@happyvertical/smrt-agents 0.51.2 → 0.51.4

package/dist/manifest.json

@@ -2,7 +2,7 @@
   "version": "1.0.0",
   "timestamp": 0,
   "packageName": "@happyvertical/smrt-agents",
-  "packageVersion": "0.51.2",
+  "packageVersion": "0.51.4",
   "objects": {
     "@happyvertical/smrt-agents:Agent": {
       "name": "agent",

package/dist/server/index.d.ts

@@ -36,4 +36,5 @@ export { createJobsDataSurfaceBackgroundQueue, registerDataSurfaceBackgroundActi
 export { extractAgentManifest, extractAgentPackagesFromConfig, loadManifestsFromConfig, loadManifestsFromPackages, type PackageManifest, } from './manifest-utils.js';
 export { type SerializedAgent, serializeResolvedAgent, } from './serialization.js';
 export { createSqlDataSurfaceActionStateStore, DataSurfaceActionIdempotencyState, DataSurfaceActionStateCorruptionError, DataSurfaceActionTokenState, type DataSurfaceIdempotencyRecoveryRequest, SqlDataSurfaceActionStateStore, type SqlDataSurfaceActionStateStoreOptions, } from './sql-data-surface-action-state.js';
+export { createDataSurfaceActionRouteHandlers, type DataSurfaceBulkSelectionResolver, type DataSurfaceRouteHandlerOptions, type DataSurfaceRouteHandlers, type DataSurfaceRoutePrincipalResolver, resolveBulkExplicitIds, } from './sveltekit-data-surface-routes.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,YAAY,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAC7E,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,iBAAiB,EACtB,aAAa,EACb,KAAK,gBAAgB,EACrB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,8BAA8B,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,+BAA+B,EACpC,KAAK,wBAAwB,IAAI,8BAA8B,EAC/D,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,kCAAkC,EACvC,KAAK,2BAA2B,EAChC,KAAK,mCAAmC,EACxC,KAAK,8BAA8B,EACnC,KAAK,0BAA0B,EAC/B,KAAK,6BAA6B,EAClC,KAAK,qCAAqC,EAC1C,KAAK,4BAA4B,EACjC,KAAK,sCAAsC,EAC3C,KAAK,iCAAiC,EACtC,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,EACtC,KAAK,8BAA8B,EACnC,mCAAmC,EACnC,6BAA6B,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,GAClC,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,wBAAwB,EACxB,qCAAqC,GACtC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,oCAAoC,EACpC,0CAA0C,EAC1C,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,oBAAoB,EACpB,8BAA8B,EAC9B,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,eAAe,EACpB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oCAAoC,EACpC,iCAAiC,EACjC,qCAAqC,EACrC,2BAA2B,EAC3B,KAAK,qCAAqC,EAC1C,8BAA8B,EAC9B,KAAK,qCAAqC,GAC3C,MAAM,oCAAoC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,YAAY,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAC7E,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,iBAAiB,EACtB,aAAa,EACb,KAAK,gBAAgB,EACrB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,8BAA8B,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,+BAA+B,EACpC,KAAK,wBAAwB,IAAI,8BAA8B,EAC/D,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,kCAAkC,EACvC,KAAK,2BAA2B,EAChC,KAAK,mCAAmC,EACxC,KAAK,8BAA8B,EACnC,KAAK,0BAA0B,EAC/B,KAAK,6BAA6B,EAClC,KAAK,qCAAqC,EAC1C,KAAK,4BAA4B,EACjC,KAAK,sCAAsC,EAC3C,KAAK,iCAAiC,EACtC,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,EACtC,KAAK,8BAA8B,EACnC,mCAAmC,EACnC,6BAA6B,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,GAClC,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,wBAAwB,EACxB,qCAAqC,GACtC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,oCAAoC,EACpC,0CAA0C,EAC1C,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,oBAAoB,EACpB,8BAA8B,EAC9B,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,eAAe,EACpB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oCAAoC,EACpC,iCAAiC,EACjC,qCAAqC,EACrC,2BAA2B,EAC3B,KAAK,qCAAqC,EAC1C,8BAA8B,EAC9B,KAAK,qCAAqC,GAC3C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,oCAAoC,EACpC,KAAK,gCAAgC,EACrC,KAAK,8BAA8B,EACnC,KAAK,wBAAwB,EAC7B,KAAK,iCAAiC,EACtC,sBAAsB,GACvB,MAAM,oCAAoC,CAAC"}

package/dist/server/sveltekit-data-surface-routes.d.ts

@@ -0,0 +1,42 @@
+import { DataSurfaceRowId } from '@happyvertical/smrt-types';
+import { ExecuteAsPrincipalOptions } from '../execute-as-principal.js';
+import { DataSurfaceActionAdapter } from './data-surface-actions.js';
+/** Resolves the bound principal for one incoming request. Throw to refuse. */
+export type DataSurfaceRoutePrincipalResolver = (request: Request) => ExecuteAsPrincipalOptions | Promise<ExecuteAsPrincipalOptions>;
+export interface DataSurfaceRouteHandlerOptions {
+    adapter: DataSurfaceActionAdapter;
+    resolvePrincipal: DataSurfaceRoutePrincipalResolver;
+    /** Called when `resolvePrincipal` throws; defaults to logging nothing. */
+    onAuthError?(error: unknown, request: Request): void;
+    /** Overrides the shared `DATA_SURFACE_MAX_REQUEST_BYTES` transport ceiling. */
+    maxRequestBytes?: number;
+}
+export interface DataSurfaceRouteHandlers {
+    /** Wire as `export const POST: RequestHandler = ({ request }) => handlers.preview(request)`. */
+    preview(request: Request): Promise<Response>;
+    apply(request: Request): Promise<Response>;
+}
+/**
+ * Build the preview/apply `Request -> Response` pair for one action surface.
+ * Principal/tenant resolution, idempotency, and durable queueing are entirely
+ * owned by `options.adapter` (from `createDataSurfaceActionAdapter`); this
+ * helper only bridges transport. Ordered deliberately: the request-byte cap
+ * is enforced from the `content-length` header before anything else runs
+ * (no buffering), then the principal is resolved (refusing before the body
+ * is ever parsed), then the body is read under the same cap as it streams,
+ * and only a resolved, in-budget request reaches the adapter.
+ */
+export declare function createDataSurfaceActionRouteHandlers(options: DataSurfaceRouteHandlerOptions): DataSurfaceRouteHandlers;
+/**
+ * Helper for the bulk-scope shape (e.g. "apply this look to every reference
+ * photo in the current selection"): resolves an `explicit-ids` selection to
+ * the full set of related row ids server-side, so the browser only ever
+ * supplies the anchor id(s) and the framework — not the app — is the source
+ * of truth for which rows a single idempotency key covers.
+ */
+export interface DataSurfaceBulkSelectionResolver {
+    /** Expand the browser-supplied anchor ids into the full row set to act on. */
+    expand(anchorRowIds: DataSurfaceRowId[]): Promise<DataSurfaceRowId[]> | DataSurfaceRowId[];
+}
+export declare function resolveBulkExplicitIds(anchorRowIds: DataSurfaceRowId[], resolver: DataSurfaceBulkSelectionResolver): Promise<DataSurfaceRowId[]>;
+//# sourceMappingURL=sveltekit-data-surface-routes.d.ts.map

package/dist/server/sveltekit-data-surface-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sveltekit-data-surface-routes.d.ts","sourceRoot":"","sources":["../../src/server/sveltekit-data-surface-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAEV,gBAAgB,EACjB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAC5E,OAAO,KAAK,EACV,wBAAwB,EAEzB,MAAM,2BAA2B,CAAC;AAEnC,8EAA8E;AAC9E,MAAM,MAAM,iCAAiC,GAAG,CAC9C,OAAO,EAAE,OAAO,KACb,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;AAEpE,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,wBAAwB,CAAC;IAClC,gBAAgB,EAAE,iCAAiC,CAAC;IACpD,0EAA0E;IAC1E,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACrD,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,gGAAgG;IAChG,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC5C;AA0HD;;;;;;;;;GASG;AACH,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,8BAA8B,GACtC,wBAAwB,CA2D1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gCAAgC;IAC/C,8EAA8E;IAC9E,MAAM,CACJ,YAAY,EAAE,gBAAgB,EAAE,GAC/B,OAAO,CAAC,gBAAgB,EAAE,CAAC,GAAG,gBAAgB,EAAE,CAAC;CACrD;AAED,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,gBAAgB,EAAE,EAChC,QAAQ,EAAE,gCAAgC,GACzC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAW7B"}

package/dist/server.js

@@ -5,6 +5,7 @@ import { sanitizeConfig } from "@happyvertical/smrt-config";
 import { TenantScoped, getTenantId, tenantId } from "@happyvertical/smrt-tenancy";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { SmrtJobCollection, backgroundEligible, createHmacDurableJobPayloadSigner, getActiveJobExecutionContext, isRunnerExecutionContext } from "@happyvertical/smrt-jobs";
+import { DATA_SURFACE_MAX_REQUEST_BYTES } from "@happyvertical/smrt-ui/data";
 //#region src/server/api-routes.ts
 function buildRouteMap(manifests) {
 	const routes = /* @__PURE__ */ new Map();
@@ -1062,6 +1063,146 @@ function emptyTokenRecord() {
 	};
 }
 //#endregion
-export { DataSurfaceActionIdempotencyState, DataSurfaceActionStateCorruptionError, DataSurfaceActionTokenState, InMemoryDataSurfaceActionStateStore, SmrtDataSurfaceActionTask, SqlDataSurfaceActionStateStore, buildRouteMap, createDataSurfaceActionAdapter, createJobsDataSurfaceBackgroundQueue, createSqlDataSurfaceActionStateStore, extractAgentManifest, extractAgentPackagesFromConfig, isBoundedDataSurfaceJsonValue, loadManifestsFromConfig, loadManifestsFromPackages, loadSlotConfigs, registerDataSurfaceBackgroundActionHandler, resolveAPIRoute, serializeResolvedAgent };
+//#region src/server/sveltekit-data-surface-routes.ts
+var REASON_STATUS = /* @__PURE__ */ new Map([
+	["invalid_request", 400],
+	["not_found", 404],
+	["denied", 403],
+	["unsupported", 404],
+	["selection_not_supported", 400],
+	["limit_exceeded", 413],
+	["stale_revision", 409],
+	["stale_preview", 409],
+	["confirmation_required", 409],
+	["confirmation_mismatch", 409],
+	["confirmation_replayed", 409],
+	["invalid_or_expired_confirmation", 409],
+	["idempotency_conflict", 409],
+	["idempotency_in_progress", 202],
+	["background_unavailable", 503]
+]);
+function statusForResult(result) {
+	if (result.ok) return 200;
+	return REASON_STATUS.get(result.reason ?? "") ?? 422;
+}
+function authorizationErrorStatus(error) {
+	if (!(error instanceof Error)) return void 0;
+	const status = error.status;
+	return typeof status === "number" && status >= 400 && status < 500 ? status : void 0;
+}
+function jsonResponse(body, status) {
+	return new Response(JSON.stringify(body), {
+		status,
+		headers: { "content-type": "application/json" }
+	});
+}
+function declaredContentLengthExceeds(request, maxBytes) {
+	const declared = request.headers.get("content-length");
+	if (declared === null) return false;
+	const bytes = Number(declared);
+	return !Number.isFinite(bytes) || bytes > maxBytes;
+}
+async function readBoundedBody(request, maxBytes) {
+	const stream = request.body;
+	if (!stream) return {
+		ok: true,
+		text: await request.text()
+	};
+	const reader = stream.getReader();
+	const chunks = [];
+	let total = 0;
+	for (;;) {
+		let step;
+		try {
+			step = await reader.read();
+		} catch {
+			return {
+				ok: false,
+				reason: "invalid_request"
+			};
+		}
+		if (step.done || !step.value) break;
+		total += step.value.byteLength;
+		if (total > maxBytes) {
+			await reader.cancel().catch(() => void 0);
+			return {
+				ok: false,
+				reason: "payload_too_large"
+			};
+		}
+		chunks.push(step.value);
+	}
+	const merged = new Uint8Array(total);
+	let offset = 0;
+	for (const chunk of chunks) {
+		merged.set(chunk, offset);
+		offset += chunk.byteLength;
+	}
+	return {
+		ok: true,
+		text: new TextDecoder("utf-8").decode(merged)
+	};
+}
+function parseJson(text) {
+	try {
+		const parsed = JSON.parse(text);
+		return parsed && typeof parsed === "object" ? parsed : void 0;
+	} catch {
+		return;
+	}
+}
+function createDataSurfaceActionRouteHandlers(options) {
+	const { adapter, resolvePrincipal, onAuthError } = options;
+	const maxRequestBytes = options.maxRequestBytes ?? DATA_SURFACE_MAX_REQUEST_BYTES;
+	async function handle(request, phase) {
+		if (declaredContentLengthExceeds(request, maxRequestBytes)) return jsonResponse({ error: "payload_too_large" }, 413);
+		let principal;
+		try {
+			principal = await resolvePrincipal(request);
+		} catch (error) {
+			onAuthError?.(error, request);
+			return jsonResponse({ error: "unauthorized" }, 401);
+		}
+		const bodyResult = await readBoundedBody(request, maxRequestBytes);
+		if (!bodyResult.ok) return jsonResponse({ error: bodyResult.reason }, bodyResult.reason === "payload_too_large" ? 413 : 400);
+		const body = parseJson(bodyResult.text);
+		if (!body) return jsonResponse({ error: "invalid_request" }, 400);
+		let result;
+		try {
+			result = phase === "preview" ? await adapter.preview(body, { principal }) : await adapter.apply(body, { principal });
+		} catch (error) {
+			const status = authorizationErrorStatus(error);
+			if (status === void 0) throw error;
+			return jsonResponse({
+				version: 1,
+				requestId: body.requestId,
+				identity: body.identity,
+				actionId: body.actionId,
+				phase,
+				ok: false,
+				reason: "denied"
+			}, status);
+		}
+		return jsonResponse(result, statusForResult(result));
+	}
+	return {
+		preview: (request) => handle(request, "preview"),
+		apply: (request) => handle(request, "apply")
+	};
+}
+async function resolveBulkExplicitIds(anchorRowIds, resolver) {
+	const expanded = await resolver.expand(anchorRowIds);
+	const seen = /* @__PURE__ */ new Set();
+	const unique = [];
+	for (const rowId of expanded) {
+		const key = `${typeof rowId}:${String(rowId)}`;
+		if (seen.has(key)) continue;
+		seen.add(key);
+		unique.push(rowId);
+	}
+	return unique;
+}
+//#endregion
+export { DataSurfaceActionIdempotencyState, DataSurfaceActionStateCorruptionError, DataSurfaceActionTokenState, InMemoryDataSurfaceActionStateStore, SmrtDataSurfaceActionTask, SqlDataSurfaceActionStateStore, buildRouteMap, createDataSurfaceActionAdapter, createDataSurfaceActionRouteHandlers, createJobsDataSurfaceBackgroundQueue, createSqlDataSurfaceActionStateStore, extractAgentManifest, extractAgentPackagesFromConfig, isBoundedDataSurfaceJsonValue, loadManifestsFromConfig, loadManifestsFromPackages, loadSlotConfigs, registerDataSurfaceBackgroundActionHandler, resolveAPIRoute, resolveBulkExplicitIds, serializeResolvedAgent };
 
 //# sourceMappingURL=server.js.map