@jini-ai/integrations 0.3.1 → 0.3.3

package/dist/media-providers/dispatch/async-operation-store.d.ts

@@ -0,0 +1,154 @@
+/**
+ * `AsyncOperationStore` — the durable operation row behind submit-then-poll media generation.
+ *
+ * Why this exists alongside `task-store.ts`'s `MediaTaskStore`: they model different things and
+ * only one of them survives a restart usefully. `MediaTaskStore` is a *task tracker* — it records
+ * that a generation happened and its `reconcileOnBoot` deliberately marks every still-in-flight
+ * task `'interrupted'`, because a synchronous `fetch` that died with its process genuinely cannot
+ * be resumed. This store is the opposite case: a vendor-side job that is still running *on the
+ * vendor* after our process died, and whose result is still retrievable by polling. It therefore
+ * carries the four columns a poll loop needs and a task tracker does not — `attempts`,
+ * `nextPollAt`, a worker `lease`, and an absolute `deadlineAt` — and its `reconcileOnBoot`
+ * *releases* leases rather than terminating the work.
+ *
+ * Two independent bounds are mandatory, not redundant: `maxAttempts` catches a vendor that answers
+ * "pending" forever, and `deadlineAt` catches a vendor that stops answering at all. Neither one
+ * subsumes the other.
+ *
+ * `state` is the vendor's own resumption handle (a job id, a poll URL). It is deliberately
+ * validated on every write to reject credential material: the row outlives the process and is the
+ * one place a leaked key would become durable. Credentials are re-resolved per poll tick through
+ * the signer seam instead — see `polling-adapter.ts`.
+ */
+/**
+ * `unknown` is a real terminal-ish state, not a failure: it means the operation may or may not
+ * have taken effect at the vendor and cannot be safely retried without an idempotency proof. It is
+ * reachable only from a crash gap or a blown deadline, and exists so those never masquerade as
+ * either success or a retryable failure.
+ */
+export type AsyncOperationStatus = 'submitted' | 'polling' | 'succeeded' | 'failed' | 'unknown';
+/**
+ * The persisted shape's version discriminator. Bumped whenever `AsyncOperationRecord`'s stored
+ * shape changes; `hydrateAsyncOperationRecord` branches on it so an old row is upgraded on read
+ * rather than rescued by a migration script.
+ *
+ * This is deliberately the same mechanism `ffb5ce44` used to close the AAD gap — a version column,
+ * a read path that branches on it, and an idempotent backfill only where one is actually needed —
+ * rather than a second migration playbook.
+ */
+export declare const ASYNC_OPERATION_SCHEMA_VERSION = 1;
+export declare const CREDENTIAL_IN_STATE_MESSAGE = "async operation state must never carry credential material \u2014 credentials are re-resolved per poll tick through the signer seam";
+export interface AsyncOperationError {
+    readonly message: string;
+    readonly status?: number;
+    readonly code?: string;
+}
+/** The generated bytes, held base64-encoded so the row stays JSON-serializable for a durable adapter. */
+export interface AsyncOperationResult {
+    readonly bytesBase64: string;
+    readonly providerNote: string;
+    readonly suggestedExt?: string;
+}
+export interface AsyncOperationRecord {
+    /** Shape discriminator — see `ASYNC_OPERATION_SCHEMA_VERSION`. Stamped once at create and never rewritten. */
+    readonly schemaVersion: number;
+    readonly id: string;
+    readonly providerId: string;
+    readonly routeKey: string;
+    /** Opaque host-supplied scoping key (a run id, a workspace id) — never a domain noun this package knows. */
+    readonly ownerRef: string;
+    readonly status: AsyncOperationStatus;
+    readonly attempts: number;
+    /** Bound 1: caps a vendor that answers "pending" forever. */
+    readonly maxAttempts: number;
+    /** Absolute epoch ms after which this operation may not be polled again. Bound 2: caps a vendor that stops answering. */
+    readonly deadlineAt: number;
+    readonly nextPollAt: number;
+    readonly leaseOwner: string | null;
+    readonly leaseExpiresAt: number | null;
+    /** The vendor's resumption handle. Never credential material — see `CREDENTIAL_IN_STATE_MESSAGE`. */
+    readonly state: Readonly<Record<string, unknown>> | null;
+    readonly result: AsyncOperationResult | null;
+    readonly error: AsyncOperationError | null;
+    readonly createdAt: number;
+    readonly updatedAt: number;
+}
+export interface AsyncOperationCreateInput {
+    readonly id: string;
+    readonly providerId: string;
+    readonly routeKey: string;
+    readonly ownerRef: string;
+    readonly maxAttempts: number;
+    readonly deadlineAt: number;
+    readonly nextPollAt?: number;
+    readonly status?: AsyncOperationStatus;
+    readonly state?: Readonly<Record<string, unknown>> | null;
+}
+export interface AsyncOperationPatch {
+    readonly status?: AsyncOperationStatus;
+    readonly attempts?: number;
+    readonly nextPollAt?: number;
+    readonly state?: Readonly<Record<string, unknown>> | null;
+    readonly result?: AsyncOperationResult | null;
+    readonly error?: AsyncOperationError | null;
+    readonly leaseOwner?: string | null;
+    readonly leaseExpiresAt?: number | null;
+}
+export interface AsyncOperationClaimOptions {
+    readonly now: number;
+    readonly leaseOwner: string;
+    readonly leaseMs: number;
+    readonly limit?: number;
+}
+export interface AsyncOperationReconcileResult {
+    /** Rows whose worker died holding a lease — released for another worker, status untouched. */
+    readonly leasesReleased: number;
+    /** Rows that blew their absolute deadline while unattended — moved to `unknown`, never to `failed`. */
+    readonly deadlineExpired: number;
+}
+export interface AsyncOperationStore {
+    create(input: AsyncOperationCreateInput): Promise<AsyncOperationRecord>;
+    get(id: string): Promise<AsyncOperationRecord | null>;
+    update(id: string, patch: AsyncOperationPatch): Promise<AsyncOperationRecord | null>;
+    listByOwner(ownerRef: string): Promise<AsyncOperationRecord[]>;
+    /** Atomically leases every due, unleased, non-terminal operation and returns the leased rows. */
+    claimDue(options: AsyncOperationClaimOptions): Promise<AsyncOperationRecord[]>;
+    releaseLease(id: string): Promise<void>;
+    /**
+     * Boot-time recovery. Unlike `MediaTaskStore.reconcileOnBoot`, this does NOT terminate in-flight
+     * work: a vendor-side job outlives our process, so the row stays pollable and only its dead
+     * lease is cleared. Rows already past their absolute deadline go to `unknown` — never `failed`,
+     * because an unattended deadline says nothing about whether the vendor did the work.
+     */
+    reconcileOnBoot(options: {
+        now: number;
+    }): Promise<AsyncOperationReconcileResult>;
+}
+/**
+ * Rejects credential material anywhere in an operation `state` object.
+ *
+ * @throws `Error(CREDENTIAL_IN_STATE_MESSAGE)` when any key at any depth matches
+ *   `CREDENTIAL_KEY_PATTERN`.
+ * @complexity O(n) in the total number of keys, bounded by `MAX_STATE_DEPTH` against a cyclic or
+ *   pathologically nested object.
+ */
+export declare function assertNoCredentialMaterial(state: Readonly<Record<string, unknown>> | null | undefined): void;
+/**
+ * The branching read path for a persisted operation row.
+ *
+ * A durable adapter calls this on every row it loads. A row with no discriminator predates
+ * versioning (v0) and is upgraded in place on read; a row from a newer build is refused loudly
+ * rather than misread, because silently reinterpreting an unknown shape is how a stored operation
+ * becomes a duplicate vendor charge.
+ *
+ * @throws When `schemaVersion` is newer than this build understands.
+ * @complexity O(1).
+ */
+export declare function hydrateAsyncOperationRecord(raw: Record<string, unknown>): AsyncOperationRecord;
+/**
+ * Creates the in-memory reference `AsyncOperationStore`. No persistence — a durable adapter
+ * implements the same interface; every method here is written so the equivalent SQL is a direct
+ * translation (`claimDue` in particular is a single conditional UPDATE ... RETURNING).
+ */
+export declare function createInMemoryAsyncOperationStore(): AsyncOperationStore;
+//# sourceMappingURL=async-operation-store.d.ts.map

package/dist/media-providers/dispatch/async-operation-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"async-operation-store.d.ts","sourceRoot":"","sources":["../../../src/media-providers/dispatch/async-operation-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEhG;;;;;;;;GAQG;AACH,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAqBhD,eAAO,MAAM,2BAA2B,wIAC0F,CAAC;AAEnI,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,yGAAyG;AACzG,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,8GAA8G;IAC9G,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,4GAA4G;IAC5G,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,yHAAyH;IACzH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,qGAAqG;IACrG,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IACzD,QAAQ,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;CAC3D;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAC1D,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,6BAA6B;IAC5C,8FAA8F;IAC9F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,uGAAuG;IACvG,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACxE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IACtD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IACrF,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC/D,iGAAiG;IACjG,QAAQ,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC/E,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC;;;;;OAKG;IACH,eAAe,CAAC,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;CACnF;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAmB5G;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,oBAAoB,CA6B9F;AAoBD;;;;GAIG;AACH,wBAAgB,iCAAiC,IAAI,mBAAmB,CA8IvE"}

package/dist/media-providers/dispatch/async-operation-store.js

@@ -0,0 +1,277 @@
+/**
+ * `AsyncOperationStore` — the durable operation row behind submit-then-poll media generation.
+ *
+ * Why this exists alongside `task-store.ts`'s `MediaTaskStore`: they model different things and
+ * only one of them survives a restart usefully. `MediaTaskStore` is a *task tracker* — it records
+ * that a generation happened and its `reconcileOnBoot` deliberately marks every still-in-flight
+ * task `'interrupted'`, because a synchronous `fetch` that died with its process genuinely cannot
+ * be resumed. This store is the opposite case: a vendor-side job that is still running *on the
+ * vendor* after our process died, and whose result is still retrievable by polling. It therefore
+ * carries the four columns a poll loop needs and a task tracker does not — `attempts`,
+ * `nextPollAt`, a worker `lease`, and an absolute `deadlineAt` — and its `reconcileOnBoot`
+ * *releases* leases rather than terminating the work.
+ *
+ * Two independent bounds are mandatory, not redundant: `maxAttempts` catches a vendor that answers
+ * "pending" forever, and `deadlineAt` catches a vendor that stops answering at all. Neither one
+ * subsumes the other.
+ *
+ * `state` is the vendor's own resumption handle (a job id, a poll URL). It is deliberately
+ * validated on every write to reject credential material: the row outlives the process and is the
+ * one place a leaked key would become durable. Credentials are re-resolved per poll tick through
+ * the signer seam instead — see `polling-adapter.ts`.
+ */
+/**
+ * The persisted shape's version discriminator. Bumped whenever `AsyncOperationRecord`'s stored
+ * shape changes; `hydrateAsyncOperationRecord` branches on it so an old row is upgraded on read
+ * rather than rescued by a migration script.
+ *
+ * This is deliberately the same mechanism `ffb5ce44` used to close the AAD gap — a version column,
+ * a read path that branches on it, and an idempotent backfill only where one is actually needed —
+ * rather than a second migration playbook.
+ */
+export const ASYNC_OPERATION_SCHEMA_VERSION = 1;
+const TERMINAL_STATUSES = new Set(['succeeded', 'failed', 'unknown']);
+const ALLOWED_TRANSITIONS = {
+    submitted: new Set(['submitted', 'polling', 'succeeded', 'failed', 'unknown']),
+    polling: new Set(['polling', 'succeeded', 'failed', 'unknown']),
+    succeeded: new Set(['succeeded']),
+    failed: new Set(['failed']),
+    unknown: new Set(['unknown']),
+};
+/**
+ * Keys whose presence in `state` indicates credential material. Matched case-insensitively against
+ * every key at every depth. Deliberately a closed denylist of the shapes this package's own
+ * adapters actually produce (`ProviderCredentials.apiKey`, an `authorization` header, a raw
+ * bearer/secret/token) rather than a heuristic on values, so the failure is a loud, explainable
+ * rejection instead of a guess.
+ */
+const CREDENTIAL_KEY_PATTERN = /^(apikey|api_key|authorization|bearer|secret|password|access_token|accesstoken|refresh_token|refreshtoken)$/i;
+export const CREDENTIAL_IN_STATE_MESSAGE = 'async operation state must never carry credential material — credentials are re-resolved per poll tick through the signer seam';
+/**
+ * Rejects credential material anywhere in an operation `state` object.
+ *
+ * @throws `Error(CREDENTIAL_IN_STATE_MESSAGE)` when any key at any depth matches
+ *   `CREDENTIAL_KEY_PATTERN`.
+ * @complexity O(n) in the total number of keys, bounded by `MAX_STATE_DEPTH` against a cyclic or
+ *   pathologically nested object.
+ */
+export function assertNoCredentialMaterial(state) {
+    if (state == null)
+        return;
+    const seen = new Set();
+    const walk = (value, depth) => {
+        if (depth > 12 || value === null || typeof value !== 'object')
+            return;
+        if (seen.has(value))
+            return;
+        seen.add(value);
+        if (Array.isArray(value)) {
+            for (const entry of value)
+                walk(entry, depth + 1);
+            return;
+        }
+        for (const [key, entry] of Object.entries(value)) {
+            if (CREDENTIAL_KEY_PATTERN.test(key)) {
+                throw new Error(CREDENTIAL_IN_STATE_MESSAGE);
+            }
+            walk(entry, depth + 1);
+        }
+    };
+    walk(state, 0);
+}
+/**
+ * The branching read path for a persisted operation row.
+ *
+ * A durable adapter calls this on every row it loads. A row with no discriminator predates
+ * versioning (v0) and is upgraded in place on read; a row from a newer build is refused loudly
+ * rather than misread, because silently reinterpreting an unknown shape is how a stored operation
+ * becomes a duplicate vendor charge.
+ *
+ * @throws When `schemaVersion` is newer than this build understands.
+ * @complexity O(1).
+ */
+export function hydrateAsyncOperationRecord(raw) {
+    const stored = typeof raw.schemaVersion === 'number' ? raw.schemaVersion : 0;
+    if (stored > ASYNC_OPERATION_SCHEMA_VERSION) {
+        throw new Error(`async operation row was written at schema version ${stored}, newer than this build understands (${ASYNC_OPERATION_SCHEMA_VERSION}) — upgrade rather than risk misreading it`);
+    }
+    // v0 -> v1 added only the discriminator itself, so the upgrade is a stamp. A later version adds
+    // its own branch here; the row is never rewritten on disk just to be readable.
+    const now = Date.now();
+    return {
+        schemaVersion: ASYNC_OPERATION_SCHEMA_VERSION,
+        id: String(raw.id),
+        providerId: String(raw.providerId),
+        routeKey: String(raw.routeKey),
+        ownerRef: String(raw.ownerRef),
+        status: raw.status ?? 'submitted',
+        attempts: typeof raw.attempts === 'number' ? raw.attempts : 0,
+        maxAttempts: Number(raw.maxAttempts),
+        deadlineAt: Number(raw.deadlineAt),
+        nextPollAt: typeof raw.nextPollAt === 'number' ? raw.nextPollAt : now,
+        leaseOwner: raw.leaseOwner ?? null,
+        leaseExpiresAt: raw.leaseExpiresAt ?? null,
+        state: raw.state ?? null,
+        result: raw.result ?? null,
+        error: raw.error ?? null,
+        createdAt: typeof raw.createdAt === 'number' ? raw.createdAt : now,
+        updatedAt: typeof raw.updatedAt === 'number' ? raw.updatedAt : now,
+    };
+}
+function cloneRecord(row) {
+    return {
+        ...row,
+        state: row.state === null ? null : structuredClone(row.state),
+        result: row.result === null ? null : { ...row.result },
+        error: row.error === null ? null : { ...row.error },
+    };
+}
+function assertTransition(from, to) {
+    if (!ALLOWED_TRANSITIONS[from]) {
+        throw new RangeError(`Invalid async operation status: "${from}"`);
+    }
+    if (!ALLOWED_TRANSITIONS[from].has(to)) {
+        throw new RangeError(`Invalid async operation transition: "${from}" -> "${to}"`);
+    }
+}
+/**
+ * Creates the in-memory reference `AsyncOperationStore`. No persistence — a durable adapter
+ * implements the same interface; every method here is written so the equivalent SQL is a direct
+ * translation (`claimDue` in particular is a single conditional UPDATE ... RETURNING).
+ */
+export function createInMemoryAsyncOperationStore() {
+    const rows = new Map();
+    const requireRow = (id) => rows.get(id);
+    return {
+        async create(input) {
+            if (rows.has(input.id)) {
+                throw new Error(`async operation "${input.id}" already exists`);
+            }
+            if (!Number.isFinite(input.maxAttempts) || input.maxAttempts < 1) {
+                throw new RangeError(`Invalid maxAttempts: ${input.maxAttempts} must be a finite number >= 1`);
+            }
+            if (!Number.isFinite(input.deadlineAt)) {
+                throw new RangeError(`Invalid deadlineAt: ${input.deadlineAt} must be a finite epoch-ms timestamp`);
+            }
+            assertNoCredentialMaterial(input.state);
+            const now = Date.now();
+            const row = {
+                schemaVersion: ASYNC_OPERATION_SCHEMA_VERSION,
+                id: input.id,
+                providerId: input.providerId,
+                routeKey: input.routeKey,
+                ownerRef: input.ownerRef,
+                status: input.status ?? 'submitted',
+                attempts: 0,
+                maxAttempts: input.maxAttempts,
+                deadlineAt: input.deadlineAt,
+                nextPollAt: input.nextPollAt ?? now,
+                leaseOwner: null,
+                leaseExpiresAt: null,
+                state: input.state === undefined || input.state === null ? null : structuredClone(input.state),
+                result: null,
+                error: null,
+                createdAt: now,
+                updatedAt: now,
+            };
+            rows.set(row.id, row);
+            return cloneRecord(row);
+        },
+        async get(id) {
+            const row = requireRow(id);
+            return row ? cloneRecord(row) : null;
+        },
+        async update(id, patch) {
+            const existing = requireRow(id);
+            if (!existing)
+                return null;
+            if ('state' in patch)
+                assertNoCredentialMaterial(patch.state);
+            const status = patch.status ?? existing.status;
+            assertTransition(existing.status, status);
+            const next = {
+                ...existing,
+                schemaVersion: existing.schemaVersion,
+                status,
+                attempts: patch.attempts ?? existing.attempts,
+                nextPollAt: patch.nextPollAt ?? existing.nextPollAt,
+                state: 'state' in patch ? (patch.state == null ? null : structuredClone(patch.state)) : existing.state,
+                result: 'result' in patch ? (patch.result ?? null) : existing.result,
+                error: 'error' in patch ? (patch.error ?? null) : existing.error,
+                leaseOwner: 'leaseOwner' in patch ? (patch.leaseOwner ?? null) : existing.leaseOwner,
+                leaseExpiresAt: 'leaseExpiresAt' in patch ? (patch.leaseExpiresAt ?? null) : existing.leaseExpiresAt,
+                updatedAt: Date.now(),
+            };
+            rows.set(id, next);
+            return cloneRecord(next);
+        },
+        async listByOwner(ownerRef) {
+            return [...rows.values()]
+                .filter((row) => row.ownerRef === ownerRef)
+                .sort((a, b) => a.createdAt - b.createdAt)
+                .map(cloneRecord);
+        },
+        async claimDue(options) {
+            const { now, leaseOwner, leaseMs } = options;
+            const limit = options.limit ?? 10;
+            const claimed = [];
+            for (const row of [...rows.values()].sort((a, b) => a.nextPollAt - b.nextPollAt)) {
+                if (claimed.length >= limit)
+                    break;
+                if (TERMINAL_STATUSES.has(row.status))
+                    continue;
+                if (row.nextPollAt > now)
+                    continue;
+                // A live lease held by anyone (including this worker's previous tick) blocks the claim;
+                // an expired one does not, which is what makes a dead worker's rows recoverable.
+                if (row.leaseExpiresAt !== null && row.leaseExpiresAt > now)
+                    continue;
+                const leased = {
+                    ...row,
+                    leaseOwner,
+                    leaseExpiresAt: now + leaseMs,
+                    updatedAt: now,
+                };
+                rows.set(row.id, leased);
+                claimed.push(cloneRecord(leased));
+            }
+            return claimed;
+        },
+        async releaseLease(id) {
+            const row = requireRow(id);
+            if (!row)
+                return;
+            rows.set(id, { ...row, leaseOwner: null, leaseExpiresAt: null, updatedAt: Date.now() });
+        },
+        async reconcileOnBoot(options) {
+            const { now } = options;
+            let leasesReleased = 0;
+            let deadlineExpired = 0;
+            for (const row of [...rows.values()]) {
+                if (TERMINAL_STATUSES.has(row.status))
+                    continue;
+                if (row.deadlineAt <= now) {
+                    rows.set(row.id, {
+                        ...row,
+                        status: 'unknown',
+                        leaseOwner: null,
+                        leaseExpiresAt: null,
+                        error: {
+                            message: 'async operation passed its absolute deadline while unattended — vendor-side effect is undetermined',
+                            code: 'DEADLINE_EXPIRED',
+                        },
+                        updatedAt: now,
+                    });
+                    deadlineExpired += 1;
+                    continue;
+                }
+                if (row.leaseOwner !== null && (row.leaseExpiresAt === null || row.leaseExpiresAt <= now)) {
+                    rows.set(row.id, { ...row, leaseOwner: null, leaseExpiresAt: null, updatedAt: now });
+                    leasesReleased += 1;
+                }
+            }
+            return { leasesReleased, deadlineExpired };
+        },
+    };
+}
+//# sourceMappingURL=async-operation-store.js.map

package/dist/media-providers/dispatch/async-operation-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"async-operation-store.js","sourceRoot":"","sources":["../../../src/media-providers/dispatch/async-operation-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAUH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAEhD,MAAM,iBAAiB,GAAsC,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAEzG,MAAM,mBAAmB,GAA8E;IACrG,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC9E,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC/D,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;IACjC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC3B,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;CAC9B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG,8GAA8G,CAAC;AAE9I,MAAM,CAAC,MAAM,2BAA2B,GACtC,gIAAgI,CAAC;AA8FnI;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAA2D;IACpG,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;IAChC,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,KAAa,EAAQ,EAAE;QACnD,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO;QACtE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QAC5B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,KAAK,IAAI,KAAK;gBAAE,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC5E,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACjB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CAAC,GAA4B;IACtE,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,MAAM,GAAG,8BAA8B,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,qDAAqD,MAAM,wCAAwC,8BAA8B,4CAA4C,CAC9K,CAAC;IACJ,CAAC;IACD,gGAAgG;IAChG,+EAA+E;IAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO;QACL,aAAa,EAAE,8BAA8B;QAC7C,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QAClC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9B,MAAM,EAAG,GAAG,CAAC,MAA2C,IAAI,WAAW;QACvE,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7D,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;QACpC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QAClC,UAAU,EAAE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG;QACrE,UAAU,EAAG,GAAG,CAAC,UAAwC,IAAI,IAAI;QACjE,cAAc,EAAG,GAAG,CAAC,cAA4C,IAAI,IAAI;QACzE,KAAK,EAAG,GAAG,CAAC,KAA8D,IAAI,IAAI;QAClF,MAAM,EAAG,GAAG,CAAC,MAAkD,IAAI,IAAI;QACvE,KAAK,EAAG,GAAG,CAAC,KAAgD,IAAI,IAAI;QACpE,SAAS,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG;QAClE,SAAS,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAyB;IAC5C,OAAO;QACL,GAAG,GAAG;QACN,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC;QAC7D,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE;QACtD,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE;KACpD,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA0B,EAAE,EAAwB;IAC5E,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,UAAU,CAAC,oCAAoC,IAAI,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,UAAU,CAAC,wCAAwC,IAAI,SAAS,EAAE,GAAG,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC;IAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAgC,CAAC;IAErD,MAAM,UAAU,GAAG,CAAC,EAAU,EAAoC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAElF,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAgC;YAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;gBACjE,MAAM,IAAI,UAAU,CAAC,wBAAwB,KAAK,CAAC,WAAW,+BAA+B,CAAC,CAAC;YACjG,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,UAAU,CAAC,uBAAuB,KAAK,CAAC,UAAU,sCAAsC,CAAC,CAAC;YACtG,CAAC;YACD,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAExC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,GAAG,GAAyB;gBAChC,aAAa,EAAE,8BAA8B;gBAC7C,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,WAAW;gBACnC,QAAQ,EAAE,CAAC;gBACX,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,GAAG;gBACnC,UAAU,EAAE,IAAI;gBAChB,cAAc,EAAE,IAAI;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC9F,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,IAAI;gBACX,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACtB,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,EAAU;YAClB,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;YAC3B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAA0B;YACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC3B,IAAI,OAAO,IAAI,KAAK;gBAAE,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAE9D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC;YAC/C,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAE1C,MAAM,IAAI,GAAyB;gBACjC,GAAG,QAAQ;gBACX,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,MAAM;gBACN,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;gBAC7C,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;gBACnD,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK;gBACtG,MAAM,EAAE,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM;gBACpE,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK;gBAChE,UAAU,EAAE,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU;gBACpF,cAAc,EAAE,gBAAgB,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc;gBACpG,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACnB,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,QAAgB;YAChC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;iBACtB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;iBAC1C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;iBACzC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtB,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,OAAmC;YAChD,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;YAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YAClC,MAAM,OAAO,GAA2B,EAAE,CAAC;YAE3C,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjF,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK;oBAAE,MAAM;gBACnC,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,SAAS;gBAChD,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG;oBAAE,SAAS;gBACnC,wFAAwF;gBACxF,iFAAiF;gBACjF,IAAI,GAAG,CAAC,cAAc,KAAK,IAAI,IAAI,GAAG,CAAC,cAAc,GAAG,GAAG;oBAAE,SAAS;gBAEtE,MAAM,MAAM,GAAyB;oBACnC,GAAG,GAAG;oBACN,UAAU;oBACV,cAAc,EAAE,GAAG,GAAG,OAAO;oBAC7B,SAAS,EAAE,GAAG;iBACf,CAAC;gBACF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACpC,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,EAAU;YAC3B,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG;gBAAE,OAAO;YACjB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,OAAwB;YAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;YACxB,IAAI,cAAc,GAAG,CAAC,CAAC;YACvB,IAAI,eAAe,GAAG,CAAC,CAAC;YAExB,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;gBACrC,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,SAAS;gBAEhD,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;oBAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE;wBACf,GAAG,GAAG;wBACN,MAAM,EAAE,SAAS;wBACjB,UAAU,EAAE,IAAI;wBAChB,cAAc,EAAE,IAAI;wBACpB,KAAK,EAAE;4BACL,OAAO,EAAE,oGAAoG;4BAC7G,IAAI,EAAE,kBAAkB;yBACzB;wBACD,SAAS,EAAE,GAAG;qBACf,CAAC,CAAC;oBACH,eAAe,IAAI,CAAC,CAAC;oBACrB,SAAS;gBACX,CAAC;gBAED,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,KAAK,IAAI,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,EAAE,CAAC;oBAC1F,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;oBACrF,cAAc,IAAI,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;YACD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/media-providers/dispatch/index.d.ts

@@ -21,5 +21,13 @@ export { dispatchVendorRequest, requireApiKey } from './vendor-adapter.js';
 export type { VendorAdapter, VendorCredentialGuard, VendorRequest, VendorRequestBuilder, VendorResponseParser } from './vendor-adapter.js';
 export { createVendorAdapterRegistry, mediaVendorRegistry, VendorAdapterRegistry } from './vendor-registry.js';
 export { createHexEnvelopeAudioParser, createRawBytesParser } from './response-parsers.js';
+export { ASYNC_OPERATION_SCHEMA_VERSION, assertNoCredentialMaterial, createInMemoryAsyncOperationStore, CREDENTIAL_IN_STATE_MESSAGE, hydrateAsyncOperationRecord, } from './async-operation-store.js';
+export type { AsyncOperationClaimOptions, AsyncOperationCreateInput, AsyncOperationError, AsyncOperationPatch, AsyncOperationReconcileResult, AsyncOperationRecord, AsyncOperationResult, AsyncOperationStatus, AsyncOperationStore, } from './async-operation-store.js';
+export { createBearerSigner, withUnsignedRequestInit } from './polling-adapter.js';
+export type { AnyPollingVendorAdapter, ExpectedLatencyClass, PollOutcome, PollingVendorAdapter, RequestSigner, SignedVendorRequest, SubmitOutcome, UnsignedVendorRequest, } from './polling-adapter.js';
+export { DEFAULT_DEADLINE_MS, DEFAULT_GRACE_MS, DEFAULT_MAX_ATTEMPTS, DEFAULT_POLL_INTERVAL_MS, pollDueOperations, recoverAfterRestart, startOperation, } from './operation-runtime.js';
+export type { OperationRuntimeDeps, PollDueParams, PollDueStats, RecoverParams, RecoverResult, StartOperationOutcome, StartOperationParams, } from './operation-runtime.js';
+export { createImageRouterVideoPollingAdapter } from './providers/imagerouter-video-async.js';
+export type { ImageRouterVideoConfig, ImageRouterVideoMeta } from './providers/imagerouter-video-async.js';
 export type { HexEnvelopeAudioMeta, HexEnvelopeAudioParserOptions, RawBytesParserOptions } from './response-parsers.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/media-providers/dispatch/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/media-providers/dispatch/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,iCAAiC,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAC9H,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAChK,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACrE,YAAY,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAIpB,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC3E,YAAY,EAAE,aAAa,EAAE,qBAAqB,EAAE,aAAa,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3I,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC/G,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC3F,YAAY,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/media-providers/dispatch/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,iCAAiC,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAC9H,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAChK,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACrE,YAAY,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAIpB,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC3E,YAAY,EAAE,aAAa,EAAE,qBAAqB,EAAE,aAAa,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3I,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC/G,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAI3F,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,iCAAiC,EACjC,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,0BAA0B,EAC1B,yBAAyB,EACzB,mBAAmB,EACnB,mBAAmB,EACnB,6BAA6B,EAC7B,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AACnF,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,WAAW,EACX,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,aAAa,EACb,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,oBAAoB,EACpB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,aAAa,EACb,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC;AAC9F,YAAY,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC3G,YAAY,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/media-providers/dispatch/index.js

@@ -21,4 +21,11 @@ export { assertAndFetchExternalAsset, assertExternalAssetUrl, isBlockedExternalA
 export { dispatchVendorRequest, requireApiKey } from './vendor-adapter.js';
 export { createVendorAdapterRegistry, mediaVendorRegistry, VendorAdapterRegistry } from './vendor-registry.js';
 export { createHexEnvelopeAudioParser, createRawBytesParser } from './response-parsers.js';
+// The submit-then-poll tier (added 2026-09-02) — purely additive alongside `VendorAdapter`, for
+// vendors that hand back a job handle instead of finishing inside one request/response. See
+// `operation-runtime.ts`'s module doc for the persist-before-fetch design.
+export { ASYNC_OPERATION_SCHEMA_VERSION, assertNoCredentialMaterial, createInMemoryAsyncOperationStore, CREDENTIAL_IN_STATE_MESSAGE, hydrateAsyncOperationRecord, } from './async-operation-store.js';
+export { createBearerSigner, withUnsignedRequestInit } from './polling-adapter.js';
+export { DEFAULT_DEADLINE_MS, DEFAULT_GRACE_MS, DEFAULT_MAX_ATTEMPTS, DEFAULT_POLL_INTERVAL_MS, pollDueOperations, recoverAfterRestart, startOperation, } from './operation-runtime.js';
+export { createImageRouterVideoPollingAdapter } from './providers/imagerouter-video-async.js';
 //# sourceMappingURL=index.js.map

package/dist/media-providers/dispatch/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/media-providers/dispatch/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,iCAAiC,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAC9H,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAYhK,sEAAsE;AACtE,0EAA0E;AAC1E,wCAAwC;AACxC,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE3E,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC/G,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/media-providers/dispatch/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,iCAAiC,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAC9H,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAYhK,sEAAsE;AACtE,0EAA0E;AAC1E,wCAAwC;AACxC,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE3E,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC/G,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC3F,gGAAgG;AAChG,4FAA4F;AAC5F,2EAA2E;AAC3E,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,iCAAiC,EACjC,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AAYpC,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAWnF,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,GACf,MAAM,wBAAwB,CAAC;AAUhC,OAAO,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC"}

package/dist/media-providers/dispatch/operation-runtime.d.ts

@@ -0,0 +1,93 @@
+import type { AsyncOperationRecord, AsyncOperationStore } from './async-operation-store.js';
+import type { AnyPollingVendorAdapter, PollingVendorAdapter, RequestSigner } from './polling-adapter.js';
+import type { RenderContext, RenderResult } from './types.js';
+/** Interactive budget for the inline attempt. Deliberately NOT `FETCH_TIMEOUT_MS.GENERATE` (10min) — that is the backstop for the *request*, this is the ceiling on making a human wait. */
+export declare const DEFAULT_GRACE_MS = 4000;
+export declare const DEFAULT_MAX_ATTEMPTS = 60;
+export declare const DEFAULT_DEADLINE_MS: number;
+export declare const DEFAULT_POLL_INTERVAL_MS = 5000;
+export interface OperationRuntimeDeps {
+    readonly store: AsyncOperationStore;
+    readonly signer: RequestSigner;
+    readonly fetchImpl?: typeof fetch;
+    readonly now?: () => number;
+    readonly newId?: () => string;
+}
+export interface StartOperationParams<Meta> {
+    readonly adapter: PollingVendorAdapter<Meta>;
+    readonly ctx: RenderContext;
+    readonly providerId: string;
+    readonly routeKey: string;
+    readonly ownerRef: string;
+    readonly maxAttempts?: number;
+    readonly deadlineMs?: number;
+    readonly graceMs?: number;
+}
+export type StartOperationOutcome = {
+    readonly done: true;
+    readonly operationId: string;
+    readonly result: RenderResult;
+} | {
+    readonly done: false;
+    readonly operationId: string;
+};
+/**
+ * Persists the operation row, issues the submit, and races it against the grace window.
+ *
+ * @returns `{done: true, result}` when the vendor finished inside the grace window, else
+ *   `{done: false, operationId}` — the row is already durable in both cases.
+ * @complexity O(1) plus one vendor round trip.
+ */
+export declare function startOperation<Meta>(deps: OperationRuntimeDeps, params: StartOperationParams<Meta>): Promise<StartOperationOutcome>;
+export interface PollDueParams {
+    /** Resolves the adapter registered for a row's `(providerId, routeKey)`. */
+    readonly adapters: (providerId: string, routeKey: string) => AnyPollingVendorAdapter | undefined;
+    /** Rehydrates the render context for a row. The row deliberately does not persist the context — it can hold reference-image data URLs, and none of it is needed to identify the vendor-side job. */
+    readonly resolveContext: (row: AsyncOperationRecord) => RenderContext;
+    readonly leaseOwner: string;
+    readonly leaseMs: number;
+    readonly limit?: number;
+}
+export interface PollDueStats {
+    readonly claimed: number;
+    readonly completed: number;
+    readonly failed: number;
+    readonly pending: number;
+    readonly unknown: number;
+}
+/**
+ * One leased worker tick: claims every due operation, advances each by exactly one vendor poll,
+ * and releases the lease. Safe to run concurrently on several workers — `claimDue` is the
+ * exclusion mechanism.
+ *
+ * Both bounds are enforced here, and in this order: the absolute deadline is checked *before* any
+ * vendor call (a blown deadline must not cost another request), the attempt cap after it.
+ *
+ * @complexity O(k) vendor round trips for k claimed operations.
+ */
+export declare function pollDueOperations(deps: OperationRuntimeDeps, params: PollDueParams): Promise<PollDueStats>;
+export interface RecoverParams {
+    readonly adapters: (providerId: string, routeKey: string) => AnyPollingVendorAdapter | undefined;
+    readonly now?: number;
+}
+export interface RecoverResult {
+    readonly leasesReleased: number;
+    readonly deadlineExpired: number;
+    /** Rows whose submit may or may not have reached the vendor and cannot be safely re-issued. */
+    readonly unknownCrashGap: number;
+    /** Rows whose adapter declares its submit idempotent — left `submitted` for the host to re-issue. */
+    readonly resubmittable: readonly string[];
+}
+/**
+ * Boot-time recovery. Releases dead leases and expires blown deadlines via the store, then handles
+ * the one case the store cannot decide alone: a row still at `submitted`, meaning the process died
+ * between persisting the row and learning whether the vendor accepted the submit.
+ *
+ * Retry safety is gated on idempotency, not assumed. An adapter that has not declared
+ * `submitIsIdempotent` sends that row to `unknown` for reconciliation — media generation is billed
+ * per call, so a silent re-issue can double a real charge.
+ *
+ * @complexity O(n) in stored operations.
+ */
+export declare function recoverAfterRestart(deps: OperationRuntimeDeps, params: RecoverParams): Promise<RecoverResult>;
+//# sourceMappingURL=operation-runtime.d.ts.map

package/dist/media-providers/dispatch/operation-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-runtime.d.ts","sourceRoot":"","sources":["../../../src/media-providers/dispatch/operation-runtime.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAEV,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,aAAa,EAAyB,MAAM,sBAAsB,CAAC;AAChI,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE9D,4LAA4L;AAC5L,eAAO,MAAM,gBAAgB,OAAQ,CAAC;AACtC,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,mBAAmB,QAAc,CAAC;AAC/C,eAAO,MAAM,wBAAwB,OAAQ,CAAC;AAE9C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB,CAAC,IAAI;IACxC,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GACpF;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAyB3D;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,IAAI,EACvC,IAAI,EAAE,oBAAoB,EAC1B,MAAM,EAAE,oBAAoB,CAAC,IAAI,CAAC,GACjC,OAAO,CAAC,qBAAqB,CAAC,CA2DhC;AAED,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,uBAAuB,GAAG,SAAS,CAAC;IACjG,oMAAoM;IACpM,QAAQ,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,oBAAoB,KAAK,aAAa,CAAC;IACtE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAgGhH;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,uBAAuB,GAAG,SAAS,CAAC;IACjG,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,+FAA+F;IAC/F,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,qGAAqG;IACrG,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAwBnH"}

package/dist/media-providers/dispatch/operation-runtime.js

@@ -0,0 +1,262 @@
+/**
+ * The submit-then-poll runtime: the piece that turns a `PollingVendorAdapter` plus an
+ * `AsyncOperationStore` into an operation that survives a restart.
+ *
+ * ## Persist first, then race
+ *
+ * `startOperation` writes the operation row **before** it issues any HTTP call, then races the
+ * in-flight submit against a short interactive grace window. If the vendor answers in time the
+ * caller gets `{done: true, result}` in the same round trip — indistinguishable from the
+ * synchronous tier. If it does not, the caller gets `{done: false, operationId}` and the *same*
+ * in-flight request keeps running and writes its own outcome into the row.
+ *
+ * That ordering is what makes crash safety fall out for free rather than being bolted on: there is
+ * no window in which work exists only inside a process. It is also why this is a race and not a
+ * fork — there is exactly one submit code path, and `expectedLatencyClass` only decides how long
+ * the caller is willing to wait on it, never what happens.
+ *
+ * Human callers and agents get the identical contract: a result, or an id to come back with.
+ *
+ * ## What is deliberately NOT here
+ *
+ * No scheduler. `pollDueOperations` is a single leased tick a host drives from whatever timer or
+ * queue it already runs — this package performs no I/O of its own beyond the vendor calls it is
+ * handed a `fetchImpl` for, a standing invariant across `@jini-ai/integrations/media-providers`.
+ */
+import { FETCH_TIMEOUT_MS, fetchWithTimeout } from '@jini-ai/platform';
+/** Interactive budget for the inline attempt. Deliberately NOT `FETCH_TIMEOUT_MS.GENERATE` (10min) — that is the backstop for the *request*, this is the ceiling on making a human wait. */
+export const DEFAULT_GRACE_MS = 4_000;
+export const DEFAULT_MAX_ATTEMPTS = 60;
+export const DEFAULT_DEADLINE_MS = 15 * 60_000;
+export const DEFAULT_POLL_INTERVAL_MS = 5_000;
+function resultToPayload(result) {
+    return {
+        bytesBase64: result.bytes.toString('base64'),
+        providerNote: result.providerNote,
+        ...(result.suggestedExt !== undefined ? { suggestedExt: result.suggestedExt } : {}),
+    };
+}
+function toOperationError(error) {
+    return { message: error instanceof Error ? error.message : String(error) };
+}
+async function performSigned(deps, request, timeoutMs) {
+    const signed = await deps.signer(request);
+    const doFetch = deps.fetchImpl;
+    if (doFetch)
+        return doFetch(signed.url, signed.init);
+    return fetchWithTimeout(signed.url, signed.init, { timeoutMs });
+}
+/**
+ * Persists the operation row, issues the submit, and races it against the grace window.
+ *
+ * @returns `{done: true, result}` when the vendor finished inside the grace window, else
+ *   `{done: false, operationId}` — the row is already durable in both cases.
+ * @complexity O(1) plus one vendor round trip.
+ */
+export async function startOperation(deps, params) {
+    const now = deps.now ?? Date.now;
+    const newId = deps.newId ?? (() => `op_${Math.random().toString(36).slice(2, 10)}_${now()}`);
+    const startedAt = now();
+    const operationId = newId();
+    // Before any HTTP call — this ordering IS the crash-safety mechanism.
+    await deps.store.create({
+        id: operationId,
+        providerId: params.providerId,
+        routeKey: params.routeKey,
+        ownerRef: params.ownerRef,
+        maxAttempts: params.maxAttempts ?? DEFAULT_MAX_ATTEMPTS,
+        deadlineAt: startedAt + (params.deadlineMs ?? DEFAULT_DEADLINE_MS),
+        nextPollAt: startedAt,
+    });
+    const settle = (async () => {
+        try {
+            const request = params.adapter.buildSubmitRequest(params.ctx);
+            const resp = await performSigned(deps, request, FETCH_TIMEOUT_MS.GENERATE);
+            const outcome = await params.adapter.parseSubmitResponse(resp, params.ctx, request);
+            if (outcome.kind === 'complete') {
+                await deps.store.update(operationId, { status: 'succeeded', result: resultToPayload(outcome.result) });
+                return { done: true, operationId, result: outcome.result };
+            }
+            await deps.store.update(operationId, {
+                status: 'polling',
+                state: outcome.state,
+                nextPollAt: now() + (outcome.retryAfterMs ?? DEFAULT_POLL_INTERVAL_MS),
+            });
+            return { done: false, operationId };
+        }
+        catch (error) {
+            await deps.store.update(operationId, { status: 'failed', error: toOperationError(error) });
+            return { done: false, operationId };
+        }
+    })();
+    const graceMs = params.graceMs ?? DEFAULT_GRACE_MS;
+    // A `'slow'` vendor is not worth making anyone wait on: the race is still the same single code
+    // path, its window is just zero.
+    const effectiveGraceMs = params.adapter.expectedLatencyClass === 'slow' ? 0 : graceMs;
+    let graceTimer;
+    const grace = new Promise((resolve) => {
+        graceTimer = setTimeout(() => resolve({ done: false, operationId }), effectiveGraceMs);
+    });
+    try {
+        // The losing side is never cancelled — an abandoned submit keeps running and settles the row
+        // the caller already holds an id for.
+        return await Promise.race([settle, grace]);
+    }
+    finally {
+        if (graceTimer)
+            clearTimeout(graceTimer);
+        // The caller may have walked away; the row still gets written, but an unobserved rejection
+        // must not take the process down.
+        void settle.catch(() => undefined);
+    }
+}
+/**
+ * One leased worker tick: claims every due operation, advances each by exactly one vendor poll,
+ * and releases the lease. Safe to run concurrently on several workers — `claimDue` is the
+ * exclusion mechanism.
+ *
+ * Both bounds are enforced here, and in this order: the absolute deadline is checked *before* any
+ * vendor call (a blown deadline must not cost another request), the attempt cap after it.
+ *
+ * @complexity O(k) vendor round trips for k claimed operations.
+ */
+export async function pollDueOperations(deps, params) {
+    const now = deps.now ?? Date.now;
+    const claimed = await deps.store.claimDue({
+        now: now(),
+        leaseOwner: params.leaseOwner,
+        leaseMs: params.leaseMs,
+        ...(params.limit !== undefined ? { limit: params.limit } : {}),
+    });
+    let completed = 0;
+    let failed = 0;
+    let pending = 0;
+    let unknown = 0;
+    for (const row of claimed) {
+        try {
+            const at = now();
+            if (row.deadlineAt <= at) {
+                await deps.store.update(row.id, {
+                    status: 'unknown',
+                    error: {
+                        message: 'async operation passed its absolute deadline — vendor-side effect is undetermined',
+                        code: 'DEADLINE_EXPIRED',
+                    },
+                });
+                unknown += 1;
+                continue;
+            }
+            if (row.attempts >= row.maxAttempts) {
+                await deps.store.update(row.id, {
+                    status: 'failed',
+                    error: {
+                        message: `async operation exhausted its ${row.maxAttempts} poll attempts without a terminal answer`,
+                        code: 'ATTEMPTS_EXHAUSTED',
+                    },
+                });
+                failed += 1;
+                continue;
+            }
+            const adapter = params.adapters(row.providerId, row.routeKey);
+            if (!adapter) {
+                await deps.store.update(row.id, {
+                    status: 'failed',
+                    error: { message: `no polling adapter registered for "${row.providerId}" / "${row.routeKey}"`, code: 'NO_ADAPTER' },
+                });
+                failed += 1;
+                continue;
+            }
+            const ctx = params.resolveContext(row);
+            const request = adapter.buildPollRequest(row.state ?? {}, ctx);
+            // Credentials are resolved here, on this tick — never read from the row.
+            const resp = await performSigned(deps, request, FETCH_TIMEOUT_MS.QUICK);
+            const outcome = await adapter.parsePollResponse(resp, ctx, row.state ?? {});
+            if (outcome.kind === 'complete') {
+                await deps.store.update(row.id, {
+                    status: 'succeeded',
+                    attempts: row.attempts + 1,
+                    result: resultToPayload(outcome.result),
+                });
+                completed += 1;
+            }
+            else if (outcome.kind === 'failed') {
+                await deps.store.update(row.id, {
+                    status: 'failed',
+                    attempts: row.attempts + 1,
+                    error: { message: outcome.message, ...(outcome.code !== undefined ? { code: outcome.code } : {}) },
+                });
+                failed += 1;
+            }
+            else {
+                await deps.store.update(row.id, {
+                    status: 'polling',
+                    attempts: row.attempts + 1,
+                    nextPollAt: at + (outcome.retryAfterMs ?? DEFAULT_POLL_INTERVAL_MS),
+                });
+                pending += 1;
+            }
+        }
+        catch (error) {
+            // A transport failure is not a vendor verdict: keep the row pollable and let the attempt cap
+            // or the deadline end it, rather than reporting a definitive failure we cannot support.
+            await deps.store.update(row.id, {
+                status: 'polling',
+                attempts: row.attempts + 1,
+                nextPollAt: now() + DEFAULT_POLL_INTERVAL_MS,
+                error: toOperationError(error),
+            });
+            pending += 1;
+        }
+        finally {
+            await deps.store.releaseLease(row.id);
+        }
+    }
+    return { claimed: claimed.length, completed, failed, pending, unknown };
+}
+/**
+ * Boot-time recovery. Releases dead leases and expires blown deadlines via the store, then handles
+ * the one case the store cannot decide alone: a row still at `submitted`, meaning the process died
+ * between persisting the row and learning whether the vendor accepted the submit.
+ *
+ * Retry safety is gated on idempotency, not assumed. An adapter that has not declared
+ * `submitIsIdempotent` sends that row to `unknown` for reconciliation — media generation is billed
+ * per call, so a silent re-issue can double a real charge.
+ *
+ * @complexity O(n) in stored operations.
+ */
+export async function recoverAfterRestart(deps, params) {
+    const at = params.now ?? (deps.now ?? Date.now)();
+    const reconciled = await deps.store.reconcileOnBoot({ now: at });
+    const resubmittable = [];
+    let unknownCrashGap = 0;
+    for (const row of await collectSubmitted(deps.store)) {
+        const adapter = params.adapters(row.providerId, row.routeKey);
+        if (adapter?.submitIsIdempotent === true) {
+            resubmittable.push(row.id);
+            continue;
+        }
+        await deps.store.update(row.id, {
+            status: 'unknown',
+            error: {
+                message: 'process died before the vendor submit was confirmed, and this adapter does not declare the submit idempotent — reconcile manually rather than risk a duplicate charge',
+                code: 'CRASH_GAP_NOT_IDEMPOTENT',
+            },
+        });
+        unknownCrashGap += 1;
+    }
+    return { ...reconciled, unknownCrashGap, resubmittable };
+}
+/**
+ * The `submitted` rows a restart orphaned. Uses the store's own claim-free read path so recovery
+ * never competes with a live worker for a lease.
+ */
+async function collectSubmitted(store) {
+    const seen = new Map();
+    for (const row of await store.claimDue({ now: Number.MAX_SAFE_INTEGER, leaseOwner: '__recovery__', leaseMs: 0, limit: Number.MAX_SAFE_INTEGER })) {
+        if (row.status === 'submitted')
+            seen.set(row.id, row);
+        await store.releaseLease(row.id);
+    }
+    return [...seen.values()];
+}
+//# sourceMappingURL=operation-runtime.js.map

package/dist/media-providers/dispatch/operation-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-runtime.js","sourceRoot":"","sources":["../../../src/media-providers/dispatch/operation-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAUvE,4LAA4L;AAC5L,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AACtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,MAAM,CAAC;AAC/C,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAyB9C,SAAS,eAAe,CAAC,MAAoB;IAC3C,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC5C,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAA0B,EAC1B,OAAuC,EACvC,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;IAC/B,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAA0B,EAC1B,MAAkC;IAElC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7F,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,WAAW,GAAG,KAAK,EAAE,CAAC;IAE5B,sEAAsE;IACtE,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACtB,EAAE,EAAE,WAAW;QACf,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,oBAAoB;QACvD,UAAU,EAAE,SAAS,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAClE,UAAU,EAAE,SAAS;KACtB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,CAAC,KAAK,IAAoC,EAAE;QACzD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAyC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC7G,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAEpF,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACvG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YAC7D,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,wBAAwB,CAAC;aACvE,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC3F,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACnD,+FAA+F;IAC/F,iCAAiC;IACjC,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,oBAAoB,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAEtF,IAAI,UAAqD,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,OAAO,CAAwB,CAAC,OAAO,EAAE,EAAE;QAC3D,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,6FAA6F;QAC7F,sCAAsC;QACtC,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,IAAI,UAAU;YAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QACzC,2FAA2F;QAC3F,kCAAkC;QAClC,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAoBD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAA0B,EAAE,MAAqB;IACvF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QACxC,GAAG,EAAE,GAAG,EAAE;QACV,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC;IAEH,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;YAEjB,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;gBACzB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;oBAC9B,MAAM,EAAE,SAAS;oBACjB,KAAK,EAAE;wBACL,OAAO,EAAE,mFAAmF;wBAC5F,IAAI,EAAE,kBAAkB;qBACzB;iBACF,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,CAAC;gBACb,SAAS;YACX,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;oBAC9B,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAE;wBACL,OAAO,EAAE,iCAAiC,GAAG,CAAC,WAAW,0CAA0C;wBACnG,IAAI,EAAE,oBAAoB;qBAC3B;iBACF,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;oBAC9B,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAE,EAAE,OAAO,EAAE,sCAAsC,GAAG,CAAC,UAAU,QAAQ,GAAG,CAAC,QAAQ,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE;iBACpH,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/D,yEAAyE;YACzE,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAyC,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC1G,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAE5E,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;oBAC9B,MAAM,EAAE,WAAW;oBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;oBAC1B,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC;iBACxC,CAAC,CAAC;gBACH,SAAS,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;oBAC9B,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;oBAC1B,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;iBACnG,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;oBAC9B,MAAM,EAAE,SAAS;oBACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;oBAC1B,UAAU,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,wBAAwB,CAAC;iBACpE,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6FAA6F;YAC7F,wFAAwF;YACxF,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;gBAC9B,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;gBAC1B,UAAU,EAAE,GAAG,EAAE,GAAG,wBAAwB;gBAC5C,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC;aAC/B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC1E,CAAC;AAgBD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAA0B,EAAE,MAAqB;IACzF,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAEjE,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,KAAK,MAAM,GAAG,IAAI,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9D,IAAI,OAAO,EAAE,kBAAkB,KAAK,IAAI,EAAE,CAAC;YACzC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;YAC9B,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE;gBACL,OAAO,EAAE,uKAAuK;gBAChL,IAAI,EAAE,0BAA0B;aACjC;SACF,CAAC,CAAC;QACH,eAAe,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,EAAE,GAAG,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAAC,KAA0B;IACxD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAgC,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,EAAE,CAAC;QACjJ,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC"}

package/dist/media-providers/dispatch/polling-adapter.d.ts

@@ -0,0 +1,103 @@
+/**
+ * `PollingVendorAdapter` — the submit-then-poll tier, added alongside (never replacing)
+ * `vendor-adapter.ts`'s `VendorAdapter`.
+ *
+ * This is purely additive. `VendorAdapter` is proven across all 18 live registrations and is
+ * untouched: a vendor that finishes inside one request/response keeps using it. This interface is
+ * for the other shape — a vendor that hands back a job handle and makes you come back for the
+ * result — which `dispatchVendorRequest`'s fixed `buildRequest -> one fetch -> parseResponse`
+ * cannot express at all.
+ *
+ * ## The credential seam
+ *
+ * The deliberate difference from `VendorAdapter`: **these builders never receive credentials.**
+ * `VendorAdapter.buildRequest(ctx, credentials)` hands the adapter a `ProviderCredentials` and the
+ * adapter writes its own `authorization` header. That is fine for one in-process round trip, but a
+ * polled operation outlives the request that started it, so a secret reachable from the adapter is
+ * a secret that wants to be persisted next to the job handle. Here the adapter builds an
+ * *unsigned* request and a `RequestSigner` attaches auth beneath it, re-resolved on every tick —
+ * which is also what makes a token that expires mid-poll a non-event.
+ */
+import type { MediaGenerationRequestInit, ProviderCredentials, RenderContext, RenderResult } from './types.js';
+/**
+ * Whether this vendor is expected to answer within an interactive grace window. It is a property
+ * of the *vendor*, declared once per adapter — never a property of the caller, which is what keeps
+ * the human UI and an agent on one identical contract.
+ */
+export type ExpectedLatencyClass = 'fast' | 'slow';
+/** A vendor request with no auth applied. `init.headers` carries content negotiation only. */
+export interface UnsignedVendorRequest<Meta = undefined> {
+    readonly url: string;
+    readonly init: RequestInit;
+    readonly meta: Meta;
+}
+/** What a submit response turned out to be: the finished artifact, or a handle to come back for. */
+export type SubmitOutcome = {
+    readonly kind: 'complete';
+    readonly result: RenderResult;
+} | {
+    readonly kind: 'pending';
+    readonly state: Readonly<Record<string, unknown>>;
+    readonly retryAfterMs?: number;
+};
+export type PollOutcome = {
+    readonly kind: 'complete';
+    readonly result: RenderResult;
+} | {
+    readonly kind: 'pending';
+    readonly retryAfterMs?: number;
+} | {
+    readonly kind: 'failed';
+    readonly message: string;
+    readonly code?: string;
+};
+export interface PollingVendorAdapter<Meta = undefined> {
+    readonly expectedLatencyClass: ExpectedLatencyClass;
+    /**
+     * Whether re-issuing the submit request is safe when a crash left us unable to tell whether the
+     * first one reached the vendor. Defaults to `false`, which routes that row to `unknown` for
+     * reconciliation instead. There is no unqualified retry-once rule: media generation costs real
+     * money per call, so a retry must be *proven* safe, not assumed.
+     */
+    readonly submitIsIdempotent?: boolean;
+    buildSubmitRequest(ctx: RenderContext): UnsignedVendorRequest<Meta>;
+    parseSubmitResponse(resp: Response, ctx: RenderContext, request: UnsignedVendorRequest<Meta>): Promise<SubmitOutcome>;
+    buildPollRequest(state: Readonly<Record<string, unknown>>, ctx: RenderContext): UnsignedVendorRequest<Meta>;
+    parsePollResponse(resp: Response, ctx: RenderContext, state: Readonly<Record<string, unknown>>): Promise<PollOutcome>;
+}
+/**
+ * A `PollingVendorAdapter` with its `Meta` erased, for heterogeneous lookup by
+ * `(providerId, routeKey)`. `Meta` never crosses this boundary — it only flows from one adapter's
+ * own `build*` to that same adapter's `parse*` — so erasing it here is sound, unlike the `never`
+ * that `VendorAdapterRegistry` uses (which is only sound because every caller re-casts).
+ */
+export type AnyPollingVendorAdapter = PollingVendorAdapter<any>;
+/** A signed request, ready to hand to `fetch`. */
+export interface SignedVendorRequest {
+    readonly url: string;
+    readonly init: RequestInit;
+}
+/**
+ * The broker seam: attaches auth to an unsigned request. Async because a real broker resolves from
+ * a vault / refreshes an OAuth token, and is called once per tick rather than once per operation.
+ */
+export type RequestSigner = (request: UnsignedVendorRequest<unknown>) => Promise<SignedVendorRequest> | SignedVendorRequest;
+/**
+ * Reference signer for the `Authorization: Bearer <key>` scheme every vendor in this package uses.
+ *
+ * `resolve` is invoked per call, never cached here — caching a resolved key inside the signer would
+ * reintroduce exactly the mid-stream-expiry problem this seam exists to remove.
+ *
+ * @throws When `resolve` yields no `apiKey`, using `missingCredentialMessage` — the failure surfaces
+ *   at signing time rather than as an opaque vendor 401.
+ * @complexity O(1) plus whatever `resolve` costs.
+ */
+export declare function createBearerSigner(required: {
+    resolve: () => Promise<ProviderCredentials> | ProviderCredentials;
+    missingCredentialMessage: string;
+}): RequestSigner;
+/** Carries a caller-supplied `dispatcher` onto an unsigned request, matching `withRequestInit`'s role on the sync tier. */
+export declare function withUnsignedRequestInit(ctx: {
+    readonly requestInit: MediaGenerationRequestInit;
+}, init: RequestInit): RequestInit;
+//# sourceMappingURL=polling-adapter.d.ts.map

package/dist/media-providers/dispatch/polling-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"polling-adapter.d.ts","sourceRoot":"","sources":["../../../src/media-providers/dispatch/polling-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/G;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnD,8FAA8F;AAC9F,MAAM,WAAW,qBAAqB,CAAC,IAAI,GAAG,SAAS;IACrD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;CACrB;AAED,oGAAoG;AACpG,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpH,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAElF,MAAM,WAAW,oBAAoB,CAAC,IAAI,GAAG,SAAS;IACpD,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACpD;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC,kBAAkB,CAAC,GAAG,EAAE,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACpE,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,qBAAqB,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACtH,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5G,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACvH;AAED;;;;;GAKG;AAEH,MAAM,MAAM,uBAAuB,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;AAEhE,kDAAkD;AAClD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;AAE5H;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE;IAAE,OAAO,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;IAAC,wBAAwB,EAAE,MAAM,CAAA;CAAE,GAChH,aAAa,CAcf;AAED,2HAA2H;AAC3H,wBAAgB,uBAAuB,CAAC,GAAG,EAAE;IAAE,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAAA;CAAE,EAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAEjI"}

package/dist/media-providers/dispatch/polling-adapter.js

@@ -0,0 +1,30 @@
+/**
+ * Reference signer for the `Authorization: Bearer <key>` scheme every vendor in this package uses.
+ *
+ * `resolve` is invoked per call, never cached here — caching a resolved key inside the signer would
+ * reintroduce exactly the mid-stream-expiry problem this seam exists to remove.
+ *
+ * @throws When `resolve` yields no `apiKey`, using `missingCredentialMessage` — the failure surfaces
+ *   at signing time rather than as an opaque vendor 401.
+ * @complexity O(1) plus whatever `resolve` costs.
+ */
+export function createBearerSigner(required) {
+    return async (request) => {
+        const credentials = await required.resolve();
+        if (!credentials.apiKey) {
+            throw new Error(required.missingCredentialMessage);
+        }
+        return {
+            url: request.url,
+            init: {
+                ...request.init,
+                headers: { ...request.init.headers, authorization: `Bearer ${credentials.apiKey}` },
+            },
+        };
+    };
+}
+/** Carries a caller-supplied `dispatcher` onto an unsigned request, matching `withRequestInit`'s role on the sync tier. */
+export function withUnsignedRequestInit(ctx, init) {
+    return { ...init, ...(ctx.requestInit.dispatcher ? { dispatcher: ctx.requestInit.dispatcher } : {}) };
+}
+//# sourceMappingURL=polling-adapter.js.map

package/dist/media-providers/dispatch/polling-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"polling-adapter.js","sourceRoot":"","sources":["../../../src/media-providers/dispatch/polling-adapter.ts"],"names":[],"mappings":"AAkFA;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAiH;IAEjH,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;QACrD,CAAC;QACD,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE;gBACJ,GAAG,OAAO,CAAC,IAAI;gBACf,OAAO,EAAE,EAAE,GAAI,OAAO,CAAC,IAAI,CAAC,OAA8C,EAAE,aAAa,EAAE,UAAU,WAAW,CAAC,MAAM,EAAE,EAAE;aAC5H;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,2HAA2H;AAC3H,MAAM,UAAU,uBAAuB,CAAC,GAAyD,EAAE,IAAiB;IAClH,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACxG,CAAC"}

package/dist/media-providers/dispatch/providers/imagerouter-video-async.d.ts

@@ -0,0 +1,21 @@
+import type { PollingVendorAdapter } from '../polling-adapter.js';
+/** Non-secret endpoint configuration. Sourceable from a config file or a DB row — never the API key. */
+export interface ImageRouterVideoConfig {
+    readonly baseUrl?: string;
+    /** Overrides the catalog-derived `ctx.wireModel` for the wire request. */
+    readonly wireModel?: string;
+}
+export interface ImageRouterVideoMeta {
+    readonly wireModel: string;
+    readonly size: string;
+    readonly seconds: number | 'auto';
+}
+/**
+ * Builds the ImageRouter video polling adapter for a given endpoint configuration.
+ *
+ * @param config Non-secret endpoint overrides; defaults to ImageRouter's public base URL and the
+ *   context's own `wireModel`.
+ * @complexity O(1) per built request; one vendor round trip per parse.
+ */
+export declare function createImageRouterVideoPollingAdapter(config?: ImageRouterVideoConfig): PollingVendorAdapter<ImageRouterVideoMeta>;
+//# sourceMappingURL=imagerouter-video-async.d.ts.map

package/dist/media-providers/dispatch/providers/imagerouter-video-async.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"imagerouter-video-async.d.ts","sourceRoot":"","sources":["../../../../src/media-providers/dispatch/providers/imagerouter-video-async.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAe,oBAAoB,EAAwC,MAAM,uBAAuB,CAAC;AAKrH,wGAAwG;AACxG,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC;AAgBD;;;;;;GAMG;AACH,wBAAgB,oCAAoC,CAClD,MAAM,GAAE,sBAA2B,GAClC,oBAAoB,CAAC,oBAAoB,CAAC,CAqG5C"}

package/dist/media-providers/dispatch/providers/imagerouter-video-async.js

@@ -0,0 +1,141 @@
+/**
+ * ImageRouter video on the submit-then-poll tier.
+ *
+ * ## Why this vendor
+ *
+ * `providers/imagerouter.ts`'s video adapter is `buildRequest -> one fetch -> parseResponse` with
+ * no poll loop at all: it holds a socket open for the entire generation, bounded only by the
+ * blanket `FETCH_TIMEOUT_MS.GENERATE` (10 minute) backstop, and a restart loses the work with no
+ * way to ask the vendor what happened. That sync adapter is left registered and untouched — this
+ * is an additive second registration, not a replacement.
+ *
+ * ## Both response shapes, deliberately
+ *
+ * `parseSubmitResponse` accepts either shape:
+ *
+ * - `{ data: [{ b64_json | url }] }` — the artifact arrived on the submit itself. This is exactly
+ *   what the existing sync adapter expects, so today's behaviour is preserved bit for bit and the
+ *   operation completes inside the grace window.
+ * - `{ id, status }` — an OpenAI-videos-style job handle, so the operation moves to `polling`.
+ *
+ * Handling both is not hedging: **which one ImageRouter actually returns for video is unverified
+ * against the live vendor** (see this file's entry in the handoff). Implementing only the job-handle
+ * shape would have been a guess that silently broke the working path; implementing both is correct
+ * under either answer and costs one `if`.
+ *
+ * ## Config is data
+ *
+ * The endpoint config is a plain object argument, not baked into the module, so the same adapter
+ * can later be instantiated from a database row to make a vendor runtime-addable with no redesign.
+ * Note what is NOT in it: the API key. Endpoint routing is config; the secret is the signer's.
+ */
+import { bytesFromOpenAICompatibleData, parseOpenAICompatibleJson } from '../openai-compatible.js';
+import { imageRouterSizeFor } from './imagerouter.js';
+import { withUnsignedRequestInit } from '../polling-adapter.js';
+const DEFAULT_BASE_URL = 'https://api.imagerouter.io/v1/openai';
+const TERMINAL_FAILED_STATUSES = new Set(['failed', 'error', 'cancelled', 'canceled']);
+function trimTrailingSlash(value) {
+    return value.replace(/\/+$/, '');
+}
+/** Reads a vendor-supplied `Retry-After` (seconds) header, ignoring anything non-numeric. */
+function retryAfterMsFrom(resp) {
+    const raw = resp.headers.get('retry-after');
+    if (!raw)
+        return undefined;
+    const seconds = Number(raw);
+    return Number.isFinite(seconds) && seconds > 0 ? seconds * 1_000 : undefined;
+}
+/**
+ * Builds the ImageRouter video polling adapter for a given endpoint configuration.
+ *
+ * @param config Non-secret endpoint overrides; defaults to ImageRouter's public base URL and the
+ *   context's own `wireModel`.
+ * @complexity O(1) per built request; one vendor round trip per parse.
+ */
+export function createImageRouterVideoPollingAdapter(config = {}) {
+    const baseUrl = trimTrailingSlash((config.baseUrl || DEFAULT_BASE_URL).trim());
+    return {
+        expectedLatencyClass: 'slow',
+        // ImageRouter's generation endpoint accepts no idempotency key, so a submit that may or may
+        // not have landed cannot be safely re-issued — a duplicate submit is a duplicate charge.
+        submitIsIdempotent: false,
+        buildSubmitRequest(ctx) {
+            const wireModel = (config.wireModel || ctx.wireModel).trim();
+            const seconds = typeof ctx.length === 'number' ? ctx.length : 'auto';
+            const size = imageRouterSizeFor(ctx.aspect, 'video');
+            return {
+                url: `${baseUrl}/videos/generations`,
+                init: withUnsignedRequestInit(ctx, {
+                    method: 'POST',
+                    headers: { 'content-type': 'application/json' },
+                    body: JSON.stringify({
+                        prompt: ctx.prompt || 'A short cinematic clip.',
+                        model: wireModel,
+                        size,
+                        seconds,
+                        response_format: 'b64_json',
+                    }),
+                }),
+                meta: { wireModel, size, seconds },
+            };
+        },
+        async parseSubmitResponse(resp, ctx, request) {
+            const data = (await parseOpenAICompatibleJson(resp, 'imagerouter video'));
+            if (Array.isArray(data.data)) {
+                const bytes = await bytesFromOpenAICompatibleData(data, 'imagerouter video', ctx.requestInit);
+                const { wireModel, size, seconds } = request.meta;
+                return {
+                    kind: 'complete',
+                    result: {
+                        bytes,
+                        providerNote: `imagerouter/${wireModel} · ${size} · ${seconds === 'auto' ? 'auto' : `${seconds}s`} · ${bytes.length} bytes`,
+                        suggestedExt: '.mp4',
+                    },
+                };
+            }
+            if (typeof data.id === 'string' && data.id) {
+                // Only the job handle is persisted — no credential, no request body.
+                const retryAfterMs = retryAfterMsFrom(resp);
+                return { kind: 'pending', state: { jobId: data.id }, ...(retryAfterMs !== undefined ? { retryAfterMs } : {}) };
+            }
+            throw new Error('imagerouter video submit returned neither generated data nor a job id');
+        },
+        buildPollRequest(state, ctx) {
+            const jobId = state.jobId;
+            if (typeof jobId !== 'string' || !jobId) {
+                throw new Error('imagerouter video poll requires a persisted jobId');
+            }
+            return {
+                url: `${baseUrl}/videos/${encodeURIComponent(jobId)}`,
+                init: withUnsignedRequestInit(ctx, { method: 'GET', headers: { accept: 'application/json' } }),
+                meta: { wireModel: (config.wireModel || ctx.wireModel).trim(), size: imageRouterSizeFor(ctx.aspect, 'video'), seconds: typeof ctx.length === 'number' ? ctx.length : 'auto' },
+            };
+        },
+        async parsePollResponse(resp, ctx, _state) {
+            const data = (await parseOpenAICompatibleJson(resp, 'imagerouter video'));
+            const status = typeof data.status === 'string' ? data.status.toLowerCase() : '';
+            if (TERMINAL_FAILED_STATUSES.has(status)) {
+                const error = data.error;
+                const detail = typeof error?.message === 'string' && error.message ? error.message : status;
+                return { kind: 'failed', message: `imagerouter video job failed: ${detail}` };
+            }
+            if (Array.isArray(data.data)) {
+                const bytes = await bytesFromOpenAICompatibleData(data, 'imagerouter video', ctx.requestInit);
+                const wireModel = (config.wireModel || ctx.wireModel).trim();
+                const size = imageRouterSizeFor(ctx.aspect, 'video');
+                const seconds = typeof ctx.length === 'number' ? ctx.length : 'auto';
+                return {
+                    kind: 'complete',
+                    result: {
+                        bytes,
+                        providerNote: `imagerouter/${wireModel} · ${size} · ${seconds === 'auto' ? 'auto' : `${seconds}s`} · ${bytes.length} bytes`,
+                        suggestedExt: '.mp4',
+                    },
+                };
+            }
+            const retryAfterMs = retryAfterMsFrom(resp);
+            return { kind: 'pending', ...(retryAfterMs !== undefined ? { retryAfterMs } : {}) };
+        },
+    };
+}
+//# sourceMappingURL=imagerouter-video-async.js.map

package/dist/media-providers/dispatch/providers/imagerouter-video-async.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imagerouter-video-async.js","sourceRoot":"","sources":["../../../../src/media-providers/dispatch/providers/imagerouter-video-async.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACnG,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAIhE,MAAM,gBAAgB,GAAG,sCAAsC,CAAC;AAehE,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAE5G,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,6FAA6F;AAC7F,SAAS,gBAAgB,CAAC,IAAc;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC5C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oCAAoC,CAClD,SAAiC,EAAE;IAEnC,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAE/E,OAAO;QACL,oBAAoB,EAAE,MAAM;QAC5B,4FAA4F;QAC5F,yFAAyF;QACzF,kBAAkB,EAAE,KAAK;QAEzB,kBAAkB,CAAC,GAAkB;YACnC,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACrE,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAErD,OAAO;gBACL,GAAG,EAAE,GAAG,OAAO,qBAAqB;gBACpC,IAAI,EAAE,uBAAuB,CAAC,GAAG,EAAE;oBACjC,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,yBAAyB;wBAC/C,KAAK,EAAE,SAAS;wBAChB,IAAI;wBACJ,OAAO;wBACP,eAAe,EAAE,UAAU;qBAC5B,CAAC;iBACH,CAAC;gBACF,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;aACnC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,mBAAmB,CACvB,IAAc,EACd,GAAkB,EAClB,OAAoD;YAEpD,MAAM,IAAI,GAAG,CAAC,MAAM,yBAAyB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAA4B,CAAC;YAErG,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,MAAM,6BAA6B,CAAC,IAAI,EAAE,mBAAmB,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC9F,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;gBAClD,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE;wBACN,KAAK;wBACL,YAAY,EAAE,eAAe,SAAS,MAAM,IAAI,MAAM,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,QAAQ;wBAC3H,YAAY,EAAE,MAAM;qBACrB;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBAC3C,qEAAqE;gBACrE,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBAC5C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACjH,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QAED,gBAAgB,CAAC,KAAwC,EAAE,GAAkB;YAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvE,CAAC;YACD,OAAO;gBACL,GAAG,EAAE,GAAG,OAAO,WAAW,kBAAkB,CAAC,KAAK,CAAC,EAAE;gBACrD,IAAI,EAAE,uBAAuB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC;gBAC9F,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;aAC9K,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,IAAc,EAAE,GAAkB,EAAE,MAAyC;YACnG,MAAM,IAAI,GAAG,CAAC,MAAM,yBAAyB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAA4B,CAAC;YACrG,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAEhF,IAAI,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAA0C,CAAC;gBAC9D,MAAM,MAAM,GAAG,OAAO,KAAK,EAAE,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC5F,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,iCAAiC,MAAM,EAAE,EAAE,CAAC;YAChF,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,MAAM,6BAA6B,CAAC,IAAI,EAAE,mBAAmB,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC9F,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7D,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACrD,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;gBACrE,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE;wBACN,KAAK;wBACL,YAAY,EAAE,eAAe,SAAS,MAAM,IAAI,MAAM,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,QAAQ;wBAC3H,YAAY,EAAE,MAAM;qBACrB;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACtF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/integrations",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "description": "Third-party vendor integrations, each independently importable: Composio connector catalog/execution (./composio) and a multi-vendor image/video/audio generation gateway (./media-providers).",
   "license": "Apache-2.0",
   "repository": {
@@ -67,11 +67,11 @@
   },
   "dependencies": {
     "undici": "^7.25.0",
-    "@jini-ai/core": "0.3.0",
-    "@jini-ai/platform": "0.3.0"
+    "@jini-ai/platform": "0.3.0",
+    "@jini-ai/core": "0.3.1"
   },
   "peerDependencies": {
-    "better-sqlite3": "^11.10.0 || ^13.0.0"
+    "better-sqlite3": "^13.0.0"
   },
   "peerDependenciesMeta": {
     "better-sqlite3": {
@@ -80,7 +80,7 @@
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.11",
-    "better-sqlite3": "^11.10.0",
+    "better-sqlite3": "^13.0.0",
     "@vitest/coverage-v8": "^2.1.9",
     "@jini-ai/protocol": "0.3.0"
   },