@flowajs/chat-service 0.0.1

package/dist/auth/oidc.js

@@ -0,0 +1,58 @@
+import { createRemoteJWKSet, jwtVerify } from "jose";
+const jwksCache = new Map();
+function getJwks(url) {
+    let jwks = jwksCache.get(url);
+    if (!jwks) {
+        jwks = createRemoteJWKSet(new URL(url));
+        jwksCache.set(url, jwks);
+    }
+    return jwks;
+}
+/**
+ * Validate a Bearer token from an Authorization header against an OIDC
+ * IDP. Returns the decoded claims on success; throws on missing header,
+ * malformed token, or signature/audience/issuer mismatch.
+ *
+ * Generic over IDP — works against any OIDC-compliant provider (Auth0,
+ * Keycloak, Okta, GitHub, etc.).
+ */
+export async function validateOidcToken(authHeader, config) {
+    if (config.devMode && process.env.NODE_ENV === "production") {
+        // Hard fail rather than degrade to insecure validation in prod.
+        throw new Error("OIDC devMode is enabled but NODE_ENV=production. Refusing to bypass JWT verification.");
+    }
+    if (!authHeader?.startsWith("Bearer ")) {
+        throw new Error("Missing or invalid Authorization header");
+    }
+    const token = authHeader.slice(7);
+    if (config.devMode) {
+        const [, payloadB64] = token.split(".");
+        if (!payloadB64)
+            throw new Error("Invalid token format");
+        return JSON.parse(Buffer.from(payloadB64, "base64url").toString());
+    }
+    const { payload } = await jwtVerify(token, getJwks(config.jwksUrl), {
+        audience: config.audience,
+        issuer: config.issuer,
+    });
+    return payload;
+}
+/**
+ * Hono middleware factory that validates the Authorization header against
+ * the configured OIDC IDP. The decoded claims are stored on the context
+ * variable `oidcClaims` for downstream handlers to read via
+ * `c.get("oidcClaims")`.
+ */
+export function createOidcMiddleware(config) {
+    return async (c, next) => {
+        try {
+            const claims = await validateOidcToken(c.req.header("Authorization"), config);
+            c.set("oidcClaims", claims);
+        }
+        catch {
+            return c.json({ error: "Unauthorized" }, 401);
+        }
+        return next();
+    };
+}
+//# sourceMappingURL=oidc.js.map

package/dist/auth/oidc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.js","sourceRoot":"","sources":["../../src/auth/oidc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAmB,MAAM,MAAM,CAAC;AAetE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiD,CAAC;AAE3E,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAA8B,EAC9B,MAA2B;IAE3B,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC5D,gEAAgE;QAChE,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAElC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,CAAC,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,KAAK,CACf,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAClC,CAAC;IAClB,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QAClE,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAA2B;IAE3B,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CACpC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAC7B,MAAM,CACP,CAAC;YACF,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC"}

package/dist/chat.d.ts

@@ -0,0 +1,161 @@
+/** Main streaming chat endpoint. */
+import { z } from "zod";
+import { type SessionContext } from "./session.js";
+import type { Artifact } from "./artifact.js";
+import type { LlmProvider } from "./llm/interface.js";
+import type { Storage } from "./storage/interface.js";
+import { artifactToYaml } from "./yaml.js";
+export declare const TriageStateSchema: z.ZodObject<{
+    version_id: z.ZodOptional<z.ZodString>;
+    accepted: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        paper_id: z.ZodString;
+        claim_index: z.ZodNumber;
+    }, z.core.$strip>>>;
+    rejected: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        paper_id: z.ZodString;
+        claim_index: z.ZodNumber;
+    }, z.core.$strip>>>;
+    papers_done: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    comments: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        paper_id: z.ZodString;
+        claim_index: z.ZodNumber;
+        body: z.ZodString;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type TriageState = z.infer<typeof TriageStateSchema>;
+/**
+ * Render the `{triage_state}` prompt block. Resolves each claim identified
+ * by `(paper_id, claim_index)` to human-readable form using the current
+ * artifact, which has the same claim order the client observed.
+ */
+export declare function renderTriageStateBlock(artifact: Artifact, state: TriageState | null | undefined): string;
+/**
+ * Validate claim/paper integrity and citation fidelity. Returns an array
+ * of error messages; empty array means the artifact passes.
+ *
+ * `validPaperIds`, when provided, is the set of paper IDs known to the
+ * session (from aggregate.paper_id_mapping). Every paper in
+ * `artifact.papers[]` must be a member.
+ */
+export declare function validateArtifactContent(artifact: Artifact, validPaperIds?: Set<string>): string[];
+/** Shared validation + commit for str_replace, insert, and write. */
+declare function validateAndCommit(session: SessionContext, schema: z.ZodType<Artifact>, updatedYaml: string, tool: "str_replace" | "insert" | "write"): string | {
+    error: string;
+    is_error: true;
+};
+interface ChatBuildContext {
+    session: SessionContext;
+    storage: Storage;
+    provider: LlmProvider;
+    schema: z.ZodType<Artifact>;
+}
+export declare function buildTools(ctx: ChatBuildContext): {
+    loadPaperExtracts: {
+        description: string;
+        inputSchema: z.ZodObject<{
+            paperIds: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>;
+        execute: (args: {
+            paperIds: string[];
+        }) => Promise<{
+            paperId: string;
+            extraction: unknown;
+        }[] | {
+            error: string;
+        }>;
+    };
+    loadFullPaper: {
+        description: string;
+        inputSchema: z.ZodObject<{
+            paperId: z.ZodString;
+        }, z.core.$strip>;
+        execute: (args: {
+            paperId: string;
+        }) => Promise<string | {
+            error: string;
+        }>;
+    };
+    queryPapers: {
+        description: string;
+        inputSchema: z.ZodObject<{
+            question: z.ZodString;
+            paperIds: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>;
+        execute: (args: {
+            question: string;
+            paperIds: string[];
+        }) => Promise<string | {
+            error: string;
+        }>;
+    };
+    view: {
+        description: string;
+        inputSchema: z.ZodObject<{
+            view_range: z.ZodOptional<z.ZodTuple<[z.ZodNumber, z.ZodNumber], null>>;
+        }, z.core.$strip>;
+        execute: (args: {
+            view_range?: [number, number];
+        }) => Promise<string | {
+            error: string;
+        }>;
+    };
+    search: {
+        description: string;
+        inputSchema: z.ZodObject<{
+            pattern: z.ZodString;
+        }, z.core.$strip>;
+        execute: (args: {
+            pattern: string;
+        }) => Promise<string | {
+            error: string;
+        }>;
+    };
+    str_replace: {
+        description: string;
+        inputSchema: z.ZodObject<{
+            old_str: z.ZodString;
+            new_str: z.ZodString;
+        }, z.core.$strip>;
+        execute: (args: {
+            old_str: string;
+            new_str: string;
+        }) => Promise<string | {
+            error: string;
+            is_error: boolean;
+        }>;
+    };
+    insert: {
+        description: string;
+        inputSchema: z.ZodObject<{
+            insert_line: z.ZodNumber;
+            new_str: z.ZodString;
+        }, z.core.$strip>;
+        execute: (args: {
+            insert_line: number;
+            new_str: string;
+        }) => Promise<string | {
+            error: string;
+            is_error: boolean;
+        }>;
+    };
+    write: {
+        description: string;
+        inputSchema: z.ZodObject<{
+            artifact_yaml: z.ZodString;
+        }, z.core.$strip>;
+        execute: (args: {
+            artifact_yaml: string;
+        }) => Promise<string | {
+            error: string;
+            is_error: true;
+        }>;
+    };
+};
+export interface HandleChatContext {
+    storage: Storage;
+    provider: LlmProvider;
+    schema: z.ZodType<Artifact>;
+}
+export declare function handleChat(ctx: HandleChatContext, req: Request, session: SessionContext): Promise<Response>;
+export { validateAndCommit, artifactToYaml };
+//# sourceMappingURL=chat.d.ts.map

package/dist/chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../src/chat.ts"],"names":[],"mappings":"AAAA,oCAAoC;AAapC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,OAAO,EAAE,KAAK,cAAc,EAAyB,MAAM,cAAc,CAAC;AAY1E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAOL,cAAc,EACf,MAAM,WAAW,CAAC;AA8BnB,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;iBAiC5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,GACpC,MAAM,CA4ER;AAQD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,QAAQ,EAClB,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAC1B,MAAM,EAAE,CA8GV;AAED,qEAAqE;AACrE,iBAAS,iBAAiB,CACxB,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAC3B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,aAAa,GAAG,QAAQ,GAAG,OAAO,GACvC,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAiD5C;AAED,UAAU,gBAAgB;IACxB,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,WAAW,CAAC;IACtB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC7B;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,gBAAgB;;;;;;;sBAeF,MAAM,EAAE;;;;;;;;;;;;;;qBAyBf,MAAM;;;;;;;;;;;;sBA4BzB,MAAM;sBACN,MAAM,EAAE;;;;;;;;;;;yBAkEkB,CAAC,MAAM,EAAE,MAAM,CAAC;;;;;;;;;;;qBA2BvB,MAAM;;;;;;;;;;;;qBAkCG,MAAM;qBAAW,MAAM;;;;;;;;;;;;;yBA2ChD,MAAM;qBACV,MAAM;;;;;;;;;;;;2BA6B0B,MAAM;;mBAvUpC,MAAM;sBAAY,IAAI;;;EA6U1C;AAOD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,WAAW,CAAC;IACtB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC7B;AAED,wBAAsB,UAAU,CAC9B,GAAG,EAAE,iBAAiB,EACtB,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,QAAQ,CAAC,CAwMnB;AAGD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAC"}