agent-embassy 1.2.0 → 1.3.0

package/dist/src/gateway/store.js

@@ -392,7 +392,6 @@ function isQueuedMetadata(value) {
             "enqueuedAt",
             "deadlineAt",
             "bytes",
-            "hopCount",
         ], ["conversationIdSuffix", "body", "pair", "transientTarget", "steer"])) {
         return false;
     }
@@ -417,7 +416,6 @@ function isQueuedMetadata(value) {
                 value.body.length > 0 &&
                 !value.body.includes("\u0000") &&
                 Buffer.byteLength(value.body, "utf8") === value.bytes)) &&
-        isNonNegativeInteger(value.hopCount) &&
         (value.pair === undefined || value.pair === true) &&
         (value.transientTarget === undefined || value.transientTarget === true) &&
         (value.steer === undefined || value.steer === true));
@@ -439,7 +437,6 @@ function isEvent(value) {
             "targetAlias",
             "state",
             "bytes",
-            "hopCount",
         ], ["conversationIdSuffix", "body", "latencyMs", "safeErrorCode", "steer"])) {
         return false;
     }
@@ -464,7 +461,6 @@ function isEvent(value) {
                 value.body.length > 0 &&
                 !value.body.includes("\u0000") &&
                 Buffer.byteLength(value.body, "utf8") === value.bytes)) &&
-        isNonNegativeInteger(value.hopCount) &&
         (value.latencyMs === undefined || isNonNegativeInteger(value.latencyMs)) &&
         (value.safeErrorCode === undefined || isSafeCode(value.safeErrorCode)) &&
         (value.steer === undefined || value.steer === true));
@@ -717,6 +713,80 @@ function migratePreCodexOrphanRemovalJournal(value) {
         codexOrphanRemovalEvents: [],
     };
 }
+/**
+ * v1.2.0 persisted hop counters on queue, in-flight, and event rows. Hop
+ * policy no longer exists; accept only the old bounded shape and discard the
+ * obsolete field before strict current-schema validation and persistence.
+ */
+function migrateLegacyHopCounts(value) {
+    if (!isObject(value) ||
+        value.schemaVersion !== 1 ||
+        !Array.isArray(value.queue) ||
+        !Array.isArray(value.inFlight) ||
+        !Array.isArray(value.events)) {
+        return value;
+    }
+    const strip = (entry) => {
+        if (!isObject(entry) || !Object.hasOwn(entry, "hopCount"))
+            return entry;
+        if (!isNonNegativeInteger(entry.hopCount) || entry.hopCount > 64) {
+            return entry;
+        }
+        const { hopCount: _legacyHopCount, ...current } = entry;
+        return current;
+    };
+    return {
+        ...value,
+        queue: value.queue.map(strip),
+        inFlight: value.inFlight.map(strip),
+        events: value.events.map(strip),
+    };
+}
+function isLegacyCompatibilityCertification(value) {
+    if (!isObject(value))
+        return false;
+    const required = ["depth", "outcome", "certifiedAt"];
+    if (!hasOnlyKeys(value, required, ["safeErrorCode"]))
+        return false;
+    if ((value.depth !== "wire" &&
+        value.depth !== "thread_ops" &&
+        value.depth !== "turn") ||
+        (value.outcome !== "pass" && value.outcome !== "fail") ||
+        !isIsoTimestamp(value.certifiedAt) ||
+        new Date(Date.parse(value.certifiedAt)).toISOString() !==
+            value.certifiedAt ||
+        (value.safeErrorCode !== undefined && !isSafeCode(value.safeErrorCode))) {
+        return false;
+    }
+    return (value.outcome === "pass") === (value.safeErrorCode === undefined);
+}
+/**
+ * v1.1-v1.2 compatibility rows could contain manual live-certification
+ * evidence. The ceremony is gone: accept only its exact old shape, discard
+ * it, and retain the automatic bounded probe evidence.
+ */
+function migrateLegacyCompatibilityCertifications(value) {
+    if (!isObject(value) ||
+        value.schemaVersion !== 1 ||
+        !Array.isArray(value.compatibilityAttestations)) {
+        return value;
+    }
+    let changed = false;
+    const compatibilityAttestations = value.compatibilityAttestations.map((entry) => {
+        if (!isObject(entry) || !Object.hasOwn(entry, "certification")) {
+            return entry;
+        }
+        if (!isLegacyCompatibilityCertification(entry.certification)) {
+            return entry;
+        }
+        const { certification: _legacyCertification, ...current } = entry;
+        if (!isCompatibilityAttestation(current))
+            return entry;
+        changed = true;
+        return current;
+    });
+    return changed ? { ...value, compatibilityAttestations } : value;
+}
 function isPersistedState(value) {
     if (!isObject(value) ||
         !hasOnlyKeys(value, [
@@ -2735,7 +2805,6 @@ export class GatewayStore {
                 state: "dispatching",
                 bytes: metadata.bytes,
                 body,
-                hopCount: metadata.hopCount,
                 ...(metadata.steer === true ? { steer: true } : {}),
                 latencyMs: Math.max(0, now.getTime() - Date.parse(metadata.enqueuedAt)),
             });
@@ -2864,7 +2933,6 @@ export class GatewayStore {
                 state: "held",
                 bytes: metadata.bytes,
                 body,
-                hopCount: metadata.hopCount,
                 ...(metadata.steer === true ? { steer: true } : {}),
                 ...(safeErrorCode === undefined ? {} : { safeErrorCode }),
                 latencyMs: Math.max(0, now.getTime() - Date.parse(metadata.enqueuedAt)),
@@ -2896,7 +2964,6 @@ export class GatewayStore {
                 state: progress,
                 bytes: metadata.bytes,
                 ...(metadata.body === undefined ? {} : { body: metadata.body }),
-                hopCount: metadata.hopCount,
                 ...(metadata.steer === true ? { steer: true } : {}),
                 latencyMs: Math.max(0, now.getTime() - Date.parse(metadata.enqueuedAt)),
             });
@@ -3443,12 +3510,6 @@ export class GatewayStore {
             this.recordRejection(state, sides, bytes, now, "MESSAGE_TOO_LARGE", input.steer, input.conversationIdSuffix);
             throw new BridgeError("MESSAGE_TOO_LARGE", "The transient message exceeds the configured byte limit.");
         }
-        const hopCount = input.hopCount ?? 0;
-        if (!isNonNegativeInteger(hopCount) ||
-            hopCount > this.config.limits.maxHopCount) {
-            this.recordRejection(state, sides, bytes, now, "HOP_LIMIT_EXCEEDED", input.steer, input.conversationIdSuffix);
-            throw new BridgeError("HOP_LIMIT_EXCEEDED", "The message exceeds the configured gateway hop limit.");
-        }
         if (typeof input.dedupeKey !== "string" ||
             input.dedupeKey.length === 0 ||
             Buffer.byteLength(input.dedupeKey) > 512) {
@@ -3476,7 +3537,6 @@ export class GatewayStore {
                     ? {}
                     : { conversationIdSuffix: duplicate.conversationIdSuffix }),
                 bytes,
-                hopCount,
                 ...(input.steer === true ? { steer: true } : {}),
             });
             return {
@@ -3566,7 +3626,6 @@ export class GatewayStore {
             deadlineAt: deadline.toISOString(),
             bytes,
             body: input.body,
-            hopCount,
             ...(sides.pair === true ? { pair: true } : {}),
             ...(sides.transientTarget === true
                 ? { transientTarget: true }
@@ -3618,7 +3677,6 @@ export class GatewayStore {
             state: "queued",
             bytes,
             body: input.body,
-            hopCount,
             ...(input.steer === true ? { steer: true } : {}),
         });
         return {
@@ -3684,7 +3742,6 @@ export class GatewayStore {
             targetAlias: sides.targetAlias,
             state: "rejected",
             bytes: Math.max(1, bytes),
-            hopCount: 0,
             safeErrorCode,
             ...(steer === true ? { steer: true } : {}),
         });
@@ -3966,7 +4023,6 @@ export class GatewayStore {
             state: deliveryState,
             bytes: metadata.bytes,
             ...(metadata.body === undefined ? {} : { body: metadata.body }),
-            hopCount: metadata.hopCount,
             ...(metadata.steer === true ? { steer: true } : {}),
             latencyMs: Math.max(0, now.getTime() - Date.parse(metadata.enqueuedAt)),
             ...(safeErrorCode ? { safeErrorCode } : {}),
@@ -4444,6 +4500,8 @@ export class GatewayStore {
         parsed = migratePreCompatibilityAttestations(parsed);
         parsed = migratePreCodexEndpointRefreshJournal(parsed);
         parsed = migratePreCodexOrphanRemovalJournal(parsed);
+        parsed = migrateLegacyHopCounts(parsed);
+        parsed = migrateLegacyCompatibilityCertifications(parsed);
         if (!isPersistedState(parsed)) {
             throw new BridgeError("CORRUPT_GATEWAY_STATE", "The gateway controller state failed strict schema validation.");
         }