@inflexa-ai/harness 0.23.0 → 0.25.0

package/README.md

@@ -36,7 +36,6 @@ import {
     createNoopRunCharge,            // RunCharge        seam
     createNoopUsageRecorder,        // UsageRecorder    seam
     createNoopArtifactRegistry,     // ArtifactRegistry seam
-    UnavailablePreviewPublisher,    // PreviewPublisher seam
     createDbosRunLauncher,          // shared RunLauncher
     createConsoleLogger,            // Logger — writes to console
     createNoopLogger,               // Logger — discards (the fallback when none is wired)
@@ -47,7 +46,7 @@ import {
 } from "@inflexa-ai/harness";
 ```
 
-`assembleCoreRuntime` is the single composition point: it registers the durable workflows and builds the conversation agent over them. The harness declares **six capability seams** an embedder wires — `RunAuthorizer`, `ResolveBilling`, `ArtifactRegistry`, `RunCharge`, `UsageRecorder`, `PreviewPublisher` — plus the **shared `RunLauncher`** (one host-neutral realization, `createDbosRunLauncher`). Local, dependency-free realizations of all six ship from the barrel; an embedder constructs them (or its own) and passes them in. The harness only ever sees the interface.
+`assembleCoreRuntime` is the single composition point: it registers the durable workflows and builds the conversation agent over them. The harness declares **five capability seams** an embedder wires — `RunAuthorizer`, `ResolveBilling`, `ArtifactRegistry`, `RunCharge`, `UsageRecorder` — plus the **shared `RunLauncher`** (one host-neutral realization, `createDbosRunLauncher`). Local, dependency-free realizations of all five ship from the barrel; an embedder constructs them (or its own) and passes them in. The harness only ever sees the interface.
 
 ## Logging
 

package/dist/agents/conversation-agent.d.ts

@@ -35,7 +35,6 @@ import { type BioToolKeys } from "../tools/bio/keys.js";
 import type { EnvironmentStorePaths } from "../config/environment-stores.js";
 import type { RunAuthorizer } from "../execution/run-authorizer.js";
 import type { RunLauncher } from "../execution/run-launcher.js";
-import type { SubmitReportDeps } from "../tools/iterate-report.js";
 import type { Logger } from "../lib/logger.js";
 import type { UsageRecorder } from "../billing/usage-recorder.js";
 import type { CitationResolver } from "../citations/types.js";
@@ -98,16 +97,8 @@ export interface ConversationAgentDeps extends EnvironmentStorePaths {
      * workflows through it so the durability engine stays out of the tools.
      */
     readonly runLauncher: RunLauncher;
-    /**
-     * Preview-publishing seam factory. No tool of the roster reads it. The field
-     * stays, because a change to the deps breaks an embedder at its composition
-     * root.
-     */
-    readonly createPreviewPublisher: SubmitReportDeps["createPreviewPublisher"];
     /** API keys for the external bio/chem data sources. */
     readonly bioKeys: BioToolKeys;
-    /** Root templates dir. No tool of the roster reads it. */
-    readonly templatesDir: string;
     /** Skills root. No tool of the roster reads it. */
     readonly skillsDir: string;
     /** Headless-Chrome config for report snapshot/preview rendering. */

package/dist/agents/sandbox/__fixtures__/deps.js

@@ -30,6 +30,9 @@ export function makeFakeSandboxClient() {
         async isAlive() {
             return { alive: true, oomKilled: false };
         },
+        async isAliveById() {
+            return { alive: true, oomKilled: false };
+        },
         async teardown() { },
         async teardownById() { },
         async listManagedSandboxes() {
@@ -42,6 +45,9 @@ export function makeFakeWorkspaceFs() {
         readFile() {
             return okAsync({ kind: "ok", content: Buffer.alloc(0), truncated: false });
         },
+        readBytes() {
+            return okAsync({ kind: "ok", bytes: Buffer.alloc(0) });
+        },
         list() {
             return okAsync({ kind: "ok", entries: [] });
         },

package/dist/agents/sandbox/data-profiler.js

@@ -10,10 +10,11 @@ export const meta = {
     capabilities: ["data profiling", "literature review", "methodology research", "analysis planning", "experimental design analysis"],
     suitableFor: ["bulk-rna-seq", "single-cell", "proteomics", "metabolomics", "genomics", "transcriptomics", "chemical-structures", "compound-screening"],
     skills: [],
-    tools: [...BASE_SANDBOX_TOOLS],
-    // Profiling fans out one programmatic pass per input file (head/wc preview +
-    // a Python script + read-back) before the single submit_profile, so a
-    // many-file analysis needs more headroom than the sandbox default.
+    // `scanInputs` is the profiler's own instrument: the workflow injects one scan into
+    // its briefing, and the tool is how it re-scans a subtree it wants to group
+    // differently. Declared rather than bolted on, so the resolved roster stays
+    // `meta.tools` plus the always-on set.
+    tools: [...BASE_SANDBOX_TOOLS, "scanInputs"],
     defaultMaxSteps: 85,
     plannable: false,
 };

package/dist/agents/sandbox/shared.js

@@ -30,6 +30,7 @@ import { chemblTool, genePreclinicalProfileTool, lookupAnnotationTool, openTarge
 import { createNcbiTools, createChemDbTools } from "../../tools/bio/keys.js";
 // Workspace read surface.
 import { createFileStatTool, createGrepTool, createListFilesTool, createReadFileTool, createWorkspaceSearchTool } from "../../tools/workspace/index.js";
+import { createScanInputsTool } from "../../tools/workspace/scan-inputs.js";
 // Workspace mutate surface.
 import { createEditFileTool, createExecuteCommandTool, createWorkspaceMutator, createWriteFileTool } from "../../tools/workspace/index.js";
 // Skills (declared per agent via meta.skills).
@@ -60,6 +61,16 @@ function resolveSandboxTools(deps, tools) {
     const registry = {
         listAvailablePackages: createListAvailablePackagesTool({ ...(deps.packagesFile ? { packagesFile: deps.packagesFile } : {}) }),
         listAvailableRefs: createListAvailableRefsTool({ ...(deps.refStorePath ? { refStorePath: deps.refStorePath } : {}) }),
+        scanInputs: createScanInputsTool({
+            workspaceFs: deps.workspaceFs,
+            analysisId: deps.step.analysisId,
+            sandboxClient: deps.sandboxClient,
+            sandbox: deps.step.sandbox,
+            workflowId: deps.step.workflowId,
+            stepId: deps.step.stepId,
+            nextFunctionId: deps.step.nextFunctionId,
+            deadlineMs: deps.step.deadlineMs,
+        }),
         resolveLibraryId: resolveLibraryIdTool,
         queryDocs: queryDocsTool,
         inspectRun: createInspectRunTool(deps.pool),

package/dist/agents/sandbox/types.d.ts

@@ -12,7 +12,7 @@
  * in the tool's `perSource` report; the rest of the call still answers.
  */
 /** Closed allowlist of tools any sandbox agent may declare. */
-export type SandboxToolName = "listAvailablePackages" | "listAvailableRefs" | "resolveLibraryId" | "queryDocs" | "inspectRun" | "pubmed" | "resolve_citation" | "searchGene" | "lookupAnnotation" | "searchInteractions" | "chembl" | "pubchem" | "opentargets" | "geneDiseaseEvidence" | "drugGeneInteractions" | "genePreclinicalProfile" | "searchFaers" | "searchClinicalTrials" | "searchGeoDatasets" | "targetSafety" | "comptox";
+export type SandboxToolName = "listAvailablePackages" | "listAvailableRefs" | "scanInputs" | "resolveLibraryId" | "queryDocs" | "inspectRun" | "pubmed" | "resolve_citation" | "searchGene" | "lookupAnnotation" | "searchInteractions" | "chembl" | "pubchem" | "opentargets" | "geneDiseaseEvidence" | "drugGeneInteractions" | "genePreclinicalProfile" | "searchFaers" | "searchClinicalTrials" | "searchGeoDatasets" | "targetSafety" | "comptox";
 /** Planner-facing metadata + tool allowlist for one sandbox agent. */
 export interface AgentMeta {
     /** Stable agent id — also the key in the catalog and the `AgentDefinition.id`. */

package/dist/app/data-profile-orientation.js

@@ -18,6 +18,9 @@
 export const DATA_PROFILE_ORIENTATION_MAX_CHARS = 1200;
 /** Files listed before the tail is elided (the count still reports the total). */
 const MAX_FILES = 8;
+/** Kinds listed before the tail is elided. A dataset with more is described by its first few. */
+const MAX_KINDS = 6;
+const MAX_KIND_DESCRIPTION_CHARS = 90;
 /** Quality concerns listed — the profiler orders them, so these are the top ones. */
 const MAX_CONCERNS = 3;
 const MAX_DESIGN_CHARS = 200;
@@ -105,9 +108,35 @@ export function buildDataProfileOrientation(result, maxChars = DATA_PROFILE_ORIE
         const more = concerns.length > shown.length ? ` (+${concerns.length - shown.length} more)` : "";
         lines.push(`Concerns: ${shown.join("; ")}${more}`);
     }
+    // Kinds come first because they are what the dataset IS at this budget: four lines
+    // describing 3513 files, where the per-file list could only show the first eight of
+    // them and imply the rest away.
+    const kinds = result.kinds ?? [];
+    if (kinds.length > 0) {
+        const shown = kinds.slice(0, MAX_KINDS);
+        const datasetFiles = kinds.reduce((sum, kind) => sum + kind.count, 0);
+        const header = shown.length < kinds.length
+            ? `Kinds (${shown.length} of ${kinds.length}, ${datasetFiles} files):`
+            : `Kinds (${kinds.length}, ${datasetFiles} files):`;
+        lines.push(header);
+        for (const kind of shown) {
+            const facts = [`${kind.count}x`, present(kind.format)].filter((f) => f !== undefined).join(", ");
+            lines.push(`- ${kind.name} (${facts}) — ${clip(kind.memberRepresents, MAX_KIND_DESCRIPTION_CHARS)}`);
+        }
+        const axes = result.axes ?? [];
+        if (axes.length > 0) {
+            lines.push(`Axes: ${axes.map((axis) => `${axis.label} (${axis.cardinality})`).join(", ")}`);
+        }
+        if (result.coverage && result.coverage.unmatched > 0) {
+            lines.push(`Coverage: ${result.coverage.matched} of ${result.coverage.total} files match a kind`);
+        }
+    }
     if (result.files.length > 0) {
         const shown = result.files.slice(0, MAX_FILES);
-        const header = shown.length < result.files.length ? `Files (${shown.length} of ${result.files.length}):` : `Files (${result.files.length}):`;
+        // With kinds present these are the individually notable files — the metadata
+        // sheet, the README, the outlier — not a sample of the dataset.
+        const label = kinds.length > 0 ? "Notable files" : "Files";
+        const header = shown.length < result.files.length ? `${label} (${shown.length} of ${result.files.length}):` : `${label} (${result.files.length}):`;
         lines.push(header);
         for (const file of shown) {
             lines.push(`- ${file.path} — ${clip(file.description, MAX_FILE_DESCRIPTION_CHARS)}${formatFileFacts(file)}`);

package/dist/app/data-profile-policy.d.ts

@@ -5,13 +5,37 @@
  * — staging stays embedder-side per the data-profile-init spec, and the atomic running→expired
  * flip stays an SQL guard (`expireStaleDataProfile`), not part of this decision.
  */
-export type DataProfileLifecycleStatus = "pending" | "running" | "completed" | "failed";
+import type { DataProfileInputSignature, DataProfileLifecycleStatus } from "../contracts/data-profile.js";
+export type { DataProfileLifecycleStatus };
 /**
- * A completed profile is stale when the analysis's seed input set no longer
- * matches the set the profile actually covered — a file was added or swapped
- * since profiling. An empty seed set is never stale (nothing to compare).
+ * The analysis's inputs as they are NOW. A caller holding sizes and mtimes supplies
+ * the signature; one holding only the ledger's seeded ids supplies just those, and the
+ * comparison degrades honestly to what those ids can settle.
  */
-export declare function isDataProfileStale(seedInputFileIds: readonly string[], profiledInputFileIds: readonly string[]): boolean;
+export interface CurrentInputSet {
+    readonly fileIds: readonly string[];
+    readonly signature?: DataProfileInputSignature;
+}
+/** The comparand a profile snapshot carries. Which one is present depends on its era. */
+export interface ProfiledInputSnapshot {
+    readonly inputSignature?: DataProfileInputSignature;
+    readonly inputFileIds?: readonly string[];
+}
+/**
+ * A completed profile is stale when the analysis's current input set no longer matches
+ * the set the profile actually covered.
+ *
+ * The signature is preferred where both sides carry one: it covers size and mtime as
+ * well as identity, so an in-place edit is drift too. A snapshot predating the
+ * signature falls back to its identity list rather than being treated as drift, since
+ * that list answers the same question for the set it covered. A snapshot carrying
+ * NEITHER is drift: nothing establishes what it covered, and one re-profile heals it —
+ * exactly how a wholly absent `result` is already treated.
+ *
+ * An empty current set is never stale: there is nothing to compare, and an analysis
+ * whose inputs were removed is handled by clearing the profile, not by re-profiling it.
+ */
+export declare function isDataProfileStale(current: CurrentInputSet, profiled: ProfiledInputSnapshot | null | undefined): boolean;
 export type DataProfileAction = {
     readonly kind: "none";
 } | {
@@ -21,8 +45,10 @@ export type DataProfileAction = {
 };
 export interface DataProfileDecisionInput {
     readonly status: DataProfileLifecycleStatus;
-    readonly seedInputFileIds: readonly string[];
-    readonly profiledInputFileIds: readonly string[];
+    /** The analysis's inputs as they are now — the seeded ids, plus a signature where the caller has one. */
+    readonly current: CurrentInputSet;
+    /** The comparand the stored profile carries, or null when it holds none. */
+    readonly profiled: ProfiledInputSnapshot | null;
 }
 /**
  * Decide the next profiling action from a (post-expire) status:

package/dist/app/data-profile-policy.js

@@ -6,17 +6,39 @@
  * flip stays an SQL guard (`expireStaleDataProfile`), not part of this decision.
  */
 /**
- * A completed profile is stale when the analysis's seed input set no longer
- * matches the set the profile actually covered — a file was added or swapped
- * since profiling. An empty seed set is never stale (nothing to compare).
+ * A completed profile is stale when the analysis's current input set no longer matches
+ * the set the profile actually covered.
+ *
+ * The signature is preferred where both sides carry one: it covers size and mtime as
+ * well as identity, so an in-place edit is drift too. A snapshot predating the
+ * signature falls back to its identity list rather than being treated as drift, since
+ * that list answers the same question for the set it covered. A snapshot carrying
+ * NEITHER is drift: nothing establishes what it covered, and one re-profile heals it —
+ * exactly how a wholly absent `result` is already treated.
+ *
+ * An empty current set is never stale: there is nothing to compare, and an analysis
+ * whose inputs were removed is handled by clearing the profile, not by re-profiling it.
  */
-export function isDataProfileStale(seedInputFileIds, profiledInputFileIds) {
-    if (seedInputFileIds.length === 0)
+export function isDataProfileStale(current, profiled) {
+    if (current.fileIds.length === 0 && current.signature === undefined)
         return false;
-    if (seedInputFileIds.length !== profiledInputFileIds.length)
+    if (!profiled)
         return true;
-    const profiled = new Set(profiledInputFileIds);
-    return seedInputFileIds.some((id) => !profiled.has(id));
+    if (profiled.inputSignature) {
+        // A caller with no signature of its own can still compare counts, which catches
+        // an added or removed file. It cannot catch a same-count swap, and claiming
+        // otherwise would be a verdict the comparand does not support.
+        if (!current.signature)
+            return profiled.inputSignature.count !== current.fileIds.length;
+        return profiled.inputSignature.digest !== current.signature.digest || profiled.inputSignature.count !== current.signature.count;
+    }
+    if (profiled.inputFileIds) {
+        if (current.fileIds.length !== profiled.inputFileIds.length)
+            return true;
+        const covered = new Set(profiled.inputFileIds);
+        return current.fileIds.some((id) => !covered.has(id));
+    }
+    return true;
 }
 /**
  * Decide the next profiling action from a (post-expire) status:
@@ -30,7 +52,7 @@ export function isDataProfileStale(seedInputFileIds, profiledInputFileIds) {
 export function decideDataProfileAction(input) {
     if (input.status === "pending")
         return { kind: "trigger" };
-    if (input.status === "completed" && isDataProfileStale(input.seedInputFileIds, input.profiledInputFileIds)) {
+    if (input.status === "completed" && isDataProfileStale(input.current, input.profiled)) {
         return { kind: "retrigger" };
     }
     return { kind: "none" };

package/dist/contracts/chat-parts.d.ts

@@ -331,36 +331,8 @@ export interface RunFailedPart {
     /** Machine-readable failure reason (e.g., "budget_exceeded"). */
     reason?: string;
 }
-export interface PreviewPart {
-    type: "data-report-preview";
-    /** Unique per emission (UUID). */
-    id: string;
-    /** Groups all versions of the same preview. */
-    previewId: string;
-    /** Version number (1, 2, 3, ...). */
-    version: number;
-    /** Report title. */
-    title: string;
-    /** Version-relative path (e.g., "v1/index.html"). */
-    previewPath: string;
-    /** Report format. */
-    format: "html" | "pdf";
-}
-export interface DataPreviewFailedPart {
-    type: "data-report-preview-failed";
-    /** Unique per emission (UUID). */
-    id: string;
-    /** Groups all versions of the same preview. */
-    previewId: string;
-    /** Attempted version number that failed. */
-    version: number;
-    /** Human-readable failure reason. */
-    reason: string;
-    /** Optional taxonomy of failure kinds. */
-    errorKind?: "render" | "submit" | "build" | "timeout" | "internal";
-}
 /**
- * The record that a turn started a report session. It rides the chat stream
+ * The record that a turn started a child session. It rides the chat stream
  * live, and it persists into the turn at the position of the spawn.
  *
  * The part is a placement record and a freshness signal only. The thread
@@ -368,11 +340,35 @@ export interface DataPreviewFailedPart {
  * archived state. When the thread of the part is archived or absent, a
  * consumer renders nothing for it.
  */
-export interface ReportSessionStartedPart {
-    type: "data-report-session-started";
-    /** The id of the report thread that the spawn made. */
+export interface ChildSessionStartedPart {
+    type: "data-child-session-started";
+    /** The id of the child thread that the spawn made. */
     threadId: string;
     /** The id of the conversation thread that spawned it. */
     parentThreadId: string;
+    /**
+     * The type of the child thread, in the thread store's vocabulary.
+     * Known values today: `"report"`.
+     */
+    threadType: string;
+}
+/**
+ * The record that a report-session preview rendered the page. It rides the
+ * chat stream live, and it persists into the turn at the position of the
+ * render.
+ *
+ * The part is a placement record and a freshness signal only. The version
+ * store and the session-page mint stay the authority for what is viewable:
+ * the part carries no path, no format, and no URL. A consumer that wants the
+ * page reads those surfaces.
+ */
+export interface ReportRenderedPart {
+    type: "data-report-rendered";
+    /** Unique per emission. */
+    id: string;
+    /** The ISO timestamp of the successful render. */
+    renderedAt: string;
+    /** The title of the rendered document. */
+    title?: string;
 }
-export type CortexChatPart = PresentationPart | PlanPart | RunCardPart | FileReferencePart | AskPart | RunStartedPart | DagStatePart | StepActivityPart | StepFileTreePart | StepOutputPart | StepSummaryPart | StepUsagePart | StepBlockedPart | RunSynthesisPart | SynthesisProgressPart | RunCompletedPart | RunFailedPart | PreviewPart | DataPreviewFailedPart | ReportSessionStartedPart;
+export type CortexChatPart = PresentationPart | PlanPart | RunCardPart | FileReferencePart | AskPart | RunStartedPart | DagStatePart | StepActivityPart | StepFileTreePart | StepOutputPart | StepSummaryPart | StepUsagePart | StepBlockedPart | RunSynthesisPart | SynthesisProgressPart | RunCompletedPart | RunFailedPart | ChildSessionStartedPart | ReportRenderedPart;

package/dist/contracts/content-url.d.ts

@@ -1,60 +1,26 @@
 /**
  * Content URL construction — shared between the frontend and Cortex.
  *
- * The `res` claim formulas and URL shapes are the canonical TypeScript contract
- * for the content-token flow. The storage backend mirrors each formula in Go; both
- * sides are locked by the shared test vectors at
- * `src/__tests__/fixtures/preview-res.json` (previews) and
- * `src/__tests__/fixtures/report-session-res.json` (report-session pages), each a
+ * The `res` claim formula and URL shape are the canonical TypeScript contract
+ * for the content-token flow. The storage backend mirrors the formula in Go; both
+ * sides are locked by the shared test vector at
+ * `src/__tests__/fixtures/report-session-res.json` (report-session pages), a
  * byte-identical copy of the storage backend's `kernel/contenttoken/testdata` file.
  *
- * End-to-end contract (previews):
- *   token res claim : "previews/{analysisId}/{previewId}"
- *   URL             : {contentBaseUrl}/previews/{analysisId}/{previewId}/{previewPath}?t={token}
- *   Caddy predicate : request.path.startsWith("/" + res + "/")
- *
  * End-to-end contract (report-session pages):
  *   token res claim : "report-sessions/{analysisId}/{threadId}"  (token kind "rs")
  *   URL             : {contentBaseUrl}/report-sessions/{analysisId}/{threadId}/{pagePath}?t={token}
  *   Caddy predicate : request.path.startsWith("/" + res + "/")
  *
- * This is URL space only. On disk a preview lives inside its analysis's workspace tree, at
- * `{resolveWorkspaceRoot(analysisId)}/previews/{previewId}/{previewPath}` (the workspace-layout
- * spec), and a session page at `{resolveWorkspaceRoot(analysisId)}/report-sessions/{threadId}/{pagePath}`
+ * This is URL space only. On disk a session page lives inside its analysis's workspace tree, at
+ * `{resolveWorkspaceRoot(analysisId)}/report-sessions/{threadId}/{pagePath}`
  * (the report-session-agent spec) — the `res` claim carries the analysis id because the URL needs an
  * authorization boundary, whereas the resolved root already identifies the analysis and so does not
- * repeat it. A host that serves either space owns the map between the two.
+ * repeat it. A host that serves the space owns the map between the two.
  *
  * The harness's contracts module owns this TS implementation so both the harness and
  * react-client consume one canonical formula.
  */
-/**
- * Canonical `res` claim formula for a preview. Returns the literal string
- * `previews/{analysisId}/{previewId}` with no leading or trailing slash.
- *
- * This is the URL sub-path served by the content-server (Caddy) and the token's
- * authorization boundary — NOT a filesystem sub-path; see the module doc.
- *
- * MUST match `fmt.Sprintf("previews/%s/%s", analysisID, previewID)` in
- * the storage backend's Go preview-access implementation. Drift is caught by the shared test
- * vector at `src/__tests__/fixtures/preview-res.json`.
- */
-export declare function previewResourceId(analysisId: string, previewId: string): string;
-/**
- * Build a content-token preview URL for an iframe src.
- *
- * Produces `{contentBaseUrl}/{res}/{previewPath}?t={token}` where `res` is
- * the output of `previewResourceId(analysisId, previewId)`. The query parameter
- * name is `t` (matching Caddy's `from_query t` directive). The token is
- * URL-encoded.
- *
- * @param contentBaseUrl - Content server base URL (trailing slash tolerated)
- * @param analysisId - The analysis ID (authorization boundary)
- * @param previewId - The preview ID (groups all versions)
- * @param previewPath - Version-relative path (e.g., "v1/index.html"). Leading slash tolerated.
- * @param token - Short-lived content token minted by the storage backend (required)
- */
-export declare function buildPreviewUrl(contentBaseUrl: string, analysisId: string, previewId: string, previewPath: string, token: string): string;
 /**
  * Canonical `res` claim formula for a report-session page. Returns the literal string
  * `report-sessions/{analysisId}/{threadId}` with no leading or trailing slash.

package/dist/contracts/content-url.js

@@ -1,67 +1,26 @@
 /**
  * Content URL construction — shared between the frontend and Cortex.
  *
- * The `res` claim formulas and URL shapes are the canonical TypeScript contract
- * for the content-token flow. The storage backend mirrors each formula in Go; both
- * sides are locked by the shared test vectors at
- * `src/__tests__/fixtures/preview-res.json` (previews) and
- * `src/__tests__/fixtures/report-session-res.json` (report-session pages), each a
+ * The `res` claim formula and URL shape are the canonical TypeScript contract
+ * for the content-token flow. The storage backend mirrors the formula in Go; both
+ * sides are locked by the shared test vector at
+ * `src/__tests__/fixtures/report-session-res.json` (report-session pages), a
  * byte-identical copy of the storage backend's `kernel/contenttoken/testdata` file.
  *
- * End-to-end contract (previews):
- *   token res claim : "previews/{analysisId}/{previewId}"
- *   URL             : {contentBaseUrl}/previews/{analysisId}/{previewId}/{previewPath}?t={token}
- *   Caddy predicate : request.path.startsWith("/" + res + "/")
- *
  * End-to-end contract (report-session pages):
  *   token res claim : "report-sessions/{analysisId}/{threadId}"  (token kind "rs")
  *   URL             : {contentBaseUrl}/report-sessions/{analysisId}/{threadId}/{pagePath}?t={token}
  *   Caddy predicate : request.path.startsWith("/" + res + "/")
  *
- * This is URL space only. On disk a preview lives inside its analysis's workspace tree, at
- * `{resolveWorkspaceRoot(analysisId)}/previews/{previewId}/{previewPath}` (the workspace-layout
- * spec), and a session page at `{resolveWorkspaceRoot(analysisId)}/report-sessions/{threadId}/{pagePath}`
+ * This is URL space only. On disk a session page lives inside its analysis's workspace tree, at
+ * `{resolveWorkspaceRoot(analysisId)}/report-sessions/{threadId}/{pagePath}`
  * (the report-session-agent spec) — the `res` claim carries the analysis id because the URL needs an
  * authorization boundary, whereas the resolved root already identifies the analysis and so does not
- * repeat it. A host that serves either space owns the map between the two.
+ * repeat it. A host that serves the space owns the map between the two.
  *
  * The harness's contracts module owns this TS implementation so both the harness and
  * react-client consume one canonical formula.
  */
-/**
- * Canonical `res` claim formula for a preview. Returns the literal string
- * `previews/{analysisId}/{previewId}` with no leading or trailing slash.
- *
- * This is the URL sub-path served by the content-server (Caddy) and the token's
- * authorization boundary — NOT a filesystem sub-path; see the module doc.
- *
- * MUST match `fmt.Sprintf("previews/%s/%s", analysisID, previewID)` in
- * the storage backend's Go preview-access implementation. Drift is caught by the shared test
- * vector at `src/__tests__/fixtures/preview-res.json`.
- */
-export function previewResourceId(analysisId, previewId) {
-    return `previews/${analysisId}/${previewId}`;
-}
-/**
- * Build a content-token preview URL for an iframe src.
- *
- * Produces `{contentBaseUrl}/{res}/{previewPath}?t={token}` where `res` is
- * the output of `previewResourceId(analysisId, previewId)`. The query parameter
- * name is `t` (matching Caddy's `from_query t` directive). The token is
- * URL-encoded.
- *
- * @param contentBaseUrl - Content server base URL (trailing slash tolerated)
- * @param analysisId - The analysis ID (authorization boundary)
- * @param previewId - The preview ID (groups all versions)
- * @param previewPath - Version-relative path (e.g., "v1/index.html"). Leading slash tolerated.
- * @param token - Short-lived content token minted by the storage backend (required)
- */
-export function buildPreviewUrl(contentBaseUrl, analysisId, previewId, previewPath, token) {
-    const base = contentBaseUrl.replace(/\/+$/, "");
-    const path = previewPath.replace(/^\/+/, "");
-    const res = previewResourceId(analysisId, previewId);
-    return `${base}/${res}/${path}?t=${encodeURIComponent(token)}`;
-}
 /**
  * Canonical `res` claim formula for a report-session page. Returns the literal string
  * `report-sessions/{analysisId}/{threadId}` with no leading or trailing slash.