"parents\" in value) ||\n    !Array.isArray(value.parents) ||\n    !value.parents.every(digest) ||\n    new Set(value.parents).size !== value.parents.length\n  )\n    throw invalid();\n  const contract = value.contract,\n    producer = value.producer;\n  if (\n    !(\"name\" in contract) ||\n    !label(contract.name) ||\n    !(\"version\" in contract) ||\n    !label(contract.version) ||\n    !(\"encoding\" in contract) ||\n    (contract.encoding !== \"json\" && contract.encoding !== \"binary\") ||\n    !(\"executionId\" in producer) ||\n    !label(producer.executionId) ||\n    !(\"taskKey\" in producer) ||\n    !label(producer.taskKey) ||\n    !(\"attempt\" in producer) ||\n    typeof producer.attempt !== \"number\" ||\n    !Number.isSafeInteger(producer.attempt) ||\n    producer.attempt < 1\n  )\n    throw invalid();\n  const reference: ArtifactReference = Object.freeze({\n    format: 1,\n    id: value.id,\n    digest: value.digest,\n    size: value.size,\n    contract: Object.freeze({\n      name: contract.name,\n      version: contract.version,\n      encoding: contract.encoding,\n    }),\n    producer: Object.freeze({\n      executionId: producer.executionId,\n      taskKey: producer.taskKey,\n      attempt: producer.attempt,\n    }),\n    parents: Object.freeze([...value.parents]),\n  });\n  if (artifactId(reference) !== reference.id) throw invalid();\n  return reference;\n}\n\nfunction digest(value: unknown): value is string {\n  return typeof value === \"string\" && artifactDigestPattern.test(value);\n}\n\nfunction label(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    value.trim().length > 0 &&\n    value.length <= artifactLabelMaxLength\n  );\n}\n"]}

package/dist/domain/artifact.constants.d.ts

@@ -0,0 +1,2 @@
+export declare const artifactLabelMaxLength = 1024;
+export declare const artifactDigestPattern: RegExp;

package/dist/domain/artifact.constants.js

@@ -0,0 +1,3 @@
+export const artifactLabelMaxLength = 1024;
+export const artifactDigestPattern = /^[a-f0-9]{64}$/;
+//# sourceMappingURL=artifact.constants.js.map

package/dist/domain/artifact.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.constants.js","sourceRoot":"","sources":["../../src/domain/artifact.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAC3C,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC","sourcesContent":["export const artifactLabelMaxLength = 1024;\nexport const artifactDigestPattern = /^[a-f0-9]{64}$/;\n"]}

package/dist/domain/artifact.d.ts

@@ -0,0 +1,7 @@
+import type { ArtifactContract, ArtifactContractOptions, ArtifactReference, ArtifactStore, JsonArtifactOptions, PublishArtifactOptions, ReadArtifactOptions } from "./artifact.types.ts";
+export declare const artifact: {
+    json<T>(options: JsonArtifactOptions<T>): ArtifactContract<T>;
+    binary(options: ArtifactContractOptions): ArtifactContract<Uint8Array>;
+};
+export declare function publishArtifact<T>(store: ArtifactStore, contract: ArtifactContract<T>, value: T, options: PublishArtifactOptions): Promise<ArtifactReference>;
+export declare function readStoredArtifact<T>(store: ArtifactStore, contract: ArtifactContract<T>, value: unknown, options?: ReadArtifactOptions): Promise<T>;

package/dist/domain/artifact.js

@@ -0,0 +1,104 @@
+import { artifactLabelMaxLength } from "./artifact.constants.js";
+import { artifactDigest, artifactId, validateArtifactReference, } from "./artifact-reference.js";
+import { checkpointValue } from "./workflow/checkpoint-value.js";
+function identity(options) {
+    if (!options.name.trim() ||
+        !options.version.trim() ||
+        options.name.length > artifactLabelMaxLength ||
+        options.version.length > artifactLabelMaxLength)
+        throw new Error(`Artifact contract name and version must be nonempty and at most ${artifactLabelMaxLength} characters`);
+    return { name: options.name, version: options.version };
+}
+export const artifact = {
+    json(options) {
+        const schema = options.schema;
+        async function validate(value) {
+            if (typeof schema === "function")
+                return schema(value);
+            const result = await schema["~standard"].validate(value);
+            if (result.issues)
+                throw new Error(`Artifact schema validation failed: ${JSON.stringify(result.issues)}`);
+            return result.value;
+        }
+        return Object.freeze({
+            ...identity(options),
+            encoding: "json",
+            async encode(value) {
+                const checked = checkpointValue(await validate(value));
+                if (checked.kind !== "json")
+                    throw new Error("Artifact payload must be JSON");
+                return Buffer.from(JSON.stringify(checked.value));
+            },
+            async decode(bytes) {
+                return validate(JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes)));
+            },
+        });
+    },
+    binary(options) {
+        return Object.freeze({
+            ...identity(options),
+            encoding: "binary",
+            async encode(value) {
+                if (!(value instanceof Uint8Array))
+                    throw new Error("Artifact payload must be Uint8Array");
+                return Uint8Array.from(value);
+            },
+            async decode(bytes) {
+                return Uint8Array.from(bytes);
+            },
+        });
+    },
+};
+export async function publishArtifact(store, contract, value, options) {
+    options.signal?.throwIfAborted();
+    const producer = { ...options.producer };
+    const parents = (options.parents ?? []).map((parent) => validateArtifactReference(parent).id);
+    const bytes = Uint8Array.from(await contract.encode(value));
+    options.signal?.throwIfAborted();
+    const metadata = {
+        format: 1,
+        digest: artifactDigest(bytes),
+        size: bytes.length,
+        contract: {
+            name: contract.name,
+            version: contract.version,
+            encoding: contract.encoding,
+        },
+        producer,
+        parents,
+    };
+    const reference = validateArtifactReference({
+        ...metadata,
+        id: artifactId(metadata),
+    });
+    await store.put(reference.id, bytes, options.signal);
+    options.signal?.throwIfAborted();
+    return reference;
+}
+export async function readStoredArtifact(store, contract, value, options = {}) {
+    options.signal?.throwIfAborted();
+    const reference = validateArtifactReference(value);
+    if (reference.contract.name !== contract.name ||
+        reference.contract.version !== contract.version ||
+        reference.contract.encoding !== contract.encoding)
+        throw new Error("Artifact contract mismatch");
+    const producer = options.producer;
+    if (producer &&
+        (reference.producer.executionId !== producer.executionId ||
+            reference.producer.taskKey !== producer.taskKey ||
+            reference.producer.attempt !== producer.attempt))
+        throw new Error("Artifact producer mismatch");
+    if (options.parents &&
+        JSON.stringify(reference.parents) !==
+            JSON.stringify(options.parents.map((parent) => validateArtifactReference(parent).id)))
+        throw new Error("Artifact lineage mismatch");
+    const bytes = await store.get(reference.id, options.signal);
+    options.signal?.throwIfAborted();
+    if (bytes.length !== reference.size ||
+        artifactDigest(bytes) !== reference.digest)
+        throw new Error("Artifact content integrity mismatch");
+    const result = await contract.decode(bytes);
+    options.signal?.throwIfAborted();
+    return result;
+}
+//# sourceMappingURL=artifact.js.map

package/dist/domain/artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.js","sourceRoot":"","sources":["../../src/domain/artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EACL,cAAc,EACd,UAAU,EACV,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAWjE,SAAS,QAAQ,CAAC,OAAgC;IAChD,IACE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;QACpB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE;QACvB,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,sBAAsB;QAC5C,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,sBAAsB;QAE/C,MAAM,IAAI,KAAK,CACb,mEAAmE,sBAAsB,aAAa,CACvG,CAAC;IACJ,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,IAAI,CAAI,OAA+B;QACrC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,KAAK,UAAU,QAAQ,CAAC,KAAc;YACpC,IAAI,OAAO,MAAM,KAAK,UAAU;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,MAAM;gBACf,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CACtE,CAAC;YACJ,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,QAAQ,CAAC,OAAO,CAAC;YACpB,QAAQ,EAAE,MAAM;YAChB,KAAK,CAAC,MAAM,CAAC,KAAQ;gBACnB,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;oBACzB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACnD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,KAAiB;gBAC5B,OAAO,QAAQ,CACb,IAAI,CAAC,KAAK,CACR,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAC7C,CACb,CAAC;YACJ,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,OAAgC;QACrC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,QAAQ,CAAC,OAAO,CAAC;YACpB,QAAQ,EAAE,QAAQ;YAClB,KAAK,CAAC,MAAM,CAAC,KAAiB;gBAC5B,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;oBAChC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBACzD,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,KAAiB;gBAC5B,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAoB,EACpB,QAA6B,EAC7B,KAAQ,EACR,OAA+B;IAE/B,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CACzC,CAAC,MAAM,EAAE,EAAE,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,EAAE,CACjD,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,CAAU;QAClB,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,MAAM;QAClB,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B;QACD,QAAQ;QACR,OAAO;KACR,CAAC;IACF,MAAM,SAAS,GAAG,yBAAyB,CAAC;QAC1C,GAAG,QAAQ;QACX,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC;KACzB,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAoB,EACpB,QAA6B,EAC7B,KAAc,EACd,UAA+B,EAAE;IAEjC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACnD,IACE,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QACzC,SAAS,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QAC/C,SAAS,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QAEjD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IACE,QAAQ;QACR,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;YACtD,SAAS,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YAC/C,SAAS,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC;QAElD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,IACE,OAAO,CAAC,OAAO;QACf,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC;YAC/B,IAAI,CAAC,SAAS,CACZ,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CACtE;QAEH,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,IACE,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI;QAC/B,cAAc,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,MAAM;QAE1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { artifactLabelMaxLength } from \"./artifact.constants.ts\";\nimport {\n  artifactDigest,\n  artifactId,\n  validateArtifactReference,\n} from \"./artifact-reference.ts\";\nimport { checkpointValue } from \"./workflow/checkpoint-value.ts\";\nimport type {\n  ArtifactContract,\n  ArtifactContractOptions,\n  ArtifactReference,\n  ArtifactStore,\n  JsonArtifactOptions,\n  PublishArtifactOptions,\n  ReadArtifactOptions,\n} from \"./artifact.types.ts\";\n\nfunction identity(options: ArtifactContractOptions): ArtifactContractOptions {\n  if (\n    !options.name.trim() ||\n    !options.version.trim() ||\n    options.name.length > artifactLabelMaxLength ||\n    options.version.length > artifactLabelMaxLength\n  )\n    throw new Error(\n      `Artifact contract name and version must be nonempty and at most ${artifactLabelMaxLength} characters`,\n    );\n  return { name: options.name, version: options.version };\n}\n\nexport const artifact = {\n  json<T>(options: JsonArtifactOptions<T>): ArtifactContract<T> {\n    const schema = options.schema;\n    async function validate(value: unknown): Promise<T> {\n      if (typeof schema === \"function\") return schema(value);\n      const result = await schema[\"~standard\"].validate(value);\n      if (result.issues)\n        throw new Error(\n          `Artifact schema validation failed: ${JSON.stringify(result.issues)}`,\n        );\n      return result.value;\n    }\n    return Object.freeze({\n      ...identity(options),\n      encoding: \"json\",\n      async encode(value: T) {\n        const checked = checkpointValue(await validate(value));\n        if (checked.kind !== \"json\")\n          throw new Error(\"Artifact payload must be JSON\");\n        return Buffer.from(JSON.stringify(checked.value));\n      },\n      async decode(bytes: Uint8Array) {\n        return validate(\n          JSON.parse(\n            new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes),\n          ) as unknown,\n        );\n      },\n    });\n  },\n  binary(options: ArtifactContractOptions): ArtifactContract<Uint8Array> {\n    return Object.freeze({\n      ...identity(options),\n      encoding: \"binary\",\n      async encode(value: Uint8Array) {\n        if (!(value instanceof Uint8Array))\n          throw new Error(\"Artifact payload must be Uint8Array\");\n        return Uint8Array.from(value);\n      },\n      async decode(bytes: Uint8Array) {\n        return Uint8Array.from(bytes);\n      },\n    });\n  },\n};\n\nexport async function publishArtifact<T>(\n  store: ArtifactStore,\n  contract: ArtifactContract<T>,\n  value: T,\n  options: PublishArtifactOptions,\n): Promise<ArtifactReference> {\n  options.signal?.throwIfAborted();\n  const producer = { ...options.producer };\n  const parents = (options.parents ?? []).map(\n    (parent) => validateArtifactReference(parent).id,\n  );\n  const bytes = Uint8Array.from(await contract.encode(value));\n  options.signal?.throwIfAborted();\n  const metadata = {\n    format: 1 as const,\n    digest: artifactDigest(bytes),\n    size: bytes.length,\n    contract: {\n      name: contract.name,\n      version: contract.version,\n      encoding: contract.encoding,\n    },\n    producer,\n    parents,\n  };\n  const reference = validateArtifactReference({\n    ...metadata,\n    id: artifactId(metadata),\n  });\n  await store.put(reference.id, bytes, options.signal);\n  options.signal?.throwIfAborted();\n  return reference;\n}\n\nexport async function readStoredArtifact<T>(\n  store: ArtifactStore,\n  contract: ArtifactContract<T>,\n  value: unknown,\n  options: ReadArtifactOptions = {},\n): Promise<T> {\n  options.signal?.throwIfAborted();\n  const reference = validateArtifactReference(value);\n  if (\n    reference.contract.name !== contract.name ||\n    reference.contract.version !== contract.version ||\n    reference.contract.encoding !== contract.encoding\n  )\n    throw new Error(\"Artifact contract mismatch\");\n  const producer = options.producer;\n  if (\n    producer &&\n    (reference.producer.executionId !== producer.executionId ||\n      reference.producer.taskKey !== producer.taskKey ||\n      reference.producer.attempt !== producer.attempt)\n  )\n    throw new Error(\"Artifact producer mismatch\");\n  if (\n    options.parents &&\n    JSON.stringify(reference.parents) !==\n      JSON.stringify(\n        options.parents.map((parent) => validateArtifactReference(parent).id),\n      )\n  )\n    throw new Error(\"Artifact lineage mismatch\");\n  const bytes = await store.get(reference.id, options.signal);\n  options.signal?.throwIfAborted();\n  if (\n    bytes.length !== reference.size ||\n    artifactDigest(bytes) !== reference.digest\n  )\n    throw new Error(\"Artifact content integrity mismatch\");\n  const result = await contract.decode(bytes);\n  options.signal?.throwIfAborted();\n  return result;\n}\n"]}

package/dist/domain/artifact.types.d.ts

@@ -0,0 +1,44 @@
+import type { StandardValidator } from "./response.types.ts";
+export interface ArtifactIdentity {
+    readonly name: string;
+    readonly version: string;
+    readonly encoding: "json" | "binary";
+}
+export interface ArtifactProducer {
+    readonly executionId: string;
+    readonly taskKey: string;
+    readonly attempt: number;
+}
+export interface ArtifactReference {
+    readonly format: 1;
+    readonly id: string;
+    readonly digest: string;
+    readonly size: number;
+    readonly contract: ArtifactIdentity;
+    readonly producer: ArtifactProducer;
+    readonly parents: readonly string[];
+}
+export interface ArtifactContract<T> extends ArtifactIdentity {
+    encode(value: T): Promise<Uint8Array>;
+    decode(bytes: Uint8Array): Promise<T>;
+}
+export type ArtifactContractOptions = Pick<ArtifactIdentity, "name" | "version">;
+export type JsonArtifactOptions<T> = ArtifactContractOptions & {
+    readonly schema: StandardValidator<T> | ((input: unknown) => T | Promise<T>);
+};
+export interface ArtifactStore {
+    /** Publish atomically; reject conflicting bytes for an existing ID. */
+    put(id: string, bytes: Uint8Array, signal?: AbortSignal): Promise<void>;
+    /** Read bounded bytes or reject missing objects; callers verify integrity. */
+    get(id: string, signal?: AbortSignal): Promise<Uint8Array>;
+}
+export interface PublishArtifactOptions {
+    readonly producer: ArtifactProducer;
+    readonly parents?: readonly ArtifactReference[];
+    readonly signal?: AbortSignal;
+}
+export interface ReadArtifactOptions {
+    readonly producer?: ArtifactProducer;
+    readonly parents?: readonly ArtifactReference[];
+    readonly signal?: AbortSignal;
+}

package/dist/domain/artifact.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=artifact.types.js.map

package/dist/domain/artifact.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.types.js","sourceRoot":"","sources":["../../src/domain/artifact.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { StandardValidator } from \"./response.types.ts\";\n\nexport interface ArtifactIdentity {\n  readonly name: string;\n  readonly version: string;\n  readonly encoding: \"json\" | \"binary\";\n}\n\nexport interface ArtifactProducer {\n  readonly executionId: string;\n  readonly taskKey: string;\n  readonly attempt: number;\n}\n\nexport interface ArtifactReference {\n  readonly format: 1;\n  readonly id: string;\n  readonly digest: string;\n  readonly size: number;\n  readonly contract: ArtifactIdentity;\n  readonly producer: ArtifactProducer;\n  readonly parents: readonly string[];\n}\n\nexport interface ArtifactContract<T> extends ArtifactIdentity {\n  encode(value: T): Promise<Uint8Array>;\n  decode(bytes: Uint8Array): Promise<T>;\n}\n\nexport type ArtifactContractOptions = Pick<\n  ArtifactIdentity,\n  \"name\" | \"version\"\n>;\nexport type JsonArtifactOptions<T> = ArtifactContractOptions & {\n  readonly schema: StandardValidator<T> | ((input: unknown) => T | Promise<T>);\n};\n\nexport interface ArtifactStore {\n  /** Publish atomically; reject conflicting bytes for an existing ID. */\n  put(id: string, bytes: Uint8Array, signal?: AbortSignal): Promise<void>;\n  /** Read bounded bytes or reject missing objects; callers verify integrity. */\n  get(id: string, signal?: AbortSignal): Promise<Uint8Array>;\n}\n\nexport interface PublishArtifactOptions {\n  readonly producer: ArtifactProducer;\n  readonly parents?: readonly ArtifactReference[];\n  readonly signal?: AbortSignal;\n}\n\nexport interface ReadArtifactOptions {\n  readonly producer?: ArtifactProducer;\n  readonly parents?: readonly ArtifactReference[];\n  readonly signal?: AbortSignal;\n}\n"]}

package/dist/domain/egress.constants.d.ts

@@ -0,0 +1 @@
+export declare const egressFields: readonly string[];

package/dist/domain/egress.constants.js

@@ -0,0 +1,7 @@
+export const egressFields = [
+    "mode",
+    "domains",
+    "allowCidrs",
+    "denyCidrs",
+];
+//# sourceMappingURL=egress.constants.js.map

package/dist/domain/egress.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress.constants.js","sourceRoot":"","sources":["../../src/domain/egress.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,MAAM;IACN,SAAS;IACT,YAAY;IACZ,WAAW;CACZ,CAAC","sourcesContent":["export const egressFields: readonly string[] = [\n  \"mode\",\n  \"domains\",\n  \"allowCidrs\",\n  \"denyCidrs\",\n];\n"]}

package/dist/domain/egress.d.ts

@@ -0,0 +1,2 @@
+import type { EgressPolicy } from "./egress.types.ts";
+export declare function validateEgress(value: unknown): EgressPolicy | undefined;

package/dist/domain/egress.js

@@ -0,0 +1,48 @@
+import { isIP } from "node:net";
+import { egressFields } from "./egress.constants.js";
+import { invariant } from "./errors.js";
+function entries(value, label, validate) {
+    if (value === undefined)
+        return [];
+    invariant(Array.isArray(value), `${label} must be an array`);
+    const items = Array.from(value);
+    invariant(items.every((entry) => typeof entry === "string" && validate(entry)), `Invalid ${label} entry`);
+    return [...new Set(items)];
+}
+function domain(value) {
+    const name = value.startsWith("*.") ? value.slice(2) : value;
+    return (name.length <= 253 &&
+        !isIP(name) &&
+        name.includes(".") &&
+        name
+            .split(".")
+            .every((label) => /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/i.test(label)));
+}
+function cidr(value) {
+    const parts = value.split("/");
+    if (parts.length !== 2)
+        return false;
+    const version = isIP(parts[0]);
+    return (version !== 0 &&
+        /^(0|[1-9][0-9]*)$/.test(parts[1]) &&
+        Number(parts[1]) <= (version === 4 ? 32 : 128) &&
+        !parts[0].includes("%"));
+}
+export function validateEgress(value) {
+    if (value === undefined)
+        return undefined;
+    invariant(value !== null && typeof value === "object" && !Array.isArray(value), "egress must be a policy object");
+    invariant("mode" in value, "egress requires a mode");
+    if (value.mode === "deny-all") {
+        invariant(Object.keys(value).every((key) => key === "mode"), "deny-all does not accept allowlist fields");
+        return { mode: "deny-all" };
+    }
+    invariant(value.mode === "allowlist", "egress mode must be deny-all or allowlist");
+    invariant(Object.keys(value).every((key) => egressFields.includes(key)), "Unknown egress policy field");
+    const domains = entries("domains" in value ? value.domains : undefined, "egress domains", domain);
+    const allowCidrs = entries("allowCidrs" in value ? value.allowCidrs : undefined, "egress allowCidrs", cidr);
+    const denyCidrs = entries("denyCidrs" in value ? value.denyCidrs : undefined, "egress denyCidrs", cidr);
+    invariant(domains.length + allowCidrs.length > 0, "egress allowlist requires an allowed domain or CIDR; use deny-all to block everything");
+    return { mode: "allowlist", domains, allowCidrs, denyCidrs };
+}
+//# sourceMappingURL=egress.js.map

package/dist/domain/egress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress.js","sourceRoot":"","sources":["../../src/domain/egress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,SAAS,OAAO,CACd,KAAc,EACd,KAAa,EACb,QAAoC;IAEpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,SAAS,CACP,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EACpE,WAAW,KAAK,QAAQ,CACzB,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,OAAO,CACL,IAAI,CAAC,MAAM,IAAI,GAAG;QAClB,CAAC,IAAI,CAAC,IAAI,CAAC;QACX,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClB,IAAI;aACD,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yCAAyC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAChC,OAAO,CACL,OAAO,KAAK,CAAC;QACb,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9C,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,SAAS,CACP,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACpE,gCAAgC,CACjC,CAAC;IACF,SAAS,CAAC,MAAM,IAAI,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,SAAS,CACP,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,EACjD,2CAA2C,CAC5C,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;IACD,SAAS,CACP,KAAK,CAAC,IAAI,KAAK,WAAW,EAC1B,2CAA2C,CAC5C,CAAC;IACF,SAAS,CACP,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC7D,6BAA6B,CAC9B,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CACrB,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAC9C,gBAAgB,EAChB,MAAM,CACP,CAAC;IACF,MAAM,UAAU,GAAG,OAAO,CACxB,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EACpD,mBAAmB,EACnB,IAAI,CACL,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CACvB,WAAW,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAClD,kBAAkB,EAClB,IAAI,CACL,CAAC;IACF,SAAS,CACP,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EACtC,uFAAuF,CACxF,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AAC/D,CAAC","sourcesContent":["import { isIP } from \"node:net\";\nimport { egressFields } from \"./egress.constants.ts\";\nimport { invariant } from \"./errors.ts\";\nimport type { EgressPolicy } from \"./egress.types.ts\";\n\nfunction entries(\n  value: unknown,\n  label: string,\n  validate: (entry: string) => boolean,\n): string[] {\n  if (value === undefined) return [];\n  invariant(Array.isArray(value), `${label} must be an array`);\n  const items = Array.from(value);\n  invariant(\n    items.every((entry) => typeof entry === \"string\" && validate(entry)),\n    `Invalid ${label} entry`,\n  );\n  return [...new Set<string>(items)];\n}\n\nfunction domain(value: string): boolean {\n  const name = value.startsWith(\"*.\") ? value.slice(2) : value;\n  return (\n    name.length <= 253 &&\n    !isIP(name) &&\n    name.includes(\".\") &&\n    name\n      .split(\".\")\n      .every((label) => /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/i.test(label))\n  );\n}\n\nfunction cidr(value: string): boolean {\n  const parts = value.split(\"/\");\n  if (parts.length !== 2) return false;\n  const version = isIP(parts[0]!);\n  return (\n    version !== 0 &&\n    /^(0|[1-9][0-9]*)$/.test(parts[1]!) &&\n    Number(parts[1]) <= (version === 4 ? 32 : 128) &&\n    !parts[0]!.includes(\"%\")\n  );\n}\n\nexport function validateEgress(value: unknown): EgressPolicy | undefined {\n  if (value === undefined) return undefined;\n  invariant(\n    value !== null && typeof value === \"object\" && !Array.isArray(value),\n    \"egress must be a policy object\",\n  );\n  invariant(\"mode\" in value, \"egress requires a mode\");\n  if (value.mode === \"deny-all\") {\n    invariant(\n      Object.keys(value).every((key) => key === \"mode\"),\n      \"deny-all does not accept allowlist fields\",\n    );\n    return { mode: \"deny-all\" };\n  }\n  invariant(\n    value.mode === \"allowlist\",\n    \"egress mode must be deny-all or allowlist\",\n  );\n  invariant(\n    Object.keys(value).every((key) => egressFields.includes(key)),\n    \"Unknown egress policy field\",\n  );\n  const domains = entries(\n    \"domains\" in value ? value.domains : undefined,\n    \"egress domains\",\n    domain,\n  );\n  const allowCidrs = entries(\n    \"allowCidrs\" in value ? value.allowCidrs : undefined,\n    \"egress allowCidrs\",\n    cidr,\n  );\n  const denyCidrs = entries(\n    \"denyCidrs\" in value ? value.denyCidrs : undefined,\n    \"egress denyCidrs\",\n    cidr,\n  );\n  invariant(\n    domains.length + allowCidrs.length > 0,\n    \"egress allowlist requires an allowed domain or CIDR; use deny-all to block everything\",\n  );\n  return { mode: \"allowlist\", domains, allowCidrs, denyCidrs };\n}\n"]}

package/dist/domain/egress.types.d.ts

@@ -0,0 +1,8 @@
+export type EgressPolicy = {
+    readonly mode: "deny-all";
+} | {
+    readonly mode: "allowlist";
+    readonly domains?: readonly string[];
+    readonly allowCidrs?: readonly string[];
+    readonly denyCidrs?: readonly string[];
+};

package/dist/domain/egress.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=egress.types.js.map

package/dist/domain/egress.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress.types.js","sourceRoot":"","sources":["../../src/domain/egress.types.ts"],"names":[],"mappings":"","sourcesContent":["export type EgressPolicy =\n  | { readonly mode: \"deny-all\" }\n  | {\n      readonly mode: \"allowlist\";\n      readonly domains?: readonly string[];\n      readonly allowCidrs?: readonly string[];\n      readonly denyCidrs?: readonly string[];\n    };\n"]}

package/dist/domain/sandbox.types.d.ts

@@ -23,6 +23,7 @@ export interface FileManifestEntry {
     readonly sha256: string;
 }
 export interface FileTransfers {
+    uploadBatch?(source: string, entries: readonly FileManifestEntry[], destination: string, options?: TransferOptions): Promise<void>;
     manifest(source: string, paths: readonly string[], options?: TransferOptions): Promise<readonly FileManifestEntry[]>;
     downloadBatch(source: string, entries: readonly FileManifestEntry[], destination: string, options?: TransferOptions): Promise<void>;
 }

package/dist/domain/sandbox.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.types.js","sourceRoot":"","sources":["../../src/domain/sandbox.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Command, CommandResult, Variables } from \"./command.types.ts\";\n\nexport interface Volume {\n  readonly source: string;\n  readonly target: string;\n  readonly readOnly?: boolean;\n}\n\nexport interface SandboxContext {\n  readonly repository: string;\n  readonly directory: string;\n  readonly gitDirectories: readonly string[];\n  readonly variables: Variables;\n  readonly signal?: AbortSignal;\n}\n\nexport interface TransferOptions {\n  readonly signal?: AbortSignal;\n  readonly deadlineMs?: number;\n}\n\nexport interface FileManifestEntry {\n  readonly path: string;\n  readonly kind: \"file\" | \"link\";\n  readonly mode: number;\n  readonly size: number;\n  readonly sha256: string;\n}\n\nexport interface FileTransfers {\n  manifest(\n    source: string,\n    paths: readonly string[],\n    options?: TransferOptions,\n  ): Promise<readonly FileManifestEntry[]>;\n  downloadBatch(\n    source: string,\n    entries: readonly FileManifestEntry[],\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n}\n\nexport interface SandboxLease {\n  readonly fileTransfers?: FileTransfers;\n  readonly root: string;\n  readonly home: string;\n  invoke(command: Command): Promise<CommandResult>;\n  upload(\n    source: string,\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n  download(\n    source: string,\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n  release(): Promise<void>;\n}\n\nexport interface SandboxProvider {\n  readonly name: string;\n  readonly placement: \"mounted\" | \"remote\" | \"host\";\n  readonly variables?: Variables;\n  acquire(context: SandboxContext): Promise<SandboxLease>;\n}\n"]}
+{"version":3,"file":"sandbox.types.js","sourceRoot":"","sources":["../../src/domain/sandbox.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Command, CommandResult, Variables } from \"./command.types.ts\";\n\nexport interface Volume {\n  readonly source: string;\n  readonly target: string;\n  readonly readOnly?: boolean;\n}\n\nexport interface SandboxContext {\n  readonly repository: string;\n  readonly directory: string;\n  readonly gitDirectories: readonly string[];\n  readonly variables: Variables;\n  readonly signal?: AbortSignal;\n}\n\nexport interface TransferOptions {\n  readonly signal?: AbortSignal;\n  readonly deadlineMs?: number;\n}\n\nexport interface FileManifestEntry {\n  readonly path: string;\n  readonly kind: \"file\" | \"link\";\n  readonly mode: number;\n  readonly size: number;\n  readonly sha256: string;\n}\n\nexport interface FileTransfers {\n  uploadBatch?(\n    source: string,\n    entries: readonly FileManifestEntry[],\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n  manifest(\n    source: string,\n    paths: readonly string[],\n    options?: TransferOptions,\n  ): Promise<readonly FileManifestEntry[]>;\n  downloadBatch(\n    source: string,\n    entries: readonly FileManifestEntry[],\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n}\n\nexport interface SandboxLease {\n  readonly fileTransfers?: FileTransfers;\n  readonly root: string;\n  readonly home: string;\n  invoke(command: Command): Promise<CommandResult>;\n  upload(\n    source: string,\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n  download(\n    source: string,\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n  release(): Promise<void>;\n}\n\nexport interface SandboxProvider {\n  readonly name: string;\n  readonly placement: \"mounted\" | \"remote\" | \"host\";\n  readonly variables?: Variables;\n  acquire(context: SandboxContext): Promise<SandboxLease>;\n}\n"]}

package/dist/domain/task-queue.constants.d.ts

@@ -0,0 +1,8 @@
+export declare const queueMaxBytes = 1048576;
+export declare const queueMaxValueBytes = 262144;
+export declare const queueDefaultLeaseMs = 30000;
+export declare const queueDefaultPollMs = 250;
+export declare const queueMaxLeaseMs = 300000;
+export declare const queueMaxStringLength = 512;
+export declare const queueMinLeaseMs = 30;
+export declare const queueMaxHandlers = 100;

package/dist/domain/task-queue.constants.js

@@ -0,0 +1,9 @@
+export const queueMaxBytes = 1_048_576;
+export const queueMaxValueBytes = 262_144;
+export const queueDefaultLeaseMs = 30_000;
+export const queueDefaultPollMs = 250;
+export const queueMaxLeaseMs = 300_000;
+export const queueMaxStringLength = 512;
+export const queueMinLeaseMs = 30;
+export const queueMaxHandlers = 100;
+//# sourceMappingURL=task-queue.constants.js.map

package/dist/domain/task-queue.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-queue.constants.js","sourceRoot":"","sources":["../../src/domain/task-queue.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAC1C,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC","sourcesContent":["export const queueMaxBytes = 1_048_576;\nexport const queueMaxValueBytes = 262_144;\nexport const queueDefaultLeaseMs = 30_000;\nexport const queueDefaultPollMs = 250;\nexport const queueMaxLeaseMs = 300_000;\nexport const queueMaxStringLength = 512;\nexport const queueMinLeaseMs = 30;\nexport const queueMaxHandlers = 100;\n"]}

package/dist/domain/task-queue.d.ts

@@ -0,0 +1,11 @@
+import type { QueueClaim, QueueJob, QueueLease, QueueRequest, QueueResult } from "./task-queue.types.ts";
+export declare function queueObject(value: unknown): Record<string, unknown>;
+export declare function queueString(value: unknown): string;
+export declare function queueNumber(value: unknown): number;
+export declare function queueLeaseMs(value: unknown): number;
+export declare function queueJson(value: unknown): import("./workflow/checkpoint.types.ts").WorkflowJson;
+export declare function queueRequest(value: unknown): QueueRequest;
+export declare function queueClaim(value: unknown): QueueClaim;
+export declare function queueLease(value: unknown): QueueLease;
+export declare function queueResult(value: unknown): QueueResult;
+export declare function queueJob(value: unknown): QueueJob;

package/dist/domain/task-queue.js

@@ -0,0 +1,105 @@
+import { queueMaxValueBytes, queueMaxLeaseMs, queueMaxStringLength, queueMinLeaseMs, queueMaxHandlers, } from "./task-queue.constants.js";
+import { checkpointValue } from "./workflow/checkpoint-value.js";
+export function queueObject(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new Error("Invalid queue object");
+    return Object.fromEntries(Object.entries(value));
+}
+export function queueString(value) {
+    if (typeof value !== "string" ||
+        !value.length ||
+        value.length > queueMaxStringLength)
+        throw new Error("Invalid queue identifier");
+    return value;
+}
+export function queueNumber(value) {
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0)
+        throw new Error("Invalid queue number");
+    return value;
+}
+export function queueLeaseMs(value) {
+    const ms = queueNumber(value);
+    if (ms < queueMinLeaseMs || ms > queueMaxLeaseMs)
+        throw new Error("Queue lease must be between 30 and 300000 milliseconds");
+    return ms;
+}
+export function queueJson(value) {
+    const checked = checkpointValue(value);
+    if (checked.kind !== "json")
+        throw new Error("Queue values must be JSON");
+    if (Buffer.byteLength(JSON.stringify(checked.value)) > queueMaxValueBytes)
+        throw new Error("Queue value exceeds size limit");
+    return checked.value;
+}
+export function queueRequest(value) {
+    const data = queueObject(value);
+    return {
+        id: queueString(data.id),
+        handler: queueString(data.handler),
+        input: queueJson(data.input),
+        ...(data.deadline === undefined
+            ? {}
+            : { deadline: queueNumber(data.deadline) }),
+    };
+}
+export function queueClaim(value) {
+    const data = queueObject(value);
+    if (!Array.isArray(data.handlers) ||
+        !data.handlers.length ||
+        data.handlers.length > queueMaxHandlers)
+        throw new Error("Invalid queue handlers");
+    return {
+        worker: queueString(data.worker),
+        handlers: data.handlers.map(queueString),
+        leaseMs: queueLeaseMs(data.leaseMs),
+    };
+}
+export function queueLease(value) {
+    const data = queueObject(value);
+    return {
+        id: queueString(data.id),
+        worker: queueString(data.worker),
+        fence: queueNumber(data.fence),
+    };
+}
+export function queueResult(value) {
+    const data = queueObject(value);
+    const usage = data.usage === undefined ? undefined : queueObject(data.usage);
+    return {
+        value: queueJson(data.value),
+        ...(data.error === undefined ? {} : { error: queueString(data.error) }),
+        ...(usage === undefined
+            ? {}
+            : {
+                usage: {
+                    input: queueNumber(usage.input),
+                    output: queueNumber(usage.output),
+                    cached: queueNumber(usage.cached),
+                    ...(usage.cacheCreated === undefined
+                        ? {}
+                        : { cacheCreated: queueNumber(usage.cacheCreated) }),
+                },
+            }),
+    };
+}
+export function queueJob(value) {
+    const data = queueObject(value);
+    const status = data.status;
+    if (status !== "pending" &&
+        status !== "active" &&
+        status !== "done" &&
+        status !== "failed" &&
+        status !== "cancelled")
+        throw new Error("Invalid queue status");
+    return {
+        ...queueRequest(data),
+        status,
+        fence: queueNumber(data.fence),
+        ...(data.worker === undefined ? {} : { worker: queueString(data.worker) }),
+        ...(data.expires === undefined
+            ? {}
+            : { expires: queueNumber(data.expires) }),
+        ...(data.result === undefined ? {} : { result: queueResult(data.result) }),
+    };
+}
+//# sourceMappingURL=task-queue.js.map

package/dist/domain/task-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-queue.js","sourceRoot":"","sources":["../../src/domain/task-queue.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,MAAM;QACb,KAAK,CAAC,MAAM,GAAG,oBAAoB;QAEnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,EAAE,GAAG,eAAe,IAAI,EAAE,GAAG,eAAe;QAC9C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,OAAO,EAAE,CAAC;AACZ,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,kBAAkB;QACvE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,KAAK,CAAC;AACvB,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QAClC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;YAC7B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC7B,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,gBAAgB;QAEvC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,OAAO;QACL,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;QAChC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;QACxC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;KACpC,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;QAChC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;KAC/B,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7E,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,KAAK,KAAK,SAAS;YACrB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,KAAK,EAAE;oBACL,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC;oBAC/B,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;oBACjC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;oBACjC,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS;wBAClC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;iBACvD;aACF,CAAC;KACP,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,MAAM;QACjB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,WAAW;QAEtB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,OAAO;QACL,GAAG,YAAY,CAAC,IAAI,CAAC;QACrB,MAAM;QACN,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS;YAC5B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;KAC3E,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  QueueClaim,\n  QueueJob,\n  QueueLease,\n  QueueRequest,\n  QueueResult,\n} from \"./task-queue.types.ts\";\nimport {\n  queueMaxValueBytes,\n  queueMaxLeaseMs,\n  queueMaxStringLength,\n  queueMinLeaseMs,\n  queueMaxHandlers,\n} from \"./task-queue.constants.ts\";\nimport { checkpointValue } from \"./workflow/checkpoint-value.ts\";\n\nexport function queueObject(value: unknown): Record<string, unknown> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value))\n    throw new Error(\"Invalid queue object\");\n  return Object.fromEntries(Object.entries(value));\n}\nexport function queueString(value: unknown): string {\n  if (\n    typeof value !== \"string\" ||\n    !value.length ||\n    value.length > queueMaxStringLength\n  )\n    throw new Error(\"Invalid queue identifier\");\n  return value;\n}\nexport function queueNumber(value: unknown): number {\n  if (typeof value !== \"number\" || !Number.isSafeInteger(value) || value < 0)\n    throw new Error(\"Invalid queue number\");\n  return value;\n}\nexport function queueLeaseMs(value: unknown): number {\n  const ms = queueNumber(value);\n  if (ms < queueMinLeaseMs || ms > queueMaxLeaseMs)\n    throw new Error(\"Queue lease must be between 30 and 300000 milliseconds\");\n  return ms;\n}\nexport function queueJson(value: unknown) {\n  const checked = checkpointValue(value);\n  if (checked.kind !== \"json\") throw new Error(\"Queue values must be JSON\");\n  if (Buffer.byteLength(JSON.stringify(checked.value)) > queueMaxValueBytes)\n    throw new Error(\"Queue value exceeds size limit\");\n  return checked.value;\n}\nexport function queueRequest(value: unknown): QueueRequest {\n  const data = queueObject(value);\n  return {\n    id: queueString(data.id),\n    handler: queueString(data.handler),\n    input: queueJson(data.input),\n    ...(data.deadline === undefined\n      ? {}\n      : { deadline: queueNumber(data.deadline) }),\n  };\n}\nexport function queueClaim(value: unknown): QueueClaim {\n  const data = queueObject(value);\n  if (\n    !Array.isArray(data.handlers) ||\n    !data.handlers.length ||\n    data.handlers.length > queueMaxHandlers\n  )\n    throw new Error(\"Invalid queue handlers\");\n  return {\n    worker: queueString(data.worker),\n    handlers: data.handlers.map(queueString),\n    leaseMs: queueLeaseMs(data.leaseMs),\n  };\n}\nexport function queueLease(value: unknown): QueueLease {\n  const data = queueObject(value);\n  return {\n    id: queueString(data.id),\n    worker: queueString(data.worker),\n    fence: queueNumber(data.fence),\n  };\n}\nexport function queueResult(value: unknown): QueueResult {\n  const data = queueObject(value);\n  const usage = data.usage === undefined ? undefined : queueObject(data.usage);\n  return {\n    value: queueJson(data.value),\n    ...(data.error === undefined ? {} : { error: queueString(data.error) }),\n    ...(usage === undefined\n      ? {}\n      : {\n          usage: {\n            input: queueNumber(usage.input),\n            output: queueNumber(usage.output),\n            cached: queueNumber(usage.cached),\n            ...(usage.cacheCreated === undefined\n              ? {}\n              : { cacheCreated: queueNumber(usage.cacheCreated) }),\n          },\n        }),\n  };\n}\nexport function queueJob(value: unknown): QueueJob {\n  const data = queueObject(value);\n  const status = data.status;\n  if (\n    status !== \"pending\" &&\n    status !== \"active\" &&\n    status !== \"done\" &&\n    status !== \"failed\" &&\n    status !== \"cancelled\"\n  )\n    throw new Error(\"Invalid queue status\");\n  return {\n    ...queueRequest(data),\n    status,\n    fence: queueNumber(data.fence),\n    ...(data.worker === undefined ? {} : { worker: queueString(data.worker) }),\n    ...(data.expires === undefined\n      ? {}\n      : { expires: queueNumber(data.expires) }),\n    ...(data.result === undefined ? {} : { result: queueResult(data.result) }),\n  };\n}\n"]}