@mercuryo-ai/magicpay-cli 0.1.0

package/dist/protected-exposure.d.ts

@@ -0,0 +1,4 @@
+import type { ProtectedExposureArtifacts, ProtectedFillForm } from "@mercuryo-ai/agentbrowse/protected-fill";
+import type { MagicPaySession } from "./workflow-state.js";
+export declare function activateProtectedExposure(session: MagicPaySession, fillableForm: ProtectedFillForm, requestId: string, reason: "protected_fill_success" | "protected_fill_binding_stale" | "protected_fill_validation_failed" | "protected_fill_unexpected_error", artifacts?: ProtectedExposureArtifacts): void;
+//# sourceMappingURL=protected-exposure.d.ts.map

package/dist/protected-exposure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-exposure.d.ts","sourceRoot":"","sources":["../src/protected-exposure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,iBAAiB,EAClB,MAAM,yCAAyC,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,iBAAiB,EAC/B,SAAS,EAAE,MAAM,EACjB,MAAM,EACF,wBAAwB,GACxB,8BAA8B,GAC9B,kCAAkC,GAClC,iCAAiC,EACrC,SAAS,CAAC,EAAE,0BAA0B,GACrC,IAAI,CAgBN"}

package/dist/protected-exposure.js

@@ -0,0 +1,17 @@
+export function activateProtectedExposure(session, fillableForm, requestId, reason, artifacts) {
+    if (!session.runtime) {
+        return;
+    }
+    session.runtime.protectedExposureByPage ??= {};
+    session.runtime.protectedExposureByPage[fillableForm.pageRef] = {
+        pageRef: fillableForm.pageRef,
+        scopeRef: fillableForm.scopeRef,
+        fillRef: fillableForm.fillRef,
+        requestId,
+        activatedAt: new Date().toISOString(),
+        ...(artifacts?.exactValueProfile
+            ? { exactValueProfile: artifacts.exactValueProfile }
+            : {}),
+        reason,
+    };
+}

package/dist/request-output.d.ts

@@ -0,0 +1,4 @@
+import type { SecretRequestSnapshot } from '@mercuryo-ai/magicpay-sdk';
+export declare function serializeSecretRequest(snapshot: SecretRequestSnapshot): Record<string, unknown>;
+export declare function serializeSecretRequestContext(snapshot: SecretRequestSnapshot): Record<string, unknown>;
+//# sourceMappingURL=request-output.d.ts.map

package/dist/request-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-output.d.ts","sourceRoot":"","sources":["../src/request-output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAc/F;AAED,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,qBAAqB,GAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWzB"}

package/dist/request-output.js

@@ -0,0 +1,27 @@
+export function serializeSecretRequest(snapshot) {
+    return {
+        requestId: snapshot.requestId,
+        fillRef: snapshot.fillRef,
+        requestType: snapshot.requestType,
+        status: snapshot.status,
+        ...(snapshot.storedSecretRef ? { storedSecretRef: snapshot.storedSecretRef } : {}),
+        ...(snapshot.kind ? { kind: snapshot.kind } : {}),
+        createdAt: snapshot.createdAt,
+        updatedAt: snapshot.updatedAt,
+        ...(snapshot.expiresAt ? { expiresAt: snapshot.expiresAt } : {}),
+        ...(snapshot.resolvedAt ? { resolvedAt: snapshot.resolvedAt } : {}),
+        ...(snapshot.claimedAt ? { claimedAt: snapshot.claimedAt } : {}),
+    };
+}
+export function serializeSecretRequestContext(snapshot) {
+    return {
+        requestType: snapshot.requestType,
+        ...(snapshot.storedSecretRef ? { storedSecretRef: snapshot.storedSecretRef } : {}),
+        ...(snapshot.kind ? { kind: snapshot.kind } : {}),
+        createdAt: snapshot.createdAt,
+        updatedAt: snapshot.updatedAt,
+        ...(snapshot.expiresAt ? { expiresAt: snapshot.expiresAt } : {}),
+        ...(snapshot.resolvedAt ? { resolvedAt: snapshot.resolvedAt } : {}),
+        ...(snapshot.claimedAt ? { claimedAt: snapshot.claimedAt } : {}),
+    };
+}

package/dist/run-store.d.ts

@@ -0,0 +1,130 @@
+export type RunStatus = 'running' | 'completed' | 'failed' | 'aborted';
+export type RunTerminalStatus = Extract<RunStatus, 'completed' | 'failed' | 'aborted'>;
+export type StepCommand = 'launch' | 'start-session' | 'end-session' | 'navigate' | 'observe' | 'act' | 'extract' | 'screenshot' | 'get-secrets-catalog' | 'request-secret' | 'poll-secret' | 'fill-secret' | 'browser-status' | 'status' | 'close';
+export type RunRecord = {
+    runId: string;
+    sessionId: string;
+    startedAt: string;
+    endedAt?: string;
+    status: RunStatus;
+    source: 'cli' | 'test' | 'replay';
+    entryCommand?: string;
+    displayName?: string;
+    profile?: string;
+    runtimeVersion: string;
+    cliVersion: string;
+    cwd?: string;
+    hostHints?: string[];
+    traceContext: {
+        traceId: string;
+        rootSpanId: string;
+        propagationMode: 'single-trace-across-cli-steps';
+    };
+    resource: {
+        serviceName: string;
+        serviceVersion: string;
+        serviceInstanceId?: string;
+        telemetrySdkLanguage?: string;
+    };
+    stepIds: string[];
+    finalOutcome?: {
+        success: boolean;
+        outcomeType?: string;
+        message?: string;
+        reason?: string;
+    };
+    protectedRun: boolean;
+    ingestState: 'local_only' | 'queued' | 'exported' | 'export_failed';
+};
+export type StepChildSpanRecord = {
+    spanId: string;
+    parentSpanId: string;
+    name: string;
+    kind: 'client';
+    startedAt: string;
+    endedAt: string;
+    statusCode: 'unset' | 'ok' | 'error';
+    statusMessage?: string;
+    attributes: Record<string, unknown>;
+};
+export type StepRecord = {
+    stepId: string;
+    runId: string;
+    ordinal: number;
+    command: StepCommand;
+    startedAt: string;
+    endedAt?: string;
+    otel: {
+        traceId: string;
+        spanId: string;
+        parentSpanId?: string;
+        spanName: string;
+        spanKind: 'internal';
+        statusCode: 'unset' | 'ok' | 'error';
+        statusMessage?: string;
+        instrumentationScope: string;
+    };
+    input: Record<string, unknown>;
+    outputSummary?: {
+        success: boolean;
+        outcomeType?: string;
+        message?: string;
+        reason?: string;
+    };
+    refs?: {
+        pageRef?: string;
+        targetRef?: string;
+        surfaceRef?: string;
+        fillRef?: string;
+        requestId?: string;
+    };
+    eventIds: string[];
+    childSpanIds: string[];
+    childSpans: StepChildSpanRecord[];
+    protectedStep: boolean;
+};
+export declare function loadRunRecord(runId: string): RunRecord | null;
+export declare function loadStepRecord(runId: string, stepId: string): StepRecord | null;
+export declare function startCliRun(options: {
+    sessionId: string;
+    entryCommand: string;
+    displayName?: string;
+    profile?: string;
+    url?: string;
+    now?: Date;
+}): RunRecord;
+export declare function startRunStep(options: {
+    runId: string;
+    command: StepCommand;
+    input?: Record<string, unknown>;
+    refs?: StepRecord['refs'];
+    protectedStep?: boolean;
+    now?: Date;
+}): StepRecord | null;
+export declare function finishRunStep(options: {
+    runId: string;
+    stepId: string;
+    success: boolean;
+    outcomeType?: string;
+    message?: string;
+    reason?: string;
+    now?: Date;
+}): StepRecord | null;
+export declare function finishRunRecord(runId: string, options: {
+    status: RunTerminalStatus;
+    now?: Date;
+    finalOutcome?: RunRecord['finalOutcome'];
+}): RunRecord | null;
+export declare function appendStepChildSpan(options: {
+    runId: string;
+    stepId: string;
+    name: string;
+    kind?: StepChildSpanRecord['kind'];
+    startedAt: string;
+    endedAt: string;
+    statusCode: StepChildSpanRecord['statusCode'];
+    statusMessage?: string;
+    attributes?: Record<string, unknown>;
+}): StepChildSpanRecord | null;
+export declare function setRunIngestState(runId: string, ingestState: RunRecord['ingestState']): RunRecord | null;
+//# sourceMappingURL=run-store.d.ts.map

package/dist/run-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-store.d.ts","sourceRoot":"","sources":["../src/run-store.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;AACvE,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC,CAAC;AACvF,MAAM,MAAM,WAAW,GACnB,QAAQ,GACR,eAAe,GACf,aAAa,GACb,UAAU,GACV,SAAS,GACT,KAAK,GACL,SAAS,GACT,YAAY,GACZ,qBAAqB,GACrB,gBAAgB,GAChB,aAAa,GACb,aAAa,GACb,gBAAgB,GAChB,QAAQ,GACR,OAAO,CAAC;AAEZ,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,+BAA+B,CAAC;KAClD,CAAC;IACF,QAAQ,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;QACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,CAAC,EAAE;QACb,OAAO,EAAE,OAAO,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,YAAY,GAAG,QAAQ,GAAG,UAAU,GAAG,eAAe,CAAC;CACrE,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE;QACJ,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,UAAU,CAAC;QACrB,UAAU,EAAE,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC;QACrC,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,oBAAoB,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,aAAa,CAAC,EAAE;QACd,OAAO,EAAE,OAAO,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,IAAI,CAAC,EAAE;QACL,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,aAAa,EAAE,OAAO,CAAC;CACxB,CAAC;AAkEF,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAmB7D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAsB/E;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,SAAS,CAkCZ;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,UAAU,GAAG,IAAI,CAoCpB;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,UAAU,GAAG,IAAI,CA6BpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;IACP,MAAM,EAAE,iBAAiB,CAAC;IAC1B,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,YAAY,CAAC,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC;CAC1C,GACA,SAAS,GAAG,IAAI,CAelB;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAC9C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,GAAG,mBAAmB,GAAG,IAAI,CAyB7B;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,SAAS,CAAC,aAAa,CAAC,GACpC,SAAS,GAAG,IAAI,CAiBlB"}

package/dist/run-store.js

@@ -0,0 +1,245 @@
+import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { randomBytes, randomUUID } from 'node:crypto';
+import { join } from 'node:path';
+import { getMagicPayRunsDir } from '@mercuryo-ai/magicpay-home';
+import { readCurrentPackageVersion } from './package-version.js';
+const SERVICE_NAME = '@mercuryo-ai/magicpay-cli';
+function getRunsDir() {
+    return getMagicPayRunsDir();
+}
+function getRunDir(runId) {
+    return join(getRunsDir(), runId);
+}
+function getRunRecordPath(runId) {
+    return join(getRunDir(runId), 'run.json');
+}
+function getRunStepsDir(runId) {
+    return join(getRunDir(runId), 'steps');
+}
+function getStepRecordPath(runId, stepId) {
+    return join(getRunStepsDir(runId), `${stepId}.json`);
+}
+function ensureRunDir(runId) {
+    mkdirSync(getRunStepsDir(runId), { recursive: true });
+}
+function randomHex(bytes) {
+    return randomBytes(bytes).toString('hex');
+}
+function atomicWriteUtf8(filePath, contents) {
+    const tempPath = `${filePath}.${process.pid}.${randomHex(4)}.tmp`;
+    try {
+        writeFileSync(tempPath, contents, 'utf-8');
+        renameSync(tempPath, filePath);
+    }
+    catch (error) {
+        rmSync(tempPath, { force: true });
+        throw error;
+    }
+}
+function parseHostHints(url) {
+    if (!url) {
+        return undefined;
+    }
+    try {
+        return [new URL(url).host];
+    }
+    catch {
+        return undefined;
+    }
+}
+function saveRunRecord(record) {
+    ensureRunDir(record.runId);
+    atomicWriteUtf8(getRunRecordPath(record.runId), `${JSON.stringify(record, null, 2)}\n`);
+}
+function saveStepRecord(record) {
+    ensureRunDir(record.runId);
+    atomicWriteUtf8(getStepRecordPath(record.runId, record.stepId), `${JSON.stringify(record, null, 2)}\n`);
+}
+export function loadRunRecord(runId) {
+    const recordPath = getRunRecordPath(runId);
+    if (!existsSync(recordPath)) {
+        return null;
+    }
+    try {
+        const parsed = JSON.parse(readFileSync(recordPath, 'utf-8'));
+        if (!parsed.runId || !parsed.sessionId || !parsed.startedAt || !parsed.status) {
+            return null;
+        }
+        return {
+            ...parsed,
+            stepIds: Array.isArray(parsed.stepIds) ? parsed.stepIds : [],
+        };
+    }
+    catch {
+        return null;
+    }
+}
+export function loadStepRecord(runId, stepId) {
+    const recordPath = getStepRecordPath(runId, stepId);
+    if (!existsSync(recordPath)) {
+        return null;
+    }
+    try {
+        const parsed = JSON.parse(readFileSync(recordPath, 'utf-8'));
+        if (!parsed.stepId || !parsed.runId || !parsed.command || !parsed.startedAt) {
+            return null;
+        }
+        return {
+            ...parsed,
+            eventIds: Array.isArray(parsed.eventIds) ? parsed.eventIds : [],
+            childSpanIds: Array.isArray(parsed.childSpanIds) ? parsed.childSpanIds : [],
+            childSpans: Array.isArray(parsed.childSpans) ? parsed.childSpans : [],
+            protectedStep: parsed.protectedStep === true,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+export function startCliRun(options) {
+    const version = readCurrentPackageVersion();
+    const startedAt = (options.now ?? new Date()).toISOString();
+    const run = {
+        runId: randomUUID(),
+        sessionId: options.sessionId,
+        startedAt,
+        status: 'running',
+        source: 'cli',
+        entryCommand: options.entryCommand,
+        ...(options.displayName ? { displayName: options.displayName } : {}),
+        ...(options.profile ? { profile: options.profile } : {}),
+        runtimeVersion: process.version,
+        cliVersion: version,
+        cwd: process.cwd(),
+        ...(parseHostHints(options.url) ? { hostHints: parseHostHints(options.url) } : {}),
+        traceContext: {
+            traceId: randomHex(16),
+            rootSpanId: randomHex(8),
+            propagationMode: 'single-trace-across-cli-steps',
+        },
+        resource: {
+            serviceName: SERVICE_NAME,
+            serviceVersion: version,
+            serviceInstanceId: randomHex(6),
+            telemetrySdkLanguage: 'nodejs',
+        },
+        stepIds: [],
+        protectedRun: false,
+        ingestState: 'local_only',
+    };
+    saveRunRecord(run);
+    return run;
+}
+export function startRunStep(options) {
+    const run = loadRunRecord(options.runId);
+    if (!run) {
+        return null;
+    }
+    const step = {
+        stepId: randomUUID(),
+        runId: run.runId,
+        ordinal: run.stepIds.length + 1,
+        command: options.command,
+        startedAt: (options.now ?? new Date()).toISOString(),
+        otel: {
+            traceId: run.traceContext.traceId,
+            spanId: randomHex(8),
+            parentSpanId: run.traceContext.rootSpanId,
+            spanName: `magicpay.${options.command}`,
+            spanKind: 'internal',
+            statusCode: 'unset',
+            instrumentationScope: 'magicpay.local-run-store',
+        },
+        input: { ...(options.input ?? {}) },
+        ...(options.refs ? { refs: options.refs } : {}),
+        eventIds: [],
+        childSpanIds: [],
+        childSpans: [],
+        protectedStep: options.protectedStep === true,
+    };
+    saveStepRecord(step);
+    saveRunRecord({
+        ...run,
+        stepIds: [...run.stepIds, step.stepId],
+    });
+    return step;
+}
+export function finishRunStep(options) {
+    const step = loadStepRecord(options.runId, options.stepId);
+    if (!step) {
+        return null;
+    }
+    const nextStep = {
+        ...step,
+        endedAt: step.endedAt ?? (options.now ?? new Date()).toISOString(),
+        otel: {
+            ...step.otel,
+            statusCode: step.otel.statusCode === 'unset' ? (options.success ? 'ok' : 'error') : step.otel.statusCode,
+            ...(step.otel.statusMessage
+                ? { statusMessage: step.otel.statusMessage }
+                : options.reason
+                    ? { statusMessage: options.reason }
+                    : {}),
+        },
+        outputSummary: step.outputSummary ?? {
+            success: options.success,
+            ...(options.outcomeType ? { outcomeType: options.outcomeType } : {}),
+            ...(options.message ? { message: options.message } : {}),
+            ...(options.reason ? { reason: options.reason } : {}),
+        },
+    };
+    saveStepRecord(nextStep);
+    return nextStep;
+}
+export function finishRunRecord(runId, options) {
+    const run = loadRunRecord(runId);
+    if (!run) {
+        return null;
+    }
+    const nextRun = {
+        ...run,
+        status: run.endedAt ? run.status : options.status,
+        endedAt: run.endedAt ?? (options.now ?? new Date()).toISOString(),
+        finalOutcome: run.finalOutcome ?? options.finalOutcome,
+    };
+    saveRunRecord(nextRun);
+    return nextRun;
+}
+export function appendStepChildSpan(options) {
+    const step = loadStepRecord(options.runId, options.stepId);
+    if (!step) {
+        return null;
+    }
+    const childSpan = {
+        spanId: randomHex(8),
+        parentSpanId: step.otel.spanId,
+        name: options.name,
+        kind: options.kind ?? 'client',
+        startedAt: options.startedAt,
+        endedAt: options.endedAt,
+        statusCode: options.statusCode,
+        ...(options.statusMessage ? { statusMessage: options.statusMessage } : {}),
+        attributes: { ...(options.attributes ?? {}) },
+    };
+    saveStepRecord({
+        ...step,
+        childSpanIds: [...step.childSpanIds, childSpan.spanId],
+        childSpans: [...step.childSpans, childSpan],
+    });
+    return childSpan;
+}
+export function setRunIngestState(runId, ingestState) {
+    const run = loadRunRecord(runId);
+    if (!run) {
+        return null;
+    }
+    if (run.ingestState === ingestState) {
+        return run;
+    }
+    const nextRun = {
+        ...run,
+        ingestState,
+    };
+    saveRunRecord(nextRun);
+    return nextRun;
+}

package/dist/secret-backend.d.ts

@@ -0,0 +1,28 @@
+import { type MagicPayClient, type MagicPayClientRequestOptions, type SecretCatalog } from '@mercuryo-ai/magicpay-sdk';
+export declare class SecretBackendDisabledError extends Error {
+    constructor(message?: string);
+}
+export interface SecretBackend {
+    kind: 'mock' | 'magicpay_api';
+    fetchSecretCatalog(sessionId: string, urlOrHost: string, options?: MagicPayClientRequestOptions): Promise<SecretCatalog>;
+}
+export interface MockSecretDecisionResult {
+    requestId: string;
+    sessionId: string;
+    status: 'fulfilled' | 'denied';
+    updatedAt: string;
+    resolvedAt?: string;
+    expiresAt?: string;
+}
+export declare function isMockSecretBackendEnabled(): boolean;
+export declare function getMagicPayClient(options?: {
+    fetchImpl?: typeof fetch;
+}): MagicPayClient;
+export declare function getSecretBackend(): SecretBackend;
+export declare function approveMockSecretRequest(requestId: string): MockSecretDecisionResult;
+export declare function denyMockSecretRequest(requestId: string): MockSecretDecisionResult;
+export declare const __testSecretBackend: {
+    approveMockSecretRequest: typeof approveMockSecretRequest;
+    denyMockSecretRequest: typeof denyMockSecretRequest;
+};
+//# sourceMappingURL=secret-backend.d.ts.map

package/dist/secret-backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-backend.d.ts","sourceRoot":"","sources":["../src/secret-backend.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,4BAA4B,EAGjC,KAAK,aAAa,EAMnB,MAAM,2BAA2B,CAAC;AA8UnC,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,OAAO,SAAsC;CAI1D;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,cAAc,CAAC;IAC9B,kBAAkB,CAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,aAAa,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAqCD,wBAAgB,0BAA0B,IAAI,OAAO,CAEpD;AAED,wBAAgB,iBAAiB,CAAC,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO,GAAG,cAAc,CAM5F;AAED,wBAAgB,gBAAgB,IAAI,aAAa,CAchD;AAUD,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,wBAAwB,CAGpF;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,wBAAwB,CAGjF;AAED,eAAO,MAAM,mBAAmB;;;CAG/B,CAAC"}