@mondaydotcomorg/atp-server 0.17.14

package/dist/handlers/definitions.handler.js

@@ -0,0 +1,11 @@
+import { APIAggregator } from '../aggregator/index.js';
+export async function getDefinitions(apiGroups) {
+    const aggregator = new APIAggregator(apiGroups);
+    const typescript = await aggregator.generateTypeScript();
+    return {
+        typescript,
+        apiGroups: apiGroups.map((g) => g.name),
+        version: '1.0.0',
+    };
+}
+//# sourceMappingURL=definitions.handler.js.map

package/dist/handlers/definitions.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"definitions.handler.js","sourceRoot":"","sources":["../../src/handlers/definitions.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAA2B;IAC/D,MAAM,UAAU,GAAG,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,kBAAkB,EAAE,CAAC;IAEzD,OAAO;QACN,UAAU;QACV,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACvC,OAAO,EAAE,OAAO;KAChB,CAAC;AACH,CAAC"}

package/dist/handlers/execute.handler.d.ts

@@ -0,0 +1,7 @@
+import type { RequestContext, ResolvedServerConfig } from '../core/config.js';
+import type { SandboxExecutor } from '../executor/index.js';
+import type { ExecutionStateManager } from '../execution-state/index.js';
+import type { ClientSessionManager } from '../client-sessions.js';
+import type { AuditSink } from '@mondaydotcomorg/atp-protocol';
+export declare function handleExecute(ctx: RequestContext, executor: SandboxExecutor, stateManager: ExecutionStateManager, config: ResolvedServerConfig, auditSink?: AuditSink, sessionManager?: ClientSessionManager): Promise<unknown>;
+//# sourceMappingURL=execute.handler.d.ts.map

package/dist/handlers/execute.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.handler.d.ts","sourceRoot":"","sources":["../../src/handlers/execute.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAc,MAAM,+BAA+B,CAAC;AAqC3E,wBAAsB,aAAa,CAClC,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,eAAe,EACzB,YAAY,EAAE,qBAAqB,EACnC,MAAM,EAAE,oBAAoB,EAC5B,SAAS,CAAC,EAAE,SAAS,EACrB,cAAc,CAAC,EAAE,oBAAoB,GACnC,OAAO,CAAC,OAAO,CAAC,CA6OlB"}

package/dist/handlers/execute.handler.js

@@ -0,0 +1,225 @@
+import { ExecutionStatus, ProvenanceMode } from '@mondaydotcomorg/atp-protocol';
+import { nanoid } from 'nanoid';
+import { captureProvenanceSnapshot, verifyProvenanceHints, } from '@mondaydotcomorg/atp-provenance';
+import { emitProvenanceTokens } from '../utils/token-emitter.js';
+import { storeHintMap, clearHintMap } from '../utils/provenance-reattachment.js';
+import { log } from '@mondaydotcomorg/atp-runtime';
+/**
+ * Recursively remove __prov_id__ properties from result
+ * Handles both enumerable and non-enumerable properties
+ */
+function cleanProvenanceIds(value) {
+    if (value === null || value === undefined) {
+        return value;
+    }
+    if (typeof value !== 'object') {
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => cleanProvenanceIds(item));
+    }
+    const cleaned = {};
+    // Use Object.getOwnPropertyNames to get ALL properties (including non-enumerable)
+    const allKeys = Object.getOwnPropertyNames(value);
+    for (const key of allKeys) {
+        if (key !== '__prov_id__') {
+            cleaned[key] = cleanProvenanceIds(value[key]);
+        }
+    }
+    return cleaned;
+}
+export async function handleExecute(ctx, executor, stateManager, config, auditSink, sessionManager) {
+    const request = ctx.body;
+    const code = request.code || '';
+    const requestConfig = request.config || request.options || {};
+    if (sessionManager && ctx.clientId && ctx.clientId !== 'anonymous') {
+        const requestToken = ctx.headers['authorization']?.replace('Bearer ', '');
+        if (!requestToken) {
+            log.warn('Execute attempt without token', { clientId: ctx.clientId });
+            ctx.throw(401, 'Authentication error: Invalid token or client ID mismatch');
+        }
+        const isValid = await sessionManager.verifyClient(ctx.clientId, requestToken);
+        if (!isValid) {
+            log.warn('Execute attempt with invalid token', { clientId: ctx.clientId });
+            ctx.throw(403, 'Authentication error: Invalid token or client ID mismatch');
+        }
+    }
+    const memoryInBytes = requestConfig.memoryLimit || requestConfig.memory || config.execution.memory;
+    let clientServices = requestConfig.clientServices;
+    if (sessionManager && ctx.clientId && ctx.clientId !== 'anonymous') {
+        try {
+            const session = await sessionManager.getSession(ctx.clientId);
+            const hasTools = session?.tools && session.tools.length > 0;
+            clientServices = {
+                ...clientServices,
+                hasTools: hasTools || false,
+            };
+        }
+        catch (error) { }
+    }
+    const executionConfig = {
+        timeout: requestConfig.timeout || config.execution.timeout,
+        maxMemory: memoryInBytes,
+        maxLLMCalls: requestConfig.llmCalls || config.execution.llmCalls,
+        allowedAPIs: [],
+        allowLLMCalls: true,
+        clientServices,
+        provenanceMode: requestConfig.provenanceMode || config.execution.provenanceMode || ProvenanceMode.NONE,
+        securityPolicies: config.execution.securityPolicies || [],
+        provenanceHints: requestConfig.provenanceHints,
+    };
+    // Verify provenance hints if provided
+    let hintMap;
+    const prelimExecutionId = nanoid();
+    if (executionConfig.provenanceHints &&
+        executionConfig.provenanceHints.length > 0 &&
+        executionConfig.provenanceMode !== ProvenanceMode.NONE &&
+        ctx.cache) {
+        try {
+            // Cap hints at 1000
+            if (executionConfig.provenanceHints.length > 1000) {
+                log.warn('Provenance hints capped', {
+                    provided: executionConfig.provenanceHints.length,
+                    capped: 1000,
+                });
+                ctx.throw(400, 'Too many provenance hints (max 1000)');
+            }
+            hintMap = await verifyProvenanceHints(executionConfig.provenanceHints, ctx.clientId || 'anonymous', prelimExecutionId, ctx.cache, 1000 // maxHints
+            );
+            // Store hint map for this execution
+            if (hintMap && hintMap.size > 0) {
+                storeHintMap(prelimExecutionId, hintMap);
+            }
+            log.info('Provenance hints verified', {
+                hintsProvided: executionConfig.provenanceHints.length,
+                hintsValid: hintMap.size,
+                executionId: prelimExecutionId,
+            });
+        }
+        catch (error) {
+            log.error('Failed to verify provenance hints', { error });
+        }
+    }
+    const startTime = Date.now();
+    if (auditSink) {
+        const startEvent = {
+            eventId: nanoid(),
+            timestamp: startTime,
+            clientId: ctx.clientId || 'anonymous',
+            eventType: 'execution',
+            action: 'start',
+            code,
+            status: 'success',
+        };
+        await auditSink.write(startEvent).catch(() => { });
+    }
+    // Pass the prelimExecutionId so executor can access hints
+    const result = await executor.execute(code, executionConfig, ctx.clientId, {
+        callbackHistory: [],
+        newCallbackResult: undefined,
+        executionId: prelimExecutionId,
+    });
+    // Emit provenance tokens for completed executions
+    if (result.status === ExecutionStatus.COMPLETED &&
+        executionConfig.provenanceMode &&
+        executionConfig.provenanceMode !== ProvenanceMode.NONE &&
+        ctx.cache &&
+        result.provenanceSnapshot) {
+        try {
+            log.info('Attempting to emit provenance tokens from snapshot', {
+                executionId: result.executionId,
+                provenanceMode: executionConfig.provenanceMode,
+                hasCache: !!ctx.cache,
+                hasSnapshot: !!result.provenanceSnapshot,
+                resultType: typeof result.result,
+            });
+            const tokens = await emitProvenanceTokens(result.result, ctx.clientId || 'anonymous', result.executionId, executionConfig.provenanceMode, ctx.cache, log.child({ executionId: result.executionId }), 5000, // maxTokens
+            3600, // tokenTTL (1hr)
+            result.provenanceSnapshot // Pass snapshot
+            );
+            log.info('Provenance tokens emitted', {
+                executionId: result.executionId,
+                tokenCount: tokens.length,
+            });
+            if (tokens.length > 0) {
+                result.provenanceTokens = tokens;
+            }
+        }
+        catch (error) {
+            log.error('Failed to emit provenance tokens', { error, executionId: result.executionId });
+        }
+    }
+    // Always clean snapshot and provenance IDs before returning
+    delete result.provenanceSnapshot;
+    if (result.result && typeof result.result === 'object') {
+        const hasProv = '__prov_id__' in result.result;
+        result.result = cleanProvenanceIds(result.result);
+        const stillHasProv = result.result && typeof result.result === 'object' && '__prov_id__' in result.result;
+        if (hasProv && !stillHasProv) {
+            log.debug('Successfully cleaned __prov_id__ from result');
+        }
+        else if (hasProv && stillHasProv) {
+            log.warn('Failed to clean __prov_id__ from result!');
+        }
+    }
+    if (auditSink) {
+        const endEvent = {
+            eventId: nanoid(),
+            timestamp: Date.now(),
+            clientId: ctx.clientId || 'anonymous',
+            eventType: 'execution',
+            action: result.status === ExecutionStatus.PAUSED ? 'pause' : 'complete',
+            resourceId: result.executionId,
+            status: result.status === ExecutionStatus.COMPLETED
+                ? 'success'
+                : result.status === ExecutionStatus.FAILED
+                    ? 'failed'
+                    : 'paused',
+            duration: Date.now() - startTime,
+            memoryUsed: result.stats?.memoryUsed,
+            llmCallsCount: result.stats?.llmCallsCount,
+            error: result.error
+                ? {
+                    message: result.error.message,
+                    code: result.error.code,
+                    stack: result.error.stack,
+                }
+                : undefined,
+        };
+        await auditSink.write(endEvent).catch(() => { });
+    }
+    if (result.status === 'paused' &&
+        (result.needsCallback || result.needsCallbacks) &&
+        result.callbackHistory) {
+        if (!ctx.clientId) {
+            ctx.throw(400, 'Client ID required for paused executions');
+        }
+        const provenanceSnap = executionConfig.provenanceMode && executionConfig.provenanceMode !== ProvenanceMode.NONE
+            ? captureProvenanceSnapshot(result.executionId)
+            : undefined;
+        const callbackRequest = result.needsCallback || (result.needsCallbacks && result.needsCallbacks[0]);
+        if (!callbackRequest) {
+            ctx.throw(500, 'Invalid paused state: no callback request');
+        }
+        await stateManager.pause({
+            executionId: result.executionId,
+            code: result.transformedCode || code,
+            config: executionConfig,
+            clientId: ctx.clientId,
+            callbackRequest,
+            pausedAt: Date.now(),
+            callbackHistory: result.callbackHistory,
+            currentCallbackIndex: result.callbackHistory.length - 1,
+            context: {
+                codeTransformed: !!result.transformedCode,
+            },
+            provenanceState: provenanceSnap,
+        });
+    }
+    // Cleanup hint map
+    if (hintMap && hintMap.size > 0) {
+        clearHintMap(prelimExecutionId);
+    }
+    return result;
+}
+//# sourceMappingURL=execute.handler.js.map

package/dist/handlers/execute.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.handler.js","sourceRoot":"","sources":["../../src/handlers/execute.handler.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EACN,yBAAyB,EACzB,qBAAqB,GAErB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,GAAG,EAAE,MAAM,8BAA8B,CAAC;AAEnD;;;GAGG;AACH,SAAS,kBAAkB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,kFAAkF;IAClF,MAAM,OAAO,GAAG,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAClD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5E,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,GAAmB,EACnB,QAAyB,EACzB,YAAmC,EACnC,MAA4B,EAC5B,SAAqB,EACrB,cAAqC;IAErC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAW,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IAE9D,IAAI,cAAc,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACpE,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAE1E,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,2DAA2D,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,2DAA2D,CAAC,CAAC;QAC7E,CAAC;IACF,CAAC;IAED,MAAM,aAAa,GAClB,aAAa,CAAC,WAAW,IAAI,aAAa,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;IAE9E,IAAI,cAAc,GAAG,aAAa,CAAC,cAAc,CAAC;IAClD,IAAI,cAAc,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACpE,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YAE5D,cAAc,GAAG;gBAChB,GAAG,cAAc;gBACjB,QAAQ,EAAE,QAAQ,IAAI,KAAK;aAC3B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC,CAAA,CAAC;IACnB,CAAC;IAED,MAAM,eAAe,GAAG;QACvB,OAAO,EAAE,aAAa,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO;QAC1D,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,aAAa,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ;QAChE,WAAW,EAAE,EAAE;QACf,aAAa,EAAE,IAAI;QACnB,cAAc;QACd,cAAc,EACb,aAAa,CAAC,cAAc,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,IAAI,cAAc,CAAC,IAAI;QACvF,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,gBAAgB,IAAI,EAAE;QACzD,eAAe,EAAE,aAAa,CAAC,eAAe;KAC9C,CAAC;IAEF,sCAAsC;IACtC,IAAI,OAAoD,CAAC;IACzD,MAAM,iBAAiB,GAAG,MAAM,EAAE,CAAC;IACnC,IACC,eAAe,CAAC,eAAe;QAC/B,eAAe,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;QAC1C,eAAe,CAAC,cAAc,KAAK,cAAc,CAAC,IAAI;QACtD,GAAG,CAAC,KAAK,EACR,CAAC;QACF,IAAI,CAAC;YACJ,oBAAoB;YACpB,IAAI,eAAe,CAAC,eAAe,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;gBACnD,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE;oBACnC,QAAQ,EAAE,eAAe,CAAC,eAAe,CAAC,MAAM;oBAChD,MAAM,EAAE,IAAI;iBACZ,CAAC,CAAC;gBACH,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;YACxD,CAAC;YAED,OAAO,GAAG,MAAM,qBAAqB,CACpC,eAAe,CAAC,eAAe,EAC/B,GAAG,CAAC,QAAQ,IAAI,WAAW,EAC3B,iBAAiB,EACjB,GAAG,CAAC,KAAK,EACT,IAAI,CAAC,WAAW;aAChB,CAAC;YAEF,oCAAoC;YACpC,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACjC,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;YAC1C,CAAC;YAED,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE;gBACrC,aAAa,EAAE,eAAe,CAAC,eAAe,CAAC,MAAM;gBACrD,UAAU,EAAE,OAAO,CAAC,IAAI;gBACxB,WAAW,EAAE,iBAAiB;aAC9B,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,GAAG,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;IACF,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,IAAI,SAAS,EAAE,CAAC;QACf,MAAM,UAAU,GAAe;YAC9B,OAAO,EAAE,MAAM,EAAE;YACjB,SAAS,EAAE,SAAS;YACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,WAAW;YACrC,SAAS,EAAE,WAAW;YACtB,MAAM,EAAE,OAAO;YACf,IAAI;YACJ,MAAM,EAAE,SAAS;SACjB,CAAC;QACF,MAAM,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,0DAA0D;IAC1D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,CAAC,QAAQ,EAAE;QAC1E,eAAe,EAAE,EAAE;QACnB,iBAAiB,EAAE,SAAS;QAC5B,WAAW,EAAE,iBAAiB;KAC9B,CAAC,CAAC;IAEH,kDAAkD;IAClD,IACC,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC,SAAS;QAC3C,eAAe,CAAC,cAAc;QAC9B,eAAe,CAAC,cAAc,KAAK,cAAc,CAAC,IAAI;QACtD,GAAG,CAAC,KAAK;QACR,MAAc,CAAC,kBAAkB,EACjC,CAAC;QACF,IAAI,CAAC;YACJ,GAAG,CAAC,IAAI,CAAC,oDAAoD,EAAE;gBAC9D,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,cAAc,EAAE,eAAe,CAAC,cAAc;gBAC9C,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK;gBACrB,WAAW,EAAE,CAAC,CAAE,MAAc,CAAC,kBAAkB;gBACjD,UAAU,EAAE,OAAO,MAAM,CAAC,MAAM;aAChC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACxC,MAAM,CAAC,MAAM,EACb,GAAG,CAAC,QAAQ,IAAI,WAAW,EAC3B,MAAM,CAAC,WAAW,EAClB,eAAe,CAAC,cAAc,EAC9B,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,EAC9C,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,iBAAiB;YACtB,MAAc,CAAC,kBAAkB,CAAC,gBAAgB;aACnD,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE;gBACrC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,MAAM;aACzB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAc,CAAC,gBAAgB,GAAG,MAAM,CAAC;YAC3C,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,GAAG,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3F,CAAC;IACF,CAAC;IAED,4DAA4D;IAC5D,OAAQ,MAAc,CAAC,kBAAkB,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC;QAC9C,MAAc,CAAC,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,YAAY,GACjB,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC;QACtF,IAAI,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9B,GAAG,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,OAAO,IAAI,YAAY,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACtD,CAAC;IACF,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACf,MAAM,QAAQ,GAAe;YAC5B,OAAO,EAAE,MAAM,EAAE;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,WAAW;YACrC,SAAS,EAAE,WAAW;YACtB,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;YACvE,UAAU,EAAE,MAAM,CAAC,WAAW;YAC9B,MAAM,EACL,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC,SAAS;gBAC1C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM;oBACzC,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,QAAQ;YACb,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAChC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU;YACpC,aAAa,EAAE,MAAM,CAAC,KAAK,EAAE,aAAa;YAC1C,KAAK,EAAE,MAAM,CAAC,KAAK;gBAClB,CAAC,CAAC;oBACA,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;oBAC7B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;oBACvB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;iBACzB;gBACF,CAAC,CAAC,SAAS;SACZ,CAAC;QACF,MAAM,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,IACC,MAAM,CAAC,MAAM,KAAK,QAAQ;QAC1B,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,cAAc,CAAC;QAC/C,MAAM,CAAC,eAAe,EACrB,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACnB,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,cAAc,GACnB,eAAe,CAAC,cAAc,IAAI,eAAe,CAAC,cAAc,KAAK,cAAc,CAAC,IAAI;YACvF,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,WAAW,CAAC;YAC/C,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,eAAe,GACpB,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7E,IAAI,CAAC,eAAe,EAAE,CAAC;YACtB,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,2CAA2C,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,YAAY,CAAC,KAAK,CAAC;YACxB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAG,MAAc,CAAC,eAAe,IAAI,IAAI;YAC7C,MAAM,EAAE,eAAe;YACvB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,eAAe;YACf,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,oBAAoB,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;YACvD,OAAO,EAAE;gBACR,eAAe,EAAE,CAAC,CAAE,MAAc,CAAC,eAAe;aAClD;YACD,eAAe,EAAE,cAAc;SAC/B,CAAC,CAAC;IACJ,CAAC;IAED,mBAAmB;IACnB,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACjC,YAAY,CAAC,iBAAiB,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/handlers/explorer.handler.d.ts

@@ -0,0 +1,4 @@
+import type { RequestContext } from '../core/config.js';
+import type { ExplorerService } from '../explorer/index.js';
+export declare function handleExplore(ctx: RequestContext, explorerService: ExplorerService): Promise<unknown>;
+//# sourceMappingURL=explorer.handler.d.ts.map

package/dist/handlers/explorer.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"explorer.handler.d.ts","sourceRoot":"","sources":["../../src/handlers/explorer.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,wBAAsB,aAAa,CAClC,GAAG,EAAE,cAAc,EACnB,eAAe,EAAE,eAAe,GAC9B,OAAO,CAAC,OAAO,CAAC,CAWlB"}

package/dist/handlers/explorer.handler.js

@@ -0,0 +1,10 @@
+export async function handleExplore(ctx, explorerService) {
+    const body = ctx.body;
+    const path = body.path || '/';
+    const result = explorerService.explore(path);
+    if (!result) {
+        ctx.throw(404, `Path not found: ${path}`);
+    }
+    return result;
+}
+//# sourceMappingURL=explorer.handler.js.map

package/dist/handlers/explorer.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"explorer.handler.js","sourceRoot":"","sources":["../../src/handlers/explorer.handler.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,GAAmB,EACnB,eAAgC;IAEhC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAyB,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;IAE9B,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/handlers/init.handler.d.ts

@@ -0,0 +1,5 @@
+import type { RequestContext } from '../core/config.js';
+import type { ClientSessionManager } from '../client-sessions.js';
+import type { AuditSink } from '@mondaydotcomorg/atp-protocol';
+export declare function handleInit(ctx: RequestContext, sessionManager: ClientSessionManager, auditSink?: AuditSink): Promise<unknown>;
+//# sourceMappingURL=init.handler.d.ts.map

package/dist/handlers/init.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.handler.d.ts","sourceRoot":"","sources":["../../src/handlers/init.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAc,MAAM,+BAA+B,CAAC;AAI3E,wBAAsB,UAAU,CAC/B,GAAG,EAAE,cAAc,EACnB,cAAc,EAAE,oBAAoB,EACpC,SAAS,CAAC,EAAE,SAAS,GACnB,OAAO,CAAC,OAAO,CAAC,CA0ClB"}

package/dist/handlers/init.handler.js

@@ -0,0 +1,41 @@
+import { nanoid } from 'nanoid';
+import { log } from '@mondaydotcomorg/atp-runtime';
+export async function handleInit(ctx, sessionManager, auditSink) {
+    const request = ctx.body;
+    if (request.tools && Array.isArray(request.tools)) {
+        log.info('Client registering tools', {
+            toolCount: request.tools.length,
+            toolNames: request.tools.map((t) => t.name),
+        });
+        for (const tool of request.tools) {
+            if (!tool.name || typeof tool.name !== 'string') {
+                ctx.throw(400, 'Invalid tool definition: name is required');
+            }
+            if (!tool.description || typeof tool.description !== 'string') {
+                ctx.throw(400, `Invalid tool definition for '${tool.name}': description is required`);
+            }
+            if (!tool.inputSchema || typeof tool.inputSchema !== 'object') {
+                ctx.throw(400, `Invalid tool definition for '${tool.name}': inputSchema is required`);
+            }
+        }
+    }
+    const result = await sessionManager.initClient(request || {});
+    if (auditSink) {
+        const event = {
+            eventId: nanoid(),
+            timestamp: Date.now(),
+            clientId: result.clientId,
+            eventType: 'client_init',
+            action: 'init',
+            status: 'success',
+            metadata: {
+                clientInfo: request.clientInfo,
+                toolsRegistered: request.tools ? request.tools.length : 0,
+                toolNames: request.tools ? request.tools.map((t) => t.name) : [],
+            },
+        };
+        await auditSink.write(event).catch(() => { });
+    }
+    return result;
+}
+//# sourceMappingURL=init.handler.js.map

package/dist/handlers/init.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.handler.js","sourceRoot":"","sources":["../../src/handlers/init.handler.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,GAAG,EAAE,MAAM,8BAA8B,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,GAAmB,EACnB,cAAoC,EACpC,SAAqB;IAErB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAW,CAAC;IAEhC,IAAI,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE;YACpC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;YAC/B,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAChD,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjD,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,2CAA2C,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAC/D,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,gCAAgC,IAAI,CAAC,IAAI,4BAA4B,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAC/D,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,gCAAgC,IAAI,CAAC,IAAI,4BAA4B,CAAC,CAAC;YACvF,CAAC;QACF,CAAC;IACF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAE9D,IAAI,SAAS,EAAE,CAAC;QACf,MAAM,KAAK,GAAe;YACzB,OAAO,EAAE,MAAM,EAAE;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAG,MAAc,CAAC,QAAQ;YAClC,SAAS,EAAE,aAAa;YACxB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE;gBACT,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACzD,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;aACrE;SACD,CAAC;QACF,MAAM,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/handlers/resume.handler.d.ts

@@ -0,0 +1,6 @@
+import type { RequestContext, ResolvedServerConfig } from '../core/config.js';
+import type { SandboxExecutor } from '../executor/index.js';
+import type { ExecutionStateManager } from '../execution-state/index.js';
+import type { ClientSessionManager } from '../client-sessions.js';
+export declare function handleResume(ctx: RequestContext, executionId: string, executor: SandboxExecutor, stateManager: ExecutionStateManager, serverConfig: ResolvedServerConfig, sessionManager?: ClientSessionManager): Promise<unknown>;
+//# sourceMappingURL=resume.handler.d.ts.map

package/dist/handlers/resume.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.handler.d.ts","sourceRoot":"","sources":["../../src/handlers/resume.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAuFlE,wBAAsB,YAAY,CACjC,GAAG,EAAE,cAAc,EACnB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,eAAe,EACzB,YAAY,EAAE,qBAAqB,EACnC,YAAY,EAAE,oBAAoB,EAClC,cAAc,CAAC,EAAE,oBAAoB,GACnC,OAAO,CAAC,OAAO,CAAC,CA0NlB"}

package/dist/handlers/resume.handler.js

@@ -0,0 +1,256 @@
+import { log } from '@mondaydotcomorg/atp-runtime';
+import { ExecutionStatus, ProvenanceMode } from '@mondaydotcomorg/atp-protocol';
+import { restoreProvenanceSnapshot, captureProvenanceSnapshot, createProvenanceProxy, markPrimitiveTainted, ProvenanceSource, } from '@mondaydotcomorg/atp-provenance';
+import { nanoid } from 'nanoid';
+/**
+ * Tag a callback result with provenance metadata
+ */
+function tagCallbackResult(callbackRecord, result, provenanceMode) {
+    // Don't tag if provenance is disabled or not specified
+    // ProvenanceMode.NONE is 'none', so just check for falsy or 'none'
+    if (!provenanceMode || provenanceMode === ProvenanceMode.NONE) {
+        return result;
+    }
+    if (result === null || result === undefined) {
+        return result;
+    }
+    const tagValue = (value, source) => {
+        if (value === null || value === undefined) {
+            return value;
+        }
+        // Primitive: taint it
+        if (typeof value === 'string' || typeof value === 'number') {
+            const metadata = {
+                id: nanoid(),
+                source,
+                readers: { type: 'public' },
+                dependencies: [],
+                context: {},
+            };
+            markPrimitiveTainted(value, metadata);
+            return value;
+        }
+        // Objects/arrays: create provenance proxy
+        if (typeof value === 'object') {
+            return createProvenanceProxy(value, source, { type: 'public' });
+        }
+        return value;
+    };
+    // Determine source based on callback type
+    if (callbackRecord.type === 'llm') {
+        const source = {
+            type: ProvenanceSource.LLM,
+            operation: callbackRecord.operation || 'call',
+            timestamp: Date.now(),
+        };
+        return Array.isArray(result)
+            ? result.map((r) => tagValue(r, source))
+            : tagValue(result, source);
+    }
+    if (callbackRecord.type === 'tool') {
+        const source = {
+            type: ProvenanceSource.TOOL,
+            toolName: callbackRecord.payload?.toolName || 'clientTool',
+            apiGroup: callbackRecord.payload?.namespace || 'client',
+            timestamp: Date.now(),
+        };
+        return Array.isArray(result)
+            ? result.map((r) => tagValue(r, source))
+            : tagValue(result, source);
+    }
+    // No tagging for other callback types
+    return result;
+}
+export async function handleResume(ctx, executionId, executor, stateManager, serverConfig, sessionManager) {
+    const requestClientId = ctx.headers['x-client-id'] || ctx.clientId;
+    const requestToken = ctx.headers['authorization']?.replace('Bearer ', '');
+    if (!requestClientId || !requestToken) {
+        log.warn('Resume attempt without authentication', { executionId });
+        ctx.throw(401, 'Authentication required');
+    }
+    ctx.clientId = requestClientId;
+    if (sessionManager) {
+        const isValid = await sessionManager.verifyClient(requestClientId, requestToken);
+        if (!isValid) {
+            log.warn('Resume attempt with invalid token', { executionId, clientId: requestClientId });
+            ctx.throw(403, 'Invalid client credentials');
+        }
+    }
+    const pausedState = await stateManager.get(executionId);
+    if (!pausedState) {
+        ctx.throw(404, 'Not found');
+    }
+    if (pausedState.clientId !== requestClientId) {
+        log.warn('Resume attempt by unauthorized client', {
+            executionId,
+            requestClientId,
+            ownerClientId: pausedState.clientId,
+        });
+        ctx.throw(403, 'Unauthorized: execution belongs to different client');
+    }
+    log.info('Resume authorized', { executionId, clientId: requestClientId });
+    if (pausedState.provenanceState &&
+        pausedState.config.provenanceMode &&
+        pausedState.config.provenanceMode !== ProvenanceMode.NONE) {
+        // Check if it's a ProvenanceSnapshot (with primitives) or old ProvenanceState
+        const state = pausedState.provenanceState;
+        if ('primitives' in state) {
+            // New snapshot format
+            restoreProvenanceSnapshot(executionId, state);
+            log.info('Provenance snapshot restored', {
+                executionId,
+                registryEntries: state.registry.length,
+                primitiveEntries: state.primitives.length,
+            });
+        }
+        else {
+            // Old state format (backward compat)
+            const provenanceMap = new Map(state.registry);
+            restoreProvenanceSnapshot(executionId, {
+                registry: state.registry,
+                primitives: [],
+            });
+            log.info('Provenance state restored (legacy format)', {
+                executionId,
+                entries: provenanceMap.size,
+            });
+        }
+    }
+    const request = ctx.body;
+    let updatedHistory;
+    let callbackResult;
+    const lastRecord = pausedState.callbackHistory[pausedState.currentCallbackIndex];
+    if (!lastRecord) {
+        log.error('No callback record found at current index', {
+            executionId,
+            currentIndex: pausedState.currentCallbackIndex,
+        });
+        ctx.throw(500, 'Invalid paused state: no callback record');
+    }
+    if (request.results) {
+        const batchResults = request.results;
+        log.info('Processing batch callback results', {
+            executionId,
+            batchCount: batchResults.length,
+        });
+        for (const br of batchResults) {
+            if (br.result && typeof br.result === 'object' && '__error' in br.result) {
+                const errorObj = br.result;
+                if (errorObj.message && errorObj.message.includes('service not provided')) {
+                    log.error('Service provider error in batch', { executionId, error: errorObj.message });
+                    await stateManager.delete(executionId);
+                    return {
+                        executionId,
+                        status: ExecutionStatus.FAILED,
+                        error: {
+                            message: errorObj.message || 'Service not available',
+                            code: 'SERVICE_NOT_PROVIDED',
+                        },
+                        stats: {
+                            duration: 0,
+                            memoryUsed: 0,
+                            llmCallsCount: 0,
+                            approvalCallsCount: 0,
+                        },
+                    };
+                }
+            }
+        }
+        // Tag batch results
+        const taggedBatchResults = batchResults.map((br) => ({
+            ...br,
+            result: tagCallbackResult(lastRecord, br.result, pausedState.config.provenanceMode),
+        }));
+        callbackResult = taggedBatchResults.map((br) => br.result);
+        updatedHistory = pausedState.callbackHistory.map((record, index) => {
+            if (index === pausedState.currentCallbackIndex) {
+                return { ...record, result: callbackResult };
+            }
+            return record;
+        });
+    }
+    else {
+        // Tag single result
+        const rawResult = request.result;
+        // Check for service provider errors (not tool errors)
+        if (rawResult && typeof rawResult === 'object' && '__error' in rawResult) {
+            const errorObj = rawResult;
+            // Only fail execution for service provider errors (service not available)
+            if (errorObj.message && errorObj.message.includes('service not provided')) {
+                log.error('Service provider error', { executionId, error: errorObj.message });
+                await stateManager.delete(executionId);
+                return {
+                    executionId,
+                    status: ExecutionStatus.FAILED,
+                    error: {
+                        message: errorObj.message || 'Service not available',
+                        code: 'SERVICE_NOT_PROVIDED',
+                    },
+                    stats: {
+                        duration: 0,
+                        memoryUsed: 0,
+                        llmCallsCount: 0,
+                        approvalCallsCount: 0,
+                    },
+                };
+            }
+        }
+        callbackResult = tagCallbackResult(lastRecord, rawResult, pausedState.config.provenanceMode);
+        updatedHistory = pausedState.callbackHistory.map((record, index) => {
+            if (index === pausedState.currentCallbackIndex) {
+                return { ...record, result: callbackResult };
+            }
+            return record;
+        });
+    }
+    const restoredConfig = {
+        ...pausedState.config,
+        securityPolicies: serverConfig.execution.securityPolicies || [],
+    };
+    const result = await executor.execute(pausedState.code, restoredConfig, pausedState.clientId, {
+        callbackHistory: updatedHistory,
+        newCallbackResult: callbackResult,
+        executionId,
+    });
+    if (result.status === ExecutionStatus.PAUSED && result.needsCallbacks && result.callbackHistory) {
+        const provenanceState = pausedState.config.provenanceMode && pausedState.config.provenanceMode !== ProvenanceMode.NONE
+            ? captureProvenanceSnapshot(result.executionId)
+            : undefined;
+        await stateManager.pause({
+            executionId: result.executionId,
+            code: pausedState.code,
+            config: pausedState.config,
+            clientId: pausedState.clientId,
+            callbackRequest: result.needsCallbacks[0],
+            pausedAt: Date.now(),
+            callbackHistory: result.callbackHistory,
+            currentCallbackIndex: result.callbackHistory.length - 1,
+            context: {},
+            provenanceState,
+        });
+    }
+    else if (result.status === ExecutionStatus.PAUSED &&
+        result.needsCallback &&
+        result.callbackHistory) {
+        const provenanceState = pausedState.config.provenanceMode && pausedState.config.provenanceMode !== ProvenanceMode.NONE
+            ? captureProvenanceSnapshot(result.executionId)
+            : undefined;
+        await stateManager.pause({
+            executionId: result.executionId,
+            code: pausedState.code,
+            config: pausedState.config,
+            clientId: pausedState.clientId,
+            callbackRequest: result.needsCallback,
+            pausedAt: Date.now(),
+            callbackHistory: result.callbackHistory,
+            currentCallbackIndex: result.callbackHistory.length - 1,
+            context: {},
+            provenanceState,
+        });
+    }
+    else {
+        await stateManager.delete(executionId);
+    }
+    return result;
+}
+//# sourceMappingURL=resume.handler.js.map

package/dist/handlers/resume.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.handler.js","sourceRoot":"","sources":["../../src/handlers/resume.handler.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,GAAG,EAAE,MAAM,8BAA8B,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,EACN,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,GAIhB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC;;GAEG;AACH,SAAS,iBAAiB,CACzB,cAAiE,EACjE,MAAe,EACf,cAAuB;IAEvB,uDAAuD;IACvD,mEAAmE;IACnE,IAAI,CAAC,cAAc,IAAI,cAAc,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;IACf,CAAC;IAED,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,MAAsB,EAAW,EAAE;QACpE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACd,CAAC;QAED,sBAAsB;QACtB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG;gBAChB,EAAE,EAAE,MAAM,EAAE;gBACZ,MAAM;gBACN,OAAO,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;gBACpC,YAAY,EAAE,EAAE;gBAChB,OAAO,EAAE,EAAE;aACX,CAAC;YACF,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC;QACd,CAAC;QAED,0CAA0C;QAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC,CAAC;IAEF,0CAA0C;IAC1C,IAAI,cAAc,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACnC,MAAM,MAAM,GAAmB;YAC9B,IAAI,EAAE,gBAAgB,CAAC,GAAG;YAC1B,SAAS,EAAG,cAAc,CAAC,SAA6C,IAAI,MAAM;YAClF,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC;QACF,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC3B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACxC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,cAAc,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACpC,MAAM,MAAM,GAAmB;YAC9B,IAAI,EAAE,gBAAgB,CAAC,IAAI;YAC3B,QAAQ,EAAG,cAAc,CAAC,OAAe,EAAE,QAAQ,IAAI,YAAY;YACnE,QAAQ,EAAG,cAAc,CAAC,OAAe,EAAE,SAAS,IAAI,QAAQ;YAChE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC;QACF,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC3B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACxC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED,sCAAsC;IACtC,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,GAAmB,EACnB,WAAmB,EACnB,QAAyB,EACzB,YAAmC,EACnC,YAAkC,EAClC,cAAqC;IAErC,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC;IACnE,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAE1E,IAAI,CAAC,eAAe,IAAI,CAAC,YAAY,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;IAC3C,CAAC;IAED,GAAG,CAAC,QAAQ,GAAG,eAAe,CAAC;IAE/B,IAAI,cAAc,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QACjF,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;YAC1F,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;QAC9C,CAAC;IACF,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAExD,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,WAAW,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE;YACjD,WAAW;YACX,eAAe;YACf,aAAa,EAAE,WAAW,CAAC,QAAQ;SACnC,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,qDAAqD,CAAC,CAAC;IACvE,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAE1E,IACC,WAAW,CAAC,eAAe;QAC3B,WAAW,CAAC,MAAM,CAAC,cAAc;QACjC,WAAW,CAAC,MAAM,CAAC,cAAc,KAAK,cAAc,CAAC,IAAI,EACxD,CAAC;QACF,8EAA8E;QAC9E,MAAM,KAAK,GAAG,WAAW,CAAC,eAAe,CAAC;QAC1C,IAAI,YAAY,IAAI,KAAK,EAAE,CAAC;YAC3B,sBAAsB;YACtB,yBAAyB,CAAC,WAAW,EAAE,KAA2B,CAAC,CAAC;YACpE,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE;gBACxC,WAAW;gBACX,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;gBACtC,gBAAgB,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;aACzC,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACP,qCAAqC;YACrC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAc,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3D,yBAAyB,CAAC,WAAW,EAAE;gBACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,UAAU,EAAE,EAAE;aACd,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,2CAA2C,EAAE;gBACrD,WAAW;gBACX,OAAO,EAAE,aAAa,CAAC,IAAI;aAC3B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,IAAW,CAAC;IAEhC,IAAI,cAAqB,CAAC;IAC1B,IAAI,cAAuB,CAAC;IAE5B,MAAM,UAAU,GAAG,WAAW,CAAC,eAAe,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAEjF,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,GAAG,CAAC,KAAK,CAAC,2CAA2C,EAAE;YACtD,WAAW;YACX,YAAY,EAAE,WAAW,CAAC,oBAAoB;SAC9C,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,YAAY,GAAG,OAAO,CAAC,OAAiD,CAAC;QAC/E,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE;YAC7C,WAAW;YACX,UAAU,EAAE,YAAY,CAAC,MAAM;SAC/B,CAAC,CAAC;QAEH,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,EAAE,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;gBAC1E,MAAM,QAAQ,GAAG,EAAE,CAAC,MAA+C,CAAC;gBACpE,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;oBAC3E,GAAG,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;oBACvF,MAAM,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;oBACvC,OAAO;wBACN,WAAW;wBACX,MAAM,EAAE,eAAe,CAAC,MAAM;wBAC9B,KAAK,EAAE;4BACN,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,uBAAuB;4BACpD,IAAI,EAAE,sBAAsB;yBAC5B;wBACD,KAAK,EAAE;4BACN,QAAQ,EAAE,CAAC;4BACX,UAAU,EAAE,CAAC;4BACb,aAAa,EAAE,CAAC;4BAChB,kBAAkB,EAAE,CAAC;yBACrB;qBACD,CAAC;gBACH,CAAC;YACF,CAAC;QACF,CAAC;QAED,oBAAoB;QACpB,MAAM,kBAAkB,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACpD,GAAG,EAAE;YACL,MAAM,EAAE,iBAAiB,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,cAAc,CAAC;SACnF,CAAC,CAAC,CAAC;QACJ,cAAc,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAE3D,cAAc,GAAG,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YAClE,IAAI,KAAK,KAAK,WAAW,CAAC,oBAAoB,EAAE,CAAC;gBAChD,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;YAC9C,CAAC;YACD,OAAO,MAAM,CAAC;QACf,CAAC,CAAC,CAAC;IACJ,CAAC;SAAM,CAAC;QACP,oBAAoB;QACpB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;QAEjC,sDAAsD;QACtD,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YAC1E,MAAM,QAAQ,GAAG,SAAkD,CAAC;YACpE,0EAA0E;YAC1E,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;gBAC3E,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9E,MAAM,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBACvC,OAAO;oBACN,WAAW;oBACX,MAAM,EAAE,eAAe,CAAC,MAAM;oBAC9B,KAAK,EAAE;wBACN,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,uBAAuB;wBACpD,IAAI,EAAE,sBAAsB;qBAC5B;oBACD,KAAK,EAAE;wBACN,QAAQ,EAAE,CAAC;wBACX,UAAU,EAAE,CAAC;wBACb,aAAa,EAAE,CAAC;wBAChB,kBAAkB,EAAE,CAAC;qBACrB;iBACD,CAAC;YACH,CAAC;QACF,CAAC;QAED,cAAc,GAAG,iBAAiB,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAE7F,cAAc,GAAG,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YAClE,IAAI,KAAK,KAAK,WAAW,CAAC,oBAAoB,EAAE,CAAC;gBAChD,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;YAC9C,CAAC;YACD,OAAO,MAAM,CAAC;QACf,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG;QACtB,GAAG,WAAW,CAAC,MAAM;QACrB,gBAAgB,EAAE,YAAY,CAAC,SAAS,CAAC,gBAAgB,IAAI,EAAE;KAC/D,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,WAAW,CAAC,QAAQ,EAAE;QAC7F,eAAe,EAAE,cAAc;QAC/B,iBAAiB,EAAE,cAAc;QACjC,WAAW;KACX,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QACjG,MAAM,eAAe,GACpB,WAAW,CAAC,MAAM,CAAC,cAAc,IAAI,WAAW,CAAC,MAAM,CAAC,cAAc,KAAK,cAAc,CAAC,IAAI;YAC7F,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,WAAW,CAAC;YAC/C,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,YAAY,CAAC,KAAK,CAAC;YACxB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,eAAe,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAE;YAC1C,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,oBAAoB,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;YACvD,OAAO,EAAE,EAAE;YACX,eAAe;SACf,CAAC,CAAC;IACJ,CAAC;SAAM,IACN,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM;QACxC,MAAM,CAAC,aAAa;QACpB,MAAM,CAAC,eAAe,EACrB,CAAC;QACF,MAAM,eAAe,GACpB,WAAW,CAAC,MAAM,CAAC,cAAc,IAAI,WAAW,CAAC,MAAM,CAAC,cAAc,KAAK,cAAc,CAAC,IAAI;YAC7F,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,WAAW,CAAC;YAC/C,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,YAAY,CAAC,KAAK,CAAC;YACxB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,eAAe,EAAE,MAAM,CAAC,aAAa;YACrC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,oBAAoB,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;YACvD,OAAO,EAAE,EAAE;YACX,eAAe;SACf,CAAC,CAAC;IACJ,CAAC;SAAM,CAAC;QACP,MAAM,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/handlers/search.handler.d.ts

@@ -0,0 +1,5 @@
+import type { RequestContext, ResolvedServerConfig } from '../core/config.js';
+import type { SearchEngine } from '../search/index.js';
+export declare function handleSearch(ctx: RequestContext, searchEngine: SearchEngine, config: ResolvedServerConfig): Promise<unknown>;
+export declare function handleSearchQuery(ctx: RequestContext, searchEngine: SearchEngine, config: ResolvedServerConfig): Promise<unknown>;
+//# sourceMappingURL=search.handler.d.ts.map