@jterrats/open-orchestra 1.0.17 → 1.0.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (233) hide show
  1. package/CHANGELOG.md +44 -0
  2. package/CLAUDE.md +1 -0
  3. package/dist/active-runtime-store.d.ts +18 -0
  4. package/dist/active-runtime-store.js +75 -0
  5. package/dist/active-runtime-store.js.map +1 -0
  6. package/dist/chat-api-errors.d.ts +7 -0
  7. package/dist/chat-api-errors.js +15 -0
  8. package/dist/chat-api-errors.js.map +1 -0
  9. package/dist/chat-api-message-persistence.d.ts +12 -0
  10. package/dist/chat-api-message-persistence.js +125 -0
  11. package/dist/chat-api-message-persistence.js.map +1 -0
  12. package/dist/chat-api-records.d.ts +35 -0
  13. package/dist/chat-api-records.js +94 -0
  14. package/dist/chat-api-records.js.map +1 -0
  15. package/dist/chat-api-service.d.ts +32 -0
  16. package/dist/chat-api-service.js +120 -0
  17. package/dist/chat-api-service.js.map +1 -0
  18. package/dist/chat-api-storage.d.ts +1 -0
  19. package/dist/chat-api-storage.js +14 -0
  20. package/dist/chat-api-storage.js.map +1 -0
  21. package/dist/chat-api-types.d.ts +81 -0
  22. package/dist/chat-api-types.js +2 -0
  23. package/dist/chat-api-types.js.map +1 -0
  24. package/dist/chat-compliance-service.d.ts +60 -0
  25. package/dist/chat-compliance-service.js +241 -0
  26. package/dist/chat-compliance-service.js.map +1 -0
  27. package/dist/chat-event-stream.d.ts +13 -0
  28. package/dist/chat-event-stream.js +124 -0
  29. package/dist/chat-event-stream.js.map +1 -0
  30. package/dist/chat-pagination.d.ts +6 -0
  31. package/dist/chat-pagination.js +64 -0
  32. package/dist/chat-pagination.js.map +1 -0
  33. package/dist/chat-storage-actor-validation.d.ts +4 -0
  34. package/dist/chat-storage-actor-validation.js +65 -0
  35. package/dist/chat-storage-actor-validation.js.map +1 -0
  36. package/dist/chat-storage-content-policy.d.ts +6 -0
  37. package/dist/chat-storage-content-policy.js +84 -0
  38. package/dist/chat-storage-content-policy.js.map +1 -0
  39. package/dist/chat-storage-errors.d.ts +20 -0
  40. package/dist/chat-storage-errors.js +17 -0
  41. package/dist/chat-storage-errors.js.map +1 -0
  42. package/dist/chat-storage-local-files.d.ts +17 -0
  43. package/dist/chat-storage-local-files.js +78 -0
  44. package/dist/chat-storage-local-files.js.map +1 -0
  45. package/dist/chat-storage-local-paths.d.ts +6 -0
  46. package/dist/chat-storage-local-paths.js +124 -0
  47. package/dist/chat-storage-local-paths.js.map +1 -0
  48. package/dist/chat-storage-local-projection.d.ts +10 -0
  49. package/dist/chat-storage-local-projection.js +55 -0
  50. package/dist/chat-storage-local-projection.js.map +1 -0
  51. package/dist/chat-storage-local-records.d.ts +13 -0
  52. package/dist/chat-storage-local-records.js +56 -0
  53. package/dist/chat-storage-local-records.js.map +1 -0
  54. package/dist/chat-storage-local.d.ts +6 -0
  55. package/dist/chat-storage-local.js +114 -0
  56. package/dist/chat-storage-local.js.map +1 -0
  57. package/dist/chat-storage-validation.d.ts +10 -0
  58. package/dist/chat-storage-validation.js +100 -0
  59. package/dist/chat-storage-validation.js.map +1 -0
  60. package/dist/chat-storage.d.ts +16 -0
  61. package/dist/chat-storage.js +4 -0
  62. package/dist/chat-storage.js.map +1 -0
  63. package/dist/chat-workflow-timeline.d.ts +17 -0
  64. package/dist/chat-workflow-timeline.js +210 -0
  65. package/dist/chat-workflow-timeline.js.map +1 -0
  66. package/dist/{workspace-claude-settings.d.ts → claude-settings.d.ts} +22 -3
  67. package/dist/{workspace-claude-settings.js → claude-settings.js} +28 -9
  68. package/dist/claude-settings.js.map +1 -0
  69. package/dist/command-init.d.ts +2 -0
  70. package/dist/command-init.js +150 -0
  71. package/dist/command-init.js.map +1 -0
  72. package/dist/command-manifest.js +1 -1
  73. package/dist/command-manifest.js.map +1 -1
  74. package/dist/commands.d.ts +1 -1
  75. package/dist/commands.js +1 -140
  76. package/dist/commands.js.map +1 -1
  77. package/dist/constants.d.ts +1 -0
  78. package/dist/constants.js +1 -0
  79. package/dist/constants.js.map +1 -1
  80. package/dist/context-runtime-preprocessor.d.ts +41 -0
  81. package/dist/context-runtime-preprocessor.js +199 -0
  82. package/dist/context-runtime-preprocessor.js.map +1 -0
  83. package/dist/cursor-settings.d.ts +25 -0
  84. package/dist/cursor-settings.js +72 -0
  85. package/dist/cursor-settings.js.map +1 -0
  86. package/dist/health-commands.js +43 -3
  87. package/dist/health-commands.js.map +1 -1
  88. package/dist/model-aliases.d.ts +5 -0
  89. package/dist/model-aliases.js +37 -0
  90. package/dist/model-aliases.js.map +1 -0
  91. package/dist/ollama-provider.js +25 -0
  92. package/dist/ollama-provider.js.map +1 -1
  93. package/dist/phase-playbooks.js +11 -0
  94. package/dist/phase-playbooks.js.map +1 -1
  95. package/dist/provider-agent-wrapper.js +14 -0
  96. package/dist/provider-agent-wrapper.js.map +1 -1
  97. package/dist/runtime-adapters.js +56 -0
  98. package/dist/runtime-adapters.js.map +1 -1
  99. package/dist/runtime-bootstrap.js +20 -22
  100. package/dist/runtime-bootstrap.js.map +1 -1
  101. package/dist/runtime-child-prompt.js +8 -0
  102. package/dist/runtime-child-prompt.js.map +1 -1
  103. package/dist/runtime-context-manifest.d.ts +4 -1
  104. package/dist/runtime-context-manifest.js +59 -3
  105. package/dist/runtime-context-manifest.js.map +1 -1
  106. package/dist/runtime-execution-adapters.js +19 -0
  107. package/dist/runtime-execution-adapters.js.map +1 -1
  108. package/dist/runtime-execution-renderer.js +4 -0
  109. package/dist/runtime-execution-renderer.js.map +1 -1
  110. package/dist/runtime-execution.js +13 -82
  111. package/dist/runtime-execution.js.map +1 -1
  112. package/dist/runtime-hooks.d.ts +46 -0
  113. package/dist/runtime-hooks.js +95 -0
  114. package/dist/runtime-hooks.js.map +1 -0
  115. package/dist/runtime-parent-actions.js +5 -0
  116. package/dist/runtime-parent-actions.js.map +1 -1
  117. package/dist/runtime-spawn-bridge.js +1 -0
  118. package/dist/runtime-spawn-bridge.js.map +1 -1
  119. package/dist/runtime-spawn-guidance.js +15 -61
  120. package/dist/runtime-spawn-guidance.js.map +1 -1
  121. package/dist/security/chat-guardrail-policy.d.ts +7 -0
  122. package/dist/security/chat-guardrail-policy.js +61 -0
  123. package/dist/security/chat-guardrail-policy.js.map +1 -0
  124. package/dist/security/chat-guardrail-types.d.ts +65 -0
  125. package/dist/security/chat-guardrail-types.js +2 -0
  126. package/dist/security/chat-guardrail-types.js.map +1 -0
  127. package/dist/security/chat-guardrail-validation.d.ts +9 -0
  128. package/dist/security/chat-guardrail-validation.js +64 -0
  129. package/dist/security/chat-guardrail-validation.js.map +1 -0
  130. package/dist/security/chat-guardrails.d.ts +3 -0
  131. package/dist/security/chat-guardrails.js +136 -0
  132. package/dist/security/chat-guardrails.js.map +1 -0
  133. package/dist/security/content-classifier.js +33 -1
  134. package/dist/security/content-classifier.js.map +1 -1
  135. package/dist/security/payment-card-detection.d.ts +3 -0
  136. package/dist/security/payment-card-detection.js +48 -0
  137. package/dist/security/payment-card-detection.js.map +1 -0
  138. package/dist/security/policy-types.d.ts +1 -1
  139. package/dist/security/provider-egress-policy.d.ts +27 -0
  140. package/dist/security/provider-egress-policy.js +72 -0
  141. package/dist/security/provider-egress-policy.js.map +1 -0
  142. package/dist/security/public-api-auth.d.ts +20 -0
  143. package/dist/security/public-api-auth.js +55 -0
  144. package/dist/security/public-api-auth.js.map +1 -0
  145. package/dist/security/public-api-policy.d.ts +8 -0
  146. package/dist/security/public-api-policy.js +40 -0
  147. package/dist/security/public-api-policy.js.map +1 -0
  148. package/dist/security/redaction.js +44 -13
  149. package/dist/security/redaction.js.map +1 -1
  150. package/dist/security/restricted-content-quarantine.d.ts +17 -0
  151. package/dist/security/restricted-content-quarantine.js +50 -0
  152. package/dist/security/restricted-content-quarantine.js.map +1 -0
  153. package/dist/security/restricted-data-classifier.d.ts +9 -0
  154. package/dist/security/restricted-data-classifier.js +254 -0
  155. package/dist/security/restricted-data-classifier.js.map +1 -0
  156. package/dist/skills-render.js +7 -14
  157. package/dist/skills-render.js.map +1 -1
  158. package/dist/telemetry-redaction.d.ts +2 -0
  159. package/dist/telemetry-redaction.js +25 -2
  160. package/dist/telemetry-redaction.js.map +1 -1
  161. package/dist/types/chat.d.ts +203 -0
  162. package/dist/types/chat.js +10 -0
  163. package/dist/types/chat.js.map +1 -0
  164. package/dist/types/model-config.d.ts +4 -0
  165. package/dist/types/public-api.d.ts +75 -0
  166. package/dist/types/public-api.js +2 -0
  167. package/dist/types/public-api.js.map +1 -0
  168. package/dist/types/restricted-data.d.ts +69 -0
  169. package/dist/types/restricted-data.js +8 -0
  170. package/dist/types/restricted-data.js.map +1 -0
  171. package/dist/types/restricted-fragment.d.ts +82 -0
  172. package/dist/types/restricted-fragment.js +14 -0
  173. package/dist/types/restricted-fragment.js.map +1 -0
  174. package/dist/types/runtime.d.ts +12 -0
  175. package/dist/types.d.ts +6 -0
  176. package/dist/types.js.map +1 -1
  177. package/dist/web-api.js +24 -0
  178. package/dist/web-api.js.map +1 -1
  179. package/dist/web-artifact-parsers.d.ts +6 -0
  180. package/dist/web-artifact-parsers.js +244 -0
  181. package/dist/web-artifact-parsers.js.map +1 -0
  182. package/dist/web-artifact-types.d.ts +76 -0
  183. package/dist/web-artifact-types.js +2 -0
  184. package/dist/web-artifact-types.js.map +1 -0
  185. package/dist/web-artifacts.d.ts +2 -43
  186. package/dist/web-artifacts.js +73 -58
  187. package/dist/web-artifacts.js.map +1 -1
  188. package/dist/web-chat-route-inputs.d.ts +11 -0
  189. package/dist/web-chat-route-inputs.js +156 -0
  190. package/dist/web-chat-route-inputs.js.map +1 -0
  191. package/dist/web-chat-routes.d.ts +7 -0
  192. package/dist/web-chat-routes.js +213 -0
  193. package/dist/web-chat-routes.js.map +1 -0
  194. package/dist/web-console/assets/index-CJup1cIA.css +1 -0
  195. package/dist/web-console/assets/index-CVDOfipu.js +11 -0
  196. package/dist/web-console/index.html +2 -2
  197. package/dist/web-evidence.d.ts +1 -1
  198. package/dist/web-evidence.js +9 -2
  199. package/dist/web-evidence.js.map +1 -1
  200. package/dist/web-public-route-inputs.d.ts +14 -0
  201. package/dist/web-public-route-inputs.js +136 -0
  202. package/dist/web-public-route-inputs.js.map +1 -0
  203. package/dist/web-public-routes.d.ts +6 -0
  204. package/dist/web-public-routes.js +194 -0
  205. package/dist/web-public-routes.js.map +1 -0
  206. package/dist/web-public-service.d.ts +16 -0
  207. package/dist/web-public-service.js +154 -0
  208. package/dist/web-public-service.js.map +1 -0
  209. package/dist/workflow-services.js +5 -0
  210. package/dist/workflow-services.js.map +1 -1
  211. package/dist/workspace-runtime-bootstrap.js +15 -4
  212. package/dist/workspace-runtime-bootstrap.js.map +1 -1
  213. package/docs/chat-audit-retention.md +76 -0
  214. package/docs/chat-provider-provenance-ledger.md +75 -0
  215. package/docs/context-runtime-preprocessing.md +37 -0
  216. package/docs/orchestra-mvp.md +8 -2
  217. package/docs/public-api-contract.md +43 -0
  218. package/docs/release-test-matrix.md +14 -14
  219. package/docs/restricted-fragment-storage-contract.md +147 -0
  220. package/docs/runtime-adapters.md +40 -7
  221. package/docs/site-manifest.json +128 -30
  222. package/package.json +5 -2
  223. package/site/dist/_headers +9 -0
  224. package/site/dist/_redirects +2 -0
  225. package/site/dist/architecture.mmd +61 -0
  226. package/site/dist/assets/index-Bi8l6tCE.js +10 -0
  227. package/site/dist/assets/index-BsCLqY__.css +1 -0
  228. package/site/dist/favicon.svg +19 -0
  229. package/site/dist/index.html +28 -0
  230. package/site/package.json +19 -0
  231. package/dist/web-console/assets/index-BHs7OIv8.css +0 -1
  232. package/dist/web-console/assets/index-BJuVTqfQ.js +0 -11
  233. package/dist/workspace-claude-settings.js.map +0 -1
package/dist/web-console/index.html CHANGED
@@ -4,8 +4,8 @@
4
4
  <meta charset="UTF-8" />
5
5
  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
6
6
  <title>Open Orchestra Local workflow console</title>
7
- <script type="module" crossorigin src="/assets/index-BJuVTqfQ.js"></script>
8
- <link rel="stylesheet" crossorigin href="/assets/index-BHs7OIv8.css">
7
+ <script type="module" crossorigin src="/assets/index-CVDOfipu.js"></script>
8
+ <link rel="stylesheet" crossorigin href="/assets/index-CJup1cIA.css">
9
9
  </head>
10
10
  <body>
11
11
  <div id="root"></div>
package/dist/web-evidence.d.ts CHANGED
@@ -15,7 +15,7 @@ export interface WebEvidenceEntry {
15
15
  export interface WebArtifactReadResult {
16
16
  path: string;
17
17
  contentType: string;
18
- content: string;
18
+ content: Buffer;
19
19
  }
20
20
  export declare function listWebEvidence(root: string, filters?: {
21
21
  task?: string;
package/dist/web-evidence.js CHANGED
@@ -17,7 +17,7 @@ export async function readWorkspaceArtifact(root, relativePath) {
17
17
  return {
18
18
  path: relativePath,
19
19
  contentType: contentTypeForPath(relativePath),
20
- content: await readFile(filePath, "utf8"),
20
+ content: await readFile(filePath),
21
21
  };
22
22
  }
23
23
  export function resolveWorkspaceLocalPath(root, relativePath) {
@@ -53,9 +53,16 @@ async function toWebEvidenceEntry(root, event) {
53
53
  }
54
54
  function contentTypeForPath(filePath) {
55
55
  const extension = path.extname(filePath).toLowerCase();
56
- if (extension === ".md" || extension === ".txt" || extension === ".log") {
56
+ if (extension === ".md" ||
57
+ extension === ".mmd" ||
58
+ extension === ".mermaid" ||
59
+ extension === ".txt" ||
60
+ extension === ".log") {
57
61
  return "text/plain; charset=utf-8";
58
62
  }
63
+ if (extension === ".drawio" || extension === ".xml") {
64
+ return "application/xml; charset=utf-8";
65
+ }
59
66
  if (extension === ".json") {
60
67
  return "application/json; charset=utf-8";
61
68
  }
package/dist/web-evidence.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"web-evidence.js","sourceRoot":"","sources":["../src/web-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAyBtD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,UAA4C,EAAE;IAE9C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI;QAC3B,CAAC,CAAC,MAAM,CAAC,MAAM,CACX,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAC9D;QACH,CAAC,CAAC,MAAM,CAAC;IACX,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,YAAoB;IAEpB,MAAM,QAAQ,GAAG,yBAAyB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,4BAA4B,YAAY,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,kBAAkB,CAAC,YAAY,CAAC;QAC7C,OAAO,EAAE,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,IAAY,EACZ,YAAoB;IAEpB,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC5D,IACE,QAAQ,KAAK,cAAc;QAC3B,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EACpD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAAY,EACZ,KAAiB;IAEjB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QAC7C,MAAM,cAAc,GAAG,MAAM,MAAM,CACjC,yBAAyB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAC1C,CAAC;QACF,MAAM,IAAI,GAAoB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACzE,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,GAAG,uBAAuB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CACH,CAAC;IACF,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,SAAS,CAAC;QAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS;KACV,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACxE,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO,iCAAiC,CAAC;IAC3C,CAAC;IACD,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO,8BAA8B,CAAC;IACxC,CAAC;IACD,OAAO,0BAA0B,CAAC;AACpC,CAAC"}
1
+ {"version":3,"file":"web-evidence.js","sourceRoot":"","sources":["../src/web-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAyBtD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,UAA4C,EAAE;IAE9C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI;QAC3B,CAAC,CAAC,MAAM,CAAC,MAAM,CACX,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAC9D;QACH,CAAC,CAAC,MAAM,CAAC;IACX,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,YAAoB;IAEpB,MAAM,QAAQ,GAAG,yBAAyB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,4BAA4B,YAAY,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,kBAAkB,CAAC,YAAY,CAAC;QAC7C,OAAO,EAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,IAAY,EACZ,YAAoB;IAEpB,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC5D,IACE,QAAQ,KAAK,cAAc;QAC3B,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EACpD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAAY,EACZ,KAAiB;IAEjB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QAC7C,MAAM,cAAc,GAAG,MAAM,MAAM,CACjC,yBAAyB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAC1C,CAAC;QACF,MAAM,IAAI,GAAoB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACzE,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,GAAG,uBAAuB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CACH,CAAC;IACF,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,SAAS,CAAC;QAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS;KACV,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,IACE,SAAS,KAAK,KAAK;QACnB,SAAS,KAAK,MAAM;QACpB,SAAS,KAAK,UAAU;QACxB,SAAS,KAAK,MAAM;QACpB,SAAS,KAAK,MAAM,EACpB,CAAC;QACD,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACpD,OAAO,gCAAgC,CAAC;IAC1C,CAAC;IACD,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO,iCAAiC,CAAC;IAC3C,CAAC;IACD,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO,8BAA8B,CAAC;IACxC,CAAC;IACD,OAAO,0BAA0B,CAAC;AACpC,CAAC"}
package/dist/web-public-route-inputs.d.ts ADDED
@@ -0,0 +1,14 @@
1
+ import type http from "node:http";
2
+ import type { PublicApiCreateMessageInput, PublicApiCreateThreadInput, PublicApiListInput, PublicApiThreadInput } from "./types/public-api.js";
3
+ export interface PublicCreateThreadRequest {
4
+ input: PublicApiCreateThreadInput;
5
+ bodyHash: string;
6
+ }
7
+ export interface PublicCreateMessageRequest {
8
+ input: PublicApiCreateMessageInput;
9
+ }
10
+ export declare function listInput(url: URL, requestId: string): PublicApiListInput;
11
+ export declare function threadInput(requestId: string, threadId: string): PublicApiThreadInput;
12
+ export declare function createThreadInput(request: http.IncomingMessage, url: URL): Promise<PublicCreateThreadRequest>;
13
+ export declare function createMessageInput(request: http.IncomingMessage, url: URL, threadId: string): Promise<PublicCreateMessageRequest>;
14
+ export declare function requestIdFromRequest(request: http.IncomingMessage, url: URL): string;
package/dist/web-public-route-inputs.js ADDED
@@ -0,0 +1,136 @@
1
+ import { createHash } from "node:crypto";
2
+ import { ChatApiError } from "./chat-api-errors.js";
3
+ import { safeJsonBody } from "./web-chat-route-inputs.js";
4
+ const MAX_PAGE_SIZE = 100;
5
+ const MAX_REQUEST_ID_LENGTH = 128;
6
+ const MAX_THREAD_ID_LENGTH = 160;
7
+ const MAX_TITLE_LENGTH = 200;
8
+ const MAX_MESSAGE_TEXT_LENGTH = 8_000;
9
+ const MAX_CURSOR_LENGTH = 512;
10
+ const MAX_IDEMPOTENCY_KEY_LENGTH = 180;
11
+ const FORBIDDEN_FIELDS = [
12
+ "actor",
13
+ "apiKey",
14
+ "baseUrl",
15
+ "model",
16
+ "phase",
17
+ "provider",
18
+ "runId",
19
+ "scope",
20
+ "sessionId",
21
+ "taskId",
22
+ "tenantId",
23
+ "workspaceId",
24
+ ];
25
+ export function listInput(url, requestId) {
26
+ return {
27
+ requestId,
28
+ ...optionalPaging(url, requestId),
29
+ };
30
+ }
31
+ export function threadInput(requestId, threadId) {
32
+ return {
33
+ requestId,
34
+ threadId: requiredText(boundedStringValue(threadId, "threadId", requestId, MAX_THREAD_ID_LENGTH), "threadId", requestId),
35
+ };
36
+ }
37
+ export async function createThreadInput(request, url) {
38
+ const requestId = requestIdFromRequest(request, url);
39
+ const body = objectBody(await safeJsonBody(request), requestId);
40
+ assertNoForbiddenFields(body, requestId);
41
+ const title = stringField(body, "title", requestId, MAX_TITLE_LENGTH);
42
+ const idempotencyKey = optionalHeaderValue(request.headers["idempotency-key"], "Idempotency-Key header", requestId, MAX_IDEMPOTENCY_KEY_LENGTH);
43
+ return {
44
+ input: {
45
+ requestId,
46
+ title,
47
+ ...(idempotencyKey ? { idempotencyKey } : {}),
48
+ },
49
+ bodyHash: digestBody({ title }),
50
+ };
51
+ }
52
+ export async function createMessageInput(request, url, threadId) {
53
+ const requestId = requestIdFromRequest(request, url);
54
+ const body = objectBody(await safeJsonBody(request), requestId);
55
+ assertNoForbiddenFields(body, requestId);
56
+ const idempotencyKey = requiredText(optionalHeaderValue(request.headers["idempotency-key"], "Idempotency-Key header", requestId, MAX_IDEMPOTENCY_KEY_LENGTH), "Idempotency-Key header", requestId);
57
+ const formatValue = stringValue(body.format);
58
+ return {
59
+ input: {
60
+ requestId,
61
+ threadId: requiredText(boundedStringValue(threadId, "threadId", requestId, MAX_THREAD_ID_LENGTH), "threadId", requestId),
62
+ idempotencyKey,
63
+ text: stringField(body, "text", requestId, MAX_MESSAGE_TEXT_LENGTH),
64
+ ...(formatValue === "markdown" ? { format: "markdown" } : {}),
65
+ },
66
+ };
67
+ }
68
+ export function requestIdFromRequest(request, url) {
69
+ return (optionalHeaderValue(request.headers["x-request-id"], "X-Request-Id header", "public-request", MAX_REQUEST_ID_LENGTH) ??
70
+ boundedStringValue(url.searchParams.get("requestId"), "requestId", "public-request", MAX_REQUEST_ID_LENGTH) ??
71
+ "public-request");
72
+ }
73
+ function optionalPaging(url, requestId) {
74
+ const limitParam = url.searchParams.get("limit");
75
+ const cursor = boundedStringValue(url.searchParams.get("cursor"), "cursor", requestId, MAX_CURSOR_LENGTH);
76
+ if (limitParam === null) {
77
+ return cursor ? { cursor } : {};
78
+ }
79
+ const limit = Number(limitParam);
80
+ if (!Number.isInteger(limit) || limit < 1 || limit > MAX_PAGE_SIZE) {
81
+ throw invalidRequest("limit must be an integer between 1 and 100", requestId);
82
+ }
83
+ return {
84
+ limit,
85
+ ...(cursor ? { cursor } : {}),
86
+ };
87
+ }
88
+ function assertNoForbiddenFields(body, requestId) {
89
+ for (const field of FORBIDDEN_FIELDS) {
90
+ if (field in body) {
91
+ throw invalidRequest(`${field} is not allowed in the public API contract`, requestId);
92
+ }
93
+ }
94
+ }
95
+ function digestBody(body) {
96
+ return createHash("sha256").update(JSON.stringify(body)).digest("base64url");
97
+ }
98
+ function objectBody(body, requestId) {
99
+ if (typeof body !== "object" || body === null || Array.isArray(body)) {
100
+ throw invalidRequest("JSON object body is required", requestId);
101
+ }
102
+ return body;
103
+ }
104
+ function stringField(body, field, requestId, maxLength) {
105
+ return requiredText(boundedStringValue(body[field], field, requestId, maxLength), field, requestId);
106
+ }
107
+ function requiredText(value, field, requestId) {
108
+ if (!value) {
109
+ throw invalidRequest(`${field} is required`, requestId);
110
+ }
111
+ return value;
112
+ }
113
+ function boundedStringValue(value, field, requestId, maxLength) {
114
+ if (typeof value !== "string")
115
+ return undefined;
116
+ const normalized = value.trim();
117
+ if (!normalized)
118
+ return undefined;
119
+ if (normalized.length > maxLength) {
120
+ throw invalidRequest(`${field} is too long`, requestId);
121
+ }
122
+ return normalized;
123
+ }
124
+ function stringValue(value) {
125
+ return typeof value === "string" && value.trim() ? value.trim() : undefined;
126
+ }
127
+ function optionalHeaderValue(value, field, requestId, maxLength) {
128
+ if (Array.isArray(value)) {
129
+ throw invalidRequest(`${field} must have a single value`, requestId);
130
+ }
131
+ return boundedStringValue(value, field, requestId, maxLength);
132
+ }
133
+ function invalidRequest(message, requestId) {
134
+ return new ChatApiError("invalid_request", message, 400, requestId);
135
+ }
136
+ //# sourceMappingURL=web-public-route-inputs.js.map
package/dist/web-public-route-inputs.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"web-public-route-inputs.js","sourceRoot":"","sources":["../src/web-public-route-inputs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAQ1D,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,uBAAuB,GAAG,KAAK,CAAC;AACtC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,gBAAgB,GAAG;IACvB,OAAO;IACP,QAAQ;IACR,SAAS;IACT,OAAO;IACP,OAAO;IACP,UAAU;IACV,OAAO;IACP,OAAO;IACP,WAAW;IACX,QAAQ;IACR,UAAU;IACV,aAAa;CACL,CAAC;AAeX,MAAM,UAAU,SAAS,CAAC,GAAQ,EAAE,SAAiB;IACnD,OAAO;QACL,SAAS;QACT,GAAG,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,SAAiB,EACjB,QAAgB;IAEhB,OAAO;QACL,SAAS;QACT,QAAQ,EAAE,YAAY,CACpB,kBAAkB,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,oBAAoB,CAAC,EACzE,UAAU,EACV,SAAS,CACV;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA6B,EAC7B,GAAQ;IAER,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IAChE,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACtE,MAAM,cAAc,GAAG,mBAAmB,CACxC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAClC,wBAAwB,EACxB,SAAS,EACT,0BAA0B,CAC3B,CAAC;IACF,OAAO;QACL,KAAK,EAAE;YACL,SAAS;YACT,KAAK;YACL,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C;QACD,QAAQ,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA6B,EAC7B,GAAQ,EACR,QAAgB;IAEhB,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IAChE,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,YAAY,CACjC,mBAAmB,CACjB,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAClC,wBAAwB,EACxB,SAAS,EACT,0BAA0B,CAC3B,EACD,wBAAwB,EACxB,SAAS,CACV,CAAC;IACF,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO;QACL,KAAK,EAAE;YACL,SAAS;YACT,QAAQ,EAAE,YAAY,CACpB,kBAAkB,CAChB,QAAQ,EACR,UAAU,EACV,SAAS,EACT,oBAAoB,CACrB,EACD,UAAU,EACV,SAAS,CACV;YACD,cAAc;YACd,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,uBAAuB,CAAC;YACnE,GAAG,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAA6B,EAC7B,GAAQ;IAER,OAAO,CACL,mBAAmB,CACjB,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,EAC/B,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,CACtB;QACD,kBAAkB,CAChB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EACjC,WAAW,EACX,gBAAgB,EAChB,qBAAqB,CACtB;QACD,gBAAgB,CACjB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAQ,EAAE,SAAiB;IACjD,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,kBAAkB,CAC/B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAC9B,QAAQ,EACR,SAAS,EACT,iBAAiB,CAClB,CAAC;IACF,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,aAAa,EAAE,CAAC;QACnE,MAAM,cAAc,CAClB,4CAA4C,EAC5C,SAAS,CACV,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK;QACL,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAiB,EAAE,SAAiB;IACnE,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACrC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,MAAM,cAAc,CAClB,GAAG,KAAK,4CAA4C,EACpD,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAuB;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,UAAU,CAAC,IAAa,EAAE,SAAiB;IAClD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,cAAc,CAAC,8BAA8B,EAAE,SAAS,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAmB,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAClB,IAAiB,EACjB,KAAa,EACb,SAAiB,EACjB,SAAiB;IAEjB,OAAO,YAAY,CACjB,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,EAC5D,KAAK,EACL,SAAS,CACV,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,KAAyB,EACzB,KAAa,EACb,SAAiB;IAEjB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,cAAc,CAAC,GAAG,KAAK,cAAc,EAAE,SAAS,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc,EACd,KAAa,EACb,SAAiB,EACjB,SAAiB;IAEjB,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,IAAI,UAAU,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAClC,MAAM,cAAc,CAAC,GAAG,KAAK,cAAc,EAAE,SAAS,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAoC,EACpC,KAAa,EACb,SAAiB,EACjB,SAAiB;IAEjB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,cAAc,CAAC,GAAG,KAAK,2BAA2B,EAAE,SAAS,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,SAAiB;IACxD,OAAO,IAAI,YAAY,CAAC,iBAAiB,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;AACtE,CAAC"}
package/dist/web-public-routes.d.ts ADDED
@@ -0,0 +1,6 @@
1
+ import type http from "node:http";
2
+ export interface WebPublicRouteResult {
3
+ status: number;
4
+ body: unknown;
5
+ }
6
+ export declare function handleWebPublicRoute(request: http.IncomingMessage, root: string, url: URL): Promise<WebPublicRouteResult | null>;
package/dist/web-public-routes.js ADDED
@@ -0,0 +1,194 @@
1
+ import { createLocalChatStorage } from "./chat-storage-local.js";
2
+ import { ChatApiError, ChatApiService } from "./chat-api-service.js";
3
+ import { enforceRestrictedIngressQuarantine } from "./security/restricted-content-quarantine.js";
4
+ import { createMessageInput, createThreadInput, listInput, requestIdFromRequest, threadInput, } from "./web-public-route-inputs.js";
5
+ import { authenticatePublicApiRequest, workspaceKeyForRoot, } from "./security/public-api-auth.js";
6
+ import { admitPublicApiRequest } from "./security/public-api-policy.js";
7
+ import { WebPublicService } from "./web-public-service.js";
8
+ export async function handleWebPublicRoute(request, root, url) {
9
+ if (!url.pathname.startsWith("/api/v1"))
10
+ return null;
11
+ const storage = createLocalChatStorage({ workspaceRoot: root });
12
+ const chatService = new ChatApiService({
13
+ storage,
14
+ root,
15
+ });
16
+ const service = new WebPublicService({ chatService, root });
17
+ try {
18
+ return await dispatchPublicRoute(request, url, service, root);
19
+ }
20
+ catch (error) {
21
+ return errorResult(error, requestIdFromRequest(request, url));
22
+ }
23
+ }
24
+ async function dispatchPublicRoute(request, url, service, root) {
25
+ const requestId = requestIdFromRequest(request, url);
26
+ const context = authenticatePublicApiRequest({
27
+ request,
28
+ requestId,
29
+ workspaceKey: workspaceKeyForRoot(root),
30
+ });
31
+ const admission = admitPublicApiRequest({
32
+ key: context.rateLimitKey,
33
+ requestId,
34
+ });
35
+ try {
36
+ return await dispatchAuthorizedPublicRoute(request, url, service, root, context);
37
+ }
38
+ finally {
39
+ admission.release();
40
+ }
41
+ }
42
+ async function dispatchAuthorizedPublicRoute(request, url, service, root, context) {
43
+ if (request.method === "GET" && url.pathname === "/api/v1/models") {
44
+ return { status: 200, body: await service.listModels(context.requestId) };
45
+ }
46
+ if (request.method === "GET" && url.pathname === "/api/v1/threads") {
47
+ return {
48
+ status: 200,
49
+ body: await service.listThreads(listInput(url, context.requestId), context),
50
+ };
51
+ }
52
+ if (request.method === "POST" && url.pathname === "/api/v1/threads") {
53
+ const parsed = await createThreadInput(request, url);
54
+ await quarantinePublicThreadInput(root, parsed.input, context);
55
+ return {
56
+ status: 201,
57
+ body: await service.createThread(parsed.input, parsed.bodyHash, context),
58
+ };
59
+ }
60
+ const parts = url.pathname.split("/").filter(Boolean);
61
+ if (parts.length >= 4 &&
62
+ parts[0] === "api" &&
63
+ parts[1] === "v1" &&
64
+ parts[2] === "threads") {
65
+ const input = threadInput(requestIdFromRequest(request, url), parts[3] ?? "");
66
+ if (request.method === "GET" && parts.length === 4) {
67
+ return { status: 200, body: await service.getThread(input, context) };
68
+ }
69
+ if (request.method === "GET" && parts[4] === "messages") {
70
+ return {
71
+ status: 200,
72
+ body: await service.listMessages({
73
+ ...input,
74
+ ...listInput(url, input.requestId ?? "public-request"),
75
+ }, context),
76
+ };
77
+ }
78
+ if (request.method === "POST" && parts[4] === "messages") {
79
+ const parsed = await createMessageInput(request, url, input.threadId);
80
+ await quarantinePublicMessageInput(root, parsed.input, context);
81
+ return {
82
+ status: 201,
83
+ body: await service.createMessage(parsed.input, context),
84
+ };
85
+ }
86
+ }
87
+ return {
88
+ status: 404,
89
+ body: {
90
+ error: {
91
+ code: "not_found",
92
+ message: "requested resource was not found",
93
+ requestId: requestIdFromRequest(request, url),
94
+ retryable: false,
95
+ },
96
+ },
97
+ };
98
+ }
99
+ async function quarantinePublicThreadInput(root, input, context) {
100
+ await enforceRestrictedIngressQuarantine({
101
+ root,
102
+ requestId: input.requestId ?? context.requestId,
103
+ boundary: "public_api_ingress",
104
+ fields: [{ name: "title", text: input.title }],
105
+ actorId: context.principal.id,
106
+ tenantId: context.scope.tenantId,
107
+ workspaceId: context.scope.workspaceId,
108
+ taskId: context.scope.taskId,
109
+ });
110
+ }
111
+ async function quarantinePublicMessageInput(root, input, context) {
112
+ await enforceRestrictedIngressQuarantine({
113
+ root,
114
+ requestId: input.requestId ?? context.requestId,
115
+ boundary: "public_api_ingress",
116
+ fields: [{ name: "text", text: input.text }],
117
+ actorId: context.principal.id,
118
+ tenantId: context.scope.tenantId,
119
+ workspaceId: context.scope.workspaceId,
120
+ taskId: context.scope.taskId,
121
+ threadId: input.threadId,
122
+ });
123
+ }
124
+ function errorResult(error, requestId) {
125
+ const chatError = error instanceof ChatApiError ? mapPublicError(error) : undefined;
126
+ const body = {
127
+ error: chatError ?? {
128
+ code: "internal_error",
129
+ message: "public API request failed",
130
+ requestId,
131
+ retryable: false,
132
+ },
133
+ };
134
+ return { status: chatError?.status ?? 500, body };
135
+ }
136
+ function mapPublicError(error) {
137
+ if (error.code === "thread_not_found") {
138
+ return {
139
+ code: "not_found",
140
+ message: "requested resource was not found",
141
+ requestId: error.requestId,
142
+ retryable: false,
143
+ status: 404,
144
+ };
145
+ }
146
+ if (error.code === "invalid_cursor") {
147
+ return {
148
+ code: "invalid_request",
149
+ message: "request parameters are invalid",
150
+ requestId: error.requestId,
151
+ retryable: false,
152
+ status: 400,
153
+ };
154
+ }
155
+ if (error.code === "invalid_request" ||
156
+ error.code === "invalid_json" ||
157
+ error.code === "payload_too_large" ||
158
+ error.code === "idempotency_conflict" ||
159
+ error.code === "policy_blocked" ||
160
+ error.code === "rate_limited" ||
161
+ error.code === "unauthorized") {
162
+ return {
163
+ code: error.code,
164
+ message: safePublicMessage(error.code, error.message),
165
+ requestId: error.requestId,
166
+ retryable: error.retryable,
167
+ status: error.status,
168
+ };
169
+ }
170
+ return {
171
+ code: "internal_error",
172
+ message: "public API request failed",
173
+ requestId: error.requestId,
174
+ retryable: false,
175
+ status: 500,
176
+ };
177
+ }
178
+ function safePublicMessage(code, message) {
179
+ if (code === "invalid_json")
180
+ return "request body must be valid JSON";
181
+ if (code === "payload_too_large")
182
+ return "request body is too large";
183
+ if (code === "policy_blocked")
184
+ return "request was blocked by policy";
185
+ if (code === "rate_limited")
186
+ return "too many requests";
187
+ if (code === "unauthorized")
188
+ return "authentication is required";
189
+ return sanitize(message);
190
+ }
191
+ function sanitize(message) {
192
+ return message.replace(/\/Users\/[^ ]+/gu, "[path]").slice(0, 240);
193
+ }
194
+ //# sourceMappingURL=web-public-routes.js.map
package/dist/web-public-routes.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"web-public-routes.js","sourceRoot":"","sources":["../src/web-public-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,kCAAkC,EAAE,MAAM,6CAA6C,CAAC;AACjG,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,SAAS,EACT,oBAAoB,EACpB,WAAW,GACZ,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAa3D,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA6B,EAC7B,IAAY,EACZ,GAAQ;IAER,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,OAAO,GAAG,sBAAsB,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,IAAI,cAAc,CAAC;QACrC,OAAO;QACP,IAAI;KACL,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,OAAO,MAAM,mBAAmB,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,KAAK,EAAE,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,OAA6B,EAC7B,GAAQ,EACR,OAAyB,EACzB,IAAY;IAEZ,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,4BAA4B,CAAC;QAC3C,OAAO;QACP,SAAS;QACT,YAAY,EAAE,mBAAmB,CAAC,IAAI,CAAC;KACxC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,qBAAqB,CAAC;QACtC,GAAG,EAAE,OAAO,CAAC,YAAY;QACzB,SAAS;KACV,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,6BAA6B,CACxC,OAAO,EACP,GAAG,EACH,OAAO,EACP,IAAI,EACJ,OAAO,CACR,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,OAA6B,EAC7B,GAAQ,EACR,OAAyB,EACzB,IAAY,EACZ,OAA6B;IAE7B,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QAClE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QACnE,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,MAAM,OAAO,CAAC,WAAW,CAC7B,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,EACjC,OAAO,CACR;SACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,2BAA2B,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/D,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtD,IACE,KAAK,CAAC,MAAM,IAAI,CAAC;QACjB,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;QAClB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QACjB,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EACtB,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CACvB,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,EAClC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CACf,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QACxE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YACxD,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,MAAM,OAAO,CAAC,YAAY,CAC9B;oBACE,GAAG,KAAK;oBACR,GAAG,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,IAAI,gBAAgB,CAAC;iBACvD,EACD,OAAO,CACR;aACF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACtE,MAAM,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAChE,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;aACzD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,KAAK,EAAE;gBACL,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,kCAAkC;gBAC3C,SAAS,EAAE,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC;gBAC7C,SAAS,EAAE,KAAK;aACjB;SACF;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,IAAY,EACZ,KAAiC,EACjC,OAA6B;IAE7B,MAAM,kCAAkC,CAAC;QACvC,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS;QAC/C,QAAQ,EAAE,oBAAoB;QAC9B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9C,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE;QAC7B,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ;QAChC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW;QACtC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,IAAY,EACZ,KAAkC,EAClC,OAA6B;IAE7B,MAAM,kCAAkC,CAAC;QACvC,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS;QAC/C,QAAQ,EAAE,oBAAoB;QAC9B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5C,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE;QAC7B,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ;QAChC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW;QACtC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,SAAiB;IACpD,MAAM,SAAS,GACb,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,MAAM,IAAI,GAAuB;QAC/B,KAAK,EAAE,SAAS,IAAI;YAClB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,2BAA2B;YACpC,SAAS;YACT,SAAS,EAAE,KAAK;SACjB;KACF,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,cAAc,CAAC,KAAmB;IAGzC,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,kCAAkC;YAC3C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACpC,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,gCAAgC;YACzC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,IAAI,KAAK,iBAAiB;QAChC,KAAK,CAAC,IAAI,KAAK,cAAc;QAC7B,KAAK,CAAC,IAAI,KAAK,mBAAmB;QAClC,KAAK,CAAC,IAAI,KAAK,sBAAsB;QACrC,KAAK,CAAC,IAAI,KAAK,gBAAgB;QAC/B,KAAK,CAAC,IAAI,KAAK,cAAc;QAC7B,KAAK,CAAC,IAAI,KAAK,cAAc,EAC7B,CAAC;QACD,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC;YACrD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,2BAA2B;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,GAAG;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,OAAe;IACtD,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,iCAAiC,CAAC;IACtE,IAAI,IAAI,KAAK,mBAAmB;QAAE,OAAO,2BAA2B,CAAC;IACrE,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,+BAA+B,CAAC;IACtE,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,mBAAmB,CAAC;IACxD,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,4BAA4B,CAAC;IACjE,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC"}
package/dist/web-public-service.d.ts ADDED
@@ -0,0 +1,16 @@
1
+ import type { ChatApiService } from "./chat-api-service.js";
2
+ import type { PublicApiCreateMessageInput, PublicApiCreateThreadInput, PublicApiListInput, PublicApiListMessages, PublicApiListModels, PublicApiListThreads, PublicApiMessage, PublicApiSuccess, PublicApiThread, PublicApiThreadDetail, PublicApiThreadInput } from "./types/public-api.js";
3
+ import type { PublicApiAuthContext } from "./security/public-api-auth.js";
4
+ export declare class WebPublicService {
5
+ private readonly chatService;
6
+ constructor({ chatService }: {
7
+ chatService: ChatApiService;
8
+ root: string;
9
+ });
10
+ listModels(requestId?: string): Promise<PublicApiSuccess<PublicApiListModels>>;
11
+ listThreads(input: PublicApiListInput, context: PublicApiAuthContext): Promise<PublicApiSuccess<PublicApiListThreads>>;
12
+ createThread(input: PublicApiCreateThreadInput, bodyHash: string, context: PublicApiAuthContext): Promise<PublicApiSuccess<PublicApiThread>>;
13
+ getThread(input: PublicApiThreadInput, context: PublicApiAuthContext): Promise<PublicApiSuccess<PublicApiThreadDetail>>;
14
+ listMessages(input: PublicApiThreadInput & PublicApiListInput, context: PublicApiAuthContext): Promise<PublicApiSuccess<PublicApiListMessages>>;
15
+ createMessage(input: PublicApiCreateMessageInput, context: PublicApiAuthContext): Promise<PublicApiSuccess<PublicApiMessage>>;
16
+ }
package/dist/web-public-service.js ADDED
@@ -0,0 +1,154 @@
1
+ import { ChatApiError } from "./chat-api-service.js";
2
+ import { listPublicModelAliases } from "./model-aliases.js";
3
+ const threadReplayCache = new Map();
4
+ export class WebPublicService {
5
+ chatService;
6
+ constructor({ chatService }) {
7
+ this.chatService = chatService;
8
+ }
9
+ async listModels(requestId = "public-request") {
10
+ return {
11
+ data: { models: listPublicModelAliases() },
12
+ meta: { requestId },
13
+ };
14
+ }
15
+ async listThreads(input, context) {
16
+ const result = await this.chatService.listThreads({
17
+ scope: context.scope,
18
+ ...(input.requestId ? { requestId: input.requestId } : {}),
19
+ ...(input.limit !== undefined ? { limit: input.limit } : {}),
20
+ ...(input.cursor ? { cursor: input.cursor } : {}),
21
+ });
22
+ return {
23
+ data: { threads: result.data.threads.map(mapThread) },
24
+ meta: result.meta,
25
+ };
26
+ }
27
+ async createThread(input, bodyHash, context) {
28
+ const replayKey = replayKeyFor(input.idempotencyKey, context);
29
+ if (replayKey) {
30
+ const existing = threadReplayCache.get(replayKey);
31
+ if (existing) {
32
+ if (existing.bodyHash !== bodyHash) {
33
+ throw new ChatApiError("idempotency_conflict", "idempotency key was already used with a different payload", 409, input.requestId ?? "public-request");
34
+ }
35
+ return {
36
+ data: existing.thread,
37
+ meta: {
38
+ requestId: input.requestId ?? "public-request",
39
+ idempotentReplay: true,
40
+ ...(input.idempotencyKey
41
+ ? { idempotencyKey: input.idempotencyKey }
42
+ : {}),
43
+ },
44
+ };
45
+ }
46
+ }
47
+ const created = await this.chatService.createThread({
48
+ scope: context.scope,
49
+ title: input.title,
50
+ actor: publicActor(context),
51
+ ...(input.requestId ? { requestId: input.requestId } : {}),
52
+ });
53
+ const thread = mapThread(created.data);
54
+ if (replayKey) {
55
+ threadReplayCache.set(replayKey, { bodyHash, thread });
56
+ }
57
+ return {
58
+ data: thread,
59
+ meta: {
60
+ ...created.meta,
61
+ ...(input.idempotencyKey
62
+ ? { idempotencyKey: input.idempotencyKey }
63
+ : {}),
64
+ },
65
+ };
66
+ }
67
+ async getThread(input, context) {
68
+ const result = await this.chatService.getThread({
69
+ scope: context.scope,
70
+ threadId: input.threadId,
71
+ ...(input.requestId ? { requestId: input.requestId } : {}),
72
+ });
73
+ return {
74
+ data: { thread: mapThread(result.data.thread) },
75
+ meta: result.meta,
76
+ };
77
+ }
78
+ async listMessages(input, context) {
79
+ const result = await this.chatService.listMessages({
80
+ scope: context.scope,
81
+ threadId: input.threadId,
82
+ ...(input.requestId ? { requestId: input.requestId } : {}),
83
+ ...(input.limit !== undefined ? { limit: input.limit } : {}),
84
+ ...(input.cursor ? { cursor: input.cursor } : {}),
85
+ });
86
+ return {
87
+ data: { messages: result.data.messages.map(mapMessage) },
88
+ meta: result.meta,
89
+ };
90
+ }
91
+ async createMessage(input, context) {
92
+ const result = await this.chatService.createMessage({
93
+ scope: context.scope,
94
+ threadId: input.threadId,
95
+ idempotencyKey: input.idempotencyKey,
96
+ actor: publicActor(context),
97
+ text: input.text,
98
+ ...(input.requestId ? { requestId: input.requestId } : {}),
99
+ ...(input.format ? { format: input.format } : {}),
100
+ });
101
+ return {
102
+ data: mapMessage(result.data),
103
+ meta: result.meta,
104
+ };
105
+ }
106
+ }
107
+ function replayKeyFor(idempotencyKey, context) {
108
+ return idempotencyKey?.trim()
109
+ ? `thread:${context.rateLimitKey}:${idempotencyKey.trim()}`
110
+ : undefined;
111
+ }
112
+ function publicActor(context) {
113
+ return {
114
+ kind: "human",
115
+ actorId: context.principal.id,
116
+ displayName: context.principal.displayName,
117
+ source: "api",
118
+ sessionId: context.scope.sessionId,
119
+ };
120
+ }
121
+ function mapThread(thread) {
122
+ return {
123
+ id: thread.id,
124
+ object: "thread",
125
+ title: thread.title,
126
+ createdAt: thread.createdAt,
127
+ updatedAt: thread.updatedAt,
128
+ };
129
+ }
130
+ function mapMessage(message) {
131
+ return {
132
+ id: message.id,
133
+ object: "message",
134
+ threadId: message.threadId,
135
+ role: publicMessageRole(message),
136
+ text: message.content.text,
137
+ format: message.content.format === "markdown" ? "markdown" : "plain_text",
138
+ createdAt: message.createdAt,
139
+ };
140
+ }
141
+ function publicMessageRole(message) {
142
+ if (message.actor?.kind === "human")
143
+ return "user";
144
+ if (message.actor?.kind === "parent_agent" ||
145
+ message.actor?.kind === "subagent" ||
146
+ message.actor?.kind === "provider_agent") {
147
+ return "agent";
148
+ }
149
+ if (message.timelineEvent || message.content.format === "workflow_event") {
150
+ return "system";
151
+ }
152
+ return "system";
153
+ }
154
+ //# sourceMappingURL=web-public-service.js.map
package/dist/web-public-service.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"web-public-service.js","sourceRoot":"","sources":["../src/web-public-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAsB5D,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA8B,CAAC;AAEhE,MAAM,OAAO,gBAAgB;IACV,WAAW,CAAiB;IAE7C,YAAY,EAAE,WAAW,EAAiD;QACxE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,UAAU,CACd,SAAS,GAAG,gBAAgB;QAE5B,OAAO;YACL,IAAI,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE;YAC1C,IAAI,EAAE,EAAE,SAAS,EAAE;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CACf,KAAyB,EACzB,OAA6B;QAE7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;YAChD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;YACrD,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,KAAiC,EACjC,QAAgB,EAChB,OAA6B;QAE7B,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC9D,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAClD,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACnC,MAAM,IAAI,YAAY,CACpB,sBAAsB,EACtB,2DAA2D,EAC3D,GAAG,EACH,KAAK,CAAC,SAAS,IAAI,gBAAgB,CACpC,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,IAAI,EAAE,QAAQ,CAAC,MAAM;oBACrB,IAAI,EAAE;wBACJ,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,gBAAgB;wBAC9C,gBAAgB,EAAE,IAAI;wBACtB,GAAG,CAAC,KAAK,CAAC,cAAc;4BACtB,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;4BAC1C,CAAC,CAAC,EAAE,CAAC;qBACR;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;YAClD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC;YAC3B,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,SAAS,EAAE,CAAC;YACd,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE;gBACJ,GAAG,OAAO,CAAC,IAAI;gBACf,GAAG,CAAC,KAAK,CAAC,cAAc;oBACtB,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;oBAC1C,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CACb,KAA2B,EAC3B,OAA6B;QAE7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;YAC9C,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YAC/C,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,KAAgD,EAChD,OAA6B;QAE7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;YACjD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE;YACxD,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,KAAkC,EAClC,OAA6B;QAE7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC;YAClD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC;YAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IACJ,CAAC;CACF;AAED,SAAS,YAAY,CACnB,cAAkC,EAClC,OAA6B;IAE7B,OAAO,cAAc,EAAE,IAAI,EAAE;QAC3B,CAAC,CAAC,UAAU,OAAO,CAAC,YAAY,IAAI,cAAc,CAAC,IAAI,EAAE,EAAE;QAC3D,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,OAA6B;IAChD,OAAO;QACL,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE;QAC7B,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW;QAC1C,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,MAKlB;IACC,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAKnB;IACC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,iBAAiB,CAAC,OAAO,CAAC;QAChC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;QAC1B,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;QACzE,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAI1B;IACC,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IACnD,IACE,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,cAAc;QACtC,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,UAAU;QAClC,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,gBAAgB,EACxC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QACzE,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}
package/dist/workflow-services.js CHANGED
@@ -1476,6 +1476,11 @@ export async function getUsageReport(taskId, root = process.cwd()) {
1476
1476
  totals: aggregateUsage("total", records),
1477
1477
  byRole: aggregateUsageBy(records, (record) => record.role),
1478
1478
  byProvider: aggregateUsageBy(records, (record) => record.provider),
1479
+ byTenant: aggregateUsageBy(records, (record) => record.tenantId ?? "local"),
1480
+ byWorkspace: aggregateUsageBy(records, (record) => record.workspaceId ?? "local"),
1481
+ byActor: aggregateUsageBy(records, (record) => record.actor ?? record.role),
1482
+ byInitiator: aggregateUsageBy(records, (record) => record.initiatedBy ?? "unknown"),
1483
+ byPhase: aggregateUsageBy(records, (record) => record.phase ?? "unknown"),
1479
1484
  };
1480
1485
  }
1481
1486
  export async function checkUsageBudget(taskId, root = process.cwd()) {