@stratusagent/gateway 0.6.0 → 0.8.0

package/dist/schedules.js

@@ -0,0 +1,427 @@
+import { randomUUID } from 'node:crypto';
+import { chmodSync, mkdirSync } from 'node:fs';
+import path from 'node:path';
+import { DatabaseSync } from 'node:sqlite';
+import { canonicalDestination, nextFireAfter, SCHEDULE_ID_METADATA_KEY, SCHEDULED_TURN_METADATA_KEY, } from '@stratusagent/agents';
+/**
+ * Durable schedules, in the same database sessions live in — a schedule
+ * survives a restart the way a parked approval does, and an operator has
+ * one file to back up, not two.
+ *
+ * Its own connection rather than a second table grown through
+ * `SqliteSessionStore`, because the CLI opens this store *without* a
+ * gateway: `stratus schedules` lists and cancels against the daemon's
+ * database directly, and WAL mode is what makes two processes on one file
+ * routine. The `next_fire_at` column exists so the due scan every tick
+ * runs reads no JSON body; the empty string means "spent" (a one-shot that
+ * fired, kept only until the turn it pre-authorized finishes) and sorts
+ * before every real timestamp, which is why the scan compares both ends.
+ */
+export class SqliteScheduleStore {
+    db;
+    constructor(filePath) {
+        // Same posture as the session store sharing this file: the directory
+        // and the database must not be readable by other local users, and the
+        // sidecar chmods cover databases created under a looser umask.
+        mkdirSync(path.dirname(filePath), { recursive: true, mode: 0o700 });
+        this.db = new DatabaseSync(filePath);
+        try {
+            chmodSync(filePath, 0o600);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT') {
+                throw error;
+            }
+        }
+        this.db.exec('PRAGMA journal_mode = WAL');
+        // WAL serializes writers to one at a time across the whole file, and
+        // this database is shared between two processes: the daemon claims
+        // slots and saves sessions while `stratus schedules cancel` deletes a
+        // row from another connection. Without a busy timeout the loser of that
+        // lock throws `database is locked` immediately — a cancel that silently
+        // failed would leave the schedule (and its destination grant) live.
+        // Wait for the writer instead.
+        this.db.exec('PRAGMA busy_timeout = 5000');
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS schedules (
+        id TEXT PRIMARY KEY,
+        agent_id TEXT NOT NULL,
+        next_fire_at TEXT NOT NULL,
+        body TEXT NOT NULL,
+        created_at TEXT NOT NULL
+      )
+    `);
+        for (const sensitive of [filePath, `${filePath}-wal`, `${filePath}-shm`, `${filePath}-journal`]) {
+            try {
+                chmodSync(sensitive, 0o600);
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT') {
+                    throw error;
+                }
+            }
+        }
+    }
+    insert(record) {
+        this.db
+            .prepare('INSERT INTO schedules (id, agent_id, next_fire_at, body, created_at) VALUES (?, ?, ?, ?, ?)')
+            .run(record.id, record.agentId, record.nextFireAt ?? '', JSON.stringify(record), record.createdAt);
+    }
+    get(id) {
+        const row = this.db.prepare('SELECT body FROM schedules WHERE id = ?').get(id);
+        return row ? JSON.parse(row.body) : undefined;
+    }
+    /** Every schedule, oldest first — the operator's audit list. */
+    list(agentId) {
+        const rows = (agentId !== undefined
+            ? this.db.prepare('SELECT body FROM schedules WHERE agent_id = ? ORDER BY created_at ASC').all(agentId)
+            : this.db.prepare('SELECT body FROM schedules ORDER BY created_at ASC').all());
+        return rows.map((row) => JSON.parse(row.body));
+    }
+    /** Schedules whose slot has arrived. ISO strings order lexicographically. */
+    due(nowIso) {
+        const rows = this.db
+            .prepare("SELECT body FROM schedules WHERE next_fire_at != '' AND next_fire_at <= ? ORDER BY next_fire_at ASC")
+            .all(nowIso);
+        return rows.map((row) => JSON.parse(row.body));
+    }
+    /**
+     * Consume a slot, atomically: the write the double-run guarantee rests
+     * on, executed BEFORE the dispatch so a daemon that dies mid-firing
+     * restarts to a row whose window is already spent.
+     *
+     * Conditional on the slot still being the one the tick read, because
+     * the read and this write are separated by real time and the CLI
+     * deletes rows from another process: a schedule cancelled in that gap
+     * must stay cancelled — `stratus schedules cancel` revoking the grant
+     * but the prompt running anyway would be the worst of both. False means
+     * the row is gone or its slot moved, and the caller fires nothing.
+     */
+    claimSlot(record, expectedNextFireAt) {
+        return this.db
+            .prepare('UPDATE schedules SET next_fire_at = ?, body = ? WHERE id = ? AND next_fire_at = ?')
+            .run(record.nextFireAt ?? '', JSON.stringify(record), record.id, expectedNextFireAt)
+            .changes > 0;
+    }
+    delete(id) {
+        return this.db.prepare('DELETE FROM schedules WHERE id = ?').run(id).changes > 0;
+    }
+    close() {
+        this.db.close();
+    }
+}
+/**
+ * The session-id namespace scheduled firings live in — `schedule:<id>:<slot>`.
+ *
+ * Reserved: the gateway refuses an *external* dispatch (a control-API
+ * message post, a channel) that names a session id in this space, so the
+ * only turns that ever run on a firing's session are the firing itself.
+ * That is the load-bearing half of the destination carve-out being
+ * unforgeable — the id is derivable from `GET /schedules`, so keeping it
+ * out of an attacker's reach depends on nobody but the scheduler being
+ * allowed to dispatch into it, not on it being secret.
+ */
+export const SCHEDULE_SESSION_ID_PREFIX = 'schedule:';
+/** Whether a session id belongs to the reserved scheduled-firing namespace. */
+export const isScheduleSessionId = (sessionId) => sessionId.startsWith(SCHEDULE_SESSION_ID_PREFIX);
+const DEFAULT_MIN_INTERVAL_MS = 60_000;
+const DEFAULT_MAX_CONCURRENT_PER_AGENT = 1;
+const DEFAULT_TICK_MS = 1_000;
+export const createSchedulerRuntime = (options) => {
+    const { store, dispatch, validateDestination, sessionStatus, hasAgent, log, warn } = options;
+    const minIntervalMs = options.limits?.minIntervalMs ?? DEFAULT_MIN_INTERVAL_MS;
+    const maxConcurrentPerAgent = options.limits?.maxConcurrentPerAgent ?? DEFAULT_MAX_CONCURRENT_PER_AGENT;
+    const tickMs = options.limits?.tickMs ?? DEFAULT_TICK_MS;
+    let stopped = false;
+    let timer;
+    const inflight = new Set();
+    const runningPerAgent = new Map();
+    /**
+     * `${scheduleId}:${slot}` pairs a concurrency-cap deferral has already
+     * logged, so a firing that outlasts its cadence warns once per deferred
+     * slot rather than once per tick. Cleared when the slot finally fires or
+     * is skipped — the same slot recurs on every tick until then.
+     */
+    const deferralsWarned = new Set();
+    /**
+     * Session ids of firings THIS scheduler started and has not seen settle.
+     *
+     * The unforgeable half of the destination carve-out. Metadata alone
+     * cannot be it: the control API forwards caller-supplied metadata into
+     * new sessions, so a client could stamp a live schedule's id onto a
+     * dispatch of its own and borrow the grant. Membership here is minted
+     * only by `fireOrSkip`, in memory, so the only sessions that can pass
+     * are the ones the scheduler itself dispatched — and a message queued
+     * into a firing's session from outside runs after the firing settles
+     * (single-flight), by which point the id is gone from this set.
+     *
+     * Deliberately not durable: a firing recovered after a restart (parked
+     * on some other approval, which only happens where a human is
+     * reachable) finishes without the grant and simply asks — losing a
+     * convenience is the right failure direction for a security scope.
+     */
+    const activeFirings = new Set();
+    const enforceFloor = (input) => {
+        const { cadence } = input;
+        if (cadence.kind === 'every' && cadence.intervalMs < minIntervalMs) {
+            throw new Error(`Schedules may not run more often than every ${Math.round(minIntervalMs / 1000)}s; ${Math.round(cadence.intervalMs / 1000)}s is below the floor.`);
+        }
+        if (cadence.kind === 'cron') {
+            // The first observed gap. Five-field cron cannot express anything
+            // under a minute, so with the default floor this refuses nothing —
+            // it exists for an operator who RAISES the floor, where `* * * * *`
+            // must not slip past just for being spelled as a cron. An irregular
+            // expression with one tight pair elsewhere still can — the
+            // per-agent concurrency cap is the backstop that bounds the cost.
+            const first = nextFireAfter(cadence, new Date());
+            const second = first ? nextFireAfter(cadence, first) : undefined;
+            if (first && second && second.getTime() - first.getTime() < minIntervalMs) {
+                throw new Error(`Schedules may not run more often than every ${Math.round(minIntervalMs / 1000)}s; "${cadence.expression}" fires more often than that.`);
+            }
+        }
+    };
+    const handle = {
+        async create(input) {
+            if (!hasAgent(input.agentId)) {
+                throw new Error(`Agent not found: ${input.agentId}`);
+            }
+            enforceFloor(input);
+            const now = new Date();
+            const next = nextFireAfter(input.cadence, now);
+            if (!next) {
+                throw new Error('This schedule would never fire — check the cadence.');
+            }
+            if (input.destination) {
+                // Refused NOW, while a person is present to hear why — never
+                // accepted and then silently unable to report at 6am.
+                await validateDestination(input.agentId, input.destination);
+            }
+            const record = {
+                id: randomUUID(),
+                agentId: input.agentId,
+                cadence: input.cadence,
+                prompt: input.prompt,
+                ...(input.destination ? { destination: input.destination } : {}),
+                createdAt: now.toISOString(),
+                ...(input.createdBy ? { createdBy: input.createdBy } : {}),
+                nextFireAt: next.toISOString(),
+            };
+            store.insert(record);
+            log(`schedule ${record.id} created for ${record.agentId} — first firing ${record.nextFireAt}${record.destination ? `, reports to ${canonicalDestination(record.destination)}` : ''}`);
+            return record;
+        },
+        async list(agentId) {
+            return store.list(agentId);
+        },
+        async cancel(agentId, scheduleId) {
+            const record = store.get(scheduleId);
+            if (!record || record.agentId !== agentId) {
+                // Ownership before existence: an agent probing ids learns nothing
+                // about other agents' schedules.
+                return false;
+            }
+            const deleted = store.delete(scheduleId);
+            if (deleted) {
+                log(`schedule ${scheduleId} cancelled by ${agentId}`);
+            }
+            return deleted;
+        },
+    };
+    /**
+     * The first slot strictly after `now`, skipping every window that passed
+     * while the daemon was down — in closed form, so downtime never costs a
+     * loop. For an interval this stays phase-aligned to the original slot
+     * (the cadence keeps its offset); for a cron it is the next matching time
+     * after now, which one bounded search already finds. A one-shot never
+     * reaches here — a passed `at` has no following occurrence to skip.
+     */
+    const skipToFuture = (cadence, slotDate, now) => {
+        if (cadence.kind === 'every') {
+            const elapsed = now.getTime() - slotDate.getTime();
+            const jumps = Math.floor(elapsed / cadence.intervalMs) + 1;
+            return new Date(slotDate.getTime() + jumps * cadence.intervalMs);
+        }
+        return nextFireAfter(cadence, now);
+    };
+    /** `record` with its slot replaced — or removed, for a spent one-shot. */
+    const withNextFire = (record, next, extra = {}) => {
+        const { nextFireAt: _spent, ...rest } = record;
+        return { ...rest, ...extra, ...(next ? { nextFireAt: next.toISOString() } : {}) };
+    };
+    /**
+     * Fire one due schedule: consume the slot durably, then dispatch.
+     *
+     * The catch-up rule is inline rather than a separate restart path,
+     * because a restart is just a tick that sees an old slot: a slot whose
+     * *following* occurrence has also passed is a window gone entirely —
+     * advance past it with a log line, never replay. Anything else fires,
+     * which on time is the normal case and late is the single catch-up.
+     */
+    const fireOrSkip = (record, now) => {
+        const slot = record.nextFireAt;
+        if (!slot) {
+            return;
+        }
+        const slotDate = new Date(slot);
+        const following = nextFireAfter(record.cadence, slotDate);
+        if (following && following.getTime() <= now.getTime()) {
+            // Window passed entirely. Jump straight to the first slot after now —
+            // in closed form, never by stepping one interval at a time. A daemon
+            // down for a year against an `every 1m` schedule would otherwise spin
+            // ~525k iterations here, synchronously inside the awaited start(),
+            // stalling the whole boot. (A concurrent cancel makes the claim
+            // no-op, which is fine: skipped and gone both mean "not replayed".)
+            const next = skipToFuture(record.cadence, slotDate, now);
+            log(`schedule ${record.id}: missed firing(s) while the daemon was down; skipping to ${next ? next.toISOString() : 'never'}`);
+            store.claimSlot(withNextFire(record, next), slot);
+            deferralsWarned.delete(`${record.id}:${slot}`);
+            return;
+        }
+        const running = runningPerAgent.get(record.agentId) ?? 0;
+        if (running >= maxConcurrentPerAgent) {
+            // Deferred, not dropped: the slot stays due and the next tick
+            // retries. Warned once per deferred slot, not once per tick — a
+            // firing that outlasts its cadence would otherwise repeat the same
+            // line every tickMs (~1/s) into a log CLAUDE.md keeps as a minimal
+            // trace. The entry clears when the slot finally fires or is skipped.
+            const deferralKey = `${record.id}:${slot}`;
+            if (!deferralsWarned.has(deferralKey)) {
+                deferralsWarned.add(deferralKey);
+                warn(`schedule ${record.id}: ${record.agentId} already has ${running} scheduled turn(s) running; deferring this firing (slot ${slot})`);
+            }
+            return;
+        }
+        deferralsWarned.delete(`${record.id}:${slot}`);
+        const firedAt = now.toISOString();
+        const sessionId = `${SCHEDULE_SESSION_ID_PREFIX}${record.id}:${slot}`;
+        // Advance from the scheduled slot, not from now: `following` is the
+        // occurrence after this one, and the branch above proved it is still in
+        // the future (a passed-entirely window was skipped there). Computing it
+        // from `now` instead would push every future firing later by whatever
+        // scheduler or event-loop delay this one suffered, permanently drifting
+        // an `every 1h` cadence by the lateness of its first slightly-late tick.
+        const next = following;
+        // The slot is spent BEFORE the dispatch — the double-run guarantee —
+        // and spent ATOMICALLY against the slot this tick read: a schedule
+        // cancelled between the due scan and here is gone, and its prompt
+        // must not run on a grant that was just revoked.
+        if (!store.claimSlot(withNextFire(record, next, { lastFiredAt: firedAt, lastSessionId: sessionId }), slot)) {
+            log(`schedule ${record.id}: slot ${slot} was cancelled or already claimed; not firing`);
+            return;
+        }
+        runningPerAgent.set(record.agentId, running + 1);
+        activeFirings.add(sessionId);
+        const firing = dispatch({
+            sessionId,
+            agentId: record.agentId,
+            userMessage: record.prompt,
+            metadata: {
+                [SCHEDULED_TURN_METADATA_KEY]: true,
+                [SCHEDULE_ID_METADATA_KEY]: record.id,
+            },
+        }).then(() => {
+            log(`schedule ${record.id} fired — session ${sessionId} completed`);
+        }, (error) => {
+            warn(`schedule ${record.id} firing failed: ${error instanceof Error ? error.message : String(error)}`);
+        }).finally(() => {
+            activeFirings.delete(sessionId);
+            const count = (runningPerAgent.get(record.agentId) ?? 1) - 1;
+            if (count > 0) {
+                runningPerAgent.set(record.agentId, count);
+            }
+            else {
+                runningPerAgent.delete(record.agentId);
+            }
+            // A spent one-shot's row outlives its firing only as the approval's
+            // scope; once the turn is over, retire it.
+            if (record.cadence.kind === 'at') {
+                store.delete(record.id);
+            }
+        });
+        inflight.add(firing);
+        void firing.finally(() => inflight.delete(firing));
+    };
+    const tick = () => {
+        if (stopped) {
+            return;
+        }
+        try {
+            const now = new Date();
+            for (const record of store.due(now.toISOString())) {
+                if (stopped) {
+                    break;
+                }
+                fireOrSkip(record, now);
+            }
+        }
+        catch (error) {
+            warn(`scheduler tick failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        if (!stopped) {
+            // Deliberately NOT unref'd, for the approval timer's reason: a
+            // stored schedule is real outstanding work — the daemon owes its
+            // next firing — and this timer is the only thing that will ever
+            // start it. Shutdown belongs to stop(), which clears it.
+            timer = setTimeout(tick, tickMs);
+        }
+    };
+    return {
+        handle,
+        isPreauthorized(session, destination) {
+            // A live firing of this scheduler's, first: session metadata is
+            // written by whoever dispatches, so on its own it proves nothing —
+            // see `activeFirings`. The row checks then bind the grant to the
+            // schedule the human approved, re-read per call so a cancel revokes
+            // mid-turn.
+            if (!activeFirings.has(session.id)) {
+                return false;
+            }
+            const scheduleId = session.metadata?.[SCHEDULE_ID_METADATA_KEY];
+            if (typeof scheduleId !== 'string') {
+                return false;
+            }
+            const record = store.get(scheduleId);
+            return record !== undefined
+                && record.agentId === session.agent.id
+                && record.destination !== undefined
+                && canonicalDestination(record.destination) === destination;
+        },
+        list() {
+            return store.list();
+        },
+        cancel(scheduleId) {
+            const deleted = store.delete(scheduleId);
+            if (deleted) {
+                log(`schedule ${scheduleId} cancelled`);
+            }
+            return deleted;
+        },
+        async start() {
+            // Spent one-shots first: a row with no next slot is only the
+            // approval scope of a firing that may still be parked on a human.
+            // Turn over — or turn gone — means the row's work is done.
+            for (const record of store.list()) {
+                if (record.nextFireAt || record.cadence.kind !== 'at') {
+                    continue;
+                }
+                const status = record.lastSessionId ? await sessionStatus(record.lastSessionId) : undefined;
+                if (status !== 'pending_approval') {
+                    store.delete(record.id);
+                    log(`schedule ${record.id}: one-shot already fired; removing`);
+                }
+            }
+            tick();
+        },
+        stop() {
+            stopped = true;
+            if (timer) {
+                clearTimeout(timer);
+                timer = undefined;
+            }
+        },
+        async drain() {
+            await Promise.allSettled([...inflight]);
+        },
+    };
+};
+//# sourceMappingURL=schedules.js.map

package/dist/schedules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedules.js","sourceRoot":"","sources":["../src/schedules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,wBAAwB,EACxB,2BAA2B,GAK5B,MAAM,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,mBAAmB;IACb,EAAE,CAAe;IAElC,YAAY,QAAgB;QAC1B,qEAAqE;QACrE,sEAAsE;QACtE,+DAA+D;QAC/D,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,EAAE,GAAG,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC1C,qEAAqE;QACrE,mEAAmE;QACnE,sEAAsE;QACtE,wEAAwE;QACxE,wEAAwE;QACxE,oEAAoE;QACpE,+BAA+B;QAC/B,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;KAQZ,CAAC,CAAC;QACH,KAAK,MAAM,SAAS,IAAI,CAAC,QAAQ,EAAE,GAAG,QAAQ,MAAM,EAAE,GAAG,QAAQ,MAAM,EAAE,GAAG,QAAQ,UAAU,CAAC,EAAE,CAAC;YAChG,IAAI,CAAC;gBACH,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACvD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,CAAC,MAAsB;QAC3B,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,6FAA6F,CAAC;aACtG,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACvG,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,CAAC,EAAE,CAEhE,CAAC;QACd,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,CAAC;IAED,gEAAgE;IAChE,IAAI,CAAC,OAAgB;QACnB,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;YACjC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;YACvG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,EAAE,CAA4B,CAAC;QAC5G,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAmB,CAAC,CAAC;IACnE,CAAC;IAED,6EAA6E;IAC7E,GAAG,CAAC,MAAc;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,qGAAqG,CAAC;aAC9G,GAAG,CAAC,MAAM,CAA4B,CAAC;QAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAmB,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,MAAsB,EAAE,kBAA0B;QAC1D,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CAAC,mFAAmF,CAAC;aAC5F,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,kBAAkB,CAAC;aACnF,OAAO,GAAG,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;IACnF,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,WAAW,CAAC;AAEtD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,SAAiB,EAAW,EAAE,CAChE,SAAS,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC;AAqBnD,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAC3C,MAAM,eAAe,GAAG,KAAK,CAAC;AAmE9B,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAgC,EAAoB,EAAE;IAC3F,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAC7F,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,EAAE,aAAa,IAAI,uBAAuB,CAAC;IAC/E,MAAM,qBAAqB,GAAG,OAAO,CAAC,MAAM,EAAE,qBAAqB,IAAI,gCAAgC,CAAC;IACxG,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,eAAe,CAAC;IAEzD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAiC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC1C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD;;;;;OAKG;IACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAExC,MAAM,YAAY,GAAG,CAAC,KAA0B,EAAQ,EAAE;QACxD,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAC1B,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,UAAU,GAAG,aAAa,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CACb,+CAA+C,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,uBAAuB,CAClJ,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,kEAAkE;YAClE,mEAAmE;YACnE,oEAAoE;YACpE,oEAAoE;YACpE,2DAA2D;YAC3D,kEAAkE;YAClE,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjE,IAAI,KAAK,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;gBAC1E,MAAM,IAAI,KAAK,CACb,+CAA+C,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,OAAO,OAAO,CAAC,UAAU,+BAA+B,CACxI,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAAoB;QAC9B,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACtB,6DAA6D;gBAC7D,sDAAsD;gBACtD,MAAM,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,MAAM,GAAmB;gBAC7B,EAAE,EAAE,UAAU,EAAE;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;gBAC5B,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE;aAC/B,CAAC;YACF,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACrB,GAAG,CAAC,YAAY,MAAM,CAAC,EAAE,gBAAgB,MAAM,CAAC,OAAO,mBAAmB,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtL,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO;YAChB,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU;YAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAC1C,kEAAkE;gBAClE,iCAAiC;gBACjC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACzC,IAAI,OAAO,EAAE,CAAC;gBACZ,GAAG,CAAC,YAAY,UAAU,iBAAiB,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;IAEF;;;;;;;OAOG;IACH,MAAM,YAAY,GAAG,CACnB,OAAkC,EAClC,QAAc,EACd,GAAS,EACS,EAAE;QACpB,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAC3D,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,0EAA0E;IAC1E,MAAM,YAAY,GAAG,CACnB,MAAsB,EACtB,IAAsB,EACtB,QAAiC,EAAE,EACnB,EAAE;QAClB,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAC/C,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACpF,CAAC,CAAC;IAEF;;;;;;;;OAQG;IACH,MAAM,UAAU,GAAG,CAAC,MAAsB,EAAE,GAAS,EAAQ,EAAE;QAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;QAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE1D,IAAI,SAAS,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,sEAAsE;YACtE,qEAAqE;YACrE,sEAAsE;YACtE,mEAAmE;YACnE,gEAAgE;YAChE,oEAAoE;YACpE,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YACzD,GAAG,CAAC,YAAY,MAAM,CAAC,EAAE,6DAA6D,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7H,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;YAClD,eAAe,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,OAAO,IAAI,qBAAqB,EAAE,CAAC;YACrC,8DAA8D;YAC9D,gEAAgE;YAChE,mEAAmE;YACnE,mEAAmE;YACnE,qEAAqE;YACrE,MAAM,WAAW,GAAG,GAAG,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACjC,IAAI,CAAC,YAAY,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO,gBAAgB,OAAO,2DAA2D,IAAI,GAAG,CAAC,CAAC;YAC1I,CAAC;YACD,OAAO;QACT,CAAC;QACD,eAAe,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAE/C,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,GAAG,0BAA0B,GAAG,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;QACtE,oEAAoE;QACpE,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,IAAI,GAAG,SAAS,CAAC;QACvB,qEAAqE;QACrE,mEAAmE;QACnE,kEAAkE;QAClE,iDAAiD;QACjD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;YAC3G,GAAG,CAAC,YAAY,MAAM,CAAC,EAAE,UAAU,IAAI,+CAA+C,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QAED,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;QACjD,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC;YACtB,SAAS;YACT,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,QAAQ,EAAE;gBACR,CAAC,2BAA2B,CAAC,EAAE,IAAI;gBACnC,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC,EAAE;aACtC;SACF,CAAC,CAAC,IAAI,CACL,GAAG,EAAE;YACH,GAAG,CAAC,YAAY,MAAM,CAAC,EAAE,oBAAoB,SAAS,YAAY,CAAC,CAAC;QACtE,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;YACR,IAAI,CAAC,YAAY,MAAM,CAAC,EAAE,mBAAmB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC,CACF,CAAC,OAAO,CAAC,GAAG,EAAE;YACb,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,KAAK,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzC,CAAC;YACD,oEAAoE;YACpE,2CAA2C;YAC3C,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACjC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrB,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAClD,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM;gBACR,CAAC;gBACD,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,+DAA+D;YAC/D,iEAAiE;YACjE,gEAAgE;YAChE,yDAAyD;YACzD,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,MAAM;QACN,eAAe,CAAC,OAAO,EAAE,WAAW;YAClC,gEAAgE;YAChE,mEAAmE;YACnE,iEAAiE;YACjE,oEAAoE;YACpE,YAAY;YACZ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBACnC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,wBAAwB,CAAC,CAAC;YAChE,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACnC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACrC,OAAO,MAAM,KAAK,SAAS;mBACtB,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,EAAE;mBACnC,MAAM,CAAC,WAAW,KAAK,SAAS;mBAChC,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,WAAW,CAAC;QAChE,CAAC;QACD,IAAI;YACF,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,CAAC,UAAU;YACf,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACzC,IAAI,OAAO,EAAE,CAAC;gBACZ,GAAG,CAAC,YAAY,UAAU,YAAY,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,KAAK;YACT,6DAA6D;YAC7D,kEAAkE;YAClE,2DAA2D;YAC3D,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClC,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;oBACtD,SAAS;gBACX,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC5F,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;oBAClC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACxB,GAAG,CAAC,YAAY,MAAM,CAAC,EAAE,oCAAoC,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;YACD,IAAI,EAAE,CAAC;QACT,CAAC;QACD,IAAI;YACF,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK,EAAE,CAAC;gBACV,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,KAAK,GAAG,SAAS,CAAC;YACpB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;QAC1C,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stratusagent/gateway",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -18,15 +18,16 @@
     "node": ">=22.13 <23 || >=23.4"
   },
   "dependencies": {
-    "@stratusagent/agents": "0.6.0",
-    "@stratusagent/core": "0.6.0",
-    "@stratusagent/plugins": "0.6.0",
-    "@stratusagent/executor-local": "0.6.0",
-    "@stratusagent/state": "0.6.0"
+    "@stratusagent/agents": "0.8.0",
+    "@stratusagent/plugins": "0.8.0",
+    "@stratusagent/executor-local": "0.8.0",
+    "@stratusagent/core": "0.8.0",
+    "@stratusagent/state": "0.8.0"
   },
   "devDependencies": {
     "@types/node": "^24.6.0",
-    "typescript": "^5.9.3"
+    "typescript": "^5.9.3",
+    "@stratusagent/permissions": "0.8.0"
   },
   "license": "MIT",
   "repository": {