@jskit-ai/agent-docs 0.1.16 → 0.1.17

package/patterns/crud-repository-mapping.md

@@ -7,60 +7,61 @@ Use when:
 
 Default JSKIT pattern:
 1. Treat the schema as the API contract only.
-2. Put persistence mapping in `resource.fieldMeta`.
-3. Use `repository.column` for explicit DB column overrides.
+2. Put persistence mapping on the field definitions themselves.
+3. Use `actualField` for explicit DB column overrides.
 4. Let generic CRUD runtime handle standard writable `date-time` fields automatically at the DB write seam.
-5. Use `repository.writeSerializer` only for non-default write serialization.
-6. Use `repository.storage: "virtual"` for computed output fields.
+5. Use `storage.writeSerializer` only for non-default write serialization.
+6. Use `storage: { virtual: true }` for computed output fields.
 7. Register computed SQL projections once in the repository runtime with `virtualFields`.
 8. Let generic CRUD read paths apply those projections automatically.
 
-Field meta rules:
+Field metadata rules:
 - for a normal override, write:
 
 ```js
-RESOURCE_FIELD_META.push({
-  key: "createdAt",
-  repository: {
-    column: "created_at"
-  }
-});
+createdAt: {
+  type: "dateTime",
+  required: true,
+  actualField: "created_at"
+}
 ```
 
-- for a computed output field, write:
+- for a non-default write serializer override, write:
 
 ```js
-RESOURCE_FIELD_META.push({
-  key: "remainingBatchWeight",
-  repository: {
-    storage: "virtual"
+arrivalDatetime: {
+  type: "dateTime",
+  required: true,
+  storage: {
+    writeSerializer: "datetime-utc"
   }
-});
+}
 ```
 
-- for a non-default write serializer override, write:
+- for a computed output field, write:
 
 ```js
-RESOURCE_FIELD_META.push({
-  key: "arrivalDatetime",
-  repository: {
-    writeSerializer: "datetime-utc"
+remainingBatchWeight: {
+  type: "number",
+  required: true,
+  storage: {
+    virtual: true
   }
-});
+}
 ```
 
-- omit `repository` entirely when the field is column-backed and the default snake_case mapping is correct
-- standard writable `format: "date-time"` fields do not need explicit `repository.writeSerializer`
-- use `repository.writeSerializer` only for non-default DB write behavior; keep `bodyValidator.normalize(...)` in API shape
-- `repository.storage: "virtual"` cannot also define `repository.column`
-- `repository.storage: "virtual"` cannot also define `repository.writeSerializer`
-- `repository.storage: "virtual"` fields must not appear in create/patch write schemas
+- omit `actualField`/`storage` when the field is column-backed and the default snake_case mapping is correct
+- standard writable `format: "date-time"` fields do not need explicit `storage.writeSerializer`
+- use `storage.writeSerializer` only for non-default DB write behavior
+- `storage: { virtual: true }` cannot also define `actualField` or `storage.column`
+- `storage: { virtual: true }` cannot also define `storage.writeSerializer`
+- `storage: { virtual: true }` fields must not appear in create/patch write schemas
 
 Repository pattern:
 - build the runtime with `createCrudResourceRuntime(resource, { ... })`
 - register computed projections in `virtualFields`
 - keep SQL in the repository, not in shared metadata
-- let generic CRUD runtime apply `repository.writeSerializer` during create/update writes
+- let generic CRUD runtime apply `storage.writeSerializer` during create/update writes
 
 Example:
 
@@ -89,14 +90,14 @@ What CRUD core now does for you:
 
 Avoid:
 - manual `clearSelect()` / re-select hacks in individual repository methods just to add computed fields
-- putting SQL fragments or joins into shared `fieldMeta`
-- inventing `repository.storage` modes beyond the documented `virtual` contract
+- putting SQL fragments or joins into shared field metadata
+- inventing `storage` modes beyond the documented `virtual` contract
 
 Review checks:
 - schema defines contract, not storage
-- `fieldMeta.repository` owns mapping
+- field definitions own mapping
 - standard datetime DB write serialization stays automatic and runtime-owned
-- any non-default DB write serialization lives in `repository.writeSerializer`, not in per-repository hooks
-- computed fields use `repository.storage: "virtual"`
+- any non-default DB write serialization lives in `storage.writeSerializer`, not in per-repository hooks
+- computed fields use `storage: { virtual: true }`
 - repository runtime registers matching `virtualFields`
 - no per-method projection duplication when generic CRUD reads already cover the field

package/patterns/filters.md

@@ -17,25 +17,25 @@ Default JSKIT pattern:
 1. Put shared filter definitions in the CRUD package.
    Example path: `packages/<crud>/src/shared/<crud>ListFilters.js`
 2. Build the server runtime from that module with `createCrudListFilters(...)`.
-3. Build route/action validators explicitly with `createQueryValidator({ invalidValues: "reject" | "discard" })`, and use `applyQuery(...)` in the repository. There is no default validator mode and no `runtime.queryValidator` alias.
+3. Build route/action validators explicitly with `createCrudListFilterQueryField(...)` plus `createCrudListFilterQuerySchema(...)`, and use `applyQuery(...)` in the repository. There is no default validator mode or route-runtime alias.
 4. Build the client runtime from the same shared definitions with `useCrudListFilters(...)`. Presets can use static `values` or dynamic `resolveValues({ values, filters, presetKey, preset })`.
 5. Pass `listFilters.queryParams` into `useCrudList(...)`.
 6. For lookup-backed filters, use `useCrudListFilterLookups(...)` instead of hand-rolling `useList()` in each page.
 
 Exact file checklist:
 - create `packages/<crud>/src/shared/<crud>ListFilters.js`
-- update `packages/<crud>/src/server/registerRoutes.js` and `packages/<crud>/src/server/actions.js` so the list query validator includes an explicit `createQueryValidator({ invalidValues: ... })` choice, or update `packages/<crud>/src/server/listQueryValidators.js` if that package already extracts list-query composition there
+- update `packages/<crud>/src/server/registerRoutes.js` and `packages/<crud>/src/server/actions.js` so the list query validator lists structured filter params explicitly with `createCrudListFilterQueryField(...)` inside `createCrudListFilterQuerySchema(...)`, or update `packages/<crud>/src/server/listQueryValidators.js` if that package already extracts list-query composition there
 - update `packages/<crud>/src/server/repository.js` so list queries call the runtime's `applyQuery(...)`
 - update the app-owned list page or list-runtime composable under `src/pages/...` or `src/composables/...` so it builds `useCrudListFilters(...)`, passes `queryParams` into `useCrudList(...)`, and binds chips / reset behavior
 - for lookup-backed filters, update that same client file to build `useCrudListFilterLookups(...)` and bind the lookup control from `resolveLookup(...)`
 
 Validation mode is part of the contract:
-- there is no default mode and no fallback alias, so every route/action boundary that validates structured filters must call `createQueryValidator({ invalidValues: ... })` explicitly
+- there is no default mode and no fallback alias, so every explicit structured filter field must choose `invalidValues: "reject"` or `invalidValues: "discard"` deliberately
 - use `invalidValues: "reject"` when malformed filter values should fail validation and return a 400-style contract error
 - use `invalidValues: "discard"` when malformed filter values should be ignored and normalization should drop them
 - route query validation runs before auth, so this choice affects whether malformed unauthenticated requests fail at validation or fall through to auth
-- for normal HTTP CRUD handlers, route-level `discard` means the action layer receives already-normalized query input; do not assume route `discard` plus action `reject` will still reject malformed HTTP query strings later
-- `jskit doctor` flags `createQueryValidator(...)` calls that do not spell out `invalidValues` directly at the call site
+- for normal HTTP CRUD handlers, route-level `discard` means the action layer receives already-parsed values for those explicit filter fields; do not assume route `discard` plus action `reject` will still reject malformed HTTP query strings later
+- CRUD list filters are still a deliberate two-phase exception: schema parsing owns query-field values, then the server runtime reprojects those parsed values through filter keys and `applyQuery(...)`
 
 Keep separate:
 - free-text search uses `records.searchQuery` and `q`
@@ -65,7 +65,7 @@ Put unusual SQL semantics on the server:
 Avoid:
 - local filter composables that duplicate the same keys the server already knows about
 - a custom validator shape that does not match the page state
-- assuming a default `runtime.queryValidator` exists; always create the validator explicitly with `createQueryValidator({ invalidValues: ... })`
+- hiding accepted structured filter params behind whole-query validator generation when the route/action contract can list them directly
 - hand-rolled preset apply/reset/active-state helpers when `useCrudListFilters(..., { presets })`, `applyPreset(...)`, and `matchesPreset(...)` fit
 - per-screen `useList()` wrappers for lookup-backed filters when `useCrudListFilterLookups(...)` fits
 - a second page-local filter-definition file when `packages/<crud>/src/shared/<crud>ListFilters.js` should be the source of truth
@@ -86,7 +86,7 @@ Preset contract notes:
 
 Review checks:
 - one shared filter definition source of truth
-- server validator/repository logic derived from that source
+- server validator/repository logic derived from that source, with route/action query params still listed explicitly
 - client query params/chips/reset logic derived from that source
 - lookup-backed filters use the shared lookup helper, not a page-local mini-framework
-- `jskit doctor` stays clean for filter ownership and explicit validator policy
+- the two-phase server exception is intentional and documented, not accidental drift

package/reference/autogen/KERNEL_MAP.md

@@ -25,6 +25,23 @@ For the full repo inventory, read `reference/autogen/README.md` and the package
 Exports
 - `isContainerToken(value)`
 
+### `support/crudFieldContract.js`
+Exports
+- `CRUD_FIELD_STORAGE_COLUMN`
+- `CRUD_FIELD_STORAGE_VIRTUAL`
+- `CRUD_FIELD_WRITE_SERIALIZER_DATETIME_UTC`
+- `CRUD_LOOKUP_FORM_CONTROL_AUTOCOMPLETE`
+- `CRUD_LOOKUP_FORM_CONTROL_SELECT`
+- `checkCrudLookupFormControl(value, { context = "crud field ui.formControl", defaultValue = CRUD_LOOKUP_FORM_CONTROL_AUTOCOMPLETE } = {})`
+- `resolveCrudFieldSchemaProperties(value, { context = "crud resource field definitions" } = {})`
+- `normalizeCrudFieldStorageConfig(fieldDefinition = {}, { context = "crud field storage", fieldKey = "" } = {})`
+- `buildCrudOperationSchemaFields(fields = {}, operationName = "")`
+- `buildCrudFieldContractMap(resource = {}, { context = "crud resource field contract" } = {})`
+- `resolveCrudFieldContractEntry(resource = {}, fieldKey = "", options = {})`
+Local functions
+- `cloneStructuredFieldMetadata(value = {})`
+- `mergeFieldContractEntry(target, source, { context = "crud field contract", fieldKey = "" } = {})`
+
 ### `support/crudListFilters.js`
 Exports
 - `CRUD_LIST_FILTER_TYPE_FLAG`
@@ -40,10 +57,41 @@ Exports
 - `CRUD_LIST_FILTER_PRESENCE_PRESENT`
 - `CRUD_LIST_FILTER_PRESENCE_MISSING`
 - `CRUD_LIST_FILTER_PRESENCE_OPTIONS`
+- `CRUD_LIST_FILTER_INVALID_VALUES_REJECT`
+- `CRUD_LIST_FILTER_INVALID_VALUES_DISCARD`
+- `INVALID_CRUD_LIST_FILTER_QUERY_VALUE`
+- `normalizeCrudListFilterInvalidValues(value = "")`
+- `parseCrudListRangeQueryExpression(value = null)`
+- `formatCrudListRangeQueryExpression(startValue = "", endValue = "", { collapseExact = false } = {})`
 - `defineCrudListFilters(definitions = {})`
+- `createCrudListFilterInitialValue(filter = {})`
+- `isCrudListFilterMultiValue(filter = {})`
+- `isCrudListFilterStructuredValue(filter = {})`
+- `normalizeCrudListFilterUiValue(filter = {}, rawValue)`
+- `areCrudListFilterUiValuesEqual(filter = {}, currentValue, expectedValue)`
+- `hasCrudListFilterUiValue(filter = {}, rawValue)`
+- `listCrudListFilterChipValues(filter = {}, rawValue)`
+- `formatCrudListFilterDefaultChipLabel(filter = {}, rawValue, { resolveAtomicValue = null } = {})`
+- `formatCrudListFilterQueryValue(filter = {}, value)`
+- `parseCrudListFilterQueryValue(filter = {}, value, { invalidValues = CRUD_LIST_FILTER_INVALID_VALUES_REJECT } = {})`
 - `resolveCrudListFilterQueryKeys(definition = {})`
 - `resolveCrudListFilterOptionLabel(definition = {}, value = "", { fallback = "" } = {})`
 Local functions
+- `firstCrudListFilterValue(value)`
+- `isPrimitiveCrudListFilterInput(value)`
+- `isPrimitiveOrPrimitiveArrayCrudListFilterInput(value)`
+- `normalizeDateFilterText(value)`
+- `normalizeCanonicalRecordIdList(value)`
+- `normalizeFiniteFilterNumber(value)`
+- `normalizeAllowedFilterTextValue(value, allowedValues = new Set())`
+- `normalizeAllowedFilterTextValues(value, allowedValues = new Set())`
+- `resolveCrudListFilterAllowedValues(filter = {})`
+- `normalizeCrudListDateRangeUiValue(rawValue)`
+- `normalizeCrudListNumberRangeUiValue(rawValue)`
+- `matchCrudListFilterValues(currentValue, expectedValue)`
+- `rejectInvalidCrudListFilterValue({ invalidValues = CRUD_LIST_FILTER_INVALID_VALUES_REJECT } = {})`
+- `normalizeCrudListDateRangeQueryValue(value)`
+- `normalizeCrudListNumberRangeQueryValue(value)`
 - `normalizeCrudListFilterType(value = "")`
 - `normalizeCrudListFilterOption(rawOption = null, { context = "filter option" } = {})`
 - `normalizeCrudListFilterOptions(rawOptions = [], { context = "filter options" } = {})`
@@ -291,6 +339,10 @@ Local functions
 
 ### validators
 
+### `validators/composeSchemaDefinitions.js`
+Exports
+- `composeSchemaDefinitions(definitions, { mode, context = "schema definitions" } = {})`
+
 ### `validators/createCursorListValidator.js`
 Exports
 - `createCursorListValidator(itemValidator)`
@@ -298,8 +350,6 @@ Exports
 ### `validators/cursorPaginationQueryValidator.js`
 Exports
 - `cursorPaginationQueryValidator`
-Local functions
-- `normalizeCursorPaginationQuery(input = {})`
 
 ### `validators/htmlTimeSchemas.js`
 Exports
@@ -308,25 +358,28 @@ Exports
 
 ### `validators/index.js`
 Exports
+- `createSchema`
 - `normalizeObjectInput`
+- `composeSchemaDefinitions`
 - `createCursorListValidator`
 - `cursorPaginationQueryValidator`
 - `HTML_TIME_STRING_SCHEMA`
 - `NULLABLE_HTML_TIME_STRING_SCHEMA`
 - `mergeObjectSchemas`
-- `mergeValidators`
-- `nestValidator`
+- `hasJsonRestSchemaDefinition`
+- `normalizeSingleSchemaDefinition`
+- `normalizeSchemaDefinition`
+- `resolveSchemaTransportSchemaDefinition`
+- `resolveStructuredSchemaTransportSchema`
+- `executeJsonRestSchemaDefinition`
+- `buildSchemaValidationError`
+- `validateSchemaPayload`
 - `RECORD_ID_PATTERN`
 - `recordIdSchema`
 - `recordIdInputSchema`
 - `nullableRecordIdSchema`
 - `nullableRecordIdInputSchema`
-- `recordIdValidator`
-- `nullableRecordIdValidator`
 - `recordIdParamsValidator`
-- `positiveIntegerValidator`
-- `normalizeSettingsFieldInput`
-- `normalizeSettingsFieldOutput`
 - `normalizeRequiredFieldList`
 - `deriveRequiredFieldsFromSchema`
 - `deriveResourceRequiredMetadata`
@@ -335,22 +388,24 @@ Exports
 Exports
 - `normalizeObjectInput(value)`
 
-### `validators/mergeObjectSchemas.js`
-Exports
-- `mergeObjectSchemas(schemas)`
-
-### `validators/mergeValidators.js`
+### `validators/jsonRestSchemaSupport.js`
 Exports
-- `mergeValidators(validators = [], options = {})`
+- `isJsonRestSchemaInstance(value)`
+- `resolveSchemaDefinitionMode(schemaDefinition = null, { defaultMode = "create", context = "schema definition.mode" } = {})`
+- `resolveSchemaDefinitionTransportSchema(schemaDefinition = null, options = {})`
+- `executeSchemaDefinition(schemaDefinition = null, payload, options = {})`
+- `normalizeJsonRestSchemaFieldErrors(errors = {}, schemaDefinition = null)`
 Local functions
-- `isPromiseLike(value)`
-- `createErrorFactory(createError)`
+- `requireJsonRestSchemaInstance(schemaDefinition = null, { context = "schema definition.schema" } = {})`
+- `resolveJsonRestSchemaFieldMessages(schemaDefinition = null, fieldName = "")`
+- `resolveJsonRestSchemaFieldErrorMessage(fieldName, entry, schemaDefinition = null)`
 
-### `validators/nestValidator.js`
+### `validators/mergeObjectSchemas.js`
 Exports
-- `nestValidator(key, validator, { required = true } = {})`
+- `mergeObjectSchemas(schemas)`
 Local functions
-- `normalizeValidator(validator)`
+- `cloneSchemaValue(value)`
+- `assertMergeableObjectSchema(schema)`
 
 ### `validators/recordIdParamsValidator.js`
 Exports
@@ -359,10 +414,7 @@ Exports
 - `recordIdInputSchema`
 - `nullableRecordIdSchema`
 - `nullableRecordIdInputSchema`
-- `recordIdValidator`
-- `nullableRecordIdValidator`
 - `recordIdParamsValidator`
-- `positiveIntegerValidator`
 
 ### `validators/resourceRequiredMetadata.js`
 Exports
@@ -370,10 +422,22 @@ Exports
 - `deriveRequiredFieldsFromSchema(schema)`
 - `deriveResourceRequiredMetadata(resourceSchema)`
 
-### `validators/settingsFieldNormalization.js`
+### `validators/schemaDefinitions.js`
+Exports
+- `hasJsonRestSchemaDefinition(value)`
+- `normalizeSingleSchemaDefinition(value, { context = "schema definition", defaultMode = "" } = {})`
+- `normalizeSchemaDefinition(value, { context = "schema definition", defaultMode = "" } = {})`
+- `resolveSchemaTransportSchemaDefinition(value, { context = "schema definition", defaultMode = "" } = {})`
+- `resolveStructuredSchemaTransportSchema(value, { context = "schema definition", defaultMode = "" } = {})`
+- `executeJsonRestSchemaDefinition(value, payload, { context = "schema definition", defaultMode = "" } = {})`
+- `normalizeJsonRestSchemaFieldErrors`
+Local functions
+- `isSchemaDefinitionObject(value)`
+
+### `validators/schemaPayloadValidation.js`
 Exports
-- `normalizeSettingsFieldInput(payload = {}, fields = [])`
-- `normalizeSettingsFieldOutput(payload = {}, fields = [])`
+- `buildSchemaValidationError({ message = "Schema validation failed.", fieldErrors = null, errors = null, cause, statusCode = null } = {})`
+- `validateSchemaPayload(schemaDefinition, payload, { phase = "input", context = "schema definition", statusCode = null } = {})`
 
 ### actions
 
@@ -384,8 +448,7 @@ Exports
 - `requireServiceMethod(service, methodName, contributorId, { serviceLabel } = {})`
 - `resolveRequest(context)`
 - `hasPermission`
-- `EMPTY_INPUT_VALIDATOR`
-- `OBJECT_INPUT_VALIDATOR`
+- `emptyInputValidator`
 
 ### `actions/actionDefinitions.js`
 Exports
@@ -399,12 +462,9 @@ Exports
 - `__testables`
 Local functions
 - `normalizeStringArray(value, { fieldName, allowedSet, allowEmpty = false } = {})`
-- `normalizeSingleActionValidator(value, fieldName, { required = false } = {})`
-- `isActionValidatorShape(value)`
-- `normalizeSectionActionValidatorMap(value, fieldName)`
-- `mergeNormalizedActionValidators(validators, fieldName)`
-- `normalizeActionValidators(value, fieldName, { required = false } = {})`
-- `normalizeActionOutputValidator(value, fieldName, { required = false } = {})`
+- `normalizeSingleActionSchema(value, fieldName, { required = false, defaultMode = "" } = {})`
+- `normalizeActionInputDefinition(value, fieldName, { required = false } = {})`
+- `normalizeActionOutputDefinition(value, fieldName, { required = false } = {})`
 - `normalizeActionPermission(permission, actionId)`
 - `normalizeAuditConfig(audit, { actionId })`
 - `normalizeObservabilityConfig(observability)`
@@ -461,12 +521,6 @@ Exports
 - `__testables`
 Local functions
 - `createActionValidationError({ status = 400, message = "Validation failed.", code = "ACTION_VALIDATION_FAILED", details, cause } = {})`
-- `normalizeSchemaValidationErrors(schema)`
-- `buildSchemaValidatorError({ phase, definition } = {})`
-- `normalizeTypeBoxValidationErrors(schema, payload)`
-- `normalizeFunctionSchemaResult(result, payload, { phase, definition } = {})`
-- `normalizeValidatorPayload(validator, payload, { phase, definition, context })`
-- `validateSchemaPayload(schema, payload, { phase, definition })`
 
 ### `actions/registry.js`
 Exports

package/reference/autogen/README.md

@@ -23,8 +23,11 @@ Startup navigation stays in `KERNEL_MAP.md`.
 - [database-runtime-mysql](/packages/agent-docs/reference/autogen/packages/database-runtime-mysql.md)
 - [database-runtime-postgres](/packages/agent-docs/reference/autogen/packages/database-runtime-postgres.md)
 - [http-runtime](/packages/agent-docs/reference/autogen/packages/http-runtime.md)
+- [json-rest-api-core](/packages/agent-docs/reference/autogen/packages/json-rest-api-core.md)
 - [kernel](/packages/agent-docs/reference/autogen/packages/kernel.md)
 - [realtime](/packages/agent-docs/reference/autogen/packages/realtime.md)
+- [resource-core](/packages/agent-docs/reference/autogen/packages/resource-core.md)
+- [resource-crud-core](/packages/agent-docs/reference/autogen/packages/resource-crud-core.md)
 - [shell-web](/packages/agent-docs/reference/autogen/packages/shell-web.md)
 - [storage-runtime](/packages/agent-docs/reference/autogen/packages/storage-runtime.md)
 - [ui-generator](/packages/agent-docs/reference/autogen/packages/ui-generator.md)

package/reference/autogen/packages/assistant-core.md

@@ -216,23 +216,11 @@ Exports
 - `MAX_INPUT_CHARS`
 - `MAX_HISTORY_MESSAGES`
 - `assistantResource`
-Local functions
-- `normalizePaginationValue(value, fallback, max)`
-- `normalizeChatStreamBody(payload = {})`
-- `normalizeConversationsListQuery(payload = {})`
-- `normalizeConversationMessagesQuery(payload = {})`
-- `normalizeConversationMessagesParams(payload = {})`
-- `createOptionalPositiveIntegerQuerySchema(max = null)`
-- `normalizeConversationRecord(payload = {})`
-- `normalizeConversationMessageRecord(payload = {})`
 
 ### `src/shared/assistantSettingsResource.js`
 Exports
 - `MAX_SYSTEM_PROMPT_CHARS`
 - `assistantConfigResource`
-Local functions
-- `normalizeConfigPatch(payload = {})`
-- `normalizeConfigRecord(payload = {})`
 
 ### `src/shared/index.js`
 Exports

package/reference/autogen/packages/assistant-runtime.md

@@ -55,6 +55,12 @@ Exports
 Exports
 - `AssistantClientProvider`
 
+### `src/client/support/composerInputSupport.js`
+Exports
+- `insertTextAtSelection(source = "", selectionStart, selectionEnd, text = "")`
+Local functions
+- `normalizeSelectionBoundary(value, fallback, max)`
+
 ### `src/client/support/workspaceScopeSupport.js`
 Exports
 - `EMPTY_WORKSPACE_WEB_SCOPE_SUPPORT`
@@ -77,7 +83,7 @@ Local functions
 - `resolveGlobalAssistantConfig(scope)`
 - `createAssistantAiClientFactory(config = {})`
 
-### `src/server/inputValidators.js`
+### `src/server/inputSchemas.js`
 Exports
 - `assistantSurfaceRouteParamsValidator`
 - `assistantTargetSurfaceInputValidator`
@@ -86,14 +92,14 @@ Exports
 Exports
 - `registerRoutes(app)`
 Local functions
-- `buildRouteParamsValidator(requiresWorkspace, workspaceScopeSupport = null)`
-- `buildConversationMessagesRouteParamsValidator(requiresWorkspace, workspaceScopeSupport = null)`
+- `requireWorkspaceAssistantRouteParams(workspaceScopeSupport = null)`
 - `readWorkspaceInput(request, requiresWorkspace, workspaceScopeSupport = null)`
 - `requireAssistantSurface(appConfig = {}, targetSurfaceId = "")`
 - `requireHostSurfaceId(request)`
 - `shouldExposeAppErrorDetails(errorCode = "")`
 - `sendPreStreamErrorResponse(reply, error)`
 - `resolveRouteRequestState(request, { resolveCurrentAppConfig = () => ({}), kind = "runtime", requiresWorkspace = false, workspaceScopeSupport = null } = {})`
+- `buildChatStreamActionInput(routeInput = {}, requestBody = {})`
 - `registerSettingsRoutes(router, resolveCurrentAppConfig, { requiresWorkspace = false, workspaceScopeSupport = null } = {})`
 - `registerRuntimeRoutes(router, resolveCurrentAppConfig, { requiresWorkspace = false, workspaceScopeSupport = null } = {})`
 
@@ -195,6 +201,8 @@ Exports
 - `WORKSPACES_SERVER_SCOPE_SUPPORT_TOKEN`
 - `isWorkspaceServerScopeSupport(value)`
 - `resolveWorkspaceServerScopeSupport(scope = null, { required = false, caller = "assistant-runtime" } = {})`
+Local functions
+- `hasWorkspaceRouteParamsDefinition(value)`
 
 ### `src/shared/assistantRuntimeConfig.js`
 Exports

package/reference/autogen/packages/auth-core.md

@@ -40,6 +40,7 @@ Exports
 - `AUTH_POLICY_CONTEXT_RESOLVER_TAG`
 - `registerAuthPolicyContextResolver(app, token, factory)`
 - `resolveAuthPolicyContextResolvers(scope)`
+- `resolveComposedAuthPolicyContextResolver(scope)`
 - `mergeAuthPolicyContexts(contexts = [])`
 - `composeAuthPolicyContextResolvers(resolvers = [])`
 Local functions
@@ -204,6 +205,16 @@ Exports
 
 ### `src/shared/commands/authCommandValidators.js`
 Exports
+- `authEmailFieldDefinition`
+- `authPasswordFieldDefinition`
+- `authLoginPasswordFieldDefinition`
+- `authRecoveryTokenFieldDefinition`
+- `authAccessTokenFieldDefinition`
+- `authRefreshTokenFieldDefinition`
+- `oauthProviderFieldDefinition`
+- `authMethodIdFieldDefinition`
+- `authMethodKindFieldDefinition`
+- `oauthReturnToFieldDefinition`
 - `authEmailValidator`
 - `authPasswordValidator`
 - `authLoginPasswordValidator`
@@ -214,17 +225,17 @@ Exports
 - `authMethodIdValidator`
 - `authMethodKindValidator`
 - `oauthReturnToValidator`
-- `okResponseValidator`
-- `okMessageResponseValidator`
-- `registerResponseValidator`
-- `loginResponseValidator`
-- `otpVerifyResponseValidator`
-- `oauthCompleteResponseValidator`
-- `devLoginAsResponseValidator`
-- `logoutResponseValidator`
-- `oauthProviderCatalogEntryValidator`
-- `sessionResponseValidator`
-- `sessionUnavailableResponseValidator`
+- `okOutputValidator`
+- `okMessageOutputValidator`
+- `registerOutputValidator`
+- `loginOutputValidator`
+- `otpVerifyOutputValidator`
+- `oauthCompleteOutputValidator`
+- `devLoginAsOutputValidator`
+- `logoutOutputValidator`
+- `oauthProviderCatalogEntryOutputValidator`
+- `sessionOutputValidator`
+- `sessionUnavailableOutputValidator`
 - `createCommandMessages({ fields = {}, defaultMessage = "Invalid value." } = {})`
 
 ### `src/shared/commands/authDevLoginAsCommand.js`
@@ -236,7 +247,7 @@ Exports
 ### `src/shared/commands/authLoginOAuthCompleteCommand.js`
 Exports
 - `authLoginOAuthCompleteBodyValidator`
-- `oauthCompleteResponseValidator`
+- `oauthCompleteOutputValidator`
 - `AUTH_LOGIN_OAUTH_COMPLETE_MESSAGES`
 - `authLoginOAuthCompleteCommand`
 
@@ -244,62 +255,62 @@ Exports
 Exports
 - `authLoginOAuthStartParamsValidator`
 - `authLoginOAuthStartQueryValidator`
-- `authLoginOAuthStartResponseValidator`
+- `authLoginOAuthStartOutputValidator`
 - `AUTH_LOGIN_OAUTH_START_MESSAGES`
 - `authLoginOAuthStartCommand`
 
 ### `src/shared/commands/authLoginOtpRequestCommand.js`
 Exports
 - `authLoginOtpRequestBodyValidator`
-- `okMessageResponseValidator`
+- `okMessageOutputValidator`
 - `AUTH_LOGIN_OTP_REQUEST_MESSAGES`
 - `authLoginOtpRequestCommand`
 
 ### `src/shared/commands/authLoginOtpVerifyCommand.js`
 Exports
 - `authLoginOtpVerifyBodyValidator`
-- `otpVerifyResponseValidator`
+- `otpVerifyOutputValidator`
 - `AUTH_LOGIN_OTP_VERIFY_MESSAGES`
 - `authLoginOtpVerifyCommand`
 
 ### `src/shared/commands/authLoginPasswordCommand.js`
 Exports
 - `authLoginPasswordBodyValidator`
-- `loginResponseValidator`
+- `loginOutputValidator`
 - `AUTH_LOGIN_PASSWORD_MESSAGES`
 - `authLoginPasswordCommand`
 
 ### `src/shared/commands/authLogoutCommand.js`
 Exports
-- `logoutResponseValidator`
+- `logoutOutputValidator`
 - `AUTH_LOGOUT_MESSAGES`
 - `authLogoutCommand`
 
 ### `src/shared/commands/authPasswordRecoveryCompleteCommand.js`
 Exports
 - `authPasswordRecoveryCompleteBodyValidator`
-- `okResponseValidator`
+- `okOutputValidator`
 - `AUTH_PASSWORD_RECOVERY_COMPLETE_MESSAGES`
 - `authPasswordRecoveryCompleteCommand`
 
 ### `src/shared/commands/authPasswordResetCommand.js`
 Exports
 - `authPasswordResetBodyValidator`
-- `okMessageResponseValidator`
+- `okMessageOutputValidator`
 - `AUTH_PASSWORD_RESET_MESSAGES`
 - `authPasswordResetCommand`
 
 ### `src/shared/commands/authPasswordResetRequestCommand.js`
 Exports
 - `authPasswordResetRequestBodyValidator`
-- `okMessageResponseValidator`
+- `okMessageOutputValidator`
 - `AUTH_PASSWORD_RESET_REQUEST_MESSAGES`
 - `authPasswordResetRequestCommand`
 
 ### `src/shared/commands/authRegisterCommand.js`
 Exports
 - `authRegisterBodyValidator`
-- `registerResponseValidator`
+- `registerOutputValidator`
 - `AUTH_REGISTER_MESSAGES`
 - `authRegisterCommand`
 
@@ -311,8 +322,8 @@ Exports
 
 ### `src/shared/commands/authSessionReadCommand.js`
 Exports
-- `sessionResponseValidator`
-- `sessionUnavailableResponseValidator`
+- `sessionOutputValidator`
+- `sessionUnavailableOutputValidator`
 - `AUTH_SESSION_READ_MESSAGES`
 - `authSessionReadCommand`
 

package/reference/autogen/packages/auth-provider-supabase-core.md

@@ -37,6 +37,10 @@ Exports
 - `safeRequestCookies(request)`
 - `cookieOptions(isProduction, maxAge)`
 
+### `src/server/lib/authenticatedProfile.js`
+Exports
+- `requireAuthenticatedProfile(profileLike, { context = "authenticated profile" } = {})`
+
 ### `src/server/lib/authErrorMappers.js`
 Exports
 - `isTransientAuthMessage(message)`
@@ -54,12 +58,8 @@ Exports
 ### `src/server/lib/authInputParsers.js`
 Exports
 - `normalizeOAuthProviderInput(value, options = {})`
-- `validatePasswordRecoveryPayload(payload)`
-- `parseOAuthCompletePayload(payload = {}, options = {})`
-- `parseOtpLoginVerifyPayload(payload = {})`
 - `mapOAuthCallbackError(errorCode)`
 Local functions
-- `applySessionPairValidation(accessToken, refreshToken, fieldErrors)`
 - `resolveConfiguredOAuthProviders(options = {})`
 
 ### `src/server/lib/authJwt.js`
@@ -212,10 +212,7 @@ Exports
 - `buildOAuthLoginRedirectUrl`
 - `buildOAuthLinkRedirectUrl`
 - `normalizeOAuthProviderInput`
-- `parseOAuthCompletePayload`
-- `parseOtpLoginVerifyPayload`
 - `mapOAuthCallbackError`
-- `validatePasswordRecoveryPayload`
 - `resolveSupabaseOAuthProviderCatalog`
 - `resolveOAuthProviderQueryParams`
 - `buildOAuthProviderCatalogResponse`