@titan-design/hitl 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Henry Jewkes
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,101 @@
+# @titan-design/hitl
+
+Pause work on a human, and let a different process resume it. The primitive is
+"the same work, paused": `openGate()` from inside a task hands back something to
+await, and `resolveGate()` from anywhere else lets it continue.
+
+Tier 1 of the titan-platform DAG (TP-11). Depends on
+`@titan-design/store-sqlite`; `zod` is a peer (v4).
+
+## A gate is a row, not a promise
+
+The promise `wait()` returns is a local convenience. The gate itself is a
+database row, and that is what makes the primitive worth having: the process that
+opened the gate can crash, redeploy, or exit, and the pending gate is still there
+to be answered. A gate is addressable by id from any process, which is the whole
+point. The waiter polls, because the resolver may be a different process writing
+the same SQLite file.
+
+```ts
+import { openDatabase } from "@titan-design/store-sqlite";
+import { SqliteGateStore, openGate } from "@titan-design/hitl";
+import { z } from "zod";
+
+const store = new SqliteGateStore(openDatabase("~/.local/state/thing/gates.sqlite3"));
+
+const gate = openGate(store, {
+  id: "deploy-approval",
+  prompt: "Ship 1.4.0 to production?",
+  schema: z.object({ approved: z.boolean(), note: z.string().optional() }),
+  expiresAt: new Date(Date.now() + 3_600_000),
+});
+
+const answer = await gate.wait(); // { approved: true }
+```
+
+Somewhere else entirely, in a CLI, an MCP tool, or a dashboard route:
+
+```ts
+import { resolveGate, cancelGate } from "@titan-design/hitl";
+
+resolveGate(store, "deploy-approval", { approved: true });
+```
+
+After a restart, re-attach by id instead of re-opening:
+
+```ts
+import { waitForGate } from "@titan-design/hitl";
+
+for (const pending of store.listPending()) {
+  void waitForGate(store, pending.id, { schema: approvalSchema });
+}
+```
+
+## Two schema checks, on purpose
+
+The resolving process does not have your zod schema; by definition it is
+somewhere else. So `openGate` stores the schema as JSON Schema
+(`z.toJSONSchema`) on the row, and `resolveGate` runs `checkAgainstJsonSchema`
+against it. That is the boundary check: a bad payload is rejected where it is
+submitted, with a `GatePayloadInvalid` listing the offending paths.
+
+The waiter then re-validates with the real zod schema before `wait()` resolves.
+That is the type guarantee. The checker covers only the subset zod emits
+(`type`, `required`, `properties`, `items`, `enum`, `const`, `anyOf`,
+`additionalProperties: false`) and is not a general JSON Schema validator.
+
+## Stores
+
+Both implementations extend `BaseGateStore`, which owns every settle rule, and
+both pass the same behaviour suite.
+
+| Store | Use when |
+|---|---|
+| `MemoryGateStore` | tests, and single-process work that needs the pause but not the durability |
+| `SqliteGateStore` | anything that must survive a restart or be answered by another process |
+
+`SqliteGateStore` installs a `hitl_gate` table through store-sqlite's
+`runMigrations` on construction. Pass `migrate: false` and put `gateMigration(n)`
+in the product's own migration list when hitl shares a database with domain
+tables. `table` renames the table so one database can host several gate spaces.
+Timestamps are ISO-8601 strings, the shape store-sqlite writes and any surface
+can send on as-is.
+
+The row carries a `reason` column beyond the minimum, so a cancelled gate can
+tell its waiter why.
+
+## Settling
+
+A gate is `pending`, then exactly one of `resolved`, `cancelled`, or `expired`.
+A second `resolve` or `cancel` throws `GateAlreadySettled` and leaves the first
+answer intact.
+
+Expiry is **lazy**: nothing sweeps the table, so a read is what notices the
+deadline passed and flips the row to `expired`. The instant named by `expiresAt`
+counts as expired. Both stores take an injectable `now` so expiry is testable
+without waiting.
+
+`wait` rejects with `GateCancelled`, `GateExpired`, `GateNotFound`,
+`GatePayloadInvalid`, or `GateAborted` (when the caller's `AbortSignal` fires).
+Every one of them extends `GateError` and carries `gateId`. Aborting a wait does
+not touch the gate; the row stays pending for whoever picks it up next.

package/dist/index.d.ts

@@ -0,0 +1,176 @@
+import { ZodType } from 'zod';
+import { Db, Migration } from '@titan-design/store-sqlite';
+
+/** A gate is a row, never a promise: pending work survives the process that opened it. */
+type GateStatus = "pending" | "resolved" | "cancelled" | "expired";
+/** A JSON Schema document, stored so any process can validate a payload without the original zod schema. */
+type JsonSchema = Record<string, unknown>;
+interface GateRecord {
+    id: string;
+    prompt: string;
+    schema: JsonSchema | undefined;
+    status: GateStatus;
+    payload: unknown;
+    /** Why the gate was cancelled; unset for every other status. */
+    reason: string | undefined;
+    /** ISO-8601 with milliseconds, the shape store-sqlite writes and any surface can send as-is. */
+    createdAt: string;
+    resolvedAt: string | undefined;
+    expiresAt: string | undefined;
+}
+interface GateInput {
+    /** Defaults to a random UUID. Supply one to make the gate addressable by a name you already own. */
+    id?: string;
+    prompt: string;
+    schema?: JsonSchema;
+    expiresAt?: Date | string;
+}
+/**
+ * Synchronous on purpose: both implementations are local (a Map, and
+ * better-sqlite3), and `wait` is the only thing that needs to be async.
+ */
+interface GateStore {
+    create(input: GateInput): GateRecord;
+    get(id: string): GateRecord | undefined;
+    resolve(id: string, payload: unknown): GateRecord;
+    cancel(id: string, reason: string): GateRecord;
+    listPending(): GateRecord[];
+}
+declare class GateError extends Error {
+    readonly gateId: string;
+    constructor(message: string, gateId: string);
+}
+declare class GateNotFound extends GateError {
+    constructor(gateId: string);
+}
+declare class GateAlreadyExists extends GateError {
+    constructor(gateId: string);
+}
+declare class GateAlreadySettled extends GateError {
+    readonly status: GateStatus;
+    constructor(gateId: string, status: GateStatus);
+}
+declare class GateCancelled extends GateError {
+    readonly reason: string;
+    constructor(gateId: string, reason: string);
+}
+declare class GateExpired extends GateError {
+    constructor(gateId: string);
+}
+declare class GatePayloadInvalid extends GateError {
+    readonly issues: string[];
+    constructor(gateId: string, issues: string[]);
+}
+declare class GateAborted extends GateError {
+    constructor(gateId: string, reason: string);
+}
+
+declare const DEFAULT_POLL_MS = 250;
+interface OpenGateOptions<T> {
+    id?: string;
+    prompt: string;
+    /** Stored as JSON Schema so the resolving process can validate without it, and reused here to type the answer. */
+    schema?: ZodType<T>;
+    expiresAt?: Date | string;
+}
+interface WaitOptions<T> {
+    pollMs?: number;
+    signal?: AbortSignal;
+    /** Needed only when re-attaching to a gate this process did not open. */
+    schema?: ZodType<T>;
+}
+interface GateHandle<T> {
+    id: string;
+    record: GateRecord;
+    wait(options?: Omit<WaitOptions<T>, "schema">): Promise<T>;
+}
+/**
+ * Open a gate and hand back something to await. The row exists before this
+ * returns, so a crash here leaves a resolvable gate rather than a lost one.
+ */
+declare function openGate<T = unknown>(store: GateStore, options: OpenGateOptions<T>): GateHandle<T>;
+/**
+ * Await a gate by id from any process, including one that restarted after the
+ * gate was opened. Polls rather than subscribes because the resolver may be a
+ * different process writing the same SQLite file.
+ */
+declare function waitForGate<T = unknown>(store: GateStore, id: string, options?: WaitOptions<T>): Promise<T>;
+/** Resolve a gate from wherever the human answered: a CLI, an MCP tool, a dashboard route. */
+declare function resolveGate(store: GateStore, id: string, payload: unknown): GateRecord;
+declare function cancelGate(store: GateStore, id: string, reason: string): GateRecord;
+
+/**
+ * Every settle rule lives here so the memory and SQLite stores cannot drift
+ * apart. Subclasses only move rows.
+ */
+declare abstract class BaseGateStore implements GateStore {
+    protected readonly clock: () => number;
+    protected constructor(clock: () => number);
+    protected abstract insert(record: GateRecord): void;
+    protected abstract read(id: string): GateRecord | undefined;
+    protected abstract update(record: GateRecord): void;
+    protected abstract readByStatus(status: GateRecord["status"]): GateRecord[];
+    create(input: GateInput): GateRecord;
+    get(id: string): GateRecord | undefined;
+    resolve(id: string, payload: unknown): GateRecord;
+    cancel(id: string, reason: string): GateRecord;
+    listPending(): GateRecord[];
+    private requirePending;
+    /** Expiry is lazy: nothing sweeps the table, so a read is what notices the deadline passed. */
+    private lapseIfExpired;
+    protected nowIso(): string;
+}
+
+interface MemoryGateStoreOptions {
+    /** Epoch-millis clock, injectable so expiry is testable without waiting. */
+    now?: () => number;
+}
+/**
+ * In-process gates. Right for tests and for a single-process product that only
+ * needs the pause, not the durability; anything that must survive a restart
+ * wants `SqliteGateStore`.
+ */
+declare class MemoryGateStore extends BaseGateStore {
+    private readonly rows;
+    constructor(options?: MemoryGateStoreOptions);
+    protected insert(record: GateRecord): void;
+    protected read(id: string): GateRecord | undefined;
+    protected update(record: GateRecord): void;
+    protected readByStatus(status: GateRecord["status"]): GateRecord[];
+}
+
+declare const DEFAULT_GATE_TABLE = "hitl_gate";
+declare function gateTableDdl(name?: string): string;
+/** Drop into the product's own `runMigrations` list so hitl shares one database with its domain tables. */
+declare function gateMigration(version: number, name?: string): Migration;
+interface SqliteGateStoreOptions {
+    table?: string;
+    /** Run `gateMigration` on construction. Off when the product owns its migration list. */
+    migrate?: boolean;
+    now?: () => number;
+}
+/**
+ * Durable gates. Two instances on the same file are two processes as far as the
+ * gate is concerned, which is the entire point: whoever resolves the row does
+ * not have to be whoever opened it.
+ */
+declare class SqliteGateStore extends BaseGateStore {
+    private readonly db;
+    private readonly table;
+    constructor(db: Db, options?: SqliteGateStoreOptions);
+    protected insert(record: GateRecord): void;
+    protected read(id: string): GateRecord | undefined;
+    protected update(record: GateRecord): void;
+    protected readByStatus(status: GateStatus): GateRecord[];
+}
+
+/**
+ * A deliberately small structural check over the JSON Schema subset `z.toJSONSchema`
+ * emits. It exists so the process that resolves a gate can reject a bad payload
+ * without holding the original zod schema, which by definition lives in another
+ * process. The waiter still re-validates with the real zod schema, so this is the
+ * boundary check, not the type guarantee.
+ */
+declare function checkAgainstJsonSchema(schema: JsonSchema, value: unknown, path?: string): string[];
+
+export { BaseGateStore, DEFAULT_GATE_TABLE, DEFAULT_POLL_MS, GateAborted, GateAlreadyExists, GateAlreadySettled, GateCancelled, GateError, GateExpired, type GateHandle, type GateInput, GateNotFound, GatePayloadInvalid, type GateRecord, type GateStatus, type GateStore, type JsonSchema, MemoryGateStore, type MemoryGateStoreOptions, type OpenGateOptions, SqliteGateStore, type SqliteGateStoreOptions, type WaitOptions, cancelGate, checkAgainstJsonSchema, gateMigration, gateTableDdl, openGate, resolveGate, waitForGate };

package/dist/index.js

@@ -0,0 +1,387 @@
+// src/gate.ts
+import { toJSONSchema } from "zod";
+
+// src/types.ts
+var GateError = class extends Error {
+  constructor(message, gateId) {
+    super(message);
+    this.gateId = gateId;
+    this.name = new.target.name;
+  }
+  gateId;
+};
+var GateNotFound = class extends GateError {
+  constructor(gateId) {
+    super(`no gate with id ${gateId}`, gateId);
+  }
+};
+var GateAlreadyExists = class extends GateError {
+  constructor(gateId) {
+    super(`a gate with id ${gateId} already exists`, gateId);
+  }
+};
+var GateAlreadySettled = class extends GateError {
+  constructor(gateId, status) {
+    super(`gate ${gateId} is already ${status}`, gateId);
+    this.status = status;
+  }
+  status;
+};
+var GateCancelled = class extends GateError {
+  constructor(gateId, reason) {
+    super(`gate ${gateId} was cancelled: ${reason}`, gateId);
+    this.reason = reason;
+  }
+  reason;
+};
+var GateExpired = class extends GateError {
+  constructor(gateId) {
+    super(`gate ${gateId} expired before anyone resolved it`, gateId);
+  }
+};
+var GatePayloadInvalid = class extends GateError {
+  constructor(gateId, issues) {
+    super(`payload for gate ${gateId} does not match its schema: ${issues.join("; ")}`, gateId);
+    this.issues = issues;
+  }
+  issues;
+};
+var GateAborted = class extends GateError {
+  constructor(gateId, reason) {
+    super(`stopped waiting on gate ${gateId}: ${reason}`, gateId);
+  }
+};
+
+// src/gate.ts
+var DEFAULT_POLL_MS = 250;
+function openGate(store, options) {
+  const input = { prompt: options.prompt };
+  if (options.id !== void 0) input.id = options.id;
+  if (options.expiresAt !== void 0) input.expiresAt = options.expiresAt;
+  if (options.schema) input.schema = toJSONSchema(options.schema);
+  const record = store.create(input);
+  return {
+    id: record.id,
+    record,
+    wait: (waitOptions = {}) => {
+      const merged = { ...waitOptions };
+      if (options.schema) merged.schema = options.schema;
+      return waitForGate(store, record.id, merged);
+    }
+  };
+}
+async function waitForGate(store, id, options = {}) {
+  const pollMs = options.pollMs ?? DEFAULT_POLL_MS;
+  for (; ; ) {
+    throwIfAborted(id, options.signal);
+    const record = store.get(id);
+    if (!record) throw new GateNotFound(id);
+    if (record.status === "resolved") return validate(record, options.schema);
+    if (record.status === "cancelled") throw new GateCancelled(id, record.reason ?? "no reason given");
+    if (record.status === "expired") throw new GateExpired(id);
+    await sleep(pollMs, options.signal);
+  }
+}
+function resolveGate(store, id, payload) {
+  return store.resolve(id, payload);
+}
+function cancelGate(store, id, reason) {
+  return store.cancel(id, reason);
+}
+function validate(record, schema) {
+  if (!schema) return record.payload;
+  const parsed = schema.safeParse(record.payload);
+  if (parsed.success) return parsed.data;
+  throw new GatePayloadInvalid(
+    record.id,
+    parsed.error.issues.map((issue) => `${issue.path.join(".") || "$"}: ${issue.message}`)
+  );
+}
+function throwIfAborted(id, signal) {
+  if (signal?.aborted) throw new GateAborted(id, String(signal.reason ?? "aborted"));
+}
+function sleep(ms, signal) {
+  return new Promise((resolve) => {
+    const timer = setTimeout(finish, ms);
+    signal?.addEventListener("abort", finish, { once: true });
+    function finish() {
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", finish);
+      resolve();
+    }
+  });
+}
+
+// src/base-store.ts
+import { randomUUID } from "crypto";
+
+// src/json-schema.ts
+function checkAgainstJsonSchema(schema, value, path = "$") {
+  const issues = [];
+  collect(schema, value, path, issues);
+  return issues;
+}
+function collect(schema, value, path, issues) {
+  if (Array.isArray(schema.anyOf) || Array.isArray(schema.oneOf)) {
+    checkUnion(schema.anyOf ?? schema.oneOf, value, path, issues);
+    return;
+  }
+  if ("const" in schema && !Object.is(schema.const, value)) {
+    issues.push(`${path}: expected ${JSON.stringify(schema.const)}`);
+    return;
+  }
+  if (Array.isArray(schema.enum) && !schema.enum.some((option) => Object.is(option, value))) {
+    issues.push(`${path}: expected one of ${JSON.stringify(schema.enum)}`);
+    return;
+  }
+  if (typeof schema.type !== "string") return;
+  if (!matchesType(schema.type, value)) {
+    issues.push(`${path}: expected ${schema.type}, received ${describe(value)}`);
+    return;
+  }
+  if (schema.type === "object") checkObject(schema, value, path, issues);
+  if (schema.type === "array") checkArray(schema, value, path, issues);
+}
+function checkUnion(branches, value, path, issues) {
+  const matched = branches.some((branch) => checkAgainstJsonSchema(branch, value, path).length === 0);
+  if (!matched) issues.push(`${path}: matched none of the ${branches.length} allowed shapes`);
+}
+function checkObject(schema, value, path, issues) {
+  const properties = schema.properties ?? {};
+  for (const key of schema.required ?? []) {
+    if (!(key in value)) issues.push(`${path}.${key}: required`);
+  }
+  if (schema.additionalProperties === false) {
+    for (const key of Object.keys(value)) {
+      if (!(key in properties)) issues.push(`${path}.${key}: unexpected property`);
+    }
+  }
+  for (const [key, sub] of Object.entries(properties)) {
+    if (key in value) collect(sub, value[key], `${path}.${key}`, issues);
+  }
+}
+function checkArray(schema, value, path, issues) {
+  const items = schema.items;
+  if (!items) return;
+  value.forEach((entry, index) => collect(items, entry, `${path}[${index}]`, issues));
+}
+function matchesType(type, value) {
+  switch (type) {
+    case "object":
+      return typeof value === "object" && value !== null && !Array.isArray(value);
+    case "array":
+      return Array.isArray(value);
+    case "integer":
+      return Number.isInteger(value);
+    case "number":
+      return typeof value === "number" && Number.isFinite(value);
+    case "null":
+      return value === null;
+    default:
+      return typeof value === type;
+  }
+}
+function describe(value) {
+  if (value === null) return "null";
+  return Array.isArray(value) ? "array" : typeof value;
+}
+
+// src/base-store.ts
+var BaseGateStore = class {
+  constructor(clock) {
+    this.clock = clock;
+  }
+  clock;
+  create(input) {
+    const id = input.id ?? randomUUID();
+    if (this.read(id)) throw new GateAlreadyExists(id);
+    const record = {
+      id,
+      prompt: input.prompt,
+      schema: input.schema,
+      status: "pending",
+      payload: void 0,
+      reason: void 0,
+      createdAt: this.nowIso(),
+      resolvedAt: void 0,
+      expiresAt: toIso(input.expiresAt)
+    };
+    this.insert(record);
+    return record;
+  }
+  get(id) {
+    const record = this.read(id);
+    return record ? this.lapseIfExpired(record) : void 0;
+  }
+  resolve(id, payload) {
+    const record = this.requirePending(id);
+    if (record.schema) {
+      const issues = checkAgainstJsonSchema(record.schema, payload);
+      if (issues.length > 0) throw new GatePayloadInvalid(id, issues);
+    }
+    const resolved = { ...record, status: "resolved", payload, resolvedAt: this.nowIso() };
+    this.update(resolved);
+    return resolved;
+  }
+  cancel(id, reason) {
+    const record = this.requirePending(id);
+    const cancelled = { ...record, status: "cancelled", reason, resolvedAt: this.nowIso() };
+    this.update(cancelled);
+    return cancelled;
+  }
+  listPending() {
+    return this.readByStatus("pending").map((record) => this.lapseIfExpired(record)).filter((record) => record.status === "pending").sort((a, b) => a.createdAt.localeCompare(b.createdAt));
+  }
+  requirePending(id) {
+    const record = this.get(id);
+    if (!record) throw new GateNotFound(id);
+    if (record.status === "expired") throw new GateExpired(id);
+    if (record.status !== "pending") throw new GateAlreadySettled(id, record.status);
+    return record;
+  }
+  /** Expiry is lazy: nothing sweeps the table, so a read is what notices the deadline passed. */
+  lapseIfExpired(record) {
+    if (record.status !== "pending" || !record.expiresAt) return record;
+    if (Date.parse(record.expiresAt) > this.clock()) return record;
+    const expired = { ...record, status: "expired", resolvedAt: this.nowIso() };
+    this.update(expired);
+    return expired;
+  }
+  nowIso() {
+    return new Date(this.clock()).toISOString();
+  }
+};
+function toIso(value) {
+  if (value === void 0) return void 0;
+  return typeof value === "string" ? value : value.toISOString();
+}
+
+// src/memory-store.ts
+var MemoryGateStore = class extends BaseGateStore {
+  rows = /* @__PURE__ */ new Map();
+  constructor(options = {}) {
+    super(options.now ?? Date.now);
+  }
+  insert(record) {
+    this.rows.set(record.id, { ...record });
+  }
+  read(id) {
+    const row = this.rows.get(id);
+    return row ? { ...row } : void 0;
+  }
+  update(record) {
+    this.rows.set(record.id, { ...record });
+  }
+  readByStatus(status) {
+    return [...this.rows.values()].filter((row) => row.status === status).map((row) => ({ ...row }));
+  }
+};
+
+// src/sqlite-store.ts
+import { quoteIdent, runMigrations } from "@titan-design/store-sqlite";
+var DEFAULT_GATE_TABLE = "hitl_gate";
+function gateTableDdl(name = DEFAULT_GATE_TABLE) {
+  const t = quoteIdent(name);
+  return `
+    CREATE TABLE IF NOT EXISTS ${t} (
+      id          TEXT PRIMARY KEY,
+      prompt      TEXT NOT NULL,
+      schema      TEXT,
+      status      TEXT NOT NULL DEFAULT 'pending',
+      payload     TEXT,
+      reason      TEXT,
+      created_at  TEXT NOT NULL,
+      resolved_at TEXT,
+      expires_at  TEXT
+    );
+    CREATE INDEX IF NOT EXISTS ${quoteIdent(`${name}_pending`)}
+      ON ${t} (created_at) WHERE status = 'pending';
+  `;
+}
+function gateMigration(version, name = DEFAULT_GATE_TABLE) {
+  return { version, name: `hitl:${name}`, up: (db) => db.exec(gateTableDdl(name)) };
+}
+var SqliteGateStore = class extends BaseGateStore {
+  constructor(db, options = {}) {
+    super(options.now ?? Date.now);
+    this.db = db;
+    this.table = options.table ?? DEFAULT_GATE_TABLE;
+    if (options.migrate ?? true) runMigrations(db, [gateMigration(1, this.table)]);
+  }
+  db;
+  table;
+  insert(record) {
+    this.db.prepare(
+      `INSERT INTO ${quoteIdent(this.table)}
+           (id, prompt, schema, status, payload, reason, created_at, resolved_at, expires_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`
+    ).run(...columns(record));
+  }
+  read(id) {
+    const row = this.db.prepare(`SELECT * FROM ${quoteIdent(this.table)} WHERE id = ?`).get(id);
+    return row ? toRecord(row) : void 0;
+  }
+  update(record) {
+    this.db.prepare(
+      `UPDATE ${quoteIdent(this.table)}
+            SET status = ?, payload = ?, reason = ?, resolved_at = ?
+          WHERE id = ?`
+    ).run(record.status, toJson(record.payload), record.reason ?? null, record.resolvedAt ?? null, record.id);
+  }
+  readByStatus(status) {
+    const rows = this.db.prepare(`SELECT * FROM ${quoteIdent(this.table)} WHERE status = ? ORDER BY created_at`).all(status);
+    return rows.map(toRecord);
+  }
+};
+function columns(record) {
+  return [
+    record.id,
+    record.prompt,
+    record.schema ? JSON.stringify(record.schema) : null,
+    record.status,
+    toJson(record.payload),
+    record.reason ?? null,
+    record.createdAt,
+    record.resolvedAt ?? null,
+    record.expiresAt ?? null
+  ];
+}
+function toJson(payload) {
+  return payload === void 0 ? null : JSON.stringify(payload);
+}
+function toRecord(row) {
+  return {
+    id: row.id,
+    prompt: row.prompt,
+    schema: row.schema ? JSON.parse(row.schema) : void 0,
+    status: row.status,
+    payload: row.payload === null ? void 0 : JSON.parse(row.payload),
+    reason: row.reason ?? void 0,
+    createdAt: row.created_at,
+    resolvedAt: row.resolved_at ?? void 0,
+    expiresAt: row.expires_at ?? void 0
+  };
+}
+export {
+  BaseGateStore,
+  DEFAULT_GATE_TABLE,
+  DEFAULT_POLL_MS,
+  GateAborted,
+  GateAlreadyExists,
+  GateAlreadySettled,
+  GateCancelled,
+  GateError,
+  GateExpired,
+  GateNotFound,
+  GatePayloadInvalid,
+  MemoryGateStore,
+  SqliteGateStore,
+  cancelGate,
+  checkAgainstJsonSchema,
+  gateMigration,
+  gateTableDdl,
+  openGate,
+  resolveGate,
+  waitForGate
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/gate.ts","../src/types.ts","../src/base-store.ts","../src/json-schema.ts","../src/memory-store.ts","../src/sqlite-store.ts"],"sourcesContent":["import { toJSONSchema, type ZodType } from \"zod\";\nimport {\n  GateAborted,\n  GateCancelled,\n  GateExpired,\n  GateNotFound,\n  GatePayloadInvalid,\n  type GateRecord,\n  type GateStore,\n} from \"./types.js\";\n\nexport const DEFAULT_POLL_MS = 250;\n\nexport interface OpenGateOptions<T> {\n  id?: string;\n  prompt: string;\n  /** Stored as JSON Schema so the resolving process can validate without it, and reused here to type the answer. */\n  schema?: ZodType<T>;\n  expiresAt?: Date | string;\n}\n\nexport interface WaitOptions<T> {\n  pollMs?: number;\n  signal?: AbortSignal;\n  /** Needed only when re-attaching to a gate this process did not open. */\n  schema?: ZodType<T>;\n}\n\nexport interface GateHandle<T> {\n  id: string;\n  record: GateRecord;\n  wait(options?: Omit<WaitOptions<T>, \"schema\">): Promise<T>;\n}\n\n/**\n * Open a gate and hand back something to await. The row exists before this\n * returns, so a crash here leaves a resolvable gate rather than a lost one.\n */\nexport function openGate<T = unknown>(store: GateStore, options: OpenGateOptions<T>): GateHandle<T> {\n  const input: Parameters<GateStore[\"create\"]>[0] = { prompt: options.prompt };\n  if (options.id !== undefined) input.id = options.id;\n  if (options.expiresAt !== undefined) input.expiresAt = options.expiresAt;\n  if (options.schema) input.schema = toJSONSchema(options.schema) as Record<string, unknown>;\n\n  const record = store.create(input);\n  return {\n    id: record.id,\n    record,\n    wait: (waitOptions = {}) => {\n      const merged: WaitOptions<T> = { ...waitOptions };\n      if (options.schema) merged.schema = options.schema;\n      return waitForGate<T>(store, record.id, merged);\n    },\n  };\n}\n\n/**\n * Await a gate by id from any process, including one that restarted after the\n * gate was opened. Polls rather than subscribes because the resolver may be a\n * different process writing the same SQLite file.\n */\nexport async function waitForGate<T = unknown>(\n  store: GateStore,\n  id: string,\n  options: WaitOptions<T> = {},\n): Promise<T> {\n  const pollMs = options.pollMs ?? DEFAULT_POLL_MS;\n  for (;;) {\n    throwIfAborted(id, options.signal);\n    const record = store.get(id);\n    if (!record) throw new GateNotFound(id);\n    if (record.status === \"resolved\") return validate(record, options.schema);\n    if (record.status === \"cancelled\") throw new GateCancelled(id, record.reason ?? \"no reason given\");\n    if (record.status === \"expired\") throw new GateExpired(id);\n    await sleep(pollMs, options.signal);\n  }\n}\n\n/** Resolve a gate from wherever the human answered: a CLI, an MCP tool, a dashboard route. */\nexport function resolveGate(store: GateStore, id: string, payload: unknown): GateRecord {\n  return store.resolve(id, payload);\n}\n\nexport function cancelGate(store: GateStore, id: string, reason: string): GateRecord {\n  return store.cancel(id, reason);\n}\n\nfunction validate<T>(record: GateRecord, schema: ZodType<T> | undefined): T {\n  if (!schema) return record.payload as T;\n  const parsed = schema.safeParse(record.payload);\n  if (parsed.success) return parsed.data;\n  throw new GatePayloadInvalid(\n    record.id,\n    parsed.error.issues.map((issue) => `${issue.path.join(\".\") || \"$\"}: ${issue.message}`),\n  );\n}\n\nfunction throwIfAborted(id: string, signal: AbortSignal | undefined): void {\n  if (signal?.aborted) throw new GateAborted(id, String(signal.reason ?? \"aborted\"));\n}\n\nfunction sleep(ms: number, signal: AbortSignal | undefined): Promise<void> {\n  return new Promise((resolve) => {\n    const timer = setTimeout(finish, ms);\n    signal?.addEventListener(\"abort\", finish, { once: true });\n    function finish(): void {\n      clearTimeout(timer);\n      signal?.removeEventListener(\"abort\", finish);\n      resolve();\n    }\n  });\n}\n","/** A gate is a row, never a promise: pending work survives the process that opened it. */\nexport type GateStatus = \"pending\" | \"resolved\" | \"cancelled\" | \"expired\";\n\n/** A JSON Schema document, stored so any process can validate a payload without the original zod schema. */\nexport type JsonSchema = Record<string, unknown>;\n\nexport interface GateRecord {\n  id: string;\n  prompt: string;\n  schema: JsonSchema | undefined;\n  status: GateStatus;\n  payload: unknown;\n  /** Why the gate was cancelled; unset for every other status. */\n  reason: string | undefined;\n  /** ISO-8601 with milliseconds, the shape store-sqlite writes and any surface can send as-is. */\n  createdAt: string;\n  resolvedAt: string | undefined;\n  expiresAt: string | undefined;\n}\n\nexport interface GateInput {\n  /** Defaults to a random UUID. Supply one to make the gate addressable by a name you already own. */\n  id?: string;\n  prompt: string;\n  schema?: JsonSchema;\n  expiresAt?: Date | string;\n}\n\n/**\n * Synchronous on purpose: both implementations are local (a Map, and\n * better-sqlite3), and `wait` is the only thing that needs to be async.\n */\nexport interface GateStore {\n  create(input: GateInput): GateRecord;\n  get(id: string): GateRecord | undefined;\n  resolve(id: string, payload: unknown): GateRecord;\n  cancel(id: string, reason: string): GateRecord;\n  listPending(): GateRecord[];\n}\n\nexport class GateError extends Error {\n  constructor(\n    message: string,\n    readonly gateId: string,\n  ) {\n    super(message);\n    this.name = new.target.name;\n  }\n}\n\nexport class GateNotFound extends GateError {\n  constructor(gateId: string) {\n    super(`no gate with id ${gateId}`, gateId);\n  }\n}\n\nexport class GateAlreadyExists extends GateError {\n  constructor(gateId: string) {\n    super(`a gate with id ${gateId} already exists`, gateId);\n  }\n}\n\nexport class GateAlreadySettled extends GateError {\n  constructor(\n    gateId: string,\n    readonly status: GateStatus,\n  ) {\n    super(`gate ${gateId} is already ${status}`, gateId);\n  }\n}\n\nexport class GateCancelled extends GateError {\n  constructor(\n    gateId: string,\n    readonly reason: string,\n  ) {\n    super(`gate ${gateId} was cancelled: ${reason}`, gateId);\n  }\n}\n\nexport class GateExpired extends GateError {\n  constructor(gateId: string) {\n    super(`gate ${gateId} expired before anyone resolved it`, gateId);\n  }\n}\n\nexport class GatePayloadInvalid extends GateError {\n  constructor(\n    gateId: string,\n    readonly issues: string[],\n  ) {\n    super(`payload for gate ${gateId} does not match its schema: ${issues.join(\"; \")}`, gateId);\n  }\n}\n\nexport class GateAborted extends GateError {\n  constructor(gateId: string, reason: string) {\n    super(`stopped waiting on gate ${gateId}: ${reason}`, gateId);\n  }\n}\n","import { randomUUID } from \"node:crypto\";\nimport { checkAgainstJsonSchema } from \"./json-schema.js\";\nimport {\n  GateAlreadyExists,\n  GateAlreadySettled,\n  GateExpired,\n  GateNotFound,\n  GatePayloadInvalid,\n  type GateInput,\n  type GateRecord,\n  type GateStore,\n} from \"./types.js\";\n\n/**\n * Every settle rule lives here so the memory and SQLite stores cannot drift\n * apart. Subclasses only move rows.\n */\nexport abstract class BaseGateStore implements GateStore {\n  protected constructor(protected readonly clock: () => number) {}\n\n  protected abstract insert(record: GateRecord): void;\n  protected abstract read(id: string): GateRecord | undefined;\n  protected abstract update(record: GateRecord): void;\n  protected abstract readByStatus(status: GateRecord[\"status\"]): GateRecord[];\n\n  create(input: GateInput): GateRecord {\n    const id = input.id ?? randomUUID();\n    if (this.read(id)) throw new GateAlreadyExists(id);\n    const record: GateRecord = {\n      id,\n      prompt: input.prompt,\n      schema: input.schema,\n      status: \"pending\",\n      payload: undefined,\n      reason: undefined,\n      createdAt: this.nowIso(),\n      resolvedAt: undefined,\n      expiresAt: toIso(input.expiresAt),\n    };\n    this.insert(record);\n    return record;\n  }\n\n  get(id: string): GateRecord | undefined {\n    const record = this.read(id);\n    return record ? this.lapseIfExpired(record) : undefined;\n  }\n\n  resolve(id: string, payload: unknown): GateRecord {\n    const record = this.requirePending(id);\n    if (record.schema) {\n      const issues = checkAgainstJsonSchema(record.schema, payload);\n      if (issues.length > 0) throw new GatePayloadInvalid(id, issues);\n    }\n    const resolved: GateRecord = { ...record, status: \"resolved\", payload, resolvedAt: this.nowIso() };\n    this.update(resolved);\n    return resolved;\n  }\n\n  cancel(id: string, reason: string): GateRecord {\n    const record = this.requirePending(id);\n    const cancelled: GateRecord = { ...record, status: \"cancelled\", reason, resolvedAt: this.nowIso() };\n    this.update(cancelled);\n    return cancelled;\n  }\n\n  listPending(): GateRecord[] {\n    return this.readByStatus(\"pending\")\n      .map((record) => this.lapseIfExpired(record))\n      .filter((record) => record.status === \"pending\")\n      .sort((a, b) => a.createdAt.localeCompare(b.createdAt));\n  }\n\n  private requirePending(id: string): GateRecord {\n    const record = this.get(id);\n    if (!record) throw new GateNotFound(id);\n    if (record.status === \"expired\") throw new GateExpired(id);\n    if (record.status !== \"pending\") throw new GateAlreadySettled(id, record.status);\n    return record;\n  }\n\n  /** Expiry is lazy: nothing sweeps the table, so a read is what notices the deadline passed. */\n  private lapseIfExpired(record: GateRecord): GateRecord {\n    if (record.status !== \"pending\" || !record.expiresAt) return record;\n    if (Date.parse(record.expiresAt) > this.clock()) return record;\n    const expired: GateRecord = { ...record, status: \"expired\", resolvedAt: this.nowIso() };\n    this.update(expired);\n    return expired;\n  }\n\n  protected nowIso(): string {\n    return new Date(this.clock()).toISOString();\n  }\n}\n\nfunction toIso(value: Date | string | undefined): string | undefined {\n  if (value === undefined) return undefined;\n  return typeof value === \"string\" ? value : value.toISOString();\n}\n","import type { JsonSchema } from \"./types.js\";\n\n/**\n * A deliberately small structural check over the JSON Schema subset `z.toJSONSchema`\n * emits. It exists so the process that resolves a gate can reject a bad payload\n * without holding the original zod schema, which by definition lives in another\n * process. The waiter still re-validates with the real zod schema, so this is the\n * boundary check, not the type guarantee.\n */\nexport function checkAgainstJsonSchema(schema: JsonSchema, value: unknown, path = \"$\"): string[] {\n  const issues: string[] = [];\n  collect(schema, value, path, issues);\n  return issues;\n}\n\nfunction collect(schema: JsonSchema, value: unknown, path: string, issues: string[]): void {\n  if (Array.isArray(schema.anyOf) || Array.isArray(schema.oneOf)) {\n    checkUnion((schema.anyOf ?? schema.oneOf) as JsonSchema[], value, path, issues);\n    return;\n  }\n  if (\"const\" in schema && !Object.is(schema.const, value)) {\n    issues.push(`${path}: expected ${JSON.stringify(schema.const)}`);\n    return;\n  }\n  if (Array.isArray(schema.enum) && !schema.enum.some((option) => Object.is(option, value))) {\n    issues.push(`${path}: expected one of ${JSON.stringify(schema.enum)}`);\n    return;\n  }\n  if (typeof schema.type !== \"string\") return;\n  if (!matchesType(schema.type, value)) {\n    issues.push(`${path}: expected ${schema.type}, received ${describe(value)}`);\n    return;\n  }\n  if (schema.type === \"object\") checkObject(schema, value as Record<string, unknown>, path, issues);\n  if (schema.type === \"array\") checkArray(schema, value as unknown[], path, issues);\n}\n\nfunction checkUnion(branches: JsonSchema[], value: unknown, path: string, issues: string[]): void {\n  const matched = branches.some((branch) => checkAgainstJsonSchema(branch, value, path).length === 0);\n  if (!matched) issues.push(`${path}: matched none of the ${branches.length} allowed shapes`);\n}\n\nfunction checkObject(schema: JsonSchema, value: Record<string, unknown>, path: string, issues: string[]): void {\n  const properties = (schema.properties ?? {}) as Record<string, JsonSchema>;\n  for (const key of (schema.required ?? []) as string[]) {\n    if (!(key in value)) issues.push(`${path}.${key}: required`);\n  }\n  if (schema.additionalProperties === false) {\n    for (const key of Object.keys(value)) {\n      if (!(key in properties)) issues.push(`${path}.${key}: unexpected property`);\n    }\n  }\n  for (const [key, sub] of Object.entries(properties)) {\n    if (key in value) collect(sub, value[key], `${path}.${key}`, issues);\n  }\n}\n\nfunction checkArray(schema: JsonSchema, value: unknown[], path: string, issues: string[]): void {\n  const items = schema.items as JsonSchema | undefined;\n  if (!items) return;\n  value.forEach((entry, index) => collect(items, entry, `${path}[${index}]`, issues));\n}\n\nfunction matchesType(type: string, value: unknown): boolean {\n  switch (type) {\n    case \"object\":\n      return typeof value === \"object\" && value !== null && !Array.isArray(value);\n    case \"array\":\n      return Array.isArray(value);\n    case \"integer\":\n      return Number.isInteger(value);\n    case \"number\":\n      return typeof value === \"number\" && Number.isFinite(value);\n    case \"null\":\n      return value === null;\n    default:\n      return typeof value === type;\n  }\n}\n\nfunction describe(value: unknown): string {\n  if (value === null) return \"null\";\n  return Array.isArray(value) ? \"array\" : typeof value;\n}\n","import { BaseGateStore } from \"./base-store.js\";\nimport type { GateRecord } from \"./types.js\";\n\nexport interface MemoryGateStoreOptions {\n  /** Epoch-millis clock, injectable so expiry is testable without waiting. */\n  now?: () => number;\n}\n\n/**\n * In-process gates. Right for tests and for a single-process product that only\n * needs the pause, not the durability; anything that must survive a restart\n * wants `SqliteGateStore`.\n */\nexport class MemoryGateStore extends BaseGateStore {\n  private readonly rows = new Map<string, GateRecord>();\n\n  constructor(options: MemoryGateStoreOptions = {}) {\n    super(options.now ?? Date.now);\n  }\n\n  protected insert(record: GateRecord): void {\n    this.rows.set(record.id, { ...record });\n  }\n\n  protected read(id: string): GateRecord | undefined {\n    const row = this.rows.get(id);\n    return row ? { ...row } : undefined;\n  }\n\n  protected update(record: GateRecord): void {\n    this.rows.set(record.id, { ...record });\n  }\n\n  protected readByStatus(status: GateRecord[\"status\"]): GateRecord[] {\n    return [...this.rows.values()].filter((row) => row.status === status).map((row) => ({ ...row }));\n  }\n}\n","import { quoteIdent, runMigrations, type Db, type Migration } from \"@titan-design/store-sqlite\";\nimport { BaseGateStore } from \"./base-store.js\";\nimport type { GateRecord, GateStatus, JsonSchema } from \"./types.js\";\n\nexport const DEFAULT_GATE_TABLE = \"hitl_gate\";\n\nexport function gateTableDdl(name: string = DEFAULT_GATE_TABLE): string {\n  const t = quoteIdent(name);\n  return `\n    CREATE TABLE IF NOT EXISTS ${t} (\n      id          TEXT PRIMARY KEY,\n      prompt      TEXT NOT NULL,\n      schema      TEXT,\n      status      TEXT NOT NULL DEFAULT 'pending',\n      payload     TEXT,\n      reason      TEXT,\n      created_at  TEXT NOT NULL,\n      resolved_at TEXT,\n      expires_at  TEXT\n    );\n    CREATE INDEX IF NOT EXISTS ${quoteIdent(`${name}_pending`)}\n      ON ${t} (created_at) WHERE status = 'pending';\n  `;\n}\n\n/** Drop into the product's own `runMigrations` list so hitl shares one database with its domain tables. */\nexport function gateMigration(version: number, name: string = DEFAULT_GATE_TABLE): Migration {\n  return { version, name: `hitl:${name}`, up: (db) => db.exec(gateTableDdl(name)) };\n}\n\nexport interface SqliteGateStoreOptions {\n  table?: string;\n  /** Run `gateMigration` on construction. Off when the product owns its migration list. */\n  migrate?: boolean;\n  now?: () => number;\n}\n\ninterface RawGateRow {\n  id: string;\n  prompt: string;\n  schema: string | null;\n  status: GateStatus;\n  payload: string | null;\n  reason: string | null;\n  created_at: string;\n  resolved_at: string | null;\n  expires_at: string | null;\n}\n\n/**\n * Durable gates. Two instances on the same file are two processes as far as the\n * gate is concerned, which is the entire point: whoever resolves the row does\n * not have to be whoever opened it.\n */\nexport class SqliteGateStore extends BaseGateStore {\n  private readonly table: string;\n\n  constructor(\n    private readonly db: Db,\n    options: SqliteGateStoreOptions = {},\n  ) {\n    super(options.now ?? Date.now);\n    this.table = options.table ?? DEFAULT_GATE_TABLE;\n    if (options.migrate ?? true) runMigrations(db, [gateMigration(1, this.table)]);\n  }\n\n  protected insert(record: GateRecord): void {\n    this.db\n      .prepare(\n        `INSERT INTO ${quoteIdent(this.table)}\n           (id, prompt, schema, status, payload, reason, created_at, resolved_at, expires_at)\n         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n      )\n      .run(...columns(record));\n  }\n\n  protected read(id: string): GateRecord | undefined {\n    const row = this.db.prepare(`SELECT * FROM ${quoteIdent(this.table)} WHERE id = ?`).get(id) as\n      | RawGateRow\n      | undefined;\n    return row ? toRecord(row) : undefined;\n  }\n\n  protected update(record: GateRecord): void {\n    this.db\n      .prepare(\n        `UPDATE ${quoteIdent(this.table)}\n            SET status = ?, payload = ?, reason = ?, resolved_at = ?\n          WHERE id = ?`,\n      )\n      .run(record.status, toJson(record.payload), record.reason ?? null, record.resolvedAt ?? null, record.id);\n  }\n\n  protected readByStatus(status: GateStatus): GateRecord[] {\n    const rows = this.db\n      .prepare(`SELECT * FROM ${quoteIdent(this.table)} WHERE status = ? ORDER BY created_at`)\n      .all(status) as RawGateRow[];\n    return rows.map(toRecord);\n  }\n}\n\nfunction columns(record: GateRecord): unknown[] {\n  return [\n    record.id,\n    record.prompt,\n    record.schema ? JSON.stringify(record.schema) : null,\n    record.status,\n    toJson(record.payload),\n    record.reason ?? null,\n    record.createdAt,\n    record.resolvedAt ?? null,\n    record.expiresAt ?? null,\n  ];\n}\n\n/** `undefined` and a stored JSON `null` are different states, so only the former becomes a SQL NULL. */\nfunction toJson(payload: unknown): string | null {\n  return payload === undefined ? null : JSON.stringify(payload);\n}\n\nfunction toRecord(row: RawGateRow): GateRecord {\n  return {\n    id: row.id,\n    prompt: row.prompt,\n    schema: row.schema ? (JSON.parse(row.schema) as JsonSchema) : undefined,\n    status: row.status,\n    payload: row.payload === null ? undefined : JSON.parse(row.payload),\n    reason: row.reason ?? undefined,\n    createdAt: row.created_at,\n    resolvedAt: row.resolved_at ?? undefined,\n    expiresAt: row.expires_at ?? undefined,\n  };\n}\n"],"mappings":";AAAA,SAAS,oBAAkC;;;ACwCpC,IAAM,YAAN,cAAwB,MAAM;AAAA,EACnC,YACE,SACS,QACT;AACA,UAAM,OAAO;AAFJ;AAGT,SAAK,OAAO,WAAW;AAAA,EACzB;AAAA,EAJW;AAKb;AAEO,IAAM,eAAN,cAA2B,UAAU;AAAA,EAC1C,YAAY,QAAgB;AAC1B,UAAM,mBAAmB,MAAM,IAAI,MAAM;AAAA,EAC3C;AACF;AAEO,IAAM,oBAAN,cAAgC,UAAU;AAAA,EAC/C,YAAY,QAAgB;AAC1B,UAAM,kBAAkB,MAAM,mBAAmB,MAAM;AAAA,EACzD;AACF;AAEO,IAAM,qBAAN,cAAiC,UAAU;AAAA,EAChD,YACE,QACS,QACT;AACA,UAAM,QAAQ,MAAM,eAAe,MAAM,IAAI,MAAM;AAF1C;AAAA,EAGX;AAAA,EAHW;AAIb;AAEO,IAAM,gBAAN,cAA4B,UAAU;AAAA,EAC3C,YACE,QACS,QACT;AACA,UAAM,QAAQ,MAAM,mBAAmB,MAAM,IAAI,MAAM;AAF9C;AAAA,EAGX;AAAA,EAHW;AAIb;AAEO,IAAM,cAAN,cAA0B,UAAU;AAAA,EACzC,YAAY,QAAgB;AAC1B,UAAM,QAAQ,MAAM,sCAAsC,MAAM;AAAA,EAClE;AACF;AAEO,IAAM,qBAAN,cAAiC,UAAU;AAAA,EAChD,YACE,QACS,QACT;AACA,UAAM,oBAAoB,MAAM,+BAA+B,OAAO,KAAK,IAAI,CAAC,IAAI,MAAM;AAFjF;AAAA,EAGX;AAAA,EAHW;AAIb;AAEO,IAAM,cAAN,cAA0B,UAAU;AAAA,EACzC,YAAY,QAAgB,QAAgB;AAC1C,UAAM,2BAA2B,MAAM,KAAK,MAAM,IAAI,MAAM;AAAA,EAC9D;AACF;;;ADxFO,IAAM,kBAAkB;AA2BxB,SAAS,SAAsB,OAAkB,SAA4C;AAClG,QAAM,QAA4C,EAAE,QAAQ,QAAQ,OAAO;AAC3E,MAAI,QAAQ,OAAO,OAAW,OAAM,KAAK,QAAQ;AACjD,MAAI,QAAQ,cAAc,OAAW,OAAM,YAAY,QAAQ;AAC/D,MAAI,QAAQ,OAAQ,OAAM,SAAS,aAAa,QAAQ,MAAM;AAE9D,QAAM,SAAS,MAAM,OAAO,KAAK;AACjC,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX;AAAA,IACA,MAAM,CAAC,cAAc,CAAC,MAAM;AAC1B,YAAM,SAAyB,EAAE,GAAG,YAAY;AAChD,UAAI,QAAQ,OAAQ,QAAO,SAAS,QAAQ;AAC5C,aAAO,YAAe,OAAO,OAAO,IAAI,MAAM;AAAA,IAChD;AAAA,EACF;AACF;AAOA,eAAsB,YACpB,OACA,IACA,UAA0B,CAAC,GACf;AACZ,QAAM,SAAS,QAAQ,UAAU;AACjC,aAAS;AACP,mBAAe,IAAI,QAAQ,MAAM;AACjC,UAAM,SAAS,MAAM,IAAI,EAAE;AAC3B,QAAI,CAAC,OAAQ,OAAM,IAAI,aAAa,EAAE;AACtC,QAAI,OAAO,WAAW,WAAY,QAAO,SAAS,QAAQ,QAAQ,MAAM;AACxE,QAAI,OAAO,WAAW,YAAa,OAAM,IAAI,cAAc,IAAI,OAAO,UAAU,iBAAiB;AACjG,QAAI,OAAO,WAAW,UAAW,OAAM,IAAI,YAAY,EAAE;AACzD,UAAM,MAAM,QAAQ,QAAQ,MAAM;AAAA,EACpC;AACF;AAGO,SAAS,YAAY,OAAkB,IAAY,SAA8B;AACtF,SAAO,MAAM,QAAQ,IAAI,OAAO;AAClC;AAEO,SAAS,WAAW,OAAkB,IAAY,QAA4B;AACnF,SAAO,MAAM,OAAO,IAAI,MAAM;AAChC;AAEA,SAAS,SAAY,QAAoB,QAAmC;AAC1E,MAAI,CAAC,OAAQ,QAAO,OAAO;AAC3B,QAAM,SAAS,OAAO,UAAU,OAAO,OAAO;AAC9C,MAAI,OAAO,QAAS,QAAO,OAAO;AAClC,QAAM,IAAI;AAAA,IACR,OAAO;AAAA,IACP,OAAO,MAAM,OAAO,IAAI,CAAC,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,KAAK,GAAG,KAAK,MAAM,OAAO,EAAE;AAAA,EACvF;AACF;AAEA,SAAS,eAAe,IAAY,QAAuC;AACzE,MAAI,QAAQ,QAAS,OAAM,IAAI,YAAY,IAAI,OAAO,OAAO,UAAU,SAAS,CAAC;AACnF;AAEA,SAAS,MAAM,IAAY,QAAgD;AACzE,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAM,QAAQ,WAAW,QAAQ,EAAE;AACnC,YAAQ,iBAAiB,SAAS,QAAQ,EAAE,MAAM,KAAK,CAAC;AACxD,aAAS,SAAe;AACtB,mBAAa,KAAK;AAClB,cAAQ,oBAAoB,SAAS,MAAM;AAC3C,cAAQ;AAAA,IACV;AAAA,EACF,CAAC;AACH;;;AE/GA,SAAS,kBAAkB;;;ACSpB,SAAS,uBAAuB,QAAoB,OAAgB,OAAO,KAAe;AAC/F,QAAM,SAAmB,CAAC;AAC1B,UAAQ,QAAQ,OAAO,MAAM,MAAM;AACnC,SAAO;AACT;AAEA,SAAS,QAAQ,QAAoB,OAAgB,MAAc,QAAwB;AACzF,MAAI,MAAM,QAAQ,OAAO,KAAK,KAAK,MAAM,QAAQ,OAAO,KAAK,GAAG;AAC9D,eAAY,OAAO,SAAS,OAAO,OAAwB,OAAO,MAAM,MAAM;AAC9E;AAAA,EACF;AACA,MAAI,WAAW,UAAU,CAAC,OAAO,GAAG,OAAO,OAAO,KAAK,GAAG;AACxD,WAAO,KAAK,GAAG,IAAI,cAAc,KAAK,UAAU,OAAO,KAAK,CAAC,EAAE;AAC/D;AAAA,EACF;AACA,MAAI,MAAM,QAAQ,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,WAAW,OAAO,GAAG,QAAQ,KAAK,CAAC,GAAG;AACzF,WAAO,KAAK,GAAG,IAAI,qBAAqB,KAAK,UAAU,OAAO,IAAI,CAAC,EAAE;AACrE;AAAA,EACF;AACA,MAAI,OAAO,OAAO,SAAS,SAAU;AACrC,MAAI,CAAC,YAAY,OAAO,MAAM,KAAK,GAAG;AACpC,WAAO,KAAK,GAAG,IAAI,cAAc,OAAO,IAAI,cAAc,SAAS,KAAK,CAAC,EAAE;AAC3E;AAAA,EACF;AACA,MAAI,OAAO,SAAS,SAAU,aAAY,QAAQ,OAAkC,MAAM,MAAM;AAChG,MAAI,OAAO,SAAS,QAAS,YAAW,QAAQ,OAAoB,MAAM,MAAM;AAClF;AAEA,SAAS,WAAW,UAAwB,OAAgB,MAAc,QAAwB;AAChG,QAAM,UAAU,SAAS,KAAK,CAAC,WAAW,uBAAuB,QAAQ,OAAO,IAAI,EAAE,WAAW,CAAC;AAClG,MAAI,CAAC,QAAS,QAAO,KAAK,GAAG,IAAI,yBAAyB,SAAS,MAAM,iBAAiB;AAC5F;AAEA,SAAS,YAAY,QAAoB,OAAgC,MAAc,QAAwB;AAC7G,QAAM,aAAc,OAAO,cAAc,CAAC;AAC1C,aAAW,OAAQ,OAAO,YAAY,CAAC,GAAgB;AACrD,QAAI,EAAE,OAAO,OAAQ,QAAO,KAAK,GAAG,IAAI,IAAI,GAAG,YAAY;AAAA,EAC7D;AACA,MAAI,OAAO,yBAAyB,OAAO;AACzC,eAAW,OAAO,OAAO,KAAK,KAAK,GAAG;AACpC,UAAI,EAAE,OAAO,YAAa,QAAO,KAAK,GAAG,IAAI,IAAI,GAAG,uBAAuB;AAAA,IAC7E;AAAA,EACF;AACA,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,UAAU,GAAG;AACnD,QAAI,OAAO,MAAO,SAAQ,KAAK,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,GAAG,IAAI,MAAM;AAAA,EACrE;AACF;AAEA,SAAS,WAAW,QAAoB,OAAkB,MAAc,QAAwB;AAC9F,QAAM,QAAQ,OAAO;AACrB,MAAI,CAAC,MAAO;AACZ,QAAM,QAAQ,CAAC,OAAO,UAAU,QAAQ,OAAO,OAAO,GAAG,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC;AACpF;AAEA,SAAS,YAAY,MAAc,OAAyB;AAC1D,UAAQ,MAAM;AAAA,IACZ,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA,IAC5E,KAAK;AACH,aAAO,MAAM,QAAQ,KAAK;AAAA,IAC5B,KAAK;AACH,aAAO,OAAO,UAAU,KAAK;AAAA,IAC/B,KAAK;AACH,aAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK;AAAA,IAC3D,KAAK;AACH,aAAO,UAAU;AAAA,IACnB;AACE,aAAO,OAAO,UAAU;AAAA,EAC5B;AACF;AAEA,SAAS,SAAS,OAAwB;AACxC,MAAI,UAAU,KAAM,QAAO;AAC3B,SAAO,MAAM,QAAQ,KAAK,IAAI,UAAU,OAAO;AACjD;;;ADlEO,IAAe,gBAAf,MAAkD;AAAA,EAC7C,YAA+B,OAAqB;AAArB;AAAA,EAAsB;AAAA,EAAtB;AAAA,EAOzC,OAAO,OAA8B;AACnC,UAAM,KAAK,MAAM,MAAM,WAAW;AAClC,QAAI,KAAK,KAAK,EAAE,EAAG,OAAM,IAAI,kBAAkB,EAAE;AACjD,UAAM,SAAqB;AAAA,MACzB;AAAA,MACA,QAAQ,MAAM;AAAA,MACd,QAAQ,MAAM;AAAA,MACd,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,WAAW,KAAK,OAAO;AAAA,MACvB,YAAY;AAAA,MACZ,WAAW,MAAM,MAAM,SAAS;AAAA,IAClC;AACA,SAAK,OAAO,MAAM;AAClB,WAAO;AAAA,EACT;AAAA,EAEA,IAAI,IAAoC;AACtC,UAAM,SAAS,KAAK,KAAK,EAAE;AAC3B,WAAO,SAAS,KAAK,eAAe,MAAM,IAAI;AAAA,EAChD;AAAA,EAEA,QAAQ,IAAY,SAA8B;AAChD,UAAM,SAAS,KAAK,eAAe,EAAE;AACrC,QAAI,OAAO,QAAQ;AACjB,YAAM,SAAS,uBAAuB,OAAO,QAAQ,OAAO;AAC5D,UAAI,OAAO,SAAS,EAAG,OAAM,IAAI,mBAAmB,IAAI,MAAM;AAAA,IAChE;AACA,UAAM,WAAuB,EAAE,GAAG,QAAQ,QAAQ,YAAY,SAAS,YAAY,KAAK,OAAO,EAAE;AACjG,SAAK,OAAO,QAAQ;AACpB,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,IAAY,QAA4B;AAC7C,UAAM,SAAS,KAAK,eAAe,EAAE;AACrC,UAAM,YAAwB,EAAE,GAAG,QAAQ,QAAQ,aAAa,QAAQ,YAAY,KAAK,OAAO,EAAE;AAClG,SAAK,OAAO,SAAS;AACrB,WAAO;AAAA,EACT;AAAA,EAEA,cAA4B;AAC1B,WAAO,KAAK,aAAa,SAAS,EAC/B,IAAI,CAAC,WAAW,KAAK,eAAe,MAAM,CAAC,EAC3C,OAAO,CAAC,WAAW,OAAO,WAAW,SAAS,EAC9C,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,cAAc,EAAE,SAAS,CAAC;AAAA,EAC1D;AAAA,EAEQ,eAAe,IAAwB;AAC7C,UAAM,SAAS,KAAK,IAAI,EAAE;AAC1B,QAAI,CAAC,OAAQ,OAAM,IAAI,aAAa,EAAE;AACtC,QAAI,OAAO,WAAW,UAAW,OAAM,IAAI,YAAY,EAAE;AACzD,QAAI,OAAO,WAAW,UAAW,OAAM,IAAI,mBAAmB,IAAI,OAAO,MAAM;AAC/E,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,eAAe,QAAgC;AACrD,QAAI,OAAO,WAAW,aAAa,CAAC,OAAO,UAAW,QAAO;AAC7D,QAAI,KAAK,MAAM,OAAO,SAAS,IAAI,KAAK,MAAM,EAAG,QAAO;AACxD,UAAM,UAAsB,EAAE,GAAG,QAAQ,QAAQ,WAAW,YAAY,KAAK,OAAO,EAAE;AACtF,SAAK,OAAO,OAAO;AACnB,WAAO;AAAA,EACT;AAAA,EAEU,SAAiB;AACzB,WAAO,IAAI,KAAK,KAAK,MAAM,CAAC,EAAE,YAAY;AAAA,EAC5C;AACF;AAEA,SAAS,MAAM,OAAsD;AACnE,MAAI,UAAU,OAAW,QAAO;AAChC,SAAO,OAAO,UAAU,WAAW,QAAQ,MAAM,YAAY;AAC/D;;;AErFO,IAAM,kBAAN,cAA8B,cAAc;AAAA,EAChC,OAAO,oBAAI,IAAwB;AAAA,EAEpD,YAAY,UAAkC,CAAC,GAAG;AAChD,UAAM,QAAQ,OAAO,KAAK,GAAG;AAAA,EAC/B;AAAA,EAEU,OAAO,QAA0B;AACzC,SAAK,KAAK,IAAI,OAAO,IAAI,EAAE,GAAG,OAAO,CAAC;AAAA,EACxC;AAAA,EAEU,KAAK,IAAoC;AACjD,UAAM,MAAM,KAAK,KAAK,IAAI,EAAE;AAC5B,WAAO,MAAM,EAAE,GAAG,IAAI,IAAI;AAAA,EAC5B;AAAA,EAEU,OAAO,QAA0B;AACzC,SAAK,KAAK,IAAI,OAAO,IAAI,EAAE,GAAG,OAAO,CAAC;AAAA,EACxC;AAAA,EAEU,aAAa,QAA4C;AACjE,WAAO,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE,OAAO,CAAC,QAAQ,IAAI,WAAW,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,EAAE;AAAA,EACjG;AACF;;;ACpCA,SAAS,YAAY,qBAA8C;AAI5D,IAAM,qBAAqB;AAE3B,SAAS,aAAa,OAAe,oBAA4B;AACtE,QAAM,IAAI,WAAW,IAAI;AACzB,SAAO;AAAA,iCACwB,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iCAWD,WAAW,GAAG,IAAI,UAAU,CAAC;AAAA,WACnD,CAAC;AAAA;AAEZ;AAGO,SAAS,cAAc,SAAiB,OAAe,oBAA+B;AAC3F,SAAO,EAAE,SAAS,MAAM,QAAQ,IAAI,IAAI,IAAI,CAAC,OAAO,GAAG,KAAK,aAAa,IAAI,CAAC,EAAE;AAClF;AA0BO,IAAM,kBAAN,cAA8B,cAAc;AAAA,EAGjD,YACmB,IACjB,UAAkC,CAAC,GACnC;AACA,UAAM,QAAQ,OAAO,KAAK,GAAG;AAHZ;AAIjB,SAAK,QAAQ,QAAQ,SAAS;AAC9B,QAAI,QAAQ,WAAW,KAAM,eAAc,IAAI,CAAC,cAAc,GAAG,KAAK,KAAK,CAAC,CAAC;AAAA,EAC/E;AAAA,EANmB;AAAA,EAHF;AAAA,EAWP,OAAO,QAA0B;AACzC,SAAK,GACF;AAAA,MACC,eAAe,WAAW,KAAK,KAAK,CAAC;AAAA;AAAA;AAAA,IAGvC,EACC,IAAI,GAAG,QAAQ,MAAM,CAAC;AAAA,EAC3B;AAAA,EAEU,KAAK,IAAoC;AACjD,UAAM,MAAM,KAAK,GAAG,QAAQ,iBAAiB,WAAW,KAAK,KAAK,CAAC,eAAe,EAAE,IAAI,EAAE;AAG1F,WAAO,MAAM,SAAS,GAAG,IAAI;AAAA,EAC/B;AAAA,EAEU,OAAO,QAA0B;AACzC,SAAK,GACF;AAAA,MACC,UAAU,WAAW,KAAK,KAAK,CAAC;AAAA;AAAA;AAAA,IAGlC,EACC,IAAI,OAAO,QAAQ,OAAO,OAAO,OAAO,GAAG,OAAO,UAAU,MAAM,OAAO,cAAc,MAAM,OAAO,EAAE;AAAA,EAC3G;AAAA,EAEU,aAAa,QAAkC;AACvD,UAAM,OAAO,KAAK,GACf,QAAQ,iBAAiB,WAAW,KAAK,KAAK,CAAC,uCAAuC,EACtF,IAAI,MAAM;AACb,WAAO,KAAK,IAAI,QAAQ;AAAA,EAC1B;AACF;AAEA,SAAS,QAAQ,QAA+B;AAC9C,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,OAAO,SAAS,KAAK,UAAU,OAAO,MAAM,IAAI;AAAA,IAChD,OAAO;AAAA,IACP,OAAO,OAAO,OAAO;AAAA,IACrB,OAAO,UAAU;AAAA,IACjB,OAAO;AAAA,IACP,OAAO,cAAc;AAAA,IACrB,OAAO,aAAa;AAAA,EACtB;AACF;AAGA,SAAS,OAAO,SAAiC;AAC/C,SAAO,YAAY,SAAY,OAAO,KAAK,UAAU,OAAO;AAC9D;AAEA,SAAS,SAAS,KAA6B;AAC7C,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR,QAAQ,IAAI;AAAA,IACZ,QAAQ,IAAI,SAAU,KAAK,MAAM,IAAI,MAAM,IAAmB;AAAA,IAC9D,QAAQ,IAAI;AAAA,IACZ,SAAS,IAAI,YAAY,OAAO,SAAY,KAAK,MAAM,IAAI,OAAO;AAAA,IAClE,QAAQ,IAAI,UAAU;AAAA,IACtB,WAAW,IAAI;AAAA,IACf,YAAY,IAAI,eAAe;AAAA,IAC/B,WAAW,IAAI,cAAc;AAAA,EAC/B;AACF;","names":[]}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@titan-design/hitl",
+  "version": "0.1.0",
+  "description": "Human-in-the-loop gate()/resolve() primitive",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "author": "Henry Jewkes",
+  "license": "MIT",
+  "homepage": "https://github.com/HJewkes/titan-platform#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/HJewkes/titan-platform.git",
+    "directory": "packages/hitl"
+  },
+  "bugs": "https://github.com/HJewkes/titan-platform/issues",
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@titan-design/store-sqlite": "0.1.0"
+  },
+  "peerDependencies": {
+    "zod": "^4.0.0"
+  },
+  "devDependencies": {
+    "zod": "^4.4.3"
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint src"
+  }
+}