@multiplayer-app/sandbox 0.0.7 → 0.0.9

package/dist/routes/agents/upsertPreferences.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.upsertAgentPreferencesBatch = exports.upsertAgentPreferences = void 0;
+const zod_1 = require("zod");
+const context_1 = require("../../context");
+const chat_access_1 = require("../../lib/chat-access");
+const schemas_1 = require("../schemas");
+const route_errors_1 = require("../route-errors");
+const upsertValidatedSchema = zod_1.z.object({
+    params: schemas_1.agentRouteParamsSchema,
+    body: schemas_1.upsertAgentPreferencesSchema,
+});
+const batchValidatedSchema = zod_1.z.object({ body: schemas_1.upsertAgentPreferencesBatchSchema });
+const upsertAgentPreferences = async (req, res) => {
+    try {
+        const { params, body } = upsertValidatedSchema.parse(req.validated);
+        const userId = (0, chat_access_1.requireUserId)(req);
+        const preference = await (0, context_1.getAgentService)()
+            .getAgentProcessor()
+            .upsertUserPreferences(userId, params.agentName, body.tools);
+        res.status(200).json(preference);
+    }
+    catch (error) {
+        (0, route_errors_1.respondRouteError)(res, error);
+    }
+};
+exports.upsertAgentPreferences = upsertAgentPreferences;
+const upsertAgentPreferencesBatch = async (req, res) => {
+    try {
+        const { body } = batchValidatedSchema.parse(req.validated);
+        const userId = (0, chat_access_1.requireUserId)(req);
+        const items = body.preferences;
+        const processor = (0, context_1.getAgentService)().getAgentProcessor();
+        const results = await Promise.all(items.map(({ agentName, tools }) => processor.upsertUserPreferences(userId, agentName, tools)));
+        res.status(200).json({ preferences: results });
+    }
+    catch (error) {
+        (0, route_errors_1.respondRouteError)(res, error);
+    }
+};
+exports.upsertAgentPreferencesBatch = upsertAgentPreferencesBatch;
+//# sourceMappingURL=upsertPreferences.js.map

package/dist/routes/agents/upsertPreferences.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upsertPreferences.js","sourceRoot":"","sources":["../../../src/routes/agents/upsertPreferences.ts"],"names":[],"mappings":";;;AAEA,6BAAuB;AACvB,2CAA+C;AAC/C,uDAAqD;AACrD,wCAImB;AACnB,kDAAmD;AAEnD,MAAM,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IACrC,MAAM,EAAE,gCAAsB;IAC9B,IAAI,EAAE,sCAA4B;CACnC,CAAC,CAAA;AAEF,MAAM,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,2CAAiC,EAAE,CAAC,CAAA;AAE3E,MAAM,sBAAsB,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC1E,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACnE,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QAEjC,MAAM,UAAU,GAAG,MAAM,IAAA,yBAAe,GAAE;aACvC,iBAAiB,EAAE;aACnB,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;QAE9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,gCAAiB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC/B,CAAC;AACH,CAAC,CAAA;AAbY,QAAA,sBAAsB,0BAalC;AAEM,MAAM,2BAA2B,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC/E,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QAEjC,MAAM,KAAK,GAAsD,IAAI,CAAC,WAAW,CAAA;QAEjF,MAAM,SAAS,GAAG,IAAA,yBAAe,GAAE,CAAC,iBAAiB,EAAE,CAAA;QACvD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAC/F,CAAA;QAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAA;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,gCAAiB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC/B,CAAC;AACH,CAAC,CAAA;AAhBY,QAAA,2BAA2B,+BAgBvC"}

package/dist/routes/chats/abort.d.ts

@@ -1,3 +1,3 @@
-import type { RequestHandler } from 'express';
-export declare const abortMessage: RequestHandler;
+import type { Request, Response } from 'express';
+export declare const abortMessage: (req: Request, res: Response) => Promise<void>;
 //# sourceMappingURL=abort.d.ts.map

package/dist/routes/chats/abort.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"abort.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/abort.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,eAAO,MAAM,YAAY,EAAE,cAQ1B,CAAA"}
+{"version":3,"file":"abort.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/abort.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAShD,eAAO,MAAM,YAAY,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,kBAU7D,CAAA"}

package/dist/routes/chats/abort.js

@@ -1,17 +1,22 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.abortMessage = void 0;
-const schemas_1 = require("../schemas");
+const zod_1 = require("zod");
 const context_1 = require("../../context");
+const chat_access_1 = require("../../lib/chat-access");
+const schemas_1 = require("../schemas");
+const chat_route_errors_1 = require("./chat-route-errors");
+const validatedSchema = zod_1.z.object({ params: schemas_1.getStreamSchema });
 const abortMessage = async (req, res) => {
-    var _a;
     try {
-        const { chatId } = schemas_1.getStreamSchema.parse((_a = req.params) !== null && _a !== void 0 ? _a : {});
-        await (0, context_1.getAgentService)().stopAgentProcess(chatId);
+        const { params } = validatedSchema.parse(req.validated);
+        const userId = (0, chat_access_1.requireUserId)(req);
+        await (0, chat_access_1.loadChatForUser)(params.chatId, userId);
+        await (0, context_1.getAgentService)().stopAgentProcess(params.chatId);
         res.json({ message: 'Agent process stop requested successfully' });
     }
     catch (error) {
-        res.status(400).json({ error: error.message });
+        (0, chat_route_errors_1.respondChatRouteError)(res, error);
     }
 };
 exports.abortMessage = abortMessage;

package/dist/routes/chats/abort.js.map

@@ -1 +1 @@
-{"version":3,"file":"abort.js","sourceRoot":"","sources":["../../../src/routes/chats/abort.ts"],"names":[],"mappings":";;;AACA,wCAA4C;AAC5C,2CAA+C;AAExC,MAAM,YAAY,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;;IAC7D,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,yBAAe,CAAC,KAAK,CAAC,MAAA,GAAG,CAAC,MAAM,mCAAI,EAAE,CAAC,CAAA;QAC1D,MAAM,IAAA,yBAAe,GAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAChD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAA;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IAC3D,CAAC;AACH,CAAC,CAAA;AARY,QAAA,YAAY,gBAQxB"}
+{"version":3,"file":"abort.js","sourceRoot":"","sources":["../../../src/routes/chats/abort.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,2CAA+C;AAC/C,uDAAsE;AACtE,wCAA4C;AAC5C,2DAA2D;AAE3D,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,yBAAe,EAAE,CAAC,CAAA;AAEtD,MAAM,YAAY,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAChE,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACvD,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QACjC,MAAM,IAAA,6BAAe,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC5C,MAAM,IAAA,yBAAe,GAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACvD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAA;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,yCAAqB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA;AAVY,QAAA,YAAY,gBAUxB"}

package/dist/routes/chats/actions.d.ts

@@ -1,3 +1,3 @@
-import type { RequestHandler } from 'express';
-export declare const postChatAction: RequestHandler;
+import type { Request, Response } from 'express';
+export declare const postChatAction: (req: Request, res: Response) => Promise<void>;
 //# sourceMappingURL=actions.d.ts.map

package/dist/routes/chats/actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAc7C,eAAO,MAAM,cAAc,EAAE,cAoB5B,CAAA"}
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAahD,eAAO,MAAM,cAAc,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,kBAqB/D,CAAA"}

package/dist/routes/chats/actions.js

@@ -3,33 +3,33 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.postChatAction = void 0;
 const zod_1 = require("zod");
 const context_1 = require("../../context");
+const chat_access_1 = require("../../lib/chat-access");
 const socketIdFromRequest_1 = require("../../lib/socketIdFromRequest");
 const schemas_1 = require("../schemas");
-const toolCallActionSchema = zod_1.z.object({
-    kind: zod_1.z.literal('toolCall'),
-    toolCallId: zod_1.z.string().min(1),
-    action: zod_1.z.string().min(1),
-    data: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
-    systemMessage: zod_1.z.string().min(1).max(2000).optional(),
+const chat_route_errors_1 = require("./chat-route-errors");
+const validatedSchema = zod_1.z.object({
+    params: schemas_1.chatRouteParamsSchema,
+    body: schemas_1.toolCallActionSchema,
 });
 const postChatAction = async (req, res) => {
-    var _a, _b;
+    var _a;
     try {
-        const { chatId } = schemas_1.chatRouteParamsSchema.parse(req.params);
-        const payload = toolCallActionSchema.parse((_a = req.body) !== null && _a !== void 0 ? _a : {});
+        const { params, body: payload } = validatedSchema.parse(req.validated);
+        const userId = (0, chat_access_1.requireUserId)(req);
+        await (0, chat_access_1.loadChatForUser)(params.chatId, userId);
         const excludeSocketId = (0, socketIdFromRequest_1.socketIdFromRequest)(req);
         const result = await (0, context_1.getAgentService)().getChatProcessor().recordToolCallAction({
-            chatId,
+            chatId: params.chatId,
             toolCallId: payload.toolCallId,
             action: payload.action,
-            data: (_b = payload.data) !== null && _b !== void 0 ? _b : {},
+            data: (_a = payload.data) !== null && _a !== void 0 ? _a : {},
             systemMessage: payload.systemMessage,
             excludeSocketId,
         });
         res.json(result !== null && result !== void 0 ? result : { ok: true });
     }
     catch (error) {
-        res.status(400).json({ message: error.message });
+        (0, chat_route_errors_1.respondChatRouteError)(res, error);
     }
 };
 exports.postChatAction = postChatAction;

package/dist/routes/chats/actions.js.map

@@ -1 +1 @@
-{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../../src/routes/chats/actions.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,2CAA+C;AAC/C,uEAAmE;AACnE,wCAAkD;AAElD,MAAM,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAA;AAEK,MAAM,cAAc,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;;IAC/D,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,+BAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1D,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,CAAC,CAAA;QAE1D,MAAM,eAAe,GAAG,IAAA,yCAAmB,EAAC,GAAG,CAAC,CAAA;QAEhD,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAe,GAAE,CAAC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC;YAC7E,MAAM;YACN,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,MAAA,OAAO,CAAC,IAAI,mCAAI,EAAE;YACxB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,eAAe;SAChB,CAAC,CAAA;QAEF,GAAG,CAAC,IAAI,CAAC,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IAC7D,CAAC;AACH,CAAC,CAAA;AApBY,QAAA,cAAc,kBAoB1B"}
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../../src/routes/chats/actions.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,2CAA+C;AAC/C,uDAAsE;AACtE,uEAAmE;AACnE,wCAAwE;AACxE,2DAA2D;AAE3D,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,+BAAqB;IAC7B,IAAI,EAAE,8BAAoB;CAC3B,CAAC,CAAA;AAEK,MAAM,cAAc,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;;IAClE,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACtE,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QACjC,MAAM,IAAA,6BAAe,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAE5C,MAAM,eAAe,GAAG,IAAA,yCAAmB,EAAC,GAAG,CAAC,CAAA;QAEhD,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAe,GAAE,CAAC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC;YAC7E,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,MAAA,OAAO,CAAC,IAAI,mCAAI,EAAE;YACxB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,eAAe;SAChB,CAAC,CAAA;QAEF,GAAG,CAAC,IAAI,CAAC,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,yCAAqB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA;AArBY,QAAA,cAAc,kBAqB1B"}

package/dist/routes/chats/artifacts.d.ts

@@ -1,3 +1,3 @@
-import type { RequestHandler } from 'express';
-export declare const getArtifacts: RequestHandler;
+import type { Request, Response } from 'express';
+export declare const getArtifacts: (req: Request, res: Response) => Promise<void>;
 //# sourceMappingURL=artifacts.d.ts.map

package/dist/routes/chats/artifacts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,eAAO,MAAM,YAAY,EAAE,cAI1B,CAAA"}
+{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAShD,eAAO,MAAM,YAAY,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,kBAU7D,CAAA"}

package/dist/routes/chats/artifacts.js

@@ -1,12 +1,23 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getArtifacts = void 0;
+const zod_1 = require("zod");
 const context_1 = require("../../context");
+const chat_access_1 = require("../../lib/chat-access");
 const schemas_1 = require("../schemas");
-const getArtifacts = (req, res) => {
-    const { chatId } = schemas_1.chatRouteParamsSchema.parse(req.params);
-    const items = (0, context_1.getAgentService)().getChatProcessor().listArtifacts(chatId);
-    res.json(items);
+const chat_route_errors_1 = require("./chat-route-errors");
+const validatedSchema = zod_1.z.object({ params: schemas_1.chatRouteParamsSchema });
+const getArtifacts = async (req, res) => {
+    try {
+        const { params } = validatedSchema.parse(req.validated);
+        const userId = (0, chat_access_1.requireUserId)(req);
+        await (0, chat_access_1.loadChatForUser)(params.chatId, userId);
+        const items = (0, context_1.getAgentService)().getChatProcessor().listArtifacts(params.chatId);
+        res.json(items);
+    }
+    catch (error) {
+        (0, chat_route_errors_1.respondChatRouteError)(res, error);
+    }
 };
 exports.getArtifacts = getArtifacts;
 //# sourceMappingURL=artifacts.js.map

package/dist/routes/chats/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../../../src/routes/chats/artifacts.ts"],"names":[],"mappings":";;;AACA,2CAA+C;AAC/C,wCAAkD;AAE3C,MAAM,YAAY,GAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACvD,MAAM,EAAE,MAAM,EAAE,GAAG,+BAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC1D,MAAM,KAAK,GAAG,IAAA,yBAAe,GAAE,CAAC,gBAAgB,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;IACxE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACjB,CAAC,CAAA;AAJY,QAAA,YAAY,gBAIxB"}
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../../../src/routes/chats/artifacts.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,2CAA+C;AAC/C,uDAAsE;AACtE,wCAAkD;AAClD,2DAA2D;AAE3D,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,+BAAqB,EAAE,CAAC,CAAA;AAE5D,MAAM,YAAY,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAChE,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACvD,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QACjC,MAAM,IAAA,6BAAe,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC5C,MAAM,KAAK,GAAG,IAAA,yBAAe,GAAE,CAAC,gBAAgB,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC/E,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,yCAAqB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA;AAVY,QAAA,YAAY,gBAUxB"}

package/dist/routes/chats/chat-route-errors.d.ts

@@ -0,0 +1,3 @@
+import type { Response } from 'express';
+export declare function respondChatRouteError(res: Response, error: unknown): void;
+//# sourceMappingURL=chat-route-errors.d.ts.map

package/dist/routes/chats/chat-route-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-route-errors.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/chat-route-errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAWvC,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAuBzE"}

package/dist/routes/chats/chat-route-errors.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.respondChatRouteError = respondChatRouteError;
+const chat_access_1 = require("../../lib/chat-access");
+function respondChatRouteError(res, error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if ((0, chat_access_1.isUnauthorizedUserError)(error)) {
+        res.status(401).json({ message });
+        return;
+    }
+    if ((0, chat_access_1.isChatNotFoundError)(error) || message === chat_access_1.CHAT_NOT_FOUND) {
+        res.status(404).json({ message: chat_access_1.CHAT_NOT_FOUND });
+        return;
+    }
+    if (message === chat_access_1.OWNER_INVITE_REQUIRED_MESSAGE
+        || message === chat_access_1.OWNER_REMOVE_PARTICIPANTS_MESSAGE
+        || message === chat_access_1.OWNER_DELETE_REQUIRED_MESSAGE) {
+        res.status(400).json({ message });
+        return;
+    }
+    res.status(400).json({ message });
+}
+//# sourceMappingURL=chat-route-errors.js.map

package/dist/routes/chats/chat-route-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-route-errors.js","sourceRoot":"","sources":["../../../src/routes/chats/chat-route-errors.ts"],"names":[],"mappings":";;AAWA,sDAuBC;AAjCD,uDAQ8B;AAE9B,SAAgB,qBAAqB,CAAC,GAAa,EAAE,KAAc;IACjE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAEtE,IAAI,IAAA,qCAAuB,EAAC,KAAK,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACjC,OAAM;IACR,CAAC;IAED,IAAI,IAAA,iCAAmB,EAAC,KAAK,CAAC,IAAI,OAAO,KAAK,4BAAc,EAAE,CAAC;QAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,4BAAc,EAAE,CAAC,CAAA;QACjD,OAAM;IACR,CAAC;IAED,IACE,OAAO,KAAK,2CAA6B;WACtC,OAAO,KAAK,+CAAiC;WAC7C,OAAO,KAAK,2CAA6B,EAC5C,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACjC,OAAM;IACR,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;AACnC,CAAC"}

package/dist/routes/chats/delete.d.ts

@@ -1,3 +1,3 @@
-import type { RequestHandler } from 'express';
-export declare const deleteChat: RequestHandler;
+import type { Request, Response } from 'express';
+export declare const deleteChat: (req: Request, res: Response) => Promise<void>;
 //# sourceMappingURL=delete.d.ts.map

package/dist/routes/chats/delete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/delete.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,eAAO,MAAM,UAAU,EAAE,cAQxB,CAAA"}
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/delete.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAchD,eAAO,MAAM,UAAU,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,kBAa3D,CAAA"}

package/dist/routes/chats/delete.js

@@ -1,16 +1,25 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.deleteChat = void 0;
+const zod_1 = require("zod");
 const context_1 = require("../../context");
+const chat_access_1 = require("../../lib/chat-access");
 const schemas_1 = require("../schemas");
+const chat_route_errors_1 = require("./chat-route-errors");
+const validatedSchema = zod_1.z.object({ params: schemas_1.chatRouteParamsSchema });
 const deleteChat = async (req, res) => {
     try {
-        const { chatId } = schemas_1.chatRouteParamsSchema.parse(req.params);
-        await (0, context_1.getAgentService)().getChatProcessor().deleteChat(chatId);
+        const { params } = validatedSchema.parse(req.validated);
+        const userId = (0, chat_access_1.requireUserId)(req);
+        const chat = await (0, chat_access_1.loadChatForUser)(params.chatId, userId);
+        if (!(0, chat_access_1.isChatOwner)(chat, userId)) {
+            throw new Error(chat_access_1.OWNER_DELETE_REQUIRED_MESSAGE);
+        }
+        await (0, context_1.getAgentService)().getChatProcessor().deleteChat(params.chatId);
         res.status(204).end();
     }
     catch (error) {
-        res.status(404).json({ message: error.message });
+        (0, chat_route_errors_1.respondChatRouteError)(res, error);
     }
 };
 exports.deleteChat = deleteChat;

package/dist/routes/chats/delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../src/routes/chats/delete.ts"],"names":[],"mappings":";;;AACA,2CAA+C;AAC/C,wCAAkD;AAE3C,MAAM,UAAU,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC3D,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,+BAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1D,MAAM,IAAA,yBAAe,GAAE,CAAC,gBAAgB,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IAC7D,CAAC;AACH,CAAC,CAAA;AARY,QAAA,UAAU,cAQtB"}
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../src/routes/chats/delete.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,2CAA+C;AAC/C,uDAK8B;AAC9B,wCAAkD;AAClD,2DAA2D;AAE3D,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,+BAAqB,EAAE,CAAC,CAAA;AAE5D,MAAM,UAAU,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC9D,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACvD,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,MAAM,IAAA,6BAAe,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACzD,IAAI,CAAC,IAAA,yBAAW,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,2CAA6B,CAAC,CAAA;QAChD,CAAC;QACD,MAAM,IAAA,yBAAe,GAAE,CAAC,gBAAgB,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,yCAAqB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA;AAbY,QAAA,UAAU,cAatB"}

package/dist/routes/chats/get.d.ts

@@ -1,3 +1,3 @@
-import type { RequestHandler } from 'express';
-export declare const getChat: RequestHandler;
+import type { Request, Response } from 'express';
+export declare const getChat: (req: Request, res: Response) => Promise<void>;
 //# sourceMappingURL=get.d.ts.map

package/dist/routes/chats/get.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/get.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,eAAO,MAAM,OAAO,EAAE,cAQrB,CAAA"}
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/get.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAQhD,eAAO,MAAM,OAAO,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,kBASxD,CAAA"}

package/dist/routes/chats/get.js

@@ -1,16 +1,20 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getChat = void 0;
-const context_1 = require("../../context");
+const zod_1 = require("zod");
+const chat_access_1 = require("../../lib/chat-access");
 const schemas_1 = require("../schemas");
+const chat_route_errors_1 = require("./chat-route-errors");
+const validatedSchema = zod_1.z.object({ params: schemas_1.chatRouteParamsSchema });
 const getChat = async (req, res) => {
     try {
-        const { chatId } = schemas_1.chatRouteParamsSchema.parse(req.params);
-        const chat = await (0, context_1.getAgentService)().getChatProcessor().getChat(chatId);
+        const { params } = validatedSchema.parse(req.validated);
+        const userId = (0, chat_access_1.requireUserId)(req);
+        const chat = await (0, chat_access_1.loadChatForUser)(params.chatId, userId);
         res.json(chat);
     }
     catch (error) {
-        res.status(404).json({ message: error.message });
+        (0, chat_route_errors_1.respondChatRouteError)(res, error);
     }
 };
 exports.getChat = getChat;

package/dist/routes/chats/get.js.map

@@ -1 +1 @@
-{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../src/routes/chats/get.ts"],"names":[],"mappings":";;;AACA,2CAA+C;AAC/C,wCAAkD;AAE3C,MAAM,OAAO,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,+BAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAA,yBAAe,GAAE,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACvE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IAC7D,CAAC;AACH,CAAC,CAAA;AARY,QAAA,OAAO,WAQnB"}
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../src/routes/chats/get.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,uDAAsE;AACtE,wCAAkD;AAClD,2DAA2D;AAE3D,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,+BAAqB,EAAE,CAAC,CAAA;AAE5D,MAAM,OAAO,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC3D,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACvD,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,MAAM,IAAA,6BAAe,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACzD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,yCAAqB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA;AATY,QAAA,OAAO,WASnB"}

package/dist/routes/chats/getStream.d.ts

@@ -1,3 +1,3 @@
-import type { RequestHandler } from 'express';
-export declare const getStream: RequestHandler;
+import type { Request, Response } from 'express';
+export declare const getStream: (req: Request, res: Response) => Promise<void>;
 //# sourceMappingURL=getStream.d.ts.map

package/dist/routes/chats/getStream.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getStream.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/getStream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,eAAO,MAAM,SAAS,EAAE,cAsDvB,CAAA"}
+{"version":3,"file":"getStream.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/getStream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAShD,eAAO,MAAM,SAAS,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,kBA2D1D,CAAA"}

package/dist/routes/chats/getStream.js

@@ -1,16 +1,24 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getStream = void 0;
-const schemas_1 = require("../schemas");
+const zod_1 = require("zod");
 const context_1 = require("../../context");
-const getStream = (req, res) => {
-    var _a;
+const chat_access_1 = require("../../lib/chat-access");
+const schemas_1 = require("../schemas");
+const chat_route_errors_1 = require("./chat-route-errors");
+const validatedSchema = zod_1.z.object({ params: schemas_1.getStreamSchema });
+const getStream = async (req, res) => {
     let chatId;
     try {
-        chatId = schemas_1.getStreamSchema.parse((_a = req.params) !== null && _a !== void 0 ? _a : {}).chatId;
+        const { params } = validatedSchema.parse(req.validated);
+        chatId = params.chatId;
+        const userId = (0, chat_access_1.requireUserId)(req);
+        await (0, chat_access_1.loadChatForUser)(chatId, userId);
     }
-    catch (_b) {
-        res.status(400).json({ message: 'Invalid chat id' });
+    catch (error) {
+        if (!res.headersSent) {
+            (0, chat_route_errors_1.respondChatRouteError)(res, error);
+        }
         return;
     }
     const origin = req.headers.origin;
@@ -42,12 +50,12 @@ const getStream = (req, res) => {
         stream.on('end', removeListeners);
         stream.on('error', removeListeners);
     }
-    catch (_c) {
+    catch (_a) {
         if (!res.destroyed && !res.writableEnded) {
             try {
                 res.end();
             }
-            catch (_d) {
+            catch (_b) {
                 /* ignore */
             }
         }

package/dist/routes/chats/getStream.js.map

@@ -1 +1 @@
-{"version":3,"file":"getStream.js","sourceRoot":"","sources":["../../../src/routes/chats/getStream.ts"],"names":[],"mappings":";;;AACA,wCAA4C;AAC5C,2CAA+C;AAExC,MAAM,SAAS,GAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;;IACpD,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,yBAAe,CAAC,KAAK,CAAC,MAAA,GAAG,CAAC,MAAM,mCAAI,EAAE,CAAC,CAAC,MAAM,CAAA;IACzD,CAAC;IAAC,WAAM,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAA;QACpD,OAAM;IACR,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAA;IACjC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;QACpD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACjC,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAA;IAEzD,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAA;IAClD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;IAC1C,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IACzC,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAA;IAExC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,yBAAe,GAAE,CAAC,gBAAgB,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAE5E,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAEhB,MAAM,YAAY,GAAG,GAAG,EAAE;YACxB,MAAM,CAAC,OAAO,EAAE,CAAA;QAClB,CAAC,CAAA;QAED,MAAM,YAAY,GAAG,GAAG,EAAE;YACxB,MAAM,CAAC,OAAO,EAAE,CAAA;QAClB,CAAC,CAAA;QAED,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;QAC/B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAE7B,MAAM,eAAe,GAAG,GAAG,EAAE;YAC3B,GAAG,CAAC,cAAc,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;YAC3C,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAC3C,CAAC,CAAA;QAED,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;QACnC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;QACjC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;IACrC,CAAC;IAAC,WAAM,CAAC;QACP,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,GAAG,CAAC,GAAG,EAAE,CAAA;YACX,CAAC;YAAC,WAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAA;AAtDY,QAAA,SAAS,aAsDrB"}
+{"version":3,"file":"getStream.js","sourceRoot":"","sources":["../../../src/routes/chats/getStream.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,2CAA+C;AAC/C,uDAAsE;AACtE,wCAA4C;AAC5C,2DAA2D;AAE3D,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,yBAAe,EAAE,CAAC,CAAA;AAEtD,MAAM,SAAS,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC7D,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACvD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;QACtB,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QACjC,MAAM,IAAA,6BAAe,EAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,IAAA,yCAAqB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACnC,CAAC;QACD,OAAM;IACR,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAA;IACjC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;QACpD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACjC,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAA;IAEzD,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAA;IAClD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;IAC1C,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IACzC,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAA;IAExC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,yBAAe,GAAE,CAAC,gBAAgB,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAE5E,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAEhB,MAAM,YAAY,GAAG,GAAG,EAAE;YACxB,MAAM,CAAC,OAAO,EAAE,CAAA;QAClB,CAAC,CAAA;QAED,MAAM,YAAY,GAAG,GAAG,EAAE;YACxB,MAAM,CAAC,OAAO,EAAE,CAAA;QAClB,CAAC,CAAA;QAED,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;QAC/B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAE7B,MAAM,eAAe,GAAG,GAAG,EAAE;YAC3B,GAAG,CAAC,cAAc,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;YAC3C,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAC3C,CAAC,CAAA;QAED,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;QACnC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;QACjC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;IACrC,CAAC;IAAC,WAAM,CAAC;QACP,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,GAAG,CAAC,GAAG,EAAE,CAAA;YACX,CAAC;YAAC,WAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAA;AA3DY,QAAA,SAAS,aA2DrB"}

package/dist/routes/chats/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/index.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,UAAU,4CAAW,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/index.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,UAAU,4CAAW,CAAA"}

package/dist/routes/chats/index.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.chatRoutes = void 0;
 const express_1 = require("express");
+const middleware_1 = require("../../middleware");
 const abort_1 = require("./abort");
 const actions_1 = require("./actions");
 const artifacts_1 = require("./artifacts");
@@ -14,18 +15,23 @@ const list_1 = require("./list");
 const stream_1 = require("./stream");
 const title_1 = require("./title");
 const updateToolCall_1 = require("./updateToolCall");
+const invite_participants_1 = require("./invite-participants");
+const remove_participants_1 = require("./remove-participants");
+const { ChatValidationMiddleware } = middleware_1.ValidationMiddleware;
 exports.chatRoutes = (0, express_1.Router)();
-exports.chatRoutes.get('/chats', list_1.listChats);
-exports.chatRoutes.get('/chats/:chatId/stream', getStream_1.getStream);
-exports.chatRoutes.get('/chats/:chatId/messages', messages_1.getMessages);
-exports.chatRoutes.get('/chats/:chatId', get_1.getChat);
-exports.chatRoutes.delete('/chats/:chatId', delete_1.deleteChat);
-exports.chatRoutes.post('/chats/stream', stream_1.streamMessage);
-exports.chatRoutes.post('/chats/multi-user/messages', multiUserMessages_1.postMultiUserMessage);
-exports.chatRoutes.post('/chats/:chatId/messages', multiUserMessages_1.postMultiUserMessage);
-exports.chatRoutes.post('/chats/title', title_1.generateTitle);
-exports.chatRoutes.get('/chats/:chatId/artifacts', artifacts_1.getArtifacts);
-exports.chatRoutes.post('/chats/:chatId/abort', abort_1.abortMessage);
-exports.chatRoutes.post('/chats/:chatId/actions', actions_1.postChatAction);
-exports.chatRoutes.patch('/chats/:chatId/messages/:messageId/tool-calls/:toolCallId', updateToolCall_1.patchToolCall);
+exports.chatRoutes.get('/chats', ChatValidationMiddleware.validateListChats, list_1.listChats);
+exports.chatRoutes.get('/chats/:chatId/stream', ChatValidationMiddleware.validateGetStream, getStream_1.getStream);
+exports.chatRoutes.get('/chats/:chatId/messages', ChatValidationMiddleware.validateGetMessages, messages_1.getMessages);
+exports.chatRoutes.get('/chats/:chatId', ChatValidationMiddleware.validateChatRouteParams, get_1.getChat);
+exports.chatRoutes.delete('/chats/:chatId', ChatValidationMiddleware.validateChatRouteParams, delete_1.deleteChat);
+exports.chatRoutes.post('/chats/stream', ChatValidationMiddleware.validateSendMessage, stream_1.streamMessage);
+exports.chatRoutes.post('/chats/multi-user/messages', ChatValidationMiddleware.validateMultiUserMessage, multiUserMessages_1.postMultiUserMessage);
+exports.chatRoutes.post('/chats/:chatId/messages', ChatValidationMiddleware.validateMultiUserMessage, multiUserMessages_1.postMultiUserMessage);
+exports.chatRoutes.post('/chats/title', ChatValidationMiddleware.validateGenerateTitle, title_1.generateTitle);
+exports.chatRoutes.get('/chats/:chatId/artifacts', ChatValidationMiddleware.validateChatRouteParams, artifacts_1.getArtifacts);
+exports.chatRoutes.post('/chats/:chatId/abort', ChatValidationMiddleware.validateGetStream, abort_1.abortMessage);
+exports.chatRoutes.post('/chats/:chatId/actions', ChatValidationMiddleware.validatePostChatAction, actions_1.postChatAction);
+exports.chatRoutes.patch('/chats/:chatId/messages/:messageId/tool-calls/:toolCallId', ChatValidationMiddleware.validatePatchToolCall, updateToolCall_1.patchToolCall);
+exports.chatRoutes.post('/chats/:chatId/participants', ChatValidationMiddleware.validateInviteParticipants, invite_participants_1.inviteParticipants);
+exports.chatRoutes.delete('/chats/:chatId/participants', ChatValidationMiddleware.validateRemoveParticipants, remove_participants_1.removeParticipants);
 //# sourceMappingURL=index.js.map

package/dist/routes/chats/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/chats/index.ts"],"names":[],"mappings":";;;AAAA,qCAAgC;AAChC,mCAAsC;AACtC,uCAA0C;AAC1C,2CAA0C;AAC1C,qCAAqC;AACrC,+BAA+B;AAC/B,2CAAuC;AACvC,yCAAwC;AACxC,2DAA0D;AAC1D,iCAAkC;AAClC,qCAAwC;AACxC,mCAAuC;AACvC,qDAAgD;AAEnC,QAAA,UAAU,GAAG,IAAA,gBAAM,GAAE,CAAA;AAElC,kBAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,gBAAS,CAAC,CAAA;AACnC,kBAAU,CAAC,GAAG,CAAC,uBAAuB,EAAE,qBAAS,CAAC,CAAA;AAClD,kBAAU,CAAC,GAAG,CAAC,yBAAyB,EAAE,sBAAW,CAAC,CAAA;AACtD,kBAAU,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAO,CAAC,CAAA;AACzC,kBAAU,CAAC,MAAM,CAAC,gBAAgB,EAAE,mBAAU,CAAC,CAAA;AAC/C,kBAAU,CAAC,IAAI,CAAC,eAAe,EAAE,sBAAa,CAAC,CAAA;AAC/C,kBAAU,CAAC,IAAI,CAAC,4BAA4B,EAAE,wCAAoB,CAAC,CAAA;AACnE,kBAAU,CAAC,IAAI,CAAC,yBAAyB,EAAE,wCAAoB,CAAC,CAAA;AAChE,kBAAU,CAAC,IAAI,CAAC,cAAc,EAAE,qBAAa,CAAC,CAAA;AAC9C,kBAAU,CAAC,GAAG,CAAC,0BAA0B,EAAE,wBAAY,CAAC,CAAA;AACxD,kBAAU,CAAC,IAAI,CAAC,sBAAsB,EAAE,oBAAY,CAAC,CAAA;AACrD,kBAAU,CAAC,IAAI,CAAC,wBAAwB,EAAE,wBAAc,CAAC,CAAA;AACzD,kBAAU,CAAC,KAAK,CAAC,2DAA2D,EAAE,8BAAa,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/chats/index.ts"],"names":[],"mappings":";;;AAAA,qCAAgC;AAChC,iDAAuD;AACvD,mCAAsC;AACtC,uCAA0C;AAC1C,2CAA0C;AAC1C,qCAAqC;AACrC,+BAA+B;AAC/B,2CAAuC;AACvC,yCAAwC;AACxC,2DAA0D;AAC1D,iCAAkC;AAClC,qCAAwC;AACxC,mCAAuC;AACvC,qDAAgD;AAChD,+DAA0D;AAC1D,+DAA0D;AAE1D,MAAM,EAAE,wBAAwB,EAAE,GAAG,iCAAoB,CAAA;AAE5C,QAAA,UAAU,GAAG,IAAA,gBAAM,GAAE,CAAA;AAElC,kBAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,wBAAwB,CAAC,iBAAiB,EAAE,gBAAS,CAAC,CAAA;AAC/E,kBAAU,CAAC,GAAG,CAAC,uBAAuB,EAAE,wBAAwB,CAAC,iBAAiB,EAAE,qBAAS,CAAC,CAAA;AAC9F,kBAAU,CAAC,GAAG,CACZ,yBAAyB,EACzB,wBAAwB,CAAC,mBAAmB,EAC5C,sBAAW,CACZ,CAAA;AACD,kBAAU,CAAC,GAAG,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,uBAAuB,EAAE,aAAO,CAAC,CAAA;AAC3F,kBAAU,CAAC,MAAM,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,uBAAuB,EAAE,mBAAU,CAAC,CAAA;AACjG,kBAAU,CAAC,IAAI,CAAC,eAAe,EAAE,wBAAwB,CAAC,mBAAmB,EAAE,sBAAa,CAAC,CAAA;AAC7F,kBAAU,CAAC,IAAI,CAAC,4BAA4B,EAAE,wBAAwB,CAAC,wBAAwB,EAAE,wCAAoB,CAAC,CAAA;AACtH,kBAAU,CAAC,IAAI,CACb,yBAAyB,EACzB,wBAAwB,CAAC,wBAAwB,EACjD,wCAAoB,CACrB,CAAA;AACD,kBAAU,CAAC,IAAI,CAAC,cAAc,EAAE,wBAAwB,CAAC,qBAAqB,EAAE,qBAAa,CAAC,CAAA;AAC9F,kBAAU,CAAC,GAAG,CAAC,0BAA0B,EAAE,wBAAwB,CAAC,uBAAuB,EAAE,wBAAY,CAAC,CAAA;AAC1G,kBAAU,CAAC,IAAI,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,iBAAiB,EAAE,oBAAY,CAAC,CAAA;AACjG,kBAAU,CAAC,IAAI,CACb,wBAAwB,EACxB,wBAAwB,CAAC,sBAAsB,EAC/C,wBAAc,CACf,CAAA;AACD,kBAAU,CAAC,KAAK,CACd,2DAA2D,EAC3D,wBAAwB,CAAC,qBAAqB,EAC9C,8BAAa,CACd,CAAA;AACD,kBAAU,CAAC,IAAI,CACb,6BAA6B,EAC7B,wBAAwB,CAAC,0BAA0B,EACnD,wCAAkB,CACnB,CAAA;AACD,kBAAU,CAAC,MAAM,CACf,6BAA6B,EAC7B,wBAAwB,CAAC,0BAA0B,EACnD,wCAAkB,CACnB,CAAA"}

package/dist/routes/chats/invite-participants.d.ts

@@ -0,0 +1,3 @@
+import type { Request, Response } from 'express';
+export declare const inviteParticipants: (req: Request, res: Response) => Promise<void>;
+//# sourceMappingURL=invite-participants.d.ts.map

package/dist/routes/chats/invite-participants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-participants.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/invite-participants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAmBhD,eAAO,MAAM,kBAAkB,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,kBAgDnE,CAAA"}

package/dist/routes/chats/invite-participants.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.inviteParticipants = void 0;
+const zod_1 = require("zod");
+const context_1 = require("../../context");
+const chat_access_1 = require("../../lib/chat-access");
+const schemas_1 = require("../schemas");
+const chat_route_errors_1 = require("./chat-route-errors");
+const validatedSchema = zod_1.z.object({
+    params: schemas_1.chatRouteParamsSchema,
+    body: schemas_1.inviteParticipantsSchema,
+});
+const inviteParticipants = async (req, res) => {
+    var _a;
+    try {
+        const { params, body } = validatedSchema.parse(req.validated);
+        const userId = (0, chat_access_1.requireUserId)(req);
+        const chat = await (0, chat_access_1.loadChatForUser)(params.chatId, userId);
+        if (!(0, chat_access_1.isChatOwner)(chat, userId)) {
+            throw new Error(chat_access_1.OWNER_INVITE_REQUIRED_MESSAGE);
+        }
+        if (!req.hasAccountAccess) {
+            res.status(501).json({ message: chat_access_1.ACCOUNT_ACCESS_MIDDLEWARE_REQUIRED });
+            return;
+        }
+        const existing = new Set((0, chat_access_1.getChatParticipantIds)(chat));
+        const toAdd = [];
+        for (const targetUserId of body.userIds) {
+            if (existing.has(targetUserId)) {
+                continue;
+            }
+            const allowed = await req.hasAccountAccess(targetUserId);
+            if (!allowed) {
+                throw new Error(`User ${targetUserId} does not belong to this account`);
+            }
+            toAdd.push(targetUserId);
+        }
+        if (toAdd.length === 0) {
+            res.json(chat);
+            return;
+        }
+        const participantIds = Array.from(new Set([...((_a = chat.participantIds) !== null && _a !== void 0 ? _a : []), ...toAdd]));
+        const { chatRepository } = (0, context_1.getBuilderApiRepositories)();
+        const updated = await chatRepository.update(params.chatId, { participantIds });
+        if (!updated) {
+            res.status(404).json({ message: 'Chat not found' });
+            return;
+        }
+        res.json(updated);
+    }
+    catch (error) {
+        (0, chat_route_errors_1.respondChatRouteError)(res, error);
+    }
+};
+exports.inviteParticipants = inviteParticipants;
+//# sourceMappingURL=invite-participants.js.map

package/dist/routes/chats/invite-participants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-participants.js","sourceRoot":"","sources":["../../../src/routes/chats/invite-participants.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,2CAAyD;AACzD,uDAO8B;AAC9B,wCAA4E;AAC5E,2DAA2D;AAE3D,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,+BAAqB;IAC7B,IAAI,EAAE,kCAAwB;CAC/B,CAAC,CAAA;AAEK,MAAM,kBAAkB,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;;IACtE,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC7D,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QAEjC,MAAM,IAAI,GAAG,MAAM,IAAA,6BAAe,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACzD,IAAI,CAAC,IAAA,yBAAW,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,2CAA6B,CAAC,CAAA;QAChD,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gDAAkC,EAAE,CAAC,CAAA;YACrE,OAAM;QACR,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAA,mCAAqB,EAAC,IAAI,CAAC,CAAC,CAAA;QACrD,MAAM,KAAK,GAAa,EAAE,CAAA;QAE1B,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC/B,SAAQ;YACV,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAA;YACxD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,QAAQ,YAAY,kCAAkC,CAAC,CAAA;YACzE,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC1B,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACd,OAAM;QACR,CAAC;QAED,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAC/B,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAA,IAAI,CAAC,cAAc,mCAAI,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CACpD,CAAA;QACD,MAAM,EAAE,cAAc,EAAE,GAAG,IAAA,mCAAyB,GAAE,CAAA;QACtD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAA;QAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAA;YACnD,OAAM;QACR,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,yCAAqB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA;AAhDY,QAAA,kBAAkB,sBAgD9B"}

package/dist/routes/chats/list.d.ts

@@ -1,3 +1,3 @@
-import type { RequestHandler } from 'express';
-export declare const listChats: RequestHandler;
+import type { Request, Response } from 'express';
+export declare const listChats: (req: Request, res: Response) => Promise<void>;
 //# sourceMappingURL=list.d.ts.map

package/dist/routes/chats/list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,eAAO,MAAM,SAAS,EAAE,cAmCvB,CAAA"}
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAUhD,eAAO,MAAM,SAAS,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,kBAuB1D,CAAA"}