@kelloggt/dsh-program-agents 0.0.0-stage → 0.1.0

package/dist/host/tool-client.js

@@ -0,0 +1,62 @@
+import { ToolSchema } from '@modelcontextprotocol/core';
+import { mcpPublicName, mcpResult, mcpTool } from './mcp.js';
+import { json, object, text } from './validation.js';
+const allowedNative = (name) => !name.startsWith('program_') && name !== 'run_code';
+/** Discover only tools already visible in the exact parent's DSH tool runtime. */
+export function listToolEntries(owner, access, server) {
+    const schemas = owner.ctx.tools.schemas(owner), result = [];
+    if (server === undefined)
+        for (const schema of schemas) {
+            if (!access.tools?.includes(schema.name) || !allowedNative(schema.name))
+                continue;
+            result.push(mcpTool(schema));
+        }
+    for (const row of access.mcp ?? []) {
+        if (server !== undefined && server !== row.server)
+            continue;
+        for (const name of row.tools) {
+            const publicName = mcpPublicName(row.server, name), schema = schemas.find(s => s.name === publicName);
+            if (!schema)
+                continue;
+            const tool = mcpTool(schema), exposed = server === undefined ? publicName : name;
+            if (result.some(t => t.name === exposed))
+                continue;
+            result.push({ ...tool, name: exposed });
+        }
+    }
+    return result.map(tool => { const parsed = ToolSchema.safeParse(tool); if (!parsed.success)
+        throw Error('Tool definition is not a valid MCP tool'); return parsed.data; });
+}
+export function listTools(owner, access, input) {
+    const server = input.server === undefined ? undefined : text(input.server, 'MCP server', 32), all = listToolEntries(owner, access, server);
+    const cursor = input.cursor === undefined ? 0 : Number(text(input.cursor, 'cursor', 8));
+    if (!Number.isSafeInteger(cursor) || cursor < 0 || cursor > all.length)
+        throw Error('Invalid tool cursor');
+    const tools = [];
+    let index = cursor;
+    while (index < all.length && tools.length < 64) {
+        const candidate = [...tools, all[index]];
+        if (Buffer.byteLength(JSON.stringify(candidate)) > 48000) {
+            if (!tools.length)
+                throw Error('Tool definition exceeds bridge budget');
+            break;
+        }
+        tools.push(all[index++]);
+    }
+    return json({ tools, ...index < all.length ? { nextCursor: String(index) } : {} });
+}
+export async function callTool(owner, access, input, signal, execute) {
+    signal.throwIfAborted();
+    const name = text(input.name, 'tool name', 256), args = json(input.arguments ?? {});
+    object(args);
+    if (input._meta !== undefined)
+        object(input._meta);
+    const server = input.server === undefined ? undefined : text(input.server, 'MCP server', 32);
+    const entries = listToolEntries(owner, access, server);
+    if (!entries.some(t => t.name === name))
+        throw Error('Tool unavailable or not granted');
+    const publicName = server === undefined ? name : mcpPublicName(server, name);
+    const result = mcpResult(await execute(publicName, args), publicName.startsWith('mcp__'));
+    return json(result, 57344);
+}
+//# sourceMappingURL=tool-client.js.map

package/dist/host/tool-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-client.js","sourceRoot":"","sources":["../../src/host/tool-client.ts"],"names":[],"mappings":"AAEA,OAAM,EAAC,UAAU,EAAC,MAAI,4BAA4B,CAAC;AAEnD,OAAM,EAAC,aAAa,EAAC,SAAS,EAAC,OAAO,EAAC,MAAI,UAAU,CAAC;AACtD,OAAM,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,MAAI,iBAAiB,CAAC;AAE9C,MAAM,aAAa,GAAC,CAAC,IAAW,EAAC,EAAE,CAAA,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAE,IAAI,KAAG,UAAU,CAAC;AACnF,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,KAAW,EAAC,MAAa,EAAC,MAAc;IACvE,MAAM,OAAO,GAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAC,MAAM,GAAQ,EAAE,CAAC;IAC9D,IAAG,MAAM,KAAG,SAAS;QAAC,KAAI,MAAM,MAAM,IAAI,OAAO,EAAC,CAAC;YAAA,IAAG,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAE,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAC,SAAS;YAAA,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAAA,CAAC;IAC/J,KAAI,MAAM,GAAG,IAAI,MAAM,CAAC,GAAG,IAAE,EAAE,EAAC,CAAC;QAAA,IAAG,MAAM,KAAG,SAAS,IAAE,MAAM,KAAG,GAAG,CAAC,MAAM;YAAC,SAAS;QAAA,KAAI,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAC,CAAC;YAAA,MAAM,UAAU,GAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAC,IAAI,CAAC,EAAC,MAAM,GAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,IAAI,KAAG,UAAU,CAAC,CAAC;YAAA,IAAG,CAAC,MAAM;gBAAC,SAAS;YAAA,MAAM,IAAI,GAAC,OAAO,CAAC,MAAM,CAAC,EAAC,OAAO,GAAC,MAAM,KAAG,SAAS,CAAA,CAAC,CAAA,UAAU,CAAA,CAAC,CAAA,IAAI,CAAC;YAAA,IAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,IAAI,KAAG,OAAO,CAAC;gBAAC,SAAS;YAAA,MAAM,CAAC,IAAI,CAAC,EAAC,GAAG,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,CAAC,CAAC;QAAA,CAAC;IAAA,CAAC;IAC3X,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAA,EAAE,GAAC,MAAM,MAAM,GAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA,IAAG,CAAC,MAAM,CAAC,OAAO;QAAC,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAA,OAAO,MAAM,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC,CAAC;AAClK,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,KAAW,EAAC,MAAa,EAAC,KAA4B;IAC/E,MAAM,MAAM,GAAC,KAAK,CAAC,MAAM,KAAG,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,MAAM,EAAC,YAAY,EAAC,EAAE,CAAC,EAAC,GAAG,GAAC,eAAe,CAAC,KAAK,EAAC,MAAM,EAAC,MAAM,CAAC,CAAC;IAC5H,MAAM,MAAM,GAAC,KAAK,CAAC,MAAM,KAAG,SAAS,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAC,QAAQ,EAAC,CAAC,CAAC,CAAC,CAAC;IAAA,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAE,MAAM,GAAC,CAAC,IAAE,MAAM,GAAC,GAAG,CAAC,MAAM;QAAC,MAAM,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/K,MAAM,KAAK,GAAQ,EAAE,CAAC;IAAA,IAAI,KAAK,GAAC,MAAM,CAAC;IACvC,OAAM,KAAK,GAAC,GAAG,CAAC,MAAM,IAAE,KAAK,CAAC,MAAM,GAAC,EAAE,EAAC,CAAC;QAAA,MAAM,SAAS,GAAC,CAAC,GAAG,KAAK,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAAA,IAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,GAAC,KAAK,EAAC,CAAC;YAAA,IAAG,CAAC,KAAK,CAAC,MAAM;gBAAC,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAAA,MAAM;QAAA,CAAC;QAAA,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAAA,CAAC;IAC7O,OAAO,IAAI,CAAC,EAAC,KAAK,EAAC,GAAG,KAAK,GAAC,GAAG,CAAC,MAAM,CAAA,CAAC,CAAA,EAAC,UAAU,EAAC,MAAM,CAAC,KAAK,CAAC,EAAC,CAAA,CAAC,CAAA,EAAE,EAAC,CAAC,CAAC;AACxE,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAW,EAAC,MAAa,EAAC,KAA4B,EAAC,MAAkB,EAAC,OAAiG;IACzM,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,IAAI,GAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,WAAW,EAAC,GAAG,CAAC,EAAC,IAAI,GAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAE,EAAE,CAAC,CAAC;IAAA,MAAM,CAAC,IAAI,CAAC,CAAC;IAAA,IAAG,KAAK,CAAC,KAAK,KAAG,SAAS;QAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvI,MAAM,MAAM,GAAC,KAAK,CAAC,MAAM,KAAG,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,MAAM,EAAC,YAAY,EAAC,EAAE,CAAC,CAAC;IACnF,MAAM,OAAO,GAAC,eAAe,CAAC,KAAK,EAAC,MAAM,EAAC,MAAM,CAAC,CAAC;IAAA,IAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,IAAI,KAAG,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrI,MAAM,UAAU,GAAC,MAAM,KAAG,SAAS,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,aAAa,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC;IACpE,MAAM,MAAM,GAAC,SAAS,CAAC,MAAM,OAAO,CAAC,UAAU,EAAC,IAAI,CAAC,EAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACtF,OAAO,IAAI,CAAC,MAAM,EAAC,KAAK,CAAC,CAAC;AAC3B,CAAC"}

package/dist/host/validation.d.ts

@@ -0,0 +1,5 @@
+import type { JsonValue } from '../types.js';
+export declare function object(value: unknown): Record<string, unknown>;
+export declare function text(value: unknown, name: string, max?: number): string;
+export declare function json(value: unknown, maxBytes?: number): JsonValue;
+export declare function exactKeys(o: Record<string, unknown>, keys: string[]): void;

package/dist/host/validation.js

@@ -0,0 +1,42 @@
+export function object(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('Expected object');
+    return value;
+}
+export function text(value, name, max = 256) {
+    if (typeof value !== 'string' || !value.length || value.length > max)
+        throw new Error(`Invalid ${name}`);
+    return value;
+}
+export function json(value, maxBytes = 65536) {
+    const wire = JSON.stringify(value);
+    if (wire === undefined || Buffer.byteLength(wire) > maxBytes)
+        throw new Error('JSON value too large or missing');
+    // Values arrive from a JSON protocol; reject non-JSON callers as well.
+    function check(v, depth = 0) {
+        if (depth > 32)
+            throw new Error('JSON nesting limit');
+        if (v === null || typeof v === 'string' || typeof v === 'boolean')
+            return;
+        if (typeof v === 'number' && Number.isFinite(v))
+            return;
+        if (Array.isArray(v)) {
+            for (const x of v)
+                check(x, depth + 1);
+            return;
+        }
+        if (v && typeof v === 'object' && (Object.getPrototypeOf(v) === Object.prototype || Object.getPrototypeOf(v) === null)) {
+            for (const x of Object.values(v))
+                check(x, depth + 1);
+            return;
+        }
+        throw new Error('Expected lossless JSON');
+    }
+    check(value);
+    return JSON.parse(wire);
+}
+export function exactKeys(o, keys) {
+    if (Object.keys(o).some(k => !keys.includes(k)))
+        throw new Error('Unknown argument');
+}
+//# sourceMappingURL=validation.js.map

package/dist/host/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/host/validation.ts"],"names":[],"mappings":"AACA,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACpG,OAAO,KAA+B,CAAC;AACzC,CAAC;AACD,MAAM,UAAU,IAAI,CAAC,KAAc,EAAE,IAAY,EAAE,GAAG,GAAC,GAAG;IACxD,IAAG,OAAO,KAAK,KAAG,QAAQ,IAAE,CAAC,KAAK,CAAC,MAAM,IAAE,KAAK,CAAC,MAAM,GAAC,GAAG;QAAC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,IAAI,CAAC,KAAc,EAAE,QAAQ,GAAC,KAAK;IACjD,MAAM,IAAI,GAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,IAAG,IAAI,KAAG,SAAS,IAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAC,QAAQ;QAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACzG,uEAAuE;IACvE,SAAS,KAAK,CAAC,CAAS,EAAC,KAAK,GAAC,CAAC;QAC9B,IAAG,KAAK,GAAC,EAAE;YAAC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAClD,IAAG,CAAC,KAAG,IAAI,IAAE,OAAO,CAAC,KAAG,QAAQ,IAAE,OAAO,CAAC,KAAG,SAAS;YAAC,OAAO;QAC9D,IAAG,OAAO,CAAC,KAAG,QAAQ,IAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAC,OAAO;QAClD,IAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,CAAC;YAAA,KAAI,MAAM,CAAC,IAAI,CAAC;gBAAC,KAAK,CAAC,CAAC,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QAC/D,IAAG,CAAC,IAAE,OAAO,CAAC,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAG,MAAM,CAAC,SAAS,IAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAG,IAAI,CAAC,EAAC,CAAC;YAAA,KAAI,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAC,KAAK,CAAC,CAAC,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QACpK,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,CAAC;IAAA,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC;AACpD,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,CAAwB,EAAC,IAAa;IAC9D,IAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;AACnF,CAAC"}

package/dist/mcp.d.ts

@@ -0,0 +1,7 @@
+/** Types inferred directly from the official MCP SDK's published schemas. */
+import type { z } from 'zod';
+import type { CallToolRequestParamsSchema, CallToolResultSchema, ListToolsResultSchema, ToolSchema } from '@modelcontextprotocol/core';
+export type CallToolRequestParams = z.infer<typeof CallToolRequestParamsSchema>;
+export type CallToolResult = z.infer<typeof CallToolResultSchema>;
+export type ListToolsResult = z.infer<typeof ListToolsResultSchema>;
+export type Tool = z.infer<typeof ToolSchema>;

package/dist/mcp.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mcp.js.map

package/dist/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":""}

package/dist/models.d.ts

@@ -0,0 +1,34 @@
+/** Browser-safe named model-slot contracts. Routes are adapter-owned opaque ids. */
+export interface ModelSelection {
+    provider: string;
+    model: string;
+    reasoningEffort?: string;
+}
+export interface ModelSlotDeclaration {
+    /** Why this program uses the slot, shown beside its editable selection. */
+    description: string;
+    default: ModelSelection;
+}
+export type ModelsDeclaration = Record<string, ModelSlotDeclaration>;
+export interface ModelSlotView extends ModelSlotDeclaration {
+    id: string;
+    /** User override when present, otherwise the latest declared default. */
+    selection: ModelSelection;
+    overridden: boolean;
+    /** Optimistic-concurrency fence for declaration and preference changes. */
+    revision: number;
+}
+export declare const MODEL_SLOT_LIMITS: {
+    readonly slots: 32;
+    readonly id: 120;
+    readonly description: 1200;
+    readonly route: 512;
+    readonly declarationBytes: number;
+    readonly snapshotBytes: number;
+};
+export declare function parseModelSlotId(value: unknown): string;
+/** Copy and validate wire input without retaining caller-owned objects. */
+export declare function parseModelSelection(value: unknown): ModelSelection;
+/** A declaration is a complete snapshot, not a merge or a preference mutation. */
+export declare function parseModelsDeclaration(value: unknown): ModelsDeclaration;
+export declare function modelSelectionsEqual(left: ModelSelection | undefined, right: ModelSelection | undefined): boolean;

package/dist/models.js

@@ -0,0 +1,53 @@
+export const MODEL_SLOT_LIMITS = { slots: 32, id: 120, description: 1_200, route: 512, declarationBytes: 48 * 1024, snapshotBytes: 56 * 1024 };
+function record(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value) &&
+        (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
+}
+function keys(value, allowed) {
+    if (Object.keys(value).some(key => !allowed.includes(key)))
+        throw new Error('Unknown model selection field');
+}
+function text(value, field, limit) {
+    if (typeof value !== 'string' || !value.trim() || value.length > limit || /[\u0000-\u001f\u007f]/.test(value))
+        throw new Error(`Invalid model ${field}`);
+    return value;
+}
+export function parseModelSlotId(value) {
+    if (typeof value !== 'string' || !/^[A-Za-z][A-Za-z0-9_.:-]{0,119}$/.test(value))
+        throw new Error('Invalid model slot id');
+    return value;
+}
+/** Copy and validate wire input without retaining caller-owned objects. */
+export function parseModelSelection(value) {
+    if (!record(value))
+        throw new Error('Invalid model selection');
+    keys(value, ['provider', 'model', 'reasoningEffort']);
+    return {
+        provider: text(value.provider, 'provider', MODEL_SLOT_LIMITS.route),
+        model: text(value.model, 'model', MODEL_SLOT_LIMITS.route),
+        ...(value.reasoningEffort === undefined ? {} : { reasoningEffort: text(value.reasoningEffort, 'reasoning effort', MODEL_SLOT_LIMITS.route) }),
+    };
+}
+/** A declaration is a complete snapshot, not a merge or a preference mutation. */
+export function parseModelsDeclaration(value) {
+    if (!record(value))
+        throw new Error('Invalid model slot declarations');
+    const entries = Object.entries(value);
+    if (entries.length > MODEL_SLOT_LIMITS.slots)
+        throw new Error('At most 32 model slots per program');
+    const result = Object.create(null);
+    for (const [id, raw] of entries) {
+        parseModelSlotId(id);
+        if (!record(raw))
+            throw new Error('Invalid model slot declaration');
+        keys(raw, ['description', 'default']);
+        result[id] = { description: text(raw.description, 'slot description', MODEL_SLOT_LIMITS.description), default: parseModelSelection(raw.default) };
+    }
+    if (new TextEncoder().encode(JSON.stringify(result)).byteLength > MODEL_SLOT_LIMITS.declarationBytes)
+        throw new Error('Model slot declarations exceed 48 KiB');
+    return result;
+}
+export function modelSelectionsEqual(left, right) {
+    return left === right || left !== undefined && right !== undefined && left.provider === right.provider && left.model === right.model && left.reasoningEffort === right.reasoningEffort;
+}
+//# sourceMappingURL=models.js.map

package/dist/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../src/models.ts"],"names":[],"mappings":"AAoBA,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,EAAE,GAAG,IAAI,EAAW,CAAC;AAExJ,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;AACjG,CAAC;AACD,SAAS,IAAI,CAAC,KAA8B,EAAE,OAA0B;IACtE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AAC/G,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa,EAAE,KAAa;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,EAAE,CAAC,CAAC;IACzJ,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3H,OAAO,KAAK,CAAC;AACf,CAAC;AACD,2EAA2E;AAC3E,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACtD,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,iBAAiB,CAAC,KAAK,CAAC;QACnE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC;QAC1D,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;KAC9I,CAAC;AACJ,CAAC;AACD,kFAAkF;AAClF,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACpG,MAAM,MAAM,GAAsB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAsB,CAAC;IAC3E,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QAChC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACrB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpE,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,kBAAkB,EAAE,iBAAiB,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IACpJ,CAAC;IACD,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,GAAG,iBAAiB,CAAC,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC/J,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,IAAgC,EAAE,KAAiC;IACtG,OAAO,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe,CAAC;AACzL,CAAC"}

package/dist/monitoring/error-buffer.d.ts

@@ -0,0 +1,89 @@
+import { type JsonValue, type StandardLogRecord } from './standard.js';
+export interface LogPointer {
+    path?: string;
+    offset?: number;
+    run?: string | {
+        id: string;
+        generation: number;
+    };
+}
+export interface ErrorGroup {
+    fingerprint: string;
+    count: number;
+    sample: StandardLogRecord;
+    range: {
+        first: string;
+        last: string;
+    };
+    source?: LogPointer;
+}
+export interface ErrorBatch extends StandardLogRecord {
+    log_type: 'dsh.program.error-batch.v1';
+    data: {
+        key: string;
+        groups: ErrorGroup[];
+        count: number;
+        range: {
+            first: string;
+            last: string;
+        };
+        dropped: number;
+        [key: string]: unknown;
+    } & JsonValue;
+}
+export interface ErrorBufferOptions {
+    /** Parent supplies an owner+program-scoped key, never a global singleton. */
+    key: string;
+    directory: string;
+    /** Resolve only when the recipient has actually accepted the batch. */
+    deliver: (batch: ErrorBatch, signal?: AbortSignal) => Promise<unknown> | unknown;
+    deliveryTimeoutMs?: number;
+    enabled?: boolean;
+    bufferMs?: number;
+    maxBatch?: number;
+    cooldownMs?: number;
+    retryMs?: number;
+    maxOutboxBytes?: number;
+    maxOutboxBatches?: number;
+    maxPendingGroups?: number;
+    clock?: () => number;
+    onError?: (error: unknown) => void;
+}
+/** Durable, bounded, per-program at-least-once delivery. No parent routing policy here. */
+export declare class ErrorBuffer {
+    private readonly options;
+    readonly ready: Promise<void>;
+    readonly outboxPath: string;
+    private state;
+    private queue;
+    private timer?;
+    private closed;
+    private closing;
+    private lastFailure;
+    private startupFailure;
+    private queuedAdds;
+    private ingressDropped;
+    private delivery?;
+    /** A deadline releases the waiter, never this real callback resource slot. */
+    private activeHandler?;
+    private closeUntil;
+    private readonly now;
+    constructor(options: ErrorBufferOptions);
+    private report;
+    private load;
+    /** Fast enqueue. flush()/close() await persistence; failures remain observable. */
+    add(record: StandardLogRecord, pointer?: LogPointer): boolean;
+    private enqueue;
+    private trim;
+    private persist;
+    private schedule;
+    private makeBatch;
+    private deliver;
+    private drain;
+    /** Await queued ingestion becoming durable without forcing delivery/cooldown. */
+    checkpoint(): Promise<void>;
+    /** Force the normal buffer window, but preserve per-fingerprint cooldown. */
+    flush(): Promise<void>;
+    /** Final errors bypass cooldown; rejected deliveries stay on disk for restart. */
+    close(): Promise<void>;
+}