@tangle-network/agent-app 0.50.3 → 0.50.5

package/dist/{chunk-3NM4GCAY.js → chunk-DPO7FGCN.js}

@@ -17,7 +17,7 @@ function buildUserTextParts(text, turnId) {
 }
 function messageHasTurnId(message, turnId) {
   for (const part of message.parts ?? []) {
-    if (part && typeof part === "object" && String(part.turnId ?? "") === turnId) {
+    if (part && typeof part === "object" && "turnId" in part && String(part.turnId ?? "") === turnId) {
       return true;
     }
   }
@@ -33,10 +33,11 @@ function resolveChatTurn(input) {
   );
   if (reusableIndex >= 0) {
     const reusedId = existingMessages[reusableIndex]?.id;
+    const priorMessages = existingMessages.slice(0, reusableIndex);
     return {
-      turnIndex: countUserMessages(existingMessages.slice(0, reusableIndex)),
+      turnIndex: countUserMessages(priorMessages),
       shouldInsertUserMessage: false,
-      priorMessages: existingMessages.slice(0, reusableIndex),
+      priorMessages,
       userParts: buildUserTextParts(userContent, turnId),
       ...typeof reusedId === "string" && reusedId ? { reusedUserMessageId: reusedId } : {}
     };
@@ -44,7 +45,7 @@ function resolveChatTurn(input) {
   return {
     turnIndex: countUserMessages(existingMessages),
     shouldInsertUserMessage: true,
-    priorMessages: existingMessages,
+    priorMessages: existingMessages.slice(),
     userParts: buildUserTextParts(userContent, turnId)
   };
 }
@@ -65,7 +66,9 @@ function findReusableUserMessageIndex(messages, userContent, turnId, hasRunningT
   return -1;
 }
 function countUserMessages(messages) {
-  return messages.filter((message) => message.role === "user").length;
+  let count = 0;
+  for (const message of messages) if (message.role === "user") count++;
+  return count;
 }
 
 // src/stream/turn-observation.ts
@@ -167,4 +170,4 @@ export {
   observeTurnEvent,
   consumeTurnStream
 };
-//# sourceMappingURL=chunk-3NM4GCAY.js.map
+//# sourceMappingURL=chunk-DPO7FGCN.js.map

package/dist/chunk-DPO7FGCN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/stream/turn-identity.ts","../src/stream/turn-observation.ts"],"sourcesContent":["import type { JsonRecord } from './stream-normalizer'\n\n/** Minimum read-only shape; typed chat parts need no dictionary index signature. */\ninterface TurnIdentityMessage {\n  readonly id: string\n  readonly role: 'user' | 'assistant' | 'system' | 'tool'\n  readonly content: string\n  readonly parts: readonly object[] | null\n}\n\n/** Retained compatibility shape for callers using unstructured message records. */\nexport interface PersistedChatMessageForTurn extends TurnIdentityMessage {\n  parts: Array<Record<string, unknown>> | null\n}\n\n/** Represent a chat turn with resolved user message insertion and prior message context */\nexport interface ResolvedChatTurn<Message extends TurnIdentityMessage = PersistedChatMessageForTurn> {\n  turnIndex: number\n  shouldInsertUserMessage: boolean\n  priorMessages: Message[]\n  userParts: JsonRecord[]\n  /** The id of the user row this turn REUSES (retry dedup), when one was\n   *  found. Absent on the insert path, where no row exists yet.\n   *\n   *  The reused row is deliberately EXCLUDED from `priorMessages` (it is this\n   *  turn's own user message, not prior context), so this field is the only\n   *  way a caller can name it. */\n  reusedUserMessageId?: string\n}\n\n/** Normalize and validate a client turn ID string ensuring it meets format and length requirements */\nexport function normalizeClientTurnId(value: unknown): string | undefined {\n  if (value === undefined || value === null) return undefined\n  if (typeof value !== 'string') throw new Error('turnId must be a string')\n  const trimmed = value.trim()\n  if (!trimmed) throw new Error('turnId must not be blank')\n  if (trimmed.length > 160) throw new Error('turnId is too long')\n  if (!/^[A-Za-z0-9:_-]+$/.test(trimmed)) {\n    throw new Error('turnId contains unsupported characters')\n  }\n  return trimmed\n}\n\n/** Build an array of text parts with optional turn ID for user input */\nexport function buildUserTextParts(text: string, turnId: string | undefined): JsonRecord[] {\n  const part: JsonRecord = { type: 'text', text }\n  if (turnId) part.turnId = turnId\n  return [part]\n}\n\n/** Resolve whether a message contains any part with the specified turn ID */\nexport function messageHasTurnId(message: Pick<TurnIdentityMessage, 'parts'>, turnId: string): boolean {\n  for (const part of message.parts ?? []) {\n    if (part && typeof part === 'object' && 'turnId' in part && String(part.turnId ?? '') === turnId) {\n      return true\n    }\n  }\n  return false\n}\n\n/** Resolve a chat turn by determining message reuse and constructing user message parts */\nexport function resolveChatTurn<Message extends TurnIdentityMessage>(input: {\n  existingMessages: readonly Message[]\n  userContent: string\n  turnId?: string\n  /** True when the thread has a turn still RUNNING in the turn-event buffer\n   *  (`turnStore.listRunning(threadId)`).\n   *\n   *  Without incremental persistence the trailing row of a thread mid-turn is\n   *  always the user row, so the content fallback below could assume it. With\n   *  incremental persistence the assistant row lands seconds into the turn, so\n   *  a retry of that same turn finds an ASSISTANT row trailing and would\n   *  insert a duplicate user row.\n   *\n   *  This flag is the discriminator that keeps both cases right, and it needs\n   *  no new state: an assistant row trailing a turn that is still running is\n   *  that turn's in-flight draft (walk past it — this is a retry), whereas an\n   *  assistant row trailing a SETTLED turn is a completed answer (stop — the\n   *  user genuinely repeated a message and deserves a new turn). */\n  hasRunningTurn?: boolean\n}): ResolvedChatTurn<Message> {\n  const { existingMessages, userContent, turnId } = input\n  const reusableIndex = findReusableUserMessageIndex(\n    existingMessages,\n    userContent,\n    turnId,\n    input.hasRunningTurn === true,\n  )\n  if (reusableIndex >= 0) {\n    // Guarded read: `id` is typed `string`, but these rows come from a product\n    // store the shell does not validate, so an adapter that omits it must\n    // surface as \"no id\" rather than as the string \"undefined\".\n    const reusedId = existingMessages[reusableIndex]?.id\n    const priorMessages = existingMessages.slice(0, reusableIndex)\n    return {\n      turnIndex: countUserMessages(priorMessages),\n      shouldInsertUserMessage: false,\n      priorMessages,\n      userParts: buildUserTextParts(userContent, turnId),\n      ...(typeof reusedId === 'string' && reusedId ? { reusedUserMessageId: reusedId } : {}),\n    }\n  }\n\n  return {\n    turnIndex: countUserMessages(existingMessages),\n    shouldInsertUserMessage: true,\n    priorMessages: existingMessages.slice(),\n    userParts: buildUserTextParts(userContent, turnId),\n  }\n}\n\nfunction findReusableUserMessageIndex(\n  messages: readonly TurnIdentityMessage[],\n  userContent: string,\n  turnId: string | undefined,\n  hasRunningTurn: boolean,\n): number {\n  if (turnId) {\n    for (let index = messages.length - 1; index >= 0; index -= 1) {\n      const message = messages[index]\n      if (message?.role === 'user' && messageHasTurnId(message, turnId)) return index\n    }\n    // A caller-supplied id is authoritative. A different id with identical\n    // text is a deliberate new turn, while a transport retry reuses the same\n    // id and takes the match above. Falling through to content dedup here lets\n    // an unrelated abandoned running row swallow an intentional repeat.\n    return -1\n  }\n\n  // Content fallback for a client that sends no turnId. Only the trailing rows\n  // of a turn still RUNNING are walked past (they are that turn's incrementally\n  // persisted assistant draft); a settled assistant row still ends the scan, so\n  // a user who genuinely repeats a message gets a new turn exactly as before.\n  let index = messages.length - 1\n  if (hasRunningTurn) {\n    while (index >= 0 && messages[index]?.role === 'assistant') index -= 1\n  }\n  const latest = index >= 0 ? messages[index] : undefined\n  if (latest?.role === 'user' && latest.content === userContent) return index\n\n  return -1\n}\n\nfunction countUserMessages(messages: readonly TurnIdentityMessage[]): number {\n  let count = 0\n  for (const message of messages) if (message.role === 'user') count++\n  return count\n}\n","/** Read-side checkpoints for native chat NDJSON. This never submits or cancels work. */\nexport interface TurnObservation {\n  schema: 'turn-observation-v1'\n  streamId: string | null\n  /** Replay ordinals only. Unsequenced live frames cannot advance this cursor. */\n  lastSeq: number\n  outcome: 'completed' | 'failed' | null\n  replayStatus: string | null\n  eventCount: number\n}\n\nexport function parseTurnObservation(value?: unknown): TurnObservation {\n  if (value === undefined) return {\n    schema: 'turn-observation-v1', streamId: null, lastSeq: 0,\n    outcome: null, replayStatus: null, eventCount: 0,\n  }\n  if (!value || typeof value !== 'object' || Array.isArray(value)) throw new TypeError('Invalid turn observation')\n  const v = value as Record<string, unknown>\n  if (v.schema !== 'turn-observation-v1'\n    || !(v.streamId === null || (typeof v.streamId === 'string' && /^[A-Za-z0-9_-]+$/.test(v.streamId)))\n    || !Number.isSafeInteger(v.lastSeq) || Number(v.lastSeq) < 0\n    || !Number.isSafeInteger(v.eventCount) || Number(v.eventCount) < 0\n    || !(v.outcome === null || v.outcome === 'completed' || v.outcome === 'failed')\n    || !(v.replayStatus === null || typeof v.replayStatus === 'string')\n    || (v.streamId === null && Number(v.lastSeq) > 0)) throw new TypeError('Invalid turn observation')\n  return {\n    schema: 'turn-observation-v1', streamId: v.streamId as string | null,\n    lastSeq: Number(v.lastSeq), outcome: v.outcome as TurnObservation['outcome'],\n    replayStatus: v.replayStatus as string | null, eventCount: Number(v.eventCount),\n  }\n}\n\nexport interface TurnObservationUpdate {\n  checkpoint: TurnObservation\n  /** False only for an already-checkpointed replay ordinal. */\n  accepted: boolean\n  event: Record<string, unknown>\n}\n\n/** Reduce an observed frame. Ordered replay gaps are errors, not silent lost work. */\nexport function observeTurnEvent(previous: TurnObservation, raw: unknown): TurnObservationUpdate {\n  const checkpoint = parseTurnObservation(previous)\n  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) throw new TypeError('Turn frame must be an object')\n  const outer = raw as Record<string, unknown>\n  const inner = outer.kind === 'event' ? outer.event : outer\n  if (!inner || typeof inner !== 'object' || Array.isArray(inner)) throw new TypeError('Invalid turn event envelope')\n  const event = inner as Record<string, unknown>\n  if (typeof event.type !== 'string' || !event.type) throw new TypeError('Turn frame requires a type')\n\n  // Even a duplicate marker must not switch which execution we are observing.\n  if (event.type === 'turn') {\n    if (typeof event.turnId !== 'string' || !/^[A-Za-z0-9_-]+$/.test(event.turnId)) throw new TypeError('Invalid stream identity')\n    if (checkpoint.streamId !== null && checkpoint.streamId !== event.turnId) throw new Error('Replay stream identity changed')\n    checkpoint.streamId = event.turnId\n  }\n  const seq = outer.seq\n  if (seq !== undefined && seq !== -1) {\n    if (!Number.isSafeInteger(seq) || Number(seq) < 1) throw new TypeError('Invalid replay ordinal')\n    if (checkpoint.streamId === null) throw new Error('Replay ordinal arrived before stream identity')\n    if (Number(seq) <= checkpoint.lastSeq) return { checkpoint, accepted: false, event }\n    if (Number(seq) !== checkpoint.lastSeq + 1) throw new Error('Replay has a gap; retain the checkpoint and inspect durable history')\n    checkpoint.lastSeq = Number(seq)\n  } else if (seq === -1 && event.type !== 'turn_status') {\n    throw new TypeError('Only a turn-status sentinel may have ordinal -1')\n  }\n\n  if (event.type === 'error' || event.type === 'session.run.failed') checkpoint.outcome = 'failed'\n  if (event.type === 'session.run.completed' && checkpoint.outcome !== 'failed') checkpoint.outcome = 'completed'\n  if (event.type === 'turn_status') {\n    if (typeof event.status !== 'string') throw new TypeError('Turn status requires a value')\n    checkpoint.replayStatus = event.status\n    if (['error', 'failed', 'aborted', 'cancelled'].includes(event.status)) checkpoint.outcome = 'failed'\n    if (['complete', 'completed'].includes(event.status) && checkpoint.outcome !== 'failed') checkpoint.outcome = 'completed'\n  }\n  checkpoint.eventCount += 1\n  return { checkpoint, accepted: true, event }\n}\n\nexport interface ConsumeTurnStreamOptions {\n  checkpoint?: TurnObservation\n  /** Commit evidence and its checkpoint durably before acknowledging this frame. */\n  commit(update: TurnObservationUpdate): Promise<void>\n  /** Bound untrusted frame memory, not total run duration or total transcript size. */\n  maxFrameBytes?: number\n}\n\n/**\n * Consume one viewing connection. EOF without a terminal event stays incomplete.\n * A disconnect/abort propagates; the last committed checkpoint remains resumable.\n * The caller owns network observation windows separately from execution deadlines.\n */\nexport async function consumeTurnStream(\n  body: AsyncIterable<Uint8Array>,\n  options: ConsumeTurnStreamOptions,\n): Promise<TurnObservation> {\n  const maxFrameBytes = options.maxFrameBytes ?? 4 * 1024 * 1024\n  if (!Number.isSafeInteger(maxFrameBytes) || maxFrameBytes < 1) throw new RangeError('Frame byte limit must be positive')\n  let state = parseTurnObservation(options.checkpoint)\n  const decoder = new TextDecoder('utf-8', { fatal: true })\n  let pending = ''\n  let frameBytes = 0\n  async function accept(line: string): Promise<void> {\n    if (!line.trim()) return\n    const update = observeTurnEvent(state, JSON.parse(line))\n    if (update.accepted) await options.commit(update)\n    state = update.checkpoint\n  }\n  for await (const chunk of body) {\n    // Count bytes before decoding: a malicious unterminated frame cannot grow\n    // without bound, and splitting UTF-8 characters across chunks stays valid.\n    let start = 0\n    for (let end = 0; end < chunk.length; end += 1) {\n      if (chunk[end] !== 10) continue\n      frameBytes += end - start\n      if (frameBytes > maxFrameBytes) throw new RangeError('Turn frame exceeds byte limit')\n      pending += decoder.decode(chunk.subarray(start, end + 1), { stream: true })\n      await accept(pending)\n      pending = ''; frameBytes = 0; start = end + 1\n    }\n    frameBytes += chunk.length - start\n    if (frameBytes > maxFrameBytes) throw new RangeError('Turn frame exceeds byte limit')\n    pending += decoder.decode(chunk.subarray(start), { stream: true })\n  }\n  pending += decoder.decode()\n  await accept(pending)\n  return state\n}\n"],"mappings":";AA+BO,SAAS,sBAAsB,OAAoC;AACxE,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI,OAAO,UAAU,SAAU,OAAM,IAAI,MAAM,yBAAyB;AACxE,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,0BAA0B;AACxD,MAAI,QAAQ,SAAS,IAAK,OAAM,IAAI,MAAM,oBAAoB;AAC9D,MAAI,CAAC,oBAAoB,KAAK,OAAO,GAAG;AACtC,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AACA,SAAO;AACT;AAGO,SAAS,mBAAmB,MAAc,QAA0C;AACzF,QAAM,OAAmB,EAAE,MAAM,QAAQ,KAAK;AAC9C,MAAI,OAAQ,MAAK,SAAS;AAC1B,SAAO,CAAC,IAAI;AACd;AAGO,SAAS,iBAAiB,SAA6C,QAAyB;AACrG,aAAW,QAAQ,QAAQ,SAAS,CAAC,GAAG;AACtC,QAAI,QAAQ,OAAO,SAAS,YAAY,YAAY,QAAQ,OAAO,KAAK,UAAU,EAAE,MAAM,QAAQ;AAChG,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,gBAAqD,OAmBvC;AAC5B,QAAM,EAAE,kBAAkB,aAAa,OAAO,IAAI;AAClD,QAAM,gBAAgB;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM,mBAAmB;AAAA,EAC3B;AACA,MAAI,iBAAiB,GAAG;AAItB,UAAM,WAAW,iBAAiB,aAAa,GAAG;AAClD,UAAM,gBAAgB,iBAAiB,MAAM,GAAG,aAAa;AAC7D,WAAO;AAAA,MACL,WAAW,kBAAkB,aAAa;AAAA,MAC1C,yBAAyB;AAAA,MACzB;AAAA,MACA,WAAW,mBAAmB,aAAa,MAAM;AAAA,MACjD,GAAI,OAAO,aAAa,YAAY,WAAW,EAAE,qBAAqB,SAAS,IAAI,CAAC;AAAA,IACtF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,WAAW,kBAAkB,gBAAgB;AAAA,IAC7C,yBAAyB;AAAA,IACzB,eAAe,iBAAiB,MAAM;AAAA,IACtC,WAAW,mBAAmB,aAAa,MAAM;AAAA,EACnD;AACF;AAEA,SAAS,6BACP,UACA,aACA,QACA,gBACQ;AACR,MAAI,QAAQ;AACV,aAASA,SAAQ,SAAS,SAAS,GAAGA,UAAS,GAAGA,UAAS,GAAG;AAC5D,YAAM,UAAU,SAASA,MAAK;AAC9B,UAAI,SAAS,SAAS,UAAU,iBAAiB,SAAS,MAAM,EAAG,QAAOA;AAAA,IAC5E;AAKA,WAAO;AAAA,EACT;AAMA,MAAI,QAAQ,SAAS,SAAS;AAC9B,MAAI,gBAAgB;AAClB,WAAO,SAAS,KAAK,SAAS,KAAK,GAAG,SAAS,YAAa,UAAS;AAAA,EACvE;AACA,QAAM,SAAS,SAAS,IAAI,SAAS,KAAK,IAAI;AAC9C,MAAI,QAAQ,SAAS,UAAU,OAAO,YAAY,YAAa,QAAO;AAEtE,SAAO;AACT;AAEA,SAAS,kBAAkB,UAAkD;AAC3E,MAAI,QAAQ;AACZ,aAAW,WAAW,SAAU,KAAI,QAAQ,SAAS,OAAQ;AAC7D,SAAO;AACT;;;ACxIO,SAAS,qBAAqB,OAAkC;AACrE,MAAI,UAAU,OAAW,QAAO;AAAA,IAC9B,QAAQ;AAAA,IAAuB,UAAU;AAAA,IAAM,SAAS;AAAA,IACxD,SAAS;AAAA,IAAM,cAAc;AAAA,IAAM,YAAY;AAAA,EACjD;AACA,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,OAAM,IAAI,UAAU,0BAA0B;AAC/G,QAAM,IAAI;AACV,MAAI,EAAE,WAAW,yBACZ,EAAE,EAAE,aAAa,QAAS,OAAO,EAAE,aAAa,YAAY,mBAAmB,KAAK,EAAE,QAAQ,MAC9F,CAAC,OAAO,cAAc,EAAE,OAAO,KAAK,OAAO,EAAE,OAAO,IAAI,KACxD,CAAC,OAAO,cAAc,EAAE,UAAU,KAAK,OAAO,EAAE,UAAU,IAAI,KAC9D,EAAE,EAAE,YAAY,QAAQ,EAAE,YAAY,eAAe,EAAE,YAAY,aACnE,EAAE,EAAE,iBAAiB,QAAQ,OAAO,EAAE,iBAAiB,aACtD,EAAE,aAAa,QAAQ,OAAO,EAAE,OAAO,IAAI,EAAI,OAAM,IAAI,UAAU,0BAA0B;AACnG,SAAO;AAAA,IACL,QAAQ;AAAA,IAAuB,UAAU,EAAE;AAAA,IAC3C,SAAS,OAAO,EAAE,OAAO;AAAA,IAAG,SAAS,EAAE;AAAA,IACvC,cAAc,EAAE;AAAA,IAA+B,YAAY,OAAO,EAAE,UAAU;AAAA,EAChF;AACF;AAUO,SAAS,iBAAiB,UAA2B,KAAqC;AAC/F,QAAM,aAAa,qBAAqB,QAAQ;AAChD,MAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG,OAAM,IAAI,UAAU,8BAA8B;AAC7G,QAAM,QAAQ;AACd,QAAM,QAAQ,MAAM,SAAS,UAAU,MAAM,QAAQ;AACrD,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,OAAM,IAAI,UAAU,6BAA6B;AAClH,QAAM,QAAQ;AACd,MAAI,OAAO,MAAM,SAAS,YAAY,CAAC,MAAM,KAAM,OAAM,IAAI,UAAU,4BAA4B;AAGnG,MAAI,MAAM,SAAS,QAAQ;AACzB,QAAI,OAAO,MAAM,WAAW,YAAY,CAAC,mBAAmB,KAAK,MAAM,MAAM,EAAG,OAAM,IAAI,UAAU,yBAAyB;AAC7H,QAAI,WAAW,aAAa,QAAQ,WAAW,aAAa,MAAM,OAAQ,OAAM,IAAI,MAAM,gCAAgC;AAC1H,eAAW,WAAW,MAAM;AAAA,EAC9B;AACA,QAAM,MAAM,MAAM;AAClB,MAAI,QAAQ,UAAa,QAAQ,IAAI;AACnC,QAAI,CAAC,OAAO,cAAc,GAAG,KAAK,OAAO,GAAG,IAAI,EAAG,OAAM,IAAI,UAAU,wBAAwB;AAC/F,QAAI,WAAW,aAAa,KAAM,OAAM,IAAI,MAAM,+CAA+C;AACjG,QAAI,OAAO,GAAG,KAAK,WAAW,QAAS,QAAO,EAAE,YAAY,UAAU,OAAO,MAAM;AACnF,QAAI,OAAO,GAAG,MAAM,WAAW,UAAU,EAAG,OAAM,IAAI,MAAM,qEAAqE;AACjI,eAAW,UAAU,OAAO,GAAG;AAAA,EACjC,WAAW,QAAQ,MAAM,MAAM,SAAS,eAAe;AACrD,UAAM,IAAI,UAAU,iDAAiD;AAAA,EACvE;AAEA,MAAI,MAAM,SAAS,WAAW,MAAM,SAAS,qBAAsB,YAAW,UAAU;AACxF,MAAI,MAAM,SAAS,2BAA2B,WAAW,YAAY,SAAU,YAAW,UAAU;AACpG,MAAI,MAAM,SAAS,eAAe;AAChC,QAAI,OAAO,MAAM,WAAW,SAAU,OAAM,IAAI,UAAU,8BAA8B;AACxF,eAAW,eAAe,MAAM;AAChC,QAAI,CAAC,SAAS,UAAU,WAAW,WAAW,EAAE,SAAS,MAAM,MAAM,EAAG,YAAW,UAAU;AAC7F,QAAI,CAAC,YAAY,WAAW,EAAE,SAAS,MAAM,MAAM,KAAK,WAAW,YAAY,SAAU,YAAW,UAAU;AAAA,EAChH;AACA,aAAW,cAAc;AACzB,SAAO,EAAE,YAAY,UAAU,MAAM,MAAM;AAC7C;AAeA,eAAsB,kBACpB,MACA,SAC0B;AAC1B,QAAM,gBAAgB,QAAQ,iBAAiB,IAAI,OAAO;AAC1D,MAAI,CAAC,OAAO,cAAc,aAAa,KAAK,gBAAgB,EAAG,OAAM,IAAI,WAAW,mCAAmC;AACvH,MAAI,QAAQ,qBAAqB,QAAQ,UAAU;AACnD,QAAM,UAAU,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC;AACxD,MAAI,UAAU;AACd,MAAI,aAAa;AACjB,iBAAe,OAAO,MAA6B;AACjD,QAAI,CAAC,KAAK,KAAK,EAAG;AAClB,UAAM,SAAS,iBAAiB,OAAO,KAAK,MAAM,IAAI,CAAC;AACvD,QAAI,OAAO,SAAU,OAAM,QAAQ,OAAO,MAAM;AAChD,YAAQ,OAAO;AAAA,EACjB;AACA,mBAAiB,SAAS,MAAM;AAG9B,QAAI,QAAQ;AACZ,aAAS,MAAM,GAAG,MAAM,MAAM,QAAQ,OAAO,GAAG;AAC9C,UAAI,MAAM,GAAG,MAAM,GAAI;AACvB,oBAAc,MAAM;AACpB,UAAI,aAAa,cAAe,OAAM,IAAI,WAAW,+BAA+B;AACpF,iBAAW,QAAQ,OAAO,MAAM,SAAS,OAAO,MAAM,CAAC,GAAG,EAAE,QAAQ,KAAK,CAAC;AAC1E,YAAM,OAAO,OAAO;AACpB,gBAAU;AAAI,mBAAa;AAAG,cAAQ,MAAM;AAAA,IAC9C;AACA,kBAAc,MAAM,SAAS;AAC7B,QAAI,aAAa,cAAe,OAAM,IAAI,WAAW,+BAA+B;AACpF,eAAW,QAAQ,OAAO,MAAM,SAAS,KAAK,GAAG,EAAE,QAAQ,KAAK,CAAC;AAAA,EACnE;AACA,aAAW,QAAQ,OAAO;AAC1B,QAAM,OAAO,OAAO;AACpB,SAAO;AACT;","names":["index"]}

package/dist/{chunk-GEHULTVU.js → chunk-P5ZJQKOI.js}

@@ -172,18 +172,18 @@ var CODES = {
   [WORKSPACE_SANDBOX_UNRECOVERABLE]: { snapshotUsable: false }
 };
 var ACTIONS = {
-  confirmation_required: { replacementChosen: false },
-  deletion_declined: { replacementChosen: false },
+  confirmation_required: { replacementChosen: false, canDecide: true },
+  deletion_declined: { replacementChosen: false, canDecide: true },
   replacement_authorized: { replacementChosen: false },
   snapshot_replacement_authorized: { replacementChosen: false },
-  replacement_started: { replacementChosen: true },
+  replacement_started: { replacementChosen: true, completedAs: "replacement_completed" },
   replacement_completed: { replacementChosen: true },
-  snapshot_replacement_started: { replacementChosen: true },
-  snapshot_restore_failed: { replacementChosen: true },
+  snapshot_replacement_started: { replacementChosen: true, completedAs: "snapshot_replacement_completed" },
+  snapshot_restore_failed: { replacementChosen: true, completedAs: "snapshot_replacement_completed" },
   snapshot_replacement_completed: { replacementChosen: true },
-  missing_replacement_started: { replacementChosen: true },
+  missing_replacement_started: { replacementChosen: true, completedAs: "missing_replacement_completed" },
   missing_replacement_completed: { replacementChosen: true },
-  unrecoverable_replacement_started: { replacementChosen: true },
+  unrecoverable_replacement_started: { replacementChosen: true, completedAs: "unrecoverable_replacement_completed" },
   unrecoverable_replacement_completed: { replacementChosen: true }
 };
 var WorkspaceSandboxRecoveryRequiredError = class extends Error {
@@ -313,50 +313,41 @@ function shouldRestoreWorkspaceSandboxRecovery(recovery) {
   return !!preferredWorkspaceSandboxRecoveryBoxKey(recovery) && recovery.snapshot.availability === "available";
 }
 function createWorkspaceSandboxRecoveryManager(store) {
-  async function record(workspaceId, recovery) {
-    await store.write(workspaceId, recovery);
+  async function transition(workspaceId, expected, next) {
+    if (store.compareAndSet) {
+      if (!await store.compareAndSet(workspaceId, expected, next))
+        throw new Error("Sandbox recovery changed; reload before retrying its transition");
+    } else {
+      await store.write(workspaceId, next);
+    }
+    return next;
   }
   return {
-    read: store.read,
-    record,
+    read: (workspaceId) => store.read(workspaceId),
+    record: (workspaceId, recovery) => store.write(workspaceId, recovery),
     async decide({ workspaceId, sandboxId, decision, replacementBoxKey }) {
       const current = await store.read(workspaceId);
-      if (!current || current.sandboxId !== sandboxId) return void 0;
-      const next = {
+      if (!current || current.sandboxId !== sandboxId || !("canDecide" in ACTIONS[current.action])) return void 0;
+      if (decision === "replace" && !asNonEmptyString(replacementBoxKey))
+        throw new Error("Sandbox replacement authorization requires a fresh replacement box key");
+      return transition(workspaceId, current, {
         ...current,
         action: decision === "replace" ? current.snapshot.availability === "available" ? "snapshot_replacement_authorized" : "replacement_authorized" : "deletion_declined",
         confirmedAt: (/* @__PURE__ */ new Date()).toISOString(),
-        ...decision === "replace" && replacementBoxKey ? { replacementBoxKey } : {}
-      };
-      await record(workspaceId, next);
-      return next;
+        ...decision === "replace" ? { replacementBoxKey } : {}
+      });
     },
-    async complete({ workspaceId, replacementSandboxId }) {
+    async complete({ workspaceId, replacementSandboxId, replacementBoxKey }) {
       const current = await store.read(workspaceId);
-      if (!current) return void 0;
-      const next = {
-        ...current,
-        action: completionFor(current.action),
-        replacementSandboxId
-      };
-      await record(workspaceId, next);
-      return next;
+      if (!current || !asNonEmptyString(current.replacementBoxKey)) return void 0;
+      if (replacementBoxKey !== void 0 && current.replacementBoxKey !== replacementBoxKey) return void 0;
+      const policy = ACTIONS[current.action];
+      if (!("completedAs" in policy)) return void 0;
+      if (!asNonEmptyString(replacementSandboxId)) throw new Error("A replacement sandbox id is required");
+      return transition(workspaceId, current, { ...current, action: policy.completedAs, replacementSandboxId });
     }
   };
 }
-function completionFor(action) {
-  switch (action) {
-    case "missing_replacement_started":
-      return "missing_replacement_completed";
-    case "unrecoverable_replacement_started":
-      return "unrecoverable_replacement_completed";
-    case "snapshot_replacement_started":
-    case "snapshot_replacement_authorized":
-      return "snapshot_replacement_completed";
-    default:
-      return "replacement_completed";
-  }
-}
 var WORKSPACE_SANDBOX_RECOVERY_ACTIONS = Object.keys(
   ACTIONS
 );
@@ -2845,4 +2836,4 @@ export {
   isTerminalPromptEvent,
   detectInteractiveQuestion
 };
-//# sourceMappingURL=chunk-GEHULTVU.js.map
+//# sourceMappingURL=chunk-P5ZJQKOI.js.map