agent-embassy 1.0.0 → 1.2.0

package/dist/src/gateway/store.d.ts

@@ -1,7 +1,7 @@
 import { type CompatibilityAttestation, type CompatibilitySurface } from "./compatibility.js";
 import type { GatewayConfig } from "./config.js";
 import { type ProgressWatchMachine, type ProgressWatchOutcome } from "./progress-watch-machine.js";
-import { type DeliveryState, type EnqueueMessageInput, type EnqueueMessageResult, type EnqueueNativeIngressInput, type EnqueueNativeReplyInput, type GatewayPrivateRouteInspection, type GatewayPublicSnapshot, type GatewayStoreDependencies, type InFlightMessageProgressState, type ObserveConnectorInput, type ObserveRouteInput, type PrivateEndpointIdentity, type PrivateRouteBinding, type RebindStaleRouteInput, type RegisterRouteInput, type RequeueInFlightMessageResult, type SettleMessageInput, type SettleMessageResult, type TerminalMessageSettlement, type TransientQueuedMessage } from "./types.js";
+import { type DeliveryState, type EnqueueMessageInput, type EnqueueMessageResult, type EnqueueNativeIngressInput, type EnqueueNativeReplyInput, type GatewayPrivateRouteInspection, type GatewayPublicSnapshot, type GatewayStoreDependencies, type InFlightMessageProgressState, type ObserveConnectorInput, type ObserveRouteInput, type PrivateEndpointIdentity, type PrivateRouteBinding, type ReanchorCodexRoutesInput, type ReanchorCodexRoutesResult, type RebindStaleRouteInput, type RegisterRouteInput, type RequeueInFlightMessageResult, type RemoveStaleCodexOrphanInput, type RemoveStaleCodexOrphanResult, type SettleMessageInput, type SettleMessageResult, type StaleCodexOrphanRemovalAuthority, type StaleCodexOrphanRemovalCommitProofInput, type TerminalMessageSettlement, type TransientQueuedMessage } from "./types.js";
 export declare const GATEWAY_MAX_STATE_FILE_BYTES: number;
 export type OpenProgressWatchInput = Readonly<{
     conversationId: string;
@@ -138,7 +138,9 @@ export declare class GatewayStore {
     commitInitialization(): Promise<void>;
     close(): Promise<void>;
     observeConnector(input: ObserveConnectorInput): Promise<void>;
-    markConnectorOffline(identity: PrivateEndpointIdentity, safeErrorCode?: string, inFlightSettlements?: readonly RouteInFlightSettlementInput[]): Promise<TerminalMessageSettlement[]>;
+    markConnectorOffline(identity: PrivateEndpointIdentity, safeErrorCode?: string, inFlightSettlements?: readonly RouteInFlightSettlementInput[], options?: Readonly<{
+        preserveQueued?: boolean;
+    }>): Promise<TerminalMessageSettlement[]>;
     registerRoute(input: RegisterRouteInput): Promise<void>;
     /**
      * Replace the complete selected-Claude set with one exact live session in a
@@ -156,6 +158,17 @@ export declare class GatewayStore {
      * display name. Names alone are never rebind authority.
      */
     rebindStaleRoute(input: RebindStaleRouteInput): Promise<void>;
+    /**
+     * Atomically re-anchor only the exact Codex tasks proved present on a newly
+     * compatible App Server generation. Omitted stale tasks stay untouched.
+     */
+    reanchorCodexRoutes(input: ReanchorCodexRoutesInput): Promise<ReanchorCodexRoutesResult>;
+    /**
+     * Dashboard recovery primitive for one abandoned Codex registration. The
+     * alias is only authority to request evaluation; durable state must prove
+     * the task is empty, stale, expired, and on a dead or superseded generation.
+     */
+    removeStaleCodexOrphan(input: RemoveStaleCodexOrphanInput): Promise<RemoveStaleCodexOrphanResult>;
     disableRoute(alias: string, ownerLease: string, inFlightSettlements?: readonly RouteInFlightSettlementInput[]): Promise<TerminalMessageSettlement[]>;
     unregisterRoute(alias: string, ownerLease: string, inFlightSettlements?: readonly RouteInFlightSettlementInput[]): Promise<TerminalMessageSettlement[]>;
     /**
@@ -172,6 +185,23 @@ export declare class GatewayStore {
      * control response, dashboard projection, log, or normalized event.
      */
     inspectPrivateRoute(alias: string): Promise<GatewayPrivateRouteInspection | undefined>;
+    /**
+     * Read-only preflight for service-side provider cleanup. Removal repeats the
+     * identical proof atomically so no intervening state change can authorize it.
+     */
+    inspectStaleCodexOrphan(alias: string): Promise<PrivateRouteBinding>;
+    /**
+     * Capture the exact pre-mutation authority needed to reconcile a possible
+     * post-rename orphan-removal commit. This value remains controller-private.
+     */
+    inspectStaleCodexOrphanRemovalAuthority(alias: string): Promise<StaleCodexOrphanRemovalAuthority>;
+    /**
+     * Fail-closed reconciliation for one exact removal whose durable rename may
+     * have committed before a directory-sync error. The latest private journal
+     * row, monotonic predecessor, alias absence, and native authority absence
+     * must all corroborate the same mutation.
+     */
+    wasStaleCodexOrphanRemovalCommitted(input: StaleCodexOrphanRemovalCommitProofInput): Promise<boolean>;
     /**
      * Controller-internal inventory used to preserve exact Codex registration
      * identities across restart. Native task handles never cross the control
@@ -266,6 +296,8 @@ export declare class GatewayStore {
      */
     enqueueNativeReply(input: EnqueueNativeReplyInput): Promise<EnqueueMessageResult>;
     dequeueMessage(targetAlias?: string, mode?: "any" | "steer_only"): Promise<TransientQueuedMessage | undefined>;
+    /** Controller-private shutdown inventory; full IDs never cross control output. */
+    inspectQueuedMessageIds(): Promise<string[]>;
     /**
      * Atomically terminalizes every message whose delivery deadline is due.
      * Returned settlements are emitted only by the mutation that removed the
@@ -278,7 +310,7 @@ export declare class GatewayStore {
      */
     expireDueMessages(now?: Date): Promise<TerminalMessageSettlement[]>;
     settleMessage(input: SettleMessageInput): Promise<SettleMessageResult>;
-    requeueInFlightMessage(messageId: string, body: string): Promise<RequeueInFlightMessageResult>;
+    requeueInFlightMessage(messageId: string, body: string, safeErrorCode?: string): Promise<RequeueInFlightMessageResult>;
     markMessageProgress(messageId: string, progress: InFlightMessageProgressState): Promise<void>;
     /**
      * Atomically terminalize one queued message and return the authoritative
@@ -305,6 +337,7 @@ export declare class GatewayStore {
     private requireCompatibleObservedEndpoint;
     private validateRouteInput;
     private requireOwnedRoute;
+    private requireStaleCodexOrphan;
     private requireAvailableRoute;
     private requirePairRoutes;
     private requireExactPair;
@@ -313,6 +346,9 @@ export declare class GatewayStore {
     private consumeRateLimit;
     private recordRejection;
     private appendEvent;
+    private pruneRetainedEventBodies;
+    private appendCodexEndpointRefreshEvent;
+    private appendCodexOrphanRemovalEvent;
     /** Commit watch activity only after every message-admission check succeeds. */
     private applyProgressWatchMessageActivity;
     private progressWatchDueTransition;