@sema-agent/server 1.314.0 → 1.315.0

package/dist/plugins/remote-env-k8s.js

@@ -18,133 +18,8 @@ const K8S_BG_MAX_TIMEOUT_SEC = Math.max(K8S_BG_DEFAULT_TIMEOUT_SEC, Math.floor(N
 const K8S_BG_READ_CAP = Math.max(64 * 1024, Math.floor(Number(process.env.K8S_BG_READ_CAP ?? "")) || 1024 * 1024);
 const K8S_BG_FILE_CAP = Math.max(K8S_BG_READ_CAP, Math.floor(Number(process.env.K8S_BG_FILE_CAP ?? "")) || 64 * 1024 * 1024);
 const K8S_BG_MEM_CAP = Math.max(64 * 1024, Math.floor(Number(process.env.K8S_BG_MEM_CAP ?? "")) || 8 * 1024 * 1024);
-export function buildBgRunnerScript(dir) {
-    const q = (name) => shellQuote(`${dir}/${name}`);
-    return [
-        `echo $$ > ${q("pgid.tmp")} 2>/dev/null && mv ${q("pgid.tmp")} ${q("pgid")} 2>/dev/null`,
-        `sh ${q("cmd.sh")} > ${q("out")} 2> ${q("err")} < /dev/null`,
-        `__RC=$?`,
-        `echo $__RC > ${q("exit.tmp")} 2>/dev/null && mv ${q("exit.tmp")} ${q("exit")} 2>/dev/null`,
-    ].join("\n");
-}
-export function buildBgLauncherScript(dir, cmdShB64, runnerShB64) {
-    const d = shellQuote(dir);
-    const q = (name) => shellQuote(`${dir}/${name}`);
-    return [
-        `mkdir -p ${d} && chmod 700 ${d}`,
-        `printf %s '${cmdShB64}' | base64 -d > ${q("cmd.sh")}`,
-        `printf %s '${runnerShB64}' | base64 -d > ${q("runner.sh")}`,
-        `setsid sh ${q("runner.sh")} >/dev/null 2>&1 &`,
-        `__i=0; while [ ! -s ${q("pgid")} ] && [ $__i -lt 40 ]; do __i=$((__i+1)); sleep 0.05; done`,
-        `if [ -s ${q("pgid")} ]; then echo SEMABG_LAUNCHED; else echo SEMABG_NOPGID; fi`,
-    ].join("\n");
-}
-export function buildBgPollScript(dir, stdoutCursor, stderrCursor, readCap) {
-    const d = shellQuote(dir);
-    const slice = (file, cursor) => [
-        `__N=$((__T - ${cursor}))`,
-        `if [ "$__N" -gt 0 ]; then`,
-        `  if [ "$__N" -le ${readCap} ]; then tail -c +$(( ${cursor} + 1 )) ${d}/${file} 2>/dev/null | head -c "$__N" | base64;`,
-        `  else tail -c +$(( __T - ${readCap} + 1 )) ${d}/${file} 2>/dev/null | head -c ${readCap} | base64; fi`,
-        `fi`,
-    ].join("\n");
-    return [
-        `if [ ! -d ${d} ]; then echo SEMABG_GONE; exit 0; fi`,
-        `__OT=$(wc -c < ${d}/out 2>/dev/null); __OT=$(( \${__OT:-0} + 0 ))`,
-        `__ET=$(wc -c < ${d}/err 2>/dev/null); __ET=$(( \${__ET:-0} + 0 ))`,
-        `__EX=$( [ -f ${d}/exit ] && cat ${d}/exit 2>/dev/null || echo - )`,
-        `__PG=$(cat ${d}/pgid 2>/dev/null); __PG=\${__PG:--}`,
-        `if [ "$__PG" = "-" ]; then __AL=1; elif kill -0 -"$__PG" 2>/dev/null; then __AL=1; else __AL=0; fi`,
-        `echo "SEMABG_META o=$__OT e=$__ET x=$__EX a=$__AL"`,
-        `echo SEMABG_O`,
-        `__T=$__OT`,
-        slice("out", stdoutCursor),
-        `echo SEMABG_E`,
-        `__T=$__ET`,
-        slice("err", stderrCursor),
-        `echo SEMABG_X`,
-    ].join("\n");
-}
-export function buildBgKillScript(dir) {
-    const d = shellQuote(dir);
-    return [
-        `__i=0; while [ ! -s ${d}/pgid ] && [ $__i -lt 40 ]; do __i=$((__i+1)); sleep 0.05; done`,
-        `__PG=$(cat ${d}/pgid 2>/dev/null); __PG=\${__PG:--}`,
-        `if [ "$__PG" != "-" ]; then kill -TERM -"$__PG" 2>/dev/null || kill -TERM "$__PG" 2>/dev/null; sleep 1; kill -KILL -"$__PG" 2>/dev/null || kill -KILL "$__PG" 2>/dev/null; fi`,
-        `echo SEMABG_KILLED`,
-    ].join("\n");
-}
-export function buildBgDisposeScript(dir) {
-    const d = shellQuote(dir);
-    return [
-        `__PG=$(cat ${d}/pgid 2>/dev/null); __PG=\${__PG:--}`,
-        `if [ "$__PG" != "-" ]; then kill -KILL -"$__PG" 2>/dev/null || kill -KILL "$__PG" 2>/dev/null; fi`,
-        `rm -rf ${d} 2>/dev/null`,
-        `echo SEMABG_DISPOSED`,
-    ].join("\n");
-}
-export function buildDetachCapableExec(dir, command) {
-    const d = shellQuote(dir);
-    const q = (name) => shellQuote(`${dir}/${name}`);
-    const cmdB64 = Buffer.from(command, "utf8").toString("base64");
-    const writePgid = (val) => `printf %s ${val} > ${q("pgid.tmp")} 2>/dev/null && mv ${q("pgid.tmp")} ${q("pgid")} 2>/dev/null`;
-    return [
-        `__cmd=$(printf %s '${cmdB64}' | base64 -d)`,
-        `mkdir -p ${d} 2>/dev/null`,
-        `trap 'rm -rf ${d} 2>/dev/null' EXIT`,
-        `if command -v setsid >/dev/null 2>&1; then`,
-        `  setsid sh -c "$__cmd" &`,
-        `  __pg=$!`,
-        `  ${writePgid('"$__pg"')}`,
-        `  wait "$__pg"; __rc=$?`,
-        `else`,
-        `  ${writePgid('"$$"')}`,
-        `  sh -c "$__cmd"; __rc=$?`,
-        `fi`,
-        `exit $__rc`,
-    ].join("\n");
-}
-export function parseBgPollOutput(raw) {
-    if (raw.includes("SEMABG_GONE")) {
-        return { gone: true, outTotal: 0, errTotal: 0, alive: false, stdout: "", stdoutBytes: 0, stderr: "", stderrBytes: 0 };
-    }
-    const lines = raw.split("\n");
-    const metaIdx = lines.findIndex((l) => l.startsWith("SEMABG_META "));
-    if (metaIdx < 0)
-        return undefined;
-    const oIdx = lines.indexOf("SEMABG_O", metaIdx + 1);
-    const eIdx = oIdx >= 0 ? lines.indexOf("SEMABG_E", oIdx + 1) : -1;
-    const xIdx = eIdx >= 0 ? lines.indexOf("SEMABG_X", eIdx + 1) : -1;
-    if (oIdx < 0 || eIdx < 0 || xIdx < 0)
-        return undefined;
-    const m = /o=(\d+) e=(\d+) x=(\S+) a=([01])/.exec(lines[metaIdx].slice("SEMABG_META ".length));
-    if (!m)
-        return undefined;
-    const outTotal = parseInt(m[1], 10);
-    const errTotal = parseInt(m[2], 10);
-    const exTok = m[3];
-    const alive = m[4] === "1";
-    const exitParsed = exTok === "-" ? NaN : parseInt(exTok, 10);
-    const exitCode = Number.isFinite(exitParsed) ? exitParsed : undefined;
-    const decode = (from, to) => {
-        const b64 = lines.slice(from, to).join("").replace(/\s+/g, "");
-        const buf = Buffer.from(b64, "base64");
-        return { text: buf.toString("utf8"), bytes: buf.length };
-    };
-    const o = decode(oIdx + 1, eIdx);
-    const e = decode(eIdx + 1, xIdx);
-    return {
-        gone: false,
-        outTotal,
-        errTotal,
-        ...(exitCode !== undefined ? { exitCode } : {}),
-        alive,
-        stdout: o.text,
-        stdoutBytes: o.bytes,
-        stderr: e.text,
-        stderrBytes: e.bytes,
-    };
-}
+import { buildBgRunnerScript, buildBgLauncherScript, buildBgPollScript, buildBgKillScript, buildBgDisposeScript, buildDetachCapableExec, parseBgPollOutput, } from "./k8s-bg-scripts.js";
+export { buildBgRunnerScript, buildBgLauncherScript, buildBgPollScript, buildBgKillScript, buildBgDisposeScript, buildDetachCapableExec, parseBgPollOutput, } from "./k8s-bg-scripts.js";
 const ok = (value) => ({ ok: true, value });
 const unsupported = (op) => ({
     ok: false,
@@ -153,98 +28,17 @@ const unsupported = (op) => ({
 const SA_DIR = "/var/run/secrets/kubernetes.io/serviceaccount";
 const EXEC_SUBPROTOCOLS = ["v5.channel.k8s.io", "v4.channel.k8s.io"];
 const WRITE_CHUNK_BYTES = 64 * 1024;
-export function applyPodSpecPatch(pod, patch) {
-    assertHardeningOnly(patch.podSecurityContext, "podSecurityContext");
-    assertHardeningOnly(patch.containerSecurityContext, "containerSecurityContext");
-    if (patch.labels) {
-        const identity = {};
-        for (const k of ["app", "managed-by"]) {
-            const v = pod.metadata.labels?.[k];
-            if (v !== undefined)
-                identity[k] = v;
-        }
-        pod.metadata.labels = { ...pod.metadata.labels, ...patch.labels, ...identity };
-    }
-    const spec = pod.spec;
-    assertVolumesPodLocal(patch.volumes, "volumes");
-    if (patch.volumes?.length)
-        spec.volumes = [...(spec.volumes ?? []), ...patch.volumes];
-    if (patch.podSecurityContext)
-        spec.securityContext = { ...(spec.securityContext ?? {}), ...patch.podSecurityContext };
-    const container = spec.containers?.[0];
-    if (container) {
-        if (patch.volumeMounts?.length)
-            container.volumeMounts = [...(container.volumeMounts ?? []), ...patch.volumeMounts];
-        if (patch.containerSecurityContext)
-            container.securityContext = { ...(container.securityContext ?? {}), ...patch.containerSecurityContext };
-    }
-}
-function assertHardeningOnly(sc, where) {
-    if (!sc)
-        return;
-    const bad = (msg) => {
-        throw new Error(`podSpecPatch.${where} rejected — it may only HARDEN, never weaken isolation: ${msg}`);
-    };
-    if (sc.privileged === true)
-        bad("privileged:true");
-    if (sc.allowPrivilegeEscalation === true)
-        bad("allowPrivilegeEscalation:true");
-    if (sc.readOnlyRootFilesystem === false)
-        bad("readOnlyRootFilesystem:false");
-    if (sc.runAsNonRoot === false)
-        bad("runAsNonRoot:false");
-    if (sc.runAsUser === 0)
-        bad("runAsUser:0 (root)");
-    const caps = sc.capabilities;
-    if (caps && Array.isArray(caps.add) && caps.add.length > 0)
-        bad(`capabilities.add ${JSON.stringify(caps.add)} (a hardening patch may only .drop)`);
-    if (sc.procMount === "Unmasked")
-        bad('procMount:"Unmasked" (re-exposes masked /proc)');
-    const seccomp = sc.seccompProfile;
-    if (seccomp && seccomp.type === "Unconfined")
-        bad('seccompProfile.type:"Unconfined" (disables syscall filtering)');
-}
-function assertVolumesPodLocal(volumes, where) {
-    if (!volumes?.length)
-        return;
-    const POD_LOCAL = new Set(["emptyDir", "configMap", "secret", "projected", "downwardAPI", "ephemeral"]);
-    for (const v of volumes) {
-        const vol = v;
-        const sources = Object.keys(vol).filter((k) => k !== "name");
-        for (const src of sources) {
-            if (!POD_LOCAL.has(src)) {
-                throw new Error(`podSpecPatch.${where} rejected — volume source ${JSON.stringify(src)} is not pod-local (host-backed sources like hostPath/csi/flexVolume cross the Kata VM boundary into the node FS). Allowed: ${[...POD_LOCAL].join("/")}`);
-            }
-        }
-    }
-}
-export function execSocketTlsOptions(ca, insecureTls) {
-    const caList = ca ? [ca] : undefined;
-    return { ca: caList, rejectUnauthorized: !insecureTls, tls: { ca: caList, rejectUnauthorized: !insecureTls } };
-}
+import { applyPodSpecPatch } from "./k8s-exec-protocol.js";
+export { applyPodSpecPatch } from "./k8s-exec-protocol.js";
+import { execSocketTlsOptions, exitCodeFromStatus } from "./k8s-exec-protocol.js";
+export { execSocketTlsOptions } from "./k8s-exec-protocol.js";
 export function errorMessageOf(e) {
     if (e instanceof Error)
         return e.message;
     const m = e?.message;
     return typeof m === "string" && m ? m : String(e);
 }
-export function exitCodeFromStatus(statusJson) {
-    try {
-        const s = JSON.parse(statusJson);
-        if (s.status === "Success")
-            return { exitCode: 0 };
-        const cause = s.details?.causes?.find((c) => c.reason === "ExitCode");
-        if (cause?.message?.trim()) {
-            const code = Number(cause.message);
-            if (Number.isFinite(code))
-                return { exitCode: code };
-        }
-        return { error: s.message || s.reason || "exec failed without an exit code" };
-    }
-    catch {
-        return { error: `unparseable exec status: ${statusJson.slice(0, 200)}` };
-    }
-}
+export { exitCodeFromStatus } from "./k8s-exec-protocol.js";
 export class RemoteK8sExecutionEnv {
     capabilities;
     cwd;

package/dist/plugins/sql-driver.d.ts

@@ -0,0 +1,25 @@
+import type { Pool as MySqlPool } from "mysql2/promise";
+import type { Pool as PgPool } from "pg";
+export type SqlDialect = "tidb" | "pg";
+export type SqlRow = Record<string, unknown>;
+export interface SqlResult {
+    rows: SqlRow[];
+    affected: number;
+}
+export interface SqlExec {
+    query(sql: string, params?: unknown[]): Promise<SqlResult>;
+}
+export interface SqlTxConn extends SqlExec {
+    begin(): Promise<void>;
+    beginPessimistic(): Promise<void>;
+    commit(): Promise<void>;
+    rollback(): Promise<void>;
+    release(): void;
+}
+export interface SqlDriver extends SqlExec {
+    readonly dialect: SqlDialect;
+    connect(): Promise<SqlTxConn>;
+}
+export declare function mysqlDriver(pool: MySqlPool): SqlDriver;
+export declare function pgDriver(pool: PgPool): SqlDriver;
+//# sourceMappingURL=sql-driver.d.ts.map

package/dist/plugins/sql-driver.js

@@ -0,0 +1,59 @@
+function mysqlResult(r) {
+    if (Array.isArray(r))
+        return { rows: r, affected: 0 };
+    const h = r;
+    return { rows: [], affected: Number(h?.affectedRows ?? 0) };
+}
+async function mysqlQuery(q, sql, params) {
+    const [r] = (await q.query(sql, params ?? []));
+    return mysqlResult(r);
+}
+export function mysqlDriver(pool) {
+    return {
+        dialect: "tidb",
+        query: (sql, params) => mysqlQuery(pool, sql, params),
+        async connect() {
+            const c = await pool.getConnection();
+            return {
+                query: (sql, params) => mysqlQuery(c, sql, params),
+                begin: () => c.beginTransaction(),
+                beginPessimistic: async () => {
+                    await c.query("BEGIN PESSIMISTIC");
+                },
+                commit: () => c.commit(),
+                rollback: () => c.rollback(),
+                release: () => c.release(),
+            };
+        },
+    };
+}
+async function pgQuery(q, sql, params) {
+    const res = await q.query(sql, params ?? []);
+    return { rows: (res.rows ?? []), affected: res.rowCount ?? 0 };
+}
+export function pgDriver(pool) {
+    return {
+        dialect: "pg",
+        query: (sql, params) => pgQuery(pool, sql, params),
+        async connect() {
+            const c = await pool.connect();
+            return {
+                query: (sql, params) => pgQuery(c, sql, params),
+                begin: async () => {
+                    await c.query("BEGIN");
+                },
+                beginPessimistic: async () => {
+                    await c.query("BEGIN");
+                },
+                commit: async () => {
+                    await c.query("COMMIT");
+                },
+                rollback: async () => {
+                    await c.query("ROLLBACK");
+                },
+                release: () => c.release(),
+            };
+        },
+    };
+}
+//# sourceMappingURL=sql-driver.js.map

package/dist/plugins/tidb-checkpoint-store.d.ts

@@ -1,50 +1,2 @@
-import type { Pool } from "mysql2/promise";
-import { type Checkpoint, type CheckpointStore, type CheckpointSummary, type CheckpointToken, type ResumeOutcome, type ResolveExpectation, type ReopenReason, type RiskDescriptor } from "@sema-agent/core";
-export declare const TERMINAL_BACKSTOP_MS: number;
-export declare const TERMINAL_GRACE_MS = 3600000;
-export declare function tokenFingerprint(token: string): string;
-export interface PendingCheckpoint {
-    sessionId: string;
-    scope: string;
-    toolName: string | null;
-    toolCallId: string | null;
-    boundCallId: string | null;
-    boundInputHash: string | null;
-    taskId: string | null;
-    input: unknown;
-    createdAt: number;
-    deadline: number | null;
-    riskDescriptor: RiskDescriptor | null;
-}
-export declare function boundedToolInput(args: unknown): unknown;
-export declare class TiDBCheckpointStore implements CheckpointStore {
-    private readonly pool;
-    private readonly logger?;
-    constructor(pool: Pool, logger?: {
-        info?(msg: string, meta?: unknown): void;
-    } | undefined);
-    put(token: CheckpointToken, cp: Checkpoint): Promise<void>;
-    get(token: CheckpointToken): Promise<Checkpoint | null>;
-    resolve(token: CheckpointToken, scope: string, outcome: ResumeOutcome, expect?: ResolveExpectation): Promise<boolean>;
-    reopen(token: CheckpointToken, scope: string, reason: ReopenReason): Promise<boolean>;
-    setPendingSteer(token: CheckpointToken, scope: string, steer: {
-        text: string;
-        trusted: boolean;
-    }): Promise<boolean>;
-    expire(token: CheckpointToken, scope: string): Promise<boolean>;
-    reap(scope: string, cutoff: number): Promise<number>;
-    reapExpired(cutoff: number): Promise<number>;
-    listExpiredApprovalGates(cutoff: number, limit?: number): Promise<Array<{
-        sessionId: string;
-        scope: string;
-    }>>;
-    listPending(scope?: string): Promise<PendingCheckpoint[]>;
-    listByScope(scope: string): Promise<CheckpointSummary[]>;
-    findPendingTokenBySession(sessionId: string, scope?: string): Promise<CheckpointToken | null>;
-    peekPendingScope(sessionId: string): Promise<string | null | undefined>;
-    putCtx(sessionId: string, ctx: unknown): Promise<void>;
-    getCtx<T = unknown>(sessionId: string): Promise<T | null>;
-    reapCtx(cutoff: number): Promise<number>;
-    deleteBySession(sessionId: string, owner: string | null): Promise<number>;
-}
+export { TiDBCheckpointStore, SqlCheckpointStore, TERMINAL_BACKSTOP_MS, TERMINAL_GRACE_MS, tokenFingerprint, boundedToolInput, type PendingCheckpoint, } from "./checkpoint-store-sql.js";
 //# sourceMappingURL=tidb-checkpoint-store.d.ts.map

package/dist/plugins/tidb-checkpoint-store.js

@@ -1,192 +1,2 @@
-import { createHash } from "node:crypto";
-import { CheckpointError, validatePendingSteer, checkpointVersionOf, winnerFromOutcome, summarizeCheckpoint, MAX_SUPPORTED_CHECKPOINT_VERSION } from "@sema-agent/core";
-import { redactDeep } from "../trace/redact.js";
-import { parseJsonStrict as parseJson } from "./sql-row-helpers.js";
-const MAX_TOOL_INPUT_CHARS = 8192;
-export const TERMINAL_BACKSTOP_MS = Math.max(60_000, Number(process.env.APPROVAL_TERMINAL_BACKSTOP_MS) || 30 * 86_400_000);
-export const TERMINAL_GRACE_MS = 3_600_000;
-export function tokenFingerprint(token) {
-    return "sha256:" + createHash("sha256").update(token).digest("hex").slice(0, 12);
-}
-export function boundedToolInput(args) {
-    if (args === undefined)
-        return null;
-    const redacted = redactDeep(args);
-    const json = JSON.stringify(redacted);
-    if (json === undefined)
-        return null;
-    if (json.length > MAX_TOOL_INPUT_CHARS)
-        return { truncated: true, bytes: json.length };
-    return redacted;
-}
-const DUP_ENTRY = 1062;
-export class TiDBCheckpointStore {
-    pool;
-    logger;
-    constructor(pool, logger) {
-        this.pool = pool;
-        this.logger = logger;
-    }
-    async put(token, cp) {
-        const pa = cp.pendingAction;
-        const version = checkpointVersionOf(cp);
-        const toolInput = boundedToolInput(pa?.args);
-        try {
-            await this.pool.query("INSERT INTO checkpoint (token, scope, session_id, version, status, tool_name, tool_call_id, tool_input, checkpoint, deadline, created_at, terminal_at, gate_kind, bound_input_hash, risk_descriptor) " +
-                "VALUES (?,?,?,?,'pending',?,?,?,?,?,?,?,?,?,?)", [
-                token,
-                cp.scope,
-                cp.sessionId,
-                version,
-                pa?.toolName ?? null,
-                pa?.toolCallId ?? null,
-                toolInput === null ? null : JSON.stringify(toolInput),
-                JSON.stringify(cp),
-                cp.deadline ?? null,
-                cp.createdAt,
-                Math.max(cp.createdAt + TERMINAL_BACKSTOP_MS, (cp.deadline ?? 0) + TERMINAL_GRACE_MS),
-                cp.gate?.kind ?? null,
-                pa?.boundInputHash ?? null,
-                ((g) => (g?.riskDescriptor ? JSON.stringify(g.riskDescriptor) : null))(cp.gate),
-            ]);
-        }
-        catch (e) {
-            if (e?.errno === DUP_ENTRY) {
-                throw new CheckpointError("checkpoint.already_exists", `checkpoint token already exists`);
-            }
-            throw e;
-        }
-    }
-    async get(token) {
-        const [rows] = await this.pool.query("SELECT version, status, checkpoint, outcome, reopen_reason, rev, pending_steer FROM checkpoint WHERE token = ?", [token]);
-        const r = rows[0];
-        if (!r)
-            return null;
-        const version = Number(r.version);
-        if (version > MAX_SUPPORTED_CHECKPOINT_VERSION) {
-            throw new Error(`checkpoint format version ${version} is newer than this build supports (max ${MAX_SUPPORTED_CHECKPOINT_VERSION}) — upgrade the service to resume it`);
-        }
-        const cp = parseJson(r.checkpoint);
-        cp.status = r.status;
-        const outcomeRaw = parseJson(r.outcome);
-        if (outcomeRaw)
-            cp.resolvedOutcome = winnerFromOutcome(outcomeRaw);
-        cp.reopenReason = r.reopen_reason ?? undefined;
-        cp.rev = r.rev == null ? 0 : Number(r.rev);
-        const steerRaw = parseJson(r.pending_steer);
-        if (steerRaw && cp.state)
-            cp.state.pendingSteer = steerRaw;
-        this.logger?.info?.("checkpoint_get", {
-            tokenFp: tokenFingerprint(token),
-            status: cp.status,
-            version,
-            hasWorkspaceHandle: !!cp.state?.workspaceHandle,
-            snapshotId: cp.state?.workspaceHandle?.snapshotId,
-        });
-        return cp;
-    }
-    async resolve(token, scope, outcome, expect) {
-        const params = [JSON.stringify(outcome), Date.now(), token, scope];
-        if (expect)
-            params.push(expect.rev);
-        const [res] = await this.pool.query("UPDATE checkpoint SET status = 'resolved', outcome = ?, decided_at = ?, rev = rev + 1, reopen_reason = NULL WHERE token = ? AND scope = ? AND status = 'pending'" +
-            (expect ? " AND rev = ?" : ""), params);
-        return res.affectedRows === 1;
-    }
-    async reopen(token, scope, reason) {
-        const [res] = await this.pool.query("UPDATE checkpoint SET status = 'pending', reopen_reason = ?, rev = rev + 1 WHERE token = ? AND scope = ? AND status = 'resolved'", [reason, token, scope]);
-        return res.affectedRows === 1;
-    }
-    async setPendingSteer(token, scope, steer) {
-        const clean = validatePendingSteer(steer);
-        const [res] = await this.pool.query("UPDATE checkpoint SET pending_steer = ? WHERE token = ? AND scope = ? AND status = 'pending'", [JSON.stringify(clean), token, scope]);
-        return res.affectedRows > 0;
-    }
-    async expire(token, scope) {
-        const [res] = await this.pool.query("UPDATE checkpoint SET status = 'expired', decided_at = ? WHERE token = ? AND scope = ? AND status = 'pending'", [Date.now(), token, scope]);
-        return res.affectedRows === 1;
-    }
-    async reap(scope, cutoff) {
-        const [res] = await this.pool.query("UPDATE checkpoint SET status = 'expired', decided_at = ? WHERE scope = ? AND status = 'pending' AND deadline IS NOT NULL AND deadline <= ?", [Date.now(), scope, cutoff]);
-        return res.affectedRows;
-    }
-    async reapExpired(cutoff) {
-        const [res] = await this.pool.query("UPDATE checkpoint SET status = 'expired', decided_at = ? " +
-            "WHERE status = 'pending' AND ((deadline IS NOT NULL AND deadline <= ? AND (gate_kind IS NULL OR gate_kind NOT IN ('human','irreversible_ask') OR COALESCE(tool_name,'') = 'AskUserQuestion')) OR (terminal_at IS NOT NULL AND terminal_at <= ?))", [Date.now(), cutoff, cutoff]);
-        return res.affectedRows;
-    }
-    async listExpiredApprovalGates(cutoff, limit = 100) {
-        const [rows] = await this.pool.query("SELECT session_id, scope FROM checkpoint WHERE status = 'pending' AND gate_kind IN ('human','irreversible_ask') " +
-            "AND COALESCE(tool_name,'') <> 'AskUserQuestion' AND deadline IS NOT NULL AND deadline <= ? ORDER BY deadline ASC LIMIT ?", [cutoff, limit]);
-        return rows.map((r) => ({ sessionId: String(r.session_id), scope: String(r.scope) }));
-    }
-    async listPending(scope) {
-        const base = "SELECT c.session_id, c.scope, c.tool_name, c.tool_call_id, c.tool_input, c.bound_input_hash, c.risk_descriptor, c.created_at, c.deadline, ta.task_id " +
-            "FROM checkpoint c LEFT JOIN task_active ta ON ta.session_id = c.session_id WHERE c.status='pending'";
-        const [rows] = scope
-            ? await this.pool.query(`${base} AND c.scope=? ORDER BY c.created_at ASC`, [scope])
-            : await this.pool.query(`${base} ORDER BY c.created_at ASC`);
-        const out = rows.map((r) => {
-            const toolCallId = r.tool_call_id ?? null;
-            return {
-                sessionId: String(r.session_id),
-                scope: String(r.scope),
-                toolName: r.tool_name ?? null,
-                toolCallId,
-                boundCallId: toolCallId,
-                boundInputHash: r.bound_input_hash ?? null,
-                taskId: r.task_id ?? null,
-                input: r.tool_input ?? null,
-                createdAt: Number(r.created_at),
-                deadline: r.deadline == null ? null : Number(r.deadline),
-                riskDescriptor: parseJson(r.risk_descriptor),
-            };
-        });
-        return out.sort((a, b) => (b.riskDescriptor?.severity ?? 0) - (a.riskDescriptor?.severity ?? 0) || a.createdAt - b.createdAt);
-    }
-    async listByScope(scope) {
-        const [rows] = await this.pool.query("SELECT checkpoint, status FROM checkpoint WHERE status = 'pending' AND scope = ? ORDER BY created_at ASC LIMIT 500", [scope]);
-        const out = [];
-        for (const r of rows) {
-            const cp = parseJson(r.checkpoint);
-            if (!cp)
-                continue;
-            cp.status = r.status;
-            out.push(summarizeCheckpoint(cp));
-        }
-        return out;
-    }
-    async findPendingTokenBySession(sessionId, scope) {
-        const [rows] = scope
-            ? await this.pool.query("SELECT token FROM checkpoint WHERE session_id=? AND scope=? AND status='pending' LIMIT 1", [sessionId, scope])
-            : await this.pool.query("SELECT token FROM checkpoint WHERE session_id=? AND status='pending' LIMIT 1", [sessionId]);
-        return rows[0] ? String(rows[0].token) : null;
-    }
-    async peekPendingScope(sessionId) {
-        const [rows] = await this.pool.query("SELECT scope FROM checkpoint WHERE session_id=? AND status='pending' LIMIT 1", [sessionId]);
-        if (!rows[0])
-            return undefined;
-        return rows[0].scope ?? null;
-    }
-    async putCtx(sessionId, ctx) {
-        await this.pool.query("INSERT INTO checkpoint_ctx (session_id, ctx, updated_at) VALUES (?,?,?) " +
-            "ON DUPLICATE KEY UPDATE ctx = VALUES(ctx), updated_at = VALUES(updated_at)", [sessionId, JSON.stringify(ctx), Date.now()]);
-    }
-    async getCtx(sessionId) {
-        const [rows] = await this.pool.query("SELECT ctx FROM checkpoint_ctx WHERE session_id=?", [sessionId]);
-        return rows[0] ? parseJson(rows[0].ctx) : null;
-    }
-    async reapCtx(cutoff) {
-        const [res] = await this.pool.query("DELETE FROM checkpoint_ctx WHERE updated_at < ? " +
-            "AND session_id NOT IN (SELECT session_id FROM checkpoint WHERE status='pending') " +
-            "AND session_id NOT IN (SELECT session_id FROM task_active)", [cutoff]);
-        return res.affectedRows;
-    }
-    async deleteBySession(sessionId, owner) {
-        const ownerGuard = "EXISTS (SELECT 1 FROM session_meta sm WHERE sm.session_id = ? AND sm.owner <=> ?)";
-        const [res] = await this.pool.query(`DELETE FROM checkpoint WHERE session_id = ? AND ${ownerGuard}`, [sessionId, sessionId, owner]);
-        await this.pool.query(`DELETE FROM checkpoint_ctx WHERE session_id = ? AND ${ownerGuard}`, [sessionId, sessionId, owner]);
-        return res.affectedRows;
-    }
-}
+export { TiDBCheckpointStore, SqlCheckpointStore, TERMINAL_BACKSTOP_MS, TERMINAL_GRACE_MS, tokenFingerprint, boundedToolInput, } from "./checkpoint-store-sql.js";
 //# sourceMappingURL=tidb-checkpoint-store.js.map

package/dist/plugins/tidb-image-bake.d.ts

@@ -1,41 +1,4 @@
-import type { Pool } from "mysql2/promise";
-import { type BakeStatus, type BakeState, type BakeRecord, type BakeEvent, type CreateBakeInput, type BakeTerminal } from "./store-contracts.js";
+export { TiDBImageBake, SqlImageBake } from "./image-bake-store-sql.js";
 export type { BakeStatus, BakeState, BakeErrorCode, BakeRecord, BakeEvent, CreateBakeInput, BakeTerminal, BakeRow, } from "./store-contracts.js";
 export { mapBakeRow as mapRow, BAKE_SELECT_COLS as SELECT_COLS } from "./store-contracts.js";
-export declare class TiDBImageBake {
-    private readonly pool;
-    private readonly poolName;
-    constructor(pool: Pool, poolName?: string);
-    createBake(input: CreateBakeInput): Promise<{
-        created: boolean;
-        bake: BakeRecord;
-    }>;
-    createBakeIfIdle(input: CreateBakeInput): Promise<{
-        created: boolean;
-        bake: BakeRecord | null;
-    }>;
-    getBake(bakeId: string): Promise<BakeRecord | null>;
-    getBakeByIdem(idemKey: string): Promise<BakeRecord | null>;
-    findActiveByArgv(argv: string[]): Promise<BakeRecord | null>;
-    findActiveAny(): Promise<BakeRecord | null>;
-    findNextQueuedId(): Promise<string | null>;
-    claimBake(bakeId: string, runnerId: string, leaseMs: number): Promise<BakeRecord | null>;
-    appendEvent(bakeId: string, kind: string, data: unknown, opts?: {
-        lineOrd?: number | null;
-        level?: string | null;
-    }): Promise<number | null>;
-    private lineOrdExists;
-    maxSeq(bakeId: string): Promise<number>;
-    retainedFrom(bakeId: string): Promise<number>;
-    getEvents(bakeId: string, afterSeq: number): Promise<BakeEvent[]>;
-    setStatus(bakeId: string, status: BakeStatus): Promise<void>;
-    setState(bakeId: string, state: BakeState): Promise<void>;
-    setTerminal(bakeId: string, t: BakeTerminal): Promise<number>;
-    setIndexId(bakeId: string, indexId: string): Promise<boolean>;
-    heartbeatLease(bakeId: string, runnerId: string, leaseMs: number): Promise<boolean>;
-    requestCancel(bakeId: string): Promise<boolean>;
-    isCancelRequested(bakeId: string): Promise<boolean>;
-    reapStaleBakes(olderThanMs: number): Promise<number>;
-    private tx;
-}
 //# sourceMappingURL=tidb-image-bake.d.ts.map