@k2b/cloud 0.6.0-rc.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (540) hide show
  1. package/README.md +98 -0
  2. package/package.json +128 -0
  3. package/public/logo.svg +1 -0
  4. package/scripts/app-favicon.test.ts +49 -0
  5. package/scripts/app-favicon.ts +51 -0
  6. package/scripts/build.ts +205 -0
  7. package/scripts/preload.ts +164 -0
  8. package/scripts/sync-recovery-smoke.ts +200 -0
  9. package/src/_internal/app-favicon.ts +2 -0
  10. package/src/_internal/app-presentation.ts +61 -0
  11. package/src/_internal/app-workspace-state.ts +24 -0
  12. package/src/_internal/bounded-json.ts +47 -0
  13. package/src/_internal/build-metadata.ts +9 -0
  14. package/src/_internal/capabilities.ts +1118 -0
  15. package/src/_internal/define-app.ts +801 -0
  16. package/src/_internal/heartbeat.ts +167 -0
  17. package/src/_internal/help-catalog.ts +241 -0
  18. package/src/_internal/help.ts +95 -0
  19. package/src/_internal/nats-connection.ts +34 -0
  20. package/src/_internal/page-responses.ts +40 -0
  21. package/src/_internal/process-sync.ts +117 -0
  22. package/src/_internal/readiness.ts +3 -0
  23. package/src/_internal/registry-validation.ts +136 -0
  24. package/src/_internal/registry-watch.ts +52 -0
  25. package/src/_internal/registry.ts +338 -0
  26. package/src/_internal/runtime-compatibility.ts +64 -0
  27. package/src/_internal/runtime-context.ts +84 -0
  28. package/src/_internal/runtime-watcher.ts +78 -0
  29. package/src/_internal/static-assets.ts +86 -0
  30. package/src/_internal/status-preserving-ssr.ts +49 -0
  31. package/src/access/PermissionEditor.tsx +486 -0
  32. package/src/access/ResourceApiKeys.tsx +271 -0
  33. package/src/access/messages.ts +121 -0
  34. package/src/access/ui.ts +16 -0
  35. package/src/account/Avatar.tsx +28 -0
  36. package/src/account/EntitySearch.tsx +363 -0
  37. package/src/account/avatar-upload-dialog.tsx +197 -0
  38. package/src/account/avatar-upload.ts +149 -0
  39. package/src/account/ui.ts +3 -0
  40. package/src/ai/admin.ts +47 -0
  41. package/src/ai/approval-routes.ts +130 -0
  42. package/src/ai/approvals.ts +139 -0
  43. package/src/ai/assistant-models.ts +61 -0
  44. package/src/ai/attachments.ts +40 -0
  45. package/src/ai/browser.ts +92 -0
  46. package/src/ai/capabilities.ts +714 -0
  47. package/src/ai/capability-execution.ts +151 -0
  48. package/src/ai/chat/blocks.render.test.tsx +1108 -0
  49. package/src/ai/chat/blocks.tsx +730 -0
  50. package/src/ai/chat/builtin-tools.tsx +428 -0
  51. package/src/ai/chat/capability-table.tsx +87 -0
  52. package/src/ai/chat/composer-adapter.ts +169 -0
  53. package/src/ai/chat/file-tools.tsx +81 -0
  54. package/src/ai/chat/message-actions.tsx +370 -0
  55. package/src/ai/chat/message-utils.ts +479 -0
  56. package/src/ai/chat/messages.ts +43 -0
  57. package/src/ai/chat/presentation.tsx +395 -0
  58. package/src/ai/chat/primitives.tsx +3 -0
  59. package/src/ai/chat/tool-disclosure.tsx +41 -0
  60. package/src/ai/chat/turn-navigator-utils.ts +28 -0
  61. package/src/ai/chat/turn-navigator.tsx +164 -0
  62. package/src/ai/chat/user-message.tsx +149 -0
  63. package/src/ai/chat/visual-tools.tsx +435 -0
  64. package/src/ai/chat/web-tools.tsx +202 -0
  65. package/src/ai/chat-task-contracts.ts +113 -0
  66. package/src/ai/chat-tasks.ts +952 -0
  67. package/src/ai/client/controller.ts +1211 -0
  68. package/src/ai/client/file-source.ts +95 -0
  69. package/src/ai/client/live-connection.ts +140 -0
  70. package/src/ai/client/projection.ts +178 -0
  71. package/src/ai/client/transport.ts +111 -0
  72. package/src/ai/compaction.ts +182 -0
  73. package/src/ai/credentials.ts +124 -0
  74. package/src/ai/default-tool-contracts.ts +108 -0
  75. package/src/ai/default-tools.ts +127 -0
  76. package/src/ai/enrich.ts +280 -0
  77. package/src/ai/executor.ts +1624 -0
  78. package/src/ai/fetch-file-tool.ts +313 -0
  79. package/src/ai/file-context.ts +92 -0
  80. package/src/ai/file-media-type.ts +28 -0
  81. package/src/ai/file-mount.ts +16 -0
  82. package/src/ai/file-tools.ts +566 -0
  83. package/src/ai/files-store.ts +390 -0
  84. package/src/ai/firecrawl-tools.ts +305 -0
  85. package/src/ai/grids-skill.ts +126 -0
  86. package/src/ai/http.ts +265 -0
  87. package/src/ai/index.ts +337 -0
  88. package/src/ai/kit-skill.ts +22 -0
  89. package/src/ai/limits.ts +5 -0
  90. package/src/ai/live-events.ts +289 -0
  91. package/src/ai/live-messages.ts +45 -0
  92. package/src/ai/live-outbox.ts +102 -0
  93. package/src/ai/live-routes.ts +412 -0
  94. package/src/ai/live.ts +2 -0
  95. package/src/ai/maintenance.ts +302 -0
  96. package/src/ai/markdown-pdf-tool.ts +95 -0
  97. package/src/ai/memories.ts +605 -0
  98. package/src/ai/memory-learning-runs.ts +222 -0
  99. package/src/ai/memory-learning.ts +619 -0
  100. package/src/ai/memory-tool.ts +120 -0
  101. package/src/ai/memory-workflow-evidence.ts +158 -0
  102. package/src/ai/migrate.ts +2082 -0
  103. package/src/ai/model-access-migrate.ts +30 -0
  104. package/src/ai/model-access.ts +191 -0
  105. package/src/ai/personal-agent.ts +6 -0
  106. package/src/ai/prefs.ts +72 -0
  107. package/src/ai/project-tool.ts +94 -0
  108. package/src/ai/projects-routes.ts +277 -0
  109. package/src/ai/projects.ts +902 -0
  110. package/src/ai/protocol.ts +279 -0
  111. package/src/ai/provider.ts +73 -0
  112. package/src/ai/public-projection.ts +25 -0
  113. package/src/ai/resource-markers.ts +31 -0
  114. package/src/ai/resource-refs.ts +70 -0
  115. package/src/ai/routes.ts +1131 -0
  116. package/src/ai/runtime-tools.ts +39 -0
  117. package/src/ai/runtime.ts +544 -0
  118. package/src/ai/settings.ts +529 -0
  119. package/src/ai/short-id.ts +45 -0
  120. package/src/ai/skill-catalog.ts +73 -0
  121. package/src/ai/skill-format.ts +145 -0
  122. package/src/ai/skill-seeds.ts +430 -0
  123. package/src/ai/skill-tool.ts +81 -0
  124. package/src/ai/skills-routes.ts +143 -0
  125. package/src/ai/skills.ts +934 -0
  126. package/src/ai/solid.ts +27 -0
  127. package/src/ai/store.ts +3113 -0
  128. package/src/ai/stream.ts +308 -0
  129. package/src/ai/structured-runs.ts +66 -0
  130. package/src/ai/structured.ts +186 -0
  131. package/src/ai/system-prompt.ts +170 -0
  132. package/src/ai/task-prompt.ts +22 -0
  133. package/src/ai/timeline.ts +148 -0
  134. package/src/ai/tool-audit.ts +177 -0
  135. package/src/ai/tool-result-budget.ts +16 -0
  136. package/src/ai/tools.ts +155 -0
  137. package/src/ai/types.ts +967 -0
  138. package/src/ai/ui.tsx +39 -0
  139. package/src/ai/usage-migrate.ts +81 -0
  140. package/src/ai/usage.ts +315 -0
  141. package/src/ai/validate.ts +54 -0
  142. package/src/ai/vision-tool.ts +79 -0
  143. package/src/api/accounts-entities.ts +174 -0
  144. package/src/api/admin-ai-projects.ts +74 -0
  145. package/src/api/admin-ai-skills.ts +76 -0
  146. package/src/api/admin-ai-usage.ts +42 -0
  147. package/src/api/admin-core-settings.ts +508 -0
  148. package/src/api/admin-identity.ts +148 -0
  149. package/src/api/admin-lifecycle.ts +206 -0
  150. package/src/api/admin-linux-identities.ts +66 -0
  151. package/src/api/announcements.ts +131 -0
  152. package/src/api/app-approval.ts +129 -0
  153. package/src/api/apps.ts +51 -0
  154. package/src/api/auth/schemas.ts +54 -0
  155. package/src/api/auth.ts +370 -0
  156. package/src/api/capabilities.ts +658 -0
  157. package/src/api/help-messages.ts +19 -0
  158. package/src/api/help.ts +78 -0
  159. package/src/api/index.ts +108 -0
  160. package/src/api/mcp.ts +744 -0
  161. package/src/api/me-rail.ts +45 -0
  162. package/src/api/me.ts +753 -0
  163. package/src/api/search/schemas.ts +79 -0
  164. package/src/api/search.bench.ts +185 -0
  165. package/src/api/search.ts +407 -0
  166. package/src/api/sync-ops.ts +79 -0
  167. package/src/api/widgets.ts +143 -0
  168. package/src/browser/CloudResourceSearch.behavior.test.tsx +74 -0
  169. package/src/browser/CloudResourceSearch.tsx +791 -0
  170. package/src/browser/app-approval-vault.ts +305 -0
  171. package/src/browser/app-approval.ts +234 -0
  172. package/src/browser/live-websocket.ts +268 -0
  173. package/src/browser/locale-preference.ts +25 -0
  174. package/src/browser/notification-target.ts +27 -0
  175. package/src/browser/notification-timeout.ts +14 -0
  176. package/src/browser/notifications.ts +181 -0
  177. package/src/browser/resource-clipboard.ts +70 -0
  178. package/src/browser/resource-picker.tsx +39 -0
  179. package/src/browser/resource-search-messages.ts +55 -0
  180. package/src/browser/resource-search.ts +27 -0
  181. package/src/capabilities/client.ts +149 -0
  182. package/src/capabilities/response.ts +39 -0
  183. package/src/capabilities/server.ts +215 -0
  184. package/src/capabilities/signals.ts +4 -0
  185. package/src/capabilities/testing.ts +12 -0
  186. package/src/capabilities/types.ts +32 -0
  187. package/src/cli/access.ts +499 -0
  188. package/src/cli/account.ts +382 -0
  189. package/src/cli/admin/account-administration.ts +45 -0
  190. package/src/cli/admin/account-categories.ts +49 -0
  191. package/src/cli/admin/ai-usage.ts +118 -0
  192. package/src/cli/admin/app-sign-in.ts +49 -0
  193. package/src/cli/admin/data.ts +343 -0
  194. package/src/cli/admin/documentation.ts +34 -0
  195. package/src/cli/admin/gateway.ts +155 -0
  196. package/src/cli/admin/index.ts +61 -0
  197. package/src/cli/admin/instance.ts +250 -0
  198. package/src/cli/admin/jobs.ts +223 -0
  199. package/src/cli/admin/legal.ts +122 -0
  200. package/src/cli/admin/linux.ts +53 -0
  201. package/src/cli/admin/logs.ts +324 -0
  202. package/src/cli/admin/metrics.ts +142 -0
  203. package/src/cli/admin/nats.ts +167 -0
  204. package/src/cli/admin/notifications.ts +516 -0
  205. package/src/cli/admin/shared.ts +113 -0
  206. package/src/cli/admin/sync.ts +188 -0
  207. package/src/cli/admin/telemetry.ts +314 -0
  208. package/src/cli/admin/webhooks.ts +222 -0
  209. package/src/cli/admin/workflows.ts +367 -0
  210. package/src/cli/apps.ts +40 -0
  211. package/src/cli/capabilities.ts +239 -0
  212. package/src/cli/commands.ts +604 -0
  213. package/src/cli/index.ts +61 -0
  214. package/src/cli/locale.ts +31 -0
  215. package/src/cli/output.ts +58 -0
  216. package/src/clients/core.ts +20 -0
  217. package/src/config/env.ts +54 -0
  218. package/src/config/index.ts +6 -0
  219. package/src/contracts/account-categories.ts +62 -0
  220. package/src/contracts/announcements.ts +121 -0
  221. package/src/contracts/app-approval.ts +197 -0
  222. package/src/contracts/app.ts +162 -0
  223. package/src/contracts/capabilities.ts +484 -0
  224. package/src/contracts/index.ts +14 -0
  225. package/src/contracts/notification-live.ts +66 -0
  226. package/src/contracts/notification-types.ts +235 -0
  227. package/src/contracts/posix.ts +69 -0
  228. package/src/contracts/profile.ts +85 -0
  229. package/src/contracts/rail-preferences.ts +53 -0
  230. package/src/contracts/registry.ts +110 -0
  231. package/src/contracts/resource-clipboard.ts +33 -0
  232. package/src/contracts/settings-types.ts +98 -0
  233. package/src/contracts/shared.ts +408 -0
  234. package/src/contracts/user-notifications.ts +101 -0
  235. package/src/contracts/widgets.ts +183 -0
  236. package/src/desktop/index.ts +704 -0
  237. package/src/desktop/solid.tsx +938 -0
  238. package/src/index.ts +58 -0
  239. package/src/server/actor.ts +41 -0
  240. package/src/server/api/index.ts +2 -0
  241. package/src/server/api/respond.ts +96 -0
  242. package/src/server/api-client.ts +54 -0
  243. package/src/server/app-context.ts +39 -0
  244. package/src/server/help.ts +187 -0
  245. package/src/server/index.ts +89 -0
  246. package/src/server/locale.ts +55 -0
  247. package/src/server/middleware/auth.ts +386 -0
  248. package/src/server/middleware/index.ts +28 -0
  249. package/src/server/middleware/invocation.ts +55 -0
  250. package/src/server/middleware/middleware.ts +65 -0
  251. package/src/server/middleware/openapi.ts +126 -0
  252. package/src/server/middleware/rate-limit.ts +125 -0
  253. package/src/server/middleware/request-logger.ts +41 -0
  254. package/src/server/middleware/route-template.ts +46 -0
  255. package/src/server/middleware/runtime.ts +22 -0
  256. package/src/server/middleware/settings.ts +55 -0
  257. package/src/server/middleware/validator.ts +49 -0
  258. package/src/server/middleware/workload.ts +22 -0
  259. package/src/server/ratelimit.ts +151 -0
  260. package/src/server/request-cookies.ts +18 -0
  261. package/src/server/services/access.ts +644 -0
  262. package/src/server/services/freeipa/client.ts +137 -0
  263. package/src/server/services/freeipa/index.ts +9 -0
  264. package/src/server/services/freeipa/session.ts +123 -0
  265. package/src/server/services/freeipa/test-certificates.ts +44 -0
  266. package/src/server/services/freeipa/tls.ts +44 -0
  267. package/src/server/services/freeipa/transport.ts +116 -0
  268. package/src/server/services/freeipa/util.ts +59 -0
  269. package/src/server/services/geo.ts +198 -0
  270. package/src/server/services/index.ts +48 -0
  271. package/src/server/services/pagination.ts +22 -0
  272. package/src/server/services/services.ts +13 -0
  273. package/src/server/time.ts +33 -0
  274. package/src/services/account-category-policy.ts +51 -0
  275. package/src/services/account-lifecycle/audit.ts +41 -0
  276. package/src/services/account-lifecycle/index.ts +940 -0
  277. package/src/services/account-lifecycle/ipa-backfill.ts +152 -0
  278. package/src/services/account-lifecycle/notification-sender.ts +13 -0
  279. package/src/services/account-lifecycle/scheduler.ts +506 -0
  280. package/src/services/account-model.ts +22 -0
  281. package/src/services/accounts/app.ts +1671 -0
  282. package/src/services/accounts/authz.ts +44 -0
  283. package/src/services/accounts/avatar.ts +120 -0
  284. package/src/services/accounts/base-group.ts +11 -0
  285. package/src/services/accounts/base-user.ts +46 -0
  286. package/src/services/accounts/duplicate-emails.ts +82 -0
  287. package/src/services/accounts/entities.ts +622 -0
  288. package/src/services/accounts/group-sql.ts +106 -0
  289. package/src/services/accounts/groups.ts +272 -0
  290. package/src/services/accounts/index.ts +14 -0
  291. package/src/services/accounts/ipa-data.ts +66 -0
  292. package/src/services/accounts/lifecycle.ts +2 -0
  293. package/src/services/accounts/local-groups.ts +499 -0
  294. package/src/services/accounts/model.ts +129 -0
  295. package/src/services/accounts/notification-sender.ts +31 -0
  296. package/src/services/accounts/posix.ts +386 -0
  297. package/src/services/accounts/request-policy.ts +11 -0
  298. package/src/services/accounts/switching.ts +126 -0
  299. package/src/services/accounts/users.ts +745 -0
  300. package/src/services/announcements/index.ts +224 -0
  301. package/src/services/app-approval.ts +498 -0
  302. package/src/services/audit/index.ts +438 -0
  303. package/src/services/auth-flows/index.ts +15 -0
  304. package/src/services/auth-flows/ipa.ts +197 -0
  305. package/src/services/auth-flows/magic-link.ts +185 -0
  306. package/src/services/auth-flows/notification-sender.ts +10 -0
  307. package/src/services/auth-flows/password-reset.ts +268 -0
  308. package/src/services/auth-flows/proxy-return.ts +49 -0
  309. package/src/services/document-extraction.ts +148 -0
  310. package/src/services/freeipa-config.ts +179 -0
  311. package/src/services/gateway.ts +186 -0
  312. package/src/services/identity/constants.ts +18 -0
  313. package/src/services/identity/index.ts +52 -0
  314. package/src/services/identity/invocation-actor.ts +120 -0
  315. package/src/services/identity/invocation-authority.ts +53 -0
  316. package/src/services/identity/invocation-operations.ts +15 -0
  317. package/src/services/identity/invocation-token.ts +276 -0
  318. package/src/services/identity/key-config.ts +41 -0
  319. package/src/services/identity/key-ring.ts +530 -0
  320. package/src/services/identity/metrics.ts +29 -0
  321. package/src/services/identity/routes.ts +18 -0
  322. package/src/services/identity/runtime-config.ts +88 -0
  323. package/src/services/identity/session-token.ts +152 -0
  324. package/src/services/identity/signer-refresh.ts +44 -0
  325. package/src/services/identity/workload-auth.ts +64 -0
  326. package/src/services/index.ts +187 -0
  327. package/src/services/ipa/auth.ts +216 -0
  328. package/src/services/ipa/connection.ts +57 -0
  329. package/src/services/ipa/effective-groups.ts +70 -0
  330. package/src/services/ipa/groups.ts +722 -0
  331. package/src/services/ipa/guard.ts +17 -0
  332. package/src/services/ipa/index.ts +17 -0
  333. package/src/services/ipa/posix.ts +19 -0
  334. package/src/services/ipa/profile.ts +132 -0
  335. package/src/services/ipa/runtime.ts +28 -0
  336. package/src/services/ipa/search.ts +154 -0
  337. package/src/services/ipa/service-account.ts +15 -0
  338. package/src/services/ipa/sync-planning.ts +100 -0
  339. package/src/services/ipa/sync.ts +862 -0
  340. package/src/services/ipa/users.ts +806 -0
  341. package/src/services/legal-consent.ts +76 -0
  342. package/src/services/logging/index.ts +477 -0
  343. package/src/services/logging/redaction.ts +20 -0
  344. package/src/services/logging/trace.ts +1231 -0
  345. package/src/services/mandates/index.ts +855 -0
  346. package/src/services/mandates/policy.ts +85 -0
  347. package/src/services/network-security.ts +31 -0
  348. package/src/services/notifications/batches.ts +722 -0
  349. package/src/services/notifications/browser.ts +252 -0
  350. package/src/services/notifications/catalog.ts +113 -0
  351. package/src/services/notifications/channels.ts +104 -0
  352. package/src/services/notifications/dispatcher.ts +139 -0
  353. package/src/services/notifications/email.ts +118 -0
  354. package/src/services/notifications/index.ts +633 -0
  355. package/src/services/notifications/live.ts +50 -0
  356. package/src/services/notifications/observability.ts +407 -0
  357. package/src/services/notifications/platform.ts +421 -0
  358. package/src/services/notifications/runtime.ts +120 -0
  359. package/src/services/notifications/user.ts +248 -0
  360. package/src/services/notifications/web-push-transport.ts +135 -0
  361. package/src/services/oauth-tokens.ts +209 -0
  362. package/src/services/outbox.ts +187 -0
  363. package/src/services/pdf/gotenberg.ts +290 -0
  364. package/src/services/pdf/index.ts +43 -0
  365. package/src/services/pdf/markdown.ts +209 -0
  366. package/src/services/pdf/template-preview.ts +122 -0
  367. package/src/services/postgres.ts +76 -0
  368. package/src/services/providers/index.ts +27 -0
  369. package/src/services/providers/local/auth.ts +51 -0
  370. package/src/services/providers/local/index.ts +4 -0
  371. package/src/services/providers/local/users.ts +263 -0
  372. package/src/services/rail-preferences.ts +27 -0
  373. package/src/services/runtime-lifecycle.ts +191 -0
  374. package/src/services/secrets.ts +10 -0
  375. package/src/services/service-account-credentials.ts +891 -0
  376. package/src/services/service-accounts.ts +184 -0
  377. package/src/services/session/index.ts +236 -0
  378. package/src/services/session/test-fixture.ts +18 -0
  379. package/src/services/session/user.ts +144 -0
  380. package/src/services/settings/api.ts +61 -0
  381. package/src/services/settings/app.ts +86 -0
  382. package/src/services/settings/core-settings.ts +796 -0
  383. package/src/services/settings/crypto.ts +69 -0
  384. package/src/services/settings/defaults.ts +374 -0
  385. package/src/services/settings/index.ts +215 -0
  386. package/src/services/settings/namespace.ts +9 -0
  387. package/src/services/settings/snapshot.ts +49 -0
  388. package/src/services/settings/store.ts +241 -0
  389. package/src/services/settings/templates.ts +4 -0
  390. package/src/services/sync-ops.ts +403 -0
  391. package/src/services/topic-cursor.ts +22 -0
  392. package/src/services/weather/forecast.ts +323 -0
  393. package/src/services/weather/geo.ts +119 -0
  394. package/src/services/weather/index.ts +67 -0
  395. package/src/services/weather/location.ts +24 -0
  396. package/src/services/weather/locations.ts +133 -0
  397. package/src/services/weather/migrate.ts +45 -0
  398. package/src/services/weather/settings.ts +66 -0
  399. package/src/services/weather/short-id.ts +57 -0
  400. package/src/services/weather/types.ts +61 -0
  401. package/src/services/weather/ui.ts +50 -0
  402. package/src/services/webauthn.ts +385 -0
  403. package/src/shared/account-action-notice.ts +70 -0
  404. package/src/shared/account-display.ts +15 -0
  405. package/src/shared/account-session.ts +15 -0
  406. package/src/shared/ai-platform-prompt.ts +134 -0
  407. package/src/shared/ai-usage.ts +49 -0
  408. package/src/shared/app-presentation.ts +48 -0
  409. package/src/shared/app-url.ts +12 -0
  410. package/src/shared/branding.ts +14 -0
  411. package/src/shared/capability-messages.ts +70 -0
  412. package/src/shared/email-html.ts +54 -0
  413. package/src/shared/format.ts +91 -0
  414. package/src/shared/help.ts +68 -0
  415. package/src/shared/icons.ts +400 -0
  416. package/src/shared/index.ts +54 -0
  417. package/src/shared/locale.ts +48 -0
  418. package/src/shared/login-method.ts +44 -0
  419. package/src/shared/markdown/client.ts +130 -0
  420. package/src/shared/markdown/extensions/code.ts +105 -0
  421. package/src/shared/markdown/extensions/guided-help.ts +100 -0
  422. package/src/shared/markdown/extensions/images.ts +79 -0
  423. package/src/shared/markdown/extensions/info-blocks.ts +97 -0
  424. package/src/shared/markdown/extensions/katex.ts +120 -0
  425. package/src/shared/markdown/extensions/links.ts +43 -0
  426. package/src/shared/markdown/extensions/mark.ts +48 -0
  427. package/src/shared/markdown/extensions/sub-sup.ts +60 -0
  428. package/src/shared/markdown/extensions/tables.ts +109 -0
  429. package/src/shared/markdown/extensions/task-list.ts +53 -0
  430. package/src/shared/markdown/formula.ts +1187 -0
  431. package/src/shared/markdown/index.ts +193 -0
  432. package/src/shared/markdown/shared.ts +36 -0
  433. package/src/shared/mock-cover.ts +130 -0
  434. package/src/shared/network-address.ts +106 -0
  435. package/src/shared/redirect.ts +56 -0
  436. package/src/shared/template-rendering.ts +140 -0
  437. package/src/shared/theme.ts +68 -0
  438. package/src/shared/time.ts +13 -0
  439. package/src/ssr/AdminLayout.tsx +53 -0
  440. package/src/ssr/AdminSidebar.tsx +50 -0
  441. package/src/ssr/AppLaunchpad.island.tsx +236 -0
  442. package/src/ssr/AppWorkspaceController.island.tsx +21 -0
  443. package/src/ssr/BrowserNotifications.island.tsx +135 -0
  444. package/src/ssr/GlobalAnnouncements.island.tsx +142 -0
  445. package/src/ssr/GlobalSearchDialog.behavior.test.tsx +96 -0
  446. package/src/ssr/GlobalSearchDialog.tsx +35 -0
  447. package/src/ssr/GlobalSearchHelpDialog.tsx +104 -0
  448. package/src/ssr/GlobalSearchTrigger.island.tsx +55 -0
  449. package/src/ssr/HotkeysHelpRail.island.tsx +55 -0
  450. package/src/ssr/Layout.render.test.tsx +148 -0
  451. package/src/ssr/Layout.tsx +292 -0
  452. package/src/ssr/LayoutBreadcrumbs.island.tsx +44 -0
  453. package/src/ssr/LayoutFooter.tsx +22 -0
  454. package/src/ssr/LayoutHeader.tsx +81 -0
  455. package/src/ssr/LayoutHelp.tsx +869 -0
  456. package/src/ssr/LayoutPreferences.island.tsx +36 -0
  457. package/src/ssr/LayoutRail.tsx +58 -0
  458. package/src/ssr/MinimalLayout.tsx +46 -0
  459. package/src/ssr/PageError.tsx +29 -0
  460. package/src/ssr/ProfilePreferences.island.tsx +92 -0
  461. package/src/ssr/RailApps.island.tsx +61 -0
  462. package/src/ssr/RailEditor.tsx +293 -0
  463. package/src/ssr/RegisteredHelpDocuments.island.tsx +3 -0
  464. package/src/ssr/TimezoneCookie.island.tsx +23 -0
  465. package/src/ssr/admin-active-link.ts +47 -0
  466. package/src/ssr/admin-navigation.ts +78 -0
  467. package/src/ssr/app-appearance.ts +23 -0
  468. package/src/ssr/app-navigation.ts +41 -0
  469. package/src/ssr/help-messages.ts +104 -0
  470. package/src/ssr/index.ts +14 -0
  471. package/src/ssr/islands/SearchBar.island.tsx +80 -0
  472. package/src/ssr/islands/index.ts +16 -0
  473. package/src/ssr/layout-context.ts +17 -0
  474. package/src/ssr/layout-help-markdown.ts +9 -0
  475. package/src/ssr/layout-help-navigation.ts +24 -0
  476. package/src/ssr/layout-help-url.ts +5 -0
  477. package/src/ssr/layout-runtime.ts +22 -0
  478. package/src/ssr/page-error-messages.ts +25 -0
  479. package/src/ssr/platform-messages.ts +135 -0
  480. package/src/ssr/preference-controller.ts +44 -0
  481. package/src/ssr/profile-preferences-messages.ts +29 -0
  482. package/src/ssr/rail-context.ts +21 -0
  483. package/src/ssr/rail-messages.ts +66 -0
  484. package/src/ssr/rail-navigation.ts +60 -0
  485. package/src/ssr/runtime.ts +31 -0
  486. package/src/ssr/url-filter.ts +127 -0
  487. package/src/styles/base-popover.css +36 -0
  488. package/src/styles/effects.css +851 -0
  489. package/src/styles/global.css +268 -0
  490. package/src/styles/input.css +58 -0
  491. package/src/styles/tokens.css +230 -0
  492. package/src/styles/utilities-buttons.css +405 -0
  493. package/src/styles/utilities-data.css +33 -0
  494. package/src/styles/utilities-feedback.css +232 -0
  495. package/src/styles/utilities-layout.css +603 -0
  496. package/src/styles/utilities-markdown-editor.css +525 -0
  497. package/src/styles/utilities-markdown-table.css +234 -0
  498. package/src/styles/utilities-navigation.css +1054 -0
  499. package/src/types/ambient.d.ts +24 -0
  500. package/src/workflows/ai/index.ts +17 -0
  501. package/src/workflows/ai/runtime.ts +286 -0
  502. package/src/workflows/ai/store.ts +314 -0
  503. package/src/workflows/ai/types.ts +111 -0
  504. package/src/workflows/ai-actions.ts +269 -0
  505. package/src/workflows/authoring.ts +88 -0
  506. package/src/workflows/builtins.ts +193 -0
  507. package/src/workflows/contracts.ts +280 -0
  508. package/src/workflows/definition.ts +334 -0
  509. package/src/workflows/editor.ts +113 -0
  510. package/src/workflows/index.ts +71 -0
  511. package/src/workflows/language/binder.ts +45 -0
  512. package/src/workflows/language/canonical.ts +29 -0
  513. package/src/workflows/language/compiler.ts +396 -0
  514. package/src/workflows/language/expressions.ts +34 -0
  515. package/src/workflows/language/index.ts +20 -0
  516. package/src/workflows/language/references.ts +55 -0
  517. package/src/workflows/language/schema.ts +134 -0
  518. package/src/workflows/language/strict-yaml.ts +131 -0
  519. package/src/workflows/manifest.ts +24 -0
  520. package/src/workflows/module.ts +12 -0
  521. package/src/workflows/runtime/coordinator.ts +115 -0
  522. package/src/workflows/runtime/executor.ts +1003 -0
  523. package/src/workflows/runtime/index.ts +60 -0
  524. package/src/workflows/runtime/instant.ts +8 -0
  525. package/src/workflows/runtime/ports.ts +213 -0
  526. package/src/workflows/runtime/schedule.ts +203 -0
  527. package/src/workflows/runtime/trigger.ts +37 -0
  528. package/src/workflows/runtime/wake.ts +13 -0
  529. package/src/workflows/store/actions.ts +438 -0
  530. package/src/workflows/store/budget.ts +145 -0
  531. package/src/workflows/store/definitions.ts +345 -0
  532. package/src/workflows/store/events.ts +383 -0
  533. package/src/workflows/store/index.ts +107 -0
  534. package/src/workflows/store/observability.ts +594 -0
  535. package/src/workflows/store/runs.ts +975 -0
  536. package/src/workflows/store/transaction.ts +23 -0
  537. package/src/workflows/store/worker.ts +439 -0
  538. package/src/workflows/testing/conformance.ts +72 -0
  539. package/src/workflows/testing/index.ts +11 -0
  540. package/src/workflows/testing/process-fixtures.ts +275 -0
@@ -0,0 +1,39 @@
1
+ export {
2
+ CLOUD_AI_DEFERRED_BUILTIN_TOOL_NAMES,
3
+ createCloudAiCardTool,
4
+ createCloudAiLocalBashTool,
5
+ createCloudAiSurveyTool,
6
+ createCloudAiTextEditorTool,
7
+ createConfiguredDefaultCloudAiTools,
8
+ createDefaultCloudAiTools,
9
+ } from "./default-tools";
10
+ export {
11
+ CloudAiCalculateInputSchema,
12
+ CloudAiCalculateOutputSchema,
13
+ CloudAiListFilesInputSchema,
14
+ CloudAiListFilesOutputSchema,
15
+ CloudAiPresentInputSchema,
16
+ CloudAiPresentOutputSchema,
17
+ CloudAiReadFileInputSchema,
18
+ CloudAiReadFileOutputSchema,
19
+ CloudAiWriteFileInputSchema,
20
+ CloudAiWriteFileOutputSchema,
21
+ createCloudAiCalculateTool,
22
+ createCloudAiListFilesTool,
23
+ createCloudAiPresentTool,
24
+ createCloudAiReadFileTool,
25
+ createCloudAiWriteFileTool,
26
+ evaluateAiDate,
27
+ evaluateAiMath,
28
+ } from "./file-tools";
29
+ export {
30
+ CloudAiFetchFileInputSchema,
31
+ CloudAiFetchFileOutputSchema,
32
+ createCloudAiFetchFileTool,
33
+ } from "./fetch-file-tool";
34
+ export {
35
+ CloudAiMarkdownToPdfInputSchema,
36
+ CloudAiMarkdownToPdfOutputSchema,
37
+ createCloudAiMarkdownToPdfTool,
38
+ } from "./markdown-pdf-tool";
39
+ export { createCloudAiViewImageTool } from "./vision-tool";
@@ -0,0 +1,544 @@
1
+ import { isDeepStrictEqual } from "node:util";
2
+ import type { InboundEvent, Input, Message } from "@k2b/nessi";
3
+ import type { QueueMessage } from "@k2b/sync";
4
+ import { z } from "zod";
5
+ import { lazySync } from "../_internal/process-sync";
6
+ import type { RequestActor } from "../server";
7
+ import { logger } from "../services/logging";
8
+ import { superviseRuntimeTask } from "../services/runtime-lifecycle";
9
+
10
+ import { type AiToolApprovalContext, aiTurnAllowsRememberedApprovals, rememberAiToolApproval } from "./approvals";
11
+ import { aiChatAccessSubject, selectAssistantAiModelId } from "./assistant-models";
12
+ import { AiTurnExecutor } from "./executor";
13
+ import { canonicalizeAiConversationAttachments, snapshotAiConversationFiles } from "./file-context";
14
+ import { startAiInvalidationRuntime, stopAiInvalidationRuntime } from "./live-outbox";
15
+ import { isAiVisionModelConfigured } from "./settings";
16
+ import { aiConversations } from "./store";
17
+ import { publishAiTurnAbort, publishAiWireEvent } from "./stream";
18
+ import { aiToolAudit } from "./tool-audit";
19
+ import type {
20
+ AiChatTurnRunConfig,
21
+ AiClientToolId,
22
+ AiCompactionTurnRunConfig,
23
+ AiConversationFileSnapshot,
24
+ AiConversationResourceObservation,
25
+ AiInterChatMessage,
26
+ AiModelPolicy,
27
+ AiPendingTurnAction,
28
+ AiStoredMessage,
29
+ AiTurn,
30
+ AiTurnFinalizedAction,
31
+ AiTurnFinalizedEvent,
32
+ AiTurnToolSource,
33
+ } from "./types";
34
+ import { isAiImageMediaType } from "./types";
35
+ import { validateAiTurnRequest } from "./validate";
36
+
37
+ export type { ValidateAiTurnInput } from "./validate";
38
+ export { isAiSettingsError, validateAiTurnRequest } from "./validate";
39
+
40
+ const log = logger("ai:runtime");
41
+
42
+ const AI_WORKER_ID = `worker-${crypto.randomUUID()}`;
43
+ const AI_TURN_LEASE_MS = 45_000;
44
+ const AI_TURN_HEARTBEAT_MS = 3_000;
45
+ const AI_TURN_WORKER_CONCURRENCY = 8;
46
+ const AI_TURN_MAX_ATTEMPTS = 5;
47
+ const AI_TURN_RUN_BUDGET_MS = 10 * 60_000;
48
+ const AI_SWEEP_INTERVAL_MS = 15_000;
49
+
50
+ // ---------------------------------------------------------------------------
51
+ // Queue
52
+ // ---------------------------------------------------------------------------
53
+
54
+ type AiTurnJob = { conversationId: string; turnId: string };
55
+
56
+ const aiTurnQueue = lazySync((sync) => {
57
+ const handle = sync.queue<AiTurnJob>({
58
+ id: "cloud-ai-turns",
59
+ owner: "cloud",
60
+ delivery: { ackWaitMs: AI_TURN_LEASE_MS, maxAttempts: 50 },
61
+ });
62
+
63
+ return handle;
64
+ });
65
+
66
+ // No idempotency key: the DB claim is the only gate, so re-enqueues (recovery,
67
+ // continuation, stale-sweep) are always allowed and never silently swallowed.
68
+ const enqueueAiTurn = (job: AiTurnJob): Promise<unknown> => aiTurnQueue().send({ data: job, orderingKey: job.conversationId });
69
+
70
+ /** Enqueue a turn created atomically by another durable AI workflow. */
71
+ export const enqueueExistingAiTurn = (input: AiTurnJob): Promise<unknown> => enqueueAiTurn(input);
72
+
73
+ // ---------------------------------------------------------------------------
74
+ // Submit
75
+ // ---------------------------------------------------------------------------
76
+
77
+ export type SubmitAiChatTurnInput = {
78
+ /** Only interactive Assistant HTTP handlers set this server-owned marker. */
79
+ assistantChat?: true;
80
+ conversationId: string;
81
+ /** Stable public ID exposed as runtime context, not instructions. */
82
+ chatId?: string;
83
+ input: Input;
84
+ userMessage: Message;
85
+ actor?: RequestActor;
86
+ locale?: string;
87
+ modelPolicy?: AiModelPolicy;
88
+ requestedModelId?: string;
89
+ /** Optional instructions that apply only to this turn. */
90
+ systemPrompt?: string;
91
+ project?: AiChatTurnRunConfig["project"];
92
+ clientToolIds?: AiClientToolId[];
93
+ toolSource?: AiTurnToolSource;
94
+ canInspectAttachedImages?: boolean;
95
+ toolApprovalContext?: AiToolApprovalContext;
96
+ /** Retry-in-place: drop active messages with seq >= this before creating the turn. */
97
+ truncateFromSeq?: number;
98
+ expectedDraftRevision?: number;
99
+ expectedProjectId?: string | null;
100
+ resources?: AiConversationResourceObservation[];
101
+ expectedFiles?: ReadonlyArray<{ path: string; version: number }>;
102
+ fileSnapshot?: AiConversationFileSnapshot;
103
+ retrySourceTurnId?: string;
104
+ };
105
+
106
+ export const submitAiChatTurn = async (input: SubmitAiChatTurnInput): Promise<{ turn: AiTurn; message: AiStoredMessage }> => {
107
+ if (input.clientToolIds?.length && input.toolSource?.kind !== "default") {
108
+ throw new Error("Optional client tools require the default tool source.");
109
+ }
110
+ const files = input.fileSnapshot ?? (await snapshotAiConversationFiles(input.conversationId, input.userMessage, input.expectedFiles));
111
+ const userMessage = canonicalizeAiConversationAttachments(input.userMessage, files);
112
+ const inputMessage = canonicalizeAiConversationAttachments(
113
+ { role: "user", content: typeof input.input === "string" ? [input.input] : input.input },
114
+ files,
115
+ );
116
+ const canonicalInput = files?.attached.length ? inputMessage.content : input.input;
117
+ const hasImageAttachments = Boolean(files?.attached.some((file) => isAiImageMediaType(file.mediaType)));
118
+ const canInspectAttachedImages =
119
+ input.canInspectAttachedImages ??
120
+ (input.toolSource?.kind === "default" && (await isAiVisionModelConfigured(input.modelPolicy?.allowedDataBoundaries)));
121
+ const requestedModelId = input.assistantChat
122
+ ? await selectAssistantAiModelId(aiChatAccessSubject(input.actor), input.requestedModelId, input.modelPolicy)
123
+ : input.requestedModelId;
124
+ const { resolved } = await validateAiTurnRequest({
125
+ input: canonicalInput,
126
+ hasImageAttachments,
127
+ canInspectAttachedImages,
128
+ modelPolicy: input.modelPolicy,
129
+ requestedModelId,
130
+ });
131
+ const runConfig: AiChatTurnRunConfig = {
132
+ kind: "chat",
133
+ ...(input.assistantChat ? { assistantChat: true } : {}),
134
+ input: canonicalInput,
135
+ chatId: input.chatId,
136
+ actor: input.actor,
137
+ ...(input.locale ? { locale: input.locale } : {}),
138
+ modelPolicy: input.modelPolicy,
139
+ requestedModelId,
140
+ systemPrompt: input.systemPrompt,
141
+ project: input.project,
142
+ files,
143
+ canInspectAttachedImages,
144
+ clientToolIds: input.clientToolIds,
145
+ toolSource: input.toolSource ?? { kind: "none" },
146
+ toolApprovalContext: input.toolApprovalContext,
147
+ };
148
+
149
+ const submitted = await aiConversations.submitChatTurn({
150
+ conversationId: input.conversationId,
151
+ modelProfileId: resolved.profile.id,
152
+ runConfig,
153
+ userMessage,
154
+ truncateFromSeq: input.truncateFromSeq,
155
+ expectedDraftRevision: input.expectedDraftRevision,
156
+ expectedProjectId: input.expectedProjectId,
157
+ resources: input.resources,
158
+ retrySourceTurnId: input.retrySourceTurnId,
159
+ });
160
+
161
+ await enqueueAiTurn({ conversationId: input.conversationId, turnId: submitted.turn.id });
162
+ return submitted;
163
+ };
164
+
165
+ export const deliverAiInterChatMessage = async (input: {
166
+ message: AiInterChatMessage;
167
+ chatId?: string;
168
+ actor: RequestActor;
169
+ locale?: string;
170
+ modelPolicy?: AiModelPolicy;
171
+ systemPrompt?: string;
172
+ project?: AiChatTurnRunConfig["project"];
173
+ sourceHref?: string;
174
+ toolSource?: AiTurnToolSource;
175
+ toolApprovalContext?: AiToolApprovalContext;
176
+ }): Promise<
177
+ { delivered: false; reason: "not_found" | "busy" | "failed" } | { delivered: true; message: AiInterChatMessage; turn: AiTurn }
178
+ > => {
179
+ const text = [`Assistant message from chat ${input.message.sourceChatId} (${input.message.sourceTitle}):`, input.message.text].join(
180
+ "\n\n",
181
+ );
182
+ const { resolved } = await validateAiTurnRequest({ input: text, modelPolicy: input.modelPolicy });
183
+ const runConfig: AiChatTurnRunConfig = {
184
+ kind: "chat",
185
+ input: text,
186
+ chatId: input.chatId,
187
+ actor: input.actor,
188
+ ...(input.locale ? { locale: input.locale } : {}),
189
+ modelPolicy: input.modelPolicy,
190
+ systemPrompt: input.systemPrompt,
191
+ project: input.project,
192
+ toolSource: input.toolSource ?? { kind: "none" },
193
+ toolApprovalContext: input.toolApprovalContext,
194
+ };
195
+ const delivered = await aiConversations.deliverInterChatMessage({
196
+ messageId: input.message.id,
197
+ modelProfileId: resolved.profile.id,
198
+ runConfig,
199
+ userMessage: { role: "user", content: [{ type: "text", text }] },
200
+ sourceHref: input.sourceHref,
201
+ });
202
+ if (delivered.delivered) await enqueueAiTurn({ conversationId: delivered.message.targetConversationId, turnId: delivered.turn.id });
203
+ return delivered;
204
+ };
205
+
206
+ export type SubmitAiCompactionInput = {
207
+ conversationId: string;
208
+ actor?: RequestActor;
209
+ modelPolicy?: AiModelPolicy;
210
+ requestedModelId?: string;
211
+ };
212
+
213
+ export const submitAiCompaction = async (input: SubmitAiCompactionInput): Promise<{ turn: AiTurn }> => {
214
+ const { resolved } = await validateAiTurnRequest({ input: "", modelPolicy: input.modelPolicy, requestedModelId: input.requestedModelId });
215
+ const runConfig: AiCompactionTurnRunConfig = {
216
+ kind: "compact",
217
+ actor: input.actor,
218
+ modelPolicy: input.modelPolicy,
219
+ requestedModelId: input.requestedModelId,
220
+ };
221
+ const turn = await aiConversations.createCompactionTurn({
222
+ conversationId: input.conversationId,
223
+ modelProfileId: resolved.profile.id,
224
+ runConfig,
225
+ });
226
+ await enqueueAiTurn({ conversationId: input.conversationId, turnId: turn.id });
227
+ return { turn };
228
+ };
229
+
230
+ // ---------------------------------------------------------------------------
231
+ // Abort
232
+ // ---------------------------------------------------------------------------
233
+
234
+ export const abortAiTurn = async (input: { conversationId: string; turnId: string }): Promise<{ ok: true }> => {
235
+ // Capture the wire coordinates before finalization so we can emit turn_finished.
236
+ const active = await aiConversations.getActiveTurn({ conversationId: input.conversationId }).catch(() => null);
237
+ const request = await aiConversations.requestTurnAbort({ ...input, reason: "user" });
238
+ if (!request.found) return { ok: true };
239
+
240
+ // Tell any live owner to stop (its heartbeat also detects the cancel flag).
241
+ await publishAiTurnAbort(input).catch(() => undefined);
242
+
243
+ if (request.ownerless) {
244
+ const finalized = await aiConversations.completeTurn({ ...input, status: "aborted", error: null });
245
+ if (finalized === "completed") {
246
+ const attempt = active?.turn.id === input.turnId ? active.turn.attempt : 1;
247
+ const seq = (active?.turn.id === input.turnId ? active.liveSeq : 0) + 1;
248
+ await publishAiWireEvent({
249
+ v: 1,
250
+ conversationId: input.conversationId,
251
+ turnId: input.turnId,
252
+ attempt,
253
+ seq,
254
+ type: "turn_finished",
255
+ status: "aborted",
256
+ error: null,
257
+ }).catch(() => undefined);
258
+ }
259
+ }
260
+ return { ok: true };
261
+ };
262
+
263
+ // ---------------------------------------------------------------------------
264
+ // Actions (approvals + frontend tool results)
265
+ // ---------------------------------------------------------------------------
266
+
267
+ export const AiTurnActionSchema = z.discriminatedUnion("type", [
268
+ z.object({ type: z.literal("approval_response"), approved: z.boolean(), remember: z.literal("always").optional() }),
269
+ z.object({ type: z.literal("tool_result"), result: z.unknown() }),
270
+ ]);
271
+ export type AiTurnActionInput = z.infer<typeof AiTurnActionSchema>;
272
+
273
+ const actionMatchesResolvedEvent = (action: AiTurnActionInput, event: InboundEvent | null, callId: string): boolean => {
274
+ if (!event || event.callId !== callId) return false;
275
+ if (action.type === "approval_response") return event.type === "approval_response" && event.approved === action.approved;
276
+ return event.type === "tool_result" && isDeepStrictEqual(event.result, action.result);
277
+ };
278
+
279
+ export const listPendingAiTurnActions = async (input: { conversationId: string; turnId: string }): Promise<AiPendingTurnAction[]> => {
280
+ const [actions, config] = await Promise.all([aiConversations.listPendingTurnActions(input), aiConversations.getTurnRunConfig(input)]);
281
+ return aiTurnAllowsRememberedApprovals(config)
282
+ ? actions
283
+ : actions.map((action) => (action.type === "approval_request" ? { ...action, allowAlways: false } : action));
284
+ };
285
+
286
+ export const submitAiTurnAction = async (input: {
287
+ conversationId: string;
288
+ turnId: string;
289
+ callId: string;
290
+ action: AiTurnActionInput;
291
+ toolApprovalContext?: AiToolApprovalContext;
292
+ }): Promise<{ ok: true } | { ok: false; status: 400 | 404 | 409; message: string }> => {
293
+ const pending = await aiConversations.getPendingTurnAction(input);
294
+ if (!pending) return { ok: false, status: 404, message: "This request has expired — the assistant already moved on." };
295
+ if (pending.status === "resolved") {
296
+ if (!actionMatchesResolvedEvent(input.action, pending.resolvedEvent, input.callId)) {
297
+ return { ok: false, status: 409, message: "AI action was already resolved with a different response." };
298
+ }
299
+ // Idempotent retry: ensure a continuation is queued and return success.
300
+ await enqueueAiTurn({ conversationId: input.conversationId, turnId: input.turnId }).catch(() => undefined);
301
+ return { ok: true };
302
+ }
303
+ if (pending.status !== "pending") {
304
+ return { ok: false, status: 404, message: "This request has expired — the assistant already moved on." };
305
+ }
306
+
307
+ if (input.action.type === "approval_response") {
308
+ if (pending.kind === "client_tool") return { ok: false, status: 400, message: "Frontend tool requests require a tool result." };
309
+ if (input.action.remember === "always") {
310
+ const config = await aiConversations.getTurnRunConfig(input);
311
+ if (!input.action.approved || !pending.allowAlways || !input.toolApprovalContext || !aiTurnAllowsRememberedApprovals(config)) {
312
+ return { ok: false, status: 400, message: "This approval cannot be remembered." };
313
+ }
314
+ await rememberAiToolApproval(input.toolApprovalContext, { toolName: pending.name, approvalScope: pending.approvalScope });
315
+ }
316
+ await aiToolAudit
317
+ .noteApprovalResolved({
318
+ turnId: input.turnId,
319
+ callId: input.callId,
320
+ approvalState: input.action.approved ? (input.action.remember === "always" ? "approved_always" : "approved_once") : "rejected",
321
+ })
322
+ .catch(() => undefined);
323
+
324
+ const resolved = await aiConversations.resolvePendingTurnAction({
325
+ ...input,
326
+ event: { type: "approval_response", callId: input.callId, approved: input.action.approved },
327
+ });
328
+ if (!resolved) {
329
+ const raced = await aiConversations.getPendingTurnAction(input);
330
+ if (!raced || !actionMatchesResolvedEvent(input.action, raced.resolvedEvent, input.callId)) {
331
+ return { ok: false, status: 409, message: "AI action was already resolved with a different response." };
332
+ }
333
+ }
334
+ } else {
335
+ if (pending.kind !== "client_tool") return { ok: false, status: 400, message: "Approval requests require an approval response." };
336
+ const resolved = await aiConversations.resolvePendingTurnAction({
337
+ ...input,
338
+ event: { type: "tool_result", callId: input.callId, result: input.action.result },
339
+ });
340
+ if (!resolved) {
341
+ const raced = await aiConversations.getPendingTurnAction(input);
342
+ if (!raced || !actionMatchesResolvedEvent(input.action, raced.resolvedEvent, input.callId)) {
343
+ return { ok: false, status: 409, message: "AI action was already resolved with a different response." };
344
+ }
345
+ }
346
+ await aiToolAudit
347
+ .noteToolCompleted({ turnId: input.turnId, callId: input.callId, result: input.action.result, isError: false })
348
+ .catch(() => undefined);
349
+ }
350
+
351
+ await enqueueAiTurn({ conversationId: input.conversationId, turnId: input.turnId });
352
+ return { ok: true };
353
+ };
354
+
355
+ // ---------------------------------------------------------------------------
356
+ // Worker + sweep lifecycle
357
+ // ---------------------------------------------------------------------------
358
+
359
+ const runClaimedTurn = async (
360
+ job: AiTurnJob,
361
+ signal: AbortSignal,
362
+ leaseOwner: string,
363
+ onTurnFinalized?: (event: AiTurnFinalizedEvent) => Promise<void>,
364
+ ): Promise<void> => {
365
+ const claim =
366
+ (await aiConversations.claimTurn({
367
+ ...job,
368
+ leaseOwner,
369
+ leaseMs: AI_TURN_LEASE_MS,
370
+ from: "queue",
371
+ maxAttempts: AI_TURN_MAX_ATTEMPTS,
372
+ runBudgetMs: AI_TURN_RUN_BUDGET_MS,
373
+ })) ??
374
+ (await aiConversations.claimTurn({
375
+ ...job,
376
+ leaseOwner,
377
+ leaseMs: AI_TURN_LEASE_MS,
378
+ from: "waiting",
379
+ maxAttempts: AI_TURN_MAX_ATTEMPTS,
380
+ runBudgetMs: AI_TURN_RUN_BUDGET_MS,
381
+ }));
382
+
383
+ if (!claim) return; // Already owned, done, cancelled, or attempt-capped.
384
+
385
+ const executor = new AiTurnExecutor({
386
+ leaseOwner,
387
+ heartbeatMs: AI_TURN_HEARTBEAT_MS,
388
+ enqueueContinuation: (input) => enqueueAiTurn(input).then(() => undefined),
389
+ onTurnFinalized,
390
+ });
391
+ await executor.run({ conversationId: job.conversationId, turnId: job.turnId, claim, signal });
392
+ };
393
+
394
+ const processMessage = async (
395
+ message: QueueMessage<AiTurnJob>,
396
+ signal: AbortSignal,
397
+ onTurnFinalized?: (event: AiTurnFinalizedEvent) => Promise<void>,
398
+ ): Promise<void> => {
399
+ const leaseOwner = `${AI_WORKER_ID}:${message.messageId}:${crypto.randomUUID()}`;
400
+ const touch = setInterval(() => void message.heartbeat().catch(() => undefined), AI_TURN_HEARTBEAT_MS);
401
+ if (typeof touch === "object" && "unref" in touch) touch.unref();
402
+ try {
403
+ await runClaimedTurn(message.data, signal, leaseOwner, onTurnFinalized);
404
+ } catch (error) {
405
+ log.error("AI turn worker error", {
406
+ conversationId: message.data.conversationId,
407
+ turnId: message.data.turnId,
408
+ error: error instanceof Error ? error.message : "AI turn worker failed",
409
+ });
410
+ } finally {
411
+ clearInterval(touch);
412
+ }
413
+ };
414
+
415
+ const publishSweepFinished = async (turn: AiTurnFinalizedAction & { error?: string }, status: "failed" | "aborted"): Promise<void> => {
416
+ await publishAiWireEvent({
417
+ v: 1,
418
+ conversationId: turn.conversationId,
419
+ turnId: turn.turnId,
420
+ attempt: turn.attempt,
421
+ seq: turn.seq,
422
+ type: "turn_finished",
423
+ status,
424
+ error: status === "failed" ? (turn.error ?? "AI turn failed.") : null,
425
+ }).catch(() => undefined);
426
+ };
427
+
428
+ export const sweepAiRuntime = async (onTurnFinalized?: (event: AiTurnFinalizedEvent) => Promise<void>): Promise<void> => {
429
+ const sweep = await aiConversations.sweepTurns({ maxAttempts: AI_TURN_MAX_ATTEMPTS });
430
+ await Promise.all([
431
+ ...sweep.requeued.map((job) => enqueueAiTurn(job).catch(() => undefined)),
432
+ ...sweep.failed.map((turn) => publishSweepFinished(turn, "failed")),
433
+ ...sweep.aborted.map((turn) => publishSweepFinished(turn, "aborted")),
434
+ ]);
435
+ if (onTurnFinalized) {
436
+ await Promise.all([
437
+ ...sweep.failed.map((turn) =>
438
+ onTurnFinalized({ conversationId: turn.conversationId, turnId: turn.turnId, status: "failed", kind: null }),
439
+ ),
440
+ ...sweep.aborted.map((turn) =>
441
+ onTurnFinalized({ conversationId: turn.conversationId, turnId: turn.turnId, status: "aborted", kind: null }),
442
+ ),
443
+ ]);
444
+ }
445
+ if (sweep.requeued.length || sweep.failed.length || sweep.aborted.length) {
446
+ log.info("AI runtime sweep", { requeued: sweep.requeued.length, failed: sweep.failed.length, aborted: sweep.aborted.length });
447
+ }
448
+ };
449
+
450
+ type AiRuntimeState = {
451
+ listeners: Set<(event: AiTurnFinalizedEvent) => Promise<void>>;
452
+ stop: () => void;
453
+ };
454
+
455
+ let running: AiRuntimeState | null = null;
456
+ let refCount = 0;
457
+
458
+ export const startAiRuntime = (
459
+ input: { concurrency?: number; onTurnFinalized?: (event: AiTurnFinalizedEvent) => Promise<void> } = {},
460
+ ): (() => void) => {
461
+ const listener = input.onTurnFinalized ? (event: AiTurnFinalizedEvent) => input.onTurnFinalized!(event) : null;
462
+ if (running) {
463
+ refCount += 1;
464
+ if (listener) running.listeners.add(listener);
465
+ return releaseAiRuntime(listener);
466
+ }
467
+
468
+ const concurrency = Math.min(Math.max(Math.floor(input.concurrency ?? AI_TURN_WORKER_CONCURRENCY), 1), 64);
469
+ const controller = new AbortController();
470
+ const listeners = new Set<(event: AiTurnFinalizedEvent) => Promise<void>>();
471
+ if (listener) listeners.add(listener);
472
+ refCount = 1;
473
+ const dispatchTurnFinalized = async (event: AiTurnFinalizedEvent): Promise<void> => {
474
+ const results = await Promise.allSettled([...listeners].map((notify) => notify(event)));
475
+ const errors = results.filter((result): result is PromiseRejectedResult => result.status === "rejected").map((result) => result.reason);
476
+ if (errors.length > 0) throw new AggregateError(errors, `${errors.length} AI turn finalized listener(s) failed`);
477
+ };
478
+
479
+ void superviseRuntimeTask({
480
+ name: "AI turn worker",
481
+ signal: controller.signal,
482
+ run: async (signal) => {
483
+ const worker = await aiTurnQueue().process({ concurrency, signal }, (message) =>
484
+ processMessage(message, message.signal, dispatchTurnFinalized),
485
+ );
486
+ try {
487
+ await new Promise<void>((resolve) => {
488
+ if (signal.aborted) resolve();
489
+ else signal.addEventListener("abort", () => resolve(), { once: true });
490
+ });
491
+ } finally {
492
+ worker.stop();
493
+ }
494
+ },
495
+ onError: ({ error, failureCount, retryInMs }) =>
496
+ log.error("AI turn worker failed to start; retrying", {
497
+ error: error instanceof Error ? error.message : String(error),
498
+ failureCount,
499
+ retryInMs,
500
+ }),
501
+ });
502
+
503
+ const runSweep = () =>
504
+ void sweepAiRuntime(dispatchTurnFinalized).catch((error) =>
505
+ log.warn("AI runtime sweep failed", { error: error instanceof Error ? error.message : "sweep failed" }),
506
+ );
507
+ runSweep();
508
+ const sweepTimer = setInterval(runSweep, AI_SWEEP_INTERVAL_MS);
509
+ if (typeof sweepTimer === "object" && "unref" in sweepTimer) sweepTimer.unref();
510
+
511
+ const state: AiRuntimeState = {
512
+ listeners,
513
+ stop: () => {
514
+ if (running !== state) return;
515
+ controller.abort();
516
+ clearInterval(sweepTimer);
517
+ listeners.clear();
518
+ running = null;
519
+ refCount = 0;
520
+ },
521
+ };
522
+ running = state;
523
+ startAiInvalidationRuntime();
524
+ log.info("AI runtime started", { workerId: AI_WORKER_ID, concurrency });
525
+ return releaseAiRuntime(listener);
526
+ };
527
+
528
+ const releaseAiRuntime = (listener: ((event: AiTurnFinalizedEvent) => Promise<void>) | null): (() => void) => {
529
+ let released = false;
530
+ return () => {
531
+ if (released) return;
532
+ released = true;
533
+ const state = running;
534
+ if (!state) return;
535
+ if (listener) state.listeners.delete(listener);
536
+ refCount = Math.max(0, refCount - 1);
537
+ if (refCount === 0) {
538
+ state.stop();
539
+ void stopAiInvalidationRuntime();
540
+ }
541
+ };
542
+ };
543
+
544
+ export const __aiRuntimeTest = { actionMatchesResolvedEvent };