pilotswarm-sdk 0.5.48 → 0.5.49

package/dist/wif-credentials.js

@@ -0,0 +1,382 @@
+/**
+ * Workload Identity Federation for the Anthropic API — no API key anywhere.
+ *
+ * A provider declared `type: "anthropic-wif"` carries no credential at all.
+ * The worker proves who it is with an identity token its platform already
+ * issues, trades that for a short-lived Anthropic access token, and sends the
+ * result as `Authorization: Bearer`. Nothing is stored, so nothing can leak
+ * from the database and nothing has to be rotated.
+ *
+ * Two shapes of identity token are understood, chosen by what the environment
+ * actually provides:
+ *
+ * ```
+ * ANTHROPIC_IDENTITY_TOKEN_FILE (or _TOKEN)   one hop
+ *   the file already holds a JWT the federation rule trusts
+ *   → POST /v1/oauth/token
+ *
+ * AZURE_FEDERATED_TOKEN_FILE + AZURE_TENANT_ID   two hops
+ *   the file holds a Kubernetes-projected token, which Microsoft Entra ID
+ *   does not accept as an assertion for anyone but itself
+ *   → POST login.microsoftonline.com/<tenant>/oauth2/v2.0/token   (Entra JWT)
+ *   → POST /v1/oauth/token
+ * ```
+ *
+ * Both token files are re-read on every exchange: a projected token rotates
+ * on disk under the process, and a copy cached in memory goes stale.
+ *
+ * WHY A CALLBACK RATHER THAN A STORED KEY. The access token expires — an hour
+ * by default, a day at most — while a PilotSwarm session outlives any of that
+ * and may be resumed on a different worker days later. So the token is never
+ * put in the session config; `@github/copilot-sdk` takes a `bearerTokenProvider`
+ * callback instead and asks for a token before each outbound request. The
+ * runtime caches nothing, which is why the caching below is not an
+ * optimisation: without it every single request would mint two fresh tokens.
+ *
+ * @module
+ */
+const DEFAULT_BASE_URL = "https://api.anthropic.com";
+/**
+ * The three ids that name the rule, the organization and the identity the
+ * minted token acts as. All three are required whichever identity source is
+ * used, and none of them is a secret.
+ */
+const REQUIRED_VARS = [
+    "ANTHROPIC_FEDERATION_RULE_ID",
+    "ANTHROPIC_ORGANIZATION_ID",
+    "ANTHROPIC_SERVICE_ACCOUNT_ID",
+];
+function trimmed(value) {
+    return typeof value === "string" ? value.trim() : "";
+}
+/**
+ * Read the settings out of the worker's environment.
+ *
+ * Returns the missing variable names rather than throwing, so a worker whose
+ * deployment declares the type but has not configured identity yet can say
+ * which line is absent instead of failing an unrelated turn later.
+ */
+export function readAnthropicWifSettings(env = process.env) {
+    const missing = REQUIRED_VARS.filter((name) => !trimmed(env[name]));
+    const identity = readIdentitySource(env);
+    if (!identity) {
+        missing.push("ANTHROPIC_IDENTITY_TOKEN_FILE (or ANTHROPIC_IDENTITY_TOKEN, or AZURE_FEDERATED_TOKEN_FILE with AZURE_TENANT_ID)");
+    }
+    if (missing.length > 0 || !identity)
+        return { ok: false, missing };
+    const workspaceId = trimmed(env.ANTHROPIC_WORKSPACE_ID);
+    return {
+        ok: true,
+        settings: {
+            federationRuleId: trimmed(env.ANTHROPIC_FEDERATION_RULE_ID),
+            organizationId: trimmed(env.ANTHROPIC_ORGANIZATION_ID),
+            serviceAccountId: trimmed(env.ANTHROPIC_SERVICE_ACCOUNT_ID),
+            ...(workspaceId ? { workspaceId } : {}),
+            // The assertion posted to this host is a signed identity token, so
+            // where it goes is worth naming deliberately. ANTHROPIC_BASE_URL is
+            // honoured because it is the conventional override and a worker
+            // that sets it means it — but a deployment that points that at a
+            // gateway for unrelated reasons can pin the exchange back with
+            // ANTHROPIC_WIF_TOKEN_URL.
+            baseUrl: (trimmed(env.ANTHROPIC_WIF_TOKEN_URL)
+                || trimmed(env.ANTHROPIC_BASE_URL)
+                || DEFAULT_BASE_URL).replace(/\/+$/, ""),
+            identity,
+        },
+    };
+}
+/**
+ * A ready-made assertion wins over one that has to be fetched: a deployment
+ * that sets `ANTHROPIC_IDENTITY_TOKEN_FILE` has said which token it means,
+ * and Azure's own variables may be present on the same pod for unrelated
+ * reasons (a sidecar, a storage credential) without being the intended path.
+ */
+function readIdentitySource(env) {
+    const literal = trimmed(env.ANTHROPIC_IDENTITY_TOKEN);
+    if (literal)
+        return { kind: "literal", token: literal };
+    const file = trimmed(env.ANTHROPIC_IDENTITY_TOKEN_FILE);
+    if (file)
+        return { kind: "file", path: file };
+    const azureFile = trimmed(env.AZURE_FEDERATED_TOKEN_FILE);
+    const tenantId = trimmed(env.AZURE_TENANT_ID);
+    if (!azureFile || !tenantId)
+        return null;
+    // The identity to claim is not always the one the platform injected: a
+    // pod may run under its cluster's own identity while the federation rule
+    // names another that the same projected token is allowed to redeem. So an
+    // explicit override wins, and the injected value is only the default.
+    const clientId = trimmed(env.ANTHROPIC_WIF_AZURE_CLIENT_ID) || trimmed(env.AZURE_CLIENT_ID);
+    if (!clientId)
+        return null;
+    // The audience asked for. Defaulting to the identity's own id covers a
+    // rule that matches the identity as its own audience; a deployment with a
+    // separate audience app registration sets the scope explicitly.
+    const scope = trimmed(env.ANTHROPIC_WIF_AZURE_SCOPE) || `${clientId}/.default`;
+    return { kind: "entra", tokenFile: azureFile, tenantId, clientId, scope };
+}
+/** Anything a provider type may declare that authenticates without a stored key. */
+export class WifExchangeError extends Error {
+    status;
+    requestId;
+    code = "WIF_EXCHANGE_FAILED";
+    constructor(message, status, requestId) {
+        super(message);
+        this.status = status;
+        this.requestId = requestId;
+        this.name = "WifExchangeError";
+    }
+}
+/**
+ * How early a token is replaced. A token used at the instant it expires is a
+ * failed request: the clock on the far side is not this one, and the request
+ * still has to travel. Half the lifetime is the ceiling so that a deliberately
+ * short-lived token (the rule may set 60 seconds) is still cached for a while
+ * rather than re-minted for every single request.
+ */
+const REFRESH_MARGIN_MS = 5 * 60_000;
+function marginFor(lifetimeMs) {
+    return Math.min(REFRESH_MARGIN_MS, Math.max(0, Math.floor(lifetimeMs / 2)));
+}
+/**
+ * What a lifetime is assumed to be when the response does not say.
+ *
+ * `expires_in` is optional in the type and could arrive absent, zero, or
+ * unparseable. Treating that as "expires now" silently turns the cache OFF —
+ * and because the callback runs before EVERY outbound request, that is one
+ * token exchange per LLM request, for ever, until the endpoint throttles.
+ * A minute is the shortest lifetime a federation rule may be configured for,
+ * so assuming it can never outlive the real token.
+ */
+const ASSUMED_LIFETIME_MS = 60_000;
+/**
+ * The longest a token is trusted, however long it says it is valid.
+ *
+ * Nothing tells this process that a token was revoked: the rule is disabled or
+ * the service account deleted, and the only symptom is that requests start
+ * failing. A token cached for its full 24 hours would keep failing for 24
+ * hours. Re-minting hourly costs one exchange per worker per hour and bounds
+ * how long a revoked credential can keep a worker down.
+ */
+const MAX_CACHE_MS = 60 * 60_000;
+/** When to replace a token, from whatever the endpoint claimed. */
+function expiryFrom(now, expiresIn) {
+    const seconds = Number(expiresIn);
+    const claimed = Number.isFinite(seconds) && seconds > 0 ? seconds * 1000 : ASSUMED_LIFETIME_MS;
+    const lifetimeMs = Math.min(claimed, MAX_CACHE_MS);
+    return now + Math.max(0, lifetimeMs - marginFor(lifetimeMs));
+}
+/**
+ * Mints and caches the Anthropic access token for one set of settings.
+ *
+ * One instance serves every session on the worker. The callback is invoked
+ * once per outbound request — several turns running at once is the normal
+ * case, not the exception — so concurrent callers share a single exchange
+ * rather than each starting their own. A failure is never cached: the next
+ * request tries again, which is what recovers a worker that started before
+ * its token file was mounted.
+ */
+export class AnthropicWifCredentials {
+    settings;
+    access = null;
+    assertion = null;
+    inflight = null;
+    /** Bumped by reset(), so a mint that started earlier does not store its result. */
+    generation = 0;
+    fetchImpl;
+    readFileImpl;
+    now;
+    constructor(settings, deps = {}) {
+        this.settings = settings;
+        this.fetchImpl = deps.fetch ?? globalThis.fetch;
+        this.readFileImpl = deps.readFile ?? (async (p) => {
+            const { readFile } = await import("node:fs/promises");
+            return readFile(p, "utf8");
+        });
+        this.now = deps.now ?? Date.now;
+    }
+    /** A valid Anthropic access token, minted or from cache. */
+    async getToken() {
+        const cached = this.access;
+        if (cached && this.now() < cached.expiresAtMs)
+            return cached.token;
+        if (this.inflight)
+            return this.inflight;
+        const startedIn = this.generation;
+        const run = this.mint()
+            .then((minted) => {
+            // Discarded by a reset() that landed while this was in flight:
+            // the token is still returned to whoever asked for it, but it
+            // is not written into a cache that was deliberately emptied.
+            if (this.generation === startedIn)
+                this.access = minted;
+            return minted.token;
+        })
+            .finally(() => {
+            if (this.generation === startedIn)
+                this.inflight = null;
+        });
+        this.inflight = run;
+        return run;
+    }
+    /**
+     * Drop what is cached. For tests, and for a caller that saw a 401.
+     *
+     * The generation bump is the point. Clearing the fields alone does not
+     * work while an exchange is in flight: that exchange resolves afterwards
+     * and writes the very token this was called to discard straight back into
+     * the cache. A mint only stores its result if the generation it started
+     * in is still current.
+     */
+    reset() {
+        this.access = null;
+        this.assertion = null;
+        this.generation += 1;
+        this.inflight = null;
+    }
+    async mint() {
+        const assertion = await this.identityToken();
+        const body = {
+            grant_type: "urn:ietf:params:oauth:grant-type:jwt-bearer",
+            assertion,
+            federation_rule_id: this.settings.federationRuleId,
+            organization_id: this.settings.organizationId,
+            service_account_id: this.settings.serviceAccountId,
+        };
+        // Sending an empty workspace is not the same as not naming one: the
+        // exchange validates the shape of the value it is given.
+        if (this.settings.workspaceId)
+            body.workspace_id = this.settings.workspaceId;
+        const response = await this.fetchImpl(`${this.settings.baseUrl}/v1/oauth/token`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify(body),
+        });
+        if (!response.ok) {
+            // Throw the cached assertion away with it. That token is what was
+            // just refused, and it may be cached for hours — without this a
+            // retrying worker keeps presenting the same rejected assertion
+            // until it expires on its own.
+            this.assertion = null;
+            // Every denial is the same opaque 401 with the same sentence —
+            // which check failed is recorded against the request id in the
+            // Anthropic console's authentication history, and is unknowable
+            // from here. Carrying the id is the difference between a
+            // diagnosable failure and a shrug.
+            const requestId = response.headers?.get?.("request-id") ?? null;
+            throw new WifExchangeError(`Anthropic token exchange failed with HTTP ${response.status}`
+                + `${requestId ? ` (request id ${requestId})` : ""}.`
+                + " Check the authentication history in the Anthropic console for the reason.", response.status, requestId);
+        }
+        // Guarded like the Entra hop: a 200 carrying something that is not
+        // JSON (an intercepting proxy, an HTML error page) must still surface
+        // as a WifExchangeError with the guidance below, not a raw SyntaxError.
+        const payload = await response.json().catch(() => ({}));
+        const token = typeof payload.access_token === "string" ? payload.access_token : "";
+        if (!token) {
+            throw new WifExchangeError("Anthropic token exchange returned no access_token.", response.status);
+        }
+        return { token, expiresAtMs: expiryFrom(this.now(), payload.expires_in) };
+    }
+    /** The JWT presented to Anthropic as the assertion. */
+    async identityToken() {
+        const source = this.settings.identity;
+        if (source.kind === "literal")
+            return source.token;
+        if (source.kind === "file")
+            return (await this.readFileImpl(source.path)).trim();
+        const cached = this.assertion;
+        if (cached && this.now() < cached.expiresAtMs)
+            return cached.token;
+        const minted = await this.entraToken(source);
+        this.assertion = minted;
+        return minted.token;
+    }
+    /**
+     * Redeem the Kubernetes-projected token for an Entra-issued one.
+     *
+     * The projected token is read fresh every time: Kubernetes rewrites that
+     * file as it rotates, and the copy this process read at startup stops
+     * verifying the moment it does.
+     */
+    async entraToken(source) {
+        const projected = (await this.readFileImpl(source.tokenFile)).trim();
+        const form = new URLSearchParams({
+            grant_type: "client_credentials",
+            client_id: source.clientId,
+            scope: source.scope,
+            client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer",
+            client_assertion: projected,
+        });
+        const response = await this.fetchImpl(`https://login.microsoftonline.com/${encodeURIComponent(source.tenantId)}/oauth2/v2.0/token`, {
+            method: "POST",
+            headers: { "content-type": "application/x-www-form-urlencoded" },
+            body: form.toString(),
+        });
+        const payload = await response.json().catch(() => ({}));
+        if (!response.ok || !payload.access_token) {
+            // Entra says exactly what is wrong (a missing audience app, an
+            // unfederated service account), and its first line is the useful
+            // one — the rest is a stack of correlation ids.
+            const detail = String(payload.error_description ?? payload.error ?? "").split("\n")[0];
+            throw new WifExchangeError(`Microsoft Entra token request failed with HTTP ${response.status}${detail ? `: ${detail}` : "."}`, response.status);
+        }
+        return { token: payload.access_token, expiresAtMs: expiryFrom(this.now(), payload.expires_in) };
+    }
+}
+/**
+ * The worker's own credentials, made once and shared.
+ *
+ * Keyed by the settings themselves so that a test which changes the
+ * environment gets a fresh instance, while every session in a running worker
+ * shares one cache and one in-flight exchange.
+ */
+const instances = new Map();
+export function anthropicWifCredentials(settings, deps = {}) {
+    const key = JSON.stringify(settings);
+    let found = instances.get(key);
+    if (!found) {
+        found = new AnthropicWifCredentials(settings, deps);
+        instances.set(key, found);
+    }
+    return found;
+}
+/** Forget every shared instance. Tests only. */
+export function resetAnthropicWifCredentials() {
+    instances.clear();
+}
+/**
+ * Give a workload-identity provider the callback that authenticates it.
+ *
+ * Every other provider reaches the Copilot SDK carrying its own key. This one
+ * carries a function, because the token it would carry instead expires long
+ * before the session does — a session resumed days later on another worker
+ * would come back with a dead credential baked into its config. The SDK keeps
+ * the callback client-side and asks for a token before each outbound request,
+ * so a token lives only as long as the call it authenticates.
+ *
+ * Called on the path that builds the SDK options and nowhere earlier: that
+ * object is rebuilt from the registry on every create and resume, and is
+ * never persisted. (`providerFingerprint` hashes the same object through
+ * JSON.stringify, which drops function-valued keys, so the fingerprint stays
+ * stable and a resume does not read as a provider change.)
+ *
+ * A provider that is not workload-identity is returned untouched, by
+ * identity, so this is safe to call on the whole path.
+ */
+export function attachWorkloadIdentity(resolved, deps = {}) {
+    const provider = resolved.sdkProvider;
+    if (!resolved.usesWorkloadIdentity)
+        return provider;
+    // Said once at session creation, naming the variables that are absent,
+    // rather than as an opaque 401 on the first turn of every session that
+    // ever names this provider.
+    const found = readAnthropicWifSettings(deps.env ?? process.env);
+    if (!found.ok) {
+        throw new Error(`Provider "${resolved.providerId}" authenticates with workload identity, `
+            + `but the worker is missing ${found.missing.join(", ")}.`);
+    }
+    const credentials = (deps.credentials ?? anthropicWifCredentials)(found.settings);
+    return { ...provider, bearerTokenProvider: () => credentials.getToken() };
+}
+//# sourceMappingURL=wif-credentials.js.map

package/dist/wif-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wif-credentials.js","sourceRoot":"","sources":["../src/wif-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAoCH,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAErD;;;;GAIG;AACH,MAAM,aAAa,GAAG;IAClB,8BAA8B;IAC9B,2BAA2B;IAC3B,8BAA8B;CACxB,CAAC;AAEX,SAAS,OAAO,CAAC,KAAyB;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAe,OAAO,CAAC,GAAG;IAC/D,MAAM,OAAO,GAAa,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE9E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,iHAAiH,CAAC,CAAC;IACpI,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAEnE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACxD,OAAO;QACH,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE;YACN,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;YAC3D,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;YACtD,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;YAC3D,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,mEAAmE;YACnE,oEAAoE;YACpE,gEAAgE;YAChE,iEAAiE;YACjE,+DAA+D;YAC/D,2BAA2B;YAC3B,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;mBACvC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;mBAC/B,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,QAAQ;SACX;KACJ,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,GAAY;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtD,IAAI,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAExD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IACxD,IAAI,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAE9C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEzC,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC5F,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,uEAAuE;IACvE,0EAA0E;IAC1E,gEAAgE;IAChE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,GAAG,QAAQ,WAAW,CAAC;IAC/E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC9E,CAAC;AAED,oFAAoF;AACpF,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAGD;IAA0B;IAFvD,IAAI,GAAG,qBAAqB,CAAC;IAEtC,YAAY,OAAe,EAAW,MAAe,EAAW,SAAyB;QACrF,KAAK,CAAC,OAAO,CAAC,CAAC;QADmB,WAAM,GAAN,MAAM,CAAS;QAAW,cAAS,GAAT,SAAS,CAAgB;QAErF,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACnC,CAAC;CACJ;AAcD;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,CAAC,GAAG,MAAM,CAAC;AAErC,SAAS,SAAS,CAAC,UAAkB;IACjC,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC;;;;;;;;GAQG;AACH,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,CAAC;AAEjC,mEAAmE;AACnE,SAAS,UAAU,CAAC,GAAW,EAAE,SAAkB;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAC/F,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACnD,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,uBAAuB;IAWX;IAVb,MAAM,GAAuB,IAAI,CAAC;IAClC,SAAS,GAAuB,IAAI,CAAC;IACrC,QAAQ,GAA2B,IAAI,CAAC;IAChD,mFAAmF;IAC3E,UAAU,GAAG,CAAC,CAAC;IAEN,SAAS,CAA0B;IACnC,YAAY,CAAoC;IAChD,GAAG,CAAe;IAEnC,YAAqB,QAA8B,EAAE,OAAwB,EAAE;QAA1D,aAAQ,GAAR,QAAQ,CAAsB;QAC/C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAS,EAAE,EAAE;YACtD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACtD,OAAO,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,CAAC;IAED,4DAA4D;IAC5D,KAAK,CAAC,QAAQ;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QACnE,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QAExC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE;aAClB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACb,+DAA+D;YAC/D,8DAA8D;YAC9D,6DAA6D;YAC7D,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;gBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACxD,OAAO,MAAM,CAAC,KAAK,CAAC;QACxB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACV,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;gBAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAC5D,CAAC,CAAC,CAAC;QACP,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QACpB,OAAO,GAAG,CAAC;IACf,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,IAAI;QACd,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,MAAM,IAAI,GAA2B;YACjC,UAAU,EAAE,6CAA6C;YACzD,SAAS;YACT,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;YAClD,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;YAC7C,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;SACrD,CAAC;QACF,oEAAoE;QACpE,yDAAyD;QACzD,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW;YAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAE7E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,iBAAiB,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC7B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACf,kEAAkE;YAClE,gEAAgE;YAChE,+DAA+D;YAC/D,+BAA+B;YAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,+DAA+D;YAC/D,+DAA+D;YAC/D,gEAAgE;YAChE,yDAAyD;YACzD,mCAAmC;YACnC,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;YAChE,MAAM,IAAI,gBAAgB,CACtB,6CAA6C,QAAQ,CAAC,MAAM,EAAE;kBAC5D,GAAG,SAAS,CAAC,CAAC,CAAC,gBAAgB,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG;kBACnD,4EAA4E,EAC9E,QAAQ,CAAC,MAAM,EACf,SAAS,CACZ,CAAC;QACN,CAAC;QAED,mEAAmE;QACnE,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAmD,CAAC;QAC1G,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,IAAI,gBAAgB,CAAC,oDAAoD,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;IAC9E,CAAC;IAED,uDAAuD;IAC/C,KAAK,CAAC,aAAa;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACtC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QACnD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEjF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;QAC9B,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;QACxB,OAAO,MAAM,CAAC,KAAK,CAAC;IACxB,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,UAAU,CAAC,MAAqD;QAC1E,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC7B,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,qBAAqB,EAAE,wDAAwD;YAC/E,gBAAgB,EAAE,SAAS;SAC9B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CACjC,qCAAqC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAC5F;YACI,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACxB,CACJ,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAErD,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACxC,+DAA+D;YAC/D,iEAAiE;YACjE,gDAAgD;YAChD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvF,MAAM,IAAI,gBAAgB,CACtB,kDAAkD,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,EAClG,QAAQ,CAAC,MAAM,CAClB,CAAC;QACN,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;IACpG,CAAC;CACJ;AAED;;;;;;GAMG;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmC,CAAC;AAE7D,MAAM,UAAU,uBAAuB,CACnC,QAA8B,EAC9B,OAAwB,EAAE;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,KAAK,GAAG,IAAI,uBAAuB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpD,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,4BAA4B;IACxC,SAAS,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,sBAAsB,CAClC,QAIC,EACD,OAA6G,EAAE;IAE/G,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAsC,CAAC;IACjE,IAAI,CAAC,QAAQ,CAAC,oBAAoB;QAAE,OAAO,QAAQ,CAAC;IAEpD,uEAAuE;IACvE,uEAAuE;IACvE,4BAA4B;IAC5B,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACX,aAAa,QAAQ,CAAC,UAAU,0CAA0C;cACxE,6BAA6B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,uBAAuB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClF,OAAO,EAAE,GAAG,QAAQ,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC9E,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pilotswarm-sdk",
-    "version": "0.5.48",
+    "version": "0.5.49",
     "description": "A durable execution runtime for GitHub Copilot SDK agents. Crash recovery, durable timers, session dehydration, and multi-node scaling — powered by duroxide.",
     "type": "module",
     "main": "./dist/index.js",
@@ -88,7 +88,7 @@
         "pg": "^8.18.0"
     },
     "peerDependencies": {
-        "pilotswarm-horizon-store": "0.5.48"
+        "pilotswarm-horizon-store": "0.5.49"
     },
     "peerDependenciesMeta": {
         "pilotswarm-horizon-store": {
@@ -98,7 +98,7 @@
     "devDependencies": {
         "@types/node": "^22.0.0",
         "@types/pg": "^8.16.0",
-        "pilotswarm-horizon-store": "0.5.48",
+        "pilotswarm-horizon-store": "0.5.49",
         "typescript": "^5.0.0",
         "vitest": "^4.1.0"
     },