@k2b/cloud 0.7.0 → 0.9.0

package/src/ssr/GlobalSearchDialog.tsx

@@ -1,18 +1,18 @@
-import { type DialogRender, dialogCore, toast, useLocale } from "@k2b/ui";
 import { query } from "@k2b/stdlib/solid";
-import { resolveCommand } from "../capabilities/client";
-import { COMMANDS_CHANGED, collectContextAwareCommands } from "../browser/command-bridge";
-import { contextCommandsWithShortcuts } from "../browser/command-shortcuts";
-import { openCommand, runContextAwareCommand } from "../browser/commands";
-import { loadSearchCommands, type PaletteCommand } from "../browser/search-commands";
+import { type DialogRender, dialogCore, toast, useLocale } from "@k2b/ui";
 import { createEffect, createSignal, For, onCleanup, onMount } from "solid-js";
 import type { SearchItem } from "../api/search/schemas";
 import CloudResourceSearch from "../browser/CloudResourceSearch";
+import { COMMANDS_CHANGED, collectContextAwareCommands } from "../browser/command-bridge";
+import { contextCommandsWithShortcuts } from "../browser/command-shortcuts";
+import { openCommand, runContextAwareCommand } from "../browser/commands";
 import type { NavigationSearchItem } from "../browser/navigation-search";
 import { resourceSearchDialogOptions } from "../browser/resource-search-dialog";
 import { resourceSearchMessages } from "../browser/resource-search-messages";
 import { type GlobalSearchOptions, requestSearchNavigation } from "../browser/search-bridge";
+import { loadSearchCommands, type PaletteCommand } from "../browser/search-commands";
 import { attachSpotlightPosition } from "../browser/spotlight-position";
+import { resolveCommand } from "../capabilities/client";
 
 type GlobalSearchDialogProps = {
   request?: GlobalSearchOptions;

package/src/ssr/GlobalSearchTrigger.island.tsx

@@ -1,7 +1,7 @@
-import { registerContextAwareCommand, runContextAwareCommand } from "../browser/commands";
-import { attachCommandShortcuts } from "../browser/command-shortcuts";
 import { IconButton, Tooltip, useLocale } from "@k2b/ui";
 import { createEffect, onCleanup, onMount } from "solid-js";
+import { attachCommandShortcuts } from "../browser/command-shortcuts";
+import { registerContextAwareCommand, runContextAwareCommand } from "../browser/commands";
 import type { NavigationSearchItem } from "../browser/navigation-search";
 import { openGlobalSearch } from "../browser/search";
 import { registerGlobalSearchHost } from "../browser/search-bridge";

package/src/ssr/Layout.tsx

@@ -1,9 +1,8 @@
-import { getLayoutHelp } from "./help";
-import { navigationSearchItems } from "../browser/navigation-search";
 import type { DateContext } from "@k2b/stdlib";
 import { AppWorkspace, appWorkspaceLayoutStyle, LocaleProvider, NoticeCard } from "@k2b/ui";
 import type { JSX } from "solid-js/jsx-runtime";
 import { readAppWorkspaceLayoutCookie, resolveAppWorkspaceLayoutForSidebar } from "../_internal/app-workspace-state";
+import { navigationSearchItems } from "../browser/navigation-search";
 import { resolveNavMatch } from "../contracts/app"; // ==========================
 import { defaultRailPreferences } from "../contracts/rail-preferences";
 import { hasRole, type User } from "../contracts/shared";
@@ -18,6 +17,7 @@ import { visibleNavigationApps } from "./app-navigation";
 import BrowserPushRegistration from "./BrowserPushRegistration.island";
 import GlobalAnnouncements from "./GlobalAnnouncements.island";
 import type { GlobalSearchHelpApp } from "./GlobalSearchHelpDialog";
+import { getLayoutHelp } from "./help";
 import LayoutFooter from "./LayoutFooter";
 import LayoutHeader from "./LayoutHeader";
 import LayoutRail, { type LayoutAppLink } from "./LayoutRail";
@@ -26,6 +26,7 @@ import type { LayoutBreadcrumb } from "./layout-runtime";
 import { platformMessages } from "./platform-messages";
 import RegisteredHelpDocuments from "./RegisteredHelpDocuments.island";
 import { sortRailApps } from "./rail-navigation";
+import { requestPath } from "./request-path";
 import { getLocalizedRuntimeContext, type RuntimeContext } from "./runtime";
 import TimezoneCookie from "./TimezoneCookie.island";
 
@@ -257,7 +258,7 @@ export default function Layout(props: LayoutProps) {
             openAppsLabel={t.openApps}
             apps={allApps}
             railSettings={c.get("railPreferences") ?? defaultRailPreferences()}
-            currentUrl={c.req.raw.url}
+            currentPath={requestPath(c)}
             profileAvatarSrc={profileAvatarSrc}
             profileName={profileName}
             searchHelpApps={searchHelpApps}

package/src/ssr/LayoutHeader.tsx

@@ -4,8 +4,8 @@ import type { CloudTheme } from "../shared/theme";
 import AppLaunchpad, { type AppLaunchpadApp } from "./AppLaunchpad.island";
 import type { GlobalSearchHelpApp } from "./GlobalSearchHelpDialog";
 import GlobalSearchTrigger from "./GlobalSearchTrigger.island";
-import LayoutHelpTrigger from "./LayoutHelpTrigger.island";
 import LayoutBreadcrumbs from "./LayoutBreadcrumbs.island";
+import LayoutHelpTrigger from "./LayoutHelpTrigger.island";
 import LayoutPreferences from "./LayoutPreferences.island";
 import type { LayoutBreadcrumb } from "./layout-runtime";
 import ProfilePreferences from "./ProfilePreferences.island";

package/src/ssr/LayoutHelp.tsx

@@ -1,14 +1,14 @@
-import { COMMANDS_CHANGED, contextCommandsWithShortcuts, shortcutLabel } from "../browser/command-shortcuts";
-import { searchHelpTopics } from "./layout-help-search";
+import type { HelpDocumentManifest, HelpDocumentPayload, HelpSearchPayload } from "@k2b/cloud/shared";
 import { clipboard } from "@k2b/stdlib/solid";
 import { Button, IconButton, IconButtonLink, MarkdownView, NoticeCard, Placeholder, prompts, ScrollArea, useLocale } from "@k2b/ui";
-import type { HelpDocumentManifest, HelpDocumentPayload, HelpSearchPayload } from "@k2b/cloud/shared";
 import { createEffect, createMemo, createSignal, For, type JSX, onCleanup, onMount, Show } from "solid-js";
+import { COMMANDS_CHANGED, contextCommandsWithShortcuts, shortcutLabel } from "../browser/command-shortcuts";
 import { appAccentStyle } from "./app-appearance";
 import { type GlobalSearchHelpApp, openGlobalSearchHelpDialog } from "./GlobalSearchHelpDialog";
 import { helpMessages } from "./help-messages";
 import { formatHelpBundleMarkdown, formatHelpDocumentMarkdown } from "./layout-help-markdown";
 import { adjacentHelpDocuments, focusHelpArticleHeading, resetHelpArticleScroll } from "./layout-help-navigation";
+import { searchHelpTopics } from "./layout-help-search";
 import { layoutHelpTopicHref } from "./layout-help-url";
 
 type HelpTopicBase = {
@@ -114,9 +114,7 @@ const Shortcuts = (props: { openSearchHelp: () => void }) => {
     window.addEventListener(COMMANDS_CHANGED, update);
     onCleanup(() => window.removeEventListener(COMMANDS_CHANGED, update));
   });
-  const entries = createMemo(() =>
-    commands().filter((command) => command.shortcut),
-  );
+  const entries = createMemo(() => commands().filter((command) => command.shortcut));
   return (
     <div class="flex flex-col gap-3">
       <p class="text-sm leading-relaxed text-dimmed">{t().shortcutsIntro}</p>

package/src/ssr/LayoutHelpTrigger.island.tsx

@@ -1,6 +1,6 @@
-import { registerContextAwareCommand } from "../browser/commands";
-import { createEffect, onCleanup } from "solid-js";
 import { IconButton, Tooltip, useLocale } from "@k2b/ui";
+import { createEffect, onCleanup } from "solid-js";
+import { registerContextAwareCommand } from "../browser/commands";
 import type { GlobalSearchHelpApp } from "./GlobalSearchHelpDialog";
 import { openLayoutHelpDialog } from "./LayoutHelp";
 import { platformMessages } from "./platform-messages";

package/src/ssr/LayoutRail.tsx

@@ -19,7 +19,8 @@ type LayoutRailProps = {
   openAppsLabel: string;
   apps: RailApp[];
   railSettings: RailSnapshot;
-  currentUrl: string;
+  /** `pathname + search` of the request; the island resolves it against the browser origin. */
+  currentPath: string;
   profileAvatarSrc?: string;
   profileName: string;
   searchHelpApps: GlobalSearchHelpApp[];
@@ -46,7 +47,7 @@ export default function LayoutRail(props: LayoutRailProps) {
           </a>
         </div>
         <nav class="layout-rail-navigation flex min-h-0 flex-1 flex-col items-center gap-1" aria-label={props.appsLabel}>
-          <RailApps apps={props.apps} settings={props.railSettings} currentUrl={props.currentUrl} />
+          <RailApps apps={props.apps} settings={props.railSettings} currentPath={props.currentPath} />
           <AppLaunchpad
             profile={{ name: props.profileName, theme: props.theme }}
             apps={props.launchpadApps}

package/src/ssr/MinimalLayout.tsx

@@ -2,8 +2,8 @@ import { LocaleProvider } from "@k2b/ui";
 import type { JSX } from "solid-js/jsx-runtime";
 import { getLocale } from "../server/locale";
 import { readThemeFromCookieHeader } from "../shared/theme";
-import type { MinimalLayoutContext } from "./layout-context";
 import LayoutPreferences from "./LayoutPreferences.island";
+import type { MinimalLayoutContext } from "./layout-context";
 import TimezoneCookie from "./TimezoneCookie.island";
 
 export type MinimalLayoutPreferencePosition = "top-left" | "top-right" | "bottom-left" | "bottom-right";

package/src/ssr/MobileNavigation.tsx

@@ -1,9 +1,9 @@
 import { BottomSheet, Navigation, SegmentedControl, useLocale } from "@k2b/ui";
 import { createSignal, onCleanup, Show } from "solid-js";
-import { AppLaunchpadPanel, type AppLaunchpadContext } from "./AppLaunchpadPanel";
+import { type AppLaunchpadContext, AppLaunchpadPanel } from "./AppLaunchpadPanel";
 import { openMobileMenu } from "./mobile-menu-history";
-import { observeWorkspaceNavigation, readWorkspaceNavigation } from "./workspace-navigation";
 import { platformMessages } from "./platform-messages";
+import { observeWorkspaceNavigation, readWorkspaceNavigation } from "./workspace-navigation";
 
 export function openCloudMobileMenu(apps: AppLaunchpadContext) {
   return openMobileMenu((beforeSelect) => (close, context) => (

package/src/ssr/ProfilePreferences.island.tsx

@@ -1,6 +1,6 @@
-import { createProfileActions } from "./profile-actions";
 import { Avatar, Dropdown } from "@k2b/ui";
 import type { CloudTheme } from "../shared/theme";
+import { createProfileActions } from "./profile-actions";
 
 type ProfilePreferencesProps = {
   avatarSrc?: string;

package/src/ssr/RailApps.island.tsx

@@ -5,9 +5,9 @@ import { appAccentStyle } from "./app-appearance";
 import { RAIL_PREFERENCES_EVENT, readRailContext } from "./rail-context";
 import { projectRailNavigation, type RailApp, type RailLink, railLinkActive } from "./rail-navigation";
 
-function RailIcon(props: { link: RailLink; currentUrl: string }) {
+function RailIcon(props: { link: RailLink; currentPath: string }) {
   let target: HTMLAnchorElement | undefined;
-  const active = () => railLinkActive(props.link, props.currentUrl);
+  const active = () => railLinkActive(props.link, props.currentPath);
   return (
     <>
       <a
@@ -26,14 +26,14 @@ function RailIcon(props: { link: RailLink; currentUrl: string }) {
   );
 }
 
-export default function RailApps(props: { apps: RailApp[]; settings: RailSnapshot; currentUrl: string }) {
+export default function RailApps(props: { apps: RailApp[]; settings: RailSnapshot; currentPath: string }) {
   const locale = useLocale();
   const [settings, setSettings] = createSignal(props.settings);
-  const [currentUrl, setCurrentUrl] = createSignal(props.currentUrl);
+  const [currentPath, setCurrentPath] = createSignal(props.currentPath);
   const navigation = createMemo(() => projectRailNavigation(props.apps, settings(), locale()));
   onMount(() => {
     const sync = () => setSettings(readRailContext()?.settings ?? props.settings);
-    const syncLocation = () => setCurrentUrl(window.location.href);
+    const syncLocation = () => setCurrentPath(`${window.location.pathname}${window.location.search}${window.location.hash}`);
     sync();
     syncLocation();
     window.addEventListener(RAIL_PREFERENCES_EVENT, sync);
@@ -51,11 +51,11 @@ export default function RailApps(props: { apps: RailApp[]; settings: RailSnapsho
       style={{ flex: "0 1 auto", "scrollbar-width": "none", "scrollbar-gutter": "auto", "overflow-x": "hidden" }}
       data-cloud-rail-apps
     >
-      <For each={navigation().shortcuts}>{(link) => <RailIcon link={link} currentUrl={currentUrl()} />}</For>
+      <For each={navigation().shortcuts}>{(link) => <RailIcon link={link} currentPath={currentPath()} />}</For>
       <Show when={navigation().shortcuts.length > 0 && navigation().apps.length > 0}>
         <div role="separator" class="my-1 h-px w-5 shrink-0" style={{ background: "var(--ui-divider)" }} />
       </Show>
-      <For each={navigation().apps}>{(link) => <RailIcon link={link} currentUrl={currentUrl()} />}</For>
+      <For each={navigation().apps}>{(link) => <RailIcon link={link} currentPath={currentPath()} />}</For>
     </ScrollArea>
   );
 }

package/src/ssr/admin-navigation.ts

@@ -45,7 +45,9 @@ export const buildAdminGroups = (apps: readonly RuntimeContext["apps"][number][]
     }))
     .sort((a, b) => a.app.name.localeCompare(b.app.name));
 
-  aiLinks.push(...contributedApps.flatMap(({groups}) => groups.filter(group => group.section === "ai").flatMap(group => group.links)));
+  aiLinks.push(
+    ...contributedApps.flatMap(({ groups }) => groups.filter((group) => group.section === "ai").flatMap((group) => group.links)),
+  );
 
   const appsWithGroups = new Set(contributedApps.filter(({ groups }) => groups.length > 0).map(({ app }) => app.id));
   const appLinks = apps
@@ -66,7 +68,9 @@ export const buildAdminGroups = (apps: readonly RuntimeContext["apps"][number][]
         { href: "/admin/announcements", icon: "ti-speakerphone", label: t.announcements },
       ],
     },
-    ...contributedApps.flatMap(({ groups }) => groups.filter(group => group.section !== "ai").map(({label,links}) => ({label,links}))),
+    ...contributedApps.flatMap(({ groups }) =>
+      groups.filter((group) => group.section !== "ai").map(({ label, links }) => ({ label, links })),
+    ),
     {
       label: t.userManagement,
       links: [

package/src/ssr/index.ts

@@ -9,6 +9,7 @@ export {
   type MinimalLayoutPreferencePosition,
   type MinimalLayoutProps,
 } from "./MinimalLayout";
+export { requestPath } from "./request-path";
 export { getLocalizedRuntimeContext, getRuntimeContext, type RuntimeContext } from "./runtime";
 export type { UrlFilterField } from "./url-filter";
 export { createUrlFilter, flag, list, oneOf, page, text } from "./url-filter";

package/src/ssr/islands/index.ts

@@ -1,6 +1,6 @@
-export { default as SearchBar } from "./SearchBar";
-export { provideWorkspaceNavigation } from "../workspace-navigation";
 export { default as WorkspaceNavigationProvider } from "../WorkspaceNavigationProvider";
+export { provideWorkspaceNavigation } from "../workspace-navigation";
+export { default as SearchBar } from "./SearchBar";
 
 import { AppLaunchpadButton, AppLaunchpadProvider } from "../AppLaunchpad.island";
 import { LayoutHelpDocuments, LayoutHelpPage } from "../LayoutHelp";

package/src/ssr/mobile-menu-history.ts

@@ -1,4 +1,4 @@
-import { bottomSheetOptions, dialogCore, type DialogRender } from "@k2b/ui";
+import { bottomSheetOptions, type DialogRender, dialogCore } from "@k2b/ui";
 
 const marker = "cloudMobileMenu";
 let running: Promise<void> | undefined;

package/src/ssr/rail-navigation.ts

@@ -48,8 +48,9 @@ export const projectRailNavigation = (apps: readonly RailApp[], settings: RailSn
   };
 };
 
-export const railLinkActive = (link: RailLink, currentUrl: string): boolean => {
-  const current = new URL(currentUrl, "https://cloud.invalid");
+/** `currentPath` is the route as `pathname + search`; an absolute URL is accepted but never required. */
+export const railLinkActive = (link: RailLink, currentPath: string): boolean => {
+  const current = new URL(currentPath, "https://cloud.invalid");
   const target = new URL(link.match, current);
   if (target.origin !== current.origin) return false;
   if (link.exact) return target.pathname === current.pathname && target.search === current.search && target.hash === current.hash;

package/src/ssr/request-path.ts

@@ -0,0 +1,12 @@
+/**
+ * The route of the current request as `pathname + search`.
+ *
+ * Behind the gateway `c.req.raw.url` carries the internal upstream origin
+ * (`http://app-mail:3000`), never the public one. Islands and links must
+ * therefore receive the route as a path and resolve it against
+ * `window.location.origin` in the browser.
+ */
+export const requestPath = (c: { req: { raw: { url: string } } }): string => {
+  const url = new URL(c.req.raw.url);
+  return `${url.pathname}${url.search}`;
+};

package/src/workflows/ai/index.ts

@@ -1,13 +1,13 @@
+export { startWorkflowAiRuntime, stopWorkflowAiRuntime, submitWorkflowAiTask, type WorkflowAiRuntimeOptions } from "./runtime";
 export {
-  WORKFLOW_AI_DEPENDENCY_KIND,
   createWorkflowAiTask,
   getWorkflowAiTask,
   getWorkflowAiTaskByEffectKey,
   migrateWorkflowAi,
+  WORKFLOW_AI_DEPENDENCY_KIND,
   wakeWorkflowAiTask,
   workflowAiTaskExists,
 } from "./store";
-export { startWorkflowAiRuntime, stopWorkflowAiRuntime, submitWorkflowAiTask, type WorkflowAiRuntimeOptions } from "./runtime";
 export {
   type WorkflowAiRequest,
   type WorkflowAiRequestInput,

package/src/workflows/ai/runtime.ts

@@ -1,11 +1,10 @@
-import { AiBackgroundAdmissionError, AiBackgroundCostError } from "../../ai/inference-calls";
 import { StructuredOutputError } from "@k2b/nessi";
 import type { Job, Worker } from "@k2b/sync";
-import { z } from "zod";
 import { lazySync } from "../../_internal/process-sync";
-import { isAiSettingsError, type RunAiStructuredInput, runAiStructured } from "../../ai";
+import { isAiSettingsError, runAiStructured } from "../../ai";
+import { AiBackgroundAdmissionError, AiBackgroundCostError } from "../../ai/inference-calls";
+import { executeAiTask } from "../../ai/task-execution";
 
-import type { WorkflowJsonValue } from "../contracts";
 import {
   claimWorkflowAiTask,
   completeWorkflowAiTask,
@@ -17,7 +16,7 @@ import {
   wakeWorkflowAiTask,
   workflowAiTaskCancellationRequested,
 } from "./store";
-import type { WorkflowAiRequest, WorkflowAiTask } from "./types";
+import type { WorkflowAiTask } from "./types";
 
 const JOB_ID = "cloud.workflow-ai";
 const MAX_ATTEMPTS = 3;
@@ -72,92 +71,18 @@ export const settleWorkflowAiAttemptFailure = async (
   return "failed";
 };
 
-const asJson = (value: unknown): WorkflowJsonValue => JSON.parse(JSON.stringify(value)) as WorkflowJsonValue;
-const choiceEnum = (values: string[]) => z.enum(values as [string, ...string[]]);
-const structuredOutputSchema = (fields: Extract<WorkflowAiRequest, { kind: "extract_data" }>["fields"]) => {
-  const shape: Record<string, z.ZodType> = {};
-  for (const field of fields) {
-    let schema: z.ZodType =
-      field.type === "text"
-        ? z.string().max(field.maxLength ?? 20_000)
-        : field.type === "number"
-          ? z.number()
-          : field.type === "boolean"
-            ? z.boolean()
-            : field.type === "date_time"
-              ? z.iso.datetime({ offset: true })
-              : choiceEnum(field.choices!);
-    if (!field.required) schema = schema.optional();
-    shape[field.name] = schema.describe(field.description);
-  }
-  return z.object(shape).strict();
-};
-
-export const executeWorkflowAiRequest = async (task: WorkflowAiTask, runStructured: StructuredRunner, signal: AbortSignal) => {
-  const request = task.request;
-  const common = {
-    appId: task.appId,
-    attribution: { workflowRunId: task.runId, stepKey: task.stepKey, userId: task.usageUserId },
-    requestedModelId: task.modelProfileId,
-    signal,
-    temperature: 0,
-  } satisfies Partial<RunAiStructuredInput<z.ZodType>>;
-
-  if (request.kind === "generate_text") {
-    const result = await runStructured({
-      ...common,
-      task: "workflow-generate-text",
-      systemPrompt: request.prompt,
-      input: request.input === undefined ? "Create the requested text." : JSON.stringify(request.input),
-      outputName: "generated_text",
-      output: z.object({ text: z.string().max(request.maxOutputChars) }),
-      maxOutputTokens: Math.min(8_192, Math.max(64, Math.ceil(request.maxOutputChars / 2))),
-    });
-    return { output: result.output.text as WorkflowJsonValue, usage: result.usage ? asJson(result.usage) : null };
-  }
-
-  if (request.kind === "classify") {
-    const result = await runStructured({
-      ...common,
-      task: "workflow-classify",
-      systemPrompt: `${request.prompt}\nReturn exactly one of the declared choices.`,
-      input: JSON.stringify(request.input),
-      outputName: "classification",
-      output: z.object({ choice: choiceEnum(request.choices) }),
-      maxOutputTokens: 200,
-    });
-    return { output: result.output.choice as WorkflowJsonValue, usage: result.usage ? asJson(result.usage) : null };
-  }
-
-  if (request.kind === "extract_data") {
-    const result = await runStructured({
-      ...common,
-      task: "workflow-extract-data",
-      systemPrompt: `${request.prompt}\nReturn only the declared fields. Do not invent values that are not supported by the input.`,
-      input: JSON.stringify(request.input),
-      outputName: "structured_data",
-      output: structuredOutputSchema(request.fields),
-      maxOutputTokens: 4_096,
-    });
-    return { output: asJson(result.output), usage: result.usage ? asJson(result.usage) : null };
-  }
-
-  const maximum = request.maxChoices ?? request.choices.length;
-  const result = await runStructured({
-    ...common,
-    task: "workflow-classify-many",
-    systemPrompt: `${request.prompt}\nReturn only unique values from the declared choices.`,
-    input: JSON.stringify(request.input),
-    outputName: "classifications",
-    output: z.object({ choices: z.array(choiceEnum(request.choices)).min(request.minChoices).max(maximum) }),
-    maxOutputTokens: 500,
-  });
-  const selected = new Set(result.output.choices);
-  return {
-    output: request.choices.filter((choice) => selected.has(choice)) as WorkflowJsonValue,
-    usage: result.usage ? asJson(result.usage) : null,
-  };
-};
+export const executeWorkflowAiRequest = async (task: WorkflowAiTask, runStructured: StructuredRunner, signal: AbortSignal) =>
+  executeAiTask(
+    task.request,
+    {
+      appId: task.appId,
+      attribution: { workflowRunId: task.runId, stepKey: task.stepKey, userId: task.usageUserId },
+      requestedModelId: task.modelProfileId,
+      signal,
+      taskPrefix: "workflow",
+    },
+    runStructured,
+  );
 
 const retryableError = (error: unknown): boolean => {
   if (error instanceof AiBackgroundAdmissionError) return error.retryable;

package/src/workflows/ai/store.ts

@@ -1,7 +1,7 @@
-import { notifyWorkflowWorker } from "../store/worker-runtime";
 import { type SQL, sql } from "bun";
 import type { WorkflowJsonValue } from "../contracts";
 import { wakeWorkflowRunsWaitingOn } from "../store/runs";
+import { notifyWorkflowWorker } from "../store/worker-runtime";
 import {
   type WorkflowAiRequest,
   type WorkflowAiRequestInput,

package/src/workflows/ai/types.ts

@@ -1,88 +1,12 @@
-import { z } from "zod";
+import type { AiTaskRequest as WorkflowAiRequest } from "../../ai/task-contracts";
 import type { WorkflowJsonValue } from "../contracts";
 
-const prompt = z.string().trim().min(1).max(20_000);
-const modelProfileId = z.string().trim().min(1).max(120).optional();
-const choice = z.string().trim().min(1).max(200);
-const choices = z
-  .array(choice)
-  .min(2)
-  .max(50)
-  .refine((values) => new Set(values).size === values.length, "Choices must be unique.");
+export {
+  type AiTaskRequest as WorkflowAiRequest,
+  type AiTaskRequestInput as WorkflowAiRequestInput,
+  AiTaskRequestSchema as workflowAiRequestSchema,
+} from "../../ai/task-contracts";
 
-const structuredField = z
-  .object({
-    name: z
-      .string()
-      .trim()
-      .regex(/^[A-Za-z][A-Za-z0-9_]{0,79}$/),
-    type: z.enum(["text", "number", "boolean", "date_time", "enum"]),
-    description: z.string().trim().min(1).max(500),
-    required: z.boolean().default(true),
-    choices: z.array(choice).min(1).max(50).optional(),
-    maxLength: z.number().int().min(1).max(20_000).optional(),
-  })
-  .strict()
-  .superRefine((field, ctx) => {
-    if (field.type === "enum" && !field.choices)
-      ctx.addIssue({ code: "custom", path: ["choices"], message: "Enum fields require choices." });
-    if (field.type !== "enum" && field.choices)
-      ctx.addIssue({ code: "custom", path: ["choices"], message: "Choices are only valid for enum fields." });
-    if (field.type !== "text" && field.maxLength)
-      ctx.addIssue({ code: "custom", path: ["maxLength"], message: "maxLength is only valid for text fields." });
-  });
-
-const structuredFields = z
-  .array(structuredField)
-  .min(1)
-  .max(40)
-  .refine((fields) => new Set(fields.map((field) => field.name)).size === fields.length, "Structured field names must be unique.");
-
-export const workflowAiRequestSchema = z.discriminatedUnion("kind", [
-  z.object({
-    kind: z.literal("generate_text"),
-    prompt,
-    input: z.unknown().optional(),
-    modelProfileId,
-    maxOutputChars: z.number().int().min(1).max(20_000).default(4_000),
-  }),
-  z.object({
-    kind: z.literal("classify"),
-    prompt,
-    input: z.unknown(),
-    choices,
-    modelProfileId,
-  }),
-  z
-    .object({
-      kind: z.literal("classify_many"),
-      prompt,
-      input: z.unknown(),
-      choices,
-      minChoices: z.number().int().min(0).max(50).default(0),
-      maxChoices: z.number().int().min(0).max(50).optional(),
-      modelProfileId,
-    })
-    .superRefine((value, ctx) => {
-      const maximum = value.maxChoices ?? value.choices.length;
-      if (maximum > value.choices.length) {
-        ctx.addIssue({ code: "custom", path: ["maxChoices"], message: "maxChoices cannot exceed the number of choices." });
-      }
-      if (value.minChoices > maximum) {
-        ctx.addIssue({ code: "custom", path: ["minChoices"], message: "minChoices cannot exceed maxChoices." });
-      }
-    }),
-  z.object({
-    kind: z.literal("extract_data"),
-    prompt,
-    input: z.unknown(),
-    fields: structuredFields,
-    modelProfileId,
-  }),
-]);
-
-export type WorkflowAiRequest = z.infer<typeof workflowAiRequestSchema>;
-export type WorkflowAiRequestInput = z.input<typeof workflowAiRequestSchema>;
 export type WorkflowAiTaskStatus = "queued" | "running" | "succeeded" | "failed" | "canceled";
 
 export type WorkflowAiTask = {

package/src/workflows/store/index.ts

@@ -50,11 +50,11 @@ export {
 } from "./events";
 export {
   getWorkflowRun,
-  listWorkflowFamilies,
-  listWorkflowRunTimeline,
   listStrandedWorkflowEffects,
+  listWorkflowFamilies,
   listWorkflowRunSteps,
   listWorkflowRuns,
+  listWorkflowRunTimeline,
   type StrandedWorkflowEffect,
   type WorkflowAppHealth,
   type WorkflowFamilyFilter,

package/src/server/services/freeipa/test-certificates.ts

@@ -1,44 +0,0 @@
-export const TEST_CA_CERT = `-----BEGIN CERTIFICATE-----
-MIIBljCCATugAwIBAgIUaD/zikxyQaxGreCVzb9YufuusxIwCgYIKoZIzj0EAwIw
-IDEeMBwGA1UEAwwVQ2xvdWQgRnJlZUlQQSBUZXN0IENBMB4XDTI2MDcyOTE1NTgx
-MFoXDTM2MDcyNjE1NTgxMFowIDEeMBwGA1UEAwwVQ2xvdWQgRnJlZUlQQSBUZXN0
-IENBMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEYZ7eU7/C71ilbpKa9k/FXObw
-Vq4u/3rtpW/kSjsJaIVNPFp5oFBdHceL0UPgoxwpaJiJNHiwQHF/BBxaJ7HOAKNT
-MFEwHQYDVR0OBBYEFOflw/p5xNlS0am+HytNLyXVEUndMB8GA1UdIwQYMBaAFOfl
-w/p5xNlS0am+HytNLyXVEUndMA8GA1UdEwEB/wQFMAMBAf8wCgYIKoZIzj0EAwID
-SQAwRgIhAJmRoNV5dxKvNOd2KoytvK/6ckRWN+Uu0ljc5y/g4izqAiEAsLCjxWvz
-mgt1Z3uk+QkT9D1vHCuKSvcqv3aVn0DClxA=
------END CERTIFICATE-----`;
-
-export const TEST_SERVER_CERT = `-----BEGIN CERTIFICATE-----
-MIIBpDCCAUmgAwIBAgIUNGe5IovnDTTKxjxwHBGVcnOaXaQwCgYIKoZIzj0EAwIw
-IDEeMBwGA1UEAwwVQ2xvdWQgRnJlZUlQQSBUZXN0IENBMB4XDTI2MDcyOTE1NTgx
-MFoXDTM2MDcyNjE1NTgxMFowFDESMBAGA1UEAwwJbG9jYWxob3N0MFkwEwYHKoZI
-zj0CAQYIKoZIzj0DAQcDQgAEolKc1EyyTH6MKX0GR7FhbXCN0O3G/D2riPJ045K+
-qCL6m0Fso38eNxKbNENSkE1tX7j4uv6tcLmtHU/cKxjUg6NtMGswFAYDVR0RBA0w
-C4IJbG9jYWxob3N0MBMGA1UdJQQMMAoGCCsGAQUFBwMBMB0GA1UdDgQWBBT/iu3f
-aYfd6r4xoPTkZujj/0rwWjAfBgNVHSMEGDAWgBTn5cP6ecTZUtGpvh8rTS8l1RFJ
-3TAKBggqhkjOPQQDAgNJADBGAiEAgsXqgbBm2RJaUZIs0IR2rbI+6S+1CtugVMHl
-oxuRagcCIQCtoMZh0rZFlmUkH19BxrDvQe3JqCuQpd2HiZdvZTJhyQ==
------END CERTIFICATE-----`;
-
-export const TEST_SERVER_KEY = `-----BEGIN EC PARAMETERS-----
-BggqhkjOPQMBBw==
------END EC PARAMETERS-----
------BEGIN EC PRIVATE KEY-----
-MHcCAQEEIKFSLmqZO5KgG9hGbNhhJa0V2IMl39N2UHUj5VUh6DsmoAoGCCqGSM49
-AwEHoUQDQgAEolKc1EyyTH6MKX0GR7FhbXCN0O3G/D2riPJ045K+qCL6m0Fso38e
-NxKbNENSkE1tX7j4uv6tcLmtHU/cKxjUgw==
------END EC PRIVATE KEY-----`;
-
-export const TEST_WRONG_CA_CERT = `-----BEGIN CERTIFICATE-----
-MIIBhDCCASugAwIBAgIUWM3XX235lciHJ/UKoajhrSx2dPwwCgYIKoZIzj0EAwIw
-GDEWMBQGA1UEAwwNV3JvbmcgVGVzdCBDQTAeFw0yNjA3MjkxNTU4MTBaFw0zNjA3
-MjYxNTU4MTBaMBgxFjAUBgNVBAMMDVdyb25nIFRlc3QgQ0EwWTATBgcqhkjOPQIB
-BggqhkjOPQMBBwNCAAREOwLQCQYQI7zEa7GaSZag98eOF5KMckBPrDsDxS0Bb5lx
-uIa3iWu9CI6Xkw+v+avpPF+Oz3QB7GXgCboKHFico1MwUTAdBgNVHQ4EFgQU1PRs
-qLXtaHVxaKu0e0le1KpD6GYwHwYDVR0jBBgwFoAU1PRsqLXtaHVxaKu0e0le1KpD
-6GYwDwYDVR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAgNHADBEAiA9vA9jI66Un7zQ
-ycf0+6Ze0y5aSM9FLojGcVuzZb0iyAIgIC6ooFag9BuAZqcj/k07hjARi6UVOpEy
-sIJIkokji38=
------END CERTIFICATE-----`;

package/src/services/session/test-fixture.ts

@@ -1,18 +0,0 @@
-import { Hono } from "hono";
-import { sql } from "bun";
-import { session } from "./index";
-
-/** Integration fixture: run with an isolated Core authority and its public JWKS endpoint. */
-export const createTestSession = async (userId: string): Promise<string> => {
-  // Most session fixtures represent established users, not first-use onboarding.
-  await sql`INSERT INTO auth.legal_acceptances (user_id, session_id, document_version, documents)
-    VALUES (${userId}::uuid, ${crypto.randomUUID()}::uuid, 'test-fixture', '[]'::jsonb) ON CONFLICT DO NOTHING`;
-  const app = new Hono().post("/login", async (c) => c.json({ token: await session.create(c, userId) }));
-  const response = await app.request("/login", { method: "POST" });
-  if (response.status !== 200) throw new Error(`Session fixture login failed: ${response.status}`);
-  const body: unknown = await response.json();
-  if (!body || typeof body !== "object" || !("token" in body) || typeof body.token !== "string") {
-    throw new Error("Session fixture did not return a token");
-  }
-  return body.token;
-};