@elevasis/core 0.46.0 → 0.48.0

package/src/execution/engine/llm/model-info.ts

@@ -26,10 +26,15 @@ export type OpenRouterModel = 'openrouter/z-ai/glm-5'
  */
 export type GoogleModel = 'gemini-3-flash-preview' | 'gemini-3.1-flash-lite-preview'
 
-/**
- * Supported Anthropic models (direct SDK access via @anthropic-ai/sdk)
- */
-export type AnthropicModel = 'claude-sonnet-4-5'
+/**
+ * Supported Anthropic models (direct SDK access via @anthropic-ai/sdk)
+ */
+export type AnthropicModel =
+  | 'claude-opus-4-8'
+  | 'claude-sonnet-4-6'
+  | 'claude-haiku-4-5-20251001'
+  | 'claude-haiku-4-5'
+  | 'claude-sonnet-4-5'
 
 /** Supported LLM models */
 export type LLMModel = OpenAIModel | OpenRouterModel | GoogleModel | AnthropicModel | 'mock'
@@ -122,26 +127,48 @@ export const GoogleConfigSchema = z.object({
   modelOptions: GoogleOptionsSchema.optional()
 })
 
-/**
- * Anthropic model options schema
- * Currently empty - future options: budget_tokens for extended thinking
- */
-const AnthropicOptionsSchema = z.object({})
-
-/**
- * Anthropic config schema
- * Validates ModelConfig for Anthropic provider (direct SDK access)
- */
-export const AnthropicConfigSchema = z.object({
-  model: z.enum(['claude-sonnet-4-5']),
-  provider: z.literal('anthropic'),
-  apiKey: z.string(),
-  temperature: z.number().min(0).max(1).optional(),
-  maxOutputTokens: z.number().min(1000).optional(), // Anthropic requires max_tokens
-  topP: z.number().min(0).max(1).optional(),
-  modelOptions: AnthropicOptionsSchema.optional()
-})
+/**
+ * Anthropic model options schema
+ * Currently empty - future options must be added per supported model family
+ */
+const AnthropicOptionsSchema = z.object({}).strict()
 
+/**
+ * Anthropic config schema
+ * Validates ModelConfig for Anthropic provider (direct SDK access)
+ */
+const AnthropicStandardConfigSchema = z.object({
+  model: z.enum([
+    'claude-sonnet-4-6',
+    'claude-haiku-4-5-20251001',
+    'claude-haiku-4-5',
+    'claude-sonnet-4-5'
+  ]),
+  provider: z.literal('anthropic'),
+  apiKey: z.string(),
+  temperature: z.number().min(0).max(1).optional(),
+  maxOutputTokens: z.number().min(1000).max(64000).optional(), // Anthropic requires max_tokens
+  topP: z.number().min(0).max(1).optional(),
+  modelOptions: AnthropicOptionsSchema.optional()
+})
+
+const AnthropicOpus48ConfigSchema = z.object({
+  model: z.literal('claude-opus-4-8'),
+  provider: z.literal('anthropic'),
+  apiKey: z.string(),
+  temperature: z.literal(1).optional(),
+  maxOutputTokens: z.number().min(1000).max(128000).optional(), // Anthropic requires max_tokens
+  topP: z.literal(1).optional(),
+  topK: z.undefined().optional(),
+  top_k: z.undefined().optional(),
+  modelOptions: AnthropicOptionsSchema.optional()
+})
+
+export const AnthropicConfigSchema = z.discriminatedUnion('model', [
+  AnthropicOpus48ConfigSchema,
+  AnthropicStandardConfigSchema
+])
+
 /**
  * Infer TypeScript types from schemas
  */
@@ -191,16 +218,18 @@ export interface ModelInfo {
   minTokens: number
   /** Recommended tokens for production use (typically 2x minimum) */
   recommendedTokens: number
-  /** Maximum context window size (total tokens: input + output) */
-  maxTokens: number
-  /** Model category for grouping and documentation */
-  category: 'reasoning' | 'standard' | 'embedding'
-  /** Zod schema for validating complete ModelConfig (replaces constraints + optionsSchema) */
-  configSchema?: z.ZodType<ModelConfig>
-}
+  /** Maximum context window size (total tokens: input + output) */
+  maxTokens: number
+  /** Maximum output tokens supported by the synchronous generation API */
+  maxOutputTokens?: number
+  /** Model category for grouping and documentation */
+  category: 'reasoning' | 'standard' | 'embedding'
+  /** Zod schema for validating complete ModelConfig (replaces constraints + optionsSchema) */
+  configSchema?: z.ZodType<ModelConfig>
+}
 
-// Model configuration as of 2026-03-17
-export const MODEL_INFO: Record<LLMModel, ModelInfo> = {
+// Model configuration as of 2026-06-09
+export const MODEL_INFO: Record<LLMModel, ModelInfo> = {
   // OpenAI GPT-5 (Reasoning Models)
   'gpt-5': {
     inputCostPer1M: 125, // $1.25 per 1M tokens
@@ -268,17 +297,58 @@ export const MODEL_INFO: Record<LLMModel, ModelInfo> = {
     category: 'standard',
     configSchema: GoogleConfigSchema
   },
-  // Anthropic Claude Models (direct SDK access via @anthropic-ai/sdk)
-  'claude-sonnet-4-5': {
-    inputCostPer1M: 300, // $3.00 per 1M tokens
-    outputCostPer1M: 1500, // $15.00 per 1M tokens
-    minTokens: 4000,
-    recommendedTokens: 8000,
-    maxTokens: 200000, // 200k context window
-    category: 'standard',
-    configSchema: AnthropicConfigSchema
-  }
-}
+  // Anthropic Claude Models (direct SDK access via @anthropic-ai/sdk)
+  'claude-opus-4-8': {
+    inputCostPer1M: 500, // $5.00 per 1M tokens
+    outputCostPer1M: 2500, // $25.00 per 1M tokens
+    minTokens: 4000,
+    recommendedTokens: 8000,
+    maxTokens: 1000000, // 1M context window
+    maxOutputTokens: 128000,
+    category: 'reasoning',
+    configSchema: AnthropicConfigSchema
+  },
+  'claude-sonnet-4-6': {
+    inputCostPer1M: 300, // $3.00 per 1M tokens
+    outputCostPer1M: 1500, // $15.00 per 1M tokens
+    minTokens: 4000,
+    recommendedTokens: 8000,
+    maxTokens: 1000000, // 1M context window
+    maxOutputTokens: 64000,
+    category: 'standard',
+    configSchema: AnthropicConfigSchema
+  },
+  'claude-haiku-4-5-20251001': {
+    inputCostPer1M: 100, // $1.00 per 1M tokens
+    outputCostPer1M: 500, // $5.00 per 1M tokens
+    minTokens: 4000,
+    recommendedTokens: 8000,
+    maxTokens: 200000, // 200k context window
+    maxOutputTokens: 64000,
+    category: 'standard',
+    configSchema: AnthropicConfigSchema
+  },
+  'claude-haiku-4-5': {
+    inputCostPer1M: 100, // $1.00 per 1M tokens
+    outputCostPer1M: 500, // $5.00 per 1M tokens
+    minTokens: 4000,
+    recommendedTokens: 8000,
+    maxTokens: 200000, // 200k context window
+    maxOutputTokens: 64000,
+    category: 'standard',
+    configSchema: AnthropicConfigSchema
+  },
+  'claude-sonnet-4-5': {
+    inputCostPer1M: 300, // $3.00 per 1M tokens
+    outputCostPer1M: 1500, // $15.00 per 1M tokens
+    minTokens: 4000,
+    recommendedTokens: 8000,
+    maxTokens: 200000, // 200k context window
+    maxOutputTokens: 64000,
+    category: 'standard',
+    configSchema: AnthropicConfigSchema
+  }
+}
 
 /**
  * Get model information (pricing and token requirements)

package/src/knowledge/__tests__/queries.test.ts

@@ -1,6 +1,7 @@
 import { describe, expect, it } from 'vitest'
 import { bySystem, byOntology, byKind, byOwner, governs, governedBy, parsePath, omSearch, omDescribe } from '../queries'
 import { byOntology as publicByOntology } from '../index'
+import { byOntology as publishedByOntology } from '../published'
 import { formatText, formatJson, formatIdsOnly, formatOmSearchHits, formatOmDescribe } from '../format'
 import type { OrganizationGraph } from '../../organization-model/graph/types'
 import type { OrgKnowledgeNode } from '../../organization-model/domains/knowledge'
@@ -259,6 +260,13 @@ describe('byOntology', () => {
       'knowledge.playbook-d'
     ])
   })
+
+  it('is exported from the published knowledge API', () => {
+    expect(publishedByOntology).toBe(byOntology)
+    expect(publishedByOntology(GRAPH, 'sales.crm:object/deal', NODES).map((node) => node.id)).toEqual([
+      'knowledge.playbook-d'
+    ])
+  })
 })
 
 // ---------------------------------------------------------------------------

package/src/knowledge/published.ts

@@ -1,4 +1,4 @@
-export { bySystem, byKind, byOwner, governs, governedBy, parsePath } from './queries'
+export { bySystem, byOntology, byKind, byOwner, governs, governedBy, parsePath } from './queries'
 export type { KnowledgeMount, ParsedKnowledgePath, OmSearchHitKind } from './queries'
 
 export { formatText, formatJson, formatIdsOnly } from './format'

package/src/operations/index.ts

@@ -22,17 +22,19 @@ export type {
 
 // Session validation schemas
 export {
-  CreateSessionSchema,
-  ExecuteTurnSchema,
-  ListSessionsQuerySchema,
-  SessionIdParamSchema,
-  ExecutionIdParamsSchema,
-  WebSocketSessionTurnSchema,
-  type CreateSessionInput,
-  type ExecuteTurnInput,
-  type ListSessionsQuery,
-  type WebSocketSessionTurnMessage
-} from './sessions'
+  CreateSessionSchema,
+  ExecuteTurnSchema,
+  ListSessionsQuerySchema,
+  SessionMessagesQuerySchema,
+  SessionIdParamSchema,
+  ExecutionIdParamsSchema,
+  WebSocketSessionTurnSchema,
+  type CreateSessionInput,
+  type ExecuteTurnInput,
+  type ListSessionsQuery,
+  type SessionMessagesQuery,
+  type WebSocketSessionTurnMessage
+} from './sessions'
 
 // Notification types and validation schemas
 export * from './notifications/index'
@@ -46,5 +48,8 @@ export * from './activities/index'
 // Triggers (includes webhook providers and trigger definitions)
 export * from './triggers/index'
 
-// Debug Logs
-export * from './debug-logs/index'
+// Debug Logs
+export * from './debug-logs/index'
+
+// Public agent chat route schemas
+export * from './public-agent-chat'

package/src/operations/public-agent-chat/api-schemas.ts

@@ -0,0 +1,40 @@
+import { z } from 'zod'
+import { UuidSchema } from '../../platform/utils/validation'
+
+export const PublicAgentChatSlugParamSchema = z
+  .object({
+    slug: z.string().min(1).max(120).regex(/^[a-zA-Z0-9._-]+$/)
+  })
+  .strict()
+
+export const PublicAgentChatSessionParamSchema = z
+  .object({
+    sessionId: UuidSchema
+  })
+  .strict()
+
+export const PublicAgentChatAuthorizeSchema = z
+  .object({
+    code: z.string().min(1).max(200).optional(),
+    visitorId: z.string().min(1).max(120).optional()
+  })
+  .strict()
+
+export const PublicAgentChatCreateSessionSchema = z
+  .object({
+    capabilityToken: z.string().min(32).optional(),
+    metadata: z.record(z.string(), z.unknown()).optional()
+  })
+  .strict()
+
+export const PublicAgentChatCapabilityQuerySchema = z
+  .object({
+    token: z.string().min(32)
+  })
+  .strict()
+
+export type PublicAgentChatSlugParams = z.infer<typeof PublicAgentChatSlugParamSchema>
+export type PublicAgentChatSessionParams = z.infer<typeof PublicAgentChatSessionParamSchema>
+export type PublicAgentChatAuthorizeInput = z.infer<typeof PublicAgentChatAuthorizeSchema>
+export type PublicAgentChatCreateSessionInput = z.infer<typeof PublicAgentChatCreateSessionSchema>
+export type PublicAgentChatCapabilityQuery = z.infer<typeof PublicAgentChatCapabilityQuerySchema>

package/src/operations/public-agent-chat/index.ts

@@ -0,0 +1,12 @@
+export {
+  PublicAgentChatSlugParamSchema,
+  PublicAgentChatSessionParamSchema,
+  PublicAgentChatAuthorizeSchema,
+  PublicAgentChatCreateSessionSchema,
+  PublicAgentChatCapabilityQuerySchema,
+  type PublicAgentChatSlugParams,
+  type PublicAgentChatSessionParams,
+  type PublicAgentChatAuthorizeInput,
+  type PublicAgentChatCreateSessionInput,
+  type PublicAgentChatCapabilityQuery
+} from './api-schemas'

package/src/operations/sessions/api-schemas.ts

@@ -113,13 +113,32 @@ export const ExecuteTurnSchema = z
  * - resourceId validated as string (resource identifiers)
  * - Limit bounded (prevents DoS via large result sets)
  */
-export const ListSessionsQuerySchema = z
-  .object({
-    userId: UuidSchema.optional(),
-    resourceId: z.string().optional(),
-    limit: z.coerce.number().int().min(1).max(100).default(20)
-  })
-  .strict()
+export const ListSessionsQuerySchema = z
+  .object({
+    userId: UuidSchema.optional(),
+    resourceId: z.string().optional(),
+    limit: z.coerce.number().int().min(1).max(100).default(20)
+  })
+  .strict()
+
+/**
+ * Get session messages with cursor pagination
+ * GET /sessions/:sessionId/messages
+ *
+ * Cursor:
+ * - cursor is the last seen message_index
+ * - next page returns rows where message_index > cursor
+ *
+ * Security:
+ * - Limit bounded to prevent unbounded transcript reads
+ * - Cursor coerced and validated as a non-negative integer
+ */
+export const SessionMessagesQuerySchema = z
+  .object({
+    limit: z.coerce.number().int().min(1).max(100).default(100),
+    cursor: z.coerce.number().int().min(0).optional()
+  })
+  .strict()
 
 // ============================================================================
 // WebSocket Messages
@@ -160,7 +179,8 @@ export const WebSocketSessionTurnSchema = z
 // ============================================================================
 
 // Export inferred types for use in route handlers
-export type CreateSessionInput = z.infer<typeof CreateSessionSchema>
-export type ExecuteTurnInput = z.infer<typeof ExecuteTurnSchema>
-export type ListSessionsQuery = z.infer<typeof ListSessionsQuerySchema>
-export type WebSocketSessionTurnMessage = z.infer<typeof WebSocketSessionTurnSchema>
+export type CreateSessionInput = z.infer<typeof CreateSessionSchema>
+export type ExecuteTurnInput = z.infer<typeof ExecuteTurnSchema>
+export type ListSessionsQuery = z.infer<typeof ListSessionsQuerySchema>
+export type SessionMessagesQuery = z.infer<typeof SessionMessagesQuerySchema>
+export type WebSocketSessionTurnMessage = z.infer<typeof WebSocketSessionTurnSchema>

package/src/operations/sessions/index.ts

@@ -12,15 +12,17 @@ export type {
 
 // Export validation schemas
 export {
-  CreateSessionSchema,
-  ExecuteTurnSchema,
-  ListSessionsQuerySchema,
-  SessionIdParamSchema,
-  ExecutionIdParamsSchema,
-  WebSocketSessionTurnSchema,
-  UuidSchema,
-  type CreateSessionInput,
-  type ExecuteTurnInput,
-  type ListSessionsQuery,
-  type WebSocketSessionTurnMessage
-} from './api-schemas'
+  CreateSessionSchema,
+  ExecuteTurnSchema,
+  ListSessionsQuerySchema,
+  SessionMessagesQuerySchema,
+  SessionIdParamSchema,
+  ExecutionIdParamsSchema,
+  WebSocketSessionTurnSchema,
+  UuidSchema,
+  type CreateSessionInput,
+  type ExecuteTurnInput,
+  type ListSessionsQuery,
+  type SessionMessagesQuery,
+  type WebSocketSessionTurnMessage
+} from './api-schemas'

package/src/platform/constants/versions.ts

@@ -1,3 +1,3 @@
 export const VERSION = {
-  CURRENT: '1.12.19'
+  CURRENT: '1.13.4'
 }

package/src/supabase/database.types.ts

@@ -2118,6 +2118,138 @@ export type Database = {
         }
         Relationships: []
       }
+      agent_access_grants: {
+        Row: {
+          allowed_origins: string[]
+          branding: Json
+          capture_fields: Json
+          code_hash: string | null
+          code_salt: string | null
+          created_at: string
+          disabled_at: string | null
+          expires_at: string | null
+          id: string
+          max_sessions_per_visitor: number
+          max_turns_per_session: number
+          mode: string
+          organization_id: string
+          resource_id: string
+          slug: string
+          tool_policy: Json
+          updated_at: string
+        }
+        Insert: {
+          allowed_origins?: string[]
+          branding?: Json
+          capture_fields?: Json
+          code_hash?: string | null
+          code_salt?: string | null
+          created_at?: string
+          disabled_at?: string | null
+          expires_at?: string | null
+          id?: string
+          max_sessions_per_visitor?: number
+          max_turns_per_session?: number
+          mode?: string
+          organization_id: string
+          resource_id: string
+          slug: string
+          tool_policy?: Json
+          updated_at?: string
+        }
+        Update: {
+          allowed_origins?: string[]
+          branding?: Json
+          capture_fields?: Json
+          code_hash?: string | null
+          code_salt?: string | null
+          created_at?: string
+          disabled_at?: string | null
+          expires_at?: string | null
+          id?: string
+          max_sessions_per_visitor?: number
+          max_turns_per_session?: number
+          mode?: string
+          organization_id?: string
+          resource_id?: string
+          slug?: string
+          tool_policy?: Json
+          updated_at?: string
+        }
+        Relationships: [
+          {
+            foreignKeyName: "agent_access_grants_organization_id_fkey"
+            columns: ["organization_id"]
+            isOneToOne: false
+            referencedRelation: "organizations"
+            referencedColumns: ["id"]
+          },
+        ]
+      }
+      agent_chat_capabilities: {
+        Row: {
+          created_at: string
+          expires_at: string
+          grant_id: string
+          id: string
+          organization_id: string
+          origin: string | null
+          resource_id: string
+          revoked_at: string | null
+          session_id: string | null
+          token_hash: string
+          visitor_id: string | null
+        }
+        Insert: {
+          created_at?: string
+          expires_at: string
+          grant_id: string
+          id?: string
+          organization_id: string
+          origin?: string | null
+          resource_id: string
+          revoked_at?: string | null
+          session_id?: string | null
+          token_hash: string
+          visitor_id?: string | null
+        }
+        Update: {
+          created_at?: string
+          expires_at?: string
+          grant_id?: string
+          id?: string
+          organization_id?: string
+          origin?: string | null
+          resource_id?: string
+          revoked_at?: string | null
+          session_id?: string | null
+          token_hash?: string
+          visitor_id?: string | null
+        }
+        Relationships: [
+          {
+            foreignKeyName: "agent_chat_capabilities_grant_id_fkey"
+            columns: ["grant_id"]
+            isOneToOne: false
+            referencedRelation: "agent_access_grants"
+            referencedColumns: ["id"]
+          },
+          {
+            foreignKeyName: "agent_chat_capabilities_organization_id_fkey"
+            columns: ["organization_id"]
+            isOneToOne: false
+            referencedRelation: "organizations"
+            referencedColumns: ["id"]
+          },
+          {
+            foreignKeyName: "agent_chat_capabilities_session_id_fkey"
+            columns: ["session_id"]
+            isOneToOne: false
+            referencedRelation: "sessions"
+            referencedColumns: ["session_id"]
+          },
+        ]
+      }
       organizations: {
         Row: {
           config: Json