@coffer-org/plugin-http 1.3.1 → 2.0.0

package/dist/runtime/chain-store.d.ts

@@ -0,0 +1,20 @@
+import type { ConvMessage } from '@coffer-org/plugin-orchestrator/runtime';
+export declare function recordUser(m: {
+    chatId: string;
+    msgId: string;
+    sender?: string | null;
+    text: string;
+    ts: number;
+    replyToId: string | null;
+}): Promise<void>;
+export declare function recordAssistant(m: {
+    chatId: string;
+    parentMsgId: string | null;
+    botMsgId: string | null;
+    text: string;
+    now: number;
+}): Promise<boolean>;
+export declare function buildChain(headMsgId: string, opts: {
+    chatId: string;
+    maxDepth?: number;
+}): Promise<ConvMessage[]>;

package/dist/runtime/chain-store.js

@@ -0,0 +1,35 @@
+import { getThreadMessage, putThreadMessage } from '@coffer-org/server/thread-store';
+import { getLogger } from '@coffer-org/sdk/logger';
+const log = getLogger('http-connector');
+const CONNECTOR = 'http';
+const DEFAULT_MAX_DEPTH = 30;
+export async function recordUser(m) {
+    await putThreadMessage({ connector: CONNECTOR, chatId: m.chatId, msgId: m.msgId, role: 'user', sender: m.sender ?? null, text: m.text, ts: m.ts, replyToId: m.replyToId });
+}
+export async function recordAssistant(m) {
+    if (m.botMsgId == null || !m.text.trim())
+        return false;
+    await putThreadMessage({ connector: CONNECTOR, chatId: m.chatId, msgId: m.botMsgId, role: 'assistant', text: m.text, ts: m.now, replyToId: m.parentMsgId });
+    return true;
+}
+export async function buildChain(headMsgId, opts) {
+    const max = opts.maxDepth ?? DEFAULT_MAX_DEPTH;
+    const acc = [];
+    let cur = headMsgId;
+    const seen = new Set();
+    while (cur && acc.length < max && !seen.has(cur)) {
+        seen.add(cur);
+        const stored = await getThreadMessage(CONNECTOR, opts.chatId, cur);
+        if (!stored)
+            break;
+        if (stored.role !== 'reasoning') {
+            acc.push({ role: stored.role, content: stored.text, sender: stored.sender, msgId: stored.msgId, ts: stored.ts });
+        }
+        cur = stored.replyToId;
+    }
+    if (acc.length >= max)
+        log.info(`chain capped at ${max} for ${headMsgId}`);
+    while (acc.length && acc.at(-1)?.role !== 'user')
+        acc.pop();
+    return acc.reverse();
+}

package/dist/runtime/connector.d.ts

@@ -1,6 +1,13 @@
 import type { Connector } from '@coffer-org/plugin-orchestrator/runtime';
+import { recordAssistant as storeAssistant } from './chain-store.ts';
 export interface BufferedConnector {
     connector: Connector;
     drain(): string[];
+    recorded(): string | null;
 }
-export declare function makeBufferedConnector(): BufferedConnector;
+export interface BufferedConnectorOpts {
+    chatId: string;
+    botMsgId: string;
+    record?: typeof storeAssistant;
+}
+export declare function makeBufferedConnector(opts: BufferedConnectorOpts): BufferedConnector;

package/dist/runtime/connector.js

@@ -1,17 +1,32 @@
-export function makeBufferedConnector() {
+import { plainRender } from '@coffer-org/plugin-orchestrator/runtime';
+import { recordAssistant as storeAssistant } from "./chain-store.js";
+const HTTP_MAX = 100_000;
+export function makeBufferedConnector(opts) {
     const buffer = [];
-    let counter = 0;
-    const capabilities = {
-        streaming: false,
-        typing: false,
-        maxMessageLength: 100_000,
-    };
+    const record = opts.record ?? storeAssistant;
+    let recordedId = null;
     const connector = {
         id: 'http',
-        capabilities,
-        async sendMessage(_chatId, text) {
-            buffer.push(text);
-            return { msgId: String(counter++) };
+        reply(_chatId, _ctx) {
+            return {
+                update() { },
+                segment() { },
+                async finish(r) {
+                    for (const part of plainRender(HTTP_MAX)(r))
+                        buffer.push(part);
+                    return opts.botMsgId;
+                },
+            };
+        },
+        async recordAssistant(m) {
+            const wrote = await record({
+                chatId: opts.chatId,
+                parentMsgId: m.parentMsgId,
+                botMsgId: m.botMsgId,
+                text: m.text,
+                now: Math.floor(Date.now() / 1000),
+            });
+            recordedId = wrote ? m.botMsgId : null;
         },
     };
     return {
@@ -19,5 +34,8 @@ export function makeBufferedConnector() {
         drain() {
             return buffer.splice(0);
         },
+        recorded() {
+            return recordedId;
+        },
     };
 }

package/dist/runtime/format.d.ts

@@ -0,0 +1 @@
+export declare const HTTP_FORMAT: string;

package/dist/runtime/format.js

@@ -0,0 +1,12 @@
+export const HTTP_FORMAT = [
+    'CRITICAL OUTPUT FORMAT — HTML ONLY. Format the reply strictly as HTML and NOTHING else. NEVER use Markdown — no *bold*, _italic_, **bold**, `code`, ```blocks```, # headings, - bullets, or | tables. Markdown does not render here; it shows up as literal characters. When in doubt, use an HTML tag or plain text.',
+    'Inline styling (tags may nest): <b>bold</b>, <i>italic</i>, <u>underline</u>, <s>strike</s>, <code>inline code</code>. Links: <a href="https://…">text</a> — the URL is shown next to the text, so do not repeat it in prose.',
+    'Blocks: <p>paragraph</p>, <h1>…</h1> through <h6>…</h6> for headings, <blockquote>quote</blockquote>, <hr> for a separator, <br> for a line break.',
+    'Lists: <ul><li>item</li></ul> for bullets, <ol><li>item</li></ol> for numbered steps. Do not hand-write "• " or "1. " prefixes — the tags render them.',
+    'Tables render for real — use <table><thead><tr><th>Col</th></tr></thead><tbody><tr><td>cell</td></tr></tbody></table>. Do NOT flatten a table into <pre> or ASCII art.',
+    'Code blocks: <pre><code class="language-python">…</code></pre> — the language class enables syntax highlight. Plain <pre>…</pre> works for non-code preformatted text.',
+    'Telegram-only tags do NOT work here — never use <spoiler>, <tg-spoiler>, <tg-emoji>, or tg:// links.',
+    'Escape literal <, >, and & in prose as &lt;, &gt;, and &amp; so they are not read as tags.',
+    'Beyond the tags, use Unicode symbols and emoji to structure and enrich replies: separators (─────), arrows (→), status marks (✅ ⚠️ ❌ ⏳), and topic emoji (📅 💰 🏥 🛒 🌱 …). They make replies scannable.',
+    'The reply is read in a terminal — keep it short and skimmable: prefer short paragraphs and lists over long prose, and keep table columns narrow enough to fit an ~80-column width.',
+].join('\n');

package/dist/runtime/index.d.ts

@@ -2,5 +2,7 @@ import type { PluginHooks } from '@coffer-org/server/plugin-hooks';
 export type { HttpConfig, LoadOpts } from './config.ts';
 export { loadHttpConfig, policy } from './config.ts';
 export { makeBufferedConnector } from './connector.ts';
+export { HTTP_FORMAT } from './format.ts';
 export { startServer, stopServer } from './server.ts';
+export { recordUser, recordAssistant, buildChain } from './chain-store.ts';
 export declare const serverHooks: PluginHooks;

package/dist/runtime/index.js

@@ -1,10 +1,14 @@
 import { getPluginSettings } from '@coffer-org/server/plugin-runtime';
+import { pruneThreadMessages } from '@coffer-org/server/thread-store';
 import { startServer, stopServer } from "./server.js";
 import { getLogger } from '@coffer-org/sdk/logger';
 const log = getLogger('http-connector');
+const THREAD_TTL_MS = Number(process.env['HTTP_THREAD_TTL_MS'] ?? 7 * 86_400_000);
 export { loadHttpConfig, policy } from "./config.js";
 export { makeBufferedConnector } from "./connector.js";
+export { HTTP_FORMAT } from "./format.js";
 export { startServer, stopServer } from "./server.js";
+export { recordUser, recordAssistant, buildChain } from "./chain-store.js";
 export const serverHooks = {
     init: async () => {
         const { loadHttpConfig } = await import("./config.js");
@@ -15,4 +19,13 @@ export const serverHooks = {
     teardown: async () => {
         await stopServer();
     },
+    backgroundTasks: [
+        {
+            name: 'http-thread-prune',
+            intervalMs: 86_400_000,
+            run: async () => {
+                await pruneThreadMessages('http', Math.floor((Date.now() - THREAD_TTL_MS) / 1000));
+            },
+        },
+    ],
 };

package/dist/runtime/server.js

@@ -1,7 +1,10 @@
 import { createServer } from 'node:http';
+import { randomUUID } from 'node:crypto';
 import { handleIncoming } from '@coffer-org/plugin-orchestrator/runtime';
 import { policy } from "./config.js";
 import { makeBufferedConnector } from "./connector.js";
+import { recordUser, buildChain } from "./chain-store.js";
+import { HTTP_FORMAT } from "./format.js";
 import { getLogger } from '@coffer-org/sdk/logger';
 const log = getLogger('http-connector');
 const BIND_HOST = '127.0.0.1';
@@ -41,19 +44,32 @@ async function handleRequest(req, res, cfg, deps) {
         sendJson(res, 400, { error: 'Body must be a JSON object' });
         return;
     }
-    const { chatId, userId, text } = body;
+    const { chatId, userId, text, replyTo } = body;
     if (typeof text !== 'string' || !text.trim()) {
         sendJson(res, 400, { error: 'Missing required field: text' });
         return;
     }
-    const { connector, drain } = makeBufferedConnector();
+    if (replyTo !== undefined && typeof replyTo !== 'string') {
+        sendJson(res, 400, { error: 'Field replyTo must be a string' });
+        return;
+    }
+    const chat = typeof chatId === 'string' ? chatId : 'http';
+    const user = typeof userId === 'string' ? userId : 'http';
+    const msgId = randomUUID();
+    const botMsgId = randomUUID();
+    const nowSec = Math.floor(Date.now() / 1000);
+    await recordUser({ chatId: chat, msgId, sender: user, text, ts: nowSec, replyToId: replyTo ?? null });
+    const messages = await buildChain(msgId, { chatId: chat });
+    const { connector, drain, recorded } = makeBufferedConnector({ chatId: chat, botMsgId });
     await doHandle(connector, {
-        chatId: typeof chatId === 'string' ? chatId : 'http',
-        userId: typeof userId === 'string' ? userId : 'http',
-        text,
-        replyToId: null,
+        connectorId: 'http',
+        channelSystem: HTTP_FORMAT,
+        chatId: chat,
+        sender: { id: user },
+        messages,
     }, { policy: policy(cfg) });
-    sendJson(res, 200, { reply: drain().join('\n\n') });
+    const reply = drain().join('\n\n');
+    sendJson(res, 200, { reply, id: recorded() });
 }
 export async function startServer(cfg, deps = {}) {
     if (server)

package/dist/schema.js

@@ -154,7 +154,10 @@ function assignProp(target, prop, value) {
 }
 function mergeDefs(...defs) {
 	const mergedDescriptors = {};
-	for (const def of defs) Object.assign(mergedDescriptors, Object.getOwnPropertyDescriptors(def));
+	for (const def of defs) {
+		const descriptors = Object.getOwnPropertyDescriptors(def);
+		Object.assign(mergedDescriptors, descriptors);
+	}
 	return Object.defineProperties({}, mergedDescriptors);
 }
 function esc(str) {
@@ -476,7 +479,7 @@ var _parse = (_Err) => (schema, value, _ctx, _params) => {
 	}, ctx);
 	if (result instanceof Promise) throw new $ZodAsyncError();
 	if (result.issues.length) {
-		const e = new (_params?.Err ?? _Err)(result.issues.map((iss) => finalizeIssue(iss, ctx, config())));
+		const e = new ((_params?.Err) ?? _Err)(result.issues.map((iss) => finalizeIssue(iss, ctx, config())));
 		captureStackTrace(e, _params?.callee);
 		throw e;
 	}
@@ -493,7 +496,7 @@ var _parseAsync = (_Err) => async (schema, value, _ctx, params) => {
 	}, ctx);
 	if (result instanceof Promise) result = await result;
 	if (result.issues.length) {
-		const e = new (params?.Err ?? _Err)(result.issues.map((iss) => finalizeIssue(iss, ctx, config())));
+		const e = new ((params?.Err) ?? _Err)(result.issues.map((iss) => finalizeIssue(iss, ctx, config())));
 		captureStackTrace(e, params?.callee);
 		throw e;
 	}
@@ -1589,13 +1592,13 @@ var $ZodObject = /*@__PURE__*/ $constructor("$ZodObject", (inst, def) => {
 		}
 		return propValues;
 	});
-	const isObject$1 = isObject;
+	const isObject$2 = isObject;
 	const catchall = def.catchall;
 	let value;
 	inst._zod.parse = (payload, ctx) => {
 		value ?? (value = _normalized.value);
 		const input = payload.value;
-		if (!isObject$1(input)) {
+		if (!isObject$2(input)) {
 			payload.issues.push({
 				expected: "object",
 				code: "invalid_type",
@@ -1718,7 +1721,7 @@ var $ZodObjectJIT = /*@__PURE__*/ $constructor("$ZodObjectJIT", (inst, def) => {
 		return (payload, ctx) => fn(shape, payload, ctx);
 	};
 	let fastpass;
-	const isObject$2 = isObject;
+	const isObject$1 = isObject;
 	const jit = !globalConfig.jitless;
 	const fastEnabled = jit && allowsEval.value;
 	const catchall = def.catchall;
@@ -1726,7 +1729,7 @@ var $ZodObjectJIT = /*@__PURE__*/ $constructor("$ZodObjectJIT", (inst, def) => {
 	inst._zod.parse = (payload, ctx) => {
 		value ?? (value = _normalized.value);
 		const input = payload.value;
-		if (!isObject$2(input)) {
+		if (!isObject$1(input)) {
 			payload.issues.push({
 				expected: "object",
 				code: "invalid_type",
@@ -1945,7 +1948,7 @@ var $ZodOptional = /*@__PURE__*/ $constructor("$ZodOptional", (inst, def) => {
 	inst._zod.optin = "optional";
 	inst._zod.optout = "optional";
 	defineLazy(inst._zod, "values", () => {
-		return def.innerType._zod.values ? new Set([...def.innerType._zod.values, void 0]) : void 0;
+		return def.innerType._zod.values ? /* @__PURE__ */ new Set([...def.innerType._zod.values, void 0]) : void 0;
 	});
 	defineLazy(inst._zod, "pattern", () => {
 		const pattern = def.innerType._zod.pattern;
@@ -1979,7 +1982,7 @@ var $ZodNullable = /*@__PURE__*/ $constructor("$ZodNullable", (inst, def) => {
 		return pattern ? new RegExp(`^(${cleanRegex(pattern.source)}|null)$`) : void 0;
 	});
 	defineLazy(inst._zod, "values", () => {
-		return def.innerType._zod.values ? new Set([...def.innerType._zod.values, null]) : void 0;
+		return def.innerType._zod.values ? /* @__PURE__ */ new Set([...def.innerType._zod.values, null]) : void 0;
 	});
 	inst._zod.parse = (payload, ctx) => {
 		if (payload.value === null) return payload;
@@ -4587,7 +4590,7 @@ function password(raw) {
 * Internal API-token list — keyValue-shaped collection (name + write-only
 * token + timestamps), custom renderer (`kind:'internalApiToken'`, own
 * create/revoke UI — same trick as url()/perWeekday()). "Internal" = not a
-* general-purpose field type for plugin modules, only for the core account
+* general-purpose field type for plugin shelves, only for the core account
 * settings page. `token` is `kind:'password'` so maskSecrets/preserveTree
 * already mask/preserve it for free.
 */
@@ -4606,6 +4609,25 @@ function internalApiToken(o) {
 		]
 	});
 }
+/**
+* Internal "connected apps" list — the OAuth clients (claude.ai & co) the user
+* has authorized for MCP access. Same "internal" caveat and custom-renderer
+* trick as internalApiToken(): read-only rows + a revoke action, never part of
+* the parent form's save.
+*/
+function internalOauthGrants(o) {
+	return group({
+		key: o.key,
+		label: o.label ?? o.key,
+		multiple: true,
+		view: { kind: "internalOauthGrants" },
+		fields: [
+			string({ key: "clientName" }),
+			string({ key: "createdAt" }),
+			string({ key: "lastUsedAt" })
+		]
+	});
+}
 var SLUG_RE = /^[a-z0-9-]+$/;
 function slug(raw) {
 	const o = normalizeOpts(raw);
@@ -4686,7 +4708,7 @@ var TEL_RE = /^\+?[\d\s()-]{4,}$/;
 /** Loose URL: будь-який scheme:// АБО host-з-крапкою (+опц. порт/шлях). Без пробілів. */
 var LINK_RE = /^([a-z][a-z0-9+.-]*:\/\/\S+|[\w-]+(\.[\w-]+)+(:\d+)?(\/\S*)?)$/i;
 /** CSS named colors (CSS Color Module L4) — для f.colorname. */
-var CSS_COLOR_NAMES = new Set([
+var CSS_COLOR_NAMES = /* @__PURE__ */ new Set([
 	"aliceblue",
 	"antiquewhite",
 	"aqua",
@@ -5035,7 +5057,8 @@ var presets = {
 	weight,
 	dimensions,
 	country,
-	internalApiToken
+	internalApiToken,
+	internalOauthGrants
 };
 //#endregion
 //#region ../../node_modules/iso-639-1/src/data.js
@@ -5147,7 +5170,7 @@ var require_data = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		},
 		cs: {
 			name: "Czech",
-			nativeName: "Čeština"
+			nativeName: "čeština"
 		},
 		cu: {
 			name: "Old Church Slavonic",
@@ -5611,7 +5634,7 @@ var require_data = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		},
 		sk: {
 			name: "Slovak",
-			nativeName: "Slovenčina"
+			nativeName: "slovenčtina"
 		},
 		sl: {
 			name: "Slovenian",
@@ -5862,7 +5885,7 @@ function group(o) {
 		required: o.required,
 		unique: r.unique,
 		label: o.label,
-		icon: v.icon,
+		icon: o.icon,
 		display: v.display ?? "wrap",
 		kind: v.kind,
 		fixed: r.fixed,
@@ -5873,11 +5896,9 @@ function group(o) {
 function row(o) {
 	return group({
 		label: o.label,
+		icon: o.icon,
 		fields: o.fields,
-		view: {
-			...o.view,
-			display: "scroll"
-		}
+		view: { display: "scroll" }
 	});
 }
 /** Tabular collection (array of rows → <table>, aligned by columns). Sugar. */
@@ -5885,14 +5906,12 @@ function table(o) {
 	return group({
 		key: o.key,
 		label: o.label,
+		icon: o.icon,
 		fields: o.fields,
 		multiple: true,
 		required: o.required,
 		rules: o.rules,
-		view: {
-			...o.view,
-			display: "table"
-		}
+		view: { display: "table" }
 	});
 }
 /**
@@ -5908,11 +5927,9 @@ function sheet(o) {
 	});
 	return group({
 		label: o.label,
+		icon: o.icon,
 		fields: flat,
-		view: {
-			...o.view,
-			display: "sheet"
-		}
+		view: { display: "sheet" }
 	});
 }
 /**
@@ -5944,8 +5961,8 @@ function keyed(o) {
 	return {
 		...(o.container ?? group)({
 			label: o.label,
-			fields: [o.by, ...o.fields],
-			view: o.view
+			icon: o.icon,
+			fields: [o.by, ...o.fields]
 		}),
 		key: o.key,
 		multiple: true,
@@ -5989,6 +6006,34 @@ function wrapKey(opts, meta) {
 			noEditControl: true
 		}
 	};
+	if (opts.emphasis) m = {
+		...m,
+		hints: {
+			...m.hints,
+			emphasis: opts.emphasis
+		}
+	};
+	if (opts.noLabel) m = {
+		...m,
+		hints: {
+			...m.hints,
+			noLabel: true
+		}
+	};
+	if (opts.role) m = {
+		...m,
+		hints: {
+			...m.hints,
+			role: opts.role
+		}
+	};
+	if (opts.pinned) m = {
+		...m,
+		hints: {
+			...m.hints,
+			pinned: true
+		}
+	};
 	if (opts.default !== void 0) m = {
 		...m,
 		default: opts.default
@@ -6352,8 +6397,8 @@ function relation(raw) {
 			displayKey: o.displayKey ?? "name"
 		},
 		relation: {
-			vault: raw.options.vault,
-			type: raw.options.module
+			library: raw.options.library,
+			shelf: raw.options.shelf
 		},
 		...multi && { json: true },
 		zod: optionalize(s, required)
@@ -6733,15 +6778,44 @@ function period(raw) {
 		zod: optionalize(s, required)
 	});
 }
+/** Keys a file entry may carry. Everything else is rejected — see fileEntryIssue. */
+var FILE_KEYS = /* @__PURE__ */ new Set([
+	"name",
+	"mime",
+	"size"
+]);
+/** Keys that mean "the author pasted a remote address" — the one mistake worth naming. */
+var FILE_URL_KEYS = [
+	"url",
+	"src",
+	"href",
+	"link"
+];
+/**
+* A file entry points at a file already uploaded to the server: `{ name }`, where
+* name is the bare filename returned by POST /api/upload. Anything else — a remote
+* URL, an extra key, a path — is refused here, so a record can never hold a
+* reference the server cannot serve. `mime`/`size` are accepted (legacy payloads
+* and the web uploader send them) but the server overwrites them from disk.
+* Returns a vmsg code, or null when the entry is well-formed.
+*/
+function fileEntryIssue(it) {
+	if (typeof it !== "object" || it === null || Array.isArray(it)) return "file_structure";
+	const rec = it;
+	if (FILE_URL_KEYS.some((k) => k in rec)) return "file_remote_url";
+	const name = rec["name"];
+	if (typeof name !== "string" || name === "") return "file_structure";
+	if (name.includes("://") || name.startsWith("//")) return "file_remote_url";
+	if (/[\\/]/.test(name) || name.includes("..")) return "file_name";
+	for (const k of Object.keys(rec)) if (!FILE_KEYS.has(k)) return "file_unknown_key";
+	if (rec["mime"] !== void 0 && typeof rec["mime"] !== "string") return "file_structure";
+	if (rec["size"] !== void 0 && typeof rec["size"] !== "number") return "file_structure";
+	return null;
+}
 function makeFile(kind, raw) {
 	const o = normalizeOpts(raw);
 	const required = o.required ?? false;
 	const multiple = o.multiple ?? false;
-	const rowSchema = object({
-		name: string$1().min(1),
-		mime: string$1().optional(),
-		size: number$1().optional()
-	});
 	const s = unknown().superRefine((raw, ctx) => {
 		if (typeof raw === "string") try {
 			JSON.parse(raw);
@@ -6754,12 +6828,15 @@ function makeFile(kind, raw) {
 		}
 		const parsed = jsonValue(raw);
 		const items = Array.isArray(parsed) ? parsed : [parsed];
-		for (const it of items) if (!rowSchema.safeParse(it).success) {
-			ctx.addIssue({
-				code: ZodIssueCode.custom,
-				message: vmsg("file_structure")
-			});
-			return;
+		for (const it of items) {
+			const code = fileEntryIssue(it);
+			if (code) {
+				ctx.addIssue({
+					code: ZodIssueCode.custom,
+					message: vmsg(code)
+				});
+				return;
+			}
 		}
 	});
 	return wrapKey(o, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coffer-org/plugin-http",
-  "version": "1.3.1",
+  "version": "2.0.0",
   "type": "module",
   "engines": {
     "node": ">=24"
@@ -25,9 +25,9 @@
     "test": "node --import tsx --test \"src/runtime/*.test.ts\""
   },
   "dependencies": {
-    "@coffer-org/plugin-orchestrator": "^1.3.1",
-    "@coffer-org/sdk": "^1.4.0",
-    "@coffer-org/server": "^1.4.0"
+    "@coffer-org/plugin-orchestrator": "^2.0.0",
+    "@coffer-org/sdk": "^2.0.0",
+    "@coffer-org/server": "^2.0.1"
   },
   "devDependencies": {},
   "coffer": {