@k2b/cloud 0.7.0 → 0.9.0

package/src/ai/model-pricing.ts

@@ -1,11 +1,11 @@
 import { sql } from "bun";
 import { coreSettings } from "../services";
-import { decryptValue } from "../services/settings/crypto";
-import { invalidateSettingsCache, set as setSetting } from "../services/settings";
 import { audit } from "../services/audit";
-import { AiModelPricingSchema, type AiModelPricing } from "../shared/ai-costs";
-import { parseAiModelProfiles } from "./settings";
+import { invalidateSettingsCache, set as setSetting } from "../services/settings";
+import { decryptValue } from "../services/settings/crypto";
+import { type AiModelPricing, AiModelPricingSchema } from "../shared/ai-costs";
 import { AiQuotaError } from "./quotas";
+import { parseAiModelProfiles } from "./settings";
 
 /** Change prices only, preserving credentials and model access in their own stores. */
 export async function setAiModelPricing(id: string, pricing: AiModelPricing | null, expected: AiModelPricing | null, actorId: string) {

package/src/ai/pdf-render-worker.ts

@@ -1,9 +1,10 @@
 // Standalone subprocess. No server imports or application credentials.
-import { dirname, join } from "node:path";
+
 import { createRequire } from "node:module";
-import { z } from "zod";
+import { dirname, join } from "node:path";
 import { createCanvas } from "@napi-rs/canvas";
 import { getDocument } from "pdfjs-dist/legacy/build/pdf.mjs";
+import { z } from "zod";
 
 const MAX_BYTES = 10 * 1024 * 1024;
 const inputSchema = z.object({

package/src/ai/projects-routes.ts

@@ -71,16 +71,12 @@ const buildAiProjectsRoutes = (dependencies: AiProjectsRouteDependencies = {}) =
   new Hono<AuthContext>()
     .use(dependencies.limit ?? rateLimit())
     .use("*", dependencies.authenticate ?? auth.requireRole("authenticated"))
-    .get("/", async (c) =>
-      respond(c, ok({ projects: (await aiProjects.list(c.get("accessSubject") ?? null)).map(publicProject) })),
-    )
+    .get("/", async (c) => respond(c, ok({ projects: (await aiProjects.list(c.get("accessSubject") ?? null)).map(publicProject) })))
     .post("/", dependencies.authenticate ?? auth.requireRole("authenticated"), v("json", ProjectFieldsSchema), async (c) =>
       respond(
         c,
         ok({
-          project: publicProject(
-            await aiProjects.create({ subject: c.get("accessSubject"), ...c.req.valid("json") }),
-          ),
+          project: publicProject(await aiProjects.create({ subject: c.get("accessSubject"), ...c.req.valid("json") })),
         }),
         201,
       ),
@@ -108,9 +104,7 @@ const buildAiProjectsRoutes = (dependencies: AiProjectsRouteDependencies = {}) =
     })
     .post("/:projectId/access", v("json", ProjectAccessSchema), async (c) => {
       const project = await aiProjects.getByShortId(c.req.param("projectId")!, c.get("accessSubject") ?? null, "admin");
-      const access = project
-        ? await aiProjects.grantAccess(project.id, c.get("accessSubject") ?? null, c.req.valid("json"))
-        : null;
+      const access = project ? await aiProjects.grantAccess(project.id, c.get("accessSubject") ?? null, c.req.valid("json")) : null;
       return access ? respond(c, ok({ access }), 201) : notFound(c);
     })
     .patch("/:projectId/access/:accessId", v("json", ProjectAccessUpdateSchema), async (c) => {
@@ -133,8 +127,7 @@ const buildAiProjectsRoutes = (dependencies: AiProjectsRouteDependencies = {}) =
     .delete("/:projectId/access/:accessId", async (c) => {
       const project = await aiProjects.getByShortId(c.req.param("projectId")!, c.get("accessSubject") ?? null, "admin");
       try {
-        return project &&
-          (await aiProjects.revokeAccess(project.id, c.req.param("accessId")!, c.get("accessSubject") ?? null))
+        return project && (await aiProjects.revokeAccess(project.id, c.req.param("accessId")!, c.get("accessSubject") ?? null))
           ? respond(c, ok({ deleted: true }))
           : notFound(c, "Access entry");
       } catch (error) {
@@ -148,35 +141,27 @@ const buildAiProjectsRoutes = (dependencies: AiProjectsRouteDependencies = {}) =
       return respond(
         c,
         ok({
-          knowledge: (
-            await aiProjects.listKnowledge(project.id, c.get("accessSubject") ?? null, c.req.valid("query").q)
-          ).map((item) => publicKnowledge(item, project.shortId)),
+          knowledge: (await aiProjects.listKnowledge(project.id, c.get("accessSubject") ?? null, c.req.valid("query").q)).map((item) =>
+            publicKnowledge(item, project.shortId),
+          ),
         }),
       );
     })
     .post("/:projectId/knowledge", v("json", KnowledgeSchema), async (c) => {
       const project = await aiProjects.getByShortId(c.req.param("projectId")!, c.get("accessSubject") ?? null, "write");
-      const knowledge = project
-        ? await aiProjects.createKnowledge(project.id, c.get("accessSubject") ?? null, c.req.valid("json"))
-        : null;
+      const knowledge = project ? await aiProjects.createKnowledge(project.id, c.get("accessSubject") ?? null, c.req.valid("json")) : null;
       return knowledge ? respond(c, ok({ knowledge: publicKnowledge(knowledge, project!.shortId) }), 201) : notFound(c);
     })
     .patch("/:projectId/knowledge/:knowledgeId", v("json", UpdateKnowledgeSchema), async (c) => {
       const project = await aiProjects.getByShortId(c.req.param("projectId")!, c.get("accessSubject") ?? null, "write");
       const knowledge =
         project &&
-        (await aiProjects.updateKnowledge(
-          project.id,
-          c.req.param("knowledgeId")!,
-          c.get("accessSubject") ?? null,
-          c.req.valid("json"),
-        ));
+        (await aiProjects.updateKnowledge(project.id, c.req.param("knowledgeId")!, c.get("accessSubject") ?? null, c.req.valid("json")));
       return knowledge ? respond(c, ok({ knowledge: publicKnowledge(knowledge, project!.shortId) })) : notFound(c, "Knowledge entry");
     })
     .delete("/:projectId/knowledge/:knowledgeId", async (c) => {
       const project = await aiProjects.getByShortId(c.req.param("projectId")!, c.get("accessSubject") ?? null, "write");
-      return project &&
-        (await aiProjects.deleteKnowledge(project.id, c.req.param("knowledgeId")!, c.get("accessSubject") ?? null))
+      return project && (await aiProjects.deleteKnowledge(project.id, c.req.param("knowledgeId")!, c.get("accessSubject") ?? null))
         ? respond(c, ok({ deleted: true }))
         : notFound(c, "Knowledge entry");
     })
@@ -186,20 +171,14 @@ const buildAiProjectsRoutes = (dependencies: AiProjectsRouteDependencies = {}) =
       return respond(
         c,
         ok({
-          files: (await aiProjects.listFiles(project.id, c.get("accessSubject") ?? null)).map((file) =>
-            publicFile(file, project.shortId),
-          ),
+          files: (await aiProjects.listFiles(project.id, c.get("accessSubject") ?? null)).map((file) => publicFile(file, project.shortId)),
         }),
       );
     })
     .post("/:projectId/files", v("json", ProjectFileSchema), async (c) => {
       const body = c.req.valid("json");
       try {
-        const project = await aiProjects.getByShortId(
-          c.req.param("projectId")!,
-          c.get("accessSubject") ?? null,
-          "write",
-        );
+        const project = await aiProjects.getByShortId(c.req.param("projectId")!, c.get("accessSubject") ?? null, "write");
         const file = project
           ? await aiProjects.writeFile(project.id, c.get("accessSubject") ?? null, {
               path: body.path,
@@ -214,9 +193,7 @@ const buildAiProjectsRoutes = (dependencies: AiProjectsRouteDependencies = {}) =
     })
     .get("/:projectId/files/:fileId", async (c) => {
       const project = await aiProjects.getByShortId(c.req.param("projectId")!, c.get("accessSubject") ?? null);
-      const file = project
-        ? await aiProjects.readFile(project.id, c.req.param("fileId")!, c.get("accessSubject") ?? null)
-        : null;
+      const file = project ? await aiProjects.readFile(project.id, c.req.param("fileId")!, c.get("accessSubject") ?? null) : null;
       if (!file) return notFound(c, "Project file");
       return respond(
         c,
@@ -229,8 +206,7 @@ const buildAiProjectsRoutes = (dependencies: AiProjectsRouteDependencies = {}) =
     })
     .delete("/:projectId/files/:fileId", async (c) => {
       const project = await aiProjects.getByShortId(c.req.param("projectId")!, c.get("accessSubject") ?? null, "write");
-      return project &&
-        (await aiProjects.deleteFile(project.id, c.req.param("fileId")!, c.get("accessSubject") ?? null))
+      return project && (await aiProjects.deleteFile(project.id, c.req.param("fileId")!, c.get("accessSubject") ?? null))
         ? respond(c, ok({ deleted: true }))
         : notFound(c, "Project file");
     })
@@ -265,8 +241,7 @@ const buildAiProjectsRoutes = (dependencies: AiProjectsRouteDependencies = {}) =
     })
     .delete("/:projectId/references/:referenceId", async (c) => {
       const project = await aiProjects.getByShortId(c.req.param("projectId")!, c.get("accessSubject") ?? null, "write");
-      return project &&
-        (await aiProjects.deleteReference(project.id, c.req.param("referenceId")!, c.get("accessSubject") ?? null))
+      return project && (await aiProjects.deleteReference(project.id, c.req.param("referenceId")!, c.get("accessSubject") ?? null))
         ? respond(c, ok({ deleted: true }))
         : notFound(c, "Project reference");
     });

package/src/ai/projects.ts

@@ -1,7 +1,6 @@
-import { AuthenticatedPrincipalSchema } from "../contracts/shared";
-import { aiFileContentVersion, AiFileWriteError, AiFileVersionConflict } from "./file-content-version";
 import { type SQL, type SQLQuery, sql } from "bun";
 import type { CloudResourceRef } from "../contracts/capabilities";
+import { AuthenticatedPrincipalSchema } from "../contracts/shared";
 import type { AccessSubject } from "../server";
 import {
   buildAccessPrincipalCondition,
@@ -12,6 +11,7 @@ import {
   type Principal,
 } from "../server/services/access";
 import { toPgUuidArray } from "../services/postgres";
+import { AiFileVersionConflict, AiFileWriteError, aiFileContentVersion } from "./file-content-version";
 import { mountAiProjectFilePath } from "./file-mount";
 import { withAiShortIdForDb } from "./short-id";
 import type { AiProjectPromptSnapshot } from "./types";
@@ -170,15 +170,17 @@ const principalForSubject = (subject: AccessSubject): Principal =>
     : { type: "service_account", serviceAccountId: subject.serviceAccountId };
 
 const accessMatch = (subject: AccessSubject | null): SQLQuery =>
-  subject === null ? sql`FALSE` : buildAccessPrincipalCondition({
-    subject,
-    columns: {
-      userId: sql`access.user_id`,
-      groupId: sql`access.group_id`,
-      serviceAccountId: sql`access.service_account_id`,
-      authenticatedOnly: sql`access.authenticated_only`,
-    },
-  });
+  subject === null
+    ? sql`FALSE`
+    : buildAccessPrincipalCondition({
+        subject,
+        columns: {
+          userId: sql`access.user_id`,
+          groupId: sql`access.group_id`,
+          serviceAccountId: sql`access.service_account_id`,
+          authenticatedOnly: sql`access.authenticated_only`,
+        },
+      });
 
 const permissionFor = async (row: ProjectRow, subject: AccessSubject | null, db: SQL = sql): Promise<AiProjectPermission | "none"> => {
   const match = accessMatch(subject);
@@ -805,14 +807,17 @@ export const aiProjects = {
     input: { path: string; mediaType: string; bytes: Uint8Array; expectedVersion?: string | null },
   ): Promise<AiProjectFile | null> {
     if (!(await requireProject(projectId, subject, "write"))) return null;
-    if (input.bytes.byteLength > AI_PROJECT_FILE_MAX_BYTES) throw new AiFileWriteError("STORAGE_FULL", "Project file exceeds the size limit; nothing was written.");
+    if (input.bytes.byteLength > AI_PROJECT_FILE_MAX_BYTES)
+      throw new AiFileWriteError("STORAGE_FULL", "Project file exceeds the size limit; nothing was written.");
     const path = normalizeProjectPath(input.path);
     return sql.begin(async (tx) => {
       const [row] = await tx<ProjectRow[]>`SELECT * FROM ai.projects WHERE id=${projectId}::uuid FOR UPDATE`;
       const project = row ? await toProject(row, subject, tx) : null;
       if (!project || !hasPermission(project.permission, "write")) return null;
       if (input.expectedVersion !== undefined) {
-        const [existing] = await tx<(FileRow & { bytes: Uint8Array })[]>`SELECT id,short_id,project_id,path,media_type,size,updated_at,bytes FROM ai.project_files WHERE project_id=${projectId}::uuid AND path=${path}`;
+        const [existing] = await tx<
+          (FileRow & { bytes: Uint8Array })[]
+        >`SELECT id,short_id,project_id,path,media_type,size,updated_at,bytes FROM ai.project_files WHERE project_id=${projectId}::uuid AND path=${path}`;
         const version = existing ? aiFileContentVersion({ ...toFile(existing), bytes: existing.bytes }) : null;
         if (version !== input.expectedVersion) throw new AiFileVersionConflict();
       }

package/src/ai/quota-provider.ts

@@ -1,11 +1,12 @@
-import { isAssistantChatTurn } from "./assistant-models";
+import { setTimeout as delay } from "node:timers/promises";
 import { estimateTokens, type Provider } from "@k2b/nessi";
-import type { AccessSubject } from "../server/services/access";
 import { sql } from "bun";
-import { setTimeout as delay } from "node:timers/promises";
-import { AiBackgroundAdmissionError, beginAiCall, finishAiCall, type AiCallContext } from "./inference-calls";
-import type { AiModelProfile } from "./types";
+import type { AccessSubject } from "../server/services/access";
 import { logger } from "../services/logging";
+import { isAssistantChatTurn } from "./assistant-models";
+import { AiBackgroundAdmissionError, type AiCallContext, beginAiCall, finishAiCall } from "./inference-calls";
+import type { AiModelProfile } from "./types";
+
 const log = logger("ai:quotas");
 
 /** One wrapper owns call accounting. complete() can have a separate compaction purpose. */

package/src/ai/quota-report.ts

@@ -1,11 +1,11 @@
-import { hasBillableAiPricing } from "../shared/ai-costs";
-import { readAiSettingsState } from "./settings";
-import { toPgTextArray } from "../services/postgres";
 import { sql } from "bun";
-import { recursiveGroupIdsSubquery } from "../services/accounts/group-sql";
-import { AiQuotaReportQuerySchema, type AiQuotaReport, type AiQuotaReportQuery } from "../shared/ai-quotas";
 import { resolveDisplayNames } from "../server/services/access";
+import { recursiveGroupIdsSubquery } from "../services/accounts/group-sql";
+import { toPgTextArray } from "../services/postgres";
+import { hasBillableAiPricing } from "../shared/ai-costs";
+import { type AiQuotaReport, type AiQuotaReportQuery, AiQuotaReportQuerySchema } from "../shared/ai-quotas";
 import { aiQuotas } from "./quotas";
+import { readAiSettingsState } from "./settings";
 
 /** Resolve display metadata only for administration, never on the inference path. */
 export async function quotaAdminConfig() {

package/src/ai/quotas.ts

@@ -1,8 +1,8 @@
+import { type SQL, sql } from "bun";
+import { type AccessSubject, buildAccessPrincipalCondition } from "../server/services/access";
 import { hasBillableAiPricing } from "../shared/ai-costs";
+import { type AiQuotaConfig, AiQuotaConfigSchema, type AiQuotaIdentity, type AiQuotaSnapshot } from "../shared/ai-quotas";
 import { readAiSettingsState } from "./settings";
-import { sql, type SQL } from "bun";
-import { buildAccessPrincipalCondition, type AccessSubject } from "../server/services/access";
-import { AiQuotaConfigSchema, type AiQuotaConfig, type AiQuotaSnapshot, type AiQuotaIdentity } from "../shared/ai-quotas";
 
 export class AiQuotaError extends Error {
   constructor(

package/src/ai/routes.ts

@@ -1,13 +1,5 @@
-import { getAiChatQuotas } from "./chat-quotas";
-import { enqueueChatMessage, listQueuedMessages, updateQueuedMessage, editQueuedMessage, queuedMessageAccepted, AiMessageQueueConflict } from "./message-queue";
-import { prepareAiChatTurn, wakeAiMessageQueue } from "./runtime";
-import { bodyLimit } from "hono/body-limit";
-import { AI_AUDIO_MAX_BYTES } from "./audio-format";
-import { aiDictations, AiDictationConflict, AiDictationStartSchema, AiDictationListSchema } from "./dictations";
-import { enqueueAiDictation } from "./dictation-runtime";
-import { resolveAiAudioModel } from "./transcription";
-import { aiModelAccess } from "./model-access";
 import { type Context, Hono } from "hono";
+import { bodyLimit } from "hono/body-limit";
 import { z } from "zod";
 import { listCapabilities } from "../_internal/registry";
 import {
@@ -24,12 +16,16 @@ import {
   respond,
   v,
 } from "../server";
-import { coreSettings } from "../services/settings/api";
 import { logger } from "../services/logging";
+import { coreSettings } from "../services/settings/api";
 import type { AiToolApprovalContext } from "./approvals";
 import { assistantAiSettingsState, listAssistantAiModels, selectAssistantAiModelId } from "./assistant-models";
+import { AI_AUDIO_MAX_BYTES } from "./audio-format";
 import { buildAiCapabilityCatalog } from "./capabilities";
+import { getAiChatQuotas } from "./chat-quotas";
 import { createConfiguredDefaultCloudAiTools } from "./default-tools";
+import { enqueueAiDictation } from "./dictation-runtime";
+import { AiDictationConflict, AiDictationListSchema, AiDictationStartSchema, aiDictations } from "./dictations";
 import { aiProjectFilePathFromMount } from "./file-mount";
 import { AI_FILES_MAX_FILE_BYTES_DEFAULT, aiFileStore, decodeAiFileContent, guessAiMediaType, normalizeAiFilePath } from "./files-store";
 import {
@@ -51,6 +47,15 @@ import { aiMaintenanceJobs } from "./maintenance";
 import { AI_MEMORY_CONTENT_MAX_CHARS, aiMemories } from "./memories";
 import { aiMemoryLearningRuns } from "./memory-learning-runs";
 import { createCloudAiMemoryTool } from "./memory-tool";
+import {
+  AiMessageQueueConflict,
+  editQueuedMessage,
+  enqueueChatMessage,
+  listQueuedMessages,
+  queuedMessageAccepted,
+  updateQueuedMessage,
+} from "./message-queue";
+import { aiModelAccess } from "./model-access";
 import { personalAiModelPolicy } from "./personal-agent";
 import { aiActorUser, aiPrefsUserId, aiUserPrefs } from "./prefs";
 import { aiProjects } from "./projects";
@@ -61,9 +66,11 @@ import {
   AiTurnActionSchema,
   abortAiTurn,
   listPendingAiTurnActions,
+  prepareAiChatTurn,
   submitAiChatTurn,
   submitAiCompaction,
   submitAiTurnAction,
+  wakeAiMessageQueue,
 } from "./runtime";
 import { readAiSettingsState, selectAiModelProfile } from "./settings";
 import { AI_SHORT_ID_PATTERN } from "./short-id";
@@ -74,6 +81,7 @@ import { aiConversations } from "./store";
 import { createAiConversationStreamResponse, loadAiStreamState } from "./stream";
 import { composeAiSystemPrompt } from "./system-prompt";
 import { aiToolPromptHints } from "./tools";
+import { resolveAiAudioModel } from "./transcription";
 import type { AiConversation, AiModelPolicy, AiTurn } from "./types";
 
 /** Everything a resolved, authorized request needs to run against the shared runtime. */
@@ -574,7 +582,7 @@ export const aiRoutes = (() => {
         if (ctx instanceof Response) return ctx;
         const conversation = await loadConversation(c, ctx);
         if (!conversation) return notFound(c);
-        const messageId = (c.req.param("messageId") ?? "");
+        const messageId = c.req.param("messageId") ?? "";
         if (!messageId) return respond(c, fail(err.badInput("Invalid message id.")));
         const input = c.req.valid("json");
         const feedback = await aiConversations.setMessageFeedback({
@@ -593,7 +601,7 @@ export const aiRoutes = (() => {
         if (ctx instanceof Response) return ctx;
         const conversation = await loadConversation(c, ctx);
         if (!conversation) return notFound(c);
-        const messageId = (c.req.param("messageId") ?? "");
+        const messageId = c.req.param("messageId") ?? "";
         if (!messageId) return respond(c, fail(err.badInput("Invalid message id.")));
         return (await aiConversations.clearMessageFeedback({
           conversationId: conversation.id,
@@ -766,30 +774,36 @@ export const aiRoutes = (() => {
         const conversation = await loadConversation(c, ctx);
         return conversation ? respond(c, ok(await listQueuedMessages(conversation.id))) : notFound(c);
       })
-      .patch("/conversations/:conversationId/queue/:messageId", v("json", z.object({text:z.string().trim().min(1).max(20000)}).strict()), async (c) => {
-        const ctx = await resolveContext(c);
-        if (ctx instanceof Response) return ctx;
-        const conversation = await loadConversation(c, ctx);
-        if (!conversation || !z.uuid().safeParse(c.req.param("messageId")).success) return notFound(c);
-        return await editQueuedMessage(conversation.id,(c.req.param("messageId") ?? ""),c.req.valid("json").text) ? respond(c,ok({ok:true})) : notFound(c);
-      })
+      .patch(
+        "/conversations/:conversationId/queue/:messageId",
+        v("json", z.object({ text: z.string().trim().min(1).max(20000) }).strict()),
+        async (c) => {
+          const ctx = await resolveContext(c);
+          if (ctx instanceof Response) return ctx;
+          const conversation = await loadConversation(c, ctx);
+          if (!conversation || !z.uuid().safeParse(c.req.param("messageId")).success) return notFound(c);
+          return (await editQueuedMessage(conversation.id, c.req.param("messageId") ?? "", c.req.valid("json").text))
+            ? respond(c, ok({ ok: true }))
+            : notFound(c);
+        },
+      )
       .delete("/conversations/:conversationId/queue/:messageId", async (c) => {
         const ctx = await resolveContext(c);
         if (ctx instanceof Response) return ctx;
         const conversation = await loadConversation(c, ctx);
         if (!conversation || !z.uuid().safeParse(c.req.param("messageId")).success) return notFound(c);
-        if (!await updateQueuedMessage(conversation.id, (c.req.param("messageId") ?? ""), "cancel")) return notFound(c);
+        if (!(await updateQueuedMessage(conversation.id, c.req.param("messageId") ?? "", "cancel"))) return notFound(c);
         wakeAiMessageQueue(conversation.id);
-        return respond(c, ok({ok:true}));
+        return respond(c, ok({ ok: true }));
       })
       .post("/conversations/:conversationId/queue/:messageId/retry", async (c) => {
         const ctx = await resolveContext(c);
         if (ctx instanceof Response) return ctx;
         const conversation = await loadConversation(c, ctx);
         if (!conversation || !z.uuid().safeParse(c.req.param("messageId")).success) return notFound(c);
-        if (!await updateQueuedMessage(conversation.id, (c.req.param("messageId") ?? ""), "retry")) return notFound(c);
+        if (!(await updateQueuedMessage(conversation.id, c.req.param("messageId") ?? "", "retry"))) return notFound(c);
         wakeAiMessageQueue(conversation.id);
-        return respond(c, ok({ok:true}));
+        return respond(c, ok({ ok: true }));
       })
       .put("/conversations/:conversationId/draft", v("json", AiSaveConversationDraftInputSchema), async (c) => {
         const ctx = await resolveContext(c);
@@ -820,7 +834,7 @@ export const aiRoutes = (() => {
         const conversation = await loadConversation(c, ctx);
         if (!conversation) return notFound(c);
         const body = c.req.valid("json");
-        if (body.queueId && await queuedMessageAccepted(conversation.id, body.queueId)) return respond(c,ok({queued:true}));
+        if (body.queueId && (await queuedMessageAccepted(conversation.id, body.queueId))) return respond(c, ok({ queued: true }));
         if (conversation.draft.revision !== body.draftRevision) {
           return respond(c, fail(err.conflict("The conversation draft changed in another session.")));
         }
@@ -882,7 +896,11 @@ export const aiRoutes = (() => {
             201,
           );
         } catch (error) {
-          if (error instanceof AiMessageQueueConflict || (error instanceof Error && error.message === "Queued messages must be sent first.")) return respond(c,fail(err.conflict(error.message)));
+          if (
+            error instanceof AiMessageQueueConflict ||
+            (error instanceof Error && error.message === "Queued messages must be sent first.")
+          )
+            return respond(c, fail(err.conflict(error.message)));
           return toAiErrorResponse(c, error);
         }
       })
@@ -912,7 +930,7 @@ export const aiRoutes = (() => {
         if (ctx instanceof Response) return ctx;
         const conversation = await loadConversation(c, ctx);
         if (!conversation) return notFound(c);
-        const messageId = (c.req.param("messageId") ?? "");
+        const messageId = c.req.param("messageId") ?? "";
 
         const messages = await aiConversations.listMessages({ conversationId: conversation.id });
         const target = messages.find((m) => m.shortId === messageId);
@@ -985,7 +1003,7 @@ export const aiRoutes = (() => {
         if (ctx instanceof Response) return ctx;
         const conversation = await loadConversation(c, ctx);
         if (!conversation) return notFound(c);
-        const messageId = (c.req.param("messageId") ?? "");
+        const messageId = c.req.param("messageId") ?? "";
 
         const messages = await aiConversations.listMessages({ conversationId: conversation.id });
         const target = messages.find((m) => m.shortId === messageId);
@@ -1152,9 +1170,16 @@ export const aiRoutes = (() => {
         if (ctx instanceof Response) return ctx;
         const conversation = await loadConversation(c, ctx);
         if (!conversation) return notFound(c);
-        return respond(c, ok(await aiDictations.discardOperation({
-          conversationId: conversation.id, userId: ctx.ownerUserId, operationId: c.req.valid("json").operationId,
-        })));
+        return respond(
+          c,
+          ok(
+            await aiDictations.discardOperation({
+              conversationId: conversation.id,
+              userId: ctx.ownerUserId,
+              operationId: c.req.valid("json").operationId,
+            }),
+          ),
+        );
       })
       .get("/conversations/:conversationId/dictations", v("query", AiDictationListSchema), async (c) => {
         const ctx = await resolveContext(c);
@@ -1240,9 +1265,9 @@ export const aiRoutes = (() => {
           return respond(c, fail(err.badInput(`File exceeds the ${Math.floor(AI_FILES_MAX_FILE_BYTES_DEFAULT / (1024 * 1024))} MB limit`)));
         }
         const name = (file.name || "upload").replaceAll("/", "_").replaceAll("\\", "_").replaceAll("\0", "").slice(0, 160) || "upload";
-        const directory=form?.get("directory") ?? "/";
-        if(typeof directory!=="string")return respond(c,fail(err.badInput("Invalid directory")));
-        const path = normalizeAiFilePath(`${directory.replace(/\/$/,"")}/${name}`);
+        const directory = form?.get("directory") ?? "/";
+        if (typeof directory !== "string") return respond(c, fail(err.badInput("Invalid directory")));
+        const path = normalizeAiFilePath(`${directory.replace(/\/$/, "")}/${name}`);
         if (!path) return respond(c, fail(err.badInput("Invalid file name")));
         if (aiProjectFilePathFromMount(path) !== null) return respond(c, fail(err.badInput("The /project namespace is reserved.")));
 
@@ -1256,7 +1281,8 @@ export const aiRoutes = (() => {
           return respond(c, ok({ file: stat }));
         } catch (error) {
           logger("ai:files").warn("Conversation upload failed", {
-            code: "file_upload_failed", conversationId: conversation.id,
+            code: "file_upload_failed",
+            conversationId: conversation.id,
             errorType: error instanceof Error ? error.name : "unknown",
           });
           return respond(c, fail(err.badInput(error instanceof Error ? error.message : "Upload failed")));

package/src/ai/run-timeout.ts

@@ -1,6 +1,8 @@
 /** Preserve why execution stopped instead of reporting an operator deadline as a user abort. */
 export class AiRunTimeout extends Error {
-  constructor(readonly budgetMs: number | null) { super("AI_RUN_TIMEOUT"); }
+  constructor(readonly budgetMs: number | null) {
+    super("AI_RUN_TIMEOUT");
+  }
   messageFor(locale?: string): string {
     const minutes = this.budgetMs ? this.budgetMs / 60_000 : null;
     return locale?.startsWith("de")

package/src/ai/runtime-tools.ts

@@ -1,3 +1,4 @@
+export { CloudAiTranscribeAudioInputSchema, CloudAiTranscribeAudioOutputSchema, createCloudAiTranscribeAudioTool } from "./audio-tool";
 export {
   CLOUD_AI_DEFERRED_BUILTIN_TOOL_NAMES,
   createCloudAiCardTool,
@@ -8,6 +9,11 @@ export {
   createConfiguredDefaultCloudAiTools,
   createDefaultCloudAiTools,
 } from "./default-tools";
+export {
+  CloudAiFetchFileInputSchema,
+  CloudAiFetchFileOutputSchema,
+  createCloudAiFetchFileTool,
+} from "./fetch-file-tool";
 export {
   CloudAiCalculateInputSchema,
   CloudAiCalculateOutputSchema,
@@ -27,16 +33,9 @@ export {
   evaluateAiDate,
   evaluateAiMath,
 } from "./file-tools";
-export {
-  CloudAiFetchFileInputSchema,
-  CloudAiFetchFileOutputSchema,
-  createCloudAiFetchFileTool,
-} from "./fetch-file-tool";
 export {
   CloudAiMarkdownToPdfInputSchema,
   CloudAiMarkdownToPdfOutputSchema,
   createCloudAiMarkdownToPdfTool,
 } from "./markdown-pdf-tool";
 export { createCloudAiViewImageTool } from "./vision-tool";
-
-export { createCloudAiTranscribeAudioTool, CloudAiTranscribeAudioInputSchema, CloudAiTranscribeAudioOutputSchema } from "./audio-tool";

package/src/ai/runtime.ts

@@ -1,8 +1,3 @@
-import { parseAiResourceMarker } from "./resource-markers";
-import { aiQuotas } from "./quotas";
-import { drainQueuedMessages } from "./message-queue";
-import { coreSettings } from "../services/settings/api";
-import { startAiDictationRuntime } from "./dictation-runtime";
 import { isDeepStrictEqual } from "node:util";
 import type { InboundEvent, Input, Message } from "@k2b/nessi";
 import type { QueueMessage } from "@k2b/sync";
@@ -11,12 +6,16 @@ import { lazySync } from "../_internal/process-sync";
 import type { RequestActor } from "../server";
 import { logger } from "../services/logging";
 import { superviseRuntimeTask } from "../services/runtime-lifecycle";
-
+import { coreSettings } from "../services/settings/api";
 import { type AiToolApprovalContext, aiTurnAllowsRememberedApprovals, rememberAiToolApproval } from "./approvals";
 import { aiChatAccessSubject, selectAssistantAiModelId } from "./assistant-models";
+import { startAiDictationRuntime } from "./dictation-runtime";
 import { AiTurnExecutor } from "./executor";
 import { canonicalizeAiConversationAttachments, snapshotAiConversationFiles } from "./file-context";
 import { startAiInvalidationRuntime, stopAiInvalidationRuntime } from "./live-outbox";
+import { drainQueuedMessages } from "./message-queue";
+import { aiQuotas } from "./quotas";
+import { parseAiResourceMarker } from "./resource-markers";
 import { isAiVisionModelConfigured } from "./settings";
 import { aiConversations } from "./store";
 import { publishAiTurnAbort, publishAiWireEvent } from "./stream";
@@ -144,10 +143,14 @@ export const prepareAiChatTurn = async (input: SubmitAiChatTurnInput) => {
   if (input.assistantChat && quotaSubject) await aiQuotas.assertAllowed(quotaSubject, resolved.profile.id);
   const runConfig: AiChatTurnRunConfig = {
     kind: "chat",
-    selectedSkillIds: [...new Set((userMessage.role === "user" ? userMessage.content : []).flatMap(part => {
-      const marker = parseAiResourceMarker(typeof part === "string" ? part : part.type === "text" ? part.text : "");
-      return marker?.ref.type === "core.ai.skill" ? [marker.ref.id] : [];
-    }))],
+    selectedSkillIds: [
+      ...new Set(
+        (userMessage.role === "user" ? userMessage.content : []).flatMap((part) => {
+          const marker = parseAiResourceMarker(typeof part === "string" ? part : part.type === "text" ? part.text : "");
+          return marker?.ref.type === "core.ai.skill" ? [marker.ref.id] : [];
+        }),
+      ),
+    ],
     ...(input.assistantChat ? { assistantChat: true } : {}),
     input: canonicalInput,
     chatId: input.chatId,
@@ -421,14 +424,21 @@ const processMessage = async (
   const leaseOwner = `${AI_WORKER_ID}:${message.messageId}:${crypto.randomUUID()}`;
   let heartbeatFailed = false;
   const touch = setInterval(() => {
-    void message.heartbeat().then(() => { heartbeatFailed = false; }).catch(() => {
-      if (!heartbeatFailed && !signal.aborted) {
-        log.warn("AI queue heartbeat failed", {
-          code: "queue_heartbeat_failed", conversationId: message.data.conversationId, turnId: message.data.turnId,
-        });
-      }
-      heartbeatFailed = true;
-    });
+    void message
+      .heartbeat()
+      .then(() => {
+        heartbeatFailed = false;
+      })
+      .catch(() => {
+        if (!heartbeatFailed && !signal.aborted) {
+          log.warn("AI queue heartbeat failed", {
+            code: "queue_heartbeat_failed",
+            conversationId: message.data.conversationId,
+            turnId: message.data.turnId,
+          });
+        }
+        heartbeatFailed = true;
+      });
   }, AI_TURN_HEARTBEAT_MS);
   if (typeof touch === "object" && "unref" in touch) touch.unref();
   try {
@@ -457,7 +467,13 @@ const publishSweepFinished = async (turn: AiTurnFinalizedAction & { error?: stri
     type: "turn_finished",
     status,
     error: status === "failed" ? (turn.error ?? "AI turn failed.") : null,
-  }).catch(() => log.warn("AI completion notification failed", {code:"completion_publish_failed",conversationId:turn.conversationId,turnId:turn.turnId}));
+  }).catch(() =>
+    log.warn("AI completion notification failed", {
+      code: "completion_publish_failed",
+      conversationId: turn.conversationId,
+      turnId: turn.turnId,
+    }),
+  );
 };
 
 export const sweepAiRuntime = async (onTurnFinalized?: (event: AiTurnFinalizedEvent) => Promise<void>): Promise<void> => {
@@ -465,7 +481,9 @@ export const sweepAiRuntime = async (onTurnFinalized?: (event: AiTurnFinalizedEv
   await drainQueuedMessages(enqueueAiTurn);
   const sweep = await aiConversations.sweepTurns({ maxAttempts: AI_TURN_MAX_ATTEMPTS });
   await Promise.all([
-    ...sweep.requeued.map((job) => enqueueAiTurn(job).catch(() => log.warn("AI recovery enqueue failed", {code:"recovery_enqueue_failed",...job}))),
+    ...sweep.requeued.map((job) =>
+      enqueueAiTurn(job).catch(() => log.warn("AI recovery enqueue failed", { code: "recovery_enqueue_failed", ...job })),
+    ),
     ...sweep.failed.map((turn) => publishSweepFinished(turn, "failed")),
     ...sweep.aborted.map((turn) => publishSweepFinished(turn, "aborted")),
   ]);