@tangle-network/agent-gateway 0.7.1 → 0.8.1

package/dist/index.js

@@ -4,28 +4,48 @@ import {
 } from "./chunk-5O75YDQP.js";
 import {
   A2A_ERROR_CODES,
-  CompositeObserver,
-  ConsoleObserver,
   InMemoryPushNotificationStore,
   InMemoryTaskStore,
+  MPP_CHARGE_PROTOCOL_VERSION,
+  MemoryPaymentOperations,
+  MemoryPaymentRecoveryStore,
+  PAYMENT_PROTOCOL_VERSION,
+  PAYMENT_RECOVERY_VERSION,
+  PaymentRecoveryFenceError,
   SqlPushNotificationStore,
   createAgentGateway,
   defaultVerifyApiKey,
+  deliverDemoPushNotifications,
   deliverPushNotifications,
   detectInjection,
   filterConsumerMessages,
   filterConsumerMessagesStrict,
-  generateRequestId,
+  hasPendingPaymentRecovery,
+  inspectTaskExecution,
   isApiKeyAuthEnabled,
   isMppAuthEnabled,
+  mppPaymentCredential,
+  mppPaymentOperationId,
+  mppReplayNonceKey,
+  reclaimPayment,
+  recoverPayment,
+  recoverPayments,
   redactSystemPromptFromOutput,
+  validatePushNotificationUrl,
   verifyMpp,
+  verifyMppCredential,
   verifyX402
-} from "./chunk-Q4YAIEZY.js";
+} from "./chunk-C7Z2BRYV.js";
 import {
   KvNonceStore,
-  MemoryNonceStore
-} from "./chunk-M7ZJAK4K.js";
+  MemoryNonceStore,
+  isAtomicNonceStore
+} from "./chunk-J5SDVHOL.js";
+import {
+  CompositeObserver,
+  ConsoleObserver,
+  generateRequestId
+} from "./chunk-GITV7CPT.js";
 import {
   createPublishRoutes
 } from "./chunk-5ZJPIIIV.js";
@@ -35,6 +55,96 @@ import {
   checkRateLimit
 } from "./chunk-XCTXHZ76.js";
 
+// src/payment-recovery-sql.ts
+var TABLE_DDL = (table) => `
+  CREATE TABLE IF NOT EXISTS ${table} (
+    id TEXT PRIMARY KEY,
+    state TEXT NOT NULL,
+    next_attempt_at INTEGER NOT NULL,
+    revision INTEGER NOT NULL,
+    payload TEXT NOT NULL,
+    updated_at INTEGER NOT NULL
+  )
+`;
+var DUE_INDEX_DDL = (table) => `
+  CREATE INDEX IF NOT EXISTS idx_${table}_due
+  ON ${table} (state, next_attempt_at)
+`;
+var SqlPaymentRecoveryStore = class {
+  constructor(db, options = {}) {
+    this.db = db;
+    this.table = options.table ?? "payment_recovery";
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(this.table)) {
+      throw new Error("payment recovery table name is invalid");
+    }
+  }
+  db;
+  table;
+  /** Idempotent. Run this before the gateway starts accepting traffic. */
+  async migrate() {
+    await this.db.exec(TABLE_DDL(this.table));
+    await this.db.exec(DUE_INDEX_DDL(this.table));
+  }
+  async createIfAbsent(record) {
+    try {
+      const result = await this.db.exec(
+        `INSERT INTO ${this.table} (id, state, next_attempt_at, revision, payload, updated_at) VALUES (?, ?, ?, ?, ?, ?)`,
+        [
+          record.id,
+          record.state,
+          record.nextAttemptAt,
+          record.revision,
+          JSON.stringify(record),
+          record.updatedAt
+        ]
+      );
+      return result.rowsAffected === 1;
+    } catch (error) {
+      if (await this.get(record.id)) return false;
+      throw error;
+    }
+  }
+  async get(id) {
+    const rows = await this.db.query(
+      `SELECT payload FROM ${this.table} WHERE id = ?`,
+      [id]
+    );
+    return rows[0] ? parseRecord(rows[0].payload) : void 0;
+  }
+  async compareAndSet(expected, next) {
+    const result = await this.db.exec(
+      `UPDATE ${this.table} SET state = ?, next_attempt_at = ?, revision = ?, payload = ?, updated_at = ? WHERE id = ? AND revision = ?`,
+      [
+        next.state,
+        next.nextAttemptAt,
+        next.revision,
+        JSON.stringify(next),
+        next.updatedAt,
+        expected.id,
+        expected.revision
+      ]
+    );
+    return result.rowsAffected === 1;
+  }
+  async listDue(now, limit) {
+    if (!Number.isSafeInteger(limit) || limit <= 0) {
+      throw new Error("payment recovery scan limit must be a positive safe integer");
+    }
+    const rows = await this.db.query(
+      `SELECT payload FROM ${this.table} WHERE state <> ? AND next_attempt_at <= ? ORDER BY next_attempt_at ASC LIMIT ?`,
+      ["reconciled", now, limit]
+    );
+    return rows.map((row) => parseRecord(row.payload));
+  }
+};
+function parseRecord(payload) {
+  const value = JSON.parse(payload);
+  if (value.version !== 1 || !value.id || !Number.isSafeInteger(value.revision)) {
+    throw new Error("stored payment recovery record is invalid");
+  }
+  return value;
+}
+
 // src/a2a/task-store-sql.ts
 function d1ToSqlAdapter(db) {
   return {
@@ -60,7 +170,9 @@ var TASKS_TABLE_DDL = (table) => `
     context_id TEXT NOT NULL,
     state TEXT NOT NULL,
     payload TEXT NOT NULL,
-    updated_at INTEGER NOT NULL
+    updated_at INTEGER NOT NULL,
+    execution_request_id TEXT,
+    execution_lease_expires_at REAL
   )
 `;
 var CTX_INDEX_DDL = (table) => `
@@ -79,40 +191,187 @@ var SqlTaskStore = class {
   get table() {
     return this.opts.table ?? "a2a_tasks";
   }
+  async readRow(id) {
+    const rows = await this.db.query(
+      `SELECT payload, updated_at, execution_request_id, execution_lease_expires_at FROM ${this.table} WHERE id = ?`,
+      [id]
+    );
+    const row = rows[0];
+    return row ? {
+      payload: row.payload,
+      updatedAt: row.updated_at,
+      executionRequestId: row.execution_request_id ?? null,
+      executionLeaseExpiresAt: row.execution_lease_expires_at ?? null
+    } : void 0;
+  }
+  isExpired(updatedAt, task) {
+    return Date.now() - updatedAt > this.ttlMs && !hasPendingPaymentRecovery(task);
+  }
+  async deleteObservedRow(id, payload, updatedAt) {
+    const result = await this.db.exec(
+      `DELETE FROM ${this.table} WHERE id = ? AND payload = ? AND updated_at = ?`,
+      [id, payload, updatedAt]
+    );
+    return result.rowsAffected;
+  }
   /** Idempotent. Call once at deploy. */
   async migrate() {
     await this.db.exec(TASKS_TABLE_DDL(this.table));
+    for (const column of [
+      "execution_request_id TEXT",
+      "execution_lease_expires_at REAL"
+    ]) {
+      try {
+        await this.db.exec(`ALTER TABLE ${this.table} ADD COLUMN ${column}`);
+      } catch (error) {
+        const message = error instanceof Error ? error.message.toLowerCase() : String(error).toLowerCase();
+        if (!message.includes("duplicate column") && !message.includes("already exists")) throw error;
+      }
+    }
     await this.db.exec(CTX_INDEX_DDL(this.table));
   }
   async get(id) {
-    const rows = await this.db.query(
-      `SELECT payload, updated_at FROM ${this.table} WHERE id = ?`,
-      [id]
-    );
-    const row = rows[0];
+    const row = await this.readRow(id);
     if (!row) return void 0;
-    if (Date.now() - row.updated_at > this.ttlMs) {
-      void this.db.exec(`DELETE FROM ${this.table} WHERE id = ?`, [id]);
+    const task = JSON.parse(row.payload);
+    if (this.isExpired(row.updatedAt, task)) {
+      await this.deleteObservedRow(id, row.payload, row.updatedAt);
       return void 0;
     }
-    return JSON.parse(row.payload);
+    return task;
+  }
+  async insert(task) {
+    const payload = JSON.stringify(task);
+    const [executionRequestId, executionLeaseExpiresAt] = executionColumns(task);
+    const result = await this.db.exec(
+      `INSERT INTO ${this.table} (id, context_id, state, payload, updated_at, execution_request_id, execution_lease_expires_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?)`,
+      [
+        task.id,
+        task.contextId,
+        task.status.state,
+        payload,
+        Date.now(),
+        executionRequestId,
+        executionLeaseExpiresAt
+      ]
+    );
+    return result.rowsAffected;
   }
   async put(task) {
     const payload = JSON.stringify(task);
     const updatedAt = Date.now();
+    const [executionRequestId, executionLeaseExpiresAt] = executionColumns(task);
     const updated = await this.db.exec(
-      `UPDATE ${this.table} SET context_id = ?, state = ?, payload = ?, updated_at = ? WHERE id = ?`,
-      [task.contextId, task.status.state, payload, updatedAt, task.id]
+      `UPDATE ${this.table}
+       SET context_id = ?, state = ?, payload = ?, updated_at = ?,
+           execution_request_id = ?, execution_lease_expires_at = ?
+       WHERE id = ?`,
+      [
+        task.contextId,
+        task.status.state,
+        payload,
+        updatedAt,
+        executionRequestId,
+        executionLeaseExpiresAt,
+        task.id
+      ]
     );
     if (updated.rowsAffected === 0) {
       await this.db.exec(
-        `INSERT INTO ${this.table} (id, context_id, state, payload, updated_at) VALUES (?, ?, ?, ?, ?)`,
-        [task.id, task.contextId, task.status.state, payload, updatedAt]
+        `INSERT INTO ${this.table} (id, context_id, state, payload, updated_at, execution_request_id, execution_lease_expires_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?)`,
+        [
+          task.id,
+          task.contextId,
+          task.status.state,
+          payload,
+          updatedAt,
+          executionRequestId,
+          executionLeaseExpiresAt
+        ]
       );
     }
   }
+  async createIfAbsent(task) {
+    try {
+      return await this.insert(task) === 1;
+    } catch (error) {
+      const row = await this.readRow(task.id);
+      if (!row) throw error;
+      const existing = JSON.parse(row.payload);
+      if (!this.isExpired(row.updatedAt, existing)) return false;
+      await this.deleteObservedRow(task.id, row.payload, row.updatedAt);
+      try {
+        return await this.insert(task) === 1;
+      } catch (retryError) {
+        if (await this.get(task.id)) return false;
+        throw retryError;
+      }
+    }
+  }
+  async compareAndSet(expected, next) {
+    const expectedPayload = JSON.stringify(expected);
+    const payload = JSON.stringify(next);
+    const [executionRequestId, executionLeaseExpiresAt] = executionColumns(next);
+    const result = await this.db.exec(
+      `UPDATE ${this.table}
+       SET context_id = ?, state = ?, payload = ?, updated_at = ?,
+           execution_request_id = ?, execution_lease_expires_at = ?
+       WHERE id = ? AND payload = ?`,
+      [
+        next.contextId,
+        next.status.state,
+        payload,
+        Date.now(),
+        executionRequestId,
+        executionLeaseExpiresAt,
+        expected.id,
+        expectedPayload
+      ]
+    );
+    return result.rowsAffected === 1;
+  }
+  async compareAndSetExecution(expected, next, requestId, now) {
+    const expectedMarker = inspectTaskExecution(expected);
+    const nextMarker = inspectTaskExecution(next);
+    if (expectedMarker.state !== "valid" || nextMarker.state !== "valid" || expectedMarker.marker.requestId !== requestId || nextMarker.marker.requestId !== requestId || expectedMarker.marker.lease.expiresAt <= now || nextMarker.marker.lease.expiresAt <= now) return false;
+    const expectedPayload = JSON.stringify(expected);
+    const payload = JSON.stringify(next);
+    const updatedAt = Date.now();
+    const result = await this.db.exec(
+      `UPDATE ${this.table}
+       SET context_id = ?, state = ?, payload = ?, updated_at = ?,
+           execution_request_id = ?, execution_lease_expires_at = ?
+       WHERE id = ?
+         AND payload = ?
+         AND state = 'working'
+         AND (
+           (execution_request_id = ? AND execution_lease_expires_at > ?)
+           OR (execution_request_id IS NULL AND execution_lease_expires_at IS NULL)
+         )`,
+      [
+        next.contextId,
+        next.status.state,
+        payload,
+        updatedAt,
+        nextMarker.marker.requestId,
+        nextMarker.marker.lease.expiresAt,
+        expected.id,
+        expectedPayload,
+        requestId,
+        now
+      ]
+    );
+    return result.rowsAffected === 1;
+  }
   async delete(id) {
-    await this.db.exec(`DELETE FROM ${this.table} WHERE id = ?`, [id]);
+    const task = await this.get(id);
+    if (!task || hasPendingPaymentRecovery(task)) return;
+    await this.db.exec(
+      `DELETE FROM ${this.table} WHERE id = ? AND payload = ?`,
+      [id, JSON.stringify(task)]
+    );
   }
   /**
    * Lookup tasks by contextId — used by `tasks/resubscribe` and the multi-turn
@@ -126,9 +385,15 @@ var SqlTaskStore = class {
       [contextId]
     );
     const now = Date.now();
-    return rows.filter((r) => now - r.updated_at <= this.ttlMs).map((r) => JSON.parse(r.payload));
+    return rows.map((r) => ({ task: JSON.parse(r.payload), updatedAt: r.updated_at })).filter(
+      ({ task, updatedAt }) => now - updatedAt <= this.ttlMs || hasPendingPaymentRecovery(task)
+    ).map(({ task }) => task);
   }
 };
+function executionColumns(task) {
+  const inspection = inspectTaskExecution(task);
+  return inspection.state === "valid" ? [inspection.marker.requestId, inspection.marker.lease.expiresAt] : [null, null];
+}
 export {
   A2A_ERROR_CODES,
   CompositeObserver,
@@ -137,8 +402,15 @@ export {
   InMemoryTaskStore,
   KvNonceStore,
   KvRateLimitStore,
+  MPP_CHARGE_PROTOCOL_VERSION,
   MemoryNonceStore,
+  MemoryPaymentOperations,
+  MemoryPaymentRecoveryStore,
   MemoryRateLimitStore,
+  PAYMENT_PROTOCOL_VERSION,
+  PAYMENT_RECOVERY_VERSION,
+  PaymentRecoveryFenceError,
+  SqlPaymentRecoveryStore,
   SqlPushNotificationStore,
   SqlTaskStore,
   checkRateLimit,
@@ -147,16 +419,26 @@ export {
   createPublishRoutes,
   d1ToSqlAdapter,
   defaultVerifyApiKey,
+  deliverDemoPushNotifications,
   deliverPushNotifications,
   detectInjection,
   filterConsumerMessages,
   filterConsumerMessagesStrict,
   generateRequestId,
   isApiKeyAuthEnabled,
+  isAtomicNonceStore,
   isMppAuthEnabled,
+  mppPaymentCredential,
+  mppPaymentOperationId,
+  mppReplayNonceKey,
+  reclaimPayment,
+  recoverPayment,
+  recoverPayments,
   redactSystemPromptFromOutput,
+  validatePushNotificationUrl,
   verifyApiKeyFromStore,
   verifyMpp,
+  verifyMppCredential,
   verifyX402
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/a2a/task-store-sql.ts"],"sourcesContent":["/**\n * @stable\n *\n * Durable `TaskStore` against any SQL store. Adapter-agnostic: callers wire a\n * `SqlAdapter` against their driver (D1, postgres, sqlite, libSQL, Turso) and\n * the same store survives gateway restarts so an in-flight task (and its\n * artifacts) is recoverable after a Worker recycle.\n *\n * Schema is one table: tasks keyed by id with the full JSON payload, plus a\n * secondary index on `context_id` so `tasks/resubscribe` and conversational\n * lookups by context are O(log n). TTL is enforced at read time the same way\n * `InMemoryTaskStore` does — the gateway is single-writer per task id so a\n * stale row is invisible to callers regardless of when the row is physically\n * deleted.\n *\n * Why not bake in a specific driver? Hono workers run on Cloudflare (D1),\n * Node (pg / sqlite), Bun, Deno. Burning a hard dependency on one client\n * limits the gateway's reach. The adapter indirection costs ~5 lines per\n * driver in the consumer's code and keeps the package free of native deps.\n *\n * @example D1\n *   import { SqlTaskStore, d1ToSqlAdapter } from '@tangle-network/agent-gateway'\n *   const store = new SqlTaskStore(d1ToSqlAdapter(env.DB))\n *   await store.migrate()\n *   const gw = createAgentGateway({ ..., a2a: { taskStore: store } })\n *\n * @example libSQL / Turso\n *   import { createClient } from '@libsql/client'\n *   const client = createClient({ url: process.env.TURSO_URL!, authToken: process.env.TURSO_TOKEN! })\n *   const libsql: SqlAdapter = {\n *     exec: async (sql, params = []) => {\n *       const r = await client.execute({ sql, args: params as never[] })\n *       return { rowsAffected: Number(r.rowsAffected ?? 0) }\n *     },\n *     query: async (sql, params = []) => {\n *       const r = await client.execute({ sql, args: params as never[] })\n *       return r.rows as unknown as Record<string, unknown>[]\n *     },\n *   }\n *   const store = new SqlTaskStore(libsql)\n *   await store.migrate()\n */\n\nimport type { TaskStore } from './task-store'\nimport type { Task } from './types'\n\n/**\n * Minimal SQL driver shape — identical to agent-runtime's `SqlAdapter` so the\n * same wrapper code works for both packages. Parameter placeholders MUST be\n * `?` (positional); driver wrappers that use `$1`, `$2`, … should rewrite at\n * the adapter boundary (see node-postgres example in the durability docs).\n */\nexport interface SqlAdapter {\n  exec(sql: string, params?: readonly unknown[]): Promise<{ rowsAffected: number }>\n  query<TRow = Record<string, unknown>>(\n    sql: string,\n    params?: readonly unknown[],\n  ): Promise<TRow[]>\n}\n\n/**\n * Adapt a Cloudflare D1 binding to `SqlAdapter`. The package never imports\n * `@cloudflare/workers-types`; the binding's structural shape lines up via\n * TypeScript structural compatibility.\n */\nexport function d1ToSqlAdapter(db: D1DatabaseLike): SqlAdapter {\n  return {\n    async exec(sql, params = []) {\n      const stmt = db.prepare(sql)\n      const bound = params.length > 0 ? stmt.bind(...params) : stmt\n      const result = await bound.run()\n      const meta = (result as { meta?: { rows_written?: number; changes?: number } }).meta\n      return { rowsAffected: meta?.rows_written ?? meta?.changes ?? 0 }\n    },\n    async query<TRow>(sql: string, params: readonly unknown[] = []): Promise<TRow[]> {\n      const stmt = db.prepare(sql)\n      const bound = params.length > 0 ? stmt.bind(...params) : stmt\n      const result = await bound.all<TRow>()\n      return result.results ?? []\n    },\n  }\n}\n\nexport interface D1DatabaseLike {\n  prepare(sql: string): D1StmtLike\n}\nexport interface D1StmtLike {\n  bind(...params: unknown[]): D1StmtLike\n  run(): Promise<unknown>\n  all<TRow = unknown>(): Promise<{ results?: TRow[] }>\n}\n\nconst DEFAULT_TTL_MS = 60 * 60 * 1000\n\nconst TASKS_TABLE_DDL = (table: string) => `\n  CREATE TABLE IF NOT EXISTS ${table} (\n    id TEXT PRIMARY KEY,\n    context_id TEXT NOT NULL,\n    state TEXT NOT NULL,\n    payload TEXT NOT NULL,\n    updated_at INTEGER NOT NULL\n  )\n`\nconst CTX_INDEX_DDL = (table: string) => `\n  CREATE INDEX IF NOT EXISTS idx_${table}_context ON ${table} (context_id, updated_at)\n`\n\n/**\n * SQL-backed TaskStore. Stores the full Task JSON; reads return a deep clone\n * so callers never observe shared references. TTL is enforced at read time:\n * expired rows are filtered out and (best-effort) deleted, matching the\n * in-memory store's semantics so behavior is portable across both adapters.\n */\nexport class SqlTaskStore implements TaskStore {\n  constructor(\n    private readonly db: SqlAdapter,\n    private readonly opts: { ttlMs?: number; table?: string } = {},\n  ) {}\n\n  private get ttlMs(): number {\n    return this.opts.ttlMs ?? DEFAULT_TTL_MS\n  }\n  private get table(): string {\n    return this.opts.table ?? 'a2a_tasks'\n  }\n\n  /** Idempotent. Call once at deploy. */\n  async migrate(): Promise<void> {\n    await this.db.exec(TASKS_TABLE_DDL(this.table))\n    await this.db.exec(CTX_INDEX_DDL(this.table))\n  }\n\n  async get(id: string): Promise<Task | undefined> {\n    const rows = await this.db.query<{ payload: string; updated_at: number }>(\n      `SELECT payload, updated_at FROM ${this.table} WHERE id = ?`,\n      [id],\n    )\n    const row = rows[0]\n    if (!row) return undefined\n    if (Date.now() - row.updated_at > this.ttlMs) {\n      // Lazy GC. If the delete loses a race with another reader, that reader\n      // observes either the stale-then-deleted task (returning undefined here)\n      // or, after this delete commits, observes undefined directly — either\n      // way callers see consistent \"expired\" semantics.\n      void this.db.exec(`DELETE FROM ${this.table} WHERE id = ?`, [id])\n      return undefined\n    }\n    return JSON.parse(row.payload) as Task\n  }\n\n  async put(task: Task): Promise<void> {\n    const payload = JSON.stringify(task)\n    const updatedAt = Date.now()\n    // Adapter-agnostic upsert: try update, fall back to insert if no row\n    // existed. Avoids needing ON CONFLICT (postgres) vs INSERT OR REPLACE\n    // (sqlite/libSQL) divergence at the SQL layer.\n    const updated = await this.db.exec(\n      `UPDATE ${this.table} SET context_id = ?, state = ?, payload = ?, updated_at = ? WHERE id = ?`,\n      [task.contextId, task.status.state, payload, updatedAt, task.id],\n    )\n    if (updated.rowsAffected === 0) {\n      await this.db.exec(\n        `INSERT INTO ${this.table} (id, context_id, state, payload, updated_at) VALUES (?, ?, ?, ?, ?)`,\n        [task.id, task.contextId, task.status.state, payload, updatedAt],\n      )\n    }\n  }\n\n  async delete(id: string): Promise<void> {\n    await this.db.exec(`DELETE FROM ${this.table} WHERE id = ?`, [id])\n  }\n\n  /**\n   * Lookup tasks by contextId — used by `tasks/resubscribe` and the multi-turn\n   * dispatcher. Returns most-recent-first. Not part of the base TaskStore\n   * interface since the in-memory store doesn't expose it; consumers that\n   * specifically wire SqlTaskStore can use it for richer queries.\n   */\n  async listByContext(contextId: string): Promise<Task[]> {\n    const rows = await this.db.query<{ payload: string; updated_at: number }>(\n      `SELECT payload, updated_at FROM ${this.table} WHERE context_id = ? ORDER BY updated_at DESC`,\n      [contextId],\n    )\n    const now = Date.now()\n    return rows\n      .filter((r) => now - r.updated_at <= this.ttlMs)\n      .map((r) => JSON.parse(r.payload) as Task)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiEO,SAAS,eAAe,IAAgC;AAC7D,SAAO;AAAA,IACL,MAAM,KAAK,KAAK,SAAS,CAAC,GAAG;AAC3B,YAAM,OAAO,GAAG,QAAQ,GAAG;AAC3B,YAAM,QAAQ,OAAO,SAAS,IAAI,KAAK,KAAK,GAAG,MAAM,IAAI;AACzD,YAAM,SAAS,MAAM,MAAM,IAAI;AAC/B,YAAM,OAAQ,OAAkE;AAChF,aAAO,EAAE,cAAc,MAAM,gBAAgB,MAAM,WAAW,EAAE;AAAA,IAClE;AAAA,IACA,MAAM,MAAY,KAAa,SAA6B,CAAC,GAAoB;AAC/E,YAAM,OAAO,GAAG,QAAQ,GAAG;AAC3B,YAAM,QAAQ,OAAO,SAAS,IAAI,KAAK,KAAK,GAAG,MAAM,IAAI;AACzD,YAAM,SAAS,MAAM,MAAM,IAAU;AACrC,aAAO,OAAO,WAAW,CAAC;AAAA,IAC5B;AAAA,EACF;AACF;AAWA,IAAM,iBAAiB,KAAK,KAAK;AAEjC,IAAM,kBAAkB,CAAC,UAAkB;AAAA,+BACZ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQpC,IAAM,gBAAgB,CAAC,UAAkB;AAAA,mCACN,KAAK,eAAe,KAAK;AAAA;AASrD,IAAM,eAAN,MAAwC;AAAA,EAC7C,YACmB,IACA,OAA2C,CAAC,GAC7D;AAFiB;AACA;AAAA,EAChB;AAAA,EAFgB;AAAA,EACA;AAAA,EAGnB,IAAY,QAAgB;AAC1B,WAAO,KAAK,KAAK,SAAS;AAAA,EAC5B;AAAA,EACA,IAAY,QAAgB;AAC1B,WAAO,KAAK,KAAK,SAAS;AAAA,EAC5B;AAAA;AAAA,EAGA,MAAM,UAAyB;AAC7B,UAAM,KAAK,GAAG,KAAK,gBAAgB,KAAK,KAAK,CAAC;AAC9C,UAAM,KAAK,GAAG,KAAK,cAAc,KAAK,KAAK,CAAC;AAAA,EAC9C;AAAA,EAEA,MAAM,IAAI,IAAuC;AAC/C,UAAM,OAAO,MAAM,KAAK,GAAG;AAAA,MACzB,mCAAmC,KAAK,KAAK;AAAA,MAC7C,CAAC,EAAE;AAAA,IACL;AACA,UAAM,MAAM,KAAK,CAAC;AAClB,QAAI,CAAC,IAAK,QAAO;AACjB,QAAI,KAAK,IAAI,IAAI,IAAI,aAAa,KAAK,OAAO;AAK5C,WAAK,KAAK,GAAG,KAAK,eAAe,KAAK,KAAK,iBAAiB,CAAC,EAAE,CAAC;AAChE,aAAO;AAAA,IACT;AACA,WAAO,KAAK,MAAM,IAAI,OAAO;AAAA,EAC/B;AAAA,EAEA,MAAM,IAAI,MAA2B;AACnC,UAAM,UAAU,KAAK,UAAU,IAAI;AACnC,UAAM,YAAY,KAAK,IAAI;AAI3B,UAAM,UAAU,MAAM,KAAK,GAAG;AAAA,MAC5B,UAAU,KAAK,KAAK;AAAA,MACpB,CAAC,KAAK,WAAW,KAAK,OAAO,OAAO,SAAS,WAAW,KAAK,EAAE;AAAA,IACjE;AACA,QAAI,QAAQ,iBAAiB,GAAG;AAC9B,YAAM,KAAK,GAAG;AAAA,QACZ,eAAe,KAAK,KAAK;AAAA,QACzB,CAAC,KAAK,IAAI,KAAK,WAAW,KAAK,OAAO,OAAO,SAAS,SAAS;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,IAA2B;AACtC,UAAM,KAAK,GAAG,KAAK,eAAe,KAAK,KAAK,iBAAiB,CAAC,EAAE,CAAC;AAAA,EACnE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,cAAc,WAAoC;AACtD,UAAM,OAAO,MAAM,KAAK,GAAG;AAAA,MACzB,mCAAmC,KAAK,KAAK;AAAA,MAC7C,CAAC,SAAS;AAAA,IACZ;AACA,UAAM,MAAM,KAAK,IAAI;AACrB,WAAO,KACJ,OAAO,CAAC,MAAM,MAAM,EAAE,cAAc,KAAK,KAAK,EAC9C,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,OAAO,CAAS;AAAA,EAC7C;AACF;","names":[]}
+{"version":3,"sources":["../src/payment-recovery-sql.ts","../src/a2a/task-store-sql.ts"],"sourcesContent":["import type { SqlAdapter } from './a2a/task-store-sql'\nimport type {\n  PaymentRecoveryRecord,\n  PaymentRecoveryStore,\n} from './payment-recovery'\n\nconst TABLE_DDL = (table: string) => `\n  CREATE TABLE IF NOT EXISTS ${table} (\n    id TEXT PRIMARY KEY,\n    state TEXT NOT NULL,\n    next_attempt_at INTEGER NOT NULL,\n    revision INTEGER NOT NULL,\n    payload TEXT NOT NULL,\n    updated_at INTEGER NOT NULL\n  )\n`\n\nconst DUE_INDEX_DDL = (table: string) => `\n  CREATE INDEX IF NOT EXISTS idx_${table}_due\n  ON ${table} (state, next_attempt_at)\n`\n\n/** Durable recovery outbox for D1, sqlite, libSQL, or an adapted SQL driver. */\nexport class SqlPaymentRecoveryStore implements PaymentRecoveryStore {\n  private readonly table: string\n\n  constructor(\n    private readonly db: SqlAdapter,\n    options: { table?: string } = {},\n  ) {\n    this.table = options.table ?? 'payment_recovery'\n    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(this.table)) {\n      throw new Error('payment recovery table name is invalid')\n    }\n  }\n\n  /** Idempotent. Run this before the gateway starts accepting traffic. */\n  async migrate(): Promise<void> {\n    await this.db.exec(TABLE_DDL(this.table))\n    await this.db.exec(DUE_INDEX_DDL(this.table))\n  }\n\n  async createIfAbsent(record: PaymentRecoveryRecord): Promise<boolean> {\n    try {\n      const result = await this.db.exec(\n        `INSERT INTO ${this.table} (id, state, next_attempt_at, revision, payload, updated_at) VALUES (?, ?, ?, ?, ?, ?)`,\n        [\n          record.id,\n          record.state,\n          record.nextAttemptAt,\n          record.revision,\n          JSON.stringify(record),\n          record.updatedAt,\n        ],\n      )\n      return result.rowsAffected === 1\n    } catch (error) {\n      if (await this.get(record.id)) return false\n      throw error\n    }\n  }\n\n  async get(id: string): Promise<PaymentRecoveryRecord | undefined> {\n    const rows = await this.db.query<{ payload: string }>(\n      `SELECT payload FROM ${this.table} WHERE id = ?`,\n      [id],\n    )\n    return rows[0] ? parseRecord(rows[0].payload) : undefined\n  }\n\n  async compareAndSet(\n    expected: PaymentRecoveryRecord,\n    next: PaymentRecoveryRecord,\n  ): Promise<boolean> {\n    const result = await this.db.exec(\n      `UPDATE ${this.table} SET state = ?, next_attempt_at = ?, revision = ?, payload = ?, updated_at = ? WHERE id = ? AND revision = ?`,\n      [\n        next.state,\n        next.nextAttemptAt,\n        next.revision,\n        JSON.stringify(next),\n        next.updatedAt,\n        expected.id,\n        expected.revision,\n      ],\n    )\n    return result.rowsAffected === 1\n  }\n\n  async listDue(now: number, limit: number): Promise<PaymentRecoveryRecord[]> {\n    if (!Number.isSafeInteger(limit) || limit <= 0) {\n      throw new Error('payment recovery scan limit must be a positive safe integer')\n    }\n    const rows = await this.db.query<{ payload: string }>(\n      `SELECT payload FROM ${this.table} WHERE state <> ? AND next_attempt_at <= ? ORDER BY next_attempt_at ASC LIMIT ?`,\n      ['reconciled', now, limit],\n    )\n    return rows.map((row) => parseRecord(row.payload))\n  }\n}\n\nfunction parseRecord(payload: string): PaymentRecoveryRecord {\n  const value = JSON.parse(payload) as PaymentRecoveryRecord\n  if (value.version !== 1 || !value.id || !Number.isSafeInteger(value.revision)) {\n    throw new Error('stored payment recovery record is invalid')\n  }\n  return value\n}\n","/**\n * @stable\n *\n * Durable `TaskStore` against any SQL store. Adapter-agnostic: callers wire a\n * `SqlAdapter` against their driver (D1, postgres, sqlite, libSQL, Turso) and\n * the same store survives gateway restarts so an in-flight task (and its\n * artifacts) is recoverable after a Worker recycle.\n *\n * Schema is one table: tasks keyed by id with the full JSON payload, plus a\n * secondary index on `context_id` so `tasks/resubscribe` and conversational\n * lookups by context are O(log n). TTL is enforced at read time the same way\n * `InMemoryTaskStore` does — `createIfAbsent` and `compareAndSet` make task\n * ownership safe when multiple gateway workers share the database.\n *\n * Why not bake in a specific driver? Hono workers run on Cloudflare (D1),\n * Node (pg / sqlite), Bun, Deno. Burning a hard dependency on one client\n * limits the gateway's reach. The adapter indirection costs ~5 lines per\n * driver in the consumer's code and keeps the package free of native deps.\n *\n * @example D1\n *   import { SqlTaskStore, d1ToSqlAdapter } from '@tangle-network/agent-gateway'\n *   const store = new SqlTaskStore(d1ToSqlAdapter(env.DB))\n *   await store.migrate()\n *   const gw = createAgentGateway({ ..., a2a: { taskStore: store } })\n *\n * @example libSQL / Turso\n *   import { createClient } from '@libsql/client'\n *   const client = createClient({ url: process.env.TURSO_URL!, authToken: process.env.TURSO_TOKEN! })\n *   const libsql: SqlAdapter = {\n *     exec: async (sql, params = []) => {\n *       const r = await client.execute({ sql, args: params as never[] })\n *       return { rowsAffected: Number(r.rowsAffected ?? 0) }\n *     },\n *     query: async (sql, params = []) => {\n *       const r = await client.execute({ sql, args: params as never[] })\n *       return r.rows as unknown as Record<string, unknown>[]\n *     },\n *   }\n *   const store = new SqlTaskStore(libsql)\n *   await store.migrate()\n */\n\nimport { inspectTaskExecution } from './execution-fence'\nimport { hasPendingPaymentRecovery, type TaskStore } from './task-store'\nimport type { Task } from './types'\n\n/**\n * Minimal SQL driver shape — identical to agent-runtime's `SqlAdapter` so the\n * same wrapper code works for both packages. Parameter placeholders MUST be\n * `?` (positional); driver wrappers that use `$1`, `$2`, … should rewrite at\n * the adapter boundary (see node-postgres example in the durability docs).\n */\nexport interface SqlAdapter {\n  exec(sql: string, params?: readonly unknown[]): Promise<{ rowsAffected: number }>\n  query<TRow = Record<string, unknown>>(\n    sql: string,\n    params?: readonly unknown[],\n  ): Promise<TRow[]>\n}\n\n/**\n * Adapt a Cloudflare D1 binding to `SqlAdapter`. The package never imports\n * `@cloudflare/workers-types`; the binding's structural shape lines up via\n * TypeScript structural compatibility.\n */\nexport function d1ToSqlAdapter(db: D1DatabaseLike): SqlAdapter {\n  return {\n    async exec(sql, params = []) {\n      const stmt = db.prepare(sql)\n      const bound = params.length > 0 ? stmt.bind(...params) : stmt\n      const result = await bound.run()\n      const meta = (result as { meta?: { rows_written?: number; changes?: number } }).meta\n      return { rowsAffected: meta?.rows_written ?? meta?.changes ?? 0 }\n    },\n    async query<TRow>(sql: string, params: readonly unknown[] = []): Promise<TRow[]> {\n      const stmt = db.prepare(sql)\n      const bound = params.length > 0 ? stmt.bind(...params) : stmt\n      const result = await bound.all<TRow>()\n      return result.results ?? []\n    },\n  }\n}\n\nexport interface D1DatabaseLike {\n  prepare(sql: string): D1StmtLike\n}\nexport interface D1StmtLike {\n  bind(...params: unknown[]): D1StmtLike\n  run(): Promise<unknown>\n  all<TRow = unknown>(): Promise<{ results?: TRow[] }>\n}\n\nconst DEFAULT_TTL_MS = 60 * 60 * 1000\n\nconst TASKS_TABLE_DDL = (table: string) => `\n  CREATE TABLE IF NOT EXISTS ${table} (\n    id TEXT PRIMARY KEY,\n    context_id TEXT NOT NULL,\n    state TEXT NOT NULL,\n    payload TEXT NOT NULL,\n    updated_at INTEGER NOT NULL,\n    execution_request_id TEXT,\n    execution_lease_expires_at REAL\n  )\n`\nconst CTX_INDEX_DDL = (table: string) => `\n  CREATE INDEX IF NOT EXISTS idx_${table}_context ON ${table} (context_id, updated_at)\n`\n\n/**\n * SQL-backed TaskStore. Stores the full Task JSON; reads return a deep clone\n * so callers never observe shared references. TTL is enforced at read time:\n * expired rows are filtered out and (best-effort) deleted, matching the\n * in-memory store's semantics so behavior is portable across both adapters.\n */\nexport class SqlTaskStore implements TaskStore {\n  constructor(\n    private readonly db: SqlAdapter,\n    private readonly opts: { ttlMs?: number; table?: string } = {},\n  ) {}\n\n  private get ttlMs(): number {\n    return this.opts.ttlMs ?? DEFAULT_TTL_MS\n  }\n  private get table(): string {\n    return this.opts.table ?? 'a2a_tasks'\n  }\n\n  private async readRow(id: string): Promise<{\n    payload: string\n    updatedAt: number\n    executionRequestId: string | null\n    executionLeaseExpiresAt: number | null\n  } | undefined> {\n    const rows = await this.db.query<{\n      payload: string\n      updated_at: number\n      execution_request_id?: string | null\n      execution_lease_expires_at?: number | null\n    }>(\n      `SELECT payload, updated_at, execution_request_id, execution_lease_expires_at FROM ${this.table} WHERE id = ?`,\n      [id],\n    )\n    const row = rows[0]\n    return row\n      ? {\n          payload: row.payload,\n          updatedAt: row.updated_at,\n          executionRequestId: row.execution_request_id ?? null,\n          executionLeaseExpiresAt: row.execution_lease_expires_at ?? null,\n        }\n      : undefined\n  }\n\n  private isExpired(updatedAt: number, task: Task): boolean {\n    return Date.now() - updatedAt > this.ttlMs && !hasPendingPaymentRecovery(task)\n  }\n\n  private async deleteObservedRow(\n    id: string,\n    payload: string,\n    updatedAt: number,\n  ): Promise<number> {\n    const result = await this.db.exec(\n      `DELETE FROM ${this.table} WHERE id = ? AND payload = ? AND updated_at = ?`,\n      [id, payload, updatedAt],\n    )\n    return result.rowsAffected\n  }\n\n  /** Idempotent. Call once at deploy. */\n  async migrate(): Promise<void> {\n    await this.db.exec(TASKS_TABLE_DDL(this.table))\n    for (const column of [\n      'execution_request_id TEXT',\n      'execution_lease_expires_at REAL',\n    ]) {\n      try {\n        await this.db.exec(`ALTER TABLE ${this.table} ADD COLUMN ${column}`)\n      } catch (error) {\n        const message = error instanceof Error ? error.message.toLowerCase() : String(error).toLowerCase()\n        if (!message.includes('duplicate column') && !message.includes('already exists')) throw error\n      }\n    }\n    await this.db.exec(CTX_INDEX_DDL(this.table))\n  }\n\n  async get(id: string): Promise<Task | undefined> {\n    const row = await this.readRow(id)\n    if (!row) return undefined\n    const task = JSON.parse(row.payload) as Task\n    if (this.isExpired(row.updatedAt, task)) {\n      // Delete only the version that was observed as stale. A refresh can reuse\n      // the same payload, so payload equality and updated_at both fence the row.\n      await this.deleteObservedRow(id, row.payload, row.updatedAt)\n      return undefined\n    }\n    return task\n  }\n\n  private async insert(task: Task): Promise<number> {\n    const payload = JSON.stringify(task)\n    const [executionRequestId, executionLeaseExpiresAt] = executionColumns(task)\n    const result = await this.db.exec(\n      `INSERT INTO ${this.table} (id, context_id, state, payload, updated_at, execution_request_id, execution_lease_expires_at)\n       VALUES (?, ?, ?, ?, ?, ?, ?)`,\n      [\n        task.id,\n        task.contextId,\n        task.status.state,\n        payload,\n        Date.now(),\n        executionRequestId,\n        executionLeaseExpiresAt,\n      ],\n    )\n    return result.rowsAffected\n  }\n\n  async put(task: Task): Promise<void> {\n    const payload = JSON.stringify(task)\n    const updatedAt = Date.now()\n    const [executionRequestId, executionLeaseExpiresAt] = executionColumns(task)\n    // Adapter-agnostic upsert: try update, fall back to insert if no row\n    // existed. Avoids needing ON CONFLICT (postgres) vs INSERT OR REPLACE\n    // (sqlite/libSQL) divergence at the SQL layer.\n    const updated = await this.db.exec(\n      `UPDATE ${this.table}\n       SET context_id = ?, state = ?, payload = ?, updated_at = ?,\n           execution_request_id = ?, execution_lease_expires_at = ?\n       WHERE id = ?`,\n      [\n        task.contextId,\n        task.status.state,\n        payload,\n        updatedAt,\n        executionRequestId,\n        executionLeaseExpiresAt,\n        task.id,\n      ],\n    )\n    if (updated.rowsAffected === 0) {\n      await this.db.exec(\n        `INSERT INTO ${this.table} (id, context_id, state, payload, updated_at, execution_request_id, execution_lease_expires_at)\n         VALUES (?, ?, ?, ?, ?, ?, ?)`,\n        [\n          task.id,\n          task.contextId,\n          task.status.state,\n          payload,\n          updatedAt,\n          executionRequestId,\n          executionLeaseExpiresAt,\n        ],\n      )\n    }\n  }\n\n  async createIfAbsent(task: Task): Promise<boolean> {\n    try {\n      return (await this.insert(task)) === 1\n    } catch (error) {\n      // SQL dialects report duplicate primary keys as errors. Inspect the raw\n      // row so an expired row can be removed and retried in the same call.\n      const row = await this.readRow(task.id)\n      if (!row) throw error\n      const existing = JSON.parse(row.payload) as Task\n      if (!this.isExpired(row.updatedAt, existing)) return false\n\n      await this.deleteObservedRow(task.id, row.payload, row.updatedAt)\n      try {\n        return (await this.insert(task)) === 1\n      } catch (retryError) {\n        // Another writer may have won the retry after the stale row was\n        // removed. Return the normal idempotency result in that case.\n        if (await this.get(task.id)) return false\n        throw retryError\n      }\n    }\n  }\n\n  async compareAndSet(expected: Task, next: Task): Promise<boolean> {\n    const expectedPayload = JSON.stringify(expected)\n    const payload = JSON.stringify(next)\n    const [executionRequestId, executionLeaseExpiresAt] = executionColumns(next)\n    const result = await this.db.exec(\n      `UPDATE ${this.table}\n       SET context_id = ?, state = ?, payload = ?, updated_at = ?,\n           execution_request_id = ?, execution_lease_expires_at = ?\n       WHERE id = ? AND payload = ?`,\n      [\n        next.contextId,\n        next.status.state,\n        payload,\n        Date.now(),\n        executionRequestId,\n        executionLeaseExpiresAt,\n        expected.id,\n        expectedPayload,\n      ],\n    )\n    return result.rowsAffected === 1\n  }\n\n  async compareAndSetExecution(\n    expected: Task,\n    next: Task,\n    requestId: string,\n    now: number,\n  ): Promise<boolean> {\n    const expectedMarker = inspectTaskExecution(expected)\n    const nextMarker = inspectTaskExecution(next)\n    if (\n      expectedMarker.state !== 'valid' ||\n      nextMarker.state !== 'valid' ||\n      expectedMarker.marker.requestId !== requestId ||\n      nextMarker.marker.requestId !== requestId ||\n      expectedMarker.marker.lease.expiresAt <= now ||\n      nextMarker.marker.lease.expiresAt <= now\n    ) return false\n    const expectedPayload = JSON.stringify(expected)\n    const payload = JSON.stringify(next)\n    const updatedAt = Date.now()\n    // Both NULL columns identify a legacy row whose payload still owns the fence.\n    const result = await this.db.exec(\n      `UPDATE ${this.table}\n       SET context_id = ?, state = ?, payload = ?, updated_at = ?,\n           execution_request_id = ?, execution_lease_expires_at = ?\n       WHERE id = ?\n         AND payload = ?\n         AND state = 'working'\n         AND (\n           (execution_request_id = ? AND execution_lease_expires_at > ?)\n           OR (execution_request_id IS NULL AND execution_lease_expires_at IS NULL)\n         )`,\n      [\n        next.contextId,\n        next.status.state,\n        payload,\n        updatedAt,\n        nextMarker.marker.requestId,\n        nextMarker.marker.lease.expiresAt,\n        expected.id,\n        expectedPayload,\n        requestId,\n        now,\n      ],\n    )\n    return result.rowsAffected === 1\n  }\n\n  async delete(id: string): Promise<void> {\n    const task = await this.get(id)\n    if (!task || hasPendingPaymentRecovery(task)) return\n    await this.db.exec(\n      `DELETE FROM ${this.table} WHERE id = ? AND payload = ?`,\n      [id, JSON.stringify(task)],\n    )\n  }\n\n  /**\n   * Lookup tasks by contextId — used by `tasks/resubscribe` and the multi-turn\n   * dispatcher. Returns most-recent-first. Not part of the base TaskStore\n   * interface since the in-memory store doesn't expose it; consumers that\n   * specifically wire SqlTaskStore can use it for richer queries.\n   */\n  async listByContext(contextId: string): Promise<Task[]> {\n    const rows = await this.db.query<{ payload: string; updated_at: number }>(\n      `SELECT payload, updated_at FROM ${this.table} WHERE context_id = ? ORDER BY updated_at DESC`,\n      [contextId],\n    )\n    const now = Date.now()\n    return rows\n      .map((r) => ({ task: JSON.parse(r.payload) as Task, updatedAt: r.updated_at }))\n      .filter(({ task, updatedAt }) =>\n        now - updatedAt <= this.ttlMs || hasPendingPaymentRecovery(task),\n      )\n      .map(({ task }) => task)\n  }\n}\n\nfunction executionColumns(task: Task): [string | null, number | null] {\n  const inspection = inspectTaskExecution(task)\n  return inspection.state === 'valid'\n    ? [inspection.marker.requestId, inspection.marker.lease.expiresAt]\n    : [null, null]\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,IAAM,YAAY,CAAC,UAAkB;AAAA,+BACN,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAUpC,IAAM,gBAAgB,CAAC,UAAkB;AAAA,mCACN,KAAK;AAAA,OACjC,KAAK;AAAA;AAIL,IAAM,0BAAN,MAA8D;AAAA,EAGnE,YACmB,IACjB,UAA8B,CAAC,GAC/B;AAFiB;AAGjB,SAAK,QAAQ,QAAQ,SAAS;AAC9B,QAAI,CAAC,2BAA2B,KAAK,KAAK,KAAK,GAAG;AAChD,YAAM,IAAI,MAAM,wCAAwC;AAAA,IAC1D;AAAA,EACF;AAAA,EAPmB;AAAA,EAHF;AAAA;AAAA,EAajB,MAAM,UAAyB;AAC7B,UAAM,KAAK,GAAG,KAAK,UAAU,KAAK,KAAK,CAAC;AACxC,UAAM,KAAK,GAAG,KAAK,cAAc,KAAK,KAAK,CAAC;AAAA,EAC9C;AAAA,EAEA,MAAM,eAAe,QAAiD;AACpE,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,GAAG;AAAA,QAC3B,eAAe,KAAK,KAAK;AAAA,QACzB;AAAA,UACE,OAAO;AAAA,UACP,OAAO;AAAA,UACP,OAAO;AAAA,UACP,OAAO;AAAA,UACP,KAAK,UAAU,MAAM;AAAA,UACrB,OAAO;AAAA,QACT;AAAA,MACF;AACA,aAAO,OAAO,iBAAiB;AAAA,IACjC,SAAS,OAAO;AACd,UAAI,MAAM,KAAK,IAAI,OAAO,EAAE,EAAG,QAAO;AACtC,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,IAAI,IAAwD;AAChE,UAAM,OAAO,MAAM,KAAK,GAAG;AAAA,MACzB,uBAAuB,KAAK,KAAK;AAAA,MACjC,CAAC,EAAE;AAAA,IACL;AACA,WAAO,KAAK,CAAC,IAAI,YAAY,KAAK,CAAC,EAAE,OAAO,IAAI;AAAA,EAClD;AAAA,EAEA,MAAM,cACJ,UACA,MACkB;AAClB,UAAM,SAAS,MAAM,KAAK,GAAG;AAAA,MAC3B,UAAU,KAAK,KAAK;AAAA,MACpB;AAAA,QACE,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK,UAAU,IAAI;AAAA,QACnB,KAAK;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AACA,WAAO,OAAO,iBAAiB;AAAA,EACjC;AAAA,EAEA,MAAM,QAAQ,KAAa,OAAiD;AAC1E,QAAI,CAAC,OAAO,cAAc,KAAK,KAAK,SAAS,GAAG;AAC9C,YAAM,IAAI,MAAM,6DAA6D;AAAA,IAC/E;AACA,UAAM,OAAO,MAAM,KAAK,GAAG;AAAA,MACzB,uBAAuB,KAAK,KAAK;AAAA,MACjC,CAAC,cAAc,KAAK,KAAK;AAAA,IAC3B;AACA,WAAO,KAAK,IAAI,CAAC,QAAQ,YAAY,IAAI,OAAO,CAAC;AAAA,EACnD;AACF;AAEA,SAAS,YAAY,SAAwC;AAC3D,QAAM,QAAQ,KAAK,MAAM,OAAO;AAChC,MAAI,MAAM,YAAY,KAAK,CAAC,MAAM,MAAM,CAAC,OAAO,cAAc,MAAM,QAAQ,GAAG;AAC7E,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AACA,SAAO;AACT;;;AC1CO,SAAS,eAAe,IAAgC;AAC7D,SAAO;AAAA,IACL,MAAM,KAAK,KAAK,SAAS,CAAC,GAAG;AAC3B,YAAM,OAAO,GAAG,QAAQ,GAAG;AAC3B,YAAM,QAAQ,OAAO,SAAS,IAAI,KAAK,KAAK,GAAG,MAAM,IAAI;AACzD,YAAM,SAAS,MAAM,MAAM,IAAI;AAC/B,YAAM,OAAQ,OAAkE;AAChF,aAAO,EAAE,cAAc,MAAM,gBAAgB,MAAM,WAAW,EAAE;AAAA,IAClE;AAAA,IACA,MAAM,MAAY,KAAa,SAA6B,CAAC,GAAoB;AAC/E,YAAM,OAAO,GAAG,QAAQ,GAAG;AAC3B,YAAM,QAAQ,OAAO,SAAS,IAAI,KAAK,KAAK,GAAG,MAAM,IAAI;AACzD,YAAM,SAAS,MAAM,MAAM,IAAU;AACrC,aAAO,OAAO,WAAW,CAAC;AAAA,IAC5B;AAAA,EACF;AACF;AAWA,IAAM,iBAAiB,KAAK,KAAK;AAEjC,IAAM,kBAAkB,CAAC,UAAkB;AAAA,+BACZ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAUpC,IAAM,gBAAgB,CAAC,UAAkB;AAAA,mCACN,KAAK,eAAe,KAAK;AAAA;AASrD,IAAM,eAAN,MAAwC;AAAA,EAC7C,YACmB,IACA,OAA2C,CAAC,GAC7D;AAFiB;AACA;AAAA,EAChB;AAAA,EAFgB;AAAA,EACA;AAAA,EAGnB,IAAY,QAAgB;AAC1B,WAAO,KAAK,KAAK,SAAS;AAAA,EAC5B;AAAA,EACA,IAAY,QAAgB;AAC1B,WAAO,KAAK,KAAK,SAAS;AAAA,EAC5B;AAAA,EAEA,MAAc,QAAQ,IAKP;AACb,UAAM,OAAO,MAAM,KAAK,GAAG;AAAA,MAMzB,qFAAqF,KAAK,KAAK;AAAA,MAC/F,CAAC,EAAE;AAAA,IACL;AACA,UAAM,MAAM,KAAK,CAAC;AAClB,WAAO,MACH;AAAA,MACE,SAAS,IAAI;AAAA,MACb,WAAW,IAAI;AAAA,MACf,oBAAoB,IAAI,wBAAwB;AAAA,MAChD,yBAAyB,IAAI,8BAA8B;AAAA,IAC7D,IACA;AAAA,EACN;AAAA,EAEQ,UAAU,WAAmB,MAAqB;AACxD,WAAO,KAAK,IAAI,IAAI,YAAY,KAAK,SAAS,CAAC,0BAA0B,IAAI;AAAA,EAC/E;AAAA,EAEA,MAAc,kBACZ,IACA,SACA,WACiB;AACjB,UAAM,SAAS,MAAM,KAAK,GAAG;AAAA,MAC3B,eAAe,KAAK,KAAK;AAAA,MACzB,CAAC,IAAI,SAAS,SAAS;AAAA,IACzB;AACA,WAAO,OAAO;AAAA,EAChB;AAAA;AAAA,EAGA,MAAM,UAAyB;AAC7B,UAAM,KAAK,GAAG,KAAK,gBAAgB,KAAK,KAAK,CAAC;AAC9C,eAAW,UAAU;AAAA,MACnB;AAAA,MACA;AAAA,IACF,GAAG;AACD,UAAI;AACF,cAAM,KAAK,GAAG,KAAK,eAAe,KAAK,KAAK,eAAe,MAAM,EAAE;AAAA,MACrE,SAAS,OAAO;AACd,cAAM,UAAU,iBAAiB,QAAQ,MAAM,QAAQ,YAAY,IAAI,OAAO,KAAK,EAAE,YAAY;AACjG,YAAI,CAAC,QAAQ,SAAS,kBAAkB,KAAK,CAAC,QAAQ,SAAS,gBAAgB,EAAG,OAAM;AAAA,MAC1F;AAAA,IACF;AACA,UAAM,KAAK,GAAG,KAAK,cAAc,KAAK,KAAK,CAAC;AAAA,EAC9C;AAAA,EAEA,MAAM,IAAI,IAAuC;AAC/C,UAAM,MAAM,MAAM,KAAK,QAAQ,EAAE;AACjC,QAAI,CAAC,IAAK,QAAO;AACjB,UAAM,OAAO,KAAK,MAAM,IAAI,OAAO;AACnC,QAAI,KAAK,UAAU,IAAI,WAAW,IAAI,GAAG;AAGvC,YAAM,KAAK,kBAAkB,IAAI,IAAI,SAAS,IAAI,SAAS;AAC3D,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,OAAO,MAA6B;AAChD,UAAM,UAAU,KAAK,UAAU,IAAI;AACnC,UAAM,CAAC,oBAAoB,uBAAuB,IAAI,iBAAiB,IAAI;AAC3E,UAAM,SAAS,MAAM,KAAK,GAAG;AAAA,MAC3B,eAAe,KAAK,KAAK;AAAA;AAAA,MAEzB;AAAA,QACE,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK,OAAO;AAAA,QACZ;AAAA,QACA,KAAK,IAAI;AAAA,QACT;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO,OAAO;AAAA,EAChB;AAAA,EAEA,MAAM,IAAI,MAA2B;AACnC,UAAM,UAAU,KAAK,UAAU,IAAI;AACnC,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,CAAC,oBAAoB,uBAAuB,IAAI,iBAAiB,IAAI;AAI3E,UAAM,UAAU,MAAM,KAAK,GAAG;AAAA,MAC5B,UAAU,KAAK,KAAK;AAAA;AAAA;AAAA;AAAA,MAIpB;AAAA,QACE,KAAK;AAAA,QACL,KAAK,OAAO;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACF;AACA,QAAI,QAAQ,iBAAiB,GAAG;AAC9B,YAAM,KAAK,GAAG;AAAA,QACZ,eAAe,KAAK,KAAK;AAAA;AAAA,QAEzB;AAAA,UACE,KAAK;AAAA,UACL,KAAK;AAAA,UACL,KAAK,OAAO;AAAA,UACZ;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,eAAe,MAA8B;AACjD,QAAI;AACF,aAAQ,MAAM,KAAK,OAAO,IAAI,MAAO;AAAA,IACvC,SAAS,OAAO;AAGd,YAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,EAAE;AACtC,UAAI,CAAC,IAAK,OAAM;AAChB,YAAM,WAAW,KAAK,MAAM,IAAI,OAAO;AACvC,UAAI,CAAC,KAAK,UAAU,IAAI,WAAW,QAAQ,EAAG,QAAO;AAErD,YAAM,KAAK,kBAAkB,KAAK,IAAI,IAAI,SAAS,IAAI,SAAS;AAChE,UAAI;AACF,eAAQ,MAAM,KAAK,OAAO,IAAI,MAAO;AAAA,MACvC,SAAS,YAAY;AAGnB,YAAI,MAAM,KAAK,IAAI,KAAK,EAAE,EAAG,QAAO;AACpC,cAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,UAAgB,MAA8B;AAChE,UAAM,kBAAkB,KAAK,UAAU,QAAQ;AAC/C,UAAM,UAAU,KAAK,UAAU,IAAI;AACnC,UAAM,CAAC,oBAAoB,uBAAuB,IAAI,iBAAiB,IAAI;AAC3E,UAAM,SAAS,MAAM,KAAK,GAAG;AAAA,MAC3B,UAAU,KAAK,KAAK;AAAA;AAAA;AAAA;AAAA,MAIpB;AAAA,QACE,KAAK;AAAA,QACL,KAAK,OAAO;AAAA,QACZ;AAAA,QACA,KAAK,IAAI;AAAA,QACT;AAAA,QACA;AAAA,QACA,SAAS;AAAA,QACT;AAAA,MACF;AAAA,IACF;AACA,WAAO,OAAO,iBAAiB;AAAA,EACjC;AAAA,EAEA,MAAM,uBACJ,UACA,MACA,WACA,KACkB;AAClB,UAAM,iBAAiB,qBAAqB,QAAQ;AACpD,UAAM,aAAa,qBAAqB,IAAI;AAC5C,QACE,eAAe,UAAU,WACzB,WAAW,UAAU,WACrB,eAAe,OAAO,cAAc,aACpC,WAAW,OAAO,cAAc,aAChC,eAAe,OAAO,MAAM,aAAa,OACzC,WAAW,OAAO,MAAM,aAAa,IACrC,QAAO;AACT,UAAM,kBAAkB,KAAK,UAAU,QAAQ;AAC/C,UAAM,UAAU,KAAK,UAAU,IAAI;AACnC,UAAM,YAAY,KAAK,IAAI;AAE3B,UAAM,SAAS,MAAM,KAAK,GAAG;AAAA,MAC3B,UAAU,KAAK,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAUpB;AAAA,QACE,KAAK;AAAA,QACL,KAAK,OAAO;AAAA,QACZ;AAAA,QACA;AAAA,QACA,WAAW,OAAO;AAAA,QAClB,WAAW,OAAO,MAAM;AAAA,QACxB,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO,OAAO,iBAAiB;AAAA,EACjC;AAAA,EAEA,MAAM,OAAO,IAA2B;AACtC,UAAM,OAAO,MAAM,KAAK,IAAI,EAAE;AAC9B,QAAI,CAAC,QAAQ,0BAA0B,IAAI,EAAG;AAC9C,UAAM,KAAK,GAAG;AAAA,MACZ,eAAe,KAAK,KAAK;AAAA,MACzB,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,cAAc,WAAoC;AACtD,UAAM,OAAO,MAAM,KAAK,GAAG;AAAA,MACzB,mCAAmC,KAAK,KAAK;AAAA,MAC7C,CAAC,SAAS;AAAA,IACZ;AACA,UAAM,MAAM,KAAK,IAAI;AACrB,WAAO,KACJ,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,EAAE,OAAO,GAAW,WAAW,EAAE,WAAW,EAAE,EAC7E;AAAA,MAAO,CAAC,EAAE,MAAM,UAAU,MACzB,MAAM,aAAa,KAAK,SAAS,0BAA0B,IAAI;AAAA,IACjE,EACC,IAAI,CAAC,EAAE,KAAK,MAAM,IAAI;AAAA,EAC3B;AACF;AAEA,SAAS,iBAAiB,MAA4C;AACpE,QAAM,aAAa,qBAAqB,IAAI;AAC5C,SAAO,WAAW,UAAU,UACxB,CAAC,WAAW,OAAO,WAAW,WAAW,OAAO,MAAM,SAAS,IAC/D,CAAC,MAAM,IAAI;AACjB;","names":[]}

package/dist/middleware.d.ts

@@ -1,8 +1,9 @@
 import * as hono_types from 'hono/types';
 import { Hono } from 'hono';
-import { G as GatewayConfig } from './types-DEsMmS-X.js';
+import { o as CreateAgentGatewayConfig } from './types-oQ58UakD.js';
 import './nonce-store.js';
 import './rate-limit.js';
+import './observer-types-A0RtA8uL.js';
 
 /**
  * Create a Hono router that serves the agent gateway.
@@ -14,6 +15,10 @@ import './rate-limit.js';
  *   GET  /:slug/chat/completions  — agent discovery metadata (Tangle-native shape)
  *   POST /:slug/chat/completions  — OpenAI-compatible chat endpoint (paid)
  */
-declare function createAgentGateway(config: GatewayConfig): Hono<hono_types.BlankEnv, hono_types.BlankSchema, "/">;
+declare function createAgentGateway(inputConfig: CreateAgentGatewayConfig): Hono<hono_types.BlankEnv, hono_types.BlankSchema, "/">;
+/** Public package-boundary version marker for durable payment operations. */
+declare namespace createAgentGateway {
+    const paymentProtocolVersion: 2;
+}
 
 export { createAgentGateway };

package/dist/middleware.js

@@ -1,7 +1,8 @@
 import {
   createAgentGateway
-} from "./chunk-Q4YAIEZY.js";
-import "./chunk-M7ZJAK4K.js";
+} from "./chunk-C7Z2BRYV.js";
+import "./chunk-J5SDVHOL.js";
+import "./chunk-GITV7CPT.js";
 import "./chunk-XCTXHZ76.js";
 export {
   createAgentGateway

package/dist/nonce-store.d.ts

@@ -3,16 +3,33 @@
  * Tracks seen nonces to prevent the same payment from being used twice.
  */
 interface NonceStore {
-    /** Check if nonce has been seen. Returns true if already used (reject). */
+    /** Check if nonce has been seen. This method never grants ownership. */
     hasSeen(nonce: string): Promise<boolean>;
-    /** Mark nonce as used. TTL = how long to remember it (seconds). */
-    markSeen(nonce: string, ttlSeconds: number): Promise<void>;
+    /**
+     * Atomically claim a nonce. An owner id makes a retry by the same payment
+     * operation idempotent. This is optional only for the 0.7.1 check-and-mark
+     * compatibility contract; durable owner claims require this method.
+     */
+    claim?(nonce: string, ttlSeconds: number, ownerId?: string): Promise<boolean>;
+    /** @deprecated Use claim() for atomic ownership in new stores. */
+    markSeen?(nonce: string, ttlSeconds: number): Promise<void>;
+}
+interface AtomicNonceStore extends NonceStore {
+    claim(nonce: string, ttlSeconds: number, ownerId?: string): Promise<boolean>;
 }
+/**
+ * Return the seconds for which a signed nonce must remain stored.
+ *
+ * The signed expiry is the replay boundary. A fixed one-hour cap would allow
+ * a still-valid authorization to replay after the nonce entry expires.
+ */
+declare function nonceTtlSeconds(expiry: bigint, nowSeconds?: number): number | undefined;
 /** In-memory nonce store with automatic eviction. Use in tests or single-worker deploys. */
 declare class MemoryNonceStore implements NonceStore {
     private seen;
     private lastEviction;
     hasSeen(nonce: string): Promise<boolean>;
+    claim(nonce: string, ttlSeconds: number, ownerId?: string): Promise<boolean>;
     markSeen(nonce: string, ttlSeconds: number): Promise<void>;
     private evictExpired;
 }
@@ -28,20 +45,31 @@ interface KVNamespace {
     put(key: string, value: string, options?: {
         expirationTtl?: number;
     }): Promise<void>;
+    /** Optional linearizable create-if-absent extension. Cloudflare KV does not provide it. */
+    putIfAbsent?(key: string, value: string, options?: {
+        expirationTtl?: number;
+    }): Promise<boolean>;
     delete(key: string): Promise<void>;
 }
+/** Atomic claim supplied by D1, a Durable Object, or another linearizable store. */
+type AtomicKvNonceClaim = (key: string, ttlSeconds: number, ownerId?: string) => Promise<boolean>;
+interface KvNonceStoreOptions {
+    /**
+     * Claim the fully namespaced key atomically.
+     * The callback must make same-owner retries idempotent.
+     */
+    atomicClaim?: AtomicKvNonceClaim;
+}
 /**
  * KV-backed NonceStore for distributed Cloudflare Workers deployments.
  *
  * Why this exists: MemoryNonceStore works on a single worker instance, but
  * Cloudflare routes requests across multiple isolates. Without shared state,
  * an attacker could retry a replayed nonce against a different isolate and
- * have it accepted. This implementation uses Workers KV with native TTL so
- * the nonce automatically expires at payment-expiry time.
- *
- * TTL precision: KV is eventually consistent (propagation ~60s). For x402
- * with 10-minute expiry windows this is fine — by the time KV propagates,
- * the payment itself would be expired anyway.
+ * have it accepted. Cloudflare KV has no conditional write, so a plain KV
+ * binding is not an atomic payment store. Supply `atomicClaim` from D1,
+ * Durable Objects, or another linearizable service before using this store
+ * for paid requests.
  *
  * Usage:
  *   const nonceStore = new KvNonceStore(env.NONCE_KV, 'x402')
@@ -51,12 +79,20 @@ declare class KvNonceStore implements NonceStore {
     private readonly kv;
     /** Key prefix to namespace within a shared KV (default: "nonce"). */
     private readonly prefix;
+    private readonly atomicClaim?;
     constructor(kv: KVNamespace, 
     /** Key prefix to namespace within a shared KV (default: "nonce"). */
-    prefix?: string);
+    prefix?: string, options?: KvNonceStoreOptions);
     hasSeen(nonce: string): Promise<boolean>;
     markSeen(nonce: string, ttlSeconds: number): Promise<void>;
+    claim(nonce: string, ttlSeconds: number, ownerId?: string): Promise<boolean>;
+    /** Used by gateway validation to reject plain, non-atomic KV bindings. */
+    hasAtomicClaim(): boolean;
     private key;
 }
+/** Claim through the one atomic contract used by every payment path. */
+declare function claimStoredNonce(store: NonceStore, nonce: string, ttlSeconds: number, ownerId?: string): Promise<boolean>;
+/** Durable payment paths must use a store with a single atomic claim operation. */
+declare function isAtomicNonceStore(store: NonceStore): store is AtomicNonceStore;
 
-export { type KVNamespace, KvNonceStore, MemoryNonceStore, type NonceStore };
+export { type AtomicKvNonceClaim, type AtomicNonceStore, type KVNamespace, KvNonceStore, type KvNonceStoreOptions, MemoryNonceStore, type NonceStore, claimStoredNonce, isAtomicNonceStore, nonceTtlSeconds };

package/dist/nonce-store.js

@@ -1,9 +1,15 @@
 import {
   KvNonceStore,
-  MemoryNonceStore
-} from "./chunk-M7ZJAK4K.js";
+  MemoryNonceStore,
+  claimStoredNonce,
+  isAtomicNonceStore,
+  nonceTtlSeconds
+} from "./chunk-J5SDVHOL.js";
 export {
   KvNonceStore,
-  MemoryNonceStore
+  MemoryNonceStore,
+  claimStoredNonce,
+  isAtomicNonceStore,
+  nonceTtlSeconds
 };
 //# sourceMappingURL=nonce-store.js.map