@elie-laloum/outpost 3.0.0 → 4.1.0

package/dist/domain/egress.js

@@ -0,0 +1,48 @@
+import { isIP } from "node:net";
+import { egressFields } from "./egress.constants.js";
+import { invariant } from "./errors.js";
+function entries(value, label, validate) {
+    if (value === undefined)
+        return [];
+    invariant(Array.isArray(value), `${label} must be an array`);
+    const items = Array.from(value);
+    invariant(items.every((entry) => typeof entry === "string" && validate(entry)), `Invalid ${label} entry`);
+    return [...new Set(items)];
+}
+function domain(value) {
+    const name = value.startsWith("*.") ? value.slice(2) : value;
+    return (name.length <= 253 &&
+        !isIP(name) &&
+        name.includes(".") &&
+        name
+            .split(".")
+            .every((label) => /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/i.test(label)));
+}
+function cidr(value) {
+    const parts = value.split("/");
+    if (parts.length !== 2)
+        return false;
+    const version = isIP(parts[0]);
+    return (version !== 0 &&
+        /^(0|[1-9][0-9]*)$/.test(parts[1]) &&
+        Number(parts[1]) <= (version === 4 ? 32 : 128) &&
+        !parts[0].includes("%"));
+}
+export function validateEgress(value) {
+    if (value === undefined)
+        return undefined;
+    invariant(value !== null && typeof value === "object" && !Array.isArray(value), "egress must be a policy object");
+    invariant("mode" in value, "egress requires a mode");
+    if (value.mode === "deny-all") {
+        invariant(Object.keys(value).every((key) => key === "mode"), "deny-all does not accept allowlist fields");
+        return { mode: "deny-all" };
+    }
+    invariant(value.mode === "allowlist", "egress mode must be deny-all or allowlist");
+    invariant(Object.keys(value).every((key) => egressFields.includes(key)), "Unknown egress policy field");
+    const domains = entries("domains" in value ? value.domains : undefined, "egress domains", domain);
+    const allowCidrs = entries("allowCidrs" in value ? value.allowCidrs : undefined, "egress allowCidrs", cidr);
+    const denyCidrs = entries("denyCidrs" in value ? value.denyCidrs : undefined, "egress denyCidrs", cidr);
+    invariant(domains.length + allowCidrs.length > 0, "egress allowlist requires an allowed domain or CIDR; use deny-all to block everything");
+    return { mode: "allowlist", domains, allowCidrs, denyCidrs };
+}
+//# sourceMappingURL=egress.js.map

package/dist/domain/egress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress.js","sourceRoot":"","sources":["../../src/domain/egress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,SAAS,OAAO,CACd,KAAc,EACd,KAAa,EACb,QAAoC;IAEpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,SAAS,CACP,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EACpE,WAAW,KAAK,QAAQ,CACzB,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,OAAO,CACL,IAAI,CAAC,MAAM,IAAI,GAAG;QAClB,CAAC,IAAI,CAAC,IAAI,CAAC;QACX,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClB,IAAI;aACD,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yCAAyC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAChC,OAAO,CACL,OAAO,KAAK,CAAC;QACb,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9C,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,SAAS,CACP,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACpE,gCAAgC,CACjC,CAAC;IACF,SAAS,CAAC,MAAM,IAAI,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,SAAS,CACP,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,EACjD,2CAA2C,CAC5C,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;IACD,SAAS,CACP,KAAK,CAAC,IAAI,KAAK,WAAW,EAC1B,2CAA2C,CAC5C,CAAC;IACF,SAAS,CACP,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC7D,6BAA6B,CAC9B,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CACrB,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAC9C,gBAAgB,EAChB,MAAM,CACP,CAAC;IACF,MAAM,UAAU,GAAG,OAAO,CACxB,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EACpD,mBAAmB,EACnB,IAAI,CACL,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CACvB,WAAW,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAClD,kBAAkB,EAClB,IAAI,CACL,CAAC;IACF,SAAS,CACP,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EACtC,uFAAuF,CACxF,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AAC/D,CAAC","sourcesContent":["import { isIP } from \"node:net\";\nimport { egressFields } from \"./egress.constants.ts\";\nimport { invariant } from \"./errors.ts\";\nimport type { EgressPolicy } from \"./egress.types.ts\";\n\nfunction entries(\n  value: unknown,\n  label: string,\n  validate: (entry: string) => boolean,\n): string[] {\n  if (value === undefined) return [];\n  invariant(Array.isArray(value), `${label} must be an array`);\n  const items = Array.from(value);\n  invariant(\n    items.every((entry) => typeof entry === \"string\" && validate(entry)),\n    `Invalid ${label} entry`,\n  );\n  return [...new Set<string>(items)];\n}\n\nfunction domain(value: string): boolean {\n  const name = value.startsWith(\"*.\") ? value.slice(2) : value;\n  return (\n    name.length <= 253 &&\n    !isIP(name) &&\n    name.includes(\".\") &&\n    name\n      .split(\".\")\n      .every((label) => /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/i.test(label))\n  );\n}\n\nfunction cidr(value: string): boolean {\n  const parts = value.split(\"/\");\n  if (parts.length !== 2) return false;\n  const version = isIP(parts[0]!);\n  return (\n    version !== 0 &&\n    /^(0|[1-9][0-9]*)$/.test(parts[1]!) &&\n    Number(parts[1]) <= (version === 4 ? 32 : 128) &&\n    !parts[0]!.includes(\"%\")\n  );\n}\n\nexport function validateEgress(value: unknown): EgressPolicy | undefined {\n  if (value === undefined) return undefined;\n  invariant(\n    value !== null && typeof value === \"object\" && !Array.isArray(value),\n    \"egress must be a policy object\",\n  );\n  invariant(\"mode\" in value, \"egress requires a mode\");\n  if (value.mode === \"deny-all\") {\n    invariant(\n      Object.keys(value).every((key) => key === \"mode\"),\n      \"deny-all does not accept allowlist fields\",\n    );\n    return { mode: \"deny-all\" };\n  }\n  invariant(\n    value.mode === \"allowlist\",\n    \"egress mode must be deny-all or allowlist\",\n  );\n  invariant(\n    Object.keys(value).every((key) => egressFields.includes(key)),\n    \"Unknown egress policy field\",\n  );\n  const domains = entries(\n    \"domains\" in value ? value.domains : undefined,\n    \"egress domains\",\n    domain,\n  );\n  const allowCidrs = entries(\n    \"allowCidrs\" in value ? value.allowCidrs : undefined,\n    \"egress allowCidrs\",\n    cidr,\n  );\n  const denyCidrs = entries(\n    \"denyCidrs\" in value ? value.denyCidrs : undefined,\n    \"egress denyCidrs\",\n    cidr,\n  );\n  invariant(\n    domains.length + allowCidrs.length > 0,\n    \"egress allowlist requires an allowed domain or CIDR; use deny-all to block everything\",\n  );\n  return { mode: \"allowlist\", domains, allowCidrs, denyCidrs };\n}\n"]}

package/dist/domain/egress.types.d.ts

@@ -0,0 +1,8 @@
+export type EgressPolicy = {
+    readonly mode: "deny-all";
+} | {
+    readonly mode: "allowlist";
+    readonly domains?: readonly string[];
+    readonly allowCidrs?: readonly string[];
+    readonly denyCidrs?: readonly string[];
+};

package/dist/domain/egress.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=egress.types.js.map

package/dist/domain/egress.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress.types.js","sourceRoot":"","sources":["../../src/domain/egress.types.ts"],"names":[],"mappings":"","sourcesContent":["export type EgressPolicy =\n  | { readonly mode: \"deny-all\" }\n  | {\n      readonly mode: \"allowlist\";\n      readonly domains?: readonly string[];\n      readonly allowCidrs?: readonly string[];\n      readonly denyCidrs?: readonly string[];\n    };\n"]}

package/dist/domain/sandbox.types.d.ts

@@ -23,6 +23,7 @@ export interface FileManifestEntry {
     readonly sha256: string;
 }
 export interface FileTransfers {
+    uploadBatch?(source: string, entries: readonly FileManifestEntry[], destination: string, options?: TransferOptions): Promise<void>;
     manifest(source: string, paths: readonly string[], options?: TransferOptions): Promise<readonly FileManifestEntry[]>;
     downloadBatch(source: string, entries: readonly FileManifestEntry[], destination: string, options?: TransferOptions): Promise<void>;
 }

package/dist/domain/sandbox.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.types.js","sourceRoot":"","sources":["../../src/domain/sandbox.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Command, CommandResult, Variables } from \"./command.types.ts\";\n\nexport interface Volume {\n  readonly source: string;\n  readonly target: string;\n  readonly readOnly?: boolean;\n}\n\nexport interface SandboxContext {\n  readonly repository: string;\n  readonly directory: string;\n  readonly gitDirectories: readonly string[];\n  readonly variables: Variables;\n  readonly signal?: AbortSignal;\n}\n\nexport interface TransferOptions {\n  readonly signal?: AbortSignal;\n  readonly deadlineMs?: number;\n}\n\nexport interface FileManifestEntry {\n  readonly path: string;\n  readonly kind: \"file\" | \"link\";\n  readonly mode: number;\n  readonly size: number;\n  readonly sha256: string;\n}\n\nexport interface FileTransfers {\n  manifest(\n    source: string,\n    paths: readonly string[],\n    options?: TransferOptions,\n  ): Promise<readonly FileManifestEntry[]>;\n  downloadBatch(\n    source: string,\n    entries: readonly FileManifestEntry[],\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n}\n\nexport interface SandboxLease {\n  readonly fileTransfers?: FileTransfers;\n  readonly root: string;\n  readonly home: string;\n  invoke(command: Command): Promise<CommandResult>;\n  upload(\n    source: string,\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n  download(\n    source: string,\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n  release(): Promise<void>;\n}\n\nexport interface SandboxProvider {\n  readonly name: string;\n  readonly placement: \"mounted\" | \"remote\" | \"host\";\n  readonly variables?: Variables;\n  acquire(context: SandboxContext): Promise<SandboxLease>;\n}\n"]}
+{"version":3,"file":"sandbox.types.js","sourceRoot":"","sources":["../../src/domain/sandbox.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Command, CommandResult, Variables } from \"./command.types.ts\";\n\nexport interface Volume {\n  readonly source: string;\n  readonly target: string;\n  readonly readOnly?: boolean;\n}\n\nexport interface SandboxContext {\n  readonly repository: string;\n  readonly directory: string;\n  readonly gitDirectories: readonly string[];\n  readonly variables: Variables;\n  readonly signal?: AbortSignal;\n}\n\nexport interface TransferOptions {\n  readonly signal?: AbortSignal;\n  readonly deadlineMs?: number;\n}\n\nexport interface FileManifestEntry {\n  readonly path: string;\n  readonly kind: \"file\" | \"link\";\n  readonly mode: number;\n  readonly size: number;\n  readonly sha256: string;\n}\n\nexport interface FileTransfers {\n  uploadBatch?(\n    source: string,\n    entries: readonly FileManifestEntry[],\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n  manifest(\n    source: string,\n    paths: readonly string[],\n    options?: TransferOptions,\n  ): Promise<readonly FileManifestEntry[]>;\n  downloadBatch(\n    source: string,\n    entries: readonly FileManifestEntry[],\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n}\n\nexport interface SandboxLease {\n  readonly fileTransfers?: FileTransfers;\n  readonly root: string;\n  readonly home: string;\n  invoke(command: Command): Promise<CommandResult>;\n  upload(\n    source: string,\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n  download(\n    source: string,\n    destination: string,\n    options?: TransferOptions,\n  ): Promise<void>;\n  release(): Promise<void>;\n}\n\nexport interface SandboxProvider {\n  readonly name: string;\n  readonly placement: \"mounted\" | \"remote\" | \"host\";\n  readonly variables?: Variables;\n  acquire(context: SandboxContext): Promise<SandboxLease>;\n}\n"]}

package/dist/domain/task-queue.constants.d.ts

@@ -0,0 +1,8 @@
+export declare const queueMaxBytes = 1048576;
+export declare const queueMaxValueBytes = 262144;
+export declare const queueDefaultLeaseMs = 30000;
+export declare const queueDefaultPollMs = 250;
+export declare const queueMaxLeaseMs = 300000;
+export declare const queueMaxStringLength = 512;
+export declare const queueMinLeaseMs = 30;
+export declare const queueMaxHandlers = 100;

package/dist/domain/task-queue.constants.js

@@ -0,0 +1,9 @@
+export const queueMaxBytes = 1_048_576;
+export const queueMaxValueBytes = 262_144;
+export const queueDefaultLeaseMs = 30_000;
+export const queueDefaultPollMs = 250;
+export const queueMaxLeaseMs = 300_000;
+export const queueMaxStringLength = 512;
+export const queueMinLeaseMs = 30;
+export const queueMaxHandlers = 100;
+//# sourceMappingURL=task-queue.constants.js.map

package/dist/domain/task-queue.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-queue.constants.js","sourceRoot":"","sources":["../../src/domain/task-queue.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAC1C,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC","sourcesContent":["export const queueMaxBytes = 1_048_576;\nexport const queueMaxValueBytes = 262_144;\nexport const queueDefaultLeaseMs = 30_000;\nexport const queueDefaultPollMs = 250;\nexport const queueMaxLeaseMs = 300_000;\nexport const queueMaxStringLength = 512;\nexport const queueMinLeaseMs = 30;\nexport const queueMaxHandlers = 100;\n"]}

package/dist/domain/task-queue.d.ts

@@ -0,0 +1,11 @@
+import type { QueueClaim, QueueJob, QueueLease, QueueRequest, QueueResult } from "./task-queue.types.ts";
+export declare function queueObject(value: unknown): Record<string, unknown>;
+export declare function queueString(value: unknown): string;
+export declare function queueNumber(value: unknown): number;
+export declare function queueLeaseMs(value: unknown): number;
+export declare function queueJson(value: unknown): import("./workflow/checkpoint.types.ts").WorkflowJson;
+export declare function queueRequest(value: unknown): QueueRequest;
+export declare function queueClaim(value: unknown): QueueClaim;
+export declare function queueLease(value: unknown): QueueLease;
+export declare function queueResult(value: unknown): QueueResult;
+export declare function queueJob(value: unknown): QueueJob;

package/dist/domain/task-queue.js

@@ -0,0 +1,105 @@
+import { queueMaxValueBytes, queueMaxLeaseMs, queueMaxStringLength, queueMinLeaseMs, queueMaxHandlers, } from "./task-queue.constants.js";
+import { checkpointValue } from "./workflow/checkpoint-value.js";
+export function queueObject(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new Error("Invalid queue object");
+    return Object.fromEntries(Object.entries(value));
+}
+export function queueString(value) {
+    if (typeof value !== "string" ||
+        !value.length ||
+        value.length > queueMaxStringLength)
+        throw new Error("Invalid queue identifier");
+    return value;
+}
+export function queueNumber(value) {
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0)
+        throw new Error("Invalid queue number");
+    return value;
+}
+export function queueLeaseMs(value) {
+    const ms = queueNumber(value);
+    if (ms < queueMinLeaseMs || ms > queueMaxLeaseMs)
+        throw new Error("Queue lease must be between 30 and 300000 milliseconds");
+    return ms;
+}
+export function queueJson(value) {
+    const checked = checkpointValue(value);
+    if (checked.kind !== "json")
+        throw new Error("Queue values must be JSON");
+    if (Buffer.byteLength(JSON.stringify(checked.value)) > queueMaxValueBytes)
+        throw new Error("Queue value exceeds size limit");
+    return checked.value;
+}
+export function queueRequest(value) {
+    const data = queueObject(value);
+    return {
+        id: queueString(data.id),
+        handler: queueString(data.handler),
+        input: queueJson(data.input),
+        ...(data.deadline === undefined
+            ? {}
+            : { deadline: queueNumber(data.deadline) }),
+    };
+}
+export function queueClaim(value) {
+    const data = queueObject(value);
+    if (!Array.isArray(data.handlers) ||
+        !data.handlers.length ||
+        data.handlers.length > queueMaxHandlers)
+        throw new Error("Invalid queue handlers");
+    return {
+        worker: queueString(data.worker),
+        handlers: data.handlers.map(queueString),
+        leaseMs: queueLeaseMs(data.leaseMs),
+    };
+}
+export function queueLease(value) {
+    const data = queueObject(value);
+    return {
+        id: queueString(data.id),
+        worker: queueString(data.worker),
+        fence: queueNumber(data.fence),
+    };
+}
+export function queueResult(value) {
+    const data = queueObject(value);
+    const usage = data.usage === undefined ? undefined : queueObject(data.usage);
+    return {
+        value: queueJson(data.value),
+        ...(data.error === undefined ? {} : { error: queueString(data.error) }),
+        ...(usage === undefined
+            ? {}
+            : {
+                usage: {
+                    input: queueNumber(usage.input),
+                    output: queueNumber(usage.output),
+                    cached: queueNumber(usage.cached),
+                    ...(usage.cacheCreated === undefined
+                        ? {}
+                        : { cacheCreated: queueNumber(usage.cacheCreated) }),
+                },
+            }),
+    };
+}
+export function queueJob(value) {
+    const data = queueObject(value);
+    const status = data.status;
+    if (status !== "pending" &&
+        status !== "active" &&
+        status !== "done" &&
+        status !== "failed" &&
+        status !== "cancelled")
+        throw new Error("Invalid queue status");
+    return {
+        ...queueRequest(data),
+        status,
+        fence: queueNumber(data.fence),
+        ...(data.worker === undefined ? {} : { worker: queueString(data.worker) }),
+        ...(data.expires === undefined
+            ? {}
+            : { expires: queueNumber(data.expires) }),
+        ...(data.result === undefined ? {} : { result: queueResult(data.result) }),
+    };
+}
+//# sourceMappingURL=task-queue.js.map

package/dist/domain/task-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-queue.js","sourceRoot":"","sources":["../../src/domain/task-queue.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,MAAM;QACb,KAAK,CAAC,MAAM,GAAG,oBAAoB;QAEnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,EAAE,GAAG,eAAe,IAAI,EAAE,GAAG,eAAe;QAC9C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,OAAO,EAAE,CAAC;AACZ,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,kBAAkB;QACvE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,KAAK,CAAC;AACvB,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QAClC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;YAC7B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC7B,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,gBAAgB;QAEvC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,OAAO;QACL,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;QAChC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;QACxC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;KACpC,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;QAChC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;KAC/B,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7E,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,KAAK,KAAK,SAAS;YACrB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,KAAK,EAAE;oBACL,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC;oBAC/B,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;oBACjC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;oBACjC,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS;wBAClC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;iBACvD;aACF,CAAC;KACP,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,MAAM;QACjB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,WAAW;QAEtB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,OAAO;QACL,GAAG,YAAY,CAAC,IAAI,CAAC;QACrB,MAAM;QACN,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS;YAC5B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;KAC3E,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  QueueClaim,\n  QueueJob,\n  QueueLease,\n  QueueRequest,\n  QueueResult,\n} from \"./task-queue.types.ts\";\nimport {\n  queueMaxValueBytes,\n  queueMaxLeaseMs,\n  queueMaxStringLength,\n  queueMinLeaseMs,\n  queueMaxHandlers,\n} from \"./task-queue.constants.ts\";\nimport { checkpointValue } from \"./workflow/checkpoint-value.ts\";\n\nexport function queueObject(value: unknown): Record<string, unknown> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value))\n    throw new Error(\"Invalid queue object\");\n  return Object.fromEntries(Object.entries(value));\n}\nexport function queueString(value: unknown): string {\n  if (\n    typeof value !== \"string\" ||\n    !value.length ||\n    value.length > queueMaxStringLength\n  )\n    throw new Error(\"Invalid queue identifier\");\n  return value;\n}\nexport function queueNumber(value: unknown): number {\n  if (typeof value !== \"number\" || !Number.isSafeInteger(value) || value < 0)\n    throw new Error(\"Invalid queue number\");\n  return value;\n}\nexport function queueLeaseMs(value: unknown): number {\n  const ms = queueNumber(value);\n  if (ms < queueMinLeaseMs || ms > queueMaxLeaseMs)\n    throw new Error(\"Queue lease must be between 30 and 300000 milliseconds\");\n  return ms;\n}\nexport function queueJson(value: unknown) {\n  const checked = checkpointValue(value);\n  if (checked.kind !== \"json\") throw new Error(\"Queue values must be JSON\");\n  if (Buffer.byteLength(JSON.stringify(checked.value)) > queueMaxValueBytes)\n    throw new Error(\"Queue value exceeds size limit\");\n  return checked.value;\n}\nexport function queueRequest(value: unknown): QueueRequest {\n  const data = queueObject(value);\n  return {\n    id: queueString(data.id),\n    handler: queueString(data.handler),\n    input: queueJson(data.input),\n    ...(data.deadline === undefined\n      ? {}\n      : { deadline: queueNumber(data.deadline) }),\n  };\n}\nexport function queueClaim(value: unknown): QueueClaim {\n  const data = queueObject(value);\n  if (\n    !Array.isArray(data.handlers) ||\n    !data.handlers.length ||\n    data.handlers.length > queueMaxHandlers\n  )\n    throw new Error(\"Invalid queue handlers\");\n  return {\n    worker: queueString(data.worker),\n    handlers: data.handlers.map(queueString),\n    leaseMs: queueLeaseMs(data.leaseMs),\n  };\n}\nexport function queueLease(value: unknown): QueueLease {\n  const data = queueObject(value);\n  return {\n    id: queueString(data.id),\n    worker: queueString(data.worker),\n    fence: queueNumber(data.fence),\n  };\n}\nexport function queueResult(value: unknown): QueueResult {\n  const data = queueObject(value);\n  const usage = data.usage === undefined ? undefined : queueObject(data.usage);\n  return {\n    value: queueJson(data.value),\n    ...(data.error === undefined ? {} : { error: queueString(data.error) }),\n    ...(usage === undefined\n      ? {}\n      : {\n          usage: {\n            input: queueNumber(usage.input),\n            output: queueNumber(usage.output),\n            cached: queueNumber(usage.cached),\n            ...(usage.cacheCreated === undefined\n              ? {}\n              : { cacheCreated: queueNumber(usage.cacheCreated) }),\n          },\n        }),\n  };\n}\nexport function queueJob(value: unknown): QueueJob {\n  const data = queueObject(value);\n  const status = data.status;\n  if (\n    status !== \"pending\" &&\n    status !== \"active\" &&\n    status !== \"done\" &&\n    status !== \"failed\" &&\n    status !== \"cancelled\"\n  )\n    throw new Error(\"Invalid queue status\");\n  return {\n    ...queueRequest(data),\n    status,\n    fence: queueNumber(data.fence),\n    ...(data.worker === undefined ? {} : { worker: queueString(data.worker) }),\n    ...(data.expires === undefined\n      ? {}\n      : { expires: queueNumber(data.expires) }),\n    ...(data.result === undefined ? {} : { result: queueResult(data.result) }),\n  };\n}\n"]}

package/dist/domain/task-queue.types.d.ts

@@ -0,0 +1,41 @@
+import type { Usage } from "./agent.types.ts";
+import type { WorkflowJson } from "./workflow/checkpoint.types.ts";
+export interface QueueRequest {
+    readonly id: string;
+    readonly handler: string;
+    readonly input: WorkflowJson;
+    readonly deadline?: number;
+}
+export interface QueueResult {
+    readonly value: WorkflowJson;
+    readonly usage?: Usage;
+    readonly error?: string;
+}
+export interface QueueJob extends QueueRequest {
+    readonly status: "pending" | "active" | "done" | "failed" | "cancelled";
+    readonly fence: number;
+    readonly worker?: string;
+    readonly expires?: number;
+    readonly result?: QueueResult;
+}
+export interface QueueClaim {
+    readonly worker: string;
+    readonly handlers: readonly string[];
+    readonly leaseMs: number;
+}
+export interface QueueLease {
+    readonly id: string;
+    readonly worker: string;
+    readonly fence: number;
+}
+export interface TaskQueue {
+    enqueue(request: QueueRequest): Promise<QueueJob>;
+    get(id: string): Promise<QueueJob | undefined>;
+    claim(request: QueueClaim): Promise<QueueJob | undefined>;
+    renew(lease: QueueLease, leaseMs: number): Promise<QueueJob>;
+    complete(lease: QueueLease, result: QueueResult): Promise<QueueJob>;
+    cancel(id: string, fence: number): Promise<QueueJob>;
+}
+export interface DurableTaskQueue extends TaskQueue {
+    close(): void;
+}

package/dist/domain/task-queue.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=task-queue.types.js.map

package/dist/domain/task-queue.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-queue.types.js","sourceRoot":"","sources":["../../src/domain/task-queue.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Usage } from \"./agent.types.ts\";\nimport type { WorkflowJson } from \"./workflow/checkpoint.types.ts\";\n\nexport interface QueueRequest {\n  readonly id: string;\n  readonly handler: string;\n  readonly input: WorkflowJson;\n  readonly deadline?: number;\n}\nexport interface QueueResult {\n  readonly value: WorkflowJson;\n  readonly usage?: Usage;\n  readonly error?: string;\n}\nexport interface QueueJob extends QueueRequest {\n  readonly status: \"pending\" | \"active\" | \"done\" | \"failed\" | \"cancelled\";\n  readonly fence: number;\n  readonly worker?: string;\n  readonly expires?: number;\n  readonly result?: QueueResult;\n}\nexport interface QueueClaim {\n  readonly worker: string;\n  readonly handlers: readonly string[];\n  readonly leaseMs: number;\n}\nexport interface QueueLease {\n  readonly id: string;\n  readonly worker: string;\n  readonly fence: number;\n}\nexport interface TaskQueue {\n  enqueue(request: QueueRequest): Promise<QueueJob>;\n  get(id: string): Promise<QueueJob | undefined>;\n  claim(request: QueueClaim): Promise<QueueJob | undefined>;\n  renew(lease: QueueLease, leaseMs: number): Promise<QueueJob>;\n  complete(lease: QueueLease, result: QueueResult): Promise<QueueJob>;\n  cancel(id: string, fence: number): Promise<QueueJob>;\n}\nexport interface DurableTaskQueue extends TaskQueue {\n  close(): void;\n}\n"]}

package/dist/domain/workflow/budget.d.ts

@@ -1,9 +1,9 @@
 import type { Usage } from "../agent.types.ts";
-import type { WorkflowAccounting, WorkflowBudget } from "./budget.types.ts";
+import type { WorkflowAccounting, WorkflowBudget, WorkflowUsage } from "./budget.types.ts";
 export declare class WorkflowBudgetExceeded extends Error {
     readonly dimension: "attempts" | keyof Usage;
     readonly limit: number;
     readonly observed: number;
     constructor(dimension: "attempts" | keyof Usage, limit: number, observed: number);
 }
-export declare function workflowAccounting(budget: WorkflowBudget | undefined, exhaust: (error: WorkflowBudgetExceeded) => void): WorkflowAccounting;
+export declare function workflowAccounting(budget: WorkflowBudget | undefined, exhaust: (error: WorkflowBudgetExceeded) => void, initial?: WorkflowUsage): WorkflowAccounting;

package/dist/domain/workflow/budget.js

@@ -12,7 +12,7 @@ export class WorkflowBudgetExceeded extends Error {
         this.observed = observed;
     }
 }
-export function workflowAccounting(budget, exhaust) {
+export function workflowAccounting(budget, exhaust, initial) {
     for (const [key, value] of Object.entries({
         attempts: budget?.attempts,
         ...budget?.usage,
@@ -20,8 +20,10 @@ export function workflowAccounting(budget, exhaust) {
         if (value !== undefined && (!Number.isSafeInteger(value) || value < 0))
             throw new Error(`Workflow budget ${key} must be a nonnegative safe integer`);
     }
-    let attempts = 0;
-    let tokens = { input: 0, cached: 0, output: 0 };
+    let attempts = initial?.attempts ?? 0;
+    let tokens = initial
+        ? { ...initial.tokens }
+        : { input: 0, cached: 0, output: 0 };
     let exhausted = false;
     let usageExhausted = false;
     function fail(dimension, limit, observed) {

package/dist/domain/workflow/budget.js.map

@@ -1 +1 @@
-{"version":3,"file":"budget.js","sourceRoot":"","sources":["../../../src/domain/workflow/budget.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,SAAS,CAA2B;IACpC,KAAK,CAAS;IACd,QAAQ,CAAS;IAC1B,YACE,SAAmC,EACnC,KAAa,EACb,QAAgB;QAEhB,KAAK,CACH,8BAA8B,SAAS,UAAU,KAAK,cAAc,QAAQ,EAAE,CAC/E,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAkC,EAClC,OAAgD;IAEhD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;QACxC,QAAQ,EAAE,MAAM,EAAE,QAAQ;QAC1B,GAAG,MAAM,EAAE,KAAK;KACjB,CAAC,EAAE,CAAC;QACH,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;YACpE,MAAM,IAAI,KAAK,CACb,mBAAmB,GAAG,qCAAqC,CAC5D,CAAC;IACN,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,MAAM,GAAU,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACvD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,SAAS,IAAI,CACX,SAAmC,EACnC,KAAa,EACb,QAAgB;QAEhB,MAAM,KAAK,GAAG,IAAI,sBAAsB,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAChE,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,SAAS,KAAK,UAAU;gBAAE,cAAc,GAAG,IAAI,CAAC;YACpD,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO;QACL,IAAI,SAAS;YACX,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK;YACH,IAAI,MAAM,EAAE,QAAQ,KAAK,SAAS,IAAI,QAAQ,IAAI,MAAM,CAAC,QAAQ;gBAC/D,MAAM,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACpD,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC;gBACzC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK;oBAC1D,MAAM,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACzD,CAAC;YACD,QAAQ,EAAE,CAAC;QACb,CAAC;QACD,MAAM,CAAC,KAAK;YACV,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;oBAC3C,MAAM,IAAI,KAAK,CACb,kBAAkB,SAAS,qCAAqC,CACjE,CAAC;YACN,CAAC;YACD,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACjC,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC;gBACzC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK;oBAC1D,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CACb,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC","sourcesContent":["import type { Usage } from \"../agent.types.ts\";\nimport { addUsage } from \"../usage.ts\";\nimport { usageDimensions } from \"./budget.constants.ts\";\nimport type { WorkflowAccounting, WorkflowBudget } from \"./budget.types.ts\";\n\nexport class WorkflowBudgetExceeded extends Error {\n  readonly dimension: \"attempts\" | keyof Usage;\n  readonly limit: number;\n  readonly observed: number;\n  constructor(\n    dimension: \"attempts\" | keyof Usage,\n    limit: number,\n    observed: number,\n  ) {\n    super(\n      `Workflow budget exhausted: ${dimension} limit ${limit}, observed ${observed}`,\n    );\n    this.name = \"WorkflowBudgetExceeded\";\n    this.dimension = dimension;\n    this.limit = limit;\n    this.observed = observed;\n  }\n}\n\nexport function workflowAccounting(\n  budget: WorkflowBudget | undefined,\n  exhaust: (error: WorkflowBudgetExceeded) => void,\n): WorkflowAccounting {\n  for (const [key, value] of Object.entries({\n    attempts: budget?.attempts,\n    ...budget?.usage,\n  })) {\n    if (value !== undefined && (!Number.isSafeInteger(value) || value < 0))\n      throw new Error(\n        `Workflow budget ${key} must be a nonnegative safe integer`,\n      );\n  }\n  let attempts = 0;\n  let tokens: Usage = { input: 0, cached: 0, output: 0 };\n  let exhausted = false;\n  let usageExhausted = false;\n  function fail(\n    dimension: \"attempts\" | keyof Usage,\n    limit: number,\n    observed: number,\n  ): WorkflowBudgetExceeded {\n    const error = new WorkflowBudgetExceeded(dimension, limit, observed);\n    if (!exhausted || (dimension !== \"attempts\" && !usageExhausted)) {\n      exhausted = true;\n      if (dimension !== \"attempts\") usageExhausted = true;\n      exhaust(error);\n    }\n    return error;\n  }\n  return {\n    get exhausted() {\n      return exhausted;\n    },\n    admit() {\n      if (budget?.attempts !== undefined && attempts >= budget.attempts)\n        throw fail(\"attempts\", budget.attempts, attempts);\n      for (const dimension of usageDimensions) {\n        const limit = budget?.usage?.[dimension];\n        if (limit !== undefined && (tokens[dimension] ?? 0) >= limit)\n          throw fail(dimension, limit, tokens[dimension] ?? 0);\n      }\n      attempts++;\n    },\n    report(usage) {\n      for (const dimension of usageDimensions) {\n        const value = usage[dimension] ?? 0;\n        if (!Number.isSafeInteger(value) || value < 0)\n          throw new Error(\n            `Reported usage ${dimension} must be a nonnegative safe integer`,\n          );\n      }\n      tokens = addUsage(tokens, usage);\n      for (const dimension of usageDimensions) {\n        const limit = budget?.usage?.[dimension];\n        if (limit !== undefined && (tokens[dimension] ?? 0) >= limit)\n          fail(dimension, limit, tokens[dimension] ?? 0);\n      }\n    },\n    snapshot: () =>\n      Object.freeze({ attempts, tokens: Object.freeze({ ...tokens }) }),\n  };\n}\n"]}
+{"version":3,"file":"budget.js","sourceRoot":"","sources":["../../../src/domain/workflow/budget.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAOxD,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,SAAS,CAA2B;IACpC,KAAK,CAAS;IACd,QAAQ,CAAS;IAC1B,YACE,SAAmC,EACnC,KAAa,EACb,QAAgB;QAEhB,KAAK,CACH,8BAA8B,SAAS,UAAU,KAAK,cAAc,QAAQ,EAAE,CAC/E,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAkC,EAClC,OAAgD,EAChD,OAAuB;IAEvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;QACxC,QAAQ,EAAE,MAAM,EAAE,QAAQ;QAC1B,GAAG,MAAM,EAAE,KAAK;KACjB,CAAC,EAAE,CAAC;QACH,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;YACpE,MAAM,IAAI,KAAK,CACb,mBAAmB,GAAG,qCAAqC,CAC5D,CAAC;IACN,CAAC;IACD,IAAI,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,CAAC,CAAC;IACtC,IAAI,MAAM,GAAU,OAAO;QACzB,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE;QACvB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACvC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,SAAS,IAAI,CACX,SAAmC,EACnC,KAAa,EACb,QAAgB;QAEhB,MAAM,KAAK,GAAG,IAAI,sBAAsB,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAChE,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,SAAS,KAAK,UAAU;gBAAE,cAAc,GAAG,IAAI,CAAC;YACpD,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO;QACL,IAAI,SAAS;YACX,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK;YACH,IAAI,MAAM,EAAE,QAAQ,KAAK,SAAS,IAAI,QAAQ,IAAI,MAAM,CAAC,QAAQ;gBAC/D,MAAM,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACpD,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC;gBACzC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK;oBAC1D,MAAM,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACzD,CAAC;YACD,QAAQ,EAAE,CAAC;QACb,CAAC;QACD,MAAM,CAAC,KAAK;YACV,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;oBAC3C,MAAM,IAAI,KAAK,CACb,kBAAkB,SAAS,qCAAqC,CACjE,CAAC;YACN,CAAC;YACD,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACjC,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC;gBACzC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK;oBAC1D,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CACb,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC","sourcesContent":["import type { Usage } from \"../agent.types.ts\";\nimport { addUsage } from \"../usage.ts\";\nimport { usageDimensions } from \"./budget.constants.ts\";\nimport type {\n  WorkflowAccounting,\n  WorkflowBudget,\n  WorkflowUsage,\n} from \"./budget.types.ts\";\n\nexport class WorkflowBudgetExceeded extends Error {\n  readonly dimension: \"attempts\" | keyof Usage;\n  readonly limit: number;\n  readonly observed: number;\n  constructor(\n    dimension: \"attempts\" | keyof Usage,\n    limit: number,\n    observed: number,\n  ) {\n    super(\n      `Workflow budget exhausted: ${dimension} limit ${limit}, observed ${observed}`,\n    );\n    this.name = \"WorkflowBudgetExceeded\";\n    this.dimension = dimension;\n    this.limit = limit;\n    this.observed = observed;\n  }\n}\n\nexport function workflowAccounting(\n  budget: WorkflowBudget | undefined,\n  exhaust: (error: WorkflowBudgetExceeded) => void,\n  initial?: WorkflowUsage,\n): WorkflowAccounting {\n  for (const [key, value] of Object.entries({\n    attempts: budget?.attempts,\n    ...budget?.usage,\n  })) {\n    if (value !== undefined && (!Number.isSafeInteger(value) || value < 0))\n      throw new Error(\n        `Workflow budget ${key} must be a nonnegative safe integer`,\n      );\n  }\n  let attempts = initial?.attempts ?? 0;\n  let tokens: Usage = initial\n    ? { ...initial.tokens }\n    : { input: 0, cached: 0, output: 0 };\n  let exhausted = false;\n  let usageExhausted = false;\n  function fail(\n    dimension: \"attempts\" | keyof Usage,\n    limit: number,\n    observed: number,\n  ): WorkflowBudgetExceeded {\n    const error = new WorkflowBudgetExceeded(dimension, limit, observed);\n    if (!exhausted || (dimension !== \"attempts\" && !usageExhausted)) {\n      exhausted = true;\n      if (dimension !== \"attempts\") usageExhausted = true;\n      exhaust(error);\n    }\n    return error;\n  }\n  return {\n    get exhausted() {\n      return exhausted;\n    },\n    admit() {\n      if (budget?.attempts !== undefined && attempts >= budget.attempts)\n        throw fail(\"attempts\", budget.attempts, attempts);\n      for (const dimension of usageDimensions) {\n        const limit = budget?.usage?.[dimension];\n        if (limit !== undefined && (tokens[dimension] ?? 0) >= limit)\n          throw fail(dimension, limit, tokens[dimension] ?? 0);\n      }\n      attempts++;\n    },\n    report(usage) {\n      for (const dimension of usageDimensions) {\n        const value = usage[dimension] ?? 0;\n        if (!Number.isSafeInteger(value) || value < 0)\n          throw new Error(\n            `Reported usage ${dimension} must be a nonnegative safe integer`,\n          );\n      }\n      tokens = addUsage(tokens, usage);\n      for (const dimension of usageDimensions) {\n        const limit = budget?.usage?.[dimension];\n        if (limit !== undefined && (tokens[dimension] ?? 0) >= limit)\n          fail(dimension, limit, tokens[dimension] ?? 0);\n      }\n    },\n    snapshot: () =>\n      Object.freeze({ attempts, tokens: Object.freeze({ ...tokens }) }),\n  };\n}\n"]}

package/dist/domain/workflow/checkpoint-validation.d.ts

@@ -0,0 +1,3 @@
+import type { WorkflowCheckpoint } from "./checkpoint.types.ts";
+import type { Task } from "../workflow.types.ts";
+export declare function validateCheckpoint(value: unknown, identity: string, tasks: readonly Task[]): asserts value is WorkflowCheckpoint;

package/dist/domain/workflow/checkpoint-validation.js

@@ -0,0 +1,81 @@
+import { validateUsageReceipts } from "./usage-receipt.js";
+import { validateGateRecord } from "./gate-validation.js";
+import { checkpointValue } from "./checkpoint-value.js";
+function object(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function integer(value) {
+    return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
+}
+export function validateCheckpoint(value, identity, tasks) {
+    const invalid = () => new Error("Invalid or incompatible workflow checkpoint");
+    if (!object(value) ||
+        value.format !== 1 ||
+        value.identity !== identity ||
+        typeof value.executionId !== "string" ||
+        !value.executionId ||
+        !Array.isArray(value.records) ||
+        !object(value.values) ||
+        !object(value.usage))
+        throw invalid();
+    if (!integer(value.usage.attempts) || !object(value.usage.tokens))
+        throw invalid();
+    for (const dimension of ["input", "cached", "output"])
+        if (!integer(value.usage.tokens[dimension]))
+            throw invalid();
+    for (const count of Object.values(value.usage.tokens))
+        if (!integer(count))
+            throw invalid();
+    if (value.records.length !== tasks.length)
+        throw invalid();
+    const keys = new Set(tasks.map((item) => item.key));
+    let attempts = 0;
+    for (const record of value.records) {
+        if (!object(record) ||
+            typeof record.key !== "string" ||
+            !keys.delete(record.key) ||
+            !integer(record.attempts) ||
+            ![
+                "waiting",
+                "active",
+                "done",
+                "failed",
+                "skipped",
+                "cancelled",
+                "paused",
+                "rejected",
+            ].includes(String(record.status)))
+            throw invalid();
+        for (const field of ["startedAt", "finishedAt", "error"])
+            if (record[field] !== undefined && typeof record[field] !== "string")
+                throw invalid();
+        validateUsageReceipts(record.usageReceipts);
+        attempts += record.attempts;
+        const output = Object.hasOwn(value.values, record.key)
+            ? value.values[record.key]
+            : undefined;
+        validateGateRecord(record, tasks.find((item) => item.key === record.key), value.executionId, output);
+        if (record.status !== "done") {
+            if (output !== undefined)
+                throw invalid();
+            continue;
+        }
+        if (!object(output) || !["undefined", "json"].includes(String(output.kind)))
+            throw invalid();
+        if (output.kind === "json") {
+            if (!Object.hasOwn(output, "value") || output.value === undefined)
+                throw invalid();
+            checkpointValue(output.value);
+        }
+    }
+    if (attempts !== value.usage.attempts)
+        throw invalid();
+    if (Object.keys(value.values).some((key) => !tasks.some((item) => item.key === key)))
+        throw invalid();
+    const records = new Map(value.records.map((entry) => [entry.key, entry]));
+    for (const item of tasks)
+        if (["done", "paused", "rejected"].includes(String(records.get(item.key)?.status)) &&
+            item.after.some((dependency) => records.get(dependency.key)?.status !== "done"))
+            throw invalid();
+}
+//# sourceMappingURL=checkpoint-validation.js.map

package/dist/domain/workflow/checkpoint-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-validation.js","sourceRoot":"","sources":["../../../src/domain/workflow/checkpoint-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AACD,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAc,EACd,QAAgB,EAChB,KAAsB;IAEtB,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC3D,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;QACd,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAC3B,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,CAAC,KAAK,CAAC,WAAW;QAClB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC7B,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QACrB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAEpB,MAAM,OAAO,EAAE,CAAC;IAClB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QAC/D,MAAM,OAAO,EAAE,CAAC;IAClB,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,MAAM,OAAO,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IACE,CAAC,MAAM,CAAC,MAAM,CAAC;YACf,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAC9B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;YACxB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YACzB,CAAC;gBACC,SAAS;gBACT,QAAQ;gBACR,MAAM;gBACN,QAAQ;gBACR,SAAS;gBACT,WAAW;gBACX,QAAQ;gBACR,UAAU;aACX,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAEjC,MAAM,OAAO,EAAE,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC;YACtD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;gBAClE,MAAM,OAAO,EAAE,CAAC;QACpB,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC5C,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;YACpD,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;YAC1B,CAAC,CAAC,SAAS,CAAC;QACd,kBAAkB,CAChB,MAAM,EACN,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAE,EAC9C,KAAK,CAAC,WAAW,EACjB,MAAM,CACP,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,OAAO,EAAE,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzE,MAAM,OAAO,EAAE,CAAC;QAClB,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;gBAC/D,MAAM,OAAO,EAAE,CAAC;YAClB,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ;QAAE,MAAM,OAAO,EAAE,CAAC;IACvD,IACE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5B,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CACjD;QAED,MAAM,OAAO,EAAE,CAAC;IAClB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,KAAK,MAAM,IAAI,IAAI,KAAK;QACtB,IACE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CACrC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CACtC;YACD,IAAI,CAAC,KAAK,CAAC,IAAI,CACb,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,KAAK,MAAM,CAC/D;YAED,MAAM,OAAO,EAAE,CAAC;AACtB,CAAC","sourcesContent":["import { validateUsageReceipts } from \"./usage-receipt.ts\";\nimport { validateGateRecord } from \"./gate-validation.ts\";\nimport type { WorkflowCheckpoint } from \"./checkpoint.types.ts\";\nimport type { Task } from \"../workflow.types.ts\";\nimport { checkpointValue } from \"./checkpoint-value.ts\";\n\nfunction object(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value);\n}\nfunction integer(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0;\n}\n\nexport function validateCheckpoint(\n  value: unknown,\n  identity: string,\n  tasks: readonly Task[],\n): asserts value is WorkflowCheckpoint {\n  const invalid = () =>\n    new Error(\"Invalid or incompatible workflow checkpoint\");\n  if (\n    !object(value) ||\n    value.format !== 1 ||\n    value.identity !== identity ||\n    typeof value.executionId !== \"string\" ||\n    !value.executionId ||\n    !Array.isArray(value.records) ||\n    !object(value.values) ||\n    !object(value.usage)\n  )\n    throw invalid();\n  if (!integer(value.usage.attempts) || !object(value.usage.tokens))\n    throw invalid();\n  for (const dimension of [\"input\", \"cached\", \"output\"])\n    if (!integer(value.usage.tokens[dimension])) throw invalid();\n  for (const count of Object.values(value.usage.tokens))\n    if (!integer(count)) throw invalid();\n  if (value.records.length !== tasks.length) throw invalid();\n  const keys = new Set(tasks.map((item) => item.key));\n  let attempts = 0;\n  for (const record of value.records) {\n    if (\n      !object(record) ||\n      typeof record.key !== \"string\" ||\n      !keys.delete(record.key) ||\n      !integer(record.attempts) ||\n      ![\n        \"waiting\",\n        \"active\",\n        \"done\",\n        \"failed\",\n        \"skipped\",\n        \"cancelled\",\n        \"paused\",\n        \"rejected\",\n      ].includes(String(record.status))\n    )\n      throw invalid();\n    for (const field of [\"startedAt\", \"finishedAt\", \"error\"])\n      if (record[field] !== undefined && typeof record[field] !== \"string\")\n        throw invalid();\n    validateUsageReceipts(record.usageReceipts);\n    attempts += record.attempts;\n    const output = Object.hasOwn(value.values, record.key)\n      ? value.values[record.key]\n      : undefined;\n    validateGateRecord(\n      record,\n      tasks.find((item) => item.key === record.key)!,\n      value.executionId,\n      output,\n    );\n    if (record.status !== \"done\") {\n      if (output !== undefined) throw invalid();\n      continue;\n    }\n    if (!object(output) || ![\"undefined\", \"json\"].includes(String(output.kind)))\n      throw invalid();\n    if (output.kind === \"json\") {\n      if (!Object.hasOwn(output, \"value\") || output.value === undefined)\n        throw invalid();\n      checkpointValue(output.value);\n    }\n  }\n  if (attempts !== value.usage.attempts) throw invalid();\n  if (\n    Object.keys(value.values).some(\n      (key) => !tasks.some((item) => item.key === key),\n    )\n  )\n    throw invalid();\n  const records = new Map(value.records.map((entry) => [entry.key, entry]));\n  for (const item of tasks)\n    if (\n      [\"done\", \"paused\", \"rejected\"].includes(\n        String(records.get(item.key)?.status),\n      ) &&\n      item.after.some(\n        (dependency) => records.get(dependency.key)?.status !== \"done\",\n      )\n    )\n      throw invalid();\n}\n"]}

package/dist/domain/workflow/checkpoint-value.d.ts

@@ -0,0 +1,2 @@
+import type { WorkflowCheckpointValue } from "./checkpoint.types.ts";
+export declare function checkpointValue(value: unknown): WorkflowCheckpointValue;

package/dist/domain/workflow/checkpoint-value.js

@@ -0,0 +1,49 @@
+export function checkpointValue(value) {
+    if (value === undefined)
+        return { kind: "undefined" };
+    return { kind: "json", value: jsonValue(value, new Set()) };
+}
+function jsonValue(value, ancestors) {
+    if (value === null || typeof value === "boolean" || typeof value === "string")
+        return value;
+    if (typeof value === "number" &&
+        Number.isFinite(value) &&
+        !Object.is(value, -0))
+        return value;
+    if (typeof value !== "object" || value === null || ancestors.has(value))
+        throw new Error("Checkpoint outputs must be lossless JSON values or top-level undefined");
+    const prototype = Object.getPrototypeOf(value);
+    if (!Array.isArray(value) &&
+        prototype !== Object.prototype &&
+        prototype !== null)
+        throw new Error("Checkpoint outputs must contain plain JSON objects");
+    ancestors.add(value);
+    try {
+        if (Array.isArray(value)) {
+            if (prototype !== Array.prototype)
+                throw new Error("Checkpoint arrays must have the standard prototype");
+            if (Reflect.ownKeys(value).length !== value.length + 1)
+                throw new Error("Checkpoint arrays must be dense and have no extra properties");
+            return Array.from({ length: value.length }, (_, index) => {
+                const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+                if (!descriptor || !("value" in descriptor) || !descriptor.enumerable)
+                    throw new Error("Checkpoint arrays must have enumerable data properties");
+                return jsonValue(descriptor.value, ancestors);
+            });
+        }
+        const result = Object.create(null);
+        for (const key of Reflect.ownKeys(value)) {
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            if (typeof key !== "string" ||
+                !descriptor.enumerable ||
+                !("value" in descriptor))
+                throw new Error("Checkpoint objects must have enumerable string data properties");
+            result[key] = jsonValue(descriptor.value, ancestors);
+        }
+        return result;
+    }
+    finally {
+        ancestors.delete(value);
+    }
+}
+//# sourceMappingURL=checkpoint-value.js.map

package/dist/domain/workflow/checkpoint-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-value.js","sourceRoot":"","sources":["../../../src/domain/workflow/checkpoint-value.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,SAAsB;IACvD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3E,OAAO,KAAK,CAAC;IACf,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAErB,OAAO,KAAK,CAAC;IACf,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;IACJ,MAAM,SAAS,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACxD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,SAAS,KAAK,MAAM,CAAC,SAAS;QAC9B,SAAS,KAAK,IAAI;QAElB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,SAAS,KAAK,KAAK,CAAC,SAAS;gBAC/B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;gBACpD,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;YACJ,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;gBACvD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAChD,KAAK,EACL,MAAM,CAAC,KAAK,CAAC,CACd,CAAC;gBACF,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU;oBACnE,MAAM,IAAI,KAAK,CACb,wDAAwD,CACzD,CAAC;gBACJ,OAAO,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAChD,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAiC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjE,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAE,CAAC;YAChE,IACE,OAAO,GAAG,KAAK,QAAQ;gBACvB,CAAC,UAAU,CAAC,UAAU;gBACtB,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;gBAExB,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;YACJ,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC","sourcesContent":["import type {\n  WorkflowCheckpointValue,\n  WorkflowJson,\n} from \"./checkpoint.types.ts\";\n\nexport function checkpointValue(value: unknown): WorkflowCheckpointValue {\n  if (value === undefined) return { kind: \"undefined\" };\n  return { kind: \"json\", value: jsonValue(value, new Set()) };\n}\n\nfunction jsonValue(value: unknown, ancestors: Set<object>): WorkflowJson {\n  if (value === null || typeof value === \"boolean\" || typeof value === \"string\")\n    return value;\n  if (\n    typeof value === \"number\" &&\n    Number.isFinite(value) &&\n    !Object.is(value, -0)\n  )\n    return value;\n  if (typeof value !== \"object\" || value === null || ancestors.has(value))\n    throw new Error(\n      \"Checkpoint outputs must be lossless JSON values or top-level undefined\",\n    );\n  const prototype: unknown = Object.getPrototypeOf(value);\n  if (\n    !Array.isArray(value) &&\n    prototype !== Object.prototype &&\n    prototype !== null\n  )\n    throw new Error(\"Checkpoint outputs must contain plain JSON objects\");\n  ancestors.add(value);\n  try {\n    if (Array.isArray(value)) {\n      if (prototype !== Array.prototype)\n        throw new Error(\"Checkpoint arrays must have the standard prototype\");\n      if (Reflect.ownKeys(value).length !== value.length + 1)\n        throw new Error(\n          \"Checkpoint arrays must be dense and have no extra properties\",\n        );\n      return Array.from({ length: value.length }, (_, index) => {\n        const descriptor = Object.getOwnPropertyDescriptor(\n          value,\n          String(index),\n        );\n        if (!descriptor || !(\"value\" in descriptor) || !descriptor.enumerable)\n          throw new Error(\n            \"Checkpoint arrays must have enumerable data properties\",\n          );\n        return jsonValue(descriptor.value, ancestors);\n      });\n    }\n    const result: Record<string, WorkflowJson> = Object.create(null);\n    for (const key of Reflect.ownKeys(value)) {\n      const descriptor = Object.getOwnPropertyDescriptor(value, key)!;\n      if (\n        typeof key !== \"string\" ||\n        !descriptor.enumerable ||\n        !(\"value\" in descriptor)\n      )\n        throw new Error(\n          \"Checkpoint objects must have enumerable string data properties\",\n        );\n      result[key] = jsonValue(descriptor.value, ancestors);\n    }\n    return result;\n  } finally {\n    ancestors.delete(value);\n  }\n}\n"]}

package/dist/domain/workflow/checkpoint.d.ts

@@ -0,0 +1,3 @@
+import type { Task } from "../workflow.types.ts";
+import type { WorkflowCheckpointOptions, WorkflowCheckpointSession } from "./checkpoint.types.ts";
+export declare function openCheckpoint(name: string, tasks: readonly Task[], options: WorkflowCheckpointOptions): Promise<WorkflowCheckpointSession>;