openclaw/dist/channel-run-admission-Bz64bSPr.mjs

Multi-channel AI gateway with extensible messaging integrations

import { i as consumeChannelAdmissionEvidence, u as recordChannelAdmissionDecision } from "./admission-evidence-CcY0jAvs.mjs";
import { n as admitChildSessionPublication } from "./host-context-builder-DqHC41dw.mjs";
import { c as createOperationalRunInstanceRef, f as prepareAgentRunAdmission, u as getAdmittedRunDelegatedAuthority } from "./admitted-run-context-D0yzk2io.mjs";
import { a as readGatewayLocalUserIngressFacts } from "./local-user-ingress-PBPakyQk.mjs";
//#region src/auto-reply/reply/channel-run-admission.ts
/** Adapt reply ingress to admission; authenticated Gateway attach has no plugin-channel decision. */
function consumeChannelRunAdmission(evidence, gatewayLocalUserIngress) {
	const gatewayFacts = readGatewayLocalUserIngressFacts(gatewayLocalUserIngress);
	if (gatewayFacts) return Object.freeze({
		ingressState: gatewayFacts.ingress.state,
		facts: gatewayFacts,
		onAdmitted: () => void 0
	});
	const admission = consumeChannelAdmissionEvidence(evidence);
	return Object.freeze({
		ingressState: admission.ingressState,
		facts: Object.freeze({
			invoker: admission.invoker,
			...admission.assuranceRef ? { assurance: [{
				kind: "channel-admission",
				rawEvidenceRef: admission.assuranceRef,
				strength: "boundary-verified"
			}] } : {}
		}),
		onAdmitted: (context) => {
			const token = context.executionIdentityToken;
			if (token && admission.decisionCoverage && admission.identifierAuthentication) recordChannelAdmissionDecision(evidence, {
				contextId: token.contextId,
				executionId: token.executionId,
				runId: token.runId,
				occurredAt: token.createdAt,
				coverageState: admission.decisionCoverage,
				identifierAuthentication: admission.identifierAuthentication
			});
		}
	});
}
/** Defer evidence consumption until the selected runtime actually admits the run. */
function prepareChannelRunAdmission(params) {
	const operationalRunInstance = createOperationalRunInstanceRef(params.runId);
	let prepared;
	let closed = false;
	const assertSourceCurrent = () => {
		if (prepared) {
			prepared.assertSourceCurrent();
			return;
		}
		params.assertSourceCurrent?.();
		params.operatorAuthority?.assertCurrent();
	};
	return Object.freeze({
		operationalRunInstance,
		assertSourceCurrent,
		readOperatorAuthority: () => {
			if (closed && params.operatorAuthority) throw new Error("prepared operator authority is no longer active");
			assertSourceCurrent();
			return params.operatorAuthority;
		},
		admit: (runtimeKind, runtimeInstanceId) => {
			if (closed) return Promise.reject(/* @__PURE__ */ new Error("prepared execution context is already closed"));
			if (!prepared) {
				const channelAdmission = consumeChannelRunAdmission(params.evidence, params.gatewayLocalUserIngress);
				prepared = prepareAgentRunAdmission({
					cfg: params.cfg,
					assertSourceCurrent: params.assertSourceCurrent,
					operationalRunInstance,
					operatorAuthority: params.operatorAuthority,
					facts: {
						runId: params.runId,
						agentId: params.agentId,
						ingress: {
							kind: params.ingressKind,
							boundary: params.boundary,
							state: channelAdmission.ingressState
						},
						...channelAdmission.facts
					},
					onAdmitted: (context) => {
						channelAdmission.onAdmitted(context);
						if (params.sourceContext) admitChildSessionPublication(params.sourceContext, context.operationalRunInstance, () => {
							if (!getAdmittedRunDelegatedAuthority(context)) throw new Error("Public ingress run is no longer active.");
						});
						params.onAdmitted?.(context);
					}
				});
			}
			return prepared.admit(runtimeKind, runtimeInstanceId);
		},
		close: () => {
			closed = true;
			prepared?.close();
		}
	});
}
//#endregion
export { prepareChannelRunAdmission as t };