@lunora/agent 1.0.0-alpha.10 → 1.0.0-alpha.11

package/dist/channels.mjs

@@ -1,181 +1 @@
-import { LunoraError } from '@lunora/errors';
-
-const DEFAULT_TIMESTAMP_TOLERANCE = 300;
-const NON_HEX = /[^0-9a-f]/iu;
-const encoder = new TextEncoder();
-const utf8 = (value) => new Uint8Array(encoder.encode(value));
-const hexToBytes = (hex) => {
-  if (hex.length % 2 !== 0 || NON_HEX.test(hex)) {
-    throw new LunoraError("BAD_REQUEST", "@lunora/agent: malformed hex signature");
-  }
-  const bytes = new Uint8Array(hex.length / 2);
-  for (let index = 0; index < bytes.length; index += 1) {
-    bytes[index] = Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16);
-  }
-  return bytes;
-};
-const verifyHmacSha256 = async (secret, message, signatureHex) => {
-  try {
-    const key = await crypto.subtle.importKey("raw", utf8(secret), { hash: "SHA-256", name: "HMAC" }, false, ["verify"]);
-    return await crypto.subtle.verify("HMAC", key, hexToBytes(signatureHex), utf8(message));
-  } catch {
-    return false;
-  }
-};
-const isFreshTimestamp = (timestampSeconds, nowSeconds, tolerance) => Number.isFinite(timestampSeconds) && Math.abs(nowSeconds - timestampSeconds) <= tolerance;
-const verifySlack = async (options) => {
-  const { body, now = Date.now() / 1e3, signature, signingSecret, timestamp, tolerance = DEFAULT_TIMESTAMP_TOLERANCE } = options;
-  if (!signature || !timestamp || !signature.startsWith("v0=")) {
-    return false;
-  }
-  if (!isFreshTimestamp(Number(timestamp), now, tolerance)) {
-    return false;
-  }
-  return verifyHmacSha256(signingSecret, `v0:${timestamp}:${body}`, signature.slice("v0=".length));
-};
-const verifyGithub = async (options) => {
-  const { body, secret, signature } = options;
-  if (!signature?.startsWith("sha256=")) {
-    return false;
-  }
-  return verifyHmacSha256(secret, body, signature.slice("sha256=".length));
-};
-const verifyDiscord = async (options) => {
-  const { body, publicKey, signature, timestamp } = options;
-  if (!signature || !timestamp) {
-    return false;
-  }
-  try {
-    const key = await crypto.subtle.importKey("raw", hexToBytes(publicKey), { name: "Ed25519" }, false, ["verify"]);
-    return await crypto.subtle.verify({ name: "Ed25519" }, key, hexToBytes(signature), utf8(timestamp + body));
-  } catch {
-    return false;
-  }
-};
-const detectChannel = (headers) => {
-  if (headers.has("x-slack-signature")) {
-    return "slack";
-  }
-  if (headers.has("x-hub-signature-256")) {
-    return "github";
-  }
-  if (headers.has("x-signature-ed25519")) {
-    return "discord";
-  }
-  return void 0;
-};
-const resolveSecret = (secret, env) => {
-  if (typeof secret === "function") {
-    return secret(env);
-  }
-  const value = env[secret];
-  return typeof value === "string" ? value : void 0;
-};
-const verifyChannel = async (channel, secret, headers, body) => {
-  switch (channel) {
-    case "discord": {
-      return verifyDiscord({
-        body,
-        publicKey: secret,
-        signature: headers.get("x-signature-ed25519") ?? void 0,
-        timestamp: headers.get("x-signature-timestamp") ?? void 0
-      });
-    }
-    case "github": {
-      return verifyGithub({ body, secret, signature: headers.get("x-hub-signature-256") ?? void 0 });
-    }
-    case "slack": {
-      return verifySlack({
-        body,
-        signature: headers.get("x-slack-signature") ?? void 0,
-        signingSecret: secret,
-        timestamp: headers.get("x-slack-request-timestamp") ?? void 0
-      });
-    }
-    default: {
-      return false;
-    }
-  }
-};
-const discordPongResponse = (channel, body) => {
-  if (channel !== "discord") {
-    return void 0;
-  }
-  try {
-    if (JSON.parse(body).type === 1) {
-      return Response.json({ type: 1 });
-    }
-  } catch {
-  }
-  return void 0;
-};
-const UNSAFE_INSTANCE_ID = /[^\w-]/gu;
-const DUPLICATE_INSTANCE = /already[\s-]?exists/iu;
-const ack = () => new Response(void 0, { status: 200 });
-const isDuplicateInstanceError = (error) => DUPLICATE_INSTANCE.test(error instanceof Error ? error.message : String(error));
-const deliveryId = (channel, headers, body) => {
-  if (channel === "github") {
-    return headers.get("x-github-delivery") ?? void 0;
-  }
-  try {
-    const parsed = JSON.parse(body);
-    const raw = channel === "slack" ? parsed.event_id : parsed.id;
-    return typeof raw === "string" ? raw : void 0;
-  } catch {
-    return void 0;
-  }
-};
-const startChannelRun = async (workflow, run, channel, id) => {
-  const sanitizedId = id === void 0 ? "" : id.replaceAll(UNSAFE_INSTANCE_ID, "");
-  if (sanitizedId === "") {
-    await workflow.create({ params: run });
-    return ack();
-  }
-  try {
-    await workflow.create({ id: `${channel}-${sanitizedId}`.slice(0, 60), params: run });
-  } catch (error) {
-    if (isDuplicateInstanceError(error)) {
-      return ack();
-    }
-    throw error;
-  }
-  return ack();
-};
-const dispatchAgentChannel = (targets) => async (request, env) => {
-  const body = await request.text();
-  const channel = detectChannel(request.headers);
-  if (channel === void 0) {
-    return new Response("Unrecognized webhook", { status: 400 });
-  }
-  const eligible = targets.map((target) => {
-    return { config: target.agent.onInbound, target };
-  }).filter((entry) => entry.config?.channel === channel);
-  const event = { channel, headers: request.headers, json: () => JSON.parse(body), rawBody: body };
-  let verifiedAny = false;
-  for (const { config, target } of eligible) {
-    const secret = resolveSecret(config.secret, env);
-    if (secret === void 0 || !await verifyChannel(channel, secret, request.headers, body)) {
-      continue;
-    }
-    verifiedAny = true;
-    const pong = discordPongResponse(channel, body);
-    if (pong) {
-      return pong;
-    }
-    const run = await config.map(event);
-    if (!run) {
-      continue;
-    }
-    const workflow = env[target.binding];
-    if (!workflow || typeof workflow.create !== "function") {
-      throw new LunoraError(
-        "INTERNAL",
-        `@lunora/agent: no Workflow binding "${target.binding}" on env for an inbound-channel agent — run codegen/dev so wrangler.jsonc declares it`
-      );
-    }
-    return await startChannelRun(workflow, run, channel, deliveryId(channel, request.headers, body));
-  }
-  return verifiedAny ? new Response(void 0, { status: 204 }) : new Response("Invalid signature", { status: 401 });
-};
-
-export { dispatchAgentChannel, isDuplicateInstanceError, verifyDiscord, verifyGithub, verifySlack };
+import{LunoraError as w}from"@lunora/errors";const m=300,v=/[^0-9a-f]/iu,x=new TextEncoder,d=e=>new Uint8Array(x.encode(e)),g=e=>{if(e.length%2!==0||v.test(e))throw new w("BAD_REQUEST","@lunora/agent: malformed hex signature");const t=new Uint8Array(e.length/2);for(let r=0;r<t.length;r+=1)t[r]=Number.parseInt(e.slice(r*2,r*2+2),16);return t},b=async(e,t,r)=>{try{const s=await crypto.subtle.importKey("raw",d(e),{hash:"SHA-256",name:"HMAC"},!1,["verify"]);return await crypto.subtle.verify("HMAC",s,g(r),d(t))}catch{return!1}},k=(e,t,r)=>Number.isFinite(e)&&Math.abs(t-e)<=r,A=async e=>{const{body:t,now:r=Date.now()/1e3,signature:s,signingSecret:n,timestamp:a,tolerance:o=m}=e;return!s||!a||!s.startsWith("v0=")||!k(Number(a),r,o)?!1:b(n,`v0:${a}:${t}`,s.slice(3))},E=async e=>{const{body:t,secret:r,signature:s}=e;return s?.startsWith("sha256=")?b(r,t,s.slice(7)):!1},S=async e=>{const{body:t,publicKey:r,signature:s,timestamp:n}=e;if(!s||!n)return!1;try{const a=await crypto.subtle.importKey("raw",g(r),{name:"Ed25519"},!1,["verify"]);return await crypto.subtle.verify({name:"Ed25519"},a,g(s),d(n+t))}catch{return!1}},N=e=>{if(e.has("x-slack-signature"))return"slack";if(e.has("x-hub-signature-256"))return"github";if(e.has("x-signature-ed25519"))return"discord"},R=(e,t)=>{if(typeof e=="function")return e(t);const r=t[e];return typeof r=="string"?r:void 0},I=async(e,t,r,s)=>{switch(e){case"discord":return S({body:s,publicKey:t,signature:r.get("x-signature-ed25519")??void 0,timestamp:r.get("x-signature-timestamp")??void 0});case"github":return E({body:s,secret:t,signature:r.get("x-hub-signature-256")??void 0});case"slack":return A({body:s,signature:r.get("x-slack-signature")??void 0,signingSecret:t,timestamp:r.get("x-slack-request-timestamp")??void 0});default:return!1}},D=(e,t)=>{if(e==="discord")try{if(JSON.parse(t).type===1)return Response.json({type:1})}catch{}},K=/[^\w-]/gu,U=/already[\s-]?exists/iu,u=()=>new Response(void 0,{status:200}),$=e=>U.test(e instanceof Error?e.message:String(e)),C=(e,t,r)=>{if(e==="github")return t.get("x-github-delivery")??void 0;try{const s=JSON.parse(r),n=e==="slack"?s.event_id:s.id;return typeof n=="string"?n:void 0}catch{return}},H=async(e,t,r,s)=>{const n=s===void 0?"":s.replaceAll(K,"");if(n==="")return await e.create({params:t}),u();try{await e.create({id:`${r}-${n}`.slice(0,60),params:t})}catch(a){if($(a))return u();throw a}return u()},j=e=>async(t,r)=>{const s=await t.text(),n=N(t.headers);if(n===void 0)return new Response("Unrecognized webhook",{status:400});const a=e.map(i=>({config:i.agent.onInbound,target:i})).filter(i=>i.config?.channel===n),o={channel:n,headers:t.headers,json:()=>JSON.parse(s),rawBody:s};let f=!1;for(const{config:i,target:l}of a){const y=R(i.secret,r);if(y===void 0||!await I(n,y,t.headers,s))continue;f=!0;const h=D(n,s);if(h)return h;const p=await i.map(o);if(!p)continue;const c=r[l.binding];if(!c||typeof c.create!="function")throw new w("INTERNAL",`@lunora/agent: no Workflow binding "${l.binding}" on env for an inbound-channel agent — run codegen/dev so wrangler.jsonc declares it`);return await H(c,p,n,C(n,t.headers,s))}return f?new Response(void 0,{status:204}):new Response("Invalid signature",{status:401})};export{j as dispatchAgentChannel,$ as isDuplicateInstanceError,S as verifyDiscord,E as verifyGithub,A as verifySlack};

package/dist/component.mjs

@@ -1,418 +1,2 @@
-import { LunoraError } from '@lunora/errors';
-import { defineTable, initLunora, defineSchemaExtension } from '@lunora/server';
-import { v } from '@lunora/values';
-import { a as asInternal, A as AGENT_EXTENSION_KEY, g as graphTables, d as definedColumns, b as graphComponent } from './packem_shared/graph-component-Bbaxxymp.mjs';
-export { n as normalizeEntityName } from './packem_shared/graph-component-Bbaxxymp.mjs';
-export { sandboxComponent } from './packem_shared/sandboxComponent-DR3pTwBL.mjs';
-
-const EPISODES_TABLE = "agent_episodes";
-const DEFAULT_EPISODE_RECALL = 5;
-const MAX_EPISODE_RECALL = 20;
-const MAX_EPISODE_SUMMARY_CHARS = 500;
-const MAX_EPISODE_RETENTION = 200;
-const WHITESPACE_RUN = /\s+/gu;
-const clampRecall = (value) => {
-  if (value === void 0 || !Number.isFinite(value)) {
-    return DEFAULT_EPISODE_RECALL;
-  }
-  return Math.min(MAX_EPISODE_RECALL, Math.max(1, Math.trunc(value)));
-};
-const episodeTables = {
-  /**
-   * One episode per completed run — a short natural-language summary of the
-   * exchange, time-ordered for recency recall. `messageKey` (the extract
-   * step's instance-scoped key) is the idempotency key so a workflow replay
-   * never double-records the same run.
-   */
-  episodes: defineTable({
-    createdAt: v.number(),
-    messageKey: v.string(),
-    owner: v.string(),
-    /** A one/two-sentence summary of the run, injected as a memory-log line. */
-    summary: v.string(),
-    /** The thread the episode came from (provenance; not used for recall scope). */
-    threadKey: v.optional(v.string())
-  }).index("byOwnerCreatedAt", ["owner", "createdAt"]).index("byOwnerMessageKey", ["owner", "messageKey"], { unique: true }).public()
-};
-const { mutation: mutation$1, query: query$1 } = initLunora.dataModel().create();
-const episodicComponent = () => {
-  const agentEpisodeUpsert = mutation$1.input({
-    createdAt: v.optional(v.number()),
-    messageKey: v.string(),
-    owner: v.string(),
-    summary: v.string(),
-    threadKey: v.optional(v.string())
-  }).mutation(async ({ args, ctx: context }) => {
-    const summary = args.summary.replaceAll(WHITESPACE_RUN, " ").trim().slice(0, MAX_EPISODE_SUMMARY_CHARS);
-    if (summary.length === 0) {
-      return { recorded: false };
-    }
-    const existing = await context.db.query(EPISODES_TABLE).withIndex("byOwnerMessageKey", (q) => q.eq("owner", args.owner).eq("messageKey", args.messageKey)).first();
-    if (existing) {
-      return { recorded: false };
-    }
-    await context.db.insert(EPISODES_TABLE, {
-      createdAt: args.createdAt ?? Date.now(),
-      messageKey: args.messageKey,
-      owner: args.owner,
-      summary,
-      ...args.threadKey === void 0 ? {} : { threadKey: args.threadKey }
-    });
-    const overflow = await context.db.query(EPISODES_TABLE).withIndex("byOwnerCreatedAt", (q) => q.eq("owner", args.owner)).order("asc").take(MAX_EPISODE_RETENTION + 1);
-    for (const stale of overflow.slice(0, Math.max(0, overflow.length - MAX_EPISODE_RETENTION))) {
-      await context.db.delete(stale["_id"]);
-    }
-    return { recorded: true };
-  });
-  const agentEpisodeRecall = query$1.input({
-    limit: v.optional(v.number()),
-    owner: v.string()
-  }).query(async ({ args, ctx: context }) => {
-    const recent = await context.db.query(EPISODES_TABLE).withIndex("byOwnerCreatedAt", (q) => q.eq("owner", args.owner)).order("desc").take(clampRecall(args.limit));
-    if (recent.length === 0) {
-      return { context: "" };
-    }
-    return {
-      context: recent.toReversed().map((row) => `- ${row["summary"]}`).join("\n")
-    };
-  });
-  return {
-    agentEpisodeRecall: asInternal(agentEpisodeRecall),
-    agentEpisodeUpsert: asInternal(agentEpisodeUpsert)
-  };
-};
-
-const THREADS_BARE_TABLE = "threads";
-const MESSAGES_BARE_TABLE = "messages";
-const THREADS_TABLE = `${AGENT_EXTENSION_KEY}_${THREADS_BARE_TABLE}`;
-const MESSAGES_TABLE = `${AGENT_EXTENSION_KEY}_${MESSAGES_BARE_TABLE}`;
-const agentExtension = defineSchemaExtension(AGENT_EXTENSION_KEY, {
-  tables: {
-    [MESSAGES_BARE_TABLE]: defineTable({
-      content: v.string(),
-      createdAt: v.number(),
-      messageKey: v.string(),
-      role: v.union(v.literal("user"), v.literal("assistant"), v.literal("tool"), v.literal("system")),
-      seq: v.number(),
-      /**
-       * Human-in-the-loop approval marker: `"awaiting_approval"` on the
-       * placeholder written while a run pauses on a gated tool, then
-       * `"approved"`/`"rejected"` on the tool result once resolved. Optional
-       * so ordinary messages (and pre-existing rows) are unaffected.
-       */
-      status: v.optional(v.union(v.literal("awaiting_approval"), v.literal("approved"), v.literal("rejected"))),
-      stepName: v.optional(v.string()),
-      threadKey: v.string(),
-      toolCallId: v.optional(v.string()),
-      toolCalls: v.optional(v.array(v.object({ id: v.string(), input: v.any(), name: v.string() }))),
-      toolName: v.optional(v.string())
-    }).index("byThread", ["threadKey", "seq"]).index("byMessageKey", ["threadKey", "messageKey"], { unique: true }).public(),
-    [THREADS_BARE_TABLE]: defineTable({
-      agent: v.string(),
-      createdAt: v.number(),
-      error: v.optional(v.string()),
-      /**
-       * The workflow instance id of the run that currently owns this
-       * thread. The concurrency guard compares it to a starting run's own
-       * instance id — a match is a replay (allow), a mismatch while
-       * `status === "running"` is a genuine second run (apply
-       * `onConcurrentRun`). Also the target for `cancel`/`replace`. Optional
-       * so pre-existing threads (written before this column) are unaffected.
-       */
-      instanceId: v.optional(v.string()),
-      key: v.string(),
-      // Next message seq — incremented on every append (see above).
-      messageCount: v.number(),
-      /**
-       * Verified identity of the thread owner (pass `ctx.auth.userId`
-       * when starting a run). When set, the public queries only answer
-       * for a caller with that identity; when absent the thread is
-       * readable by anyone who knows its key (single-tenant/anonymous
-       * apps). First writer wins — a later run may not change it.
-       */
-      owner: v.optional(v.string()),
-      /**
-       * The thread's synced agent state — a JSON object written by the
-       * internal `agentSetState` mutation (absolute REPLACE) and read by the
-       * public `agentState` query (`ctx.getState` / `useAgentState`). Seeded
-       * from `defineAgent({ initialState })` on thread creation. Optional so
-       * agent-free apps and pre-existing threads (written before this column)
-       * are unaffected.
-       */
-      state: v.optional(v.any()),
-      status: v.union(v.literal("idle"), v.literal("running"), v.literal("error"), v.literal("cancelled"), v.literal("awaiting_input")),
-      title: v.optional(v.string()),
-      updatedAt: v.number(),
-      /**
-       * Cumulative token usage for the latest run on this thread, patched
-       * at run end. Optional so agent-free apps and pre-existing threads
-       * (written before this column existed) are unaffected.
-       */
-      usage: v.optional(v.object({ inputTokens: v.optional(v.number()), outputTokens: v.optional(v.number()), totalTokens: v.optional(v.number()) }))
-    }).index("byKey", ["key"], { unique: true }).index("byAgent", ["agent"]).index("byInstance", ["instanceId"]).public(),
-    // The owner-scoped graph-memory tables (`agent_entities`/`agent_edges`)
-    // live in graph-component.ts alongside the functions that read/write
-    // them; spread in here so the app still merges one `agentExtension`.
-    ...graphTables,
-    // The owner-scoped episodic-memory table (`agent_episodes`) lives in
-    // episodic-component.ts alongside its functions; spread in here too.
-    ...episodeTables
-  }
-});
-const { mutation, query } = initLunora.dataModel().create();
-const agentComponent = () => {
-  const agentEnsureThread = mutation.input({
-    agent: v.string(),
-    // Seed the thread's synced state — set on the INSERT branch only
-    // (first writer wins, like owner/title), so a replay never re-seeds.
-    initialState: v.optional(v.any()),
-    instanceId: v.optional(v.string()),
-    key: v.string(),
-    onConcurrentRun: v.optional(v.union(v.literal("reject"), v.literal("queue"), v.literal("replace"))),
-    owner: v.optional(v.string()),
-    title: v.optional(v.string())
-  }).mutation(async ({ args, ctx: context }) => {
-    const now = Date.now();
-    const existing = await context.db.query(THREADS_TABLE).withIndex("byKey", (q) => q.eq("key", args.key)).first();
-    if (existing) {
-      if (existing["owner"] !== args.owner && args.owner !== void 0) {
-        throw new Error(`@lunora/agent: thread "${args.key}" belongs to another owner`);
-      }
-      const priorInstanceId = existing["instanceId"];
-      const isConcurrentRun = (existing["status"] === "running" || existing["status"] === "awaiting_input") && priorInstanceId !== void 0 && (args.instanceId === void 0 || args.instanceId !== priorInstanceId);
-      if (isConcurrentRun) {
-        const policy = args.onConcurrentRun ?? "reject";
-        if (policy !== "replace") {
-          throw new LunoraError(
-            "CONFLICT",
-            `@lunora/agent: thread "${args.key}" already has a run in flight (instance "${priorInstanceId}") — onConcurrentRun="${policy}"`
-          );
-        }
-        await context.db.patch(existing["_id"], {
-          error: void 0,
-          status: "running",
-          updatedAt: now,
-          ...args.instanceId === void 0 ? {} : { instanceId: args.instanceId }
-        });
-        return { created: false, priorInstanceId, replaced: true };
-      }
-      await context.db.patch(existing["_id"], {
-        error: void 0,
-        status: "running",
-        updatedAt: now,
-        ...args.instanceId === void 0 ? {} : { instanceId: args.instanceId }
-      });
-      return { created: false };
-    }
-    await context.db.insert(THREADS_TABLE, {
-      agent: args.agent,
-      createdAt: now,
-      key: args.key,
-      messageCount: 0,
-      status: "running",
-      updatedAt: now,
-      ...definedColumns({ instanceId: args.instanceId, owner: args.owner, state: args.initialState, title: args.title })
-    });
-    return { created: true };
-  });
-  const agentAppendMessage = mutation.input({
-    content: v.string(),
-    messageKey: v.string(),
-    role: v.union(v.literal("user"), v.literal("assistant"), v.literal("tool"), v.literal("system")),
-    status: v.optional(v.union(v.literal("awaiting_approval"), v.literal("approved"), v.literal("rejected"))),
-    stepName: v.optional(v.string()),
-    threadKey: v.string(),
-    toolCallId: v.optional(v.string()),
-    toolCalls: v.optional(v.array(v.object({ id: v.string(), input: v.any(), name: v.string() }))),
-    toolName: v.optional(v.string())
-  }).mutation(async ({ args, ctx: context }) => {
-    const existing = await context.db.query(MESSAGES_TABLE).withIndex("byMessageKey", (q) => q.eq("threadKey", args.threadKey).eq("messageKey", args.messageKey)).first();
-    if (existing) {
-      return { seq: existing["seq"] };
-    }
-    const thread = await context.db.query(THREADS_TABLE).withIndex("byKey", (q) => q.eq("key", args.threadKey)).first();
-    if (!thread) {
-      throw new Error(`@lunora/agent: cannot append to unknown thread "${args.threadKey}" — run agentEnsureThread first`);
-    }
-    const seq = thread["messageCount"];
-    const now = Date.now();
-    await context.db.insert(MESSAGES_TABLE, {
-      content: args.content,
-      createdAt: now,
-      messageKey: args.messageKey,
-      role: args.role,
-      seq,
-      threadKey: args.threadKey,
-      ...args.status === void 0 ? {} : { status: args.status },
-      ...args.stepName === void 0 ? {} : { stepName: args.stepName },
-      ...args.toolCallId === void 0 ? {} : { toolCallId: args.toolCallId },
-      ...args.toolCalls === void 0 ? {} : { toolCalls: args.toolCalls },
-      ...args.toolName === void 0 ? {} : { toolName: args.toolName }
-    });
-    await context.db.patch(thread["_id"], { messageCount: seq + 1, updatedAt: now });
-    return { seq };
-  });
-  const agentPatchThread = mutation.input({
-    error: v.optional(v.string()),
-    // Target by thread key (the loop) OR by workflow instance id (cancel,
-    // which only knows the instance it terminated). Exactly one is set.
-    instanceId: v.optional(v.string()),
-    key: v.optional(v.string()),
-    status: v.optional(v.union(v.literal("idle"), v.literal("running"), v.literal("error"), v.literal("cancelled"), v.literal("awaiting_input"))),
-    title: v.optional(v.string()),
-    usage: v.optional(v.object({ inputTokens: v.optional(v.number()), outputTokens: v.optional(v.number()), totalTokens: v.optional(v.number()) }))
-  }).mutation(async ({ args, ctx: context }) => {
-    const { instanceId, key } = args;
-    let thread;
-    if (key !== void 0) {
-      thread = await context.db.query(THREADS_TABLE).withIndex("byKey", (q) => q.eq("key", key)).first();
-    } else if (instanceId !== void 0) {
-      thread = await context.db.query(THREADS_TABLE).withIndex("byInstance", (q) => q.eq("instanceId", instanceId)).first();
-    }
-    if (!thread) {
-      return;
-    }
-    await context.db.patch(thread["_id"], {
-      updatedAt: Date.now(),
-      ...args.error === void 0 ? {} : { error: args.error },
-      ...args.status === void 0 ? {} : { status: args.status },
-      ...args.title === void 0 ? {} : { title: args.title },
-      // The loop patches a per-run cumulative total; setting it (rather
-      // than adding) keeps the write idempotent under workflow replay.
-      ...args.usage === void 0 ? {} : { usage: args.usage }
-    });
-  });
-  const agentSetState = mutation.input({
-    key: v.string(),
-    state: v.any()
-  }).mutation(async ({ args, ctx: context }) => {
-    const thread = await context.db.query(THREADS_TABLE).withIndex("byKey", (q) => q.eq("key", args.key)).first();
-    if (!thread) {
-      return;
-    }
-    await context.db.patch(thread["_id"], { state: args.state, updatedAt: Date.now() });
-  });
-  const readableThread = (thread, auth) => {
-    if (!thread) {
-      return void 0;
-    }
-    const { owner } = thread;
-    if (owner !== void 0 && owner !== (auth.userId ?? void 0)) {
-      return void 0;
-    }
-    return thread;
-  };
-  const agentThread = query.input({ key: v.string() }).query(async ({ args, ctx: context }) => {
-    const thread = await context.db.query(THREADS_TABLE).withIndex("byKey", (q) => q.eq("key", args.key)).first();
-    return readableThread(thread, context.auth);
-  });
-  const agentState = query.input({ key: v.string() }).query(async ({ args, ctx: context }) => {
-    const thread = await context.db.query(THREADS_TABLE).withIndex("byKey", (q) => q.eq("key", args.key)).first();
-    return readableThread(thread, context.auth)?.["state"];
-  });
-  const agentMessages = query.input({ key: v.string(), limit: v.optional(v.number()) }).query(async ({ args, ctx: context }) => {
-    const thread = await context.db.query(THREADS_TABLE).withIndex("byKey", (q) => q.eq("key", args.key)).first();
-    if (readableThread(thread, context.auth) === void 0) {
-      return [];
-    }
-    if (args.limit !== void 0) {
-      const tail = await context.db.query(MESSAGES_TABLE).withIndex("byThread", (q) => q.eq("threadKey", args.key)).order("desc").take(args.limit);
-      return tail.toReversed();
-    }
-    return context.db.query(MESSAGES_TABLE).withIndex("byThread", (q) => q.eq("threadKey", args.key)).collect();
-  });
-  const agentResolveApproval = mutation.input({
-    decision: v.union(v.literal("approve"), v.literal("reject")),
-    instanceId: v.string(),
-    note: v.optional(v.string()),
-    threadKey: v.string(),
-    toolCallId: v.string()
-  }).mutation(async ({ args, ctx: context }) => {
-    const thread = await context.db.query(THREADS_TABLE).withIndex("byKey", (q) => q.eq("key", args.threadKey)).first();
-    const readable = readableThread(thread, context.auth);
-    if (readable === void 0) {
-      throw new LunoraError("FORBIDDEN", `@lunora/agent: not allowed to resolve approvals on thread "${args.threadKey}"`);
-    }
-    if (readable["instanceId"] !== args.instanceId) {
-      throw new LunoraError("FORBIDDEN", `@lunora/agent: instance "${args.instanceId}" does not own thread "${args.threadKey}"`);
-    }
-    const agentName = readable["agent"];
-    const { agents } = context;
-    const handle = agents?.[agentName];
-    if (typeof handle?.sendEvent !== "function") {
-      throw new LunoraError(
-        "INTERNAL",
-        `@lunora/agent: no ctx.agents["${agentName}"] producer to resolve the approval — run codegen/dev so the agent binding is wired`
-      );
-    }
-    await handle.sendEvent(args.instanceId, {
-      payload: { decision: args.decision, toolCallId: args.toolCallId, ...args.note === void 0 ? {} : { note: args.note } },
-      // Scoped per tool call — see the doc comment above.
-      type: `agent-approval:${args.toolCallId}`
-    });
-    return { resolved: true };
-  });
-  const agentRun = mutation.input({
-    agent: v.string(),
-    input: v.string(),
-    threadKey: v.string(),
-    title: v.optional(v.string())
-  }).mutation(async ({ args, ctx: context }) => {
-    const { agents } = context;
-    const handle = agents?.[args.agent];
-    if (typeof handle?.run !== "function") {
-      throw new LunoraError(
-        "INTERNAL",
-        `@lunora/agent: no ctx.agents["${args.agent}"] producer to start a run — run codegen/dev so the agent binding is wired, and check the agent name`
-      );
-    }
-    if (handle.publicRun !== true) {
-      throw new LunoraError(
-        "FORBIDDEN",
-        `@lunora/agent: agent "${args.agent}" is not enabled for public runs — set defineAgent({ publicRun: true }) to allow an external client (e.g. the @lunora/mcp server) to start it`
-      );
-    }
-    const owner = context.auth.userId ?? void 0;
-    const inflight = await context.db.query(THREADS_TABLE).withIndex("byKey", (q) => q.eq("key", args.threadKey)).first();
-    if (inflight) {
-      const status = inflight["status"];
-      const inflightInstanceId = inflight["instanceId"];
-      const inflightOwner = inflight["owner"];
-      if ((status === "running" || status === "awaiting_input") && inflightInstanceId !== void 0 && (inflightOwner === void 0 || inflightOwner === owner)) {
-        return { id: inflightInstanceId, threadKey: args.threadKey };
-      }
-      if (inflightOwner !== owner && owner !== void 0) {
-        throw new LunoraError("FORBIDDEN", `@lunora/agent: thread "${args.threadKey}" belongs to another owner`);
-      }
-    }
-    const { id } = await handle.run({
-      input: args.input,
-      threadKey: args.threadKey,
-      ...owner === void 0 ? {} : { owner },
-      ...args.title === void 0 ? {} : { title: args.title }
-    });
-    return { id, threadKey: args.threadKey };
-  });
-  const graph = graphComponent();
-  const episodic = episodicComponent();
-  return {
-    extension: agentExtension,
-    functions: {
-      agentAppendMessage: asInternal(agentAppendMessage),
-      agentEnsureThread: asInternal(agentEnsureThread),
-      agentEpisodeRecall: episodic.agentEpisodeRecall,
-      agentEpisodeUpsert: episodic.agentEpisodeUpsert,
-      agentGraphTraverse: graph.agentGraphTraverse,
-      agentGraphUpsert: graph.agentGraphUpsert,
-      agentMessages,
-      agentPatchThread: asInternal(agentPatchThread),
-      agentResolveApproval,
-      agentRun,
-      agentSetState: asInternal(agentSetState),
-      agentState,
-      agentThread
-    }
-  };
-};
-
-export { agentComponent, agentExtension };
+import{LunoraError as w}from"@lunora/errors";import{defineTable as x,initLunora as $,defineSchemaExtension as j}from"@lunora/server";import{v as e}from"@lunora/values";import{i as b,o as k,q as O,s as S,j as F}from"./packem_shared/graph-component-B2YmC2eL.mjs";import{p as ne}from"./packem_shared/graph-component-B2YmC2eL.mjs";import{sandboxComponent as ie}from"./packem_shared/sandboxComponent-BhaGHsQZ.mjs";const I="agent_episodes",L=5,U=20,B=500,N=200,G=/\s+/gu,z=c=>c===void 0||!Number.isFinite(c)?L:Math.min(U,Math.max(1,Math.trunc(c))),P={episodes:x({createdAt:e.number(),messageKey:e.string(),owner:e.string(),summary:e.string(),threadKey:e.optional(e.string())}).index("byOwnerCreatedAt",["owner","createdAt"]).index("byOwnerMessageKey",["owner","messageKey"],{unique:!0}).public()},{mutation:H,query:J}=$.dataModel().create(),Q=()=>{const c=H.input({createdAt:e.optional(e.number()),messageKey:e.string(),owner:e.string(),summary:e.string(),threadKey:e.optional(e.string())}).mutation(async({args:s,ctx:u})=>{const l=s.summary.replaceAll(G," ").trim().slice(0,B);if(l.length===0)return{recorded:!1};if(await u.db.query(I).withIndex("byOwnerMessageKey",p=>p.eq("owner",s.owner).eq("messageKey",s.messageKey)).first())return{recorded:!1};await u.db.insert(I,{createdAt:s.createdAt??Date.now(),messageKey:s.messageKey,owner:s.owner,summary:l,...s.threadKey===void 0?{}:{threadKey:s.threadKey}});const g=await u.db.query(I).withIndex("byOwnerCreatedAt",p=>p.eq("owner",s.owner)).order("asc").take(N+1);for(const p of g.slice(0,Math.max(0,g.length-N)))await u.db.delete(p._id);return{recorded:!0}}),v=J.input({limit:e.optional(e.number()),owner:e.string()}).query(async({args:s,ctx:u})=>{const l=await u.db.query(I).withIndex("byOwnerCreatedAt",g=>g.eq("owner",s.owner)).order("desc").take(z(s.limit));return l.length===0?{context:""}:{context:l.toReversed().map(g=>`- ${g.summary}`).join(`
+`)}});return{agentEpisodeRecall:b(v),agentEpisodeUpsert:b(c)}},T="threads",R="messages",d=`${k}_${T}`,K=`${k}_${R}`,V=j(k,{tables:{[R]:x({content:e.string(),createdAt:e.number(),messageKey:e.string(),role:e.union(e.literal("user"),e.literal("assistant"),e.literal("tool"),e.literal("system")),seq:e.number(),status:e.optional(e.union(e.literal("awaiting_approval"),e.literal("approved"),e.literal("rejected"))),stepName:e.optional(e.string()),threadKey:e.string(),toolCallId:e.optional(e.string()),toolCalls:e.optional(e.array(e.object({id:e.string(),input:e.any(),name:e.string()}))),toolName:e.optional(e.string())}).index("byThread",["threadKey","seq"]).index("byMessageKey",["threadKey","messageKey"],{unique:!0}).public(),[T]:x({agent:e.string(),createdAt:e.number(),error:e.optional(e.string()),instanceId:e.optional(e.string()),key:e.string(),messageCount:e.number(),owner:e.optional(e.string()),state:e.optional(e.any()),status:e.union(e.literal("idle"),e.literal("running"),e.literal("error"),e.literal("cancelled"),e.literal("awaiting_input")),title:e.optional(e.string()),updatedAt:e.number(),usage:e.optional(e.object({inputTokens:e.optional(e.number()),outputTokens:e.optional(e.number()),totalTokens:e.optional(e.number())}))}).index("byKey",["key"],{unique:!0}).index("byAgent",["agent"]).index("byInstance",["instanceId"]).public(),...O,...P}}),{mutation:m,query:q}=$.dataModel().create(),ee=()=>{const c=m.input({agent:e.string(),initialState:e.optional(e.any()),instanceId:e.optional(e.string()),key:e.string(),onConcurrentRun:e.optional(e.union(e.literal("reject"),e.literal("queue"),e.literal("replace"))),owner:e.optional(e.string()),title:e.optional(e.string())}).mutation(async({args:t,ctx:a})=>{const r=Date.now(),n=await a.db.query(d).withIndex("byKey",i=>i.eq("key",t.key)).first();if(n){if(n.owner!==t.owner&&t.owner!==void 0)throw new Error(`@lunora/agent: thread "${t.key}" belongs to another owner`);const i=n.instanceId;if((n.status==="running"||n.status==="awaiting_input")&&i!==void 0&&(t.instanceId===void 0||t.instanceId!==i)){const o=t.onConcurrentRun??"reject";if(o!=="replace")throw new w("CONFLICT",`@lunora/agent: thread "${t.key}" already has a run in flight (instance "${i}") — onConcurrentRun="${o}"`);return await a.db.patch(n._id,{error:void 0,status:"running",updatedAt:r,...t.instanceId===void 0?{}:{instanceId:t.instanceId}}),{created:!1,priorInstanceId:i,replaced:!0}}return await a.db.patch(n._id,{error:void 0,status:"running",updatedAt:r,...t.instanceId===void 0?{}:{instanceId:t.instanceId}}),{created:!1}}return await a.db.insert(d,{agent:t.agent,createdAt:r,key:t.key,messageCount:0,status:"running",updatedAt:r,...S({instanceId:t.instanceId,owner:t.owner,state:t.initialState,title:t.title})}),{created:!0}}),v=m.input({content:e.string(),messageKey:e.string(),role:e.union(e.literal("user"),e.literal("assistant"),e.literal("tool"),e.literal("system")),status:e.optional(e.union(e.literal("awaiting_approval"),e.literal("approved"),e.literal("rejected"))),stepName:e.optional(e.string()),threadKey:e.string(),toolCallId:e.optional(e.string()),toolCalls:e.optional(e.array(e.object({id:e.string(),input:e.any(),name:e.string()}))),toolName:e.optional(e.string())}).mutation(async({args:t,ctx:a})=>{const r=await a.db.query(K).withIndex("byMessageKey",y=>y.eq("threadKey",t.threadKey).eq("messageKey",t.messageKey)).first();if(r)return{seq:r.seq};const n=await a.db.query(d).withIndex("byKey",y=>y.eq("key",t.threadKey)).first();if(!n)throw new Error(`@lunora/agent: cannot append to unknown thread "${t.threadKey}" — run agentEnsureThread first`);const i=n.messageCount,o=Date.now();return await a.db.insert(K,{content:t.content,createdAt:o,messageKey:t.messageKey,role:t.role,seq:i,threadKey:t.threadKey,...t.status===void 0?{}:{status:t.status},...t.stepName===void 0?{}:{stepName:t.stepName},...t.toolCallId===void 0?{}:{toolCallId:t.toolCallId},...t.toolCalls===void 0?{}:{toolCalls:t.toolCalls},...t.toolName===void 0?{}:{toolName:t.toolName}}),await a.db.patch(n._id,{messageCount:i+1,updatedAt:o}),{seq:i}}),s=m.input({error:e.optional(e.string()),instanceId:e.optional(e.string()),key:e.optional(e.string()),status:e.optional(e.union(e.literal("idle"),e.literal("running"),e.literal("error"),e.literal("cancelled"),e.literal("awaiting_input"))),title:e.optional(e.string()),usage:e.optional(e.object({inputTokens:e.optional(e.number()),outputTokens:e.optional(e.number()),totalTokens:e.optional(e.number())}))}).mutation(async({args:t,ctx:a})=>{const{instanceId:r,key:n}=t;let i;n!==void 0?i=await a.db.query(d).withIndex("byKey",o=>o.eq("key",n)).first():r!==void 0&&(i=await a.db.query(d).withIndex("byInstance",o=>o.eq("instanceId",r)).first()),i&&await a.db.patch(i._id,{updatedAt:Date.now(),...t.error===void 0?{}:{error:t.error},...t.status===void 0?{}:{status:t.status},...t.title===void 0?{}:{title:t.title},...t.usage===void 0?{}:{usage:t.usage}})}),u=m.input({key:e.string(),state:e.any()}).mutation(async({args:t,ctx:a})=>{const r=await a.db.query(d).withIndex("byKey",n=>n.eq("key",t.key)).first();r&&await a.db.patch(r._id,{state:t.state,updatedAt:Date.now()})}),l=(t,a)=>{if(!t)return;const{owner:r}=t;if(!(r!==void 0&&r!==(a.userId??void 0)))return t},g=q.input({key:e.string()}).query(async({args:t,ctx:a})=>{const r=await a.db.query(d).withIndex("byKey",n=>n.eq("key",t.key)).first();return l(r,a.auth)}),p=q.input({key:e.string()}).query(async({args:t,ctx:a})=>{const r=await a.db.query(d).withIndex("byKey",n=>n.eq("key",t.key)).first();return l(r,a.auth)?.state}),_=q.input({key:e.string(),limit:e.optional(e.number())}).query(async({args:t,ctx:a})=>{const r=await a.db.query(d).withIndex("byKey",n=>n.eq("key",t.key)).first();return l(r,a.auth)===void 0?[]:t.limit!==void 0?(await a.db.query(K).withIndex("byThread",n=>n.eq("threadKey",t.key)).order("desc").take(t.limit)).toReversed():a.db.query(K).withIndex("byThread",n=>n.eq("threadKey",t.key)).collect()}),D=m.input({decision:e.union(e.literal("approve"),e.literal("reject")),instanceId:e.string(),note:e.optional(e.string()),threadKey:e.string(),toolCallId:e.string()}).mutation(async({args:t,ctx:a})=>{const r=await a.db.query(d).withIndex("byKey",h=>h.eq("key",t.threadKey)).first(),n=l(r,a.auth);if(n===void 0)throw new w("FORBIDDEN",`@lunora/agent: not allowed to resolve approvals on thread "${t.threadKey}"`);if(n.instanceId!==t.instanceId)throw new w("FORBIDDEN",`@lunora/agent: instance "${t.instanceId}" does not own thread "${t.threadKey}"`);const i=n.agent,{agents:o}=a,y=o?.[i];if(typeof y?.sendEvent!="function")throw new w("INTERNAL",`@lunora/agent: no ctx.agents["${i}"] producer to resolve the approval — run codegen/dev so the agent binding is wired`);return await y.sendEvent(t.instanceId,{payload:{decision:t.decision,toolCallId:t.toolCallId,...t.note===void 0?{}:{note:t.note}},type:`agent-approval:${t.toolCallId}`}),{resolved:!0}}),M=m.input({agent:e.string(),input:e.string(),threadKey:e.string(),title:e.optional(e.string())}).mutation(async({args:t,ctx:a})=>{const{agents:r}=a,n=r?.[t.agent];if(typeof n?.run!="function")throw new w("INTERNAL",`@lunora/agent: no ctx.agents["${t.agent}"] producer to start a run — run codegen/dev so the agent binding is wired, and check the agent name`);if(n.publicRun!==!0)throw new w("FORBIDDEN",`@lunora/agent: agent "${t.agent}" is not enabled for public runs — set defineAgent({ publicRun: true }) to allow an external client (e.g. the @lunora/mcp server) to start it`);const i=a.auth.userId??void 0,o=await a.db.query(d).withIndex("byKey",h=>h.eq("key",t.threadKey)).first();if(o){const h=o.status,E=o.instanceId,f=o.owner;if((h==="running"||h==="awaiting_input")&&E!==void 0&&(f===void 0||f===i))return{id:E,threadKey:t.threadKey};if(f!==i&&i!==void 0)throw new w("FORBIDDEN",`@lunora/agent: thread "${t.threadKey}" belongs to another owner`)}const{id:y}=await n.run({input:t.input,threadKey:t.threadKey,...i===void 0?{}:{owner:i},...t.title===void 0?{}:{title:t.title}});return{id:y,threadKey:t.threadKey}}),C=F(),A=Q();return{extension:V,functions:{agentAppendMessage:b(v),agentEnsureThread:b(c),agentEpisodeRecall:A.agentEpisodeRecall,agentEpisodeUpsert:A.agentEpisodeUpsert,agentGraphTraverse:C.agentGraphTraverse,agentGraphUpsert:C.agentGraphUpsert,agentMessages:_,agentPatchThread:b(s),agentResolveApproval:D,agentRun:M,agentSetState:b(u),agentState:p,agentThread:g}}};export{ee as agentComponent,V as agentExtension,ne as normalizeEntityName,ie as sandboxComponent};

package/dist/inbound.mjs

@@ -1,32 +1 @@
-import { LunoraError } from '@lunora/errors';
-import { createInboundEmailHandler, parseInboundEmail } from '@lunora/mail/inbound';
-
-const dispatchAgentEmail = (targets) => {
-  const handler = createInboundEmailHandler({
-    dispatch: async (email, context) => {
-      for (const target of targets) {
-        const mapper = target.agent.onEmail;
-        if (!mapper) {
-          continue;
-        }
-        const run = await mapper(email);
-        if (run === null || run === void 0) {
-          continue;
-        }
-        const binding = context.env[target.binding];
-        if (!binding || typeof binding.create !== "function") {
-          throw new LunoraError(
-            "INTERNAL",
-            `@lunora/agent: no Workflow binding "${target.binding}" on env for an inbound agent — run codegen/dev so wrangler.jsonc declares it`
-          );
-        }
-        await binding.create({ params: run });
-        return;
-      }
-    },
-    parse: parseInboundEmail
-  });
-  return async (message, env, context) => handler(message, env, context);
-};
-
-export { dispatchAgentEmail };
+import{LunoraError as s}from"@lunora/errors";import{createInboundEmailHandler as d,parseInboundEmail as u}from"@lunora/mail/inbound";const m=i=>{const c=d({dispatch:async(o,a)=>{for(const n of i){const t=n.agent.onEmail;if(!t)continue;const e=await t(o);if(e==null)continue;const r=a.env[n.binding];if(!r||typeof r.create!="function")throw new s("INTERNAL",`@lunora/agent: no Workflow binding "${n.binding}" on env for an inbound agent — run codegen/dev so wrangler.jsonc declares it`);await r.create({params:e});return}},parse:u});return async(o,a,n)=>c(o,a,n)};export{m as dispatchAgentEmail};