@elie-laloum/outpost 7.0.0 → 9.0.0

package/dist/infrastructure/transport-checkpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"transport-checkpoint.js","sourceRoot":"","sources":["../../src/infrastructure/transport-checkpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAMhF,SAAS,GAAG,CAAC,KAAa;IACxB,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACzE,OAAO,eAAe,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;AAChF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAChD,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC;QACnB,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;QAEzD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAA8B;IAE9B,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAChC,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC9C,QAAQ,EAAE,0BAA0B,GAAG,IAAI;aAC5C,CAAC,CAAC;YACH,IAAI,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1C,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;gBACrB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;YAC3B,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC;YAC1B,IAAI,QAAQ,GAAG,CACb,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;gBAC/C,UAAU,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI;aACvC,CAAC,CACH,CAAC,QAAQ,CAAC;YACX,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,OAAkC,CAAC;YACvC,KAAK,UAAU,KAAK;gBAClB,IAAI,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACpE,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE;oBAC7C,QAAQ,EAAE,0BAA0B,GAAG,IAAI;iBAC5C,CAAC,CAAC;gBACH,IACE,OAAO,EAAE,QAAQ,KAAK,QAAQ;oBAC9B,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK;oBAE7C,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC;YACD,OAAO;gBACL,KAAK,CAAC,IAAI;oBACR,MAAM,OAAO,CAAC;oBACd,MAAM,KAAK,EAAE,CAAC;oBACd,OAAO,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC1C,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,UAAU;oBACpB,IAAI,OAAO;wBACT,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAChD,CAAC;oBACJ,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;oBACpC,IAAI,KAAK,CAAC,UAAU,GAAG,0BAA0B;wBAC/C,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,sEAAsE,CACvE,CACF,CAAC;oBACJ,MAAM,IAAI,GAAG;wBACX,KAAK;wBACL,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAY;qBACjE,CAAC;oBACF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;wBACxC,MAAM,KAAK,EAAE,CAAC;wBACd,QAAQ,GAAG,CACT,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;4BAC/C,UAAU,EAAE,QAAQ;yBACrB,CAAC,CACH,CAAC,QAAQ,CAAC;wBACX,IAAI,GAAG,IAAI,CAAC;oBACd,CAAC,CAAC,CAAC;oBACH,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACpC,OAAO,SAAS,CAAC;gBACnB,CAAC;gBACD,OAAO;oBACL,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;wBACtB,MAAM,OAAO,CAAC;wBACd,IAAI,QAAQ;4BAAE,OAAO;wBACrB,MAAM,KAAK,EAAE,CAAC;wBACd,MAAM,WAAW,CAAC,KAAK,CACrB,MAAM,EACN,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EACnC,EAAE,UAAU,EAAE,QAAQ,EAAE,CACzB,CAAC;wBACF,QAAQ,GAAG,IAAI,CAAC;oBAClB,CAAC,CAAC,EAAE,CAAC;oBACL,OAAO,OAAO,CAAC;gBACjB,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAkC;IAElC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE;QACrD,QAAQ,EAAE,0BAA0B,GAAG,IAAI;KAC5C,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;QACnD,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE;QAC3E,UAAU,EAAE,OAAO,CAAC,QAAQ;KAC7B,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport type { WorkflowCheckpointStore } from \"../domain/workflow/checkpoint.types.ts\";\nimport type { TransportStoreOptions } from \"../domain/transport.types.ts\";\nimport { TransportConflict } from \"../domain/transport.ts\";\nimport { jsonBytes, jsonObject } from \"./transport-json.ts\";\nimport { workflowCheckpointMaxBytes } from \"./workflow-checkpoint.constants.ts\";\nimport type {\n  CheckpointEnvelope,\n  CheckpointRecoveryOptions,\n} from \"./transport-checkpoint.types.ts\";\n\nfunction key(runId: string): string {\n  if (!runId.trim()) throw new Error(\"Checkpoint runId must not be empty\");\n  return `checkpoints/${createHash(\"sha256\").update(runId).digest(\"hex\")}.json`;\n}\n\nfunction envelope(value: unknown): CheckpointEnvelope {\n  if (value === undefined) return { owner: null };\n  if (\n    !value ||\n    typeof value !== \"object\" ||\n    !(\"owner\" in value) ||\n    (value.owner !== null && typeof value.owner !== \"string\")\n  )\n    throw new Error(\"Invalid checkpoint ownership envelope\");\n  return {\n    owner: value.owner,\n    ...(\"checkpoint\" in value ? { checkpoint: value.checkpoint } : {}),\n  };\n}\n\nexport function workflowCheckpointStore(\n  options: TransportStoreOptions,\n): WorkflowCheckpointStore {\n  const { transporter } = options;\n  return {\n    async acquire(runId) {\n      const target = key(runId);\n      const previous = await transporter.read(target, {\n        maxBytes: workflowCheckpointMaxBytes + 1024,\n      });\n      let data = envelope(jsonObject(previous));\n      if (data.owner !== null)\n        throw new Error(\"Workflow is already in use or ownership is unknown\");\n      const owner = randomUUID();\n      data = { ...data, owner };\n      let revision = (\n        await transporter.write(target, jsonBytes(data), {\n          ifRevision: previous?.revision ?? null,\n        })\n      ).revision;\n      let released = false;\n      let pending = Promise.resolve();\n      let closing: Promise<void> | undefined;\n      async function owned() {\n        if (released) throw new Error(\"Checkpoint lease has been released\");\n        const current = await transporter.read(target, {\n          maxBytes: workflowCheckpointMaxBytes + 1024,\n        });\n        if (\n          current?.revision !== revision ||\n          envelope(jsonObject(current)).owner !== owner\n        )\n          throw new TransportConflict(target);\n      }\n      return {\n        async read() {\n          await pending;\n          await owned();\n          return structuredClone(data.checkpoint);\n        },\n        async write(checkpoint) {\n          if (closing)\n            return Promise.reject(\n              new Error(\"Checkpoint lease has been released\"),\n            );\n          const bytes = jsonBytes(checkpoint);\n          if (bytes.byteLength > workflowCheckpointMaxBytes)\n            return Promise.reject(\n              new Error(\n                \"Workflow checkpoint exceeds 16 MiB; store large artifacts separately\",\n              ),\n            );\n          const next = {\n            owner,\n            checkpoint: JSON.parse(Buffer.from(bytes).toString()) as unknown,\n          };\n          const operation = pending.then(async () => {\n            await owned();\n            revision = (\n              await transporter.write(target, jsonBytes(next), {\n                ifRevision: revision,\n              })\n            ).revision;\n            data = next;\n          });\n          pending = operation.catch(() => {});\n          return operation;\n        },\n        release() {\n          closing ??= (async () => {\n            await pending;\n            if (released) return;\n            await owned();\n            await transporter.write(\n              target,\n              jsonBytes({ ...data, owner: null }),\n              { ifRevision: revision },\n            );\n            released = true;\n          })();\n          return closing;\n        },\n      };\n    },\n  };\n}\n\nexport async function recoverWorkflowCheckpoint(\n  options: CheckpointRecoveryOptions,\n): Promise<void> {\n  const target = key(options.runId);\n  const current = await options.transporter.read(target, {\n    maxBytes: workflowCheckpointMaxBytes + 1024,\n  });\n  if (!current || current.revision !== options.revision)\n    throw new TransportConflict(target);\n  const data = envelope(jsonObject(current));\n  await options.transporter.write(target, jsonBytes({ ...data, owner: null }), {\n    ifRevision: current.revision,\n  });\n}\n"]}
+{"version":3,"file":"transport-checkpoint.js","sourceRoot":"","sources":["../../src/infrastructure/transport-checkpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAMhF,SAAS,GAAG,CAAC,KAAa;IACxB,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACzE,OAAO,eAAe,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;AAChF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAChD,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC;QACnB,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;QAEzD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAA8B;IAE9B,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAChC,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC9C,QAAQ,EAAE,0BAA0B,GAAG,IAAI;aAC5C,CAAC,CAAC;YACH,IAAI,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1C,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;gBACrB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;YAC3B,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC;YAC1B,IAAI,QAAQ,GAAG,CACb,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;gBAC/C,UAAU,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI;aACvC,CAAC,CACH,CAAC,QAAQ,CAAC;YACX,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,OAAkC,CAAC;YACvC,KAAK,UAAU,KAAK;gBAClB,IAAI,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACpE,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE;oBAC7C,QAAQ,EAAE,0BAA0B,GAAG,IAAI;iBAC5C,CAAC,CAAC;gBACH,IACE,OAAO,EAAE,QAAQ,KAAK,QAAQ;oBAC9B,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK;oBAE7C,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC;YACD,OAAO;gBACL,KAAK,CAAC,IAAI;oBACR,MAAM,OAAO,CAAC;oBACd,MAAM,KAAK,EAAE,CAAC;oBACd,OAAO,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC1C,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,UAAU;oBACpB,IAAI,OAAO;wBACT,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAChD,CAAC;oBACJ,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;oBACpC,IAAI,KAAK,CAAC,UAAU,GAAG,0BAA0B;wBAC/C,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,sEAAsE,CACvE,CACF,CAAC;oBACJ,MAAM,IAAI,GAAG;wBACX,KAAK;wBACL,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAY;qBACjE,CAAC;oBACF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;wBACxC,MAAM,KAAK,EAAE,CAAC;wBACd,QAAQ,GAAG,CACT,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;4BAC/C,UAAU,EAAE,QAAQ;yBACrB,CAAC,CACH,CAAC,QAAQ,CAAC;wBACX,IAAI,GAAG,IAAI,CAAC;oBACd,CAAC,CAAC,CAAC;oBACH,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACpC,OAAO,SAAS,CAAC;gBACnB,CAAC;gBACD,OAAO;oBACL,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;wBACtB,MAAM,OAAO,CAAC;wBACd,IAAI,QAAQ;4BAAE,OAAO;wBACrB,MAAM,KAAK,EAAE,CAAC;wBACd,MAAM,WAAW,CAAC,KAAK,CACrB,MAAM,EACN,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EACnC,EAAE,UAAU,EAAE,QAAQ,EAAE,CACzB,CAAC;wBACF,QAAQ,GAAG,IAAI,CAAC;oBAClB,CAAC,CAAC,EAAE,CAAC;oBACL,OAAO,OAAO,CAAC;gBACjB,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAkC;IAElC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE;QACrD,QAAQ,EAAE,0BAA0B,GAAG,IAAI;KAC5C,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;QACnD,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE;QAC3E,UAAU,EAAE,OAAO,CAAC,QAAQ;KAC7B,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport type { WorkflowCheckpointStore } from \"../domain/workflow/checkpoint.types.ts\";\nimport type { TransportStoreOptions } from \"../domain/transport.types.ts\";\nimport { TransportConflict } from \"../domain/transport.ts\";\nimport { jsonBytes, jsonObject } from \"./transport-json.ts\";\nimport { workflowCheckpointMaxBytes } from \"./workflow-checkpoint.constants.ts\";\nimport type {\n  CheckpointEnvelope,\n  CheckpointRecoveryOptions,\n} from \"./transport-checkpoint.types.ts\";\n\nfunction key(runId: string): string {\n  if (!runId.trim()) throw new Error(\"Checkpoint runId must not be empty\");\n  return `checkpoints/${createHash(\"sha256\").update(runId).digest(\"hex\")}.json`;\n}\n\nfunction envelope(value: unknown): CheckpointEnvelope {\n  if (value === undefined) return { owner: null };\n  if (\n    !value ||\n    typeof value !== \"object\" ||\n    !(\"owner\" in value) ||\n    (value.owner !== null && typeof value.owner !== \"string\")\n  )\n    throw new Error(\"Invalid checkpoint ownership envelope\");\n  return {\n    owner: value.owner,\n    ...(\"checkpoint\" in value ? { checkpoint: value.checkpoint } : {}),\n  };\n}\n\nexport function createWorkflowCheckpointStore(\n  options: TransportStoreOptions,\n): WorkflowCheckpointStore {\n  const { transporter } = options;\n  return {\n    async acquire(runId) {\n      const target = key(runId);\n      const previous = await transporter.read(target, {\n        maxBytes: workflowCheckpointMaxBytes + 1024,\n      });\n      let data = envelope(jsonObject(previous));\n      if (data.owner !== null)\n        throw new Error(\"Workflow is already in use or ownership is unknown\");\n      const owner = randomUUID();\n      data = { ...data, owner };\n      let revision = (\n        await transporter.write(target, jsonBytes(data), {\n          ifRevision: previous?.revision ?? null,\n        })\n      ).revision;\n      let released = false;\n      let pending = Promise.resolve();\n      let closing: Promise<void> | undefined;\n      async function owned() {\n        if (released) throw new Error(\"Checkpoint lease has been released\");\n        const current = await transporter.read(target, {\n          maxBytes: workflowCheckpointMaxBytes + 1024,\n        });\n        if (\n          current?.revision !== revision ||\n          envelope(jsonObject(current)).owner !== owner\n        )\n          throw new TransportConflict(target);\n      }\n      return {\n        async read() {\n          await pending;\n          await owned();\n          return structuredClone(data.checkpoint);\n        },\n        async write(checkpoint) {\n          if (closing)\n            return Promise.reject(\n              new Error(\"Checkpoint lease has been released\"),\n            );\n          const bytes = jsonBytes(checkpoint);\n          if (bytes.byteLength > workflowCheckpointMaxBytes)\n            return Promise.reject(\n              new Error(\n                \"Workflow checkpoint exceeds 16 MiB; store large artifacts separately\",\n              ),\n            );\n          const next = {\n            owner,\n            checkpoint: JSON.parse(Buffer.from(bytes).toString()) as unknown,\n          };\n          const operation = pending.then(async () => {\n            await owned();\n            revision = (\n              await transporter.write(target, jsonBytes(next), {\n                ifRevision: revision,\n              })\n            ).revision;\n            data = next;\n          });\n          pending = operation.catch(() => {});\n          return operation;\n        },\n        release() {\n          closing ??= (async () => {\n            await pending;\n            if (released) return;\n            await owned();\n            await transporter.write(\n              target,\n              jsonBytes({ ...data, owner: null }),\n              { ifRevision: revision },\n            );\n            released = true;\n          })();\n          return closing;\n        },\n      };\n    },\n  };\n}\n\nexport async function recoverWorkflowCheckpoint(\n  options: CheckpointRecoveryOptions,\n): Promise<void> {\n  const target = key(options.runId);\n  const current = await options.transporter.read(target, {\n    maxBytes: workflowCheckpointMaxBytes + 1024,\n  });\n  if (!current || current.revision !== options.revision)\n    throw new TransportConflict(target);\n  const data = envelope(jsonObject(current));\n  await options.transporter.write(target, jsonBytes({ ...data, owner: null }), {\n    ifRevision: current.revision,\n  });\n}\n"]}

package/dist/infrastructure/transport-conversations.d.ts

@@ -1,4 +1,4 @@
 import type { ConversationStore } from "../domain/conversation.types.ts";
-import type { StoredConversationFormat } from "./conversations.types.ts";
 import type { TransportConversationOptions } from "./transport-conversations.types.ts";
-export declare function transportConversations(format: StoredConversationFormat, options: TransportConversationOptions): ConversationStore;
+/** Archives the conversations a base store captures through a transport. */
+export declare function createTransportStore(base: ConversationStore, options: TransportConversationOptions): ConversationStore;

package/dist/infrastructure/transport-conversations.js

@@ -3,23 +3,18 @@ import { mkdir, mkdtemp } from "node:fs/promises";
 import { dirname, join, relative } from "node:path";
 import { invariant } from "../domain/errors.js";
 import { transportKey } from "../domain/transport.js";
-import { harnessConversations } from "./conversations/harness-store.js";
-import { nativeConversations } from "./conversations/native-store.js";
 import { files } from "./conversations/files.js";
-import { validId } from "./conversations/paths.js";
+import { validId } from "./conversations/identity.js";
+import { isConversationStore } from "../domain/conversation.js";
 import { jsonBytes, jsonObject, transportReference } from "./transport-json.js";
 import { archiveFiles, restoreArchiveFiles } from "./transport-archive.js";
 import { safeDestination } from "./files.js";
-const baseStores = {
-    claude: () => nativeConversations("claude"),
-    codex: () => nativeConversations("codex"),
-    harness: harnessConversations,
-    copilot: () => nativeConversations("copilot"),
-    kimi: () => nativeConversations("kimi"),
-};
-export function transportConversations(format, options) {
-    invariant(Object.hasOwn(baseStores, format), "Unsupported conversation format");
-    const native = baseStores[format]();
+/** Archives the conversations a base store captures through a transport. */
+export function createTransportStore(base, options) {
+    invariant(isConversationStore(base) &&
+        typeof base.format === "string" &&
+        base.format.length > 0, "Transported conversations require a base store with a format");
+    const { format } = base;
     const prefix = `conversations/${transportKey(options.namespace)}/${format}`;
     const key = (id) => {
         validId(id);
@@ -27,6 +22,7 @@ export function transportConversations(format, options) {
     };
     return {
         name: `transport:${options.namespace}:${format}`,
+        format,
         async locate(id, repository) {
             const current = await options.transporter.read(key(id));
             invariant(current, "Conversation does not exist");
@@ -54,7 +50,7 @@ export function transportConversations(format, options) {
             const previous = await options.transporter.read(target);
             await mkdir(context.staging, { recursive: true, mode: 0o700 });
             const home = await mkdtemp(join(context.staging, "captured-"));
-            const captured = await native.capture(id, { ...context, home });
+            const captured = await base.capture(id, { ...context, home });
             const root = dirname(captured.file);
             const selected = [
                 captured.file,
@@ -71,7 +67,7 @@ export function transportConversations(format, options) {
             };
         },
         restore(record, context) {
-            return native.restore(record, context);
+            return base.restore(record, context);
         },
     };
 }

package/dist/infrastructure/transport-conversations.js.map

@@ -1 +1 @@
-{"version":3,"file":"transport-conversations.js","sourceRoot":"","sources":["../../src/infrastructure/transport-conversations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,UAAU,GAEZ;IACF,MAAM,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC;IAC3C,KAAK,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC;IACzC,OAAO,EAAE,oBAAoB;IAC7B,OAAO,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,SAAS,CAAC;IAC7C,IAAI,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC;CACxC,CAAC;AAEF,MAAM,UAAU,sBAAsB,CACpC,MAAgC,EAChC,OAAqC;IAErC,SAAS,CACP,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,EACjC,iCAAiC,CAClC,CAAC;IACF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,iBAAiB,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,MAAM,EAAE,CAAC;IAC5E,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,EAAE;QACzB,OAAO,CAAC,EAAE,CAAC,CAAC;QACZ,OAAO,GAAG,MAAM,IAAI,EAAE,QAAQ,CAAC;IACjC,CAAC,CAAC;IACF,OAAO;QACL,IAAI,EAAE,aAAa,OAAO,CAAC,SAAS,IAAI,MAAM,EAAE;QAChD,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU;YACzB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,SAAS,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;YAClD,MAAM,KAAK,GAAY,UAAU,CAAC,OAAO,CAAC,CAAC;YAC3C,SAAS,CACP,KAAK;gBACH,OAAO,KAAK,KAAK,QAAQ;gBACzB,SAAS,IAAI,KAAK;gBAClB,MAAM,IAAI,KAAK;gBACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAChC,4BAA4B,CAC7B,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;YAC1E,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;YAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YAC/C,MAAM,mBAAmB,CACvB,OAAO,CAAC,WAAW,EACnB,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,EACjC,WAAW,CACZ,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5D,OAAO;gBACL,EAAE;gBACF,IAAI;gBACJ,MAAM;gBACN,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;aAC5D,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO;YACvB,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxD,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,QAAQ,GAAG;gBACf,QAAQ,CAAC,IAAI;gBACb,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;aAC9C,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC,OAAO,CAAC,WAAW,EACnB,IAAI,EACJ,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAClE,GAAG,MAAM,IAAI,EAAE,cAAc,UAAU,EAAE,EAAE,CAC5C,CAAC;YACF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAC/C,MAAM,EACN,SAAS,CAAC;gBACR,OAAO;gBACP,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC;aAC1D,CAAC,EACF,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI,EAAE,CAC3C,CAAC;YACF,OAAO;gBACL,GAAG,QAAQ;gBACX,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE;aAChE,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,EAAE,OAAO;YACrB,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { mkdir, mkdtemp } from \"node:fs/promises\";\nimport { dirname, join, relative } from \"node:path\";\nimport type { ConversationStore } from \"../domain/conversation.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport { transportKey } from \"../domain/transport.ts\";\nimport type { StoredConversationFormat } from \"./conversations.types.ts\";\nimport { harnessConversations } from \"./conversations/harness-store.ts\";\nimport type { TransportConversationOptions } from \"./transport-conversations.types.ts\";\nimport { nativeConversations } from \"./conversations/native-store.ts\";\nimport { files } from \"./conversations/files.ts\";\nimport { validId } from \"./conversations/paths.ts\";\nimport { jsonBytes, jsonObject, transportReference } from \"./transport-json.ts\";\nimport { archiveFiles, restoreArchiveFiles } from \"./transport-archive.ts\";\nimport { safeDestination } from \"./files.ts\";\n\nconst baseStores: Readonly<\n  Record<StoredConversationFormat, () => ConversationStore>\n> = {\n  claude: () => nativeConversations(\"claude\"),\n  codex: () => nativeConversations(\"codex\"),\n  harness: harnessConversations,\n  copilot: () => nativeConversations(\"copilot\"),\n  kimi: () => nativeConversations(\"kimi\"),\n};\n\nexport function transportConversations(\n  format: StoredConversationFormat,\n  options: TransportConversationOptions,\n): ConversationStore {\n  invariant(\n    Object.hasOwn(baseStores, format),\n    \"Unsupported conversation format\",\n  );\n  const native = baseStores[format]();\n  const prefix = `conversations/${transportKey(options.namespace)}/${format}`;\n  const key = (id: string) => {\n    validId(id);\n    return `${prefix}/${id}/index`;\n  };\n  return {\n    name: `transport:${options.namespace}:${format}`,\n    async locate(id, repository) {\n      const current = await options.transporter.read(key(id));\n      invariant(current, \"Conversation does not exist\");\n      const value: unknown = jsonObject(current);\n      invariant(\n        value &&\n          typeof value === \"object\" &&\n          \"archive\" in value &&\n          \"file\" in value &&\n          typeof value.file === \"string\",\n        \"Invalid conversation index\",\n      );\n      const staging = join(repository, \".outpost\", \"recovery\", \"conversations\");\n      await mkdir(staging, { recursive: true, mode: 0o700 });\n      const parent = await mkdtemp(join(staging, \"materialized-\"));\n      const destination = join(parent, \"transcript\");\n      await restoreArchiveFiles(\n        options.transporter,\n        transportReference(value.archive),\n        destination,\n      );\n      const file = await safeDestination(destination, value.file);\n      return {\n        id,\n        file,\n        format,\n        reference: { key: current.key, revision: current.revision },\n      };\n    },\n    async capture(id, context) {\n      const target = key(id);\n      const previous = await options.transporter.read(target);\n      await mkdir(context.staging, { recursive: true, mode: 0o700 });\n      const home = await mkdtemp(join(context.staging, \"captured-\"));\n      const captured = await native.capture(id, { ...context, home });\n      const root = dirname(captured.file);\n      const selected = [\n        captured.file,\n        ...(await files(join(root, id, \"subagents\"))),\n      ];\n      const archive = await archiveFiles(\n        options.transporter,\n        root,\n        selected.map((file) => relative(root, file).replaceAll(\"\\\\\", \"/\")),\n        `${prefix}/${id}/snapshots/${randomUUID()}`,\n      );\n      const reference = await options.transporter.write(\n        target,\n        jsonBytes({\n          archive,\n          file: relative(root, captured.file).replaceAll(\"\\\\\", \"/\"),\n        }),\n        { ifRevision: previous?.revision ?? null },\n      );\n      return {\n        ...captured,\n        reference: { key: reference.key, revision: reference.revision },\n      };\n    },\n    restore(record, context) {\n      return native.restore(record, context);\n    },\n  };\n}\n"]}
+{"version":3,"file":"transport-conversations.js","sourceRoot":"","sources":["../../src/infrastructure/transport-conversations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CAClC,IAAuB,EACvB,OAAqC;IAErC,SAAS,CACP,mBAAmB,CAAC,IAAI,CAAC;QACvB,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;QAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EACxB,8DAA8D,CAC/D,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,MAAM,MAAM,GAAG,iBAAiB,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,MAAM,EAAE,CAAC;IAC5E,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,EAAE;QACzB,OAAO,CAAC,EAAE,CAAC,CAAC;QACZ,OAAO,GAAG,MAAM,IAAI,EAAE,QAAQ,CAAC;IACjC,CAAC,CAAC;IACF,OAAO;QACL,IAAI,EAAE,aAAa,OAAO,CAAC,SAAS,IAAI,MAAM,EAAE;QAChD,MAAM;QACN,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU;YACzB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,SAAS,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;YAClD,MAAM,KAAK,GAAY,UAAU,CAAC,OAAO,CAAC,CAAC;YAC3C,SAAS,CACP,KAAK;gBACH,OAAO,KAAK,KAAK,QAAQ;gBACzB,SAAS,IAAI,KAAK;gBAClB,MAAM,IAAI,KAAK;gBACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAChC,4BAA4B,CAC7B,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;YAC1E,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;YAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YAC/C,MAAM,mBAAmB,CACvB,OAAO,CAAC,WAAW,EACnB,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,EACjC,WAAW,CACZ,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5D,OAAO;gBACL,EAAE;gBACF,IAAI;gBACJ,MAAM;gBACN,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;aAC5D,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO;YACvB,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxD,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,QAAQ,GAAG;gBACf,QAAQ,CAAC,IAAI;gBACb,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;aAC9C,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC,OAAO,CAAC,WAAW,EACnB,IAAI,EACJ,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAClE,GAAG,MAAM,IAAI,EAAE,cAAc,UAAU,EAAE,EAAE,CAC5C,CAAC;YACF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAC/C,MAAM,EACN,SAAS,CAAC;gBACR,OAAO;gBACP,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC;aAC1D,CAAC,EACF,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI,EAAE,CAC3C,CAAC;YACF,OAAO;gBACL,GAAG,QAAQ;gBACX,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE;aAChE,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,EAAE,OAAO;YACrB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { mkdir, mkdtemp } from \"node:fs/promises\";\nimport { dirname, join, relative } from \"node:path\";\nimport type { ConversationStore } from \"../domain/conversation.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport { transportKey } from \"../domain/transport.ts\";\nimport type { TransportConversationOptions } from \"./transport-conversations.types.ts\";\nimport { files } from \"./conversations/files.ts\";\nimport { validId } from \"./conversations/identity.ts\";\nimport { isConversationStore } from \"../domain/conversation.ts\";\nimport { jsonBytes, jsonObject, transportReference } from \"./transport-json.ts\";\nimport { archiveFiles, restoreArchiveFiles } from \"./transport-archive.ts\";\nimport { safeDestination } from \"./files.ts\";\n\n/** Archives the conversations a base store captures through a transport. */\nexport function createTransportStore(\n  base: ConversationStore,\n  options: TransportConversationOptions,\n): ConversationStore {\n  invariant(\n    isConversationStore(base) &&\n      typeof base.format === \"string\" &&\n      base.format.length > 0,\n    \"Transported conversations require a base store with a format\",\n  );\n  const { format } = base;\n  const prefix = `conversations/${transportKey(options.namespace)}/${format}`;\n  const key = (id: string) => {\n    validId(id);\n    return `${prefix}/${id}/index`;\n  };\n  return {\n    name: `transport:${options.namespace}:${format}`,\n    format,\n    async locate(id, repository) {\n      const current = await options.transporter.read(key(id));\n      invariant(current, \"Conversation does not exist\");\n      const value: unknown = jsonObject(current);\n      invariant(\n        value &&\n          typeof value === \"object\" &&\n          \"archive\" in value &&\n          \"file\" in value &&\n          typeof value.file === \"string\",\n        \"Invalid conversation index\",\n      );\n      const staging = join(repository, \".outpost\", \"recovery\", \"conversations\");\n      await mkdir(staging, { recursive: true, mode: 0o700 });\n      const parent = await mkdtemp(join(staging, \"materialized-\"));\n      const destination = join(parent, \"transcript\");\n      await restoreArchiveFiles(\n        options.transporter,\n        transportReference(value.archive),\n        destination,\n      );\n      const file = await safeDestination(destination, value.file);\n      return {\n        id,\n        file,\n        format,\n        reference: { key: current.key, revision: current.revision },\n      };\n    },\n    async capture(id, context) {\n      const target = key(id);\n      const previous = await options.transporter.read(target);\n      await mkdir(context.staging, { recursive: true, mode: 0o700 });\n      const home = await mkdtemp(join(context.staging, \"captured-\"));\n      const captured = await base.capture(id, { ...context, home });\n      const root = dirname(captured.file);\n      const selected = [\n        captured.file,\n        ...(await files(join(root, id, \"subagents\"))),\n      ];\n      const archive = await archiveFiles(\n        options.transporter,\n        root,\n        selected.map((file) => relative(root, file).replaceAll(\"\\\\\", \"/\")),\n        `${prefix}/${id}/snapshots/${randomUUID()}`,\n      );\n      const reference = await options.transporter.write(\n        target,\n        jsonBytes({\n          archive,\n          file: relative(root, captured.file).replaceAll(\"\\\\\", \"/\"),\n        }),\n        { ifRevision: previous?.revision ?? null },\n      );\n      return {\n        ...captured,\n        reference: { key: reference.key, revision: reference.revision },\n      };\n    },\n    restore(record, context) {\n      return base.restore(record, context);\n    },\n  };\n}\n"]}

package/dist/infrastructure/transport-task-cache.constants.d.ts

@@ -0,0 +1,2 @@
+export declare const taskCacheMaxBytes: number;
+export declare const taskCachePrefix = "task-cache";

package/dist/infrastructure/transport-task-cache.constants.js

@@ -0,0 +1,3 @@
+export const taskCacheMaxBytes = 16 * 1024 * 1024;
+export const taskCachePrefix = "task-cache";
+//# sourceMappingURL=transport-task-cache.constants.js.map

package/dist/infrastructure/transport-task-cache.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-task-cache.constants.js","sourceRoot":"","sources":["../../src/infrastructure/transport-task-cache.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC","sourcesContent":["export const taskCacheMaxBytes = 16 * 1024 * 1024;\nexport const taskCachePrefix = \"task-cache\";\n"]}

package/dist/infrastructure/transport-task-cache.d.ts

@@ -0,0 +1,3 @@
+import type { TaskCacheStore } from "../domain/workflow/task-cache.types.ts";
+import type { TaskCacheStoreOptions } from "./transport-task-cache.types.ts";
+export declare function createTaskCacheStore(options: TaskCacheStoreOptions): TaskCacheStore;

package/dist/infrastructure/transport-task-cache.js

@@ -0,0 +1,56 @@
+import { TransportConflict } from "../domain/transport.js";
+import { validateTaskCacheEntry } from "../domain/workflow/task-cache-entry.js";
+import { jsonBytes, jsonObject } from "./transport-json.js";
+import { taskCacheMaxBytes, taskCachePrefix, } from "./transport-task-cache.constants.js";
+function key(fingerprint) {
+    if (!/^[0-9a-f]{64}$/.test(fingerprint))
+        throw new Error("Task cache fingerprint must be a SHA-256 hex digest");
+    return `${taskCachePrefix}/${fingerprint}.json`;
+}
+export function createTaskCacheStore(options) {
+    const { transporter } = options;
+    const maxBytes = options.maxBytes ?? taskCacheMaxBytes;
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 1)
+        throw new Error("Task cache maxBytes must be a positive integer");
+    return {
+        async read(fingerprint, access = {}) {
+            const object = await transporter.read(key(fingerprint), {
+                maxBytes,
+                ...(access.signal ? { signal: access.signal } : {}),
+            });
+            if (!object)
+                return undefined;
+            let entry;
+            try {
+                entry = jsonObject(object);
+            }
+            catch {
+                throw new Error("Invalid task cache entry");
+            }
+            validateTaskCacheEntry(entry, fingerprint);
+            return entry;
+        },
+        async write(entry, access = {}) {
+            validateTaskCacheEntry(entry, entry.fingerprint);
+            const target = key(entry.fingerprint);
+            const bytes = jsonBytes(entry);
+            if (bytes.byteLength > maxBytes)
+                throw new Error(`Task cache entry exceeds ${maxBytes} bytes`);
+            const signal = access.signal ? { signal: access.signal } : {};
+            // Reading without the entry limit lets expired or corrupt oversized entries be replaced.
+            const current = await transporter.read(target, signal);
+            try {
+                await transporter.write(target, bytes, {
+                    ifRevision: current?.revision ?? null,
+                    ...signal,
+                });
+            }
+            catch (error) {
+                // A concurrent writer stored a result for the same fingerprint first.
+                if (!(error instanceof TransportConflict))
+                    throw error;
+            }
+        },
+    };
+}
+//# sourceMappingURL=transport-task-cache.js.map

package/dist/infrastructure/transport-task-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-task-cache.js","sourceRoot":"","sources":["../../src/infrastructure/transport-task-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAEhF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EACL,iBAAiB,EACjB,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAG7C,SAAS,GAAG,CAAC,WAAmB;IAC9B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,OAAO,GAAG,eAAe,IAAI,WAAW,OAAO,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAA8B;IAE9B,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,EAAE;YACjC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;gBACtD,QAAQ;gBACR,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD,CAAC,CAAC;YACH,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBACH,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9C,CAAC;YACD,sBAAsB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,EAAE;YAC5B,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ;gBAC7B,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,QAAQ,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,yFAAyF;YACzF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACvD,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE;oBACrC,UAAU,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI;oBACrC,GAAG,MAAM;iBACV,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,sEAAsE;gBACtE,IAAI,CAAC,CAAC,KAAK,YAAY,iBAAiB,CAAC;oBAAE,MAAM,KAAK,CAAC;YACzD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { TransportConflict } from \"../domain/transport.ts\";\nimport { validateTaskCacheEntry } from \"../domain/workflow/task-cache-entry.ts\";\nimport type { TaskCacheStore } from \"../domain/workflow/task-cache.types.ts\";\nimport { jsonBytes, jsonObject } from \"./transport-json.ts\";\nimport {\n  taskCacheMaxBytes,\n  taskCachePrefix,\n} from \"./transport-task-cache.constants.ts\";\nimport type { TaskCacheStoreOptions } from \"./transport-task-cache.types.ts\";\n\nfunction key(fingerprint: string): string {\n  if (!/^[0-9a-f]{64}$/.test(fingerprint))\n    throw new Error(\"Task cache fingerprint must be a SHA-256 hex digest\");\n  return `${taskCachePrefix}/${fingerprint}.json`;\n}\n\nexport function createTaskCacheStore(\n  options: TaskCacheStoreOptions,\n): TaskCacheStore {\n  const { transporter } = options;\n  const maxBytes = options.maxBytes ?? taskCacheMaxBytes;\n  if (!Number.isSafeInteger(maxBytes) || maxBytes < 1)\n    throw new Error(\"Task cache maxBytes must be a positive integer\");\n  return {\n    async read(fingerprint, access = {}) {\n      const object = await transporter.read(key(fingerprint), {\n        maxBytes,\n        ...(access.signal ? { signal: access.signal } : {}),\n      });\n      if (!object) return undefined;\n      let entry: unknown;\n      try {\n        entry = jsonObject(object);\n      } catch {\n        throw new Error(\"Invalid task cache entry\");\n      }\n      validateTaskCacheEntry(entry, fingerprint);\n      return entry;\n    },\n    async write(entry, access = {}) {\n      validateTaskCacheEntry(entry, entry.fingerprint);\n      const target = key(entry.fingerprint);\n      const bytes = jsonBytes(entry);\n      if (bytes.byteLength > maxBytes)\n        throw new Error(`Task cache entry exceeds ${maxBytes} bytes`);\n      const signal = access.signal ? { signal: access.signal } : {};\n      // Reading without the entry limit lets expired or corrupt oversized entries be replaced.\n      const current = await transporter.read(target, signal);\n      try {\n        await transporter.write(target, bytes, {\n          ifRevision: current?.revision ?? null,\n          ...signal,\n        });\n      } catch (error) {\n        // A concurrent writer stored a result for the same fingerprint first.\n        if (!(error instanceof TransportConflict)) throw error;\n      }\n    },\n  };\n}\n"]}

package/dist/infrastructure/transport-task-cache.types.d.ts

@@ -0,0 +1,4 @@
+import type { TransportStoreOptions } from "../domain/transport.types.ts";
+export interface TaskCacheStoreOptions extends TransportStoreOptions {
+    readonly maxBytes?: number;
+}

package/dist/infrastructure/transport-task-cache.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=transport-task-cache.types.js.map

package/dist/infrastructure/transport-task-cache.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-task-cache.types.js","sourceRoot":"","sources":["../../src/infrastructure/transport-task-cache.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { TransportStoreOptions } from \"../domain/transport.types.ts\";\n\nexport interface TaskCacheStoreOptions extends TransportStoreOptions {\n  readonly maxBytes?: number;\n}\n"]}

package/dist/infrastructure/transport.constants.d.ts

@@ -5,4 +5,6 @@ export declare const transportDefaults: Readonly<{
     retryMs: 10;
     maxEntries: 100000;
     mutationAttempts: 100;
+    replacedReadAttempts: 20;
+    replaceAttempts: 50;
 }>;

package/dist/infrastructure/transport.constants.js

@@ -5,5 +5,7 @@ export const transportDefaults = Object.freeze({
     retryMs: 10,
     maxEntries: 100_000,
     mutationAttempts: 100,
+    replacedReadAttempts: 20,
+    replaceAttempts: 50,
 });
 //# sourceMappingURL=transport.constants.js.map

package/dist/infrastructure/transport.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"transport.constants.js","sourceRoot":"","sources":["../../src/infrastructure/transport.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC1B,WAAW,EAAE,IAAI;IACjB,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,OAAO;IACnB,gBAAgB,EAAE,GAAG;CACtB,CAAC,CAAC","sourcesContent":["export const transportDefaults = Object.freeze({\n  maxBytes: 64 * 1024 * 1024,\n  headerBytes: 1024,\n  lockMs: 30_000,\n  retryMs: 10,\n  maxEntries: 100_000,\n  mutationAttempts: 100,\n});\n"]}
+{"version":3,"file":"transport.constants.js","sourceRoot":"","sources":["../../src/infrastructure/transport.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC1B,WAAW,EAAE,IAAI;IACjB,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,OAAO;IACnB,gBAAgB,EAAE,GAAG;IACrB,oBAAoB,EAAE,EAAE;IACxB,eAAe,EAAE,EAAE;CACpB,CAAC,CAAC","sourcesContent":["export const transportDefaults = Object.freeze({\n  maxBytes: 64 * 1024 * 1024,\n  headerBytes: 1024,\n  lockMs: 30_000,\n  retryMs: 10,\n  maxEntries: 100_000,\n  mutationAttempts: 100,\n  replacedReadAttempts: 20,\n  replaceAttempts: 50,\n});\n"]}

package/dist/infrastructure/trigger-server.constants.d.ts

@@ -0,0 +1,2 @@
+export declare const triggerHttpTimeoutMs = 10000;
+export declare const triggerHttpMaxHeaderBytes = 16384;

package/dist/infrastructure/trigger-server.constants.js

@@ -0,0 +1,3 @@
+export const triggerHttpTimeoutMs = 10_000;
+export const triggerHttpMaxHeaderBytes = 16_384;
+//# sourceMappingURL=trigger-server.constants.js.map

package/dist/infrastructure/trigger-server.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-server.constants.js","sourceRoot":"","sources":["../../src/infrastructure/trigger-server.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC","sourcesContent":["export const triggerHttpTimeoutMs = 10_000;\nexport const triggerHttpMaxHeaderBytes = 16_384;\n"]}

package/dist/infrastructure/trigger-server.d.ts

@@ -0,0 +1,3 @@
+import type { TriggerServer, TriggerServerOptions } from "./trigger-server.types.ts";
+/** Serve verified webhooks and publish the jobs their routes select. */
+export declare function serveTriggers(options: TriggerServerOptions): Promise<TriggerServer>;

package/dist/infrastructure/trigger-server.js

@@ -0,0 +1,153 @@
+import { createServer } from "node:http";
+import { triggerQueueRequest } from "../domain/trigger-job.js";
+import { triggerDefaultMaxBytes, triggerMaxBytes, triggerPathPattern, } from "../domain/trigger.constants.js";
+import { triggerHttpMaxHeaderBytes, triggerHttpTimeoutMs, } from "./trigger-server.constants.js";
+class RequestTooLarge extends Error {
+}
+function routeTable(routes) {
+    if (!Array.isArray(routes) || !routes.length)
+        throw new Error("serveTriggers() requires at least one route");
+    const table = new Map();
+    for (const route of routes) {
+        if (!triggerPathPattern.test(route.path) || table.has(route.path))
+            throw new Error(`Invalid or duplicate trigger path: ${route.path}`);
+        if (typeof route.source?.verify !== "function" ||
+            typeof route.on !== "function")
+            throw new Error(`Trigger route ${route.path} requires a source and on()`);
+        table.set(route.path, route);
+    }
+    return table;
+}
+function bodyLimit(value) {
+    const limit = value ?? triggerDefaultMaxBytes;
+    if (!Number.isSafeInteger(limit) || limit <= 0 || limit > triggerMaxBytes)
+        throw new Error("Trigger body limit must be between 1 byte and 25 MiB");
+    return limit;
+}
+async function body(request, limit) {
+    const declared = Number(request.headers["content-length"] ?? 0);
+    if (declared > limit)
+        throw new RequestTooLarge();
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of request) {
+        const bytes = chunk;
+        size += bytes.byteLength;
+        if (size > limit)
+            throw new RequestTooLarge();
+        chunks.push(bytes);
+    }
+    return Buffer.concat(chunks);
+}
+function headers(request) {
+    return Object.fromEntries(Object.entries(request.headers).map(([name, value]) => [
+        name,
+        Array.isArray(value) ? value.join(", ") : value,
+    ]));
+}
+function send(response, reply) {
+    response
+        .writeHead(reply.status, {
+        "cache-control": "no-store",
+        ...(reply.contentType ? { "content-type": reply.contentType } : {}),
+    })
+        .end(reply.body);
+}
+function defaultReply(outcome, job) {
+    if (outcome === "ignored")
+        return { status: 204 };
+    return {
+        status: 202,
+        contentType: "application/json",
+        body: JSON.stringify({ job }),
+    };
+}
+/** Serve verified webhooks and publish the jobs their routes select. */
+export async function serveTriggers(options) {
+    const routes = routeTable(options.routes);
+    const limit = bodyLimit(options.maxBytes);
+    function report(error, failure) {
+        try {
+            options.onError?.(error, failure);
+        }
+        catch {
+            /* Observer failures must not change responses. */
+        }
+    }
+    async function handle(route, request) {
+        let event;
+        try {
+            event = await route.source.verify(request, Date.now());
+        }
+        catch (error) {
+            report(error, { path: route.path, stage: "verify" });
+            return { status: 401 };
+        }
+        const failure = { path: route.path, delivery: event.delivery };
+        const reply = (outcome, job) => route.source.reply?.(outcome, job) ?? defaultReply(outcome, job);
+        let queued;
+        try {
+            const job = await route.on(event);
+            if (job === undefined)
+                return reply("ignored");
+            queued = triggerQueueRequest(`trigger:${route.path}:${event.delivery}`, job);
+        }
+        catch (error) {
+            report(error, { ...failure, stage: "route" });
+            return { status: 500 };
+        }
+        try {
+            await options.queue.enqueue(queued);
+        }
+        catch (error) {
+            report(error, { ...failure, stage: "enqueue" });
+            return { status: 503 };
+        }
+        return reply("accepted", queued.id);
+    }
+    const server = createServer({
+        requestTimeout: triggerHttpTimeoutMs,
+        headersTimeout: triggerHttpTimeoutMs,
+        maxHeaderSize: triggerHttpMaxHeaderBytes,
+    }, async (request, response) => {
+        const path = new URL(request.url ?? "/", "http://trigger").pathname;
+        const route = routes.get(path);
+        if (!route || request.method !== "POST") {
+            request.resume();
+            send(response, { status: route ? 405 : 404 });
+            return;
+        }
+        try {
+            const content = await body(request, limit);
+            send(response, await handle(route, {
+                method: request.method,
+                path,
+                headers: headers(request),
+                body: content,
+            }));
+        }
+        catch (error) {
+            response.setHeader("connection", "close");
+            send(response, {
+                status: error instanceof RequestTooLarge ? 413 : 400,
+            });
+        }
+    });
+    server.setTimeout(triggerHttpTimeoutMs, (socket) => socket.destroy());
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(options.port ?? 0, options.host ?? "127.0.0.1", resolve);
+    });
+    const address = server.address();
+    if (!address || typeof address === "string")
+        throw new Error("Trigger server address unavailable");
+    const host = address.family === "IPv6" ? `[${address.address}]` : address.address;
+    return {
+        url: `http://${host}:${address.port}`,
+        close: () => new Promise((resolve, reject) => {
+            server.close((error) => (error ? reject(error) : resolve()));
+            server.closeIdleConnections();
+        }),
+    };
+}
+//# sourceMappingURL=trigger-server.js.map

package/dist/infrastructure/trigger-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-server.js","sourceRoot":"","sources":["../../src/infrastructure/trigger-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,kBAAkB,GACnB,MAAM,gCAAgC,CAAC;AAOxC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AAQvC,MAAM,eAAgB,SAAQ,KAAK;CAAG;AAEtC,SAAS,UAAU,CAAC,MAA+B;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;QAC1C,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,IACE,OAAO,KAAK,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU;YAC1C,OAAO,KAAK,CAAC,EAAE,KAAK,UAAU;YAE9B,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,IAAI,6BAA6B,CAAC,CAAC;QAC5E,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,MAAM,KAAK,GAAG,KAAK,IAAI,sBAAsB,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,eAAe;QACvE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,OAAwB,EAAE,KAAa;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,IAAI,QAAQ,GAAG,KAAK;QAAE,MAAM,IAAI,eAAe,EAAE,CAAC;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAW,KAAK,CAAC;QAC5B,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QACzB,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,eAAe,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,OAAO,CAAC,OAAwB;IACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACrD,IAAI;QACJ,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK;KAChD,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,QAAwB,EAAE,KAAmB;IACzD,QAAQ;SACL,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE;QACvB,eAAe,EAAE,UAAU;QAC3B,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC;SACD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,OAAuB,EAAE,GAAY;IACzD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAClD,OAAO;QACL,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA6B;IAE7B,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,SAAS,MAAM,CAAC,KAAc,EAAE,OAAuB;QACrD,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;IACH,CAAC;IACD,KAAK,UAAU,MAAM,CACnB,KAAmB,EACnB,OAA2B;QAE3B,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,CAAC,OAAuB,EAAE,GAAY,EAAE,EAAE,CACtD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,GAAG,mBAAmB,CAC1B,WAAW,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,EACzC,GAAG,CACJ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CACzB;QACE,cAAc,EAAE,oBAAoB;QACpC,cAAc,EAAE,oBAAoB;QACpC,aAAa,EAAE,yBAAyB;KACzC,EACD,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC;QACpE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACxC,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,IAAI,CACF,QAAQ,EACR,MAAM,MAAM,CAAC,KAAK,EAAE;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI;gBACJ,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;gBACzB,IAAI,EAAE,OAAO;aACd,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,EAAE;gBACb,MAAM,EAAE,KAAK,YAAY,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;aACrD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CACF,CAAC;IACF,MAAM,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,MAAM,IAAI,GACR,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACvE,OAAO;QACL,GAAG,EAAE,UAAU,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE;QACrC,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAChC,CAAC,CAAC;KACL,CAAC;AACJ,CAAC","sourcesContent":["import { createServer } from \"node:http\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { triggerQueueRequest } from \"../domain/trigger-job.ts\";\nimport {\n  triggerDefaultMaxBytes,\n  triggerMaxBytes,\n  triggerPathPattern,\n} from \"../domain/trigger.constants.ts\";\nimport type {\n  TriggerEvent,\n  TriggerHttpRequest,\n  TriggerOutcome,\n  TriggerReply,\n} from \"../domain/trigger.types.ts\";\nimport {\n  triggerHttpMaxHeaderBytes,\n  triggerHttpTimeoutMs,\n} from \"./trigger-server.constants.ts\";\nimport type {\n  TriggerFailure,\n  TriggerRoute,\n  TriggerServer,\n  TriggerServerOptions,\n} from \"./trigger-server.types.ts\";\n\nclass RequestTooLarge extends Error {}\n\nfunction routeTable(routes: readonly TriggerRoute[]) {\n  if (!Array.isArray(routes) || !routes.length)\n    throw new Error(\"serveTriggers() requires at least one route\");\n  const table = new Map<string, TriggerRoute>();\n  for (const route of routes) {\n    if (!triggerPathPattern.test(route.path) || table.has(route.path))\n      throw new Error(`Invalid or duplicate trigger path: ${route.path}`);\n    if (\n      typeof route.source?.verify !== \"function\" ||\n      typeof route.on !== \"function\"\n    )\n      throw new Error(`Trigger route ${route.path} requires a source and on()`);\n    table.set(route.path, route);\n  }\n  return table;\n}\n\nfunction bodyLimit(value: number | undefined): number {\n  const limit = value ?? triggerDefaultMaxBytes;\n  if (!Number.isSafeInteger(limit) || limit <= 0 || limit > triggerMaxBytes)\n    throw new Error(\"Trigger body limit must be between 1 byte and 25 MiB\");\n  return limit;\n}\n\nasync function body(request: IncomingMessage, limit: number) {\n  const declared = Number(request.headers[\"content-length\"] ?? 0);\n  if (declared > limit) throw new RequestTooLarge();\n  const chunks: Buffer[] = [];\n  let size = 0;\n  for await (const chunk of request) {\n    const bytes: Buffer = chunk;\n    size += bytes.byteLength;\n    if (size > limit) throw new RequestTooLarge();\n    chunks.push(bytes);\n  }\n  return Buffer.concat(chunks);\n}\n\nfunction headers(request: IncomingMessage) {\n  return Object.fromEntries(\n    Object.entries(request.headers).map(([name, value]) => [\n      name,\n      Array.isArray(value) ? value.join(\", \") : value,\n    ]),\n  );\n}\n\nfunction send(response: ServerResponse, reply: TriggerReply) {\n  response\n    .writeHead(reply.status, {\n      \"cache-control\": \"no-store\",\n      ...(reply.contentType ? { \"content-type\": reply.contentType } : {}),\n    })\n    .end(reply.body);\n}\n\nfunction defaultReply(outcome: TriggerOutcome, job?: string): TriggerReply {\n  if (outcome === \"ignored\") return { status: 204 };\n  return {\n    status: 202,\n    contentType: \"application/json\",\n    body: JSON.stringify({ job }),\n  };\n}\n\n/** Serve verified webhooks and publish the jobs their routes select. */\nexport async function serveTriggers(\n  options: TriggerServerOptions,\n): Promise<TriggerServer> {\n  const routes = routeTable(options.routes);\n  const limit = bodyLimit(options.maxBytes);\n  function report(error: unknown, failure: TriggerFailure) {\n    try {\n      options.onError?.(error, failure);\n    } catch {\n      /* Observer failures must not change responses. */\n    }\n  }\n  async function handle(\n    route: TriggerRoute,\n    request: TriggerHttpRequest,\n  ): Promise<TriggerReply> {\n    let event: TriggerEvent;\n    try {\n      event = await route.source.verify(request, Date.now());\n    } catch (error) {\n      report(error, { path: route.path, stage: \"verify\" });\n      return { status: 401 };\n    }\n    const failure = { path: route.path, delivery: event.delivery };\n    const reply = (outcome: TriggerOutcome, job?: string) =>\n      route.source.reply?.(outcome, job) ?? defaultReply(outcome, job);\n    let queued;\n    try {\n      const job = await route.on(event);\n      if (job === undefined) return reply(\"ignored\");\n      queued = triggerQueueRequest(\n        `trigger:${route.path}:${event.delivery}`,\n        job,\n      );\n    } catch (error) {\n      report(error, { ...failure, stage: \"route\" });\n      return { status: 500 };\n    }\n    try {\n      await options.queue.enqueue(queued);\n    } catch (error) {\n      report(error, { ...failure, stage: \"enqueue\" });\n      return { status: 503 };\n    }\n    return reply(\"accepted\", queued.id);\n  }\n  const server = createServer(\n    {\n      requestTimeout: triggerHttpTimeoutMs,\n      headersTimeout: triggerHttpTimeoutMs,\n      maxHeaderSize: triggerHttpMaxHeaderBytes,\n    },\n    async (request, response) => {\n      const path = new URL(request.url ?? \"/\", \"http://trigger\").pathname;\n      const route = routes.get(path);\n      if (!route || request.method !== \"POST\") {\n        request.resume();\n        send(response, { status: route ? 405 : 404 });\n        return;\n      }\n      try {\n        const content = await body(request, limit);\n        send(\n          response,\n          await handle(route, {\n            method: request.method,\n            path,\n            headers: headers(request),\n            body: content,\n          }),\n        );\n      } catch (error) {\n        response.setHeader(\"connection\", \"close\");\n        send(response, {\n          status: error instanceof RequestTooLarge ? 413 : 400,\n        });\n      }\n    },\n  );\n  server.setTimeout(triggerHttpTimeoutMs, (socket) => socket.destroy());\n  await new Promise<void>((resolve, reject) => {\n    server.once(\"error\", reject);\n    server.listen(options.port ?? 0, options.host ?? \"127.0.0.1\", resolve);\n  });\n  const address = server.address();\n  if (!address || typeof address === \"string\")\n    throw new Error(\"Trigger server address unavailable\");\n  const host =\n    address.family === \"IPv6\" ? `[${address.address}]` : address.address;\n  return {\n    url: `http://${host}:${address.port}`,\n    close: () =>\n      new Promise<void>((resolve, reject) => {\n        server.close((error) => (error ? reject(error) : resolve()));\n        server.closeIdleConnections();\n      }),\n  };\n}\n"]}

package/dist/infrastructure/trigger-server.types.d.ts

@@ -0,0 +1,30 @@
+import type { TaskQueue } from "../domain/task-queue.types.ts";
+import type { TriggerJob } from "../domain/trigger-job.types.ts";
+import type { TriggerEvent, TriggerSource } from "../domain/trigger.types.ts";
+export interface TriggerRoute {
+    /** Exact request path, such as `/github`; part of each job identifier. */
+    readonly path: string;
+    readonly source: TriggerSource;
+    /** Maps a verified event to a job, or `undefined` to ignore it; must return promptly. */
+    on(event: TriggerEvent): TriggerJob | undefined | Promise<TriggerJob | undefined>;
+}
+export interface TriggerFailure {
+    readonly path: string;
+    readonly stage: "verify" | "route" | "enqueue";
+    readonly delivery?: string;
+}
+export interface TriggerServerOptions {
+    readonly queue: TaskQueue;
+    readonly routes: readonly TriggerRoute[];
+    /** Defaults to 127.0.0.1; expose through a TLS-terminating proxy. */
+    readonly host?: string;
+    readonly port?: number;
+    /** Request body limit; defaults to 1 MiB, at most 25 MiB. */
+    readonly maxBytes?: number;
+    /** Observes rejected or failed requests; never receives secrets. */
+    readonly onError?: (error: unknown, failure: TriggerFailure) => void;
+}
+export interface TriggerServer {
+    readonly url: string;
+    close(): Promise<void>;
+}

package/dist/infrastructure/trigger-server.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=trigger-server.types.js.map

package/dist/infrastructure/trigger-server.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-server.types.js","sourceRoot":"","sources":["../../src/infrastructure/trigger-server.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { TaskQueue } from \"../domain/task-queue.types.ts\";\nimport type { TriggerJob } from \"../domain/trigger-job.types.ts\";\nimport type { TriggerEvent, TriggerSource } from \"../domain/trigger.types.ts\";\n\nexport interface TriggerRoute {\n  /** Exact request path, such as `/github`; part of each job identifier. */\n  readonly path: string;\n  readonly source: TriggerSource;\n  /** Maps a verified event to a job, or `undefined` to ignore it; must return promptly. */\n  on(\n    event: TriggerEvent,\n  ): TriggerJob | undefined | Promise<TriggerJob | undefined>;\n}\n\nexport interface TriggerFailure {\n  readonly path: string;\n  readonly stage: \"verify\" | \"route\" | \"enqueue\";\n  readonly delivery?: string;\n}\n\nexport interface TriggerServerOptions {\n  readonly queue: TaskQueue;\n  readonly routes: readonly TriggerRoute[];\n  /** Defaults to 127.0.0.1; expose through a TLS-terminating proxy. */\n  readonly host?: string;\n  readonly port?: number;\n  /** Request body limit; defaults to 1 MiB, at most 25 MiB. */\n  readonly maxBytes?: number;\n  /** Observes rejected or failed requests; never receives secrets. */\n  readonly onError?: (error: unknown, failure: TriggerFailure) => void;\n}\n\nexport interface TriggerServer {\n  readonly url: string;\n  close(): Promise<void>;\n}\n"]}

package/dist/infrastructure/webhook-signature.d.ts

@@ -0,0 +1,8 @@
+import type { BinaryLike } from "node:crypto";
+import type { TriggerSecret } from "../domain/trigger.types.ts";
+export declare function webhookSecret(secret: TriggerSecret, name: string): () => Promise<readonly string[]>;
+export declare function sameBytes(left: Buffer, right: Buffer): boolean;
+/** Compares every candidate without stopping early, so timing does not reveal which key matched. */
+export declare function signatureMatches(keys: readonly BinaryLike[], content: readonly BinaryLike[], expected: readonly Buffer[]): boolean;
+export declare function header(headers: Readonly<Record<string, string | undefined>>, name: string): string;
+export declare function timestampWithin(seconds: string, now: number, toleranceMs: number): void;

package/dist/infrastructure/webhook-signature.js

@@ -0,0 +1,43 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+export function webhookSecret(secret, name) {
+    if (typeof secret === "string" && !secret)
+        throw new Error(`${name} secret must not be empty`);
+    if (typeof secret !== "string" && typeof secret !== "function")
+        throw new Error(`${name} secret must be a string or a callback`);
+    return async () => {
+        const values = typeof secret === "string" ? [secret] : await secret();
+        if (!Array.isArray(values) ||
+            !values.length ||
+            values.some((value) => typeof value !== "string" || !value))
+            throw new Error(`${name} secret source returned no usable secret`);
+        return values;
+    };
+}
+export function sameBytes(left, right) {
+    return left.length === right.length && timingSafeEqual(left, right);
+}
+/** Compares every candidate without stopping early, so timing does not reveal which key matched. */
+export function signatureMatches(keys, content, expected) {
+    let matched = false;
+    for (const key of keys) {
+        const hmac = createHmac("sha256", key);
+        for (const part of content)
+            hmac.update(part);
+        const digest = hmac.digest();
+        for (const signature of expected)
+            matched = sameBytes(digest, signature) || matched;
+    }
+    return matched;
+}
+export function header(headers, name) {
+    const value = headers[name];
+    if (!value)
+        throw new Error(`Missing ${name} header`);
+    return value;
+}
+export function timestampWithin(seconds, now, toleranceMs) {
+    const value = /^\d{1,12}$/.test(seconds) ? Number(seconds) * 1000 : NaN;
+    if (!(Math.abs(now - value) <= toleranceMs))
+        throw new Error("Webhook timestamp is outside the accepted window");
+}
+//# sourceMappingURL=webhook-signature.js.map

package/dist/infrastructure/webhook-signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-signature.js","sourceRoot":"","sources":["../../src/infrastructure/webhook-signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAI1D,MAAM,UAAU,aAAa,CAAC,MAAqB,EAAE,IAAY;IAC/D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM;QACvC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,2BAA2B,CAAC,CAAC;IACtD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,UAAU;QAC5D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wCAAwC,CAAC,CAAC;IACnE,OAAO,KAAK,IAAgC,EAAE;QAC5C,MAAM,MAAM,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC;QACtE,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACtB,CAAC,MAAM,CAAC,MAAM;YACd,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC;YAE3D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0CAA0C,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,KAAa;IACnD,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,gBAAgB,CAC9B,IAA2B,EAC3B,OAA8B,EAC9B,QAA2B;IAE3B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,KAAK,MAAM,SAAS,IAAI,QAAQ;YAC9B,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC;IACtD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,MAAM,CACpB,OAAqD,EACrD,IAAY;IAEZ,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,SAAS,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,GAAW,EACX,WAAmB;IAEnB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACxE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,WAAW,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import { createHmac, timingSafeEqual } from \"node:crypto\";\nimport type { BinaryLike } from \"node:crypto\";\nimport type { TriggerSecret } from \"../domain/trigger.types.ts\";\n\nexport function webhookSecret(secret: TriggerSecret, name: string) {\n  if (typeof secret === \"string\" && !secret)\n    throw new Error(`${name} secret must not be empty`);\n  if (typeof secret !== \"string\" && typeof secret !== \"function\")\n    throw new Error(`${name} secret must be a string or a callback`);\n  return async (): Promise<readonly string[]> => {\n    const values = typeof secret === \"string\" ? [secret] : await secret();\n    if (\n      !Array.isArray(values) ||\n      !values.length ||\n      values.some((value) => typeof value !== \"string\" || !value)\n    )\n      throw new Error(`${name} secret source returned no usable secret`);\n    return values;\n  };\n}\n\nexport function sameBytes(left: Buffer, right: Buffer): boolean {\n  return left.length === right.length && timingSafeEqual(left, right);\n}\n\n/** Compares every candidate without stopping early, so timing does not reveal which key matched. */\nexport function signatureMatches(\n  keys: readonly BinaryLike[],\n  content: readonly BinaryLike[],\n  expected: readonly Buffer[],\n): boolean {\n  let matched = false;\n  for (const key of keys) {\n    const hmac = createHmac(\"sha256\", key);\n    for (const part of content) hmac.update(part);\n    const digest = hmac.digest();\n    for (const signature of expected)\n      matched = sameBytes(digest, signature) || matched;\n  }\n  return matched;\n}\n\nexport function header(\n  headers: Readonly<Record<string, string | undefined>>,\n  name: string,\n): string {\n  const value = headers[name];\n  if (!value) throw new Error(`Missing ${name} header`);\n  return value;\n}\n\nexport function timestampWithin(\n  seconds: string,\n  now: number,\n  toleranceMs: number,\n): void {\n  const value = /^\\d{1,12}$/.test(seconds) ? Number(seconds) * 1000 : NaN;\n  if (!(Math.abs(now - value) <= toleranceMs))\n    throw new Error(\"Webhook timestamp is outside the accepted window\");\n}\n"]}

package/dist/infrastructure/workflow-decision-signature.d.ts

@@ -1,4 +1,4 @@
 import type { WorkflowDecision, WorkflowDecisionVerifier } from "../domain/workflow/gates.types.ts";
 import type { WorkflowDecisionSigningOptions, WorkflowDecisionVerifierOptions } from "./workflow-decision-signature.types.ts";
 export declare function signWorkflowDecision(options: WorkflowDecisionSigningOptions): WorkflowDecision;
-export declare function ed25519DecisionVerifier(options: WorkflowDecisionVerifierOptions): WorkflowDecisionVerifier;
+export declare function createEd25519DecisionVerifier(options: WorkflowDecisionVerifierOptions): WorkflowDecisionVerifier;

package/dist/infrastructure/workflow-decision-signature.js

@@ -50,7 +50,7 @@ export function signWorkflowDecision(options) {
         }),
     });
 }
-export function ed25519DecisionVerifier(options) {
+export function createEd25519DecisionVerifier(options) {
     return async (input) => {
         const decision = {
             ...input,