@north-light/crouter 0.3.318 → 0.3.320

package/dist/daemon/api/handlers/modelauth.js

@@ -1,165 +1 @@
-// Model-auth handler (spec §7.6). Installs/rotates already-obtained credential
-// material — the interactive OAuth/API-key *collection* stays client-side (`sys
-// setup`); this route only persists what the client collected. Single-account
-// credentials go through crouter's locked auth.json writer (the same helper `sys
-// setup` uses); managed-pool accounts go through the pool mutators (which take
-// that same lock internally), so a pool mutation and an auth.json mutation never
-// interleave. Live reload is free: crtrd already watches `auth.json`'s mtime and
-// fans `reload_auth` to live brokers — a write here is picked up by that watcher
-// (do NOT re-implement the fan).
-//
-//   GET /v1/model-auth             sanitized credential presence
-//   PUT /v1/model-auth/:provider   install/rotate a credential (idempotent)
-//   DELETE /v1/model-auth/:provider remove all credentials for one provider
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-import { deleteAuthCredential, readAuthCredentials, setAuthCredential } from '../../../core/auth-file.js';
-import { ApiError } from '../../../api/index.js';
-import { ANTHROPIC_PROVIDER_ID, OPENAI_CODEX_PROVIDER_ID, commitManagedLogin, readSubscriptionPool, removeAllManagedAccounts, } from '../../../core/subscription-state.js';
-/** Resolve the shared pi credentials file, matching the daemon's auth.json
- *  mtime watcher exactly (`PI_CODING_AGENT_DIR` env, else `~/.pi/agent`) so a
- *  write here is the file that watcher fans a `reload_auth` for. */
-function authPath() {
-    const env = process.env['PI_CODING_AGENT_DIR'];
-    const agentDir = env !== undefined && env !== '' ? env : join(homedir(), '.pi', 'agent');
-    return join(agentDir, 'auth.json');
-}
-function isManagedProvider(provider) {
-    return provider === ANTHROPIC_PROVIDER_ID || provider === OPENAI_CODEX_PROVIDER_ID;
-}
-/** Parse an ISO expiry into the epoch-ms `expires` pi's OAuth credential stores.
- *  A missing/unparseable value is fail-loud (400) — no silent fallback. */
-function parseExpiry(field, value) {
-    if (typeof value !== 'string' || value === '') {
-        throw new ApiError(400, 'invalid_request', `oauth credential requires \`${field}\``);
-    }
-    const ms = Date.parse(value);
-    if (Number.isNaN(ms)) {
-        throw new ApiError(400, 'invalid_request', `\`${field}\` is not a valid ISO timestamp`);
-    }
-    return ms;
-}
-function requireField(kind, field, value) {
-    if (typeof value !== 'string' || value === '') {
-        throw new ApiError(400, 'invalid_request', `${kind} credential requires \`${field}\``);
-    }
-    return value;
-}
-function toManagedAccountStatus(account) {
-    return {
-        label: account.label,
-        expires_at: new Date(account.expires).toISOString(),
-        rate_limited_until: new Date(account.rateLimitedUntil).toISOString(),
-        ...(account.authFailure ? { auth_failure: account.authFailure } : {}),
-        ...(account.accountId ? { account_id: account.accountId } : {}),
-    };
-}
-function managedStatus(provider) {
-    const accounts = readSubscriptionPool(provider).map(toManagedAccountStatus);
-    return { provider, managed: true, configured: accounts.length > 0, accounts };
-}
-/** `GET /v1/model-auth` — credential truth projected without tokens, keys, or
- * other auth-file material. Managed providers always reflect their complete
- * pool rows, while non-managed presence reflects supported auth.json kinds. */
-async function handleList() {
-    const credentials = await readAuthCredentials(authPath());
-    const providers = [
-        managedStatus(ANTHROPIC_PROVIDER_ID),
-        managedStatus(OPENAI_CODEX_PROVIDER_ID),
-    ];
-    for (const [provider, credential] of Object.entries(credentials)) {
-        if (isManagedProvider(provider))
-            continue;
-        if (credential.type !== 'api_key' && credential.type !== 'oauth')
-            continue;
-        providers.push({ provider, managed: false, configured: true, kind: credential.type });
-    }
-    return { status: 200, body: { providers } };
-}
-/** `PUT /v1/model-auth/:provider` — idempotent upsert/rotate keyed by provider
- *  (and `account_id` for a managed account). */
-async function handleInstall(ctx) {
-    const provider = ctx.params['provider'];
-    const req = ctx.body;
-    if (req === undefined || typeof req !== 'object' || typeof req.kind !== 'string') {
-        throw new ApiError(400, 'invalid_request', 'a credential `kind` is required');
-    }
-    switch (req.kind) {
-        case 'api_key': {
-            const key = requireField('api_key', 'api_key', req.api_key);
-            await setAuthCredential(provider, { type: 'api_key', key }, authPath());
-            return { status: 200, body: { provider, installed: true, managed: false } };
-        }
-        case 'oauth': {
-            // A managed provider's oauth credentials live in the subscription pool, which owns their
-            // refresh; one written into auth.json could never be refreshed and would serve turns only
-            // until its access token expired. `managed_account` is the door for those.
-            if (isManagedProvider(provider)) {
-                throw new ApiError(422, 'unprocessable', `provider ${provider} stores oauth credentials as managed accounts — use kind \`managed_account\``);
-            }
-            const access = requireField('oauth', 'access_token', req.access_token);
-            const refresh = requireField('oauth', 'refresh_token', req.refresh_token);
-            const expires = parseExpiry('expires_at', req.expires_at);
-            // Spread provider-specific extra keys (e.g. github-copilot's `enterpriseUrl`)
-            // before canonical tokens so routing and refresh fields are retained while named
-            // token values remain authoritative.
-            const extra = req.extra ?? {};
-            await setAuthCredential(provider, { type: 'oauth', ...extra, access, refresh, expires }, authPath());
-            const body = { provider, installed: true, managed: false };
-            if (typeof req.account_id === 'string' && req.account_id !== '') {
-                body.account_id = req.account_id;
-            }
-            return { status: 200, body };
-        }
-        case 'managed_account': {
-            if (!isManagedProvider(provider)) {
-                throw new ApiError(422, 'unprocessable', `provider ${provider} does not support managed accounts`);
-            }
-            const label = typeof req.label === 'string' && req.label.trim() ? req.label.trim() : undefined;
-            if (!label && req.auto_label !== true) {
-                throw new ApiError(400, 'invalid_request', 'managed_account credential requires `label` or `auto_label`');
-            }
-            const accountId = typeof req.account_id === 'string' && req.account_id !== '' ? req.account_id : undefined;
-            const access = requireField('managed_account', 'access_token', req.access_token);
-            const refresh = requireField('managed_account', 'refresh_token', req.refresh_token);
-            const expires = parseExpiry('expires_at', req.expires_at);
-            // A snapshot from before OAuth lets the account write preserve a newer concurrent 429.
-            const lastRateLimitedAt = typeof req.last_rate_limited_at === 'number'
-                ? req.last_rate_limited_at
-                : Math.max(0, ...readSubscriptionPool(provider).map((entry) => entry.lastRateLimitedAt));
-            await commitManagedLogin(provider, label, {
-                refresh,
-                access,
-                expires,
-                ...(accountId ? { accountId } : {}),
-                lastRateLimitedAt,
-                autoLabel: req.auto_label === true,
-            });
-            const body = { provider, installed: true, managed: true };
-            if (accountId)
-                body.account_id = accountId;
-            return { status: 200, body };
-        }
-        default:
-            throw new ApiError(400, 'invalid_request', `unknown credential kind: ${String(req.kind)}`);
-    }
-}
-/** `DELETE /v1/model-auth/:provider` — remove all durable user credentials for
- * one provider. Managed OAuth accounts are cleared through their pool lock and
- * any managed-provider API key through the auth.json lock; other providers use
- * the auth.json owner alone. */
-async function handleDelete(ctx) {
-    const provider = ctx.params['provider'];
-    if (isManagedProvider(provider)) {
-        const removedAccounts = await removeAllManagedAccounts(provider);
-        const removedApiKey = await deleteAuthCredential(provider, authPath());
-        return { status: 200, body: { provider, removed_accounts: removedAccounts + (removedApiKey ? 1 : 0) } };
-    }
-    const removedAccounts = await deleteAuthCredential(provider, authPath()) ? 1 : 0;
-    return { status: 200, body: { provider, removed_accounts: removedAccounts } };
-}
-export const modelAuthRoutes = [
-    { method: 'GET', pattern: '/v1/model-auth', handler: handleList },
-    { method: 'PUT', pattern: '/v1/model-auth/:provider', handler: handleInstall },
-    { method: 'DELETE', pattern: '/v1/model-auth/:provider', handler: handleDelete },
-];
+var I=Object.defineProperty;var r=(a,t)=>I(a,"name",{value:t,configurable:!0});import{homedir as D}from"node:os";import{join as m}from"node:path";import{deleteAuthCredential as f,readAuthCredentials as q,setAuthCredential as h}from"../../../core/auth-file.js";import{ApiError as i}from"../../../api/index.js";import{ANTHROPIC_PROVIDER_ID as g,OPENAI_CODEX_PROVIDER_ID as y,commitManagedLogin as x,readSubscriptionPool as w,removeAllManagedAccounts as E}from"../../../core/subscription-state.js";function s(){const a=process.env.PI_CODING_AGENT_DIR,t=a!==void 0&&a!==""?a:m(D(),".pi","agent");return m(t,"auth.json")}r(s,"authPath");function u(a){return a===g||a===y}r(u,"isManagedProvider");function b(a,t){if(typeof t!="string"||t==="")throw new i(400,"invalid_request",`oauth credential requires \`${a}\``);const e=Date.parse(t);if(Number.isNaN(e))throw new i(400,"invalid_request",`\`${a}\` is not a valid ISO timestamp`);return e}r(b,"parseExpiry");function d(a,t,e){if(typeof e!="string"||e==="")throw new i(400,"invalid_request",`${a} credential requires \`${t}\``);return e}r(d,"requireField");function O(a){return{label:a.label,expires_at:new Date(a.expires).toISOString(),rate_limited_until:new Date(a.rateLimitedUntil).toISOString(),...a.authFailure?{auth_failure:a.authFailure}:{},...a.accountId?{account_id:a.accountId}:{}}}r(O,"toManagedAccountStatus");function k(a){const t=w(a).map(O);return{provider:a,managed:!0,configured:t.length>0,accounts:t}}r(k,"managedStatus");async function P(){const a=await q(s()),t=[k(g),k(y)];for(const[e,n]of Object.entries(a))u(e)||n.type!=="api_key"&&n.type!=="oauth"||t.push({provider:e,managed:!1,configured:!0,kind:n.type});return{status:200,body:{providers:t}}}r(P,"handleList");async function R(a){const t=a.params.provider,e=a.body;if(e===void 0||typeof e!="object"||typeof e.kind!="string")throw new i(400,"invalid_request","a credential `kind` is required");switch(e.kind){case"api_key":{const n=d("api_key","api_key",e.api_key);return await h(t,{type:"api_key",key:n},s()),{status:200,body:{provider:t,installed:!0,managed:!1}}}case"oauth":{if(u(t))throw new i(422,"unprocessable",`provider ${t} stores oauth credentials as managed accounts \u2014 use kind \`managed_account\``);const n=d("oauth","access_token",e.access_token),o=d("oauth","refresh_token",e.refresh_token),l=b("expires_at",e.expires_at),p=e.extra??{};await h(t,{type:"oauth",...p,access:n,refresh:o,expires:l},s());const c={provider:t,installed:!0,managed:!1};return typeof e.account_id=="string"&&e.account_id!==""&&(c.account_id=e.account_id),{status:200,body:c}}case"managed_account":{if(!u(t))throw new i(422,"unprocessable",`provider ${t} does not support managed accounts`);const n=typeof e.label=="string"&&e.label.trim()?e.label.trim():void 0;if(!n&&e.auto_label!==!0)throw new i(400,"invalid_request","managed_account credential requires `label` or `auto_label`");const o=typeof e.account_id=="string"&&e.account_id!==""?e.account_id:void 0,l=d("managed_account","access_token",e.access_token),p=d("managed_account","refresh_token",e.refresh_token),c=b("expires_at",e.expires_at),v=typeof e.last_rate_limited_at=="number"?e.last_rate_limited_at:Math.max(0,...w(t).map(A=>A.lastRateLimitedAt));await x(t,n,{refresh:p,access:l,expires:c,...o?{accountId:o}:{},lastRateLimitedAt:v,autoLabel:e.auto_label===!0});const _={provider:t,installed:!0,managed:!0};return o&&(_.account_id=o),{status:200,body:_}}default:throw new i(400,"invalid_request",`unknown credential kind: ${String(e.kind)}`)}}r(R,"handleInstall");async function S(a){const t=a.params.provider;if(u(t)){const n=await E(t),o=await f(t,s());return{status:200,body:{provider:t,removed_accounts:n+(o?1:0)}}}const e=await f(t,s())?1:0;return{status:200,body:{provider:t,removed_accounts:e}}}r(S,"handleDelete");const j=[{method:"GET",pattern:"/v1/model-auth",handler:P},{method:"PUT",pattern:"/v1/model-auth/:provider",handler:R},{method:"DELETE",pattern:"/v1/model-auth/:provider",handler:S}];export{j as modelAuthRoutes};

package/dist/daemon/api/handlers/node-outcomes.js

@@ -1,181 +1 @@
-// Durable node-outcome reads and outcome-delivery registration.
-import { setTimeout as sleep } from 'node:timers/promises';
-import { ApiError } from '../../../api/errors.js';
-import { getNode } from '../../../core/canvas/canvas.js';
-import { armExternalActionDelivery, activateArmedExternalActionDelivery, readExternalActionDelivery } from '../../../core/canvas/deliveries.js';
-import { withCanvasWrite } from '../../../core/canvas/db.js';
-import { OUTCOME_PAYLOAD_MAX_BYTES } from '../../../core/canvas/types.js';
-import { composeNodeOutcomeDocument } from '../../../core/runtime/outcome-document.js';
-import { HUMAN_ACTION_NAME_PATTERN } from '../../../core/human/action-binding.js';
-import { resolveHumanAction } from '../../../core/human-actions.js';
-import { toNodeOutcomeDTO, toOutcomeDeliveryDTO } from '../map.js';
-const POLL_INTERVAL_MS = 250;
-const MAX_WAIT_SECONDS = 25;
-function requireNode(id) {
-    const node = getNode(id);
-    if (node === null)
-        throw new ApiError(404, 'node_not_found', `no node ${id}`);
-    return node;
-}
-function parseWait(ctx) {
-    const raw = ctx.query.get('wait');
-    if (raw === null || raw === '')
-        return 0;
-    if (!/^(?:0|[1-9]\d*)$/.test(raw)) {
-        throw new ApiError(400, 'invalid_request', '`wait` must be an integer between 0 and 25');
-    }
-    const seconds = Number(raw);
-    if (seconds < 0 || seconds > MAX_WAIT_SECONDS) {
-        throw new ApiError(400, 'invalid_request', '`wait` must be an integer between 0 and 25');
-    }
-    return seconds;
-}
-function responseFor(node) {
-    const outcome = toNodeOutcomeDTO(node);
-    return {
-        node_id: node.node_id,
-        state: outcome === null ? 'pending' : 'settled',
-        outcome,
-        node_status: node.status,
-        deadline_at: node.deadline_at ?? null,
-    };
-}
-/** GET /v1/nodes/:id/outcome — poll now, or poll the durable row for up to 25 seconds. */
-async function handleGetOutcome(ctx) {
-    const id = ctx.params['id'] ?? '';
-    const waitSeconds = parseWait(ctx);
-    const deadline = Date.now() + waitSeconds * 1_000;
-    let node = requireNode(id);
-    while (toNodeOutcomeDTO(node) === null && Date.now() < deadline) {
-        await sleep(Math.min(POLL_INTERVAL_MS, deadline - Date.now()));
-        node = requireNode(id);
-    }
-    return { status: 200, body: responseFor(node) };
-}
-function isPlainObject(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-function payloadBytes(payload) {
-    let serialized;
-    try {
-        serialized = JSON.stringify(payload);
-    }
-    catch {
-        throw new ApiError(400, 'invalid_request', '`payload` must be JSON-serializable');
-    }
-    if (serialized === undefined)
-        throw new ApiError(400, 'invalid_request', '`payload` must be JSON-serializable');
-    return Buffer.byteLength(serialized, 'utf8');
-}
-function parseRegistration(body) {
-    if (!isPlainObject(body))
-        throw new ApiError(400, 'invalid_request', 'request body must be an object');
-    for (const key of Object.keys(body)) {
-        if (key !== 'action' && key !== 'payload') {
-            throw new ApiError(400, 'invalid_request', `unexpected field in request body: ${key}`);
-        }
-    }
-    const action = body['action'];
-    if (typeof action !== 'string' || !HUMAN_ACTION_NAME_PATTERN.test(action)) {
-        throw new ApiError(400, 'invalid_request', '`action` must be a declared action name');
-    }
-    if (body['payload'] !== undefined && payloadBytes(body['payload']) > OUTCOME_PAYLOAD_MAX_BYTES) {
-        throw new ApiError(413, 'payload_too_large', `serialized payload exceeds ${OUTCOME_PAYLOAD_MAX_BYTES} bytes`);
-    }
-    return body['payload'] === undefined ? { action } : { action, payload: body['payload'] };
-}
-function outcomeKey(nodeId) { return `node-outcome:${nodeId}`; }
-function outcomeView(row) {
-    const adapter = row.adapter;
-    if (adapter?.adapter !== 'subprocess' || !Array.isArray(adapter.argv) || !adapter.argv.every((arg) => typeof arg === 'string') || typeof adapter.cwd !== 'string')
-        throw new Error(`outcome delivery ${row.deliveryId} has an invalid subprocess adapter`);
-    return { nodeId: row.idempotencyKey?.slice('node-outcome:'.length) ?? '', state: row.state === 'handed_off' ? 'running' : row.state === 'acknowledged' ? 'accepted' : row.state, attempt: row.attempts, actionName: row.destinationId, argv: adapter.argv, cwd: adapter.cwd, configOrigin: typeof adapter.config_origin === 'string' ? adapter.config_origin : '', payload: adapter.payload ?? null, document: null, nextAttemptAt: row.nextAttemptAt ?? 0, claimedAt: row.claimedAt, claimOwner: row.claimOwner, acceptedAt: row.acknowledgedAt, permanentFailedAt: row.failedAt, lastFailure: row.lastFailure, createdAt: row.createdAt, updatedAt: row.updatedAt };
-}
-function nodeAtOutcome(node) {
-    const reason = node.outcome_reason;
-    let status;
-    let intent;
-    if (node.outcome_kind === 'result' || reason === 'finished' || reason === 'declined') {
-        status = 'done';
-        intent = 'done';
-    }
-    else if (reason === 'parked') {
-        status = 'done';
-        intent = 'parked';
-    }
-    else if (reason === 'closed' || reason === 'retired' || reason === 'stranded' || reason === 'deadline_exceeded') {
-        status = 'canceled';
-        intent = null;
-    }
-    else {
-        status = 'dead';
-        intent = null;
-    }
-    return { ...node, status, intent, terminal_reason: reason };
-}
-function armOutcomeExternalAction(node, target, payload) {
-    return withCanvasWrite((db) => {
-        const existing = readExternalActionDelivery(outcomeKey(node.node_id));
-        if (existing !== null && existing.state !== 'armed')
-            return null;
-        armExternalActionDelivery(db, { destinationId: target.action, adapter: { adapter: 'subprocess', argv: target.argv, cwd: target.cwd, config_origin: target.configOrigin, payload: payload ?? null }, idempotencyKey: outcomeKey(node.node_id) });
-        if (node.outcome_at !== null) {
-            if (node.outcome_kind === null || node.outcome_reason === null)
-                throw new Error(`outcome latch is incomplete for node ${node.node_id}`);
-            const document = JSON.stringify(composeNodeOutcomeDocument({ node: nodeAtOutcome(node), outcome: { kind: node.outcome_kind, reason: node.outcome_reason, at: node.outcome_at, revision: node.outcome_revision, detailJson: node.outcome_detail_json ?? null }, action: { name: target.action, payload: payload ?? null }, finalReport: node.final_report }));
-            activateArmedExternalActionDelivery(db, { idempotencyKey: outcomeKey(node.node_id), label: node.node_id, bodyJson: document, supersede: false });
-        }
-        const delivery = readExternalActionDelivery(outcomeKey(node.node_id));
-        if (delivery === null)
-            throw new Error(`outcome delivery was not registered for ${node.node_id}`);
-        return outcomeView(delivery);
-    });
-}
-function resolveAction(action, cwd) {
-    const resolution = resolveHumanAction(action, cwd);
-    if (!('kind' in resolution))
-        return resolution;
-    if (resolution.kind === 'unknown_action') {
-        throw new ApiError(422, 'unknown_action', `no action named ${action} is declared from ${cwd}`);
-    }
-    throw new ApiError(422, 'invalid_action', `${action} is declared in ${resolution.configOrigin} but unusable: ${resolution.reason}`, { reason: resolution.reason, configOrigin: resolution.configOrigin });
-}
-/** PUT /v1/nodes/:id/outcome-delivery — arm/re-arm an unsettled target. */
-function handlePutDelivery(ctx) {
-    const id = ctx.params['id'] ?? '';
-    const node = requireNode(id);
-    const request = parseRegistration(ctx.body);
-    const target = resolveAction(request.action, node.cwd);
-    const delivery = armOutcomeExternalAction(node, { action: request.action, ...target }, request.payload);
-    if (delivery === null) {
-        throw new ApiError(409, 'outcome_delivery_settled', 'outcome delivery has already started or settled');
-    }
-    return { status: 200, body: toOutcomeDeliveryDTO(delivery) };
-}
-/** GET /v1/nodes/:id/outcome-delivery — inspect the one durable registration. */
-function handleGetDelivery(ctx) {
-    const id = ctx.params['id'] ?? '';
-    const delivery = readExternalActionDelivery(outcomeKey(id));
-    if (delivery === null)
-        throw new ApiError(404, 'outcome_delivery_not_found', `no outcome delivery for node ${id}`);
-    return { status: 200, body: toOutcomeDeliveryDTO(outcomeView(delivery)) };
-}
-/** DELETE /v1/nodes/:id/outcome-delivery — disarm only before delivery begins. */
-function handleDeleteDelivery(ctx) {
-    const id = ctx.params['id'] ?? '';
-    const current = readExternalActionDelivery(outcomeKey(id));
-    if (current !== null && current.state !== 'armed') {
-        throw new ApiError(409, 'outcome_delivery_settled', 'outcome delivery has already started or settled');
-    }
-    if (current !== null)
-        withCanvasWrite((db) => {
-            db.prepare("DELETE FROM deliveries WHERE delivery_id = ? AND state = 'armed'").run(current.deliveryId);
-        });
-    return { status: 204 };
-}
-export const nodeOutcomeRoutes = [
-    { method: 'GET', pattern: '/v1/nodes/:id/outcome', handler: handleGetOutcome },
-    { method: 'PUT', pattern: '/v1/nodes/:id/outcome-delivery', handler: handlePutDelivery },
-    { method: 'GET', pattern: '/v1/nodes/:id/outcome-delivery', handler: handleGetDelivery },
-    { method: 'DELETE', pattern: '/v1/nodes/:id/outcome-delivery', handler: handleDeleteDelivery },
-];
+var v=Object.defineProperty;var i=(e,t)=>v(e,"name",{value:t,configurable:!0});import{setTimeout as w}from"node:timers/promises";import{ApiError as r}from"../../../api/errors.js";import{getNode as h}from"../../../core/canvas/canvas.js";import{armExternalActionDelivery as g,activateArmedExternalActionDelivery as A,readExternalActionDelivery as s}from"../../../core/canvas/deliveries.js";import{withCanvasWrite as u}from"../../../core/canvas/db.js";import{OUTCOME_PAYLOAD_MAX_BYTES as m}from"../../../core/canvas/types.js";import{composeNodeOutcomeDocument as O}from"../../../core/runtime/outcome-document.js";import{HUMAN_ACTION_NAME_PATTERN as E}from"../../../core/human/action-binding.js";import{resolveHumanAction as b}from"../../../core/human-actions.js";import{toNodeOutcomeDTO as f,toOutcomeDeliveryDTO as p}from"../map.js";const D=250,N=25;function c(e){const t=h(e);if(t===null)throw new r(404,"node_not_found",`no node ${e}`);return t}i(c,"requireNode");function T(e){const t=e.query.get("wait");if(t===null||t==="")return 0;if(!/^(?:0|[1-9]\d*)$/.test(t))throw new r(400,"invalid_request","`wait` must be an integer between 0 and 25");const n=Number(t);if(n<0||n>N)throw new r(400,"invalid_request","`wait` must be an integer between 0 and 25");return n}i(T,"parseWait");function k(e){const t=f(e);return{node_id:e.node_id,state:t===null?"pending":"settled",outcome:t,node_status:e.status,deadline_at:e.deadline_at??null}}i(k,"responseFor");async function $(e){const t=e.params.id??"",n=T(e),o=Date.now()+n*1e3;let a=c(t);for(;f(a)===null&&Date.now()<o;)await w(Math.min(D,o-Date.now())),a=c(t);return{status:200,body:k(a)}}i($,"handleGetOutcome");function q(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}i(q,"isPlainObject");function x(e){let t;try{t=JSON.stringify(e)}catch{throw new r(400,"invalid_request","`payload` must be JSON-serializable")}if(t===void 0)throw new r(400,"invalid_request","`payload` must be JSON-serializable");return Buffer.byteLength(t,"utf8")}i(x,"payloadBytes");function S(e){if(!q(e))throw new r(400,"invalid_request","request body must be an object");for(const n of Object.keys(e))if(n!=="action"&&n!=="payload")throw new r(400,"invalid_request",`unexpected field in request body: ${n}`);const t=e.action;if(typeof t!="string"||!E.test(t))throw new r(400,"invalid_request","`action` must be a declared action name");if(e.payload!==void 0&&x(e.payload)>m)throw new r(413,"payload_too_large",`serialized payload exceeds ${m} bytes`);return e.payload===void 0?{action:t}:{action:t,payload:e.payload}}i(S,"parseRegistration");function d(e){return`node-outcome:${e}`}i(d,"outcomeKey");function y(e){const t=e.adapter;if(t?.adapter!=="subprocess"||!Array.isArray(t.argv)||!t.argv.every(n=>typeof n=="string")||typeof t.cwd!="string")throw new Error(`outcome delivery ${e.deliveryId} has an invalid subprocess adapter`);return{nodeId:e.idempotencyKey?.slice(13)??"",state:e.state==="handed_off"?"running":e.state==="acknowledged"?"accepted":e.state,attempt:e.attempts,actionName:e.destinationId,argv:t.argv,cwd:t.cwd,configOrigin:typeof t.config_origin=="string"?t.config_origin:"",payload:t.payload??null,document:null,nextAttemptAt:e.nextAttemptAt??0,claimedAt:e.claimedAt,claimOwner:e.claimOwner,acceptedAt:e.acknowledgedAt,permanentFailedAt:e.failedAt,lastFailure:e.lastFailure,createdAt:e.createdAt,updatedAt:e.updatedAt}}i(y,"outcomeView");function I(e){const t=e.outcome_reason;let n,o;return e.outcome_kind==="result"||t==="finished"||t==="declined"?(n="done",o="done"):t==="parked"?(n="done",o="parked"):t==="closed"||t==="retired"||t==="stranded"||t==="deadline_exceeded"?(n="canceled",o=null):(n="dead",o=null),{...e,status:n,intent:o,terminal_reason:t}}i(I,"nodeAtOutcome");function M(e,t,n){return u(o=>{const a=s(d(e.node_id));if(a!==null&&a.state!=="armed")return null;if(g(o,{destinationId:t.action,adapter:{adapter:"subprocess",argv:t.argv,cwd:t.cwd,config_origin:t.configOrigin,payload:n??null},idempotencyKey:d(e.node_id)}),e.outcome_at!==null){if(e.outcome_kind===null||e.outcome_reason===null)throw new Error(`outcome latch is incomplete for node ${e.node_id}`);const _=JSON.stringify(O({node:I(e),outcome:{kind:e.outcome_kind,reason:e.outcome_reason,at:e.outcome_at,revision:e.outcome_revision,detailJson:e.outcome_detail_json??null},action:{name:t.action,payload:n??null},finalReport:e.final_report}));A(o,{idempotencyKey:d(e.node_id),label:e.node_id,bodyJson:_,supersede:!1})}const l=s(d(e.node_id));if(l===null)throw new Error(`outcome delivery was not registered for ${e.node_id}`);return y(l)})}i(M,"armOutcomeExternalAction");function L(e,t){const n=b(e,t);if(!("kind"in n))return n;throw n.kind==="unknown_action"?new r(422,"unknown_action",`no action named ${e} is declared from ${t}`):new r(422,"invalid_action",`${e} is declared in ${n.configOrigin} but unusable: ${n.reason}`,{reason:n.reason,configOrigin:n.configOrigin})}i(L,"resolveAction");function R(e){const t=e.params.id??"",n=c(t),o=S(e.body),a=L(o.action,n.cwd),l=M(n,{action:o.action,...a},o.payload);if(l===null)throw new r(409,"outcome_delivery_settled","outcome delivery has already started or settled");return{status:200,body:p(l)}}i(R,"handlePutDelivery");function J(e){const t=e.params.id??"",n=s(d(t));if(n===null)throw new r(404,"outcome_delivery_not_found",`no outcome delivery for node ${t}`);return{status:200,body:p(y(n))}}i(J,"handleGetDelivery");function P(e){const t=e.params.id??"",n=s(d(t));if(n!==null&&n.state!=="armed")throw new r(409,"outcome_delivery_settled","outcome delivery has already started or settled");return n!==null&&u(o=>{o.prepare("DELETE FROM deliveries WHERE delivery_id = ? AND state = 'armed'").run(n.deliveryId)}),{status:204}}i(P,"handleDeleteDelivery");const X=[{method:"GET",pattern:"/v1/nodes/:id/outcome",handler:$},{method:"PUT",pattern:"/v1/nodes/:id/outcome-delivery",handler:R},{method:"GET",pattern:"/v1/nodes/:id/outcome-delivery",handler:J},{method:"DELETE",pattern:"/v1/nodes/:id/outcome-delivery",handler:P}];export{X as nodeOutcomeRoutes};