atabey-shared 0.0.23 → 0.0.25

package/dist/file-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-lock.js","sourceRoot":"","sources":["../src/file-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAyBpB,MAAM,OAAO,cAAc;IACN,QAAQ,CAAS;IACjB,WAAW,CAAS;IACpB,KAAK,CAAS;IACd,OAAO,CAAS;IAChB,SAAS,CAAS;IAEnC,YAAY,UAA2B,EAAE;QACrC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACxD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ;YAC5B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;YAChC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IACjD,CAAC;IAED,qDAAqD;IAC9C,WAAW,CAAC,QAAgB;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YACjC,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACpD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,+DAA+D;YAC/D,QAAQ,GAAG,QAAQ,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAChE,CAAC;QACD,qDAAqD;QACrD,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;;OAGG;IACI,UAAU,CACb,QAAgB,EAChB,OAAe,EACf,MAAe,EACf,aAAa,GAAG,CAAC;QAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC5C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1D,iEAAiE;QACjE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAiB;YACvB,OAAO;YACP,QAAQ;YACR,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;YACvC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;YACnD,MAAM;YACN,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;SAC1B,CAAC;QAEF,IAAI,EAAsB,CAAC;QAC3B,IAAI,CAAC;YACD,yDAAyD;YACzD,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC;gBACD,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAChE,CAAC;YAAC,OAAO,QAAQ,EAAE,CAAC;gBAChB,iFAAiF;gBACjF,IAAI,CAAC;oBACD,IAAI,EAAE,KAAK,SAAS;wBAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACxB,EAAE,GAAG,SAAS,CAAC;gBACf,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACjC,MAAM,QAAQ,CAAC;YACnB,CAAC;YACD,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACjB,EAAE,GAAG,SAAS,CAAC;YACf,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACnB,IAAI,CAAC;oBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpB,kEAAkE;gBAClE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;gBACpD,qEAAqE;gBACrE,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;oBAC3D,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC;oBAC3C,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC;gBACzE,CAAC;gBACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACvC,CAAC;YACD,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY,CACrB,QAAgB,EAChB,OAAe,EACf,OAAmE;QAEnE,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC;QACvD,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,OAAO,IAAI,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACnE,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjC,OAAO,MAAM,CAAC,IAAI,CAAC;YACvB,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,SAAS,EAAE,CAAC;gBAClC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,SAAS,CAAC;gBACnD,MAAM,IAAI,KAAK,CACX,gDAAgD,QAAQ,WAAW,SAAS,eAAe,MAAM,GAAG,CACvG,CAAC;YACN,CAAC;YACD,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACL,CAAC;IAED;;OAEG;IACI,OAAO,CAAC,QAAgB,EAAE,OAAe,EAAE,KAAK,GAAG,KAAK;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAE1C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IAChB,CAAC;IAEM,QAAQ,CAAC,QAAgB;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,QAAQ,CACjB,QAAgB,EAChB,OAAe,EACf,EAAwB,EACxB,OAAiD;QAEjD,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC;YACD,OAAO,MAAM,EAAE,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACL,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,SAAS,IAAI,SAAS,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAC7C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;YAC5D,CAAC;QACL,CAAC;IACL,CAAC;IAED;;OAEG;IACI,YAAY,CACf,QAAgB,EAChB,OAAe,EACf,EAAW,EACX,OAA6B;QAE7B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,SAAS,CAAC;YACnD,MAAM,IAAI,KAAK,CACX,gDAAgD,QAAQ,cAAc,MAAM,GAAG,CAClF,CAAC;QACN,CAAC;QACD,IAAI,CAAC;YACD,OAAO,EAAE,EAAE,CAAC;QAChB,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACL,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,SAAS,IAAI,SAAS,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAC7C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;YAC5D,CAAC;QACL,CAAC;IACL,CAAC;IAEO,cAAc,CAAC,QAAgB;QACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,IAAkB;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,6BAA6B;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxC,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC;IAC5B,CAAC;IAEO,QAAQ,CAAC,QAAgB;QAC7B,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,WAAW,CAAC,QAAgB,EAAE,KAA0B;QAC5D,IAAI,CAAC;YACD,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACL,sBAAsB;QAC1B,CAAC;IACL,CAAC;CACJ;AAED,SAAS,KAAK,CAAC,EAAU;IACrB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,qBAAqB,CAAC,WAAmB,EAAE,OAA8C;IACrG,OAAO,IAAI,cAAc,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;AAC3D,CAAC"}

package/dist/index.d.ts

@@ -2,6 +2,7 @@ export * from "./database.js";
 export * from "./pii.js";
 export * from "./lock.js";
 export * from "./audit.js";
+export * from "./audit-chain.js";
 export * from "./logger.js";
 export * from "./retention.js";
 export * from "./errors.js";
@@ -9,3 +10,11 @@ export * from "./constants.js";
 export * from "./string.js";
 export * from "./types.js";
 export * from "./fs.js";
+export * from "./job-queue.js";
+export * from "./worker-pool.js";
+export * from "./file-lock.js";
+export * from "./sandbox.js";
+export * from "./sandbox-runtime.js";
+export * from "./sandbox-fs.js";
+export * from "./resilience.js";
+export * from "./policy-gate.js";

package/dist/index.js

@@ -2,6 +2,7 @@ export * from "./database.js";
 export * from "./pii.js";
 export * from "./lock.js";
 export * from "./audit.js";
+export * from "./audit-chain.js";
 export * from "./logger.js";
 export * from "./retention.js";
 export * from "./errors.js";
@@ -9,4 +10,12 @@ export * from "./constants.js";
 export * from "./string.js";
 export * from "./types.js";
 export * from "./fs.js";
+export * from "./job-queue.js";
+export * from "./worker-pool.js";
+export * from "./file-lock.js";
+export * from "./sandbox.js";
+export * from "./sandbox-runtime.js";
+export * from "./sandbox-fs.js";
+export * from "./resilience.js";
+export * from "./policy-gate.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC"}

package/dist/job-queue.d.ts

@@ -0,0 +1,53 @@
+/**
+ * In-Memory Job Queue — concurrency-limited async work dispatcher.
+ *
+ * Prevents unbounded parallel LLM / agent work from ballooning memory
+ * or starving the main event loop. No Redis / BullMQ required.
+ *
+ * Jobs run on the calling process (async functions). Pair with WorkerPool
+ * when true thread isolation is needed for CPU-bound work.
+ */
+export interface JobQueueOptions {
+    /** Max concurrent running jobs. Default: os.cpus().length (min 1, max 16). */
+    maxConcurrency?: number;
+    /** Optional name for diagnostics. */
+    name?: string;
+    /** Called when a job fails (after the promise rejects to the caller). */
+    onError?: (error: unknown, jobId: number) => void;
+}
+export interface JobQueueStats {
+    name: string;
+    maxConcurrency: number;
+    running: number;
+    pending: number;
+    completed: number;
+    failed: number;
+}
+export declare class InMemoryJobQueue {
+    private readonly maxConcurrency;
+    private readonly name;
+    private readonly onError?;
+    private readonly pending;
+    private running;
+    private nextId;
+    private completed;
+    private failed;
+    private closed;
+    constructor(options?: JobQueueOptions);
+    /**
+     * Enqueue an async job. Resolves/rejects with the job result.
+     * Back-pressures via wait in the queue — does not spawn unbounded work.
+     */
+    enqueue<T>(fn: () => Promise<T>): Promise<T>;
+    /** Current queue diagnostics. */
+    getStats(): JobQueueStats;
+    /** Reject pending jobs and stop accepting new ones. In-flight jobs finish. */
+    close(reason?: string): void;
+    /** Wait until running + pending reach zero (or timeout). */
+    drain(timeoutMs?: number): Promise<void>;
+    private pump;
+    private execute;
+}
+export declare function getAgentJobQueue(options?: JobQueueOptions): InMemoryJobQueue;
+/** Test helper — reset singleton. */
+export declare function resetAgentJobQueue(): void;

package/dist/job-queue.js

@@ -0,0 +1,127 @@
+/**
+ * In-Memory Job Queue — concurrency-limited async work dispatcher.
+ *
+ * Prevents unbounded parallel LLM / agent work from ballooning memory
+ * or starving the main event loop. No Redis / BullMQ required.
+ *
+ * Jobs run on the calling process (async functions). Pair with WorkerPool
+ * when true thread isolation is needed for CPU-bound work.
+ */
+import os from "os";
+export class InMemoryJobQueue {
+    maxConcurrency;
+    name;
+    onError;
+    pending = [];
+    running = 0;
+    nextId = 1;
+    completed = 0;
+    failed = 0;
+    closed = false;
+    constructor(options = {}) {
+        const cpus = Math.max(1, os.cpus()?.length || 1);
+        const requested = options.maxConcurrency ?? cpus;
+        this.maxConcurrency = Math.max(1, Math.min(requested, 16));
+        this.name = options.name ?? "default";
+        this.onError = options.onError;
+    }
+    /**
+     * Enqueue an async job. Resolves/rejects with the job result.
+     * Back-pressures via wait in the queue — does not spawn unbounded work.
+     */
+    enqueue(fn) {
+        if (this.closed) {
+            return Promise.reject(new Error(`[JobQueue:${this.name}] Queue is closed; cannot accept new jobs.`));
+        }
+        return new Promise((resolve, reject) => {
+            const item = {
+                id: this.nextId++,
+                run: fn,
+                resolve,
+                reject,
+            };
+            this.pending.push(item);
+            this.pump();
+        });
+    }
+    /** Current queue diagnostics. */
+    getStats() {
+        return {
+            name: this.name,
+            maxConcurrency: this.maxConcurrency,
+            running: this.running,
+            pending: this.pending.length,
+            completed: this.completed,
+            failed: this.failed,
+        };
+    }
+    /** Reject pending jobs and stop accepting new ones. In-flight jobs finish. */
+    close(reason = "Queue closed") {
+        this.closed = true;
+        while (this.pending.length > 0) {
+            const item = this.pending.shift();
+            item?.reject(new Error(`[JobQueue:${this.name}] ${reason}`));
+        }
+    }
+    /** Wait until running + pending reach zero (or timeout). */
+    async drain(timeoutMs = 30_000) {
+        const start = Date.now();
+        while (this.running > 0 || this.pending.length > 0) {
+            if (Date.now() - start > timeoutMs) {
+                throw new Error(`[JobQueue:${this.name}] drain timed out after ${timeoutMs}ms`);
+            }
+            await new Promise((r) => setTimeout(r, 10));
+        }
+    }
+    pump() {
+        while (this.running < this.maxConcurrency && this.pending.length > 0) {
+            const item = this.pending.shift();
+            if (!item)
+                break;
+            this.running++;
+            void this.execute(item);
+        }
+    }
+    async execute(item) {
+        try {
+            const result = await item.run();
+            this.completed++;
+            item.resolve(result);
+        }
+        catch (error) {
+            this.failed++;
+            try {
+                this.onError?.(error, item.id);
+            }
+            catch {
+                // ignore listener errors
+            }
+            item.reject(error);
+        }
+        finally {
+            this.running--;
+            this.pump();
+        }
+    }
+}
+/** Shared singleton for agent orchestration (lazy). */
+let agentJobQueue = null;
+export function getAgentJobQueue(options) {
+    if (!agentJobQueue) {
+        const fromEnv = process.env.ATABEY_JOB_CONCURRENCY
+            ? parseInt(process.env.ATABEY_JOB_CONCURRENCY, 10)
+            : undefined;
+        agentJobQueue = new InMemoryJobQueue({
+            name: "agent",
+            maxConcurrency: options?.maxConcurrency ?? (Number.isFinite(fromEnv) ? fromEnv : undefined),
+            onError: options?.onError,
+        });
+    }
+    return agentJobQueue;
+}
+/** Test helper — reset singleton. */
+export function resetAgentJobQueue() {
+    agentJobQueue?.close("reset");
+    agentJobQueue = null;
+}
+//# sourceMappingURL=job-queue.js.map

package/dist/job-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-queue.js","sourceRoot":"","sources":["../src/job-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AA2BpB,MAAM,OAAO,gBAAgB;IACR,cAAc,CAAS;IACvB,IAAI,CAAS;IACb,OAAO,CAA2C;IAClD,OAAO,GAA8B,EAAE,CAAC;IACjD,OAAO,GAAG,CAAC,CAAC;IACZ,MAAM,GAAG,CAAC,CAAC;IACX,SAAS,GAAG,CAAC,CAAC;IACd,MAAM,GAAG,CAAC,CAAC;IACX,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAY,UAA2B,EAAE;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;QACjD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACnC,CAAC;IAED;;;OAGG;IACI,OAAO,CAAI,EAAoB;QAClC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,IAAI,4CAA4C,CAAC,CAAC,CAAC;QACzG,CAAC;QAED,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,IAAI,GAAiB;gBACvB,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;gBACjB,GAAG,EAAE,EAAE;gBACP,OAAO;gBACP,MAAM;aACT,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAA0B,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,iCAAiC;IAC1B,QAAQ;QACX,OAAO;YACH,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;SACtB,CAAC;IACN,CAAC;IAED,8EAA8E;IACvE,KAAK,CAAC,MAAM,GAAG,cAAc;QAChC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;IACL,CAAC;IAED,4DAA4D;IACrD,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,MAAM;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,IAAI,2BAA2B,SAAS,IAAI,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;IACL,CAAC;IAEO,IAAI;QACR,OAAO,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI;gBAAE,MAAM;YACjB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAwB;QAC1C,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;YAChC,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,IAAI,CAAC;gBACD,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACL,yBAAyB;YAC7B,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,CAAC;IACL,CAAC;CACJ;AAED,uDAAuD;AACvD,IAAI,aAAa,GAA4B,IAAI,CAAC;AAElD,MAAM,UAAU,gBAAgB,CAAC,OAAyB;IACtD,IAAI,CAAC,aAAa,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB;YAC9C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,EAAE,CAAC;YAClD,CAAC,CAAC,SAAS,CAAC;QAChB,aAAa,GAAG,IAAI,gBAAgB,CAAC;YACjC,IAAI,EAAE,OAAO;YACb,cAAc,EAAE,OAAO,EAAE,cAAc,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3F,OAAO,EAAE,OAAO,EAAE,OAAO;SAC5B,CAAC,CAAC;IACP,CAAC;IACD,OAAO,aAAa,CAAC;AACzB,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,kBAAkB;IAC9B,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9B,aAAa,GAAG,IAAI,CAAC;AACzB,CAAC"}

package/dist/policy-gate.d.ts

@@ -0,0 +1,42 @@
+/**
+ * PolicyGate — single decision point for mutating / sensitive operations.
+ *
+ * Phase 0 foundation for enterprise hard-gate security.
+ * Every MCP mutating tool should call evaluateToolCall() before side effects.
+ *
+ * Decision is pure (no I/O) except optional hooks; MCP layer may enrich with
+ * project-specific RBAC before/after this gate.
+ */
+export type PolicyEffect = "allow" | "deny";
+export type PolicyCode = "ALLOW" | "DENY_UNKNOWN_TOOL" | "DENY_PATH_TRAVERSAL" | "DENY_PROTECTED_PATH" | "DENY_ABSOLUTE_ESCAPE" | "DENY_RECON_MUTATION" | "DENY_SHELL_METACHAR" | "DENY_EMPTY_PATH";
+export interface PolicyDecision {
+    effect: PolicyEffect;
+    code: PolicyCode;
+    reason: string;
+}
+export interface ToolCallPolicyInput {
+    tool: string;
+    agent: string;
+    args: Record<string, unknown>;
+    /** Optional agent tier when known (supreme | core | recon). */
+    tier?: "supreme" | "core" | "recon";
+}
+/** Tools that mutate disk, process state, or external systems. */
+export declare const MUTATING_TOOLS: Set<string>;
+/**
+ * Normalize agent id to @name form.
+ */
+export declare function normalizeAgentId(agent: string): string;
+/**
+ * Evaluate a tool call against baseline hard rules (path safety, recon, shell meta).
+ * Does NOT replace full RBAC matrix — call permissions layer separately or wrap here later.
+ */
+export declare function evaluateToolCall(input: ToolCallPolicyInput): PolicyDecision;
+/**
+ * True when decision is allow.
+ */
+export declare function isAllowed(decision: PolicyDecision): boolean;
+/**
+ * Format decision for MCP error payloads.
+ */
+export declare function formatPolicyDenial(decision: PolicyDecision): string;

package/dist/policy-gate.js

@@ -0,0 +1,148 @@
+/**
+ * PolicyGate — single decision point for mutating / sensitive operations.
+ *
+ * Phase 0 foundation for enterprise hard-gate security.
+ * Every MCP mutating tool should call evaluateToolCall() before side effects.
+ *
+ * Decision is pure (no I/O) except optional hooks; MCP layer may enrich with
+ * project-specific RBAC before/after this gate.
+ */
+/** Tools that mutate disk, process state, or external systems. */
+export const MUTATING_TOOLS = new Set([
+    "write_file",
+    "replace_text",
+    "patch_file",
+    "batch_surgical_edit",
+    "run_shell_command",
+    "compress_files",
+    "decompress_files",
+    "delete_knowledge",
+    "update_project_memory",
+    "store_knowledge",
+    "update_contract_hash",
+]);
+/** Path-like arg keys commonly used by tools. */
+const PATH_KEYS = ["path", "file", "filePath", "target", "output", "source", "archive"];
+/** Relative path segments that must never be written by agents by default. */
+const PROTECTED_PATH_PATTERNS = [
+    /(^|\/)\.env(\.|$)/i,
+    /(^|\/)\.env\.[^/]+$/i,
+    /(^|\/)\.ssh(\/|$)/i,
+    /(^|\/)\.gnupg(\/|$)/i,
+    /(^|\/)id_rsa$/i,
+    /(^|\/)id_ed25519$/i,
+    /(^|\/)credentials\.json$/i,
+    /(^|\/)\.aws\/credentials$/i,
+    /(^|\/)\.npmrc$/i,
+    /(^|\/)\.netrc$/i,
+];
+function allow(code = "ALLOW", reason = "Allowed") {
+    return { effect: "allow", code, reason };
+}
+function deny(code, reason) {
+    return { effect: "deny", code, reason };
+}
+function collectPaths(args) {
+    const paths = [];
+    for (const key of PATH_KEYS) {
+        const v = args[key];
+        if (typeof v === "string" && v.trim())
+            paths.push(v.trim());
+    }
+    // batch_surgical_edit
+    if (Array.isArray(args.edits)) {
+        for (const edit of args.edits) {
+            if (edit && typeof edit === "object" && typeof edit.path === "string") {
+                paths.push(edit.path.trim());
+            }
+        }
+    }
+    return paths;
+}
+/**
+ * Normalize agent id to @name form.
+ */
+export function normalizeAgentId(agent) {
+    const a = (agent || "mcp-client").trim();
+    if (!a)
+        return "@mcp-client";
+    return a.startsWith("@") ? a : `@${a}`;
+}
+/**
+ * Evaluate a tool call against baseline hard rules (path safety, recon, shell meta).
+ * Does NOT replace full RBAC matrix — call permissions layer separately or wrap here later.
+ */
+export function evaluateToolCall(input) {
+    const tool = input.tool;
+    const agent = normalizeAgentId(input.agent);
+    const tier = input.tier;
+    const args = input.args || {};
+    if (!tool) {
+        return deny("DENY_UNKNOWN_TOOL", "Missing tool name");
+    }
+    const isMutating = MUTATING_TOOLS.has(tool);
+    // Path safety for any tool that carries paths (read or write)
+    const paths = collectPaths(args);
+    for (const p of paths) {
+        if (!p) {
+            return deny("DENY_EMPTY_PATH", "Empty path argument is not allowed");
+        }
+        // Null bytes / obvious traversal
+        if (p.includes("\0")) {
+            return deny("DENY_PATH_TRAVERSAL", "Path contains illegal null byte");
+        }
+        // Windows + POSIX traversal
+        if (p.includes("..")) {
+            // Allow only if not used as parent segment — simple hard deny for Phase 0
+            const segments = p.replace(/\\/g, "/").split("/");
+            if (segments.some((s) => s === "..")) {
+                return deny("DENY_PATH_TRAVERSAL", `Path traversal denied for "${p}". Paths must stay inside the project root.`);
+            }
+        }
+        // Absolute paths that look like host escapes (MCP should still safePath; belt-and-suspenders)
+        if (p.startsWith("/") || /^[A-Za-z]:[\\/]/.test(p)) {
+            // Absolute can be OK if still under project after safePath — flag high-risk patterns only
+            if (p.startsWith("/etc") ||
+                p.startsWith("/usr") ||
+                p.startsWith("/bin") ||
+                p.startsWith("/sbin") ||
+                p.includes("/.ssh") ||
+                p.startsWith("/System")) {
+                return deny("DENY_ABSOLUTE_ESCAPE", `Absolute system path denied: "${p}"`);
+            }
+        }
+        if (isMutating) {
+            const normalized = p.replace(/\\/g, "/");
+            for (const re of PROTECTED_PATH_PATTERNS) {
+                if (re.test(normalized)) {
+                    return deny("DENY_PROTECTED_PATH", `Write/mutate denied for protected path "${p}". Secrets and credential files are blocked by PolicyGate.`);
+                }
+            }
+        }
+    }
+    // Recon agents: no mutating tools (matrix may later grant exceptions — Phase 0 hard deny)
+    if (isMutating && tier === "recon") {
+        return deny("DENY_RECON_MUTATION", `Agent ${agent} (tier: recon) cannot invoke mutating tool "${tool}".`);
+    }
+    // Shell metacharacters (defense in depth; shell tool also checks)
+    if (tool === "run_shell_command") {
+        const command = String(args.command ?? "");
+        if (/[;&|><$`\n\r]/.test(command)) {
+            return deny("DENY_SHELL_METACHAR", "Shell metacharacters are forbidden to prevent command injection.");
+        }
+    }
+    return allow();
+}
+/**
+ * True when decision is allow.
+ */
+export function isAllowed(decision) {
+    return decision.effect === "allow";
+}
+/**
+ * Format decision for MCP error payloads.
+ */
+export function formatPolicyDenial(decision) {
+    return `[POLICY_GATE] ${decision.code}: ${decision.reason}`;
+}
+//# sourceMappingURL=policy-gate.js.map

package/dist/policy-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-gate.js","sourceRoot":"","sources":["../src/policy-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA4BH,kEAAkE;AAClE,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAClC,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,qBAAqB;IACrB,mBAAmB;IACnB,gBAAgB;IAChB,kBAAkB;IAClB,kBAAkB;IAClB,uBAAuB;IACvB,iBAAiB;IACjB,sBAAsB;CACzB,CAAC,CAAC;AAEH,iDAAiD;AACjD,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAEjG,8EAA8E;AAC9E,MAAM,uBAAuB,GAAa;IACtC,oBAAoB;IACpB,sBAAsB;IACtB,oBAAoB;IACpB,sBAAsB;IACtB,gBAAgB;IAChB,oBAAoB;IACpB,2BAA2B;IAC3B,4BAA4B;IAC5B,iBAAiB;IACjB,iBAAiB;CACpB,CAAC;AAEF,SAAS,KAAK,CAAC,OAAmB,OAAO,EAAE,MAAM,GAAG,SAAS;IACzD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,IAAI,CAAC,IAAgB,EAAE,MAAc;IAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,IAA6B;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,sBAAsB;IACtB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAQ,IAA0B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3F,KAAK,CAAC,IAAI,CAAE,IAAyB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC1C,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,CAAC;QAAE,OAAO,aAAa,CAAC;IAC7B,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA0B;IACvD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IAE9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO,IAAI,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAE5C,8DAA8D;IAC9D,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,IAAI,CAAC,iBAAiB,EAAE,oCAAoC,CAAC,CAAC;QACzE,CAAC;QACD,iCAAiC;QACjC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,qBAAqB,EAAE,iCAAiC,CAAC,CAAC;QAC1E,CAAC;QACD,4BAA4B;QAC5B,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,0EAA0E;YAC1E,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO,IAAI,CACP,qBAAqB,EACrB,8BAA8B,CAAC,6CAA6C,CAC/E,CAAC;YACN,CAAC;QACL,CAAC;QACD,8FAA8F;QAC9F,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,0FAA0F;YAC1F,IACI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBACpB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBACpB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBACpB,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;gBACrB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACnB,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,EACzB,CAAC;gBACC,OAAO,IAAI,CACP,sBAAsB,EACtB,iCAAiC,CAAC,GAAG,CACxC,CAAC;YACN,CAAC;QACL,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACzC,KAAK,MAAM,EAAE,IAAI,uBAAuB,EAAE,CAAC;gBACvC,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBACtB,OAAO,IAAI,CACP,qBAAqB,EACrB,2CAA2C,CAAC,4DAA4D,CAC3G,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAED,0FAA0F;IAC1F,IAAI,UAAU,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,IAAI,CACP,qBAAqB,EACrB,SAAS,KAAK,+CAA+C,IAAI,IAAI,CACxE,CAAC;IACN,CAAC;IAED,kEAAkE;IAClE,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CACP,qBAAqB,EACrB,kEAAkE,CACrE,CAAC;QACN,CAAC;IACL,CAAC;IAED,OAAO,KAAK,EAAE,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,QAAwB;IAC9C,OAAO,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAwB;IACvD,OAAO,iBAAiB,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;AAChE,CAAC"}

package/dist/resilience.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Polly-style resilience primitives — no external deps.
+ *
+ * - withRetry: exponential backoff + jitter for transient failures
+ * - CircuitBreaker: closed → open → half-open state machine
+ * - withResilience: compose retry + circuit breaker
+ *
+ * Typical use: LLM provider rate limits, timeouts, 5xx, network blips.
+ */
+export type CircuitState = "closed" | "open" | "half-open";
+export interface RetryOptions {
+    /** Max attempts including the first try. Default: 3 */
+    maxAttempts?: number;
+    /** Initial delay in ms. Default: 100 */
+    baseDelayMs?: number;
+    /** Cap on delay in ms. Default: 10_000 */
+    maxDelayMs?: number;
+    /** Exponential factor. Default: 2 */
+    factor?: number;
+    /** Add random jitter [0, delay). Default: true */
+    jitter?: boolean;
+    /** Return true to retry this error. Default: retry all */
+    retryIf?: (error: unknown, attempt: number) => boolean;
+    /** Optional hook before each sleep */
+    onRetry?: (error: unknown, attempt: number, delayMs: number) => void;
+    /** Optional abort signal */
+    signal?: AbortSignal;
+}
+export interface CircuitBreakerOptions {
+    /** Failures in closed state before opening. Default: 5 */
+    failureThreshold?: number;
+    /** Successes in half-open before closing. Default: 2 */
+    successThreshold?: number;
+    /** Time to wait in open before half-open probe. Default: 30_000 */
+    openMs?: number;
+    /** Optional name for error messages */
+    name?: string;
+}
+export declare class CircuitOpenError extends Error {
+    readonly circuit: string;
+    readonly retryAfterMs: number;
+    constructor(circuit: string, retryAfterMs: number);
+}
+export declare class CircuitBreaker {
+    private state;
+    private failures;
+    private successes;
+    private openedAt;
+    private readonly failureThreshold;
+    private readonly successThreshold;
+    private readonly openMs;
+    private readonly name;
+    constructor(options?: CircuitBreakerOptions);
+    getState(): CircuitState;
+    getStats(): {
+        state: CircuitState;
+        failures: number;
+        successes: number;
+        name: string;
+    };
+    /** Manual reset (e.g. after operator intervention). */
+    reset(): void;
+    exec<T>(fn: () => Promise<T>): Promise<T>;
+    private maybeTransitionToHalfOpen;
+    private onSuccess;
+    private onFailure;
+    private trip;
+}
+export declare function computeBackoffDelay(attempt: number, options?: Pick<RetryOptions, "baseDelayMs" | "maxDelayMs" | "factor" | "jitter">): number;
+export declare function withRetry<T>(fn: (attempt: number) => Promise<T>, options?: RetryOptions): Promise<T>;
+export interface ResilienceOptions {
+    retry?: RetryOptions;
+    circuitBreaker?: CircuitBreaker;
+    /** If true, CircuitOpenError is not retried (default true). */
+    skipRetryOnOpenCircuit?: boolean;
+}
+/**
+ * Execute `fn` through optional circuit breaker + retry with exponential backoff.
+ */
+export declare function withResilience<T>(fn: (attempt: number) => Promise<T>, options?: ResilienceOptions): Promise<T>;
+/** Heuristic: retry rate limits, timeouts, and common transient network errors. */
+export declare function isTransientError(error: unknown): boolean;
+export declare function getCircuitBreaker(name: string, options?: CircuitBreakerOptions): CircuitBreaker;
+export declare function resetAllCircuitBreakers(): void;