@multiplayer-app/sandbox 0.0.8 → 0.0.9

package/dist/routes/chats/list.js

@@ -2,38 +2,35 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.listChats = void 0;
 const ai_agent_types_1 = require("@multiplayer-app/ai-agent-types");
-const context_1 = require("../../context");
+const zod_1 = require("zod");
+const list_user_chats_1 = require("../../lib/list-user-chats");
+const chat_access_1 = require("../../lib/chat-access");
+const schemas_1 = require("../schemas");
+const chat_route_errors_1 = require("./chat-route-errors");
+const validatedSchema = zod_1.z.object({ query: schemas_1.listChatsQuerySchema });
 const listChats = async (req, res) => {
     var _a;
-    const { contextKey, skip, limit, sortField, sortOrder, multiUser, userId: userIdQuery } = req.query;
-    const multiUserStr = typeof multiUser === 'string' ? multiUser : undefined;
-    const multiUserFilter = multiUserStr === undefined
-        ? undefined
-        : multiUserStr === 'true'
-            ? true
-            : multiUserStr === 'false'
-                ? false
-                : undefined;
-    if (multiUserStr !== undefined && multiUserFilter === undefined) {
-        res.status(400).json({ message: 'multiUser must be "true" or "false"' });
-        return;
-    }
-    // Never let query override an authenticated identity (would leak other users' chats).
-    const listUserId = (_a = req.userId) !== null && _a !== void 0 ? _a : (typeof userIdQuery === 'string' && userIdQuery.trim() !== '' ? userIdQuery.trim() : undefined);
     try {
-        const page = await (0, context_1.getAgentService)().getChatProcessor().listChats({
-            contextKey: typeof contextKey === 'string' ? contextKey : undefined,
-            skip: typeof skip === 'string' ? Number(skip) : undefined,
-            limit: typeof limit === 'string' ? Number(limit) : undefined,
-            userId: listUserId,
-            multiUser: multiUserFilter,
-            sortField: typeof sortField === 'string' ? sortField : undefined,
-            sortOrder: sortOrder === 'asc' ? ai_agent_types_1.SortOrder.Asc : sortOrder === 'desc' ? ai_agent_types_1.SortOrder.Desc : undefined,
+        const { query } = validatedSchema.parse(req.validated);
+        const userId = (0, chat_access_1.requireUserId)(req);
+        const page = await (0, list_user_chats_1.listUserChats)({
+            contextKey: query.contextKey,
+            skip: query.skip,
+            limit: query.limit,
+            userId,
+            multiUser: query.multiUser,
+            membership: query.membership,
+            sortField: (_a = query.sortField) !== null && _a !== void 0 ? _a : 'updatedAt',
+            sortOrder: query.sortOrder === 'asc'
+                ? ai_agent_types_1.SortOrder.Asc
+                : query.sortOrder === 'desc'
+                    ? ai_agent_types_1.SortOrder.Desc
+                    : ai_agent_types_1.SortOrder.Desc,
         });
         res.json(page);
     }
     catch (error) {
-        res.status(500).json({ message: error.message });
+        (0, chat_route_errors_1.respondChatRouteError)(res, error);
     }
 };
 exports.listChats = listChats;

package/dist/routes/chats/list.js.map

@@ -1 +1 @@
-{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../src/routes/chats/list.ts"],"names":[],"mappings":";;;AACA,oEAA2D;AAC3D,2CAA+C;AAExC,MAAM,SAAS,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;;IAC1D,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,KAAK,CAAA;IACnG,MAAM,YAAY,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1E,MAAM,eAAe,GACnB,YAAY,KAAK,SAAS;QACxB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,YAAY,KAAK,MAAM;YACvB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,YAAY,KAAK,OAAO;gBACxB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,SAAS,CAAA;IACnB,IAAI,YAAY,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAA;QACxE,OAAM;IACR,CAAC;IAED,sFAAsF;IACtF,MAAM,UAAU,GACd,MAAA,GAAG,CAAC,MAAM,mCACP,CAAC,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAEpG,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAA,yBAAe,GAAE,CAAC,gBAAgB,EAAE,CAAC,SAAS,CAAC;YAChE,UAAU,EAAE,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YACnE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YACzD,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5D,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,eAAe;YAC1B,SAAS,EAAE,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAChE,SAAS,EAAE,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,0BAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,0BAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SACnG,CAAC,CAAA;QACF,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IAC7D,CAAC;AACH,CAAC,CAAA;AAnCY,QAAA,SAAS,aAmCrB"}
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../src/routes/chats/list.ts"],"names":[],"mappings":";;;AACA,oEAA2D;AAC3D,6BAAuB;AACvB,+DAAyD;AACzD,uDAAqD;AACrD,wCAAiD;AACjD,2DAA2D;AAE3D,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,8BAAoB,EAAE,CAAC,CAAA;AAE1D,MAAM,SAAS,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;;IAC7D,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACtD,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,MAAM,IAAA,+BAAa,EAAC;YAC/B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,MAAA,KAAK,CAAC,SAAS,mCAAI,WAAW;YACzC,SAAS,EACP,KAAK,CAAC,SAAS,KAAK,KAAK;gBACvB,CAAC,CAAC,0BAAS,CAAC,GAAG;gBACf,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM;oBAC1B,CAAC,CAAC,0BAAS,CAAC,IAAI;oBAChB,CAAC,CAAC,0BAAS,CAAC,IAAI;SACvB,CAAC,CAAA;QACF,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,yCAAqB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA;AAvBY,QAAA,SAAS,aAuBrB"}

package/dist/routes/chats/messages.d.ts

@@ -1,3 +1,3 @@
-import type { RequestHandler } from 'express';
-export declare const getMessages: RequestHandler;
+import type { Request, Response } from 'express';
+export declare const getMessages: (req: Request, res: Response) => Promise<void>;
 //# sourceMappingURL=messages.d.ts.map

package/dist/routes/chats/messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,eAAO,MAAM,WAAW,EAAE,cAiBzB,CAAA"}
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAYhD,eAAO,MAAM,WAAW,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,kBAkB5D,CAAA"}

package/dist/routes/chats/messages.js

@@ -1,26 +1,33 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getMessages = void 0;
+const zod_1 = require("zod");
 const context_1 = require("../../context");
+const chat_access_1 = require("../../lib/chat-access");
 const schemas_1 = require("../schemas");
+const chat_route_errors_1 = require("./chat-route-errors");
+const validatedSchema = zod_1.z.object({
+    params: schemas_1.chatRouteParamsSchema,
+    query: schemas_1.getMessagesSchema,
+});
 const getMessages = async (req, res) => {
-    var _a;
     try {
-        const query = schemas_1.getMessagesSchema.parse((_a = req.query) !== null && _a !== void 0 ? _a : {});
+        const { params, query } = validatedSchema.parse(req.validated);
         const { limit, before } = query;
-        const { chatId } = schemas_1.chatRouteParamsSchema.parse(req.params);
+        const userId = (0, chat_access_1.requireUserId)(req);
+        await (0, chat_access_1.loadChatForUser)(params.chatId, userId);
         const page = await (0, context_1.getAgentService)()
             .getChatProcessor()
-            .getMessages(chatId, { limit, before });
+            .getMessages(params.chatId, { limit, before });
         res.json(page);
     }
     catch (error) {
         const err = error;
-        if (err.message === 'Chat not found' || err.message === 'Message not found or does not belong to this chat') {
+        if (err.message === 'Message not found or does not belong to this chat') {
             res.status(404).json({ message: err.message });
             return;
         }
-        res.status(400).json({ message: err.message });
+        (0, chat_route_errors_1.respondChatRouteError)(res, error);
     }
 };
 exports.getMessages = getMessages;

package/dist/routes/chats/messages.js.map

@@ -1 +1 @@
-{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../../src/routes/chats/messages.ts"],"names":[],"mappings":";;;AACA,2CAA+C;AAC/C,wCAAqE;AAE9D,MAAM,WAAW,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;;IAC5D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,2BAAiB,CAAC,KAAK,CAAC,MAAA,GAAG,CAAC,KAAK,mCAAI,EAAE,CAAC,CAAA;QACtD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;QAC/B,MAAM,EAAE,MAAM,EAAE,GAAG,+BAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAA,yBAAe,GAAE;aACjC,gBAAgB,EAAE;aAClB,WAAW,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QACzC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAc,CAAA;QAC1B,IAAI,GAAG,CAAC,OAAO,KAAK,gBAAgB,IAAI,GAAG,CAAC,OAAO,KAAK,mDAAmD,EAAE,CAAC;YAC5G,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;YAC9C,OAAM;QACR,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;IAChD,CAAC;AACH,CAAC,CAAA;AAjBY,QAAA,WAAW,eAiBvB"}
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../../src/routes/chats/messages.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,2CAA+C;AAC/C,uDAAsE;AACtE,wCAAqE;AACrE,2DAA2D;AAE3D,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,+BAAqB;IAC7B,KAAK,EAAE,2BAAiB;CACzB,CAAC,CAAA;AAEK,MAAM,WAAW,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC/D,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC9D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;QAC/B,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QACjC,MAAM,IAAA,6BAAe,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAA,yBAAe,GAAE;aACjC,gBAAgB,EAAE;aAClB,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QAChD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAc,CAAA;QAC1B,IAAI,GAAG,CAAC,OAAO,KAAK,mDAAmD,EAAE,CAAC;YACxE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;YAC9C,OAAM;QACR,CAAC;QACD,IAAA,yCAAqB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA;AAlBY,QAAA,WAAW,eAkBvB"}

package/dist/routes/chats/multiUserMessages.d.ts

@@ -1,3 +1,3 @@
-import type { RequestHandler } from 'express';
-export declare const postMultiUserMessage: RequestHandler;
+import type { Request, Response } from 'express';
+export declare const postMultiUserMessage: (req: Request, res: Response) => Promise<void>;
 //# sourceMappingURL=multiUserMessages.d.ts.map

package/dist/routes/chats/multiUserMessages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"multiUserMessages.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/multiUserMessages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,eAAO,MAAM,oBAAoB,EAAE,cAkClC,CAAA"}
+{"version":3,"file":"multiUserMessages.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/multiUserMessages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAShD,eAAO,MAAM,oBAAoB,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,kBAgCrE,CAAA"}

package/dist/routes/chats/multiUserMessages.js

@@ -1,42 +1,42 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.postMultiUserMessage = void 0;
-const schemas_1 = require("../schemas");
+const zod_1 = require("zod");
 const context_1 = require("../../context");
+const chat_access_1 = require("../../lib/chat-access");
+const schemas_1 = require("../schemas");
+const chat_route_errors_1 = require("./chat-route-errors");
+const validatedSchema = zod_1.z.object({ body: schemas_1.multiUserMessageSchema });
 const postMultiUserMessage = async (req, res) => {
-    var _a, _b;
     try {
-        const params = req.params;
-        const payload = schemas_1.multiUserMessageSchema.parse({
-            ...((_a = req.body) !== null && _a !== void 0 ? _a : {}),
-            ...(params.chatId ? { chatId: params.chatId } : {}),
-        });
+        const { body: parsed } = validatedSchema.parse(req.validated);
+        const userId = (0, chat_access_1.requireUserId)(req);
+        let payload = parsed;
+        if (parsed.chatId) {
+            await (0, chat_access_1.loadChatForUser)(parsed.chatId, userId);
+            const { participantIds: _ignored, ...rest } = parsed;
+            payload = rest;
+        }
         const result = await (0, context_1.getAgentService)()
             .getChatProcessor()
             .postMultiUserMessage({
             ...payload,
-            userId: (_b = req.userId) !== null && _b !== void 0 ? _b : payload.userId,
+            userId,
             executionContext: {
                 tenants: req.accountId ? { accountId: req.accountId } : {},
             },
             context: {
                 headers: req.headers,
-                data: { myInternalField: 'myInternalValue' },
+                data: {
+                    accountId: req.accountId,
+                    userId,
+                },
             },
         });
         res.json(result);
     }
     catch (err) {
-        const message = err.message;
-        if (message === 'Chat does not belong to this user') {
-            res.status(403).json({ message });
-            return;
-        }
-        if (message === 'Chat not found') {
-            res.status(404).json({ message });
-            return;
-        }
-        res.status(400).json({ message });
+        (0, chat_route_errors_1.respondChatRouteError)(res, err);
     }
 };
 exports.postMultiUserMessage = postMultiUserMessage;

package/dist/routes/chats/multiUserMessages.js.map

@@ -1 +1 @@
-{"version":3,"file":"multiUserMessages.js","sourceRoot":"","sources":["../../../src/routes/chats/multiUserMessages.ts"],"names":[],"mappings":";;;AACA,wCAAmD;AACnD,2CAA+C;AAExC,MAAM,oBAAoB,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;;IACrE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6B,CAAA;QAChD,MAAM,OAAO,GAAG,gCAAsB,CAAC,KAAK,CAAC;YAC3C,GAAG,CAAC,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAe,GAAE;aACnC,gBAAgB,EAAE;aAClB,oBAAoB,CAAC;YACpB,GAAG,OAAO;YACV,MAAM,EAAE,MAAA,GAAG,CAAC,MAAM,mCAAI,OAAO,CAAC,MAAM;YACpC,gBAAgB,EAAE;gBAChB,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;aAC3D;YACD,OAAO,EAAE;gBACP,OAAO,EAAE,GAAG,CAAC,OAAiC;gBAC9C,IAAI,EAAE,EAAE,eAAe,EAAE,iBAAiB,EAAE;aAC7C;SACF,CAAC,CAAA;QACJ,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAI,GAAa,CAAC,OAAO,CAAA;QACtC,IAAI,OAAO,KAAK,mCAAmC,EAAE,CAAC;YACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;YACjC,OAAM;QACR,CAAC;QACD,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;YACjC,OAAM;QACR,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA;AAlCY,QAAA,oBAAoB,wBAkChC"}
+{"version":3,"file":"multiUserMessages.js","sourceRoot":"","sources":["../../../src/routes/chats/multiUserMessages.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,2CAA+C;AAC/C,uDAAsE;AACtE,wCAAmD;AACnD,2DAA2D;AAE3D,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gCAAsB,EAAE,CAAC,CAAA;AAE3D,MAAM,oBAAoB,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACxE,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC7D,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QAEjC,IAAI,OAAO,GAAG,MAAM,CAAA;QACpB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAA,6BAAe,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YAC5C,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;YACpD,OAAO,GAAG,IAAI,CAAA;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAe,GAAE;aACnC,gBAAgB,EAAE;aAClB,oBAAoB,CAAC;YACpB,GAAG,OAAO;YACV,MAAM;YACN,gBAAgB,EAAE;gBAChB,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;aAC3D;YACD,OAAO,EAAE;gBACP,OAAO,EAAE,GAAG,CAAC,OAAiC;gBAC9C,IAAI,EAAE;oBACJ,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,MAAM;iBACP;aACF;SACF,CAAC,CAAA;QACJ,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAA,yCAAqB,EAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACjC,CAAC;AACH,CAAC,CAAA;AAhCY,QAAA,oBAAoB,wBAgChC"}

package/dist/routes/chats/remove-participants.d.ts

@@ -0,0 +1,3 @@
+import type { Request, Response } from 'express';
+export declare const removeParticipants: (req: Request, res: Response) => Promise<void>;
+//# sourceMappingURL=remove-participants.d.ts.map

package/dist/routes/chats/remove-participants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-participants.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/remove-participants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAkBhD,eAAO,MAAM,kBAAkB,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,kBAmCnE,CAAA"}

package/dist/routes/chats/remove-participants.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.removeParticipants = void 0;
+const zod_1 = require("zod");
+const context_1 = require("../../context");
+const chat_access_1 = require("../../lib/chat-access");
+const schemas_1 = require("../schemas");
+const chat_route_errors_1 = require("./chat-route-errors");
+const validatedSchema = zod_1.z.object({
+    params: schemas_1.chatRouteParamsSchema,
+    body: schemas_1.inviteParticipantsSchema,
+});
+const removeParticipants = async (req, res) => {
+    var _a, _b;
+    try {
+        const { params, body } = validatedSchema.parse(req.validated);
+        const userId = (0, chat_access_1.requireUserId)(req);
+        const chat = await (0, chat_access_1.loadChatForUser)(params.chatId, userId);
+        if (!(0, chat_access_1.isChatOwner)(chat, userId)) {
+            throw new Error(chat_access_1.OWNER_REMOVE_PARTICIPANTS_MESSAGE);
+        }
+        const ownerId = (0, chat_access_1.getChatOwnerId)(chat);
+        const current = new Set((_a = chat.participantIds) !== null && _a !== void 0 ? _a : []);
+        const toRemove = new Set(body.userIds);
+        if (ownerId && toRemove.has(ownerId)) {
+            throw new Error('Cannot remove the chat owner');
+        }
+        const missing = body.userIds.filter((id) => !current.has(id));
+        if (missing.length > 0) {
+            throw new Error(`User is not a participant: ${missing.join(', ')}`);
+        }
+        const participantIds = ((_b = chat.participantIds) !== null && _b !== void 0 ? _b : []).filter((id) => !toRemove.has(id));
+        const { chatRepository } = (0, context_1.getBuilderApiRepositories)();
+        const updated = await chatRepository.update(params.chatId, { participantIds });
+        if (!updated) {
+            res.status(404).json({ message: 'Chat not found' });
+            return;
+        }
+        res.json(updated);
+    }
+    catch (error) {
+        (0, chat_route_errors_1.respondChatRouteError)(res, error);
+    }
+};
+exports.removeParticipants = removeParticipants;
+//# sourceMappingURL=remove-participants.js.map

package/dist/routes/chats/remove-participants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-participants.js","sourceRoot":"","sources":["../../../src/routes/chats/remove-participants.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,2CAAyD;AACzD,uDAM8B;AAC9B,wCAA4E;AAC5E,2DAA2D;AAE3D,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,+BAAqB;IAC7B,IAAI,EAAE,kCAAwB;CAC/B,CAAC,CAAA;AAEK,MAAM,kBAAkB,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;;IACtE,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC7D,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QAEjC,MAAM,IAAI,GAAG,MAAM,IAAA,6BAAe,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACzD,IAAI,CAAC,IAAA,yBAAW,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,+CAAiC,CAAC,CAAA;QACpD,CAAC;QAED,MAAM,OAAO,GAAG,IAAA,4BAAc,EAAC,IAAI,CAAC,CAAA;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAA,IAAI,CAAC,cAAc,mCAAI,EAAE,CAAC,CAAA;QAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAEtC,IAAI,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACjD,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;QAC7D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACrE,CAAC;QAED,MAAM,cAAc,GAAG,CAAC,MAAA,IAAI,CAAC,cAAc,mCAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;QACpF,MAAM,EAAE,cAAc,EAAE,GAAG,IAAA,mCAAyB,GAAE,CAAA;QACtD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAA;QAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAA;YACnD,OAAM;QACR,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,yCAAqB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA;AAnCY,QAAA,kBAAkB,sBAmC9B"}

package/dist/routes/chats/stream.d.ts

@@ -1,3 +1,3 @@
-import type { RequestHandler } from 'express';
-export declare const streamMessage: RequestHandler;
+import type { Request, Response } from 'express';
+export declare const streamMessage: (req: Request, res: Response) => Promise<void>;
 //# sourceMappingURL=stream.d.ts.map

package/dist/routes/chats/stream.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stream.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/stream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,cAAc,EAAY,MAAM,SAAS,CAAA;AAkBhE,eAAO,MAAM,aAAa,EAAE,cAkE3B,CAAA"}
+{"version":3,"file":"stream.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/stream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAsBhD,eAAO,MAAM,aAAa,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,kBA+E9D,CAAA"}

package/dist/routes/chats/stream.js

@@ -3,9 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.streamMessage = void 0;
 const zod_1 = require("zod");
 const logger_1 = require("../../logger");
+const chat_access_1 = require("../../lib/chat-access");
 const schemas_1 = require("../schemas");
 const context_1 = require("../../context");
 const socketIdFromRequest_1 = require("../../lib/socketIdFromRequest");
+const chat_route_errors_1 = require("./chat-route-errors");
 function createRequestAbortController(req, res) {
     const controller = new AbortController();
     const onClose = () => controller.abort();
@@ -14,11 +16,29 @@ function createRequestAbortController(req, res) {
     res.once('close', () => req.socket.off('close', onClose));
     return controller;
 }
+const validatedSchema = zod_1.z.object({ body: schemas_1.sendMessageSchema });
 const streamMessage = async (req, res) => {
-    var _a;
     const controller = createRequestAbortController(req, res);
     try {
-        const payload = schemas_1.sendMessageSchema.parse((_a = req.body) !== null && _a !== void 0 ? _a : {});
+        const { body: parsed } = validatedSchema.parse(req.validated);
+        const userId = (0, chat_access_1.requireUserId)(req);
+        let streamPayload;
+        if ('content' in parsed) {
+            if (parsed.chatId) {
+                await (0, chat_access_1.loadChatForUser)(parsed.chatId, userId);
+                const { participantIds: _ignored, ...rest } = parsed;
+                streamPayload = rest;
+            }
+            else {
+                streamPayload = parsed;
+            }
+        }
+        else {
+            streamPayload = parsed;
+            if (parsed.chatId) {
+                await (0, chat_access_1.loadChatForUser)(parsed.chatId, userId);
+            }
+        }
         const origin = req.headers.origin;
         const headers = {
             'Cache-Control': 'no-cache',
@@ -36,16 +56,16 @@ const streamMessage = async (req, res) => {
         const stream = await (0, context_1.getAgentService)()
             .getChatProcessor()
             .createMessageStream({
-            ...payload,
-            userId: req.userId,
+            ...streamPayload,
+            userId,
             executionContext: {
                 tenants: req.accountId ? { accountId: req.accountId } : {},
             },
             context: {
                 headers: req.headers,
                 data: {
-                    userId: req.userId,
-                    ...('chatId' in payload && payload.chatId ? { chatId: payload.chatId } : {}),
+                    userId,
+                    accountId: req.accountId,
                 },
             },
         }, excludeSocketId, controller.signal);
@@ -58,17 +78,14 @@ const streamMessage = async (req, res) => {
         }
         (0, logger_1.getBuilderApiLogger)().error({ err });
         if (!res.headersSent) {
-            const message = err instanceof zod_1.z.ZodError
-                ? err.issues.map((e) => e.message).join(', ')
-                : err.message;
-            res.status(400).json({ message });
+            (0, chat_route_errors_1.respondChatRouteError)(res, err);
             return;
         }
         if (!res.destroyed && !res.writableEnded) {
             try {
                 res.end();
             }
-            catch (_b) {
+            catch (_a) {
                 /* ignore */
             }
         }

package/dist/routes/chats/stream.js.map

@@ -1 +1 @@
-{"version":3,"file":"stream.js","sourceRoot":"","sources":["../../../src/routes/chats/stream.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,yCAAkD;AAClD,wCAA8C;AAC9C,2CAA+C;AAC/C,uEAAmE;AAEnE,SAAS,4BAA4B,CAAC,GAAY,EAAE,GAAa;IAC/D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;IAExC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACjC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAC1D,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAEzD,OAAO,UAAU,CAAA;AACnB,CAAC;AAEM,MAAM,aAAa,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;;IAC9D,MAAM,UAAU,GAAG,4BAA4B,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAEzD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,2BAAiB,CAAC,KAAK,CAAC,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,CAAC,CAAA;QAEvD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAA;QACjC,MAAM,OAAO,GAA2B;YACtC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;YACxB,cAAc,EAAE,mBAAmB;YACnC,mBAAmB,EAAE,IAAI;SAC1B,CAAA;QAED,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,6BAA6B,CAAC,GAAG,MAAM,CAAA;YAC/C,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAA;QACzB,CAAC;QACD,OAAO,CAAC,kCAAkC,CAAC,GAAG,MAAM,CAAA;QAEpD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC3B,MAAM,eAAe,GAAG,IAAA,yCAAmB,EAAC,GAAG,CAAC,CAAA;QAEhD,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAe,GAAE;aACnC,gBAAgB,EAAE;aAClB,mBAAmB,CAClB;YACE,GAAG,OAAO;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,gBAAgB,EAAE;gBAChB,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;aAC3D;YACD,OAAO,EAAE;gBACP,OAAO,EAAE,GAAG,CAAC,OAAiC;gBAC9C,IAAI,EAAE;oBACJ,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,GAAG,CAAC,QAAQ,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7E;aACF;SACF,EACD,eAAe,EACf,UAAU,CAAC,MAAM,CAClB,CAAA;QACH,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAA,4BAAmB,GAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;YACxD,OAAM;QACR,CAAC;QACD,IAAA,4BAAmB,GAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,OAAO,GACX,GAAG,YAAY,OAAC,CAAC,QAAQ;gBACvB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC7C,CAAC,CAAE,GAAa,CAAC,OAAO,CAAA;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;YACjC,OAAM;QACR,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,GAAG,CAAC,GAAG,EAAE,CAAA;YACX,CAAC;YAAC,WAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAA;AAlEY,QAAA,aAAa,iBAkEzB"}
+{"version":3,"file":"stream.js","sourceRoot":"","sources":["../../../src/routes/chats/stream.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,yCAAkD;AAClD,uDAAsE;AACtE,wCAA8C;AAC9C,2CAA+C;AAC/C,uEAAmE;AACnE,2DAA2D;AAE3D,SAAS,4BAA4B,CAAC,GAAY,EAAE,GAAa;IAC/D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;IAExC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACjC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAC1D,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAEzD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,2BAAiB,EAAE,CAAC,CAAA;AAEtD,MAAM,aAAa,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACjE,MAAM,UAAU,GAAG,4BAA4B,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAEzD,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC7D,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QAEjC,IAAI,aAA4B,CAAA;QAChC,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;YACxB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,IAAA,6BAAe,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;gBAC5C,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;gBACpD,aAAa,GAAG,IAAI,CAAA;YACtB,CAAC;iBAAM,CAAC;gBACN,aAAa,GAAG,MAAM,CAAA;YACxB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,MAAM,CAAA;YACtB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,IAAA,6BAAe,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YAC9C,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAA;QACjC,MAAM,OAAO,GAA2B;YACtC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;YACxB,cAAc,EAAE,mBAAmB;YACnC,mBAAmB,EAAE,IAAI;SAC1B,CAAA;QAED,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,6BAA6B,CAAC,GAAG,MAAM,CAAA;YAC/C,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAA;QACzB,CAAC;QACD,OAAO,CAAC,kCAAkC,CAAC,GAAG,MAAM,CAAA;QAEpD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC3B,MAAM,eAAe,GAAG,IAAA,yCAAmB,EAAC,GAAG,CAAC,CAAA;QAEhD,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAe,GAAE;aACnC,gBAAgB,EAAE;aAClB,mBAAmB,CAClB;YACE,GAAG,aAAa;YAChB,MAAM;YACN,gBAAgB,EAAE;gBAChB,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;aAC3D;YACD,OAAO,EAAE;gBACP,OAAO,EAAE,GAAG,CAAC,OAAiC;gBAC9C,IAAI,EAAE;oBACJ,MAAM;oBACN,SAAS,EAAE,GAAG,CAAC,SAAS;iBACzB;aACF;SACF,EACD,eAAe,EACf,UAAU,CAAC,MAAM,CAClB,CAAA;QACH,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAA,4BAAmB,GAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;YACxD,OAAM;QACR,CAAC;QACD,IAAA,4BAAmB,GAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,IAAA,yCAAqB,EAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAC/B,OAAM;QACR,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,GAAG,CAAC,GAAG,EAAE,CAAA;YACX,CAAC;YAAC,WAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAA;AA/EY,QAAA,aAAa,iBA+EzB"}

package/dist/routes/chats/title.d.ts

@@ -1,3 +1,3 @@
-import type { RequestHandler } from 'express';
-export declare const generateTitle: RequestHandler;
+import type { Request, Response } from 'express';
+export declare const generateTitle: (req: Request, res: Response) => Promise<void>;
 //# sourceMappingURL=title.d.ts.map

package/dist/routes/chats/title.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"title.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/title.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,eAAO,MAAM,aAAa,EAAE,cAc3B,CAAA"}
+{"version":3,"file":"title.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/title.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAShD,eAAO,MAAM,aAAa,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,kBAiB9D,CAAA"}

package/dist/routes/chats/title.js

@@ -1,21 +1,27 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.generateTitle = void 0;
-const schemas_1 = require("../schemas");
+const zod_1 = require("zod");
 const context_1 = require("../../context");
+const chat_access_1 = require("../../lib/chat-access");
+const schemas_1 = require("../schemas");
+const chat_route_errors_1 = require("./chat-route-errors");
+const validatedSchema = zod_1.z.object({ body: schemas_1.generateTitleSchema });
 const generateTitle = async (req, res) => {
-    var _a;
     try {
-        const payload = schemas_1.generateTitleSchema.parse((_a = req.body) !== null && _a !== void 0 ? _a : {});
-        const payloadWithUserId = {
+        const { body: payload } = validatedSchema.parse(req.validated);
+        const userId = (0, chat_access_1.requireUserId)(req);
+        if (payload.chatId) {
+            await (0, chat_access_1.loadChatForUser)(payload.chatId, userId);
+        }
+        const title = await (0, context_1.getAgentService)().getChatProcessor().getChatTitle({
             ...payload,
-            userId: req.userId,
-        };
-        const title = await (0, context_1.getAgentService)().getChatProcessor().getChatTitle(payloadWithUserId);
+            userId,
+        });
         res.json({ title });
     }
     catch (error) {
-        res.status(400).json({ message: error.message });
+        (0, chat_route_errors_1.respondChatRouteError)(res, error);
     }
 };
 exports.generateTitle = generateTitle;

package/dist/routes/chats/title.js.map

@@ -1 +1 @@
-{"version":3,"file":"title.js","sourceRoot":"","sources":["../../../src/routes/chats/title.ts"],"names":[],"mappings":";;;AACA,wCAAgD;AAChD,2CAA+C;AAExC,MAAM,aAAa,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;;IAC9D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,6BAAmB,CAAC,KAAK,CAAC,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,CAAC,CAAA;QAEzD,MAAM,iBAAiB,GAAG;YACxB,GAAG,OAAO;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAA;QAED,MAAM,KAAK,GAAG,MAAM,IAAA,yBAAe,GAAE,CAAC,gBAAgB,EAAE,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAA;QACxF,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IAC7D,CAAC;AACH,CAAC,CAAA;AAdY,QAAA,aAAa,iBAczB"}
+{"version":3,"file":"title.js","sourceRoot":"","sources":["../../../src/routes/chats/title.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,2CAA+C;AAC/C,uDAAsE;AACtE,wCAAgD;AAChD,2DAA2D;AAE3D,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,6BAAmB,EAAE,CAAC,CAAA;AAExD,MAAM,aAAa,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACjE,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC9D,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QAEjC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAA,6BAAe,EAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC/C,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAA,yBAAe,GAAE,CAAC,gBAAgB,EAAE,CAAC,YAAY,CAAC;YACpE,GAAG,OAAO;YACV,MAAM;SACP,CAAC,CAAA;QACF,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,yCAAqB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA;AAjBY,QAAA,aAAa,iBAiBzB"}

package/dist/routes/chats/updateToolCall.d.ts

@@ -1,3 +1,3 @@
-import type { RequestHandler } from 'express';
-export declare const patchToolCall: RequestHandler;
+import type { Request, Response } from 'express';
+export declare const patchToolCall: (req: Request, res: Response) => Promise<void>;
 //# sourceMappingURL=updateToolCall.d.ts.map

package/dist/routes/chats/updateToolCall.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updateToolCall.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/updateToolCall.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAmB7C,eAAO,MAAM,aAAa,EAAE,cAiC3B,CAAA"}
+{"version":3,"file":"updateToolCall.d.ts","sourceRoot":"","sources":["../../../src/routes/chats/updateToolCall.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAahD,eAAO,MAAM,aAAa,GAAU,KAAK,OAAO,EAAE,KAAK,QAAQ,kBAgC9D,CAAA"}

package/dist/routes/chats/updateToolCall.js

@@ -2,30 +2,28 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.patchToolCall = void 0;
 const zod_1 = require("zod");
-const ai_agent_types_1 = require("@multiplayer-app/ai-agent-types");
 const context_1 = require("../../context");
+const chat_access_1 = require("../../lib/chat-access");
 const socketIdFromRequest_1 = require("../../lib/socketIdFromRequest");
 const schemas_1 = require("../schemas");
-const patchToolCallInputSchema = zod_1.z
-    .object({
-    input: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
-    output: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
-    status: zod_1.z.nativeEnum(ai_agent_types_1.AgentToolCallStatus).optional(),
-})
-    .refine((payload) => payload.input !== undefined || payload.output !== undefined || payload.status !== undefined, { message: 'At least one of input, output, or status must be provided' });
+const chat_route_errors_1 = require("./chat-route-errors");
+const validatedSchema = zod_1.z.object({
+    params: schemas_1.toolCallRouteParamsSchema,
+    body: schemas_1.patchToolCallInputSchema,
+});
 const patchToolCall = async (req, res) => {
-    var _a;
     try {
-        const { chatId, messageId, toolCallId } = schemas_1.toolCallRouteParamsSchema.parse(req.params);
-        const payload = patchToolCallInputSchema.parse((_a = req.body) !== null && _a !== void 0 ? _a : {});
+        const { params, body: payload } = validatedSchema.parse(req.validated);
+        const userId = (0, chat_access_1.requireUserId)(req);
+        await (0, chat_access_1.loadChatForUser)(params.chatId, userId);
         const excludeSocketId = (0, socketIdFromRequest_1.socketIdFromRequest)(req);
         const updatedMessage = await (0, context_1.getAgentService)()
             .getChatProcessor()
             .updateToolCall({
-            chatId,
-            messageId,
-            toolCallId,
-            userId: req.userId,
+            chatId: params.chatId,
+            messageId: params.messageId,
+            toolCallId: params.toolCallId,
+            userId,
             ...(payload.input !== undefined ? { input: payload.input } : {}),
             ...(payload.output !== undefined ? { output: payload.output } : {}),
             ...(payload.status !== undefined ? { status: payload.status } : {}),
@@ -35,14 +33,12 @@ const patchToolCall = async (req, res) => {
     }
     catch (error) {
         const message = error.message;
-        if (message === 'Chat not found'
-            || message === 'Chat does not belong to this user'
-            || message === 'Message not found or does not belong to this chat'
+        if (message === 'Message not found or does not belong to this chat'
             || message === 'Tool call not found in message') {
-            res.status(message === 'Chat does not belong to this user' ? 403 : 404).json({ message });
+            res.status(404).json({ message });
             return;
         }
-        res.status(400).json({ message });
+        (0, chat_route_errors_1.respondChatRouteError)(res, error);
     }
 };
 exports.patchToolCall = patchToolCall;

package/dist/routes/chats/updateToolCall.js.map

@@ -1 +1 @@
-{"version":3,"file":"updateToolCall.js","sourceRoot":"","sources":["../../../src/routes/chats/updateToolCall.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,oEAAqE;AACrE,2CAA+C;AAC/C,uEAAmE;AACnE,wCAAsD;AAEtD,MAAM,wBAAwB,GAAG,OAAC;KAC/B,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnD,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,MAAM,EAAE,OAAC,CAAC,UAAU,CAAC,oCAAmB,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC;KACD,MAAM,CACL,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAC7F,EAAE,OAAO,EAAE,2DAA2D,EAAE,CACzE,CAAA;AAEI,MAAM,aAAa,GAAmB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;;IAC9D,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mCAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACrF,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,CAAC,CAAA;QAC9D,MAAM,eAAe,GAAG,IAAA,yCAAmB,EAAC,GAAG,CAAC,CAAA;QAEhD,MAAM,cAAc,GAAG,MAAM,IAAA,yBAAe,GAAE;aAC3C,gBAAgB,EAAE;aAClB,cAAc,CAAC;YACd,MAAM;YACN,SAAS;YACT,UAAU;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,eAAe;SAChB,CAAC,CAAA;QAEJ,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAI,KAAe,CAAC,OAAO,CAAA;QACxC,IACE,OAAO,KAAK,gBAAgB;eACzB,OAAO,KAAK,mCAAmC;eAC/C,OAAO,KAAK,mDAAmD;eAC/D,OAAO,KAAK,gCAAgC,EAC/C,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,mCAAmC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;YACzF,OAAM;QACR,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA;AAjCY,QAAA,aAAa,iBAiCzB"}
+{"version":3,"file":"updateToolCall.js","sourceRoot":"","sources":["../../../src/routes/chats/updateToolCall.ts"],"names":[],"mappings":";;;AACA,6BAAuB;AACvB,2CAA+C;AAC/C,uDAAsE;AACtE,uEAAmE;AACnE,wCAAgF;AAChF,2DAA2D;AAE3D,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,mCAAyB;IACjC,IAAI,EAAE,kCAAwB;CAC/B,CAAC,CAAA;AAEK,MAAM,aAAa,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACjE,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACtE,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAA;QACjC,MAAM,IAAA,6BAAe,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC5C,MAAM,eAAe,GAAG,IAAA,yCAAmB,EAAC,GAAG,CAAC,CAAA;QAEhD,MAAM,cAAc,GAAG,MAAM,IAAA,yBAAe,GAAE;aAC3C,gBAAgB,EAAE;aAClB,cAAc,CAAC;YACd,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM;YACN,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,eAAe;SAChB,CAAC,CAAA;QAEJ,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAI,KAAe,CAAC,OAAO,CAAA;QACxC,IACE,OAAO,KAAK,mDAAmD;eAC5D,OAAO,KAAK,gCAAgC,EAC/C,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;YACjC,OAAM;QACR,CAAC;QACD,IAAA,yCAAqB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA;AAhCY,QAAA,aAAa,iBAgCzB"}

package/dist/routes/route-errors.d.ts

@@ -0,0 +1,3 @@
+import type { Response } from 'express';
+export declare function respondRouteError(res: Response, error: unknown): void;
+//# sourceMappingURL=route-errors.d.ts.map

package/dist/routes/route-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-errors.d.ts","sourceRoot":"","sources":["../../src/routes/route-errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAGvC,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CASrE"}

package/dist/routes/route-errors.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.respondRouteError = respondRouteError;
+const chat_access_1 = require("../lib/chat-access");
+function respondRouteError(res, error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (message === chat_access_1.UNAUTHORIZED_USER_MESSAGE) {
+        res.status(401).json({ message });
+        return;
+    }
+    res.status(400).json({ message });
+}
+//# sourceMappingURL=route-errors.js.map

package/dist/routes/route-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-errors.js","sourceRoot":"","sources":["../../src/routes/route-errors.ts"],"names":[],"mappings":";;AAGA,8CASC;AAXD,oDAA8D;AAE9D,SAAgB,iBAAiB,CAAC,GAAa,EAAE,KAAc;IAC7D,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAEtE,IAAI,OAAO,KAAK,uCAAyB,EAAE,CAAC;QAC1C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACjC,OAAM;IACR,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;AACnC,CAAC"}