@relaycast/engine 12.2.0 → 12.3.0

package/dist/adapters/actor/credential-tag.d.ts

@@ -0,0 +1,14 @@
+import type { ActorSql } from './database.js';
+/**
+ * The routing tag of this actor's workspace. The gateway signs it for the
+ * workspace id with its keyring and hands it to `create`; the actor never
+ * holds the keyring.
+ */
+export declare class ActorCredentialTag {
+    private readonly sql;
+    constructor(sql: ActorSql);
+    get(): string | undefined;
+    /** Keep `tag`. A workspace's tag never changes, so a different one is refused. */
+    set(tag: string): void;
+}
+//# sourceMappingURL=credential-tag.d.ts.map

package/dist/adapters/actor/credential-tag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-tag.d.ts","sourceRoot":"","sources":["../../../src/adapters/actor/credential-tag.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAK9C;;;;GAIG;AACH,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,QAAQ;IAI1C,GAAG,IAAI,MAAM,GAAG,SAAS;IAKzB,kFAAkF;IAClF,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;CAOvB"}

package/dist/adapters/actor/credential-tag.js

@@ -0,0 +1,30 @@
+const TABLE = '_actor_credential_tag';
+const TAG = /^[a-z][0-9A-Za-z]{10}$/;
+/**
+ * The routing tag of this actor's workspace. The gateway signs it for the
+ * workspace id with its keyring and hands it to `create`; the actor never
+ * holds the keyring.
+ */
+export class ActorCredentialTag {
+    sql;
+    constructor(sql) {
+        this.sql = sql;
+        sql.exec(`CREATE TABLE IF NOT EXISTS ${TABLE} (id INTEGER PRIMARY KEY CHECK (id = 1), tag TEXT NOT NULL)`);
+    }
+    get() {
+        const [row] = this.sql.exec(`SELECT tag FROM ${TABLE} WHERE id = 1`);
+        return row?.tag;
+    }
+    /** Keep `tag`. A workspace's tag never changes, so a different one is refused. */
+    set(tag) {
+        if (!TAG.test(tag))
+            throw new Error('A credential tag is a key version letter plus 10 base62 characters');
+        const current = this.get();
+        if (current === tag)
+            return;
+        if (current !== undefined)
+            throw new Error('This workspace already has a different credential tag');
+        this.sql.exec(`INSERT INTO ${TABLE} (id, tag) VALUES (1, ?)`, tag);
+    }
+}
+//# sourceMappingURL=credential-tag.js.map

package/dist/adapters/actor/credential-tag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-tag.js","sourceRoot":"","sources":["../../../src/adapters/actor/credential-tag.ts"],"names":[],"mappings":"AAEA,MAAM,KAAK,GAAG,uBAAuB,CAAC;AACtC,MAAM,GAAG,GAAG,wBAAwB,CAAC;AAErC;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,GAAa;QAAb,QAAG,GAAH,GAAG,CAAU;QACxC,GAAG,CAAC,IAAI,CAAC,8BAA8B,KAAK,6DAA6D,CAAC,CAAC;IAC7G,CAAC;IAED,GAAG;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,eAAe,CAAsB,CAAC;QAC1F,OAAO,GAAG,EAAE,GAAG,CAAC;IAClB,CAAC;IAED,kFAAkF;IAClF,GAAG,CAAC,GAAW;QACb,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QAC1G,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO;QAC5B,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACpG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,0BAA0B,EAAE,GAAG,CAAC,CAAC;IACrE,CAAC;CACF"}

package/dist/adapters/actor/database.d.ts

@@ -0,0 +1,50 @@
+import type { EngineDb, TransactionCapability } from '../../ports/database.js';
+/** A value SQLite can bind or return through a durable actor's database. */
+export type SqliteValue = string | number | bigint | Uint8Array | null;
+/**
+ * An actor's database as `this.db` types it: `exec` and nested `transaction`.
+ * The runtime object also carries `query` (durable-actors >= 0.14.5, the
+ * method `durable-actors/drizzle` runs on), which `createActorRuntime` checks
+ * for.
+ */
+export interface ActorDatabase {
+    exec(sql: string, ...bindings: SqliteValue[]): object[];
+    transaction<T>(operation: () => Promise<T>): Promise<T>;
+}
+/**
+ * The durable actor's SQL surface at runtime (durable-actors >= 0.14.5): one
+ * statement per call, positional bindings, and nested transactions on runtime
+ * savepoints.
+ */
+export interface ActorSql extends ActorDatabase {
+    /** Run one statement; rows keyed by column name. */
+    exec(sql: string, ...bindings: SqliteValue[]): object[];
+    /** Run one statement; rows as value arrays in column order. */
+    query(sql: string, ...bindings: SqliteValue[]): {
+        columns: string[];
+        rows: SqliteValue[][];
+    };
+    /** Run `operation` in a nested transaction: if it throws, only its writes roll back. */
+    transaction<T>(operation: () => Promise<T>): Promise<T>;
+}
+/** Engine handle over an actor's database. `withTransaction` is a runtime savepoint. */
+export type ActorEngineDb = EngineDb & TransactionCapability;
+/**
+ * SQLite extended result codes for constraint failures, by the names
+ * better-sqlite3 reports in `error.code`. The actor runtime reports only the
+ * number, inside the message (`UNIQUE constraint failed: t.c: Error code 2067:
+ * constraint failed`), and engine classifiers read `code`.
+ */
+export declare const SQLITE_CONSTRAINT_CODES: Readonly<Record<number, string>>;
+/**
+ * Build the engine's Drizzle handle over an actor database: statements run
+ * through `query` (positional rows), and `withTransaction` is a nested actor
+ * transaction, so a failed write group rolls back alone and the call goes on.
+ * `onGroupStart` sees every write group open, `onGroupFailure` every one
+ * that rolled back.
+ */
+export declare function createActorEngineDb(sql: ActorSql, options?: {
+    onGroupStart?: () => void;
+    onGroupFailure?: (error: unknown) => void;
+}): ActorEngineDb;
+//# sourceMappingURL=database.d.ts.map

package/dist/adapters/actor/database.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../../src/adapters/actor/database.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAE/E,4EAA4E;AAC5E,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,EAAE,CAAC;IACxD,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACzD;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAS,SAAQ,aAAa;IAC7C,oDAAoD;IACpD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,EAAE,CAAC;IACxD,+DAA+D;IAC/D,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAA;KAAE,CAAC;IAC7F,wFAAwF;IACxF,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACzD;AAED,wFAAwF;AACxF,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,qBAAqB,CAAC;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYpE,CAAC;AAuCF;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,QAAQ,EACb,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;IAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;CAAO,GACrF,aAAa,CAoBf"}

package/dist/adapters/actor/database.js

@@ -0,0 +1,86 @@
+import { drizzle } from 'drizzle-orm/sqlite-proxy';
+import * as schema from '../../db/schema.js';
+/**
+ * SQLite extended result codes for constraint failures, by the names
+ * better-sqlite3 reports in `error.code`. The actor runtime reports only the
+ * number, inside the message (`UNIQUE constraint failed: t.c: Error code 2067:
+ * constraint failed`), and engine classifiers read `code`.
+ */
+export const SQLITE_CONSTRAINT_CODES = {
+    19: 'SQLITE_CONSTRAINT',
+    275: 'SQLITE_CONSTRAINT_CHECK',
+    531: 'SQLITE_CONSTRAINT_COMMITHOOK',
+    787: 'SQLITE_CONSTRAINT_FOREIGNKEY',
+    1043: 'SQLITE_CONSTRAINT_FUNCTION',
+    1299: 'SQLITE_CONSTRAINT_NOTNULL',
+    1555: 'SQLITE_CONSTRAINT_PRIMARYKEY',
+    1811: 'SQLITE_CONSTRAINT_TRIGGER',
+    2067: 'SQLITE_CONSTRAINT_UNIQUE',
+    2323: 'SQLITE_CONSTRAINT_VTAB',
+    2579: 'SQLITE_CONSTRAINT_ROWID',
+};
+const RUNTIME_ERROR_CODE = /: Error code (\d+): /;
+const INTEGER_KEY = /^(?:0|[1-9]\d*)$/;
+/** Run one statement, giving runtime constraint errors the `code` engine classifiers read. */
+function query(sql, statement, params) {
+    try {
+        return sql.query(statement, ...params.map(binding));
+    }
+    catch (error) {
+        if (error instanceof Error && !error.code) {
+            const match = RUNTIME_ERROR_CODE.exec(error.message);
+            const code = match ? SQLITE_CONSTRAINT_CODES[Number(match[1])] : undefined;
+            if (code)
+                Object.assign(error, { code });
+        }
+        throw error;
+    }
+}
+function binding(value) {
+    if (typeof value === 'boolean')
+        return value ? 1 : 0;
+    return value;
+}
+/**
+ * A row as both drizzle consumers read it: query builders map by position,
+ * raw `db.all(sql\`...\`)` callers read by column name. A repeated name keeps
+ * its first column; an integer-like name would overwrite an array slot, so it
+ * is positional only.
+ */
+function namedRow(columns, values) {
+    const named = values;
+    columns.forEach((column, index) => {
+        if (INTEGER_KEY.test(column) || column === 'length' || Object.hasOwn(named, column))
+            return;
+        named[column] = values[index];
+    });
+    return values;
+}
+/**
+ * Build the engine's Drizzle handle over an actor database: statements run
+ * through `query` (positional rows), and `withTransaction` is a nested actor
+ * transaction, so a failed write group rolls back alone and the call goes on.
+ * `onGroupStart` sees every write group open, `onGroupFailure` every one
+ * that rolled back.
+ */
+export function createActorEngineDb(sql, options = {}) {
+    const db = drizzle(async (statement, params, method) => {
+        const { columns, rows } = query(sql, statement, params);
+        if (method === 'run')
+            return { rows: [] };
+        const named = rows.map((row) => namedRow(columns, row));
+        // `get` resolves one row (or undefined); drizzle types it as an array.
+        if (method === 'get')
+            return { rows: named[0] };
+        return { rows: named };
+    }, { schema });
+    db.withTransaction = (fn) => {
+        options.onGroupStart?.();
+        return sql.transaction(() => fn(db)).catch((error) => {
+            options.onGroupFailure?.(error);
+            throw error;
+        });
+    };
+    return db;
+}
+//# sourceMappingURL=database.js.map

package/dist/adapters/actor/database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../../src/adapters/actor/database.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAkC7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAqC;IACvE,EAAE,EAAE,mBAAmB;IACvB,GAAG,EAAE,yBAAyB;IAC9B,GAAG,EAAE,8BAA8B;IACnC,GAAG,EAAE,8BAA8B;IACnC,IAAI,EAAE,4BAA4B;IAClC,IAAI,EAAE,2BAA2B;IACjC,IAAI,EAAE,8BAA8B;IACpC,IAAI,EAAE,2BAA2B;IACjC,IAAI,EAAE,0BAA0B;IAChC,IAAI,EAAE,wBAAwB;IAC9B,IAAI,EAAE,yBAAyB;CAChC,CAAC;AAEF,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAClD,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAEvC,8FAA8F;AAC9F,SAAS,KAAK,CAAC,GAAa,EAAE,SAAiB,EAAE,MAA0B;IACzE,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,CAAE,KAA4B,CAAC,IAAI,EAAE,CAAC;YAClE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3E,IAAI,IAAI;gBAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,KAAoB,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,OAA0B,EAAE,MAAqB;IACjE,MAAM,KAAK,GAAG,MAA4C,CAAC;IAC3D,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAChC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;YAAE,OAAO;QAC5F,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAa,EACb,UAAoF,EAAE;IAEtF,MAAM,EAAE,GAAG,OAAO,CAChB,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QAClC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACxD,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACxD,uEAAuE;QACvE,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAyB,EAAE,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC,EACD,EAAE,MAAM,EAAE,CACiB,CAAC;IAC9B,EAAE,CAAC,eAAe,GAAG,CAAI,EAAgC,EAAc,EAAE;QACvE,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;QACzB,OAAO,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC5D,OAAO,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/adapters/actor/ephemeral-outbox.d.ts

@@ -0,0 +1,16 @@
+import type { ActorSql } from './database.js';
+export declare function ensureActorOutboundTable(sql: ActorSql): void;
+/**
+ * Best-effort ephemeral http_push events queued during a request. Rows are
+ * written in the actor call, so a rolled-back call never sends them; the
+ * actor alarm sends each once, matching the engine's best-effort contract for
+ * these events (no delivery row, no retry).
+ */
+export declare class ActorEphemeralOutbox {
+    private readonly sql;
+    private readonly fetch;
+    constructor(sql: ActorSql, fetch: typeof globalThis.fetch);
+    enqueue(request: Request): Promise<void>;
+    drain(): Promise<void>;
+}
+//# sourceMappingURL=ephemeral-outbox.d.ts.map

package/dist/adapters/actor/ephemeral-outbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ephemeral-outbox.d.ts","sourceRoot":"","sources":["../../../src/adapters/actor/ephemeral-outbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAO9C,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAW5D;AAED;;;;;GAKG;AACH,qBAAa,oBAAoB;IAE7B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBADL,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK;IAG3C,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAYxC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAqB7B"}

package/dist/adapters/actor/ephemeral-outbox.js

@@ -0,0 +1,53 @@
+const TABLE = '_actor_outbound';
+/** Ephemeral events are presence-grade signals; older ones are dropped, not sent. */
+const MAX_AGE_MS = 10 * 60_000;
+const DRAIN_BATCH = 100;
+export function ensureActorOutboundTable(sql) {
+    sql.exec(`CREATE TABLE IF NOT EXISTS ${TABLE} (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      created_at INTEGER NOT NULL,
+      method TEXT NOT NULL,
+      url TEXT NOT NULL,
+      headers TEXT NOT NULL,
+      body TEXT
+    )`);
+}
+/**
+ * Best-effort ephemeral http_push events queued during a request. Rows are
+ * written in the actor call, so a rolled-back call never sends them; the
+ * actor alarm sends each once, matching the engine's best-effort contract for
+ * these events (no delivery row, no retry).
+ */
+export class ActorEphemeralOutbox {
+    sql;
+    fetch;
+    constructor(sql, fetch) {
+        this.sql = sql;
+        this.fetch = fetch;
+    }
+    async enqueue(request) {
+        const body = request.body ? await request.text() : null;
+        this.sql.exec(`INSERT INTO ${TABLE} (created_at, method, url, headers, body) VALUES (?, ?, ?, ?, ?)`, Date.now(), request.method, request.url, JSON.stringify([...request.headers]), body);
+    }
+    async drain() {
+        this.sql.exec(`DELETE FROM ${TABLE} WHERE created_at < ?`, Date.now() - MAX_AGE_MS);
+        for (;;) {
+            const rows = this.sql.exec(`DELETE FROM ${TABLE} WHERE id IN (SELECT id FROM ${TABLE} ORDER BY id LIMIT ?)
+         RETURNING method, url, headers, body`, DRAIN_BATCH);
+            if (rows.length === 0)
+                return;
+            await Promise.allSettled(rows.map(async (row) => {
+                const response = await this.fetch(row.url, {
+                    method: row.method,
+                    headers: JSON.parse(row.headers),
+                    body: row.body,
+                    signal: AbortSignal.timeout(10_000),
+                });
+                await response.body?.cancel();
+            }));
+            if (rows.length < DRAIN_BATCH)
+                return;
+        }
+    }
+}
+//# sourceMappingURL=ephemeral-outbox.js.map

package/dist/adapters/actor/ephemeral-outbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ephemeral-outbox.js","sourceRoot":"","sources":["../../../src/adapters/actor/ephemeral-outbox.ts"],"names":[],"mappings":"AAEA,MAAM,KAAK,GAAG,iBAAiB,CAAC;AAChC,qFAAqF;AACrF,MAAM,UAAU,GAAG,EAAE,GAAG,MAAM,CAAC;AAC/B,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB,MAAM,UAAU,wBAAwB,CAAC,GAAa;IACpD,GAAG,CAAC,IAAI,CACN,8BAA8B,KAAK;;;;;;;MAOjC,CACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,oBAAoB;IAEZ;IACA;IAFnB,YACmB,GAAa,EACb,KAA8B;QAD9B,QAAG,GAAH,GAAG,CAAU;QACb,UAAK,GAAL,KAAK,CAAyB;IAC9C,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,OAAgB;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,eAAe,KAAK,kEAAkE,EACtF,IAAI,CAAC,GAAG,EAAE,EACV,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,GAAG,EACX,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,EACpC,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,uBAAuB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC;QACpF,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CACxB,eAAe,KAAK,gCAAgC,KAAK;8CACnB,EACtC,WAAW,CAC+D,CAAC;YAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC9B,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;oBACzC,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAuB;oBACtD,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;iBACpC,CAAC,CAAC;gBACH,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAChC,CAAC,CAAC,CAAC,CAAC;YACJ,IAAI,IAAI,CAAC,MAAM,GAAG,WAAW;gBAAE,OAAO;QACxC,CAAC;IACH,CAAC;CACF"}

package/dist/adapters/actor/event-queue.d.ts

@@ -0,0 +1,23 @@
+import type { EventQueue, QueuedEvent } from '../../ports/event-queue.js';
+import type { EngineDb } from '../../ports/database.js';
+import { type DurableEventQueueOptions } from '../node/event-queue.js';
+/**
+ * Webhook outbox for a workspace actor.
+ *
+ * `send` only makes the event durable (the request path already inserted the
+ * `pending_events` row when `outboxId` is set) and asks for maintenance. It
+ * never delivers: an actor call holds the actor's mailbox until it returns,
+ * so outbound HTTP runs from `drain()`, which the actor's alarm calls.
+ */
+export declare class ActorEventQueue implements EventQueue {
+    private readonly db;
+    private readonly requestMaintenance;
+    private readonly outbox;
+    constructor(db: EngineDb, requestMaintenance: () => void, onError: (err: unknown, ctx: Record<string, unknown>) => void, options: Omit<DurableEventQueueOptions, 'pollIntervalMs'> & {
+        fetch: typeof globalThis.fetch;
+    });
+    send(message: QueuedEvent): Promise<void>;
+    /** Deliver every due outbox row and prune settled ones on the outbox's cadence. */
+    drain(): Promise<void>;
+}
+//# sourceMappingURL=event-queue.d.ts.map

package/dist/adapters/actor/event-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-queue.d.ts","sourceRoot":"","sources":["../../../src/adapters/actor/event-queue.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExD,OAAO,EAAqB,KAAK,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAE1F;;;;;;;GAOG;AACH,qBAAa,eAAgB,YAAW,UAAU;IAI9C,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAJrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;gBAGxB,EAAE,EAAE,QAAQ,EACZ,kBAAkB,EAAE,MAAM,IAAI,EAC/C,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,EAC7D,OAAO,EAAE,IAAI,CAAC,wBAAwB,EAAE,gBAAgB,CAAC,GAAG;QAAE,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;KAAE;IAK1F,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAO/C,mFAAmF;IACnF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAGvB"}

package/dist/adapters/actor/event-queue.js

@@ -0,0 +1,31 @@
+import { enqueueEvent } from '../../engine/eventQueue.js';
+import { DurableEventQueue } from '../node/event-queue.js';
+/**
+ * Webhook outbox for a workspace actor.
+ *
+ * `send` only makes the event durable (the request path already inserted the
+ * `pending_events` row when `outboxId` is set) and asks for maintenance. It
+ * never delivers: an actor call holds the actor's mailbox until it returns,
+ * so outbound HTTP runs from `drain()`, which the actor's alarm calls.
+ */
+export class ActorEventQueue {
+    db;
+    requestMaintenance;
+    outbox;
+    constructor(db, requestMaintenance, onError, options) {
+        this.db = db;
+        this.requestMaintenance = requestMaintenance;
+        this.outbox = new DurableEventQueue(db, onError, { ...options, pollIntervalMs: 0 });
+    }
+    async send(message) {
+        if (!message.outboxId) {
+            await enqueueEvent(this.db, message.workspaceId, message.type, message.data);
+        }
+        this.requestMaintenance();
+    }
+    /** Deliver every due outbox row and prune settled ones on the outbox's cadence. */
+    drain() {
+        return this.outbox.poll();
+    }
+}
+//# sourceMappingURL=event-queue.js.map

package/dist/adapters/actor/event-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-queue.js","sourceRoot":"","sources":["../../../src/adapters/actor/event-queue.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAiC,MAAM,wBAAwB,CAAC;AAE1F;;;;;;;GAOG;AACH,MAAM,OAAO,eAAe;IAIP;IACA;IAJF,MAAM,CAAoB;IAE3C,YACmB,EAAY,EACZ,kBAA8B,EAC/C,OAA6D,EAC7D,OAA8F;QAH7E,OAAE,GAAF,EAAE,CAAU;QACZ,uBAAkB,GAAlB,kBAAkB,CAAY;QAI/C,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAiB,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAoB;QAC7B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAED,mFAAmF;IACnF,KAAK;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;CACF"}

package/dist/adapters/actor/files.d.ts

@@ -0,0 +1,66 @@
+import type { FileStorage } from '../../ports/files.js';
+/** Path the gateway serves signed file URLs on. */
+export declare const ACTOR_FILE_ROUTE = "/_relayfiles";
+/** Response header a gateway answers a signed `stat` (`HEAD`) with: the stored byte count. */
+export declare const OBJECT_SIZE_HEADER = "x-relaycast-object-size";
+/**
+ * File storage for a workspace actor. Blob bytes never pass through the
+ * actor: upload, download and delete URLs point at the gateway's
+ * `/_relayfiles` route, signed with a secret the gateway shares, and the
+ * gateway moves the bytes to and from its blob store (`verifyFileToken`). An
+ * upload URL binds the declared size and content type, which the gateway
+ * enforces.
+ *
+ * `statObject` asks the gateway for the stored size (`HEAD` with a signed
+ * `stat` token) so upload completion verifies the bytes, as on every adapter.
+ * It runs inside the completing request through `statFetch`, bounded by a
+ * short timeout. `deleteObjects` calls the gateway through `fetch`, which the
+ * actor runtime allows only during maintenance; inside a request it fails, and
+ * the engine's durable cleanup queue retries the deletion from maintenance.
+ */
+export interface SignedUrlFileStorageOptions {
+    /** Public origin of the gateway that serves {@link ACTOR_FILE_ROUTE}. */
+    baseUrl: string;
+    /** HMAC secret shared with that gateway. */
+    secret: string;
+    /** Transport for blob deletes. */
+    fetch: typeof globalThis.fetch;
+    /** Transport for upload completion's size check. */
+    statFetch: typeof globalThis.fetch;
+    /** Per-delete timeout. Default 10s. */
+    deleteTimeoutMs?: number;
+}
+export declare class SignedUrlFileStorage implements FileStorage {
+    private readonly baseUrl;
+    private readonly secret;
+    private readonly fetch;
+    private readonly statFetch;
+    private readonly deleteTimeoutMs;
+    constructor(options: SignedUrlFileStorageOptions);
+    /** The stored size, from the gateway; `null` when nothing is stored under `storageKey`. */
+    statObject(args: {
+        storageKey: string;
+    }): Promise<{
+        sizeBytes: number;
+    } | null>;
+    private url;
+    createUploadUrl(args: {
+        storageKey: string;
+        contentType: string;
+        sizeBytes: number;
+    }): Promise<{
+        uploadUrl: string;
+        expiresAt: string;
+    }>;
+    createDownloadUrl(args: {
+        storageKey: string;
+    }): Promise<string>;
+    /** Deletes in order; when one fails (or the pass's budget runs out) it reports the keys already gone. */
+    deleteObjects(args: {
+        storageKeys: string[];
+    }): Promise<void | {
+        deletedKeys: string[];
+    }>;
+    private deleteObject;
+}
+//# sourceMappingURL=files.d.ts.map

package/dist/adapters/actor/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../../src/adapters/actor/files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAWxD,mDAAmD;AACnD,eAAO,MAAM,gBAAgB,iBAAiB,CAAC;AAE/C,8FAA8F;AAC9F,eAAO,MAAM,kBAAkB,4BAA4B,CAAC;AAE5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,2BAA2B;IAC1C,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAC/B,oDAAoD;IACpD,SAAS,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACnC,uCAAuC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,oBAAqB,YAAW,WAAW;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;gBAE7B,OAAO,EAAE,2BAA2B;IAQhD,2FAA2F;IACrF,UAAU,CAAC,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;YAevE,GAAG;IAKX,eAAe,CAAC,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;;;;IAQpF,iBAAiB,CAAC,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAItE,yGAAyG;IACnG,aAAa,CAAC,IAAI,EAAE;QAAE,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,GAAG;QAAE,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;YAajF,YAAY;CAU3B"}

package/dist/adapters/actor/files.js

@@ -0,0 +1,83 @@
+import { signFileToken } from '../../lib/fileTokens.js';
+const URL_TTL_SECONDS = 3600;
+const DELETE_TTL_SECONDS = 300;
+const STAT_TTL_SECONDS = 60;
+/** Completion waits this long at most for the gateway; it holds the actor's mailbox meanwhile. */
+const STAT_TIMEOUT_MS = 5_000;
+/** A gateway that does not answer must not hold the actor's mailbox. */
+const DELETE_TIMEOUT_MS = 10_000;
+/** Path the gateway serves signed file URLs on. */
+export const ACTOR_FILE_ROUTE = '/_relayfiles';
+/** Response header a gateway answers a signed `stat` (`HEAD`) with: the stored byte count. */
+export const OBJECT_SIZE_HEADER = 'x-relaycast-object-size';
+export class SignedUrlFileStorage {
+    baseUrl;
+    secret;
+    fetch;
+    statFetch;
+    deleteTimeoutMs;
+    constructor(options) {
+        this.baseUrl = options.baseUrl;
+        this.secret = options.secret;
+        this.fetch = options.fetch;
+        this.statFetch = options.statFetch;
+        this.deleteTimeoutMs = options.deleteTimeoutMs ?? DELETE_TIMEOUT_MS;
+    }
+    /** The stored size, from the gateway; `null` when nothing is stored under `storageKey`. */
+    async statObject(args) {
+        const exp = Math.floor(Date.now() / 1000) + STAT_TTL_SECONDS;
+        const response = await this.statFetch(await this.url({ key: args.storageKey, op: 'stat', exp }), {
+            method: 'HEAD',
+            signal: AbortSignal.timeout(STAT_TIMEOUT_MS),
+        });
+        await response.body?.cancel();
+        if (response.status === 404)
+            return null;
+        const size = Number(response.headers.get(OBJECT_SIZE_HEADER));
+        if (!response.ok || !Number.isSafeInteger(size)) {
+            throw new Error(`Blob stat failed for ${args.storageKey} (HTTP ${response.status})`);
+        }
+        return { sizeBytes: size };
+    }
+    async url(payload) {
+        const token = await signFileToken(this.secret, payload);
+        return `${this.baseUrl.replace(/\/$/, '')}${ACTOR_FILE_ROUTE}?token=${token}`;
+    }
+    async createUploadUrl(args) {
+        const exp = Math.floor(Date.now() / 1000) + URL_TTL_SECONDS;
+        return {
+            uploadUrl: await this.url({ key: args.storageKey, op: 'put', exp, size: args.sizeBytes, type: args.contentType }),
+            expiresAt: new Date(exp * 1000).toISOString(),
+        };
+    }
+    async createDownloadUrl(args) {
+        return this.url({ key: args.storageKey, op: 'get', exp: Math.floor(Date.now() / 1000) + URL_TTL_SECONDS });
+    }
+    /** Deletes in order; when one fails (or the pass's budget runs out) it reports the keys already gone. */
+    async deleteObjects(args) {
+        const deletedKeys = [];
+        for (const key of args.storageKeys) {
+            try {
+                await this.deleteObject(key);
+            }
+            catch (error) {
+                if (deletedKeys.length === 0)
+                    throw error;
+                return { deletedKeys };
+            }
+            deletedKeys.push(key);
+        }
+    }
+    async deleteObject(key) {
+        // A fresh token per key: a long batch must not outlive one shared expiry.
+        const exp = Math.floor(Date.now() / 1000) + DELETE_TTL_SECONDS;
+        const response = await this.fetch(await this.url({ key, op: 'delete', exp }), {
+            method: 'DELETE',
+            signal: AbortSignal.timeout(this.deleteTimeoutMs),
+        });
+        await response.body?.cancel();
+        if (!response.ok)
+            throw new Error(`Blob delete failed for ${key} (HTTP ${response.status})`);
+    }
+}
+//# sourceMappingURL=files.js.map

package/dist/adapters/actor/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../../src/adapters/actor/files.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAyB,MAAM,yBAAyB,CAAC;AAE/E,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,kGAAkG;AAClG,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,wEAAwE;AACxE,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC,mDAAmD;AACnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAE/C,8FAA8F;AAC9F,MAAM,CAAC,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AA8B5D,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,KAAK,CAA0B;IAC/B,SAAS,CAA0B;IACnC,eAAe,CAAS;IAEzC,YAAY,OAAoC;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,iBAAiB,CAAC;IACtE,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,UAAU,CAAC,IAA4B;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,gBAAgB,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE;YAC/F,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,UAAU,UAAU,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,OAAyB;QACzC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,gBAAgB,UAAU,KAAK,EAAE,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAoE;QACxF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,eAAe,CAAC;QAC5D,OAAO;YACL,SAAS,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjH,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,IAA4B;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,eAAe,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,yGAAyG;IACzG,KAAK,CAAC,aAAa,CAAC,IAA+B;QACjD,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAC1C,OAAO,EAAE,WAAW,EAAE,CAAC;YACzB,CAAC;YACD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,GAAW;QACpC,0EAA0E;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,kBAAkB,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE;YAC5E,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC;SAClD,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,UAAU,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/F,CAAC;CACF"}

package/dist/adapters/actor/http.d.ts

@@ -0,0 +1,19 @@
+/**
+ * HTTP exchanged with a workspace actor as JSON-compatible values: actor
+ * method arguments and results cross the durable-actors RPC boundary as JSON.
+ * Bodies are text; engine routes speak JSON, and file bytes go through the
+ * gateway's blob store, never through an actor.
+ */
+export interface ActorHttpRequest {
+    method: string;
+    /** Absolute URL, as the client sent it to the gateway. */
+    url: string;
+    headers: [string, string][];
+    body: string | null;
+}
+export interface ActorHttpResponse {
+    status: number;
+    headers: [string, string][];
+    body: string;
+}
+//# sourceMappingURL=http.d.ts.map

package/dist/adapters/actor/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/adapters/actor/http.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd"}

package/dist/adapters/actor/http.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=http.js.map

package/dist/adapters/actor/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/adapters/actor/http.ts"],"names":[],"mappings":""}

package/dist/adapters/actor/index.d.ts

@@ -0,0 +1,90 @@
+import type { EngineConfig, EngineDeps } from '../../ports/index.js';
+import type { AuthProvider } from '../../ports/auth.js';
+import type { TelemetrySink } from '../../ports/telemetry.js';
+import { type ActorDatabase, type ActorSql } from './database.js';
+export type { ActorDatabase, ActorSql, SqliteValue } from './database.js';
+export type { ActorHttpRequest, ActorHttpResponse } from './http.js';
+import type { ActorHttpRequest, ActorHttpResponse } from './http.js';
+export interface ActorRuntimeOptions {
+    /** The actor's database (`this.db`, durable-actors >= 0.14.5). */
+    sql: ActorDatabase;
+    /** The actor id, which is the workspace id. */
+    workspaceId: string;
+    /** Public origin clients reach this deployment on; file URLs point at its `/_relayfiles`. */
+    baseUrl: string;
+    /** HMAC secret shared with the gateway that serves `/_relayfiles`. */
+    fileSigningSecret: string;
+    /**
+     * Outbound HTTP. Called only from {@link ActorRuntime.maintain}. Webhooks,
+     * http_push nodes, ephemeral events and A2A egress reach it only for HTTPS
+     * URLs whose host is a public name or global IP literal, with redirects off;
+     * the host's transport owns DNS-level SSRF protection (resolved-address
+     * checks). Blob deletes go to `baseUrl`.
+     */
+    outboundFetch: typeof globalThis.fetch;
+    /**
+     * The actor's alarm (`this.alarm`). The runtime arms it after calls and
+     * when outbound work is queued, never pushing an earlier pending alarm back.
+     */
+    alarm: {
+        get(): number | null;
+        set(timestampMs: number): void;
+    };
+    /**
+     * Total time one maintenance pass may spend deleting blobs through the
+     * gateway; the rest wait for the next pass. Positive; default 15s.
+     */
+    blobDeleteBudgetMs?: number;
+    /**
+     * Engine config. The runtime sets `workspaceId` (the actor id),
+     * `credentialFormat: 'ar'` with the tag the gateway handed {@link
+     * ActorRuntime.create} (a gateway routes by credential), and the outbound
+     * transports.
+     */
+    config?: Omit<EngineConfig, 'workspaceId' | 'credentialFormat' | 'credentialTagger' | 'outboundWebhookFetch' | 'ephemeralEventFetch'>;
+    auth?: AuthProvider;
+    telemetry?: TelemetrySink;
+}
+/** The engine running inside one workspace actor. */
+export interface ActorRuntime {
+    readonly deps: EngineDeps;
+    /**
+     * Serve one HTTP request inside an actor call. Engine background
+     * work is awaited, so it commits with the call. Each engine write group is
+     * a nested actor transaction: a failed group rolls back alone and the
+     * request goes on, as on the Node adapter.
+     */
+    handle(request: ActorHttpRequest): Promise<ActorHttpResponse>;
+    /**
+     * Create this actor's workspace (`POST /v1/workspaces`) inside an actor
+     * call. `credentialTag` is the routing tag the gateway signed for the
+     * workspace id (`createCredentialTagSigner(keyring).tag(id)`); the actor
+     * keeps it and every `ar_` credential it mints carries it.
+     */
+    create(request: ActorHttpRequest, credentialTag: string): Promise<ActorHttpResponse>;
+    /**
+     * Run maintenance from the actor alarm: deliver the webhook outbox and
+     * queued ephemeral events, redrive node deliveries and A2A egress, delete
+     * blobs, run liveness and presence sweeps, expiry and retention. Re-arms the
+     * alarm for the nearest outstanding deadline (see {@link nextMaintenanceAt}).
+     * Each step runs in its own nested transaction: a step or write group that
+     * fails rolls back alone, raises a `maintenance_rolled_back` alert, and the
+     * rest of the pass commits.
+     */
+    maintain(): Promise<void>;
+}
+export declare function createActorRuntime(options: ActorRuntimeOptions): ActorRuntime;
+/**
+ * When maintenance next has something to do, from the workspace's own
+ * outstanding work: the nearest due time of the webhook outbox, unfinished
+ * deliveries (redrive and expiry), A2A egress, the invocation timeouts the
+ * invocation sweep acts on, including task deadlines (a plain queue waiting
+ * for its node to reconnect has none: the reconnect is a request, which
+ * re-arms), agent
+ * liveness, blob cleanup, workspace expiry, idempotency-record expiry, A2A
+ * retention, and queued ephemeral events, and
+ * the sweep cadence while nodes are connected. `null` when nothing is
+ * outstanding, so an idle workspace's actor goes dormant.
+ */
+export declare function nextMaintenanceAt(sql: ActorSql): number | null;
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/actor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/actor/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAiB9D,OAAO,EAAuB,KAAK,aAAa,EAAE,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAYvF,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1E,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAQrE,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,GAAG,EAAE,aAAa,CAAC;IACnB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,6FAA6F;IAC7F,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;;;;OAMG;IACH,aAAa,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACvC;;;OAGG;IACH,KAAK,EAAE;QAAE,GAAG,IAAI,MAAM,GAAG,IAAI,CAAC;QAAC,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAChE;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,sBAAsB,GAAG,qBAAqB,CAAC,CAAC;IACtI,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED,qDAAqD;AACrD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B;;;;;OAKG;IACH,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9D;;;;;OAKG;IACH,MAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrF;;;;;;;;OAQG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AASD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAqN7E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAkC9D"}