@ixo/oracle-runtime-workers 0.36.0 → 0.36.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ixo/oracle-runtime-workers",
-  "version": "0.36.0",
+  "version": "0.36.1",
   "description": "QiForge oracle runtime for Cloudflare Workers — Durable Object per user (SQLite in WASM over DO storage), Matrix E2EE gateway Durable Object, Hono HTTP/SSE shell.",
   "private": false,
   "publishConfig": {
@@ -67,9 +67,9 @@
     "protobufjs": "^7.6.5",
     "@ixo/topic-protocol": "1.0.0-rc.8",
     "survey-core": "2.3.11",
-    "@ixo/ucan": "2.3.0",
     "@ixo/common": "1.7.2",
-    "@ixo/ixo-transaction": "0.2.0"
+    "@ixo/ixo-transaction": "0.2.0",
+    "@ixo/ucan": "2.3.0"
   },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "^0.22.0",

package/src/attachments/pipeline.ts

@@ -443,9 +443,7 @@ export async function prepareAttachments(
   }> = [];
   for (const attachment of params.attachments) {
     const kind = classifyAttachment(attachment);
-    const strategy = routeAttachment(kind, params.caps, {
-      channelFile: Boolean(attachment.channelRef),
-    });
+    const strategy = routeAttachment(kind, params.caps);
     deps.logger.log(
       `[attachments] "${attachment.filename}" (${attachment.mimetype}) kind=${kind} model=${params.model} → ${strategy}`,
     );

package/src/attachments/route.ts

@@ -18,22 +18,11 @@ export type AttachmentStrategy =
 /**
  * Decide, for one attachment, how to get it to the selected model — the single
  * cost-aware, capability-aware routing rule. Pure and total.
- *
- * `channelFile`: a file from a chat channel (WhatsApp) never goes as raw
- * bytes. Its message is replayed to the model on every later turn and kept in
- * the user's checkpoint, so a native PDF or photo there is base64 the size of
- * the file, counted as tokens at chars/4 and held several times over in the
- * object's 128 MB isolate (a 600 KB PDF reset the isolate on every attempt).
- * The helper model turns it into text instead; tools still read the file
- * itself through `ctx.session.channel.attachments`.
  */
 export function routeAttachment(
   kind: AttachmentKind,
   caps: ModelInputCapabilities,
-  options: { channelFile?: boolean } = {},
 ): AttachmentStrategy {
-  if (options.channelFile)
-    return kind === 'text' ? 'parse-local' : 'model-extract';
   switch (kind) {
     case 'text':
       return 'parse-local';

package/src/attachments/view.ts

@@ -129,11 +129,7 @@ export async function viewAttachment(
 ): Promise<AttachmentView> {
   const attachment = toInput(meta);
   const kind = classifyAttachment(attachment);
-  // A channel file comes back as text too: re-attaching its bytes would put
-  // them in the history again (see `routeAttachment`).
-  const strategy = routeAttachment(kind, deps.caps, {
-    channelFile: Boolean(attachment.channelRef),
-  });
+  const strategy = routeAttachment(kind, deps.caps);
   if (strategy === 'send-native') {
     const { bytes, mimetype, sniffed } = await loadAttachmentBytes(
       attachment,

package/src/delivery/prompt.ts

@@ -1,3 +1,4 @@
+import { SENDABLE_FILE_TYPES } from '../plugins/sandbox/send-file';
 import type { DeliveryProfile } from './types';
 
 /**
@@ -41,7 +42,7 @@ export function renderSurfaceSection(
     `- Ordinary answers stay in chat, including explanations, comparisons, short plans and step-by-step instructions. No headings or horizontal rules. Lists up to ${limits.maxListItems} items, code up to ${limits.maxCodeLines} lines and **bold** for the key fact are fine in chat. Write a small comparison as one short line per item, not a table.`,
     ...(files
       ? [
-          `- Deliver every file meant for the user (a Word document, PDF, spreadsheet, slide deck, image, CSV or anything else) with \`send_file\`: ${deliversAttachments(surface) ? 'the user receives the file itself here, as an attachment' : 'a link to the file is posted here for you'}. When the user asks for a file in a particular format, build it in the sandbox and send it this way. Never paste a download link, and do not describe how to open or download it. Do not send helper scripts or intermediate files. Call it once per file, after the sandbox call that saved the file has finished.`,
+          `- Deliver every file meant for the user with \`send_file\` (${SENDABLE_FILE_TYPES} only): ${deliversAttachments(surface) ? 'the user receives the file itself here, as an attachment' : 'a link to the file is posted here for you'}. When the user asks for a file in a particular format, build it yourself in the sandbox and send it this way. Do not send a file you downloaded from the internet unless the user asked for that exact file. Never paste a download link, and do not describe how to open or download it. Do not send helper scripts or intermediate files. Call it once per file, after the sandbox call that saved the file has finished.`,
         ]
       : []),
     artifacts

package/src/delivery/types.ts

@@ -93,7 +93,7 @@ export interface ReplyFile {
   url: string;
   /** Sanitised, from the artefact path, with its extension. */
   filename: string;
-  /** From the extension's allow-list; `application/octet-stream` when unknown. */
+  /** From the extension's allow-list: `send_file` refuses any other type. */
   mimetype: string;
   /** Size, when the store reported it. */
   bytes?: number;

package/src/plugins/sandbox/send-file.ts

@@ -39,17 +39,18 @@ export const SendFileArgs = z.object({
     .describe('A short line shown with the file, at most 1,024 characters.'),
 });
 
-/** The types a gateway treats specially; anything else is opaque to it. */
+/**
+ * What `send_file` sends, by extension, with its MIME type: the types a chat
+ * gateway delivers. A gateway refuses any other (the legacy `.doc`, `.xls`
+ * and `.ppt` included), so the tool refuses it before signing anything.
+ */
 const FILE_MIME: ReadonlyMap<string, string> = new Map([
   ['pdf', 'application/pdf'],
-  ['doc', 'application/msword'],
   [
     'docx',
     'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
   ],
-  ['xls', 'application/vnd.ms-excel'],
   ['xlsx', 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet'],
-  ['ppt', 'application/vnd.ms-powerpoint'],
   [
     'pptx',
     'application/vnd.openxmlformats-officedocument.presentationml.presentation',
@@ -63,11 +64,15 @@ const FILE_MIME: ReadonlyMap<string, string> = new Map([
   ['csv', 'text/csv'],
 ]);
 
-/** The MIME type of a filename, from the allow-list of extensions. */
-export function fileMimetype(filename: string): string {
+/** The types in `FILE_MIME`, as the tool description and the prompt name them. */
+export const SENDABLE_FILE_TYPES =
+  'PDF, Word (.docx), Excel (.xlsx), PowerPoint (.pptx), text, CSV, Markdown, PNG or JPEG';
+
+/** The MIME type of a filename `send_file` may send; `undefined` for any other. */
+export function fileMimetype(filename: string): string | undefined {
   const dot = filename.lastIndexOf('.');
   const extension = dot >= 0 ? filename.slice(dot + 1).toLowerCase() : '';
-  return FILE_MIME.get(extension) ?? 'application/octet-stream';
+  return FILE_MIME.get(extension);
 }
 
 /**
@@ -191,6 +196,10 @@ function notFoundError(path: string): string {
   return `No stored file at \`${path}\`. A file is stored once the sandbox call that wrote it under \`/workspace/data/output/\` has finished. Check the path with \`artifact_list\`, or write the file first, then call \`send_file\` again.`;
 }
 
+function unsupportedTypeError(path: string): string {
+  return `Cannot send \`${path}\`. This chat can only receive ${SENDABLE_FILE_TYPES} files. Convert the file, or describe its contents instead.`;
+}
+
 function failedError(path: string): string {
   return `Could not prepare \`${path}\` for sending. Try once more; if it fails again, tell the user the file could not be sent. Do not offer a link.`;
 }
@@ -209,6 +218,11 @@ async function signFile(
     logger.warn(`[send_file] ${args.path}: ${kind}`);
     return { error };
   };
+  // Checked before signing: a file of another type is never signed.
+  const filename = deliveredFilename(args.path);
+  const mimetype = fileMimetype(filename);
+  if (!mimetype)
+    return failed('unsupported type', unsupportedTypeError(args.path));
   let signed: Record<string, unknown> | undefined;
   try {
     signed = resultObject(await presign.invoke({ path: args.path }));
@@ -227,14 +241,13 @@ async function signFile(
   const url = httpsUrl(signed?.downloadUrl) ?? httpsUrl(signed?.url);
   if (!url) return failed('no usable link returned', failedError(args.path));
 
-  const filename = deliveredFilename(args.path);
   const { expiresIn, path, size } = signed ?? {};
   return {
     path: typeof path === 'string' && path ? path : args.path,
     file: {
       url,
       filename,
-      mimetype: fileMimetype(filename),
+      mimetype,
       ...(typeof size === 'number' ? { bytes: size } : {}),
       ...(args.caption ? { caption: args.caption } : {}),
       ...(typeof expiresIn === 'number'
@@ -294,7 +307,7 @@ export function buildSendFileTool(
     },
     {
       name: SEND_FILE_TOOL,
-      description: `Send the user a file ${attachments ? 'as an attachment in this chat' : 'as a link posted in this room'}. Use it for every file meant for the user: a Word document, PDF, spreadsheet, slide deck, image, CSV or anything else. Not for helper scripts or intermediate files. \`path\` is the stored path, for example \`/output/report.docx\`: save the file under \`/workspace/data/output/\` and let that sandbox call finish first. \`caption\` is an optional short line shown with the file. ${attachments ? 'The user receives the file itself' : 'The link is posted for you'}, so never paste a download link and do not explain how to open it. For several files, call it once per file, in the order they should arrive. If it returns an error, follow it, or tell the user the file could not be sent.`,
+      description: `Send the user a file ${attachments ? 'as an attachment in this chat' : 'as a link posted in this room'}. Use it for every file meant for the user; it sends ${SENDABLE_FILE_TYPES} files only. Build the file yourself in the sandbox: do not send a file you downloaded from the internet unless the user asked for that exact file. Not for helper scripts or intermediate files. \`path\` is the stored path, for example \`/output/report.docx\`: save the file under \`/workspace/data/output/\` and let that sandbox call finish first. \`caption\` is an optional short line shown with the file. ${attachments ? 'The user receives the file itself' : 'The link is posted for you'}, so never paste a download link and do not explain how to open it. For several files, call it once per file, in the order they should arrive. If it returns an error, follow it, or tell the user the file could not be sent.`,
       schema: SendFileArgs,
       effect: 'read',
     },