@intelligo-dev/chat 1.0.0-beta.13

package/dist/attachments.js

@@ -0,0 +1,204 @@
+/**
+ * Stored attachments: the upload route and the route that serves them.
+ *
+ * Inline attachments (the default policy) travel inside the message as
+ * data URLs and need nothing here. A deployment that wants files
+ * outside the transcript — larger than a message should carry, kept
+ * after the conversation is shared, extracted to text for the model —
+ * sets `attachments.mode: "stored"`, binds a storage adapter from its
+ * composition root, and mounts these two handlers:
+ *
+ *     // app/api/chat/upload/route.ts
+ *     export const { POST } = createChatUploadHandler(chatServerConfig);
+ *     // app/api/chat/attachments/[id]/route.ts
+ *     export const { GET } = createChatAttachmentHandler(chatServerConfig);
+ *
+ * The upload answers `{ id, url, filename, mediaType, size }`; the
+ * composer puts `url` in the file part; the transport signs it for the
+ * model and persists the app URL, which this route redirects to a
+ * fresh signed URL for anyone in the workspace who can open the
+ * conversation. No signed URL is ever persisted or shared.
+ */
+import { requireWorkspace } from "@intelligo-dev/auth";
+import { createAttachment, getAttachment, isAttachmentServiceError, setExtractedText, } from "@intelligo-dev/core/attachments";
+import { createLogger } from "@intelligo-dev/core/logger";
+import { attachmentStorageKey, getStorageAdapter, StorageUnavailableError, } from "@intelligo-dev/core/storage";
+import { ATTACHMENT_MAX_BYTES, attachmentUrl } from "./body.js";
+/** Room for the multipart boundaries and headers around the file. */
+const FORM_OVERHEAD_BYTES = 64 * 1024;
+import { DEFAULT_CHAT_MESSAGES, refuse } from "./errors.js";
+const log = createLogger("Chat");
+const SIGNED_URL_SECONDS = 900;
+async function defaultAuthenticate() {
+    const { workspace, user } = await requireWorkspace();
+    return { workspaceId: workspace.id, userId: user.id };
+}
+function safeFilename(name) {
+    const base = name.split(/[\\/]/).pop() ?? "";
+    return base.replace(/[\x00-\x1f]/g, "").slice(0, 255) || "file";
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/**
+ * `POST multipart/form-data` with one `file` field → an attachment row
+ * and the URL the composer puts in the file part. Refuses a type the
+ * policy does not accept, a file over `maxBytes`, and anything without
+ * a session.
+ */
+export function createChatUploadHandler(config) {
+    const authenticate = config.authenticate ?? defaultAuthenticate;
+    const policy = config.attachments;
+    async function messagesFor(request) {
+        return config.messages ? config.messages(request) : DEFAULT_CHAT_MESSAGES;
+    }
+    async function POST(request) {
+        await config.onRequest?.();
+        const t = await messagesFor(request);
+        if (!policy || policy.mode !== "stored") {
+            return refuse("BAD_REQUEST", t("attachmentRejected"));
+        }
+        let actor;
+        try {
+            actor = await authenticate(request);
+        }
+        catch {
+            return refuse("UNAUTHORIZED", t("unauthorized"));
+        }
+        // Refused before the body is read: `formData()` buffers all of it.
+        const maxBytes = policy.maxBytes ?? ATTACHMENT_MAX_BYTES;
+        const declared = Number(request.headers.get("content-length"));
+        if (Number.isFinite(declared) &&
+            declared > maxBytes + FORM_OVERHEAD_BYTES) {
+            return refuse("BAD_REQUEST", t("attachmentRejected"));
+        }
+        let form;
+        try {
+            form = await request.formData();
+        }
+        catch {
+            return refuse("BAD_REQUEST", t("invalidBody"));
+        }
+        const file = form.get("file");
+        if (!(file instanceof Blob)) {
+            return refuse("BAD_REQUEST", t("invalidBody"));
+        }
+        const mediaType = file.type || "application/octet-stream";
+        if (!policy.accept.includes(mediaType)) {
+            return refuse("BAD_REQUEST", t("attachmentRejected"));
+        }
+        if (file.size > maxBytes) {
+            return refuse("BAD_REQUEST", t("attachmentRejected"));
+        }
+        let storage;
+        try {
+            storage = getStorageAdapter();
+        }
+        catch (error) {
+            if (error instanceof StorageUnavailableError) {
+                log.error("Attachment upload with no storage adapter bound");
+                return refuse("INTERNAL", t("internalError"));
+            }
+            throw error;
+        }
+        const id = crypto.randomUUID();
+        const filename = safeFilename(typeof file.name === "string" ? file.name : "file");
+        const key = attachmentStorageKey(actor.workspaceId, id);
+        try {
+            await storage.put({
+                key,
+                body: file,
+                contentType: mediaType,
+                contentLength: file.size,
+            });
+            await createAttachment(actor, {
+                id,
+                storageKey: key,
+                filename,
+                mediaType,
+                sizeBytes: file.size,
+            });
+        }
+        catch (error) {
+            log.error("Attachment upload failed", { error: errorMessage(error) });
+            return refuse("INTERNAL", t("internalError"));
+        }
+        // Text extraction is best effort: a PDF that will not parse still
+        // uploads, and the model gets the file part alone.
+        if (policy.extractText && !mediaType.startsWith("image/")) {
+            try {
+                const text = await policy.extractText({
+                    id,
+                    filename,
+                    mediaType,
+                    bytes: async () => new Uint8Array(await file.arrayBuffer()),
+                });
+                if (text)
+                    await setExtractedText(actor, { id, text });
+            }
+            catch (error) {
+                log.warn("Attachment text extraction failed", {
+                    attachmentId: id,
+                    error: errorMessage(error),
+                });
+            }
+        }
+        const result = {
+            id,
+            url: attachmentUrl(policy, id),
+            filename,
+            mediaType,
+            size: file.size,
+        };
+        return Response.json(result, { status: 201 });
+    }
+    return { POST };
+}
+/**
+ * `GET /api/chat/attachments/[id]` → a redirect to a short-lived signed
+ * URL, for anyone signed in to the attachment's workspace. The app URL
+ * is what the transcript persists, so it must keep working after the
+ * signed one expires.
+ */
+export function createChatAttachmentHandler(config) {
+    const authenticate = config.authenticate ?? defaultAuthenticate;
+    async function messagesFor(request) {
+        return config.messages ? config.messages(request) : DEFAULT_CHAT_MESSAGES;
+    }
+    async function GET(request, context) {
+        await config.onRequest?.();
+        const t = await messagesFor(request);
+        const { id } = await context.params;
+        let actor;
+        try {
+            actor = await authenticate(request);
+        }
+        catch {
+            return refuse("UNAUTHORIZED", t("unauthorized"));
+        }
+        try {
+            const row = await getAttachment(actor, id);
+            const url = await getStorageAdapter().getSignedUrl(row.storageKey, {
+                expiresInSeconds: SIGNED_URL_SECONDS,
+                disposition: "inline",
+                filename: row.filename,
+            });
+            return new Response(null, {
+                status: 302,
+                headers: { location: url, "cache-control": "private, no-store" },
+            });
+        }
+        catch (error) {
+            if (isAttachmentServiceError(error) && error.code === "not_found") {
+                return refuse("NOT_FOUND", t("notFound"));
+            }
+            log.error("Attachment read failed", {
+                attachmentId: id,
+                error: errorMessage(error),
+            });
+            return refuse("INTERNAL", t("internalError"));
+        }
+    }
+    return { GET };
+}
+//# sourceMappingURL=attachments.js.map

package/dist/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../src/attachments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAE7D,qEAAqE;AACrE,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEzD,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;AAEjC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAqB/B,KAAK,UAAU,mBAAmB;IAChC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACrD,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC7C,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAwB;IAExB,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC;IAElC,KAAK,UAAU,WAAW,CAAC,OAAgB;QACzC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC;IAC5E,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,OAAgB;QAClC,MAAM,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAErC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,KAAgB,CAAC;QACrB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,mEAAmE;QACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,oBAAoB,CAAC;QACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC/D,IACE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzB,QAAQ,GAAG,QAAQ,GAAG,mBAAmB,EACzC,CAAC;YACD,OAAO,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,IAAI,0BAA0B,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,OAAO,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;gBAC7C,GAAG,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBAC7D,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,YAAY,CAC3B,OAAQ,IAAa,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CACvE,CAAC;QACF,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAExD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,GAAG;gBACH,IAAI,EAAE,IAAI;gBACV,WAAW,EAAE,SAAS;gBACtB,aAAa,EAAE,IAAI,CAAC,IAAI;aACzB,CAAC,CAAC;YACH,MAAM,gBAAgB,CAAC,KAAK,EAAE;gBAC5B,EAAE;gBACF,UAAU,EAAE,GAAG;gBACf,QAAQ;gBACR,SAAS;gBACT,SAAS,EAAE,IAAI,CAAC,IAAI;aACrB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtE,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QAChD,CAAC;QAED,kEAAkE;QAClE,mDAAmD;QACnD,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC;oBACpC,EAAE;oBACF,QAAQ;oBACR,SAAS;oBACT,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;iBAC5D,CAAC,CAAC;gBACH,IAAI,IAAI;oBAAE,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE;oBAC5C,YAAY,EAAE,EAAE;oBAChB,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAqB;YAC/B,EAAE;YACF,GAAG,EAAE,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9B,QAAQ;YACR,SAAS;YACT,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAwB;IAExB,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAEhE,KAAK,UAAU,WAAW,CAAC,OAAgB;QACzC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC;IAC5E,CAAC;IAED,KAAK,UAAU,GAAG,CAChB,OAAgB,EAChB,OAA6D;QAE7D,MAAM,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;QAEpC,IAAI,KAAgB,CAAC;QACrB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE;gBACjE,gBAAgB,EAAE,kBAAkB;gBACpC,WAAW,EAAE,QAAQ;gBACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACvB,CAAC,CAAC;YACH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;gBACxB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,mBAAmB,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,wBAAwB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAClE,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAC5C,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE;gBAClC,YAAY,EAAE,EAAE;gBAChB,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;aAC3B,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,CAAC;AACjB,CAAC"}

package/dist/body.d.ts

@@ -0,0 +1,72 @@
+/**
+ * The request body, validated by hand.
+ *
+ * Not zod: a schema library in a package's public surface would have
+ * to be a peer (its `instanceof` fails across copies), and the body
+ * has four fields. The shape is the AI SDK's `DefaultChatTransport`
+ * one — `id`, `messages`, `trigger`, `messageId` — plus whatever the
+ * application's transport added, which is handed back untouched as
+ * `extra` for `resolveAgent` to read (an `agentId`, a model choice).
+ */
+import type { UIMessage } from "ai";
+export type ChatAttachmentPolicy = {
+    /** Media types a file part may carry, e.g. `["image/jpeg", "image/png"]`. */
+    accept: readonly string[];
+    /** Largest payload accepted, in bytes. `ATTACHMENT_MAX_BYTES` when omitted. */
+    maxBytes?: number;
+    /**
+     * `inline` (default): the file travels in the message as a data URL
+     * and is persisted with it. `stored`: the file was uploaded first
+     * through the upload route and the part carries the app URL the
+     * attachment route serves; the transport signs it for the model.
+     */
+    mode?: "inline" | "stored";
+    /** The app URL of a stored attachment. Default `/api/chat/attachments/<id>`. */
+    urlFor?: (id: string) => string;
+    /**
+     * Turns a stored, non-image file into text for the model — a PDF, a
+     * spreadsheet. Runs once, at upload; the text is kept on the row and
+     * appended to the message the model sees. Unset: the file part is
+     * passed through as-is and the provider decides what to do with it.
+     */
+    extractText?: (file: {
+        id: string;
+        filename: string;
+        mediaType: string;
+        bytes: () => Promise<Uint8Array>;
+    }) => Promise<string | null>;
+};
+export type ChatBody = {
+    id: string;
+    messages: UIMessage[];
+    trigger: "submit-message" | "regenerate-message" | undefined;
+    messageId: string | undefined;
+    /** Fields the application's transport added beyond the SDK's own. */
+    extra: Record<string, unknown>;
+};
+export type ChatBodyRejection = {
+    key: "invalidBody" | "messageTooLong" | "attachmentRejected";
+    params?: Record<string, string | number>;
+};
+export type ParsedChatBody = {
+    ok: true;
+    body: ChatBody;
+} | {
+    ok: false;
+    rejection: ChatBodyRejection;
+};
+/** 10 MB: the limit a policy that names none gets. */
+export declare const ATTACHMENT_MAX_BYTES: number;
+/** The app URL of a stored attachment under this policy. */
+export declare function attachmentUrl(policy: Pick<ChatAttachmentPolicy, "urlFor">, id: string): string;
+/**
+ * The attachment id a stored file part's URL names, or null when the
+ * URL is not one this policy hands out. Absolute and relative forms
+ * of the same path both match.
+ */
+export declare function attachmentIdFromUrl(policy: Pick<ChatAttachmentPolicy, "urlFor">, url: string): string | null;
+export declare function parseChatBody(json: unknown, options: {
+    maxMessageLength: number;
+    attachments: ChatAttachmentPolicy | false;
+}): ParsedChatBody;
+//# sourceMappingURL=body.d.ts.map

package/dist/body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../src/body.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAIpC,MAAM,MAAM,oBAAoB,GAAG;IACjC,6EAA6E;IAC7E,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC3B,gFAAgF;IAChF,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,CAAC;IAChC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;KAClC,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,OAAO,EAAE,gBAAgB,GAAG,oBAAoB,GAAG,SAAS,CAAC;IAC7D,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,aAAa,GAAG,gBAAgB,GAAG,oBAAoB,CAAC;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,cAAc,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAE7E,sDAAsD;AACtD,eAAO,MAAM,oBAAoB,QAAmB,CAAC;AAmCrD,4DAA4D;AAC5D,wBAAgB,aAAa,CAC3B,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,EAC5C,EAAE,EAAE,MAAM,GACT,MAAM,CAER;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,EAC5C,GAAG,EAAE,MAAM,GACV,MAAM,GAAG,IAAI,CAmBf;AAgCD,wBAAgB,aAAa,CAC3B,IAAI,EAAE,OAAO,EACb,OAAO,EAAE;IACP,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,oBAAoB,GAAG,KAAK,CAAC;CAC3C,GACA,cAAc,CAkEhB"}

package/dist/body.js

@@ -0,0 +1,174 @@
+/**
+ * The request body, validated by hand.
+ *
+ * Not zod: a schema library in a package's public surface would have
+ * to be a peer (its `instanceof` fails across copies), and the body
+ * has four fields. The shape is the AI SDK's `DefaultChatTransport`
+ * one — `id`, `messages`, `trigger`, `messageId` — plus whatever the
+ * application's transport added, which is handed back untouched as
+ * `extra` for `resolveAgent` to read (an `agentId`, a model choice).
+ */
+import { extractText } from "./windowing.js";
+/** 10 MB: the limit a policy that names none gets. */
+export const ATTACHMENT_MAX_BYTES = 10 * 1024 * 1024;
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/**
+ * No `system`: the system prompt is the server's. A client that could
+ * send one could rewrite the agent's instructions.
+ */
+const ROLES = new Set(["user", "assistant"]);
+const SDK_FIELDS = new Set(["id", "messages", "trigger", "messageId"]);
+const ID_PLACEHOLDER = "__ATTACHMENT_ID__";
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isUIMessage(value) {
+    if (!isRecord(value))
+        return false;
+    if (typeof value.id !== "string" || !value.id)
+        return false;
+    if (typeof value.role !== "string" || !ROLES.has(value.role))
+        return false;
+    if (!Array.isArray(value.parts))
+        return false;
+    return value.parts.every((part) => isRecord(part) && typeof part.type === "string");
+}
+function dataUrlBytes(url) {
+    if (!url.startsWith("data:"))
+        return null;
+    const comma = url.indexOf(",");
+    if (comma === -1)
+        return null;
+    const payload = url.slice(comma + 1);
+    return url.slice(0, comma).endsWith(";base64")
+        ? Math.floor((payload.length * 3) / 4)
+        : payload.length;
+}
+/** The app URL of a stored attachment under this policy. */
+export function attachmentUrl(policy, id) {
+    return policy.urlFor ? policy.urlFor(id) : `/api/chat/attachments/${id}`;
+}
+/**
+ * The attachment id a stored file part's URL names, or null when the
+ * URL is not one this policy hands out. Absolute and relative forms
+ * of the same path both match.
+ */
+export function attachmentIdFromUrl(policy, url) {
+    const template = attachmentUrl(policy, ID_PLACEHOLDER);
+    const at = template.indexOf(ID_PLACEHOLDER);
+    if (at === -1)
+        return null;
+    const prefix = template.slice(0, at);
+    const suffix = template.slice(at + ID_PLACEHOLDER.length);
+    let path = url;
+    if (/^https?:\/\//i.test(url)) {
+        try {
+            const parsed = new URL(url);
+            path = parsed.pathname + parsed.search;
+        }
+        catch {
+            return null;
+        }
+    }
+    if (!path.startsWith(prefix) || !path.endsWith(suffix))
+        return null;
+    const id = path.slice(prefix.length, path.length - suffix.length);
+    return id && !id.includes("/") ? id : null;
+}
+function rejectedAttachment(message, policy) {
+    for (const part of message.parts) {
+        if (part.type !== "file")
+            continue;
+        if (policy === false)
+            return true;
+        const file = part;
+        if (typeof file.mediaType !== "string" ||
+            !policy.accept.includes(file.mediaType)) {
+            return true;
+        }
+        if (typeof file.url !== "string")
+            return true;
+        if (policy.mode === "stored") {
+            // A stored part names an upload; the row is checked by the
+            // handler, which knows the tenant. A data URL here bypassed the
+            // upload route and its limits, so it is refused.
+            if (attachmentIdFromUrl(policy, file.url) === null)
+                return true;
+            continue;
+        }
+        const bytes = dataUrlBytes(file.url);
+        if (bytes !== null && bytes > (policy.maxBytes ?? ATTACHMENT_MAX_BYTES)) {
+            return true;
+        }
+    }
+    return false;
+}
+export function parseChatBody(json, options) {
+    const invalid = {
+        ok: false,
+        rejection: { key: "invalidBody" },
+    };
+    if (!isRecord(json))
+        return invalid;
+    if (typeof json.id !== "string" || !UUID.test(json.id))
+        return invalid;
+    if (!Array.isArray(json.messages) || json.messages.length === 0)
+        return invalid;
+    if (!json.messages.every(isUIMessage))
+        return invalid;
+    if (json.trigger !== undefined &&
+        json.trigger !== "submit-message" &&
+        json.trigger !== "regenerate-message") {
+        return invalid;
+    }
+    if (json.messageId !== undefined && typeof json.messageId !== "string") {
+        return invalid;
+    }
+    const messages = json.messages;
+    // Every user message, not only the new one: the history is the
+    // client's too, and a turn is billed for all of it.
+    for (const message of messages) {
+        if (message.role !== "user")
+            continue;
+        const length = extractText(message.parts).length;
+        if (length > options.maxMessageLength) {
+            return {
+                ok: false,
+                rejection: {
+                    key: "messageTooLong",
+                    params: { max: options.maxMessageLength },
+                },
+            };
+        }
+        if (rejectedAttachment(message, options.attachments)) {
+            return { ok: false, rejection: { key: "attachmentRejected" } };
+        }
+    }
+    const last = messages[messages.length - 1];
+    if (last.role === "assistant") {
+        // A turn that continues the assistant's own message — tool results
+        // or approval answers added client-side — names that message. The
+        // SDK sends exactly this; anything else is a hand-made body that
+        // would make the reply a fresh message with the tool loop lost.
+        if (json.trigger === "regenerate-message")
+            return invalid;
+        if (json.messageId !== last.id)
+            return invalid;
+    }
+    const extra = {};
+    for (const [key, value] of Object.entries(json)) {
+        if (!SDK_FIELDS.has(key))
+            extra[key] = value;
+    }
+    return {
+        ok: true,
+        body: {
+            id: json.id,
+            messages,
+            trigger: json.trigger,
+            messageId: json.messageId,
+            extra,
+        },
+    };
+}
+//# sourceMappingURL=body.js.map

package/dist/body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.js","sourceRoot":"","sources":["../src/body.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA+C1C,sDAAsD;AACtD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAC/E;;;GAGG;AACH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AACvE,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAE3C,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CACtB,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAC1D,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACrC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,aAAa,CAC3B,MAA4C,EAC5C,EAAU;IAEV,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,yBAAyB,EAAE,EAAE,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA4C,EAC5C,GAAW;IAEX,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACvD,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5C,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAE1D,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAkB,EAClB,MAAoC;IAEpC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACnC,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,IAAI,GAAG,IAA8C,CAAC;QAC5D,IACE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;YAClC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EACvC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,2DAA2D;YAC3D,gEAAgE;YAChE,iDAAiD;YACjD,IAAI,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAChE,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,oBAAoB,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAa,EACb,OAGC;IAED,MAAM,OAAO,GAAmB;QAC9B,EAAE,EAAE,KAAK;QACT,SAAS,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE;KAClC,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IACpC,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,OAAO,CAAC;IACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC7D,OAAO,OAAO,CAAC;IACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,OAAO,CAAC;IACtD,IACE,IAAI,CAAC,OAAO,KAAK,SAAS;QAC1B,IAAI,CAAC,OAAO,KAAK,gBAAgB;QACjC,IAAI,CAAC,OAAO,KAAK,oBAAoB,EACrC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvE,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAuB,CAAC;IAC9C,+DAA+D;IAC/D,oDAAoD;IACpD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACtC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QACjD,IAAI,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACtC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,SAAS,EAAE;oBACT,GAAG,EAAE,gBAAgB;oBACrB,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,gBAAgB,EAAE;iBAC1C;aACF,CAAC;QACJ,CAAC;QACD,IAAI,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,CAAC;QACjE,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,mEAAmE;QACnE,kEAAkE;QAClE,iEAAiE;QACjE,gEAAgE;QAChE,IAAI,IAAI,CAAC,OAAO,KAAK,oBAAoB;YAAE,OAAO,OAAO,CAAC;QAC1D,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC;IACjD,CAAC;IAED,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/C,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,OAA8B;YAC5C,SAAS,EAAE,IAAI,CAAC,SAA+B;YAC/C,KAAK;SACN;KACF,CAAC;AACJ,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,65 @@
+/**
+ * What a chat client needs to know about the transport. Imports nothing at
+ * runtime (`./parts` is types and one type guard), so the UI never pulls
+ * the server handler, or Drizzle, Stripe and the auth server behind it,
+ * into the browser.
+ */
+/** Stable codes the transport answers with. The status is fixed per code. */
+export declare const CHAT_ERROR_CODES: readonly ["BAD_REQUEST", "UNAUTHORIZED", "QUOTA_EXCEEDED", "FEATURE_GATED", "NOT_FOUND", "RATE_LIMITED", "INTERNAL", "BILLING_NOT_CONFIGURED", "MODEL_UNAVAILABLE"];
+export type ChatErrorCode = (typeof CHAT_ERROR_CODES)[number];
+/** The JSON body of every non-2xx answer from the chat transport. */
+export type ChatErrorBody = {
+    /** Human-readable, in the caller's locale when the app bound a translator. */
+    error: string;
+    code: ChatErrorCode;
+    /**
+     * The entitlement port's own refusal code (`insufficient_credits`,
+     * `allowance_depleted`, …) when `code` is `QUOTA_EXCEEDED`,
+     * `BILLING_NOT_CONFIGURED` or `MODEL_UNAVAILABLE` (`unknown_model`).
+     */
+    reasonCode?: string;
+    /** Set on `RATE_LIMITED`. */
+    retryAfterSeconds?: number;
+};
+/**
+ * What the chat page opened with: a server-rendered estimate of the
+ * caller's credit, so the page can say "you are out" before a message
+ * is spent on finding out. Amounts are micros of the billing currency.
+ */
+export type ChatQuotaState = {
+    /** False when the next turn would be refused. */
+    allowed: boolean;
+    /** Why, when the engine refused. */
+    reason: string | null;
+    /** Typed refusal, for a UI that wants to distinguish them. */
+    code: string | null;
+    /** Balance left across every pool. */
+    remaining: number;
+    /** Worst-case cost of one turn. */
+    estimated: number;
+    /** Where "upgrade" and "top up" should go. */
+    upgradeHref: string;
+};
+/**
+ * A model the composer may offer. `id` is a registered model id; the
+ * transport refuses any other. `featureKey` gates it by plan.
+ */
+export type ChatModelOption = {
+    id: string;
+    label: string;
+    description?: string;
+    /** Plan feature the workspace needs for this model; unset means every plan. */
+    featureKey?: string;
+};
+export type { ChatAgentData, ChatArtifactData, ChatAuthorizationData, ChatCompactionData, ChatDataChunk, ChatDataPart, ChatDataPartName, ChatDataParts, ChatMessageMetadata, ChatQuestionData, ChatQuestionOption, ChatStatusData, ChatTaskData, ChatTaskItem, ChatTaskStatus, ChatUIMessage, ChatUIMessageChunk, } from "./parts.js";
+export { isChatDataPart } from "./parts.js";
+/**
+ * The transport's error body, from the error `useChat` surfaces.
+ *
+ * The AI SDK's transport throws an `Error` whose message is the
+ * response text, so a JSON refusal arrives as a string. Anything that
+ * is not one of ours — a network failure, a proxy's HTML page — is
+ * null, and belongs in a generic error strip rather than a banner.
+ */
+export declare function parseChatError(error: unknown): ChatErrorBody | null;
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,gBAAgB,qKAUnB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,qEAAqE;AACrE,MAAM,MAAM,aAAa,GAAG;IAC1B,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6BAA6B;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,iDAAiD;IACjD,OAAO,EAAE,OAAO,CAAC;IACjB,oCAAoC;IACpC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,8DAA8D;IAC9D,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,aAAa,EACb,kBAAkB,GACnB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAIzC;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,GAAG,IAAI,CAgCnE"}

package/dist/client.js

@@ -0,0 +1,61 @@
+/**
+ * What a chat client needs to know about the transport. Imports nothing at
+ * runtime (`./parts` is types and one type guard), so the UI never pulls
+ * the server handler, or Drizzle, Stripe and the auth server behind it,
+ * into the browser.
+ */
+/** Stable codes the transport answers with. The status is fixed per code. */
+export const CHAT_ERROR_CODES = [
+    "BAD_REQUEST",
+    "UNAUTHORIZED",
+    "QUOTA_EXCEEDED",
+    "FEATURE_GATED",
+    "NOT_FOUND",
+    "RATE_LIMITED",
+    "INTERNAL",
+    "BILLING_NOT_CONFIGURED",
+    "MODEL_UNAVAILABLE",
+];
+export { isChatDataPart } from "./parts.js";
+const CODES = new Set(CHAT_ERROR_CODES);
+/**
+ * The transport's error body, from the error `useChat` surfaces.
+ *
+ * The AI SDK's transport throws an `Error` whose message is the
+ * response text, so a JSON refusal arrives as a string. Anything that
+ * is not one of ours — a network failure, a proxy's HTML page — is
+ * null, and belongs in a generic error strip rather than a banner.
+ */
+export function parseChatError(error) {
+    const text = error instanceof Error
+        ? error.message
+        : typeof error === "string"
+            ? error
+            : null;
+    if (!text)
+        return null;
+    try {
+        const parsed = JSON.parse(text);
+        if (typeof parsed !== "object" ||
+            parsed === null ||
+            typeof parsed.error !== "string" ||
+            typeof parsed.code !== "string" ||
+            !CODES.has(parsed.code)) {
+            return null;
+        }
+        return {
+            error: parsed.error,
+            code: parsed.code,
+            ...(typeof parsed.reasonCode === "string"
+                ? { reasonCode: parsed.reasonCode }
+                : {}),
+            ...(typeof parsed.retryAfterSeconds === "number"
+                ? { retryAfterSeconds: parsed.retryAfterSeconds }
+                : {}),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,aAAa;IACb,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,WAAW;IACX,cAAc;IACd,UAAU;IACV,wBAAwB;IACxB,mBAAmB;CACX,CAAC;AAsEX,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzC,MAAM,KAAK,GAAwB,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,MAAM,IAAI,GACR,KAAK,YAAY,KAAK;QACpB,CAAC,CAAC,KAAK,CAAC,OAAO;QACf,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,CAAC;IACb,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA2B,CAAC;QAC1D,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAChC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EACvB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,IAAqB;YAClC,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;gBACvC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;gBACnC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ;gBAC9C,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE;gBACjD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}