@corbat-tech/coco 2.40.0 → 2.41.0

package/dist/adapters/index.d.ts

@@ -1,5 +1,5 @@
-import { A as AgentRuntime } from '../agent-runtime-Cd6pB640.js';
-import { ag as RuntimeTurnStreamEvent } from '../workflow-engine-DleSoUhy.js';
+import { A as AgentRuntime } from '../agent-runtime-BJeNjVuk.js';
+import { a as RuntimeTurnStreamEvent } from '../context-BLPsKYxc.js';
 import 'zod';
 
 interface ChannelInput {
@@ -38,6 +38,54 @@ interface WhatsAppAssistantAdapter {
     surface: "whatsapp";
     handleInbound(input: WhatsAppInboundMessage): Promise<ChannelOutput>;
 }
+interface ChannelSessionMapper {
+    getSessionId(input: {
+        tenantId: string;
+        channel: string;
+        senderId: string;
+    }): string | undefined;
+    setSessionId(input: {
+        tenantId: string;
+        channel: string;
+        senderId: string;
+        sessionId: string;
+    }): void;
+}
+interface WhatsAppCloudWebhookInput {
+    rawBody: string;
+    signature: string | undefined;
+    body?: unknown;
+    tenantId: string;
+}
+interface WhatsAppCloudMedia {
+    id: string;
+    type: "image" | "audio" | "video" | "document" | "sticker";
+    mimeType?: string;
+    caption?: string;
+}
+interface WhatsAppCloudMessage {
+    messageId: string;
+    from: string;
+    text: string;
+    profileName?: string;
+    media?: WhatsAppCloudMedia;
+}
+interface WhatsAppCloudAdapterOptions {
+    runtime: AgentRuntime;
+    appSecret: string;
+    tenantId: string;
+    sessionMapper?: ChannelSessionMapper;
+    maxMessagesPerMinutePerSender?: number;
+    optOutKeywords?: string[];
+    optInKeywords?: string[];
+}
+interface WhatsAppCloudWebhookResult {
+    accepted: boolean;
+    duplicate?: boolean;
+    optedOut?: boolean;
+    rateLimited?: boolean;
+    outputs: ChannelOutput[];
+}
 declare function createHttpAssistantAdapter(runtime: AgentRuntime): HttpAssistantAdapter;
 declare function createStreamingHttpAssistantAdapter(runtime: AgentRuntime): StreamingHttpAssistantAdapter;
 declare function createWebhookAssistantAdapter(runtime: AgentRuntime, options?: {
@@ -45,5 +93,35 @@ declare function createWebhookAssistantAdapter(runtime: AgentRuntime, options?:
     surface?: ChannelAdapter["surface"];
 }): ChannelAdapter;
 declare function createWhatsAppAssistantAdapter(runtime: AgentRuntime): WhatsAppAssistantAdapter;
+declare class InMemoryChannelSessionMapper implements ChannelSessionMapper {
+    private readonly sessions;
+    getSessionId(input: {
+        tenantId: string;
+        channel: string;
+        senderId: string;
+    }): string | undefined;
+    setSessionId(input: {
+        tenantId: string;
+        channel: string;
+        senderId: string;
+        sessionId: string;
+    }): void;
+}
+declare class WhatsAppCloudAdapter {
+    private readonly options;
+    private readonly mapper;
+    private readonly processedMessageIds;
+    private readonly optOutSenders;
+    private readonly senderTimestamps;
+    constructor(options: WhatsAppCloudAdapterOptions);
+    validateSignature(rawBody: string, signature: string | undefined): boolean;
+    handleWebhook(input: WhatsAppCloudWebhookInput): Promise<WhatsAppCloudWebhookResult>;
+    private getOrCreateSession;
+    private consumeRateLimit;
+    private isOptOut;
+    private isOptIn;
+}
+declare function createWhatsAppCloudAdapter(options: WhatsAppCloudAdapterOptions): WhatsAppCloudAdapter;
+declare function createInMemoryChannelSessionMapper(): ChannelSessionMapper;
 
-export { type ChannelAdapter, type ChannelInput, type ChannelOutput, type HttpAssistantAdapter, type StreamingHttpAssistantAdapter, type WhatsAppAssistantAdapter, type WhatsAppInboundMessage, createHttpAssistantAdapter, createStreamingHttpAssistantAdapter, createWebhookAssistantAdapter, createWhatsAppAssistantAdapter };
+export { type ChannelAdapter, type ChannelInput, type ChannelOutput, type ChannelSessionMapper, type HttpAssistantAdapter, InMemoryChannelSessionMapper, type StreamingHttpAssistantAdapter, type WhatsAppAssistantAdapter, WhatsAppCloudAdapter, type WhatsAppCloudAdapterOptions, type WhatsAppCloudMedia, type WhatsAppCloudMessage, type WhatsAppCloudWebhookInput, type WhatsAppCloudWebhookResult, type WhatsAppInboundMessage, createHttpAssistantAdapter, createInMemoryChannelSessionMapper, createStreamingHttpAssistantAdapter, createWebhookAssistantAdapter, createWhatsAppAssistantAdapter, createWhatsAppCloudAdapter };

package/dist/adapters/index.js

@@ -1,3 +1,5 @@
+import { createHmac, timingSafeEqual } from 'crypto';
+
 // src/adapters/index.ts
 function createHttpAssistantAdapter(runtime) {
   return {
@@ -60,7 +62,183 @@ function createWhatsAppAssistantAdapter(runtime) {
     }
   };
 }
+var InMemoryChannelSessionMapper = class {
+  sessions = /* @__PURE__ */ new Map();
+  getSessionId(input) {
+    return this.sessions.get(sessionKey(input));
+  }
+  setSessionId(input) {
+    this.sessions.set(sessionKey(input), input.sessionId);
+  }
+};
+var WhatsAppCloudAdapter = class {
+  constructor(options) {
+    this.options = options;
+    this.mapper = options.sessionMapper ?? new InMemoryChannelSessionMapper();
+  }
+  options;
+  mapper;
+  processedMessageIds = /* @__PURE__ */ new Set();
+  optOutSenders = /* @__PURE__ */ new Set();
+  senderTimestamps = /* @__PURE__ */ new Map();
+  validateSignature(rawBody, signature) {
+    if (!signature?.startsWith("sha256=")) return false;
+    const expected = createHmac("sha256", this.options.appSecret).update(rawBody).digest("hex");
+    const actual = signature.slice("sha256=".length);
+    const expectedBuffer = Buffer.from(expected, "hex");
+    const actualBuffer = Buffer.from(actual, "hex");
+    return expectedBuffer.length === actualBuffer.length && timingSafeEqual(expectedBuffer, actualBuffer);
+  }
+  async handleWebhook(input) {
+    if (!this.validateSignature(input.rawBody, input.signature)) {
+      throw new Error("Invalid WhatsApp webhook signature.");
+    }
+    const messages = parseWhatsAppCloudMessages(input.body ?? JSON.parse(input.rawBody));
+    const outputs = [];
+    for (const message of messages) {
+      if (this.processedMessageIds.has(message.messageId)) {
+        return { accepted: true, duplicate: true, outputs };
+      }
+      this.processedMessageIds.add(message.messageId);
+      const senderKey = `${input.tenantId}:${message.from}`;
+      const normalizedText = message.text.trim();
+      if (this.isOptOut(normalizedText)) {
+        this.optOutSenders.add(senderKey);
+        return { accepted: true, optedOut: true, outputs };
+      }
+      if (this.isOptIn(normalizedText)) {
+        this.optOutSenders.delete(senderKey);
+      }
+      if (this.optOutSenders.has(senderKey)) {
+        return { accepted: true, optedOut: true, outputs };
+      }
+      if (!this.consumeRateLimit(senderKey)) {
+        return { accepted: true, rateLimited: true, outputs };
+      }
+      const sessionId = this.getOrCreateSession(input.tenantId, message);
+      const result = await this.options.runtime.runTurn({
+        sessionId,
+        content: normalizedText || mediaFallbackText(message.media),
+        metadata: {
+          surface: "whatsapp",
+          channel: "whatsapp-cloud",
+          tenantId: input.tenantId,
+          phoneNumber: message.from,
+          profileName: message.profileName,
+          messageId: message.messageId,
+          media: message.media
+        }
+      });
+      outputs.push({ sessionId, content: result.content, metadata: { model: result.model } });
+    }
+    return { accepted: true, outputs };
+  }
+  getOrCreateSession(tenantId, message) {
+    const existing = this.mapper.getSessionId({
+      tenantId,
+      channel: "whatsapp-cloud",
+      senderId: message.from
+    });
+    if (existing) return existing;
+    const session = this.options.runtime.createSession({
+      mode: "ask",
+      metadata: {
+        surface: "whatsapp",
+        channel: "whatsapp-cloud",
+        tenantId,
+        phoneNumber: message.from,
+        profileName: message.profileName
+      }
+    });
+    this.mapper.setSessionId({
+      tenantId,
+      channel: "whatsapp-cloud",
+      senderId: message.from,
+      sessionId: session.id
+    });
+    return session.id;
+  }
+  consumeRateLimit(senderKey) {
+    const limit = this.options.maxMessagesPerMinutePerSender;
+    if (!limit) return true;
+    const now = Date.now();
+    const recent = (this.senderTimestamps.get(senderKey) ?? []).filter(
+      (timestamp) => timestamp > now - 6e4
+    );
+    if (recent.length >= limit) {
+      this.senderTimestamps.set(senderKey, recent);
+      return false;
+    }
+    recent.push(now);
+    this.senderTimestamps.set(senderKey, recent);
+    return true;
+  }
+  isOptOut(text) {
+    const keywords = this.options.optOutKeywords ?? ["stop", "unsubscribe", "baja"];
+    return keywords.includes(text.toLowerCase());
+  }
+  isOptIn(text) {
+    const keywords = this.options.optInKeywords ?? ["start", "subscribe", "alta"];
+    return keywords.includes(text.toLowerCase());
+  }
+};
+function createWhatsAppCloudAdapter(options) {
+  return new WhatsAppCloudAdapter(options);
+}
+function createInMemoryChannelSessionMapper() {
+  return new InMemoryChannelSessionMapper();
+}
+function sessionKey(input) {
+  return `${input.tenantId}:${input.channel}:${input.senderId}`;
+}
+function parseWhatsAppCloudMessages(body) {
+  if (!body || typeof body !== "object") return [];
+  const entries = Array.isArray(body.entry) ? body.entry : [];
+  return entries.flatMap((entry) => {
+    const changes = Array.isArray(entry.changes) ? entry.changes : [];
+    return changes.flatMap((change) => {
+      const value = change.value;
+      const contacts = Array.isArray(value?.contacts) ? value.contacts : [];
+      const profileByWaId = new Map(
+        contacts.map((contact) => [
+          contact.wa_id,
+          contact.profile?.name
+        ])
+      );
+      const messages = Array.isArray(value?.messages) ? value.messages : [];
+      return messages.map((message) => normalizeWhatsAppMessage(message, profileByWaId));
+    });
+  });
+}
+function normalizeWhatsAppMessage(message, profileByWaId) {
+  const record = message;
+  const from = String(record["from"] ?? "");
+  const type = String(record["type"] ?? "text");
+  const text = type === "text" ? String(record["text"]?.body ?? "") : "";
+  const media = normalizeMedia(record, type);
+  return {
+    messageId: String(record["id"] ?? ""),
+    from,
+    text: text || media?.caption || "",
+    profileName: profileByWaId.get(from),
+    media
+  };
+}
+function normalizeMedia(record, type) {
+  if (!["image", "audio", "video", "document", "sticker"].includes(type)) return void 0;
+  const mediaRecord = record[type];
+  if (!mediaRecord) return void 0;
+  return {
+    id: String(mediaRecord["id"] ?? ""),
+    type,
+    mimeType: typeof mediaRecord["mime_type"] === "string" ? mediaRecord["mime_type"] : void 0,
+    caption: typeof mediaRecord["caption"] === "string" ? mediaRecord["caption"] : void 0
+  };
+}
+function mediaFallbackText(media) {
+  return media ? `[${media.type}:${media.id}]` : "";
+}
 
-export { createHttpAssistantAdapter, createStreamingHttpAssistantAdapter, createWebhookAssistantAdapter, createWhatsAppAssistantAdapter };
+export { InMemoryChannelSessionMapper, WhatsAppCloudAdapter, createHttpAssistantAdapter, createInMemoryChannelSessionMapper, createStreamingHttpAssistantAdapter, createWebhookAssistantAdapter, createWhatsAppAssistantAdapter, createWhatsAppCloudAdapter };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/adapters/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/adapters/index.ts"],"names":[],"mappings":";AA4CO,SAAS,2BAA2B,OAAA,EAA6C;AACtF,EAAA,OAAO;AAAA,IACL,aAAA,CAAc,QAAA,GAAW,EAAC,EAAG;AAC3B,MAAA,MAAM,UAAU,OAAA,CAAQ,aAAA,CAAc,EAAE,IAAA,EAAM,KAAA,EAAO,UAAU,CAAA;AAC/D,MAAA,OAAO,EAAE,SAAA,EAAW,OAAA,CAAQ,EAAA,EAAG;AAAA,IACjC,CAAA;AAAA,IACA,MAAM,cAAc,KAAA,EAAO;AACzB,MAAA,MAAM,SAAA,GACJ,KAAA,CAAM,SAAA,IAAa,OAAA,CAAQ,aAAA,CAAc,EAAE,IAAA,EAAM,KAAA,EAAO,QAAA,EAAU,KAAA,CAAM,QAAA,EAAU,CAAA,CAAE,EAAA;AACtF,MAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,OAAA,CAAQ;AAAA,QACnC,SAAA;AAAA,QACA,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,UAAU,KAAA,CAAM;AAAA,OACjB,CAAA;AACD,MAAA,OAAO,EAAE,SAAA,EAAW,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,UAAU,EAAE,KAAA,EAAO,MAAA,CAAO,KAAA,EAAM,EAAE;AAAA,IACjF;AAAA,GACF;AACF;AAEO,SAAS,oCACd,OAAA,EAC+B;AAC/B,EAAA,MAAM,IAAA,GAAO,2BAA2B,OAAO,CAAA;AAC/C,EAAA,OAAO;AAAA,IACL,GAAG,IAAA;AAAA,IACH,OAAO,cAAc,KAAA,EAAO;AAC1B,MAAA,MAAM,SAAA,GACJ,KAAA,CAAM,SAAA,IAAa,OAAA,CAAQ,aAAA,CAAc,EAAE,IAAA,EAAM,KAAA,EAAO,QAAA,EAAU,KAAA,CAAM,QAAA,EAAU,CAAA,CAAE,EAAA;AACtF,MAAA,OAAO,QAAQ,UAAA,CAAW;AAAA,QACxB,SAAA;AAAA,QACA,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,UAAU,KAAA,CAAM;AAAA,OACjB,CAAA;AAAA,IACH;AAAA,GACF;AACF;AAEO,SAAS,6BAAA,CACd,OAAA,EACA,OAAA,GAAgE,EAAC,EACjD;AAChB,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,QAAQ,EAAA,IAAM,mBAAA;AAAA,IAClB,OAAA,EAAS,QAAQ,OAAA,IAAW,KAAA;AAAA,IAC5B,MAAM,OAAO,KAAA,EAAO;AAClB,MAAA,MAAM,OAAA,GAAU,2BAA2B,OAAO,CAAA;AAClD,MAAA,OAAO,OAAA,CAAQ,cAAc,KAAK,CAAA;AAAA,IACpC;AAAA,GACF;AACF;AAEO,SAAS,+BAA+B,OAAA,EAAiD;AAC9F,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,UAAA;AAAA,IACT,MAAM,cAAc,KAAA,EAAO;AACzB,MAAA,MAAM,OAAA,GAAU,2BAA2B,OAAO,CAAA;AAClD,MAAA,OAAO,QAAQ,aAAA,CAAc;AAAA,QAC3B,SAAS,KAAA,CAAM,IAAA;AAAA,QACf,QAAQ,KAAA,CAAM,IAAA;AAAA,QACd,QAAA,EAAU;AAAA,UACR,OAAA,EAAS,UAAA;AAAA,UACT,OAAA,EAAS,UAAA;AAAA,UACT,aAAa,KAAA,CAAM,IAAA;AAAA,UACnB,aAAa,KAAA,CAAM,WAAA;AAAA,UACnB,WAAW,KAAA,CAAM,SAAA;AAAA,UACjB,GAAG,KAAA,CAAM;AAAA;AACX,OACD,CAAA;AAAA,IACH;AAAA,GACF;AACF","file":"index.js","sourcesContent":["import type { AgentRuntime } from \"../runtime/agent-runtime.js\";\nimport type { RuntimeTurnStreamEvent } from \"../runtime/types.js\";\n\nexport interface ChannelInput {\n  sessionId?: string;\n  content: string;\n  userId?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface ChannelOutput {\n  sessionId: string;\n  content: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface ChannelAdapter {\n  id: string;\n  surface: \"web\" | \"whatsapp\" | \"slack\" | \"api\" | \"internal\";\n  handle(input: ChannelInput): Promise<ChannelOutput>;\n}\n\nexport interface HttpAssistantAdapter {\n  createSession(metadata?: Record<string, unknown>): { sessionId: string };\n  handleMessage(input: ChannelInput): Promise<ChannelOutput>;\n}\n\nexport interface StreamingHttpAssistantAdapter extends HttpAssistantAdapter {\n  streamMessage(input: ChannelInput): AsyncIterable<RuntimeTurnStreamEvent>;\n}\n\nexport interface WhatsAppInboundMessage {\n  from: string;\n  text: string;\n  messageId?: string;\n  profileName?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface WhatsAppAssistantAdapter {\n  surface: \"whatsapp\";\n  handleInbound(input: WhatsAppInboundMessage): Promise<ChannelOutput>;\n}\n\nexport function createHttpAssistantAdapter(runtime: AgentRuntime): HttpAssistantAdapter {\n  return {\n    createSession(metadata = {}) {\n      const session = runtime.createSession({ mode: \"ask\", metadata });\n      return { sessionId: session.id };\n    },\n    async handleMessage(input) {\n      const sessionId =\n        input.sessionId ?? runtime.createSession({ mode: \"ask\", metadata: input.metadata }).id;\n      const result = await runtime.runTurn({\n        sessionId,\n        content: input.content,\n        metadata: input.metadata,\n      });\n      return { sessionId, content: result.content, metadata: { model: result.model } };\n    },\n  };\n}\n\nexport function createStreamingHttpAssistantAdapter(\n  runtime: AgentRuntime,\n): StreamingHttpAssistantAdapter {\n  const base = createHttpAssistantAdapter(runtime);\n  return {\n    ...base,\n    async *streamMessage(input) {\n      const sessionId =\n        input.sessionId ?? runtime.createSession({ mode: \"ask\", metadata: input.metadata }).id;\n      yield* runtime.streamTurn({\n        sessionId,\n        content: input.content,\n        metadata: input.metadata,\n      });\n    },\n  };\n}\n\nexport function createWebhookAssistantAdapter(\n  runtime: AgentRuntime,\n  options: { id?: string; surface?: ChannelAdapter[\"surface\"] } = {},\n): ChannelAdapter {\n  return {\n    id: options.id ?? \"webhook-assistant\",\n    surface: options.surface ?? \"api\",\n    async handle(input) {\n      const adapter = createHttpAssistantAdapter(runtime);\n      return adapter.handleMessage(input);\n    },\n  };\n}\n\nexport function createWhatsAppAssistantAdapter(runtime: AgentRuntime): WhatsAppAssistantAdapter {\n  return {\n    surface: \"whatsapp\",\n    async handleInbound(input) {\n      const adapter = createHttpAssistantAdapter(runtime);\n      return adapter.handleMessage({\n        content: input.text,\n        userId: input.from,\n        metadata: {\n          surface: \"whatsapp\",\n          channel: \"whatsapp\",\n          phoneNumber: input.from,\n          profileName: input.profileName,\n          messageId: input.messageId,\n          ...input.metadata,\n        },\n      });\n    },\n  };\n}\n"]}
+{"version":3,"sources":["../../src/adapters/index.ts"],"names":[],"mappings":";;;AA+FO,SAAS,2BAA2B,OAAA,EAA6C;AACtF,EAAA,OAAO;AAAA,IACL,aAAA,CAAc,QAAA,GAAW,EAAC,EAAG;AAC3B,MAAA,MAAM,UAAU,OAAA,CAAQ,aAAA,CAAc,EAAE,IAAA,EAAM,KAAA,EAAO,UAAU,CAAA;AAC/D,MAAA,OAAO,EAAE,SAAA,EAAW,OAAA,CAAQ,EAAA,EAAG;AAAA,IACjC,CAAA;AAAA,IACA,MAAM,cAAc,KAAA,EAAO;AACzB,MAAA,MAAM,SAAA,GACJ,KAAA,CAAM,SAAA,IAAa,OAAA,CAAQ,aAAA,CAAc,EAAE,IAAA,EAAM,KAAA,EAAO,QAAA,EAAU,KAAA,CAAM,QAAA,EAAU,CAAA,CAAE,EAAA;AACtF,MAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,OAAA,CAAQ;AAAA,QACnC,SAAA;AAAA,QACA,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,UAAU,KAAA,CAAM;AAAA,OACjB,CAAA;AACD,MAAA,OAAO,EAAE,SAAA,EAAW,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,UAAU,EAAE,KAAA,EAAO,MAAA,CAAO,KAAA,EAAM,EAAE;AAAA,IACjF;AAAA,GACF;AACF;AAEO,SAAS,oCACd,OAAA,EAC+B;AAC/B,EAAA,MAAM,IAAA,GAAO,2BAA2B,OAAO,CAAA;AAC/C,EAAA,OAAO;AAAA,IACL,GAAG,IAAA;AAAA,IACH,OAAO,cAAc,KAAA,EAAO;AAC1B,MAAA,MAAM,SAAA,GACJ,KAAA,CAAM,SAAA,IAAa,OAAA,CAAQ,aAAA,CAAc,EAAE,IAAA,EAAM,KAAA,EAAO,QAAA,EAAU,KAAA,CAAM,QAAA,EAAU,CAAA,CAAE,EAAA;AACtF,MAAA,OAAO,QAAQ,UAAA,CAAW;AAAA,QACxB,SAAA;AAAA,QACA,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,UAAU,KAAA,CAAM;AAAA,OACjB,CAAA;AAAA,IACH;AAAA,GACF;AACF;AAEO,SAAS,6BAAA,CACd,OAAA,EACA,OAAA,GAAgE,EAAC,EACjD;AAChB,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,QAAQ,EAAA,IAAM,mBAAA;AAAA,IAClB,OAAA,EAAS,QAAQ,OAAA,IAAW,KAAA;AAAA,IAC5B,MAAM,OAAO,KAAA,EAAO;AAClB,MAAA,MAAM,OAAA,GAAU,2BAA2B,OAAO,CAAA;AAClD,MAAA,OAAO,OAAA,CAAQ,cAAc,KAAK,CAAA;AAAA,IACpC;AAAA,GACF;AACF;AAEO,SAAS,+BAA+B,OAAA,EAAiD;AAC9F,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,UAAA;AAAA,IACT,MAAM,cAAc,KAAA,EAAO;AACzB,MAAA,MAAM,OAAA,GAAU,2BAA2B,OAAO,CAAA;AAClD,MAAA,OAAO,QAAQ,aAAA,CAAc;AAAA,QAC3B,SAAS,KAAA,CAAM,IAAA;AAAA,QACf,QAAQ,KAAA,CAAM,IAAA;AAAA,QACd,QAAA,EAAU;AAAA,UACR,OAAA,EAAS,UAAA;AAAA,UACT,OAAA,EAAS,UAAA;AAAA,UACT,aAAa,KAAA,CAAM,IAAA;AAAA,UACnB,aAAa,KAAA,CAAM,WAAA;AAAA,UACnB,WAAW,KAAA,CAAM,SAAA;AAAA,UACjB,GAAG,KAAA,CAAM;AAAA;AACX,OACD,CAAA;AAAA,IACH;AAAA,GACF;AACF;AAEO,IAAM,+BAAN,MAAmE;AAAA,EACvD,QAAA,uBAAe,GAAA,EAAoB;AAAA,EAEpD,aAAa,KAAA,EAAoF;AAC/F,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,UAAA,CAAW,KAAK,CAAC,CAAA;AAAA,EAC5C;AAAA,EAEA,aAAa,KAAA,EAKJ;AACP,IAAA,IAAA,CAAK,SAAS,GAAA,CAAI,UAAA,CAAW,KAAK,CAAA,EAAG,MAAM,SAAS,CAAA;AAAA,EACtD;AACF;AAEO,IAAM,uBAAN,MAA2B;AAAA,EAMhC,YAA6B,OAAA,EAAsC;AAAtC,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAC3B,IAAA,IAAA,CAAK,MAAA,GAAS,OAAA,CAAQ,aAAA,IAAiB,IAAI,4BAAA,EAA6B;AAAA,EAC1E;AAAA,EAF6B,OAAA;AAAA,EALZ,MAAA;AAAA,EACA,mBAAA,uBAA0B,GAAA,EAAY;AAAA,EACtC,aAAA,uBAAoB,GAAA,EAAY;AAAA,EAChC,gBAAA,uBAAuB,GAAA,EAAsB;AAAA,EAM9D,iBAAA,CAAkB,SAAiB,SAAA,EAAwC;AACzE,IAAA,IAAI,CAAC,SAAA,EAAW,UAAA,CAAW,SAAS,GAAG,OAAO,KAAA;AAC9C,IAAA,MAAM,QAAA,GAAW,UAAA,CAAW,QAAA,EAAU,IAAA,CAAK,OAAA,CAAQ,SAAS,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA,CAAE,MAAA,CAAO,KAAK,CAAA;AAC1F,IAAA,MAAM,MAAA,GAAS,SAAA,CAAU,KAAA,CAAM,SAAA,CAAU,MAAM,CAAA;AAC/C,IAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,IAAA,CAAK,QAAA,EAAU,KAAK,CAAA;AAClD,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,KAAK,CAAA;AAC9C,IAAA,OACE,eAAe,MAAA,KAAW,YAAA,CAAa,MAAA,IAAU,eAAA,CAAgB,gBAAgB,YAAY,CAAA;AAAA,EAEjG;AAAA,EAEA,MAAM,cAAc,KAAA,EAAuE;AACzF,IAAA,IAAI,CAAC,IAAA,CAAK,iBAAA,CAAkB,MAAM,OAAA,EAAS,KAAA,CAAM,SAAS,CAAA,EAAG;AAC3D,MAAA,MAAM,IAAI,MAAM,qCAAqC,CAAA;AAAA,IACvD;AACA,IAAA,MAAM,QAAA,GAAW,2BAA2B,KAAA,CAAM,IAAA,IAAQ,KAAK,KAAA,CAAM,KAAA,CAAM,OAAO,CAAC,CAAA;AACnF,IAAA,MAAM,UAA2B,EAAC;AAElC,IAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAC9B,MAAA,IAAI,IAAA,CAAK,mBAAA,CAAoB,GAAA,CAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACnD,QAAA,OAAO,EAAE,QAAA,EAAU,IAAA,EAAM,SAAA,EAAW,MAAM,OAAA,EAAQ;AAAA,MACpD;AACA,MAAA,IAAA,CAAK,mBAAA,CAAoB,GAAA,CAAI,OAAA,CAAQ,SAAS,CAAA;AAE9C,MAAA,MAAM,YAAY,CAAA,EAAG,KAAA,CAAM,QAAQ,CAAA,CAAA,EAAI,QAAQ,IAAI,CAAA,CAAA;AACnD,MAAA,MAAM,cAAA,GAAiB,OAAA,CAAQ,IAAA,CAAK,IAAA,EAAK;AACzC,MAAA,IAAI,IAAA,CAAK,QAAA,CAAS,cAAc,CAAA,EAAG;AACjC,QAAA,IAAA,CAAK,aAAA,CAAc,IAAI,SAAS,CAAA;AAChC,QAAA,OAAO,EAAE,QAAA,EAAU,IAAA,EAAM,QAAA,EAAU,MAAM,OAAA,EAAQ;AAAA,MACnD;AACA,MAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,cAAc,CAAA,EAAG;AAChC,QAAA,IAAA,CAAK,aAAA,CAAc,OAAO,SAAS,CAAA;AAAA,MACrC;AACA,MAAA,IAAI,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,SAAS,CAAA,EAAG;AACrC,QAAA,OAAO,EAAE,QAAA,EAAU,IAAA,EAAM,QAAA,EAAU,MAAM,OAAA,EAAQ;AAAA,MACnD;AACA,MAAA,IAAI,CAAC,IAAA,CAAK,gBAAA,CAAiB,SAAS,CAAA,EAAG;AACrC,QAAA,OAAO,EAAE,QAAA,EAAU,IAAA,EAAM,WAAA,EAAa,MAAM,OAAA,EAAQ;AAAA,MACtD;AAEA,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,kBAAA,CAAmB,KAAA,CAAM,UAAU,OAAO,CAAA;AACjE,MAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,OAAA,CAAQ,QAAQ,OAAA,CAAQ;AAAA,QAChD,SAAA;AAAA,QACA,OAAA,EAAS,cAAA,IAAkB,iBAAA,CAAkB,OAAA,CAAQ,KAAK,CAAA;AAAA,QAC1D,QAAA,EAAU;AAAA,UACR,OAAA,EAAS,UAAA;AAAA,UACT,OAAA,EAAS,gBAAA;AAAA,UACT,UAAU,KAAA,CAAM,QAAA;AAAA,UAChB,aAAa,OAAA,CAAQ,IAAA;AAAA,UACrB,aAAa,OAAA,CAAQ,WAAA;AAAA,UACrB,WAAW,OAAA,CAAQ,SAAA;AAAA,UACnB,OAAO,OAAA,CAAQ;AAAA;AACjB,OACD,CAAA;AACD,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,SAAA,EAAW,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,QAAA,EAAU,EAAE,KAAA,EAAO,MAAA,CAAO,KAAA,EAAM,EAAG,CAAA;AAAA,IACxF;AAEA,IAAA,OAAO,EAAE,QAAA,EAAU,IAAA,EAAM,OAAA,EAAQ;AAAA,EACnC;AAAA,EAEQ,kBAAA,CAAmB,UAAkB,OAAA,EAAuC;AAClF,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,MAAA,CAAO,YAAA,CAAa;AAAA,MACxC,QAAA;AAAA,MACA,OAAA,EAAS,gBAAA;AAAA,MACT,UAAU,OAAA,CAAQ;AAAA,KACnB,CAAA;AACD,IAAA,IAAI,UAAU,OAAO,QAAA;AACrB,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,aAAA,CAAc;AAAA,MACjD,IAAA,EAAM,KAAA;AAAA,MACN,QAAA,EAAU;AAAA,QACR,OAAA,EAAS,UAAA;AAAA,QACT,OAAA,EAAS,gBAAA;AAAA,QACT,QAAA;AAAA,QACA,aAAa,OAAA,CAAQ,IAAA;AAAA,QACrB,aAAa,OAAA,CAAQ;AAAA;AACvB,KACD,CAAA;AACD,IAAA,IAAA,CAAK,OAAO,YAAA,CAAa;AAAA,MACvB,QAAA;AAAA,MACA,OAAA,EAAS,gBAAA;AAAA,MACT,UAAU,OAAA,CAAQ,IAAA;AAAA,MAClB,WAAW,OAAA,CAAQ;AAAA,KACpB,CAAA;AACD,IAAA,OAAO,OAAA,CAAQ,EAAA;AAAA,EACjB;AAAA,EAEQ,iBAAiB,SAAA,EAA4B;AACnD,IAAA,MAAM,KAAA,GAAQ,KAAK,OAAA,CAAQ,6BAAA;AAC3B,IAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,MAAM,UAAU,IAAA,CAAK,gBAAA,CAAiB,IAAI,SAAS,CAAA,IAAK,EAAC,EAAG,MAAA;AAAA,MAC1D,CAAC,SAAA,KAAc,SAAA,GAAY,GAAA,GAAM;AAAA,KACnC;AACA,IAAA,IAAI,MAAA,CAAO,UAAU,KAAA,EAAO;AAC1B,MAAA,IAAA,CAAK,gBAAA,CAAiB,GAAA,CAAI,SAAA,EAAW,MAAM,CAAA;AAC3C,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,MAAA,CAAO,KAAK,GAAG,CAAA;AACf,IAAA,IAAA,CAAK,gBAAA,CAAiB,GAAA,CAAI,SAAA,EAAW,MAAM,CAAA;AAC3C,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEQ,SAAS,IAAA,EAAuB;AACtC,IAAA,MAAM,WAAW,IAAA,CAAK,OAAA,CAAQ,kBAAkB,CAAC,MAAA,EAAQ,eAAe,MAAM,CAAA;AAC9E,IAAA,OAAO,QAAA,CAAS,QAAA,CAAS,IAAA,CAAK,WAAA,EAAa,CAAA;AAAA,EAC7C;AAAA,EAEQ,QAAQ,IAAA,EAAuB;AACrC,IAAA,MAAM,WAAW,IAAA,CAAK,OAAA,CAAQ,iBAAiB,CAAC,OAAA,EAAS,aAAa,MAAM,CAAA;AAC5E,IAAA,OAAO,QAAA,CAAS,QAAA,CAAS,IAAA,CAAK,WAAA,EAAa,CAAA;AAAA,EAC7C;AACF;AAEO,SAAS,2BACd,OAAA,EACsB;AACtB,EAAA,OAAO,IAAI,qBAAqB,OAAO,CAAA;AACzC;AAEO,SAAS,kCAAA,GAA2D;AACzE,EAAA,OAAO,IAAI,4BAAA,EAA6B;AAC1C;AAEA,SAAS,WAAW,KAAA,EAAwE;AAC1F,EAAA,OAAO,CAAA,EAAG,MAAM,QAAQ,CAAA,CAAA,EAAI,MAAM,OAAO,CAAA,CAAA,EAAI,MAAM,QAAQ,CAAA,CAAA;AAC7D;AAEA,SAAS,2BAA2B,IAAA,EAAuC;AACzE,EAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,SAAiB,EAAC;AAC/C,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAS,IAAA,CAA+B,KAAK,CAAA,GAC9D,IAAA,CAA8B,QAC/B,EAAC;AACL,EAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,KAAU;AAChC,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAS,KAAA,CAAkC,OAAO,CAAA,GACnE,KAAA,CAAiC,UAClC,EAAC;AACL,IAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,CAAC,MAAA,KAAW;AACjC,MAAA,MAAM,QAAS,MAAA,CAAsE,KAAA;AACrF,MAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,KAAA,EAAO,QAAQ,CAAA,GAAI,KAAA,CAAM,WAAW,EAAC;AACpE,MAAA,MAAM,gBAAgB,IAAI,GAAA;AAAA,QACxB,QAAA,CAAS,GAAA,CAAI,CAAC,OAAA,KAAY;AAAA,UACvB,OAAA,CAA+B,KAAA;AAAA,UAC/B,QAA4C,OAAA,EAAS;AAAA,SACvD;AAAA,OACH;AACA,MAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,KAAA,EAAO,QAAQ,CAAA,GAAI,KAAA,CAAM,WAAW,EAAC;AACpE,MAAA,OAAO,SAAS,GAAA,CAAI,CAAC,YAAY,wBAAA,CAAyB,OAAA,EAAS,aAAa,CAAC,CAAA;AAAA,IACnF,CAAC,CAAA;AAAA,EACH,CAAC,CAAA;AACH;AAEA,SAAS,wBAAA,CACP,SACA,aAAA,EACsB;AACtB,EAAA,MAAM,MAAA,GAAS,OAAA;AACf,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,MAAA,CAAO,MAAM,KAAK,EAAE,CAAA;AACxC,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,MAAA,CAAO,MAAM,KAAK,MAAM,CAAA;AAC5C,EAAA,MAAM,IAAA,GAAO,SAAS,MAAA,GAAS,MAAA,CAAQ,OAAO,MAAM,CAAA,EAA0B,IAAA,IAAQ,EAAE,CAAA,GAAI,EAAA;AAC5F,EAAA,MAAM,KAAA,GAAQ,cAAA,CAAe,MAAA,EAAQ,IAAI,CAAA;AACzC,EAAA,OAAO;AAAA,IACL,SAAA,EAAW,MAAA,CAAO,MAAA,CAAO,IAAI,KAAK,EAAE,CAAA;AAAA,IACpC,IAAA;AAAA,IACA,IAAA,EAAM,IAAA,IAAQ,KAAA,EAAO,OAAA,IAAW,EAAA;AAAA,IAChC,WAAA,EAAa,aAAA,CAAc,GAAA,CAAI,IAAI,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,cAAA,CACP,QACA,IAAA,EACgC;AAChC,EAAA,IAAI,CAAC,CAAC,OAAA,EAAS,OAAA,EAAS,OAAA,EAAS,UAAA,EAAY,SAAS,CAAA,CAAE,QAAA,CAAS,IAAI,CAAA,EAAG,OAAO,MAAA;AAC/E,EAAA,MAAM,WAAA,GAAc,OAAO,IAAI,CAAA;AAC/B,EAAA,IAAI,CAAC,aAAa,OAAO,MAAA;AACzB,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,MAAA,CAAO,WAAA,CAAY,IAAI,KAAK,EAAE,CAAA;AAAA,IAClC,IAAA;AAAA,IACA,QAAA,EAAU,OAAO,WAAA,CAAY,WAAW,MAAM,QAAA,GAAW,WAAA,CAAY,WAAW,CAAA,GAAI,MAAA;AAAA,IACpF,OAAA,EAAS,OAAO,WAAA,CAAY,SAAS,MAAM,QAAA,GAAW,WAAA,CAAY,SAAS,CAAA,GAAI;AAAA,GACjF;AACF;AAEA,SAAS,kBAAkB,KAAA,EAA+C;AACxE,EAAA,OAAO,QAAQ,CAAA,CAAA,EAAI,KAAA,CAAM,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,EAAE,CAAA,CAAA,CAAA,GAAM,EAAA;AACjD","file":"index.js","sourcesContent":["import { createHmac, timingSafeEqual } from \"node:crypto\";\nimport type { AgentRuntime } from \"../runtime/agent-runtime.js\";\nimport type { RuntimeTurnStreamEvent } from \"../runtime/types.js\";\n\nexport interface ChannelInput {\n  sessionId?: string;\n  content: string;\n  userId?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface ChannelOutput {\n  sessionId: string;\n  content: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface ChannelAdapter {\n  id: string;\n  surface: \"web\" | \"whatsapp\" | \"slack\" | \"api\" | \"internal\";\n  handle(input: ChannelInput): Promise<ChannelOutput>;\n}\n\nexport interface HttpAssistantAdapter {\n  createSession(metadata?: Record<string, unknown>): { sessionId: string };\n  handleMessage(input: ChannelInput): Promise<ChannelOutput>;\n}\n\nexport interface StreamingHttpAssistantAdapter extends HttpAssistantAdapter {\n  streamMessage(input: ChannelInput): AsyncIterable<RuntimeTurnStreamEvent>;\n}\n\nexport interface WhatsAppInboundMessage {\n  from: string;\n  text: string;\n  messageId?: string;\n  profileName?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface WhatsAppAssistantAdapter {\n  surface: \"whatsapp\";\n  handleInbound(input: WhatsAppInboundMessage): Promise<ChannelOutput>;\n}\n\nexport interface ChannelSessionMapper {\n  getSessionId(input: { tenantId: string; channel: string; senderId: string }): string | undefined;\n  setSessionId(input: {\n    tenantId: string;\n    channel: string;\n    senderId: string;\n    sessionId: string;\n  }): void;\n}\n\nexport interface WhatsAppCloudWebhookInput {\n  rawBody: string;\n  signature: string | undefined;\n  body?: unknown;\n  tenantId: string;\n}\n\nexport interface WhatsAppCloudMedia {\n  id: string;\n  type: \"image\" | \"audio\" | \"video\" | \"document\" | \"sticker\";\n  mimeType?: string;\n  caption?: string;\n}\n\nexport interface WhatsAppCloudMessage {\n  messageId: string;\n  from: string;\n  text: string;\n  profileName?: string;\n  media?: WhatsAppCloudMedia;\n}\n\nexport interface WhatsAppCloudAdapterOptions {\n  runtime: AgentRuntime;\n  appSecret: string;\n  tenantId: string;\n  sessionMapper?: ChannelSessionMapper;\n  maxMessagesPerMinutePerSender?: number;\n  optOutKeywords?: string[];\n  optInKeywords?: string[];\n}\n\nexport interface WhatsAppCloudWebhookResult {\n  accepted: boolean;\n  duplicate?: boolean;\n  optedOut?: boolean;\n  rateLimited?: boolean;\n  outputs: ChannelOutput[];\n}\n\nexport function createHttpAssistantAdapter(runtime: AgentRuntime): HttpAssistantAdapter {\n  return {\n    createSession(metadata = {}) {\n      const session = runtime.createSession({ mode: \"ask\", metadata });\n      return { sessionId: session.id };\n    },\n    async handleMessage(input) {\n      const sessionId =\n        input.sessionId ?? runtime.createSession({ mode: \"ask\", metadata: input.metadata }).id;\n      const result = await runtime.runTurn({\n        sessionId,\n        content: input.content,\n        metadata: input.metadata,\n      });\n      return { sessionId, content: result.content, metadata: { model: result.model } };\n    },\n  };\n}\n\nexport function createStreamingHttpAssistantAdapter(\n  runtime: AgentRuntime,\n): StreamingHttpAssistantAdapter {\n  const base = createHttpAssistantAdapter(runtime);\n  return {\n    ...base,\n    async *streamMessage(input) {\n      const sessionId =\n        input.sessionId ?? runtime.createSession({ mode: \"ask\", metadata: input.metadata }).id;\n      yield* runtime.streamTurn({\n        sessionId,\n        content: input.content,\n        metadata: input.metadata,\n      });\n    },\n  };\n}\n\nexport function createWebhookAssistantAdapter(\n  runtime: AgentRuntime,\n  options: { id?: string; surface?: ChannelAdapter[\"surface\"] } = {},\n): ChannelAdapter {\n  return {\n    id: options.id ?? \"webhook-assistant\",\n    surface: options.surface ?? \"api\",\n    async handle(input) {\n      const adapter = createHttpAssistantAdapter(runtime);\n      return adapter.handleMessage(input);\n    },\n  };\n}\n\nexport function createWhatsAppAssistantAdapter(runtime: AgentRuntime): WhatsAppAssistantAdapter {\n  return {\n    surface: \"whatsapp\",\n    async handleInbound(input) {\n      const adapter = createHttpAssistantAdapter(runtime);\n      return adapter.handleMessage({\n        content: input.text,\n        userId: input.from,\n        metadata: {\n          surface: \"whatsapp\",\n          channel: \"whatsapp\",\n          phoneNumber: input.from,\n          profileName: input.profileName,\n          messageId: input.messageId,\n          ...input.metadata,\n        },\n      });\n    },\n  };\n}\n\nexport class InMemoryChannelSessionMapper implements ChannelSessionMapper {\n  private readonly sessions = new Map<string, string>();\n\n  getSessionId(input: { tenantId: string; channel: string; senderId: string }): string | undefined {\n    return this.sessions.get(sessionKey(input));\n  }\n\n  setSessionId(input: {\n    tenantId: string;\n    channel: string;\n    senderId: string;\n    sessionId: string;\n  }): void {\n    this.sessions.set(sessionKey(input), input.sessionId);\n  }\n}\n\nexport class WhatsAppCloudAdapter {\n  private readonly mapper: ChannelSessionMapper;\n  private readonly processedMessageIds = new Set<string>();\n  private readonly optOutSenders = new Set<string>();\n  private readonly senderTimestamps = new Map<string, number[]>();\n\n  constructor(private readonly options: WhatsAppCloudAdapterOptions) {\n    this.mapper = options.sessionMapper ?? new InMemoryChannelSessionMapper();\n  }\n\n  validateSignature(rawBody: string, signature: string | undefined): boolean {\n    if (!signature?.startsWith(\"sha256=\")) return false;\n    const expected = createHmac(\"sha256\", this.options.appSecret).update(rawBody).digest(\"hex\");\n    const actual = signature.slice(\"sha256=\".length);\n    const expectedBuffer = Buffer.from(expected, \"hex\");\n    const actualBuffer = Buffer.from(actual, \"hex\");\n    return (\n      expectedBuffer.length === actualBuffer.length && timingSafeEqual(expectedBuffer, actualBuffer)\n    );\n  }\n\n  async handleWebhook(input: WhatsAppCloudWebhookInput): Promise<WhatsAppCloudWebhookResult> {\n    if (!this.validateSignature(input.rawBody, input.signature)) {\n      throw new Error(\"Invalid WhatsApp webhook signature.\");\n    }\n    const messages = parseWhatsAppCloudMessages(input.body ?? JSON.parse(input.rawBody));\n    const outputs: ChannelOutput[] = [];\n\n    for (const message of messages) {\n      if (this.processedMessageIds.has(message.messageId)) {\n        return { accepted: true, duplicate: true, outputs };\n      }\n      this.processedMessageIds.add(message.messageId);\n\n      const senderKey = `${input.tenantId}:${message.from}`;\n      const normalizedText = message.text.trim();\n      if (this.isOptOut(normalizedText)) {\n        this.optOutSenders.add(senderKey);\n        return { accepted: true, optedOut: true, outputs };\n      }\n      if (this.isOptIn(normalizedText)) {\n        this.optOutSenders.delete(senderKey);\n      }\n      if (this.optOutSenders.has(senderKey)) {\n        return { accepted: true, optedOut: true, outputs };\n      }\n      if (!this.consumeRateLimit(senderKey)) {\n        return { accepted: true, rateLimited: true, outputs };\n      }\n\n      const sessionId = this.getOrCreateSession(input.tenantId, message);\n      const result = await this.options.runtime.runTurn({\n        sessionId,\n        content: normalizedText || mediaFallbackText(message.media),\n        metadata: {\n          surface: \"whatsapp\",\n          channel: \"whatsapp-cloud\",\n          tenantId: input.tenantId,\n          phoneNumber: message.from,\n          profileName: message.profileName,\n          messageId: message.messageId,\n          media: message.media,\n        },\n      });\n      outputs.push({ sessionId, content: result.content, metadata: { model: result.model } });\n    }\n\n    return { accepted: true, outputs };\n  }\n\n  private getOrCreateSession(tenantId: string, message: WhatsAppCloudMessage): string {\n    const existing = this.mapper.getSessionId({\n      tenantId,\n      channel: \"whatsapp-cloud\",\n      senderId: message.from,\n    });\n    if (existing) return existing;\n    const session = this.options.runtime.createSession({\n      mode: \"ask\",\n      metadata: {\n        surface: \"whatsapp\",\n        channel: \"whatsapp-cloud\",\n        tenantId,\n        phoneNumber: message.from,\n        profileName: message.profileName,\n      },\n    });\n    this.mapper.setSessionId({\n      tenantId,\n      channel: \"whatsapp-cloud\",\n      senderId: message.from,\n      sessionId: session.id,\n    });\n    return session.id;\n  }\n\n  private consumeRateLimit(senderKey: string): boolean {\n    const limit = this.options.maxMessagesPerMinutePerSender;\n    if (!limit) return true;\n    const now = Date.now();\n    const recent = (this.senderTimestamps.get(senderKey) ?? []).filter(\n      (timestamp) => timestamp > now - 60_000,\n    );\n    if (recent.length >= limit) {\n      this.senderTimestamps.set(senderKey, recent);\n      return false;\n    }\n    recent.push(now);\n    this.senderTimestamps.set(senderKey, recent);\n    return true;\n  }\n\n  private isOptOut(text: string): boolean {\n    const keywords = this.options.optOutKeywords ?? [\"stop\", \"unsubscribe\", \"baja\"];\n    return keywords.includes(text.toLowerCase());\n  }\n\n  private isOptIn(text: string): boolean {\n    const keywords = this.options.optInKeywords ?? [\"start\", \"subscribe\", \"alta\"];\n    return keywords.includes(text.toLowerCase());\n  }\n}\n\nexport function createWhatsAppCloudAdapter(\n  options: WhatsAppCloudAdapterOptions,\n): WhatsAppCloudAdapter {\n  return new WhatsAppCloudAdapter(options);\n}\n\nexport function createInMemoryChannelSessionMapper(): ChannelSessionMapper {\n  return new InMemoryChannelSessionMapper();\n}\n\nfunction sessionKey(input: { tenantId: string; channel: string; senderId: string }): string {\n  return `${input.tenantId}:${input.channel}:${input.senderId}`;\n}\n\nfunction parseWhatsAppCloudMessages(body: unknown): WhatsAppCloudMessage[] {\n  if (!body || typeof body !== \"object\") return [];\n  const entries = Array.isArray((body as { entry?: unknown[] }).entry)\n    ? (body as { entry: unknown[] }).entry\n    : [];\n  return entries.flatMap((entry) => {\n    const changes = Array.isArray((entry as { changes?: unknown[] }).changes)\n      ? (entry as { changes: unknown[] }).changes\n      : [];\n    return changes.flatMap((change) => {\n      const value = (change as { value?: { messages?: unknown[]; contacts?: unknown[] } }).value;\n      const contacts = Array.isArray(value?.contacts) ? value.contacts : [];\n      const profileByWaId = new Map(\n        contacts.map((contact) => [\n          (contact as { wa_id?: string }).wa_id,\n          (contact as { profile?: { name?: string } }).profile?.name,\n        ]),\n      );\n      const messages = Array.isArray(value?.messages) ? value.messages : [];\n      return messages.map((message) => normalizeWhatsAppMessage(message, profileByWaId));\n    });\n  });\n}\n\nfunction normalizeWhatsAppMessage(\n  message: unknown,\n  profileByWaId: Map<string | undefined, string | undefined>,\n): WhatsAppCloudMessage {\n  const record = message as Record<string, unknown>;\n  const from = String(record[\"from\"] ?? \"\");\n  const type = String(record[\"type\"] ?? \"text\");\n  const text = type === \"text\" ? String((record[\"text\"] as { body?: unknown })?.body ?? \"\") : \"\";\n  const media = normalizeMedia(record, type);\n  return {\n    messageId: String(record[\"id\"] ?? \"\"),\n    from,\n    text: text || media?.caption || \"\",\n    profileName: profileByWaId.get(from),\n    media,\n  };\n}\n\nfunction normalizeMedia(\n  record: Record<string, unknown>,\n  type: string,\n): WhatsAppCloudMedia | undefined {\n  if (![\"image\", \"audio\", \"video\", \"document\", \"sticker\"].includes(type)) return undefined;\n  const mediaRecord = record[type] as Record<string, unknown> | undefined;\n  if (!mediaRecord) return undefined;\n  return {\n    id: String(mediaRecord[\"id\"] ?? \"\"),\n    type: type as WhatsAppCloudMedia[\"type\"],\n    mimeType: typeof mediaRecord[\"mime_type\"] === \"string\" ? mediaRecord[\"mime_type\"] : undefined,\n    caption: typeof mediaRecord[\"caption\"] === \"string\" ? mediaRecord[\"caption\"] : undefined,\n  };\n}\n\nfunction mediaFallbackText(media: WhatsAppCloudMedia | undefined): string {\n  return media ? `[${media.type}:${media.id}]` : \"\";\n}\n"]}

package/dist/{agent-runtime-Cd6pB640.d.ts → agent-runtime-BJeNjVuk.d.ts}

@@ -1,4 +1,4 @@
-import { b8 as ProviderCatalogEntry, b7 as ProviderType, b9 as ModelCatalogEntry, ba as ProviderRuntimeCapability, P as ProviderConfig, L as LLMProvider, bb as ProviderProbeResult, ap as ToolRegistry, a8 as RuntimeSessionStore, aw as WorkflowEngine, Y as PermissionPolicy, T as EventLog, af as RuntimeTurnRunner, I as AgentRuntimeOptions, J as AgentRuntimeSnapshot, a7 as RuntimeSessionCreateOptions, a6 as RuntimeSession, ad as RuntimeTurnInput, ae as RuntimeTurnResult, ag as RuntimeTurnStreamEvent, aa as RuntimeToolExecutionInput, ab as RuntimeToolExecutionResult, a3 as RuntimeMode } from './workflow-engine-DleSoUhy.js';
+import { h as ProviderCatalogEntry, P as ProviderType, M as ModelCatalogEntry, i as ProviderRuntimeCapability, b as ProviderConfig, L as LLMProvider, j as ProviderProbeResult, T as ToolRegistry, k as RuntimeSessionStore, W as WorkflowEngine, l as PermissionPolicy, E as EventLog, c as RuntimeTurnRunner, A as AgentRuntimeOptions, m as AgentRuntimeSnapshot, n as RuntimeSessionCreateOptions, e as RuntimeSession, o as createRetentionCutoffs, f as RuntimeTurnInput, g as RuntimeTurnResult, a as RuntimeTurnStreamEvent, p as RuntimeToolExecutionInput, q as RuntimeToolExecutionResult, r as RuntimeMode } from './context-BLPsKYxc.js';
 
 /** Catalog-backed provider/model registry used by runtime consumers. */
 declare class ProviderRegistry {
@@ -14,6 +14,16 @@ declare class ProviderRegistry {
 }
 declare function createProviderRegistry(): ProviderRegistry;
 
+interface RuntimeRetentionCleanupOptions {
+    dryRun?: boolean;
+    now?: Date;
+}
+interface RuntimeRetentionCleanupResult {
+    dryRun: boolean;
+    cutoffs: ReturnType<typeof createRetentionCutoffs>;
+    expiredSessionIds: string[];
+    deletedSessionIds: string[];
+}
 /**
  * Reusable runtime facade for wiring providers, tools, permissions, sessions,
  * and observability. It does not own the CLI loop; CLI/headless are adapters on
@@ -34,6 +44,9 @@ declare class AgentRuntime {
     private provider?;
     private readonly runtimeContext?;
     private readonly runtimePolicy?;
+    private readonly runtimeHostMode;
+    private readonly requestTimestampsBySubject;
+    private activeRuns;
     constructor(options: AgentRuntimeOptions);
     initialize(): Promise<void>;
     getModel(): string;
@@ -43,11 +56,16 @@ declare class AgentRuntime {
     createSession(options?: RuntimeSessionCreateOptions): RuntimeSession;
     getSession(sessionId: string): RuntimeSession | undefined;
     listSessions(): RuntimeSession[];
+    cleanupRetention(options?: RuntimeRetentionCleanupOptions): RuntimeRetentionCleanupResult;
     runTurn(input: RuntimeTurnInput): Promise<RuntimeTurnResult>;
     streamTurn(input: RuntimeTurnInput): AsyncIterable<RuntimeTurnStreamEvent>;
     executeTool(input: RuntimeToolExecutionInput): Promise<RuntimeToolExecutionResult>;
     assertToolAllowed(mode: RuntimeMode, toolName: string, input?: Record<string, unknown>): boolean;
+    private beginRuntimeRequest;
+    private assertWithinRateLimit;
+    private assertWithinConcurrencyLimit;
+    private estimateTurnCost;
 }
 declare function createAgentRuntime(options: AgentRuntimeOptions): Promise<AgentRuntime>;
 
-export { AgentRuntime as A, ProviderRegistry as P, createProviderRegistry as a, createAgentRuntime as c };
+export { AgentRuntime as A, ProviderRegistry as P, type RuntimeRetentionCleanupOptions as R, type RuntimeRetentionCleanupResult as a, createProviderRegistry as b, createAgentRuntime as c };

package/dist/{blueprints-Dmdaw6_I.d.ts → blueprints-Dw5-uWU9.d.ts}

@@ -1,9 +1,10 @@
-import { b7 as ProviderType, P as ProviderConfig, L as LLMProvider, ap as ToolRegistry, T as EventLog, af as RuntimeTurnRunner, a5 as RuntimeRequestContext, a4 as RuntimePolicy, a6 as RuntimeSession, ad as RuntimeTurnInput, ae as RuntimeTurnResult } from './workflow-engine-DleSoUhy.js';
-import { A as AgentRuntime } from './agent-runtime-Cd6pB640.js';
+import { P as ProviderType, b as ProviderConfig, L as LLMProvider, T as ToolRegistry, E as EventLog, c as RuntimeTurnRunner, R as RuntimeRequestContext, d as RuntimePolicy, e as RuntimeSession, f as RuntimeTurnInput, g as RuntimeTurnResult } from './context-BLPsKYxc.js';
+import { A as AgentRuntime } from './agent-runtime-BJeNjVuk.js';
 import { z } from 'zod';
 
 type GuardrailSeverity = "info" | "warning" | "blocked";
-type GuardrailStage = "input" | "output" | "tool";
+type GuardrailStage = "input" | "retrieved-document" | "tool-input" | "tool-output" | "final-output" | "output" | "tool";
+type GuardrailAction = "allow" | "warn" | "block";
 interface GuardrailFinding {
     id: string;
     stage: GuardrailStage;
@@ -29,7 +30,29 @@ interface GuardrailConfig {
     maxOutputChars?: number;
     secretRedaction?: SecretRedactionConfig;
     promptInjectionDetection?: boolean;
+    promptInjectionAction?: GuardrailAction;
     topicBoundary?: TopicBoundaryConfig;
+    policyProvider?: PolicyAsCodeProvider;
+}
+interface PolicyAsCodeProvider {
+    evaluate(input: {
+        stage: GuardrailStage;
+        content: string;
+        findings: GuardrailFinding[];
+    }): Promise<GuardrailFinding[]> | GuardrailFinding[];
+}
+interface GuardrailPipelineStep {
+    stage: GuardrailStage;
+    content: string;
+    config?: GuardrailConfig;
+}
+interface GuardrailPipelineResult {
+    allowed: boolean;
+    outputs: Array<{
+        stage: GuardrailStage;
+        content: string;
+    }>;
+    findings: GuardrailFinding[];
 }
 declare const defaultPublicGuardrails: GuardrailConfig;
 declare function redactSecrets(content: string, config?: SecretRedactionConfig): {
@@ -37,6 +60,7 @@ declare function redactSecrets(content: string, config?: SecretRedactionConfig):
     findings: GuardrailFinding[];
 };
 declare function runGuardrails(stage: GuardrailStage, content: string, config?: GuardrailConfig): GuardrailResult;
+declare function runGuardrailPipeline(steps: GuardrailPipelineStep[], config?: GuardrailConfig): Promise<GuardrailPipelineResult>;
 declare function validateStructuredOutput(output: unknown, schema: z.ZodTypeAny | undefined): GuardrailFinding[];
 
 type AgentDeploymentSurface = "cli" | "web" | "whatsapp" | "slack" | "api" | "internal";
@@ -98,4 +122,4 @@ declare function createSafeToolRegistry(allowedTools: string[], source?: ToolReg
 declare function createAgentFromBlueprint(blueprint: AgentBlueprint, options: AgentRuntimeFactoryOptions): Promise<BlueprintAgent>;
 declare function createBaseBlueprint(input: Omit<AgentBlueprint, "guardrails" | "memory" | "approval" | "observability"> & Partial<Pick<AgentBlueprint, "guardrails" | "memory" | "approval" | "observability">>): AgentBlueprint;
 
-export { type AgentActionMode as A, type BlueprintAgent as B, type GuardrailConfig as G, type MemoryConfig as M, type ObservabilityConfig as O, type SecretRedactionConfig as S, type TopicBoundaryConfig as T, type AgentBlueprint as a, type AgentDeploymentSurface as b, type AgentMaturity as c, type AgentPreset as d, type AgentRuntimeFactoryOptions as e, type ApprovalPolicy as f, type GuardrailFinding as g, type GuardrailResult as h, type GuardrailSeverity as i, type GuardrailStage as j, createAgentFromBlueprint as k, createBaseBlueprint as l, createSafeToolRegistry as m, defaultPublicGuardrails as n, mapActionModeToRuntimeMode as o, runGuardrails as p, redactSecrets as r, validateStructuredOutput as v };
+export { type AgentPreset as A, type BlueprintAgent as B, type GuardrailAction as G, type MemoryConfig as M, type ObservabilityConfig as O, type PolicyAsCodeProvider as P, type SecretRedactionConfig as S, type TopicBoundaryConfig as T, type AgentActionMode as a, type AgentBlueprint as b, type AgentDeploymentSurface as c, type AgentMaturity as d, type AgentRuntimeFactoryOptions as e, type ApprovalPolicy as f, type GuardrailConfig as g, type GuardrailFinding as h, type GuardrailPipelineResult as i, type GuardrailPipelineStep as j, type GuardrailResult as k, type GuardrailSeverity as l, type GuardrailStage as m, createAgentFromBlueprint as n, createBaseBlueprint as o, createSafeToolRegistry as p, defaultPublicGuardrails as q, mapActionModeToRuntimeMode as r, redactSecrets as s, runGuardrailPipeline as t, runGuardrails as u, validateStructuredOutput as v };