glirastes 0.3.2 → 0.5.0

package/dist/runtime/offline-execution-lease.js

@@ -0,0 +1,46 @@
+import { ExecutionLeaseSchema, } from '../contracts/index.js';
+import { RuntimeRevisionVerifier, } from '../sync/signature-verifier.js';
+export class OfflineExecutionLeaseAuthorizer {
+    verifier;
+    constructor(keys) {
+        this.verifier = new RuntimeRevisionVerifier(keys);
+    }
+    async authorize(input) {
+        const lease = ExecutionLeaseSchema.parse(input.lease);
+        await this.verifier.verifyExecutionLease(lease);
+        this.assertScope(lease, input.scope);
+        const now = (input.at ?? new Date()).getTime();
+        if (now < Date.parse(lease.issuedAt)) {
+            throw new Error('Offline execution lease is not active yet');
+        }
+        if (now >= Date.parse(lease.expiresAt)) {
+            throw new Error('Offline execution lease has expired');
+        }
+        if (input.requiresApproval) {
+            throw new Error('Approval-required tools cannot execute offline');
+        }
+        if (input.riskClass !== 'safe-read') {
+            throw new Error('Offline execution is restricted to safe-read tools');
+        }
+        if (!lease.allowedRiskClasses.includes(input.riskClass)) {
+            throw new Error('Tool risk class is outside the offline execution lease');
+        }
+        return {
+            leaseId: lease.leaseId,
+            budget: structuredClone(lease.budget),
+        };
+    }
+    assertScope(lease, scope) {
+        const matches = (lease.tenantId === scope.tenantId
+            && lease.targetAppId === scope.targetAppId
+            && lease.environmentId === scope.environmentId
+            && lease.runnerId === scope.runnerId
+            && lease.deploymentId === scope.deploymentId
+            && lease.agentRevisionId === scope.agentRevisionId
+            && lease.triggerId === scope.triggerId);
+        if (!matches) {
+            throw new Error('Offline execution lease scope does not match the run');
+        }
+    }
+}
+//# sourceMappingURL=offline-execution-lease.js.map

package/dist/runtime/offline-execution-lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"offline-execution-lease.js","sourceRoot":"","sources":["../../src/runtime/offline-execution-lease.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,GAIrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,GAExB,MAAM,+BAA+B,CAAC;AAiBvC,MAAM,OAAO,+BAA+B;IACzB,QAAQ,CAA0B;IAEnD,YAAY,IAA8B;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAMf;QACC,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAErC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/C,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;SACtC,CAAC;IACJ,CAAC;IAEO,WAAW,CACjB,KAAqB,EACrB,KAAiC;QAEjC,MAAM,OAAO,GAAG,CACd,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;eAC9B,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;eACvC,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;eAC3C,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;eACjC,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;eACzC,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe;eAC/C,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CACvC,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;CACF"}

package/dist/runtime/policy-overlay.d.ts

@@ -0,0 +1,86 @@
+import { type ExecutionBudget, type RuntimePolicyRevision, type RuntimeToolPolicy } from '../contracts/index.js';
+import { type ConfirmationRelaxationOutcome, type ToolPolicyEntry } from '../contracts/tool-policy.js';
+/** One Platform delta for one tool the deployed code owns. */
+export type PolicyOverlayEntry = {
+    toolId: string;
+} & ToolPolicyEntry;
+export interface PolicyOverlayIgnoredEntry {
+    toolId: string;
+    reason: 'platform-tool-not-in-code';
+}
+/**
+ * What became of a Platform relaxation of confirmation for a tool that asks
+ * before it runs. `locked-locally`: the local code report does not open this
+ * confirmation to the Platform (tool-policy.json decided it, the report names
+ * no origin, the local class is tier 3, or the caller passed no report).
+ * `duplicate-decisions`: the overlay holds more than one decision for the
+ * tool, which a signed revision never does. The rest come from the shared
+ * rule `confirmationRelaxationOutcome`.
+ */
+export type PolicyOverlayRelaxationOutcome = 'applied' | 'locked-locally' | 'duplicate-decisions' | Exclude<ConfirmationRelaxationOutcome, 'applies'>;
+/** Content-free: a tool id and a code, never a value. */
+export interface PolicyOverlayRelaxation {
+    toolId: string;
+    outcome: PolicyOverlayRelaxationOutcome;
+}
+export interface PolicyOverlayResult {
+    policies: RuntimeToolPolicy[];
+    ignored: PolicyOverlayIgnoredEntry[];
+    /** One entry per asking tool a Platform decision tried to relax, in local order. */
+    relaxations: PolicyOverlayRelaxation[];
+}
+export interface PolicyOverlayOptions {
+    /**
+     * Tools whose confirmation a signed Platform decision may switch off:
+     * `relaxableToolIds(setupArtifact)` of the running code. Every other tool
+     * keeps its local confirmation; without this set nothing relaxes.
+     */
+    relaxableToolIds?: ReadonlySet<string>;
+}
+/**
+ * A Platform policy overlay whose signature the sync layer already verified.
+ * The runtime reads the last accepted value; it never fetches one per turn.
+ */
+export interface VerifiedPolicyOverlay {
+    /** Platform policy revision id; revocations of it keep matching. */
+    revisionId: string;
+    revision: number;
+    entries: PolicyOverlayEntry[];
+    /** Optional Platform budget; it can only tighten the local limits. */
+    budget?: ExecutionBudget;
+}
+/**
+ * Composes the local effective policies with a verified Platform overlay
+ * (spec 4.9, resolveToolPolicy semantics). The overlay restricts: disable,
+ * raise the risk class, narrow roles, require confirmation; `enabled: true`
+ * and a lower risk class are no-ops. Its one relaxation is D16 (spec 4.5 as
+ * amended 2026-10-05): a signed `requiresApproval: false` switches a tool's
+ * confirmation off where `confirmationRelaxationOutcome` applies at the
+ * effective risk class (pinned to this tool, at most tier 2, lapsing once
+ * the risk rises above the pin; tier 3 and `unknown` never) and only for
+ * tools in `relaxableToolIds`, so a local lock in tool-policy.json always
+ * wins. Overlay ids without a local policy are ignored and reported.
+ */
+export declare function applyPolicyOverlay(local: RuntimeToolPolicy[], overlay: PolicyOverlayEntry[], options?: PolicyOverlayOptions): PolicyOverlayResult;
+/**
+ * The tools of the running code whose confirmation a signed Platform decision
+ * may switch off (D16): those the committed setup artifact (the code report)
+ * attributes to the code default, up to tier 2 (`platformMayRelaxConfirmation`).
+ * An explicit `requiresApproval: true` or a risk raise in tool-policy.json and
+ * an artifact without provenance are local locks.
+ */
+export declare function relaxableToolIds(setupArtifact: unknown): Set<string>;
+/**
+ * Platform descriptions for tools the deployed code has (spec 4.5: Platform >
+ * local > code for prose). The last delta for a tool wins, like the policy
+ * layers; deltas for tools the code does not have are ignored.
+ */
+export declare function overlayDescriptions(localToolIds: ReadonlySet<string>, overlay: ReadonlyArray<PolicyOverlayEntry>): Map<string, string>;
+/**
+ * Reads a Platform policy revision the sync manager already verified as an
+ * overlay. The entries are the signed `toolOverrides` deltas (P08b shared
+ * contract item 2), never the reported `toolPolicies`: those repeat what the
+ * code reported and would freeze an old local value, and a relaxation there
+ * is no decision. The revision id keeps Platform revocations matching.
+ */
+export declare function policyOverlayFromRevision(revision: RuntimePolicyRevision): VerifiedPolicyOverlay;

package/dist/runtime/policy-overlay.js

@@ -0,0 +1,117 @@
+import { AppSetupArtifactSchema, } from '../contracts/index.js';
+import { confirmationFloor, confirmationRelaxationOutcome, intersectAllowedRoles, mostRestrictiveRiskClass, platformMayRelaxConfirmation, riskTier, } from '../contracts/tool-policy.js';
+/**
+ * Composes the local effective policies with a verified Platform overlay
+ * (spec 4.9, resolveToolPolicy semantics). The overlay restricts: disable,
+ * raise the risk class, narrow roles, require confirmation; `enabled: true`
+ * and a lower risk class are no-ops. Its one relaxation is D16 (spec 4.5 as
+ * amended 2026-10-05): a signed `requiresApproval: false` switches a tool's
+ * confirmation off where `confirmationRelaxationOutcome` applies at the
+ * effective risk class (pinned to this tool, at most tier 2, lapsing once
+ * the risk rises above the pin; tier 3 and `unknown` never) and only for
+ * tools in `relaxableToolIds`, so a local lock in tool-policy.json always
+ * wins. Overlay ids without a local policy are ignored and reported.
+ */
+export function applyPolicyOverlay(local, overlay, options = {}) {
+    const relaxable = options.relaxableToolIds ?? new Set();
+    const localIds = new Set(local.map((policy) => policy.toolId));
+    const entriesByToolId = new Map();
+    const ignored = new Set();
+    for (const { toolId, ...entry } of overlay) {
+        if (!localIds.has(toolId)) {
+            ignored.add(toolId);
+            continue;
+        }
+        entriesByToolId.set(toolId, [...(entriesByToolId.get(toolId) ?? []), entry]);
+    }
+    const relaxations = [];
+    const policies = local.map((policy) => {
+        const entries = entriesByToolId.get(policy.toolId) ?? [];
+        const restricted = entries.reduce(restrictPolicy, policy);
+        if (!restricted.requiresApproval
+            || !entries.some((entry) => entry.requiresApproval === false)) {
+            return restricted;
+        }
+        const outcome = relaxationOutcome(policy.toolId, entries, restricted.riskClass, relaxable);
+        relaxations.push({ toolId: policy.toolId, outcome });
+        return outcome === 'applied'
+            ? { ...restricted, requiresApproval: false }
+            : restricted;
+    });
+    return {
+        policies,
+        ignored: [...ignored].sort().map((toolId) => ({
+            toolId,
+            reason: 'platform-tool-not-in-code',
+        })),
+        relaxations,
+    };
+}
+function restrictPolicy(policy, entry) {
+    const riskClass = mostRestrictiveRiskClass(policy.riskClass, entry.riskClass);
+    const roles = intersectAllowedRoles(policy.allowedRoles, entry.allowedRoles);
+    const raisedIntoConfirmation = riskTier(riskClass) >= 2
+        && riskTier(riskClass) > riskTier(policy.riskClass);
+    return {
+        toolId: policy.toolId,
+        // Disjoint role restrictions mean nobody, never everyone.
+        enabled: policy.enabled && entry.enabled !== false && !roles.disjoint,
+        riskClass,
+        requiresApproval: confirmationFloor(riskClass, policy.requiresApproval
+            || entry.requiresApproval === true
+            || raisedIntoConfirmation),
+        allowedRoles: roles.roles,
+    };
+}
+/** D16 for one asking tool, checked after every restriction of its decision. */
+function relaxationOutcome(toolId, entries, riskClass, relaxable) {
+    if (entries.length !== 1)
+        return 'duplicate-decisions';
+    const outcome = confirmationRelaxationOutcome(toolId, entries[0].pin, riskClass);
+    if (outcome !== 'applies')
+        return outcome;
+    return relaxable.has(toolId) ? 'applied' : 'locked-locally';
+}
+/**
+ * The tools of the running code whose confirmation a signed Platform decision
+ * may switch off (D16): those the committed setup artifact (the code report)
+ * attributes to the code default, up to tier 2 (`platformMayRelaxConfirmation`).
+ * An explicit `requiresApproval: true` or a risk raise in tool-policy.json and
+ * an artifact without provenance are local locks.
+ */
+export function relaxableToolIds(setupArtifact) {
+    const artifact = AppSetupArtifactSchema.parse(setupArtifact);
+    return new Set(artifact.tools
+        .filter((tool) => platformMayRelaxConfirmation(tool.riskClass, tool.provenance?.policyOrigin?.requiresApproval))
+        .map((tool) => tool.toolId));
+}
+/**
+ * Platform descriptions for tools the deployed code has (spec 4.5: Platform >
+ * local > code for prose). The last delta for a tool wins, like the policy
+ * layers; deltas for tools the code does not have are ignored.
+ */
+export function overlayDescriptions(localToolIds, overlay) {
+    const descriptions = new Map();
+    for (const entry of overlay) {
+        if (entry.description !== undefined && localToolIds.has(entry.toolId)) {
+            descriptions.set(entry.toolId, entry.description);
+        }
+    }
+    return descriptions;
+}
+/**
+ * Reads a Platform policy revision the sync manager already verified as an
+ * overlay. The entries are the signed `toolOverrides` deltas (P08b shared
+ * contract item 2), never the reported `toolPolicies`: those repeat what the
+ * code reported and would freeze an old local value, and a relaxation there
+ * is no decision. The revision id keeps Platform revocations matching.
+ */
+export function policyOverlayFromRevision(revision) {
+    return {
+        revisionId: revision.revisionId,
+        revision: revision.revision,
+        entries: revision.toolOverrides.map((delta) => ({ ...delta })),
+        budget: revision.budget,
+    };
+}
+//# sourceMappingURL=policy-overlay.js.map

package/dist/runtime/policy-overlay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-overlay.js","sourceRoot":"","sources":["../../src/runtime/policy-overlay.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,GAKvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,qBAAqB,EACrB,wBAAwB,EACxB,4BAA4B,EAC5B,QAAQ,GAGT,MAAM,6BAA6B,CAAC;AA4DrC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAA0B,EAC1B,OAA6B,EAC7B,UAAgC,EAAE;IAElC,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,GAAG,EAAU,CAAC;IAChE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,MAAM,eAAe,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,WAAW,GAA8B,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACpC,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC1D,IACE,CAAC,UAAU,CAAC,gBAAgB;eACzB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,KAAK,KAAK,CAAC,EAC7D,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,OAAO,GAAG,iBAAiB,CAC/B,MAAM,CAAC,MAAM,EACb,OAAO,EACP,UAAU,CAAC,SAAS,EACpB,SAAS,CACV,CAAC;QACF,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,OAAO,OAAO,KAAK,SAAS;YAC1B,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,gBAAgB,EAAE,KAAK,EAAE;YAC5C,CAAC,CAAC,UAAU,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,OAAO;QACL,QAAQ;QACR,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC5C,MAAM;YACN,MAAM,EAAE,2BAAoC;SAC7C,CAAC,CAAC;QACH,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,MAAyB,EACzB,KAAsB;IAEtB,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7E,MAAM,sBAAsB,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;WAClD,QAAQ,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACtD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,0DAA0D;QAC1D,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ;QACrE,SAAS;QACT,gBAAgB,EAAE,iBAAiB,CACjC,SAAS,EACT,MAAM,CAAC,gBAAgB;eAClB,KAAK,CAAC,gBAAgB,KAAK,IAAI;eAC/B,sBAAsB,CAC5B;QACD,YAAY,EAAE,KAAK,CAAC,KAAK;KAC1B,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,iBAAiB,CACxB,MAAc,EACd,OAAuC,EACvC,SAAwB,EACxB,SAA8B;IAE9B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACvD,MAAM,OAAO,GAAG,6BAA6B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAClF,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC1C,OAAO,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,aAAsB;IACrD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7D,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,4BAA4B,CAC5C,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,gBAAgB,CAChD,CAAC;SACD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAiC,EACjC,OAA0C;IAE1C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACtE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAA+B;IAE/B,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,OAAO,EAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,QAAQ,CAAC,MAAM;KACxB,CAAC;AACJ,CAAC"}

package/dist/runtime/postgres-store.d.ts

@@ -0,0 +1,111 @@
+export interface PostgresQueryClient {
+    unsafe<T extends Record<string, unknown>>(query: string, parameters?: readonly unknown[]): Promise<T[]>;
+}
+export type ConversationVisibility = 'private' | 'tenant';
+export interface RuntimeStoreScope {
+    environmentId: string;
+    tenantId: string;
+    subjectId: string;
+}
+export interface SaveConversationInput extends RuntimeStoreScope {
+    conversationId: string;
+    visibility: ConversationVisibility;
+    messages: unknown[];
+    expiresAt?: Date | null;
+}
+export interface LoadConversationInput extends RuntimeStoreScope {
+    conversationId: string;
+}
+export interface ConversationRecord {
+    conversationId: string;
+    tenantId: string;
+    ownerSubjectId: string;
+    visibility: ConversationVisibility;
+    messages: unknown[];
+    updatedAt: Date;
+    expiresAt: Date | null;
+}
+export interface ProjectConversationInput extends LoadConversationInput {
+    maxMessages: number;
+    maxCharacters: number;
+}
+export type RuntimeCheckpointStatus = 'running' | 'paused' | 'completed' | 'failed' | 'cancelled';
+export interface SaveCheckpointInput {
+    environmentId: string;
+    runId: string;
+    turnId: string;
+    agentRevisionId: string;
+    expectedSequence: number;
+    status: RuntimeCheckpointStatus;
+    state: unknown;
+    checkpointId?: string;
+}
+export interface RuntimeCheckpoint {
+    checkpointId: string;
+    runId: string;
+    turnId: string;
+    agentRevisionId: string;
+    sequence: number;
+    status: RuntimeCheckpointStatus;
+    state: unknown;
+    createdAt: Date;
+}
+export interface ToolExecutionClaimInput {
+    environmentId: string;
+    runId: string;
+    idempotencyKey: string;
+    toolUuid: string;
+    inputFingerprint: string;
+}
+export type ToolExecutionStatus = 'pending' | 'completed' | 'failed';
+export interface ToolExecutionEvidence {
+    claimed: boolean;
+    idempotencyKey: string;
+    toolUuid: string;
+    inputFingerprint: string;
+    status: ToolExecutionStatus;
+    result: unknown | null;
+    resultFingerprint: string | null;
+    createdAt: Date;
+    completedAt: Date | null;
+}
+export interface CompleteToolExecutionInput extends ToolExecutionClaimInput {
+    status: Exclude<ToolExecutionStatus, 'pending'>;
+    result: unknown;
+    resultFingerprint: string;
+}
+export interface DurableRuntimeStore {
+    saveCheckpoint(input: SaveCheckpointInput): Promise<RuntimeCheckpoint>;
+    loadLatestCheckpoint(input: {
+        environmentId: string;
+        runId: string;
+    }): Promise<RuntimeCheckpoint | null>;
+    claimToolExecution(input: ToolExecutionClaimInput): Promise<ToolExecutionEvidence>;
+    completeToolExecution(input: CompleteToolExecutionInput): Promise<ToolExecutionEvidence>;
+}
+export interface RuntimePersistenceRequirement {
+    executionMode: 'interactive' | 'asynchronous' | 'scheduled' | 'unattended';
+    resumableAcrossRestarts: boolean;
+    store?: DurableRuntimeStore;
+}
+export declare function assertRuntimePersistenceReady(requirement: RuntimePersistenceRequirement): void;
+export declare class CheckpointConflictError extends Error {
+    constructor(runId: string, expectedSequence: number);
+}
+export declare const POSTGRES_RUNTIME_STORE_SCHEMA_SQL = "/* glirastes:initialize-store */\nCREATE TABLE IF NOT EXISTS glirastes_runtime_conversations (\n  environment_id text NOT NULL,\n  conversation_id text NOT NULL,\n  tenant_id text NOT NULL,\n  owner_subject_id text NOT NULL,\n  visibility text NOT NULL CHECK (visibility IN ('private', 'tenant')),\n  messages jsonb NOT NULL,\n  updated_at timestamptz NOT NULL DEFAULT now(),\n  expires_at timestamptz,\n  PRIMARY KEY (environment_id, conversation_id)\n);\nCREATE INDEX IF NOT EXISTS glirastes_runtime_conversations_access_idx\n  ON glirastes_runtime_conversations (environment_id, tenant_id, owner_subject_id);\nCREATE INDEX IF NOT EXISTS glirastes_runtime_conversations_expiry_idx\n  ON glirastes_runtime_conversations (expires_at)\n  WHERE expires_at IS NOT NULL;\n\nCREATE TABLE IF NOT EXISTS glirastes_runtime_checkpoints (\n  environment_id text NOT NULL,\n  run_id text NOT NULL,\n  checkpoint_id text NOT NULL,\n  turn_id text NOT NULL,\n  agent_revision_id text NOT NULL,\n  sequence bigint NOT NULL CHECK (sequence > 0),\n  status text NOT NULL CHECK (\n    status IN ('running', 'paused', 'completed', 'failed', 'cancelled')\n  ),\n  state jsonb NOT NULL,\n  created_at timestamptz NOT NULL DEFAULT now(),\n  PRIMARY KEY (environment_id, run_id, sequence),\n  UNIQUE (environment_id, checkpoint_id)\n);\n\nCREATE TABLE IF NOT EXISTS glirastes_runtime_tool_executions (\n  environment_id text NOT NULL,\n  run_id text NOT NULL,\n  idempotency_key text NOT NULL,\n  tool_uuid text NOT NULL,\n  input_fingerprint text NOT NULL,\n  claim_token text NOT NULL,\n  status text NOT NULL CHECK (status IN ('pending', 'completed', 'failed')),\n  result jsonb,\n  result_fingerprint text,\n  created_at timestamptz NOT NULL DEFAULT now(),\n  completed_at timestamptz,\n  PRIMARY KEY (environment_id, run_id, idempotency_key)\n);\nCREATE INDEX IF NOT EXISTS glirastes_runtime_tool_executions_tool_idx\n  ON glirastes_runtime_tool_executions (environment_id, tool_uuid, created_at);\n";
+export declare function createPostgresRuntimeStore(client: PostgresQueryClient): {
+    initialize(): Promise<void>;
+    saveConversation(input: SaveConversationInput): Promise<void>;
+    loadConversation: (input: LoadConversationInput) => Promise<ConversationRecord | null>;
+    projectConversation(input: ProjectConversationInput): Promise<unknown[]>;
+    deleteConversation(input: LoadConversationInput): Promise<boolean>;
+    purgeExpiredConversations(now?: Date): Promise<number>;
+    saveCheckpoint(input: SaveCheckpointInput): Promise<RuntimeCheckpoint>;
+    loadLatestCheckpoint(input: {
+        environmentId: string;
+        runId: string;
+    }): Promise<RuntimeCheckpoint | null>;
+    claimToolExecution(input: ToolExecutionClaimInput): Promise<ToolExecutionEvidence>;
+    completeToolExecution(input: CompleteToolExecutionInput): Promise<ToolExecutionEvidence>;
+};
+export type PostgresRuntimeStore = ReturnType<typeof createPostgresRuntimeStore>;