kiokuko-dsh 0.1.0

package/dist/server/routes/agent-capability-gate.js

@@ -0,0 +1,202 @@
+import { contextFeedbackSignals } from '../../context/feedback.js';
+import { entryOriginMatchesWorkspace } from '../../context/origin.js';
+import { KiokukoError } from '../../errors.js';
+import { LedgerStore } from '../../ledger/store.js';
+import { readEntry } from '../../memory/entries.js';
+import { isRetrievableEntry, retrievableWorkspaceEntryCount } from '../../memory/hybrid-retrieval.js';
+import { effectiveRetrievalScope, hasExplicitApplicability } from '../../memory/structured-memory.js';
+import { isExternalSkillReference } from '../../skills/store.js';
+import { isCuratorManagedGlobalMemory } from '../../memory/curator-trust.js';
+import { deriveMemoryUseSignal, deriveMemoryPolicy, hasBlockingRequiredCapability, resolveCapabilities, shouldWithholdMemoryContext, } from '../../akinator/capabilities.js';
+import { brokerPersistence } from './task5-support.js';
+function isPlainRecord(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function hasHelpfulFeedbackEvidence(context, items) {
+    return items.some((item) => contextFeedbackSignals(context.database, item.entryId)
+        .some((signal) => signal.verdict === 'helpful'));
+}
+function capabilityGatedBrokerItems(context, broker) {
+    const delivered = broker.context;
+    if (delivered === null)
+        return [];
+    if (delivered.runId === null) {
+        if (delivered.items.length === 0)
+            return [];
+        throw new KiokukoError('INTEGRITY_ERROR', 'Model-facing context is not bound to a run');
+    }
+    const run = new LedgerStore(context.database).readRun(delivered.runId);
+    if (run === undefined)
+        throw new KiokukoError('INTEGRITY_ERROR', 'Model-facing context run is missing');
+    return delivered.items.filter((item) => {
+        const row = context.database.prepare('SELECT workspace FROM entries WHERE id = ?')
+            .get(item.entryId);
+        if (row === undefined || typeof row.workspace !== 'string' || row.workspace.length === 0) {
+            throw new KiokukoError('INTEGRITY_ERROR', 'Model-facing context entry is missing or invalid');
+        }
+        const origin = item.origin ?? 'project';
+        const entry = readEntry(context.database, { workspace: row.workspace, entryId: item.entryId }, { requireStructuredScope: origin !== 'project' });
+        if (entry.revision !== item.entryRevision) {
+            throw new KiokukoError('CONFLICT', 'Model-facing context entry changed after ranking');
+        }
+        if (!entryOriginMatchesWorkspace({ origin, runWorkspace: run.workspace, entryWorkspace: entry.workspace })) {
+            throw new KiokukoError('INTEGRITY_ERROR', 'Model-facing context entry origin is invalid');
+        }
+        if (origin === 'global'
+            && (entry.scope.visibility !== 'global' || effectiveRetrievalScope(entry.scope) !== 'global')) {
+            throw new KiokukoError('INTEGRITY_ERROR', 'Model-facing global context entry scope is invalid');
+        }
+        if (origin === 'ecosystem'
+            && (!Object.hasOwn(entry.scope, 'retrievalScope')
+                || effectiveRetrievalScope(entry.scope) !== 'ecosystem'
+                || !hasExplicitApplicability(entry.scope))) {
+            throw new KiokukoError('INTEGRITY_ERROR', 'Model-facing ecosystem context entry scope is invalid');
+        }
+        if (!isRetrievableEntry(context.database, entry)) {
+            throw new KiokukoError('CONFLICT', 'Model-facing context entry is no longer retrievable');
+        }
+        if (entry.status === 'superseded') {
+            throw new KiokukoError('CONFLICT', 'Model-facing context entry is no longer retrievable');
+        }
+        return !isExternalSkillReference(entry) && !isCuratorManagedGlobalMemory(entry);
+    });
+}
+export function deriveBrokerMemoryUseSignal(context, broker) {
+    if (broker.context === null)
+        return 'none';
+    const items = capabilityGatedBrokerItems(context, broker);
+    const derived = deriveMemoryUseSignal({ ...broker.context, items });
+    if (derived === 'actionable')
+        return derived;
+    return items.length > 0 && hasHelpfulFeedbackEvidence(context, items)
+        ? 'actionable'
+        : 'none';
+}
+export function brokerIntakeStatus(status) {
+    if (status === 'needs_answer' || status === 'ready' || status === 'exhausted')
+        return status;
+    throw new KiokukoError('INTEGRITY_ERROR', 'Model-facing context is not bound to an intake');
+}
+export function assertBrokerContextRun(candidate, runId) {
+    if (candidate.context !== null && candidate.context.runId !== runId) {
+        throw new KiokukoError('INTEGRITY_ERROR', 'Model-facing context is bound to the wrong run');
+    }
+}
+function assertNonTerminalRun(run) {
+    if (run.status !== 'intake' && run.status !== 'active') {
+        throw new KiokukoError('CONFLICT', 'Agent run is terminal');
+    }
+}
+export function requestCapabilityCatalog(value) {
+    return isPlainRecord(value) ? value.capabilities : undefined;
+}
+function nextAction(intakeStatus, capabilities) {
+    if (intakeStatus === 'needs_answer')
+        return 'answer_from_evidence_or_ask_user';
+    return hasBlockingRequiredCapability(capabilities)
+        ? 'required_capability_unavailable'
+        : 'proceed';
+}
+function resolution(input, memoryUse) {
+    return resolveCapabilities({
+        task: input.task,
+        profile: input.taskProfile,
+        recommendedTags: input.recommendedTags,
+        ...(input.catalog === undefined ? {} : { capabilities: input.catalog }),
+        memoryUse,
+    });
+}
+export function applyAgentCapabilityGate(input) {
+    const memoryUse = input.intakeStatus === 'ready'
+        ? input.memoryUseOverride ?? deriveMemoryUseSignal(input.broker.context)
+        : 'none';
+    const capabilities = resolution(input, memoryUse);
+    const action = nextAction(input.intakeStatus, capabilities);
+    const withholdMemory = input.intakeStatus === 'ready' && shouldWithholdMemoryContext(capabilities);
+    const deliveredContext = action === 'required_capability_unavailable' || withholdMemory ? null : input.broker.context;
+    return {
+        context: deliveredContext,
+        recommendations: action === 'required_capability_unavailable' || withholdMemory ? [] : input.broker.recommendations,
+        capabilities,
+        memoryPolicy: deriveMemoryPolicy(input.taskProfile, memoryUse, input.catalog, input.intakeStatus !== 'ready' || input.storedEntryCount === undefined
+            ? undefined
+            : {
+                contextItemCount: deliveredContext?.items.length ?? null,
+                storedEntryCount: input.storedEntryCount,
+            }),
+        warnings: capabilities.warnings,
+        nextAction: action,
+    };
+}
+/** Count stored entries only when the final model-facing context is empty. */
+export function applyAgentCapabilityGateWithDeliveryObservation(input, countStoredEntries) {
+    const initial = applyAgentCapabilityGate(input);
+    if (input.intakeStatus !== 'ready'
+        || (initial.context !== null && initial.context.items.length > 0)) {
+        return initial;
+    }
+    return applyAgentCapabilityGate({
+        ...input,
+        storedEntryCount: countStoredEntries(),
+    });
+}
+/** Rank once, decide against that immutable snapshot, and persist only the
+ * exact approved delivery. A rejected or throwing gate never writes context. */
+export async function attachCapabilityGatedContext(context, value, catalog) {
+    const run = context.service.readRun({ runId: value.runId });
+    assertNonTerminalRun(run);
+    const task = run.title ?? '';
+    const gated = await context.broker.queryGated({ workspace: 'run-bound', runId: value.runId }, (candidate) => {
+        assertBrokerContextRun(candidate, value.runId);
+        const memoryUse = deriveBrokerMemoryUseSignal(context, candidate);
+        const result = applyAgentCapabilityGateWithDeliveryObservation({
+            task,
+            intakeStatus: brokerIntakeStatus(candidate.status),
+            taskProfile: candidate.taskProfile,
+            recommendedTags: candidate.recommendedTags,
+            catalog,
+            broker: candidate,
+            memoryUseOverride: memoryUse,
+        }, () => retrievableWorkspaceEntryCount(context.database, run.workspace));
+        return {
+            persist: result.context !== null || candidate.context === null,
+            value: result,
+            assertBeforePersist: () => {
+                if (deriveBrokerMemoryUseSignal(context, candidate) !== memoryUse) {
+                    throw new KiokukoError('CONFLICT', 'Memory capability decision changed before context persistence');
+                }
+            },
+        };
+    }, brokerPersistence(context));
+    const current = context.service.readIntake({ runId: value.runId });
+    const finalRun = context.service.readRun({ runId: value.runId });
+    assertNonTerminalRun(finalRun);
+    if (finalRun.lastSequence !== gated.broker.acceptedThrough) {
+        throw new KiokukoError('CONFLICT', 'Agent run changed while context was being prepared');
+    }
+    const intakeStatus = brokerIntakeStatus(gated.broker.status);
+    if (current.intakeStatus !== intakeStatus || current.intakeSessionId !== gated.broker.intakeSessionId) {
+        throw new KiokukoError('INTEGRITY_ERROR', 'Agent intake and context broker state disagree');
+    }
+    const expectedRunStatus = intakeStatus === 'needs_answer' ? 'intake' : 'active';
+    if (finalRun.status !== expectedRunStatus) {
+        throw new KiokukoError('INTEGRITY_ERROR', 'Agent run status and context broker state disagree');
+    }
+    return {
+        ...current,
+        runStatus: finalRun.status,
+        intakeStatus,
+        intake: { ...current.intake, status: intakeStatus },
+        taskProfile: { ...gated.broker.taskProfile },
+        // A partial intake profile is mutable and has no finalized identity. Once
+        // active, the broker projection is authoritative and may be newer than the
+        // intake link after a checkpoint profile revision.
+        profileHash: intakeStatus === 'needs_answer' ? null : gated.broker.profileHash,
+        recommendedTags: [...gated.broker.recommendedTags],
+        ...gated.value,
+    };
+}
+//# sourceMappingURL=agent-capability-gate.js.map

package/dist/server/routes/agent-capability-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-capability-gate.js","sourceRoot":"","sources":["../../../src/server/routes/agent-capability-gate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AACtG,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AACtG,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAE7E,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,6BAA6B,EAC7B,mBAAmB,EACnB,2BAA2B,GAI5B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAoCvD,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,0BAA0B,CACjC,OAA4C,EAC5C,KAAyC;IAEzC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC;SAC/E,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,0BAA0B,CACjC,OAA4C,EAC5C,MAA4C;IAE5C,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC;IACjC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC7B,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,4CAA4C,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvE,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,qCAAqC,CAAC,CAAC;IACxG,OAAO,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,4CAA4C,CAAC;aAC/E,GAAG,CAAyB,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzF,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,kDAAkD,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;QACxC,MAAM,KAAK,GAAG,SAAS,CACrB,OAAO,CAAC,QAAQ,EAChB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EACnD,EAAE,sBAAsB,EAAE,MAAM,KAAK,SAAS,EAAE,CACjD,CAAC;QACF,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1C,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,kDAAkD,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,2BAA2B,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;YAC3G,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,8CAA8C,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ;eAClB,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,oDAAoD,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,MAAM,KAAK,WAAW;eACrB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,gBAAgB,CAAC;mBAC5C,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,WAAW;mBACpD,CAAC,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,uDAAuD,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,qDAAqD,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAClC,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,qDAAqD,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAA4C,EAC5C,MAA4C;IAE5C,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC3C,MAAM,KAAK,GAAG,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,IAAI,OAAO,KAAK,YAAY;QAAE,OAAO,OAAO,CAAC;IAC7C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,0BAA0B,CAAC,OAAO,EAAE,KAAK,CAAC;QACnE,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,MAAM,CAAC;AACb,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAqC;IAErC,IAAI,MAAM,KAAK,cAAc,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC;IAC7F,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,gDAAgD,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAA+C,EAAE,KAAa;IACnG,IAAI,SAAS,CAAC,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QACpE,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,gDAAgD,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAuB;IACnD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvD,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,SAAS,UAAU,CACjB,YAAsD,EACtD,YAAkC;IAElC,IAAI,YAAY,KAAK,cAAc;QAAE,OAAO,kCAAkC,CAAC;IAC/E,OAAO,6BAA6B,CAAC,YAAY,CAAC;QAChD,CAAC,CAAC,iCAAiC;QACnC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CACjB,KAA6F,EAC7F,SAAgC;IAEhC,OAAO,mBAAmB,CAAC;QACzB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,WAAW;QAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACvE,SAAS;KACV,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAA+B;IACtE,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,KAAK,OAAO;QAC9C,CAAC,CAAC,KAAK,CAAC,iBAAiB,IAAI,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;QACxE,CAAC,CAAC,MAAM,CAAC;IACX,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,KAAK,CAAC,YAAY,KAAK,OAAO,IAAI,2BAA2B,CAAC,YAAY,CAAC,CAAC;IACnG,MAAM,gBAAgB,GAAG,MAAM,KAAK,iCAAiC,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;IACtH,OAAO;QACL,OAAO,EAAE,gBAAgB;QACzB,eAAe,EAAE,MAAM,KAAK,iCAAiC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe;QACnH,YAAY;QACZ,YAAY,EAAE,kBAAkB,CAC9B,KAAK,CAAC,WAAW,EACjB,SAAS,EACT,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,YAAY,KAAK,OAAO,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS;YACpE,CAAC,CAAC,SAAS;YACX,CAAC,CAAC;gBACA,gBAAgB,EAAE,gBAAgB,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;gBACxD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;aACzC,CACJ;QACD,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,UAAU,EAAE,MAAM;KACnB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,+CAA+C,CAC7D,KAAyD,EACzD,kBAAgC;IAEhC,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO;WAC7B,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,wBAAwB,CAAC;QAC9B,GAAG,KAAK;QACR,gBAAgB,EAAE,kBAAkB,EAAE;KACvC,CAAC,CAAC;AACL,CAAC;AAED;gFACgF;AAChF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAA0B,EAC1B,KAA4B,EAC5B,OAAgB;IAEhB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5D,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,EAAE,EAAE;QAC1G,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,2BAA2B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,+CAA+C,CAAC;YAC7D,IAAI;YACJ,YAAY,EAAE,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC;YAClD,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,OAAO;YACP,MAAM,EAAE,SAAS;YACjB,iBAAiB,EAAE,SAAS;SAC7B,EAAE,GAAG,EAAE,CAAC,8BAA8B,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1E,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,OAAO,KAAK,IAAI;YAC9D,KAAK,EAAE,MAAM;YACb,mBAAmB,EAAE,GAAG,EAAE;gBACxB,IAAI,2BAA2B,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;oBAClE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,+DAA+D,CAAC,CAAC;gBACtG,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACjE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,QAAQ,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3D,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,oDAAoD,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,YAAY,KAAK,YAAY,IAAI,OAAO,CAAC,eAAe,KAAK,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QACtG,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,gDAAgD,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,iBAAiB,GAAG,YAAY,KAAK,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChF,IAAI,QAAQ,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC1C,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,oDAAoD,CAAC,CAAC;IAClG,CAAC;IACD,OAAO;QACL,GAAG,OAAO;QACV,SAAS,EAAE,QAAQ,CAAC,MAAM;QAC1B,YAAY;QACZ,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE;QACnD,WAAW,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;QAC5C,0EAA0E;QAC1E,2EAA2E;QAC3E,mDAAmD;QACnD,WAAW,EAAE,YAAY,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW;QAC9E,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC;QAClD,GAAG,KAAK,CAAC,KAAK;KACf,CAAC;AACJ,CAAC"}

package/dist/server/routes/agent-events.d.ts

@@ -0,0 +1,5 @@
+import type { V1RouteHandler } from '../router.js';
+import { type AgentRouteContext } from './agent-runs.js';
+export declare function createAgentEventsRoute(context: AgentRouteContext): V1RouteHandler;
+export declare function agentEventsOperation(method: string, pathname: string): string | undefined;
+//# sourceMappingURL=agent-events.d.ts.map

package/dist/server/routes/agent-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-events.d.ts","sourceRoot":"","sources":["../../../src/server/routes/agent-events.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAOL,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AAKzB,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,GAAG,cAAc,CAqCjF;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKzF"}

package/dist/server/routes/agent-events.js

@@ -0,0 +1,53 @@
+import { successEnvelope } from '../../serialization/envelope.js';
+import { decodeRunId, decimalQuery, queryParameters, requireIdempotencyKey, requireNoQuery, runIdSegment, } from './agent-runs.js';
+import { agentRequestBindingHash } from './request-binding.js';
+const EVENTS_SUFFIX = 'events';
+export function createAgentEventsRoute(context) {
+    return async (request) => {
+        const rawRunId = runIdSegment(request.url.pathname, EVENTS_SUFFIX);
+        if (rawRunId === undefined || (request.method !== 'POST' && request.method !== 'GET'))
+            return undefined;
+        const runId = decodeRunId(rawRunId);
+        if (request.method === 'POST') {
+            requireNoQuery(request.url);
+            const idempotencyKey = requireIdempotencyKey(request);
+            const requestBindingHash = agentRequestBindingHash({
+                operation: 'agent.events',
+                pathRunId: runId,
+                idempotencyKey,
+                requestBody: request.body,
+            });
+            const data = await context.enqueueWrite(() => context.service.appendEvents({
+                runId,
+                idempotencyKey,
+                request: request.body,
+            }));
+            return successEnvelope('agent.events', { ...data, requestBindingHash });
+        }
+        if (request.method === 'GET') {
+            const values = queryParameters(request.url, ['after', 'type', 'limit']);
+            const input = { runId };
+            const type = values.get('type');
+            if (type !== undefined)
+                input.type = type;
+            const after = decimalQuery(values, 'after');
+            if (after !== undefined)
+                input.after = after;
+            const limit = decimalQuery(values, 'limit');
+            if (limit !== undefined)
+                input.limit = limit;
+            return successEnvelope('agent.events.list', context.service.listEvents(input));
+        }
+        return undefined;
+    };
+}
+export function agentEventsOperation(method, pathname) {
+    if (runIdSegment(pathname, EVENTS_SUFFIX) === undefined)
+        return undefined;
+    if (method === 'POST')
+        return 'agent.events';
+    if (method === 'GET')
+        return 'agent.events.list';
+    return undefined;
+}
+//# sourceMappingURL=agent-events.js.map

package/dist/server/routes/agent-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-events.js","sourceRoot":"","sources":["../../../src/server/routes/agent-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,OAAO,EACL,WAAW,EACX,YAAY,EACZ,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,YAAY,GAEb,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,MAAM,aAAa,GAAG,QAAQ,CAAC;AAE/B,MAAM,UAAU,sBAAsB,CAAC,OAA0B;IAC/D,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACnE,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACxG,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAEpC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;YACtD,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;gBACjD,SAAS,EAAE,cAAc;gBACzB,SAAS,EAAE,KAAK;gBAChB,cAAc;gBACd,WAAW,EAAE,OAAO,CAAC,IAAI;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;gBACzE,KAAK;gBACL,cAAc;gBACd,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC,CAAC,CAAC;YACJ,OAAO,eAAe,CAAC,cAAc,EAAE,EAAE,GAAG,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YACxE,MAAM,KAAK,GAA4B,EAAE,KAAK,EAAE,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,IAAI,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;YAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5C,IAAI,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;YAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5C,IAAI,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;YAC7C,OAAO,eAAe,CAAC,mBAAmB,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACjF,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,QAAgB;IACnE,IAAI,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1E,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,cAAc,CAAC;IAC7C,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,mBAAmB,CAAC;IACjD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/server/routes/agent-intake.d.ts

@@ -0,0 +1,5 @@
+import type { V1RouteHandler } from '../router.js';
+import { type AgentRouteContext } from './agent-runs.js';
+export declare function createAgentIntakeRoute(context: AgentRouteContext): V1RouteHandler;
+export declare function agentIntakeOperation(method: string, pathname: string): string | undefined;
+//# sourceMappingURL=agent-intake.d.ts.map

package/dist/server/routes/agent-intake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-intake.d.ts","sourceRoot":"","sources":["../../../src/server/routes/agent-intake.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAML,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AAOzB,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,GAAG,cAAc,CAyCjF;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAIzF"}

package/dist/server/routes/agent-intake.js

@@ -0,0 +1,50 @@
+import { successEnvelope } from '../../serialization/envelope.js';
+import { decodeRunId, isRunsPath, requireIdempotencyKey, requireNoQuery, runIdSegment, } from './agent-runs.js';
+import { attachCapabilityGatedContext, requestCapabilityCatalog } from './agent-capability-gate.js';
+import { agentRequestBindingHash } from './request-binding.js';
+const ANSWERS_SUFFIX = 'intake/answers';
+const INTAKE_SUFFIX = 'intake';
+export function createAgentIntakeRoute(context) {
+    return async (request) => {
+        if (isRunsPath(request.url.pathname))
+            return undefined;
+        if (request.method === 'POST') {
+            const rawRunId = runIdSegment(request.url.pathname, ANSWERS_SUFFIX);
+            if (rawRunId !== undefined) {
+                const runId = decodeRunId(rawRunId);
+                requireNoQuery(request.url);
+                const idempotencyKey = requireIdempotencyKey(request);
+                const requestBindingHash = agentRequestBindingHash({
+                    operation: 'agent.answer',
+                    pathRunId: runId,
+                    idempotencyKey,
+                    requestBody: request.body,
+                });
+                const data = await context.enqueueWrite(() => context.service.answerIntake({
+                    runId,
+                    idempotencyKey,
+                    request: request.body,
+                }));
+                const gated = await attachCapabilityGatedContext(context, data, requestCapabilityCatalog(request.body));
+                return successEnvelope('agent.answer', { ...gated, requestBindingHash });
+            }
+        }
+        if (request.method === 'GET') {
+            const rawRunId = runIdSegment(request.url.pathname, INTAKE_SUFFIX);
+            if (rawRunId !== undefined) {
+                requireNoQuery(request.url);
+                const runId = decodeRunId(rawRunId);
+                return successEnvelope('agent.intake.read', context.service.readIntake({ runId }));
+            }
+        }
+        return undefined;
+    };
+}
+export function agentIntakeOperation(method, pathname) {
+    if (method === 'POST' && runIdSegment(pathname, ANSWERS_SUFFIX) !== undefined)
+        return 'agent.answer';
+    if (method === 'GET' && runIdSegment(pathname, INTAKE_SUFFIX) !== undefined)
+        return 'agent.intake.read';
+    return undefined;
+}
+//# sourceMappingURL=agent-intake.js.map

package/dist/server/routes/agent-intake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-intake.js","sourceRoot":"","sources":["../../../src/server/routes/agent-intake.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,OAAO,EACL,WAAW,EACX,UAAU,EACV,qBAAqB,EACrB,cAAc,EACd,YAAY,GAEb,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,4BAA4B,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACpG,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,MAAM,cAAc,GAAG,gBAAgB,CAAC;AACxC,MAAM,aAAa,GAAG,QAAQ,CAAC;AAE/B,MAAM,UAAU,sBAAsB,CAAC,OAA0B;IAC/D,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;QAEvD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YACpE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;gBACpC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC5B,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;gBACtD,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;oBACjD,SAAS,EAAE,cAAc;oBACzB,SAAS,EAAE,KAAK;oBAChB,cAAc;oBACd,WAAW,EAAE,OAAO,CAAC,IAAI;iBAC1B,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;oBACzE,KAAK;oBACL,cAAc;oBACd,OAAO,EAAE,OAAO,CAAC,IAAI;iBACtB,CAAC,CAAC,CAAC;gBACJ,MAAM,KAAK,GAAG,MAAM,4BAA4B,CAC9C,OAAO,EACP,IAAI,EACJ,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CACvC,CAAC;gBACF,OAAO,eAAe,CAAC,cAAc,EAAE,EAAE,GAAG,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACnE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC5B,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;gBACpC,OAAO,eAAe,CAAC,mBAAmB,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,QAAgB;IACnE,IAAI,MAAM,KAAK,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,cAAc,CAAC,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC;IACrG,IAAI,MAAM,KAAK,KAAK,IAAI,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,KAAK,SAAS;QAAE,OAAO,mBAAmB,CAAC;IACxG,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/server/routes/agent-promotions.d.ts

@@ -0,0 +1,5 @@
+import type { V1RouteHandler } from '../router.js';
+import { type AgentRouteContext } from './agent-runs.js';
+export declare function createAgentPromotionsRoute(context: AgentRouteContext): V1RouteHandler;
+export declare function agentPromotionsOperation(method: string, pathname: string): string | undefined;
+//# sourceMappingURL=agent-promotions.d.ts.map

package/dist/server/routes/agent-promotions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-promotions.d.ts","sourceRoot":"","sources":["../../../src/server/routes/agent-promotions.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAKL,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AAsBzB,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,iBAAiB,GAAG,cAAc,CA2BrF;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE7F"}

package/dist/server/routes/agent-promotions.js

@@ -0,0 +1,55 @@
+import { createHash } from 'node:crypto';
+import { withImmediateTransaction } from '../../db/transaction.js';
+import { KiokukoError } from '../../errors.js';
+import { executeIdempotentInTransaction } from '../idempotency.js';
+import { promoteLedgerProposalInTransaction } from '../../ledger/promotion.js';
+import { successEnvelope } from '../../serialization/envelope.js';
+import { decodeRunId, requireIdempotencyKey, requireNoQuery, runIdSegment, } from './agent-runs.js';
+const PROMOTIONS_SUFFIX = 'promotions';
+const PROMOTION_FIELDS = new Set(['apiVersion', 'proposalEventId', 'deliveryId', 'actor', 'createdAt', 'confirmed']);
+function invalid() {
+    throw new KiokukoError('VALIDATION_ERROR', 'Request is invalid');
+}
+function promotionBody(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        invalid();
+    const body = value;
+    if (Object.keys(body).some((field) => !PROMOTION_FIELDS.has(field)))
+        invalid();
+    if (body.apiVersion !== '1')
+        invalid();
+    const { apiVersion: _apiVersion, ...promotion } = body;
+    return promotion;
+}
+function promotionScope(runId) {
+    return `agent.promotions.${createHash('sha256').update(runId, 'utf8').digest('hex').slice(0, 32)}`;
+}
+export function createAgentPromotionsRoute(context) {
+    return async (request) => {
+        const rawRunId = runIdSegment(request.url.pathname, PROMOTIONS_SUFFIX);
+        if (rawRunId === undefined || request.method !== 'POST')
+            return undefined;
+        requireNoQuery(request.url);
+        const runId = decodeRunId(rawRunId);
+        const idempotencyKey = requireIdempotencyKey(request);
+        const body = promotionBody(request.body);
+        const data = await context.enqueueWrite(() => {
+            const run = context.service.readRun({ runId });
+            return withImmediateTransaction(context.database, () => executeIdempotentInTransaction(context.database, {
+                scope: promotionScope(runId),
+                key: idempotencyKey,
+                request: { runId, body },
+                createdAt: new Date().toISOString(),
+            }, () => promoteLedgerProposalInTransaction(context.database, {
+                ...body,
+                workspace: run.workspace,
+                runId,
+            })));
+        });
+        return successEnvelope('agent.promotions', data);
+    };
+}
+export function agentPromotionsOperation(method, pathname) {
+    return method === 'POST' && runIdSegment(pathname, PROMOTIONS_SUFFIX) !== undefined ? 'agent.promotions' : undefined;
+}
+//# sourceMappingURL=agent-promotions.js.map

package/dist/server/routes/agent-promotions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-promotions.js","sourceRoot":"","sources":["../../../src/server/routes/agent-promotions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAEnE,OAAO,EAAE,kCAAkC,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,cAAc,EACd,YAAY,GAEb,MAAM,iBAAiB,CAAC;AAEzB,MAAM,iBAAiB,GAAG,YAAY,CAAC;AACvC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAErH,SAAS,OAAO;IACd,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnF,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/E,IAAI,IAAI,CAAC,UAAU,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC;IACvD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,oBAAoB,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAA0B;IACnE,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QACvE,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,SAAS,CAAC;QAC1E,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE;YAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/C,OAAO,wBAAwB,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,8BAA8B,CACpF,OAAO,CAAC,QAAQ,EAChB;gBACE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC;gBAC5B,GAAG,EAAE,cAAc;gBACnB,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;gBACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,EACD,GAAG,EAAE,CAAC,kCAAkC,CAAC,OAAO,CAAC,QAAQ,EAAE;gBACzD,GAAG,IAAI;gBACP,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,KAAK;aACN,CAAyB,CAC3B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,eAAe,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,QAAgB;IACvE,OAAO,MAAM,KAAK,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,iBAAiB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;AACvH,CAAC"}

package/dist/server/routes/agent-runs.d.ts

@@ -0,0 +1,32 @@
+import type { AgentGatewayService } from '../../gateway/agent-service.js';
+import type { FeedbackService, LegacyCheckpointServicePort } from '../../gateway/checkpoint-service.js';
+import type { ContextBroker } from '../../context/broker.js';
+import type { AgentCheckpointUseCase } from '../agent-checkpoint-use-case.js';
+import type { V1RouteHandler, V1RouteRequest } from '../router.js';
+declare const RUNS_PATH = "/api/v1/agent/runs";
+type QueryField = 'workspace' | 'client' | 'status' | 'cursor' | 'limit' | 'after' | 'type';
+type CheckpointComposition = {
+    readonly agentCheckpoint: AgentCheckpointUseCase;
+    readonly checkpointService?: never;
+} | {
+    readonly agentCheckpoint?: never;
+    readonly checkpointService: LegacyCheckpointServicePort;
+};
+export type AgentRouteContext = {
+    readonly database: import('../../db/adapter.js').SqliteDatabase;
+    readonly service: AgentGatewayService;
+    readonly feedbackService: FeedbackService;
+    readonly broker: ContextBroker;
+    readonly enqueueWrite: <T>(operation: () => T | PromiseLike<T>) => Promise<T>;
+} & CheckpointComposition;
+export declare function queryParameters(url: URL, allowed: readonly QueryField[]): Map<QueryField, string>;
+export declare function requireNoQuery(url: URL): void;
+export declare function decimalQuery(values: ReadonlyMap<QueryField, string>, field: 'limit' | 'after'): number | undefined;
+export declare function decodeRunId(raw: string): string;
+export declare function runIdSegment(pathname: string, suffix?: string): string | undefined;
+export declare function requireIdempotencyKey(request: V1RouteRequest): string;
+export declare function isRunsPath(pathname: string): boolean;
+export declare function createAgentRunsRoute(context: AgentRouteContext): V1RouteHandler;
+export declare function agentRunsOperation(method: string, pathname: string): string | undefined;
+export { RUNS_PATH };
+//# sourceMappingURL=agent-runs.d.ts.map

package/dist/server/routes/agent-runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-runs.d.ts","sourceRoot":"","sources":["../../../src/server/routes/agent-runs.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AACxG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAInE,QAAA,MAAM,SAAS,uBAAuB,CAAC;AAKvC,KAAK,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;AAE5F,KAAK,qBAAqB,GACtB;IACE,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;IACjD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC;CACpC,GACD;IACE,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC;IACjC,QAAQ,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;CACzD,CAAC;AAEN,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,QAAQ,EAAE,OAAO,qBAAqB,EAAE,cAAc,CAAC;IAChE,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;CAC/E,GAAG,qBAAqB,CAAC;AAM1B,wBAAgB,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,UAAU,EAAE,GAAG,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAQjG;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CAE7C;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAOlH;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAW/C;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAalF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAerE;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,iBAAiB,GAAG,cAAc,CAoE/E;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMvF;AAED,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/dist/server/routes/agent-runs.js

@@ -0,0 +1,165 @@
+import { KiokukoError } from '../../errors.js';
+import { successEnvelope } from '../../serialization/envelope.js';
+import { attachCapabilityGatedContext, requestCapabilityCatalog } from './agent-capability-gate.js';
+import { agentRequestBindingHash } from './request-binding.js';
+const RUNS_PATH = '/api/v1/agent/runs';
+const CONTROL_CHARACTERS = /\p{Cc}/u;
+const MAX_IDEMPOTENCY_KEY_BYTES = 256;
+const MAX_ID_LENGTH = 256;
+function invalid() {
+    throw new KiokukoError('VALIDATION_ERROR', 'Request is invalid');
+}
+export function queryParameters(url, allowed) {
+    const allowedSet = new Set(allowed);
+    const values = new Map();
+    for (const [key, value] of url.searchParams) {
+        if (!allowedSet.has(key) || values.has(key))
+            invalid();
+        values.set(key, value);
+    }
+    return values;
+}
+export function requireNoQuery(url) {
+    if (url.search.length > 0)
+        invalid();
+}
+export function decimalQuery(values, field) {
+    const value = values.get(field);
+    if (value === undefined)
+        return undefined;
+    if (!/^(?:0|[1-9]\d*)$/u.test(value))
+        invalid();
+    const parsed = Number(value);
+    if (!Number.isSafeInteger(parsed))
+        invalid();
+    return parsed;
+}
+export function decodeRunId(raw) {
+    let decoded;
+    try {
+        decoded = decodeURIComponent(raw);
+    }
+    catch {
+        invalid();
+    }
+    if (decoded.length === 0 || decoded.length > MAX_ID_LENGTH || decoded.includes('/') || decoded.includes('\\') || CONTROL_CHARACTERS.test(decoded)) {
+        invalid();
+    }
+    return decoded;
+}
+export function runIdSegment(pathname, suffix) {
+    const prefix = `${RUNS_PATH}/`;
+    if (!pathname.startsWith(prefix))
+        return undefined;
+    const rest = pathname.slice(prefix.length);
+    if (suffix !== undefined) {
+        const marker = `/${suffix}`;
+        if (!rest.endsWith(marker))
+            return undefined;
+        const raw = rest.slice(0, -marker.length);
+        if (raw.includes('/'))
+            return undefined;
+        return raw;
+    }
+    if (rest.includes('/'))
+        return undefined;
+    return rest;
+}
+export function requireIdempotencyKey(request) {
+    const value = request.headers['idempotency-key'];
+    if (Array.isArray(value) || typeof value !== 'string' || value.trim().length === 0 || value.trim() !== value
+        || Buffer.byteLength(value, 'utf8') > MAX_IDEMPOTENCY_KEY_BYTES || CONTROL_CHARACTERS.test(value)) {
+        invalid();
+    }
+    const rawHeaders = request.rawHeaders;
+    if (rawHeaders !== undefined) {
+        let occurrences = 0;
+        for (let index = 0; index < rawHeaders.length; index += 2) {
+            if (rawHeaders[index]?.toLowerCase() === 'idempotency-key')
+                occurrences += 1;
+        }
+        if (occurrences !== 1)
+            invalid();
+    }
+    return value;
+}
+export function isRunsPath(pathname) {
+    return pathname === RUNS_PATH;
+}
+export function createAgentRunsRoute(context) {
+    return async (request) => {
+        if (request.method === 'POST' && isRunsPath(request.url.pathname)) {
+            requireNoQuery(request.url);
+            const idempotencyKey = requireIdempotencyKey(request);
+            const requestBindingHash = agentRequestBindingHash({
+                operation: 'agent.open',
+                pathRunId: null,
+                idempotencyKey,
+                requestBody: request.body,
+            });
+            const data = await context.enqueueWrite(() => context.service.openRun({
+                idempotencyKey,
+                request: request.body,
+            }));
+            const gated = await attachCapabilityGatedContext(context, data, requestCapabilityCatalog(request.body));
+            return successEnvelope('agent.open', { ...gated, requestBindingHash });
+        }
+        if (request.method === 'GET' && isRunsPath(request.url.pathname)) {
+            const values = queryParameters(request.url, ['workspace', 'client', 'status', 'cursor', 'limit']);
+            const workspace = values.get('workspace');
+            if (workspace === undefined || workspace.length === 0)
+                invalid();
+            const input = { workspace };
+            for (const field of ['client', 'status', 'cursor']) {
+                const value = values.get(field);
+                if (value !== undefined)
+                    input[field] = value;
+            }
+            const limit = decimalQuery(values, 'limit');
+            if (limit !== undefined)
+                input.limit = limit;
+            return successEnvelope('agent.runs.list', context.service.listRuns(input));
+        }
+        if (request.method === 'POST') {
+            const rawRunId = runIdSegment(request.url.pathname, 'close');
+            if (rawRunId !== undefined) {
+                requireNoQuery(request.url);
+                const runId = decodeRunId(rawRunId);
+                const idempotencyKey = requireIdempotencyKey(request);
+                const requestBindingHash = agentRequestBindingHash({
+                    operation: 'agent.close',
+                    pathRunId: runId,
+                    idempotencyKey,
+                    requestBody: request.body,
+                });
+                const data = await context.enqueueWrite(() => context.service.closeRun({
+                    runId,
+                    idempotencyKey,
+                    request: request.body,
+                }));
+                return successEnvelope('agent.close', { ...data, requestBindingHash });
+            }
+        }
+        if (request.method === 'GET') {
+            const rawRunId = runIdSegment(request.url.pathname);
+            if (rawRunId !== undefined) {
+                requireNoQuery(request.url);
+                return successEnvelope('agent.run.read', context.service.readRun({ runId: decodeRunId(rawRunId) }));
+            }
+        }
+        return undefined;
+    };
+}
+export function agentRunsOperation(method, pathname) {
+    if (method === 'POST' && isRunsPath(pathname))
+        return 'agent.open';
+    if (method === 'GET' && isRunsPath(pathname))
+        return 'agent.runs.list';
+    if (method === 'POST' && runIdSegment(pathname, 'close') !== undefined)
+        return 'agent.close';
+    if (method === 'GET' && runIdSegment(pathname) !== undefined)
+        return 'agent.run.read';
+    return undefined;
+}
+export { RUNS_PATH };
+//# sourceMappingURL=agent-runs.js.map