@intelligo-dev/core 1.0.0-beta.1 → 1.0.0-beta.13

package/dist/notifications/triggers.js.map

@@ -1 +1 @@
-{"version":3,"file":"triggers.js","sourceRoot":"","sources":["../../src/notifications/triggers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,8EAA8E;AAC9E,2CAA2C;AAC3C,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAS9C;IACC,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,mBAAmB,CAAC;IAEpG,yDAAyD;IACzD,MAAM,kBAAkB,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,kBAAkB;QAClE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe;QAC7D,OAAO,EAAE,MAAM,CAAC,UAAU;YACxB,CAAC,CAAC,mBAAmB,MAAM,CAAC,aAAa,kBAAkB,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,wDAAwD;YACtJ,CAAC,CAAC,mBAAmB,MAAM,CAAC,aAAa,cAAc,MAAM,CAAC,cAAc,+BAA+B;QAC7G,QAAQ,EAAE;YACR,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC;KACF,CAAC,CAAC;IAEH,+CAA+C;IAC/C,qBAAqB,CAAC;QACpB,EAAE,EAAE,MAAM,CAAC,SAAS;QACpB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU;QACV,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,2CAA2C;AAC3C,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAS9C;IACC,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,mBAAmB,CAAC;IAEpG,yDAAyD;IACzD,MAAM,kBAAkB,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,kBAAkB;QAC/D,KAAK,EAAE,MAAM,CAAC,UAAU;YACtB,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,2BAA2B;QAC/B,OAAO,EAAE,MAAM,CAAC,UAAU;YACxB,CAAC,CAAC,mBAAmB,MAAM,CAAC,aAAa,kFAAkF;YAC3H,CAAC,CAAC,mBAAmB,MAAM,CAAC,aAAa,SAAS,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,OAAO,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,6BAA6B,MAAM,CAAC,mBAAmB,KAAK;QACnM,QAAQ,EAAE;YACR,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;SAChD;KACF,CAAC,CAAC;IAEH,+CAA+C;IAC/C,qBAAqB,CAAC;QACpB,EAAE,EAAE,MAAM,CAAC,SAAS;QACpB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,UAAU;QACV,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,MAMtD;IACC,MAAM,gBAAgB,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,mBAAmB,CAAC;IAE1G,yDAAyD;IACzD,MAAM,kBAAkB,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,cAAc,MAAM,CAAC,MAAM,eAAe,MAAM,CAAC,aAAa,+BAA+B;QACtG,QAAQ,EAAE;YACR,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB;KACF,CAAC,CAAC;IAEH,+CAA+C;IAC/C,sBAAsB,CAAC;QACrB,EAAE,EAAE,MAAM,CAAC,SAAS;QACpB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,gBAAgB;KACjB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,MAKzD;IACC,2EAA2E;IAC3E,MAAM,kBAAkB,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,GAAG,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,WAAW,yBAAyB;QAC7E,QAAQ,EAAE;YACR,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"triggers.js","sourceRoot":"","sources":["../../src/notifications/triggers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAc,MAAM,UAAU,CAAC;AAEnD,gFAAgF;AAChF,MAAM,WAAW,GAAG,IAAI,CAAC;AAEzB;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAS9C;IACC,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,mBAAmB,CAAC;IACpG,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAE7D,MAAM,kBAAkB,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,kBAAkB;QAClE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB;QACpE,OAAO,EAAE,MAAM,CAAC,UAAU;YACxB,CAAC,CAAC,mBAAmB,MAAM,CAAC,aAAa,yBAAyB,SAAS,iDAAiD;YAC5H,CAAC,CAAC,mBAAmB,MAAM,CAAC,aAAa,cAAc,IAAI,WAAW,SAAS,uBAAuB,MAAM,CAAC,cAAc,KAAK;QAClI,QAAQ,EAAE;YACR,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;YAC9B,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM;YACxC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ;SACpC;KACF,CAAC,CAAC;IAEH,qBAAqB,CAAC;QACpB,EAAE,EAAE,MAAM,CAAC,SAAS;QACpB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU;QACV,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAS9C;IACC,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,mBAAmB,CAAC;IAEpG,MAAM,kBAAkB,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,kBAAkB;QAC/D,KAAK,EAAE,MAAM,CAAC,UAAU;YACtB,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,2BAA2B;QAC/B,OAAO,EAAE,MAAM,CAAC,UAAU;YACxB,CAAC,CAAC,mBAAmB,MAAM,CAAC,aAAa,kFAAkF;YAC3H,CAAC,CAAC,mBAAmB,MAAM,CAAC,aAAa,SAAS,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,OAAO,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,6BAA6B,MAAM,CAAC,mBAAmB,KAAK;QACnM,QAAQ,EAAE;YACR,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;SAChD;KACF,CAAC,CAAC;IAEH,qBAAqB,CAAC;QACpB,EAAE,EAAE,MAAM,CAAC,SAAS;QACpB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,UAAU;QACV,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,MAMtD;IACC,MAAM,gBAAgB,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,mBAAmB,CAAC;IAE1G,MAAM,kBAAkB,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,cAAc,MAAM,CAAC,MAAM,eAAe,MAAM,CAAC,aAAa,+BAA+B;QACtG,QAAQ,EAAE;YACR,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB;KACF,CAAC,CAAC;IAEH,sBAAsB,CAAC;QACrB,EAAE,EAAE,MAAM,CAAC,SAAS;QACpB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,gBAAgB;KACjB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,MAKzD;IACC,MAAM,kBAAkB,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,GAAG,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,WAAW,yBAAyB;QAC7E,QAAQ,EAAE;YACR,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/notifications/types.d.ts

@@ -1,13 +1,4 @@
-/**
- * Notification Type Definitions (NOTIF-07)
- *
- * Types covering all notification events:
- * - Quota/usage warnings (80%, 100%)
- * - Trial credit alerts (20% remaining, depleted)
- * - Payment events (failed, confirmed)
- * - Team events (member joined, invitation)
- */
-export type NotificationType = "quota_warning_80" | "quota_warning_100" | "trial_warning_20" | "trial_depleted" | "payment_failed" | "team_member_joined" | "subscription_confirmed" | "workspace_invitation" | "referral_signup" | "referral_upgrade";
+export type NotificationType = "quota_warning_80" | "quota_warning_100" | "trial_warning_20" | "trial_depleted" | "payment_failed" | "team_member_joined" | "subscription_confirmed" | "workspace_invitation";
 export interface CreateNotificationParams {
     userId: string;
     workspaceId?: string;

package/dist/notifications/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/notifications/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,oBAAoB,GACpB,wBAAwB,GACxB,sBAAsB,GACtB,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/notifications/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,oBAAoB,GACpB,wBAAwB,GACxB,sBAAsB,CAAC;AAE3B,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC"}

package/dist/notifications/types.js

@@ -1,11 +1,2 @@
-/**
- * Notification Type Definitions (NOTIF-07)
- *
- * Types covering all notification events:
- * - Quota/usage warnings (80%, 100%)
- * - Trial credit alerts (20% remaining, depleted)
- * - Payment events (failed, confirmed)
- * - Team events (member joined, invitation)
- */
 export {};
 //# sourceMappingURL=types.js.map

package/dist/notifications/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/notifications/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/notifications/types.ts"],"names":[],"mappings":""}

package/dist/prompt.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Prompt-injection sanitisation for user-authored text that reaches a
+ * system prompt (a stored summary, a profile field, a quoted web page).
+ * Strips role markers, override phrases and obfuscated separators, and
+ * reports which patterns it saw so a transport can log the attempt.
+ *
+ * Dependency-free, so any package that assembles a prompt can use it.
+ *
+ * Returns an empty string when more than half of the original was
+ * injection patterns: feeding the remaining fragments to the model is
+ * worse than dropping them.
+ */
+export type InjectionPattern = {
+    name: string;
+    pattern: RegExp;
+};
+/**
+ * What is stripped. Exported so a product can extend the list for its
+ * own model or language without re-implementing the sweep.
+ */
+export declare const INJECTION_PATTERNS: readonly InjectionPattern[];
+export type InjectionReport = {
+    isInjection: boolean;
+    /** Names of the patterns that matched, for a log line. */
+    patterns: string[];
+};
+/**
+ * Which patterns the text carries, without changing it. Zero-width
+ * characters are both removed and replaced by spaces before matching,
+ * so neither obfuscation hides a marker.
+ */
+export declare function detectPromptInjection(text: string, patterns?: readonly InjectionPattern[]): InjectionReport;
+/**
+ * The text with every pattern replaced by a space and whitespace
+ * collapsed — or an empty string when the text was mostly patterns.
+ */
+export declare function sanitizeForSystemPrompt(text: string, patterns?: readonly InjectionPattern[]): string;
+//# sourceMappingURL=prompt.d.ts.map

package/dist/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAYH,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,gBAAgB,EAuCzD,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,EAAE,OAAO,CAAC;IACrB,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,SAAS,gBAAgB,EAAuB,GACzD,eAAe,CAiBjB;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,SAAS,gBAAgB,EAAuB,GACzD,MAAM,CA+BR"}

package/dist/prompt.js

@@ -0,0 +1,118 @@
+/**
+ * Prompt-injection sanitisation for user-authored text that reaches a
+ * system prompt (a stored summary, a profile field, a quoted web page).
+ * Strips role markers, override phrases and obfuscated separators, and
+ * reports which patterns it saw so a transport can log the attempt.
+ *
+ * Dependency-free, so any package that assembles a prompt can use it.
+ *
+ * Returns an empty string when more than half of the original was
+ * injection patterns: feeding the remaining fragments to the model is
+ * worse than dropping them.
+ */
+const ZERO_WIDTH_CHARS = /[\u200B\u200C\u200D\u200E\u200F\uFEFF\u00AD\u2060\u2061\u2062\u2063\u2064]/g;
+function normalizeText(text) {
+    return {
+        withSpaces: text.replace(ZERO_WIDTH_CHARS, " ").normalize("NFKC"),
+        stripped: text.replace(ZERO_WIDTH_CHARS, "").normalize("NFKC"),
+    };
+}
+/**
+ * What is stripped. Exported so a product can extend the list for its
+ * own model or language without re-implementing the sweep.
+ */
+export const INJECTION_PATTERNS = [
+    { name: "[SYSTEM]", pattern: /\[SYSTEM\]/gi },
+    { name: "<<SYS>>", pattern: /<<SYS>>/gi },
+    { name: "<|system|>", pattern: /<\|system\|>/gi },
+    { name: "<|im_start|>", pattern: /<\|im_start\|>/gi },
+    { name: "<|im_end|>", pattern: /<\|im_end\|>/gi },
+    { name: "system: prefix", pattern: /^(SYSTEM|System|system)\s*:\s*/gm },
+    {
+        name: "ignore previous instructions",
+        pattern: /ignore\s+(?:all\s+)?previous\s+instructions?/gi,
+    },
+    { name: "disregard above", pattern: /disregard\s+(?:everything\s+)?above/gi },
+    { name: "forget everything", pattern: /forget\s+(?:all|everything)/gi },
+    {
+        name: "override instructions",
+        pattern: /override\s+(?:your\s+)?instructions?/gi,
+    },
+    {
+        name: "new instructions",
+        pattern: /(?:your\s+)?new\s+instructions?\s+(?:are|follow)/gi,
+    },
+    { name: "you are now", pattern: /you\s+are\s+now\s+/gi },
+    { name: "act as", pattern: /\bact\s+as\s+(?:a\s+|an\s+)?/gi },
+    { name: "pretend to be", pattern: /pretend\s+to\s+be\s+/gi },
+    { name: "roleplay as", pattern: /roleplay\s+as\s+/gi },
+    { name: "play the role", pattern: /play\s+(?:the\s+)?role\s+of\s+/gi },
+    { name: "separator ---", pattern: /\n{0,2}-{3,}\n{0,2}/g },
+    { name: "separator ===", pattern: /\n{0,2}={3,}\n{0,2}/g },
+    { name: "separator ###", pattern: /\n{0,2}#{3,}\n{0,2}/g },
+    { name: "script tag", pattern: /<script[\s>]/gi },
+    { name: "base64 data", pattern: /data:[^;]+;base64,/gi },
+    {
+        name: "do not follow",
+        pattern: /do\s+not\s+follow\s+(?:your\s+)?(?:previous\s+)?instructions?/gi,
+    },
+    {
+        name: "new system prompt",
+        pattern: /(?:new|updated?)\s+system\s+prompt/gi,
+    },
+];
+/**
+ * Which patterns the text carries, without changing it. Zero-width
+ * characters are both removed and replaced by spaces before matching,
+ * so neither obfuscation hides a marker.
+ */
+export function detectPromptInjection(text, patterns = INJECTION_PATTERNS) {
+    // Stryker disable next-line all: a fast path, not behaviour. Empty or
+    // blank text matches no pattern, so every mutant of this guard —
+    // dropping it, inverting it, swapping the operator — returns the same
+    // report the loop below would have built.
+    if (!text || text.trim().length === 0) {
+        return { isInjection: false, patterns: [] };
+    }
+    const { withSpaces, stripped } = normalizeText(text);
+    const matched = [];
+    for (const { name, pattern } of patterns) {
+        // Fresh instances: a global RegExp carries lastIndex between tests.
+        const a = new RegExp(pattern.source, pattern.flags);
+        const b = new RegExp(pattern.source, pattern.flags);
+        if (a.test(withSpaces) || b.test(stripped))
+            matched.push(name);
+    }
+    return { isInjection: matched.length > 0, patterns: matched };
+}
+/**
+ * The text with every pattern replaced by a space and whitespace
+ * collapsed — or an empty string when the text was mostly patterns.
+ */
+export function sanitizeForSystemPrompt(text, patterns = INJECTION_PATTERNS) {
+    if (!text || text.trim().length === 0)
+        return text;
+    const originalLength = text.length;
+    const { withSpaces, stripped } = normalizeText(text);
+    // Detection reads both forms; so does this. A marker split by a
+    // zero-width character ("ig\u200Bnore") only exists once the
+    // character is removed, and cleaning the spaced form would pass it on.
+    const hiddenByZeroWidth = patterns.some(({ pattern }) => new RegExp(pattern.source, pattern.flags).test(stripped) &&
+        !new RegExp(pattern.source, pattern.flags).test(withSpaces));
+    let sanitized = hiddenByZeroWidth ? stripped : withSpaces;
+    for (const { pattern } of patterns) {
+        sanitized = sanitized.replace(new RegExp(pattern.source, pattern.flags), " ");
+    }
+    sanitized = sanitized
+        // A pattern replaced between two newlines leaves a whitespace-only
+        // line behind; drop those before collapsing blank lines.
+        .replace(/\n[ \t]+\n/g, "\n\n")
+        .replace(/\n{3,}/g, "\n\n")
+        .replace(/ {2,}/g, " ")
+        .trim();
+    const removed = originalLength - sanitized.length;
+    if (removed / originalLength > 0.5)
+        return "";
+    return sanitized;
+}
+//# sourceMappingURL=prompt.js.map

package/dist/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,gBAAgB,GACpB,6EAA6E,CAAC;AAEhF,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;QACjE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;KAC/D,CAAC;AACJ,CAAC;AAID;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAgC;IAC7D,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE;IAC7C,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE;IACzC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE;IACjD,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,kBAAkB,EAAE;IACrD,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE;IACjD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,kCAAkC,EAAE;IACvE;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,gDAAgD;KAC1D;IACD,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,uCAAuC,EAAE;IAC7E,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,+BAA+B,EAAE;IACvE;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,wCAAwC;KAClD;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,oDAAoD;KAC9D;IACD,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACxD,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gCAAgC,EAAE;IAC7D,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,wBAAwB,EAAE;IAC5D,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,oBAAoB,EAAE;IACtD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,kCAAkC,EAAE;IACtE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,sBAAsB,EAAE;IAC1D,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,sBAAsB,EAAE;IAC1D,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,sBAAsB,EAAE;IAC1D,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE;IACjD,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACxD;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,iEAAiE;KAC3E;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,sCAAsC;KAChD;CACF,CAAC;AAQF;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,WAAwC,kBAAkB;IAE1D,sEAAsE;IACtE,iEAAiE;IACjE,sEAAsE;IACtE,0CAA0C;IAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;QACzC,oEAAoE;QACpE,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,WAAwC,kBAAkB;IAE1D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnD,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrD,gEAAgE;IAChE,6DAA6D;IAC7D,uEAAuE;IACvE,MAAM,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CACrC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACd,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;QACxD,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAC9D,CAAC;IACF,IAAI,SAAS,GAAG,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;IAC1D,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;QACnC,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EACzC,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,SAAS,GAAG,SAAS;QACnB,mEAAmE;QACnE,yDAAyD;SACxD,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC;SAC9B,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,IAAI,EAAE,CAAC;IAEV,MAAM,OAAO,GAAG,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC;IAClD,IAAI,OAAO,GAAG,cAAc,GAAG,GAAG;QAAE,OAAO,EAAE,CAAC;IAC9C,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/registry.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Registries that survive a bundler duplicating the module they live in.
+ *
+ * Next.js's server build can instantiate a package twice, so a module-scope
+ * `Map` written by the composition root may not be the one a page reads —
+ * and the failure is quiet (registries look empty, checks fall through to
+ * their defaults). Keying storage off `Symbol.for()` puts the map in the
+ * realm's global symbol registry, which every copy of the module shares.
+ *
+ * `globalThis` is per process: Node and Edge runtimes each still need the
+ * composition root to run.
+ */
+/**
+ * A `Map` shared by every copy of the module that asks for the same key.
+ * Use it wherever a registry is written by the composition root and read by
+ * request-time code:
+ *
+ *     const plans = createRegistry<PlanMap>("billing/plans");
+ *
+ * `key` must be unique across the framework (`"<package>/<registry>"`). The
+ * value type is not checked across copies.
+ */
+export declare function createRegistry<T>(key: string): Map<string, T>;
+/**
+ * A single shared value, for registries that are not maps: a module-scope
+ * `let` has the same duplication problem a `Map` does.
+ */
+export declare function createRegistryRef<T>(key: string, initial: T): {
+    get(): T;
+    set(value: T): void;
+};
+//# sourceMappingURL=registry.d.ts.map

package/dist/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAWH;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAwB7D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,CAAC,GACT;IAAE,GAAG,IAAI,CAAC,CAAC;IAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAA;CAAE,CASnC"}

package/dist/registry.js

@@ -0,0 +1,60 @@
+/**
+ * Registries that survive a bundler duplicating the module they live in.
+ *
+ * Next.js's server build can instantiate a package twice, so a module-scope
+ * `Map` written by the composition root may not be the one a page reads —
+ * and the failure is quiet (registries look empty, checks fall through to
+ * their defaults). Keying storage off `Symbol.for()` puts the map in the
+ * realm's global symbol registry, which every copy of the module shares.
+ *
+ * `globalThis` is per process: Node and Edge runtimes each still need the
+ * composition root to run.
+ */
+const seen = new Set();
+/**
+ * A `Map` shared by every copy of the module that asks for the same key.
+ * Use it wherever a registry is written by the composition root and read by
+ * request-time code:
+ *
+ *     const plans = createRegistry<PlanMap>("billing/plans");
+ *
+ * `key` must be unique across the framework (`"<package>/<registry>"`). The
+ * value type is not checked across copies.
+ */
+export function createRegistry(key) {
+    const symbol = Symbol.for(`@intelligo-dev/registry/${key}`);
+    const globals = globalThis;
+    const existing = globals[symbol];
+    if (existing) {
+        // A second copy reaching the same slot is not an error. Warn once per
+        // key anyway: every other module-scope value in that file is
+        // duplicated too, and those fail silently.
+        if (existing.origin !== import.meta.url && !seen.has(key)) {
+            seen.add(key);
+            console.warn(`[intelligo] registry "${key}" is being read from a second module ` +
+                `instance (${import.meta.url}, first seen from ${existing.origin}). ` +
+                `The registry itself is shared, so this is safe — but any other ` +
+                `module-scope state in that file is now duplicated.`);
+        }
+        return existing.map;
+    }
+    const map = new Map();
+    globals[symbol] = { map, origin: import.meta.url };
+    return map;
+}
+/**
+ * A single shared value, for registries that are not maps: a module-scope
+ * `let` has the same duplication problem a `Map` does.
+ */
+export function createRegistryRef(key, initial) {
+    const box = createRegistry(`ref/${key}`);
+    if (!box.has("value"))
+        box.set("value", initial);
+    return {
+        get: () => box.get("value"),
+        set: (value) => {
+            box.set("value", value);
+        },
+    };
+}
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AASH,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;AAE/B;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAI,GAAW;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,UAA4D,CAAC;IAE7E,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,QAAQ,EAAE,CAAC;QACb,sEAAsE;QACtE,6DAA6D;QAC7D,2CAA2C;QAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,IAAI,CACV,yBAAyB,GAAG,uCAAuC;gBACjE,aAAa,MAAM,CAAC,IAAI,CAAC,GAAG,qBAAqB,QAAQ,CAAC,MAAM,KAAK;gBACrE,iEAAiE;gBACjE,oDAAoD,CACvD,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,CAAC;IACtB,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,EAAa,CAAC;IACjC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACnD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,OAAU;IAEV,MAAM,GAAG,GAAG,cAAc,CAAI,OAAO,GAAG,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjD,OAAO;QACL,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAM;QAChC,GAAG,EAAE,CAAC,KAAQ,EAAE,EAAE;YAChB,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/request-context.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Where request-scoped context comes from. The framework asks for headers
+ * through `getRequestHeaders()`; the application binds the source once,
+ * from its composition root, so no package outside `@intelligo-dev/next`
+ * depends on Next:
+ *
+ *     import { setRequestContextSource } from "@intelligo-dev/core/request-context";
+ *     import { nextRequestContext } from "@intelligo-dev/next";
+ *
+ *     setRequestContextSource(nextRequestContext);
+ *
+ * An unbound source throws rather than guessing at the request, which is how
+ * a session gets read from the wrong one.
+ */
+/**
+ * Produces the current request's headers.
+ *
+ * Async because Next's accessor is, and sync sources satisfy it too —
+ * `getRequestHeaders` awaits either.
+ */
+export type RequestContextSource = () => Headers | Promise<Headers>;
+export declare class RequestContextUnavailableError extends Error {
+    readonly code = "request_context_unavailable";
+    constructor();
+}
+export declare function setRequestContextSource(next: RequestContextSource): void;
+/** Forget the bound source. For tests composing a fresh root. */
+export declare function clearRequestContextSource(): void;
+export declare function hasRequestContextSource(): boolean;
+/**
+ * The current request's headers.
+ *
+ * @throws {RequestContextUnavailableError} when nothing is bound.
+ */
+export declare function getRequestHeaders(): Promise<Headers>;
+/**
+ * Validates a client-sent time zone. The value comes from the browser and
+ * reaches SQL (`AT TIME ZONE`) and `Intl`, so anything this runtime does not
+ * know as a zone, or no value at all, becomes `UTC`.
+ */
+export declare function resolveTimeZone(value: string | null | undefined): string;
+/**
+ * Runs `fn` with these headers, whatever the ambient source says — for a
+ * background job, a script acting as a user, or an integration test.
+ * Only `fn` and the work it starts see them; a concurrent request keeps
+ * its own. Nesting works: the innermost call wins.
+ */
+export declare function withRequestHeaders<T>(headers: Headers, fn: () => Promise<T> | T): Promise<T>;
+//# sourceMappingURL=request-context.d.ts.map

package/dist/request-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../src/request-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpE,qBAAa,8BAA+B,SAAQ,KAAK;IACvD,QAAQ,CAAC,IAAI,iCAAiC;;CAU/C;AA6CD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAExE;AAED,iEAAiE;AACjE,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD;AAED,wBAAgB,uBAAuB,IAAI,OAAO,CAEjD;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC,CAO1D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CASxE;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GACvB,OAAO,CAAC,CAAC,CAAC,CAGZ"}

package/dist/request-context.js

@@ -0,0 +1,100 @@
+/**
+ * Where request-scoped context comes from. The framework asks for headers
+ * through `getRequestHeaders()`; the application binds the source once,
+ * from its composition root, so no package outside `@intelligo-dev/next`
+ * depends on Next:
+ *
+ *     import { setRequestContextSource } from "@intelligo-dev/core/request-context";
+ *     import { nextRequestContext } from "@intelligo-dev/next";
+ *
+ *     setRequestContextSource(nextRequestContext);
+ *
+ * An unbound source throws rather than guessing at the request, which is how
+ * a session gets read from the wrong one.
+ */
+import { createRegistryRef } from "./registry.js";
+export class RequestContextUnavailableError extends Error {
+    constructor() {
+        super("No request context source is bound. Call setRequestContextSource() " +
+            "from your composition root — `nextRequestContext` from " +
+            "@intelligo-dev/next in a Next.js app — or wrap the call in " +
+            "withRequestHeaders() outside a request.");
+        this.code = "request_context_unavailable";
+        this.name = "RequestContextUnavailableError";
+    }
+}
+/**
+ * Held in the cross-instance registry, not a module variable: a bundler that
+ * duplicates this module would otherwise give the composition root one copy
+ * and the request path another.
+ */
+const source = createRegistryRef("core/request-context-source", undefined);
+const scope = createRegistryRef("core/request-headers-scope", undefined);
+/**
+ * The runtime's `AsyncLocalStorage`: the global one Next.js and edge
+ * runtimes provide, or Node's own, loaded only when there is none — a
+ * script, a worker or a test.
+ */
+async function headerScope() {
+    const existing = scope.get();
+    if (existing)
+        return existing;
+    const Storage = globalThis
+        .AsyncLocalStorage ??
+        (await import("node:async_hooks")).AsyncLocalStorage;
+    const created = new Storage();
+    scope.set(created);
+    return created;
+}
+export function setRequestContextSource(next) {
+    source.set(next);
+}
+/** Forget the bound source. For tests composing a fresh root. */
+export function clearRequestContextSource() {
+    source.set(undefined);
+}
+export function hasRequestContextSource() {
+    return source.get() !== undefined || scope.get()?.getStore() !== undefined;
+}
+/**
+ * The current request's headers.
+ *
+ * @throws {RequestContextUnavailableError} when nothing is bound.
+ */
+export async function getRequestHeaders() {
+    const explicit = scope.get()?.getStore();
+    if (explicit)
+        return explicit;
+    const resolve = source.get();
+    if (!resolve)
+        throw new RequestContextUnavailableError();
+    return await resolve();
+}
+/**
+ * Validates a client-sent time zone. The value comes from the browser and
+ * reaches SQL (`AT TIME ZONE`) and `Intl`, so anything this runtime does not
+ * know as a zone, or no value at all, becomes `UTC`.
+ */
+export function resolveTimeZone(value) {
+    if (!value)
+        return "UTC";
+    try {
+        // Throws RangeError for anything that is not a zone it knows.
+        new Intl.DateTimeFormat("en-US", { timeZone: value });
+        return value;
+    }
+    catch {
+        return "UTC";
+    }
+}
+/**
+ * Runs `fn` with these headers, whatever the ambient source says — for a
+ * background job, a script acting as a user, or an integration test.
+ * Only `fn` and the work it starts see them; a concurrent request keeps
+ * its own. Nesting works: the innermost call wins.
+ */
+export async function withRequestHeaders(headers, fn) {
+    const storage = await headerScope();
+    return await storage.run(headers, async () => await fn());
+}
+//# sourceMappingURL=request-context.js.map

package/dist/request-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-context.js","sourceRoot":"","sources":["../src/request-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAU/C,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAEvD;QACE,KAAK,CACH,qEAAqE;YACnE,yDAAyD;YACzD,6DAA6D;YAC7D,yCAAyC,CAC5C,CAAC;QAPK,SAAI,GAAG,6BAA6B,CAAC;QAQ5C,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,MAAM,GAAG,iBAAiB,CAC9B,6BAA6B,EAC7B,SAAS,CACV,CAAC;AAaF,MAAM,KAAK,GAAG,iBAAiB,CAC7B,4BAA4B,EAC5B,SAAS,CACV,CAAC;AAEF;;;;GAIG;AACH,KAAK,UAAU,WAAW;IACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,OAAO,GACV,UAA4D;SAC1D,iBAAiB;QACpB,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,iBAAiB,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAiB,CAAC;IAC7C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAA0B;IAChE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,yBAAyB;IACvC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,OAAO,MAAM,CAAC,GAAG,EAAE,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,SAAS,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC;IACzC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,8BAA8B,EAAE,CAAC;IACzD,OAAO,MAAM,OAAO,EAAE,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAgC;IAC9D,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,8DAA8D;QAC9D,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAgB,EAChB,EAAwB;IAExB,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC"}

package/dist/storage/index.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Where files live. The framework stores attachment rows and hands out URLs;
+ * the application binds one adapter (S3, R2, Vercel Blob, disk) from its
+ * composition root:
+ *
+ *     import { setStorageAdapter } from "@intelligo-dev/core/storage";
+ *     setStorageAdapter(createS3Storage({ bucket, region }));   // the app's lib/storage.ts
+ *
+ * An unbound adapter throws where a file is needed. Keys carry the tenant —
+ * `ws/<workspaceId>/att/<id>` — so a signed URL for one workspace's file can
+ * never be minted from another's row.
+ */
+export type StorageBody = Uint8Array | Blob | ReadableStream<Uint8Array>;
+export type StorageObject = {
+    key: string;
+    contentType: string;
+    size?: number;
+};
+export type SignedUrlOptions = {
+    /** Default 900 (fifteen minutes). */
+    expiresInSeconds?: number;
+    disposition?: "inline" | "attachment";
+    /** Sent as the download's file name when the adapter supports it. */
+    filename?: string;
+};
+export interface StorageAdapter {
+    put(input: {
+        key: string;
+        body: StorageBody;
+        contentType: string;
+        contentLength?: number;
+    }): Promise<StorageObject>;
+    /** A URL the browser — or a model provider — can fetch for a while. */
+    getSignedUrl(key: string, options?: SignedUrlOptions): Promise<string>;
+    /** The bytes, for text extraction or a streaming proxy. Optional: not every store can. */
+    get?(key: string): Promise<{
+        body: ReadableStream<Uint8Array>;
+        contentType: string;
+        size?: number;
+    }>;
+    delete(key: string): Promise<void>;
+}
+export declare class StorageUnavailableError extends Error {
+    readonly code = "storage_unavailable";
+    constructor();
+}
+export declare function setStorageAdapter(next: StorageAdapter): void;
+/** Forget the bound adapter. For tests composing a fresh root. */
+export declare function clearStorageAdapter(): void;
+export declare function hasStorageAdapter(): boolean;
+/** @throws {StorageUnavailableError} when nothing is bound. */
+export declare function getStorageAdapter(): StorageAdapter;
+/** The key a chat attachment is stored under. */
+export declare function attachmentStorageKey(workspaceId: string, id: string): string;
+/**
+ * Files in memory, "signed" as data URLs, for tests and apps without a
+ * bucket. Nothing survives a restart.
+ */
+export declare function createMemoryStorage(): StorageAdapter & {
+    readonly objects: Map<string, {
+        bytes: Uint8Array;
+        contentType: string;
+    }>;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;AAEzE,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,qCAAqC;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC;IACtC,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,KAAK,EAAE;QACT,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,WAAW,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3B,uEAAuE;IACvE,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,0FAA0F;IAC1F,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QACzB,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;QACjC,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AAED,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,yBAAyB;;CASvC;AAOD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAE5D;AAED,kEAAkE;AAClE,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED,+DAA+D;AAC/D,wBAAgB,iBAAiB,IAAI,cAAc,CAIlD;AAED,iDAAiD;AACjD,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAE5E;AA8BD;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,cAAc,GAAG;IACtD,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3E,CA2BA"}