@tangle-network/agent-app 0.47.6 → 0.47.8

package/dist/billing/identity-bound.d.ts

@@ -29,6 +29,8 @@ export interface DurableWorkspaceKeyRecord {
     sourceKeyFingerprint: string;
     /** The persisted name used to recover a remote create after a crash. Null only for pre-name rows. */
     name: string | null;
+    /** The persisted retry identity for the remote create. Absent on legacy rows without a persisted create identity. */
+    idempotencyKey?: string | null;
     keyId: string;
     keyEncrypted: string;
     budgetUsd: number;
@@ -48,9 +50,21 @@ type DurableWorkspaceKeyCreateResult = Awaited<ReturnType<KeyProvisioner['create
     budgetRemaining?: number;
     expiresAt?: string | null;
 };
+/** The exact request identity that must be reused when recovering a create. */
+export interface DurableWorkspaceKeyCreateInput {
+    name: string;
+    product: string;
+    budgetUsd: number;
+    expiresAt: string;
+    /** Stable across process restarts for one persisted provisioning row. */
+    idempotencyKey: string;
+}
 /** The remote operations required by the durable manager. */
 export interface DurableWorkspaceKeyProvisioner {
-    createKey(input: Parameters<KeyProvisioner['createKey']>[0]): Promise<DurableWorkspaceKeyCreateResult>;
+    /** True only when replay returns the original child for the persisted request identity. */
+    supportsIdempotentCreate?: true;
+    /** Create one child key. Non-idempotent providers recover through stable-name discovery only. */
+    createKey(input: DurableWorkspaceKeyCreateInput): Promise<DurableWorkspaceKeyCreateResult>;
     getKey(id: string): Promise<{
         budgetUsd?: number | null;
         budgetSpent?: number;
@@ -66,6 +80,22 @@ export interface DurableWorkspaceKeyProvisioner {
         id: string;
     }>>;
 }
+/** Optional compare-and-set lifecycle writes for stores that support fencing. */
+export interface DurableWorkspaceKeyConditionalWrites {
+    /** Return false when the row was no longer provisioning. */
+    markProvisioningRemote(input: {
+        id: string;
+        keyId: string;
+    }): Promise<boolean>;
+    /** Return false when the row was no longer provisioning. */
+    markActive(input: {
+        id: string;
+        keyId: string;
+        keyEncrypted: string;
+        expiresAt: Date;
+        budgetUsd: number;
+    }): Promise<boolean>;
+}
 /** Persistence operations for identity-bound key lifecycle state. */
 export interface DurableWorkspaceKeyStore {
     /** Return the active row for this exact product scope. */
@@ -87,7 +117,12 @@ export interface DurableWorkspaceKeyStore {
         expiresAt: Date;
         budgetUsd: number;
     }): Promise<void>;
-    /** Keep a failed cleanup visible and schedule a later retry. */
+    /**
+     * Optional fenced writes. The manager uses false to compensate a stale
+     * creator. Stores without this field retain the pre-fence behavior.
+     */
+    conditionalWrites?: DurableWorkspaceKeyConditionalWrites;
+    /** Keep a failed cleanup visible and schedule a later retry. Terminal rows are immutable. */
     markRevocationPending(input: {
         id: string;
         error?: string | null;
@@ -139,13 +174,22 @@ export interface DurableWorkspaceKeyManager {
     }): Promise<WorkspaceRuntimeKey>;
     /** Read usage without returning the child secret. */
     getUsage(identity: WorkspaceKeyIdentity): Promise<WorkspaceKeyUsage | null>;
-    /** Retry due cleanup rows. A supplied owner/workspace limits the retry to its scope. */
-    retryPendingRevocations(scope?: Pick<WorkspaceKeyIdentity, 'ownerUserId' | 'workspaceId'>): Promise<number>;
+    /**
+     * Retry due cleanup rows. A supplied owner/workspace limits the retry to its
+     * scope. Empty provisioning rows also require the full identity so a retry
+     * can use the original source binding safely.
+     */
+    retryPendingRevocations(scope?: Pick<WorkspaceKeyIdentity, 'ownerUserId' | 'workspaceId'>, identity?: WorkspaceKeyIdentity): Promise<number>;
 }
 /** Configuration for {@link createIdentityBoundWorkspaceKeyManager}. */
 export interface DurableWorkspaceKeyManagerOptions {
     store: DurableWorkspaceKeyStore;
     provisioner: DurableWorkspaceKeyProvisioner;
+    /**
+     * Control-plane client for historical get/revoke/list operations. Use this
+     * when the source credential can rotate or disappear. It never mints keys.
+     */
+    recoveryProvisioner?: Pick<DurableWorkspaceKeyProvisioner, 'getKey' | 'revokeKey' | 'findCreatedKeys'>;
     crypto: KeyCrypto;
     /** Product partition. Products must use separate values. */
     product: WorkspaceKeyProduct;

package/dist/billing/index.d.ts

@@ -239,4 +239,4 @@ export interface PlatformBalanceManager<Plan extends string> {
 export declare function createPlatformBalanceManager<Plan extends string>(opts: PlatformBalanceManagerOptions<Plan>): PlatformBalanceManager<Plan>;
 /** Create a workspace key manager that handles key provisioning and budget tracking */
 export declare function createWorkspaceKeyManager(opts: WorkspaceKeyManagerOptions): WorkspaceKeyManager;
-export { createIdentityBoundWorkspaceKeyManager, type DurableWorkspaceKeyManager, type DurableWorkspaceKeyManagerOptions, type DurableWorkspaceKeyProvisioner, type DurableWorkspaceKeyProvisioningRecord, type DurableWorkspaceKeyRecord, type DurableWorkspaceKeyScope, type DurableWorkspaceKeyStore, type WorkspaceKeyIdentity, type WorkspaceKeyProduct, type WorkspaceKeyStatus, type WorkspaceKeyUsage, type WorkspaceRuntimeKey, } from './identity-bound';
+export { createIdentityBoundWorkspaceKeyManager, type DurableWorkspaceKeyManager, type DurableWorkspaceKeyManagerOptions, type DurableWorkspaceKeyCreateInput, type DurableWorkspaceKeyConditionalWrites, type DurableWorkspaceKeyProvisioner, type DurableWorkspaceKeyProvisioningRecord, type DurableWorkspaceKeyRecord, type DurableWorkspaceKeyScope, type DurableWorkspaceKeyStore, type WorkspaceKeyIdentity, type WorkspaceKeyProduct, type WorkspaceKeyStatus, type WorkspaceKeyUsage, type WorkspaceRuntimeKey, } from './identity-bound';

package/dist/billing/index.js

@@ -3,7 +3,7 @@ import {
   createPlatformBalanceManager,
   createTcloudKeyProvisioner,
   createWorkspaceKeyManager
-} from "../chunk-TS2ZIB53.js";
+} from "../chunk-4ZJYNI53.js";
 export {
   createIdentityBoundWorkspaceKeyManager,
   createPlatformBalanceManager,

package/dist/chat-routes/index.js

@@ -1148,6 +1148,7 @@ function createProtectedRuntimeChatProducer(options) {
           }
         });
         let completed = false;
+        let streamedText = "";
         for await (const event of streamAgentTurn(
           { kind: "executor", factory, profile },
           { prompt: options.prompt },
@@ -1157,6 +1158,7 @@ function createProtectedRuntimeChatProducer(options) {
             timeoutMs: Math.max(1, options.grant.deadlineAtMs - Date.now())
           }
         )) {
+          if (event.type === "text_delta") streamedText += event.text;
           if (event.type === "text_delta" || event.type === "reasoning_delta") {
             await emit({ type: "message.part.updated", data: {
               part: { id: event.type, type: event.type === "text_delta" ? "text" : "reasoning" },
@@ -1165,6 +1167,17 @@ function createProtectedRuntimeChatProducer(options) {
           }
           if (event.type === "final") {
             if (event.status !== "completed") throw new Error(`Protected execution ${event.status}`);
+            if (event.text !== void 0) {
+              if (!event.text.startsWith(streamedText)) {
+                throw new Error("Protected execution revised already streamed text");
+              }
+              const suffix = event.text.slice(streamedText.length);
+              if (suffix) await emit({ type: "message.part.updated", data: {
+                part: { id: "text_delta", type: "text" },
+                delta: suffix
+              } });
+              streamedText = event.text;
+            }
             completed = true;
             await emit({ type: "result", data: { finalText: event.text } });
           }