@lunora/agent 1.0.0-alpha.9 → 1.0.0-alpha.91

package/dist/channels.d.mts

@@ -1,5 +1,5 @@
-import { A as AgentDefinition } from "./packem_shared/types.d-boAM2Yi1.mjs";
-export type { I as InboundChannelEvent } from "./packem_shared/types.d-boAM2Yi1.mjs";
+import { A as AgentDefinition } from "./packem_shared/types.d-B8WZl1rU.mjs";
+export type { I as InboundChannelEvent } from "./packem_shared/types.d-B8WZl1rU.mjs";
 import '@lunora/mail/inbound';
 import 'ai';
 /**
@@ -51,14 +51,6 @@ interface AgentChannelTarget {
  * @experimental
  */
 type InboundChannelHandler = (request: Request, env: Record<string, unknown>) => Promise<Response>;
-/**
- * Whether a `workflow.create()` rejection is a duplicate-instance-id error — the
- * idempotency signal — as opposed to a transient/config failure (Workflows
- * service error, instance-creation quota, bad params). Only the former may be
- * acked; every other failure MUST surface so the handler returns non-2xx and the
- * provider redelivers, rather than silently dropping the event.
- */
-declare const isDuplicateInstanceError: (error: unknown) => boolean;
 /**
  * Build an HTTP handler that starts a durable agent run from a verified inbound
  * webhook. The channel is detected from the signature headers; EACH eligible
@@ -71,4 +63,4 @@ declare const isDuplicateInstanceError: (error: unknown) => boolean;
  * @experimental
  */
 declare const dispatchAgentChannel: (targets: ReadonlyArray<AgentChannelTarget>) => InboundChannelHandler;
-export { type AgentChannelTarget, type InboundChannelHandler, dispatchAgentChannel, isDuplicateInstanceError, verifyDiscord, verifyGithub, verifySlack };
+export { type AgentChannelTarget, type InboundChannelHandler, dispatchAgentChannel, verifyDiscord, verifyGithub, verifySlack };

package/dist/channels.d.ts

@@ -1,5 +1,5 @@
-import { A as AgentDefinition } from "./packem_shared/types.d-boAM2Yi1.js";
-export type { I as InboundChannelEvent } from "./packem_shared/types.d-boAM2Yi1.js";
+import { A as AgentDefinition } from "./packem_shared/types.d-B8WZl1rU.js";
+export type { I as InboundChannelEvent } from "./packem_shared/types.d-B8WZl1rU.js";
 import '@lunora/mail/inbound';
 import 'ai';
 /**
@@ -51,14 +51,6 @@ interface AgentChannelTarget {
  * @experimental
  */
 type InboundChannelHandler = (request: Request, env: Record<string, unknown>) => Promise<Response>;
-/**
- * Whether a `workflow.create()` rejection is a duplicate-instance-id error — the
- * idempotency signal — as opposed to a transient/config failure (Workflows
- * service error, instance-creation quota, bad params). Only the former may be
- * acked; every other failure MUST surface so the handler returns non-2xx and the
- * provider redelivers, rather than silently dropping the event.
- */
-declare const isDuplicateInstanceError: (error: unknown) => boolean;
 /**
  * Build an HTTP handler that starts a durable agent run from a verified inbound
  * webhook. The channel is detected from the signature headers; EACH eligible
@@ -71,4 +63,4 @@ declare const isDuplicateInstanceError: (error: unknown) => boolean;
  * @experimental
  */
 declare const dispatchAgentChannel: (targets: ReadonlyArray<AgentChannelTarget>) => InboundChannelHandler;
-export { type AgentChannelTarget, type InboundChannelHandler, dispatchAgentChannel, isDuplicateInstanceError, verifyDiscord, verifyGithub, verifySlack };
+export { type AgentChannelTarget, type InboundChannelHandler, dispatchAgentChannel, verifyDiscord, verifyGithub, verifySlack };

package/dist/channels.mjs

@@ -1,181 +1 @@
-import { LunoraError } from '@lunora/errors';
-
-const DEFAULT_TIMESTAMP_TOLERANCE = 300;
-const NON_HEX = /[^0-9a-f]/iu;
-const encoder = new TextEncoder();
-const utf8 = (value) => new Uint8Array(encoder.encode(value));
-const hexToBytes = (hex) => {
-  if (hex.length % 2 !== 0 || NON_HEX.test(hex)) {
-    throw new LunoraError("BAD_REQUEST", "@lunora/agent: malformed hex signature");
-  }
-  const bytes = new Uint8Array(hex.length / 2);
-  for (let index = 0; index < bytes.length; index += 1) {
-    bytes[index] = Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16);
-  }
-  return bytes;
-};
-const verifyHmacSha256 = async (secret, message, signatureHex) => {
-  try {
-    const key = await crypto.subtle.importKey("raw", utf8(secret), { hash: "SHA-256", name: "HMAC" }, false, ["verify"]);
-    return await crypto.subtle.verify("HMAC", key, hexToBytes(signatureHex), utf8(message));
-  } catch {
-    return false;
-  }
-};
-const isFreshTimestamp = (timestampSeconds, nowSeconds, tolerance) => Number.isFinite(timestampSeconds) && Math.abs(nowSeconds - timestampSeconds) <= tolerance;
-const verifySlack = async (options) => {
-  const { body, now = Date.now() / 1e3, signature, signingSecret, timestamp, tolerance = DEFAULT_TIMESTAMP_TOLERANCE } = options;
-  if (!signature || !timestamp || !signature.startsWith("v0=")) {
-    return false;
-  }
-  if (!isFreshTimestamp(Number(timestamp), now, tolerance)) {
-    return false;
-  }
-  return verifyHmacSha256(signingSecret, `v0:${timestamp}:${body}`, signature.slice("v0=".length));
-};
-const verifyGithub = async (options) => {
-  const { body, secret, signature } = options;
-  if (!signature?.startsWith("sha256=")) {
-    return false;
-  }
-  return verifyHmacSha256(secret, body, signature.slice("sha256=".length));
-};
-const verifyDiscord = async (options) => {
-  const { body, publicKey, signature, timestamp } = options;
-  if (!signature || !timestamp) {
-    return false;
-  }
-  try {
-    const key = await crypto.subtle.importKey("raw", hexToBytes(publicKey), { name: "Ed25519" }, false, ["verify"]);
-    return await crypto.subtle.verify({ name: "Ed25519" }, key, hexToBytes(signature), utf8(timestamp + body));
-  } catch {
-    return false;
-  }
-};
-const detectChannel = (headers) => {
-  if (headers.has("x-slack-signature")) {
-    return "slack";
-  }
-  if (headers.has("x-hub-signature-256")) {
-    return "github";
-  }
-  if (headers.has("x-signature-ed25519")) {
-    return "discord";
-  }
-  return void 0;
-};
-const resolveSecret = (secret, env) => {
-  if (typeof secret === "function") {
-    return secret(env);
-  }
-  const value = env[secret];
-  return typeof value === "string" ? value : void 0;
-};
-const verifyChannel = async (channel, secret, headers, body) => {
-  switch (channel) {
-    case "discord": {
-      return verifyDiscord({
-        body,
-        publicKey: secret,
-        signature: headers.get("x-signature-ed25519") ?? void 0,
-        timestamp: headers.get("x-signature-timestamp") ?? void 0
-      });
-    }
-    case "github": {
-      return verifyGithub({ body, secret, signature: headers.get("x-hub-signature-256") ?? void 0 });
-    }
-    case "slack": {
-      return verifySlack({
-        body,
-        signature: headers.get("x-slack-signature") ?? void 0,
-        signingSecret: secret,
-        timestamp: headers.get("x-slack-request-timestamp") ?? void 0
-      });
-    }
-    default: {
-      return false;
-    }
-  }
-};
-const discordPongResponse = (channel, body) => {
-  if (channel !== "discord") {
-    return void 0;
-  }
-  try {
-    if (JSON.parse(body).type === 1) {
-      return Response.json({ type: 1 });
-    }
-  } catch {
-  }
-  return void 0;
-};
-const UNSAFE_INSTANCE_ID = /[^\w-]/gu;
-const DUPLICATE_INSTANCE = /already[\s-]?exists/iu;
-const ack = () => new Response(void 0, { status: 200 });
-const isDuplicateInstanceError = (error) => DUPLICATE_INSTANCE.test(error instanceof Error ? error.message : String(error));
-const deliveryId = (channel, headers, body) => {
-  if (channel === "github") {
-    return headers.get("x-github-delivery") ?? void 0;
-  }
-  try {
-    const parsed = JSON.parse(body);
-    const raw = channel === "slack" ? parsed.event_id : parsed.id;
-    return typeof raw === "string" ? raw : void 0;
-  } catch {
-    return void 0;
-  }
-};
-const startChannelRun = async (workflow, run, channel, id) => {
-  const sanitizedId = id === void 0 ? "" : id.replaceAll(UNSAFE_INSTANCE_ID, "");
-  if (sanitizedId === "") {
-    await workflow.create({ params: run });
-    return ack();
-  }
-  try {
-    await workflow.create({ id: `${channel}-${sanitizedId}`.slice(0, 60), params: run });
-  } catch (error) {
-    if (isDuplicateInstanceError(error)) {
-      return ack();
-    }
-    throw error;
-  }
-  return ack();
-};
-const dispatchAgentChannel = (targets) => async (request, env) => {
-  const body = await request.text();
-  const channel = detectChannel(request.headers);
-  if (channel === void 0) {
-    return new Response("Unrecognized webhook", { status: 400 });
-  }
-  const eligible = targets.map((target) => {
-    return { config: target.agent.onInbound, target };
-  }).filter((entry) => entry.config?.channel === channel);
-  const event = { channel, headers: request.headers, json: () => JSON.parse(body), rawBody: body };
-  let verifiedAny = false;
-  for (const { config, target } of eligible) {
-    const secret = resolveSecret(config.secret, env);
-    if (secret === void 0 || !await verifyChannel(channel, secret, request.headers, body)) {
-      continue;
-    }
-    verifiedAny = true;
-    const pong = discordPongResponse(channel, body);
-    if (pong) {
-      return pong;
-    }
-    const run = await config.map(event);
-    if (!run) {
-      continue;
-    }
-    const workflow = env[target.binding];
-    if (!workflow || typeof workflow.create !== "function") {
-      throw new LunoraError(
-        "INTERNAL",
-        `@lunora/agent: no Workflow binding "${target.binding}" on env for an inbound-channel agent — run codegen/dev so wrangler.jsonc declares it`
-      );
-    }
-    return await startChannelRun(workflow, run, channel, deliveryId(channel, request.headers, body));
-  }
-  return verifiedAny ? new Response(void 0, { status: 204 }) : new Response("Invalid signature", { status: 401 });
-};
-
-export { dispatchAgentChannel, isDuplicateInstanceError, verifyDiscord, verifyGithub, verifySlack };
+import{LunoraError as d}from"@lunora/errors";import{isDuplicateInstanceError as w}from"@lunora/workflow";import{h as b,B as E}from"./packem_shared/branch-marker-boZ00zmk.mjs";import{f as A}from"./packem_shared/fnv1a-BNN96GYb.mjs";const R=300,k=/[^0-9a-f]/iu,x=new TextEncoder,f=t=>new Uint8Array(x.encode(t)),l=t=>{if(t.length%2!==0||k.test(t))throw new d("BAD_REQUEST","@lunora/agent: malformed hex signature");const e=new Uint8Array(t.length/2);for(let n=0;n<e.length;n+=1)e[n]=Number.parseInt(t.slice(n*2,n*2+2),16);return e},m=async(t,e,n)=>{try{const r=await crypto.subtle.importKey("raw",f(t),{hash:"SHA-256",name:"HMAC"},!1,["verify"]);return await crypto.subtle.verify("HMAC",r,l(n),f(e))}catch{return!1}},N=(t,e,n)=>Number.isFinite(t)&&Math.abs(e-t)<=n,S=async t=>{const{body:e,now:n=Date.now()/1e3,signature:r,signingSecret:s,timestamp:a,tolerance:o=R}=t;return!r||!a||!r.startsWith("v0=")||!N(Number(a),n,o)?!1:m(s,`v0:${a}:${e}`,r.slice(3))},T=async t=>{const{body:e,secret:n,signature:r}=t;return r?.startsWith("sha256=")?m(n,e,r.slice(7)):!1},C=async t=>{const{body:e,publicKey:n,signature:r,timestamp:s}=t;if(!r||!s)return!1;try{const a=await crypto.subtle.importKey("raw",l(n),{name:"Ed25519"},!1,["verify"]);return await crypto.subtle.verify({name:"Ed25519"},a,l(r),f(s+e))}catch{return!1}},I=t=>{if(t.has("x-slack-signature"))return"slack";if(t.has("x-hub-signature-256"))return"github";if(t.has("x-signature-ed25519"))return"discord"},_=(t,e)=>{if(typeof t=="function")return t(e);const n=e[t];return typeof n=="string"?n:void 0},B=async(t,e,n,r)=>{switch(t){case"discord":return C({body:r,publicKey:e,signature:n.get("x-signature-ed25519")??void 0,timestamp:n.get("x-signature-timestamp")??void 0});case"github":return T({body:r,secret:e,signature:n.get("x-hub-signature-256")??void 0});case"slack":return S({body:r,signature:n.get("x-slack-signature")??void 0,signingSecret:e,timestamp:n.get("x-slack-request-timestamp")??void 0});default:return!1}},H=(t,e)=>{if(t==="discord")try{if(JSON.parse(e).type===1)return Response.json({type:1})}catch{}},u=()=>new Response(void 0,{status:200}),M=(t,e,n)=>{if(t==="github")return e.get("x-github-delivery")??void 0;try{const r=JSON.parse(n),s=t==="slack"?r.event_id:r.id;return typeof s=="string"?s:void 0}catch{return}},D=async(t,e,n,r)=>{if(b(e))throw new d("BAD_REQUEST",`@lunora/agent: inbound channel run params ${E}`);if(r===void 0||r==="")return await t.create({params:e}),u();try{await t.create({id:`${n}-${A(r)}`,params:e})}catch(s){if(w(s))return u();throw s}return u()},J=t=>async(e,n)=>{const r=await e.text(),s=I(e.headers);if(s===void 0)return new Response("Unrecognized webhook",{status:400});const a=t.map(i=>({config:i.agent.onInbound,target:i})).filter(i=>i.config?.channel===s),o={channel:s,headers:e.headers,json:()=>JSON.parse(r),rawBody:r};let g=!1;for(const{config:i,target:y}of a){const h=_(i.secret,n);if(h===void 0||!await B(s,h,e.headers,r))continue;g=!0;const p=H(s,r);if(p)return p;const v=await i.map(o);if(!v)continue;const c=n[y.binding];if(!c||typeof c.create!="function")throw new d("INTERNAL",`@lunora/agent: no Workflow binding "${y.binding}" on env for an inbound-channel agent — run codegen/dev so wrangler.jsonc declares it`);return await D(c,v,s,M(s,e.headers,r))}return g?new Response(void 0,{status:204}):new Response("Invalid signature",{status:401})};export{J as dispatchAgentChannel,C as verifyDiscord,T as verifyGithub,S as verifySlack};

package/dist/component.d.mts

@@ -72,6 +72,8 @@ interface AgentComponent {
   extension: SchemaExtension;
   functions: {
     agentAppendMessage: AgentRegisteredFunction;
+    agentCompleteRun: AgentRegisteredFunction;
+    agentDeleteMessage: AgentRegisteredFunction;
     agentEnsureThread: AgentRegisteredFunction;
     agentEpisodeRecall: AgentRegisteredFunction;
     agentEpisodeUpsert: AgentRegisteredFunction;

package/dist/component.d.ts

@@ -72,6 +72,8 @@ interface AgentComponent {
   extension: SchemaExtension;
   functions: {
     agentAppendMessage: AgentRegisteredFunction;
+    agentCompleteRun: AgentRegisteredFunction;
+    agentDeleteMessage: AgentRegisteredFunction;
     agentEnsureThread: AgentRegisteredFunction;
     agentEpisodeRecall: AgentRegisteredFunction;
     agentEpisodeUpsert: AgentRegisteredFunction;