@makaio/framework 1.0.0-dev-1788721567504 → 1.0.0-dev-1788832451167

package/dist/runtime-registration-client-BTtFpt_k.mjs

@@ -1 +0,0 @@
-import{pathToFileURL as e}from"node:url";import{mkdir as t,rm as n,writeFile as r}from"node:fs/promises";import{basename as i,join as a}from"node:path";import{randomBytes as o}from"node:crypto";import{waitForSubscriptionPropagation as s}from"@makaio/framework/bus";import{ExecutionAttemptSchemas as c,ExecutionAttemptSubjects as l,WorkflowDefinitionSchema as u,WorkflowError as d,WorkflowErrorCode as f}from"@makaio/framework/contracts";import{tmpdir as p}from"node:os";import{AUTOMATION_TRIGGER_BUILTINS_OWNER as m,AutomationTriggerBindingRuntime as h,busBackedAutomationTriggers as g}from"@makaio/framework/services/automation-trigger";import{assertWorkflowTriggerPayload as _,compileWorkflowTriggerBindingFilter as v}from"@makaio/framework/workflow-engine/workflow-trigger-binding-consumer";function y(e,t,n){return{type:`makaio.workflow-worker.ready`,executionId:e,cancelSubject:t,executionAttemptId:n}}function b(e){if(typeof e!=`object`||!e)return!1;let t=e;return t.type===`makaio.workflow-worker.ready`&&typeof t.executionId==`string`&&typeof t.cancelSubject==`string`&&typeof t.executionAttemptId==`string`}function x(e){if(typeof e!=`object`||!e)throw new d(f.NOT_EXECUTABLE,`Invalid workflow module default export: expected an object with 'definition' and 'runtimeHandlers', got ${typeof e}.`);let t=e;if(!(t.runtimeHandlers instanceof Map))throw new d(f.NOT_EXECUTABLE,`Invalid workflow module default export: 'runtimeHandlers' must be a Map instance.`);let n=u.safeParse(t.definition);if(!n.success)throw new d(f.NOT_EXECUTABLE,`Invalid workflow module default export: 'definition' must satisfy WorkflowDefinitionSchema. `+n.error.message);let r=S(t.zodSchemas)?t.zodSchemas:void 0,i=t.runtimeLoopGates;if(i!==void 0&&!(i instanceof Map))throw new d(f.NOT_EXECUTABLE,`Invalid workflow module default export: 'runtimeLoopGates' must be a Map instance when provided.`);return{definition:n.data,runtimeHandlers:t.runtimeHandlers,...r===void 0?{}:{zodSchemas:r},...i===void 0?{}:{runtimeLoopGates:i}}}function S(e){return typeof e==`object`&&!!e&&!Array.isArray(e)&&`gates`in e}async function C(e,s){let c=i(e);if(!c||c===`.`||c===`..`)throw Error(`Invalid workflow source filename: ${e}`);let l=a(p(),`makaio-wf-${o(6).toString(`hex`)}`);await t(l,{recursive:!0});let u=a(l,c.endsWith(`.mjs`)?c:`${c}.mjs`);try{await r(u,s,`utf8`)}catch(e){throw await n(l,{recursive:!0,force:!0}).catch(()=>{}),e}return{tempDir:l,tempPath:u}}function w(e){return typeof e==`object`&&e&&Array.isArray(e.workflows)?e.workflows.map(x):[x(e)]}async function T(t){if(t.kind===`path`)return w((await import(e(t.path).href)).default);let{tempDir:r,tempPath:i}=await C(t.filename,t.source);try{return w((await import(e(i).href)).default)}finally{await n(r,{recursive:!0,force:!0})}}async function E(e){if(e.kind===`definition`)throw new d(f.NOT_EXECUTABLE,`Definition-sourced workers are handled by the workflow executor, not the file loader. Received source: ${JSON.stringify(e)}`);let t=await T(e);if(t.length!==1)throw new d(f.NOT_EXECUTABLE,`loadWorkflowModule expects a single workflow export, but the module exported ${String(t.length)} workflows. Use loadWorkflowModules for bundle exports.`);return t[0]}async function D(e){if(e.source.kind===`definition`){if(e.definition===void 0)throw Error(`Definition-sourced worker config for workflowId "${e.source.workflowId}" is missing the required 'definition' field. Ensure the executor populates WorkflowWorkerConfig.definition before dispatching.`);return{definition:e.definition,runtimeHandlers:new Map}}let t=await E(e.source);return O(e,t),e.definition===void 0?t:{...t,definition:e.definition}}function O(e,t){if(e.workflowId!==e.executionId&&t.definition.id!==e.workflowId)throw new d(f.SOURCE_MISMATCH,`Source-backed workflow for logical workflow '${e.workflowId}' loaded definition '${t.definition.id}'.`)}const k=`[WorkflowWorkerAwaitTrigger]`;function A(e){let t=g(e);return{resolveRegistration:e=>{let n=t.find(t=>t.kind===e);return n===void 0?void 0:{owner:m,type:n}}}}async function j(e,t,n){let r=new h(A(e)),i=t.flatMap(e=>{let t=r.prepareBinding(e);return t===void 0?(console.warn(`${k} skipping binding '${e.kind}': awaiting it inside a worker is unsupported. A worker carries only bus-backed trigger types; schedules and extension-contributed sources are activated by the host that owns their placement.`),[]):t.workflowCompatible?[{binding:e,prepared:t}]:(console.warn(`${k} skipping binding '${e.kind}': its event payload does not have an object root.`),[])});if(i.length===0){await r.close();return}try{if(n.aborted)throw n.reason??Error(`Await-trigger aborted`);let e=Promise.withResolvers();e.promise.catch(()=>void 0);let t=()=>{e.reject(n.reason??Error(`Await-trigger aborted`))};n.addEventListener(`abort`,t,{once:!0});try{return await Promise.all(i.map(async({binding:t,prepared:n})=>{let r=v(t);await n.subscribe(t=>{r(t.payload)&&e.resolve(_(t.payload))})})),await e.promise}finally{n.removeEventListener(`abort`,t)}}finally{await r.close()}}async function M(e,t,n,r){let i=t.definition.triggers??[];if(e.triggerMode!==`await-trigger`||i.length===0)return e;let a=await j(n,i,r);return a===void 0?e:{...e,triggerPayload:a}}async function N(e,t,n){if(e.operationKind===`runtime-probe`)return{receipt:`completed`};if(n===void 0||e.runtimeGeneration!==n)return{receipt:`refused`,refusalReason:`stale-generation`};let r=t[e.operationKind];return r===void 0?{receipt:`refused`,refusalReason:`unknown-kind`}:await r(e)}async function P(e,t,n){let{executionAttemptId:r,runtimeIncarnationId:i}=t,a=t.runtimeGeneration,o=e.withFilter({executionAttemptId:r,runtimeIncarnationId:i}).on(l.operation.deliver,async e=>{e.setResult(await N(e.payload,n,a))});return await s(o),{bindGeneration(e){a=e},cleanup(){let e=o;o=void 0,e?.()}}}var F=class extends Error{executionAttemptId;refusalReason;constructor(e,t){super(`Runtime registration refused by the Authority (executionAttemptId=${e}, refusalReason=${t??`unreported`})`),this.executionAttemptId=e,this.refusalReason=t,this.name=`RuntimeRegistrationRefusedError`}},I=class extends Error{executionAttemptId;admissionKey;refusalReason;constructor(e,t,n){super(`Operation admission refused by the Authority (executionAttemptId=${e}, admissionKey=${t}, refusalReason=${n??`unreported`})`),this.executionAttemptId=e,this.admissionKey=t,this.refusalReason=n,this.name=`OperationAdmissionRefusedError`}};function L(e,t,n,r){let i=t.safeParse(n);if(i.success)return i.data;let a=i.error.issues.map(e=>`${e.path.join(`.`)||`<root>`}: ${e.message}`);throw Error(`Malformed '${e.$meta.namespace}.${e.subject}' response from the Authority (executionAttemptId=${r}): ${a.join(`; `)}`)}const R=1e4;async function z(e,t){let{executionAttemptId:n,runtimeIncarnationId:r,signal:i}=t,a=Date.now()+(t.allocationVisibilityDeadlineMs??1e4);for(;;){i?.throwIfAborted();let t=L(l.runtime.register,c[`runtime.register`].response,await e.request(l.runtime.register,{executionAttemptId:n,runtimeIncarnationId:r},{signal:i}),n);if(t.decision!==`refused`)return t.runtimeGeneration;if(t.refusalReason!==`not-allocated`||Date.now()>=a)throw new F(n,t.refusalReason);await B(50,i)}}function B(e,t){return new Promise((n,r)=>{let i=()=>{clearTimeout(a),r(t?.reason instanceof Error?t.reason:Error(`Registration retry aborted`))},a=setTimeout(()=>{t?.removeEventListener(`abort`,i),n()},e);t?.addEventListener(`abort`,i,{once:!0})})}async function V(e,t){let{executionAttemptId:n,runtimeGeneration:r,admissionKey:i,signal:a}=t,o=L(l.operation.admit,c[`operation.admit`].response,await e.request(l.operation.admit,{executionAttemptId:n,operationKind:`workflow-run`,admissionKey:i,runtimeGeneration:r},{signal:a}),n);if(o.decision===`refused`)throw new I(n,i,o.refusalReason);if(o.operationId===void 0)throw Error(`Operation admission decision '${o.decision}' named no operation (executionAttemptId=${n}, admissionKey=${i})`);return o.operationId}async function H(e,t){let{executionAttemptId:n,runtimeIncarnationId:r,endpoint:i,signal:a}=t,o=await z(e,{executionAttemptId:n,runtimeIncarnationId:r,signal:a});return i.bindGeneration(o),{runtimeGeneration:o,operationId:await V(e,{executionAttemptId:n,runtimeGeneration:o,admissionKey:`workflow-run:${r}`,signal:a})}}export{P as a,M as c,T as d,y as f,V as i,D as l,I as n,H as o,b as p,F as r,z as s,R as t,E as u};

package/dist/schemas-C3kyQWGf.mjs

@@ -1 +0,0 @@
-import{n as e,o as t}from"./json-value-BBZ6uGwc.mjs";import{z as n}from"zod";const r=[`inline`,`summary`,`link`,`omit`],i=n.string().min(1),a=n.object({kinds:n.array(n.string().min(1)).optional(),hint:i.optional(),depth:n.number().int().min(1).max(20).optional(),nested:n.lazy(()=>o).optional()}),o=n.record(n.string().min(1),a),s=n.enum([`link`,`summary`,`full`]),c=n.object({artifactId:n.string().min(1).optional(),url:n.string().min(1).optional(),label:n.string().min(1)}),l=n.object({id:n.string().min(1),kind:n.string().min(1),revision:n.string().min(1),status:n.string().min(1).optional()}),u=n.object({breadcrumbs:n.array(c),related:n.array(c)}),d=n.object({dashboard:n.string().min(1).optional(),materialized:n.string().min(1).optional()}),f=n.object({type:n.literal(`summary`),title:n.string().min(1),text:n.string().min(1)}),p=n.object({type:n.literal(`properties`),title:n.string().min(1),rows:n.array(n.object({label:n.string().min(1),value:n.string()}))}),m=n.object({type:n.literal(`table`),title:n.string().min(1),columns:n.array(n.string().min(1)),rows:n.array(n.object({cells:n.array(n.string()),link:c.optional()}))}),h=n.object({type:n.literal(`relations`),title:n.string().min(1),groups:n.array(n.object({type:n.string().min(1),items:n.array(c)}))}),g=n.object({type:n.literal(`evidence`),title:n.string().min(1),items:n.array(n.object({kind:n.string().min(1),id:n.string().min(1),locator:n.string().min(1).optional()}))}),_=n.object({type:n.literal(`raw`),title:n.string().min(1),json:t}),v=n.object({type:n.literal(`code`),title:n.string().min(1),language:n.string().min(1),content:n.string()}),y=n.object({type:n.literal(`diagram`),title:n.string().min(1),notation:n.literal(`mermaid`),source:n.string().min(1)}),b=n.discriminatedUnion(`type`,[f,p,m,h,g,_,v,y]),ee=n.object({title:n.string().min(1),artifact:l,navigation:u,sections:n.array(b),links:d}),x=e,S=n.object({level:s,params:x.optional()}),C=n.object({kind:n.literal(`entry`),via:n.string().min(1).optional(),collection:n.string().min(1).optional()});function w(e){return(t,r)=>{t.via!==void 0==(t.collection!==void 0)&&r.addIssue({code:n.ZodIssueCode.custom,message:`Entry ${e} must have exactly one of via or collection`})}}const T=n.discriminatedUnion(`kind`,[n.object({kind:n.literal(`own-view`)}),n.object({kind:n.literal(`inline`),hostRelation:n.string().min(1),as:s.optional()}),C.extend({title:n.string().min(1).optional(),hostRelation:n.string().min(1).optional()}).superRefine(w(`affordance`))]),E=n.discriminatedUnion(`kind`,[n.object({kind:n.literal(`own-view`)}),n.object({kind:n.literal(`inline`),hostRelation:n.string().min(1)}),C.superRefine(w(`request`))]);function D(e){return e}const O=n.enum([`title`,`summary`]),k=n.discriminatedUnion(`kind`,[n.object({kind:n.literal(`label`),prefix:n.string().min(1).optional()}),n.object({kind:n.literal(`field`),name:n.string().min(1),fieldId:n.string().min(1).optional()}),n.object({kind:n.literal(`issue-type`),name:n.string().min(1),typeId:n.string().min(1).optional()}),n.object({kind:n.literal(`body-fragment`),slot:n.string().min(1)}),n.object({kind:n.literal(`comment`),template:n.string().min(1)})]),A=n.object({id:n.string().min(1),provider:n.string().min(1),namespace:n.string().min(1),target:k,appliesTo:n.array(n.enum([`workpiece`,`artifact`,`surface`])).min(1),valueMapping:n.record(n.string(),n.string()).optional(),description:n.string().min(1).optional(),params:e.optional()}),j=n.enum([`status`,`workflow`,`priority`]),M=n.object({path:n.string().min(1),semantic:j.optional(),fromLevel:s.optional(),viewRole:O.optional()}),N=n.object({mode:n.enum([`none`,`surface`,`comment`]),defaultRole:n.enum([`workpiece`,`artifact`]).optional(),semanticEvents:n.array(n.enum([`created`,`revised`,`status-changed`,`observation-added`])).optional(),projectedFields:n.array(M).optional(),affordances:n.array(T).optional()}).superRefine((e,t)=>{if(!e.projectedFields)return;let r=0,i=0;for(let t of e.projectedFields)t.viewRole===`title`&&r++,t.viewRole===`summary`&&i++;r>1&&t.addIssue({code:n.ZodIssueCode.custom,path:[`projectedFields`],message:`At most one projected field may declare viewRole: title`}),i>1&&t.addIssue({code:n.ZodIssueCode.custom,path:[`projectedFields`],message:`At most one projected field may declare viewRole: summary`})}),P=n.object({artifactId:n.string().min(1),provider:n.string().min(1),externalId:n.string().min(1),externalUrl:n.string().optional(),surfaceRole:n.enum([`workpiece`,`artifact`]),lastSyncedRevision:n.string().optional(),metadata:n.record(n.string(),n.unknown()).optional()}),F=n.object({kind:n.string().min(1),id:n.string().min(1),displayName:n.string().optional()}),I=n.object({level:n.string().min(1),ids:n.record(n.string().min(1),n.string().min(1)).optional()}).superRefine((e,t)=>{e.level!==`global`&&(!e.ids||Object.keys(e.ids).length===0)&&t.addIssue({code:n.ZodIssueCode.custom,path:[`ids`],message:`ids is required when scope level is not 'global'`})}),L=n.object({level:n.string().min(1),ids:n.record(n.string().min(1),n.string().min(1)).optional()}),R=n.object({refClass:n.literal(`artifact`).default(`artifact`),kind:n.string().min(1),id:n.string().min(1),revision:n.string().min(1)}),z=n.object({refClass:n.literal(`local`).default(`local`),artifact:R,localId:n.string().min(1)}),B=n.object({refClass:n.literal(`evidence`).default(`evidence`),kind:n.string().min(1),id:n.string().min(1),revision:n.string().min(1).optional(),locator:n.string().min(1).optional()}),V=n.discriminatedUnion(`refClass`,[R,z,B]);function te(e){return!e||typeof e!=`object`||Array.isArray(e)||`refClass`in e?e:`artifact`in e&&`localId`in e?{...e,refClass:`local`}:`locator`in e||!(`revision`in e)?{...e,refClass:`evidence`}:{...e,refClass:`artifact`}}const H=n.preprocess(te,V),U=n.discriminatedUnion(`refClass`,[R.extend({revision:n.string().min(1).optional()}),z,B]);function W(e){return!e||typeof e!=`object`||Array.isArray(e)||`refClass`in e?e:`artifact`in e&&`localId`in e?{...e,refClass:`local`}:`locator`in e?{...e,refClass:`evidence`}:{...e,refClass:`artifact`}}const G=n.preprocess(W,U),K=n.object({type:n.string().min(1),target:H}),q=n.enum([`assumed`,`inferred`,`stated`,`confirmed`,`verified`]),J=n.object({kind:n.string().min(1),actor:F,timestamp:n.number().int().nonnegative(),detail:n.string().optional(),evidenceRef:H.optional()}),Y=n.object({level:q,basis:n.array(J)}),X=n.object({id:n.string().min(1),kind:n.string().min(1),summary:n.string().min(1),detail:n.string().optional(),severity:n.enum([`info`,`warning`,`blocker`]).optional(),tags:n.array(n.string().min(1)).optional(),regarding:n.union([R,z]).optional(),evidence:n.union([R,B]).optional(),actor:F,timestamp:n.number().int().nonnegative()}),Z=n.object({markdown:n.string().optional(),summary:n.string().optional(),plaintext:n.string().optional()}),Q=n.object({kind:n.string().min(1),id:n.string().min(1),revision:n.string().min(1),scope:I,schemaVersion:n.string().min(1),data:e,relations:n.array(K),confidence:Y.optional(),representations:Z.optional(),actor:F,timestamp:n.number().int().nonnegative(),createdAt:n.number().int().nonnegative().optional()}),$=n.enum([`supersedes`,`manual`,`coexist`]),ne=n.object({kind:n.string().min(1),description:n.string().trim().min(1),schemaVersion:n.string().min(1),dataSchema:e,scopeSchema:e.optional(),observationSchema:e.optional(),discriminator:n.union([n.string().min(1),n.array(n.string().min(1))]).optional(),conflictPolicy:$,status:n.object({path:n.string().min(1),values:n.array(n.string().min(1)).optional()}).optional(),lifecycle:n.object({defaultRelevance:n.enum([`active`,`fading`,`retired`,`archived`]).optional(),decayPolicy:n.string().min(1).optional()}).optional(),indexedFields:n.array(n.string().min(1)).optional(),searchableFields:n.array(n.string().min(1)).optional(),projection:N.optional(),defaultContext:o.optional()}),re=n.object({type:n.string().min(1),symmetry:n.enum([`asymmetric`,`symmetric`]),implication:n.string().min(1).optional(),sourceKinds:n.array(n.string().min(1)).optional(),targetKinds:n.array(n.string().min(1)).optional(),targetRefClasses:n.array(n.enum([`artifact`,`local`,`evidence`])).optional()}),ie=n.object({kind:n.string().min(1).optional(),scope:L.optional(),ids:n.array(n.string().min(1)).optional(),currentOnly:n.boolean().optional(),search:n.string().optional(),relation:n.object({type:n.string().min(1).optional(),target:G.optional()}).optional(),confidence:n.object({maxLevel:q.optional(),minLevel:q.optional()}).optional(),indexed:n.record(n.string(),t).optional(),limit:n.number().int().min(1).optional()}),ae=n.object({base:R,target:R}),oe=n.object({base:Q,target:Q,changedPaths:n.array(n.string())});export{E as A,ee as B,N as C,A as D,O as E,y as F,b as G,p as H,g as I,m as J,f as K,l as L,S as M,D as N,k as O,v as P,o as Q,s as R,P as S,j as T,_ as U,u as V,h as W,a as X,r as Y,i as Z,q as _,ne as a,z as b,L as c,K as d,H as f,J as g,I as h,$ as i,x as j,T as k,R as l,Q as m,ae as n,X as o,Z as p,d as q,oe as r,ie as s,F as t,G as u,Y as v,M as w,re as x,B as y,c as z};

package/dist/schemas-TK29KWx-.mjs

@@ -1 +0,0 @@
-import{z as e}from"zod";import{AdapterAuthConstantSchema as t,AuthEnvironmentVariableNameSchema as n,AuthMethodRefSchema as r}from"@makaio/framework/contracts/auth";const i=[`MAKAIO_GIT_TOKEN`,`MAKAIO_BUS_AUTH_SECRET`],a=t,o=e.object({machineId:e.string().trim().min(1),packageNames:e.array(e.string().trim().min(1)).min(1).refine(e=>new Set(e).size===e.length,{message:`Session runtime package names must be unique.`}).readonly()}).strict().readonly(),s=e.object({sessionId:e.string().trim().min(1),adapterName:e.string().trim().min(1),providerConfigId:e.string().trim().min(1),definitionId:e.string().trim().min(1),runtime:o,auth:e.object({mode:e.enum([`explicit`,`none`]),method:r}).strict().readonly()}).strict().superRefine((t,n)=>{t.auth.method.owner===`provider`&&t.auth.method.providerDefinitionId!==t.definitionId&&n.addIssue({code:e.ZodIssueCode.custom,message:`Provider-owned auth method must belong to the selected provider definition.`,path:[`auth`,`method`,`providerDefinitionId`]})}).readonly(),c=e.object({target:e.string().trim().min(1),values:e.record(e.string().trim().min(1),a).readonly()}).strict().readonly(),l=e.object({selector:s,scrubEnvVars:e.array(n).readonly(),processEnv:e.record(n,e.string()).readonly(),connectorDeliveries:e.array(c).readonly()}).strict().superRefine((t,n)=>{let r=new Set;for(let[i,a]of t.scrubEnvVars.entries())r.has(a)&&n.addIssue({code:e.ZodIssueCode.custom,message:`Duplicate scrub environment variable "${a}".`,path:[`scrubEnvVars`,i]}),r.add(a);for(let i of Object.keys(t.processEnv))r.has(i)||n.addIssue({code:e.ZodIssueCode.custom,message:`Every process-environment auth delivery must also belong to the scrub set.`,path:[`processEnv`,i]});let i=new Set;for(let[r,a]of t.connectorDeliveries.entries())i.has(a.target)&&n.addIssue({code:e.ZodIssueCode.custom,message:`Duplicate connector auth target "${a.target}".`,path:[`connectorDeliveries`,r,`target`]}),i.add(a.target)}).readonly(),u=e.object({busAuthSecret:e.string().optional(),gitToken:e.string().optional(),runtimeEnv:e.record(n,e.string()).optional(),sessionRuntime:o.optional(),adapterAuth:l.optional()}).strict(),d=e.enum([`simple`,`full`]),f=e.enum([`created`,`running`,`stopped`,`destroyed`]),p=e.object({sessionId:e.string(),adapter:e.string(),runtime:d.default(`simple`),image:e.string().optional()}).strict(),m=new Set([`git:`,`http:`,`https:`,`ssh:`]),h=/^git@[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?:[^\s?#]+$/;function g(e,t,n){let r=e.indexOf(`://`);if(e.length===0||e.trim()!==e||r<=0||e.includes(`?`)||e.includes(`#`))return!1;try{let i=new URL(e);if(!t.has(i.protocol)||i.hostname.length===0||i.password.length>0||i.search.length>0||i.hash.length>0)return!1;let a=(e.slice(r+3).split(`/`,1)[0]??``).includes(`@`);return n?!a||i.username.length>0:!a&&i.username.length===0}catch{return!1}}function _(e){if(h.test(e))return!0;try{let t=new URL(e).protocol;return g(e,m,t===`ssh:`)}catch{return!1}}const v=e.string().refine(_,{message:`Repository remote must use a supported credential-free Git URL.`}),y=p.extend({mode:e.literal(`container-local`),repoPath:e.string(),baseBranch:e.string()}).strict(),b=y,x=y.extend({executionId:e.string(),executionAttemptId:e.string()}).strict(),S=e.union([b,x]),C=p.extend({mode:e.literal(`container-isolated`),repoUrl:v,branch:e.string().optional()}).strict(),w=e.union([S,C]),T=e.object({descriptor:w,bootstrapConfig:u}).strict().superRefine((t,n)=>{let r=t.bootstrapConfig.adapterAuth?.selector;if(r===void 0)return;r.sessionId!==t.descriptor.sessionId&&n.addIssue({code:e.ZodIssueCode.custom,message:`Container auth selector session must match the Docker descriptor.`,path:[`bootstrapConfig`,`adapterAuth`,`selector`,`sessionId`]}),r.adapterName!==t.descriptor.adapter&&n.addIssue({code:e.ZodIssueCode.custom,message:`Container auth selector adapter must match the Docker descriptor.`,path:[`bootstrapConfig`,`adapterAuth`,`selector`,`adapterName`]});let i=t.bootstrapConfig.sessionRuntime;if(i===void 0){n.addIssue({code:e.ZodIssueCode.custom,message:`Container auth selector requires a session runtime binding.`,path:[`bootstrapConfig`,`sessionRuntime`]});return}r.runtime.machineId!==i.machineId&&n.addIssue({code:e.ZodIssueCode.custom,message:`Container auth selector machine must match the session runtime.`,path:[`bootstrapConfig`,`adapterAuth`,`selector`,`runtime`,`machineId`]}),(r.runtime.packageNames.length!==i.packageNames.length||r.runtime.packageNames.some((e,t)=>e!==i.packageNames[t]))&&n.addIssue({code:e.ZodIssueCode.custom,message:`Container auth selector packages must exactly match the session runtime selection.`,path:[`bootstrapConfig`,`adapterAuth`,`selector`,`runtime`,`packageNames`]})}).readonly(),E=e.object({containerId:e.string(),worktreePath:e.string().optional(),worktreeBranch:e.string().optional()}),D=e.object({containerId:e.string(),deleteBranch:e.boolean().default(!1)}),O=e.object({success:e.boolean()}),k=e.object({containerId:e.string()}),A=e.object({state:f,sessionId:e.string(),worktreePath:e.string().optional()}),j=e.object({containerId:e.string(),sessionId:e.string(),worktreePath:e.string().optional()}),M=e.object({containerId:e.string(),sessionId:e.string(),worktreePath:e.string().optional()}),N=e.object({containerId:e.string(),sessionId:e.string(),exitCode:e.number()}),P=e.object({containerId:e.string(),sessionId:e.string()}),F=e.object({id:e.string(),name:e.string(),description:e.string().optional(),scope:e.string(),enabled:e.boolean(),createdAt:e.number(),updatedAt:e.number()}),I=F.extend({type:e.literal(`local`)}),L=F.extend({type:e.literal(`container-local`),image:e.string().optional(),env:e.record(e.string(),e.string()).optional(),busUrl:e.string().optional()}),R=F.extend({type:e.literal(`container-isolated`),image:e.string().optional(),env:e.record(e.string(),e.string()).optional(),gitCredentialMode:e.enum([`token`,`ssh-agent`]).default(`token`),repoUrl:v.optional()}),z=e.discriminatedUnion(`type`,[I,L,R]),B=e.enum([`local`,`container-local`,`container-isolated`]),V=e.discriminatedUnion(`type`,[I.omit({createdAt:!0,updatedAt:!0}),L.omit({createdAt:!0,updatedAt:!0}),R.omit({createdAt:!0,updatedAt:!0})]),H=e.object({scope:e.string().optional(),type:B.optional()}),U=e.object({executionTargetId:e.string().optional()}),W={get:{request:e.object({id:e.string()}),response:e.object({executionTarget:z.nullable()})},set:{request:e.object({executionTarget:V}),response:e.object({id:e.string()})},delete:{request:e.object({id:e.string()}),response:e.object({deleted:e.boolean()})},list:{request:H,response:e.object({executionTargets:e.array(z)})},resolve:{request:U,response:e.object({executionTarget:z})},created:z,updated:z,deleted:e.object({id:e.string()})};export{k as A,o as C,v as D,N as E,D as M,O as N,w as O,d as S,f as T,j as _,U as a,S as b,B as c,l as d,s as f,a as g,c as h,H as i,A as j,E as k,I as l,T as m,L as n,z as o,u as p,V as r,W as s,R as t,i as u,P as v,M as w,x,C as y};

package/dist/scoped-bus-DoPmCJeM.mjs

@@ -1 +0,0 @@
-import{s as e}from"./bus-D6NoBhIV.mjs";export{e as createScopedBus};

package/dist/worker-DlRdLf2d.mjs

@@ -1 +0,0 @@
-import{n as e}from"./json-value-BBZ6uGwc.mjs";import{A as t,_ as n,x as r}from"./worker-CLsRbzpk.mjs";import{G as i,H as a,V as o}from"./workflow-BomH9DBB.mjs";import{z as s}from"zod";import{createBusNamespace as c}from"@makaio/framework/core";const l=s.object({executionAttemptId:s.string().min(1),executionId:s.string().min(1),environment:s.string().min(1),metadata:e.optional()}),u=s.object({executionAttemptId:s.string().min(1),config:i,manifest:o.optional(),requirements:t.optional(),metadata:e.optional()}),d=s.object({executionAttemptId:s.string().min(1),allocationRef:r}).strict(),f={dispatch:{request:u,response:d},"control.outcome.submit":{request:s.object({executionAttemptId:s.string().min(1),executionId:s.string().min(1),result:a}).strict().superRefine((e,t)=>{e.result.executionId!==e.executionId&&t.addIssue({code:s.ZodIssueCode.custom,path:[`result`,`executionId`],message:`result.executionId must match executionId`})}),response:s.object({decision:n}).strict()},"control.bootstrap.claim":{request:s.object({executionId:s.string().min(1),executionAttemptId:s.string().min(1)}).strict(),response:s.object({busUrl:s.string().min(1),busAuthSecret:s.string().min(1)}).strict()},"lifecycle.provisioning":l,"lifecycle.booting":l,"lifecycle.ready":l,"lifecycle.busy":l,"lifecycle.completed":l,"lifecycle.failed":l.extend({error:s.string().min(1)}),"lifecycle.terminated":l.extend({reason:s.string().optional()}),"lifecycle.paused":l.extend({pausedAtGateId:s.string().min(1),pausedAtFrameId:s.string().min(1)})},p=`worker-bootstrap`,m=c(`worker`,f),h=m.subjects;export{d as a,u as i,m as n,f as o,h as r,p as t};

package/dist/workflow-worker-DjUfKshi.mjs

@@ -1 +0,0 @@
-import{resolveMakaioHome as e}from"./runtime-node/makaio-config.mjs";import{t}from"./extension-package-provenance-aYrZuS4W.mjs";import{a as n,c as r,l as i,o as a,p as o}from"./runtime-registration-client-BTtFpt_k.mjs";import{mintOrRotateWorkflowExecutionBusSecret as s}from"./runtime-node/workflow-execution-bus-access.mjs";import*as c from"node:fs/promises";import{access as l}from"node:fs/promises";import*as u from"node:path";import{basename as d,join as f}from"node:path";import*as p from"node:crypto";import{randomUUID as m}from"node:crypto";import{constants as h}from"node:fs";import{createBusInstance as g,waitForSubscriptionPropagation as _}from"@makaio/framework/bus";import{AdapterSubjects as v,BoundedRecoveryEvidenceSchema as y,FrameworkContractNamespaces as b,FrameworkStorageNamespaces as x,PROVIDER_ALLOCATION_REF_VERSION as ee,ProviderAllocationRefSchema as te,RECOVERY_EVIDENCE_LIMITS as ne,WorkerCapabilitiesSchema as re,WorkerSubjects as ie,WorkflowSubjects as ae,WorkflowWorkerConfigSchema as oe,createWorkflowCancelSubject as se}from"@makaio/framework/contracts";import{ExtensionCoordinator as ce,KernelSubjects as le,coalesceExtensionOverrides as ue,filterEligibleExtensions as de}from"@makaio/framework/kernel";import{BaseService as fe}from"@makaio/framework/service-base";import{AdapterRuntimeSubjects as pe,registerAdapterRuntimeIdentityHandlers as me}from"@makaio/framework/services/adapter-runtime";import{CLIDetectionNamespace as he,CLIDetectionSubjects as ge}from"@makaio/framework/services/cli-detection/namespace";import{SessionOrchestratorToken as _e,ToolRegistryToken as ve,canonicalModelPackage as ye,createSubagentServicePackage as be,createToolContributionProcessor as xe,frameworkCorePackages as S,sessionBridgePackage as Se,sessionOrchestratorPackage as Ce,sessionPackage as we,sessionStoragePackage as Te,toolRegistryPackage as Ee}from"@makaio/framework/services";import{AdapterSubsystemSubjects as De}from"@makaio/framework/services/adapter-subsystem";import{createClientsCorePackage as Oe}from"@makaio/framework/clients";import{AdapterSubsystemToken as C,createAdapterSubsystemContributionProcessor as ke,createAdapterSubsystemPackage as Ae,orderAfterAdapterSubsystem as je}from"@makaio/framework/adapter-subsystem";import{execa as Me}from"execa";import Ne from"piscina";import{ExecutionAttemptAuthority as Pe,runAuthorityDispatchedAttempt as Fe}from"@makaio/framework/workflow-engine";import{runWorkflowOrchestrator as Ie}from"@makaio/framework/workflow-engine/workflow-orchestrator";function w(e){return e.on(v.getCapabilities,async t=>{let{adapterName:n,adapterId:r}=t.payload;if(r){await t.next();return}if(n){let r=await e.requestOptional(pe.resolveId,{adapterName:n}),i=r.handled?r.data.adapterId:void 0;i&&(t.payload.adapterId=i)}await t.next()},{priority:20})}function T(e){let{coordinator:t,configRepository:n,platformDefaults:r,prepareAuthRuntime:i,runtimeSnapshotHandlerPriority:a,runtimeDefinitionHandlerPriority:o}=e,s=Ae({configRepository:n,coordinator:t,platformDefaults:r,...i!==void 0&&{prepareAuthRuntime:i},...a!==void 0&&{runtimeSnapshotHandlerPriority:a},...o!==void 0&&{runtimeDefinitionHandlerPriority:o}});return t.registerContributionProcessor(ke({getAdapterSubsystemService:()=>t.getExtensionService(C)})),{adapterSubsystemPackage:s}}function E(e){let{bus:t,currentMachineId:n}=e,r=me(t,{currentMachineId:n,listKnownAdapterNames:e.listKnownAdapterNames??(async()=>{let{configs:e}=await t.request(De.listAdapterConfigs,{});return e.map(e=>e.name)}),...e.resolveLiveAdapterId!==void 0&&{resolveLiveAdapterId:e.resolveLiveAdapterId},...e.resolveLiveAdapterIdentity!==void 0&&{resolveLiveAdapterIdentity:e.resolveLiveAdapterIdentity},...e.listLiveAdapterIdentities!==void 0&&{listLiveAdapterIdentities:e.listLiveAdapterIdentities}}),i=w(t);return{cleanup:()=>{r.cleanup(),i()}}}function D(e,t){if(!(e instanceof Error))return!1;let{rootPackageName:n,subpath:r}=Le(t),i=(r===void 0?[t]:[t,n]).flatMap(e=>[`Cannot find package '${e}'`,`Cannot find module '${e}'`,`Cannot find package "${e}"`,`Cannot find module "${e}"`]),a=e;return(a.code===`ERR_MODULE_NOT_FOUND`||a.code===`MODULE_NOT_FOUND`)&&i.some(t=>e.message.includes(t))||a.code===`ERR_PACKAGE_PATH_NOT_EXPORTED`&&r!==void 0&&e.message.includes(`Package subpath '${r}' is not defined by "exports"`)&&Re(e.message,n)?!0:i.some(t=>e.message.includes(t))}async function O(e){try{return await import(e)}catch(t){if(D(t,e))return null;throw t}}function Le(e){let t=e.split(`/`);return e.startsWith(`@`)?{rootPackageName:t.slice(0,2).join(`/`),subpath:t.length>2?`./${t.slice(2).join(`/`)}`:void 0}:{rootPackageName:t[0]??e,subpath:t.length>1?`./${t.slice(1).join(`/`)}`:void 0}}function Re(e,t){let n=t,r=t.replaceAll(`/`,`\\`);return e.includes(`/${n}/package.json`)||e.includes(`\\${r}\\package.json`)}async function k(e,t=process.env,n=process.platform){let r=t[Object.keys(t).find(e=>e.toUpperCase()===`PATH`)??`PATH`]??``,i=(t.PATHEXT??`.EXE;.CMD;.BAT;.COM`).split(`;`).filter(Boolean),a=n===`win32`?u.extname(e)===``?i:[``,...i]:[``];for(let t of r.split(u.delimiter)){let n=t.replace(/^"|"$/gu,``),r=u.resolve(n||process.cwd());for(let t of a){let n=u.join(r,`${e}${t}`);try{return await l(n,h.X_OK),n}catch{}}}}async function A(e,t=5e3,n=1e3){let{stdout:r}=await Me(e,[`--version`],{forceKillAfterDelay:n,timeout:t});return r}function ze(e){return e.match(/(\d+\.\d+\.\d+)/u)?.[1]??`unknown`}async function Be(e,t=k,n=A){try{let r=await t(e);if(r===void 0)return{binary:e,found:!1};let i=await n(r);return i.length===0?{binary:e,found:!1}:{binary:e,found:!0,path:r,version:ze(i)}}catch{return{binary:e,found:!1}}}async function Ve(e,t=k,n=A){return Promise.all(e.map(e=>Be(e,t,n)))}var He=class extends fe{constructor(e){super(e)}onInit(){this.registerHandler(ge.scan,async e=>{let t=await Ve(e.payload.binaries);e.setResult({results:t})})}};const j={name:`makaio.cli-detection`,displayName:`CLI Detection`,version:`0.1.0`,critical:!0,surface:`any`,namespaces:[he],create:e=>new He(e.bus)};function M(e,t){e.push(...Ue(t))}function Ue(e){return e===void 0?[]:typeof e==`function`?[e]:[...e]}function We(e,t=[]){let n=new Set([e]),r=new Set,i=new Map;for(let e of t)typeof e==`string`?n.add(e):(r.add(e.id),e.version!==void 0&&i.set(e.id,e.version));return{hosts:n,capabilities:r,...i.size>0?{capabilityVersions:i}:{}}}function Ge(e=[]){return e.some(e=>typeof e==`string`&&e===`node`)?e:[`node`,...e]}function N(e){return ue(de(qe(e.packages,e.configProvider),e.surface,e.runtimeEnvironment))}function Ke(e,n){let r=N(n),i=new Set(r.map(t));return e.filter(({ownerPackage:e})=>i.has(e)).map(({package:e})=>e)}function qe(e,t){return t?e.filter(e=>t.loadEnabled(e.name)!==!1):e}function P(e,t){return e.filter(e=>e.runtimeOwnership?.[t]===!0).map(e=>e.name)}function Je(e,t){let n=P(e,t);if(n.length>1)throw Error(`Multiple extensions own runtimeOwnership.${t}: ${n.join(`, `)}`)}function F(e){return Je(e,`sessionOrchestrator`),P(e,`sessionOrchestrator`).length===0}function Ye(e){return e===!0||F(e)?S:S.filter(e=>e.name!==_e.name)}function I(e,t,n){let r=[];try{for(let i of e){let e=i.runtimeBoot;e&&M(r,e.configure({bus:t,registerContributionProcessor:e=>{r.push(n.registerContributionProcessor(e))},forEachActiveExtension:e=>{n.forEachActiveExtension(e)}}))}}catch(e){let t=[];for(let e of[...r].reverse())try{e()}catch(e){t.push(e)}throw t.length>0?AggregateError([e,...t],`Extension boot contribution failed and rollback cleanup reported additional errors`,{cause:e}):e}return r}function Xe(){let e=process.env.MAKAIO_SKIP_EXTENSIONS;if(!e)return new Set;let t=e.split(`,`).map(e=>e.trim()).filter(Boolean);return new Set(t)}var Ze=class{pool;constructor(e){this.pool=new Ne({filename:e.workerEntry,maxThreads:e.maxConcurrency??4,idleTimeout:e.idleTimeoutMs??3e4})}async run(e,t){return this.pool.run(e,{signal:t})}onMessage(e){return this.pool.on(`message`,e),()=>this.pool.off(`message`,e)}async dispose(){await this.pool.destroy()}},L=class extends Error{code;constructor(e,t){super(e),this.code=t,this.name=`MaterializationError`}};function R(e,t,n){let r=u.resolve(t)+u.sep,i=u.resolve(e);if(i!==u.resolve(t)&&!i.startsWith(r))throw new L(`${n} escapes allowed root: ${e} is not within ${t}`,`containment-violation`)}async function z(e,t,n,r){let i=r??await c.realpath(t),a;try{a=await c.realpath(e)}catch{return e}let o=i+u.sep;if(a!==i&&!a.startsWith(o))throw new L(`${n} escapes allowed root via symlink: real path ${a} is not within ${i}`,`symlink-escape`);return a}function B(e){let t=e.indexOf(`-`);if(t===-1)throw new L(`Invalid SRI integrity format: ${e}`,`contribution-integrity-mismatch`);return{algorithm:e.slice(0,t),digest:e.slice(t+1)}}async function Qe(e,t){let n=await c.readFile(e);return p.createHash(t).update(n).digest(`base64`)}const V=new Set([`.git`,`node_modules`]);function $e(e){return V.has(e.toLowerCase())}async function et(e,t){let n=t.toLowerCase();if(!V.has(n))return!1;if(t===n)return!0;try{let[r,i]=await Promise.all([c.lstat(u.join(e,t)),c.lstat(u.join(e,n))]);return r.dev===i.dev&&r.ino===i.ino}catch(e){if(e.code===`ENOENT`)return!1;throw e}}const tt=V,nt=new Set([`.DS_Store`]);async function H(e,t){let n=p.createHash(t),r=[];async function i(t){let n=await c.readdir(t,{withFileTypes:!0});for(let a of n){let n=u.join(t,a.name);if(a.isSymbolicLink())throw new L(`Contribution package contains a symbolic link: ${u.relative(e,n)}`,`symlink-escape`);if(a.isDirectory()){tt.has(a.name)||await i(n);continue}if(a.isFile()){nt.has(a.name)||r.push(u.relative(e,n));continue}throw new L(`Contribution package contains an unsupported filesystem entry: ${u.relative(e,n)}`,`contribution-integrity-mismatch`)}}await i(e),r.sort();for(let t of r)n.update(t.split(u.sep).join(`/`)),n.update(`\0`),n.update(await c.readFile(u.join(e,t))),n.update(`\0`);return`${t}-${n.digest(`base64`)}`}async function U(e,t=`sha256`){let n=p.createHash(t),r=[];async function i(t){let n=await c.readdir(t,{withFileTypes:!0});for(let a of n){let n=u.join(t,a.name);if(!await et(t,a.name)){if(a.isDirectory()){await i(n);continue}if(a.isFile()){r.push(u.relative(e,n));continue}throw a.isSymbolicLink()?new L(`Workspace root contains a symbolic link: ${u.relative(e,n)}`,`symlink-escape`):new L(`Workspace root contains an unsupported filesystem entry: ${u.relative(e,n)}`,`unsupported-filesystem-entry`)}}}await i(e),r.sort();for(let t of r){n.update(t),n.update(`\0`);let r=await c.readFile(u.join(e,t));n.update(r),n.update(`\0`)}return`${t}-${n.digest(`base64`)}`}async function W(e,t,n){let r=u.join(t,`node_modules`,e.packageName);R(r,t,`Contribution package directory`),await z(r,t,`Contribution package directory`,n);let i=u.join(r,`package.json`),a;try{a=await c.readFile(i,`utf-8`)}catch{throw new L(`Contribution package not found: ${e.packageName} (expected at ${r})`,`contribution-missing`)}let o=JSON.parse(a);if(o.name!==e.packageName)throw new L(`Contribution identity mismatch: expected ${e.packageName}, found ${o.name??`<none>`}`,`contribution-missing`);if(o.version!==e.version)throw new L(`Contribution version mismatch for ${e.packageName}: expected ${e.version}, found ${o.version??`<none>`}`,`contribution-version-mismatch`);let s=u.join(r,e.entrypoint);R(s,r,`Contribution entrypoint`),await z(s,t,`Contribution entrypoint`,n);try{await c.access(s)}catch{throw new L(`Contribution entrypoint not found for ${e.packageName}: ${e.entrypoint}`,`contribution-entrypoint-mismatch`)}let{algorithm:l}=B(e.integrity),d;try{d=await H(r,l)}catch(t){if(t instanceof L)throw t;let n=typeof t==`object`&&t&&`code`in t&&typeof t.code==`string`?t.code:void 0;throw n!==void 0&&!n.startsWith(`ERR_`)?new L(`Contribution package cannot be read for ${e.packageName}`,`contribution-entrypoint-mismatch`):t}if(d!==e.integrity)throw new L(`Contribution integrity mismatch for ${e.packageName}: expected ${e.integrity}, computed ${d}`,`contribution-integrity-mismatch`);return s}async function G(e,t,n){let r=await n.resolveWorkspaceRoot(e.workspaceId);if(r===void 0)throw new L(`Unknown workspace ID: ${e.workspaceId}`,`unknown-workspace`);try{if(!(await c.stat(r)).isDirectory())throw new L(`Workspace root is not a directory: ${r}`,`containment-violation`)}catch(e){throw e instanceof L?e:new L(`Workspace root does not exist: ${r}`,`containment-violation`)}let i=await c.realpath(r),a=u.resolve(r,e.sourcePath);if(R(a,r,`Source path`),u.relative(r,a).split(u.sep).some($e))throw new L(`Workflow source path selects excluded workspace content: ${e.sourcePath}`,`source-path-mismatch`);await z(a,r,`Source path`,i);let o=await U(r);if(o!==e.rootDigest)throw new L(`Workspace root digest mismatch: expected ${e.rootDigest}, computed ${o}`,`digest-mismatch`);try{await c.access(a)}catch{throw new L(`Workflow source file not found: ${a}`,`source-missing`)}return{workspaceRoot:r,sourcePath:a,contributionEntrypoints:await Promise.all(t.map(e=>W(e,r,i))),platform:process.platform,arch:process.arch}}var K=class{options;manifest;pool;constructor(e){this.options=e,this.manifest=e.manifest}async run(e,t,n){this.pool??=new Ze(this.options);let r=n??this.manifest,i=await this.materializeTask(e,r,t);return{state:`uncommitted`,result:await this.pool.run(i,t)}}runWithReadiness(e,t,n,r){this.pool??=new Ze(this.options);let i=this.pool,a,s=!1,c,l=new Promise((t,n)=>{c=n,a=i.onMessage(n=>{o(n)&&n.executionAttemptId===r.executionAttemptId&&(n.executionId!==e.executionId||n.cancelSubject!==e.cancelSubject||(s=!0,a?.(),t(n)))})}),u=n??this.manifest,d=this.materializeTask(e,u,t).then(e=>i.run({...e,kind:`attempt-bound`,executionAttemptId:r.executionAttemptId},t));return d.then(()=>{s||(s=!0,a?.(),c(Error(`Workflow worker completed before ready signal: ${e.executionId}`)))},e=>{s||(s=!0,a?.(),c(e instanceof Error?e:Error(String(e))))}),{result:d,ready:l}}async dispose(){await this.pool?.dispose()}async materializeTask(e,t,n){if(n.throwIfAborted(),!(e.source.kind===`path`||t.contributionRefs.length>0))return{kind:`unbound`,config:e,manifest:t,contributionEntrypoints:[]};let r=e.materializationSpec;if(r?.kind!==`local-directory`)throw Error(`ThinWorkflowPiscinaRunner requires a local-directory materialization spec for path-backed workflows or declared contributions.`);if(this.options.resolveWorkspaceRoot===void 0)throw Error(`ThinWorkflowPiscinaRunner requires a host workspace-root resolver for local-directory materialization.`);let i=await G(r,t.contributionRefs,{resolveWorkspaceRoot:this.options.resolveWorkspaceRoot});if(n.throwIfAborted(),e.source.kind!==`path`)throw Error(`local-directory materialization requires a path-backed workflow source.`);return{kind:`unbound`,config:{...e,source:{kind:`path`,path:i.sourcePath}},manifest:t,contributionEntrypoints:i.contributionEntrypoints}}};function q(e){return e.mode===`source`?f(e.moduleDir,`workflow-worker`,`worker-entry.ts`):f(e.moduleDir,`workflow-worker`,`worker-entry.mjs`)}var J=class{options;constructor(e){this.options=e}async run(e,t,n,r){let i={...e,terminalAuthority:`authority`},a=n??this.options.manifest,o=this.options.requirements,s=r?.dispatchMetadata;return{state:`authority-committed`,result:await Fe({authority:this.options.authority,executionId:e.executionId,dispatch:e=>this.options.dispatch({executionAttemptId:e,config:i,...a!==void 0&&{manifest:a},...o!==void 0&&{requirements:o},...s!==void 0&&{metadata:s}},t)})}}},rt=class{#e;constructor(e){this.#e=e.bus}async run(e,t,n){let a=oe.parse(e),o=await i(a);return{state:`uncommitted`,result:await Ie({config:await r(a,o,this.#e,t),loaded:o,bus:this.#e,signal:t})}}};function it(){return{contributionRefs:[]}}function at(e){if(e.workflowRunner?.mode===`worker`&&!e.executionAttemptRepository)throw Error(`Worker dispatch mode requires an ExecutionAttemptRepository. Pass 'executionAttemptRepository' to createNodeWorkflowRunnerPackageOptions when workflowRunner.mode is 'worker'.`);let t=e.executionAttemptRepository?new Pe(e.executionAttemptRepository):void 0,n=d(e.runtimeModuleDir)===`src`?`source`:`dist`,r=ot({moduleDir:e.runtimeModuleDir,defaultWorkerEntryMode:n,runner:e.workflowRunner,bus:e.bus,authority:t});return{...r!==void 0&&{workflowRunner:r},executorConfig:{busUrl:e.busUrl,busAuth:{kind:`none`},platformDefaults:e.platformDefaults,makaioHome:e.makaioHome},...e.executionAttemptRepository!==void 0&&{executionAttemptRepository:e.executionAttemptRepository},...t!==void 0&&{executionAttemptAuthority:t},...e.workflowMaterializationSpecResolvers!==void 0&&{workflowMaterializationSpecResolvers:e.workflowMaterializationSpecResolvers}}}function ot(e){let{runner:t}=e;if(t)switch(t.mode){case void 0:case`in-process`:if(e.bus===void 0)throw Error(`InProcessWorkflowRunner requires a bus instance. Pass 'bus' to createNodeWorkflowRunner when runner.mode is 'in-process'.`);return new rt({bus:e.bus});case`worker`:{if(e.authority===void 0)throw Error(`WorkerRunner requires an ExecutionAttemptAuthority. Pass 'authority' to createNodeWorkflowRunner when runner.mode is 'worker'.`);let n=e.bus,r=t.dispatch??(n===void 0?void 0:(e,t)=>n.request(ie.dispatch,{executionAttemptId:e.executionAttemptId,config:e.config,manifest:e.manifest,requirements:e.requirements,metadata:e.metadata},{signal:t}));if(r===void 0)throw Error(`WorkerRunner requires either a dispatch function or a bus instance. Pass 'bus' to createNodeWorkflowRunner when runner.mode is 'worker'.`);return new J({dispatch:r,authority:e.authority,...t.manifest!==void 0&&{manifest:t.manifest},...t.requirements!==void 0&&{requirements:t.requirements}})}case`piscina`:return new K({workerEntry:t.workerEntry??q({moduleDir:e.moduleDir,mode:t.workerEntryMode??e.defaultWorkerEntryMode}),manifest:t.manifest??it(),...t.resolveWorkspaceRoot!==void 0&&{resolveWorkspaceRoot:t.resolveWorkspaceRoot},maxConcurrency:t.maxConcurrency,idleTimeoutMs:t.idleTimeoutMs})}}const st=new Set([`accepted`,`duplicate`]);var Y=class extends Error{decision;result;reason;constructor(e,t,n=`authority-rejected`){super(`Outcome delivery ${n===`deadline-exceeded`?`deadline exceeded`:`rejected by Authority`} (decision=${e}, executionId=${t.executionId}, status=${t.status})`),this.decision=e,this.result=t,this.reason=n,this.name=`OutcomeDeliveryError`}};function X(e){return new Y(`deadline-exceeded`,e,`deadline-exceeded`)}function ct(e){let t={maxRetries:e?.maxRetries??7,baseDelayMs:e?.baseDelayMs??1e3,maxDelayMs:e?.maxDelayMs??3e4,deadlineMs:e?.deadlineMs??12e4};if(!Number.isSafeInteger(t.maxRetries)||t.maxRetries<0)throw TypeError(`Outcome submission maxRetries must be a non-negative safe integer, got ${t.maxRetries}`);for(let[e,n]of Object.entries({baseDelayMs:t.baseDelayMs,maxDelayMs:t.maxDelayMs,deadlineMs:t.deadlineMs}))if(!Number.isFinite(n)||n<=0)throw TypeError(`Outcome submission ${e} must be a positive finite number, got ${n}`);return t}async function lt(e,t,n,r){let i=t.baseDelayMs*2**(e-1),a=n-Date.now(),o=Math.min(i,t.maxDelayMs,a);await new Promise(e=>setTimeout(e,o));let s=n-Date.now();if(s<=0)return!1;if(r!==void 0){let e;try{await Promise.race([r(),new Promise(t=>{e=setTimeout(t,s)})])}catch{}finally{e!==void 0&&clearTimeout(e)}}return Date.now()<n}async function Z(e,t,n){let r=ct(n?.retry),i=n?.reconnect,a=Date.now()+r.deadlineMs,o;for(let n=0;n<=r.maxRetries;n++){if(a-Date.now()<=0||n>0&&!await lt(n,r,a,i))throw X(t.result);try{let n=a-Date.now();if(n<=0)throw X(t.result);let{decision:r}=await e.request(ie.control.outcome.submit,{executionAttemptId:t.executionAttemptId,executionId:t.executionId,result:t.result},{timeout:n});if(st.has(r))return r;throw new Y(r,t.result)}catch(e){if(e instanceof Y)throw e;if(o=e,Date.now()>=a)throw X(t.result)}}throw o??X(t.result)}const ut={maxRetries:3,baseDelayMs:200,maxDelayMs:2e3,deadlineMs:1e4},dt={persistentStorage:!0,customCapabilities:[`workflow.local-runtime`,`workflow.thin-runner`],suspensionStrategy:`wait-in-process`,supportsRecovery:!1,materializationModes:[`local-directory`]};function ft(e){let t=new Set,n;return{conclude:r=>{if(n!==void 0)return;n={evidence:y.parse({source:e.slice(0,ne.source),summary:r.slice(0,ne.summary),observedAt:new Date().toISOString()})};let i=[...t];t.clear();for(let e of i)try{e(n)}catch(e){console.error(`[PiscinaThinWorkflowProvider] Infrastructure-conclusion observer failed:`,e)}},observe:e=>n===void 0?(t.add(e),()=>t.delete(e)):(e(n),()=>void 0)}}var pt=class{executionAttemptId;controller;detachCallerAbort;infrastructure;revokeBusIdentity;constructor(e,t,n,r,i){this.executionAttemptId=e,this.controller=t,this.detachCallerAbort=n,this.infrastructure=r,this.revokeBusIdentity=i}cancel(e){return this.controller.abort(e??`Worker cancelled`),this.detachCallerAbort(),Promise.resolve()}terminate(){return this.controller.abort(`Worker terminated`),this.detachCallerAbort(),this.revokeBusIdentity(),Promise.resolve()}release(){return this.detachCallerAbort(),this.revokeBusIdentity(),Promise.resolve()}observeInfrastructureConclusion(e){return this.infrastructure.observe(e)}},mt=class{options;environment=`piscina`;allocationLifetime=`provisioner-process-bound`;baseCapabilities;constructor(e){this.options=e,this.baseCapabilities=re.parse({...dt,...e.baseCapabilities,suspensionStrategy:e.baseCapabilities?.suspensionStrategy??dt.suspensionStrategy,supportsRecovery:!1})}get id(){return this.options.id}get displayName(){return this.options.displayName}async provision(e,t){t.throwIfAborted();let n=new AbortController,r=ft(this.id),i=()=>{n.abort(t.reason)};t.addEventListener(`abort`,i,{once:!0});let a=()=>t.removeEventListener(`abort`,i),o;try{let{executionAttemptId:i,executionId:c,workerConfig:l}=e;if(!l.busUrl)throw Error(`PiscinaThinWorkflowProvider requires a bus URL to provision an execution attempt (executionAttemptId=${i}, executionId=${c})`);let u=this.buildAllocationRef(i),d=s({executionAttemptId:i,executionId:c});o=d.cleanup;let f=new pt(i,n,a,r,d.cleanup);t.throwIfAborted();let p=this.options.runner.runWithReadiness({...l,busAuth:{kind:`hmac`,secret:d.secret}},n.signal,e.workerManifest,{executionAttemptId:i});return p.ready.then(()=>this.submitOutcomeOnSettlement(p.result,c,i,l.workflowId,r.conclude),e=>{n.abort(e),p.result.catch(()=>void 0),r.conclude(`Piscina worker for attempt '${i}' was refused before its workflow run was admitted: `+(e instanceof Error?e.message:String(e)))}),{kind:`allocated`,allocationRef:u,handle:f}}catch(e){throw n.abort(e),a(),o?.(),e}}async submitOutcomeOnSettlement(e,t,n,r,i){let a;try{a=await e}catch(e){a={executionId:t,workflowId:r,status:`failed`,error:e instanceof Error?e.message:String(e)}}try{let e={...ut,...this.options.outcomeRetry};await Z(this.options.bus,{executionAttemptId:n,executionId:t,result:a},{retry:e})}catch(e){e instanceof Y?console.error(`[PiscinaThinWorkflowProvider] Outcome rejected for execution '${t}' attempt '${n}' (decision=${e.decision}):`,e):console.error(`[PiscinaThinWorkflowProvider] Failed to submit outcome for execution '${t}' attempt '${n}':`,e),i(`Piscina worker for attempt '${n}' ended without an acknowledged outcome because outcome submission could not be completed`)}}buildAllocationRef(e){let t={version:ee,providerId:this.id,providerData:{executionAttemptId:e,allocatedAt:Date.now()}};return te.parse(t)}};const ht=[Te,Se,we];function gt(e){let t;return()=>(t??=(async()=>{let t=[];for(let n of[...e].reverse())try{await n()}catch(e){t.push(e)}if(t.length===1)throw t[0];if(t.length>1)throw AggregateError(t,`Isolated workflow runtime shutdown reported errors`)})(),t)}function _t(e,t,n){return E({bus:e,currentMachineId:n,resolveLiveAdapterId:e=>t.getExtensionService(C)?.resolveLiveAdapterId(e),resolveLiveAdapterIdentity:e=>t.getExtensionService(C)?.resolveLiveAdapterIdentity(e),listLiveAdapterIdentities:()=>t.getExtensionService(C)?.getLiveAdapterIdentities()??[]})}async function vt(e){let t=g();t.registerNamespaces([...b,...x]);let{context:n}=e,r=new ce(t,{surface:`headless`,extensionContextBase:{cwd:n.cwd,platform:n.platform,homedir:n.homedir,makaioHome:n.makaioHome,username:n.username,machineId:n.machineId,tryImport:O}}),i,a=[()=>t.disconnect()],o=gt(a);try{await e.connectAuthority(t);let s=[...e.contributedPackages,...await e.loadContributedPackages?.(t)??[]],{adapterSubsystemPackage:c}=T({coordinator:r,configRepository:e.configRepository,platformDefaults:{cwd:n.cwd},runtimeSnapshotHandlerPriority:1,runtimeDefinitionHandlerPriority:1,...e.prepareAuthRuntime!==void 0&&{prepareAuthRuntime:e.prepareAuthRuntime}}),l=Oe({definitions:s.flatMap(e=>e.clients??[]),binaryResolutionPolicy:`global-only`});r.registerContributionProcessor(xe());let u=[...ht,c,ye,...F(s)?[Ce]:[],be(1),Ee,j,l,...je(s)];r.load(u),a.push(...I(u,t,r)),a.push(()=>r.shutdown()),await r.startAll(),i=_t(t,r,n.machineId),a.push(()=>{i?.cleanup(),i=void 0});let d=r.getExtensionService(ve);if(d===void 0)throw Error(`Isolated workflow tool registry did not start.`);for(let t of e.toolsets)await d.register(t);return await t.emit(le.ready,{machineId:n.machineId}),{bus:t,coordinator:r,machineId:n.machineId,shutdown:o}}catch(e){throw await o().catch(()=>void 0),e}}function Q(e,t){return{executionId:e,workflowId:t,status:`cancelled`,reason:`Execution cancelled`}}async function $(e,t,n){let r=new AbortController,i=e.on(se(t),()=>{r.abort()}),a=()=>{r.abort()};return n?.addEventListener(`abort`,a,{once:!0}),n?.aborted&&r.abort(),await _(i),{signal:r.signal,cleanup:()=>{n?.removeEventListener(`abort`,a),i()}}}function yt(t,n){let r=e();return{cwd:t.workspaceRoot,platform:t.platform,homedir:r,makaioHome:r,username:`workflow-worker`,machineId:n}}async function bt(e,t,n,r,i,a){return await vt({connectAuthority:async n=>{await e.connectBus(n,t,i)},contributedPackages:[...r],configRepository:e.configRepository,context:yt(n,a),toolsets:[...e.toolsets],...e.prepareAuthRuntime!==void 0&&{prepareAuthRuntime:e.prepareAuthRuntime}})}async function xt(e,t,n){let{executionId:r,executionAttemptId:i}=e,a=Q(r,n);return{result:a,decision:await Z(t,{executionAttemptId:i,executionId:r,result:a},{retry:e.outcomeRetry,reconnect:()=>t.reconnect()})}}async function St(e,t,n,r,i){let{executionId:a,executionAttemptId:o}=e,s;try{s=await e.execute(t.bus,n,r,i)}catch(e){s=i.aborted&&e instanceof DOMException&&e.name===`AbortError`?Q(a,n.workflowId):{executionId:a,workflowId:n.workflowId,status:`failed`,error:e instanceof Error?e.message:String(e)}}let c=await Z(t.bus,{executionAttemptId:o,executionId:a,result:s},{retry:e.outcomeRetry,reconnect:()=>t.bus.reconnect()});if(e.onPostCommit!==void 0)try{await e.onPostCommit(s,c)}catch{}return{result:s,decision:c}}async function Ct(e,t,r,i,a,o,s,c){let l=await $(r,i.cancelSubject),u=AbortSignal.any([a,l.signal]),d=u,f,p,m,h;try{u.throwIfAborted();let g=await e.materialize(i,u),_=g.context;h=g.cleanup,u.throwIfAborted();let v=await e.loadContributions(_,u);u.throwIfAborted(),f=await bt(e,t,_,v,u,o),p=await $(f.bus,i.cancelSubject,l.signal),m=await n(f.bus,{executionAttemptId:e.executionAttemptId,...s},{}),l.cleanup(),c(),r.disconnect();let y=AbortSignal.any([a,p.signal]);return d=y,y.throwIfAborted(),await St(e,f,i,_,y)}catch(t){if(!(d.aborted&&t instanceof DOMException&&t.name===`AbortError`))throw t;return await xt(e,f?.bus??r,i.workflowId)}finally{l.cleanup(),p?.cleanup(),m?.cleanup(),f!==void 0&&await f.shutdown().catch(()=>void 0),h!==void 0&&await h().catch(()=>void 0)}}async function wt(e,t){t.throwIfAborted();let r=m(),i=await e.bootstrap(t);t.throwIfAborted();let o=g();o.registerNamespaces([...b,...x]);let s,c=()=>{let e=s;s=void 0,e?.cleanup()};try{await e.connectBus(o,i,t),s=await n(o,{executionAttemptId:e.executionAttemptId,runtimeIncarnationId:r},{});let{runtimeGeneration:l}=await a(o,{executionAttemptId:e.executionAttemptId,runtimeIncarnationId:r,endpoint:s,signal:t});return await Ct(e,i,o,await o.request(ae.getRunContext,{executionId:e.executionId},{signal:t}),t,`headless-worker-${e.executionAttemptId}`,{runtimeIncarnationId:r,runtimeGeneration:l},c)}finally{c();try{o.disconnect()}catch{}}}export{j as A,M as C,N as D,I as E,w as F,O as M,E as N,Ke as O,T as P,We as S,Xe as T,U as _,Y as a,B as b,at as c,q as d,K as f,H as g,z as h,st as i,D as j,Ye as k,rt as l,R as m,vt as n,Z as o,L as p,mt as r,ot as s,wt as t,J as u,Qe as v,Ge as w,W as x,G as y};