@undefineds.co/xpod 0.3.57 → 0.3.61

package/dist/api/http/readBoundedJsonBody.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readBoundedJsonBody = readBoundedJsonBody;
+function readBoundedJsonBody(request, options) {
+    return new Promise((resolve, reject) => {
+        let body = '';
+        let bytes = 0;
+        let settled = false;
+        const cleanup = () => {
+            request.off('data', onData);
+            request.off('end', onEnd);
+            request.off('error', onError);
+        };
+        const settle = (result) => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            cleanup();
+            resolve(result);
+        };
+        function onData(chunk) {
+            const chunkBytes = Buffer.byteLength(chunk);
+            if (bytes + chunkBytes > options.limitBytes) {
+                request.pause();
+                settle({ ok: false, status: 413, error: 'Request body too large' });
+                return;
+            }
+            bytes += chunkBytes;
+            body += chunk;
+            options.onBufferedBytes?.(bytes);
+        }
+        function onEnd() {
+            if (!body.trim()) {
+                settle({ ok: true, value: {} });
+                return;
+            }
+            try {
+                settle({ ok: true, value: JSON.parse(body) });
+            }
+            catch {
+                settle({ ok: false, status: 400, error: 'Request body must be valid JSON' });
+            }
+        }
+        function onError(error) {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            cleanup();
+            reject(error);
+        }
+        request.on('data', onData);
+        request.on('end', onEnd);
+        request.on('error', onError);
+    });
+}
+//# sourceMappingURL=readBoundedJsonBody.js.map

package/dist/api/http/readBoundedJsonBody.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readBoundedJsonBody.js","sourceRoot":"","sources":["../../../src/api/http/readBoundedJsonBody.ts"],"names":[],"mappings":";;AAWA,kDA6DC;AA7DD,SAAgB,mBAAmB,CACjC,OAAwB,EACxB,OAAmC;IAEnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,MAA6B,EAAQ,EAAE;YACrD,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,SAAS,MAAM,CAAC,KAAsB;YACpC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,KAAK,GAAG,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC5C,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD,KAAK,IAAI,UAAU,CAAC;YACpB,IAAI,IAAI,KAAK,CAAC;YACd,OAAO,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QAED,SAAS,KAAK;YACZ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjB,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAED,SAAS,OAAO,CAAC,KAAY;YAC3B,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC;QAED,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { IncomingMessage } from 'node:http';\n\nexport type BoundedJsonBodyResult =\n  | { ok: true; value: unknown }\n  | { ok: false; status: 400 | 413; error: string };\n\nexport interface ReadBoundedJsonBodyOptions {\n  limitBytes: number;\n  onBufferedBytes?: (bytes: number) => void;\n}\n\nexport function readBoundedJsonBody(\n  request: IncomingMessage,\n  options: ReadBoundedJsonBodyOptions,\n): Promise<BoundedJsonBodyResult> {\n  return new Promise((resolve, reject) => {\n    let body = '';\n    let bytes = 0;\n    let settled = false;\n\n    const cleanup = (): void => {\n      request.off('data', onData);\n      request.off('end', onEnd);\n      request.off('error', onError);\n    };\n\n    const settle = (result: BoundedJsonBodyResult): void => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      cleanup();\n      resolve(result);\n    };\n\n    function onData(chunk: Buffer | string): void {\n      const chunkBytes = Buffer.byteLength(chunk);\n      if (bytes + chunkBytes > options.limitBytes) {\n        request.pause();\n        settle({ ok: false, status: 413, error: 'Request body too large' });\n        return;\n      }\n      bytes += chunkBytes;\n      body += chunk;\n      options.onBufferedBytes?.(bytes);\n    }\n\n    function onEnd(): void {\n      if (!body.trim()) {\n        settle({ ok: true, value: {} });\n        return;\n      }\n      try {\n        settle({ ok: true, value: JSON.parse(body) });\n      } catch {\n        settle({ ok: false, status: 400, error: 'Request body must be valid JSON' });\n      }\n    }\n\n    function onError(error: Error): void {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      cleanup();\n      reject(error);\n    }\n\n    request.on('data', onData);\n    request.on('end', onEnd);\n    request.on('error', onError);\n  });\n}\n"]}

package/dist/api/middleware/AuthMiddleware.d.ts

@@ -32,5 +32,6 @@ export declare class AuthMiddleware {
      */
     process(request: AuthenticatedRequest, response: ServerResponse): Promise<boolean>;
     private sendUnauthorized;
+    private sendAuthFailure;
     private safeContextForLog;
 }

package/dist/api/middleware/AuthMiddleware.js

@@ -35,7 +35,7 @@ class AuthMiddleware {
             (result.error ? ` error=${result.error}` : '') +
             (result.context ? ` context=${JSON.stringify(this.safeContextForLog(result.context))}` : ''));
         if (!result.success) {
-            this.sendUnauthorized(response, result.error ?? 'Authentication failed');
+            this.sendAuthFailure(response, result);
             return false;
         }
         // Attach auth context to request
@@ -43,10 +43,39 @@ class AuthMiddleware {
         return true;
     }
     sendUnauthorized(response, message) {
-        response.statusCode = 401;
+        this.sendAuthFailure(response, {
+            error: message,
+            category: 'invalid_credentials',
+            statusCode: 401,
+        });
+    }
+    sendAuthFailure(response, result) {
+        const statusCode = result.statusCode ?? (result.category === 'service_unavailable' ? 503 :
+            result.category === 'forbidden' ? 403 :
+                401);
+        response.statusCode = statusCode;
         response.setHeader('Content-Type', 'application/json');
-        response.setHeader('WWW-Authenticate', 'Bearer, DPoP');
-        response.end(JSON.stringify({ error: 'Unauthorized', message }));
+        if (statusCode === 401) {
+            response.setHeader('WWW-Authenticate', 'Bearer, DPoP');
+        }
+        if (statusCode === 503) {
+            response.end(JSON.stringify({
+                error: 'Service Unavailable',
+                message: 'Authentication service unavailable',
+            }));
+            return;
+        }
+        if (statusCode === 403) {
+            response.end(JSON.stringify({
+                error: 'Forbidden',
+                message: result.error ?? 'Forbidden',
+            }));
+            return;
+        }
+        response.end(JSON.stringify({
+            error: 'Unauthorized',
+            message: result.error ?? 'Authentication failed',
+        }));
     }
     safeContextForLog(context) {
         return {

package/dist/api/middleware/AuthMiddleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthMiddleware.js","sourceRoot":"","sources":["../../../src/api/middleware/AuthMiddleware.ts"],"names":[],"mappings":";;;AACA,iEAAqD;AAmBrD;;GAEG;AACH,MAAa,cAAc;IAKzB,YAAmB,OAA8B;QAJhC,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAK3C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,IAAY;QAC9B,0CAA0C;QAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,OAAO,CAAC,OAA6B,EAAE,QAAwB;QAC1E,iCAAiC;QACjC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACnC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,yBAAyB;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAE9D,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,QAAQ,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,YAAY,MAAM,CAAC,OAAO,EAAE;YACjE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC7F,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,IAAI,uBAAuB,CAAC,CAAC;YACzE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iCAAiC;QACjC,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,gBAAgB,CAAC,QAAwB,EAAE,OAAe;QAChE,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACvD,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;QACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;IAEO,iBAAiB,CAAC,OAAoB;QAC5C,OAAO;YACL,IAAI,EAAG,OAAe,CAAC,IAAI;YAC3B,KAAK,EAAG,OAAe,CAAC,KAAK;YAC7B,SAAS,EAAG,OAAe,CAAC,SAAS;YACrC,QAAQ,EAAG,OAAe,CAAC,QAAQ;YACnC,SAAS,EAAG,OAAe,CAAC,SAAS;YACrC,SAAS,EAAG,OAAe,CAAC,SAAS;SACtC,CAAC;IACJ,CAAC;CACF;AAlED,wCAkEC","sourcesContent":["import type { IncomingMessage, ServerResponse } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { Authenticator } from '../auth/Authenticator';\nimport type { AuthContext } from '../auth/AuthContext';\n\n/**\n * Extended request with auth context\n */\nexport interface AuthenticatedRequest extends IncomingMessage {\n  auth?: AuthContext;\n}\n\nexport interface AuthMiddlewareOptions {\n  authenticator: Authenticator;\n  /**\n   * Paths that do not require authentication\n   */\n  publicPaths?: string[];\n}\n\n/**\n * Middleware that handles authentication for API requests\n */\nexport class AuthMiddleware {\n  private readonly logger = getLoggerFor(this);\n  private readonly authenticator: Authenticator;\n  private readonly publicPaths: Set<string>;\n\n  public constructor(options: AuthMiddlewareOptions) {\n    this.authenticator = options.authenticator;\n    this.publicPaths = new Set(options.publicPaths ?? []);\n  }\n\n  /**\n   * Check if a path is public (does not require authentication)\n   */\n  public isPublicPath(path: string): boolean {\n    // Normalize path by removing query string\n    const normalizedPath = path.split('?')[0];\n    return this.publicPaths.has(normalizedPath);\n  }\n\n  /**\n   * Process the request, adding auth context if authenticated\n   * Returns true if request should continue, false if response was sent\n   */\n  public async process(request: AuthenticatedRequest, response: ServerResponse): Promise<boolean> {\n    // Check for authorization header\n    if (!request.headers.authorization) {\n      this.sendUnauthorized(response, 'Authentication required');\n      return false;\n    }\n\n    // Attempt authentication\n    const result = await this.authenticator.authenticate(request);\n\n    this.logger.debug(\n      `Auth ${request.method} ${request.url} success=${result.success}` +\n      (result.error ? ` error=${result.error}` : '') +\n      (result.context ? ` context=${JSON.stringify(this.safeContextForLog(result.context))}` : ''),\n    );\n\n    if (!result.success) {\n      this.sendUnauthorized(response, result.error ?? 'Authentication failed');\n      return false;\n    }\n\n    // Attach auth context to request\n    request.auth = result.context;\n    return true;\n  }\n\n  private sendUnauthorized(response: ServerResponse, message: string): void {\n    response.statusCode = 401;\n    response.setHeader('Content-Type', 'application/json');\n    response.setHeader('WWW-Authenticate', 'Bearer, DPoP');\n    response.end(JSON.stringify({ error: 'Unauthorized', message }));\n  }\n\n  private safeContextForLog(context: AuthContext): Record<string, unknown> {\n    return {\n      type: (context as any).type,\n      webId: (context as any).webId,\n      accountId: (context as any).accountId,\n      clientId: (context as any).clientId,\n      tokenType: (context as any).tokenType,\n      viaApiKey: (context as any).viaApiKey,\n    };\n  }\n}\n"]}
+{"version":3,"file":"AuthMiddleware.js","sourceRoot":"","sources":["../../../src/api/middleware/AuthMiddleware.ts"],"names":[],"mappings":";;;AACA,iEAAqD;AAmBrD;;GAEG;AACH,MAAa,cAAc;IAKzB,YAAmB,OAA8B;QAJhC,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAK3C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,IAAY;QAC9B,0CAA0C;QAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,OAAO,CAAC,OAA6B,EAAE,QAAwB;QAC1E,iCAAiC;QACjC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACnC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,yBAAyB;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAE9D,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,QAAQ,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,YAAY,MAAM,CAAC,OAAO,EAAE;YACjE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC7F,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iCAAiC;QACjC,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,gBAAgB,CAAC,QAAwB,EAAE,OAAe;QAChE,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE;YAC7B,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,qBAAqB;YAC/B,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IAEO,eAAe,CACrB,QAAwB,EACxB,MAA6D;QAE7D,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CACtC,MAAM,CAAC,QAAQ,KAAK,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACvC,GAAG,CACJ,CAAC;QACF,QAAQ,CAAC,UAAU,GAAG,UAAU,CAAC;QACjC,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACvD,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;YACvB,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC1B,KAAK,EAAE,qBAAqB;gBAC5B,OAAO,EAAE,oCAAoC;aAC9C,CAAC,CAAC,CAAC;YACJ,OAAO;QACT,CAAC;QACD,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC1B,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,WAAW;aACrC,CAAC,CAAC,CAAC;YACJ,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YAC1B,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,uBAAuB;SACjD,CAAC,CAAC,CAAC;IACN,CAAC;IAEO,iBAAiB,CAAC,OAAoB;QAC5C,OAAO;YACL,IAAI,EAAG,OAAe,CAAC,IAAI;YAC3B,KAAK,EAAG,OAAe,CAAC,KAAK;YAC7B,SAAS,EAAG,OAAe,CAAC,SAAS;YACrC,QAAQ,EAAG,OAAe,CAAC,QAAQ;YACnC,SAAS,EAAG,OAAe,CAAC,SAAS;YACrC,SAAS,EAAG,OAAe,CAAC,SAAS;SACtC,CAAC;IACJ,CAAC;CACF;AArGD,wCAqGC","sourcesContent":["import type { IncomingMessage, ServerResponse } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { Authenticator, AuthResult } from '../auth/Authenticator';\nimport type { AuthContext } from '../auth/AuthContext';\n\n/**\n * Extended request with auth context\n */\nexport interface AuthenticatedRequest extends IncomingMessage {\n  auth?: AuthContext;\n}\n\nexport interface AuthMiddlewareOptions {\n  authenticator: Authenticator;\n  /**\n   * Paths that do not require authentication\n   */\n  publicPaths?: string[];\n}\n\n/**\n * Middleware that handles authentication for API requests\n */\nexport class AuthMiddleware {\n  private readonly logger = getLoggerFor(this);\n  private readonly authenticator: Authenticator;\n  private readonly publicPaths: Set<string>;\n\n  public constructor(options: AuthMiddlewareOptions) {\n    this.authenticator = options.authenticator;\n    this.publicPaths = new Set(options.publicPaths ?? []);\n  }\n\n  /**\n   * Check if a path is public (does not require authentication)\n   */\n  public isPublicPath(path: string): boolean {\n    // Normalize path by removing query string\n    const normalizedPath = path.split('?')[0];\n    return this.publicPaths.has(normalizedPath);\n  }\n\n  /**\n   * Process the request, adding auth context if authenticated\n   * Returns true if request should continue, false if response was sent\n   */\n  public async process(request: AuthenticatedRequest, response: ServerResponse): Promise<boolean> {\n    // Check for authorization header\n    if (!request.headers.authorization) {\n      this.sendUnauthorized(response, 'Authentication required');\n      return false;\n    }\n\n    // Attempt authentication\n    const result = await this.authenticator.authenticate(request);\n\n    this.logger.debug(\n      `Auth ${request.method} ${request.url} success=${result.success}` +\n      (result.error ? ` error=${result.error}` : '') +\n      (result.context ? ` context=${JSON.stringify(this.safeContextForLog(result.context))}` : ''),\n    );\n\n    if (!result.success) {\n      this.sendAuthFailure(response, result);\n      return false;\n    }\n\n    // Attach auth context to request\n    request.auth = result.context;\n    return true;\n  }\n\n  private sendUnauthorized(response: ServerResponse, message: string): void {\n    this.sendAuthFailure(response, {\n      error: message,\n      category: 'invalid_credentials',\n      statusCode: 401,\n    });\n  }\n\n  private sendAuthFailure(\n    response: ServerResponse,\n    result: Pick<AuthResult, 'error' | 'category' | 'statusCode'>,\n  ): void {\n    const statusCode = result.statusCode ?? (\n      result.category === 'service_unavailable' ? 503 :\n      result.category === 'forbidden' ? 403 :\n      401\n    );\n    response.statusCode = statusCode;\n    response.setHeader('Content-Type', 'application/json');\n    if (statusCode === 401) {\n      response.setHeader('WWW-Authenticate', 'Bearer, DPoP');\n    }\n    if (statusCode === 503) {\n      response.end(JSON.stringify({\n        error: 'Service Unavailable',\n        message: 'Authentication service unavailable',\n      }));\n      return;\n    }\n    if (statusCode === 403) {\n      response.end(JSON.stringify({\n        error: 'Forbidden',\n        message: result.error ?? 'Forbidden',\n      }));\n      return;\n    }\n    response.end(JSON.stringify({\n      error: 'Unauthorized',\n      message: result.error ?? 'Authentication failed',\n    }));\n  }\n\n  private safeContextForLog(context: AuthContext): Record<string, unknown> {\n    return {\n      type: (context as any).type,\n      webId: (context as any).webId,\n      accountId: (context as any).accountId,\n      clientId: (context as any).clientId,\n      tokenType: (context as any).tokenType,\n      viaApiKey: (context as any).viaApiKey,\n    };\n  }\n}\n"]}

package/dist/api/runs/AgentRuntimeTypes.d.ts

@@ -1,4 +1,5 @@
 import type { ResolvedAgentConfig } from '../../agents/config/types';
+import type { AIConnectionInvocationConfig } from '../../agents/types';
 import type { WorkspaceRef } from '../workspace/types';
 export type RunnerProtocol = 'pi' | 'acp';
 export type AcpRunnerType = 'codebuddy' | 'claude' | 'codex';
@@ -48,12 +49,26 @@ export interface AgentRuntimeConfig {
         allowCustomArgv?: boolean;
     };
     /**
-     * Resolved agent configuration from /agents/{agentId}/AGENTS.md + .meta.
-     * When provided, credentials/model/MCP servers/system prompt come from here
-     * instead of DEFAULT_* environment variables.
+     * Resolved non-secret agent profile from /agents/{agentId}/AGENTS.md + .meta.
      */
     agentConfig?: ResolvedAgentConfig;
+    /**
+     * Invocation-scoped Xpod AI Connection. Model runners fail closed without it;
+     * raw Pod provider credentials must never be placed in agentConfig.
+     */
+    aiConnection?: AIConnectionInvocationConfig;
 }
+export type PersistedAgentRuntimeConfig = Omit<AgentRuntimeConfig, 'aiConnection'> & {
+    aiConnection?: Omit<AIConnectionInvocationConfig, 'gatewayKey'>;
+};
+/**
+ * Runtime config persisted with a Run is a non-secret binding description.
+ * The gateway key is restored from the current execution context on each
+ * initial or continuation invocation.
+ */
+export declare function toPersistedAgentRuntimeConfig(config: AgentRuntimeConfig): PersistedAgentRuntimeConfig;
+export declare function withInvocationAiConnection<TContext>(config: AgentRuntimeConfig | PersistedAgentRuntimeConfig, context: TContext | undefined): AgentRuntimeConfig;
+export declare function deepScrubGatewayKey<T>(value: T): T;
 export type AgentRuntimeEvent = {
     type: 'text';
     text: string;

package/dist/api/runs/AgentRuntimeTypes.js

@@ -1,3 +1,64 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.toPersistedAgentRuntimeConfig = toPersistedAgentRuntimeConfig;
+exports.withInvocationAiConnection = withInvocationAiConnection;
+exports.deepScrubGatewayKey = deepScrubGatewayKey;
+/**
+ * Runtime config persisted with a Run is a non-secret binding description.
+ * The gateway key is restored from the current execution context on each
+ * initial or continuation invocation.
+ */
+function toPersistedAgentRuntimeConfig(config) {
+    return deepScrubGatewayKey(config);
+}
+function withInvocationAiConnection(config, context) {
+    const persisted = toPersistedAgentRuntimeConfig(config);
+    const invocation = readInvocationAiConnection(context);
+    return {
+        ...persisted,
+        ...(invocation ? {
+            aiConnection: {
+                ...persisted.aiConnection,
+                ...invocation,
+            },
+        } : {}),
+    };
+}
+function deepScrubGatewayKey(value) {
+    if (Array.isArray(value)) {
+        return value.map((item) => deepScrubGatewayKey(item));
+    }
+    if (!value || typeof value !== 'object' || value instanceof Date) {
+        return value;
+    }
+    const output = {};
+    for (const [key, item] of Object.entries(value)) {
+        if (key === 'gatewayKey') {
+            continue;
+        }
+        output[key] = deepScrubGatewayKey(item);
+    }
+    return output;
+}
+function readInvocationAiConnection(context) {
+    if (!context || typeof context !== 'object') {
+        return undefined;
+    }
+    const candidate = context.aiConnection;
+    if (!candidate || typeof candidate !== 'object') {
+        return undefined;
+    }
+    const value = candidate;
+    if (typeof value.baseUrl !== 'string'
+        || value.baseUrl.trim().length === 0
+        || typeof value.gatewayKey !== 'string'
+        || value.gatewayKey.trim().length === 0) {
+        return undefined;
+    }
+    return {
+        baseUrl: value.baseUrl,
+        gatewayKey: value.gatewayKey,
+        ...(typeof value.model === 'string' && value.model.trim().length > 0 ? { model: value.model } : {}),
+    };
+}
 //# sourceMappingURL=AgentRuntimeTypes.js.map

package/dist/api/runs/AgentRuntimeTypes.js.map

@@ -1 +1 @@
-{"version":3,"file":"AgentRuntimeTypes.js","sourceRoot":"","sources":["../../../src/api/runs/AgentRuntimeTypes.ts"],"names":[],"mappings":"","sourcesContent":["import type { ResolvedAgentConfig } from '../../agents/config/types';\nimport type { WorkspaceRef } from '../workspace/types';\n\nexport type RunnerProtocol = 'pi' | 'acp';\nexport type AcpRunnerType = 'codebuddy' | 'claude' | 'codex';\nexport type RunnerType = 'pi' | AcpRunnerType;\n\nexport type WorktreeSpec =\n  | { mode: 'existing'; path: string }\n  | { mode: 'create'; baseRef?: string; branch?: string };\n\n/**\n * Canonical workspace reference for a Run.\n *\n * This is a workspace Container reference, not an execution config object.\n * Stable workspace metadata belongs on the Container .meta resource. Runners\n * resolve this reference into their own local cwd before starting the Agent Loop.\n */\nexport interface AgentRuntimeConfig {\n  workspace: WorkspaceRef;\n  /**\n   * Optional execution policy for git workspaces. The workspace field still\n   * points at the repo/workspace resource; this only selects the cwd used by a run.\n   */\n  worktree?: WorktreeSpec;\n  /**\n   * Stream idle cutoff for agent output. If no output arrives within this window,\n   * the current streaming response ends.\n   *\n   * Defaults to 500ms for tests; real agents may need a larger value.\n   */\n  idleMs?: number;\n  /**\n   * How long to keep the stream open after an auth_required event.\n   * Defaults to 5 minutes.\n   */\n  authWaitMs?: number;\n  runner: {\n    type: RunnerType;\n    /**\n     * pi: request-scoped pi AgentSession restored from Xpod Run/Thread/Message state.\n     * acp: protocol adapter over JSON-RPC (Agent Client Protocol) stdio runners.\n     */\n    protocol?: RunnerProtocol;\n    argv?: string[];\n    allowCustomArgv?: boolean;\n  };\n  /**\n   * Resolved agent configuration from /agents/{agentId}/AGENTS.md + .meta.\n   * When provided, credentials/model/MCP servers/system prompt come from here\n   * instead of DEFAULT_* environment variables.\n   */\n  agentConfig?: ResolvedAgentConfig;\n}\n\nexport type AgentRuntimeEvent =\n  | { type: 'text'; text: string }\n  | { type: 'error'; message: string }\n  | {\n    type: 'waiting_runner';\n    workspace: WorkspaceRef;\n    message: string;\n  }\n  | {\n    type: 'auth_required';\n    method: string;\n    url?: string;\n    message?: string;\n    options?: Array<{ label?: string; url?: string; method?: string }>;\n  }\n  | {\n    type: 'tool_call';\n    requestId: string;\n    name: string;\n    arguments: string;\n  };\n"]}
+{"version":3,"file":"AgentRuntimeTypes.js","sourceRoot":"","sources":["../../../src/api/runs/AgentRuntimeTypes.ts"],"names":[],"mappings":";;AAoEA,sEAEC;AAED,gEAeC;AAED,kDAeC;AAzCD;;;;GAIG;AACH,SAAgB,6BAA6B,CAAC,MAA0B;IACtE,OAAO,mBAAmB,CAAC,MAAM,CAAgC,CAAC;AACpE,CAAC;AAED,SAAgB,0BAA0B,CACxC,MAAwD,EACxD,OAA6B;IAE7B,MAAM,SAAS,GAAG,6BAA6B,CAAC,MAA4B,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACvD,OAAO;QACL,GAAG,SAAS;QACZ,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;YACf,YAAY,EAAE;gBACZ,GAAG,SAAS,CAAC,YAAY;gBACzB,GAAG,UAAU;aACd;SACF,CAAC,CAAC,CAAC,EAAE,CAAC;KACc,CAAC;AAC1B,CAAC;AAED,SAAgB,mBAAmB,CAAI,KAAQ;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAM,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC3E,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;YACzB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAW,CAAC;AACrB,CAAC;AAED,SAAS,0BAA0B,CAAW,OAA6B;IACzE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAI,OAAmC,CAAC,YAAY,CAAC;IACpE,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,SAAoC,CAAC;IACnD,IACE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;WAC9B,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;WACjC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;WACpC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EACvC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpG,CAAC;AACJ,CAAC","sourcesContent":["import type { ResolvedAgentConfig } from '../../agents/config/types';\nimport type { AIConnectionInvocationConfig } from '../../agents/types';\nimport type { WorkspaceRef } from '../workspace/types';\n\nexport type RunnerProtocol = 'pi' | 'acp';\nexport type AcpRunnerType = 'codebuddy' | 'claude' | 'codex';\nexport type RunnerType = 'pi' | AcpRunnerType;\n\nexport type WorktreeSpec =\n  | { mode: 'existing'; path: string }\n  | { mode: 'create'; baseRef?: string; branch?: string };\n\n/**\n * Canonical workspace reference for a Run.\n *\n * This is a workspace Container reference, not an execution config object.\n * Stable workspace metadata belongs on the Container .meta resource. Runners\n * resolve this reference into their own local cwd before starting the Agent Loop.\n */\nexport interface AgentRuntimeConfig {\n  workspace: WorkspaceRef;\n  /**\n   * Optional execution policy for git workspaces. The workspace field still\n   * points at the repo/workspace resource; this only selects the cwd used by a run.\n   */\n  worktree?: WorktreeSpec;\n  /**\n   * Stream idle cutoff for agent output. If no output arrives within this window,\n   * the current streaming response ends.\n   *\n   * Defaults to 500ms for tests; real agents may need a larger value.\n   */\n  idleMs?: number;\n  /**\n   * How long to keep the stream open after an auth_required event.\n   * Defaults to 5 minutes.\n   */\n  authWaitMs?: number;\n  runner: {\n    type: RunnerType;\n    /**\n     * pi: request-scoped pi AgentSession restored from Xpod Run/Thread/Message state.\n     * acp: protocol adapter over JSON-RPC (Agent Client Protocol) stdio runners.\n     */\n    protocol?: RunnerProtocol;\n    argv?: string[];\n    allowCustomArgv?: boolean;\n  };\n  /**\n   * Resolved non-secret agent profile from /agents/{agentId}/AGENTS.md + .meta.\n   */\n  agentConfig?: ResolvedAgentConfig;\n  /**\n   * Invocation-scoped Xpod AI Connection. Model runners fail closed without it;\n   * raw Pod provider credentials must never be placed in agentConfig.\n   */\n  aiConnection?: AIConnectionInvocationConfig;\n}\n\nexport type PersistedAgentRuntimeConfig = Omit<AgentRuntimeConfig, 'aiConnection'> & {\n  aiConnection?: Omit<AIConnectionInvocationConfig, 'gatewayKey'>;\n};\n\n/**\n * Runtime config persisted with a Run is a non-secret binding description.\n * The gateway key is restored from the current execution context on each\n * initial or continuation invocation.\n */\nexport function toPersistedAgentRuntimeConfig(config: AgentRuntimeConfig): PersistedAgentRuntimeConfig {\n  return deepScrubGatewayKey(config) as PersistedAgentRuntimeConfig;\n}\n\nexport function withInvocationAiConnection<TContext>(\n  config: AgentRuntimeConfig | PersistedAgentRuntimeConfig,\n  context: TContext | undefined,\n): AgentRuntimeConfig {\n  const persisted = toPersistedAgentRuntimeConfig(config as AgentRuntimeConfig);\n  const invocation = readInvocationAiConnection(context);\n  return {\n    ...persisted,\n    ...(invocation ? {\n      aiConnection: {\n        ...persisted.aiConnection,\n        ...invocation,\n      },\n    } : {}),\n  } as AgentRuntimeConfig;\n}\n\nexport function deepScrubGatewayKey<T>(value: T): T {\n  if (Array.isArray(value)) {\n    return value.map((item) => deepScrubGatewayKey(item)) as T;\n  }\n  if (!value || typeof value !== 'object' || value instanceof Date) {\n    return value;\n  }\n  const output: Record<string, unknown> = {};\n  for (const [key, item] of Object.entries(value as Record<string, unknown>)) {\n    if (key === 'gatewayKey') {\n      continue;\n    }\n    output[key] = deepScrubGatewayKey(item);\n  }\n  return output as T;\n}\n\nfunction readInvocationAiConnection<TContext>(context: TContext | undefined): AIConnectionInvocationConfig | undefined {\n  if (!context || typeof context !== 'object') {\n    return undefined;\n  }\n  const candidate = (context as Record<string, unknown>).aiConnection;\n  if (!candidate || typeof candidate !== 'object') {\n    return undefined;\n  }\n  const value = candidate as Record<string, unknown>;\n  if (\n    typeof value.baseUrl !== 'string'\n    || value.baseUrl.trim().length === 0\n    || typeof value.gatewayKey !== 'string'\n    || value.gatewayKey.trim().length === 0\n  ) {\n    return undefined;\n  }\n  return {\n    baseUrl: value.baseUrl,\n    gatewayKey: value.gatewayKey,\n    ...(typeof value.model === 'string' && value.model.trim().length > 0 ? { model: value.model } : {}),\n  };\n}\n\nexport type AgentRuntimeEvent =\n  | { type: 'text'; text: string }\n  | { type: 'error'; message: string }\n  | {\n    type: 'waiting_runner';\n    workspace: WorkspaceRef;\n    message: string;\n  }\n  | {\n    type: 'auth_required';\n    method: string;\n    url?: string;\n    message?: string;\n    options?: Array<{ label?: string; url?: string; method?: string }>;\n  }\n  | {\n    type: 'tool_call';\n    requestId: string;\n    name: string;\n    arguments: string;\n  };\n"]}

package/dist/api/runs/InngestRunExecutionBackend.d.ts

@@ -3,7 +3,8 @@ import type { EventPayload } from 'inngest/types';
 import type { StoreContext } from '../chatkit/store';
 import type { AgentRuntimeEvent } from './AgentRuntimeTypes';
 import { ManagedRunWorker, type ManagedRunStore } from './ManagedRunWorker';
-import type { RunExecutionBackend, RunExecutionInput } from './RunExecutionBackend';
+import type { RunContextRetriever, RunExecutionBackend, RunExecutionInput } from './RunExecutionBackend';
+import type { AiConnectionInvocationKeyIssuer } from '../ai-gateway/auth/AiConnectionInvocationKeyIssuer';
 export declare const XPOD_RUN_REQUESTED_EVENT = "xpod/run.requested";
 export declare const XPOD_RUN_CONTINUE_REQUESTED_EVENT = "xpod/run.continue_requested";
 export declare const XPOD_AGENT_RUN_FUNCTION_ID = "xpod-agent-run";
@@ -27,8 +28,10 @@ export interface InngestRunExecutionBackendOptions {
     runtimeDriver?: RunExecutionBackend;
     store?: ManagedRunStore<StoreContext>;
     managedRunWorker?: ManagedRunWorker<StoreContext>;
+    contextRetriever?: RunContextRetriever<StoreContext>;
     contextResolver?: (data: XpodRunRequestedEventData) => StoreContext | Promise<StoreContext | undefined> | undefined;
     contextRecorder?: (context: StoreContext | undefined) => void;
+    aiConnectionInvocationKeyIssuer?: Pick<AiConnectionInvocationKeyIssuer, 'issue'>;
     durableDelivery?: boolean;
     /**
      * When true, execute the registered Inngest handler in-process after sending
@@ -54,6 +57,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
     private readonly managedRunWorker?;
     private readonly contextResolver?;
     private readonly contextRecorder?;
+    private readonly aiConnectionInvocationKeyIssuer?;
     private readonly executeInline;
     private readonly durableDelivery;
     private readonly pendingRuns;
@@ -92,6 +96,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
             id: string;
             ts: number;
             v?: string;
+            meta?: import("inngest").ReceivedEventMeta;
         } | null : TOpts extends {
             event: import("inngest").EventType<infer TName_1 extends string, undefined>;
         } ? {
@@ -100,6 +105,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
             id: string;
             ts: number;
             v?: string;
+            meta?: import("inngest").ReceivedEventMeta;
         } | null : TOpts extends {
             event: infer TName_2 extends string;
             schema: import("inngest").StandardSchemaV1<infer TData_1 extends Record<string, unknown>>;
@@ -109,6 +115,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
             id: string;
             ts: number;
             v?: string;
+            meta?: import("inngest").ReceivedEventMeta;
         } | null : TOpts extends {
             event: infer TName_3 extends string;
         } ? {
@@ -117,6 +124,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
             id: string;
             ts: number;
             v?: string;
+            meta?: import("inngest").ReceivedEventMeta;
         } | null : EventPayload<any> | null>;
         run: <TFn extends (...args: any[]) => unknown>(idOrOptions: import("inngest").StepOptionsOrId, fn: TFn, ...input: Parameters<TFn>) => Promise<import("inngest/types").Jsonify<TFn extends (...args: Parameters<TFn>) => Promise<infer U> ? Awaited<U extends void ? null : U> : ReturnType<TFn> extends void ? null : ReturnType<TFn>>>;
         ai: {
@@ -138,6 +146,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
         invoke: <TFunction extends import("inngest/types").InvokeTargetFunctionDefinition>(idOrOptions: import("inngest").StepOptionsOrId, opts: {
             function: TFunction;
         } & Omit<import("inngest/types").TriggerEventFromFunction<TFunction>, "id"> & {
+            meta?: import("inngest").EventMeta;
             timeout?: number | string | Date | import("inngest").DurationLike | import("inngest").InstantLike | import("inngest").ZonedDateTimeLike;
         }) => import("inngest/types").InvocationResult<import("inngest/types").Jsonify<import("inngest").GetFunctionOutputRaw<TFunction>>>;
         fetch: import("inngest").StepFetch;
@@ -147,7 +156,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
         readonly event: "xpod/run.continue_requested";
     }], Omit<Omit<import("inngest").BaseContext<Inngest.Any>, never> & Record<never, never> & {
         logger: import("inngest").Logger;
-    }, "group" | "requestId" | "attempt" | "event" | "runId" | "step" | "defer" | "events" | "jobId" | "maxAttempts"> & import("inngest").FailureEventArgs<EventPayload<any>> & {
+    }, "group" | "requestId" | "attempt" | "event" | "events" | "runId" | "step" | "defer" | "jobId" | "maxAttempts"> & import("inngest").FailureEventArgs<EventPayload<any>> & {
         step: {
             sendEvent: (idOrOptions: import("inngest").StepOptionsOrId, payload: import("inngest").SendEventPayload) => Promise<import("inngest/types").SendEventOutput<import("inngest").ClientOptionsFromInngest<Inngest<import("inngest").ClientOptions>>>>;
             waitForSignal: <TData>(idOrOptions: import("inngest").StepOptionsOrId, opts: {
@@ -179,6 +188,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
                 id: string;
                 ts: number;
                 v?: string;
+                meta?: import("inngest").ReceivedEventMeta;
             } | null : TOpts extends {
                 event: import("inngest").EventType<infer TName_1 extends string, undefined>;
             } ? {
@@ -187,6 +197,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
                 id: string;
                 ts: number;
                 v?: string;
+                meta?: import("inngest").ReceivedEventMeta;
             } | null : TOpts extends {
                 event: infer TName_2 extends string;
                 schema: import("inngest").StandardSchemaV1<infer TData_1 extends Record<string, unknown>>;
@@ -196,6 +207,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
                 id: string;
                 ts: number;
                 v?: string;
+                meta?: import("inngest").ReceivedEventMeta;
             } | null : TOpts extends {
                 event: infer TName_3 extends string;
             } ? {
@@ -204,6 +216,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
                 id: string;
                 ts: number;
                 v?: string;
+                meta?: import("inngest").ReceivedEventMeta;
             } | null : EventPayload<any> | null>;
             run: <TFn extends (...args: any[]) => unknown>(idOrOptions: import("inngest").StepOptionsOrId, fn: TFn, ...input: Parameters<TFn>) => Promise<import("inngest/types").Jsonify<TFn extends (...args: Parameters<TFn>) => Promise<infer U> ? Awaited<U extends void ? null : U> : ReturnType<TFn> extends void ? null : ReturnType<TFn>>>;
             ai: {
@@ -225,6 +238,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
             invoke: <TFunction extends import("inngest/types").InvokeTargetFunctionDefinition>(idOrOptions: import("inngest").StepOptionsOrId, opts: {
                 function: TFunction;
             } & Omit<import("inngest/types").TriggerEventFromFunction<TFunction>, "id"> & {
+                meta?: import("inngest").EventMeta;
                 timeout?: number | string | Date | import("inngest").DurationLike | import("inngest").InstantLike | import("inngest").ZonedDateTimeLike;
             }) => import("inngest/types").InvocationResult<import("inngest/types").Jsonify<import("inngest").GetFunctionOutputRaw<TFunction>>>;
             fetch: import("inngest").StepFetch;
@@ -263,6 +277,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
             id: string;
             ts: number;
             v?: string;
+            meta?: import("inngest").ReceivedEventMeta;
         } | null : TOpts extends {
             event: import("inngest").EventType<infer TName_1 extends string, undefined>;
         } ? {
@@ -271,6 +286,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
             id: string;
             ts: number;
             v?: string;
+            meta?: import("inngest").ReceivedEventMeta;
         } | null : TOpts extends {
             event: infer TName_2 extends string;
             schema: import("inngest").StandardSchemaV1<infer TData_1 extends Record<string, unknown>>;
@@ -280,6 +296,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
             id: string;
             ts: number;
             v?: string;
+            meta?: import("inngest").ReceivedEventMeta;
         } | null : TOpts extends {
             event: infer TName_3 extends string;
         } ? {
@@ -288,6 +305,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
             id: string;
             ts: number;
             v?: string;
+            meta?: import("inngest").ReceivedEventMeta;
         } | null : EventPayload<any> | null>;
         run: <TFn extends (...args: any[]) => unknown>(idOrOptions: import("inngest").StepOptionsOrId, fn: TFn, ...input: Parameters<TFn>) => Promise<import("inngest/types").Jsonify<TFn extends (...args: Parameters<TFn>) => Promise<infer U> ? Awaited<U extends void ? null : U> : ReturnType<TFn> extends void ? null : ReturnType<TFn>>>;
         ai: {
@@ -309,6 +327,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
         invoke: <TFunction extends import("inngest/types").InvokeTargetFunctionDefinition>(idOrOptions: import("inngest").StepOptionsOrId, opts: {
             function: TFunction;
         } & Omit<import("inngest/types").TriggerEventFromFunction<TFunction>, "id"> & {
+            meta?: import("inngest").EventMeta;
             timeout?: number | string | Date | import("inngest").DurationLike | import("inngest").InstantLike | import("inngest").ZonedDateTimeLike;
         }) => import("inngest/types").InvocationResult<import("inngest/types").Jsonify<import("inngest").GetFunctionOutputRaw<TFunction>>>;
         fetch: import("inngest").StepFetch;
@@ -318,7 +337,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
         readonly event: "xpod/run.continue_requested";
     }], Omit<Omit<import("inngest").BaseContext<Inngest.Any>, never> & Record<never, never> & {
         logger: import("inngest").Logger;
-    }, "group" | "requestId" | "attempt" | "event" | "runId" | "step" | "defer" | "events" | "jobId" | "maxAttempts"> & import("inngest").FailureEventArgs<EventPayload<any>> & {
+    }, "group" | "requestId" | "attempt" | "event" | "events" | "runId" | "step" | "defer" | "jobId" | "maxAttempts"> & import("inngest").FailureEventArgs<EventPayload<any>> & {
         step: {
             sendEvent: (idOrOptions: import("inngest").StepOptionsOrId, payload: import("inngest").SendEventPayload) => Promise<import("inngest/types").SendEventOutput<import("inngest").ClientOptionsFromInngest<Inngest<import("inngest").ClientOptions>>>>;
             waitForSignal: <TData>(idOrOptions: import("inngest").StepOptionsOrId, opts: {
@@ -350,6 +369,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
                 id: string;
                 ts: number;
                 v?: string;
+                meta?: import("inngest").ReceivedEventMeta;
             } | null : TOpts extends {
                 event: import("inngest").EventType<infer TName_1 extends string, undefined>;
             } ? {
@@ -358,6 +378,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
                 id: string;
                 ts: number;
                 v?: string;
+                meta?: import("inngest").ReceivedEventMeta;
             } | null : TOpts extends {
                 event: infer TName_2 extends string;
                 schema: import("inngest").StandardSchemaV1<infer TData_1 extends Record<string, unknown>>;
@@ -367,6 +388,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
                 id: string;
                 ts: number;
                 v?: string;
+                meta?: import("inngest").ReceivedEventMeta;
             } | null : TOpts extends {
                 event: infer TName_3 extends string;
             } ? {
@@ -375,6 +397,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
                 id: string;
                 ts: number;
                 v?: string;
+                meta?: import("inngest").ReceivedEventMeta;
             } | null : EventPayload<any> | null>;
             run: <TFn extends (...args: any[]) => unknown>(idOrOptions: import("inngest").StepOptionsOrId, fn: TFn, ...input: Parameters<TFn>) => Promise<import("inngest/types").Jsonify<TFn extends (...args: Parameters<TFn>) => Promise<infer U> ? Awaited<U extends void ? null : U> : ReturnType<TFn> extends void ? null : ReturnType<TFn>>>;
             ai: {
@@ -396,6 +419,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
             invoke: <TFunction extends import("inngest/types").InvokeTargetFunctionDefinition>(idOrOptions: import("inngest").StepOptionsOrId, opts: {
                 function: TFunction;
             } & Omit<import("inngest/types").TriggerEventFromFunction<TFunction>, "id"> & {
+                meta?: import("inngest").EventMeta;
                 timeout?: number | string | Date | import("inngest").DurationLike | import("inngest").InstantLike | import("inngest").ZonedDateTimeLike;
             }) => import("inngest/types").InvocationResult<import("inngest/types").Jsonify<import("inngest").GetFunctionOutputRaw<TFunction>>>;
             fetch: import("inngest").StepFetch;
@@ -410,6 +434,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
     start(input: RunExecutionInput): AsyncIterable<AgentRuntimeEvent>;
     private handleAgentRun;
     restoreExecutionInput(runId: string, context: StoreContext): Promise<RunExecutionInput>;
+    close(): Promise<void>;
     private createInlineContext;
     private formatError;
     private executionKeyForInput;

package/dist/api/runs/InngestRunExecutionBackend.js

@@ -30,9 +30,16 @@ class InngestRunExecutionBackend {
         });
         this.runtimeDriver = options.runtimeDriver ?? new PiAgentRuntimeDriver_1.PiAgentRuntimeDriver();
         this.managedRunWorker = options.managedRunWorker
-            ?? (options.store ? new ManagedRunWorker_1.ManagedRunWorker({ store: options.store, runtimeDriver: this.runtimeDriver }) : undefined);
+            ?? (options.store
+                ? new ManagedRunWorker_1.ManagedRunWorker({
+                    store: options.store,
+                    runtimeDriver: this.runtimeDriver,
+                    contextRetriever: options.contextRetriever,
+                })
+                : undefined);
         this.contextResolver = options.contextResolver;
         this.contextRecorder = options.contextRecorder;
+        this.aiConnectionInvocationKeyIssuer = options.aiConnectionInvocationKeyIssuer;
         this.durableDelivery = options.durableDelivery ?? true;
         this.executeInline = options.executeInline ?? true;
         this.agentRunFunction = this.client.createFunction({
@@ -117,6 +124,9 @@ class InngestRunExecutionBackend {
                         pending.queue.push(event);
                     }
                 }
+                catch (error) {
+                    pending.queue.push({ type: 'error', message: this.formatError(error) });
+                }
                 finally {
                     pending.queue.close();
                 }
@@ -126,10 +136,16 @@ class InngestRunExecutionBackend {
         if (!this.managedRunWorker || !this.contextResolver) {
             return { runId, status: 'not_found' };
         }
-        const context = await this.contextResolver(ctx.event.data);
-        if (!context) {
+        const resolvedContext = await this.contextResolver(ctx.event.data);
+        if (!resolvedContext) {
             return { runId, status: 'not_found' };
         }
+        const context = this.aiConnectionInvocationKeyIssuer
+            ? {
+                ...resolvedContext,
+                aiConnection: await this.aiConnectionInvocationKeyIssuer.issue(resolvedContext),
+            }
+            : resolvedContext;
         const result = await ctx.step.run('run-agent-from-store', async () => {
             return this.managedRunWorker.executeRun(runId, context);
         });
@@ -141,6 +157,13 @@ class InngestRunExecutionBackend {
         }
         return this.managedRunWorker.loadExecutionInput(runId, context);
     }
+    async close() {
+        for (const pending of this.pendingRuns.values()) {
+            pending.queue.close();
+        }
+        this.pendingRuns.clear();
+        await this.runtimeDriver.close?.();
+    }
     createInlineContext(input) {
         const executionKey = this.executionKeyForInput(input);
         return {