@indx-workspace/embedded 0.0.0-bootstrap → 0.3.0

package/dist/web/.next-embedded/server/chunks/2049.js

@@ -0,0 +1,12 @@
+"use strict";exports.id=2049,exports.ids=[2049],exports.modules={10:(a,b,c)=>{c.d(b,{aO:()=>e,ox:()=>f});let d=globalThis;function e(){return d.__agentWorkspaceRunApiEnvironment__??null}let f="the run API has no environment installed: call installRunApi() with an authenticator, an agent lookup, a run store and a runtime launcher. This server will not guess any of them."},10582:(a,b,c)=>{c.d(b,{Qb:()=>f,c7:()=>g,sL:()=>d}),c(47358);let d=["queued","running","completed","failed","cancelled"],e=new Set(["completed","failed","cancelled"]);function f(a){return e.has(a)}let g=["anthropic","anthropic-compatible","openai","azure-openai","openai-compatible"]},16523:(a,b,c)=>{c.d(b,{Yj:()=>t,fb:()=>v});var d=c(24147),e=c(88367),f=c(75796);d.Ikc({status:d.k5n(f.LV),error:d.YjP().nullable()}).strict().readonly(),d.Ikc({status:d.KCZ([d.k5n(f.LV),d.euz("unknown")]),message:d.YjP()}).strict().readonly(),d.Ikc({reason:d.YjP(),resumedAfter:d.YjP().nullable()}).strict().readonly(),d._H3({kind:d.YjP().min(1)}).readonly();let g=d.k5n(["read","edit","delete","move","search","execute","fetch","mcp","other"]),h=d.k5n(["end_turn","max_turns","max_budget","refusal","cancelled","error"]);d.Ikc({truncated:d.euz(!0),encodedBytes:d.aig().int().nonnegative().nullable(),limitBytes:d.aig().int().positive()}).strict().readonly();let i={engine:e.FE,raw:d.L5J()},j=d.Ikc({frame:d.euz("agent.session"),...i,engineSessionId:d.YjP().min(1),model:d.YjP().min(1).nullable()}).strict().readonly(),k=d.gMt("type",[d.Ikc({type:d.euz("text"),text:d.YjP()}).strict(),d.Ikc({type:d.euz("reasoning"),text:d.YjP()}).strict()]).readonly(),l=d.Ikc({frame:d.euz("agent.message"),...i,messageId:d.YjP().min(1).nullable(),role:d.k5n(["assistant","user"]),blocks:d.YOg(k).readonly()}).strict().readonly(),m=d.Ikc({frame:d.euz("agent.message.delta"),...i,messageId:d.YjP().min(1).nullable(),block:d.k5n(["text","reasoning"]),text:d.YjP()}).strict().readonly(),n=d.Ikc({frame:d.euz("agent.tool.call"),...i,toolCallId:d.YjP().min(1),name:d.YjP().min(1),kind:g,input:d.L5J()}).strict().readonly(),o=d.Ikc({frame:d.euz("agent.tool.result"),...i,toolCallId:d.YjP().min(1),status:d.k5n(["completed","failed"]),output:d.YjP(),isError:d.zMY()}).strict().readonly(),p=d.Ikc({frame:d.euz("agent.usage"),...i,inputTokens:d.aig().int().nonnegative(),outputTokens:d.aig().int().nonnegative(),cacheReadInputTokens:d.aig().int().nonnegative().nullable(),cacheCreationInputTokens:d.aig().int().nonnegative().nullable(),reasoningTokens:d.aig().int().nonnegative().nullable()}).strict().readonly(),q=d.Ikc({frame:d.euz("agent.result"),...i,stopReason:h,turns:d.aig().int().nonnegative().nullable(),engineCostUsd:d.aig().nonnegative().nullable()}).strict().readonly(),r=d.Ikc({frame:d.euz("agent.native"),...i,type:d.YjP().min(1),payload:d.L5J()}).strict().readonly(),s=d.Ikc({frame:d.euz("agent.malformed"),...i,reason:d.YjP().min(1)}).strict().readonly(),t=d.gMt("frame",[j,l,m,n,o,p,q,r,s]),u=new Set(["system","system-unknown","result","result-unknown","sdk-event","unknown","malformed"]);function v(a){return u.has(a)}},47358:(a,b,c)=>{c.d(b,{Y8:()=>g,Ni:()=>q});var d=c(66981);function e(a,b){let c=(0,d.Fd)(a,{component:"runs",operation:b.operation,...void 0===b.failureKind?{}:{failureKind:b.failureKind}});return c instanceof d.Jk?c.publicMessage:((b.log??((a,b)=>console.error(a,b)))(`[runs] ${b.operation} failed`,c),b.publicMessage)}let f={"Content-Type":"text/event-stream; charset=utf-8","Cache-Control":"no-cache, no-transform","X-Accel-Buffering":"no"},g=0x7fffffffffffffffn,h=["run.status"],i=["done","run-failed","stream-reset","error",...h],j=new Set(i),k=new Set(h),l=/^[A-Za-z][A-Za-z0-9._-]{0,63}$/;function m(a){return null===a?"null":Array.isArray(a)?"an array":"string"==typeof a?`the string ${JSON.stringify(a)}`:"number"==typeof a?`the number ${String(a)}`:"boolean"==typeof a?`the boolean ${String(a)}`:"bigint"==typeof a?`the bigint ${String(a)}`:`a value of type ${typeof a}`}function n(a){let b;try{b=JSON.stringify(a)}catch(a){return{kind:"rejected",reason:e(a,{operation:"serialize-event",publicMessage:"Event data is not JSON-serialisable."})}}return"string"!=typeof b?{kind:"rejected",reason:`event data serialised to nothing (${m(a)} has no JSON representation); send null explicitly if that is what you mean`}:{kind:"ok",json:b}}let o=/^\d{1,19}(?:\.\d{1,3})?$/;function p(a){let b=n(a.data),c="ok"===b.kind?b.json:JSON.stringify({message:b.reason});return`event: ${a.name}
+data: ${c}
+
+`}function q(a){let b,c=new TextEncoder,d="number"==typeof a.keepAliveMs&&a.keepAliveMs>0?a.keepAliveMs:15e3,g=!1,q=()=>{g||(g=!0,void 0!==b&&clearInterval(b),a.onTeardown?.())};return new Response(new ReadableStream({start(f){var g;let r,s=a=>{try{f.enqueue(c.encode(a))}catch{}},t=()=>{q();try{f.close()}catch{}};for(let b of(s((r=Number.isFinite(g=a.retryMs??3e3)&&g>0?Math.floor(g):3e3,`retry: ${String(r)}
+
+`)),a.prelude??[]))s(p(b));(async()=>{for await(let b of a.source)s(function(a){let b=function(a){let b="string"!=typeof a?{kind:"rejected",reason:`a platform event name must be a string; got ${m(a)}`}:k.has(a)?{kind:"ok",name:a}:{kind:"rejected",reason:`the event name ${JSON.stringify(a)} is not one of the platform's own events (${h.join(", ")}); only those may be written on the platform path`};if("ok"===b.kind)return{kind:"ok",name:b.name};let c="string"!=typeof a?{kind:"rejected",reason:`an event name must be a string; got ${m(a)}`}:0===a.length?{kind:"rejected",reason:"an event name must not be empty"}:l.test(a)?j.has(a)?{kind:"reserved",name:a,reason:`the event name ${JSON.stringify(a)} is reserved by the stream protocol (${i.join(", ")}) and may not be used by a relayed event`}:{kind:"ok",name:a}:{kind:"rejected",reason:`the event name ${JSON.stringify(a)} is not /^[A-Za-z][A-Za-z0-9._-]{0,63}$/; SSE has no escaping, so a name outside this grammar can terminate the field and inject a frame`};switch(c.kind){case"ok":return{kind:"ok",name:c.name};case"reserved":case"rejected":return{kind:"rejected",reason:c.reason};default:return{kind:"rejected",reason:`unclassifiable event name verdict ${String(c)}`}}}(a.type);if("ok"!==b.kind)throw Error(`refusing to write an SSE frame: ${b.reason}`);let c=n(a.data);if("ok"!==c.kind)throw Error(`refusing to write an SSE frame: ${c.reason}`);let d="bigint"==typeof a.id?String(a.id):a.id;if("string"==typeof a.id&&!o.test(d))throw Error(`refusing to write an SSE frame: the event id ${JSON.stringify(d)} is not ${String(o)}`);return`event: ${b.name}
+id: ${d}
+data: ${c.json}
+
+`}(b));let b=await a.outcome();switch(b.kind){case"succeeded":break;case"failed":s(p({name:"run-failed",data:{status:b.status,message:b.message}}));break;case"indeterminate":s(p({name:"run-failed",data:{status:"unknown",message:b.reason}}));break;default:s(p({name:"run-failed",data:{status:"unknown",message:"The event stream ended in an unknown state."}}))}s(p({name:"done",data:{}})),t()})().catch(a=>{s(p({name:"run-failed",data:{status:"unknown",message:e(a,{operation:"stream-events",publicMessage:"The event stream ended unexpectedly."})}})),t()}),b=setInterval(()=>s(`: ${"keepalive".replace(/[\r\n]+/g," ")}
+
+`),d),b.unref?.(),a.signal.aborted?t():a.signal.addEventListener("abort",t,{once:!0})},cancel(){q()}}),{status:200,headers:{...f}})}},54197:(a,b,c)=>{c.d(b,{Q:()=>d});function d(a){return a.ownerPrincipalId}},62049:(a,b,c)=>{let d;c.d(b,{a8:()=>H,fp:()=>Q,v:()=>O,q5:()=>x,cI:()=>I,ck:()=>B,O7:()=>z,pS:()=>A,eD:()=>P,AD:()=>G,hd:()=>F,BB:()=>R,JK:()=>y});var e=c(54197),f=c(75796),g=c(16926),h=c(85341),i=c(88621),j=c(47358);let k=/^(\d{1,19})(?:\.(\d{1,3}))?$/;function l(a){let b=a.trim();if(0===b.length)return{ok:!1,reason:"it is empty"};let c=k.exec(b);if(null===c)return{ok:!1,reason:`${JSON.stringify(a)} is not 1-19 ASCII digits, optionally followed by "." and 1-3 more; run event ids are an unsigned decimal sequence with an optional frame sub-index`};let d=BigInt(c[1]??"");if(d>j.Y8)return{ok:!1,reason:`${b} exceeds the maximum run event id ${String(j.Y8)}`};let e=c[2];return{ok:!0,id:d,subIndex:void 0===e?null:Number(e)}}var m=c(10),n=c(80455),o=c(10582),p=c(82333),q=c(20532),r=c(62003);async function s(a,b){let c=(0,r.iG)();if(null===c)return"unknown";let d=await c.agents.forWorkspace(a.workspaceId).get(b);return null===d?"unknown":d.ownerPrincipalId===(0,e.Q)(a)?"own":void 0===c.agentGrants||null===a.userId?"other":await c.agentGrants.forWorkspace(a.workspaceId).hasGrant(b,a.userId)?"permitted":"other"}var t=c(45719),u=c(8303),v=c(95118);function w(a){let b=a.inputTokens??0,c=a.outputTokens??0,d=a.cacheReadInputTokens??0,e=a.cacheCreationInputTokens??0;return{id:a.id,workspaceId:a.workspaceId,agentId:a.agentId,projectId:a.projectId??null,initiatingUserId:a.initiatingUserId??null,sessionId:a.sessionId,status:a.status,createdAt:a.createdAt.toISOString(),startedAt:null===a.startedAt?null:a.startedAt.toISOString(),endedAt:null===a.endedAt?null:a.endedAt.toISOString(),durationMs:null===a.startedAt||null===a.endedAt?null:a.endedAt.getTime()-a.startedAt.getTime(),model:a.model??null,provider:a.provider??null,modelConnectionId:a.modelConnectionId??null,engine:a.engine??null,engineVersion:a.engineVersion??null,usage:{inputTokens:b,outputTokens:c,cacheReadInputTokens:d,cacheCreationInputTokens:e,totalTokens:b+c+d+e,toolCalls:a.toolCalls??0},cost:{amount:a.costUsd??"0.000000",currency:a.costCurrency??"USD",priceTableVersion:a.priceTableVersion??null},error:a.error,accountingState:a.accountingState??"pending",accountingError:void 0===a.accountingError||null===a.accountingError?null:"Usage accounting could not be completed."}}let x=()=>(0,n.pb)(503,"run_api_not_configured",m.ox),y=()=>(0,n.pb)(401,"unauthenticated","this endpoint requires an authenticated session.");function z(a,b,c){let d=(0,q.gP)(b.role);if(null===d)return(0,n.pb)(403,"forbidden","the authenticated identity has no recognised role.");let e=(0,p.LD)({role:d,method:a.method,path:new URL(a.url).pathname,ownership:c,scope:b.scope??null});return"allow"===e.effect?null:(0,n.pb)("deny"===e.effect?403:500,"deny"===e.effect?e.code??"forbidden":"authorisation_undecidable",e.because)}function A(a,b){let c=a.scope;return null==c||"session"!==c.kind||b===c.id?null:(0,n.pb)(403,"token_out_of_scope",`this session-scoped browser token is scoped to session ${c.id}, and `+(null===b?"this request names no session at all.":`this request is for session ${b}.`))}async function B(a,b,c,d){let e=b.scope;if(void 0===a.admitVisitorWrite||e?.kind!=="session")return null;let f=await a.admitVisitorWrite(b.workspaceId,e.id,c,d);if(null===f)return null;let h=(0,n.pb)(g.$j[f.code],f.code,f.message);return null!==f.retryAfterSeconds&&h.headers.set("retry-after",String(f.retryAfterSeconds)),h}let C={readFiles:!1,writeFiles:!1,runCommands:!1,unrestrictedNetwork:!1};async function D(a,b,c,d,e){let g=e.modelOverride,h=b.ceilingFor?.(a,c.workspaceId),i=h?.policy.models;if(null===g||void 0===h||void 0===i)return null;let j=await (0,v.K8)({permissions:C,limits:{maxTurns:null,maxBudgetUsd:null},engine:(0,u.yP)(d.engine),model:g.model,tools:[]},{...h,policy:{models:i}},{id:d.id,label:"run start"});return null===j?null:(0,n.Pq)(j.body,f.Wi.policy_cannot_widen)}let E=(a,b,c)=>({kind:"refused",status:a,code:b,message:c});async function F(a,b,c,d){let g=async e=>{let g=void 0===a.preflight?null:await a.preflight(b,c,e,d.modelOverride);return null===g?null:E(f.Wi[g.code],g.code,g.message)};if(null===d.sessionId){let a=await g(null);if(null!==a)return a;let b=(0,u.gy)({sessionEngine:null,agentEngine:c.engine});if("pinned"===b.kind&&!(0,t.Nf)(b.engine))return E(422,"engine_not_installed",(0,t.Lp)(b.engine))}let h=await a.openSession(b,c,d.sessionId);if(null===h)return E(409,"session_not_usable","the requested session cannot run this agent; omit sessionId to start a new session (spec \xa719.5 rule 4).");let i=(0,u.gy)({sessionEngine:h.engine,agentEngine:h.versionEngine??c.engine});if("mismatch"===i.kind)return E(409,"session_engine_mismatch",(0,u.Id)(i));if(!(0,t.Nf)(i.engine))return E(422,"engine_not_installed",(0,t.Lp)(i.engine));if(null!==d.sessionId){let a=await g(h.id);if(null!==a)return a}let j=await a.store.create({id:crypto.randomUUID(),workspaceId:b.workspaceId,agentId:c.id,sessionId:h.id,initiatingUserId:b.userId,ownerPrincipalId:(0,e.Q)(b),engine:i.engine,prompt:d.prompt});return a.launch({run:j,agent:c,session:h,principal:b,prompt:d.prompt,modelOverride:d.modelOverride}),{kind:"started",run:j,session:h}}async function G(a,b){let c=(0,m.aO)();if(null===c)return x();let d=await c.authenticate(a);if(null===d)return y();if(!(0,n.O1)(b))return(0,n.pb)(400,"invalid_agent_id","the agent id in the path is not a UUID.");let e=await s(d,b),f=z(a,d,e);if(null!==f)return f;let g=await (0,n.nE)(a);if("ok"!==g.kind)return(0,n.pb)(400,"invalid_body",g.reason);let h=function(a){if("object"!=typeof a||null===a||Array.isArray(a))return{kind:"rejected",reason:"the request body must be a JSON object"};for(let b of Object.keys(a))if("prompt"!==b&&"sessionId"!==b&&"modelConnectionId"!==b&&"model"!==b)return{kind:"rejected",reason:`unknown field ${JSON.stringify(b)} in the request body`};let b=a.prompt;if("string"!=typeof b)return{kind:"rejected",reason:'"prompt" is required and must be a string'};if(0===b.trim().length)return{kind:"rejected",reason:'"prompt" must not be empty'};if(b.length>1e5)return{kind:"rejected",reason:`"prompt" is ${String(b.length)} characters; the maximum is ${String(1e5)}`};let c=a.modelConnectionId;if(null!=c&&!(0,n.O1)(c))return{kind:"rejected",reason:'"modelConnectionId" must be a UUID when it is present'};let d=a.model;if(null!=d&&("string"!=typeof d||0===d.length))return{kind:"rejected",reason:'"model" must be a non-empty string when it is present'};let e=c??null,f=d??null;if(null===e!=(null===f))return{kind:"rejected",reason:'"modelConnectionId" and "model" must be supplied together, or not at all'};let g=null===e||null===f?null:{connectionId:e,model:f},h=a.sessionId;return null==h?{kind:"ok",body:{prompt:b,sessionId:null,modelOverride:g}}:(0,n.O1)(h)?{kind:"ok",body:{prompt:b,sessionId:h,modelOverride:g}}:{kind:"rejected",reason:'"sessionId" must be a UUID when it is present'}}(g.value);if("ok"!==h.kind)return(0,n.pb)(400,"invalid_body",h.reason);let i=A(d,h.body.sessionId);if(null!==i)return i;let j=await B(c,d,"turn",a.headers);if(null!==j)return j;let k=await c.findAgent(d,b);if(null===k)return(0,n.pb)(404,"agent_not_found",`no agent ${b} in this workspace.`);let l=await D(a,c,d,k,h.body);if(null!==l)return l;let o=await F(c,d,k,h.body);if("refused"===o.kind)return(0,n.pb)(o.status,o.code,o.message);let{run:p}=o,q=`/api/runs/${p.id}/events`;return(0,n.Pq)({run:w(p),events:q},202,{Location:q})}async function H(a,b,c){let d=await a.get(c);return null===d?null:d.workspaceId===b.workspaceId?d:null}async function I(a,b){let c=(0,m.aO)();if(null===c)return x();let d=await c.authenticate(a);if(null===d)return y();if(!(0,n.O1)(b))return(0,n.pb)(400,"invalid_run_id","the run id in the path is not a UUID.");let e=await H(c.store,d,b);if(null===e)return(0,n.pb)(404,"run_not_found",`no run ${b} in this workspace.`);let f=A(d,e.sessionId);if(null!==f)return f;let g=z(a,d,await c.ownsRun(d,e)?"own":"other");return null!==g?g:(0,n.Pq)({run:w(e)},200)}let J=/^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,3}))?(?:(Z)|([+-])(\d{2}):(\d{2}))$/,K=((d=new Date(0)).setUTCFullYear(1,0,1),d.setUTCHours(0,0,0,0),d.getTime()),L=Date.UTC(9999,11,31,23,59,59,999),M="must be an ISO-8601 timestamp with an explicit zone (YYYY-MM-DDTHH:MM:SS[.fff]Z or \xb1HH:MM) in years 0001–9999.";function N(a){let b=J.exec(a);if(null===b)return null;let c=b[7],d=(0,i.Ic)({year:(0,i.t8)(b,1),month:(0,i.t8)(b,2),day:(0,i.t8)(b,3),hour:(0,i.t8)(b,4),minute:(0,i.t8)(b,5),second:(0,i.t8)(b,6),millisecond:void 0===c?0:Number(c.padEnd(3,"0"))});if(null===d)return null;let e=0;if(void 0===b[8]){let a=b[9];if(void 0===a)throw Error("timestamp zone sign is absent");let c=(0,i.t8)(b,10),d=(0,i.t8)(b,11);if(c>23||d>59)return null;e=("-"===a?-1:1)*(60*c+d)}let f=d.getTime()-6e4*e;return f<K||f>L?null:new Date(f)}async function O(a){var b;let c=(0,m.aO)();if(null===c||void 0===c.store.listRuns)return x();let d=await c.authenticate(a);if(null===d)return y();let f=function(a,b){let c=(0,q.gP)(b.role);if(null===c)return{kind:"denied",response:(0,n.pb)(403,"forbidden","the authenticated identity has no recognised role.")};let d=(0,p.LD)({role:c,method:a.method,path:new URL(a.url).pathname,ownership:"not-applicable",scope:b.scope??null});if("allow"!==d.effect)return{kind:"denied",response:(0,n.pb)("deny"===d.effect?403:500,"deny"===d.effect?d.code??"forbidden":"authorisation_undecidable",d.because)};if(null===d.facts)throw Error("GET /api/runs was allowed with no route facts to read the grant from.");return{kind:"allowed",grant:d.facts.grant}}(a,d);if("denied"===f.kind)return f.response;let g=function(a,b,c){let d=a.searchParams,f=(a,b,c)=>({kind:"rejected",status:a,code:b,reason:c}),g=d.get("limit"),h=20;if(null!==g){if(!/^[1-9]\d{0,3}$/.test(g))return f(400,"invalid_limit","limit must be a positive integer.");if((h=Number(g))>200)return f(400,"invalid_limit",`limit must not exceed ${String(200)}.`)}let j=function(a){let b,c;if(null===a)return{kind:"absent"};try{b=Buffer.from(a,"base64url").toString("utf8")}catch{return{kind:"invalid",reason:"the cursor is not valid base64url."}}try{c=JSON.parse(b)}catch{return{kind:"invalid",reason:"the cursor does not decode to JSON."}}if("object"!=typeof c||null===c||Array.isArray(c))return{kind:"invalid",reason:"the cursor must decode to a JSON object."};let d=c,e=d.createdAt,f=d.id;return"string"==typeof e&&(0,n.O1)(f)?(0,i.wH)(e)?{kind:"ok",cursor:{createdAt:e,id:f}}:{kind:"invalid",reason:'the cursor "createdAt" is not a UTC timestamp of the form YYYY-MM-DDTHH:MM:SS.ffffffZ.'}:{kind:"invalid",reason:'the cursor must carry a "createdAt" timestamp string and an "id" UUID.'}}(d.get("cursor"));if("invalid"===j.kind)return f(400,"invalid_cursor",j.reason);let k={},l=d.get("status");if(null!==l){if(!o.sL.includes(l))return f(400,"invalid_status",`status must be one of: ${o.sL.join(", ")}.`);k.status=l}let m=d.get("agent");if(null!==m){if(!(0,n.O1)(m))return f(400,"invalid_agent","agent must be a UUID.");k.agentId=m}let p=d.get("project");if(null!==p){if(!(0,n.O1)(p))return f(400,"invalid_project","project must be a UUID.");k.projectId=p}let q=d.get("provider");if(null!==q){if(!o.c7.includes(q))return f(400,"invalid_provider",`provider must be one of: ${o.c7.join(", ")}.`);k.provider=q}let r=d.get("model");if(null!==r){if(0===r.trim().length)return f(400,"invalid_model","model must not be empty.");k.model=r}let s=d.get("from");if(null!==s){let a=N(s);if(null===a)return f(400,"invalid_from",`from ${M}`);k.createdFrom=a}let t=d.get("to");if(null!==t){let a=N(t);if(null===a)return f(400,"invalid_to",`to ${M}`);if(void 0!==k.createdFrom&&a.getTime()<k.createdFrom.getTime())return f(400,"invalid_date_range","to must not be before from.");k.createdTo=a}let u=d.get("user");if(null!==u){if("any"!==b)return f(403,"user_filter_forbidden",'the "user" filter is available only to a role with workspace-wide run read access.');if(!(0,n.O1)(u))return f(400,"invalid_user","user must be a UUID.");k.initiatingUserId=u}else"any"!==b&&(k.ownerPrincipalId=(0,e.Q)(c));return{kind:"ok",input:{filter:k,limit:h,cursor:"ok"===j.kind?j.cursor:null}}}(new URL(a.url),f.grant,d);if("rejected"===g.kind)return(0,n.pb)(g.status,g.code,g.reason);let h=await c.store.listRuns(d.workspaceId,g.input);return(0,n.Pq)({runs:h.items.map(w),nextCursor:null===h.nextCursor?null:(b=h.nextCursor,Buffer.from(JSON.stringify({createdAt:b.createdAt,id:b.id}),"utf8").toString("base64url"))},200)}async function P(a,b){let c=(0,m.aO)();if(null===c||void 0===c.revokeRunTokens)return x();let d=await c.authenticate(a);if(null===d)return y();let e=z(a,d,"not-applicable");if(null!==e)return e;if(!(0,n.O1)(b))return(0,n.pb)(400,"invalid_run_id","the run id in the path is not a UUID.");if(null===await H(c.store,d,b))return(0,n.pb)(404,"run_not_found",`no run ${b} in this workspace.`);let f=await (0,n.nE)(a);if("ok"!==f.kind)return(0,n.pb)(400,"invalid_body",f.reason);if(null===f.value||"object"!=typeof f.value||Array.isArray(f.value))return(0,n.pb)(400,"invalid_body","the request body must be a JSON object.");let g=f.value;if(Object.keys(g).some(a=>"tokenId"!==a))return(0,n.pb)(400,"invalid_body","only tokenId may be supplied.");let h=g.tokenId??null;if(null!==h&&!(0,n.O1)(h))return(0,n.pb)(400,"invalid_token_id","tokenId must be a UUID or null.");let i=await c.revokeRunTokens(d,b,h);return(0,n.Pq)(i,200)}async function Q(a,b){let c=(0,m.aO)();if(null===c||void 0===c.interruptRun)return x();let d=await c.authenticate(a);if(null===d)return y();if(!(0,n.O1)(b))return(0,n.pb)(400,"invalid_run_id","the run id in the path is not a UUID.");let e=await H(c.store,d,b);if(null===e)return(0,n.pb)(404,"run_not_found",`no run ${b} in this workspace.`);let f=z(a,d,await c.ownsRun(d,e)?"own":"other");if(null!==f)return f;if((0,o.Qb)(e.status))return(0,n.pb)(409,"run_not_interruptible",`run ${b} is already ${e.status} and cannot be interrupted.`);await c.interruptRun(d,e);let g=await H(c.store,d,b);return(0,n.Pq)({run:w(g??e)},200)}async function R(a,b){let c=(0,m.aO)();if(null===c)return x();let d=await c.authenticate(a);if(null===d)return y();if(!(0,n.O1)(b))return(0,n.pb)(400,"invalid_run_id","the run id in the path is not a UUID.");let e=function(a,b){if(null!==a){let b=l(a);return b.ok?{kind:"after",id:b.id,subIndex:b.subIndex,source:"header"}:{kind:"invalid",source:"header",reason:`Last-Event-ID is invalid: ${b.reason}`}}if(null!==b){let a=l(b);return a.ok?{kind:"after",id:a.id,subIndex:a.subIndex,source:"query"}:{kind:"invalid",source:"query",reason:`the "after" parameter is invalid: ${a.reason}`}}return{kind:"absent"}}(a.headers.get("last-event-id"),new URL(a.url).searchParams.get("after"));if("invalid"===e.kind)return(0,n.pb)(400,"invalid_resume_cursor",e.reason);let f=await H(c.store,d,b);if(null===f)return(0,n.pb)(404,"run_not_found",`no run ${b} in this workspace.`);let g=A(d,f.sessionId);if(null!==g)return g;let i=z(a,d,await c.ownsRun(d,f)?"own":"other");if(null!==i)return i;let k="after"===e.kind&&null!==e.subIndex?{sequence:e.id,subIndex:e.subIndex}:null,o="after"!==e.kind?null:null===k?e.id:0n===k.sequence?null:e.id-1n,p=await c.store.openStream(b,o);if(null===p)return(0,n.pb)(404,"run_not_found",`no run ${b} in this workspace.`);let q=null===p.reset?[]:[{name:"stream-reset",data:p.reset}];return(0,j.Ni)({source:(0,h.N0)(p.events,k),prelude:q,signal:a.signal,outcome:async()=>(function(a,b){if(null===a)return{kind:"indeterminate",reason:`run ${b} is no longer readable; its outcome is unknown to this connection`};switch(a.status){case"completed":return{kind:"succeeded"};case"failed":return{kind:"failed",status:"failed",message:a.error??`run ${b} failed and recorded no message`};case"cancelled":return{kind:"failed",status:"cancelled",message:a.error??`run ${b} was cancelled`};case"queued":case"running":return{kind:"indeterminate",reason:`the stream for run ${b} ended while the run was still ${a.status}; its outcome is unknown to this connection`};default:{let c=a.status;return{kind:"indeterminate",reason:`run ${b} has a status this server does not recognise: ${String(c)}`}}}})(await H(c.store,d,b),b),onTeardown:()=>{p.close()}})}},66981:(a,b,c)=>{c.d(b,{EN:()=>e,Fd:()=>f,Jk:()=>d});class d extends Error{constructor(a){super(a.publicMessage,void 0===a.cause?void 0:{cause:a.cause}),this.kind="domain",this.name="DomainError",this.category=a.category,this.code=a.code,this.publicMessage=a.publicMessage,this.retryAfterSeconds=a.retryAfterSeconds}}class e extends Error{constructor(a){super(`${a.component}.${a.operation} failed`,{cause:a.cause}),this.kind="infrastructure",this.name="InfrastructureError",this.component=a.component,this.operation=a.operation,this.failureKind=a.failureKind??"internal",this.retryable=a.retryable??!1}}function f(a,b){return a instanceof d||a instanceof e?a:new e({...b,cause:a})}},80455:(a,b,c)=>{function d(a,b,c){return new Response(JSON.stringify(a),{status:b,headers:{"Content-Type":"application/json; charset=utf-8",...c}})}function e(a,b,c){return d({error:{code:b,message:c}},a)}c.d(b,{O1:()=>g,Pq:()=>d,nE:()=>i,pb:()=>e});let f=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;function g(a){return"string"==typeof a&&f.test(a)}async function h(a,b){let c=a.body;if(null===c)return{kind:"ok",text:""};let d=new TextDecoder("utf-8"),e=c.getReader(),f="",g=0;try{for(;;){let{done:a,value:c}=await e.read();if(a)break;if((g+=c.byteLength)>b)return{kind:"rejected",reason:`the request body exceeds ${String(b)} bytes`};f+=d.decode(c,{stream:!0})}return f+=d.decode(),{kind:"ok",text:f}}catch{return{kind:"rejected",reason:"the request body could not be read"}}finally{e.releaseLock()}}async function i(a){let b=a.headers.get("content-type");if(null===b)return{kind:"rejected",reason:"the request carried no Content-Type; send application/json"};if("application/json"!==(b.split(";",1)[0]?.trim().toLowerCase()??""))return{kind:"rejected",reason:`the request Content-Type is ${JSON.stringify(b)}, not application/json`};let c=await h(a,2e6);if("ok"!==c.kind)return c;try{return{kind:"ok",value:JSON.parse(c.text)}}catch{return{kind:"rejected",reason:"the request body is not valid JSON."}}}},85341:(a,b,c)=>{c.d(b,{Mz:()=>g,N0:()=>h});var d=c(71614),e=c(16523);let f=c(88367).CX[0];function g(a){var b;let c;if(!(0,e.fb)(a.type))return[{id:a.id,type:a.type,data:a.data}];let g=null===(c="object"!=typeof(b=a.data)||null===b||Array.isArray(b)?null:b)?{ok:!1,reason:"a pre-ENG-03 run event must hold the runner's classification envelope as a JSON object; this row holds something else"}:"string"!=typeof c.kind?{ok:!1,reason:"a pre-ENG-03 run event's envelope must carry a string 'kind'; this row's does not, so the engine message it wrapped cannot be identified"}:"event"in c?{ok:!0,message:c.event}:{ok:!1,reason:"a pre-ENG-03 run event's envelope must carry the engine message under 'event'; this row's does not"},h=g.ok?(0,d.Fz)((0,d.rG)(g.message),f):[{frame:"agent.malformed",engine:f,raw:(0,d.z$)(a.data),reason:g.reason}];return(h.length<=1e3?h:[...h.slice(0,999),{frame:"agent.malformed",engine:f,raw:(0,d.z$)(a.data),reason:`a pre-ENG-03 run event mapped to ${String(h.length)} frames, more than the ${String(1e3)} one row may serve; the last ${String(h.length-999)} are reported here instead of served`}]).map((b,c)=>{var d;return{id:(d=a.id,null===c?String(d):`${String(d)}.${String(c)}`),type:b.frame,data:b}})}async function*h(a,b){let c=b;for await(let b of a){let a=g(b);if(null!==c){let d=(0,e.fb)(b.type),f=c.sequence===b.id&&d?c.subIndex+1:0;c=null,yield*a.slice(f);continue}yield*a}}},88621:(a,b,c)=>{c.d(b,{Ic:()=>e,t8:()=>f,wH:()=>g});let d=/^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})\.\d{1,6}Z$/;function e(a){if(0===a.year)return null;let b=new Date(0);return b.setUTCFullYear(a.year,a.month-1,a.day),b.setUTCHours(a.hour,a.minute,a.second,a.millisecond),b.getUTCFullYear()===a.year&&b.getUTCMonth()===a.month-1&&b.getUTCDate()===a.day&&b.getUTCHours()===a.hour&&b.getUTCMinutes()===a.minute&&b.getUTCSeconds()===a.second?b:null}function f(a,b){let c=a[b];if(void 0===c)throw Error(`timestamp group ${String(b)} is absent`);return Number(c)}function g(a){let b=d.exec(a);return null!==b&&null!==e({year:f(b,1),month:f(b,2),day:f(b,3),hour:f(b,4),minute:f(b,5),second:f(b,6),millisecond:0})}}};

package/dist/web/.next-embedded/server/chunks/2192.js

@@ -0,0 +1 @@
+"use strict";exports.id=2192,exports.ids=[2192],exports.modules={4478:(a,b,c)=>{c.d(b,{D:()=>j});var d=c(77598),e=c(54197),f=c(61319),g=c(44973),h=c(66981);let i={"24 h":864e5,"7 days":6048e5,"30 days":2592e6};class j{constructor(a,b=(0,g.j)()){this.sharing=a,this.runnableEnabled=b}async publish(a,b){var c;let g;if(!["agent","session","project","skill"].includes(a.subjectType))throw k(`Unsupported share subject type: ${String(a.subjectType)}`);if("public"===a.visibility&&!await (0,f.P)(this.sharing))throw k("Public sharing is disabled for this workspace.");let h="agent"===a.subjectType?a.mode??"definition":void 0;if("runnable"===h&&!this.runnableEnabled)throw k("Runnable public links are not available in this release (D-06).");if("runnable"===h&&!["owner","admin"].includes(b.role))throw k("Runnable links require Admin or Owner.");let j=a.expiry??"never";if(!["24 h","7 days","30 days","never"].includes(j))throw k(`Unsupported expiry: ${String(j)}`);let l={token:`pub_${(0,d.randomBytes)(18).toString("base64url")}`,subjectType:a.subjectType,subjectId:a.subjectId,subjectLabel:a.subjectLabel,visibility:a.visibility,mode:h,snapshot:a.snapshot,include:a.include??{},budgetCapUsd:"runnable"===h?String(a.budgetCapUsd??20):null,expiresAt:"never"===j?null:new Date(Date.now()+i[j]),passphraseHash:a.passphrase?(c=a.passphrase,g=(0,d.randomBytes)(16),`${g.toString("base64url")}.${(0,d.scryptSync)(c,g,32).toString("base64url")}`):null,publisherPrincipalId:(0,e.Q)(b),createdBy:b.userId},m=await this.sharing.shares.create(l);return await this.sharing.audit.write({actorPrincipalId:b.principalId,actorUserId:b.userId,actorLabel:b.userLabel,action:"session-published",subjectId:m.id,subjectLabel:`${m.subjectLabel} (${m.visibility})`}),m}async resolve(a,b,c){let e=await this.sharing.shares.findByToken(a);if(!e||"public"!==e.visibility||e.revokedAt||e.suspendedAt||e.stopped||e.expiresAt&&e.expiresAt.getTime()<=Date.now())throw new h.Jk({category:"not-found",code:"share_unavailable",publicMessage:"Public link is unavailable."});if(e.passphraseHash&&(!b||!function(a,b){let[c,e]=b.split(".");if(!c||!e)return!1;let f=(0,d.scryptSync)(a,Buffer.from(c,"base64url"),32),g=Buffer.from(e,"base64url");return f.length===g.length&&(0,d.timingSafeEqual)(f,g)}(b,e.passphraseHash)))throw new h.Jk({category:"forbidden",code:"invalid_passphrase",publicMessage:"The passphrase is incorrect."});return await this.sharing.views.record(e.id,c),e}async revoke(a,b){let c=await this.sharing.shares.get(a);if(!c)return!1;let d=await this.sharing.shares.revoke(a);return d&&await this.sharing.audit.write({actorPrincipalId:b.principalId,actorUserId:b.userId,actorLabel:b.userLabel,action:"public-link-revoked",subjectId:a,subjectLabel:c.subjectLabel}),d}}function k(a){return new h.Jk({category:"validation",code:"invalid_share",publicMessage:a})}},17337:(a,b,c)=>{c.d(b,{cg:()=>e});let d=globalThis;function e(){return d.__agentWorkspaceRbacRuntime__??null}},44973:(a,b,c)=>{c.d(b,{j:()=>d});function d(a=process.env){return!1}},48501:(a,b,c)=>{c.d(b,{sm:()=>e});let d=globalThis;function e(){return d.__agentWorkspaceSharesRuntime__??null}},54131:(a,b,c)=>{Object.defineProperty(b,"I",{enumerable:!0,get:function(){return g}});let d=c(40875),e=c(68890),f=c(49801);async function g(a,b,c,g){if((0,d.isNodeNextResponse)(b)){var h;b.statusCode=c.status,b.statusMessage=c.statusText;let d=["set-cookie","www-authenticate","proxy-authenticate","vary"];null==(h=c.headers)||h.forEach((a,c)=>{if("x-middleware-set-cookie"!==c.toLowerCase())if("set-cookie"===c.toLowerCase())for(let d of(0,f.splitCookiesString)(a))b.appendHeader(c,d);else{let e=void 0!==b.getHeader(c);(d.includes(c.toLowerCase())||!e)&&b.appendHeader(c,a)}});let{originalResponse:i}=b;c.body&&"HEAD"!==a.method?await (0,e.pipeToNodeResponse)(c.body,i,g):i.end()}}},54197:(a,b,c)=>{c.d(b,{Q:()=>d});function d(a){return a.ownerPrincipalId}},61319:(a,b,c)=>{c.d(b,{I:()=>f,P:()=>e});var d=c(66981);function e(a){return a.shares.getPublicSharingEnabled()}async function f(a,b,c,e){if("owner"!==b)throw new d.Jk({category:"forbidden",code:"forbidden",publicMessage:"Only an Owner may change the public sharing policy."});await c.shares.setPublicSharingEnabled(a),await c.audit.write({actorPrincipalId:e.principalId,actorUserId:e.userId,actorLabel:e.userLabel,action:"public-sharing-policy-changed",subjectId:null,subjectLabel:`Public sharing: ${a?"on":"off"}`})}},66981:(a,b,c)=>{c.d(b,{EN:()=>e,Fd:()=>f,Jk:()=>d});class d extends Error{constructor(a){super(a.publicMessage,void 0===a.cause?void 0:{cause:a.cause}),this.kind="domain",this.name="DomainError",this.category=a.category,this.code=a.code,this.publicMessage=a.publicMessage,this.retryAfterSeconds=a.retryAfterSeconds}}class e extends Error{constructor(a){super(`${a.component}.${a.operation} failed`,{cause:a.cause}),this.kind="infrastructure",this.name="InfrastructureError",this.component=a.component,this.operation=a.operation,this.failureKind=a.failureKind??"internal",this.retryable=a.retryable??!1}}function f(a,b){return a instanceof d||a instanceof e?a:new e({...b,cause:a})}},78572:(a,b,c)=>{c.d(b,{A:()=>e});var d=c(80061);async function e(a,b){let c=null,e=await (0,d.Z_)(a,b,a=>(c=a.principal,Promise.resolve({status:204,body:null})));if(204!==e.status)return{ok:!1,response:(0,d.Zr)(e)};if(null===c)throw Error("RBAC allowed a resource request without retaining its verified principal.");return{ok:!0,principal:c}}},80061:(a,b,c)=>{c.d(b,{CC:()=>g,Z_:()=>j,Zr:()=>h,nE:()=>i,tW:()=>k});var d=c(82333),e=c(17337);let f="application/json";function g(a,b,c){return{status:a,body:{error:{code:b,message:c,detail:c}}}}function h(a){let b={...a.headers,"cache-control":"no-store"};return 204===a.status||null===a.body?new Response(null,{status:a.status,headers:b}):new Response(JSON.stringify(a.body),{status:a.status,headers:{...b,"content-type":"application/json; charset=utf-8"}})}async function i(a){let b,c=a.headers.get("content-type"),d=null===c?"":(c.split(";")[0]??"").trim().toLowerCase();if(d!==f)return{ok:!1,result:g(415,"unsupported_media_type",`This route accepts ${f}; the request declared ${""===d?"no Content-Type":JSON.stringify(d)}.`)};try{let c=await a.arrayBuffer();if(c.byteLength>16384)return{ok:!1,result:g(413,"request_body_too_large",`This route reads at most ${String(16384)} bytes of request body.`)};b=new TextDecoder("utf-8",{fatal:!0}).decode(c)}catch{return{ok:!1,result:g(400,"malformed_body","The request body could not be read as UTF-8.")}}if(""===b.trim())return{ok:!1,result:g(400,"malformed_body","This route requires a JSON object body.")};try{return{ok:!0,value:JSON.parse(b)}}catch{return{ok:!1,result:g(400,"malformed_body","The request body is not valid JSON.")}}}async function j(a,b,c){let f,h,i=(0,e.cg)();if(null===i)return g(503,"rbac_runtime_not_configured","The users, memberships and API-key routes have no directory or identity resolver wired into them. This deployment cannot serve them; it is not that the request was rejected.");let j=await i.identify(a);if(null===j)return g(401,"unauthenticated",'This route requires a verified session cookie or an API key presented as "Authorization: Bearer ak_live_…".');let k=i.directory.forWorkspace(j.workspaceId);if("function"==typeof b){let a=await b(j,k);if("refuse"===a.kind)return a.result;f=a.ownership}else f=b;try{h=new URL(a.url).pathname}catch{return g(500,"authorisation_undecidable",`The request URL ${JSON.stringify(a.url)} could not be read as a URL, so no route could be derived from it and no authorisation decision was made.`)}let l=(0,d.LD)({role:j.role,method:a.method,path:h,ownership:f,scope:j.scope});switch(l.effect){case"allow":return c({principal:j,directory:k,decision:l});case"deny":return g(403,l.code??"forbidden",l.because);case"refuse":return g(500,"authorisation_undecidable",`${l.because} No authorisation decision was made, so this request was neither allowed nor refused on its merits.`);default:throw Error(`unclassified decision ${JSON.stringify(l)} — refusing to serve the request`)}}async function k(a){let b=await a.params;if("object"==typeof b&&null!==b)return b.id}},84130:(a,b,c)=>{a.exports=c(44870)},98953:(a,b,c)=>{c.d(b,{BI:()=>l,Lm:()=>i,NH:()=>m,kE:()=>j,t_:()=>k});var d=c(78572),e=c(54197),f=c(66981),g=c(4478),h=c(48501);function i(a,b,c){return Response.json({error:{code:b,message:c}},{status:a})}async function j(a){if(!a.headers.get("content-type")?.startsWith("application/json"))throw new f.Jk({category:"validation",code:"invalid_share",publicMessage:"This endpoint accepts application/json."});try{return await a.json()}catch(a){throw new f.Jk({category:"validation",code:"invalid_share",publicMessage:"The request body is not valid JSON.",cause:a})}}async function k(a,b){let c=(0,h.sm)();if(!c)return i(503,"shares_runtime_not_configured","The sharing API is not configured.");let d=await c.resolveActor(a);if("unauthenticated"===d.kind)return i(401,"unauthenticated",d.reason);if("forbidden"===d.kind)return i(403,"forbidden",d.reason);let f=await c.forWorkspace(d.workspaceId);return b({actor:d,sharing:f,service:new g.D(f),sharingMaterials:()=>c.sharingMaterials(d.workspaceId),subjectOwnership:(a,b)=>c.subjectOwnership({workspaceId:d.workspaceId,principalId:(0,e.Q)(d),subjectType:a,subjectId:b})})}async function l(a,b,c){let f=await (0,d.A)(a,void 0===c?"not-applicable":c===(0,e.Q)(b)?"own":"other");return f.ok&&f.principal.workspaceId!==b.workspaceId?{ok:!1,response:i(403,"forbidden","The authorisation identity resolved another workspace.")}:f}async function m(a,b){let c=(0,h.sm)();if(!c)return i(503,"shares_runtime_not_configured","The sharing API is not configured.");let d=await c.resolvePublic(a);return d?b({...d,service:new g.D(d.sharing),runPublic:a=>c.runPublic(a)}):i(404,"share_not_found","Public link not found.")}}};