@musnows/scriverse 0.6.7 → 0.6.9

package/dist/app.js

@@ -31,6 +31,7 @@ import { createRequestLoggingMiddleware, sanitizeRequestPath } from "./http-logg
 import { accountReference, logger, sanitizeError } from "./logger.js";
 import { currentRequestActor, runWithRequestActor } from "./request-context.js";
 import { APP_VERSION } from "./version.js";
+import { ReleaseUpdateChecker } from "./release-update.js";
 import { canReadWorkModule, canWriteWorkModule, fullWorkModulePermissions, proseReplacementPermissionModules } from "./work-permissions.js";
 import { CollaborationPresence, entityEditorPageKey, presencePageKinds } from "./collaboration-presence.js";
 import { analysisTaskReadModules, clearSessionCookie, createCliApiScopeMiddleware, createUserSessionMiddleware, createWorkAuthorizationMiddleware, relationshipAnalysisReadModules, setSessionCookie, UserAuthService } from "./user-auth.js";
@@ -352,11 +353,14 @@ const modelSchema = z.object({
     outputNote: z.string().max(10_000).optional(),
     preset: jsonObject.optional(),
     thinkingEnabled: z.boolean().optional(),
+    multimodalEnabled: z.boolean().optional(),
+    imageToolDefault: z.boolean().optional(),
     enabled: z.boolean().optional(),
     note: z.string().max(10_000).optional()
 });
 const aiPromptSchema = z.object({
-    systemPrompt: z.string().max(100_000).optional()
+    systemPrompt: z.string().max(100_000).optional(),
+    imageToolModelId: identifier.nullable().optional()
 });
 const aiUsageQuerySchema = z.object({
     timezoneOffset: z.coerce.number().int().min(-840).max(840).default(0)
@@ -433,9 +437,10 @@ const workAiSettingsSchema = z.object({
     contextCompactThreshold: z.number().int().min(50).max(90).optional(),
     agentToolCallLimit: z.number().int().min(5).max(48).optional(),
     agentToolCallGlobalMultiplier: z.number().int().min(1).max(6).optional(),
-    agentTools: z.array(z.enum(["story_index", "read_chapters", "grep", "search_story_entities", "read_character_sections", "search_drafts"])).max(6).optional(),
+    agentTools: z.array(z.enum(["story_index", "read_chapters", "grep", "search_story_entities", "read_character_sections", "search_drafts", "image"])).max(7).optional(),
     alwaysIncludeSettingInfo: z.boolean().optional(),
-    titleGenerationModelId: z.string().trim().max(200).optional()
+    titleGenerationModelId: z.string().trim().max(200).optional(),
+    imageToolModelId: identifier.nullable().optional()
 }).strict();
 const contextSchema = z.object({
     type: z.enum(["none", "selection", "chapter", "volume", "book", "settings-catalog", "entities"]),
@@ -856,6 +861,11 @@ export function createRuntime(options) {
         return auth.workModulePermissions(request.authUser, resolvedWorkId, request.authMethod !== "api-key") ?? fullWorkModulePermissions();
     };
     const captcha = new ImageCaptchaService({ revealAnswer: options.revealCaptchaAnswer === true });
+    const releaseUpdateChecker = new ReleaseUpdateChecker(APP_VERSION, options.releaseFetchImpl ?? fetch, {
+        intervalMs: options.releaseCheckIntervalMs,
+        timeoutMs: options.releaseCheckTimeoutMs,
+        retries: options.releaseCheckRetries
+    });
     const ai = new AiManager(store, new CredentialVault(options.masterSecret), options.fetchImpl ?? fetch, options.security ? (url) => assertSafeAiEndpoint(url, options.security?.allowPrivateAiEndpoints) : undefined, (task, actor) => {
         const requiredModules = analysisTaskReadModules(task.taskType, task.scope);
         const creator = actor ? null : database.get("SELECT created_by_user_id FROM analysis_tasks WHERE id = ?", String(task.id));
@@ -869,7 +879,7 @@ export function createRuntime(options) {
             read: requiredModules,
             write: ["ai-analysis"]
         }, false, actor?.allowAdminAccess ?? false);
-    });
+    }, attachmentStorage);
     const app = express();
     enforceCaseInsensitiveRouting(app);
     const upload = multer({
@@ -910,6 +920,9 @@ export function createRuntime(options) {
             development: options.developmentServer === true
         });
     });
+    app.get("/api/update-check", async (_request, response) => {
+        data(response, await releaseUpdateChecker.check());
+    });
     if (options.security?.auth)
         app.use(createBasicAuthMiddleware(options.security.auth));
     app.use(createAuthenticationRateLimitMiddleware());
@@ -1885,7 +1898,12 @@ export function createRuntime(options) {
         data(response, pagination ? ai.listPlatformModelsPage(pagination) : ai.listPlatformModels());
     });
     app.get("/api/platform/ai/settings", (_request, response) => data(response, store.getPlatformAiSettings()));
-    app.patch("/api/platform/ai/settings", (request, response) => data(response, store.updatePlatformAiSettings(parse(aiPromptSchema, request.body))));
+    app.patch("/api/platform/ai/settings", (request, response) => {
+        const input = parse(aiPromptSchema, request.body);
+        if (input.imageToolModelId)
+            ai.assertImageToolModelAvailable(input.imageToolModelId);
+        data(response, store.updatePlatformAiSettings(input));
+    });
     app.get("/api/platform/ai/usage", (request, response) => {
         const query = parse(aiUsageQuerySchema, request.query);
         data(response, ai.getPlatformTokenUsage(query.timezoneOffset));
@@ -1924,6 +1942,8 @@ export function createRuntime(options) {
         const input = parse(workAiSettingsSchema, request.body);
         if (input.titleGenerationModelId)
             ai.assertModelAvailable(input.titleGenerationModelId);
+        if (input.imageToolModelId)
+            ai.assertImageToolModelAvailable(input.imageToolModelId);
         const before = store.getWorkAiSettings(workId);
         let updated = store.updateWorkAiSettings(workId, input);
         if (updated.autoRunEnabled) {
@@ -1951,8 +1971,11 @@ export function createRuntime(options) {
     });
     app.get("/api/ai-conversations/:conversationId", (request, response) => {
         const pagination = parsePagination(request.query);
+        const focusMessageId = request.query.messageId === undefined
+            ? undefined
+            : parse(identifier, request.query.messageId);
         const conversation = pagination
-            ? store.getAiConversationPage(request.params.conversationId, pagination)
+            ? store.getAiConversationPage(request.params.conversationId, pagination, focusMessageId)
             : store.getAiConversation(request.params.conversationId);
         const permissions = requestPermissions(request, String(conversation.workId));
         data(response, redactAiConversation(conversation, permissions));
@@ -2266,7 +2289,12 @@ export function createRuntime(options) {
             type: z.enum(HYBRID_SEARCH_TYPES).optional(),
             limit: z.coerce.number().int().min(1).max(100).optional()
         }).strict(), request.query);
-        data(response, await ai.searchWork(request.params.workId, query.q, { type: query.type, limit: query.limit }));
+        const permissions = requestPermissions(request, request.params.workId);
+        data(response, await ai.searchWork(request.params.workId, query.q, {
+            type: query.type,
+            limit: query.limit,
+            includeAgentHistory: permissions["ai-chat"] !== "none"
+        }));
     });
     app.get("/api/works/:workId/export", async (request, response) => {
         const format = parse(z.enum(["json", "txt", "markdown", "docx"]), request.query.format ?? "json");