@jini-ai/chat 0.6.16 → 0.6.19

package/dist/store/legacy/sqlite/messages.js

@@ -1,3 +1,4 @@
+import { withFolderReceipt, foldersFromReceipts } from "../../../core/accepted-input.js";
 import { redactUserText } from '../../../core/user-text-redaction.js';
 import { parseJsonOrUndef } from '@jini-ai/db/core';
 /** @internal Column alias list used by both `listMessages` and `upsertMessage`'s re-fetch. */
@@ -117,7 +118,7 @@ function messageFieldValues(m) {
         m.role,
         m.content,
         ...[m.agentId, m.agentName, m.runId, m.runStatus, m.lastRunEventId].map(orNull),
-        jsonOrNull(m.events),
+        jsonOrNull(withFolderReceipt({ message: m }).events),
         jsonOrNull(m.attachments),
         normalizeMessageSessionMode(m.sessionMode) ?? null,
         jsonOrNull(m.runContext),
@@ -273,6 +274,7 @@ export function deleteMessage({ db, id }) {
 }
 /** @internal Converts a raw SQLite row to a plain object with JSON columns parsed and null coerced to undefined. */
 function normalizeMessage(row) {
+    const folders = foldersFromReceipts({ events: parseJsonOrUndef(row.eventsJson) });
     return {
         id: row.id,
         role: row.role,
@@ -284,6 +286,7 @@ function normalizeMessage(row) {
         lastRunEventId: row.lastRunEventId ?? undefined,
         events: parseJsonOrUndef(row.eventsJson),
         attachments: parseJsonOrUndef(row.attachmentsJson),
+        ...(folders.length ? { folders } : {}),
         sessionMode: normalizeMessageSessionMode(row.sessionMode),
         runContext: parseJsonOrUndef(row.runContextJson),
         createdAt: row.createdAt ?? undefined,

package/dist/store/runtime/chat-expiry-sweep.js

@@ -1,3 +1,5 @@
+import { inspect } from 'node:util';
+import { redactSecrets } from '@jini-ai/core';
 import { ChatStoreError } from "../errors.js";
 /**
  * @file Retention for chat history: deletes every conversation whose `expires_at` has passed.
@@ -47,7 +49,7 @@ export function startChatExpirySweep({ maintenance }, options = {}) {
     const onError = options.onError ??
         ((error) => {
             // eslint-disable-next-line no-console
-            console.warn(`[chat-expiry-sweep] sweep failed: ${error instanceof Error ? error.message : String(error)}`);
+            console.warn('[chat-expiry-sweep] sweep failed:', redactSecrets({ input: inspect(error) }, { redactPii: false }));
         });
     let active;
     const pass = () => {

package/dist/store/runtime/durable-run-store.js

@@ -1,3 +1,5 @@
+import { acceptedInputEvent, acceptedInputUserEvent } from "../../core/accepted-input.js";
+import { redactUserMessage } from "../../core/user-text-redaction.js";
 import { recoveredRunEvents } from "../../core/index.js";
 import { chatKernelTables } from "../sql/boundary.js";
 import { sql } from "kysely";
@@ -18,6 +20,10 @@ function isAcceptedUserShape({ message }, _optional = {}) {
         return false;
     return message.createdAt === undefined || Number.isFinite(message.createdAt);
 }
+/** Directory existence is host policy; the neutral store validates only its message contract. */
+function validAcceptedFolders({ folders }, _options = {}) {
+    return Array.isArray(folders) && folders.length <= 10 && folders.every(path => typeof path === 'string' && path.length > 0);
+}
 function areAcceptedAttachments({ attachments }, _optional = {}) {
     return Array.isArray(attachments) && attachments.every((attachment) => {
         if (!attachment || typeof attachment.path !== "string" || typeof attachment.name !== "string")
@@ -25,6 +31,31 @@ function areAcceptedAttachments({ attachments }, _optional = {}) {
         return attachment.kind === "file" || attachment.kind === "image";
     });
 }
+/** Both top-level and queued user inputs obey the same reference contract. */
+function validateAcceptedMetadata({ message }, _options = {}) {
+    if (message.folders !== undefined && !validAcceptedFolders({ folders: message.folders }))
+        throw new Error("Invalid accepted user folders");
+    if (message.attachments !== undefined && !areAcceptedAttachments({ attachments: message.attachments }, {}))
+        throw new Error("Invalid accepted user attachments");
+}
+/** Preserve only accepted user receipts; a browser cannot supply assistant lifecycle events.
+ * Receipt text uses the same guard as ordinary user text; folder data remains byte-exact.
+ */
+function acceptedReceiptFields({ message }, _options = {}) {
+    if (!Array.isArray(message.events))
+        return {};
+    const events = message.events.flatMap(event => {
+        if (!event || typeof event !== 'object')
+            return [];
+        const input = acceptedInputEvent({ event })?.data;
+        if (!input)
+            return [];
+        validateAcceptedMetadata({ message: input });
+        const safe = redactUserMessage({ message: { role: 'user', content: input.text } }).message;
+        return [acceptedInputUserEvent({ input: { ...input, text: safe.content } }, { receipt: 'accepted' })];
+    });
+    return events.length ? { events } : {};
+}
 function acceptedUserMessage({ request, now }, _optional = {}) {
     const context = JSON.parse(request.contextRef);
     // Older clients supplied only a prompt; never invent a user identity from that transcript.
@@ -33,11 +64,12 @@ function acceptedUserMessage({ request, now }, _optional = {}) {
         return null;
     if (!isAcceptedUserShape({ message }, {}))
         throw new Error("Invalid accepted user message");
-    if (message.attachments !== undefined && !areAcceptedAttachments({ attachments: message.attachments }, {}))
-        throw new Error("Invalid accepted user attachments");
-    // User input cannot claim an assistant run's status/events. Keep the same identity and payload
+    validateAcceptedMetadata({ message });
+    // User input cannot claim assistant lifecycle events. Keep the same identity and payload
     // as its browser PUT, including the original clock and attachment order.
     return { id: message.id, role: "user", content: message.content, createdAt: message.createdAt ?? now,
+        ...acceptedReceiptFields({ message }),
+        ...(message.folders ? { folders: message.folders } : {}),
         ...(message.attachments ? { attachments: message.attachments } : {}) };
 }
 function recoveryFields({ row, metadata }, _optional = {}) {

package/dist/store/sql/store.js

@@ -1,3 +1,4 @@
+import { withFolderReceipt, foldersFromReceipts } from '../../core/accepted-input.js';
 const MESSAGE_POSITION = 'm.position';
 const CONVERSATION_UPDATED_AT = 'c.updated_at';
 /** One SQL query body upstreamed from the existing host adapter; no resource/schema ownership. */
@@ -84,8 +85,10 @@ function agentFields(row) {
 function jsonFields(row) {
     const events = parseJsonColumn(row.events_json);
     const attachments = parseJsonColumn(row.attachments_json);
+    const folders = foldersFromReceipts({ events });
     return {
         ...(events === undefined ? {} : { events }),
+        ...(folders.length ? { folders } : {}),
         ...(attachments === undefined ? {} : { attachments }),
     };
 }
@@ -190,7 +193,8 @@ export function createSqlChatStore({ kernel, scope: inputScope }, { clock = crea
         return rows.map(toMessage);
     }
     /** Writes and projects one message inside the borrowed transaction; null for absent/foreign IDs. */
-    function writeMessage(conversationId, m) {
+    function writeMessage(conversationId, message) {
+        const m = withFolderReceipt({ message });
         return kernel.transaction(async () => {
             await kernel.lockKey(conversationLockKey(conversationId));
             const owned = await run((db) => db

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/chat",
-  "version": "0.6.16",
+  "version": "0.6.19",
   "description": "Jini's chat/artifact frontend, consolidated into one package with two subpaths: framework-free chat vocabulary and pure parsers in `/core`, headless hooks + presentational components + slots in `/react`. Import only the layer you need.",
   "license": "Apache-2.0",
   "repository": {
@@ -214,10 +214,10 @@
   },
   "dependencies": {
     "kysely": "^0.29.6",
-    "@jini-ai/core": "^0.6.16",
-    "@jini-ai/diagnostics": "^0.6.16",
-    "@jini-ai/db": "^0.6.16",
-    "@jini-ai/agentic": "^0.6.16"
+    "@jini-ai/core": "^0.6.19",
+    "@jini-ai/db": "^0.6.19",
+    "@jini-ai/agentic": "^0.6.19",
+    "@jini-ai/diagnostics": "^0.6.19"
   },
   "peerDependencies": {
     "react": "^18.3.0 || ^19.0.0",
@@ -261,13 +261,13 @@
     "pg": "8.23.0",
     "@ag-ui/core": "0.0.58",
     "fast-check": "4.3.0",
-    "@jini-ai/agent-runtime": "0.6.16",
-    "@jini-ai/db": "0.6.16",
-    "@jini-ai/agentic": "^0.6.16",
-    "@jini-ai/diagnostics": "^0.6.16",
-    "@jini-ai/core": "^0.6.16",
-    "@jini-ai/protocol": "^0.6.16",
-    "@jini-ai/ui": "^0.6.16"
+    "@jini-ai/db": "0.6.19",
+    "@jini-ai/agentic": "^0.6.19",
+    "@jini-ai/agent-runtime": "0.6.19",
+    "@jini-ai/protocol": "^0.6.19",
+    "@jini-ai/diagnostics": "^0.6.19",
+    "@jini-ai/ui": "^0.6.19",
+    "@jini-ai/core": "^0.6.19"
   },
   "typesVersions": {
     "*": {