@graphorin/server 0.6.1 → 0.7.0

package/dist/routes/sessions.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.js","names":["filter: { userId?: string; agentId?: string }","opts: { limit?: number }","exportOpts: { includeAuditEntries?: boolean; hash?: boolean }"],"sources":["../../src/routes/sessions.ts"],"sourcesContent":["/**\n * Session REST routes. Delegates to a structurally-typed `SessionApi`\n * supplied by the operator (in practice, the `@graphorin/sessions`\n * package's `SessionManager`); the contract is intentionally open so\n * tests can stub it without dragging the full sessions facade in.\n *\n *   GET    /sessions                     (scope `sessions:read`)\n *   GET    /sessions/:id                 (scope `sessions:read`)\n *   POST   /sessions                     (idempotent; scope `sessions:write`)\n *   DELETE /sessions/:id                 (scope `sessions:write`)\n *   GET    /sessions/:id/messages        (scope `sessions:read`)\n *   GET    /sessions/:id/handoffs        (scope `sessions:read`)\n *   POST   /sessions/:id/export          (scope `sessions:export`)\n *\n * @packageDocumentation\n */\n\nimport type { Context } from 'hono';\nimport { Hono } from 'hono';\nimport { z } from 'zod';\n\nimport type { ServerVariables } from '../internal/context.js';\nimport { createScopeMiddleware } from '../middleware/scope.js';\n\n/**\n * Minimal contract route handlers consume. Real deployments wire\n * `@graphorin/sessions.SessionManager` in directly; tests pass a\n * lighter stub.\n *\n * @stable\n */\nexport interface SessionApi {\n  list(opts: {\n    readonly userId?: string;\n    readonly agentId?: string;\n  }): Promise<ReadonlyArray<unknown>>;\n  get(sessionId: string): Promise<unknown | null>;\n  create(input: {\n    readonly userId: string;\n    readonly agentId: string;\n    readonly sessionId?: string;\n    readonly title?: string;\n    readonly tags?: ReadonlyArray<string>;\n  }): Promise<unknown>;\n  remove(sessionId: string): Promise<boolean>;\n  listMessages(\n    sessionId: string,\n    opts: { readonly limit?: number },\n  ): Promise<ReadonlyArray<unknown>>;\n  listHandoffs(sessionId: string): Promise<ReadonlyArray<unknown>>;\n  exportSession?(\n    sessionId: string,\n    opts: {\n      readonly includeAuditEntries?: boolean;\n      readonly hash?: boolean;\n    },\n  ): Promise<unknown>;\n  replaySession?(\n    sessionId: string,\n    opts: { readonly raw?: boolean; readonly fromMessageId?: string },\n  ): AsyncIterable<unknown>;\n}\n\nconst CreateBodySchema = z\n  .object({\n    userId: z.string().min(1),\n    agentId: z.string().min(1),\n    sessionId: z.string().min(1).optional(),\n    title: z.string().min(1).optional(),\n    tags: z.array(z.string()).optional(),\n  })\n  .strict();\n\nconst MessagesQuerySchema = z\n  .object({\n    limit: z.coerce.number().int().positive().max(1000).optional(),\n  })\n  .strict();\n\nconst ExportBodySchema = z\n  .object({\n    includeAuditEntries: z.boolean().optional(),\n    hash: z.boolean().optional(),\n  })\n  .strict()\n  .default({});\n\nconst _ReplayBodySchema = z\n  .object({\n    raw: z.boolean().optional(),\n    fromMessageId: z.string().min(1).optional(),\n  })\n  .strict()\n  .default({});\n\n/**\n * @stable\n */\nexport interface SessionRoutesDeps {\n  readonly sessions: SessionApi;\n}\n\n/**\n * @stable\n */\nexport function createSessionRoutes(deps: SessionRoutesDeps): Hono<{ Variables: ServerVariables }> {\n  const app = new Hono<{ Variables: ServerVariables }>();\n\n  app.get('/', createScopeMiddleware('sessions:read'), async (c) => {\n    const userId = c.req.query('userId');\n    const agentId = c.req.query('agentId');\n    const filter: { userId?: string; agentId?: string } = {};\n    if (userId !== undefined && userId.length > 0) filter.userId = userId;\n    if (agentId !== undefined && agentId.length > 0) filter.agentId = agentId;\n    const list = await deps.sessions.list(filter);\n    return c.json({ sessions: list });\n  });\n\n  app.post('/', createScopeMiddleware('sessions:write'), async (c) => {\n    const parsed = CreateBodySchema.safeParse(await safelyParseJson(c));\n    if (!parsed.success) {\n      return c.json(\n        {\n          error: 'config-invalid',\n          message: 'Invalid session body.',\n          issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n        },\n        400,\n      );\n    }\n    const session = await deps.sessions.create({\n      userId: parsed.data.userId,\n      agentId: parsed.data.agentId,\n      ...(parsed.data.sessionId !== undefined ? { sessionId: parsed.data.sessionId } : {}),\n      ...(parsed.data.title !== undefined ? { title: parsed.data.title } : {}),\n      ...(parsed.data.tags !== undefined ? { tags: parsed.data.tags } : {}),\n    });\n    return c.json({ session }, 201);\n  });\n\n  app.get('/:id', createScopeMiddleware('sessions:read'), async (c) => {\n    const id = c.req.param('id');\n    const session = await deps.sessions.get(id);\n    if (session === null) {\n      return c.json({ error: 'session-not-found', message: `Session '${id}' not found.` }, 404);\n    }\n    return c.json({ session });\n  });\n\n  app.delete('/:id', createScopeMiddleware('sessions:write'), async (c) => {\n    const id = c.req.param('id');\n    const removed = await deps.sessions.remove(id);\n    if (!removed) {\n      return c.json({ error: 'session-not-found', message: `Session '${id}' not found.` }, 404);\n    }\n    return c.body(null, 204);\n  });\n\n  app.get('/:id/messages', createScopeMiddleware('sessions:read'), async (c) => {\n    const id = c.req.param('id');\n    const parsed = MessagesQuerySchema.safeParse({ limit: c.req.query('limit') });\n    if (!parsed.success) {\n      return c.json(\n        {\n          error: 'config-invalid',\n          message: 'Invalid messages query.',\n          issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n        },\n        400,\n      );\n    }\n    const opts: { limit?: number } = {};\n    if (parsed.data.limit !== undefined) opts.limit = parsed.data.limit;\n    const messages = await deps.sessions.listMessages(id, opts);\n    return c.json({ sessionId: id, messages });\n  });\n\n  app.get('/:id/handoffs', createScopeMiddleware('sessions:read'), async (c) => {\n    const id = c.req.param('id');\n    const handoffs = await deps.sessions.listHandoffs(id);\n    return c.json({ sessionId: id, handoffs });\n  });\n\n  app.post('/:id/export', createScopeMiddleware('sessions:export'), async (c) => {\n    const id = c.req.param('id');\n    if (deps.sessions.exportSession === undefined) {\n      return c.json(\n        { error: 'session-export-unsupported', message: 'Export is not enabled.' },\n        400,\n      );\n    }\n    const parsed = ExportBodySchema.safeParse(await safelyParseJson(c));\n    if (!parsed.success) {\n      return c.json(\n        {\n          error: 'config-invalid',\n          message: 'Invalid export body.',\n          issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n        },\n        400,\n      );\n    }\n    const exportOpts: { includeAuditEntries?: boolean; hash?: boolean } = {};\n    if (parsed.data.includeAuditEntries !== undefined) {\n      exportOpts.includeAuditEntries = parsed.data.includeAuditEntries;\n    }\n    if (parsed.data.hash !== undefined) exportOpts.hash = parsed.data.hash;\n    const result = await deps.sessions.exportSession(id, exportOpts);\n    return c.json({ sessionId: id, export: result });\n  });\n\n  // IP-14: the session-replay route lives in `replay/routes.ts` (the\n  // scope-laddered, audit-backed implementation). The Phase-14a stub\n  // that lived here SHADOWED it (mounted earlier on the same path)\n  // while advertising a `session:<id>/replay` subject the WS grammar\n  // cannot parse - deleted.\n\n  return app;\n}\n\nasync function safelyParseJson(c: Context<{ Variables: ServerVariables }>): Promise<unknown> {\n  try {\n    return await c.req.json();\n  } catch {\n    return {};\n  }\n}\n"],"mappings":";;;;;AA+DA,MAAM,mBAAmB,EACtB,OAAO;CACN,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;CACzB,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC1B,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACvC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACnC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACrC,CAAC,CACD,QAAQ;AAEX,MAAM,sBAAsB,EACzB,OAAO,EACN,OAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAK,CAAC,UAAU,EAC/D,CAAC,CACD,QAAQ;AAEX,MAAM,mBAAmB,EACtB,OAAO;CACN,qBAAqB,EAAE,SAAS,CAAC,UAAU;CAC3C,MAAM,EAAE,SAAS,CAAC,UAAU;CAC7B,CAAC,CACD,QAAQ,CACR,QAAQ,EAAE,CAAC;AAEY,EACvB,OAAO;CACN,KAAK,EAAE,SAAS,CAAC,UAAU;CAC3B,eAAe,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CAC5C,CAAC,CACD,QAAQ,CACR,QAAQ,EAAE,CAAC;;;;AAYd,SAAgB,oBAAoB,MAA+D;CACjG,MAAM,MAAM,IAAI,MAAsC;AAEtD,KAAI,IAAI,KAAK,sBAAsB,gBAAgB,EAAE,OAAO,MAAM;EAChE,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS;EACpC,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;EACtC,MAAMA,SAAgD,EAAE;AACxD,MAAI,WAAW,UAAa,OAAO,SAAS,EAAG,QAAO,SAAS;AAC/D,MAAI,YAAY,UAAa,QAAQ,SAAS,EAAG,QAAO,UAAU;EAClE,MAAM,OAAO,MAAM,KAAK,SAAS,KAAK,OAAO;AAC7C,SAAO,EAAE,KAAK,EAAE,UAAU,MAAM,CAAC;GACjC;AAEF,KAAI,KAAK,KAAK,sBAAsB,iBAAiB,EAAE,OAAO,MAAM;EAClE,MAAM,SAAS,iBAAiB,UAAU,MAAM,gBAAgB,EAAE,CAAC;AACnE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;EAEH,MAAM,UAAU,MAAM,KAAK,SAAS,OAAO;GACzC,QAAQ,OAAO,KAAK;GACpB,SAAS,OAAO,KAAK;GACrB,GAAI,OAAO,KAAK,cAAc,SAAY,EAAE,WAAW,OAAO,KAAK,WAAW,GAAG,EAAE;GACnF,GAAI,OAAO,KAAK,UAAU,SAAY,EAAE,OAAO,OAAO,KAAK,OAAO,GAAG,EAAE;GACvE,GAAI,OAAO,KAAK,SAAS,SAAY,EAAE,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE;GACrE,CAAC;AACF,SAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI;GAC/B;AAEF,KAAI,IAAI,QAAQ,sBAAsB,gBAAgB,EAAE,OAAO,MAAM;EACnE,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,UAAU,MAAM,KAAK,SAAS,IAAI,GAAG;AAC3C,MAAI,YAAY,KACd,QAAO,EAAE,KAAK;GAAE,OAAO;GAAqB,SAAS,YAAY,GAAG;GAAe,EAAE,IAAI;AAE3F,SAAO,EAAE,KAAK,EAAE,SAAS,CAAC;GAC1B;AAEF,KAAI,OAAO,QAAQ,sBAAsB,iBAAiB,EAAE,OAAO,MAAM;EACvE,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAE5B,MAAI,CADY,MAAM,KAAK,SAAS,OAAO,GAAG,CAE5C,QAAO,EAAE,KAAK;GAAE,OAAO;GAAqB,SAAS,YAAY,GAAG;GAAe,EAAE,IAAI;AAE3F,SAAO,EAAE,KAAK,MAAM,IAAI;GACxB;AAEF,KAAI,IAAI,iBAAiB,sBAAsB,gBAAgB,EAAE,OAAO,MAAM;EAC5E,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,SAAS,oBAAoB,UAAU,EAAE,OAAO,EAAE,IAAI,MAAM,QAAQ,EAAE,CAAC;AAC7E,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;EAEH,MAAMC,OAA2B,EAAE;AACnC,MAAI,OAAO,KAAK,UAAU,OAAW,MAAK,QAAQ,OAAO,KAAK;EAC9D,MAAM,WAAW,MAAM,KAAK,SAAS,aAAa,IAAI,KAAK;AAC3D,SAAO,EAAE,KAAK;GAAE,WAAW;GAAI;GAAU,CAAC;GAC1C;AAEF,KAAI,IAAI,iBAAiB,sBAAsB,gBAAgB,EAAE,OAAO,MAAM;EAC5E,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,WAAW,MAAM,KAAK,SAAS,aAAa,GAAG;AACrD,SAAO,EAAE,KAAK;GAAE,WAAW;GAAI;GAAU,CAAC;GAC1C;AAEF,KAAI,KAAK,eAAe,sBAAsB,kBAAkB,EAAE,OAAO,MAAM;EAC7E,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAC5B,MAAI,KAAK,SAAS,kBAAkB,OAClC,QAAO,EAAE,KACP;GAAE,OAAO;GAA8B,SAAS;GAA0B,EAC1E,IACD;EAEH,MAAM,SAAS,iBAAiB,UAAU,MAAM,gBAAgB,EAAE,CAAC;AACnE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;EAEH,MAAMC,aAAgE,EAAE;AACxE,MAAI,OAAO,KAAK,wBAAwB,OACtC,YAAW,sBAAsB,OAAO,KAAK;AAE/C,MAAI,OAAO,KAAK,SAAS,OAAW,YAAW,OAAO,OAAO,KAAK;EAClE,MAAM,SAAS,MAAM,KAAK,SAAS,cAAc,IAAI,WAAW;AAChE,SAAO,EAAE,KAAK;GAAE,WAAW;GAAI,QAAQ;GAAQ,CAAC;GAChD;AAQF,QAAO;;AAGT,eAAe,gBAAgB,GAA8D;AAC3F,KAAI;AACF,SAAO,MAAM,EAAE,IAAI,MAAM;SACnB;AACN,SAAO,EAAE"}
+{"version":3,"file":"sessions.js","names":["filter: { userId?: string; agentId?: string }","opts: { limit?: number }","exportOpts: { includeAuditEntries?: boolean; hash?: boolean }"],"sources":["../../src/routes/sessions.ts"],"sourcesContent":["/**\n * Session REST routes. Delegates to a structurally-typed `SessionApi`\n * supplied by the operator (in practice, the `@graphorin/sessions`\n * package's `SessionManager`); the contract is intentionally open so\n * tests can stub it without dragging the full sessions facade in.\n *\n *   GET    /sessions                     (scope `sessions:read`)\n *   GET    /sessions/:id                 (scope `sessions:read`)\n *   POST   /sessions                     (idempotent; scope `sessions:write`)\n *   DELETE /sessions/:id                 (scope `sessions:write`)\n *   GET    /sessions/:id/messages        (scope `sessions:read`)\n *   GET    /sessions/:id/handoffs        (scope `sessions:read`)\n *   POST   /sessions/:id/export          (scope `sessions:export`)\n *\n * @packageDocumentation\n */\n\nimport type { Context } from 'hono';\nimport { Hono } from 'hono';\nimport { z } from 'zod';\n\nimport type { ServerVariables } from '../internal/context.js';\nimport { createScopeMiddleware } from '../middleware/scope.js';\n\n/**\n * Minimal contract route handlers consume. Real deployments wire\n * `@graphorin/sessions.SessionManager` in directly; tests pass a\n * lighter stub.\n *\n * @stable\n */\nexport interface SessionApi {\n  list(opts: {\n    readonly userId?: string;\n    readonly agentId?: string;\n  }): Promise<ReadonlyArray<unknown>>;\n  get(sessionId: string): Promise<unknown | null>;\n  create(input: {\n    readonly userId: string;\n    readonly agentId: string;\n    readonly sessionId?: string;\n    readonly title?: string;\n    readonly tags?: ReadonlyArray<string>;\n  }): Promise<unknown>;\n  remove(sessionId: string): Promise<boolean>;\n  listMessages(\n    sessionId: string,\n    opts: { readonly limit?: number },\n  ): Promise<ReadonlyArray<unknown>>;\n  listHandoffs(sessionId: string): Promise<ReadonlyArray<unknown>>;\n  exportSession?(\n    sessionId: string,\n    opts: {\n      readonly includeAuditEntries?: boolean;\n      readonly hash?: boolean;\n    },\n  ): Promise<unknown>;\n  replaySession?(\n    sessionId: string,\n    opts: { readonly raw?: boolean; readonly fromMessageId?: string },\n  ): AsyncIterable<unknown>;\n}\n\nconst CreateBodySchema = z\n  .object({\n    userId: z.string().min(1),\n    agentId: z.string().min(1),\n    sessionId: z.string().min(1).optional(),\n    title: z.string().min(1).optional(),\n    tags: z.array(z.string()).optional(),\n  })\n  .strict();\n\nconst MessagesQuerySchema = z\n  .object({\n    limit: z.coerce.number().int().positive().max(1000).optional(),\n  })\n  .strict();\n\nconst ExportBodySchema = z\n  .object({\n    includeAuditEntries: z.boolean().optional(),\n    hash: z.boolean().optional(),\n  })\n  .strict()\n  .default({});\n\nconst _ReplayBodySchema = z\n  .object({\n    raw: z.boolean().optional(),\n    fromMessageId: z.string().min(1).optional(),\n  })\n  .strict()\n  .default({});\n\n/**\n * @stable\n */\nexport interface SessionRoutesDeps {\n  readonly sessions: SessionApi;\n}\n\n/**\n * @stable\n */\nexport function createSessionRoutes(deps: SessionRoutesDeps): Hono<{ Variables: ServerVariables }> {\n  const app = new Hono<{ Variables: ServerVariables }>();\n\n  app.get('/', createScopeMiddleware('sessions:read'), async (c) => {\n    const userId = c.req.query('userId');\n    const agentId = c.req.query('agentId');\n    const filter: { userId?: string; agentId?: string } = {};\n    if (userId !== undefined && userId.length > 0) filter.userId = userId;\n    if (agentId !== undefined && agentId.length > 0) filter.agentId = agentId;\n    const list = await deps.sessions.list(filter);\n    return c.json({ sessions: list });\n  });\n\n  app.post('/', createScopeMiddleware('sessions:write'), async (c) => {\n    const parsed = CreateBodySchema.safeParse(await safelyParseJson(c));\n    if (!parsed.success) {\n      return c.json(\n        {\n          error: 'config-invalid',\n          message: 'Invalid session body.',\n          issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n        },\n        400,\n      );\n    }\n    const session = await deps.sessions.create({\n      userId: parsed.data.userId,\n      agentId: parsed.data.agentId,\n      ...(parsed.data.sessionId !== undefined ? { sessionId: parsed.data.sessionId } : {}),\n      ...(parsed.data.title !== undefined ? { title: parsed.data.title } : {}),\n      ...(parsed.data.tags !== undefined ? { tags: parsed.data.tags } : {}),\n    });\n    return c.json({ session }, 201);\n  });\n\n  // W-107: per-resource requirement - a token scoped to ONE session\n  // reads it on every surface (WS subjects already gated per-resource;\n  // wide two-segment grants keep covering three-segment requirements).\n  app.get(\n    '/:id',\n    createScopeMiddleware((_path, params) => `sessions:read:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const session = await deps.sessions.get(id);\n      if (session === null) {\n        return c.json({ error: 'session-not-found', message: `Session '${id}' not found.` }, 404);\n      }\n      return c.json({ session });\n    },\n  );\n\n  app.delete(\n    '/:id',\n    createScopeMiddleware((_path, params) => `sessions:write:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const removed = await deps.sessions.remove(id);\n      if (!removed) {\n        return c.json({ error: 'session-not-found', message: `Session '${id}' not found.` }, 404);\n      }\n      return c.body(null, 204);\n    },\n  );\n\n  app.get(\n    '/:id/messages',\n    createScopeMiddleware((_path, params) => `sessions:read:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const parsed = MessagesQuerySchema.safeParse({ limit: c.req.query('limit') });\n      if (!parsed.success) {\n        return c.json(\n          {\n            error: 'config-invalid',\n            message: 'Invalid messages query.',\n            issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n          },\n          400,\n        );\n      }\n      const opts: { limit?: number } = {};\n      if (parsed.data.limit !== undefined) opts.limit = parsed.data.limit;\n      const messages = await deps.sessions.listMessages(id, opts);\n      return c.json({ sessionId: id, messages });\n    },\n  );\n\n  app.get(\n    '/:id/handoffs',\n    createScopeMiddleware((_path, params) => `sessions:read:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const handoffs = await deps.sessions.listHandoffs(id);\n      return c.json({ sessionId: id, handoffs });\n    },\n  );\n\n  app.post(\n    '/:id/export',\n    createScopeMiddleware((_path, params) => `sessions:export:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      if (deps.sessions.exportSession === undefined) {\n        return c.json(\n          { error: 'session-export-unsupported', message: 'Export is not enabled.' },\n          400,\n        );\n      }\n      const parsed = ExportBodySchema.safeParse(await safelyParseJson(c));\n      if (!parsed.success) {\n        return c.json(\n          {\n            error: 'config-invalid',\n            message: 'Invalid export body.',\n            issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n          },\n          400,\n        );\n      }\n      const exportOpts: { includeAuditEntries?: boolean; hash?: boolean } = {};\n      if (parsed.data.includeAuditEntries !== undefined) {\n        exportOpts.includeAuditEntries = parsed.data.includeAuditEntries;\n      }\n      if (parsed.data.hash !== undefined) exportOpts.hash = parsed.data.hash;\n      const result = await deps.sessions.exportSession(id, exportOpts);\n      return c.json({ sessionId: id, export: result });\n    },\n  );\n\n  // IP-14: the session-replay route lives in `replay/routes.ts` (the\n  // scope-laddered, audit-backed implementation). The Phase-14a stub\n  // that lived here SHADOWED it (mounted earlier on the same path)\n  // while advertising a `session:<id>/replay` subject the WS grammar\n  // cannot parse - deleted.\n\n  return app;\n}\n\nasync function safelyParseJson(c: Context<{ Variables: ServerVariables }>): Promise<unknown> {\n  try {\n    return await c.req.json();\n  } catch {\n    return {};\n  }\n}\n"],"mappings":";;;;;AA+DA,MAAM,mBAAmB,EACtB,OAAO;CACN,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;CACzB,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC1B,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACvC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACnC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACrC,CAAC,CACD,QAAQ;AAEX,MAAM,sBAAsB,EACzB,OAAO,EACN,OAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAK,CAAC,UAAU,EAC/D,CAAC,CACD,QAAQ;AAEX,MAAM,mBAAmB,EACtB,OAAO;CACN,qBAAqB,EAAE,SAAS,CAAC,UAAU;CAC3C,MAAM,EAAE,SAAS,CAAC,UAAU;CAC7B,CAAC,CACD,QAAQ,CACR,QAAQ,EAAE,CAAC;AAEY,EACvB,OAAO;CACN,KAAK,EAAE,SAAS,CAAC,UAAU;CAC3B,eAAe,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CAC5C,CAAC,CACD,QAAQ,CACR,QAAQ,EAAE,CAAC;;;;AAYd,SAAgB,oBAAoB,MAA+D;CACjG,MAAM,MAAM,IAAI,MAAsC;AAEtD,KAAI,IAAI,KAAK,sBAAsB,gBAAgB,EAAE,OAAO,MAAM;EAChE,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS;EACpC,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;EACtC,MAAMA,SAAgD,EAAE;AACxD,MAAI,WAAW,UAAa,OAAO,SAAS,EAAG,QAAO,SAAS;AAC/D,MAAI,YAAY,UAAa,QAAQ,SAAS,EAAG,QAAO,UAAU;EAClE,MAAM,OAAO,MAAM,KAAK,SAAS,KAAK,OAAO;AAC7C,SAAO,EAAE,KAAK,EAAE,UAAU,MAAM,CAAC;GACjC;AAEF,KAAI,KAAK,KAAK,sBAAsB,iBAAiB,EAAE,OAAO,MAAM;EAClE,MAAM,SAAS,iBAAiB,UAAU,MAAM,gBAAgB,EAAE,CAAC;AACnE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;EAEH,MAAM,UAAU,MAAM,KAAK,SAAS,OAAO;GACzC,QAAQ,OAAO,KAAK;GACpB,SAAS,OAAO,KAAK;GACrB,GAAI,OAAO,KAAK,cAAc,SAAY,EAAE,WAAW,OAAO,KAAK,WAAW,GAAG,EAAE;GACnF,GAAI,OAAO,KAAK,UAAU,SAAY,EAAE,OAAO,OAAO,KAAK,OAAO,GAAG,EAAE;GACvE,GAAI,OAAO,KAAK,SAAS,SAAY,EAAE,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE;GACrE,CAAC;AACF,SAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI;GAC/B;AAKF,KAAI,IACF,QACA,uBAAuB,OAAO,WAAW,iBAAiB,OAAO,KAAK,EACtE,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,UAAU,MAAM,KAAK,SAAS,IAAI,GAAG;AAC3C,MAAI,YAAY,KACd,QAAO,EAAE,KAAK;GAAE,OAAO;GAAqB,SAAS,YAAY,GAAG;GAAe,EAAE,IAAI;AAE3F,SAAO,EAAE,KAAK,EAAE,SAAS,CAAC;GAE7B;AAED,KAAI,OACF,QACA,uBAAuB,OAAO,WAAW,kBAAkB,OAAO,KAAK,EACvE,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAE5B,MAAI,CADY,MAAM,KAAK,SAAS,OAAO,GAAG,CAE5C,QAAO,EAAE,KAAK;GAAE,OAAO;GAAqB,SAAS,YAAY,GAAG;GAAe,EAAE,IAAI;AAE3F,SAAO,EAAE,KAAK,MAAM,IAAI;GAE3B;AAED,KAAI,IACF,iBACA,uBAAuB,OAAO,WAAW,iBAAiB,OAAO,KAAK,EACtE,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,SAAS,oBAAoB,UAAU,EAAE,OAAO,EAAE,IAAI,MAAM,QAAQ,EAAE,CAAC;AAC7E,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;EAEH,MAAMC,OAA2B,EAAE;AACnC,MAAI,OAAO,KAAK,UAAU,OAAW,MAAK,QAAQ,OAAO,KAAK;EAC9D,MAAM,WAAW,MAAM,KAAK,SAAS,aAAa,IAAI,KAAK;AAC3D,SAAO,EAAE,KAAK;GAAE,WAAW;GAAI;GAAU,CAAC;GAE7C;AAED,KAAI,IACF,iBACA,uBAAuB,OAAO,WAAW,iBAAiB,OAAO,KAAK,EACtE,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,WAAW,MAAM,KAAK,SAAS,aAAa,GAAG;AACrD,SAAO,EAAE,KAAK;GAAE,WAAW;GAAI;GAAU,CAAC;GAE7C;AAED,KAAI,KACF,eACA,uBAAuB,OAAO,WAAW,mBAAmB,OAAO,KAAK,EACxE,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAC5B,MAAI,KAAK,SAAS,kBAAkB,OAClC,QAAO,EAAE,KACP;GAAE,OAAO;GAA8B,SAAS;GAA0B,EAC1E,IACD;EAEH,MAAM,SAAS,iBAAiB,UAAU,MAAM,gBAAgB,EAAE,CAAC;AACnE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;EAEH,MAAMC,aAAgE,EAAE;AACxE,MAAI,OAAO,KAAK,wBAAwB,OACtC,YAAW,sBAAsB,OAAO,KAAK;AAE/C,MAAI,OAAO,KAAK,SAAS,OAAW,YAAW,OAAO,OAAO,KAAK;EAClE,MAAM,SAAS,MAAM,KAAK,SAAS,cAAc,IAAI,WAAW;AAChE,SAAO,EAAE,KAAK;GAAE,WAAW;GAAI,QAAQ;GAAQ,CAAC;GAEnD;AAQD,QAAO;;AAGT,eAAe,gBAAgB,GAA8D;AAC3F,KAAI;AACF,SAAO,MAAM,EAAE,IAAI,MAAM;SACnB;AACN,SAAO,EAAE"}

package/dist/routes/tokens.d.ts

@@ -1,6 +1,6 @@
 import { ServerVariables } from "../internal/context.js";
-import { SecretValue } from "@graphorin/security";
 import { Hono } from "hono";
+import { SecretValue } from "@graphorin/security";
 import { AuthTokenStore } from "@graphorin/core/contracts";
 
 //#region src/routes/tokens.d.ts

package/dist/routes/tokens.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.d.ts","names":[],"sources":["../../src/routes/tokens.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;AAwCgE,UAnB/C,gBAAA,CAmB+C;uBAlBzC;mBACJ;;wBAEK;;;;;iBAeR,kBAAA,OAAyB,mBAAmB;aAAkB"}
+{"version":3,"file":"tokens.d.ts","names":[],"sources":["../../src/routes/tokens.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;AAyCgE,UAnB/C,gBAAA,CAmB+C;uBAlBzC;mBACJ;;wBAEK;;;;;iBAeR,kBAAA,OAAyB,mBAAmB;aAAkB"}

package/dist/routes/tokens.js

@@ -1,6 +1,7 @@
 import { createScopeMiddleware } from "../middleware/scope.js";
-import { createToken, listTokens, revokeToken } from "@graphorin/security";
 import { Hono } from "hono";
+import { createToken, listTokens, revokeToken } from "@graphorin/security";
+import { scopeSetMatches, tryParseScope, validateScopeSet } from "@graphorin/security/auth";
 import { z } from "zod";
 
 //#region src/routes/tokens.ts
@@ -43,6 +44,25 @@ function createTokensRoutes(deps) {
 			message: `Environment '${env}' is not in the allowed set.`,
 			allowed: deps.allowedEnvs
 		}, 400);
+		const syntaxErrors = validateScopeSet(parsed.data.scopes);
+		if (syntaxErrors.length > 0) return c.json({
+			error: "config-invalid",
+			message: "One or more requested scopes are syntactically invalid.",
+			issues: syntaxErrors.map((e) => ({ message: e.message }))
+		}, 400);
+		const auth = c.get("state").auth;
+		if (auth.kind === "token") {
+			const denied = parsed.data.scopes.filter((requested) => {
+				const requestedParsed = tryParseScope(requested);
+				if (requestedParsed === void 0) return true;
+				return !scopeSetMatches(auth.grantedScopes, requestedParsed);
+			});
+			if (denied.length > 0) return c.json({
+				error: "scope-escalation-denied",
+				message: "Attenuation-only minting: a token may only mint scopes covered by its own grant.",
+				denied
+			}, 403);
+		}
 		const created = await createToken({
 			tokenStore: deps.tokenStore,
 			pepper: deps.pepper,

package/dist/routes/tokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.js","names":[],"sources":["../../src/routes/tokens.ts"],"sourcesContent":["/**\n * Token-management REST routes. The handlers wrap the\n * `@graphorin/security/auth` CRUD library functions so the operator\n * can mint / list / revoke tokens through the same API surface as\n * `graphorin token` (Phase 15).\n *\n * @packageDocumentation\n */\n\nimport type { AuthTokenStore } from '@graphorin/core/contracts';\nimport { createToken, listTokens, revokeToken, type SecretValue } from '@graphorin/security';\nimport type { Context } from 'hono';\nimport { Hono } from 'hono';\nimport { z } from 'zod';\n\nimport type { ServerVariables } from '../internal/context.js';\nimport { createScopeMiddleware } from '../middleware/scope.js';\n\n/**\n * @stable\n */\nexport interface TokensRoutesDeps {\n  readonly tokenStore: AuthTokenStore;\n  readonly pepper: SecretValue;\n  readonly defaultEnv: string;\n  readonly allowedEnvs: ReadonlyArray<string>;\n}\n\nconst CreateBodySchema = z\n  .object({\n    label: z.string().min(1).optional(),\n    scopes: z.array(z.string().min(3)).min(1),\n    env: z.string().min(1).optional(),\n    expiresInMs: z.number().int().positive().optional(),\n  })\n  .strict();\n\n/**\n * @stable\n */\nexport function createTokensRoutes(deps: TokensRoutesDeps): Hono<{ Variables: ServerVariables }> {\n  const app = new Hono<{ Variables: ServerVariables }>();\n\n  app.get('/', createScopeMiddleware('tokens:list'), async (c) => {\n    const records = await listTokens(deps.tokenStore);\n    // Never reveal hashes or pepper-derived material.\n    const sanitized = records.map((r) => ({\n      id: r.id,\n      label: r.label,\n      scopes: r.scopes,\n      createdAt: r.createdAt,\n      lastUsedAt: r.lastUsedAt,\n      expiresAt: r.expiresAt,\n      revokedAt: r.revokedAt,\n    }));\n    return c.json({ tokens: sanitized });\n  });\n\n  app.post('/', createScopeMiddleware('tokens:create'), async (c) => {\n    const parsed = CreateBodySchema.safeParse(await safelyParseJson(c));\n    if (!parsed.success) {\n      return c.json(\n        {\n          error: 'config-invalid',\n          message: 'Invalid create-token body.',\n          issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n        },\n        400,\n      );\n    }\n    const env = parsed.data.env ?? deps.defaultEnv;\n    if (!deps.allowedEnvs.includes(env)) {\n      return c.json(\n        {\n          error: 'config-invalid',\n          message: `Environment '${env}' is not in the allowed set.`,\n          allowed: deps.allowedEnvs,\n        },\n        400,\n      );\n    }\n    const created = await createToken({\n      tokenStore: deps.tokenStore,\n      pepper: deps.pepper,\n      env,\n      scopes: parsed.data.scopes,\n      ...(parsed.data.label !== undefined ? { label: parsed.data.label } : {}),\n      ...(parsed.data.expiresInMs !== undefined ? { expiresInMs: parsed.data.expiresInMs } : {}),\n    });\n    // Reveal the raw token exactly once - at creation.\n    const raw = await created.raw.use((value) => value);\n    return c.json(\n      {\n        token: {\n          id: created.record.id,\n          label: created.record.label,\n          scopes: created.record.scopes,\n          createdAt: created.record.createdAt,\n          expiresAt: created.record.expiresAt,\n        },\n        raw,\n        warning: 'Store this raw value securely; it is shown exactly once.',\n      },\n      201,\n    );\n  });\n\n  app.delete('/:id', createScopeMiddleware('tokens:revoke'), async (c) => {\n    const id = c.req.param('id');\n    const updated = await revokeToken(deps.tokenStore, id);\n    if (updated === undefined) {\n      return c.json({ error: 'token-not-found', message: `Token '${id}' not found.` }, 404);\n    }\n    return c.body(null, 204);\n  });\n\n  return app;\n}\n\nasync function safelyParseJson(c: Context<{ Variables: ServerVariables }>): Promise<unknown> {\n  try {\n    return await c.req.json();\n  } catch {\n    return {};\n  }\n}\n"],"mappings":";;;;;;AA4BA,MAAM,mBAAmB,EACtB,OAAO;CACN,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACnC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;CACzC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACjC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;CACpD,CAAC,CACD,QAAQ;;;;AAKX,SAAgB,mBAAmB,MAA8D;CAC/F,MAAM,MAAM,IAAI,MAAsC;AAEtD,KAAI,IAAI,KAAK,sBAAsB,cAAc,EAAE,OAAO,MAAM;EAG9D,MAAM,aAFU,MAAM,WAAW,KAAK,WAAW,EAEvB,KAAK,OAAO;GACpC,IAAI,EAAE;GACN,OAAO,EAAE;GACT,QAAQ,EAAE;GACV,WAAW,EAAE;GACb,YAAY,EAAE;GACd,WAAW,EAAE;GACb,WAAW,EAAE;GACd,EAAE;AACH,SAAO,EAAE,KAAK,EAAE,QAAQ,WAAW,CAAC;GACpC;AAEF,KAAI,KAAK,KAAK,sBAAsB,gBAAgB,EAAE,OAAO,MAAM;EACjE,MAAM,SAAS,iBAAiB,UAAU,MAAM,gBAAgB,EAAE,CAAC;AACnE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;EAEH,MAAM,MAAM,OAAO,KAAK,OAAO,KAAK;AACpC,MAAI,CAAC,KAAK,YAAY,SAAS,IAAI,CACjC,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS,gBAAgB,IAAI;GAC7B,SAAS,KAAK;GACf,EACD,IACD;EAEH,MAAM,UAAU,MAAM,YAAY;GAChC,YAAY,KAAK;GACjB,QAAQ,KAAK;GACb;GACA,QAAQ,OAAO,KAAK;GACpB,GAAI,OAAO,KAAK,UAAU,SAAY,EAAE,OAAO,OAAO,KAAK,OAAO,GAAG,EAAE;GACvE,GAAI,OAAO,KAAK,gBAAgB,SAAY,EAAE,aAAa,OAAO,KAAK,aAAa,GAAG,EAAE;GAC1F,CAAC;EAEF,MAAM,MAAM,MAAM,QAAQ,IAAI,KAAK,UAAU,MAAM;AACnD,SAAO,EAAE,KACP;GACE,OAAO;IACL,IAAI,QAAQ,OAAO;IACnB,OAAO,QAAQ,OAAO;IACtB,QAAQ,QAAQ,OAAO;IACvB,WAAW,QAAQ,OAAO;IAC1B,WAAW,QAAQ,OAAO;IAC3B;GACD;GACA,SAAS;GACV,EACD,IACD;GACD;AAEF,KAAI,OAAO,QAAQ,sBAAsB,gBAAgB,EAAE,OAAO,MAAM;EACtE,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAE5B,MADgB,MAAM,YAAY,KAAK,YAAY,GAAG,KACtC,OACd,QAAO,EAAE,KAAK;GAAE,OAAO;GAAmB,SAAS,UAAU,GAAG;GAAe,EAAE,IAAI;AAEvF,SAAO,EAAE,KAAK,MAAM,IAAI;GACxB;AAEF,QAAO;;AAGT,eAAe,gBAAgB,GAA8D;AAC3F,KAAI;AACF,SAAO,MAAM,EAAE,IAAI,MAAM;SACnB;AACN,SAAO,EAAE"}
+{"version":3,"file":"tokens.js","names":[],"sources":["../../src/routes/tokens.ts"],"sourcesContent":["/**\n * Token-management REST routes. The handlers wrap the\n * `@graphorin/security/auth` CRUD library functions so the operator\n * can mint / list / revoke tokens through the same API surface as\n * `graphorin token` (Phase 15).\n *\n * @packageDocumentation\n */\n\nimport type { AuthTokenStore } from '@graphorin/core/contracts';\nimport { createToken, listTokens, revokeToken, type SecretValue } from '@graphorin/security';\nimport { scopeSetMatches, tryParseScope, validateScopeSet } from '@graphorin/security/auth';\nimport type { Context } from 'hono';\nimport { Hono } from 'hono';\nimport { z } from 'zod';\n\nimport type { ServerVariables } from '../internal/context.js';\nimport { createScopeMiddleware } from '../middleware/scope.js';\n\n/**\n * @stable\n */\nexport interface TokensRoutesDeps {\n  readonly tokenStore: AuthTokenStore;\n  readonly pepper: SecretValue;\n  readonly defaultEnv: string;\n  readonly allowedEnvs: ReadonlyArray<string>;\n}\n\nconst CreateBodySchema = z\n  .object({\n    label: z.string().min(1).optional(),\n    scopes: z.array(z.string().min(3)).min(1),\n    env: z.string().min(1).optional(),\n    expiresInMs: z.number().int().positive().optional(),\n  })\n  .strict();\n\n/**\n * @stable\n */\nexport function createTokensRoutes(deps: TokensRoutesDeps): Hono<{ Variables: ServerVariables }> {\n  const app = new Hono<{ Variables: ServerVariables }>();\n\n  app.get('/', createScopeMiddleware('tokens:list'), async (c) => {\n    const records = await listTokens(deps.tokenStore);\n    // Never reveal hashes or pepper-derived material.\n    const sanitized = records.map((r) => ({\n      id: r.id,\n      label: r.label,\n      scopes: r.scopes,\n      createdAt: r.createdAt,\n      lastUsedAt: r.lastUsedAt,\n      expiresAt: r.expiresAt,\n      revokedAt: r.revokedAt,\n    }));\n    return c.json({ tokens: sanitized });\n  });\n\n  app.post('/', createScopeMiddleware('tokens:create'), async (c) => {\n    const parsed = CreateBodySchema.safeParse(await safelyParseJson(c));\n    if (!parsed.success) {\n      return c.json(\n        {\n          error: 'config-invalid',\n          message: 'Invalid create-token body.',\n          issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n        },\n        400,\n      );\n    }\n    const env = parsed.data.env ?? deps.defaultEnv;\n    if (!deps.allowedEnvs.includes(env)) {\n      return c.json(\n        {\n          error: 'config-invalid',\n          message: `Environment '${env}' is not in the allowed set.`,\n          allowed: deps.allowedEnvs,\n        },\n        400,\n      );\n    }\n    // W-106: reject syntactically-invalid scopes up front - the old\n    // z.string().min(3) accepted garbage that would grant nothing.\n    const syntaxErrors = validateScopeSet(parsed.data.scopes);\n    if (syntaxErrors.length > 0) {\n      return c.json(\n        {\n          error: 'config-invalid',\n          message: 'One or more requested scopes are syntactically invalid.',\n          issues: syntaxErrors.map((e) => ({ message: e.message })),\n        },\n        400,\n      );\n    }\n    // W-106: attenuation-only minting. A token principal can only mint\n    // scopes its OWN grant already covers - `tokens:create` alone must\n    // not transitively zero-out the least-privilege catalogue by minting\n    // `admin:*`. Delegation chains therefore narrow monotonically (the\n    // child's `tokens:create` must itself be covered). The anonymous\n    // principal (IP-13 trusted loopback operator, auth disabled) is\n    // exempt: it already holds `admin:*`.\n    const auth = c.get('state').auth;\n    if (auth.kind === 'token') {\n      const denied = parsed.data.scopes.filter((requested) => {\n        const requestedParsed = tryParseScope(requested);\n        if (requestedParsed === undefined) return true;\n        return !scopeSetMatches(auth.grantedScopes, requestedParsed);\n      });\n      if (denied.length > 0) {\n        return c.json(\n          {\n            error: 'scope-escalation-denied',\n            message:\n              'Attenuation-only minting: a token may only mint scopes covered by its own grant.',\n            denied,\n          },\n          403,\n        );\n      }\n    }\n    const created = await createToken({\n      tokenStore: deps.tokenStore,\n      pepper: deps.pepper,\n      env,\n      scopes: parsed.data.scopes,\n      ...(parsed.data.label !== undefined ? { label: parsed.data.label } : {}),\n      ...(parsed.data.expiresInMs !== undefined ? { expiresInMs: parsed.data.expiresInMs } : {}),\n    });\n    // Reveal the raw token exactly once - at creation.\n    const raw = await created.raw.use((value) => value);\n    return c.json(\n      {\n        token: {\n          id: created.record.id,\n          label: created.record.label,\n          scopes: created.record.scopes,\n          createdAt: created.record.createdAt,\n          expiresAt: created.record.expiresAt,\n        },\n        raw,\n        warning: 'Store this raw value securely; it is shown exactly once.',\n      },\n      201,\n    );\n  });\n\n  app.delete('/:id', createScopeMiddleware('tokens:revoke'), async (c) => {\n    const id = c.req.param('id');\n    const updated = await revokeToken(deps.tokenStore, id);\n    if (updated === undefined) {\n      return c.json({ error: 'token-not-found', message: `Token '${id}' not found.` }, 404);\n    }\n    return c.body(null, 204);\n  });\n\n  return app;\n}\n\nasync function safelyParseJson(c: Context<{ Variables: ServerVariables }>): Promise<unknown> {\n  try {\n    return await c.req.json();\n  } catch {\n    return {};\n  }\n}\n"],"mappings":";;;;;;;AA6BA,MAAM,mBAAmB,EACtB,OAAO;CACN,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACnC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;CACzC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACjC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;CACpD,CAAC,CACD,QAAQ;;;;AAKX,SAAgB,mBAAmB,MAA8D;CAC/F,MAAM,MAAM,IAAI,MAAsC;AAEtD,KAAI,IAAI,KAAK,sBAAsB,cAAc,EAAE,OAAO,MAAM;EAG9D,MAAM,aAFU,MAAM,WAAW,KAAK,WAAW,EAEvB,KAAK,OAAO;GACpC,IAAI,EAAE;GACN,OAAO,EAAE;GACT,QAAQ,EAAE;GACV,WAAW,EAAE;GACb,YAAY,EAAE;GACd,WAAW,EAAE;GACb,WAAW,EAAE;GACd,EAAE;AACH,SAAO,EAAE,KAAK,EAAE,QAAQ,WAAW,CAAC;GACpC;AAEF,KAAI,KAAK,KAAK,sBAAsB,gBAAgB,EAAE,OAAO,MAAM;EACjE,MAAM,SAAS,iBAAiB,UAAU,MAAM,gBAAgB,EAAE,CAAC;AACnE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;EAEH,MAAM,MAAM,OAAO,KAAK,OAAO,KAAK;AACpC,MAAI,CAAC,KAAK,YAAY,SAAS,IAAI,CACjC,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS,gBAAgB,IAAI;GAC7B,SAAS,KAAK;GACf,EACD,IACD;EAIH,MAAM,eAAe,iBAAiB,OAAO,KAAK,OAAO;AACzD,MAAI,aAAa,SAAS,EACxB,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,aAAa,KAAK,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE;GAC1D,EACD,IACD;EASH,MAAM,OAAO,EAAE,IAAI,QAAQ,CAAC;AAC5B,MAAI,KAAK,SAAS,SAAS;GACzB,MAAM,SAAS,OAAO,KAAK,OAAO,QAAQ,cAAc;IACtD,MAAM,kBAAkB,cAAc,UAAU;AAChD,QAAI,oBAAoB,OAAW,QAAO;AAC1C,WAAO,CAAC,gBAAgB,KAAK,eAAe,gBAAgB;KAC5D;AACF,OAAI,OAAO,SAAS,EAClB,QAAO,EAAE,KACP;IACE,OAAO;IACP,SACE;IACF;IACD,EACD,IACD;;EAGL,MAAM,UAAU,MAAM,YAAY;GAChC,YAAY,KAAK;GACjB,QAAQ,KAAK;GACb;GACA,QAAQ,OAAO,KAAK;GACpB,GAAI,OAAO,KAAK,UAAU,SAAY,EAAE,OAAO,OAAO,KAAK,OAAO,GAAG,EAAE;GACvE,GAAI,OAAO,KAAK,gBAAgB,SAAY,EAAE,aAAa,OAAO,KAAK,aAAa,GAAG,EAAE;GAC1F,CAAC;EAEF,MAAM,MAAM,MAAM,QAAQ,IAAI,KAAK,UAAU,MAAM;AACnD,SAAO,EAAE,KACP;GACE,OAAO;IACL,IAAI,QAAQ,OAAO;IACnB,OAAO,QAAQ,OAAO;IACtB,QAAQ,QAAQ,OAAO;IACvB,WAAW,QAAQ,OAAO;IAC1B,WAAW,QAAQ,OAAO;IAC3B;GACD;GACA,SAAS;GACV,EACD,IACD;GACD;AAEF,KAAI,OAAO,QAAQ,sBAAsB,gBAAgB,EAAE,OAAO,MAAM;EACtE,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAE5B,MADgB,MAAM,YAAY,KAAK,YAAY,GAAG,KACtC,OACd,QAAO,EAAE,KAAK;GAAE,OAAO;GAAmB,SAAS,UAAU,GAAG;GAAe,EAAE,IAAI;AAEvF,SAAO,EAAE,KAAK,MAAM,IAAI;GACxB;AAEF,QAAO;;AAGT,eAAe,gBAAgB,GAA8D;AAC3F,KAAI;AACF,SAAO,MAAM,EAAE,IAAI,MAAM;SACnB;AACN,SAAO,EAAE"}

package/dist/routes/workflows.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflows.d.ts","names":[],"sources":["../../src/routes/workflows.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;UA0BiB,kBAAA;sBACK;iBACL;;;wBAAe;;;;;iBAiChB,oBAAA,OACR,qBACL;aAAkB"}
+{"version":3,"file":"workflows.d.ts","names":[],"sources":["../../src/routes/workflows.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;UA+BiB,kBAAA;sBACK;iBACL;;;wBAAe;;;;;iBA6ChB,oBAAA,OACR,qBACL;aAAkB"}

package/dist/routes/workflows.js

@@ -1,6 +1,7 @@
-import { WorkflowNotFoundError } from "../errors/index.js";
-import { createScopeMiddleware } from "../middleware/scope.js";
 import { newRequestId } from "../internal/ids.js";
+import { createScopeMiddleware } from "../middleware/scope.js";
+import { WorkflowNotFoundError } from "../errors/index.js";
+import { toWireError } from "../internal/wire-error.js";
 import { Hono } from "hono";
 import { z } from "zod";
 
@@ -13,8 +14,10 @@ const ExecuteBodySchema = z.object({
 }).strict().default({});
 const ResumeBodySchema = z.object({
 	threadId: z.string().min(1),
-	resume: z.unknown().optional()
+	resume: z.unknown().optional(),
+	name: z.string().min(1).optional()
 }).strict();
+const ThreadBodySchema = z.object({ threadId: z.string().min(1) }).strict();
 const ForkBodySchema = z.object({
 	fromThreadId: z.string().min(1),
 	fromCheckpointId: z.string().min(1).optional()
@@ -83,7 +86,11 @@ function createWorkflowRoutes(deps) {
 				message: i.message
 			}))
 		}, 400);
-		if (workflow.resume === void 0) return c.json({
+		if (parsed.data.name !== void 0 && workflow.resolveAwakeable === void 0) return c.json({
+			error: "workflow-resume-unsupported",
+			message: `Workflow '${id}' does not implement resolveAwakeable().`
+		}, 400);
+		if (parsed.data.name === void 0 && workflow.resume === void 0) return c.json({
 			error: "workflow-resume-unsupported",
 			message: `Workflow '${id}' does not implement resume().`
 		}, 400);
@@ -105,6 +112,87 @@ function createWorkflowRoutes(deps) {
 			subscribe: { websocket: subject }
 		}, 202);
 	});
+	app.post("/:id/retry", createScopeMiddleware((_path, params) => `workflows:resume:${params.id}`), async (c) => {
+		const id = c.req.param("id");
+		const workflow = deps.workflows.get(id);
+		if (workflow === void 0) {
+			const err = new WorkflowNotFoundError(id);
+			return c.json({
+				error: err.kind,
+				message: err.message
+			}, 404);
+		}
+		const parsed = ThreadBodySchema.safeParse(await safelyParseJson(c));
+		if (!parsed.success) return c.json({
+			error: "config-invalid",
+			message: "Invalid retry body.",
+			issues: parsed.error.issues.map((i) => ({
+				path: i.path,
+				message: i.message
+			}))
+		}, 400);
+		if (workflow.retry === void 0) return c.json({
+			error: "workflow-retry-unsupported",
+			message: `Workflow '${id}' does not implement retry().`
+		}, 400);
+		const runId = newRunId();
+		const tracker = deps.runs.start(runId, {
+			kind: "workflow",
+			workflowId: id,
+			threadId: parsed.data.threadId
+		});
+		const subject = `workflow:${id}/runs/${runId}/events`;
+		const retryFn = workflow.retry.bind(workflow);
+		backgroundIterate(() => retryFn(parsed.data.threadId, { signal: tracker.signal }), tracker, deps.runs, runId, {
+			subject,
+			...deps.dispatcher !== void 0 ? { dispatcher: deps.dispatcher } : {}
+		});
+		return c.json({
+			runId,
+			threadId: parsed.data.threadId,
+			status: "running",
+			subscribe: { websocket: subject }
+		}, 202);
+	});
+	app.post("/:id/tick", createScopeMiddleware((_path, params) => `workflows:resume:${params.id}`), async (c) => {
+		const id = c.req.param("id");
+		const workflow = deps.workflows.get(id);
+		if (workflow === void 0) {
+			const err = new WorkflowNotFoundError(id);
+			return c.json({
+				error: err.kind,
+				message: err.message
+			}, 404);
+		}
+		const parsed = ThreadBodySchema.safeParse(await safelyParseJson(c));
+		if (!parsed.success) return c.json({
+			error: "config-invalid",
+			message: "Invalid tick body.",
+			issues: parsed.error.issues.map((i) => ({
+				path: i.path,
+				message: i.message
+			}))
+		}, 400);
+		if (workflow.tick === void 0) return c.json({
+			error: "workflow-tick-unsupported",
+			message: `Workflow '${id}' does not implement tick().`
+		}, 400);
+		try {
+			const result = await workflow.tick(parsed.data.threadId);
+			return c.json({
+				workflowId: id,
+				threadId: parsed.data.threadId,
+				fired: result.fired,
+				nextWakeAt: result.nextWakeAt
+			});
+		} catch (err) {
+			const wire = toWireError(err);
+			return c.json({
+				error: wire.code,
+				message: wire.message
+			}, wire.code === "thread-not-found" ? 404 : 400);
+		}
+	});
 	app.get("/:id/state", createScopeMiddleware((_path, params) => `workflows:read:${params.id}`), async (c) => {
 		const id = c.req.param("id");
 		const workflow = deps.workflows.get(id);
@@ -157,9 +245,28 @@ function createWorkflowRoutes(deps) {
 			checkpoints
 		});
 	});
+	app.delete("/:id/threads/:threadId", createScopeMiddleware((_path, params) => `workflows:delete:${params.id}`), async (c) => {
+		const id = c.req.param("id");
+		const threadId = c.req.param("threadId");
+		const workflow = deps.workflows.get(id);
+		if (workflow === void 0) {
+			const err = new WorkflowNotFoundError(id);
+			return c.json({
+				error: err.kind,
+				message: err.message
+			}, 404);
+		}
+		if (workflow.deleteThread === void 0) return c.json({
+			error: "workflow-delete-thread-unsupported",
+			message: "Workflow does not implement deleteThread()."
+		}, 400);
+		await workflow.deleteThread(threadId);
+		return c.body(null, 204);
+	});
 	app.post("/:id/fork", createScopeMiddleware((_path, params) => `workflows:execute:${params.id}`), async (c) => {
 		const id = c.req.param("id");
-		if (deps.workflows.get(id) === void 0) {
+		const workflow = deps.workflows.get(id);
+		if (workflow === void 0) {
 			const err = new WorkflowNotFoundError(id);
 			return c.json({
 				error: err.kind,
@@ -175,12 +282,38 @@ function createWorkflowRoutes(deps) {
 				message: i.message
 			}))
 		}, 400);
-		return c.json({
-			error: "workflow-fork-not-implemented",
-			message: "Workflow fork is not implemented on the server surface yet. Fork the thread programmatically via the workflow API.",
-			workflowId: id,
-			fork: parsed.data
-		}, 501);
+		if (workflow.fork === void 0) return c.json({
+			error: "workflow-fork-unsupported",
+			message: `Workflow '${id}' does not implement fork().`
+		}, 400);
+		try {
+			let fromCheckpointId = parsed.data.fromCheckpointId;
+			if (fromCheckpointId === void 0) {
+				if (workflow.getState === void 0) return c.json({
+					error: "config-invalid",
+					message: "fromCheckpointId is required: this workflow does not expose getState() to derive the latest checkpoint."
+				}, 400);
+				const state = await workflow.getState(parsed.data.fromThreadId);
+				if (typeof state?.checkpointId !== "string") return c.json({
+					error: "checkpoint-not-found",
+					message: `Thread '${parsed.data.fromThreadId}' has no checkpoint to fork from.`
+				}, 404);
+				fromCheckpointId = state.checkpointId;
+			}
+			const forked = await workflow.fork(parsed.data.fromThreadId, fromCheckpointId);
+			return c.json({
+				workflowId: id,
+				fromThreadId: parsed.data.fromThreadId,
+				fromCheckpointId,
+				newThreadId: forked.newThreadId
+			}, 201);
+		} catch (err) {
+			const wire = toWireError(err);
+			return c.json({
+				error: wire.code,
+				message: wire.message
+			}, wire.code === "thread-not-found" || wire.code === "checkpoint-not-found" ? 404 : 400);
+		}
 	});
 	return app;
 }
@@ -203,7 +336,7 @@ function backgroundExecute(workflow, body, tracker, runs, runId, streaming) {
 				type: "workflow.error",
 				payload: {
 					runId,
-					message: err instanceof Error ? err.message : String(err)
+					...toWireError(err)
 				}
 			});
 			runs.complete(runId, tracker.signal.aborted ? "aborted" : "failed", err);
@@ -211,16 +344,29 @@ function backgroundExecute(workflow, body, tracker, runs, runId, streaming) {
 	})();
 }
 /**
-* periphery-01: mirror of {@link backgroundExecute} for the resume
-* path - iterate `workflow.resume(threadId, {resume})`, emit every
-* event on the run subject, and complete the tracked run.
+* periphery-01 / W-119: mirror of {@link backgroundExecute} for the
+* resume path. A `name` in the body routes through
+* `resolveAwakeable(threadId, name, resume)`; a plain resume goes
+* through `resume(threadId, {resume})`. Both receive the tracker's
+* AbortSignal so `runs.abort(runId)` actually cancels the iteration
+* (parity with backgroundExecute - the old path dropped it).
 */
 function backgroundResume(workflow, body, tracker, runs, runId, streaming) {
-	const resume = workflow.resume;
-	if (resume === void 0) return;
+	const { resume, resolveAwakeable } = workflow;
+	const name = body.name;
+	const factory = name !== void 0 && resolveAwakeable !== void 0 ? () => resolveAwakeable.call(workflow, body.threadId, name, body.resume, { signal: tracker.signal }) : resume !== void 0 ? () => resume.call(workflow, body.threadId, body.resume !== void 0 ? { resume: body.resume } : {}, { signal: tracker.signal }) : void 0;
+	if (factory === void 0) return;
+	backgroundIterate(factory, tracker, runs, runId, streaming);
+}
+/**
+* W-119: shared background iteration for resume / named resume / retry -
+* emit every event on the run subject, complete the tracked run, wrap
+* failures in the W-052 wire envelope.
+*/
+function backgroundIterate(factory, tracker, runs, runId, streaming) {
 	(async () => {
 		try {
-			for await (const ev of resume.call(workflow, body.threadId, body.resume !== void 0 ? { resume: body.resume } : {})) {
+			for await (const ev of factory()) {
 				if (tracker.signal.aborted) break;
 				const type = typeof ev.type === "string" ? ev.type : "workflow.event";
 				streaming.dispatcher?.emit(streaming.subject, {
@@ -234,7 +380,7 @@ function backgroundResume(workflow, body, tracker, runs, runId, streaming) {
 				type: "workflow.error",
 				payload: {
 					runId,
-					message: err instanceof Error ? err.message : String(err)
+					...toWireError(err)
 				}
 			});
 			runs.complete(runId, tracker.signal.aborted ? "aborted" : "failed", err);

package/dist/routes/workflows.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflows.js","names":["opts: { signal?: AbortSignal; threadId?: string }"],"sources":["../../src/routes/workflows.ts"],"sourcesContent":["/**\n * Workflow REST routes.\n *\n *   POST   /workflows/:id/execute              (idempotent; scope `workflows:execute`)\n *   POST   /workflows/:id/resume               (scope `workflows:resume[:id]`)\n *   GET    /workflows/:id/state                (scope `workflows:read`)\n *   GET    /workflows/:id/checkpoints          (scope `workflows:read`)\n *   POST   /workflows/:id/fork                 (scope `workflows:execute`)\n *\n * @packageDocumentation\n */\n\nimport type { Context } from 'hono';\nimport { Hono } from 'hono';\nimport { z } from 'zod';\n\nimport { WorkflowNotFoundError } from '../errors/index.js';\nimport type { ServerVariables } from '../internal/context.js';\nimport { newRequestId } from '../internal/ids.js';\nimport { createScopeMiddleware } from '../middleware/scope.js';\nimport type { WorkflowRegistry } from '../registry/index.js';\nimport type { RunStateTracker } from '../runtime/run-state.js';\n\n/**\n * @stable\n */\nexport interface WorkflowRoutesDeps {\n  readonly workflows: WorkflowRegistry;\n  readonly runs: RunStateTracker;\n  readonly newRunId?: () => string;\n  /** Streaming dispatcher (IP-2): workflow events reach the run subject. */\n  readonly dispatcher?: import('../ws/dispatcher.js').WsDispatcher;\n}\n\nconst ExecuteBodySchema = z\n  .object({\n    input: z.unknown().optional(),\n    threadId: z.string().min(1).optional(),\n    sessionId: z.string().min(1).optional(),\n    userId: z.string().min(1).optional(),\n  })\n  .strict()\n  .default({});\n\nconst ResumeBodySchema = z\n  .object({\n    threadId: z.string().min(1),\n    resume: z.unknown().optional(),\n  })\n  .strict();\n\nconst ForkBodySchema = z\n  .object({\n    fromThreadId: z.string().min(1),\n    fromCheckpointId: z.string().min(1).optional(),\n  })\n  .strict();\n\n/**\n * @stable\n */\nexport function createWorkflowRoutes(\n  deps: WorkflowRoutesDeps,\n): Hono<{ Variables: ServerVariables }> {\n  const app = new Hono<{ Variables: ServerVariables }>();\n  const newRunId = deps.newRunId ?? newRequestId;\n\n  app.get('/', createScopeMiddleware('workflows:read'), (c) =>\n    c.json({ workflows: deps.workflows.list() }),\n  );\n\n  app.post(\n    '/:id/execute',\n    createScopeMiddleware((_path, params) => `workflows:execute:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const workflow = deps.workflows.get(id);\n      if (workflow === undefined) {\n        const err = new WorkflowNotFoundError(id);\n        return c.json({ error: err.kind, message: err.message }, 404);\n      }\n      const parsed = ExecuteBodySchema.safeParse(await safelyParseJson(c));\n      if (!parsed.success) {\n        return c.json(\n          {\n            error: 'config-invalid',\n            message: 'Invalid execute body.',\n            issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n          },\n          400,\n        );\n      }\n      const runId = newRunId();\n      const tracker = deps.runs.start(runId, {\n        kind: 'workflow',\n        workflowId: id,\n        ...(parsed.data.threadId !== undefined ? { threadId: parsed.data.threadId } : {}),\n        ...(parsed.data.sessionId !== undefined ? { sessionId: parsed.data.sessionId } : {}),\n        ...(parsed.data.userId !== undefined ? { userId: parsed.data.userId } : {}),\n      });\n      // Workflows are streaming-first; the REST endpoint kicks off the\n      // run in the background and returns 202 + runId. The actual\n      // event stream is consumed via WebSocket / SSE in Phase 14b.\n      const subject = `workflow:${id}/runs/${runId}/events`;\n      backgroundExecute(workflow, parsed.data, tracker, deps.runs, runId, {\n        subject,\n        ...(deps.dispatcher !== undefined ? { dispatcher: deps.dispatcher } : {}),\n      });\n      return c.json(\n        {\n          runId,\n          status: 'running',\n          subscribe: {\n            // IP-2: the previously-advertised SSE URL was never\n            // mounted; the WS subject (now in the grammar) delivers.\n            websocket: subject,\n          },\n        },\n        202,\n      );\n    },\n  );\n\n  app.post(\n    '/:id/resume',\n    createScopeMiddleware((_path, params) => `workflows:resume:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const workflow = deps.workflows.get(id);\n      if (workflow === undefined) {\n        const err = new WorkflowNotFoundError(id);\n        return c.json({ error: err.kind, message: err.message }, 404);\n      }\n      const parsed = ResumeBodySchema.safeParse(await safelyParseJson(c));\n      if (!parsed.success) {\n        return c.json(\n          {\n            error: 'config-invalid',\n            message: 'Invalid resume body.',\n            issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n          },\n          400,\n        );\n      }\n      if (workflow.resume === undefined) {\n        return c.json(\n          {\n            error: 'workflow-resume-unsupported',\n            message: `Workflow '${id}' does not implement resume().`,\n          },\n          400,\n        );\n      }\n      const runId = newRunId();\n      // periphery-01: the old handler declared the run and returned 202\n      // WITHOUT ever calling `workflow.resume(...)` - the run sat\n      // `pending` forever and the advertised SSE URL was never mounted.\n      // Resume now mirrors execute: background-iterate + emit on the WS\n      // subject; the tracker completes the run.\n      const tracker = deps.runs.start(runId, {\n        kind: 'workflow',\n        workflowId: id,\n        threadId: parsed.data.threadId,\n      });\n      const subject = `workflow:${id}/runs/${runId}/events`;\n      backgroundResume(workflow, parsed.data, tracker, deps.runs, runId, {\n        subject,\n        ...(deps.dispatcher !== undefined ? { dispatcher: deps.dispatcher } : {}),\n      });\n      return c.json(\n        {\n          runId,\n          threadId: parsed.data.threadId,\n          status: 'running',\n          subscribe: {\n            websocket: subject,\n          },\n        },\n        202,\n      );\n    },\n  );\n\n  app.get(\n    '/:id/state',\n    createScopeMiddleware((_path, params) => `workflows:read:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const workflow = deps.workflows.get(id);\n      if (workflow === undefined) {\n        const err = new WorkflowNotFoundError(id);\n        return c.json({ error: err.kind, message: err.message }, 404);\n      }\n      const threadId = c.req.query('threadId');\n      if (threadId === undefined || threadId.length === 0) {\n        return c.json(\n          { error: 'config-invalid', message: 'Query parameter `threadId` is required.' },\n          400,\n        );\n      }\n      if (workflow.getState === undefined) {\n        return c.json(\n          {\n            error: 'workflow-state-unsupported',\n            message: 'Workflow does not implement getState().',\n          },\n          400,\n        );\n      }\n      const state = await workflow.getState(threadId);\n      return c.json({ workflowId: id, threadId, state });\n    },\n  );\n\n  app.get(\n    '/:id/checkpoints',\n    createScopeMiddleware((_path, params) => `workflows:read:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const workflow = deps.workflows.get(id);\n      if (workflow === undefined) {\n        const err = new WorkflowNotFoundError(id);\n        return c.json({ error: err.kind, message: err.message }, 404);\n      }\n      const threadId = c.req.query('threadId');\n      if (threadId === undefined || threadId.length === 0) {\n        return c.json(\n          { error: 'config-invalid', message: 'Query parameter `threadId` is required.' },\n          400,\n        );\n      }\n      if (workflow.listCheckpoints === undefined) {\n        return c.json(\n          {\n            error: 'workflow-checkpoints-unsupported',\n            message: 'Workflow does not implement listCheckpoints().',\n          },\n          400,\n        );\n      }\n      const checkpoints = await workflow.listCheckpoints(threadId);\n      return c.json({ workflowId: id, threadId, checkpoints });\n    },\n  );\n\n  app.post(\n    '/:id/fork',\n    createScopeMiddleware((_path, params) => `workflows:execute:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const workflow = deps.workflows.get(id);\n      if (workflow === undefined) {\n        const err = new WorkflowNotFoundError(id);\n        return c.json({ error: err.kind, message: err.message }, 404);\n      }\n      const parsed = ForkBodySchema.safeParse(await safelyParseJson(c));\n      if (!parsed.success) {\n        return c.json(\n          {\n            error: 'config-invalid',\n            message: 'Invalid fork body.',\n            issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n          },\n          400,\n        );\n      }\n      // periphery-01: the old handler returned a 202 that forked\n      // nothing - the same class of lie IP-14 removed from the agent\n      // resume route. Honest 501 until the workflow fork primitive is\n      // threaded through the registry.\n      return c.json(\n        {\n          error: 'workflow-fork-not-implemented',\n          message:\n            'Workflow fork is not implemented on the server surface yet. ' +\n            'Fork the thread programmatically via the workflow API.',\n          workflowId: id,\n          fork: parsed.data,\n        },\n        501,\n      );\n    },\n  );\n\n  return app;\n}\n\nfunction backgroundExecute(\n  workflow: NonNullable<ReturnType<WorkflowRegistry['get']>>,\n  body: z.infer<typeof ExecuteBodySchema>,\n  tracker: { readonly signal: AbortSignal },\n  runs: RunStateTracker,\n  runId: string,\n  streaming: {\n    readonly subject: string;\n    readonly dispatcher?: import('../ws/dispatcher.js').WsDispatcher;\n  },\n): void {\n  const opts: { signal?: AbortSignal; threadId?: string } = { signal: tracker.signal };\n  if (body.threadId !== undefined) opts.threadId = body.threadId;\n  void (async () => {\n    try {\n      // IP-2: every workflow event reaches the dispatcher - the old\n      // loop iterated the stream and threw each event away.\n      for await (const ev of workflow.execute(body.input ?? {}, opts)) {\n        if (tracker.signal.aborted) break;\n        const type =\n          typeof (ev as { type?: unknown }).type === 'string'\n            ? (ev as { type: string }).type\n            : 'workflow.event';\n        streaming.dispatcher?.emit(streaming.subject, { type, payload: ev });\n      }\n      runs.complete(runId, tracker.signal.aborted ? 'aborted' : 'completed');\n    } catch (err) {\n      streaming.dispatcher?.emit(streaming.subject, {\n        type: 'workflow.error',\n        payload: { runId, message: err instanceof Error ? err.message : String(err) },\n      });\n      runs.complete(runId, tracker.signal.aborted ? 'aborted' : 'failed', err);\n    }\n  })();\n}\n\n/**\n * periphery-01: mirror of {@link backgroundExecute} for the resume\n * path - iterate `workflow.resume(threadId, {resume})`, emit every\n * event on the run subject, and complete the tracked run.\n */\nfunction backgroundResume(\n  workflow: NonNullable<ReturnType<WorkflowRegistry['get']>>,\n  body: z.infer<typeof ResumeBodySchema>,\n  tracker: { readonly signal: AbortSignal },\n  runs: RunStateTracker,\n  runId: string,\n  streaming: {\n    readonly subject: string;\n    readonly dispatcher?: import('../ws/dispatcher.js').WsDispatcher;\n  },\n): void {\n  const resume = workflow.resume;\n  if (resume === undefined) return;\n  void (async () => {\n    try {\n      for await (const ev of resume.call(\n        workflow,\n        body.threadId,\n        body.resume !== undefined ? { resume: body.resume } : {},\n      )) {\n        if (tracker.signal.aborted) break;\n        const type =\n          typeof (ev as { type?: unknown }).type === 'string'\n            ? (ev as { type: string }).type\n            : 'workflow.event';\n        streaming.dispatcher?.emit(streaming.subject, { type, payload: ev });\n      }\n      runs.complete(runId, tracker.signal.aborted ? 'aborted' : 'completed');\n    } catch (err) {\n      streaming.dispatcher?.emit(streaming.subject, {\n        type: 'workflow.error',\n        payload: { runId, message: err instanceof Error ? err.message : String(err) },\n      });\n      runs.complete(runId, tracker.signal.aborted ? 'aborted' : 'failed', err);\n    }\n  })();\n}\n\nasync function safelyParseJson(c: Context<{ Variables: ServerVariables }>): Promise<unknown> {\n  try {\n    return await c.req.json();\n  } catch {\n    return {};\n  }\n}\n"],"mappings":";;;;;;;AAkCA,MAAM,oBAAoB,EACvB,OAAO;CACN,OAAO,EAAE,SAAS,CAAC,UAAU;CAC7B,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACvC,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACrC,CAAC,CACD,QAAQ,CACR,QAAQ,EAAE,CAAC;AAEd,MAAM,mBAAmB,EACtB,OAAO;CACN,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC3B,QAAQ,EAAE,SAAS,CAAC,UAAU;CAC/B,CAAC,CACD,QAAQ;AAEX,MAAM,iBAAiB,EACpB,OAAO;CACN,cAAc,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC/B,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CAC/C,CAAC,CACD,QAAQ;;;;AAKX,SAAgB,qBACd,MACsC;CACtC,MAAM,MAAM,IAAI,MAAsC;CACtD,MAAM,WAAW,KAAK,YAAY;AAElC,KAAI,IAAI,KAAK,sBAAsB,iBAAiB,GAAG,MACrD,EAAE,KAAK,EAAE,WAAW,KAAK,UAAU,MAAM,EAAE,CAAC,CAC7C;AAED,KAAI,KACF,gBACA,uBAAuB,OAAO,WAAW,qBAAqB,OAAO,KAAK,EAC1E,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,WAAW,KAAK,UAAU,IAAI,GAAG;AACvC,MAAI,aAAa,QAAW;GAC1B,MAAM,MAAM,IAAI,sBAAsB,GAAG;AACzC,UAAO,EAAE,KAAK;IAAE,OAAO,IAAI;IAAM,SAAS,IAAI;IAAS,EAAE,IAAI;;EAE/D,MAAM,SAAS,kBAAkB,UAAU,MAAM,gBAAgB,EAAE,CAAC;AACpE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;EAEH,MAAM,QAAQ,UAAU;EACxB,MAAM,UAAU,KAAK,KAAK,MAAM,OAAO;GACrC,MAAM;GACN,YAAY;GACZ,GAAI,OAAO,KAAK,aAAa,SAAY,EAAE,UAAU,OAAO,KAAK,UAAU,GAAG,EAAE;GAChF,GAAI,OAAO,KAAK,cAAc,SAAY,EAAE,WAAW,OAAO,KAAK,WAAW,GAAG,EAAE;GACnF,GAAI,OAAO,KAAK,WAAW,SAAY,EAAE,QAAQ,OAAO,KAAK,QAAQ,GAAG,EAAE;GAC3E,CAAC;EAIF,MAAM,UAAU,YAAY,GAAG,QAAQ,MAAM;AAC7C,oBAAkB,UAAU,OAAO,MAAM,SAAS,KAAK,MAAM,OAAO;GAClE;GACA,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;GACzE,CAAC;AACF,SAAO,EAAE,KACP;GACE;GACA,QAAQ;GACR,WAAW,EAGT,WAAW,SACZ;GACF,EACD,IACD;GAEJ;AAED,KAAI,KACF,eACA,uBAAuB,OAAO,WAAW,oBAAoB,OAAO,KAAK,EACzE,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,WAAW,KAAK,UAAU,IAAI,GAAG;AACvC,MAAI,aAAa,QAAW;GAC1B,MAAM,MAAM,IAAI,sBAAsB,GAAG;AACzC,UAAO,EAAE,KAAK;IAAE,OAAO,IAAI;IAAM,SAAS,IAAI;IAAS,EAAE,IAAI;;EAE/D,MAAM,SAAS,iBAAiB,UAAU,MAAM,gBAAgB,EAAE,CAAC;AACnE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;AAEH,MAAI,SAAS,WAAW,OACtB,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS,aAAa,GAAG;GAC1B,EACD,IACD;EAEH,MAAM,QAAQ,UAAU;EAMxB,MAAM,UAAU,KAAK,KAAK,MAAM,OAAO;GACrC,MAAM;GACN,YAAY;GACZ,UAAU,OAAO,KAAK;GACvB,CAAC;EACF,MAAM,UAAU,YAAY,GAAG,QAAQ,MAAM;AAC7C,mBAAiB,UAAU,OAAO,MAAM,SAAS,KAAK,MAAM,OAAO;GACjE;GACA,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;GACzE,CAAC;AACF,SAAO,EAAE,KACP;GACE;GACA,UAAU,OAAO,KAAK;GACtB,QAAQ;GACR,WAAW,EACT,WAAW,SACZ;GACF,EACD,IACD;GAEJ;AAED,KAAI,IACF,cACA,uBAAuB,OAAO,WAAW,kBAAkB,OAAO,KAAK,EACvE,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,WAAW,KAAK,UAAU,IAAI,GAAG;AACvC,MAAI,aAAa,QAAW;GAC1B,MAAM,MAAM,IAAI,sBAAsB,GAAG;AACzC,UAAO,EAAE,KAAK;IAAE,OAAO,IAAI;IAAM,SAAS,IAAI;IAAS,EAAE,IAAI;;EAE/D,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW;AACxC,MAAI,aAAa,UAAa,SAAS,WAAW,EAChD,QAAO,EAAE,KACP;GAAE,OAAO;GAAkB,SAAS;GAA2C,EAC/E,IACD;AAEH,MAAI,SAAS,aAAa,OACxB,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACV,EACD,IACD;EAEH,MAAM,QAAQ,MAAM,SAAS,SAAS,SAAS;AAC/C,SAAO,EAAE,KAAK;GAAE,YAAY;GAAI;GAAU;GAAO,CAAC;GAErD;AAED,KAAI,IACF,oBACA,uBAAuB,OAAO,WAAW,kBAAkB,OAAO,KAAK,EACvE,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,WAAW,KAAK,UAAU,IAAI,GAAG;AACvC,MAAI,aAAa,QAAW;GAC1B,MAAM,MAAM,IAAI,sBAAsB,GAAG;AACzC,UAAO,EAAE,KAAK;IAAE,OAAO,IAAI;IAAM,SAAS,IAAI;IAAS,EAAE,IAAI;;EAE/D,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW;AACxC,MAAI,aAAa,UAAa,SAAS,WAAW,EAChD,QAAO,EAAE,KACP;GAAE,OAAO;GAAkB,SAAS;GAA2C,EAC/E,IACD;AAEH,MAAI,SAAS,oBAAoB,OAC/B,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACV,EACD,IACD;EAEH,MAAM,cAAc,MAAM,SAAS,gBAAgB,SAAS;AAC5D,SAAO,EAAE,KAAK;GAAE,YAAY;GAAI;GAAU;GAAa,CAAC;GAE3D;AAED,KAAI,KACF,aACA,uBAAuB,OAAO,WAAW,qBAAqB,OAAO,KAAK,EAC1E,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAE5B,MADiB,KAAK,UAAU,IAAI,GAAG,KACtB,QAAW;GAC1B,MAAM,MAAM,IAAI,sBAAsB,GAAG;AACzC,UAAO,EAAE,KAAK;IAAE,OAAO,IAAI;IAAM,SAAS,IAAI;IAAS,EAAE,IAAI;;EAE/D,MAAM,SAAS,eAAe,UAAU,MAAM,gBAAgB,EAAE,CAAC;AACjE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;AAMH,SAAO,EAAE,KACP;GACE,OAAO;GACP,SACE;GAEF,YAAY;GACZ,MAAM,OAAO;GACd,EACD,IACD;GAEJ;AAED,QAAO;;AAGT,SAAS,kBACP,UACA,MACA,SACA,MACA,OACA,WAIM;CACN,MAAMA,OAAoD,EAAE,QAAQ,QAAQ,QAAQ;AACpF,KAAI,KAAK,aAAa,OAAW,MAAK,WAAW,KAAK;AACtD,EAAM,YAAY;AAChB,MAAI;AAGF,cAAW,MAAM,MAAM,SAAS,QAAQ,KAAK,SAAS,EAAE,EAAE,KAAK,EAAE;AAC/D,QAAI,QAAQ,OAAO,QAAS;IAC5B,MAAM,OACJ,OAAQ,GAA0B,SAAS,WACtC,GAAwB,OACzB;AACN,cAAU,YAAY,KAAK,UAAU,SAAS;KAAE;KAAM,SAAS;KAAI,CAAC;;AAEtE,QAAK,SAAS,OAAO,QAAQ,OAAO,UAAU,YAAY,YAAY;WAC/D,KAAK;AACZ,aAAU,YAAY,KAAK,UAAU,SAAS;IAC5C,MAAM;IACN,SAAS;KAAE;KAAO,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;KAAE;IAC9E,CAAC;AACF,QAAK,SAAS,OAAO,QAAQ,OAAO,UAAU,YAAY,UAAU,IAAI;;KAExE;;;;;;;AAQN,SAAS,iBACP,UACA,MACA,SACA,MACA,OACA,WAIM;CACN,MAAM,SAAS,SAAS;AACxB,KAAI,WAAW,OAAW;AAC1B,EAAM,YAAY;AAChB,MAAI;AACF,cAAW,MAAM,MAAM,OAAO,KAC5B,UACA,KAAK,UACL,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE,CACzD,EAAE;AACD,QAAI,QAAQ,OAAO,QAAS;IAC5B,MAAM,OACJ,OAAQ,GAA0B,SAAS,WACtC,GAAwB,OACzB;AACN,cAAU,YAAY,KAAK,UAAU,SAAS;KAAE;KAAM,SAAS;KAAI,CAAC;;AAEtE,QAAK,SAAS,OAAO,QAAQ,OAAO,UAAU,YAAY,YAAY;WAC/D,KAAK;AACZ,aAAU,YAAY,KAAK,UAAU,SAAS;IAC5C,MAAM;IACN,SAAS;KAAE;KAAO,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;KAAE;IAC9E,CAAC;AACF,QAAK,SAAS,OAAO,QAAQ,OAAO,UAAU,YAAY,UAAU,IAAI;;KAExE;;AAGN,eAAe,gBAAgB,GAA8D;AAC3F,KAAI;AACF,SAAO,MAAM,EAAE,IAAI,MAAM;SACnB;AACN,SAAO,EAAE"}
+{"version":3,"file":"workflows.js","names":["opts: { signal?: AbortSignal; threadId?: string }"],"sources":["../../src/routes/workflows.ts"],"sourcesContent":["/**\n * Workflow REST routes.\n *\n *   POST   /workflows/:id/execute              (idempotent; scope `workflows:execute`)\n *   POST   /workflows/:id/resume               (scope `workflows:resume[:id]`;\n *                                               `name` targets an awakeable/approval, W-119)\n *   POST   /workflows/:id/retry                (scope `workflows:resume[:id]`, W-119)\n *   POST   /workflows/:id/tick                 (scope `workflows:resume[:id]`, W-119)\n *   GET    /workflows/:id/state                (scope `workflows:read`)\n *   GET    /workflows/:id/checkpoints          (scope `workflows:read`)\n *   POST   /workflows/:id/fork                 (scope `workflows:execute`; real fork, W-119)\n *   DELETE /workflows/:id/threads/:threadId    (scope `workflows:delete`)\n *\n * @packageDocumentation\n */\n\nimport type { Context } from 'hono';\nimport { Hono } from 'hono';\nimport { z } from 'zod';\n\nimport { WorkflowNotFoundError } from '../errors/index.js';\nimport type { ServerVariables } from '../internal/context.js';\nimport { newRequestId } from '../internal/ids.js';\nimport { toWireError } from '../internal/wire-error.js';\nimport { createScopeMiddleware } from '../middleware/scope.js';\nimport type { WorkflowRegistry } from '../registry/index.js';\nimport type { RunStateTracker } from '../runtime/run-state.js';\n\n/**\n * @stable\n */\nexport interface WorkflowRoutesDeps {\n  readonly workflows: WorkflowRegistry;\n  readonly runs: RunStateTracker;\n  readonly newRunId?: () => string;\n  /** Streaming dispatcher (IP-2): workflow events reach the run subject. */\n  readonly dispatcher?: import('../ws/dispatcher.js').WsDispatcher;\n}\n\nconst ExecuteBodySchema = z\n  .object({\n    input: z.unknown().optional(),\n    threadId: z.string().min(1).optional(),\n    sessionId: z.string().min(1).optional(),\n    userId: z.string().min(1).optional(),\n  })\n  .strict()\n  .default({});\n\nconst ResumeBodySchema = z\n  .object({\n    threadId: z.string().min(1),\n    resume: z.unknown().optional(),\n    /**\n     * W-119: awakeable/approval name. When present the resume routes\n     * through `resolveAwakeable(threadId, name, resume)` - `approve` is\n     * the same primitive, no alias route needed.\n     */\n    name: z.string().min(1).optional(),\n  })\n  .strict();\n\nconst ThreadBodySchema = z\n  .object({\n    threadId: z.string().min(1),\n  })\n  .strict();\n\nconst ForkBodySchema = z\n  .object({\n    fromThreadId: z.string().min(1),\n    fromCheckpointId: z.string().min(1).optional(),\n  })\n  .strict();\n\n/**\n * @stable\n */\nexport function createWorkflowRoutes(\n  deps: WorkflowRoutesDeps,\n): Hono<{ Variables: ServerVariables }> {\n  const app = new Hono<{ Variables: ServerVariables }>();\n  const newRunId = deps.newRunId ?? newRequestId;\n\n  app.get('/', createScopeMiddleware('workflows:read'), (c) =>\n    c.json({ workflows: deps.workflows.list() }),\n  );\n\n  app.post(\n    '/:id/execute',\n    createScopeMiddleware((_path, params) => `workflows:execute:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const workflow = deps.workflows.get(id);\n      if (workflow === undefined) {\n        const err = new WorkflowNotFoundError(id);\n        return c.json({ error: err.kind, message: err.message }, 404);\n      }\n      const parsed = ExecuteBodySchema.safeParse(await safelyParseJson(c));\n      if (!parsed.success) {\n        return c.json(\n          {\n            error: 'config-invalid',\n            message: 'Invalid execute body.',\n            issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n          },\n          400,\n        );\n      }\n      const runId = newRunId();\n      const tracker = deps.runs.start(runId, {\n        kind: 'workflow',\n        workflowId: id,\n        ...(parsed.data.threadId !== undefined ? { threadId: parsed.data.threadId } : {}),\n        ...(parsed.data.sessionId !== undefined ? { sessionId: parsed.data.sessionId } : {}),\n        ...(parsed.data.userId !== undefined ? { userId: parsed.data.userId } : {}),\n      });\n      // Workflows are streaming-first; the REST endpoint kicks off the\n      // run in the background and returns 202 + runId. The actual\n      // event stream is consumed via WebSocket / SSE in Phase 14b.\n      const subject = `workflow:${id}/runs/${runId}/events`;\n      backgroundExecute(workflow, parsed.data, tracker, deps.runs, runId, {\n        subject,\n        ...(deps.dispatcher !== undefined ? { dispatcher: deps.dispatcher } : {}),\n      });\n      return c.json(\n        {\n          runId,\n          status: 'running',\n          subscribe: {\n            // IP-2: the previously-advertised SSE URL was never\n            // mounted; the WS subject (now in the grammar) delivers.\n            websocket: subject,\n          },\n        },\n        202,\n      );\n    },\n  );\n\n  app.post(\n    '/:id/resume',\n    createScopeMiddleware((_path, params) => `workflows:resume:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const workflow = deps.workflows.get(id);\n      if (workflow === undefined) {\n        const err = new WorkflowNotFoundError(id);\n        return c.json({ error: err.kind, message: err.message }, 404);\n      }\n      const parsed = ResumeBodySchema.safeParse(await safelyParseJson(c));\n      if (!parsed.success) {\n        return c.json(\n          {\n            error: 'config-invalid',\n            message: 'Invalid resume body.',\n            issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n          },\n          400,\n        );\n      }\n      if (parsed.data.name !== undefined && workflow.resolveAwakeable === undefined) {\n        return c.json(\n          {\n            error: 'workflow-resume-unsupported',\n            message: `Workflow '${id}' does not implement resolveAwakeable().`,\n          },\n          400,\n        );\n      }\n      if (parsed.data.name === undefined && workflow.resume === undefined) {\n        return c.json(\n          {\n            error: 'workflow-resume-unsupported',\n            message: `Workflow '${id}' does not implement resume().`,\n          },\n          400,\n        );\n      }\n      const runId = newRunId();\n      // periphery-01: the old handler declared the run and returned 202\n      // WITHOUT ever calling `workflow.resume(...)` - the run sat\n      // `pending` forever and the advertised SSE URL was never mounted.\n      // Resume now mirrors execute: background-iterate + emit on the WS\n      // subject; the tracker completes the run.\n      const tracker = deps.runs.start(runId, {\n        kind: 'workflow',\n        workflowId: id,\n        threadId: parsed.data.threadId,\n      });\n      const subject = `workflow:${id}/runs/${runId}/events`;\n      backgroundResume(workflow, parsed.data, tracker, deps.runs, runId, {\n        subject,\n        ...(deps.dispatcher !== undefined ? { dispatcher: deps.dispatcher } : {}),\n      });\n      return c.json(\n        {\n          runId,\n          threadId: parsed.data.threadId,\n          status: 'running',\n          subscribe: {\n            websocket: subject,\n          },\n        },\n        202,\n      );\n    },\n  );\n\n  // W-119: replay a failed/aborted thread. Background-iterated like\n  // resume; the run subject carries the events.\n  app.post(\n    '/:id/retry',\n    createScopeMiddleware((_path, params) => `workflows:resume:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const workflow = deps.workflows.get(id);\n      if (workflow === undefined) {\n        const err = new WorkflowNotFoundError(id);\n        return c.json({ error: err.kind, message: err.message }, 404);\n      }\n      const parsed = ThreadBodySchema.safeParse(await safelyParseJson(c));\n      if (!parsed.success) {\n        return c.json(\n          {\n            error: 'config-invalid',\n            message: 'Invalid retry body.',\n            issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n          },\n          400,\n        );\n      }\n      if (workflow.retry === undefined) {\n        return c.json(\n          {\n            error: 'workflow-retry-unsupported',\n            message: `Workflow '${id}' does not implement retry().`,\n          },\n          400,\n        );\n      }\n      const runId = newRunId();\n      const tracker = deps.runs.start(runId, {\n        kind: 'workflow',\n        workflowId: id,\n        threadId: parsed.data.threadId,\n      });\n      const subject = `workflow:${id}/runs/${runId}/events`;\n      const retryFn = workflow.retry.bind(workflow);\n      backgroundIterate(\n        () => retryFn(parsed.data.threadId, { signal: tracker.signal }),\n        tracker,\n        deps.runs,\n        runId,\n        { subject, ...(deps.dispatcher !== undefined ? { dispatcher: deps.dispatcher } : {}) },\n      );\n      return c.json(\n        {\n          runId,\n          threadId: parsed.data.threadId,\n          status: 'running',\n          subscribe: { websocket: subject },\n        },\n        202,\n      );\n    },\n  );\n\n  // W-119: fire a due durable timer synchronously. Long node bodies\n  // hold the HTTP connection - documented; wire the timer daemon\n  // (createServer({ workflowTimers })) for regular firing instead.\n  app.post(\n    '/:id/tick',\n    createScopeMiddleware((_path, params) => `workflows:resume:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const workflow = deps.workflows.get(id);\n      if (workflow === undefined) {\n        const err = new WorkflowNotFoundError(id);\n        return c.json({ error: err.kind, message: err.message }, 404);\n      }\n      const parsed = ThreadBodySchema.safeParse(await safelyParseJson(c));\n      if (!parsed.success) {\n        return c.json(\n          {\n            error: 'config-invalid',\n            message: 'Invalid tick body.',\n            issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n          },\n          400,\n        );\n      }\n      if (workflow.tick === undefined) {\n        return c.json(\n          {\n            error: 'workflow-tick-unsupported',\n            message: `Workflow '${id}' does not implement tick().`,\n          },\n          400,\n        );\n      }\n      try {\n        const result = await workflow.tick(parsed.data.threadId);\n        return c.json({\n          workflowId: id,\n          threadId: parsed.data.threadId,\n          fired: result.fired,\n          nextWakeAt: result.nextWakeAt,\n        });\n      } catch (err) {\n        const wire = toWireError(err);\n        return c.json(\n          { error: wire.code, message: wire.message },\n          wire.code === 'thread-not-found' ? 404 : 400,\n        );\n      }\n    },\n  );\n\n  app.get(\n    '/:id/state',\n    createScopeMiddleware((_path, params) => `workflows:read:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const workflow = deps.workflows.get(id);\n      if (workflow === undefined) {\n        const err = new WorkflowNotFoundError(id);\n        return c.json({ error: err.kind, message: err.message }, 404);\n      }\n      const threadId = c.req.query('threadId');\n      if (threadId === undefined || threadId.length === 0) {\n        return c.json(\n          { error: 'config-invalid', message: 'Query parameter `threadId` is required.' },\n          400,\n        );\n      }\n      if (workflow.getState === undefined) {\n        return c.json(\n          {\n            error: 'workflow-state-unsupported',\n            message: 'Workflow does not implement getState().',\n          },\n          400,\n        );\n      }\n      const state = await workflow.getState(threadId);\n      return c.json({ workflowId: id, threadId, state });\n    },\n  );\n\n  app.get(\n    '/:id/checkpoints',\n    createScopeMiddleware((_path, params) => `workflows:read:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const workflow = deps.workflows.get(id);\n      if (workflow === undefined) {\n        const err = new WorkflowNotFoundError(id);\n        return c.json({ error: err.kind, message: err.message }, 404);\n      }\n      const threadId = c.req.query('threadId');\n      if (threadId === undefined || threadId.length === 0) {\n        return c.json(\n          { error: 'config-invalid', message: 'Query parameter `threadId` is required.' },\n          400,\n        );\n      }\n      if (workflow.listCheckpoints === undefined) {\n        return c.json(\n          {\n            error: 'workflow-checkpoints-unsupported',\n            message: 'Workflow does not implement listCheckpoints().',\n          },\n          400,\n        );\n      }\n      const checkpoints = await workflow.listCheckpoints(threadId);\n      return c.json({ workflowId: id, threadId, checkpoints });\n    },\n  );\n\n  // W-005: the reachable per-thread erasure lever. 204 on success (the\n  // store delete is idempotent - deleting an unknown thread is a no-op),\n  // 404 for an unknown workflow, 400 when the registered entry does not\n  // expose deleteThread.\n  app.delete(\n    '/:id/threads/:threadId',\n    createScopeMiddleware((_path, params) => `workflows:delete:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const threadId = c.req.param('threadId');\n      const workflow = deps.workflows.get(id);\n      if (workflow === undefined) {\n        const err = new WorkflowNotFoundError(id);\n        return c.json({ error: err.kind, message: err.message }, 404);\n      }\n      if (workflow.deleteThread === undefined) {\n        return c.json(\n          {\n            error: 'workflow-delete-thread-unsupported',\n            message: 'Workflow does not implement deleteThread().',\n          },\n          400,\n        );\n      }\n      await workflow.deleteThread(threadId);\n      return c.body(null, 204);\n    },\n  );\n\n  app.post(\n    '/:id/fork',\n    createScopeMiddleware((_path, params) => `workflows:execute:${params.id}`),\n    async (c) => {\n      const id = c.req.param('id');\n      const workflow = deps.workflows.get(id);\n      if (workflow === undefined) {\n        const err = new WorkflowNotFoundError(id);\n        return c.json({ error: err.kind, message: err.message }, 404);\n      }\n      const parsed = ForkBodySchema.safeParse(await safelyParseJson(c));\n      if (!parsed.success) {\n        return c.json(\n          {\n            error: 'config-invalid',\n            message: 'Invalid fork body.',\n            issues: parsed.error.issues.map((i) => ({ path: i.path, message: i.message })),\n          },\n          400,\n        );\n      }\n      // W-119: the fork primitive is now threaded through the registry -\n      // the periphery-01 honest-501 kept its promise and retires here.\n      if (workflow.fork === undefined) {\n        return c.json(\n          {\n            error: 'workflow-fork-unsupported',\n            message: `Workflow '${id}' does not implement fork().`,\n          },\n          400,\n        );\n      }\n      try {\n        let fromCheckpointId = parsed.data.fromCheckpointId;\n        if (fromCheckpointId === undefined) {\n          if (workflow.getState === undefined) {\n            return c.json(\n              {\n                error: 'config-invalid',\n                message:\n                  'fromCheckpointId is required: this workflow does not expose getState() to derive the latest checkpoint.',\n              },\n              400,\n            );\n          }\n          const state = (await workflow.getState(parsed.data.fromThreadId)) as {\n            readonly checkpointId?: unknown;\n          };\n          if (typeof state?.checkpointId !== 'string') {\n            return c.json(\n              {\n                error: 'checkpoint-not-found',\n                message: `Thread '${parsed.data.fromThreadId}' has no checkpoint to fork from.`,\n              },\n              404,\n            );\n          }\n          fromCheckpointId = state.checkpointId;\n        }\n        const forked = await workflow.fork(parsed.data.fromThreadId, fromCheckpointId);\n        return c.json(\n          {\n            workflowId: id,\n            fromThreadId: parsed.data.fromThreadId,\n            fromCheckpointId,\n            newThreadId: forked.newThreadId,\n          },\n          201,\n        );\n      } catch (err) {\n        const wire = toWireError(err);\n        return c.json(\n          { error: wire.code, message: wire.message },\n          wire.code === 'thread-not-found' || wire.code === 'checkpoint-not-found' ? 404 : 400,\n        );\n      }\n    },\n  );\n\n  return app;\n}\n\nfunction backgroundExecute(\n  workflow: NonNullable<ReturnType<WorkflowRegistry['get']>>,\n  body: z.infer<typeof ExecuteBodySchema>,\n  tracker: { readonly signal: AbortSignal },\n  runs: RunStateTracker,\n  runId: string,\n  streaming: {\n    readonly subject: string;\n    readonly dispatcher?: import('../ws/dispatcher.js').WsDispatcher;\n  },\n): void {\n  const opts: { signal?: AbortSignal; threadId?: string } = { signal: tracker.signal };\n  if (body.threadId !== undefined) opts.threadId = body.threadId;\n  void (async () => {\n    try {\n      // IP-2: every workflow event reaches the dispatcher - the old\n      // loop iterated the stream and threw each event away.\n      for await (const ev of workflow.execute(body.input ?? {}, opts)) {\n        if (tracker.signal.aborted) break;\n        const type =\n          typeof (ev as { type?: unknown }).type === 'string'\n            ? (ev as { type: string }).type\n            : 'workflow.event';\n        streaming.dispatcher?.emit(streaming.subject, { type, payload: ev });\n      }\n      runs.complete(runId, tracker.signal.aborted ? 'aborted' : 'completed');\n    } catch (err) {\n      // W-052: the frame carries the normalized machine-readable code\n      // next to the unchanged message, so clients can retry\n      // `checkpoint-version-conflict` and abandon\n      // `node-execution-failed` without parsing prose.\n      streaming.dispatcher?.emit(streaming.subject, {\n        type: 'workflow.error',\n        payload: { runId, ...toWireError(err) },\n      });\n      runs.complete(runId, tracker.signal.aborted ? 'aborted' : 'failed', err);\n    }\n  })();\n}\n\n/**\n * periphery-01 / W-119: mirror of {@link backgroundExecute} for the\n * resume path. A `name` in the body routes through\n * `resolveAwakeable(threadId, name, resume)`; a plain resume goes\n * through `resume(threadId, {resume})`. Both receive the tracker's\n * AbortSignal so `runs.abort(runId)` actually cancels the iteration\n * (parity with backgroundExecute - the old path dropped it).\n */\nfunction backgroundResume(\n  workflow: NonNullable<ReturnType<WorkflowRegistry['get']>>,\n  body: z.infer<typeof ResumeBodySchema>,\n  tracker: { readonly signal: AbortSignal },\n  runs: RunStateTracker,\n  runId: string,\n  streaming: {\n    readonly subject: string;\n    readonly dispatcher?: import('../ws/dispatcher.js').WsDispatcher;\n  },\n): void {\n  const { resume, resolveAwakeable } = workflow;\n  const name = body.name;\n  const factory =\n    name !== undefined && resolveAwakeable !== undefined\n      ? () =>\n          resolveAwakeable.call(workflow, body.threadId, name, body.resume, {\n            signal: tracker.signal,\n          })\n      : resume !== undefined\n        ? () =>\n            resume.call(\n              workflow,\n              body.threadId,\n              body.resume !== undefined ? { resume: body.resume } : {},\n              { signal: tracker.signal },\n            )\n        : undefined;\n  if (factory === undefined) return;\n  backgroundIterate(factory, tracker, runs, runId, streaming);\n}\n\n/**\n * W-119: shared background iteration for resume / named resume / retry -\n * emit every event on the run subject, complete the tracked run, wrap\n * failures in the W-052 wire envelope.\n */\nfunction backgroundIterate(\n  factory: () => AsyncIterable<unknown>,\n  tracker: { readonly signal: AbortSignal },\n  runs: RunStateTracker,\n  runId: string,\n  streaming: {\n    readonly subject: string;\n    readonly dispatcher?: import('../ws/dispatcher.js').WsDispatcher;\n  },\n): void {\n  void (async () => {\n    try {\n      for await (const ev of factory()) {\n        if (tracker.signal.aborted) break;\n        const type =\n          typeof (ev as { type?: unknown }).type === 'string'\n            ? (ev as { type: string }).type\n            : 'workflow.event';\n        streaming.dispatcher?.emit(streaming.subject, { type, payload: ev });\n      }\n      runs.complete(runId, tracker.signal.aborted ? 'aborted' : 'completed');\n    } catch (err) {\n      // W-052: same envelope as the execute path.\n      streaming.dispatcher?.emit(streaming.subject, {\n        type: 'workflow.error',\n        payload: { runId, ...toWireError(err) },\n      });\n      runs.complete(runId, tracker.signal.aborted ? 'aborted' : 'failed', err);\n    }\n  })();\n}\n\nasync function safelyParseJson(c: Context<{ Variables: ServerVariables }>): Promise<unknown> {\n  try {\n    return await c.req.json();\n  } catch {\n    return {};\n  }\n}\n"],"mappings":";;;;;;;;AAuCA,MAAM,oBAAoB,EACvB,OAAO;CACN,OAAO,EAAE,SAAS,CAAC,UAAU;CAC7B,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACvC,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACrC,CAAC,CACD,QAAQ,CACR,QAAQ,EAAE,CAAC;AAEd,MAAM,mBAAmB,EACtB,OAAO;CACN,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC3B,QAAQ,EAAE,SAAS,CAAC,UAAU;CAM9B,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACnC,CAAC,CACD,QAAQ;AAEX,MAAM,mBAAmB,EACtB,OAAO,EACN,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,EAC5B,CAAC,CACD,QAAQ;AAEX,MAAM,iBAAiB,EACpB,OAAO;CACN,cAAc,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC/B,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CAC/C,CAAC,CACD,QAAQ;;;;AAKX,SAAgB,qBACd,MACsC;CACtC,MAAM,MAAM,IAAI,MAAsC;CACtD,MAAM,WAAW,KAAK,YAAY;AAElC,KAAI,IAAI,KAAK,sBAAsB,iBAAiB,GAAG,MACrD,EAAE,KAAK,EAAE,WAAW,KAAK,UAAU,MAAM,EAAE,CAAC,CAC7C;AAED,KAAI,KACF,gBACA,uBAAuB,OAAO,WAAW,qBAAqB,OAAO,KAAK,EAC1E,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,WAAW,KAAK,UAAU,IAAI,GAAG;AACvC,MAAI,aAAa,QAAW;GAC1B,MAAM,MAAM,IAAI,sBAAsB,GAAG;AACzC,UAAO,EAAE,KAAK;IAAE,OAAO,IAAI;IAAM,SAAS,IAAI;IAAS,EAAE,IAAI;;EAE/D,MAAM,SAAS,kBAAkB,UAAU,MAAM,gBAAgB,EAAE,CAAC;AACpE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;EAEH,MAAM,QAAQ,UAAU;EACxB,MAAM,UAAU,KAAK,KAAK,MAAM,OAAO;GACrC,MAAM;GACN,YAAY;GACZ,GAAI,OAAO,KAAK,aAAa,SAAY,EAAE,UAAU,OAAO,KAAK,UAAU,GAAG,EAAE;GAChF,GAAI,OAAO,KAAK,cAAc,SAAY,EAAE,WAAW,OAAO,KAAK,WAAW,GAAG,EAAE;GACnF,GAAI,OAAO,KAAK,WAAW,SAAY,EAAE,QAAQ,OAAO,KAAK,QAAQ,GAAG,EAAE;GAC3E,CAAC;EAIF,MAAM,UAAU,YAAY,GAAG,QAAQ,MAAM;AAC7C,oBAAkB,UAAU,OAAO,MAAM,SAAS,KAAK,MAAM,OAAO;GAClE;GACA,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;GACzE,CAAC;AACF,SAAO,EAAE,KACP;GACE;GACA,QAAQ;GACR,WAAW,EAGT,WAAW,SACZ;GACF,EACD,IACD;GAEJ;AAED,KAAI,KACF,eACA,uBAAuB,OAAO,WAAW,oBAAoB,OAAO,KAAK,EACzE,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,WAAW,KAAK,UAAU,IAAI,GAAG;AACvC,MAAI,aAAa,QAAW;GAC1B,MAAM,MAAM,IAAI,sBAAsB,GAAG;AACzC,UAAO,EAAE,KAAK;IAAE,OAAO,IAAI;IAAM,SAAS,IAAI;IAAS,EAAE,IAAI;;EAE/D,MAAM,SAAS,iBAAiB,UAAU,MAAM,gBAAgB,EAAE,CAAC;AACnE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;AAEH,MAAI,OAAO,KAAK,SAAS,UAAa,SAAS,qBAAqB,OAClE,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS,aAAa,GAAG;GAC1B,EACD,IACD;AAEH,MAAI,OAAO,KAAK,SAAS,UAAa,SAAS,WAAW,OACxD,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS,aAAa,GAAG;GAC1B,EACD,IACD;EAEH,MAAM,QAAQ,UAAU;EAMxB,MAAM,UAAU,KAAK,KAAK,MAAM,OAAO;GACrC,MAAM;GACN,YAAY;GACZ,UAAU,OAAO,KAAK;GACvB,CAAC;EACF,MAAM,UAAU,YAAY,GAAG,QAAQ,MAAM;AAC7C,mBAAiB,UAAU,OAAO,MAAM,SAAS,KAAK,MAAM,OAAO;GACjE;GACA,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;GACzE,CAAC;AACF,SAAO,EAAE,KACP;GACE;GACA,UAAU,OAAO,KAAK;GACtB,QAAQ;GACR,WAAW,EACT,WAAW,SACZ;GACF,EACD,IACD;GAEJ;AAID,KAAI,KACF,cACA,uBAAuB,OAAO,WAAW,oBAAoB,OAAO,KAAK,EACzE,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,WAAW,KAAK,UAAU,IAAI,GAAG;AACvC,MAAI,aAAa,QAAW;GAC1B,MAAM,MAAM,IAAI,sBAAsB,GAAG;AACzC,UAAO,EAAE,KAAK;IAAE,OAAO,IAAI;IAAM,SAAS,IAAI;IAAS,EAAE,IAAI;;EAE/D,MAAM,SAAS,iBAAiB,UAAU,MAAM,gBAAgB,EAAE,CAAC;AACnE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;AAEH,MAAI,SAAS,UAAU,OACrB,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS,aAAa,GAAG;GAC1B,EACD,IACD;EAEH,MAAM,QAAQ,UAAU;EACxB,MAAM,UAAU,KAAK,KAAK,MAAM,OAAO;GACrC,MAAM;GACN,YAAY;GACZ,UAAU,OAAO,KAAK;GACvB,CAAC;EACF,MAAM,UAAU,YAAY,GAAG,QAAQ,MAAM;EAC7C,MAAM,UAAU,SAAS,MAAM,KAAK,SAAS;AAC7C,0BACQ,QAAQ,OAAO,KAAK,UAAU,EAAE,QAAQ,QAAQ,QAAQ,CAAC,EAC/D,SACA,KAAK,MACL,OACA;GAAE;GAAS,GAAI,KAAK,eAAe,SAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;GAAG,CACvF;AACD,SAAO,EAAE,KACP;GACE;GACA,UAAU,OAAO,KAAK;GACtB,QAAQ;GACR,WAAW,EAAE,WAAW,SAAS;GAClC,EACD,IACD;GAEJ;AAKD,KAAI,KACF,aACA,uBAAuB,OAAO,WAAW,oBAAoB,OAAO,KAAK,EACzE,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,WAAW,KAAK,UAAU,IAAI,GAAG;AACvC,MAAI,aAAa,QAAW;GAC1B,MAAM,MAAM,IAAI,sBAAsB,GAAG;AACzC,UAAO,EAAE,KAAK;IAAE,OAAO,IAAI;IAAM,SAAS,IAAI;IAAS,EAAE,IAAI;;EAE/D,MAAM,SAAS,iBAAiB,UAAU,MAAM,gBAAgB,EAAE,CAAC;AACnE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;AAEH,MAAI,SAAS,SAAS,OACpB,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS,aAAa,GAAG;GAC1B,EACD,IACD;AAEH,MAAI;GACF,MAAM,SAAS,MAAM,SAAS,KAAK,OAAO,KAAK,SAAS;AACxD,UAAO,EAAE,KAAK;IACZ,YAAY;IACZ,UAAU,OAAO,KAAK;IACtB,OAAO,OAAO;IACd,YAAY,OAAO;IACpB,CAAC;WACK,KAAK;GACZ,MAAM,OAAO,YAAY,IAAI;AAC7B,UAAO,EAAE,KACP;IAAE,OAAO,KAAK;IAAM,SAAS,KAAK;IAAS,EAC3C,KAAK,SAAS,qBAAqB,MAAM,IAC1C;;GAGN;AAED,KAAI,IACF,cACA,uBAAuB,OAAO,WAAW,kBAAkB,OAAO,KAAK,EACvE,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,WAAW,KAAK,UAAU,IAAI,GAAG;AACvC,MAAI,aAAa,QAAW;GAC1B,MAAM,MAAM,IAAI,sBAAsB,GAAG;AACzC,UAAO,EAAE,KAAK;IAAE,OAAO,IAAI;IAAM,SAAS,IAAI;IAAS,EAAE,IAAI;;EAE/D,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW;AACxC,MAAI,aAAa,UAAa,SAAS,WAAW,EAChD,QAAO,EAAE,KACP;GAAE,OAAO;GAAkB,SAAS;GAA2C,EAC/E,IACD;AAEH,MAAI,SAAS,aAAa,OACxB,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACV,EACD,IACD;EAEH,MAAM,QAAQ,MAAM,SAAS,SAAS,SAAS;AAC/C,SAAO,EAAE,KAAK;GAAE,YAAY;GAAI;GAAU;GAAO,CAAC;GAErD;AAED,KAAI,IACF,oBACA,uBAAuB,OAAO,WAAW,kBAAkB,OAAO,KAAK,EACvE,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,WAAW,KAAK,UAAU,IAAI,GAAG;AACvC,MAAI,aAAa,QAAW;GAC1B,MAAM,MAAM,IAAI,sBAAsB,GAAG;AACzC,UAAO,EAAE,KAAK;IAAE,OAAO,IAAI;IAAM,SAAS,IAAI;IAAS,EAAE,IAAI;;EAE/D,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW;AACxC,MAAI,aAAa,UAAa,SAAS,WAAW,EAChD,QAAO,EAAE,KACP;GAAE,OAAO;GAAkB,SAAS;GAA2C,EAC/E,IACD;AAEH,MAAI,SAAS,oBAAoB,OAC/B,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACV,EACD,IACD;EAEH,MAAM,cAAc,MAAM,SAAS,gBAAgB,SAAS;AAC5D,SAAO,EAAE,KAAK;GAAE,YAAY;GAAI;GAAU;GAAa,CAAC;GAE3D;AAMD,KAAI,OACF,0BACA,uBAAuB,OAAO,WAAW,oBAAoB,OAAO,KAAK,EACzE,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW;EACxC,MAAM,WAAW,KAAK,UAAU,IAAI,GAAG;AACvC,MAAI,aAAa,QAAW;GAC1B,MAAM,MAAM,IAAI,sBAAsB,GAAG;AACzC,UAAO,EAAE,KAAK;IAAE,OAAO,IAAI;IAAM,SAAS,IAAI;IAAS,EAAE,IAAI;;AAE/D,MAAI,SAAS,iBAAiB,OAC5B,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACV,EACD,IACD;AAEH,QAAM,SAAS,aAAa,SAAS;AACrC,SAAO,EAAE,KAAK,MAAM,IAAI;GAE3B;AAED,KAAI,KACF,aACA,uBAAuB,OAAO,WAAW,qBAAqB,OAAO,KAAK,EAC1E,OAAO,MAAM;EACX,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,WAAW,KAAK,UAAU,IAAI,GAAG;AACvC,MAAI,aAAa,QAAW;GAC1B,MAAM,MAAM,IAAI,sBAAsB,GAAG;AACzC,UAAO,EAAE,KAAK;IAAE,OAAO,IAAI;IAAM,SAAS,IAAI;IAAS,EAAE,IAAI;;EAE/D,MAAM,SAAS,eAAe,UAAU,MAAM,gBAAgB,EAAE,CAAC;AACjE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS;GACT,QAAQ,OAAO,MAAM,OAAO,KAAK,OAAO;IAAE,MAAM,EAAE;IAAM,SAAS,EAAE;IAAS,EAAE;GAC/E,EACD,IACD;AAIH,MAAI,SAAS,SAAS,OACpB,QAAO,EAAE,KACP;GACE,OAAO;GACP,SAAS,aAAa,GAAG;GAC1B,EACD,IACD;AAEH,MAAI;GACF,IAAI,mBAAmB,OAAO,KAAK;AACnC,OAAI,qBAAqB,QAAW;AAClC,QAAI,SAAS,aAAa,OACxB,QAAO,EAAE,KACP;KACE,OAAO;KACP,SACE;KACH,EACD,IACD;IAEH,MAAM,QAAS,MAAM,SAAS,SAAS,OAAO,KAAK,aAAa;AAGhE,QAAI,OAAO,OAAO,iBAAiB,SACjC,QAAO,EAAE,KACP;KACE,OAAO;KACP,SAAS,WAAW,OAAO,KAAK,aAAa;KAC9C,EACD,IACD;AAEH,uBAAmB,MAAM;;GAE3B,MAAM,SAAS,MAAM,SAAS,KAAK,OAAO,KAAK,cAAc,iBAAiB;AAC9E,UAAO,EAAE,KACP;IACE,YAAY;IACZ,cAAc,OAAO,KAAK;IAC1B;IACA,aAAa,OAAO;IACrB,EACD,IACD;WACM,KAAK;GACZ,MAAM,OAAO,YAAY,IAAI;AAC7B,UAAO,EAAE,KACP;IAAE,OAAO,KAAK;IAAM,SAAS,KAAK;IAAS,EAC3C,KAAK,SAAS,sBAAsB,KAAK,SAAS,yBAAyB,MAAM,IAClF;;GAGN;AAED,QAAO;;AAGT,SAAS,kBACP,UACA,MACA,SACA,MACA,OACA,WAIM;CACN,MAAMA,OAAoD,EAAE,QAAQ,QAAQ,QAAQ;AACpF,KAAI,KAAK,aAAa,OAAW,MAAK,WAAW,KAAK;AACtD,EAAM,YAAY;AAChB,MAAI;AAGF,cAAW,MAAM,MAAM,SAAS,QAAQ,KAAK,SAAS,EAAE,EAAE,KAAK,EAAE;AAC/D,QAAI,QAAQ,OAAO,QAAS;IAC5B,MAAM,OACJ,OAAQ,GAA0B,SAAS,WACtC,GAAwB,OACzB;AACN,cAAU,YAAY,KAAK,UAAU,SAAS;KAAE;KAAM,SAAS;KAAI,CAAC;;AAEtE,QAAK,SAAS,OAAO,QAAQ,OAAO,UAAU,YAAY,YAAY;WAC/D,KAAK;AAKZ,aAAU,YAAY,KAAK,UAAU,SAAS;IAC5C,MAAM;IACN,SAAS;KAAE;KAAO,GAAG,YAAY,IAAI;KAAE;IACxC,CAAC;AACF,QAAK,SAAS,OAAO,QAAQ,OAAO,UAAU,YAAY,UAAU,IAAI;;KAExE;;;;;;;;;;AAWN,SAAS,iBACP,UACA,MACA,SACA,MACA,OACA,WAIM;CACN,MAAM,EAAE,QAAQ,qBAAqB;CACrC,MAAM,OAAO,KAAK;CAClB,MAAM,UACJ,SAAS,UAAa,qBAAqB,eAErC,iBAAiB,KAAK,UAAU,KAAK,UAAU,MAAM,KAAK,QAAQ,EAChE,QAAQ,QAAQ,QACjB,CAAC,GACJ,WAAW,eAEP,OAAO,KACL,UACA,KAAK,UACL,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE,EACxD,EAAE,QAAQ,QAAQ,QAAQ,CAC3B,GACH;AACR,KAAI,YAAY,OAAW;AAC3B,mBAAkB,SAAS,SAAS,MAAM,OAAO,UAAU;;;;;;;AAQ7D,SAAS,kBACP,SACA,SACA,MACA,OACA,WAIM;AACN,EAAM,YAAY;AAChB,MAAI;AACF,cAAW,MAAM,MAAM,SAAS,EAAE;AAChC,QAAI,QAAQ,OAAO,QAAS;IAC5B,MAAM,OACJ,OAAQ,GAA0B,SAAS,WACtC,GAAwB,OACzB;AACN,cAAU,YAAY,KAAK,UAAU,SAAS;KAAE;KAAM,SAAS;KAAI,CAAC;;AAEtE,QAAK,SAAS,OAAO,QAAQ,OAAO,UAAU,YAAY,YAAY;WAC/D,KAAK;AAEZ,aAAU,YAAY,KAAK,UAAU,SAAS;IAC5C,MAAM;IACN,SAAS;KAAE;KAAO,GAAG,YAAY,IAAI;KAAE;IACxC,CAAC;AACF,QAAK,SAAS,OAAO,QAAQ,OAAO,UAAU,YAAY,UAAU,IAAI;;KAExE;;AAGN,eAAe,gBAAgB,GAA8D;AAC3F,KAAI;AACF,SAAO,MAAM,EAAE,IAAI,MAAM;SACnB;AACN,SAAO,EAAE"}

package/dist/runtime/retention.d.ts

@@ -0,0 +1,105 @@
+import { SqliteConnection } from "@graphorin/store-sqlite";
+
+//#region src/runtime/retention.d.ts
+
+/**
+ * Mirror of the `config.retention` section of
+ * `ServerConfigSpec`.
+ *
+ * @stable
+ */
+interface RetentionConfig {
+  readonly enabled: boolean;
+  readonly intervalMs: number;
+  readonly spansDays: number;
+  readonly consolidatorRunsDays: number;
+  readonly dlqExhaustedDays: number;
+  readonly idempotency: boolean;
+  readonly sessionsDays?: number;
+  readonly sessionsClosedOnly: boolean;
+  readonly memoryHistoryDays?: number;
+  readonly workflowThreadsDays?: number;
+  readonly auditDays?: number;
+}
+/**
+ * Structural slice of `GraphorinSqliteStore` the sweep consumes. Typed
+ * structurally so custom store implementations (and test fakes) work;
+ * a surface whose method is absent is skipped, never an error.
+ *
+ * @stable
+ */
+interface RetentionStoreLike {
+  readonly connection: SqliteConnection;
+  readonly sessions: {
+    pruneSessions(opts: {
+      readonly beforeEpochMs?: number;
+      readonly closedOnly?: boolean;
+    }): Promise<number>;
+    pruneAuditEntries(beforeEpochMs: number): Promise<number>;
+  };
+  readonly memory: {
+    pruneHistory(olderThanMs: number): Promise<number>;
+  };
+  readonly checkpoints: {
+    pruneThreads(opts: {
+      readonly beforeEpochMs: number;
+      readonly onlyTerminal?: boolean;
+    }): Promise<number>;
+  };
+  readonly idempotency: {
+    prune(olderThan: number): Promise<number>;
+  };
+}
+/** @stable */
+type RetentionLogLevel = 'info' | 'warn';
+/**
+ * Logging seam: `warn` on a failed surface, `info` with per-surface
+ * deletion counts after each sweep. Defaults to a no-op.
+ *
+ * @stable
+ */
+type RetentionLog = (level: RetentionLogLevel, message: string, fields?: Record<string, unknown>) => void;
+/** @stable */
+interface ScheduleRetentionOptions {
+  readonly store: RetentionStoreLike;
+  readonly config: RetentionConfig;
+  readonly now: () => number;
+  readonly log?: RetentionLog;
+  /**
+   * Test seam for the span sweep (the real one issues SQL against
+   * `store.connection`).
+   *
+   * @internal
+   */
+  readonly pruneSpansImpl?: (conn: SqliteConnection, opts: {
+    readonly beforeEpochMs: number;
+  }) => number;
+}
+/**
+ * Console-backed {@link RetentionLog} honouring the
+ * `observability.logger` config flavour. Returns `undefined` for
+ * `'silent'` so callers can pass the result straight through.
+ *
+ * @stable
+ */
+declare function createConsoleRetentionLog(flavour: 'json' | 'pretty' | 'silent'): RetentionLog | undefined;
+/**
+ * W-010: schedule the periodic retention sweep. Same lifecycle shape
+ * as `scheduleRunPruning`: `unref`-ed `setInterval` + a stop function.
+ * The FIRST sweep runs immediately on scheduling - a server that is
+ * restarted more often than `intervalMs` would otherwise never prune
+ * anything. Each surface is isolated in its own try/catch: one failing
+ * prune logs a WARN and never blocks the others. Overlapping sweeps
+ * are skipped (the previous sweep still running when the timer fires
+ * again is a signal the interval is too tight, not a reason to pile
+ * up writers).
+ *
+ * Returns a stop function; with `config.enabled === false` no timer is
+ * created and the stop function is a no-op.
+ *
+ * @stable
+ */
+declare function scheduleRetentionSweeps(options: ScheduleRetentionOptions): () => void;
+//#endregion
+export { RetentionConfig, RetentionLog, RetentionLogLevel, RetentionStoreLike, ScheduleRetentionOptions, createConsoleRetentionLog, scheduleRetentionSweeps };
+//# sourceMappingURL=retention.d.ts.map

package/dist/runtime/retention.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.d.ts","names":[],"sources":["../../src/runtime/retention.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;UA6CiB,eAAA;;;;;;;;;;;;;;;;;;;;UAqBA,kBAAA;uBACM;;;;;QAKf;8CACsC;;;uCAGP;;;;;;QAM/B;;;8BAGsB;;;;KAKlB,iBAAA;;;;;;;KAQA,YAAA,WACH,6CAEE;;UAIM,wBAAA;kBACC;mBACC;;iBAEF;;;;;;;mCAQP;;;;;;;;;;;iBAYM,yBAAA,yCAEb;;;;;;;;;;;;;;;;;iBAsDa,uBAAA,UAAiC"}