@laserdata/laser-sdk 0.5.3 → 0.6.0

package/dist/agent/reliable-consumer.d.ts

@@ -1,13 +1,12 @@
 import { CodecError, LaserError } from "../client/errors.js";
 import type { Laser } from "../client/laser.js";
-import type { IggyHeaderValue } from "../iggy/apache-iggy.js";
+import type { HeaderValue } from "../stream/header-value.js";
 import { type Provenance } from "../provenance/provenance.js";
-import { type Clock } from "../runtime/clock.js";
 import type { KeyRegistry, SigningKey } from "../signing.js";
 import { AgentId, type ConsumerGroupName, type MessageId } from "../types/ids.js";
 import { type AgentDeadLetter, type AgentEnvelope, type SignatureContext } from "../wire/agent.js";
 import { type ContentType } from "../wire/content.js";
-import { AgentContext } from "./context.js";
+import { AgentCtx } from "./context.js";
 import { type InboxRoute } from "./router.js";
 export declare function provenanceFromEnvelope(envelope: AgentEnvelope): Provenance;
 export interface ReceivedAgentMessage {
@@ -15,7 +14,7 @@ export interface ReceivedAgentMessage {
     readonly partitionId: number;
     readonly offset: bigint;
     readonly timestampMicros?: bigint;
-    readonly headers: ReadonlyMap<string, IggyHeaderValue>;
+    readonly headers: ReadonlyMap<string, HeaderValue>;
 }
 export interface ProvenanceAndEnvelope {
     readonly provenance: Provenance;
@@ -78,7 +77,7 @@ export interface FenceSweepState {
 }
 export declare function acceptFence(highWater: Map<string, FenceEntry>, sweepState: FenceSweepState, taskKey: string, fence: bigint, nowMicros: bigint): boolean;
 export interface AgentHandler {
-    handle(message: AgentMessage, context: AgentContext): Promise<void>;
+    handle(message: AgentMessage, context: AgentCtx): Promise<void>;
 }
 export type HandlerResult = {
     readonly kind: "ok";
@@ -88,7 +87,12 @@ export type HandlerResult = {
 };
 export interface AgentMiddleware {
     beforeHandle?(message: AgentMessage): Promise<void>;
-    afterHandle?(message: AgentMessage, result: HandlerResult, attempt: number): Promise<void>;
+    afterHandle?(message: AgentMessage, result: {
+        readonly kind: "ok";
+    } | {
+        readonly kind: "error";
+        readonly error: LaserError;
+    }, attempt: number): Promise<void>;
 }
 export interface DeadLetterSink {
     onDeadLetter(message: AgentMessage | undefined, capsule: AgentDeadLetter, publishError: LaserError | undefined): Promise<void>;
@@ -100,6 +104,8 @@ export interface ReliableConsumerOptions {
     readonly dedupWindow?: number;
     readonly retry?: RetryPolicy;
     readonly pollIntervalMs?: number;
+    /** Bounds active work after shutdown is requested. Defaults to 30 seconds. */
+    readonly shutdownGraceMs?: number;
     readonly concurrency?: ConcurrencyPolicy;
     readonly maxQueuedRecords?: number;
     readonly maxQueuedBytes?: number;
@@ -110,8 +116,7 @@ export interface ReliableConsumerOptions {
     readonly deduplicator?: Deduplicator;
     readonly warmDedup?: boolean;
     readonly middleware?: readonly AgentMiddleware[];
-    readonly deadLetterSink?: DeadLetterSink;
-    readonly clock?: Clock;
+    readonly onDeadLetter?: DeadLetterSink;
     readonly verifier?: KeyRegistry;
     readonly signingKey?: SigningKey;
 }
@@ -121,9 +126,14 @@ export interface ReliableConsumerControl {
     readonly ready?: () => void;
     readonly hardAborted?: () => boolean;
 }
+/** Whether retrying the same call can succeed, the classifier the Rust
+ * `LaserError::is_retryable` defines. A failed publish answers for its cause.
+ * Managed failures follow the canonical result-code classifier, while
+ * transport, handler, routing, timeout, and deferred-policy failures keep
+ * their local semantics. */
 export declare function isRetryable(error: LaserError): boolean;
 export declare class ReliableConsumer {
-    readonly options: ReliableConsumerOptions;
+    private readonly options;
     constructor(options: ReliableConsumerOptions);
     run(laser: Laser, handler: AgentHandler, control?: ReliableConsumerControl): Promise<void>;
     private runSerial;

package/dist/agent/reliable-consumer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reliable-consumer.d.ts","sourceRoot":"","sources":["../../src/agent/reliable-consumer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EAIV,UAAU,EAGX,MAAM,qBAAqB,CAAA;AAE5B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAkB,MAAM,wBAAwB,CAAA;AAE7E,OAAO,EAA2B,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACtF,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC5D,OAAO,EAAE,OAAO,EAAkB,KAAK,iBAAiB,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAA;AACjG,OAAO,EASL,KAAK,eAAe,EACpB,KAAK,aAAa,EAElB,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EAAE,KAAK,WAAW,EAAuB,MAAM,oBAAoB,CAAA;AAI1E,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAA0B,KAAK,UAAU,EAAE,MAAM,aAAa,CAAA;AA4BrE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,aAAa,GAAG,UAAU,CAe1E;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;CACvD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAA;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;CAC7C;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,oBAAoB,EAC7B,kBAAkB,SAAK,GACtB,qBAAqB,CAkCvB;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,WAAW,GAAG,SAAS,CAGpF;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;IAC5B,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAA;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAA;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAA;IAClC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CACpC;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,YAAY,GAAG,UAAU,CAElE;AAED,MAAM,MAAM,mBAAmB,GAC3B;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAAA;AAExF,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,oBAAoB,EAC9B,kBAAkB,SAAK,GACtB,mBAAmB,CA4BrB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,WAAW,CAElF;AAED,eAAO,MAAM,oBAAoB,EAAE,WAAkD,CAAA;AAErF,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAA;AAE7E,eAAO,MAAM,kBAAkB,EAAE,iBAAsC,CAAA;AAEvE,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACvC;AAED,qBAAa,aAAc,YAAW,YAAY;IAChD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IAErC,YAAY,QAAQ,EAAE,MAAM,EAE3B;IAED,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASrC;CACF;AAED,wBAAgB,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAKnE;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,wBAAgB,WAAW,CACzB,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,EAClC,UAAU,EAAE,eAAe,EAC3B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAgBT;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACpE;AAED,MAAM,MAAM,aAAa,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAA;AAElF,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnD,WAAW,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3F;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,CACV,OAAO,EAAE,YAAY,GAAG,SAAS,EACjC,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,UAAU,GAAG,SAAS,GACnC,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAA;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAA;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAA;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAA;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,CAAA;IAChD,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAA;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAA;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAA;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAA;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,OAAO,CAAA;CACrC;AAQD,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAoDtD;AAmQD,qBAAa,gBAAgB;IAC3B,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAA;IAEzC,YAAY,OAAO,EAAE,uBAAuB,EAgB3C;IAEK,GAAG,CACP,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,IAAI,CAAC,CAiFf;YAEa,SAAS;YAcT,eAAe;YA2Df,SAAS;CAmCxB"}
+{"version":3,"file":"reliable-consumer.d.ts","sourceRoot":"","sources":["../../src/agent/reliable-consumer.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,UAAU,EAOV,UAAU,EAKX,MAAM,qBAAqB,CAAA;AAE5B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAE/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAE5D,OAAO,EAA2B,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAEtF,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC5D,OAAO,EAAE,OAAO,EAAkB,KAAK,iBAAiB,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAA;AACjG,OAAO,EASL,KAAK,eAAe,EACpB,KAAK,aAAa,EAElB,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAA;AAIzB,OAAO,EAAE,KAAK,WAAW,EAAuB,MAAM,oBAAoB,CAAA;AAI1E,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,EAA0B,KAAK,UAAU,EAAE,MAAM,aAAa,CAAA;AA+BrE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,aAAa,GAAG,UAAU,CAe1E;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;CACnD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAA;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;CAC7C;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,oBAAoB,EAC7B,kBAAkB,SAAK,GACtB,qBAAqB,CAkCvB;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,WAAW,GAAG,SAAS,CAGpF;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;IAC5B,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAA;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAA;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAA;IAClC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CACpC;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,YAAY,GAAG,UAAU,CAElE;AAED,MAAM,MAAM,mBAAmB,GAC3B;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAAA;AAExF,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,oBAAoB,EAC9B,kBAAkB,SAAK,GACtB,mBAAmB,CA4BrB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,WAAW,CAElF;AAED,eAAO,MAAM,oBAAoB,EAAE,WAAkD,CAAA;AAErF,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAA;AAE7E,eAAO,MAAM,kBAAkB,EAAE,iBAAsC,CAAA;AAEvE,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACvC;AAED,qBAAa,aAAc,YAAW,YAAY;IAChD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IAErC,YAAY,QAAQ,EAAE,MAAM,EAE3B;IAED,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASrC;CACF;AAED,wBAAgB,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAKnE;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,wBAAgB,WAAW,CACzB,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,EAClC,UAAU,EAAE,eAAe,EAC3B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAgBT;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAChE;AAED,MAAM,MAAM,aAAa,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAA;AAElF,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnD,WAAW,CAAC,CACV,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;KAAE,EACxF,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,CACV,OAAO,EAAE,YAAY,GAAG,SAAS,EACjC,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,UAAU,GAAG,SAAS,GACnC,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAA;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAA;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAA;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAA;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,CAAA;IAChD,QAAQ,CAAC,YAAY,CAAC,EAAE,cAAc,CAAA;IAItC,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAA;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAA;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,OAAO,CAAA;CACrC;AAQD;;;;4BAI4B;AAC5B,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CA2DtD;AA6WD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IAEjD,YAAY,OAAO,EAAE,uBAAuB,EAmB3C;IAEK,GAAG,CACP,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,IAAI,CAAC,CAuFf;YAEa,SAAS;YAcT,eAAe;YA2Df,SAAS;CAmCxB"}

package/dist/agent/reliable-consumer.js

@@ -1,4 +1,5 @@
-import { CodecError, FilterExecutionError, HandlerError, InvalidError, LaserError, NoStreamError, TransportError } from "../client/errors.js";
+import { code } from "../client/error-classify.js";
+import { CancelledError, CodecError, ConsumerGroupSetupError, FilterExecutionError, FilterFaultError, FilterOversizedRecordError, HandlerError, InvalidError, LaserError, NoStreamError, TimeoutError, TransportError, publishCause } from "../client/errors.js";
 import { INTERNAL_NATIVE_CONSUMER, INTERNAL_TRANSPORT } from "../client/internals.js";
 import { AgentTopic } from "../provenance/agent-topic.js";
 import { decodeProvenanceHeaders } from "../provenance/provenance.js";
@@ -6,16 +7,20 @@ import { SystemClock } from "../runtime/clock.js";
 import { AgentId, ConversationId } from "../types/ids.js";
 import { AgentKind, OPERATION_TASK, TaskStateName, decodeAgentEnvelope, encodeAgentDeadLetter, taskStateFromCode, unmetRequirements, validateAgentEnvelope } from "../wire/agent.js";
 import { AGENT_OP_VERSION } from "../wire/codes.js";
+import { resultCodeIsRetryable } from "../wire/result.js";
 import { decodeOne, encodeNamed, expectMap } from "../wire/cbor.js";
 import { contentTypeFromCode } from "../wire/content.js";
 import { AGENT_VERSION, CONTENT_TYPE, FENCE } from "../wire/headers.js";
-import { AgentContext } from "./context.js";
+import { AgentCtx } from "./context.js";
 import { ADVERTISED_INBOX_ROUTE } from "./router.js";
 const DEDUP_SCOPE_SEP = "\u001f";
 const TEXT_ENCODER = new TextEncoder();
 const FENCE_MAP_SOFT_CAP = 16_384;
 const FENCE_ENTRY_TTL_MICROS = 600000000n;
 const FENCE_SWEEP_INTERVAL_MICROS = 1000000n;
+// How many verified record ids a consumer remembers to refuse a replay of the
+// exact signed bytes, sized like the fence map.
+const VERIFIED_RECORD_WINDOW = 16_384;
 function tryAgentId(value) {
     try {
         return AgentId.new(value);
@@ -26,7 +31,7 @@ function tryAgentId(value) {
 }
 function fenceFromMetadata(metadata) {
     const entry = metadata?.get(FENCE);
-    if (entry?.kind !== "int")
+    if (entry?.kind !== "int" && entry?.kind !== "uint")
         return undefined;
     const value = entry.value;
     return typeof value === "bigint" && value >= 0n ? value : undefined;
@@ -141,7 +146,7 @@ export function dedupKey(provenance) {
     if (provenance.idempotencyKey === undefined)
         return undefined;
     return provenance.agent !== undefined
-        ? `${provenance.agent.asString()}${DEDUP_SCOPE_SEP}${provenance.idempotencyKey}`
+        ? `${provenance.agent.asStr()}${DEDUP_SCOPE_SEP}${provenance.idempotencyKey}`
         : provenance.idempotencyKey;
 }
 export function acceptFence(highWater, sweepState, taskKey, fence, nowMicros) {
@@ -165,13 +170,24 @@ function handlerError(error) {
         ? error
         : new HandlerError(error instanceof Error ? error.message : String(error), { cause: error });
 }
+/** Whether retrying the same call can succeed, the classifier the Rust
+ * `LaserError::is_retryable` defines. A failed publish answers for its cause.
+ * Managed failures follow the canonical result-code classifier, while
+ * transport, handler, routing, timeout, and deferred-policy failures keep
+ * their local semantics. */
 export function isRetryable(error) {
-    switch (error.kind) {
+    const cause = publishCause(error);
+    if (!(cause instanceof LaserError))
+        return false;
+    switch (cause.kind) {
         case "config":
         case "no-stream":
+        case "no-respond-topic":
         case "ambiguous-mutation":
         case "unsupported":
         case "invalid":
+        case "id":
+        case "provenance":
         case "codec":
         case "protocol":
         case "handler-config":
@@ -186,40 +202,91 @@ export function isRetryable(error) {
         case "authz":
         case "signature":
         case "budget-exceeded":
+        case "fence-violation":
+        case "quarantined":
+            return false;
+        case "publish-failed":
             return false;
         case "transport":
-            return error instanceof TransportError ? error.retryable : true;
+            return cause instanceof TransportError ? cause.retryable : true;
         case "routing":
-            return !("reason" in error &&
-                error.reason?.kind ===
+            return !("reason" in cause &&
+                cause.reason?.kind ===
                     "principalMismatch");
         case "query":
         case "kv":
         case "fork":
         case "graph":
         case "agent-workflow":
-            return ("detail" in error &&
-                ["notLeader", "stale", "unavailable"].includes(String(error.detail?.kind)));
+        case "checkpoint":
+            return resultCodeIsRetryable(code(cause));
         case "filter":
-            return (error instanceof FilterExecutionError &&
-                error.detail.code.kind === "known" &&
-                ["Unavailable", "NotLeader", "Stale"].includes(error.detail.code.name));
+            if (cause instanceof ConsumerGroupSetupError) {
+                return cause.cause instanceof LaserError && isRetryable(cause.cause);
+            }
+            if (cause instanceof FilterFaultError || cause instanceof FilterOversizedRecordError) {
+                return false;
+            }
+            return cause instanceof FilterExecutionError && resultCodeIsRetryable(cause.detail.code);
         case "timeout":
         case "handler":
         case "policy-deferred":
             return true;
     }
 }
-function sleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
+// The next record, or undefined when none arrived within `waitMs`.
+async function nextOrIdle(consumer, waitMs, signal) {
+    try {
+        return await consumer.nextWithin(waitMs, signal === undefined ? {} : { signal });
+    }
+    catch (error) {
+        if (error instanceof TimeoutError ||
+            (error instanceof CancelledError && signal?.aborted === true))
+            return undefined;
+        throw error;
+    }
+}
+// The worker reads the record's log offset, which a delivery carries in its position.
+function received(message) {
+    return {
+        payload: message.payload,
+        partitionId: message.partitionId,
+        offset: message.position.offset,
+        timestampMicros: message.timestampMicros,
+        headers: message.headers
+    };
+}
+function sleep(ms, signal) {
+    if (signal?.aborted === true)
+        return Promise.resolve();
+    return new Promise((resolve) => {
+        let timer;
+        const deadline = Date.now() + ms;
+        const finish = () => {
+            clearTimeout(timer);
+            signal?.removeEventListener("abort", finish);
+            resolve();
+        };
+        const tick = () => {
+            const remaining = deadline - Date.now();
+            if (remaining <= 0)
+                finish();
+            else
+                timer = setTimeout(tick, Math.min(remaining, 2_147_483_647));
+        };
+        signal?.addEventListener("abort", finish, { once: true });
+        timer = setTimeout(tick, Math.min(Math.max(0, ms), 2_147_483_647));
+    });
 }
 async function consumeUntilDone(work, hardSignal) {
     if (hardSignal === undefined) {
         await work;
         return true;
     }
-    if (hardSignal.aborted)
+    if (hardSignal.aborted) {
+        void work.catch(() => undefined);
         return false;
+    }
     let removeAbort = () => undefined;
     const aborted = new Promise((resolve) => {
         const onAbort = () => {
@@ -231,9 +298,52 @@ async function consumeUntilDone(work, hardSignal) {
         };
     });
     const completed = work.then(() => true);
-    const result = await Promise.race([completed, aborted]);
-    removeAbort();
-    return result;
+    try {
+        return await Promise.race([completed, aborted]);
+    }
+    finally {
+        removeAbort();
+    }
+}
+function shutdownControl(control, graceMs) {
+    const forced = new AbortController();
+    const hardSignal = control.hardSignal === undefined
+        ? forced.signal
+        : AbortSignal.any([forced.signal, control.hardSignal]);
+    const signal = control.signal === undefined ? hardSignal : AbortSignal.any([control.signal, hardSignal]);
+    let expired = false;
+    let timer;
+    const onShutdown = () => {
+        const deadline = Date.now() + graceMs;
+        const tick = () => {
+            const remaining = deadline - Date.now();
+            if (remaining <= 0) {
+                expired = true;
+                forced.abort("agent shutdown drain");
+            }
+            else {
+                timer = setTimeout(tick, Math.min(remaining, 2_147_483_647));
+            }
+        };
+        timer = setTimeout(tick, Math.min(graceMs, 2_147_483_647));
+    };
+    control.signal?.addEventListener("abort", onShutdown, { once: true });
+    if (control.signal?.aborted === true)
+        onShutdown();
+    return {
+        runtime: {
+            ...control,
+            signal,
+            hardSignal,
+            hardAborted: () => hardSignal.aborted || control.hardAborted?.() === true
+        },
+        expired: () => expired,
+        stopped: () => signal.aborted,
+        dispose: () => {
+            clearTimeout(timer);
+            control.signal?.removeEventListener("abort", onShutdown);
+        }
+    };
 }
 class ReliableWorker {
     laser;
@@ -243,6 +353,9 @@ class ReliableWorker {
     topicId;
     highWaterFence = new Map();
     fenceSweep = { lastSweepMicros: 0n };
+    // A signature binds the envelope to no log position, so the exact signed
+    // bytes verify again wherever a writer replays them.
+    verifiedRecords = new SlidingWindow(VERIFIED_RECORD_WINDOW);
     constructor(laser, handler, options, streamId, topicId) {
         this.laser = laser;
         this.handler = handler;
@@ -250,7 +363,12 @@ class ReliableWorker {
         this.streamId = streamId;
         this.topicId = topicId;
     }
+    cancelled() {
+        return this.options.hardSignal.aborted;
+    }
     async consume(received) {
+        if (this.cancelled())
+            return;
         const decoded = decodeAgentMessage(received, this.options.understoodFeatures);
         if (decoded.kind === "error") {
             await this.deadLetterUndecodable(received, decoded.payload);
@@ -280,6 +398,9 @@ class ReliableWorker {
                 await this.deadLetter(message, "Rejected", 0, "signature verification failed");
                 return;
             }
+            const record = message.envelope?.record;
+            if (record !== undefined && !(await this.verifiedRecords.observe(record.toString())))
+                return;
         }
         const fence = message.provenance.fenceToken;
         if (fence !== undefined &&
@@ -294,14 +415,18 @@ class ReliableWorker {
             await this.deadLetter(message, "DeadlineExceeded", 0, "message past its deadline");
             return;
         }
+        if (this.cancelled())
+            return;
         await this.ackOnPickup(message);
-        const context = new AgentContext(this.laser, message, {
+        const context = AgentCtx.create(this.laser, message, {
             ...(this.options.agent !== undefined ? { agent: this.options.agent } : {}),
             ...(this.options.respondOn !== undefined ? { respondOn: this.options.respondOn } : {}),
             ...(this.options.signingKey !== undefined ? { signingKey: this.options.signingKey } : {}),
             inboxRoute: this.options.inboxRoute
         });
         for (const middleware of this.options.middleware) {
+            if (this.cancelled())
+                return;
             try {
                 await middleware.beforeHandle?.(message);
             }
@@ -312,6 +437,8 @@ class ReliableWorker {
             }
         }
         for (let attempt = 0;; attempt += 1) {
+            if (this.cancelled())
+                return;
             let result;
             try {
                 await this.handler.handle(message, context);
@@ -320,7 +447,11 @@ class ReliableWorker {
             catch (error) {
                 result = { kind: "error", error: handlerError(error) };
             }
+            if (this.cancelled())
+                return;
             for (const middleware of this.options.middleware) {
+                if (this.cancelled())
+                    return;
                 try {
                     await middleware.afterHandle?.(message, result, attempt + 1);
                 }
@@ -338,7 +469,7 @@ class ReliableWorker {
                 await this.deadLetter(message, "RetryExhausted", attempt + 1, result.error.message);
                 return;
             }
-            await sleep(retryDelayMs(this.options.retry, attempt));
+            await sleep(retryDelayMs(this.options.retry, attempt), this.options.hardSignal);
         }
     }
     async ackOnPickup(message) {
@@ -404,7 +535,7 @@ class ReliableWorker {
             publishError = handlerError(error);
         }
         try {
-            await this.options.deadLetterSink?.onDeadLetter(message, capsule, publishError);
+            await this.options.onDeadLetter?.onDeadLetter(message, capsule, publishError);
         }
         catch {
             // Dead-letter sinks observe the terminal delivery decision.
@@ -428,6 +559,9 @@ export class ReliableConsumer {
                 throw new InvalidError(`${name} must be a positive safe integer`);
             }
         }
+        const grace = options.shutdownGraceMs ?? 30_000;
+        if (!Number.isFinite(grace) || grace < 0)
+            throw new InvalidError("shutdownGraceMs must be a non-negative finite number");
         this.options = options;
     }
     async run(laser, handler, control = {}) {
@@ -437,75 +571,80 @@ export class ReliableConsumer {
         const pollIntervalMs = this.options.pollIntervalMs ?? 10;
         const deduplicator = this.options.deduplicator ?? new SlidingWindow(this.options.dedupWindow ?? 10_000);
         // The runtime owns its delivery contract over the native group consumer.
-        const group = laser.topic(this.options.topic).consumerGroup(this.options.group.asString());
-        const openConsumer = () => group[INTERNAL_NATIVE_CONSUMER]({ autoCommit: false, pollIntervalMs });
+        const group = laser.topic(this.options.topic).consumerGroup(this.options.group.asStr());
+        const openConsumer = () => group[INTERNAL_NATIVE_CONSUMER]({ commitPolicy: { kind: "disabled" }, pollIntervalMs }, "propagate");
         let consumer = await openConsumer();
         if (this.options.warmDedup === true) {
             await this.warmDedup(laser, deduplicator, this.options.dedupWindow ?? 10_000);
         }
         const ids = await laserTransportIds(laser, stream, this.options.topic);
+        const shutdown = shutdownControl(control, this.options.shutdownGraceMs ?? 30_000);
+        const runtime = shutdown.runtime;
         const worker = new ReliableWorker(laser, handler, {
             retry: this.options.retry ?? DEFAULT_RETRY_POLICY,
             understoodFeatures: this.options.understoodFeatures ?? 0n,
             clock: this.options.clock ?? new SystemClock(),
+            hardSignal: runtime.hardSignal,
             inboxRoute: this.options.inboxRoute ?? ADVERTISED_INBOX_ROUTE,
             middleware: this.options.middleware ?? [],
             ackOnPickup: this.options.ackOnPickup ?? false,
             deduplicator,
             ...(this.options.agent !== undefined ? { agent: this.options.agent } : {}),
             ...(this.options.respondOn !== undefined ? { respondOn: this.options.respondOn } : {}),
-            ...(this.options.deadLetterSink !== undefined
-                ? { deadLetterSink: this.options.deadLetterSink }
+            ...(this.options.onDeadLetter !== undefined
+                ? { onDeadLetter: this.options.onDeadLetter }
                 : {}),
             ...(this.options.verifier !== undefined ? { verifier: this.options.verifier } : {}),
             ...(this.options.signingKey !== undefined ? { signingKey: this.options.signingKey } : {})
         }, ids.streamId, ids.topicId);
-        control.ready?.();
         try {
+            control.ready?.();
             for (;;) {
                 try {
-                    if ((this.options.concurrency ?? SERIAL_CONCURRENCY).kind === "serial") {
-                        await this.runSerial(consumer, worker, control, pollIntervalMs);
-                    }
-                    else {
-                        const concurrency = this.options.concurrency;
-                        await this.runPerPartition(consumer, worker, concurrency?.kind === "serial-per-partition" ? concurrency.maxPartitions : 1, this.options.maxQueuedRecords ?? 4_096, this.options.maxQueuedBytes ?? 64 * 1024 * 1024, control, pollIntervalMs);
-                    }
+                    const concurrency = this.options.concurrency ?? SERIAL_CONCURRENCY;
+                    const running = concurrency.kind === "serial"
+                        ? this.runSerial(consumer, worker, runtime, pollIntervalMs)
+                        : this.runPerPartition(consumer, worker, concurrency.maxPartitions, this.options.maxQueuedRecords ?? 4_096, this.options.maxQueuedBytes ?? 64 * 1024 * 1024, runtime, pollIntervalMs);
+                    await consumeUntilDone(running, runtime.hardSignal);
+                    if (shutdown.expired())
+                        throw new TimeoutError("agent shutdown drain");
                     return;
                 }
                 catch (error) {
                     const failure = handlerError(error);
-                    if (control.signal?.aborted === true ||
-                        control.hardAborted?.() === true ||
-                        !isRetryable(failure)) {
+                    if (runtime.signal.aborted || runtime.hardAborted() || !isRetryable(failure))
                         throw failure;
-                    }
                     try {
                         await consumer.shutdown();
                     }
                     catch {
-                        // Reconnection continues even when the failed consumer cannot leave cleanly.
+                        // Reconnection continues when the failed consumer cannot leave cleanly.
                     }
-                    await sleep(pollIntervalMs);
+                    await sleep(pollIntervalMs, runtime.signal);
+                    if (shutdown.stopped())
+                        return;
                     consumer = await openConsumer();
                 }
             }
         }
         finally {
-            try {
-                await consumer.shutdown();
-            }
-            catch {
-                // Preserve the primary consumer failure.
+            shutdown.dispose();
+            if (!runtime.hardAborted()) {
+                try {
+                    await consumer.shutdown();
+                }
+                catch {
+                    // Preserve the primary consumer failure.
+                }
             }
         }
     }
     async runSerial(consumer, worker, control, pollIntervalMs) {
         while (control.signal?.aborted !== true) {
-            const message = await consumer.nextWithin(pollIntervalMs);
-            if (message === null)
+            const message = await nextOrIdle(consumer, pollIntervalMs, control.signal);
+            if (message === undefined)
                 continue;
-            if (!(await consumeUntilDone(worker.consume(message), control.hardSignal)))
+            if (!(await consumeUntilDone(worker.consume(received(message)), control.hardSignal)))
                 return;
             if (control.hardAborted?.() !== true)
                 await consumer.commit(message);
@@ -520,10 +659,10 @@ export class ReliableConsumer {
         let failure;
         const currentFailure = () => failure;
         while (control.signal?.aborted !== true && failure === undefined) {
-            const message = await consumer.nextWithin(pollIntervalMs);
-            if (message === null)
+            const message = await nextOrIdle(consumer, pollIntervalMs, control.signal);
+            if (message === undefined)
                 continue;
-            const position = `${String(message.partitionId)}:${message.offset.toString()}`;
+            const position = `${String(message.partitionId)}:${message.position.offset.toString()}`;
             if (scheduled.has(position))
                 continue;
             const messageBytes = message.payload.byteLength + headerBytes(message.headers);
@@ -544,9 +683,9 @@ export class ReliableConsumer {
             queuedBytes += messageBytes;
             const lane = (existing ?? Promise.resolve())
                 .then(async () => {
-                if (currentFailure() !== undefined)
+                if (currentFailure() !== undefined || control.hardAborted?.() === true)
                     return;
-                await worker.consume(message);
+                await worker.consume(received(message));
                 if (control.hardAborted?.() !== true)
                     await consumer.commit(message);
             })
@@ -577,7 +716,7 @@ export class ReliableConsumer {
             throw new NoStreamError("warm dedup requires a stream");
         const partitions = await transport.getTopicPartitionCount(stream, this.options.topic);
         for (let partitionId = 0; partitionId < partitions; partitionId += 1) {
-            const offset = await transport.getConsumerOffset(stream, this.options.topic, { kind: "group", name: this.options.group.asString() }, partitionId);
+            const offset = await transport.getConsumerOffset(stream, this.options.topic, { kind: "group", name: this.options.group.asStr() }, partitionId);
             if (offset === undefined)
                 continue;
             const span = BigInt(Math.max(depth - 1, 0));