@desplega.ai/agent-swarm 1.149.1 → 1.151.0

package/dist/cli-j4d4f6hv.js

@@ -1,338 +0,0 @@
-import {
-  getDbClient,
-  getKv,
-  incrKv,
-  init_db,
-  upsertKv
-} from "./cli-qgd4sqz5.js";
-
-// src/be/users.ts
-init_db();
-import { createHash, randomBytes, randomUUID } from "node:crypto";
-function actorString(actor) {
-  return `${actor.kind}:${actor.id}`;
-}
-function rowToUser(row) {
-  return {
-    id: row.id,
-    name: row.name,
-    email: row.email ?? undefined,
-    role: row.role ?? undefined,
-    notes: row.notes ?? undefined,
-    emailAliases: row.emailAliases ? JSON.parse(row.emailAliases) : [],
-    preferredChannel: row.preferredChannel ?? "slack",
-    timezone: row.timezone ?? undefined,
-    metadata: row.metadata ? JSON.parse(row.metadata) : undefined,
-    dailyBudgetUsd: row.dailyBudgetUsd ?? null,
-    status: row.status ?? "active",
-    createdAt: row.createdAt,
-    lastUpdatedAt: row.lastUpdatedAt
-  };
-}
-async function findUserById(id) {
-  const row = await getDbClient().get("SELECT * FROM users WHERE id = ?", [id]);
-  return row ? rowToUser(row) : null;
-}
-async function findUserByExternalId(kind, externalId) {
-  const row = await getDbClient().get(`SELECT u.* FROM users u
-       INNER JOIN user_external_ids x ON x.userId = u.id
-       WHERE x.kind = ? AND x.externalId = ?`, [kind, externalId]);
-  return row ? rowToUser(row) : null;
-}
-async function findUserByEmail(email) {
-  const lower = email.toLowerCase();
-  const db = getDbClient();
-  const primary = await db.get("SELECT * FROM users WHERE LOWER(email) = LOWER(?)", [
-    email
-  ]);
-  if (primary)
-    return rowToUser(primary);
-  const aliasRows = await db.query("SELECT * FROM users WHERE emailAliases IS NOT NULL AND emailAliases != '[]'");
-  for (const r of aliasRows) {
-    const aliases = r.emailAliases ? JSON.parse(r.emailAliases) : [];
-    if (aliases.some((a) => a.toLowerCase() === lower)) {
-      return rowToUser(r);
-    }
-  }
-  return null;
-}
-async function findUsersByName(name) {
-  const trimmed = name.trim();
-  if (!trimmed)
-    return [];
-  const client = getDbClient();
-  const exact = await client.query("SELECT * FROM users WHERE LOWER(name) = LOWER(?)", [
-    trimmed
-  ]);
-  if (exact.length > 0)
-    return exact.map(rowToUser);
-  const firstToken = trimmed.split(/\s+/)[0] ?? trimmed;
-  const prefixed = await client.query("SELECT * FROM users WHERE LOWER(name) LIKE LOWER(?) || '%'", [firstToken]);
-  return prefixed.map(rowToUser);
-}
-async function getUserIdentities(userId) {
-  return getDbClient().query("SELECT kind, externalId FROM user_external_ids WHERE userId = ? ORDER BY kind, externalId", [userId]);
-}
-function rowToEvent(row) {
-  return {
-    id: row.id,
-    userId: row.userId,
-    eventType: row.eventType,
-    actor: row.actor,
-    before: row.beforeJson == null ? null : JSON.parse(row.beforeJson),
-    after: row.afterJson == null ? null : JSON.parse(row.afterJson),
-    createdAt: row.createdAt
-  };
-}
-async function listUserEvents(userId, opts = {}) {
-  const limit = Math.max(1, Math.min(opts.limit ?? 50, 200));
-  const before = opts.before;
-  const client = getDbClient();
-  if (before) {
-    const rows2 = await client.query(`SELECT id, userId, eventType, actor, beforeJson, afterJson, createdAt
-           FROM user_identity_events
-          WHERE userId = ? AND createdAt < ?
-          ORDER BY createdAt DESC, rowid DESC
-          LIMIT ?`, [userId, before, limit]);
-    return rows2.map(rowToEvent);
-  }
-  const rows = await client.query(`SELECT id, userId, eventType, actor, beforeJson, afterJson, createdAt
-         FROM user_identity_events
-        WHERE userId = ?
-        ORDER BY createdAt DESC, rowid DESC
-        LIMIT ?`, [userId, limit]);
-  return rows.map(rowToEvent);
-}
-async function listUserTokens(userId) {
-  return getDbClient().query(`SELECT id, userId, label, tokenPreview, createdAt, lastUsedAt, revokedAt
-         FROM user_tokens
-        WHERE userId = ?
-        ORDER BY createdAt DESC`, [userId]);
-}
-async function recordIdentityEvent(userId, eventType, actor, before, after) {
-  await getDbClient().run(`INSERT INTO user_identity_events (id, userId, eventType, actor, beforeJson, afterJson, createdAt)
-       VALUES (?, ?, ?, ?, ?, ?, ?)`, [
-    randomUUID().replace(/-/g, ""),
-    userId,
-    eventType,
-    actorString(actor),
-    before == null ? null : JSON.stringify(before),
-    after == null ? null : JSON.stringify(after),
-    new Date().toISOString()
-  ]);
-}
-async function findOrCreateUserByEmail(email, hints, actor) {
-  const existing = await findUserByEmail(email);
-  if (existing) {
-    await recordIdentityEvent(existing.id, "auto_merge", actor, null, { email, hints });
-    return { user: existing, created: false };
-  }
-  const id = randomUUID().replace(/-/g, "");
-  const now = new Date().toISOString();
-  const name = hints.name?.trim() || email.split("@")[0] || email;
-  const created = await getDbClient().transaction(async (tx) => {
-    await tx.run(`INSERT INTO users (id, name, email, role, notes, emailAliases, preferredChannel, timezone, createdAt, lastUpdatedAt, status)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'active')`, [
-      id,
-      name,
-      email,
-      hints.role ?? null,
-      hints.notes ?? null,
-      "[]",
-      hints.preferredChannel ?? "slack",
-      null,
-      now,
-      now
-    ]);
-    const row = await tx.get("SELECT * FROM users WHERE id = ?", [id]);
-    if (!row)
-      throw new Error("Failed to create user");
-    await recordIdentityEvent(id, "identity_added", actor, null, { email, name });
-    return rowToUser(row);
-  });
-  return { user: created, created: true };
-}
-async function linkIdentity(userId, kind, externalId, actor) {
-  await getDbClient().transaction(async (tx) => {
-    await tx.run("INSERT INTO user_external_ids (userId, kind, externalId) VALUES (?, ?, ?)", [
-      userId,
-      kind,
-      externalId
-    ]);
-    await recordIdentityEvent(userId, "identity_added", actor, null, { kind, externalId });
-  });
-}
-async function unlinkIdentity(userId, kind, externalId, actor) {
-  await getDbClient().transaction(async (tx) => {
-    await tx.run("DELETE FROM user_external_ids WHERE userId = ? AND kind = ? AND externalId = ?", [
-      userId,
-      kind,
-      externalId
-    ]);
-    await recordIdentityEvent(userId, "identity_removed", actor, { kind, externalId }, null);
-  });
-}
-var TOKEN_PREFIX = "aswt_";
-function base62(bytes) {
-  const alphabet = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
-  let out = "";
-  for (const b of bytes) {
-    out += alphabet[b % 62];
-  }
-  return out;
-}
-function sha256Hex(input) {
-  return createHash("sha256").update(input).digest("hex");
-}
-async function mintToken(userId, label, actor) {
-  const plaintext = `${TOKEN_PREFIX}${base62(randomBytes(24))}`;
-  const tokenId = randomUUID().replace(/-/g, "");
-  const hash = sha256Hex(plaintext);
-  const preview = plaintext.slice(-4);
-  const now = new Date().toISOString();
-  await getDbClient().transaction(async (tx) => {
-    await tx.run(`INSERT INTO user_tokens (id, userId, label, tokenHash, tokenPreview, createdAt)
-       VALUES (?, ?, ?, ?, ?, ?)`, [tokenId, userId, label, hash, preview, now]);
-    await recordIdentityEvent(userId, "token_minted", actor, null, { tokenId, label, preview });
-  });
-  return { tokenId, plaintext };
-}
-async function revokeToken(tokenId, actor) {
-  await getDbClient().transaction(async (tx) => {
-    const row = await tx.get("SELECT userId, label, tokenPreview FROM user_tokens WHERE id = ?", [tokenId]);
-    if (!row) {
-      throw new Error(`Token not found: ${tokenId}`);
-    }
-    await tx.run("UPDATE user_tokens SET revokedAt = ? WHERE id = ?", [
-      new Date().toISOString(),
-      tokenId
-    ]);
-    await recordIdentityEvent(row.userId, "token_revoked", actor, { tokenId, label: row.label, preview: row.tokenPreview }, null);
-  });
-}
-async function resolveUserByToken(plaintext) {
-  const hash = sha256Hex(plaintext);
-  const client = getDbClient();
-  const row = await client.get("SELECT id, userId, revokedAt FROM user_tokens WHERE tokenHash = ?", [hash]);
-  if (!row || row.revokedAt !== null)
-    return null;
-  try {
-    await client.run("UPDATE user_tokens SET lastUsedAt = ? WHERE id = ?", [
-      new Date().toISOString(),
-      row.id
-    ]);
-  } catch {}
-  return findUserById(row.userId);
-}
-var SESSION_TOKEN_PREFIX = "aseph_";
-async function mintSessionToken(agentId, taskId, ttlMs) {
-  const plaintext = `${SESSION_TOKEN_PREFIX}${base62(randomBytes(24))}`;
-  const tokenId = randomUUID().replace(/-/g, "");
-  const hash = sha256Hex(plaintext);
-  const preview = plaintext.slice(-4);
-  const now = new Date;
-  const expiresAt = new Date(now.getTime() + ttlMs).toISOString();
-  await getDbClient().run(`INSERT INTO session_tokens (id, tokenHash, tokenPreview, agentId, taskId, expiresAt, createdAt)
-     VALUES (?, ?, ?, ?, ?, ?, ?)`, [tokenId, hash, preview, agentId, taskId, expiresAt, now.toISOString()]);
-  return { tokenId, plaintext };
-}
-async function revokeSessionToken(tokenId) {
-  await getDbClient().run("UPDATE session_tokens SET revokedAt = ? WHERE id = ? AND revokedAt IS NULL", [new Date().toISOString(), tokenId]);
-}
-async function resolveBySessionToken(plaintext) {
-  if (!plaintext.startsWith(SESSION_TOKEN_PREFIX))
-    return null;
-  const hash = sha256Hex(plaintext);
-  const client = getDbClient();
-  const row = await client.get("SELECT id, agentId, taskId, expiresAt, revokedAt FROM session_tokens WHERE tokenHash = ?", [
-    hash
-  ]);
-  if (!row || row.revokedAt !== null)
-    return null;
-  if (new Date(row.expiresAt) <= new Date)
-    return null;
-  try {
-    await client.run("UPDATE session_tokens SET lastUsedAt = ? WHERE id = ?", [
-      new Date().toISOString(),
-      row.id
-    ]);
-  } catch {}
-  return { agentId: row.agentId, taskId: row.taskId };
-}
-function fingerprintApiKey(rawKey) {
-  return `op:${sha256Hex(rawKey).slice(0, 16)}`;
-}
-
-// src/be/identity.ts
-async function resolveIdentity(kind, externalId) {
-  const user = await findUserByExternalId(kind, externalId);
-  if (!user) {
-    return { status: "unknown", kind, externalId };
-  }
-  return {
-    status: "resolved",
-    kind,
-    externalId,
-    userId: user.id,
-    name: user.name,
-    email: user.email
-  };
-}
-async function resolveIdentityByEmail(email) {
-  const user = await findUserByEmail(email);
-  if (!user) {
-    return { status: "unknown", kind: "email", externalId: email };
-  }
-  return {
-    status: "resolved",
-    kind: "email",
-    externalId: email,
-    userId: user.id,
-    name: user.name,
-    email: user.email
-  };
-}
-function renderIdentity(resolution) {
-  const pair = `${resolution.kind}:${resolution.externalId}`;
-  if (resolution.status === "resolved") {
-    return `${resolution.name} (${pair})`;
-  }
-  return `${pair} (unknown user)`;
-}
-
-// src/be/unmapped-identities.ts
-init_db();
-var TTL_MS = 30 * 24 * 60 * 60 * 1000;
-function namespace(kind) {
-  return `integration:unmapped:${kind}`;
-}
-async function recordUnmappedIdentity(kind, externalId, meta) {
-  const ns = namespace(kind);
-  const now = new Date().toISOString();
-  const expiresAt = Date.now() + TTL_MS;
-  const countKey = `${externalId}:count`;
-  const countBefore = await getKv(ns, countKey);
-  await upsertKv({
-    namespace: ns,
-    key: `${externalId}:meta`,
-    value: {
-      lastSeenAt: now,
-      sampleEventType: meta.sampleEventType,
-      sampleContext: meta.sampleContext.slice(0, 100)
-    },
-    valueType: "json",
-    expiresAt
-  });
-  const incremented = await incrKv(ns, countKey, 1);
-  if (countBefore === null) {
-    await upsertKv({
-      namespace: ns,
-      key: countKey,
-      value: Number(incremented.value),
-      valueType: "integer",
-      expiresAt
-    });
-  }
-}
-
-export { findUserById, findUserByExternalId, findUsersByName, getUserIdentities, listUserEvents, listUserTokens, recordIdentityEvent, findOrCreateUserByEmail, linkIdentity, unlinkIdentity, mintToken, revokeToken, resolveUserByToken, mintSessionToken, revokeSessionToken, resolveBySessionToken, fingerprintApiKey, resolveIdentity, resolveIdentityByEmail, renderIdentity, recordUnmappedIdentity };