@opengeni/api-router 0.30.0 → 0.30.3

package/dist/editable-artifact-office-import.d.ts

@@ -1,6 +1,6 @@
 import { prepareArtifactOfficeImport } from "@opengeni/artifact-tool/office-import";
-import { type EditableArtifactOfficeImportPort } from "@opengeni/core/editable-artifacts";
-import { getFile } from "@opengeni/db";
+import { type EditableArtifactActor, type EditableArtifactOfficeImportPort, type EditableArtifactScope } from "@opengeni/core/editable-artifacts";
+import { getFilesForSubject } from "@opengeni/db";
 import { type BoundedImmutableObjectWritePort, type ObjectStorage } from "@opengeni/storage";
 import type { Database } from "@opengeni/db";
 import type { VerifiedNativeArtifactRuntimeBinding } from "./editable-artifact-native-kernel.js";
@@ -10,13 +10,16 @@ export type EditableArtifactOfficeImportAdapterDependencies = Readonly<{
     runtime: VerifiedNativeArtifactRuntimeBinding;
     sourceObjects: BoundedImmutableObjectWritePort;
     snapshotObjects: BoundedImmutableObjectWritePort;
-    readFile?: typeof getFile;
+    readFiles?: typeof getFilesForSubject;
+    resolveFileAuthoritySubjectId?: typeof editableArtifactFileAuthoritySubjectId;
     prepareOffice?: typeof prepareArtifactOfficeImport;
 }>;
 /** Trusted import boundary from one ready workspace file into native sequence-zero state. */
 export declare class EditableArtifactOfficeImportAdapter implements EditableArtifactOfficeImportPort {
     private readonly dependencies;
-    private readonly readFile;
+    private readonly readFiles;
+    private readonly resolveFileAuthoritySubjectId;
     constructor(dependencies: EditableArtifactOfficeImportAdapterDependencies);
     prepare(input: Parameters<EditableArtifactOfficeImportPort["prepare"]>[0]): ReturnType<EditableArtifactOfficeImportPort["prepare"]>;
 }
+export declare function editableArtifactFileAuthoritySubjectId(db: Database, scope: EditableArtifactScope, actor: EditableArtifactActor): Promise<string | null>;

package/dist/index.js

@@ -4,7 +4,7 @@ import {
   createOpenGeniSlackBotInteractionClient,
   startSlackInteractionPump,
   startTemporalScheduleCleanupPump
-} from "./chunk-2PQMSRCB.js";
+} from "./chunk-WCXHI3FF.js";
 
 // src/index.ts
 import {
@@ -1578,7 +1578,8 @@ import {
   editableArtifactStateHash as editableArtifactStateHash2,
   EditableArtifactOfficeImportError
 } from "@opengeni/core/editable-artifacts";
-import { getFile } from "@opengeni/db";
+import { requireLiveAgentAttemptAuthorization } from "@opengeni/core";
+import { getFilesForSubject } from "@opengeni/db";
 import {
   MAX_BOUNDED_OBJECT_CHUNK_BYTES
 } from "@opengeni/storage";
@@ -1586,12 +1587,24 @@ var SNAPSHOT_MIME = "application/vnd.opengeni.editable-artifact-snapshot";
 var EditableArtifactOfficeImportAdapter = class {
   constructor(dependencies) {
     this.dependencies = dependencies;
-    this.readFile = dependencies.readFile ?? getFile;
+    this.readFiles = dependencies.readFiles ?? getFilesForSubject;
+    this.resolveFileAuthoritySubjectId = dependencies.resolveFileAuthoritySubjectId ?? editableArtifactFileAuthoritySubjectId;
   }
-  readFile;
+  readFiles;
+  resolveFileAuthoritySubjectId;
   async prepare(input) {
     throwIfAborted2(input.signal);
-    const file = await this.readFile(this.dependencies.db, input.scope.workspaceId, input.fileId);
+    const subjectId = await this.resolveFileAuthoritySubjectId(
+      this.dependencies.db,
+      input.scope,
+      input.actor
+    );
+    const [file] = await this.readFiles(this.dependencies.db, {
+      accountId: input.scope.accountId,
+      workspaceId: input.scope.workspaceId,
+      subjectId,
+      fileIds: [input.fileId]
+    });
     if (!file || file.status !== "ready") {
       throw new EditableArtifactOfficeImportError("invalid_source");
     }
@@ -1722,6 +1735,27 @@ async function readVerifiedWorkspaceFile(storage, file, signal) {
   }
   return bytes;
 }
+async function editableArtifactFileAuthoritySubjectId(db, scope, actor) {
+  if (actor.kind !== "agent") return actor.subjectId;
+  const authorization = await requireLiveAgentAttemptAuthorization(
+    db,
+    {
+      accountId: scope.accountId,
+      workspaceId: scope.workspaceId,
+      subjectId: actor.subjectId,
+      permissions: [],
+      principalKind: "agent_attempt",
+      metadata: {
+        sessionId: actor.sessionId,
+        turnId: actor.turnId,
+        attemptId: actor.attemptId,
+        executionGeneration: actor.generation
+      }
+    },
+    actor.sessionId
+  );
+  return authorization.initiatingHumanSubjectId;
+}
 async function* byteChunks(bytes) {
   for (let offset = 0; offset < bytes.byteLength; offset += MAX_BOUNDED_OBJECT_CHUNK_BYTES) {
     yield bytes.subarray(offset, offset + MAX_BOUNDED_OBJECT_CHUNK_BYTES);