@cat-factory/server 0.324.0 → 0.325.1

package/dist/modules/publicApi/runProjection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runProjection.d.ts","sourceRoot":"","sources":["../../../src/modules/publicApi/runProjection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAC5F,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAe/C;;;;;;;GAOG;AACH,wBAAgB,WAAW,CACzB,SAAS,EAAE,iBAAiB,EAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,GAC5B,SAAS,CAwCX;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CACzB,SAAS,EAAE,iBAAiB,EAC5B,KAAK,EAAE,KAAK,EACZ,cAAc,EAAE,MAAM,GAAG,IAAI,GAC5B,SAAS,CA4CX;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,CAAC,SAAS,MAAM,EAClD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAMnC"}

package/dist/modules/publicApi/runProjection.js

@@ -0,0 +1,127 @@
+import { jobSortKey, mapStatus } from './publicApiPaging.js';
+import { viewRunIdentity } from './runIdentityVisibility.js';
+// The two RUN projections the public surface serves, plus the scoped load behind the job half.
+//
+// Extracted from `PublicApiController` because they have three consumers rather than one: the
+// point reads in that controller, the two SSE loops in `publicApiStreamRoutes.ts`, and (through
+// the stream) the decision channel. Keeping them there would have made the stream file import the
+// controller that registers it.
+//
+// Both are PURE functions of the run plus the reading key's identity, which is what lets an SSE
+// loop render frame after frame without a second read: see `runIdentityVisibility.ts` for why the
+// reader is a parameter rather than something looked up in here.
+/**
+ * Project a persisted execution onto the external job resource (no block/board internals).
+ *
+ * Takes the READING key's own identity because the run's pinned one is not visible to every key
+ * (`runIdentityVisibility.ts` holds the rule and why there is one). Passed as a parameter rather
+ * than read off the context here, so the projection stays a pure function of the run plus the
+ * caller and the SSE loops can render frame after frame without re-reading anything.
+ */
+export function toPublicJob(execution, readerIdentity) {
+    const status = mapStatus(execution.status);
+    const identity = viewRunIdentity(execution.initiatedByExternalIdentity, readerIdentity);
+    // The deliverable is the LAST step that actually produced output, normally the terminal step,
+    // but scanning from the end keeps the result meaningful for a multi-step public pipeline whose
+    // final step is a side-effect-only tail that emits nothing (the built-in initiative pipeline is
+    // single-step, so this simply picks that step). Fall back to the terminal step so a `succeeded`
+    // run always carries a (possibly empty) result rather than null.
+    const withOutput = [...execution.steps]
+        .reverse()
+        .find((s) => (s.output ?? '') !== '' || s.custom != null);
+    const deliverable = withOutput ?? execution.steps[execution.steps.length - 1];
+    const result = status === 'succeeded' && deliverable
+        ? { output: deliverable.output ?? '', data: deliverable.custom ?? null }
+        : null;
+    const error = status === 'failed'
+        ? execution.failure
+            ? { code: execution.failure.kind, message: execution.failure.message }
+            : { code: 'run_failed', message: 'The run failed' }
+        : null;
+    return {
+        jobId: execution.id,
+        status,
+        pipelineId: execution.pipelineId,
+        // Pinned at admission from the starting key, so it survives that key's revocation and costs
+        // this projection no lookup (`toPublicJob` also renders every row of a paged list). Withheld
+        // from a key that acts for someone else, which the flag STATES rather than blanking to a
+        // `null` that already means "this run names nobody". Named field by field rather than spread,
+        // for the reason `keyProjection.ts` gives: a spread is exempt from excess-property checking,
+        // so a member added to the view type later would reach the wire with nothing to stop it.
+        externalIdentity: identity.externalIdentity,
+        externalIdentityWithheld: identity.externalIdentityWithheld,
+        // The run's own creation stamp: the SAME value the list's keyset cursor is minted from
+        // (`jobSortKey`), so a caller can page and correlate on one consistent number.
+        createdAt: jobSortKey(execution),
+        result,
+        error,
+    };
+}
+/**
+ * Project a task's persisted run + its block onto the RICH external run resource: per-step
+ * state/progress/subtasks, the failure kind+message, and the PR (url + branch). The run's
+ * `status` is the raw execution status (`running`/`blocked`/`paused`/`done`/`failed`): the
+ * public run view deliberately surfaces the parked states (unlike the coarse `publicJob`), so
+ * a caller can tell an awaiting-a-human `blocked` from a still-`running` step. The PR branch
+ * lives on the BLOCK (`block.pullRequest`), not the run, so both are joined here.
+ */
+export function toPublicRun(execution, block, readerIdentity) {
+    const pr = block.pullRequest;
+    const identity = viewRunIdentity(execution.initiatedByExternalIdentity, readerIdentity);
+    return {
+        runId: execution.id,
+        taskId: block.id,
+        status: execution.status,
+        createdAt: jobSortKey(execution),
+        currentStep: execution.currentStep,
+        steps: execution.steps.map((s) => ({
+            agentKind: s.agentKind,
+            state: s.state,
+            progress: s.progress,
+            subtasks: s.subtasks
+                ? {
+                    completed: s.subtasks.completed,
+                    inProgress: s.subtasks.inProgress,
+                    total: s.subtasks.total,
+                }
+                : null,
+            // The step's deliverable. An EMPTY output is projected as null, matching the way
+            // `toPublicJob` reads "produced something": a step that ran and wrote nothing and a step
+            // that has not run yet are the same fact to a caller reading for a result, and the step's
+            // own `state` is what distinguishes them.
+            output: (s.output ?? '') === '' ? null : (s.output ?? null),
+            data: s.custom ?? null,
+            // Only when true: a step that RAN carries no flag at all, so the field never has to be read
+            // as "false, and also this run is old enough to predate the projection".
+            ...(s.skipped ? { skipped: true } : {}),
+        })),
+        // Who the run was started for, as pinned at admission; null for a run the app, a schedule or
+        // an identity-less key started, and withheld (flagged, not blanked) from a key that acts for
+        // someone else. See `runIdentityVisibility.ts`, and `toPublicJob` for why both members are
+        // named rather than spread.
+        externalIdentity: identity.externalIdentity,
+        externalIdentityWithheld: identity.externalIdentityWithheld,
+        pullRequest: pr ? { url: pr.url, branch: pr.branch ?? null } : null,
+        error: execution.status === 'failed'
+            ? execution.failure
+                ? { code: execution.failure.kind, message: execution.failure.message }
+                : { code: 'run_failed', message: 'The run failed' }
+            : null,
+    };
+}
+/**
+ * Load a public JOB by id for an authenticated key: the persisted execution, but ONLY when it is
+ * anchored on a HEADLESS internal block (a run this public surface created). Returns null when no
+ * such run exists in the key's workspace OR the id points at a normal board execution, so an
+ * external key can never read an arbitrary in-workspace run's output, only its own headless jobs.
+ * Runtime-symmetric: one `executionRepository.get` + one `boardService.getInternalTask` point-read.
+ */
+export async function loadPublicJob(c, workspaceId, id) {
+    const container = c.get('container');
+    const execution = await container.executionRepository.get(workspaceId, id);
+    if (!execution)
+        return null;
+    const anchor = await container.boardService.getInternalTask(workspaceId, execution.blockId);
+    return anchor ? execution : null;
+}
+//# sourceMappingURL=runProjection.js.map

package/dist/modules/publicApi/runProjection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runProjection.js","sourceRoot":"","sources":["../../../src/modules/publicApi/runProjection.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAE5D,+FAA+F;AAC/F,EAAE;AACF,8FAA8F;AAC9F,gGAAgG;AAChG,kGAAkG;AAClG,gCAAgC;AAChC,EAAE;AACF,gGAAgG;AAChG,kGAAkG;AAClG,iEAAiE;AAEjE;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CACzB,SAA4B,EAC5B,cAA6B;IAE7B,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAC1C,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,2BAA2B,EAAE,cAAc,CAAC,CAAA;IACvF,8FAA8F;IAC9F,+FAA+F;IAC/F,gGAAgG;IAChG,gGAAgG;IAChG,iEAAiE;IACjE,MAAM,UAAU,GAAG,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;SACpC,OAAO,EAAE;SACT,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,CAAA;IAC3D,MAAM,WAAW,GAAG,UAAU,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC7E,MAAM,MAAM,GACV,MAAM,KAAK,WAAW,IAAI,WAAW;QACnC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,IAAI,IAAI,EAAE;QACxE,CAAC,CAAC,IAAI,CAAA;IACV,MAAM,KAAK,GACT,MAAM,KAAK,QAAQ;QACjB,CAAC,CAAC,SAAS,CAAC,OAAO;YACjB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE;YACtE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE;QACrD,CAAC,CAAC,IAAI,CAAA;IACV,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,EAAE;QACnB,MAAM;QACN,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,4FAA4F;QAC5F,6FAA6F;QAC7F,yFAAyF;QACzF,8FAA8F;QAC9F,6FAA6F;QAC7F,yFAAyF;QACzF,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;QAC3D,uFAAuF;QACvF,+EAA+E;QAC/E,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC;QAChC,MAAM;QACN,KAAK;KACN,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CACzB,SAA4B,EAC5B,KAAY,EACZ,cAA6B;IAE7B,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAA;IAC5B,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,2BAA2B,EAAE,cAAc,CAAC,CAAA;IACvF,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,EAAE;QACnB,MAAM,EAAE,KAAK,CAAC,EAAE;QAChB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC;QAChC,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBAClB,CAAC,CAAC;oBACE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS;oBAC/B,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU;oBACjC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK;iBACxB;gBACH,CAAC,CAAC,IAAI;YACR,iFAAiF;YACjF,yFAAyF;YACzF,0FAA0F;YAC1F,0CAA0C;YAC1C,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;YAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;YACtB,4FAA4F;YAC5F,yEAAyE;YACzE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC,CAAC;QACH,6FAA6F;QAC7F,6FAA6F;QAC7F,2FAA2F;QAC3F,4BAA4B;QAC5B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;QAC3D,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;QACnE,KAAK,EACH,SAAS,CAAC,MAAM,KAAK,QAAQ;YAC3B,CAAC,CAAC,SAAS,CAAC,OAAO;gBACjB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE;gBACtE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE;YACrD,CAAC,CAAC,IAAI;KACX,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,CAAa,EACb,WAAmB,EACnB,EAAU;IAEV,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACpC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IAC1E,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;IAC3F,OAAO,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAA;AAClC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/server",
-  "version": "0.324.0",
+  "version": "0.325.1",
   "description": "Runtime-neutral HTTP layer for the Agent Architecture Board: the Hono controllers, middleware (auth/authz/CORS/error), request helpers and the gateway seams shared by every deployment facade (Cloudflare Worker, Node service).",
   "repository": {
     "type": "git",
@@ -24,24 +24,24 @@
     "access": "public"
   },
   "dependencies": {
-    "@cat-factory/agents": "0.166.0",
-    "@cat-factory/contracts": "0.354.0",
-    "@cat-factory/integrations": "0.173.2",
-    "@cat-factory/kernel": "0.346.2",
-    "@cat-factory/mcp-server": "0.51.0",
-    "@cat-factory/orchestration": "0.312.0",
-    "@cat-factory/spend": "0.21.8",
+    "@cat-factory/agents": "0.166.2",
+    "@cat-factory/contracts": "0.355.1",
+    "@cat-factory/integrations": "0.174.1",
+    "@cat-factory/kernel": "0.348.0",
+    "@cat-factory/mcp-server": "0.52.1",
+    "@cat-factory/orchestration": "0.313.1",
+    "@cat-factory/spend": "0.22.0",
     "@toad-contracts/core": "0.4.0",
     "@toad-contracts/hono": "0.3.2",
     "@toad-contracts/valibot": "0.5.0",
     "hono": "^4.13.7",
     "jose": "^6.2.12",
     "pino": "^10.3.1",
-    "valibot": "^1.4.2"
+    "valibot": "^1.5.0"
   },
   "devDependencies": {
-    "@types/node": "^26.5.0",
-    "ai": "^7.0.93",
+    "@types/node": "^26.5.1",
+    "ai": "^7.0.98",
     "typescript": "7.0.2",
     "undici": "^8.10.2",
     "vitest": "^4.1.11"