@cogitator-ai/tetsu 0.5.25 → 0.6.0

package/README.md

@@ -59,7 +59,10 @@ A Tetsu controller named `Cogitator`: `operationId`s in the OpenAPI document are
 | `workflows`          | `Record<string, Workflow>`                  | Workflows by name                                                                                                                      |
 | `swarms`             | `Record<string, SwarmConfig>`               | Swarms by name                                                                                                                         |
 | `auth`               | `(ctx) => AuthContext \| undefined` or hook | Establishes the caller, see [Authentication](#authentication)                                                                          |
+| `anonymous`          | `'allow' \| 'deny'`                         | Whether callers without a `userId` may use the API (default `'allow'`), see [Anonymous callers](#anonymous-callers)                    |
 | `authorizeThread`    | `(auth, threadId) => boolean`               | Decides who may use a memory thread, see [Users and threads](#users-and-threads)                                                       |
+| `limits`             | `RunLimits`                                 | Caps on what a request may ask a swarm or workflow run for, see [Run limits](#run-limits)                                              |
+| `deps`               | `(ctx) => unknown \| Promise<unknown>`      | Builds the `deps` agent runs pass to their tools, see [Run deps](#run-deps)                                                            |
 | `websocket`          | `boolean \| { path?: string }`              | Serve the WebSocket endpoint (default path `/ws`)                                                                                      |
 | `until`              | `AbortSignal \| (() => AbortSignal)`        | Ends open streams and sockets, such as `draining` from `@tetsujs/lifecycle`                                                            |
 | `sseHeartbeatMs`     | `number`                                    | Heartbeat comment interval of SSE streams (default `5000`, `0` turns it off)                                                           |
@@ -68,26 +71,26 @@ A Tetsu controller named `Cogitator`: `operationId`s in the OpenAPI document are
 
 ## Endpoints
 
-| Method   | Path                          | Description                             |
-| -------- | ----------------------------- | --------------------------------------- |
-| `GET`    | `/health`, `/ready`           | Liveness and readiness, without `auth`  |
-| `GET`    | `/agents`                     | Agents with their description and tools |
-| `POST`   | `/agents/:name/run`           | Run an agent and wait for the answer    |
-| `POST`   | `/agents/:name/stream`        | Run an agent over SSE                   |
-| `POST`   | `/agents/:name/resume`        | Resume a run paused for approvals       |
-| `POST`   | `/agents/:name/resume/stream` | Resume a paused run over SSE            |
-| `GET`    | `/tools`                      | Tools of every agent, as JSON Schema    |
-| `GET`    | `/threads/:id`                | Messages of a memory thread             |
-| `POST`   | `/threads/:id/messages`       | Append a message                        |
-| `DELETE` | `/threads/:id`                | Delete a thread                         |
-| `GET`    | `/workflows`                  | Workflows with their nodes              |
-| `POST`   | `/workflows/:name/run`        | Run a workflow                          |
-| `POST`   | `/workflows/:name/stream`     | Run a workflow over SSE                 |
-| `GET`    | `/swarms`                     | Swarms with their agents                |
-| `POST`   | `/swarms/:name/run`           | Run a swarm                             |
-| `POST`   | `/swarms/:name/stream`        | Run a swarm over SSE                    |
-| `GET`    | `/swarms/:name/blackboard`    | Configured blackboard sections          |
-| `GET`    | `/ws`                         | WebSocket, when `websocket` is set      |
+| Method   | Path                          | Description                                       |
+| -------- | ----------------------------- | ------------------------------------------------- |
+| `GET`    | `/health`, `/ready`           | Liveness and readiness, without `auth`            |
+| `GET`    | `/agents`                     | Agents with their description and tools           |
+| `POST`   | `/agents/:name/run`           | Run an agent and wait for the answer              |
+| `POST`   | `/agents/:name/stream`        | Run an agent over SSE                             |
+| `POST`   | `/agents/:name/resume`        | Resume a run paused for approvals                 |
+| `POST`   | `/agents/:name/resume/stream` | Resume a paused run over SSE                      |
+| `GET`    | `/tools`                      | Tools of every agent, as JSON Schema              |
+| `GET`    | `/threads/:id`                | Messages of a thread, a page with `?limit&cursor` |
+| `POST`   | `/threads/:id/messages`       | Append a message                                  |
+| `DELETE` | `/threads/:id`                | Delete a thread                                   |
+| `GET`    | `/workflows`                  | Workflows with their nodes                        |
+| `POST`   | `/workflows/:name/run`        | Run a workflow                                    |
+| `POST`   | `/workflows/:name/stream`     | Run a workflow over SSE                           |
+| `GET`    | `/swarms`                     | Swarms with their agents                          |
+| `POST`   | `/swarms/:name/run`           | Run a swarm                                       |
+| `POST`   | `/swarms/:name/stream`        | Run a swarm over SSE                              |
+| `GET`    | `/swarms/:name/blackboard`    | Configured blackboard sections                    |
+| `GET`    | `/ws`                         | WebSocket, when `websocket` is set                |
 
 Request bodies:
 
@@ -103,10 +106,10 @@ Request bodies:
 }
 
 // POST /swarms/:name/run, /swarms/:name/stream
-{ input: string; context?: Record<string, unknown>; threadId?: string; timeout?: number } // timeout at most 2147483647 ms
+{ input: string; context?: Record<string, unknown>; threadId?: string; timeout?: number } // timeout at most 2147483647 ms, held to limits.swarmTimeout
 
 // POST /workflows/:name/run, /workflows/:name/stream
-{ input?: Record<string, unknown>; options?: { maxConcurrency?: number; maxIterations?: number; checkpoint?: false } }
+{ input?: Record<string, unknown>; options?: { maxConcurrency?: number; maxIterations?: number; checkpoint?: false } } // held to limits
 
 // POST /threads/:id/messages
 { role: 'user' | 'assistant' | 'system'; content: string; metadata?: Record<string, unknown> } // system only with threadMessageRoles
@@ -114,6 +117,8 @@ Request bodies:
 
 The schemas are refined with the validators every Cogitator adapter shares (`@cogitator-ai/server-shared`), so Tetsu refuses the same bodies as Express, Fastify, Hono, Koa and Next, under its own `VALIDATION_FAILED` envelope. A run sends `context` to the model as data the application supplied and the model reads a `system` thread message as operator instructions, so both are refused unless the controller accepts them: `acceptContext` lists the `context` keys clients may send (or `true` for any), and `threadMessageRoles` the roles they may add (`user` and `assistant` by default). A body that is not JSON (`text/plain`, a form) is refused with `415 UNSUPPORTED_MEDIA_TYPE` before it is read, since browsers send those across origins without a CORS preflight. `options.checkpoint: true` is refused: the controller runs each workflow on a fresh executor and keeps no checkpoint store to resume from.
 
+`GET /threads/:id` answers the whole thread, or one page of it with `?limit=50`: the newest 50 messages (oldest first within the page) and a `nextCursor`. Pass it back as `?limit=50&cursor=<nextCursor>` for the 50 before them, until an answer has no `nextCursor`. Messages written in the same millisecond are neither skipped nor repeated across pages. A `limit` outside 1 to 1000 or a cursor the server did not give answers `422 VALIDATION_FAILED`.
+
 `POST /agents/:name/run` and `/resume` answer `{ output, threadId, usage, toolCalls, status, traceId }` plus, when they apply, `reasoning`, `pendingApprovals`, `structured`, `structuredError`, `truncated`, `blocked` and `iterationLimitReached`: the same object as every other adapter, built by `toAgentRunResponse()` of `@cogitator-ai/server-shared`. It never carries the system prompt, the history, trace spans or the checkpoint of a paused run. Swarm routes close the swarm they build once the run ends, so a distributed swarm leaves no Redis connections behind, and `GET /swarms` lists every agent, a router and pipeline stages included.
 
 ## Errors
@@ -124,27 +129,30 @@ Every error is answered in Tetsu's envelope:
 { "status": 404, "message": "Agent 'ghost' not found", "error": "AGENT_NOT_FOUND" }
 ```
 
-| Status  | `error`                                                    | When                                                                                                                                          |
-| ------- | ---------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
-| 400     | `MALFORMED_JSON`                                           | The body is not valid JSON                                                                                                                    |
-| 401     | `UNAUTHORIZED`                                             | `auth` returned `undefined`, or threw something other than an `HttpError` (an expired token)                                                  |
-| 403     | `THREAD_ACCESS_DENIED`                                     | The thread belongs to another user                                                                                                            |
-| 403     | `THREAD_FORBIDDEN`                                         | `authorizeThread` refused the thread                                                                                                          |
-| 404     | `AGENT_NOT_FOUND`, `WORKFLOW_NOT_FOUND`, `SWARM_NOT_FOUND` | No such name                                                                                                                                  |
-| 409     | `BLACKBOARD_DISABLED`                                      | The swarm has no blackboard                                                                                                                   |
-| 409     | `RUN_NOT_PAUSED`                                           | A resume named a thread without a paused run                                                                                                  |
-| 413     | `BODY_TOO_LARGE`                                           | The body is over the application's body limit                                                                                                 |
-| 415     | `UNSUPPORTED_MEDIA_TYPE`                                   | The body is not JSON (`text/plain`, a form)                                                                                                   |
-| 499     | `CLIENT_CLOSED_REQUEST`                                    | The client left before a `/run` or `/resume` answer was ready                                                                                 |
-| 422     | `VALIDATION_FAILED`                                        | The body or the path failed its schema, a `context` key or a thread message role the controller does not accept, `issues` lists every problem |
-| 501     | `PACKAGE_NOT_INSTALLED`                                    | `@cogitator-ai/workflows` or `@cogitator-ai/swarms` is missing                                                                                |
-| 503     | `MEMORY_NOT_CONFIGURED`                                    | A thread endpoint was called on a runtime with no `memory` config                                                                             |
-| 4xx/5xx | the `CogitatorError` code                                  | The run failed, e.g. `429 LLM_RATE_LIMITED` with `Retry-After`                                                                                |
-| 500     | `INTERNAL_SERVER_ERROR`                                    | Anything else, the detail goes to `reportError`, never to the client                                                                          |
-
-Only a `CogitatorError` keeps its message and code. Any other error reaches the client only as a generic internal error: `500 INTERNAL_SERVER_ERROR` in JSON, and `Internal server error` in stream `error` events, WebSocket errors and the `error` field of workflow `node_error` and swarm `agent_error` events. Its text, which can carry connection strings or file paths, never leaves the server.
-
-Every route mounts an `onError` hook made by `cogitatorErrors()`. Mount another on the application to answer `CogitatorError`s from your own routes the same way:
+| Status  | `error`                                                    | When                                                                                                                                                     |
+| ------- | ---------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| 400     | `MALFORMED_JSON`                                           | The body is not valid JSON                                                                                                                               |
+| 401     | `UNAUTHORIZED`                                             | `auth` returned `undefined`, threw something other than an `HttpError` (an expired token), or `anonymous: 'deny'` met a caller without `userId`          |
+| 403     | `THREAD_ACCESS_DENIED`                                     | The thread belongs to another user                                                                                                                       |
+| 403     | `THREAD_FORBIDDEN`                                         | `authorizeThread` refused the thread                                                                                                                     |
+| 404     | `AGENT_NOT_FOUND`, `WORKFLOW_NOT_FOUND`, `SWARM_NOT_FOUND` | No such name                                                                                                                                             |
+| 409     | `BLACKBOARD_DISABLED`                                      | The swarm has no blackboard                                                                                                                              |
+| 409     | `RUN_NOT_PAUSED`                                           | A resume named a thread without a paused run                                                                                                             |
+| 413     | `BODY_TOO_LARGE`                                           | The body is over the application's body limit                                                                                                            |
+| 415     | `UNSUPPORTED_MEDIA_TYPE`                                   | The body is not JSON (`text/plain`, a form)                                                                                                              |
+| 499     | `CLIENT_CLOSED_REQUEST`                                    | The client left before a `/run` or `/resume` answer was ready                                                                                            |
+| 422     | `VALIDATION_FAILED`                                        | The body, the path or the query failed its schema, a `context` key or a thread message role the controller does not accept, `issues` lists every problem |
+| 501     | `PACKAGE_NOT_INSTALLED`                                    | `@cogitator-ai/workflows` or `@cogitator-ai/swarms` is missing                                                                                           |
+| 503     | `MEMORY_NOT_CONFIGURED`                                    | A thread endpoint was called on a runtime with no `memory` config                                                                                        |
+| 504     | `RUN_TIMEOUT`                                              | A swarm ran past its timeout                                                                                                                             |
+| 4xx/5xx | the `CogitatorError` code                                  | The run failed, e.g. `429 LLM_RATE_LIMITED` with `Retry-After`                                                                                           |
+| 500     | `INTERNAL_SERVER_ERROR`                                    | Anything else, the detail goes to `reportError`, never to the client                                                                                     |
+
+Statuses, codes and `Retry-After` come from the taxonomy every Cogitator adapter shares (`describeHttpError()` of `@cogitator-ai/server-shared`): a `CogitatorError` answers its own `statusCode` or the status of its code, with `Retry-After` in whole seconds when the provider said when to retry, and a swarm that ran out of time answers `504 RUN_TIMEOUT`. Tetsu keeps its own envelope for them.
+
+Only a `CogitatorError` and a swarm timeout keep their message and code. Any other error reaches the client only as a generic internal error: `500 INTERNAL_SERVER_ERROR` in JSON, Tetsu's own envelope, and `Internal server error` with code `INTERNAL_ERROR` in stream `error` events and WebSocket errors, the code the streams and sockets of every Cogitator adapter send. The `error` field of workflow `node_error` and swarm `agent_error` events carries the same `Internal server error`. Its text, which can carry connection strings or file paths, never leaves the server.
+
+Every route mounts an `onError` hook made by `cogitatorErrors()`. Mount another on the application to answer `CogitatorError`s and swarm timeouts from your own routes the same way:
 
 ```typescript
 import { cogitatorErrors } from '@cogitator-ai/tetsu';
@@ -200,6 +208,16 @@ createApp({
 });
 ```
 
+### Anonymous callers
+
+By default a caller without a `userId` (no `auth`, or `auth` returned `{}`) may use the API as an anonymous user. With `anonymous: 'deny'` such a caller gets `401 UNAUTHORIZED` on every route and on the WebSocket handshake. `/health` and `/ready` stay open for probes, and so do the `docs()` routes of your application, which the controller does not guard. `auth` returning `undefined` answers `401` under either policy. A path the application does not serve, and a method a path does not take, are answered by the application before any route runs, with Tetsu's own `404` and `405`, so the controller cannot put `auth` in front of them.
+
+```typescript
+cogitatorController({ cogitator, agents, auth, anonymous: 'deny' });
+```
+
+Wrap the caller hook in `secured()`, as above, to have the OpenAPI document describe that `401`.
+
 ## Users and threads
 
 ### Multiple users
@@ -226,7 +244,37 @@ cogitatorController({
 });
 ```
 
-Use it for rules ownership does not express, such as thread ids your server hands out.
+Use it for rules ownership does not express, such as thread ids your server hands out. It runs after the body is validated and before the owner check, on `GET`, `DELETE` and `POST /threads/:id/messages`, agent runs, streams and resumes, swarm runs and streams, and WebSocket runs and resumes, and `false` answers `403 THREAD_FORBIDDEN` without starting a run (an `error` frame with that code over the WebSocket).
+
+## Run deps
+
+`deps` builds what an agent's tools get as `context.deps`: a database handle, the tenant, a client with the caller's credentials. The model never sees them, and they never come from the request body.
+
+```typescript
+cogitatorController({
+  cogitator,
+  agents,
+  auth,
+  deps: async (ctx) => ({ db: await pool.connect(), tenant: ctx.req.headers.get('x-tenant') }),
+});
+```
+
+Agent runs, streams and resumes call it once per request, after `auth` and `authorizeThread`, so an error it throws is answered before a stream opens. A WebSocket connection calls it once, with its handshake, never for each run: every agent run and resume on the connection gets what it built, which lives as long as the connection. A Tetsu context belongs to its request, not to the connection that outlives it. An error it throws refuses the handshake, as `500` unless it is an `HttpError`, and no socket opens.
+
+## Run limits
+
+`limits` caps what a request may ask a run for: `swarmTimeout` (ms) for swarm runs, `workflowMaxIterations` and `workflowMaxConcurrency` for workflow runs, over HTTP, SSE and WebSocket alike. A request that asks for more is held to the cap, and one that asks for nothing gets the cap. Each limit must be a positive integer, or building the controller throws.
+
+```typescript
+cogitatorController({
+  cogitator,
+  swarms: { research: researchSwarm },
+  workflows: { pipeline },
+  limits: { swarmTimeout: 120_000, workflowMaxIterations: 50, workflowMaxConcurrency: 4 },
+});
+```
+
+The request schemas show each limit as the default of the field it caps, with a description, and not as a `maximum`: a larger value is held to the limit, not refused. A swarm that runs past its timeout answers `504 RUN_TIMEOUT`.
 
 ## Approvals
 
@@ -285,7 +333,7 @@ data: [DONE]
 
 An agent with `reasoning: { summary: true }` also streams its reasoning summary as `reasoning-start`, `reasoning-delta` and `reasoning-end` events. A text or reasoning part opens with its first delta and is closed before a part of the other kind, a tool call or `finish`, so parts never overlap and text after a tool call starts a new part. An answer the model gave in one piece arrives as one text part before `finish`, and a resumed run that pauses again sends `approval-required` before `finish`. `POST /agents/:name/run` returns the summary as `reasoning`, and `usage` gains `reasoningTokens`, `cachedInputTokens` and `cacheWriteTokens` when the provider reports them. The `finish` event of an agent stream carries the same `usage` as the JSON answer, these counts included.
 
-A run that fails ends with `{"type":"error","message":"…","code":"…"}` instead of `finish`. A `CogitatorError` keeps its message and code, anything else is sent as `"message":"Internal server error","code":"INTERNAL_SERVER_ERROR"` and reported to the application's `reportError` with `source: "stream"`. Workflow streams send `workflow` events (`node_started`, `node_completed`, `node_error`, `node_progress`, `workflow_completed`), swarm streams send `swarm` events (`agent_start`, `agent_complete`, `agent_error`, `message`, every event the swarm itself emits under its own name, such as `swarm:start` or `agent:message`, and `swarm_completed`).
+A run that fails ends with `{"type":"error","message":"…","code":"…"}` instead of `finish`. A `CogitatorError` keeps its message and code, anything else is sent as `"message":"Internal server error","code":"INTERNAL_ERROR"` and reported to the application's `reportError` with `source: "stream"`. Workflow streams send `workflow` events (`node_started`, `node_completed`, `node_error`, `node_progress`, `workflow_completed`), swarm streams send `swarm` events (`agent_start`, `agent_complete`, `agent_error`, `message`, every event the swarm itself emits under its own name, such as `swarm:start` or `agent:message`, and `swarm_completed`).
 
 Validation (`415`, `422`), `401`, `404` and the `403 THREAD_FORBIDDEN` of `authorizeThread` are answered as JSON before the stream opens. Whether the thread belongs to the caller is checked by the run itself, so another user's thread ends an open stream with an `error` event, `"code":"THREAD_ACCESS_DENIED"`, instead of `finish`.
 
@@ -295,7 +343,7 @@ Validation (`415`, `422`), `401`, `404` and the `403 THREAD_FORBIDDEN` of `autho
 cogitatorController({ cogitator, agents, auth, websocket: true });
 ```
 
-The handshake runs `auth` like any route. Each socket runs one agent, workflow or swarm at a time; a `run` or `resume` sent while one is in progress gets an error with `code: 'RUN_IN_PROGRESS'`.
+The handshake runs `auth` and the `anonymous` policy like any route, and builds the connection's `deps` once: every run and resume on the socket shares them, and none rebuilds them. Workflow and swarm runs are held to `limits`, and runs that name a thread are checked by `authorizeThread`. Each socket runs one agent, workflow or swarm at a time, and a `run` or `resume` sent while one is in progress gets an error with `code: 'RUN_IN_PROGRESS'`.
 
 | Client sends                                                                                                  | Server answers                                                                                                                                              |
 | ------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- |
@@ -304,7 +352,7 @@ The handshake runs `auth` like any route. Each socket runs one agent, workflow o
 | `{ type: 'stop' }`                                                                                            | cancels the current run                                                                                                                                     |
 | `{ type: 'ping', id? }`                                                                                       | `{ type: 'pong', id }`                                                                                                                                      |
 
-Errors arrive as `{ type: 'error', id, error, code }` and leave the socket open; an invalid frame gets `code: 'INVALID_MESSAGE'`, and an error that is not a `CogitatorError` is sent as `Internal server error` with `code: 'INTERNAL_SERVER_ERROR'`. Closing the socket cancels its run. Bun's server-level options such as `maxPayloadLength` are set where the app is served:
+Errors arrive as `{ type: 'error', id, error, code }` and leave the socket open. An invalid frame gets `code: 'INVALID_MESSAGE'`, a swarm that ran out of time `code: 'RUN_TIMEOUT'`, and an error that is not a `CogitatorError` is sent as `Internal server error` with `code: 'INTERNAL_ERROR'`. Closing the socket cancels its run. Bun's server-level options such as `maxPayloadLength` are set where the app is served:
 
 ```typescript
 Bun.serve({ ...app, websocket: { ...app.websocket, maxPayloadLength: 1024 * 1024 } });
@@ -328,9 +376,9 @@ shutdown = onShutdownSignals(server);
 
 ## OpenAPI
 
-Request and response schemas are Zod, so `docs()` and `openapi()` from `@tetsujs/openapi` describe every route, the run failures a `CogitatorError` can produce, and the schemes of a `secured()` caller hook. SSE and WebSocket endpoints are documented by their description only, since OpenAPI cannot describe what follows the headers.
+Request and response schemas are Zod, so `docs()` and `openapi()` from `@tetsujs/openapi` describe every route, the run failures a `CogitatorError` can produce, the thread page query, the `limits` as field defaults, and the schemes of a `secured()` caller hook. SSE and WebSocket endpoints are documented by their description only, since OpenAPI cannot describe what follows the headers.
 
-The request and response schemas (`RunBody`, `ResumeBody`, `AgentRunResponse`, `SocketMessage`, …) and their TypeScript types (`AgentRunRequest`, `AgentRunResponseBody`, `WebSocketClientMessage`, …) are exported for clients and your own routes, along with the error helpers `cogitatorErrorResponse()`, `cogitatorErrorStatus()` and `describeError()`.
+The request and response schemas (`RunBody`, `ResumeBody`, `AgentRunResponse`, `SocketMessage`, …) and their TypeScript types (`AgentRunRequest`, `AgentRunResponseBody`, `WebSocketClientMessage`, …) are exported for clients and your own routes, along with `ThreadQuery`, the error helpers `cogitatorErrorResponse()`, `cogitatorErrorStatus()` and `describeError()`, and the `RunLimits` and `AnonymousPolicy` types.
 
 ## Testing
 

package/dist/auth.d.ts

@@ -1,3 +1,5 @@
+import type { Requires } from '@tetsujs/core';
+import type { AnonymousPolicy } from '@cogitator-ai/server-shared';
 import type { AuthContext, Authenticate, CogitatorDeps } from './types.js';
 /** What the caller hook adds to the context of every guarded route. */
 export interface CallerFields {
@@ -22,4 +24,10 @@ export type CallerHook = ReturnType<typeof callerHook>;
  * so the generated document describes the security scheme and the `401`.
  */
 export declare function resolveCaller(auth: CogitatorDeps['auth']): CallerHook;
+/**
+ * The `beforeParse` hook that runs after the caller hook and turns away a caller without a
+ * `userId` with `401 UNAUTHORIZED` when `anonymous` is `'deny'`. Under `'allow'` it lets
+ * every caller the caller hook admitted through.
+ */
+export declare function anonymousHook(anonymous: AnonymousPolicy | undefined): import("@tetsujs/core").Hook<"beforeParse", Requires<CallerFields>, unknown>;
 //# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3E,uEAAuE;AACvE,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,WAAW,GAAG,SAAS,CAAC;CACxC;AASD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,YAAY,EAAE,YAAY,GAAG,SAAS;;;;wCAehE;AAWD,4EAA4E;AAC5E,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;AAEvD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,UAAU,CAErE"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAEnE,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3E,uEAAuE;AACvE,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,WAAW,GAAG,SAAS,CAAC;CACxC;AASD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,YAAY,EAAE,YAAY,GAAG,SAAS;;;;wCAehE;AAWD,4EAA4E;AAC5E,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;AAEvD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,UAAU,CAErE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,eAAe,GAAG,SAAS,gFAKnE"}

package/dist/auth.js

@@ -1,4 +1,6 @@
 import { hook, HttpError, httpError } from '@tetsujs/core';
+import { admitCaller } from '@cogitator-ai/server-shared';
+import { refusalError } from './errors.js';
 const ANONYMOUS = { cogitatorAuth: undefined };
 function admit(auth) {
     if (!auth)
@@ -45,4 +47,16 @@ function refusal(error) {
 export function resolveCaller(auth) {
     return typeof auth === 'function' || auth === undefined ? callerHook(auth) : auth;
 }
+/**
+ * The `beforeParse` hook that runs after the caller hook and turns away a caller without a
+ * `userId` with `401 UNAUTHORIZED` when `anonymous` is `'deny'`. Under `'allow'` it lets
+ * every caller the caller hook admitted through.
+ */
+export function anonymousHook(anonymous) {
+    return hook.beforeParse((ctx) => {
+        const refusal = admitCaller(ctx.cogitatorAuth?.userId, anonymous);
+        if (refusal)
+            throw refusalError(refusal);
+    });
+}
 //# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAQ3D,MAAM,SAAS,GAAiB,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;AAE7D,SAAS,KAAK,CAAC,IAA6B;IAC1C,IAAI,CAAC,IAAI;QAAE,MAAM,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IAChE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,YAAsC;IAC/D,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,EAAwC,EAAE;QACpE,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;QAC3C,IAAI,IAA8B,CAAC;QACnC,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,YAAY,OAAO;YAC5B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,KAAc,EAAE,EAAE;gBAClC,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC,CAAC;YACJ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;AAC7F,CAAC;AAKD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAA2B;IACvD,OAAO,OAAO,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpF,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE1D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQ3C,MAAM,SAAS,GAAiB,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;AAE7D,SAAS,KAAK,CAAC,IAA6B;IAC1C,IAAI,CAAC,IAAI;QAAE,MAAM,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IAChE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,YAAsC;IAC/D,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,EAAwC,EAAE;QACpE,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;QAC3C,IAAI,IAA8B,CAAC;QACnC,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,YAAY,OAAO;YAC5B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,KAAc,EAAE,EAAE;gBAClC,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC,CAAC;YACJ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;AAC7F,CAAC;AAKD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAA2B;IACvD,OAAO,OAAO,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,SAAsC;IAClE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,GAA2B,EAAE,EAAE;QACtD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,OAAO;YAAE,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/controller.d.ts

@@ -1,4 +1,3 @@
-import type { Message } from '@cogitator-ai/types';
 import type { z } from 'zod';
 import type { CogitatorDeps } from './types.js';
 /**
@@ -61,7 +60,11 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>];
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
+            readonly params: {
+                [x: string]: string;
+            };
+        }, Pick<import("./socket.js").ConnectionDeps, "cogitatorDeps">>];
     }> | undefined;
     health: import("@tetsujs/core").RouteDef<"/health", {
         readonly response: z.ZodObject<{
@@ -102,7 +105,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>];
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>];
         readonly onError: readonly [import("@tetsujs/core").Hook<"onError", import("@tetsujs/core").BaseCtx & {
             readonly error: unknown;
         }, unknown>];
@@ -249,7 +252,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
             readonly params: {
                 [x: string]: string;
             };
@@ -293,7 +296,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
             readonly params: {
                 [x: string]: string;
             };
@@ -444,7 +447,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
             readonly params: {
                 [x: string]: string;
             };
@@ -494,7 +497,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
             readonly params: {
                 [x: string]: string;
             };
@@ -507,6 +510,10 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
         readonly params: z.ZodObject<{
             id: z.ZodString;
         }, z.core.$strip>;
+        readonly query: z.ZodPreprocess<z.ZodObject<{
+            limit: z.ZodOptional<z.ZodInt>;
+            cursor: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, unknown>;
         readonly response: {
             readonly 200: z.ZodObject<{
                 id: z.ZodString;
@@ -547,6 +554,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
                 }, z.core.$strip>>;
                 createdAt: z.ZodNumber;
                 updatedAt: z.ZodNumber;
+                nextCursor: z.ZodOptional<z.ZodString>;
             }, z.core.$strip>;
             readonly 403: z.ZodObject<{
                 status: z.ZodNumber;
@@ -573,16 +581,11 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>];
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>];
         readonly onError: readonly [import("@tetsujs/core").Hook<"onError", import("@tetsujs/core").BaseCtx & {
             readonly error: unknown;
         }, unknown>];
-    }, undefined, "GET", Promise<{
-        id: string;
-        messages: Message[];
-        createdAt: number;
-        updatedAt: number;
-    }>, false>;
+    }, undefined, "GET", Promise<import("@cogitator-ai/server-shared").ThreadPage>, false>;
     addThreadMessage: import("@tetsujs/core").RouteDef<"/threads/:id/messages", {
         readonly params: z.ZodObject<{
             id: z.ZodString;
@@ -630,7 +633,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
             readonly params: {
                 [x: string]: string;
             };
@@ -672,7 +675,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>];
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>];
         readonly onError: readonly [import("@tetsujs/core").Hook<"onError", import("@tetsujs/core").BaseCtx & {
             readonly error: unknown;
         }, unknown>];
@@ -690,7 +693,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>];
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>];
         readonly onError: readonly [import("@tetsujs/core").Hook<"onError", import("@tetsujs/core").BaseCtx & {
             readonly error: unknown;
         }, unknown>];
@@ -714,7 +717,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>];
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>];
         readonly onError: readonly [import("@tetsujs/core").Hook<"onError", import("@tetsujs/core").BaseCtx & {
             readonly error: unknown;
         }, unknown>];
@@ -732,9 +735,9 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
         readonly body: z.ZodObject<{
             input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             options: z.ZodOptional<z.ZodObject<{
-                maxConcurrency: z.ZodOptional<z.ZodNumber>;
-                maxIterations: z.ZodOptional<z.ZodNumber>;
                 checkpoint: z.ZodOptional<z.ZodLiteral<false>>;
+                maxConcurrency: z.ZodOptional<z.ZodNumber> | z.ZodDefault<z.ZodNumber>;
+                maxIterations: z.ZodOptional<z.ZodNumber> | z.ZodDefault<z.ZodNumber>;
             }, z.core.$strip>>;
         }, z.core.$strip>;
         readonly response: {
@@ -836,7 +839,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
             readonly params: {
                 [x: string]: string;
             };
@@ -862,9 +865,9 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
         readonly body: z.ZodObject<{
             input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             options: z.ZodOptional<z.ZodObject<{
-                maxConcurrency: z.ZodOptional<z.ZodNumber>;
-                maxIterations: z.ZodOptional<z.ZodNumber>;
                 checkpoint: z.ZodOptional<z.ZodLiteral<false>>;
+                maxConcurrency: z.ZodOptional<z.ZodNumber> | z.ZodDefault<z.ZodNumber>;
+                maxIterations: z.ZodOptional<z.ZodNumber> | z.ZodDefault<z.ZodNumber>;
             }, z.core.$strip>>;
         }, z.core.$strip>;
         readonly response: {
@@ -885,7 +888,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
             readonly params: {
                 [x: string]: string;
             };
@@ -907,7 +910,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>];
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>];
         readonly onError: readonly [import("@tetsujs/core").Hook<"onError", import("@tetsujs/core").BaseCtx & {
             readonly error: unknown;
         }, unknown>];
@@ -926,7 +929,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             input: z.ZodString;
             context: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             threadId: z.ZodOptional<z.ZodString>;
-            timeout: z.ZodOptional<z.ZodNumber>;
+            timeout: z.ZodOptional<z.ZodNumber> | z.ZodDefault<z.ZodNumber>;
         }, z.core.$strip>;
         readonly response: {
             readonly 200: z.ZodObject<{
@@ -1045,7 +1048,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
             readonly params: {
                 [x: string]: string;
             };
@@ -1083,7 +1086,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             input: z.ZodString;
             context: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             threadId: z.ZodOptional<z.ZodString>;
-            timeout: z.ZodOptional<z.ZodNumber>;
+            timeout: z.ZodOptional<z.ZodNumber> | z.ZodDefault<z.ZodNumber>;
         }, z.core.$strip>;
         readonly response: {
             readonly 200: null;
@@ -1110,7 +1113,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").BaseCtx & {
             readonly params: {
                 [x: string]: string;
             };
@@ -1143,7 +1146,7 @@ export declare const cogitatorController: (deps: CogitatorDeps) => {
             readonly params: {
                 [x: string]: string;
             };
-        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>];
+        }, Pick<import("./auth.js").CallerFields, "cogitatorAuth">>, import("@tetsujs/core").Hook<"beforeParse", import("@tetsujs/core").Requires<import("./auth.js").CallerFields>, unknown>];
         readonly onError: readonly [import("@tetsujs/core").Hook<"onError", import("@tetsujs/core").BaseCtx & {
             readonly error: unknown;
         }, unknown>];

package/dist/controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../src/controller.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,OAAO,EAMR,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiD7B,OAAO,KAAK,EAAe,aAAa,EAAE,MAAM,YAAY,CAAC;AAoE7D;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0c9B,CAAC"}
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../src/controller.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiD7B,OAAO,KAAK,EAAe,aAAa,EAAE,MAAM,YAAY,CAAC;AAqE7D;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAye9B,CAAC"}