@hugex/ai 3.1.2 → 3.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.js
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
|
-
import{a as
|
|
2
|
-
`)}function
|
|
3
|
-
`)}function
|
|
1
|
+
import{a as A,b as Mn,c as Ce,d as Pe,e as Zn,f as $e,g as er,h as Fe,i as nr}from"./chunk-BBJLGBLT.js";import"./chunk-V35SRZAO.js";import{c as Nn}from"./chunk-YFOFZWIB.js";import"./chunk-6AZ7RATD.js";import"./chunk-XXB57DMN.js";import"./chunk-3K4IMMLP.js";import{a as rr,b as sr}from"./chunk-VS4EXG76.js";import{A as Hn,B as Kn,C as jn,D as Xn,E as Me,F as qn,G as Vn,H as Gn,I as Jn,J as zn,K as Wn,L as Yn,M as Bn,N as Qn,O as Ne,P as De,Q as tr,a as T,b as Ee,c as rn,d as N,e as Ie,f as sn,g as on,h as an,i as cn,j as ln,k as xe,l as j,m as un,n as Te,o as ke,p as Ae,q as Ue,r as _e,s as Oe,t as W,u as be,v as ve,w as Dn,x as $n,y as Fn,z as Ln}from"./chunk-4XJVXKXR.js";import{A as Cn,B as Pn,a as K,b as tn,c as Re,d as nn,e as Se,f as dn,g as mn,h as pn,i as gn,j as fn,k as yn,l as hn,m as wn,n as Rn,o as Sn,p as En,q as In,r as xn,s as Tn,t as kn,u as An,v as Un,w as _n,x as On,y as bn,z as vn}from"./chunk-J4LJZZ67.js";import{a as Jt}from"./chunk-RYHQGPX5.js";import{a as zt}from"./chunk-R6EKV3WR.js";import{a as Bt}from"./chunk-6HY7QUMP.js";import{a as Wt,b as Yt}from"./chunk-V6JSMX5A.js";import{a as en}from"./chunk-Q7QHJJGR.js";import{a as O,b as P,c as Qt,d as Zt}from"./chunk-YLDLDEUP.js";import{a as we}from"./chunk-U56YWPSI.js";import"./chunk-YHXUBVN2.js";import"./chunk-3TXHFKDN.js";import{Agent as Ct}from"agents";import{nanoid as Pt}from"nanoid";async function ut(t){t.sql`CREATE TABLE IF NOT EXISTS messages (id TEXT PRIMARY KEY, role TEXT NOT NULL, type TEXT NOT NULL, content TEXT NOT NULL, ts INTEGER NOT NULL)`}async function Le(t,e){t.sql`INSERT INTO messages (id, role, type, content, ts) VALUES (${e.id}, ${e.role}, ${e.type}, ${e.content}, ${e.ts})`}async function b(t){return t.sql`SELECT id, role, type, content, ts FROM messages ORDER BY ts ASC`}async function X(t){t.sql`DELETE FROM messages`}async function He(t){await ut(t)}function Y(t){return{"Content-Type":"application/json",Authorization:t.HX_API_KEY}}function q(t){return!!(t!=null&&t.HX_ORA_URL)&&!!(t!=null&&t.HX_API_KEY)}var dt="anonymous:";function Ke(t,e){return(t==null?void 0:t.trim())||`${dt}${e}`}async function B(t,e){if(!q(t))return null;let r=await fetch(`${t.HX_ORA_URL}/internal/runs`,{method:"POST",headers:Y(t),body:JSON.stringify(e)});return r.ok?await r.json():(console.error("[oraTriggers] createRun failed",r.status,await r.text().catch(()=>"")),null)}async function D(t,e){if(!q(t))return{claimed:!0};let r=await fetch(`${t.HX_ORA_URL}/internal/runs/${encodeURIComponent(e)}/claim`,{method:"POST",headers:Y(t)});if(!r.ok){let n=await r.text().catch(()=>"");throw new Error(`claimRun ${e} failed with ${r.status}: ${n}`)}return await r.json()}async function V(t,e,r,n=3){if(!q(t))return!0;for(let s=1;s<=n;s++){try{let o=await fetch(`${t.HX_ORA_URL}/internal/runs/${encodeURIComponent(e)}/complete`,{method:"POST",headers:Y(t),body:JSON.stringify(r)});if(o.ok||o.status===409)return!0;if(o.status===404)return console.error(`[oraTriggers] completeRun ${e} rejected with 404`),!1;console.warn(`[oraTriggers] completeRun ${e} attempt ${s} failed with ${o.status}`)}catch(o){console.warn(`[oraTriggers] completeRun ${e} attempt ${s} threw`,o)}s<n&&await new Promise(o=>setTimeout(o,250*s))}return console.error(`[oraTriggers] completeRun ${e} exhausted ${n} attempts; hx-ora will time the run out`),!1}async function je(t,e){if(!q(t))return Promise.resolve();try{return await B(t,e)}catch(r){return console.error("[oraTriggers] recordRun failed",r),null}}var Q=Object.freeze({}),mt="__SYSTEM_";function Z(t){return t.startsWith(mt)}function pt(t){let e={};for(let[r,n]of Object.entries(t))Z(r)||(e[r]=n);return Object.freeze(e)}function G(t){return(typeof t=="string"?t.trim():"")||"default"}async function Xe(t,e,r){if(!e)return Q;let n=G(r);if(t.HX_ORA_URL&&t.HX_API_KEY)try{let o=new URL(`${t.HX_ORA_URL.replace(/\/$/,"")}/internal/secrets`);o.searchParams.set("org",n);let a=await fetch(o,{headers:{Authorization:t.HX_API_KEY}});if(a.ok){let i=await a.json();if(i.secrets)return pt(i.secrets)}else console.warn(`[secrets] API failed with status ${a.status}, falling back to KV`)}catch(o){console.error("[secrets] API request failed, falling back to KV",o)}let s=t.ORA_SECRETS;if(!s)return Q;try{let o={};return await gt(s,`${e}:${n}:`,o),n==="default"&&await ft(s,e,o),Object.freeze(o)}catch(o){return console.error("[secrets] failed to load tenant secrets from KV",{tenant:e,org:n,err:o}),Q}}async function gt(t,e,r){let n=await t.list({prefix:e,limit:1e3});n.list_complete===!1&&console.warn(`[secrets] prefix=${e} exceeded list page; truncating to first 1000 keys`);let s=n.keys.filter(a=>{let i=a.name.slice(e.length);return i.length>0&&!i.includes(":")&&!Z(i)}),o=await Promise.all(s.map(async a=>{let i=await t.get(a.name);return i!==null?[a.name.slice(e.length),i]:null}));for(let a of o){if(!a)continue;let[i,c]=a;i&&(r[i]=c)}}async function ft(t,e,r){let n=`${e}:`,s=await t.list({prefix:n,limit:1e3});s.list_complete===!1&&console.warn(`[secrets] tenant=${e} legacy secrets exceeded list page; truncating to first 1000 keys`);let o=s.keys.filter(i=>{let c=i.name.slice(n.length);return c.length>0&&!c.includes(":")&&!Z(c)}),a=await Promise.all(o.map(async i=>{let c=i.name.slice(n.length);if(c in r)return null;let d=await t.get(i.name);return d!==null?[c,d]:null}));for(let i of a){if(!i)continue;let[c,d]=i;c&&(r[c]=d)}}function J(t){var s;let e=((s=t==null?void 0:t.flowData)==null?void 0:s.state)??(t==null?void 0:t.flowData),n=((e==null?void 0:e.nodes)??[]).find(o=>o.type==="startNode");return n==null?void 0:n.data}import{nanoid as _t}from"nanoid";import{streamText as yt}from"ai";var ht={short:`Up to ${j("short")} markdown lines (one fact or bullet per line). Keep constraints, working agreements, and the outline of anything already settled.`,medium:`Up to ${j("medium")} markdown lines. Group bullets by whatever this session is about (actors, constraints, decisions, current plan/state, open work). Under-remembering is worse than a few extra lines.`,long:`Up to ${j("long")} markdown lines. Same as medium, with one-line context on a decision or plan block when later turns will need it.`},wt=12,Rt=400,qe=700;function St(t,e=wt){let r=t.filter(s=>s.role==="user"||s.role==="assistant").slice(-e),n=[];for(let s of r){let o=typeof s.content=="string"?s.content:JSON.stringify(s.content??""),a=s.role==="assistant"?qe:Rt,i=o.trim().replace(/\s+/g," ").slice(0,a);i&&n.push(`${s.role==="user"?"U":"A"}: ${i}`)}return n.join(`
|
|
2
|
+
`)}function Et(t){let e=t??{},r=e.promptTokens??e.inputTokens??0,n=e.completionTokens??e.outputTokens??0,s=e.totalTokens??r+n;return{promptTokens:r,completionTokens:n,totalTokens:s}}function It(t){var e;for(let r=t.length-1;r>=0;r--)if(((e=t[r])==null?void 0:e.role)==="assistant"&&typeof t[r].content=="string")return t[r].content;return""}function xt(t){var s,o;let e=((s=t.flowData)==null?void 0:s.state)??t.flowData,r=(e==null?void 0:e.nodes)??[],n=[];for(let a of r){if(a.type!=="answerNode")continue;let i=(o=t.results)==null?void 0:o[a.id];i!=null&&n.push(typeof i=="string"?i:JSON.stringify(i))}return n.join(`
|
|
3
|
+
`)}function Tt(t){var n;let e=["You maintain a KEYPOINT memory for one agent session so later turns can continue without re-asking.",`Hard limit: ${t.maxTokens} tokens.`,ht[t.length],"The session domain is unknown: personal, operational, technical, or mixed. Do not assume a personal-coaching frame.","Store facts that will still matter: who/what is in play, constraints and invariants, preferences, decisions, current state of the work, and the outline of anything the user accepted or asked to keep.","When something was confirmed (a plan, a process, a design, a sequence), keep a compact outline \u2014 enough to resume the next part \u2014 not the assistant\u2019s full wording.","Keep earlier facts unless the user superseded them. Merge, update, dedupe. Do not collapse memory to a single identity line plus one decision.","Never copy the conversation. Never write User:/Assistant:/U:/A: lines. Drop greetings, filler, and unanswered assistant questions.","If this turn added nothing durable, return the current memory unchanged.","If memory is empty and nothing durable happened, return exactly: (none)","Use the same language as the user. Return only the bullet list \u2014 no preamble."].join(" "),r=["Current keypoint memory:",'"""',t.previous.trim()||"(empty)",'"""',"","Recent session (for extraction only; do not transcribe):",'"""',((n=t.recentTurns)==null?void 0:n.trim())||"(none)",'"""',"","This turn:",`User said: ${t.userText.trim()||"(empty)"}`,t.assistantText.trim()?`Latest assistant reply (extract accepted plan/facts only): ${t.assistantText.trim().slice(0,qe)}`:"",t.answers.trim()?`Answer outputs:
|
|
4
4
|
${t.answers.trim()}`:""].filter(Boolean).join(`
|
|
5
|
-
`);return{system:e,user:r}}function Rt(t){return Ue(t.previous,Ae(t.userText),t.maxTokens)}async function St(t){let e="",r;for await(let n of t.fullStream)n.type==="text-delta"&&(e+=n.text??n.delta??""),n.type==="error"&&(r=n.error instanceof Error?n.error.message:String(n.error??"stream error"));return{text:e.trim(),error:r}}async function Et(t){if(t.fullStream&&typeof t.fullStream[Symbol.asyncIterator]=="function")return St({fullStream:t.fullStream});try{return{text:((typeof t.text=="string"?t.text:await t.text)||"").trim()}}catch(e){return{text:"",error:e instanceof Error?e.message:String(e)}}}async function je(t){var d;let e=V(t.engineState);if(!e)return{status:"skipped",reason:"start_node_missing"};if(!Ee(e))return{status:"skipped",reason:"memory_disabled"};let r=Te(e),n=Re(r),s=Ie(e),o=Y(t.previousContent||""),a=yt(t.messages),c=ht(t.engineState),i=u=>{let h=Rt({previous:o,userText:t.userText,maxTokens:n});return{status:"written",content:h,truncated:!1,modelId:s,fallback:!0,error:h?void 0:u}};try{let u=await Pe(s,t.sessionEnv,{maxOutputTokens:n});if(!u)throw new Error(`Memory model '${s}' not found in registry`);let h=xe(r,(d=u.reasoning)==null?void 0:d.kind),{system:S,user:p}=wt({previous:o,userText:t.userText,assistantText:a,answers:c,length:r,maxTokens:n,recentTurns:ft(t.messages)}),m=ve(u.reasoning),f=Ce(u.provider,{effort:m,exposeReasoning:!1,maxTokens:h}),g=ut({model:u.modelHandle,system:S,messages:[{role:"user",content:p}],...Oe({...u.effectiveParams??{},maxOutputTokens:h}),...f?{providerOptions:f}:{}}),y=await Et(g),E=gt(await g.usage),R=Y(y.text);if(ke(R)&&(R=""),!R)return{...i(y.error||"Memory model returned empty text"),usage:E};let T=Se(R,n);return{status:"written",content:T.content,truncated:T.truncated,usage:E,modelId:s}}catch(u){let h=u instanceof Error?u.message:"Memory update failed";return console.error("Memory update failed:",u),i(h)}}async function Ke(t,e){var n,s;let r=(n=e==null?void 0:e.flowData)==null?void 0:n.flowId;if(!(t!=null&&t.HX_CORE_URL)||!r)return{engineState:e,refreshed:!1};try{let o=await P(r,t),a={...e,flowData:{...o,tenant:e.flowData.tenant,flowId:r,chatId:e.flowData.chatId}},c=o==null?void 0:o.stateVersion,i=typeof c=="number"&&c!==((s=e.flowData)==null?void 0:s.stateVersion);return{engineState:a,refreshed:i}}catch(o){return console.error(`[flowRefresh] fetch failed for flow ${r}:`,o),{engineState:e,refreshed:!1}}}function Xe(t,e){return!t||!t.HX_ORA_URL||!t.HX_API_KEY?Promise.resolve():fetch(`${t.HX_ORA_URL}/internal/sessions`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:t.HX_API_KEY},body:JSON.stringify(e)}).catch(r=>{console.error("[sessionIndex] failed to index session",r)})}var qe=async(t,e)=>{fetch(`${e.DW_URL}/q/telemetry/event`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)}),`${JSON.stringify(t)}`};async function D(t,e){var o,a;let r=t.id||t.name||"",[n,s]=String(r).split("::");if(!n||!s)return null;try{let i=(o=(await v(n,e)).metadata)==null?void 0:o.tenant,d=await P(n,e),u=(a=t.state)==null?void 0:a.user,h={flowData:{...d,tenant:i,flowId:n,chatId:s},executedNodes:[],context:u?{user:u}:{}};return t.setState({...t.state,engineState:h}),h}catch(c){return console.error("Failed to initialize engine state:",c),null}}async function $(t){var z,W,F,te,ne,re,se,oe,ae,ie,ce;let{agent:e,env:r,ctx:n,payload:s,connection:o}=t,a=Date.now(),c=[],i=t.runId?_e():void 0,d=async()=>await b(e),u=async l=>{await Ne(e,l)},h=async l=>{if(e.state.modelsCache&&e.state.modelsCache[l])return e.state.modelsCache[l];try{let{fetchOraModel:w}=await import("./oraApi-YIJGMXX7.js"),x=await w(l,r);return e.setState({...e.state,modelsCache:{...e.state.modelsCache||{},[l]:x}}),x}catch(w){throw console.error(`Error fetching model ${l}:`,w),w}},S={id:It(),role:"user",type:"text",content:s.text,images:s.images,ts:Date.now()};await u(S);let p={onChangeState:l=>{e.setState({...e.state,engineState:l})},onServerEvent:async l=>{var w;await((w=t.onServerEvent)==null?void 0:w.call(t,l)),c.push(l)},onTelemetry:async l=>{var _,le,ue,de,pe,me;let w=t.user??e.state.user,x=typeof(w==null?void 0:w.org)=="string"&&w.org.trim()?w.org.trim():"default";await qe({...l,userId:t.resolveUserId(),tenant:((le=(_=e.state.engineState)==null?void 0:_.flowData)==null?void 0:le.tenant)||"",org:x,flowId:((de=(ue=e.state.engineState)==null?void 0:ue.flowData)==null?void 0:de.flowId)||"",sessionId:((me=(pe=e.state.engineState)==null?void 0:pe.flowData)==null?void 0:me.chatId)||""},r)},onError:l=>{var w;(w=t.onError)==null||w.call(t,l),e.setState({...e.state,error:l})},shouldStop:t.shouldStop},m=e.state.engineState?{...e.state.engineState}:null;if(m){let{engineState:l,refreshed:w}=await Ke(r,m);m=l,w&&e.setState({...e.state,engineState:m,modelsCache:{}})}else if(m=await D(e,r),!m){let l="Failed to initialize agent";return p.onError(l),{status:"failed",error:l}}let f=t.secrets;if(!f||Object.keys(f).length===0){let l=(z=m.flowData)==null?void 0:z.tenant;f=l?await q(r,l):{},(W=t.onSecretsLoaded)==null||W.call(t,f)}let g=t.user??e.state.user??void 0;g&&!((F=m.context)!=null&&F.user)&&(m.context={...m.context||{},user:g});let y={env:r,ctx:n,conn:o,getMessages:d,setMessages:u,getOraModel:h,secrets:f,userAuth:t.userAuth,user:g,composioSessions:t.composioSessions,publicOrigin:t.publicOrigin,skillRefCache:t.skillRefCache,runId:t.runId,outputCollector:i,agentMemory:typeof((te=e.state.memory)==null?void 0:te.content)=="string"?e.state.memory.content:"",shouldStop:t.shouldStop,workerStack:(ne=m.flowData)!=null&&ne.flowId?[m.flowData.flowId]:[],workerCalls:{count:0}},E=await Me(y,m,p)(s),R=e.state.engineState??m;if(E.status==="completed")try{let l=await je({sessionEnv:y,engineState:R,previousContent:typeof((re=e.state.memory)==null?void 0:re.content)=="string"?e.state.memory.content:"",userText:s.text||"",messages:await d()});if(l.status==="skipped")await p.onServerEvent({type:"agent:memory",content:{skipped:!0,reason:l.reason},timestamp:Date.now()});else if(!l.content.trim())await p.onServerEvent({type:"agent:memory",content:{updated:!1,empty:!0,error:l.error,fallback:l.fallback},timestamp:Date.now()});else{let w={promptTokens:((se=R.tokenUsage)==null?void 0:se.promptTokens)??0,completionTokens:((oe=R.tokenUsage)==null?void 0:oe.completionTokens)??0,totalTokens:((ae=R.tokenUsage)==null?void 0:ae.totalTokens)??0};l.usage&&(w.promptTokens+=l.usage.promptTokens,w.completionTokens+=l.usage.completionTokens,w.totalTokens+=l.usage.totalTokens),R={...R,tokenUsage:w},e.setState({...e.state,engineState:R,memory:{content:l.content,updatedTs:Date.now(),...l.error?{lastError:l.error}:{},...l.fallback?{fallback:!0}:{}}}),await p.onTelemetry({type:"memory_update",payload:{model:l.modelId,truncated:l.truncated,usage:l.usage,fallback:l.fallback,error:l.error}}),await p.onServerEvent({type:"agent:memory",content:{updated:!0,truncated:l.truncated,fallback:l.fallback,error:l.error},timestamp:Date.now()})}}catch(l){let w=l instanceof Error?l.message:"Memory update failed";console.error("Memory update failed:",l),await p.onServerEvent({type:"agent:memory",content:{error:w},timestamp:Date.now()})}if(E.status==="completed"&&t.runId&&(i!=null&&i.hasOutputs())){let{flowId:l,chatId:w}=R.flowData??{};if(!l||!w)E={status:"failed",error:"Structured output persistence requires flowId and sessionId"};else try{await be(r,{flowId:l,sessionId:w,runId:t.runId,createdAt:new Date(a).toISOString(),data:i.snapshotData(),answerNodeIds:i.answerNodeIds()});let x={...R.results||{}};for(let _ of i.answerNodeIds())x[_]={...x[_]||{},persisted:!0,runId:t.runId};R={...R,results:x},e.setState({...e.state,engineState:R})}catch(x){let _=x instanceof Error?x.message:"Structured output persistence failed";p.onError(_),await p.onServerEvent({type:"error:answer-output",content:{runId:t.runId,error:_},timestamp:Date.now()}),E={status:"failed",error:_}}}let{tenant:T,flowId:O,chatId:U}=R.flowData??{},J=(ie=R.flowData)==null?void 0:ie.org;return T&&O&&U&&n.waitUntil(Xe(r,{id:`${O}::${U}`,tenant:T,org:J,flowId:O,sessionId:U,userId:t.resolveUserId(),title:(ce=s.text)==null?void 0:ce.slice(0,120),turnTs:a,events:c})),e.setState({...e.state,lastUpdated:new Date}),{status:E.status,error:E.error,engineState:R}}import{nanoid as Tt}from"nanoid";function xt(t){let e=t.headers.get("X-User-Payload");if(!e)return null;try{let r=JSON.parse(e),n=typeof(r==null?void 0:r.email)=="string"?M(r.email):null;return n?{...r,email:n}:null}catch{return null}}async function Ve(t,e,r,n){var s;try{let o=await e.json(),a=o.message;if(!a||typeof a!="string")return new Response(JSON.stringify({error:"Invalid message"}),{status:400,headers:{"content-type":"application/json"}});let c=typeof o.userId=="string"?M(o.userId):null,i=xt(e),d=i==null?void 0:i.email;i?t.setState({...t.state,user:i,injectedUserId:d}):c&&!((s=t.state.user)!=null&&s.email)&&t.setState({...t.state,injectedUserId:c});let u=()=>d??c??t.state.injectedUserId??void 0;t.skillRefCache||(t.skillRefCache=new Map);let h=o.inputs&&typeof o.inputs=="object"?o.inputs:void 0;if(!t.state.engineState&&!await D(t,r))return new Response(JSON.stringify({error:"Failed to initialize agent"}),{status:500,headers:{"content-type":"application/json"}});let S=`run-${Tt(12)}`;await t.registerManualRun(S,a,u()),await N(r,S).catch(g=>{console.warn(`[AgentHTTP] could not mark manual run ${S} as running`,g)});let p;try{p=await $({agent:t,env:r,ctx:n,payload:{text:a,inputs:h},skillRefCache:t.skillRefCache,user:i??void 0,resolveUserId:u,runId:S,shouldStop:()=>t.isRunStopRequested(S)}),n.waitUntil(t.completeManualRun(S,p.status==="completed"?"succeeded":p.status==="stopped"?"skipped":"failed",p.error))}finally{await t.clearRunStopRequest(S)}if(p.status==="failed")return new Response(JSON.stringify({error:p.error||"Agent execution failed"}),{status:500,headers:{"content-type":"application/json"}});if(p.status==="stopped")return new Response(JSON.stringify({error:p.error||"Stopped by user"}),{status:409,headers:{"content-type":"application/json"}});let f=(await b(t)).reverse().find(g=>g.role==="assistant");return new Response(JSON.stringify({answer:(f==null?void 0:f.content)||""}),{headers:{"content-type":"application/json"}})}catch(o){return new Response(JSON.stringify({error:o.message}),{status:500,headers:{"content-type":"application/json"}})}}async function Ge(t){try{return await j(t),t.skillRefCache&&t.skillRefCache.clear(),t.setState({...t.state,error:"",engineState:void 0,modelsCache:{},lastUpdated:new Date}),new Response(JSON.stringify({success:!0,messages:[]}),{headers:{"content-type":"application/json"}})}catch(e){return new Response(JSON.stringify({error:e.message}),{status:500,headers:{"content-type":"application/json"}})}}var Je="trigger:nonce:",Ut=900*1e3,ee="run:stop:",ze=class extends kt{initialState={user:void 0,injectedUserId:null,sessionId:null,lastUpdated:null,modelsCache:{},memory:void 0};resolveSessionUserId(){var e;return((e=this.state.user)==null?void 0:e.email)??this.state.injectedUserId??void 0}secrets=Object.freeze({});userAuth={};composioSessions={};skillRefCache=new Map;publicOrigin;async inspectPersistedSession(e){return e==="state"?{state:this.state}:e==="memory"?{memory:this.state.memory??null}:{messages:await b(this)}}async requestRunStop(e){return e!=null&&e.trim()?(await this.ctx.storage.put(`${ee}${e}`,Date.now()),{accepted:!0}):{accepted:!1}}async isRunStopRequested(e){return!!await this.ctx.storage.get(`${ee}${e}`)}async clearRunStopRequest(e){await this.ctx.storage.delete(`${ee}${e}`)}async onRequest(e){let r=new URL(e.url);if(r.pathname.endsWith("/state"))return new Response(JSON.stringify(this.state),{headers:{"content-type":"application/json"}});if(r.pathname.endsWith("/history")){let n=await b(this);return new Response(JSON.stringify(n),{headers:{"content-type":"application/json"}})}return e.method==="POST"&&r.pathname.endsWith("/message")?Ve(this,e,this.env,this.ctx):e.method==="DELETE"&&r.pathname.endsWith("/clear")?Ge(this):new Response("Ready to assist.")}async onConnect(e,r){var S,p,m,f,g;let[n,s]=e.server.split("::"),a=(S=(await v(n,this.env)).metadata)==null?void 0:S.tenant;this.secrets=await q(this.env,a),this.userAuth={},this.composioSessions={},this.publicOrigin=void 0;let c=null;if(r.request){try{this.publicOrigin=new URL(r.request.url).origin}catch{}let y=r.request.headers.get("X-User-Payload");if(y)try{c=JSON.parse(y)}catch(E){console.warn("Failed to parse X-User-Payload",E)}}let i=await P(n,this.env);this.setState({...this.state,user:c||null,sessionId:s,engineState:{flowData:{...i,tenant:a,flowId:n,chatId:s},executedNodes:[],context:c?{user:c}:{}}}),c||console.warn("[AgentDO] WebSocket connected without authenticated user \u2014 Composio manual auth requires login (access_token on socket URL)");let d=await b(this);k(e,I.SERVER_HISTORY,JSON.stringify({messages:d}));let h=(((p=i==null?void 0:i.state)==null?void 0:p.nodes)??(i==null?void 0:i.nodes)??[]).find(y=>y.type==="startNode");if(h){let y={allow_images:((m=h.data)==null?void 0:m.allow_images)??!1,allow_documents:((f=h.data)==null?void 0:f.allow_documents)??!1,greeting:(g=h.data)==null?void 0:g.greeting};k(e,I.SERVER_CONFIG,JSON.stringify(y))}}async onMessage(e,r){if(typeof r!="string")return;let n=r.indexOf(":");if(n===-1)return;let s=r.substring(0,n),o=r.substring(n+1);if(!s||!o)return;let c={[I.USER_MESSAGE]:i=>this.onUserMessage(e,i),[I.USER_CLEAR_HISTORY]:()=>this.onClearHistory(e),[I.USER_AUTH]:i=>this.onUserAuth(e,i),[I.USER_IDENTITY]:i=>this.onUserIdentity(e,i)}[s];c&&await c(o)}async onUserMessage(e,r){let n=he(r),s=`run-${At(12)}`;await this.registerManualRun(s,n.text),await N(this.env,s).catch(o=>{console.warn(`[AgentDO] could not mark manual run ${s} as running`,o)});try{let o=await $({agent:this,env:this.env,ctx:this.ctx,payload:n,connection:e,secrets:this.secrets,userAuth:this.userAuth,composioSessions:this.composioSessions,publicOrigin:this.publicOrigin,skillRefCache:this.skillRefCache,user:this.state.user,resolveUserId:()=>this.resolveSessionUserId(),runId:s,shouldStop:()=>this.isRunStopRequested(s),onServerEvent:a=>{k(e,I.SERVER_EVENT,JSON.stringify(a))},onError:a=>{k(e,I.SERVER_ERROR,a)},onSecretsLoaded:a=>{this.secrets=a}});this.ctx.waitUntil(this.completeManualRun(s,o.status==="completed"?"succeeded":o.status==="stopped"?"skipped":"failed",o.error))}finally{await this.clearRunStopRequest(s)}}registerManualRun(e,r,n){var i;let{tenant:s,flowId:o,chatId:a}=((i=this.state.engineState)==null?void 0:i.flowData)??{};if(!s||!o||!a)return Promise.resolve();let c=$e(n||this.resolveSessionUserId(),a);return Fe(this.env,{id:e,tenant:s,flowId:o,userId:c,sessionId:a,label:r==null?void 0:r.slice(0,120)})}completeManualRun(e,r,n){return X(this.env,e,{status:r,error:n})}async enqueueTrigger(e){var s;if(!(e!=null&&e.runId)||!(e!=null&&e.flowId))return{queued:!1};if(e.nonce&&!await this.claimTriggerNonce(e.nonce))return console.warn(`[AgentDO] rejected replayed trigger nonce ${e.nonce}`),{queued:!1,duplicate:!0};let r=e.runAsUserId;return r&&!((s=this.state.user)!=null&&s.email)&&this.state.injectedUserId!==r&&this.setState({...this.state,injectedUserId:r}),{queued:!0,taskId:await this.queue("processTrigger",e)}}async claimTriggerNonce(e){let r=`${Je}${e}`;if(await this.ctx.storage.get(r))return!1;let n=Date.now();await this.ctx.storage.put(r,n);let o=[...(await this.ctx.storage.list({prefix:Je})).entries()].filter(([,a])=>n-a>Ut).map(([a])=>a);return o.length>0&&await this.ctx.storage.delete(o),!0}async processTrigger(e){if(!(await N(this.env,e.runId)).claimed){console.warn(`[AgentDO] activation ${e.activationId} skipped \u2014 run ${e.runId} already claimed`);return}try{this.state.engineState||await D(this,this.env);let n=ge(V(this.state.engineState)),s=ye(n,e.inputs||{},e.label),o=await $({agent:this,env:this.env,ctx:this.ctx,payload:{text:s,inputs:e.inputs||{}},secrets:this.secrets,composioSessions:this.composioSessions,skillRefCache:this.skillRefCache,resolveUserId:()=>e.runAsUserId||this.resolveSessionUserId(),runId:e.runId,shouldStop:()=>this.isRunStopRequested(e.runId),onSecretsLoaded:a=>{this.secrets=a}});await X(this.env,e.runId,{status:o.status==="completed"?"succeeded":o.status==="stopped"?"skipped":"failed",error:o.error})}catch(n){let s=n instanceof Error?n.message:"Trigger execution failed";throw await X(this.env,e.runId,{status:"failed",error:s}),n}finally{await this.clearRunStopRequest(e.runId)}}async onUserIdentity(e,r){let n=M(r);if(!n){k(e,I.SERVER_ERROR,"Invalid identity payload");return}this.setState({...this.state,injectedUserId:n}),k(e,I.SERVER_EVENT,JSON.stringify({type:"info:identity",content:{set:!0}}))}async onUserAuth(e,r){let n=we(r);if(!n){k(e,I.SERVER_ERROR,"Invalid auth payload");return}let s=n.value.trim();s===""?delete this.userAuth[n.name]:this.userAuth[n.name]=n.value,k(e,I.SERVER_EVENT,JSON.stringify({type:"info:auth",content:{name:n.name,set:s!==""}}))}async onClearHistory(e){await j(this),this.userAuth={},this.composioSessions={},this.skillRefCache.clear(),this.setState({...this.state,error:"",engineState:this.state.engineState,memory:this.state.memory,modelsCache:{},lastUpdated:new Date}),e&&k(e,I.SERVER_HISTORY,JSON.stringify({messages:[]}))}async onStart(){`${JSON.stringify(this.state)}`,await De(this);let e=await b(this);`${JSON.stringify(e)}`}async onClose(e,r,n,s){console.log(`Session closed: ${this.state.sessionId} ${r} - ${n}`)}async onError(e){console.error("AgentDO encountered an error:",e)}};function Yr(t){let e=t.state;if(!e)return null;let r=["startNode","answerNode"];for(let n of r)if(!e.nodes.some(o=>o.type===n))return!1;return e.nodes.find(n=>n.type==="startNode")}import{importSPKI as _t,jwtVerify as bt}from"jose";function We(t){let e={};if(!t)return e;let r=t.split(";");for(let n of r){let s=n.indexOf("=");if(s>-1){let o=n.slice(0,s).trim(),a=n.slice(s+1).trim();o&&(e[o]=decodeURIComponent(a))}}return e}function Ot(t){return(typeof t.email=="string"?t.email.trim():"")||null}async function C(t,e,r){let n=We(t.headers.get("cookie")),s=new URL(t.url),o=n.access_token||s.searchParams.get("access_token"),a=await vt(e,o);if(a.ok){let c=a.payload,i=Ot(c);return i?{id:c.sub,email:i,name:c.name,first_name:c.given_name,last_name:c.family_name,tenant:c.tenant,org:typeof c.org=="string"?c.org:null,roles:c["ora-roles"],db_name:c.db_name||null,user_id:c.user_id||null}:null}return null}async function vt(t,e){if(!e||typeof e!="string")return{ok:!1,payload:null,protectedHeader:null};if(!t.KC_RS256_PK)throw new Error("PK is not defined");let r=`-----BEGIN PUBLIC KEY-----
|
|
5
|
+
`);return{system:e,user:r}}function kt(t){return ve(t.previous,be(t.userText),t.maxTokens)}async function At(t){let e="",r;for await(let n of t.fullStream)n.type==="text-delta"&&(e+=n.text??n.delta??""),n.type==="error"&&(r=n.error instanceof Error?n.error.message:String(n.error??"stream error"));return{text:e.trim(),error:r}}async function Ut(t){if(t.fullStream&&typeof t.fullStream[Symbol.asyncIterator]=="function")return At({fullStream:t.fullStream});try{return{text:((typeof t.text=="string"?t.text:await t.text)||"").trim()}}catch(e){return{text:"",error:e instanceof Error?e.message:String(e)}}}async function Ve(t){var d;let e=J(t.engineState);if(!e)return{status:"skipped",reason:"start_node_missing"};if(!ke(e))return{status:"skipped",reason:"memory_disabled"};let r=Ue(e),n=xe(r),s=Ae(e),o=W(t.previousContent||""),a=It(t.messages),i=xt(t.engineState),c=m=>{let h=kt({previous:o,userText:t.userText,maxTokens:n});return{status:"written",content:h,truncated:!1,modelId:s,fallback:!0,error:h?void 0:m}};try{let m=await $e(s,t.sessionEnv,{maxOutputTokens:n});if(!m)throw new Error(`Memory model '${s}' not found in registry`);let h=_e(r,(d=m.reasoning)==null?void 0:d.kind),{system:R,user:u}=Tt({previous:o,userText:t.userText,assistantText:a,answers:i,length:r,maxTokens:n,recentTurns:St(t.messages)}),p=Ne(m.reasoning),g=De(m.provider,{effort:p,exposeReasoning:!1,maxTokens:h}),f=yt({model:m.modelHandle,system:R,messages:[{role:"user",content:u}],...Me({...m.effectiveParams??{},maxOutputTokens:h}),...g?{providerOptions:g}:{}}),y=await Ut(f),E=Et(await f.usage),x=W(y.text);if(Oe(x)&&(x=""),!x)return{...c(y.error||"Memory model returned empty text"),usage:E};let I=Te(x,n);return{status:"written",content:I.content,truncated:I.truncated,usage:E,modelId:s}}catch(m){let h=m instanceof Error?m.message:"Memory update failed";return console.error("Memory update failed:",m),c(h)}}async function Ge(t,e){var n,s;let r=(n=e==null?void 0:e.flowData)==null?void 0:n.flowId;if(!(t!=null&&t.HX_CORE_URL)||!r)return{engineState:e,refreshed:!1};try{let o=await P(r,t),a={...e,flowData:{...o,tenant:e.flowData.tenant,flowId:r,chatId:e.flowData.chatId}},i=o==null?void 0:o.stateVersion,c=typeof i=="number"&&i!==((s=e.flowData)==null?void 0:s.stateVersion);return{engineState:a,refreshed:c}}catch(o){return console.error(`[flowRefresh] fetch failed for flow ${r}:`,o),{engineState:e,refreshed:!1}}}function Je(t,e){return!t||!t.HX_ORA_URL||!t.HX_API_KEY?Promise.resolve():fetch(`${t.HX_ORA_URL}/internal/sessions`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:t.HX_API_KEY},body:JSON.stringify(e)}).catch(r=>{console.error("[sessionIndex] failed to index session",r)})}var ze=async(t,e)=>{fetch(`${e.DW_URL}/q/telemetry/event`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)}),`${JSON.stringify(t)}`};async function $(t,e){var o,a;let r=t.id||t.name||"",[n,s]=String(r).split("::");if(!n||!s)return null;try{let c=(o=(await O(n,e)).metadata)==null?void 0:o.tenant,d=await P(n,e),m=(a=t.state)==null?void 0:a.user,h={flowData:{...d,tenant:c,flowId:n,chatId:s},executedNodes:[],context:m?{user:m}:{}};return t.setState({...t.state,engineState:h}),h}catch(i){return console.error("Failed to initialize engine state:",i),null}}async function Ot(t,e,r){var n;if(e&&t.HX_CORE_URL&&t.HX_API_KEY)try{let s=await O(e,t),o=(n=s==null?void 0:s.metadata)==null?void 0:n.org;if(typeof o=="string"&&o.trim())return G(o)}catch(s){console.warn(`[secrets] could not read org for flow ${e}`,s)}return G(r)}async function F(t){var H,ne,re,se,oe,ae,ie,ce,le,ue,de,me;let{agent:e,env:r,ctx:n,payload:s,connection:o}=t,a=Date.now(),i=[],c=t.runId?Ce():void 0,d=async()=>await b(e),m=async l=>{await Le(e,l)},h=async l=>{if(e.state.modelsCache&&e.state.modelsCache[l])return e.state.modelsCache[l];try{let{fetchOraModel:w}=await import("./oraApi-YIJGMXX7.js"),k=await w(l,r);return e.setState({...e.state,modelsCache:{...e.state.modelsCache||{},[l]:k}}),k}catch(w){throw console.error(`Error fetching model ${l}:`,w),w}},R={id:_t(),role:"user",type:"text",content:s.text,images:s.images,ts:Date.now()};await m(R);let u={onChangeState:l=>{e.setState({...e.state,engineState:l})},onServerEvent:async l=>{var w;await((w=t.onServerEvent)==null?void 0:w.call(t,l)),i.push(l)},onTelemetry:async l=>{var _,pe,ge,fe,ye,he;let w=t.user??e.state.user,k=typeof(w==null?void 0:w.org)=="string"&&w.org.trim()?w.org.trim():"default";await ze({...l,userId:t.resolveUserId(),tenant:((pe=(_=e.state.engineState)==null?void 0:_.flowData)==null?void 0:pe.tenant)||"",org:k,flowId:((fe=(ge=e.state.engineState)==null?void 0:ge.flowData)==null?void 0:fe.flowId)||"",sessionId:((he=(ye=e.state.engineState)==null?void 0:ye.flowData)==null?void 0:he.chatId)||""},r)},onError:l=>{var w;(w=t.onError)==null||w.call(t,l),e.setState({...e.state,error:l})},shouldStop:t.shouldStop},p=e.state.engineState?{...e.state.engineState}:null;if(p){let{engineState:l,refreshed:w}=await Ge(r,p);p=l,w&&e.setState({...e.state,engineState:p,modelsCache:{}})}else if(p=await $(e,r),!p){let l="Failed to initialize agent";return u.onError(l),{status:"failed",error:l}}let g=t.user??e.state.user??void 0,f=(H=p.flowData)==null?void 0:H.tenant,y=await Ot(r,(ne=p.flowData)==null?void 0:ne.flowId,g==null?void 0:g.org),E=f?await Xe(r,f,y):{};(re=t.onSecretsLoaded)==null||re.call(t,E),g&&!((se=p.context)!=null&&se.user)&&(p.context={...p.context||{},user:g});let x={env:r,ctx:n,conn:o,getMessages:d,setMessages:m,getOraModel:h,secrets:E,userAuth:t.userAuth,user:g,composioSessions:t.composioSessions,publicOrigin:t.publicOrigin,skillRefCache:t.skillRefCache,runId:t.runId,outputCollector:c,agentMemory:typeof((oe=e.state.memory)==null?void 0:oe.content)=="string"?e.state.memory.content:"",shouldStop:t.shouldStop,workerStack:(ae=p.flowData)!=null&&ae.flowId?[p.flowData.flowId]:[],workerCalls:{count:0}},I=await Fe(x,p,u)(s),S=e.state.engineState??p;if(I.status==="completed")try{let l=await Ve({sessionEnv:x,engineState:S,previousContent:typeof((ie=e.state.memory)==null?void 0:ie.content)=="string"?e.state.memory.content:"",userText:s.text||"",messages:await d()});if(l.status==="skipped")await u.onServerEvent({type:"agent:memory",content:{skipped:!0,reason:l.reason},timestamp:Date.now()});else if(!l.content.trim())await u.onServerEvent({type:"agent:memory",content:{updated:!1,empty:!0,error:l.error,fallback:l.fallback},timestamp:Date.now()});else{let w={promptTokens:((ce=S.tokenUsage)==null?void 0:ce.promptTokens)??0,completionTokens:((le=S.tokenUsage)==null?void 0:le.completionTokens)??0,totalTokens:((ue=S.tokenUsage)==null?void 0:ue.totalTokens)??0};l.usage&&(w.promptTokens+=l.usage.promptTokens,w.completionTokens+=l.usage.completionTokens,w.totalTokens+=l.usage.totalTokens),S={...S,tokenUsage:w},e.setState({...e.state,engineState:S,memory:{content:l.content,updatedTs:Date.now(),...l.error?{lastError:l.error}:{},...l.fallback?{fallback:!0}:{}}}),await u.onTelemetry({type:"memory_update",payload:{model:l.modelId,truncated:l.truncated,usage:l.usage,fallback:l.fallback,error:l.error}}),await u.onServerEvent({type:"agent:memory",content:{updated:!0,truncated:l.truncated,fallback:l.fallback,error:l.error},timestamp:Date.now()})}}catch(l){let w=l instanceof Error?l.message:"Memory update failed";console.error("Memory update failed:",l),await u.onServerEvent({type:"agent:memory",content:{error:w},timestamp:Date.now()})}if(I.status==="completed"&&t.runId&&(c!=null&&c.hasOutputs())){let{flowId:l,chatId:w}=S.flowData??{};if(!l||!w)I={status:"failed",error:"Structured output persistence requires flowId and sessionId"};else try{await Pe(r,{flowId:l,sessionId:w,runId:t.runId,createdAt:new Date(a).toISOString(),data:c.snapshotData(),answerNodeIds:c.answerNodeIds()});let k={...S.results||{}};for(let _ of c.answerNodeIds())k[_]={...k[_]||{},persisted:!0,runId:t.runId};S={...S,results:k},e.setState({...e.state,engineState:S})}catch(k){let _=k instanceof Error?k.message:"Structured output persistence failed";u.onError(_),await u.onServerEvent({type:"error:answer-output",content:{runId:t.runId,error:_},timestamp:Date.now()}),I={status:"failed",error:_}}}let{tenant:v,flowId:M,chatId:L}=S.flowData??{},te=(de=S.flowData)==null?void 0:de.org;return v&&M&&L&&n.waitUntil(Je(r,{id:`${M}::${L}`,tenant:v,org:te,flowId:M,sessionId:L,userId:t.resolveUserId(),title:(me=s.text)==null?void 0:me.slice(0,120),turnTs:a,events:i})),e.setState({...e.state,lastUpdated:new Date}),{status:I.status,error:I.error,engineState:S}}import{nanoid as bt}from"nanoid";function vt(t){let e=t.headers.get("X-User-Payload");if(!e)return null;try{let r=JSON.parse(e),n=typeof(r==null?void 0:r.email)=="string"?N(r.email):null;return n?{...r,email:n}:null}catch{return null}}async function We(t,e,r,n){var s;try{let o=await e.json(),a=o.message;if(!a||typeof a!="string")return new Response(JSON.stringify({error:"Invalid message"}),{status:400,headers:{"content-type":"application/json"}});let i=typeof o.userId=="string"?N(o.userId):null,c=vt(e),d=c==null?void 0:c.email;c?t.setState({...t.state,user:c,injectedUserId:d}):i&&!((s=t.state.user)!=null&&s.email)&&t.setState({...t.state,injectedUserId:i});let m=()=>d??i??t.state.injectedUserId??void 0;t.skillRefCache||(t.skillRefCache=new Map);let h=o.inputs&&typeof o.inputs=="object"?o.inputs:void 0;if(!t.state.engineState&&!await $(t,r))return new Response(JSON.stringify({error:"Failed to initialize agent"}),{status:500,headers:{"content-type":"application/json"}});let R=`run-${bt(12)}`;await t.registerManualRun(R,a,m()),await D(r,R).catch(f=>{console.warn(`[AgentHTTP] could not mark manual run ${R} as running`,f)});let u;try{u=await F({agent:t,env:r,ctx:n,payload:{text:a,inputs:h},skillRefCache:t.skillRefCache,user:c??void 0,resolveUserId:m,runId:R,shouldStop:()=>t.isRunStopRequested(R)}),n.waitUntil(t.completeManualRun(R,u.status==="completed"?"succeeded":u.status==="stopped"?"skipped":"failed",u.error))}finally{await t.clearRunStopRequest(R)}if(u.status==="failed")return new Response(JSON.stringify({error:u.error||"Agent execution failed"}),{status:500,headers:{"content-type":"application/json"}});if(u.status==="stopped")return new Response(JSON.stringify({error:u.error||"Stopped by user"}),{status:409,headers:{"content-type":"application/json"}});let g=(await b(t)).reverse().find(f=>f.role==="assistant");return new Response(JSON.stringify({answer:(g==null?void 0:g.content)||""}),{headers:{"content-type":"application/json"}})}catch(o){return new Response(JSON.stringify({error:o.message}),{status:500,headers:{"content-type":"application/json"}})}}async function Ye(t){try{return await X(t),t.skillRefCache&&t.skillRefCache.clear(),t.setState({...t.state,error:"",engineState:void 0,modelsCache:{},lastUpdated:new Date}),new Response(JSON.stringify({success:!0,messages:[]}),{headers:{"content-type":"application/json"}})}catch(e){return new Response(JSON.stringify({error:e.message}),{status:500,headers:{"content-type":"application/json"}})}}var Be="trigger:nonce:",Mt=900*1e3,ee="run:stop:",Qe=class extends Ct{initialState={user:void 0,injectedUserId:null,sessionId:null,lastUpdated:null,modelsCache:{},memory:void 0};resolveSessionUserId(){var e;return((e=this.state.user)==null?void 0:e.email)??this.state.injectedUserId??void 0}secrets=Object.freeze({});userAuth={};composioSessions={};skillRefCache=new Map;publicOrigin;async inspectPersistedSession(e){return e==="state"?{state:this.state}:e==="memory"?{memory:this.state.memory??null}:{messages:await b(this)}}async requestRunStop(e){return e!=null&&e.trim()?(await this.ctx.storage.put(`${ee}${e}`,Date.now()),{accepted:!0}):{accepted:!1}}async isRunStopRequested(e){return!!await this.ctx.storage.get(`${ee}${e}`)}async clearRunStopRequest(e){await this.ctx.storage.delete(`${ee}${e}`)}async onRequest(e){let r=new URL(e.url);if(r.pathname.endsWith("/state"))return new Response(JSON.stringify(this.state),{headers:{"content-type":"application/json"}});if(r.pathname.endsWith("/history")){let n=await b(this);return new Response(JSON.stringify(n),{headers:{"content-type":"application/json"}})}return e.method==="POST"&&r.pathname.endsWith("/message")?We(this,e,this.env,this.ctx):e.method==="DELETE"&&r.pathname.endsWith("/clear")?Ye(this):new Response("Ready to assist.")}async onConnect(e,r){var R,u,p,g,f;let[n,s]=e.server.split("::"),a=(R=(await O(n,this.env)).metadata)==null?void 0:R.tenant;this.userAuth={},this.composioSessions={},this.publicOrigin=void 0;let i=null;if(r.request){try{this.publicOrigin=new URL(r.request.url).origin}catch{}let y=r.request.headers.get("X-User-Payload");if(y)try{i=JSON.parse(y)}catch(E){console.warn("Failed to parse X-User-Payload",E)}}let c=await P(n,this.env);this.setState({...this.state,user:i||null,sessionId:s,engineState:{flowData:{...c,tenant:a,flowId:n,chatId:s},executedNodes:[],context:i?{user:i}:{}}}),i||console.warn("[AgentDO] WebSocket connected without authenticated user \u2014 Composio manual auth requires login (access_token on socket URL)");let d=await b(this);A(e,T.SERVER_HISTORY,JSON.stringify({messages:d}));let h=(((u=c==null?void 0:c.state)==null?void 0:u.nodes)??(c==null?void 0:c.nodes)??[]).find(y=>y.type==="startNode");if(h){let y={allow_images:((p=h.data)==null?void 0:p.allow_images)??!1,allow_documents:((g=h.data)==null?void 0:g.allow_documents)??!1,greeting:(f=h.data)==null?void 0:f.greeting};A(e,T.SERVER_CONFIG,JSON.stringify(y))}}async onMessage(e,r){if(typeof r!="string")return;let n=r.indexOf(":");if(n===-1)return;let s=r.substring(0,n),o=r.substring(n+1);if(!s||!o)return;let i={[T.USER_MESSAGE]:c=>this.onUserMessage(e,c),[T.USER_CLEAR_HISTORY]:()=>this.onClearHistory(e),[T.USER_AUTH]:c=>this.onUserAuth(e,c),[T.USER_IDENTITY]:c=>this.onUserIdentity(e,c)}[s];i&&await i(o)}async onUserMessage(e,r){let n=Ee(r),s=`run-${Pt(12)}`;await this.registerManualRun(s,n.text),await D(this.env,s).catch(o=>{console.warn(`[AgentDO] could not mark manual run ${s} as running`,o)});try{let o=await F({agent:this,env:this.env,ctx:this.ctx,payload:n,connection:e,userAuth:this.userAuth,composioSessions:this.composioSessions,publicOrigin:this.publicOrigin,skillRefCache:this.skillRefCache,user:this.state.user,resolveUserId:()=>this.resolveSessionUserId(),runId:s,shouldStop:()=>this.isRunStopRequested(s),onServerEvent:a=>{A(e,T.SERVER_EVENT,JSON.stringify(a))},onError:a=>{A(e,T.SERVER_ERROR,a)},onSecretsLoaded:a=>{this.secrets=a}});this.ctx.waitUntil(this.completeManualRun(s,o.status==="completed"?"succeeded":o.status==="stopped"?"skipped":"failed",o.error))}finally{await this.clearRunStopRequest(s)}}registerManualRun(e,r,n){var c;let{tenant:s,flowId:o,chatId:a}=((c=this.state.engineState)==null?void 0:c.flowData)??{};if(!s||!o||!a)return Promise.resolve();let i=Ke(n||this.resolveSessionUserId(),a);return je(this.env,{id:e,tenant:s,flowId:o,userId:i,sessionId:a,label:r==null?void 0:r.slice(0,120)})}completeManualRun(e,r,n){return V(this.env,e,{status:r,error:n})}async enqueueTrigger(e){var s;if(!(e!=null&&e.runId)||!(e!=null&&e.flowId))return{queued:!1};if(e.nonce&&!await this.claimTriggerNonce(e.nonce))return console.warn(`[AgentDO] rejected replayed trigger nonce ${e.nonce}`),{queued:!1,duplicate:!0};let r=e.runAsUserId;return r&&!((s=this.state.user)!=null&&s.email)&&this.state.injectedUserId!==r&&this.setState({...this.state,injectedUserId:r}),{queued:!0,taskId:await this.queue("processTrigger",e)}}async claimTriggerNonce(e){let r=`${Be}${e}`;if(await this.ctx.storage.get(r))return!1;let n=Date.now();await this.ctx.storage.put(r,n);let o=[...(await this.ctx.storage.list({prefix:Be})).entries()].filter(([,a])=>n-a>Mt).map(([a])=>a);return o.length>0&&await this.ctx.storage.delete(o),!0}async processTrigger(e){if(!(await D(this.env,e.runId)).claimed){console.warn(`[AgentDO] activation ${e.activationId} skipped \u2014 run ${e.runId} already claimed`);return}try{this.state.engineState||await $(this,this.env);let n=Re(J(this.state.engineState)),s=Se(n,e.inputs||{},e.label),o=await F({agent:this,env:this.env,ctx:this.ctx,payload:{text:s,inputs:e.inputs||{}},composioSessions:this.composioSessions,skillRefCache:this.skillRefCache,resolveUserId:()=>e.runAsUserId||this.resolveSessionUserId(),runId:e.runId,shouldStop:()=>this.isRunStopRequested(e.runId),onSecretsLoaded:a=>{this.secrets=a}});await V(this.env,e.runId,{status:o.status==="completed"?"succeeded":o.status==="stopped"?"skipped":"failed",error:o.error})}catch(n){let s=n instanceof Error?n.message:"Trigger execution failed";throw await V(this.env,e.runId,{status:"failed",error:s}),n}finally{await this.clearRunStopRequest(e.runId)}}async onUserIdentity(e,r){let n=N(r);if(!n){A(e,T.SERVER_ERROR,"Invalid identity payload");return}this.setState({...this.state,injectedUserId:n}),A(e,T.SERVER_EVENT,JSON.stringify({type:"info:identity",content:{set:!0}}))}async onUserAuth(e,r){let n=Ie(r);if(!n){A(e,T.SERVER_ERROR,"Invalid auth payload");return}let s=n.value.trim();s===""?delete this.userAuth[n.name]:this.userAuth[n.name]=n.value,A(e,T.SERVER_EVENT,JSON.stringify({type:"info:auth",content:{name:n.name,set:s!==""}}))}async onClearHistory(e){await X(this),this.userAuth={},this.composioSessions={},this.skillRefCache.clear(),this.setState({...this.state,error:"",engineState:this.state.engineState,memory:this.state.memory,modelsCache:{},lastUpdated:new Date}),e&&A(e,T.SERVER_HISTORY,JSON.stringify({messages:[]}))}async onStart(){`${JSON.stringify(this.state)}`,await He(this);let e=await b(this);`${JSON.stringify(e)}`}async onClose(e,r,n,s){console.log(`Session closed: ${this.state.sessionId} ${r} - ${n}`)}async onError(e){console.error("AgentDO encountered an error:",e)}};function rs(t){let e=t.state;if(!e)return null;let r=["startNode","answerNode"];for(let n of r)if(!e.nodes.some(o=>o.type===n))return!1;return e.nodes.find(n=>n.type==="startNode")}import{importSPKI as Nt,jwtVerify as Dt}from"jose";function Ze(t){let e={};if(!t)return e;let r=t.split(";");for(let n of r){let s=n.indexOf("=");if(s>-1){let o=n.slice(0,s).trim(),a=n.slice(s+1).trim();o&&(e[o]=decodeURIComponent(a))}}return e}function $t(t){return(typeof t.email=="string"?t.email.trim():"")||null}async function C(t,e,r){let n=Ze(t.headers.get("cookie")),s=new URL(t.url),o=n.access_token||s.searchParams.get("access_token"),a=await Ft(e,o);if(a.ok){let i=a.payload,c=$t(i);return c?{id:i.sub,email:c,name:i.name,first_name:i.given_name,last_name:i.family_name,tenant:i.tenant,org:typeof i.org=="string"?i.org:null,roles:i["ora-roles"],db_name:i.db_name||null,user_id:i.user_id||null}:null}return null}async function Ft(t,e){if(!e||typeof e!="string")return{ok:!1,payload:null,protectedHeader:null};if(!t.KC_RS256_PK)throw new Error("PK is not defined");let r=`-----BEGIN PUBLIC KEY-----
|
|
6
6
|
${t.KC_RS256_PK}
|
|
7
|
-
-----END PUBLIC KEY-----`,n=await
|
|
8
|
-
`)}async function rt(t,e){let r=await crypto.subtle.importKey("raw",Be.encode(t),{name:"HMAC",hash:"SHA-256"},!1,["sign"]);return Pt(await crypto.subtle.sign("HMAC",r,Be.encode(e)))}function Nt(t,e){if(t.length!==e.length)return!1;let r=0;for(let n=0;n<t.length;n++)r|=t.charCodeAt(n)^e.charCodeAt(n);return r===0}async function cs(t){let e=String(t.timestamp??Math.floor(Date.now()/1e3)),r=await rt(t.secret,nt({timestamp:e,nonce:t.nonce,tenant:t.tenant,destination:t.destination,body:t.body}));return{"content-type":"application/json",[tt]:t.tenant,[Ze]:e,[et]:t.nonce,[Qe]:`v1=${r}`}}async function st(t){var d,u,h,S,p;if(!((d=t.secret)!=null&&d.trim()))return{ok:!1,error:"HX_API_KEY is not configured"};let e=(u=t.headers.get(tt))==null?void 0:u.trim(),r=(h=t.headers.get(Ze))==null?void 0:h.trim(),n=(S=t.headers.get(et))==null?void 0:S.trim(),s=(p=t.headers.get(Qe))==null?void 0:p.trim();if(!e||!r||!n||!s)return{ok:!1,error:"missing signature headers"};if(!s.startsWith("v1="))return{ok:!1,error:"unsupported signature version"};let o=Number(r);if(!Number.isFinite(o))return{ok:!1,error:"invalid timestamp"};let a=Math.floor((t.now??Date.now())/1e3),c=t.toleranceSeconds??300;if(Math.abs(a-o)>c)return{ok:!1,error:"stale timestamp"};let i=await rt(t.secret.trim(),nt({timestamp:r,nonce:n,tenant:e,destination:t.url,body:t.body}));return Nt(s.slice(3),i)?{ok:!0,tenant:e,nonce:n,timestamp:o}:{ok:!1,error:"signature mismatch"}}var A=(t,e=200)=>new Response(JSON.stringify(t),{status:e,headers:{"content-type":"application/json"}});async function ot(t,e,r){var d;if(new URL(t.url).pathname!=="/api/triggers/dispatch")return;if(t.method!=="POST")return A({error:"Method not allowed"},405);let s=await t.text(),o=await st({secret:e.HX_API_KEY,body:s,url:t.url,headers:t.headers});if(!o.ok)return console.warn(`[triggers] rejected dispatch: ${o.error}`),A({error:"Invalid signature"},401);let a;try{a=JSON.parse(s)}catch{return A({error:"Invalid payload"},400)}if(!(a!=null&&a.runId)||!(a!=null&&a.flowId)||!(a!=null&&a.runAsUserId)||!(a!=null&&a.tenant)||!(a!=null&&a.activationId)||!(a!=null&&a.triggerId)||!(a!=null&&a.triggerKind)||!(a!=null&&a.invocationMode))return A({error:"activationId, triggerId, triggerKind, invocationMode, runId, flowId, runAsUserId and tenant are required"},400);if(a.tenant!==o.tenant)return A({error:"Tenant mismatch"},403);let c;try{c=await v(a.flowId,e)}catch{return A({error:"Flow not found"},404)}if(!((d=c==null?void 0:c.metadata)!=null&&d.tenant)||c.metadata.tenant!==a.tenant)return console.warn(`[triggers] flow ${a.flowId} does not belong to tenant ${a.tenant}`),A({error:"Tenant mismatch"},403);let i=await Ye(e,{...a,sessionId:a.sessionId||a.runAsUserId,nonce:o.nonce});return i.status==="error"?A({error:i.error},502):i.status==="deduped"?A({deduped:!0,runId:i.runId},200):A({accepted:!0,runId:i.runId,taskId:i.taskId},202)}var Dt=/^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/,$t=new Set(["state","messages","memory"]);async function Ft(t,e){let r=new URL(t.url);if(!r.pathname.startsWith("/api/internal/sessions/"))return;let n=r.pathname.split("/");if(n[6]!=="runs"||n[8]!=="stop"||n.length!==9)return;if(t.method!=="POST")return new Response("Method not allowed",{status:405});if(!e.HX_API_KEY||t.headers.get("Authorization")!==e.HX_API_KEY)return new Response("Unauthorized",{status:401});let s=decodeURIComponent(n[4]||""),o=decodeURIComponent(n[5]||""),a=decodeURIComponent(n[7]||"");if(!s||!o||!a)return new Response("Not found",{status:404});try{let c=await G(e.AGENT,`${s}::${o}`);return Response.json(await c.requestRunStop(a))}catch(c){return console.error("[agents] failed to request run stop",c),Response.json({error:"Failed to stop run"},{status:502})}}async function Lt(t,e){let r=new URL(t.url);if(!r.pathname.startsWith("/api/internal/sessions/"))return;if(t.method!=="GET")return new Response("Method not allowed",{status:405});let n=t.headers.get("Authorization")||"";if(!e.HX_API_KEY||n!==e.HX_API_KEY)return new Response("Unauthorized",{status:401});let s=r.pathname.split("/"),o=decodeURIComponent(s[4]||""),a=decodeURIComponent(s[5]||""),c=s[6];if(!o||!a||!c||!$t.has(c))return new Response("Not found",{status:404});try{let d=await(await G(e.AGENT,`${o}::${a}`)).inspectPersistedSession(c);return Response.json(d)}catch(i){return console.error("[agents] failed to inspect persisted session",i),Response.json({error:"Failed to inspect persisted session"},{status:502})}}async function ws(t,e,r){var c,i,d,u,h,S;let n=new URL(t.url),s=await ot(t,e,r);if(s instanceof Response)return s;let o=await Ft(t,e);if(o instanceof Response)return o;let a=await Lt(t,e);if(a instanceof Response)return a;if(n.pathname.startsWith("/a/")){let p=n.pathname.split("/"),m=p[2],f=p[3];try{if(!m)return Response.redirect(new URL("/",n.origin).toString(),302);let g;try{g=await v(m,e)}catch{return new Response("Flow not found",{status:404})}if(!g.metadata||((c=g.metadata)==null?void 0:c.status)!=="active"&&((i=g.metadata)==null?void 0:i.status)!=="activo")return new Response("NO chat",{status:404});if(((d=g.metadata)==null?void 0:d.visibility)!=="public"){let y=await C(t,e,r);if(!y){let T=new URL("/login",n.origin);return T.searchParams.set("nextURL",`${n.pathname}${n.search}`),Response.redirect(T.toString(),302)}let E=((u=g.metadata)==null?void 0:u.org)||"default",R=typeof y=="object"&&(y==null?void 0:y.org)||"default";if(E!==R)return new Response("Forbidden",{status:403})}if(!f){let y=crypto.randomUUID(),E=new URL(`/a/${m}/${y}`,n.origin);return Response.redirect(E.toString(),302)}if(!Dt.test(f))return new Response("Id del chat no v\xE1lido",{status:400})}catch(g){return console.error("Error accessing flow KV:",g),new Response("Flow error",{status:500})}}if(n.pathname.startsWith("/api/agent/flow")){let p=n.pathname.split("/"),m=p[4],f=p[5],g=`${m}::${f}`;try{let y=await C(t,e,r);if(!y){let U=new URL(t.url).searchParams.has("access_token");console.warn(`[agents] Unauthenticated agent socket upgrade (access_token query=${U}) \u2014 Composio connections from tool editor will not apply`)}let E=new Headers(t.headers);E.delete("X-User-Payload"),y&&E.set("X-User-Payload",JSON.stringify(y));let R=new Request(t,{headers:E});return(await G(e.AGENT,g)).fetch(R)}catch(y){return console.error("Error accessing agent:",y),new Response("Agent error",{status:500})}}if(n.pathname.startsWith("/api/ora/connect")){let p=n.pathname.split("/"),m=p[4],f=p[5];if(!m||!f)return new Response("Missing flowId or sessionId",{status:400});let g=t.headers.get("Authorization")||n.searchParams.get("authorization");if(!g)return new Response("Missing Authorization header",{status:401});try{let y=`${e.HX_CORE_URL}/p/v1/validation/key/agent/${m}`,R=await(await fetch(y,{method:"GET",headers:{Authorization:g}})).json();if(((h=R.payload)==null?void 0:h.flowId)!==m)return console.error("FlowId mismatch:",(S=R.payload)==null?void 0:S.flowId,"!==",m),new Response("Validation error",{status:403});let T=`${m}::${f}`,O=await C(t,e,r);if(!O){let F=new URL(t.url).searchParams.has("access_token");console.warn(`[agents] Unauthenticated agent socket upgrade (access_token query=${F}) \u2014 Composio connections from tool editor will not apply`)}let U=new Headers(t.headers);U.delete("X-User-Payload"),O&&U.set("X-User-Payload",JSON.stringify(O));let J=new Request(t,{headers:U});return(await G(e.AGENT,T)).fetch(J)}catch(y){return console.error("Error in /api/ora/connect:",y),new Response("Internal error",{status:500})}}}async function Es(t,e,r){let n=new URL(t.url),s=t.method;if(!n.pathname.startsWith("/api/instances"))return;let o=await C(t,e,r);if(!o)return new Response("Unauthorized",{status:401});let a=e.HX_CORE_URL,c=e.HX_API_KEY;if(!a||!c)return console.error("Missing configuration: HX_CORE_URL or HX_API_KEY"),new Response("Internal Server Error",{status:500});let d=n.pathname.slice("/api/instances".length);d.startsWith("/")&&(d=d.slice(1)),d.endsWith("/")&&(d=d.slice(0,-1));let u="/ora/instances";d&&(u+=`/${d}`);let h=a.endsWith("/")?a.slice(0,-1):a,S=new URL(`${h}${u}`);n.searchParams.forEach((f,g)=>{S.searchParams.set(g,f)}),s==="GET"&&!d&&S.searchParams.set("filter_user_id",o.email);let p=new Headers;p.set("Authorization",c),p.set("Content-Type","application/json"),p.set("X-User-Payload",JSON.stringify(o));let m={method:s,headers:p};if(["POST","PATCH","PUT"].includes(s))try{m.body=await t.text()}catch(f){console.error("Error reading request body:",f)}try{let f=await fetch(S.toString(),m),g=await f.text();return new Response(g,{status:f.status,headers:{"Content-Type":"application/json"}})}catch(f){return console.error("Error proxying to flow instance backend:",f),new Response("Internal Server Error",{status:500})}}async function xs(t,e,r){let n=new URL(t.url);if(t.method==="POST"&&n.pathname==="/auth/login")try{let s=await t.formData(),o=s.get("username"),a=s.get("password"),c=s.get("nextURL")||"/";if(!o||!a)return new Response("Missing username or password",{status:400});let i=new URLSearchParams;i.append("username",o),i.append("password",a),i.append("grant_type","password"),i.append("client_id",e.KC_CLIENT_ID),i.append("client_secret",e.KC_CLIENT_SECRET);let d=await fetch(`${e.KC_BASE_URL}/protocol/openid-connect/token`,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Cookie:"hxsecure=1"},body:i});if(!d.ok)return new Response("Unauthorized",{status:401});let u=await d.json(),h=new Response(null,{status:302,headers:{Location:c}}),p=n.protocol==="https:"?"; Secure":"",m=(f,g,y)=>{h.headers.append("Set-Cookie",`${f}=${g}; Path=/; HttpOnly${p}; SameSite=Lax; Max-Age=${y}`)};return u.access_token&&m("access_token",u.access_token,u.expires_in),u.refresh_token&&m("refresh_token",u.refresh_token,u.refresh_expires_in||3600*24*30),u.id_token&&m("id_token",u.id_token,u.expires_in),h}catch(s){return console.error("Auth error:",s),new Response("Internal Server Error",{status:500})}if(n.pathname==="/auth/logout"){let s=new Response(null,{status:302,headers:{Location:"/login"}}),o=a=>{s.headers.append("Set-Cookie",`${a}=; Path=/; HttpOnly; Secure; SameSite=Strict; Max-Age=0`)};return o("access_token"),o("refresh_token"),o("id_token"),s}if(n.pathname.startsWith("/s/")){let s=await C(t,e,r);if(!s){let o=new URL("/login",n.origin);return o.searchParams.set("nextURL",`${n.pathname}${n.search}`),Response.redirect(o.toString(),302)}return{user:s}}}export{it as ANONYMOUS_RUN_USER_PREFIX,ze as AgentDO,Zt as DEFAULT_MEMORY_LENGTH,en as DEFAULT_MEMORY_MODEL,zt as FLOW_INPUT_NAME_RE,Wn as FlowExecutionStoppedError,bn as GENERATION_PARAM_KEYS,vn as GENERATION_PRESETS,Yt as MAX_USER_IDENTITY_LENGTH,Bt as MEMORY_LENGTH_MD_LINES,Qt as MEMORY_LENGTH_TOKENS,Yn as MODEL_REGISTRY_SNAPSHOT,L as NodeType,rn as OUT_VAR_NAME_RE,On as PRESET_PARAM_KEYS,Kn as REASONING_EFFORT_LEVELS,zn as TOOL_REGISTRY_SNAPSHOT,et as TRIGGER_NONCE_HEADER,Qe as TRIGGER_SIGNATURE_HEADER,is as TRIGGER_SIGNATURE_TOLERANCE_SECONDS,tt as TRIGGER_TENANT_HEADER,Ze as TRIGGER_TIMESTAMP_HEADER,hn as VariableResolutionError,Mn as applyPresetToOverrides,Ce as buildReasoningProviderOptions,un as buildScope,cs as buildSignedTriggerHeaders,ye as buildTriggerMessageText,Xt as buildUrl,Ot as canonicalUserEmail,Se as capMemoryContent,N as claimRun,j as clearAllMessages,X as completeRun,Ht as convertTempMessure,Q as createRun,Cn as deriveParamSupport,Ye as dispatchTrigger,Gt as embedText,De as ensureAgentTables,at as ensureMessagesTable,nn as estimateTokens,Sn as extractOutVarValues,xn as extractTemplateReferences,Ae as extractUserKeypoints,dn as findScopedSourceNode,b as getAllMessages,cn as getAncestorNodeIds,sn as getDefaultOutVars,an as getEffectiveOutVars,ge as getFlowInputDefs,Bn as getModelEntry,pn as getRefTail,ln as getUpstreamOutVars,ws as handleAgentsRoutes,xs as handleAuthRoutes,ns as handleCommonRoutes,Es as handleIntancesRoutes,Lt as handlePersistedSessionInspection,Ft as handleSessionRunControl,ot as handleTriggerRoutes,Vt as hashText,D as initializeEngineState,mn as isBinaryOutVar,fn as isJsonContentType,Ee as isStartMemoryEnabled,_n as jsonSchemaToZod,fe as logc,ke as looksLikeTranscript,xe as memoryGenerationMaxTokens,H as memoryMdLineLimit,Re as memoryTokenLimit,Ue as mergeKeypointMemory,I as messageTypes,Mt as normalizeDestination,Dn as normalizeEffectiveParams,Wt as normalizeFlowInputs,Gn as normalizeModelEntry,Xn as normalizeReasoning,Fn as openAiReasoningParamSupport,$n as openAiStandardParamSupport,We as parseCookies,tn as parseMemoryLength,gn as parsePayloadText,Tn as parseTemplateExpression,we as parseUserAuth,he as parseUserMessage,Nn as pickNodeOverrides,yn as readFetchPayload,qn as reasoningEffortLevels,Vn as reasoningExposable,Fe as recordRun,Jn as registerProvider,Un as resolveAnswerMappings,Pe as resolveModelById,In as resolveOutVarRef,Rn as resolveOutVarValue,Pn as resolvePreset,ve as resolveReasoningEffort,En as resolveReference,$e as resolveRunUserId,An as resolveTemplate,kn as rewriteTemplateNodeRefs,$ as runAgentTurn,Kt as safeParseJSON,Y as sanitizeMemoryDocument,M as sanitizeUserIdentity,qe as sendEvent,k as serverSend,Ne as setMessage,rt as signTriggerMaterial,Me as startEngine,Te as startMemoryLength,Ie as startMemoryModel,jn as stripUnsupportedFromNodeData,jt as tempTool,Nt as timingSafeEqualHex,Oe as toStreamTextSettings,nt as triggerSignatureMaterial,qt as twitter,Yr as validateFlowStart,on as validateOutVars,Jt as vectorize,vt as verifyToken,st as verifyTriggerRequest,C as verifyUser,wn as walkPath,Hn as workersAiParamSupport,Ln as xaiParamSupport};
|
|
7
|
+
-----END PUBLIC KEY-----`,n=await Nt(r,"RS256");try{let{payload:s,protectedHeader:o}=await Dt(e,n);return{ok:!0,payload:s,protectedHeader:o}}catch(s){return console.error("JWT verification failed:",s),{ok:!1,payload:null,protectedHeader:null}}}async function ls(t,e,r){let n=new URL(t.url);if(n.pathname==="/favicon.ico")return new Response(null,{status:204});if(n.pathname.startsWith("/.well-known/appspecific"))return new Response(null,{status:204})}import{getAgentByName as z}from"agents";import{getAgentByName as Lt}from"agents";async function et(t,e){let r=e.sessionId||e.runAsUserId,n=e.inputs||{},s=e.runId;if(!s){let c=await B(t,{tenant:e.tenant,flowId:e.flowId,userId:e.runAsUserId,sessionId:r,triggerId:e.triggerId,triggerKind:e.triggerKind,invocationMode:e.invocationMode,activationId:e.activationId,deliveryId:void 0,externalDeliveryId:e.externalDeliveryId,correlationKey:e.correlationKey,inputs:n,label:e.label});if(!c)return{status:"error",error:"Failed to register run"};if(!c.created&&c.run.status!=="queued")return{status:"deduped",runId:c.run.id};s=c.run.id}let o={...e,sessionId:r,runId:s,inputs:n},i=await(await Lt(t.AGENT,`${e.flowId}::${r}`)).enqueueTrigger(o);return i.duplicate?{status:"deduped",runId:s}:i.queued?{status:"queued",runId:s,activation:o,taskId:i.taskId}:{status:"error",error:"Failed to queue trigger"}}var nt="x-ora-signature",rt="x-ora-timestamp",st="x-ora-nonce",ot="x-ora-tenant",gs=300,tt=new TextEncoder;function Ht(t){return[...new Uint8Array(t)].map(e=>e.toString(16).padStart(2,"0")).join("")}function Kt(t){try{let e=new URL(t);return`${e.origin}${e.pathname.replace(/\/$/,"")}`}catch{return t.replace(/\/$/,"")}}function at(t){return["v1",t.timestamp,t.nonce,t.tenant,Kt(t.destination),t.body].join(`
|
|
8
|
+
`)}async function it(t,e){let r=await crypto.subtle.importKey("raw",tt.encode(t),{name:"HMAC",hash:"SHA-256"},!1,["sign"]);return Ht(await crypto.subtle.sign("HMAC",r,tt.encode(e)))}function jt(t,e){if(t.length!==e.length)return!1;let r=0;for(let n=0;n<t.length;n++)r|=t.charCodeAt(n)^e.charCodeAt(n);return r===0}async function fs(t){let e=String(t.timestamp??Math.floor(Date.now()/1e3)),r=await it(t.secret,at({timestamp:e,nonce:t.nonce,tenant:t.tenant,destination:t.destination,body:t.body}));return{"content-type":"application/json",[ot]:t.tenant,[rt]:e,[st]:t.nonce,[nt]:`v1=${r}`}}async function ct(t){var d,m,h,R,u;if(!((d=t.secret)!=null&&d.trim()))return{ok:!1,error:"HX_API_KEY is not configured"};let e=(m=t.headers.get(ot))==null?void 0:m.trim(),r=(h=t.headers.get(rt))==null?void 0:h.trim(),n=(R=t.headers.get(st))==null?void 0:R.trim(),s=(u=t.headers.get(nt))==null?void 0:u.trim();if(!e||!r||!n||!s)return{ok:!1,error:"missing signature headers"};if(!s.startsWith("v1="))return{ok:!1,error:"unsupported signature version"};let o=Number(r);if(!Number.isFinite(o))return{ok:!1,error:"invalid timestamp"};let a=Math.floor((t.now??Date.now())/1e3),i=t.toleranceSeconds??300;if(Math.abs(a-o)>i)return{ok:!1,error:"stale timestamp"};let c=await it(t.secret.trim(),at({timestamp:r,nonce:n,tenant:e,destination:t.url,body:t.body}));return jt(s.slice(3),c)?{ok:!0,tenant:e,nonce:n,timestamp:o}:{ok:!1,error:"signature mismatch"}}var U=(t,e=200)=>new Response(JSON.stringify(t),{status:e,headers:{"content-type":"application/json"}});async function lt(t,e,r){var d;if(new URL(t.url).pathname!=="/api/triggers/dispatch")return;if(t.method!=="POST")return U({error:"Method not allowed"},405);let s=await t.text(),o=await ct({secret:e.HX_API_KEY,body:s,url:t.url,headers:t.headers});if(!o.ok)return console.warn(`[triggers] rejected dispatch: ${o.error}`),U({error:"Invalid signature"},401);let a;try{a=JSON.parse(s)}catch{return U({error:"Invalid payload"},400)}if(!(a!=null&&a.runId)||!(a!=null&&a.flowId)||!(a!=null&&a.runAsUserId)||!(a!=null&&a.tenant)||!(a!=null&&a.activationId)||!(a!=null&&a.triggerId)||!(a!=null&&a.triggerKind)||!(a!=null&&a.invocationMode))return U({error:"activationId, triggerId, triggerKind, invocationMode, runId, flowId, runAsUserId and tenant are required"},400);if(a.tenant!==o.tenant)return U({error:"Tenant mismatch"},403);let i;try{i=await O(a.flowId,e)}catch{return U({error:"Flow not found"},404)}if(!((d=i==null?void 0:i.metadata)!=null&&d.tenant)||i.metadata.tenant!==a.tenant)return console.warn(`[triggers] flow ${a.flowId} does not belong to tenant ${a.tenant}`),U({error:"Tenant mismatch"},403);let c=await et(e,{...a,sessionId:a.sessionId||a.runAsUserId,nonce:o.nonce});return c.status==="error"?U({error:c.error},502):c.status==="deduped"?U({deduped:!0,runId:c.runId},200):U({accepted:!0,runId:c.runId,taskId:c.taskId},202)}var Xt=/^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/,qt=new Set(["state","messages","memory"]);async function Vt(t,e){let r=new URL(t.url);if(!r.pathname.startsWith("/api/internal/sessions/"))return;let n=r.pathname.split("/");if(n[6]!=="runs"||n[8]!=="stop"||n.length!==9)return;if(t.method!=="POST")return new Response("Method not allowed",{status:405});if(!e.HX_API_KEY||t.headers.get("Authorization")!==e.HX_API_KEY)return new Response("Unauthorized",{status:401});let s=decodeURIComponent(n[4]||""),o=decodeURIComponent(n[5]||""),a=decodeURIComponent(n[7]||"");if(!s||!o||!a)return new Response("Not found",{status:404});try{let i=await z(e.AGENT,`${s}::${o}`);return Response.json(await i.requestRunStop(a))}catch(i){return console.error("[agents] failed to request run stop",i),Response.json({error:"Failed to stop run"},{status:502})}}async function Gt(t,e){let r=new URL(t.url);if(!r.pathname.startsWith("/api/internal/sessions/"))return;if(t.method!=="GET")return new Response("Method not allowed",{status:405});let n=t.headers.get("Authorization")||"";if(!e.HX_API_KEY||n!==e.HX_API_KEY)return new Response("Unauthorized",{status:401});let s=r.pathname.split("/"),o=decodeURIComponent(s[4]||""),a=decodeURIComponent(s[5]||""),i=s[6];if(!o||!a||!i||!qt.has(i))return new Response("Not found",{status:404});try{let d=await(await z(e.AGENT,`${o}::${a}`)).inspectPersistedSession(i);return Response.json(d)}catch(c){return console.error("[agents] failed to inspect persisted session",c),Response.json({error:"Failed to inspect persisted session"},{status:502})}}async function ks(t,e,r){var i,c,d,m,h,R;let n=new URL(t.url),s=await lt(t,e,r);if(s instanceof Response)return s;let o=await Vt(t,e);if(o instanceof Response)return o;let a=await Gt(t,e);if(a instanceof Response)return a;if(n.pathname.startsWith("/a/")){let u=n.pathname.split("/"),p=u[2],g=u[3];try{if(!p)return Response.redirect(new URL("/",n.origin).toString(),302);let f;try{f=await O(p,e)}catch{return new Response("Flow not found",{status:404})}if(!f.metadata||((i=f.metadata)==null?void 0:i.status)!=="active"&&((c=f.metadata)==null?void 0:c.status)!=="activo")return new Response("NO chat",{status:404});if(((d=f.metadata)==null?void 0:d.visibility)!=="public"){let y=await C(t,e,r);if(!y){let I=new URL("/login",n.origin);return I.searchParams.set("nextURL",`${n.pathname}${n.search}`),Response.redirect(I.toString(),302)}let E=((m=f.metadata)==null?void 0:m.org)||"default",x=typeof y=="object"&&(y==null?void 0:y.org)||"default";if(E!==x)return new Response("Forbidden",{status:403})}if(!g){let y=crypto.randomUUID(),E=new URL(`/a/${p}/${y}`,n.origin);return Response.redirect(E.toString(),302)}if(!Xt.test(g))return new Response("Id del chat no v\xE1lido",{status:400})}catch(f){return console.error("Error accessing flow KV:",f),new Response("Flow error",{status:500})}}if(n.pathname.startsWith("/api/agent/flow")){let u=n.pathname.split("/"),p=u[4],g=u[5],f=`${p}::${g}`;try{let y=await C(t,e,r);if(!y){let v=new URL(t.url).searchParams.has("access_token");console.warn(`[agents] Unauthenticated agent socket upgrade (access_token query=${v}) \u2014 Composio connections from tool editor will not apply`)}let E=new Headers(t.headers);E.delete("X-User-Payload"),y&&E.set("X-User-Payload",JSON.stringify(y));let x=new Request(t,{headers:E});return(await z(e.AGENT,f)).fetch(x)}catch(y){return console.error("Error accessing agent:",y),new Response("Agent error",{status:500})}}if(n.pathname.startsWith("/api/ora/connect")){let u=n.pathname.split("/"),p=u[4],g=u[5];if(!p||!g)return new Response("Missing flowId or sessionId",{status:400});let f=t.headers.get("Authorization")||n.searchParams.get("authorization");if(!f)return new Response("Missing Authorization header",{status:401});try{let y=`${e.HX_CORE_URL}/p/v1/validation/key/agent/${p}`,x=await(await fetch(y,{method:"GET",headers:{Authorization:f}})).json();if(((h=x.payload)==null?void 0:h.flowId)!==p)return console.error("FlowId mismatch:",(R=x.payload)==null?void 0:R.flowId,"!==",p),new Response("Validation error",{status:403});let I=`${p}::${g}`,S=await C(t,e,r);if(!S){let H=new URL(t.url).searchParams.has("access_token");console.warn(`[agents] Unauthenticated agent socket upgrade (access_token query=${H}) \u2014 Composio connections from tool editor will not apply`)}let v=new Headers(t.headers);v.delete("X-User-Payload"),S&&v.set("X-User-Payload",JSON.stringify(S));let M=new Request(t,{headers:v});return(await z(e.AGENT,I)).fetch(M)}catch(y){return console.error("Error in /api/ora/connect:",y),new Response("Internal error",{status:500})}}}async function _s(t,e,r){let n=new URL(t.url),s=t.method;if(!n.pathname.startsWith("/api/instances"))return;let o=await C(t,e,r);if(!o)return new Response("Unauthorized",{status:401});let a=e.HX_CORE_URL,i=e.HX_API_KEY;if(!a||!i)return console.error("Missing configuration: HX_CORE_URL or HX_API_KEY"),new Response("Internal Server Error",{status:500});let d=n.pathname.slice("/api/instances".length);d.startsWith("/")&&(d=d.slice(1)),d.endsWith("/")&&(d=d.slice(0,-1));let m="/ora/instances";d&&(m+=`/${d}`);let h=a.endsWith("/")?a.slice(0,-1):a,R=new URL(`${h}${m}`);n.searchParams.forEach((g,f)=>{R.searchParams.set(f,g)}),s==="GET"&&!d&&R.searchParams.set("filter_user_id",o.email);let u=new Headers;u.set("Authorization",i),u.set("Content-Type","application/json"),u.set("X-User-Payload",JSON.stringify(o));let p={method:s,headers:u};if(["POST","PATCH","PUT"].includes(s))try{p.body=await t.text()}catch(g){console.error("Error reading request body:",g)}try{let g=await fetch(R.toString(),p),f=await g.text();return new Response(f,{status:g.status,headers:{"Content-Type":"application/json"}})}catch(g){return console.error("Error proxying to flow instance backend:",g),new Response("Internal Server Error",{status:500})}}async function vs(t,e,r){let n=new URL(t.url);if(t.method==="POST"&&n.pathname==="/auth/login")try{let s=await t.formData(),o=s.get("username"),a=s.get("password"),i=s.get("nextURL")||"/";if(!o||!a)return new Response("Missing username or password",{status:400});let c=new URLSearchParams;c.append("username",o),c.append("password",a),c.append("grant_type","password"),c.append("client_id",e.KC_CLIENT_ID),c.append("client_secret",e.KC_CLIENT_SECRET);let d=await fetch(`${e.KC_BASE_URL}/protocol/openid-connect/token`,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Cookie:"hxsecure=1"},body:c});if(!d.ok)return new Response("Unauthorized",{status:401});let m=await d.json(),h=new Response(null,{status:302,headers:{Location:i}}),u=n.protocol==="https:"?"; Secure":"",p=(g,f,y)=>{h.headers.append("Set-Cookie",`${g}=${f}; Path=/; HttpOnly${u}; SameSite=Lax; Max-Age=${y}`)};return m.access_token&&p("access_token",m.access_token,m.expires_in),m.refresh_token&&p("refresh_token",m.refresh_token,m.refresh_expires_in||3600*24*30),m.id_token&&p("id_token",m.id_token,m.expires_in),h}catch(s){return console.error("Auth error:",s),new Response("Internal Server Error",{status:500})}if(n.pathname==="/auth/logout"){let s=new Response(null,{status:302,headers:{Location:"/login"}}),o=a=>{s.headers.append("Set-Cookie",`${a}=; Path=/; HttpOnly; Secure; SameSite=Strict; Max-Age=0`)};return o("access_token"),o("refresh_token"),o("id_token"),s}if(n.pathname.startsWith("/s/")){let s=await C(t,e,r);if(!s){let o=new URL("/login",n.origin);return o.searchParams.set("nextURL",`${n.pathname}${n.search}`),Response.redirect(o.toString(),302)}return{user:s}}}export{dt as ANONYMOUS_RUN_USER_PREFIX,Qe as AgentDO,an as DEFAULT_MEMORY_LENGTH,cn as DEFAULT_MEMORY_MODEL,tn as FLOW_INPUT_NAME_RE,nr as FlowExecutionStoppedError,Dn as GENERATION_PARAM_KEYS,Fn as GENERATION_PRESETS,rn as MAX_USER_IDENTITY_LENGTH,sn as MEMORY_LENGTH_MD_LINES,on as MEMORY_LENGTH_TOKENS,rr as MODEL_REGISTRY_SNAPSHOT,K as NodeType,dn as OUT_VAR_NAME_RE,$n as PRESET_PARAM_KEYS,Wn as REASONING_EFFORT_LEVELS,tr as TOOL_REGISTRY_SNAPSHOT,st as TRIGGER_NONCE_HEADER,nt as TRIGGER_SIGNATURE_HEADER,gs as TRIGGER_SIGNATURE_TOLERANCE_SECONDS,ot as TRIGGER_TENANT_HEADER,rt as TRIGGER_TIMESTAMP_HEADER,Tn as VariableResolutionError,Kn as applyPresetToOverrides,De as buildReasoningProviderOptions,hn as buildScope,fs as buildSignedTriggerHeaders,Se as buildTriggerMessageText,Yt as buildUrl,$t as canonicalUserEmail,Te as capMemoryContent,D as claimRun,X as clearAllMessages,V as completeRun,Jt as convertTempMessure,B as createRun,Ln as deriveParamSupport,et as dispatchTrigger,Zt as embedText,He as ensureAgentTables,ut as ensureMessagesTable,un as estimateTokens,Un as extractOutVarValues,vn as extractTemplateReferences,be as extractUserKeypoints,wn as findScopedSourceNode,b as getAllMessages,fn as getAncestorNodeIds,mn as getDefaultOutVars,gn as getEffectiveOutVars,Re as getFlowInputDefs,sr as getModelEntry,Rn as getRefTail,yn as getUpstreamOutVars,ks as handleAgentsRoutes,vs as handleAuthRoutes,ls as handleCommonRoutes,_s as handleIntancesRoutes,Gt as handlePersistedSessionInspection,Vt as handleSessionRunControl,lt as handleTriggerRoutes,Qt as hashText,$ as initializeEngineState,Sn as isBinaryOutVar,En as isJsonContentType,ke as isStartMemoryEnabled,Nn as jsonSchemaToZod,we as logc,Oe as looksLikeTranscript,_e as memoryGenerationMaxTokens,j as memoryMdLineLimit,xe as memoryTokenLimit,ve as mergeKeypointMemory,T as messageTypes,Kt as normalizeDestination,Xn as normalizeEffectiveParams,nn as normalizeFlowInputs,Zn as normalizeModelEntry,Yn as normalizeReasoning,Vn as openAiReasoningParamSupport,qn as openAiStandardParamSupport,Ze as parseCookies,ln as parseMemoryLength,In as parsePayloadText,bn as parseTemplateExpression,Ie as parseUserAuth,Ee as parseUserMessage,jn as pickNodeOverrides,xn as readFetchPayload,Bn as reasoningEffortLevels,Qn as reasoningExposable,je as recordRun,er as registerProvider,Mn as resolveAnswerMappings,$e as resolveModelById,On as resolveOutVarRef,An as resolveOutVarValue,Hn as resolvePreset,Ne as resolveReasoningEffort,_n as resolveReference,Ke as resolveRunUserId,Pn as resolveTemplate,Cn as rewriteTemplateNodeRefs,F as runAgentTurn,Wt as safeParseJSON,W as sanitizeMemoryDocument,N as sanitizeUserIdentity,ze as sendEvent,A as serverSend,Le as setMessage,it as signTriggerMaterial,Fe as startEngine,Ue as startMemoryLength,Ae as startMemoryModel,zn as stripUnsupportedFromNodeData,zt as tempTool,jt as timingSafeEqualHex,Me as toStreamTextSettings,at as triggerSignatureMaterial,Bt as twitter,rs as validateFlowStart,pn as validateOutVars,en as vectorize,Ft as verifyToken,ct as verifyTriggerRequest,C as verifyUser,kn as walkPath,Jn as workersAiParamSupport,Gn as xaiParamSupport};
|
|
@@ -16,8 +16,6 @@ export interface AgentTurnOptions {
|
|
|
16
16
|
payload: UserMessagePayload;
|
|
17
17
|
/** Live socket, when the turn came from a WebSocket message. */
|
|
18
18
|
connection?: Connection;
|
|
19
|
-
/** Pre-loaded tenant secrets (DO keeps them in memory); reloaded when missing. */
|
|
20
|
-
secrets?: SecretsMap;
|
|
21
19
|
userAuth?: SecretsMap;
|
|
22
20
|
composioSessions?: Record<string, ComposioSessionMeta>;
|
|
23
21
|
publicOrigin?: string;
|
|
@@ -1,2 +1,4 @@
|
|
|
1
1
|
export type SecretsMap = Readonly<Record<string, string>>;
|
|
2
|
-
|
|
2
|
+
/** Org scope for a secret read. Blank falls back to the gateway default. */
|
|
3
|
+
export declare function secretOrg(org: string | null | undefined): string;
|
|
4
|
+
export declare function loadTenantSecrets(env: Env, tenant: string | undefined | null, org?: string | null): Promise<SecretsMap>;
|