@lota-sdk/shared 0.4.8 → 0.4.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lota-sdk/shared",
-  "version": "0.4.8",
+  "version": "0.4.10",
   "type": "module",
   "main": "./src/index.ts",
   "types": "./src/index.ts",
@@ -25,7 +25,7 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "ai": "^6.0.145",
+    "ai": "^6.0.167",
     "zod": "^4.3.6"
   }
 }

package/src/constants/model.ts

@@ -1,4 +1,4 @@
-export const OPENAI_REASONING_MODEL_ID = 'openai/gpt-5.4' as const
+export const OPENAI_REASONING_MODEL_ID = 'openrouter/openai/gpt-5.4' as const
 
 export const OPENROUTER_GEMINI_FLASH_MODEL_ID = 'openrouter/google/gemini-3-flash-preview' as const
 export const OPENROUTER_TEAM_AGENT_MODEL_ID = 'openrouter/google/gemini-3-flash-preview' as const

package/src/index.ts

@@ -4,6 +4,7 @@ export * from './constants/thread'
 export * from './runtime/agent-types'
 export * from './runtime/chat-message-metadata'
 export * from './runtime/execution-plan-result'
+export * from './runtime/message-batch'
 export * from './schemas/agent-plan-draft'
 export * from './schemas/artifact'
 export * from './schemas/chat-api'

package/src/runtime/message-batch.ts

@@ -0,0 +1,47 @@
+export interface NormalizeMessageListOptions<TMessage> {
+  getMessageId: (message: TMessage) => string
+  normalizeMessage?: (message: TMessage) => TMessage
+  compareMessages?: (left: TMessage, right: TMessage) => number
+}
+
+export interface NormalizeMessageBatchOptions<TMessage> extends NormalizeMessageListOptions<TMessage> {
+  parseMessage: (value: unknown) => TMessage | null
+}
+
+export function normalizeMessageList<TMessage>(
+  messages: readonly TMessage[],
+  options: NormalizeMessageListOptions<TMessage>,
+): TMessage[] {
+  const messagesById = new Map<string, TMessage>()
+
+  for (const message of messages) {
+    const normalizedMessage = options.normalizeMessage ? options.normalizeMessage(message) : message
+    messagesById.set(options.getMessageId(normalizedMessage), normalizedMessage)
+  }
+
+  const dedupedMessages = Array.from(messagesById.values())
+  if (!options.compareMessages) {
+    return dedupedMessages
+  }
+
+  return [...dedupedMessages].sort(options.compareMessages)
+}
+
+export function normalizeMessageBatch<TMessage>(
+  raw: unknown,
+  options: NormalizeMessageBatchOptions<TMessage>,
+): TMessage[] {
+  if (!Array.isArray(raw)) {
+    return []
+  }
+
+  const parsedMessages: TMessage[] = []
+  for (const entry of raw) {
+    const parsedMessage = options.parseMessage(entry)
+    if (parsedMessage !== null) {
+      parsedMessages.push(parsedMessage)
+    }
+  }
+
+  return normalizeMessageList(parsedMessages, options)
+}

package/src/schemas/artifact.ts

@@ -78,7 +78,7 @@ export const PublishArtifactArgsSchema = z
       .refine((value) => value.trim().length > 0, 'Content is required.'),
     canonicalKey: z.string().trim().min(1).max(255).optional(),
     description: z.string().trim().min(1).max(1000).optional(),
-    tags: z.array(z.string().trim().min(1).max(100)).optional().default([]),
+    tags: z.array(z.string().trim().min(1).max(100)).default([]),
     sourceThreadId: z.string().trim().min(1).max(255).optional(),
     sourcePlanRunId: z.string().trim().min(1).max(255).optional(),
     sourcePlanNodeId: z.string().trim().min(1).max(255).optional(),

package/src/schemas/common.ts

@@ -4,6 +4,16 @@ import { THREAD } from '../constants/thread'
 
 const SURREALDB_RECORD_ID_CLASSES = new Set(['RecordId', 'StringRecordId'])
 
+function getConstructorName(value: object): string | undefined {
+  const prototype = Object.getPrototypeOf(value) as { constructor?: unknown } | null
+  if (prototype === null) {
+    return undefined
+  }
+
+  const constructor = prototype.constructor
+  return typeof constructor === 'function' && typeof constructor.name === 'string' ? constructor.name : undefined
+}
+
 export const unixTimestampSchema = z.coerce.date()
 export const isoDateTimeSchema = z.iso.datetime({ offset: true })
 export const transportIdSchema = z.string().trim().min(1)
@@ -12,7 +22,7 @@ function coerceRecordIdToString(val: unknown): unknown {
   if (val === null || val === undefined) return val
   if (typeof val === 'string') return val
   if (typeof val === 'object') {
-    const constructorName = val.constructor.name
+    const constructorName = getConstructorName(val)
     if (constructorName && SURREALDB_RECORD_ID_CLASSES.has(constructorName)) {
       return (val as { toString(): string }).toString()
     }
@@ -31,7 +41,7 @@ export const recordIdSchema = z.preprocess(
     if (val === null || val === undefined) return val
     if (typeof val === 'string') return val
     if (typeof val === 'object') {
-      const constructorName = val.constructor.name
+      const constructorName = getConstructorName(val)
       // Only coerce known SurrealDB RecordId classes
       if (constructorName && SURREALDB_RECORD_ID_CLASSES.has(constructorName)) {
         return (val as { toString(): string }).toString()

package/src/schemas/execution-plan.ts

@@ -10,6 +10,39 @@ const dbDateTimeSchema = z.coerce.date()
 const apiDateTimeSchema = z.string().datetime({ offset: true })
 
 const planSchemaLiteralSchema = z.union([z.string(), z.number(), z.boolean(), z.null()])
+const PATH_MAX_LENGTH = 500
+const unsafePathSegments = new Set(['__proto__', 'constructor', 'prototype'])
+
+// Reject dot-path segments that could mutate Object.prototype when used for nested writes.
+export function isSafePath(path: string): boolean {
+  const normalized = path.trim()
+  if (normalized.length === 0) return false
+
+  const segments = normalized.split('.')
+  if (segments.some((segment) => segment.trim().length === 0)) return false
+
+  return segments.every((segment) => {
+    const normalizedSegment = segment.trim()
+    return normalizedSegment.length > 0 && !unsafePathSegments.has(normalizedSegment)
+  })
+}
+
+export function isSafePathOrRoot(path: string): boolean {
+  return path.trim().length === 0 || isSafePath(path)
+}
+
+export const SafePathSchema = z
+  .string()
+  .trim()
+  .min(1)
+  .max(PATH_MAX_LENGTH)
+  .refine(isSafePath, { error: 'Path contains unsafe dot-path segments.' })
+
+const safePathOrRootSchema = z
+  .string()
+  .trim()
+  .max(PATH_MAX_LENGTH)
+  .refine(isSafePathOrRoot, { error: 'Path contains unsafe dot-path segments.' })
 
 /** JSON Schema enum literal type */
 export type PlanSchemaLiteral = string | number | boolean | null
@@ -381,7 +414,7 @@ export type WriteIntentAction = z.infer<typeof WriteIntentActionSchema>
 
 export const WriteIntentSchema = z
   .object({
-    targetPath: z.string().trim().min(1).max(500),
+    targetPath: SafePathSchema,
     action: WriteIntentActionSchema,
     payload: z.union([z.record(z.string(), z.unknown()), z.array(z.unknown()), z.string()]),
   })
@@ -390,7 +423,7 @@ export type WriteIntent = z.infer<typeof WriteIntentSchema>
 
 export const WriteValidationErrorSchema = z
   .object({
-    targetPath: z.string(),
+    targetPath: SafePathSchema,
     action: WriteIntentActionSchema,
     status: z.enum(['pass', 'fail']),
     issues: z.array(
@@ -407,7 +440,7 @@ export type WriteValidationError = z.infer<typeof WriteValidationErrorSchema>
 
 export const NodeWorkspaceEntrySchema = z
   .object({
-    targetPath: z.string(),
+    targetPath: SafePathSchema,
     action: WriteIntentActionSchema,
     payload: z.unknown(),
     validatedAt: apiDateTimeSchema,
@@ -574,7 +607,7 @@ export const PlanEdgeSpecSchema = z
     source: z.string().trim().min(1).max(200),
     target: z.string().trim().min(1).max(200),
     when: z.string().trim().min(1).max(500).optional(),
-    map: z.record(z.string(), z.string()).default({}),
+    map: z.record(SafePathSchema, safePathOrRootSchema).default({}),
   })
   .strict()
 export type PlanEdgeSpec = z.infer<typeof PlanEdgeSpecSchema>

package/src/schemas/tools.ts

@@ -247,15 +247,7 @@ export const ExecutionPlanArgsSchema = ExecutionPlanBaseArgsSchema.superRefine((
     if (value.node === undefined) {
       addMissingExecutionPlanFieldIssue(ctx, 'node', 'node is required for update-node.')
     }
-    for (const path of [
-      'title',
-      'objective',
-      'nodes',
-      'edges',
-      'projectTitle',
-      'targetThreadId',
-      'reason',
-    ] as const) {
+    for (const path of ['title', 'objective', 'nodes', 'edges', 'projectTitle', 'targetThreadId', 'reason'] as const) {
       if (value[path] !== undefined) {
         addUnexpectedExecutionPlanFieldIssue(
           ctx,
@@ -288,11 +280,11 @@ export type ExecutionPlanArgs =
 export const ExecutionPlanQueryArgsSchema = z
   .object({
     runId: z.string().trim().min(1).optional().describe('Specific plan run to load. Omit to list all active plans.'),
-    includeEvents: z.boolean().default(true).optional(),
-    includeArtifacts: z.boolean().default(true).optional(),
-    includeApprovals: z.boolean().default(true).optional(),
-    includeCheckpoints: z.boolean().default(false).optional(),
-    includeValidationIssues: z.boolean().default(true).optional(),
+    includeEvents: z.boolean().default(true),
+    includeArtifacts: z.boolean().default(true),
+    includeApprovals: z.boolean().default(true),
+    includeCheckpoints: z.boolean().default(false),
+    includeValidationIssues: z.boolean().default(true),
   })
   .strict()
 export type ExecutionPlanQueryArgs = z.infer<typeof ExecutionPlanQueryArgsSchema>
@@ -411,10 +403,8 @@ export type UserQuestionsArgs = z.infer<typeof UserQuestionsArgsSchema>
 export type ConsultSpecialistArgs = z.infer<typeof ConsultSpecialistArgsSchema>
 export type ConsultSpecialistResultData = AnyChatMessage
 export type ConsultTeamArgs = z.infer<typeof ConsultTeamArgsSchema>
-export type ConsultTeamResponseData = Omit<z.infer<typeof ConsultTeamResponseSchema>, 'message'> & {
-  message?: AnyChatMessage
-}
-export type ConsultTeamResultData = { responses: ConsultTeamResponseData[] }
+export type ConsultTeamResponseData = z.infer<typeof ConsultTeamResponseSchema>
+export type ConsultTeamResultData = z.infer<typeof ConsultTeamResultDataSchema>
 export type SubmitExecutionNodeResultArgs = z.infer<typeof SubmitExecutionNodeResultArgsSchema>
 export type SubmitPlanTurnResultArgs = z.infer<typeof SubmitPlanTurnResultArgsSchema>
 export type ListExecutionPlansSummary = z.infer<typeof ListExecutionPlansSummarySchema>

package/src/utils/date-time.ts

@@ -1,3 +1,11 @@
+function hasToIsoString(value: unknown): value is { toISOString: () => string } {
+  if (!value || typeof value !== 'object') {
+    return false
+  }
+
+  return typeof Reflect.get(value, 'toISOString') === 'function'
+}
+
 export function toIsoDateTimeString(value: unknown): string {
   if (value instanceof Date) {
     return value.toISOString()
@@ -11,15 +19,13 @@ export function toIsoDateTimeString(value: unknown): string {
   // Support unix timestamps (seconds or milliseconds).
   if (typeof value === 'number') {
     const millis = value < 1_000_000_000_000 ? value * 1000 : value
-    return new Date(millis).toISOString()
+    // @effect-diagnostics-next-line globalDate:off
+    return new globalThis.Date(millis).toISOString()
   }
 
   // Support objects that expose toISOString (e.g., SurrealDB temporal types).
-  if (value && typeof value === 'object') {
-    const maybeToIso = (value as { toISOString?: unknown }).toISOString
-    if (typeof maybeToIso === 'function') {
-      return (value as { toISOString: () => string }).toISOString()
-    }
+  if (hasToIsoString(value)) {
+    return value.toISOString()
   }
 
   return String(value)