@opengeni/api-router 2.10.0-canary.0 → 2.10.0-canary.2

package/dist/codemode.d.ts

@@ -1,5 +1,8 @@
 import { type AccessGrant, type AttemptToolCatalog, type CodemodeCallSubmission as CodemodeCallSubmissionValue, type CodemodeOperation } from "@opengeni/contracts";
 import type { ApiRouteDeps } from "@opengeni/core";
+/** Reuse normal REST handlers, including their resource/command authorization.
+ * The exact attempt is checked before issuing this internal-only credential. */
+export declare function codemodeSessionRequest(deps: ApiRouteDeps, grant: AccessGrant, request: Request, path: string): Promise<Request>;
 export type CodemodeGrantAuthority = {
     accountId: string;
     workspaceId: string;

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   createOpenGeniSlackBotInteractionClient,
   startSlackInteractionPump,
   startTemporalScheduleCleanupPump
-} from "./chunk-XXH7DW34.js";
+} from "./chunk-BVX5ASFY.js";
 
 // src/index.ts
 import {

package/dist/integrations/slack-interactions.d.ts

@@ -19,7 +19,7 @@ export declare const SLACK_SESSION_INSTRUCTIONS: string;
  * selection at session creation while keeping Slack mutations out of the model
  * surface; interaction delivery remains owned by the durable delivery pump.
  */
-export declare const SLACK_TASK_FIRST_PARTY_MCP_TOOLS: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_set" | "goal_update" | "instruction_policy_propose" | "interaction_discover" | "interaction_request_human" | "knowledge_correct" | "knowledge_propose" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
+export declare const SLACK_TASK_FIRST_PARTY_MCP_TOOLS: ("artifacts_archive" | "artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_prepare_upload" | "artifacts_publish" | "artifacts_restore" | "artifacts_rollback" | "atlassian_get" | "atlassian_search" | "atlassian_sources_list" | "browser_act" | "browser_auth" | "browser_clipboard" | "browser_debug" | "browser_identity" | "browser_lifecycle" | "browser_observe" | "browser_open" | "browser_publish" | "browser_tabs" | "capability_authorization_request" | "capability_catalog_search" | "command_read" | "command_wait" | "company_profile_confirm" | "company_profile_propose" | "computer_act" | "computer_clipboard" | "computer_lifecycle" | "computer_observe" | "computer_open" | "computer_targets" | "connected_machine_remove" | "editable_artifact_apply" | "editable_artifact_create" | "editable_artifact_export" | "editable_artifact_export_status" | "editable_artifact_get" | "editable_artifact_import" | "editable_artifact_inspect" | "editable_artifact_list" | "environment_list" | "environment_set_variable" | "fiken_bank_accounts_list" | "fiken_companies_list" | "fiken_contact_create" | "fiken_contacts_list" | "fiken_invoice_draft_create" | "fiken_invoice_get" | "fiken_invoices_list" | "fiken_products_list" | "fiken_purchases_list" | "fiken_sales_list" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_progress" | "goal_resume" | "goal_set" | "goal_update" | "instruction_policy_propose" | "interaction_discover" | "interaction_request_human" | "knowledge_correct" | "knowledge_propose" | "memory_correct" | "memory_save" | "memory_search" | "preference_propose" | "preference_registry_get" | "preference_registry_summary" | "reddit_accounts_list" | "reddit_mentions_live" | "reddit_post_reply" | "reddit_posts_sync" | "reddit_search_live" | "reddit_thread_fetch" | "remember" | "remember_confirm" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_file_publish" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_human_input_respond" | "session_pause" | "session_resume" | "session_send_message" | "session_steer" | "session_wait" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_search" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "task_note_archive" | "task_note_promote_instruction_policy" | "task_note_promote_knowledge" | "task_note_promote_preference" | "task_note_replace" | "task_note_save" | "task_notes_list" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable" | "wait_for_input" | "work_claim_release" | "work_claim_upsert" | "x_accounts_list" | "x_mentions_live" | "x_post_reply" | "x_posts_sync" | "x_search_live" | "x_thread_fetch")[];
 export type NormalizedSlackInteraction = {
     providerEventId: string;
     providerMessageId: string;

package/dist/mcp/command-read.d.ts

@@ -0,0 +1,24 @@
+import type { SessionEvent } from "@opengeni/contracts";
+export declare const COMMAND_READ_MAX_WAIT_SECONDS = 50;
+export declare const COMMAND_WAIT_DEFAULT_SECONDS = 45;
+/** Shared provider-neutral command_read/command_wait operation. Notifications
+ * are only wake hints. Every result, including timeout, comes from durable DB
+ * state. Subscribe before reading to close the finish/subscription race, and
+ * periodically recheck durable state because live hints may be lost. */
+export declare function readCommandWithWait<T extends {
+    terminal: boolean;
+    chunks: unknown[];
+    hasMore?: boolean;
+}>(input: {
+    commandId: string;
+    waitSeconds?: number;
+    maxOutputBytes?: number | undefined;
+    signal?: AbortSignal;
+    read: () => Promise<T>;
+    subscribe: (onEvents: (events: SessionEvent[]) => void) => Promise<() => void>;
+}): Promise<T & {
+    waitedMs: number;
+    timedOut: boolean;
+    aborted: boolean;
+    liveFanout: boolean;
+}>;

package/dist/mcp/scheduled-task-view.d.ts

@@ -82,8 +82,8 @@ export declare function scheduledTaskMcpSummary(task: ScheduledTask): {
     runMode: "existing_session" | "new_session_per_run" | "reusable_session";
     overlapPolicy: "allow_concurrent" | "buffer_one" | "skip";
     action: {
+        readonly sourceId?: never;
         kind: "agent_turn";
-        sourceId?: never;
         sourceGeneration?: never;
         sourceLifecycleGeneration?: never;
         destination?: never;
@@ -205,8 +205,8 @@ export declare function boundScheduledTaskDetailMcp(task: ScheduledTask): {
     runMode: "existing_session" | "new_session_per_run" | "reusable_session";
     overlapPolicy: "allow_concurrent" | "buffer_one" | "skip";
     action: {
+        readonly sourceId?: never;
         kind: "agent_turn";
-        sourceId?: never;
         sourceGeneration?: never;
         sourceLifecycleGeneration?: never;
         destination?: never;
@@ -389,8 +389,8 @@ export declare function boundScheduledTaskMcpPage(input: {
         runMode: "existing_session" | "new_session_per_run" | "reusable_session";
         overlapPolicy: "allow_concurrent" | "buffer_one" | "skip";
         action: {
+            readonly sourceId?: never;
             kind: "agent_turn";
-            sourceId?: never;
             sourceGeneration?: never;
             sourceLifecycleGeneration?: never;
             destination?: never;

package/dist/mcp/server.d.ts

@@ -195,6 +195,7 @@ export declare function capSessionDiscoveryCompactPage(page: Awaited<ReturnType<
             previewOmissionReason: "aggregatePreviewBudget";
             previewDrillDownTool: "session_events";
             previewDrillDownInput: {
+                view: "debug";
                 direction: "before";
                 limit: 1;
                 mode: "monitoring";
@@ -309,6 +310,7 @@ export declare function capSessionDiscoveryPage(page: Awaited<ReturnType<typeof
         omissionReason: "aggregatePreviewBudget" | null;
         drillDownTool: "session_events";
         drillDownInput: {
+            view: "debug";
             direction: "before";
             limit: 1;
             mode: "monitoring";

package/dist/mcp/session-event-view.d.ts

@@ -0,0 +1,86 @@
+import { z } from "zod";
+import type { SessionEventSliceOptions, SessionEventSlicePage } from "@opengeni/db/session-event-slices";
+export declare const SESSION_EVENT_VIEW_MAX_BYTES: number;
+declare const selectionSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    view: z.ZodEnum<{
+        conversation: "conversation";
+        results: "results";
+        tools: "tools";
+    }>;
+    includeArguments: z.ZodBoolean;
+    includeOutput: z.ZodBoolean;
+    callId: z.ZodNullable<z.ZodString>;
+    direction: z.ZodEnum<{
+        after: "after";
+        before: "before";
+    }>;
+    after: z.ZodNumber;
+    before: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+type Selection = z.infer<typeof selectionSchema>;
+export type SessionEventViewInput = {
+    sessionId: string;
+    view?: Selection["view"] | undefined;
+    after?: number | undefined;
+    before?: number | undefined;
+    direction?: Selection["direction"] | undefined;
+    limit?: number | undefined;
+    cursor?: string | undefined;
+    callId?: string | undefined;
+    includeArguments?: boolean | undefined;
+    includeOutput?: boolean | undefined;
+};
+type Item = {
+    sequence: number;
+    turnId?: string;
+    role?: string;
+    text?: string;
+} & Record<string, unknown>;
+type ReadPage = (options: SessionEventSliceOptions) => Promise<SessionEventSlicePage>;
+/** A cursor is a bounded selector, never authority. The caller reauthorizes every read. */
+export declare function resolveSessionEventView(input: SessionEventViewInput): {
+    selection: {
+        sessionId: string;
+        view: "conversation" | "results" | "tools";
+        includeArguments: boolean;
+        includeOutput: boolean;
+        callId: string | null;
+        direction: "after" | "before";
+        after: number;
+        before: number | null;
+    };
+    continuation: {
+        v: 1 | 2;
+        selection: {
+            sessionId: string;
+            view: "conversation" | "results" | "tools";
+            includeArguments: boolean;
+            includeOutput: boolean;
+            callId: string | null;
+            direction: "after" | "before";
+            after: number;
+            before: number | null;
+        };
+        sequence: number | null;
+        offset: number;
+    } | null;
+};
+/** Read-only projection over the existing RLS/audit query. No command observations. */
+export declare function readSessionEventView(input: SessionEventViewInput, read: ReadPage): Promise<{
+    view: "conversation" | "results" | "tools";
+    direction: "after" | "before";
+    events: Item[];
+    nextAfter: number | null;
+    nextBefore: number | null;
+    hasMore: boolean;
+    nextCursor: string | null;
+    sourceExact: boolean;
+    sourceLoss?: {
+        reason: "structured_value_exceeds_budget";
+        completeTextAvailable: false;
+        message: string;
+    };
+    maxBytes: number;
+}>;
+export {};

package/dist/sandbox/channel-a.d.ts

@@ -3,11 +3,13 @@ import type { Session } from "@opengeni/contracts";
 import { type Database, type LeaseSnapshot } from "@opengeni/db";
 import { type EventBus } from "@opengeni/events";
 import { type Observability } from "@opengeni/observability";
+import type { ObjectStorage } from "@opengeni/storage";
 import { SandboxChannelAService, type ChannelASession, type EstablishedSandboxSession, type RoutingSandboxSession } from "@opengeni/runtime/sandbox";
 export type ChannelAServices = {
     db: Database;
     settings: Settings;
     bus: EventBus;
+    objectStorage?: ObjectStorage | null;
     observability?: Observability | undefined;
 };
 export type ChannelAOperation = "fs.list" | "fs.list-batch" | "fs.read" | "artifact.publish" | "fs.write" | "fs.delete" | "fs.move" | "fs.mkdir" | "git.status" | "git.diff" | "git.read-batch" | "git.log" | "git.show" | "terminal.exec" | "terminal.pty.open" | "terminal.pty.write" | "terminal.pty.resize" | "terminal.pty.close" | "browser.create" | "browser.resume" | "browser.suspend" | "browser.end" | "browser.read" | "browser.action" | "browser.control" | "browser.download.save" | "browser.attach" | "computer.create" | "computer.end" | "computer.read" | "computer.action" | "computer.control" | "computer.attach";

package/dist/sandbox/rematerialize.d.ts

@@ -1,6 +1,7 @@
 import type { Settings } from "@opengeni/config";
 import { type Database, type LeaseSnapshot } from "@opengeni/db";
 import { type EstablishedSandboxSession } from "@opengeni/runtime/sandbox";
+import type { ObjectStorage } from "@opengeni/storage";
 /** The sole API-direct cold->warming owner path used by Channel A and viewer
  * attach. It never publishes warm until archive identity, hydrated tree, command
  * routing, provider identity, and the selected rematerialization attempt all
@@ -18,6 +19,7 @@ export declare function establishApiSandboxSpawner(input: {
     acquiredLease: LeaseSnapshot;
     fallbackEnvelope: Record<string, unknown> | null;
     dataPlaneUrl: string | null;
+    objectStorage?: ObjectStorage | null;
 }): Promise<{
     established: EstablishedSandboxSession;
     lease: LeaseSnapshot;

package/dist/sandbox/viewer.d.ts

@@ -2,6 +2,7 @@ import type { Settings } from "@opengeni/config";
 import { type Session } from "@opengeni/contracts";
 import { type Database, type LeaseSnapshot, type SandboxRecord } from "@opengeni/db";
 import { type EventBus } from "@opengeni/events";
+import type { ObjectStorage } from "@opengeni/storage";
 import { establishSandboxSessionFromEnvelope, type EstablishedSandboxSession } from "@opengeni/runtime/sandbox";
 /** The minimal services a viewer op needs: the DB + settings (lease cadence +
  *  the sandbox client construction the leaf reads from settings). The bus is
@@ -11,6 +12,7 @@ export type ViewerServices = {
     db: Database;
     settings: Settings;
     bus?: EventBus;
+    objectStorage?: ObjectStorage | null;
     /** Provider-establish dependency used by API-direct readiness and stream
      *  operations. Production uses the runtime leaf; isolated tests may supply a
      *  deterministic provider without replacing a process-global module. */

package/dist/session-event-view-MU3HMNV3.js

@@ -0,0 +1,264 @@
+// src/mcp/session-event-view.ts
+import { z } from "zod";
+var SESSION_EVENT_VIEW_MAX_BYTES = 16 * 1024;
+var selectionSchema = z.object({
+  sessionId: z.string().uuid(),
+  view: z.enum(["conversation", "results", "tools"]),
+  includeArguments: z.boolean(),
+  includeOutput: z.boolean(),
+  callId: z.string().max(512).refine(
+    (value) => Buffer.byteLength(JSON.stringify(value), "utf8") <= 2048,
+    "callId exceeds the encoded cursor budget"
+  ).nullable(),
+  direction: z.enum(["before", "after"]),
+  after: z.number().int().nonnegative(),
+  before: z.number().int().positive().nullable()
+});
+var cursorSchema = z.object({
+  v: z.union([z.literal(1), z.literal(2)]),
+  selection: selectionSchema,
+  sequence: z.number().int().positive().nullable(),
+  offset: z.number().int().nonnegative().max(2147483647)
+});
+var types = {
+  conversation: ["user.message", "agent.message.completed"],
+  // Final turn output is authoritative: do not repeat message.completed text.
+  results: ["turn.completed", "turn.failed", "goal.completed", "goal.paused", "tool.auth_needed"],
+  tools: ["agent.toolCall.created", "agent.toolCall.output"]
+};
+var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
+var bytes = (value) => Buffer.byteLength(JSON.stringify(value, null, 2), "utf8");
+var encode = (selection, sequence = null, offset = 0, v = 2) => Buffer.from(JSON.stringify({ v, selection, sequence, offset })).toString("base64url");
+function resolveSessionEventView(input) {
+  let continuation = null;
+  if (input.cursor !== void 0) {
+    if (input.cursor.length > 4096)
+      throw new Error("session_events cursor exceeds 4096 characters");
+    try {
+      continuation = cursorSchema.parse(
+        JSON.parse(Buffer.from(input.cursor, "base64url").toString())
+      );
+    } catch {
+      throw new Error("Invalid session_events cursor");
+    }
+    const previous = continuation.selection;
+    for (const key of [
+      "sessionId",
+      "view",
+      "includeArguments",
+      "includeOutput",
+      "callId",
+      "direction",
+      "after",
+      "before"
+    ]) {
+      if (input[key] !== void 0 && input[key] !== previous[key]) {
+        throw new Error(`session_events cursor cannot change ${key}`);
+      }
+    }
+  }
+  const selection = continuation?.selection ?? selectionSchema.parse({
+    sessionId: input.sessionId,
+    view: input.view ?? "conversation",
+    includeArguments: input.includeArguments ?? false,
+    includeOutput: input.includeOutput ?? false,
+    callId: input.callId ?? null,
+    direction: input.direction ?? (input.before !== void 0 || input.after === void 0 ? "before" : "after"),
+    after: input.after ?? 0,
+    before: input.before ?? null
+  });
+  if (selection.view !== "tools" && (selection.callId || selection.includeArguments || selection.includeOutput)) {
+    throw new Error("callId/includeArguments/includeOutput require view=tools");
+  }
+  if (continuation && (continuation.sequence === null && continuation.offset !== 0 || continuation.sequence !== null && (continuation.sequence <= selection.after || selection.before !== null && continuation.sequence >= selection.before)))
+    throw new Error("Invalid session_events cursor position");
+  return { selection, continuation };
+}
+function project(event, selection) {
+  if (event.duplicateOfEventId || event.turnAssociation && event.turnAssociation !== "current")
+    return null;
+  const p = record(event.payload);
+  const base = { sequence: event.sequence, ...event.turnId ? { turnId: event.turnId } : {} };
+  if (selection.view === "conversation") {
+    return typeof p.text === "string" && p.text.length > 0 ? { ...base, role: event.type === "user.message" ? "user" : "assistant", text: p.text } : null;
+  }
+  if (selection.view === "results") {
+    if (event.type === "turn.completed" && ("maintenance" in p || "segmentLimit" in p)) return null;
+    const value2 = event.type === "turn.completed" ? p.output ?? p.result : p;
+    if (value2 === void 0 || value2 === "") return null;
+    return {
+      ...base,
+      type: event.type,
+      text: typeof value2 === "string" ? value2 : JSON.stringify(value2)
+    };
+  }
+  const callId = p.callId ?? p.call_id ?? p.id;
+  if (selection.callId !== null && selection.callId !== callId) return null;
+  const output = event.type === "agent.toolCall.output";
+  const value = output ? p.output : p.arguments ?? p.args;
+  return {
+    ...base,
+    callId,
+    kind: output ? "result" : "call",
+    ...typeof p.name === "string" ? { name: p.name } : {},
+    ...p.identityOmitted === true ? { identityOmitted: true } : {},
+    ...p.isError === true || record(value).isError === true ? { isError: true } : {},
+    ...(output ? selection.includeOutput : selection.includeArguments) && value !== void 0 ? {
+      text: typeof value === "string" ? value : JSON.stringify(value),
+      encoding: typeof value === "string" ? "text" : "json"
+    } : {}
+  };
+}
+async function readSessionEventView(input, read) {
+  const { selection, continuation } = resolveSessionEventView(input);
+  const limit = Math.max(1, Math.min(50, input.limit ?? 10));
+  let after = continuation?.sequence && selection.direction === "after" ? continuation.sequence - 1 : selection.after;
+  let before = continuation?.sequence && selection.direction === "before" ? continuation.sequence + 1 : selection.before;
+  const events = [];
+  let hasMore = false;
+  let nextCursor = null;
+  let sourceExact = true;
+  let edge = null;
+  let legacyActive = continuation?.v === 1 && continuation.sequence !== null;
+  const page = () => ({
+    view: selection.view,
+    direction: selection.direction,
+    events,
+    nextAfter: selection.direction === "after" ? edge ?? selection.after : null,
+    nextBefore: selection.direction === "before" ? edge ?? selection.before : null,
+    hasMore,
+    nextCursor,
+    sourceExact,
+    ...!sourceExact ? {
+      sourceLoss: {
+        reason: "structured_value_exceeds_budget",
+        completeTextAvailable: false,
+        message: "An oversized structured value was omitted. Scalar text remains retrievable through continuation; omitted structured values are not complete JSON results."
+      }
+    } : {},
+    maxBytes: SESSION_EVENT_VIEW_MAX_BYTES
+  });
+  const resume = (sequence, offset = 0) => {
+    hasMore = true;
+    nextCursor = encode(
+      { ...selection, after, before },
+      sequence,
+      offset,
+      legacyActive && sequence === continuation?.sequence ? 1 : 2
+    );
+  };
+  for (let scan = 0; scan < 64; scan += 1) {
+    const source = await read({
+      after,
+      ...before === null ? {} : { before },
+      direction: selection.direction,
+      limit: 8,
+      includeTypes: types[selection.view],
+      payloadMode: "full",
+      excludeUnclaimedHumanPrompts: true,
+      maxBytes: 1024 * 1024,
+      legacyUtf16: legacyActive,
+      view: selection.view,
+      includeArguments: selection.includeArguments,
+      includeOutput: selection.includeOutput,
+      ...continuation?.sequence ? { sourceSequence: continuation.sequence, sourceOffset: continuation.offset } : {}
+    });
+    sourceExact &&= source.fullPayloadsExact;
+    const ordered = selection.direction === "before" ? [...source.events].reverse() : source.events;
+    for (const event of ordered) {
+      const slice = source.slices?.[event.sequence];
+      const item = project(event, selection);
+      if (item) {
+        const offset = continuation?.sequence === event.sequence ? continuation.offset : 0;
+        if (slice?.omitted) {
+          delete item.text;
+          item.sourceOmitted = { reason: "structured_value_exceeds_budget", complete: false };
+        }
+        const advance = (text) => slice?.unit === "codepoint" ? Array.from(text).length : text.length;
+        if (!slice && offset > (item.text?.length ?? 0))
+          throw new Error("Invalid message continuation offset");
+        if (!slice && offset > 0 && item.text && /[\uD800-\uDBFF]/.test(item.text[offset - 1]) && /[\uDC00-\uDFFF]/.test(item.text[offset] ?? "")) {
+          throw new Error("Invalid message continuation offset: splits a surrogate pair");
+        }
+        if (!slice && offset > 0 && item.text) item.text = item.text.slice(offset);
+        events.push(item);
+        if (bytes(page()) > SESSION_EVENT_VIEW_MAX_BYTES - 4096) {
+          events.pop();
+          if (events.length > 0) {
+            resume(event.sequence, offset);
+            if (selection.direction === "before") events.reverse();
+            return page();
+          }
+          if (!item.text) throw new Error("Session event identity exceeds page budget");
+          const text = item.text;
+          let low = 0;
+          let high = text.length;
+          while (low < high) {
+            const mid = Math.ceil((low + high) / 2);
+            if (bytes({ ...item, text: text.slice(0, mid) }) <= SESSION_EVENT_VIEW_MAX_BYTES - 6e3)
+              low = mid;
+            else high = mid - 1;
+          }
+          if (low > 0 && /[\uD800-\uDBFF]/.test(text[low - 1])) low -= 1;
+          if (low === 0) throw new Error("Session event identity exceeds page budget");
+          events.push({
+            ...item,
+            text: text.slice(0, low),
+            fragment: {
+              offset,
+              nextOffset: offset + advance(text.slice(0, low)),
+              complete: false,
+              unit: slice?.unit ?? "utf16"
+            }
+          });
+          resume(event.sequence, offset + advance(text.slice(0, low)));
+          return page();
+        }
+        const nextOffset = offset + advance(item.text ?? "");
+        if (slice && !slice.omitted && nextOffset < slice.total) {
+          item.fragment = { offset, nextOffset, complete: false, unit: slice.unit };
+          resume(event.sequence, nextOffset);
+          if (selection.direction === "before") events.reverse();
+          return page();
+        }
+        if (offset > 0)
+          item.fragment = {
+            offset,
+            nextOffset,
+            complete: true,
+            unit: slice?.unit ?? "utf16"
+          };
+      }
+      edge = event.sequence;
+      legacyActive = false;
+      if (selection.direction === "after") after = event.sequence;
+      else before = event.sequence;
+      if (events.length >= limit) {
+        hasMore = source.hasMore || event !== ordered.at(-1);
+        nextCursor = hasMore ? encode({ ...selection, after, before }) : null;
+        if (selection.direction === "before") events.reverse();
+        return page();
+      }
+    }
+    if (source.coveredSequence) {
+      if (selection.direction === "after") after = Math.max(after, source.coveredSequence.last);
+      else before = Math.min(before ?? Infinity, source.coveredSequence.first);
+    }
+    if (!source.hasMore) {
+      hasMore = false;
+      nextCursor = null;
+      if (selection.direction === "before") events.reverse();
+      return page();
+    }
+    hasMore = true;
+    nextCursor = encode({ ...selection, after, before });
+  }
+  if (selection.direction === "before") events.reverse();
+  return page();
+}
+export {
+  SESSION_EVENT_VIEW_MAX_BYTES,
+  readSessionEventView,
+  resolveSessionEventView
+};
+//# sourceMappingURL=session-event-view-MU3HMNV3.js.map

package/dist/session-event-view-MU3HMNV3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/mcp/session-event-view.ts"],"sourcesContent":["import { z } from \"zod\";\nimport type { SessionEvent, SessionEventType } from \"@opengeni/contracts\";\nimport type {\n  SessionEventSliceOptions,\n  SessionEventSlicePage,\n} from \"@opengeni/db/session-event-slices\";\n\nexport const SESSION_EVENT_VIEW_MAX_BYTES = 16 * 1024;\nconst selectionSchema = z.object({\n  sessionId: z.string().uuid(),\n  view: z.enum([\"conversation\", \"results\", \"tools\"]),\n  includeArguments: z.boolean(),\n  includeOutput: z.boolean(),\n  callId: z\n    .string()\n    .max(512)\n    .refine(\n      (value) => Buffer.byteLength(JSON.stringify(value), \"utf8\") <= 2048,\n      \"callId exceeds the encoded cursor budget\",\n    )\n    .nullable(),\n  direction: z.enum([\"before\", \"after\"]),\n  after: z.number().int().nonnegative(),\n  before: z.number().int().positive().nullable(),\n});\nconst cursorSchema = z.object({\n  v: z.union([z.literal(1), z.literal(2)]),\n  selection: selectionSchema,\n  sequence: z.number().int().positive().nullable(),\n  offset: z.number().int().nonnegative().max(2_147_483_647),\n});\ntype Selection = z.infer<typeof selectionSchema>;\nexport type SessionEventViewInput = {\n  sessionId: string;\n  view?: Selection[\"view\"] | undefined;\n  after?: number | undefined;\n  before?: number | undefined;\n  direction?: Selection[\"direction\"] | undefined;\n  limit?: number | undefined;\n  cursor?: string | undefined;\n  callId?: string | undefined;\n  includeArguments?: boolean | undefined;\n  includeOutput?: boolean | undefined;\n};\ntype Item = { sequence: number; turnId?: string; role?: string; text?: string } & Record<\n  string,\n  unknown\n>;\ntype ReadPage = (options: SessionEventSliceOptions) => Promise<SessionEventSlicePage>;\nconst types: Record<Selection[\"view\"], SessionEventType[]> = {\n  conversation: [\"user.message\", \"agent.message.completed\"],\n  // Final turn output is authoritative: do not repeat message.completed text.\n  results: [\"turn.completed\", \"turn.failed\", \"goal.completed\", \"goal.paused\", \"tool.auth_needed\"],\n  tools: [\"agent.toolCall.created\", \"agent.toolCall.output\"],\n};\nconst record = (value: unknown): Record<string, unknown> =>\n  value !== null && typeof value === \"object\" && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : {};\nconst bytes = (value: unknown) => Buffer.byteLength(JSON.stringify(value, null, 2), \"utf8\");\nconst encode = (selection: Selection, sequence: number | null = null, offset = 0, v = 2) =>\n  Buffer.from(JSON.stringify({ v, selection, sequence, offset })).toString(\"base64url\");\n\n/** A cursor is a bounded selector, never authority. The caller reauthorizes every read. */\nexport function resolveSessionEventView(input: SessionEventViewInput) {\n  let continuation: z.infer<typeof cursorSchema> | null = null;\n  if (input.cursor !== undefined) {\n    if (input.cursor.length > 4096)\n      throw new Error(\"session_events cursor exceeds 4096 characters\");\n    try {\n      continuation = cursorSchema.parse(\n        JSON.parse(Buffer.from(input.cursor, \"base64url\").toString()),\n      );\n    } catch {\n      throw new Error(\"Invalid session_events cursor\");\n    }\n    const previous = continuation.selection;\n    for (const key of [\n      \"sessionId\",\n      \"view\",\n      \"includeArguments\",\n      \"includeOutput\",\n      \"callId\",\n      \"direction\",\n      \"after\",\n      \"before\",\n    ] as const) {\n      if (input[key] !== undefined && input[key] !== previous[key]) {\n        throw new Error(`session_events cursor cannot change ${key}`);\n      }\n    }\n  }\n  const selection =\n    continuation?.selection ??\n    selectionSchema.parse({\n      sessionId: input.sessionId,\n      view: input.view ?? \"conversation\",\n      includeArguments: input.includeArguments ?? false,\n      includeOutput: input.includeOutput ?? false,\n      callId: input.callId ?? null,\n      direction:\n        input.direction ??\n        (input.before !== undefined || input.after === undefined ? \"before\" : \"after\"),\n      after: input.after ?? 0,\n      before: input.before ?? null,\n    });\n  if (\n    selection.view !== \"tools\" &&\n    (selection.callId || selection.includeArguments || selection.includeOutput)\n  ) {\n    throw new Error(\"callId/includeArguments/includeOutput require view=tools\");\n  }\n  if (\n    continuation &&\n    ((continuation.sequence === null && continuation.offset !== 0) ||\n      (continuation.sequence !== null &&\n        (continuation.sequence <= selection.after ||\n          (selection.before !== null && continuation.sequence >= selection.before))))\n  )\n    throw new Error(\"Invalid session_events cursor position\");\n  return { selection, continuation };\n}\n\nfunction project(event: SessionEvent, selection: Selection): Item | null {\n  if (event.duplicateOfEventId || (event.turnAssociation && event.turnAssociation !== \"current\"))\n    return null;\n  const p = record(event.payload);\n  const base = { sequence: event.sequence, ...(event.turnId ? { turnId: event.turnId } : {}) };\n  if (selection.view === \"conversation\") {\n    return typeof p.text === \"string\" && p.text.length > 0\n      ? { ...base, role: event.type === \"user.message\" ? \"user\" : \"assistant\", text: p.text }\n      : null;\n  }\n  if (selection.view === \"results\") {\n    if (event.type === \"turn.completed\" && (\"maintenance\" in p || \"segmentLimit\" in p)) return null;\n    const value = event.type === \"turn.completed\" ? (p.output ?? p.result) : p;\n    if (value === undefined || value === \"\") return null;\n    return {\n      ...base,\n      type: event.type,\n      text: typeof value === \"string\" ? value : JSON.stringify(value),\n    };\n  }\n  const callId = p.callId ?? p.call_id ?? p.id;\n  if (selection.callId !== null && selection.callId !== callId) return null;\n  const output = event.type === \"agent.toolCall.output\";\n  // Choose one canonical slot. Never ship the raw receipt beside its parsed copy.\n  const value = output ? p.output : (p.arguments ?? p.args);\n  return {\n    ...base,\n    callId,\n    kind: output ? \"result\" : \"call\",\n    ...(typeof p.name === \"string\" ? { name: p.name } : {}),\n    ...(p.identityOmitted === true ? { identityOmitted: true } : {}),\n    ...(p.isError === true || record(value).isError === true ? { isError: true } : {}),\n    ...((output ? selection.includeOutput : selection.includeArguments) && value !== undefined\n      ? {\n          text: typeof value === \"string\" ? value : JSON.stringify(value),\n          encoding: typeof value === \"string\" ? \"text\" : \"json\",\n        }\n      : {}),\n  };\n}\n\n/** Read-only projection over the existing RLS/audit query. No command observations. */\nexport async function readSessionEventView(input: SessionEventViewInput, read: ReadPage) {\n  const { selection, continuation } = resolveSessionEventView(input);\n  const limit = Math.max(1, Math.min(50, input.limit ?? 10));\n  let after =\n    continuation?.sequence && selection.direction === \"after\"\n      ? continuation.sequence - 1\n      : selection.after;\n  let before =\n    continuation?.sequence && selection.direction === \"before\"\n      ? continuation.sequence + 1\n      : selection.before;\n  const events: Item[] = [];\n  let hasMore = false;\n  let nextCursor: string | null = null;\n  let sourceExact = true;\n  let edge: number | null = null;\n  let legacyActive = continuation?.v === 1 && continuation.sequence !== null;\n  const page = () => ({\n    view: selection.view,\n    direction: selection.direction,\n    events,\n    nextAfter: selection.direction === \"after\" ? (edge ?? selection.after) : null,\n    nextBefore: selection.direction === \"before\" ? (edge ?? selection.before) : null,\n    hasMore,\n    nextCursor,\n    sourceExact,\n    ...(!sourceExact\n      ? {\n          sourceLoss: {\n            reason: \"structured_value_exceeds_budget\" as const,\n            completeTextAvailable: false as const,\n            message:\n              \"An oversized structured value was omitted. Scalar text remains retrievable through continuation; omitted structured values are not complete JSON results.\",\n          },\n        }\n      : {}),\n    maxBytes: SESSION_EVENT_VIEW_MAX_BYTES,\n  });\n  const resume = (sequence: number, offset = 0) => {\n    hasMore = true;\n    nextCursor = encode(\n      { ...selection, after, before },\n      sequence,\n      offset,\n      legacyActive && sequence === continuation?.sequence ? 1 : 2,\n    );\n  };\n  // Bound work even when a sparse exact callId lookup matches nothing. The\n  // returned cursor advances the scan without claiming the lookup is exhausted.\n  for (let scan = 0; scan < 64; scan += 1) {\n    const source = await read({\n      after,\n      ...(before === null ? {} : { before }),\n      direction: selection.direction,\n      limit: 8,\n      includeTypes: types[selection.view],\n      payloadMode: \"full\",\n      excludeUnclaimedHumanPrompts: true,\n      maxBytes: 1024 * 1024,\n      legacyUtf16: legacyActive,\n      view: selection.view,\n      includeArguments: selection.includeArguments,\n      includeOutput: selection.includeOutput,\n      ...(continuation?.sequence\n        ? { sourceSequence: continuation.sequence, sourceOffset: continuation.offset }\n        : {}),\n    });\n    sourceExact &&= source.fullPayloadsExact;\n    const ordered = selection.direction === \"before\" ? [...source.events].reverse() : source.events;\n    for (const event of ordered) {\n      const slice = source.slices?.[event.sequence];\n      const item = project(event, selection);\n      if (item) {\n        const offset = continuation?.sequence === event.sequence ? continuation.offset : 0;\n        if (slice?.omitted) {\n          delete item.text;\n          item.sourceOmitted = { reason: \"structured_value_exceeds_budget\", complete: false };\n        }\n        const advance = (text: string) =>\n          slice?.unit === \"codepoint\" ? Array.from(text).length : text.length;\n        if (!slice && offset > (item.text?.length ?? 0))\n          throw new Error(\"Invalid message continuation offset\");\n        if (\n          !slice &&\n          offset > 0 &&\n          item.text &&\n          /[\\uD800-\\uDBFF]/.test(item.text[offset - 1]!) &&\n          /[\\uDC00-\\uDFFF]/.test(item.text[offset] ?? \"\")\n        ) {\n          throw new Error(\"Invalid message continuation offset: splits a surrogate pair\");\n        }\n        if (!slice && offset > 0 && item.text) item.text = item.text.slice(offset);\n        events.push(item);\n        // Reserve enough for the bounded cursor and fragment facts.\n        if (bytes(page()) > SESSION_EVENT_VIEW_MAX_BYTES - 4096) {\n          events.pop();\n          if (events.length > 0) {\n            resume(event.sequence, offset);\n            if (selection.direction === \"before\") events.reverse();\n            return page();\n          }\n          if (!item.text) throw new Error(\"Session event identity exceeds page budget\");\n          const text = item.text;\n          let low = 0;\n          let high = text.length;\n          while (low < high) {\n            const mid = Math.ceil((low + high) / 2);\n            if (bytes({ ...item, text: text.slice(0, mid) }) <= SESSION_EVENT_VIEW_MAX_BYTES - 6000)\n              low = mid;\n            else high = mid - 1;\n          }\n          // Do not split a UTF-16 surrogate pair (UTF-8 remains lossless).\n          if (low > 0 && /[\\uD800-\\uDBFF]/.test(text[low - 1]!)) low -= 1;\n          if (low === 0) throw new Error(\"Session event identity exceeds page budget\");\n          events.push({\n            ...item,\n            text: text.slice(0, low),\n            fragment: {\n              offset,\n              nextOffset: offset + advance(text.slice(0, low)),\n              complete: false,\n              unit: slice?.unit ?? \"utf16\",\n            },\n          });\n          resume(event.sequence, offset + advance(text.slice(0, low)));\n          return page();\n        }\n        const nextOffset = offset + advance(item.text ?? \"\");\n        if (slice && !slice.omitted && nextOffset < slice.total) {\n          item.fragment = { offset, nextOffset, complete: false, unit: slice.unit };\n          resume(event.sequence, nextOffset);\n          if (selection.direction === \"before\") events.reverse();\n          return page();\n        }\n        if (offset > 0)\n          item.fragment = {\n            offset,\n            nextOffset,\n            complete: true,\n            unit: slice?.unit ?? \"utf16\",\n          };\n      }\n      edge = event.sequence;\n      legacyActive = false;\n      if (selection.direction === \"after\") after = event.sequence;\n      else before = event.sequence;\n      if (events.length >= limit) {\n        hasMore = source.hasMore || event !== ordered.at(-1);\n        nextCursor = hasMore ? encode({ ...selection, after, before }) : null;\n        if (selection.direction === \"before\") events.reverse();\n        return page();\n      }\n    }\n    // Metadata selection can advance over stale/duplicate rows without a\n    // projected payload. Use its covered edge rather than repeating the page.\n    if (source.coveredSequence) {\n      if (selection.direction === \"after\") after = Math.max(after, source.coveredSequence.last);\n      else before = Math.min(before ?? Infinity, source.coveredSequence.first);\n    }\n    if (!source.hasMore) {\n      hasMore = false;\n      nextCursor = null;\n      if (selection.direction === \"before\") events.reverse();\n      return page();\n    }\n    hasMore = true;\n    nextCursor = encode({ ...selection, after, before });\n  }\n  if (selection.direction === \"before\") events.reverse();\n  return page();\n}\n"],"mappings":";AAAA,SAAS,SAAS;AAOX,IAAM,+BAA+B,KAAK;AACjD,IAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,MAAM,EAAE,KAAK,CAAC,gBAAgB,WAAW,OAAO,CAAC;AAAA,EACjD,kBAAkB,EAAE,QAAQ;AAAA,EAC5B,eAAe,EAAE,QAAQ;AAAA,EACzB,QAAQ,EACL,OAAO,EACP,IAAI,GAAG,EACP;AAAA,IACC,CAAC,UAAU,OAAO,WAAW,KAAK,UAAU,KAAK,GAAG,MAAM,KAAK;AAAA,IAC/D;AAAA,EACF,EACC,SAAS;AAAA,EACZ,WAAW,EAAE,KAAK,CAAC,UAAU,OAAO,CAAC;AAAA,EACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAC/C,CAAC;AACD,IAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,GAAG,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;AAAA,EACvC,WAAW;AAAA,EACX,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,UAAa;AAC1D,CAAC;AAmBD,IAAM,QAAuD;AAAA,EAC3D,cAAc,CAAC,gBAAgB,yBAAyB;AAAA;AAAA,EAExD,SAAS,CAAC,kBAAkB,eAAe,kBAAkB,eAAe,kBAAkB;AAAA,EAC9F,OAAO,CAAC,0BAA0B,uBAAuB;AAC3D;AACA,IAAM,SAAS,CAAC,UACd,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAC9D,QACD,CAAC;AACP,IAAM,QAAQ,CAAC,UAAmB,OAAO,WAAW,KAAK,UAAU,OAAO,MAAM,CAAC,GAAG,MAAM;AAC1F,IAAM,SAAS,CAAC,WAAsB,WAA0B,MAAM,SAAS,GAAG,IAAI,MACpF,OAAO,KAAK,KAAK,UAAU,EAAE,GAAG,WAAW,UAAU,OAAO,CAAC,CAAC,EAAE,SAAS,WAAW;AAG/E,SAAS,wBAAwB,OAA8B;AACpE,MAAI,eAAoD;AACxD,MAAI,MAAM,WAAW,QAAW;AAC9B,QAAI,MAAM,OAAO,SAAS;AACxB,YAAM,IAAI,MAAM,+CAA+C;AACjE,QAAI;AACF,qBAAe,aAAa;AAAA,QAC1B,KAAK,MAAM,OAAO,KAAK,MAAM,QAAQ,WAAW,EAAE,SAAS,CAAC;AAAA,MAC9D;AAAA,IACF,QAAQ;AACN,YAAM,IAAI,MAAM,+BAA+B;AAAA,IACjD;AACA,UAAM,WAAW,aAAa;AAC9B,eAAW,OAAO;AAAA,MAChB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,GAAY;AACV,UAAI,MAAM,GAAG,MAAM,UAAa,MAAM,GAAG,MAAM,SAAS,GAAG,GAAG;AAC5D,cAAM,IAAI,MAAM,uCAAuC,GAAG,EAAE;AAAA,MAC9D;AAAA,IACF;AAAA,EACF;AACA,QAAM,YACJ,cAAc,aACd,gBAAgB,MAAM;AAAA,IACpB,WAAW,MAAM;AAAA,IACjB,MAAM,MAAM,QAAQ;AAAA,IACpB,kBAAkB,MAAM,oBAAoB;AAAA,IAC5C,eAAe,MAAM,iBAAiB;AAAA,IACtC,QAAQ,MAAM,UAAU;AAAA,IACxB,WACE,MAAM,cACL,MAAM,WAAW,UAAa,MAAM,UAAU,SAAY,WAAW;AAAA,IACxE,OAAO,MAAM,SAAS;AAAA,IACtB,QAAQ,MAAM,UAAU;AAAA,EAC1B,CAAC;AACH,MACE,UAAU,SAAS,YAClB,UAAU,UAAU,UAAU,oBAAoB,UAAU,gBAC7D;AACA,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACA,MACE,iBACE,aAAa,aAAa,QAAQ,aAAa,WAAW,KACzD,aAAa,aAAa,SACxB,aAAa,YAAY,UAAU,SACjC,UAAU,WAAW,QAAQ,aAAa,YAAY,UAAU;AAEvE,UAAM,IAAI,MAAM,wCAAwC;AAC1D,SAAO,EAAE,WAAW,aAAa;AACnC;AAEA,SAAS,QAAQ,OAAqB,WAAmC;AACvE,MAAI,MAAM,sBAAuB,MAAM,mBAAmB,MAAM,oBAAoB;AAClF,WAAO;AACT,QAAM,IAAI,OAAO,MAAM,OAAO;AAC9B,QAAM,OAAO,EAAE,UAAU,MAAM,UAAU,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC,EAAG;AAC3F,MAAI,UAAU,SAAS,gBAAgB;AACrC,WAAO,OAAO,EAAE,SAAS,YAAY,EAAE,KAAK,SAAS,IACjD,EAAE,GAAG,MAAM,MAAM,MAAM,SAAS,iBAAiB,SAAS,aAAa,MAAM,EAAE,KAAK,IACpF;AAAA,EACN;AACA,MAAI,UAAU,SAAS,WAAW;AAChC,QAAI,MAAM,SAAS,qBAAqB,iBAAiB,KAAK,kBAAkB,GAAI,QAAO;AAC3F,UAAMA,SAAQ,MAAM,SAAS,mBAAoB,EAAE,UAAU,EAAE,SAAU;AACzE,QAAIA,WAAU,UAAaA,WAAU,GAAI,QAAO;AAChD,WAAO;AAAA,MACL,GAAG;AAAA,MACH,MAAM,MAAM;AAAA,MACZ,MAAM,OAAOA,WAAU,WAAWA,SAAQ,KAAK,UAAUA,MAAK;AAAA,IAChE;AAAA,EACF;AACA,QAAM,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE;AAC1C,MAAI,UAAU,WAAW,QAAQ,UAAU,WAAW,OAAQ,QAAO;AACrE,QAAM,SAAS,MAAM,SAAS;AAE9B,QAAM,QAAQ,SAAS,EAAE,SAAU,EAAE,aAAa,EAAE;AACpD,SAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,IACA,MAAM,SAAS,WAAW;AAAA,IAC1B,GAAI,OAAO,EAAE,SAAS,WAAW,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;AAAA,IACrD,GAAI,EAAE,oBAAoB,OAAO,EAAE,iBAAiB,KAAK,IAAI,CAAC;AAAA,IAC9D,GAAI,EAAE,YAAY,QAAQ,OAAO,KAAK,EAAE,YAAY,OAAO,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,IAChF,IAAK,SAAS,UAAU,gBAAgB,UAAU,qBAAqB,UAAU,SAC7E;AAAA,MACE,MAAM,OAAO,UAAU,WAAW,QAAQ,KAAK,UAAU,KAAK;AAAA,MAC9D,UAAU,OAAO,UAAU,WAAW,SAAS;AAAA,IACjD,IACA,CAAC;AAAA,EACP;AACF;AAGA,eAAsB,qBAAqB,OAA8B,MAAgB;AACvF,QAAM,EAAE,WAAW,aAAa,IAAI,wBAAwB,KAAK;AACjE,QAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,IAAI,IAAI,MAAM,SAAS,EAAE,CAAC;AACzD,MAAI,QACF,cAAc,YAAY,UAAU,cAAc,UAC9C,aAAa,WAAW,IACxB,UAAU;AAChB,MAAI,SACF,cAAc,YAAY,UAAU,cAAc,WAC9C,aAAa,WAAW,IACxB,UAAU;AAChB,QAAM,SAAiB,CAAC;AACxB,MAAI,UAAU;AACd,MAAI,aAA4B;AAChC,MAAI,cAAc;AAClB,MAAI,OAAsB;AAC1B,MAAI,eAAe,cAAc,MAAM,KAAK,aAAa,aAAa;AACtE,QAAM,OAAO,OAAO;AAAA,IAClB,MAAM,UAAU;AAAA,IAChB,WAAW,UAAU;AAAA,IACrB;AAAA,IACA,WAAW,UAAU,cAAc,UAAW,QAAQ,UAAU,QAAS;AAAA,IACzE,YAAY,UAAU,cAAc,WAAY,QAAQ,UAAU,SAAU;AAAA,IAC5E;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,CAAC,cACD;AAAA,MACE,YAAY;AAAA,QACV,QAAQ;AAAA,QACR,uBAAuB;AAAA,QACvB,SACE;AAAA,MACJ;AAAA,IACF,IACA,CAAC;AAAA,IACL,UAAU;AAAA,EACZ;AACA,QAAM,SAAS,CAAC,UAAkB,SAAS,MAAM;AAC/C,cAAU;AACV,iBAAa;AAAA,MACX,EAAE,GAAG,WAAW,OAAO,OAAO;AAAA,MAC9B;AAAA,MACA;AAAA,MACA,gBAAgB,aAAa,cAAc,WAAW,IAAI;AAAA,IAC5D;AAAA,EACF;AAGA,WAAS,OAAO,GAAG,OAAO,IAAI,QAAQ,GAAG;AACvC,UAAM,SAAS,MAAM,KAAK;AAAA,MACxB;AAAA,MACA,GAAI,WAAW,OAAO,CAAC,IAAI,EAAE,OAAO;AAAA,MACpC,WAAW,UAAU;AAAA,MACrB,OAAO;AAAA,MACP,cAAc,MAAM,UAAU,IAAI;AAAA,MAClC,aAAa;AAAA,MACb,8BAA8B;AAAA,MAC9B,UAAU,OAAO;AAAA,MACjB,aAAa;AAAA,MACb,MAAM,UAAU;AAAA,MAChB,kBAAkB,UAAU;AAAA,MAC5B,eAAe,UAAU;AAAA,MACzB,GAAI,cAAc,WACd,EAAE,gBAAgB,aAAa,UAAU,cAAc,aAAa,OAAO,IAC3E,CAAC;AAAA,IACP,CAAC;AACD,oBAAgB,OAAO;AACvB,UAAM,UAAU,UAAU,cAAc,WAAW,CAAC,GAAG,OAAO,MAAM,EAAE,QAAQ,IAAI,OAAO;AACzF,eAAW,SAAS,SAAS;AAC3B,YAAM,QAAQ,OAAO,SAAS,MAAM,QAAQ;AAC5C,YAAM,OAAO,QAAQ,OAAO,SAAS;AACrC,UAAI,MAAM;AACR,cAAM,SAAS,cAAc,aAAa,MAAM,WAAW,aAAa,SAAS;AACjF,YAAI,OAAO,SAAS;AAClB,iBAAO,KAAK;AACZ,eAAK,gBAAgB,EAAE,QAAQ,mCAAmC,UAAU,MAAM;AAAA,QACpF;AACA,cAAM,UAAU,CAAC,SACf,OAAO,SAAS,cAAc,MAAM,KAAK,IAAI,EAAE,SAAS,KAAK;AAC/D,YAAI,CAAC,SAAS,UAAU,KAAK,MAAM,UAAU;AAC3C,gBAAM,IAAI,MAAM,qCAAqC;AACvD,YACE,CAAC,SACD,SAAS,KACT,KAAK,QACL,kBAAkB,KAAK,KAAK,KAAK,SAAS,CAAC,CAAE,KAC7C,kBAAkB,KAAK,KAAK,KAAK,MAAM,KAAK,EAAE,GAC9C;AACA,gBAAM,IAAI,MAAM,8DAA8D;AAAA,QAChF;AACA,YAAI,CAAC,SAAS,SAAS,KAAK,KAAK,KAAM,MAAK,OAAO,KAAK,KAAK,MAAM,MAAM;AACzE,eAAO,KAAK,IAAI;AAEhB,YAAI,MAAM,KAAK,CAAC,IAAI,+BAA+B,MAAM;AACvD,iBAAO,IAAI;AACX,cAAI,OAAO,SAAS,GAAG;AACrB,mBAAO,MAAM,UAAU,MAAM;AAC7B,gBAAI,UAAU,cAAc,SAAU,QAAO,QAAQ;AACrD,mBAAO,KAAK;AAAA,UACd;AACA,cAAI,CAAC,KAAK,KAAM,OAAM,IAAI,MAAM,4CAA4C;AAC5E,gBAAM,OAAO,KAAK;AAClB,cAAI,MAAM;AACV,cAAI,OAAO,KAAK;AAChB,iBAAO,MAAM,MAAM;AACjB,kBAAM,MAAM,KAAK,MAAM,MAAM,QAAQ,CAAC;AACtC,gBAAI,MAAM,EAAE,GAAG,MAAM,MAAM,KAAK,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,+BAA+B;AACjF,oBAAM;AAAA,gBACH,QAAO,MAAM;AAAA,UACpB;AAEA,cAAI,MAAM,KAAK,kBAAkB,KAAK,KAAK,MAAM,CAAC,CAAE,EAAG,QAAO;AAC9D,cAAI,QAAQ,EAAG,OAAM,IAAI,MAAM,4CAA4C;AAC3E,iBAAO,KAAK;AAAA,YACV,GAAG;AAAA,YACH,MAAM,KAAK,MAAM,GAAG,GAAG;AAAA,YACvB,UAAU;AAAA,cACR;AAAA,cACA,YAAY,SAAS,QAAQ,KAAK,MAAM,GAAG,GAAG,CAAC;AAAA,cAC/C,UAAU;AAAA,cACV,MAAM,OAAO,QAAQ;AAAA,YACvB;AAAA,UACF,CAAC;AACD,iBAAO,MAAM,UAAU,SAAS,QAAQ,KAAK,MAAM,GAAG,GAAG,CAAC,CAAC;AAC3D,iBAAO,KAAK;AAAA,QACd;AACA,cAAM,aAAa,SAAS,QAAQ,KAAK,QAAQ,EAAE;AACnD,YAAI,SAAS,CAAC,MAAM,WAAW,aAAa,MAAM,OAAO;AACvD,eAAK,WAAW,EAAE,QAAQ,YAAY,UAAU,OAAO,MAAM,MAAM,KAAK;AACxE,iBAAO,MAAM,UAAU,UAAU;AACjC,cAAI,UAAU,cAAc,SAAU,QAAO,QAAQ;AACrD,iBAAO,KAAK;AAAA,QACd;AACA,YAAI,SAAS;AACX,eAAK,WAAW;AAAA,YACd;AAAA,YACA;AAAA,YACA,UAAU;AAAA,YACV,MAAM,OAAO,QAAQ;AAAA,UACvB;AAAA,MACJ;AACA,aAAO,MAAM;AACb,qBAAe;AACf,UAAI,UAAU,cAAc,QAAS,SAAQ,MAAM;AAAA,UAC9C,UAAS,MAAM;AACpB,UAAI,OAAO,UAAU,OAAO;AAC1B,kBAAU,OAAO,WAAW,UAAU,QAAQ,GAAG,EAAE;AACnD,qBAAa,UAAU,OAAO,EAAE,GAAG,WAAW,OAAO,OAAO,CAAC,IAAI;AACjE,YAAI,UAAU,cAAc,SAAU,QAAO,QAAQ;AACrD,eAAO,KAAK;AAAA,MACd;AAAA,IACF;AAGA,QAAI,OAAO,iBAAiB;AAC1B,UAAI,UAAU,cAAc,QAAS,SAAQ,KAAK,IAAI,OAAO,OAAO,gBAAgB,IAAI;AAAA,UACnF,UAAS,KAAK,IAAI,UAAU,UAAU,OAAO,gBAAgB,KAAK;AAAA,IACzE;AACA,QAAI,CAAC,OAAO,SAAS;AACnB,gBAAU;AACV,mBAAa;AACb,UAAI,UAAU,cAAc,SAAU,QAAO,QAAQ;AACrD,aAAO,KAAK;AAAA,IACd;AACA,cAAU;AACV,iBAAa,OAAO,EAAE,GAAG,WAAW,OAAO,OAAO,CAAC;AAAA,EACrD;AACA,MAAI,UAAU,cAAc,SAAU,QAAO,QAAQ;AACrD,SAAO,KAAK;AACd;","names":["value"]}

package/dist/site-uploads.d.ts

@@ -0,0 +1,41 @@
+import { type AccessGrant } from "@opengeni/contracts";
+import type { ApiRouteDeps, ObjectStorageDependency } from "@opengeni/core";
+import { prepareWorkspaceArtifactContent, type PreparedWorkspaceArtifactContent } from "./workspace-artifact-content.js";
+type Storage = NonNullable<ObjectStorageDependency>;
+export declare const MAX_SITE_SOURCE_BYTES: number;
+export declare function validateSiteSource(storage: Storage, key: string, sizeBytes: number): Promise<void>;
+export declare function prepareWorkspaceArtifactUpload(deps: ApiRouteDeps, grant: AccessGrant): Promise<{
+    uploadId: string;
+    html: {
+        putUrl: string;
+        requiredHeaders: Record<string, string>;
+    };
+    source: {
+        putUrl: string;
+        requiredHeaders: Record<string, string>;
+    };
+    expiresAt: string;
+}>;
+/** Provider version-pinned reads, without Site SHA checks or full HTML buffering. */
+export declare function readArtifactObject(storage: Storage, key: string, expectedHead?: Awaited<ReturnType<NonNullable<Storage["headObject"]>>>): AsyncGenerator<Uint8Array<ArrayBufferLike>, void, unknown>;
+type Input = Partial<Parameters<typeof prepareWorkspaceArtifactContent>[2]> & {
+    uploadId?: string;
+};
+export declare function prepareWorkspaceArtifactPublication(deps: ApiRouteDeps, grant: AccessGrant, input: Input): Promise<PreparedWorkspaceArtifactContent & {
+    uploadId?: string;
+}>;
+export declare function workspaceArtifactDownloads(storage: Storage, ref: {
+    contentKey: string;
+    sourceKey: string | null;
+}, audience: "sandbox" | "public"): Promise<{
+    html: {
+        url: string;
+        expiresAt: Date;
+    };
+    source: {
+        url: string;
+        expiresAt: Date;
+        format: string;
+    } | null;
+}>;
+export {};

package/dist/workspace-artifact-content.d.ts

@@ -2,11 +2,11 @@ import { type ToolGatewayIdentity, type WorkspaceArtifactSourceBundle as Workspa
 import type { ObjectStorageDependency } from "@opengeni/core";
 export type PreparedWorkspaceArtifactContent = {
     contentKey: string;
-    contentSha256: string;
+    contentSha256: null;
     sizeBytes: number;
-    sourceKey: string;
-    sourceSha256: string;
-    sourceSizeBytes: number;
+    sourceKey: string | null;
+    sourceSha256: null;
+    sourceSizeBytes: number | null;
     requestedTools?: ToolGatewayIdentity[];
     persistContent: () => Promise<void>;
     discardContent: () => Promise<void>;