@opengeni/contracts 3.1.0-canary.2 → 3.1.2

package/dist/chunk-6C2HKFTU.js

@@ -0,0 +1,207 @@
+import {
+  ConnectionKind,
+  SessionTenancyVisibility
+} from "./chunk-OF6OKOBF.js";
+import {
+  defineSchema
+} from "./chunk-56SNIMDO.js";
+
+// src/connection-authority.ts
+import { z } from "zod";
+var ConnectionAuthoritySelectionSource = /* @__PURE__ */ defineSchema(
+  () => z.enum(["explicit_workspace", "sender"])
+);
+var ConnectionUseSelectionSource = /* @__PURE__ */ defineSchema(
+  () => z.string().min(1).max(128).regex(/^[a-z0-9](?:[a-z0-9._:-]*[a-z0-9])?$/u)
+);
+var AcceptedConnectionWork = /* @__PURE__ */ defineSchema(
+  () => z.discriminatedUnion("kind", [
+    z.object({
+      kind: z.literal("turn"),
+      turnId: z.string().uuid()
+    }).strict(),
+    z.object({
+      kind: z.literal("scheduled_task"),
+      taskId: z.string().uuid(),
+      taskAuthorityRevision: z.number().int().positive(),
+      runId: z.string().uuid()
+    }).strict()
+  ])
+);
+var ConnectionUseAuthoritySnapshot = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    organizationId: z.string().uuid(),
+    originWorkspaceId: z.string().uuid(),
+    targetWorkspaceId: z.string().uuid(),
+    targetSessionId: z.string().uuid(),
+    targetSessionVisibility: SessionTenancyVisibility,
+    targetSessionAuthorityEpoch: z.number().int().positive(),
+    acceptedWork: AcceptedConnectionWork,
+    connectionId: z.string().uuid(),
+    connectionGeneration: z.number().int().positive(),
+    connectionStatus: z.literal("active"),
+    providerDomain: z.string().min(1).max(2048),
+    connectionKind: ConnectionKind,
+    scope: z.enum(["workspace", "user"]),
+    ownerSubjectId: z.string().min(1).max(512).nullable(),
+    ownerOrganizationMembershipId: z.string().uuid().nullable(),
+    ownerMembershipAuthorizationRevision: z.number().int().positive().nullable().default(null),
+    authoritySource: ConnectionAuthoritySelectionSource,
+    selectionSources: z.array(ConnectionUseSelectionSource).min(1).max(128),
+    userDelegation: z.null()
+  }).strict().superRefine((value, context) => {
+    const ownedBySubject = value.scope !== "workspace";
+    const delegated = value.scope === "user";
+    if (ownedBySubject !== (value.ownerSubjectId !== null)) {
+      context.addIssue({
+        code: "custom",
+        path: ["ownerSubjectId"],
+        message: "personal connections retain an owner subject"
+      });
+    }
+    if (delegated !== (value.ownerOrganizationMembershipId !== null)) {
+      context.addIssue({
+        code: "custom",
+        path: ["ownerOrganizationMembershipId"],
+        message: "only user connections retain an owner membership"
+      });
+    }
+    if (delegated !== (value.ownerMembershipAuthorizationRevision !== null)) {
+      context.addIssue({
+        code: "custom",
+        path: ["ownerMembershipAuthorizationRevision"],
+        message: "only user connections retain an owner membership revision"
+      });
+    }
+    if (delegated && value.authoritySource !== "sender") {
+      context.addIssue({
+        code: "custom",
+        path: ["authoritySource"],
+        message: "user connections require authenticated sender provenance"
+      });
+    }
+    if (!delegated && value.authoritySource === "sender") {
+      context.addIssue({
+        code: "custom",
+        path: ["authoritySource"],
+        message: "workspace connections cannot claim sender provenance"
+      });
+    }
+    if (!delegated && value.originWorkspaceId !== value.targetWorkspaceId) {
+      context.addIssue({
+        code: "custom",
+        path: ["originWorkspaceId"],
+        message: "workspace connections must be owned by the target workspace"
+      });
+    }
+  })
+);
+var ConnectionUseDenialReason = /* @__PURE__ */ defineSchema(
+  () => z.enum([
+    "tenant_mismatch",
+    "workspace_access_inactive",
+    "session_inactive",
+    "session_identity_changed",
+    "session_visibility_changed",
+    "session_authority_epoch_changed",
+    "accepted_attempt_authority_required",
+    "accepted_snapshot_digest_changed",
+    "connection_missing",
+    "connection_identity_changed",
+    "connection_generation_changed",
+    "connection_status_inactive",
+    "connection_owner_changed",
+    "owner_membership_inactive",
+    "authority_missing",
+    "authority_identity_changed",
+    "authority_generation_changed",
+    "authority_status_inactive",
+    "grant_missing",
+    "grant_identity_changed",
+    "grant_generation_changed",
+    "grant_status_inactive",
+    "grant_expired",
+    "grant_already_consumed"
+  ])
+);
+var ConnectionUseAttributionFields = /* @__PURE__ */ defineSchema(
+  () => z.object({
+    organizationId: z.string().uuid(),
+    workspaceId: z.string().uuid(),
+    sessionId: z.string().uuid(),
+    connectionId: z.string().uuid(),
+    connectionGeneration: z.number().int().positive(),
+    scope: z.enum(["workspace", "user", "legacy_user"]),
+    ownerSubjectId: z.string().min(1).max(512).nullable(),
+    authorityId: z.string().uuid().nullable(),
+    grantId: z.string().uuid().nullable()
+  }).strict()
+);
+function refineConnectionUseAttribution(value, context) {
+  const personal = value.scope !== "workspace";
+  for (const field of ["ownerSubjectId"]) {
+    if (personal !== (value[field] !== null)) {
+      context.addIssue({
+        code: "custom",
+        path: [field],
+        message: personal ? `personal attribution requires ${field}` : `workspace attribution cannot carry ${field}`
+      });
+    }
+  }
+  const owned = value.scope === "user";
+  for (const field of ["authorityId"]) {
+    if (owned !== (value[field] !== null)) {
+      context.addIssue({
+        code: "custom",
+        path: [field],
+        message: owned ? `personal attribution requires ${field}` : `non-personal attribution cannot carry ${field}`
+      });
+    }
+  }
+  if (!owned && value.grantId !== null) {
+    context.addIssue({
+      code: "custom",
+      path: ["grantId"],
+      message: "only historical personal attribution can carry a grant"
+    });
+  }
+}
+var ConnectionUseAttribution = /* @__PURE__ */ defineSchema(
+  () => ConnectionUseAttributionFields.extend({
+    scope: z.enum(["workspace", "user"]),
+    grantId: z.null()
+  }).superRefine(refineConnectionUseAttribution)
+);
+var ConnectionUseAuditFact = /* @__PURE__ */ defineSchema(
+  () => ConnectionUseAttributionFields.extend({
+    outcome: z.enum(["authorized", "denied"]),
+    denialReason: ConnectionUseDenialReason.nullable(),
+    occurredAt: z.string().datetime({ offset: true })
+  }).superRefine((value, context) => {
+    refineConnectionUseAttribution(value, context);
+    if (value.outcome === "denied" !== (value.denialReason !== null)) {
+      context.addIssue({
+        code: "custom",
+        path: ["denialReason"],
+        message: "only denied connection use carries a denial reason"
+      });
+    }
+  })
+);
+var ConnectionUseAuthorizationResult = /* @__PURE__ */ defineSchema(
+  () => z.discriminatedUnion("status", [
+    z.object({ status: z.literal("authorized"), attribution: ConnectionUseAttribution }).strict(),
+    z.object({ status: z.literal("denied"), reason: ConnectionUseDenialReason }).strict()
+  ])
+);
+
+export {
+  ConnectionAuthoritySelectionSource,
+  ConnectionUseSelectionSource,
+  ConnectionUseAuthoritySnapshot,
+  ConnectionUseDenialReason,
+  ConnectionUseAttribution,
+  ConnectionUseAuditFact,
+  ConnectionUseAuthorizationResult
+};
+//# sourceMappingURL=chunk-6C2HKFTU.js.map

package/dist/chunk-6C2HKFTU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/connection-authority.ts"],"sourcesContent":["import { defineSchema } from \"./define-schema\";\nimport { z } from \"zod\";\nimport { ConnectionKind, SessionTenancyVisibility } from \"./index\";\n\nexport const ConnectionAuthoritySelectionSource = /* @__PURE__ */ defineSchema(() =>\n  z.enum([\"explicit_workspace\", \"sender\"]),\n);\nexport type ConnectionAuthoritySelectionSource = z.infer<typeof ConnectionAuthoritySelectionSource>;\n\nexport const ConnectionUseSelectionSource = /* @__PURE__ */ defineSchema(() =>\n  z\n    .string()\n    .min(1)\n    .max(128)\n    .regex(/^[a-z0-9](?:[a-z0-9._:-]*[a-z0-9])?$/u),\n);\nexport type ConnectionUseSelectionSource = z.infer<typeof ConnectionUseSelectionSource>;\n\nconst AcceptedConnectionWork = /* @__PURE__ */ defineSchema(() =>\n  z.discriminatedUnion(\"kind\", [\n    z\n      .object({\n        kind: z.literal(\"turn\"),\n        turnId: z.string().uuid(),\n      })\n      .strict(),\n    z\n      .object({\n        kind: z.literal(\"scheduled_task\"),\n        taskId: z.string().uuid(),\n        taskAuthorityRevision: z.number().int().positive(),\n        runId: z.string().uuid(),\n      })\n      .strict(),\n  ]),\n);\n\n/**\n * Internal, credential-free authority frozen when work is accepted. Personal\n * owner identity is retained only for live authorization and usage/audit\n * attribution; it is never part of the public delegation envelope.\n */\nexport const ConnectionUseAuthoritySnapshot = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      organizationId: z.string().uuid(),\n      originWorkspaceId: z.string().uuid(),\n      targetWorkspaceId: z.string().uuid(),\n      targetSessionId: z.string().uuid(),\n      targetSessionVisibility: SessionTenancyVisibility,\n      targetSessionAuthorityEpoch: z.number().int().positive(),\n      acceptedWork: AcceptedConnectionWork,\n      connectionId: z.string().uuid(),\n      connectionGeneration: z.number().int().positive(),\n      connectionStatus: z.literal(\"active\"),\n      providerDomain: z.string().min(1).max(2048),\n      connectionKind: ConnectionKind,\n      scope: z.enum([\"workspace\", \"user\"]),\n      ownerSubjectId: z.string().min(1).max(512).nullable(),\n      ownerOrganizationMembershipId: z.string().uuid().nullable(),\n      ownerMembershipAuthorizationRevision: z.number().int().positive().nullable().default(null),\n      authoritySource: ConnectionAuthoritySelectionSource,\n      selectionSources: z.array(ConnectionUseSelectionSource).min(1).max(128),\n      userDelegation: z.null(),\n    })\n    .strict()\n    .superRefine((value, context) => {\n      const ownedBySubject = value.scope !== \"workspace\";\n      const delegated = value.scope === \"user\";\n      if (ownedBySubject !== (value.ownerSubjectId !== null)) {\n        context.addIssue({\n          code: \"custom\",\n          path: [\"ownerSubjectId\"],\n          message: \"personal connections retain an owner subject\",\n        });\n      }\n      if (delegated !== (value.ownerOrganizationMembershipId !== null)) {\n        context.addIssue({\n          code: \"custom\",\n          path: [\"ownerOrganizationMembershipId\"],\n          message: \"only user connections retain an owner membership\",\n        });\n      }\n      if (delegated !== (value.ownerMembershipAuthorizationRevision !== null)) {\n        context.addIssue({\n          code: \"custom\",\n          path: [\"ownerMembershipAuthorizationRevision\"],\n          message: \"only user connections retain an owner membership revision\",\n        });\n      }\n      if (delegated && value.authoritySource !== \"sender\") {\n        context.addIssue({\n          code: \"custom\",\n          path: [\"authoritySource\"],\n          message: \"user connections require authenticated sender provenance\",\n        });\n      }\n      if (!delegated && value.authoritySource === \"sender\") {\n        context.addIssue({\n          code: \"custom\",\n          path: [\"authoritySource\"],\n          message: \"workspace connections cannot claim sender provenance\",\n        });\n      }\n      if (!delegated && value.originWorkspaceId !== value.targetWorkspaceId) {\n        context.addIssue({\n          code: \"custom\",\n          path: [\"originWorkspaceId\"],\n          message: \"workspace connections must be owned by the target workspace\",\n        });\n      }\n    }),\n);\nexport type ConnectionUseAuthoritySnapshot = z.infer<typeof ConnectionUseAuthoritySnapshot>;\n\nexport const ConnectionUseDenialReason = /* @__PURE__ */ defineSchema(() =>\n  z.enum([\n    \"tenant_mismatch\",\n    \"workspace_access_inactive\",\n    \"session_inactive\",\n    \"session_identity_changed\",\n    \"session_visibility_changed\",\n    \"session_authority_epoch_changed\",\n    \"accepted_attempt_authority_required\",\n    \"accepted_snapshot_digest_changed\",\n    \"connection_missing\",\n    \"connection_identity_changed\",\n    \"connection_generation_changed\",\n    \"connection_status_inactive\",\n    \"connection_owner_changed\",\n    \"owner_membership_inactive\",\n    \"authority_missing\",\n    \"authority_identity_changed\",\n    \"authority_generation_changed\",\n    \"authority_status_inactive\",\n    \"grant_missing\",\n    \"grant_identity_changed\",\n    \"grant_generation_changed\",\n    \"grant_status_inactive\",\n    \"grant_expired\",\n    \"grant_already_consumed\",\n  ]),\n);\nexport type ConnectionUseDenialReason = z.infer<typeof ConnectionUseDenialReason>;\n\nconst ConnectionUseAttributionFields = /* @__PURE__ */ defineSchema(() =>\n  z\n    .object({\n      organizationId: z.string().uuid(),\n      workspaceId: z.string().uuid(),\n      sessionId: z.string().uuid(),\n      connectionId: z.string().uuid(),\n      connectionGeneration: z.number().int().positive(),\n      scope: z.enum([\"workspace\", \"user\", \"legacy_user\"]),\n      ownerSubjectId: z.string().min(1).max(512).nullable(),\n      authorityId: z.string().uuid().nullable(),\n      grantId: z.string().uuid().nullable(),\n    })\n    .strict(),\n);\n\nfunction refineConnectionUseAttribution(\n  value: z.infer<typeof ConnectionUseAttributionFields>,\n  context: z.RefinementCtx,\n): void {\n  const personal = value.scope !== \"workspace\";\n  for (const field of [\"ownerSubjectId\"] as const) {\n    if (personal !== (value[field] !== null)) {\n      context.addIssue({\n        code: \"custom\",\n        path: [field],\n        message: personal\n          ? `personal attribution requires ${field}`\n          : `workspace attribution cannot carry ${field}`,\n      });\n    }\n  }\n  const owned = value.scope === \"user\";\n  for (const field of [\"authorityId\"] as const) {\n    if (owned !== (value[field] !== null)) {\n      context.addIssue({\n        code: \"custom\",\n        path: [field],\n        message: owned\n          ? `personal attribution requires ${field}`\n          : `non-personal attribution cannot carry ${field}`,\n      });\n    }\n  }\n  if (!owned && value.grantId !== null) {\n    context.addIssue({\n      code: \"custom\",\n      path: [\"grantId\"],\n      message: \"only historical personal attribution can carry a grant\",\n    });\n  }\n}\n\n/** Metadata-only attribution emitted after pre-use authorization. */\nexport const ConnectionUseAttribution = /* @__PURE__ */ defineSchema(() =>\n  ConnectionUseAttributionFields.extend({\n    scope: z.enum([\"workspace\", \"user\"]),\n    grantId: z.null(),\n  }).superRefine(refineConnectionUseAttribution),\n);\nexport type ConnectionUseAttribution = z.infer<typeof ConnectionUseAttribution>;\n\nexport const ConnectionUseAuditFact = /* @__PURE__ */ defineSchema(() =>\n  ConnectionUseAttributionFields.extend({\n    outcome: z.enum([\"authorized\", \"denied\"]),\n    denialReason: ConnectionUseDenialReason.nullable(),\n    occurredAt: z.string().datetime({ offset: true }),\n  }).superRefine((value, context) => {\n    refineConnectionUseAttribution(value, context);\n    if ((value.outcome === \"denied\") !== (value.denialReason !== null)) {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"denialReason\"],\n        message: \"only denied connection use carries a denial reason\",\n      });\n    }\n  }),\n);\nexport type ConnectionUseAuditFact = z.infer<typeof ConnectionUseAuditFact>;\n\nexport const ConnectionUseAuthorizationResult = /* @__PURE__ */ defineSchema(() =>\n  z.discriminatedUnion(\"status\", [\n    z.object({ status: z.literal(\"authorized\"), attribution: ConnectionUseAttribution }).strict(),\n    z.object({ status: z.literal(\"denied\"), reason: ConnectionUseDenialReason }).strict(),\n  ]),\n);\nexport type ConnectionUseAuthorizationResult = z.infer<typeof ConnectionUseAuthorizationResult>;\n"],"mappings":";;;;;;;;;AACA,SAAS,SAAS;AAGX,IAAM,qCAAqD;AAAA,EAAa,MAC7E,EAAE,KAAK,CAAC,sBAAsB,QAAQ,CAAC;AACzC;AAGO,IAAM,+BAA+C;AAAA,EAAa,MACvE,EACG,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,uCAAuC;AAClD;AAGA,IAAM,yBAAyC;AAAA,EAAa,MAC1D,EAAE,mBAAmB,QAAQ;AAAA,IAC3B,EACG,OAAO;AAAA,MACN,MAAM,EAAE,QAAQ,MAAM;AAAA,MACtB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,IAC1B,CAAC,EACA,OAAO;AAAA,IACV,EACG,OAAO;AAAA,MACN,MAAM,EAAE,QAAQ,gBAAgB;AAAA,MAChC,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,MACxB,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,MACjD,OAAO,EAAE,OAAO,EAAE,KAAK;AAAA,IACzB,CAAC,EACA,OAAO;AAAA,EACZ,CAAC;AACH;AAOO,IAAM,iCAAiD;AAAA,EAAa,MACzE,EACG,OAAO;AAAA,IACN,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,IAChC,mBAAmB,EAAE,OAAO,EAAE,KAAK;AAAA,IACnC,mBAAmB,EAAE,OAAO,EAAE,KAAK;AAAA,IACnC,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,IACjC,yBAAyB;AAAA,IACzB,6BAA6B,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,IACvD,cAAc;AAAA,IACd,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,IAC9B,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,IAChD,kBAAkB,EAAE,QAAQ,QAAQ;AAAA,IACpC,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,IAC1C,gBAAgB;AAAA,IAChB,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,CAAC;AAAA,IACnC,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACpD,+BAA+B,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC1D,sCAAsC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,IACzF,iBAAiB;AAAA,IACjB,kBAAkB,EAAE,MAAM,4BAA4B,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACtE,gBAAgB,EAAE,KAAK;AAAA,EACzB,CAAC,EACA,OAAO,EACP,YAAY,CAAC,OAAO,YAAY;AAC/B,UAAM,iBAAiB,MAAM,UAAU;AACvC,UAAM,YAAY,MAAM,UAAU;AAClC,QAAI,oBAAoB,MAAM,mBAAmB,OAAO;AACtD,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,gBAAgB;AAAA,QACvB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,eAAe,MAAM,kCAAkC,OAAO;AAChE,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,+BAA+B;AAAA,QACtC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,eAAe,MAAM,yCAAyC,OAAO;AACvE,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,sCAAsC;AAAA,QAC7C,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,aAAa,MAAM,oBAAoB,UAAU;AACnD,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,iBAAiB;AAAA,QACxB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,CAAC,aAAa,MAAM,oBAAoB,UAAU;AACpD,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,iBAAiB;AAAA,QACxB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,CAAC,aAAa,MAAM,sBAAsB,MAAM,mBAAmB;AACrE,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,mBAAmB;AAAA,QAC1B,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACL;AAGO,IAAM,4BAA4C;AAAA,EAAa,MACpE,EAAE,KAAK;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAGA,IAAM,iCAAiD;AAAA,EAAa,MAClE,EACG,OAAO;AAAA,IACN,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,IAChC,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,IAC7B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,IAC3B,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,IAC9B,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,IAChD,OAAO,EAAE,KAAK,CAAC,aAAa,QAAQ,aAAa,CAAC;AAAA,IAClD,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACpD,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IACxC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,CAAC,EACA,OAAO;AACZ;AAEA,SAAS,+BACP,OACA,SACM;AACN,QAAM,WAAW,MAAM,UAAU;AACjC,aAAW,SAAS,CAAC,gBAAgB,GAAY;AAC/C,QAAI,cAAc,MAAM,KAAK,MAAM,OAAO;AACxC,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,KAAK;AAAA,QACZ,SAAS,WACL,iCAAiC,KAAK,KACtC,sCAAsC,KAAK;AAAA,MACjD,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,UAAU;AAC9B,aAAW,SAAS,CAAC,aAAa,GAAY;AAC5C,QAAI,WAAW,MAAM,KAAK,MAAM,OAAO;AACrC,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,KAAK;AAAA,QACZ,SAAS,QACL,iCAAiC,KAAK,KACtC,yCAAyC,KAAK;AAAA,MACpD,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,CAAC,SAAS,MAAM,YAAY,MAAM;AACpC,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAGO,IAAM,2BAA2C;AAAA,EAAa,MACnE,+BAA+B,OAAO;AAAA,IACpC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,CAAC;AAAA,IACnC,SAAS,EAAE,KAAK;AAAA,EAClB,CAAC,EAAE,YAAY,8BAA8B;AAC/C;AAGO,IAAM,yBAAyC;AAAA,EAAa,MACjE,+BAA+B,OAAO;AAAA,IACpC,SAAS,EAAE,KAAK,CAAC,cAAc,QAAQ,CAAC;AAAA,IACxC,cAAc,0BAA0B,SAAS;AAAA,IACjD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EAClD,CAAC,EAAE,YAAY,CAAC,OAAO,YAAY;AACjC,mCAA+B,OAAO,OAAO;AAC7C,QAAK,MAAM,YAAY,cAAe,MAAM,iBAAiB,OAAO;AAClE,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,MAAM,CAAC,cAAc;AAAA,QACrB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACH;AAGO,IAAM,mCAAmD;AAAA,EAAa,MAC3E,EAAE,mBAAmB,UAAU;AAAA,IAC7B,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,YAAY,GAAG,aAAa,yBAAyB,CAAC,EAAE,OAAO;AAAA,IAC5F,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,QAAQ,GAAG,QAAQ,0BAA0B,CAAC,EAAE,OAAO;AAAA,EACtF,CAAC;AACH;","names":[]}

package/dist/chunk-6IXO76Z6.js

@@ -0,0 +1,72 @@
+// src/workspace-integration-wire.ts
+var WORKSPACE_WEBHOOK_EVENT_TYPES = [
+  "turn.completed",
+  "turn.failed",
+  "turn.cancelled",
+  "session.status.changed",
+  "session.requiresAction",
+  "session.humanInput.requested",
+  "session.notification.posted",
+  "session.notification.withdrawn",
+  "usage.threshold_reached",
+  "usage.exhausted",
+  "usage.period_reset"
+];
+var OPENGENI_WEBHOOK_TEST_EVENT_TYPE = "webhook.test";
+var OPENGENI_TEST_REQUEST_NIL_ID = "00000000-0000-0000-0000-000000000000";
+var OPENGENI_SIGNATURE_HEADER = "OpenGeni-Signature";
+var OPENGENI_EVENT_ID_HEADER = "OpenGeni-Event-Id";
+var OPENGENI_DELIVERY_ID_HEADER = "OpenGeni-Delivery-Id";
+var OPENGENI_SIGNATURE_TOLERANCE_SECONDS = 300;
+var encoder = new TextEncoder();
+async function hmacSha256Hex(secret, message) {
+  const key = await crypto.subtle.importKey(
+    "raw",
+    encoder.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const signature = new Uint8Array(await crypto.subtle.sign("HMAC", key, encoder.encode(message)));
+  return Array.from(signature, (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+function constantTimeEqualHex(left, right) {
+  if (left.length !== right.length) return false;
+  let difference = 0;
+  for (let index = 0; index < left.length; index += 1) {
+    difference |= left.charCodeAt(index) ^ right.charCodeAt(index);
+  }
+  return difference === 0;
+}
+async function signOpenGeniPayload(secret, body, timestampSeconds = Math.floor(Date.now() / 1e3)) {
+  return `t=${timestampSeconds},v1=${await hmacSha256Hex(secret, `${timestampSeconds}.${body}`)}`;
+}
+async function verifyOpenGeniSignature(input) {
+  if (!input.signature) return false;
+  let timestamp = null;
+  const candidates = [];
+  for (const part of input.signature.split(",")) {
+    const [key, value] = part.trim().split("=", 2);
+    if (key === "t" && value && /^\d{1,12}$/.test(value)) timestamp = Number(value);
+    if (key === "v1" && value && /^[0-9a-f]{64}$/.test(value)) candidates.push(value);
+  }
+  if (timestamp === null || candidates.length === 0) return false;
+  const now = input.nowSeconds ?? Math.floor(Date.now() / 1e3);
+  const tolerance = input.toleranceSeconds ?? OPENGENI_SIGNATURE_TOLERANCE_SECONDS;
+  if (Math.abs(now - timestamp) > tolerance) return false;
+  const expected = await hmacSha256Hex(input.secret, `${timestamp}.${input.body}`);
+  return candidates.some((candidate) => constantTimeEqualHex(candidate, expected));
+}
+
+export {
+  WORKSPACE_WEBHOOK_EVENT_TYPES,
+  OPENGENI_WEBHOOK_TEST_EVENT_TYPE,
+  OPENGENI_TEST_REQUEST_NIL_ID,
+  OPENGENI_SIGNATURE_HEADER,
+  OPENGENI_EVENT_ID_HEADER,
+  OPENGENI_DELIVERY_ID_HEADER,
+  OPENGENI_SIGNATURE_TOLERANCE_SECONDS,
+  signOpenGeniPayload,
+  verifyOpenGeniSignature
+};
+//# sourceMappingURL=chunk-6IXO76Z6.js.map

package/dist/chunk-6IXO76Z6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/workspace-integration-wire.ts"],"sourcesContent":["/**\n * Dependency-free wire constants and the OpenGeni-Signature scheme shared by\n * workspace webhooks and credential providers. Kept free of zod so browser and\n * React Native bundles can verify signatures without the schema runtime.\n */\n\nexport const WORKSPACE_WEBHOOK_EVENT_TYPES = [\n  \"turn.completed\",\n  \"turn.failed\",\n  \"turn.cancelled\",\n  \"session.status.changed\",\n  \"session.requiresAction\",\n  \"session.humanInput.requested\",\n  \"session.notification.posted\",\n  \"session.notification.withdrawn\",\n  \"usage.threshold_reached\",\n  \"usage.exhausted\",\n  \"usage.period_reset\",\n] as const;\n\n/**\n * Sent only when an administrator presses \"Send test event\". It is never a\n * subscribable type: every endpoint can receive it, and a receiver that does\n * not care acknowledges it with any 2xx.\n */\nexport const OPENGENI_WEBHOOK_TEST_EVENT_TYPE = \"webhook.test\";\n\n/**\n * The session, turn and attempt ids of a credential-provider test request\n * (`purpose: \"test\"`). A test is not a run, so no real ids exist.\n */\nexport const OPENGENI_TEST_REQUEST_NIL_ID = \"00000000-0000-0000-0000-000000000000\";\n\nexport const OPENGENI_SIGNATURE_HEADER = \"OpenGeni-Signature\";\nexport const OPENGENI_EVENT_ID_HEADER = \"OpenGeni-Event-Id\";\nexport const OPENGENI_DELIVERY_ID_HEADER = \"OpenGeni-Delivery-Id\";\nexport const OPENGENI_SIGNATURE_TOLERANCE_SECONDS = 300;\n\nconst encoder = new TextEncoder();\n\nasync function hmacSha256Hex(secret: string, message: string): Promise<string> {\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    encoder.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  const signature = new Uint8Array(await crypto.subtle.sign(\"HMAC\", key, encoder.encode(message)));\n  return Array.from(signature, (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction constantTimeEqualHex(left: string, right: string): boolean {\n  if (left.length !== right.length) return false;\n  let difference = 0;\n  for (let index = 0; index < left.length; index += 1) {\n    difference |= left.charCodeAt(index) ^ right.charCodeAt(index);\n  }\n  return difference === 0;\n}\n\n/**\n * `OpenGeni-Signature: t=<unix seconds>,v1=<hex HMAC-SHA256(secret, \"<t>.<body>\")>`.\n * The timestamp is signed so a captured request cannot be replayed later.\n */\nexport async function signOpenGeniPayload(\n  secret: string,\n  body: string,\n  timestampSeconds = Math.floor(Date.now() / 1000),\n): Promise<string> {\n  return `t=${timestampSeconds},v1=${await hmacSha256Hex(secret, `${timestampSeconds}.${body}`)}`;\n}\n\nexport type VerifyOpenGeniSignatureInput = {\n  secret: string;\n  /** The exact raw request body, before JSON parsing. */\n  body: string;\n  /** The `OpenGeni-Signature` header value. */\n  signature: string | null | undefined;\n  toleranceSeconds?: number;\n  nowSeconds?: number;\n};\n\nexport async function verifyOpenGeniSignature(\n  input: VerifyOpenGeniSignatureInput,\n): Promise<boolean> {\n  if (!input.signature) return false;\n  let timestamp: number | null = null;\n  const candidates: string[] = [];\n  for (const part of input.signature.split(\",\")) {\n    const [key, value] = part.trim().split(\"=\", 2);\n    if (key === \"t\" && value && /^\\d{1,12}$/.test(value)) timestamp = Number(value);\n    if (key === \"v1\" && value && /^[0-9a-f]{64}$/.test(value)) candidates.push(value);\n  }\n  if (timestamp === null || candidates.length === 0) return false;\n  const now = input.nowSeconds ?? Math.floor(Date.now() / 1000);\n  const tolerance = input.toleranceSeconds ?? OPENGENI_SIGNATURE_TOLERANCE_SECONDS;\n  if (Math.abs(now - timestamp) > tolerance) return false;\n  const expected = await hmacSha256Hex(input.secret, `${timestamp}.${input.body}`);\n  return candidates.some((candidate) => constantTimeEqualHex(candidate, expected));\n}\n"],"mappings":";AAMO,IAAM,gCAAgC;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAOO,IAAM,mCAAmC;AAMzC,IAAM,+BAA+B;AAErC,IAAM,4BAA4B;AAClC,IAAM,2BAA2B;AACjC,IAAM,8BAA8B;AACpC,IAAM,uCAAuC;AAEpD,IAAM,UAAU,IAAI,YAAY;AAEhC,eAAe,cAAc,QAAgB,SAAkC;AAC7E,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC9B;AAAA,IACA,QAAQ,OAAO,MAAM;AAAA,IACrB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AACA,QAAM,YAAY,IAAI,WAAW,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,QAAQ,OAAO,OAAO,CAAC,CAAC;AAC/F,SAAO,MAAM,KAAK,WAAW,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AACpF;AAEA,SAAS,qBAAqB,MAAc,OAAwB;AAClE,MAAI,KAAK,WAAW,MAAM,OAAQ,QAAO;AACzC,MAAI,aAAa;AACjB,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,kBAAc,KAAK,WAAW,KAAK,IAAI,MAAM,WAAW,KAAK;AAAA,EAC/D;AACA,SAAO,eAAe;AACxB;AAMA,eAAsB,oBACpB,QACA,MACA,mBAAmB,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,GAC9B;AACjB,SAAO,KAAK,gBAAgB,OAAO,MAAM,cAAc,QAAQ,GAAG,gBAAgB,IAAI,IAAI,EAAE,CAAC;AAC/F;AAYA,eAAsB,wBACpB,OACkB;AAClB,MAAI,CAAC,MAAM,UAAW,QAAO;AAC7B,MAAI,YAA2B;AAC/B,QAAM,aAAuB,CAAC;AAC9B,aAAW,QAAQ,MAAM,UAAU,MAAM,GAAG,GAAG;AAC7C,UAAM,CAAC,KAAK,KAAK,IAAI,KAAK,KAAK,EAAE,MAAM,KAAK,CAAC;AAC7C,QAAI,QAAQ,OAAO,SAAS,aAAa,KAAK,KAAK,EAAG,aAAY,OAAO,KAAK;AAC9E,QAAI,QAAQ,QAAQ,SAAS,iBAAiB,KAAK,KAAK,EAAG,YAAW,KAAK,KAAK;AAAA,EAClF;AACA,MAAI,cAAc,QAAQ,WAAW,WAAW,EAAG,QAAO;AAC1D,QAAM,MAAM,MAAM,cAAc,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAC5D,QAAM,YAAY,MAAM,oBAAoB;AAC5C,MAAI,KAAK,IAAI,MAAM,SAAS,IAAI,UAAW,QAAO;AAClD,QAAM,WAAW,MAAM,cAAc,MAAM,QAAQ,GAAG,SAAS,IAAI,MAAM,IAAI,EAAE;AAC/E,SAAO,WAAW,KAAK,CAAC,cAAc,qBAAqB,WAAW,QAAQ,CAAC;AACjF;","names":[]}

package/dist/chunk-7272KVWZ.js

@@ -0,0 +1,60 @@
+// src/session-usage-limit-refusal.ts
+var SESSION_USAGE_LIMIT_SEGMENT = "session_usage_limit";
+var SESSION_USAGE_LIMIT_GOAL_PAUSED_REASON = "session_usage_limit";
+var BASIS = "model_api_equivalent_v1";
+var MAX_LIMIT_MICROS = 1e7 * 1e6;
+var MESSAGE_MAX_UTF8_BYTES = 1024;
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function micros(value, max = Number.MAX_SAFE_INTEGER) {
+  return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= max;
+}
+function boundedMessage(value) {
+  const normalized = value.slice(0, MESSAGE_MAX_UTF8_BYTES * 2).replace(/[\u0000-\u001f\u007f]+/g, " ").trim();
+  const bytes = new TextEncoder().encode(normalized);
+  let end = Math.min(bytes.length, MESSAGE_MAX_UTF8_BYTES);
+  while (end > 0 && end < bytes.length && (bytes[end] & 192) === 128) end -= 1;
+  return new TextDecoder().decode(bytes.slice(0, end)).trim();
+}
+function parseSessionUsageLimitReachedRefusal(value) {
+  const outer = record(value);
+  if (!outer) return null;
+  const source = record(outer.sessionUsageLimit) ?? outer;
+  if (source.code !== "session_usage_limit_reached") return null;
+  const fields = record(source.details) ?? source;
+  if (fields.basis !== BASIS || typeof fields.rootSessionId !== "string" || !UUID.test(fields.rootSessionId) || !micros(fields.limitMicros, MAX_LIMIT_MICROS) || !micros(fields.usedMicros)) {
+    return null;
+  }
+  const refusal = {
+    code: "session_usage_limit_reached",
+    basis: BASIS,
+    rootSessionId: fields.rootSessionId.toLowerCase(),
+    limitMicros: fields.limitMicros,
+    usedMicros: fields.usedMicros,
+    message: ""
+  };
+  const message = typeof source.message === "string" ? boundedMessage(source.message) : "";
+  return { ...refusal, message: message || sessionUsageLimitReachedMessage(refusal) };
+}
+function formatSessionUsageMicros(value) {
+  if (value > 0 && value < 1e4) return "<$0.01";
+  const dollars = value / 1e6;
+  return `$${dollars.toLocaleString("en-US", {
+    minimumFractionDigits: 2,
+    maximumFractionDigits: 2
+  })}`;
+}
+function sessionUsageLimitReachedMessage(refusal) {
+  return `This task's usage limit is reached (${formatSessionUsageMicros(refusal.usedMicros)} of ${formatSessionUsageMicros(refusal.limitMicros)} API-equivalent model usage). A person can raise or remove the limit to continue.`;
+}
+
+export {
+  SESSION_USAGE_LIMIT_SEGMENT,
+  SESSION_USAGE_LIMIT_GOAL_PAUSED_REASON,
+  parseSessionUsageLimitReachedRefusal,
+  formatSessionUsageMicros,
+  sessionUsageLimitReachedMessage
+};
+//# sourceMappingURL=chunk-7272KVWZ.js.map

package/dist/chunk-7272KVWZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/session-usage-limit-refusal.ts"],"sourcesContent":["/**\n * Browser/React Native-safe session usage limit helpers. Deliberately free of\n * the zod runtime so synchronous timeline projection can use it; contract\n * parity tests keep it aligned with `session-usage-limits.ts`.\n */\n\n/** `turn.completed.segmentLimit` for a stop caused by a task usage limit. */\nexport const SESSION_USAGE_LIMIT_SEGMENT = \"session_usage_limit\" as const;\n/** `SessionGoal.pausedReason` for a goal paused by a task usage limit. */\nexport const SESSION_USAGE_LIMIT_GOAL_PAUSED_REASON = \"session_usage_limit\" as const;\n\nconst BASIS = \"model_api_equivalent_v1\";\nconst MAX_LIMIT_MICROS = 10_000_000 * 1_000_000;\nconst MESSAGE_MAX_UTF8_BYTES = 1_024;\nconst UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nexport type ParsedSessionUsageLimitReachedRefusal = {\n  code: \"session_usage_limit_reached\";\n  basis: \"model_api_equivalent_v1\";\n  rootSessionId: string;\n  limitMicros: number;\n  usedMicros: number;\n  message: string;\n};\n\nfunction record(value: unknown): Record<string, unknown> | null {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : null;\n}\n\nfunction micros(value: unknown, max = Number.MAX_SAFE_INTEGER): value is number {\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0 && value <= max;\n}\n\nfunction boundedMessage(value: string): string {\n  const normalized = value\n    .slice(0, MESSAGE_MAX_UTF8_BYTES * 2)\n    .replace(/[\\u0000-\\u001f\\u007f]+/g, \" \")\n    .trim();\n  const bytes = new TextEncoder().encode(normalized);\n  let end = Math.min(bytes.length, MESSAGE_MAX_UTF8_BYTES);\n  while (end > 0 && end < bytes.length && (bytes[end]! & 0xc0) === 0x80) end -= 1;\n  return new TextDecoder().decode(bytes.slice(0, end)).trim();\n}\n\n/**\n * Select only the public refusal fields from an API error body (fields may sit\n * in `details`), a `turn.completed` payload's `sessionUsageLimit` record, or a\n * refusal object. Anything malformed returns null instead of a guessed amount.\n */\nexport function parseSessionUsageLimitReachedRefusal(\n  value: unknown,\n): ParsedSessionUsageLimitReachedRefusal | null {\n  const outer = record(value);\n  if (!outer) return null;\n  const source = record(outer.sessionUsageLimit) ?? outer;\n  if (source.code !== \"session_usage_limit_reached\") return null;\n  const fields = record(source.details) ?? source;\n  if (\n    fields.basis !== BASIS ||\n    typeof fields.rootSessionId !== \"string\" ||\n    !UUID.test(fields.rootSessionId) ||\n    !micros(fields.limitMicros, MAX_LIMIT_MICROS) ||\n    !micros(fields.usedMicros)\n  ) {\n    return null;\n  }\n  const refusal = {\n    code: \"session_usage_limit_reached\" as const,\n    basis: BASIS as \"model_api_equivalent_v1\",\n    rootSessionId: fields.rootSessionId.toLowerCase(),\n    limitMicros: fields.limitMicros,\n    usedMicros: fields.usedMicros,\n    message: \"\",\n  };\n  const message = typeof source.message === \"string\" ? boundedMessage(source.message) : \"\";\n  return { ...refusal, message: message || sessionUsageLimitReachedMessage(refusal) };\n}\n\n/**\n * \"$12.34\" for known amounts, \"<$0.01\" for a positive amount under a cent.\n * Callers must not pass unknown usage: render \"Preparing usage\" or\n * \"Usage unavailable\" instead of a dollar figure.\n */\nexport function formatSessionUsageMicros(value: number): string {\n  if (value > 0 && value < 10_000) return \"<$0.01\";\n  const dollars = value / 1_000_000;\n  return `$${dollars.toLocaleString(\"en-US\", {\n    minimumFractionDigits: 2,\n    maximumFractionDigits: 2,\n  })}`;\n}\n\n/** Fixed, bounded wording: no reset date, purchase remedy or invoice claim. */\nexport function sessionUsageLimitReachedMessage(refusal: {\n  limitMicros: number;\n  usedMicros: number;\n}): string {\n  return `This task's usage limit is reached (${formatSessionUsageMicros(refusal.usedMicros)} of ${formatSessionUsageMicros(refusal.limitMicros)} API-equivalent model usage). A person can raise or remove the limit to continue.`;\n}\n"],"mappings":";AAOO,IAAM,8BAA8B;AAEpC,IAAM,yCAAyC;AAEtD,IAAM,QAAQ;AACd,IAAM,mBAAmB,MAAa;AACtC,IAAM,yBAAyB;AAC/B,IAAM,OAAO;AAWb,SAAS,OAAO,OAAgD;AAC9D,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IACrE,QACD;AACN;AAEA,SAAS,OAAO,OAAgB,MAAM,OAAO,kBAAmC;AAC9E,SAAO,OAAO,UAAU,YAAY,OAAO,cAAc,KAAK,KAAK,SAAS,KAAK,SAAS;AAC5F;AAEA,SAAS,eAAe,OAAuB;AAC7C,QAAM,aAAa,MAChB,MAAM,GAAG,yBAAyB,CAAC,EACnC,QAAQ,2BAA2B,GAAG,EACtC,KAAK;AACR,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,UAAU;AACjD,MAAI,MAAM,KAAK,IAAI,MAAM,QAAQ,sBAAsB;AACvD,SAAO,MAAM,KAAK,MAAM,MAAM,WAAW,MAAM,GAAG,IAAK,SAAU,IAAM,QAAO;AAC9E,SAAO,IAAI,YAAY,EAAE,OAAO,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,KAAK;AAC5D;AAOO,SAAS,qCACd,OAC8C;AAC9C,QAAM,QAAQ,OAAO,KAAK;AAC1B,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAAS,OAAO,MAAM,iBAAiB,KAAK;AAClD,MAAI,OAAO,SAAS,8BAA+B,QAAO;AAC1D,QAAM,SAAS,OAAO,OAAO,OAAO,KAAK;AACzC,MACE,OAAO,UAAU,SACjB,OAAO,OAAO,kBAAkB,YAChC,CAAC,KAAK,KAAK,OAAO,aAAa,KAC/B,CAAC,OAAO,OAAO,aAAa,gBAAgB,KAC5C,CAAC,OAAO,OAAO,UAAU,GACzB;AACA,WAAO;AAAA,EACT;AACA,QAAM,UAAU;AAAA,IACd,MAAM;AAAA,IACN,OAAO;AAAA,IACP,eAAe,OAAO,cAAc,YAAY;AAAA,IAChD,aAAa,OAAO;AAAA,IACpB,YAAY,OAAO;AAAA,IACnB,SAAS;AAAA,EACX;AACA,QAAM,UAAU,OAAO,OAAO,YAAY,WAAW,eAAe,OAAO,OAAO,IAAI;AACtF,SAAO,EAAE,GAAG,SAAS,SAAS,WAAW,gCAAgC,OAAO,EAAE;AACpF;AAOO,SAAS,yBAAyB,OAAuB;AAC9D,MAAI,QAAQ,KAAK,QAAQ,IAAQ,QAAO;AACxC,QAAM,UAAU,QAAQ;AACxB,SAAO,IAAI,QAAQ,eAAe,SAAS;AAAA,IACzC,uBAAuB;AAAA,IACvB,uBAAuB;AAAA,EACzB,CAAC,CAAC;AACJ;AAGO,SAAS,gCAAgC,SAGrC;AACT,SAAO,uCAAuC,yBAAyB,QAAQ,UAAU,CAAC,OAAO,yBAAyB,QAAQ,WAAW,CAAC;AAChJ;","names":[]}

package/dist/{chunk-7ABONTXE.js → chunk-E3GGUBHS.js}

@@ -171,6 +171,34 @@ function stripAutomaticTitleBoilerplate(value) {
   }
   return title;
 }
+var AUTOMATIC_TITLE_TRAILING_PUNCTUATION = /[\s.!?,;:\-–—]+$/u;
+var TRAILING_WRAPPER_MARKS = /* @__PURE__ */ new Map([
+  ['"', null],
+  ["'", null],
+  ["`", null],
+  ["*", null],
+  ["\u201D", "\u201C"],
+  ["\u2019", "\u2018"],
+  ["\xBB", "\xAB"]
+]);
+function trimAutomaticTitleEnd(value) {
+  let title = value;
+  for (let pass = 0; pass < 4; pass += 1) {
+    const before = title;
+    title = title.replace(AUTOMATIC_TITLE_TRAILING_PUNCTUATION, "");
+    const last = title.at(-1);
+    const opening = last === void 0 ? void 0 : TRAILING_WRAPPER_MARKS.get(last);
+    if (last !== void 0 && opening !== void 0) {
+      let rest = title;
+      while (rest.endsWith(last)) rest = rest.slice(0, -last.length);
+      if (!rest.includes(last) && (opening === null || !rest.includes(opening))) {
+        title = rest;
+      }
+    }
+    if (title === before) break;
+  }
+  return title.trim();
+}
 function automaticTitleGraphemes(value) {
   if (titleSegmenter === void 0) {
     titleSegmenter = typeof Intl.Segmenter === "function" ? new Intl.Segmenter(void 0, { granularity: "grapheme" }) : null;
@@ -189,6 +217,17 @@ function automaticTitleGraphemes(value) {
   }
   return graphemes;
 }
+var MODEL_CONTROL_TOKEN = /<[|｜][^<>|｜\s]{1,64}[|｜]>/gu;
+function withoutModelControlTokens(value) {
+  return value.replace(MODEL_CONTROL_TOKEN, "\n");
+}
+function cleanStoredSessionTitle(title, titleSource) {
+  if (title === null || title === void 0) return null;
+  if (titleSource === "user") return title;
+  const stripped = withoutModelControlTokens(title);
+  if (stripped === title) return title;
+  return stripped.split("\n").map((part) => part.trim()).find(Boolean) ?? null;
+}
 function boundAutomaticSessionTitle(value) {
   const words = value.split(/\s+/u);
   const wordBounded = words.length > 10 ? words.slice(0, 10).join(" ") : value;
@@ -199,15 +238,17 @@ function boundAutomaticSessionTitle(value) {
   return (lastWhitespace >= 16 ? prefix.slice(0, lastWhitespace) : prefix).trimEnd();
 }
 function normalizeAutomaticSessionTitle(value) {
-  const firstLine = value.replace(/[\u0000-\u001f\u007f-\u009f]+/gu, "\n").split(/\n+/u).map((line) => line.trim()).find(Boolean);
+  const firstLine = withoutModelControlTokens(value).replace(/[\u0000-\u001f\u007f-\u009f]+/gu, "\n").split(/\n+/u).map((line) => line.trim()).find(Boolean);
   if (!firstLine || !hasVisibleAutomaticTitleContent(firstLine) || containsSensitiveAutomaticSessionTitleValue(firstLine)) {
     return null;
   }
-  let title = stripAutomaticTitleBoilerplate(firstLine).replace(/\s+/gu, " ").replace(/[\s.!?,;:\-–—]+$/u, "").trim();
+  let title = trimAutomaticTitleEnd(
+    stripAutomaticTitleBoilerplate(firstLine).replace(/\s+/gu, " ")
+  );
   if (!title || !hasVisibleAutomaticTitleContent(title) || containsSensitiveAutomaticSessionTitleValue(title)) {
     return null;
   }
-  title = boundAutomaticSessionTitle(title).replace(/[\s.!?,;:\-–—]+$/u, "").trim();
+  title = trimAutomaticTitleEnd(boundAutomaticSessionTitle(title));
   if (!title || !hasVisibleAutomaticTitleContent(title)) return null;
   return title;
 }
@@ -236,7 +277,8 @@ function deriveSessionDisplayTitle(input, options = {}) {
     return title || automaticSessionReferenceTitle(input.id);
   }
   if (title && !sessionTitleIsPending(input)) {
-    return title;
+    const clean = cleanStoredSessionTitle(title, input.titleSource)?.trim();
+    if (clean) return clean;
   }
   for (const key of options.metadataKeys ?? []) {
     const value = input.metadata?.[key];
@@ -251,11 +293,13 @@ export {
   SESSION_TITLE_MAX_CHARACTERS,
   AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES,
   AUTOMATIC_SESSION_TITLE_FALLBACK,
+  PROMPT_PREVIEW_SCAN_MAX_CODE_UNITS,
   containsSensitiveAutomaticSessionTitleValue,
+  cleanStoredSessionTitle,
   boundAutomaticSessionTitle,
   normalizeAutomaticSessionTitle,
   deriveAutomaticSessionTitlePreview,
   sessionTitleIsPending,
   deriveSessionDisplayTitle
 };
-//# sourceMappingURL=chunk-7ABONTXE.js.map
+//# sourceMappingURL=chunk-E3GGUBHS.js.map

package/dist/chunk-E3GGUBHS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/session-titles.ts"],"sourcesContent":["/** Human-authored session titles keep the existing public API ceiling. */\nexport const SESSION_TITLE_MAX_CHARACTERS = 200;\n\n/**\n * Automatic titles are intentionally much shorter than the manual rename\n * ceiling. This is measured in grapheme clusters so emoji and combining text\n * are never split into malformed display strings.\n */\nexport const AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES = 80;\n\n/**\n * Safe durable title used until semantic generation succeeds. It contains no\n * user prompt bytes, so provider failure/offline operation cannot leak a\n * credential or leave a raw prompt prefix in navigation surfaces.\n */\nexport const AUTOMATIC_SESSION_TITLE_FALLBACK = \"New conversation\";\n\n// Session creation accepts a body far larger than a navigation label. Bound\n// the source before any replace/split/normalization so a persisted large prompt\n// cannot amplify memory or CPU on every client render.\nexport const PROMPT_PREVIEW_SCAN_MAX_CODE_UNITS = 4_096;\n\nconst SESSION_ID_PATTERN =\n  /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu;\n\nlet titleSegmenter: Intl.Segmenter | null | undefined;\n\nconst KNOWN_SENSITIVE_VALUE_PATTERNS = [\n  /-----BEGIN [A-Z ]*PRIVATE KEY-----/iu,\n  /\\bBearer\\s+[A-Za-z0-9._~+/=-]{8,}/iu,\n  /\\b(?:sk-(?:proj-)?|gh[oprsu]_|github_pat_|glpat-|xox[baprs]-)[A-Za-z0-9_-]{8,}/iu,\n  /\\bAKIA[0-9A-Z]{16}\\b/u,\n  /\\bAIza[0-9A-Za-z_-]{20,}\\b/u,\n  /\\beyJ[A-Za-z0-9_-]+\\.eyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\b/u,\n  /[?&](?:access_token|api_key|apikey|password|secret|token)=[^\\s&#]+/iu,\n] as const;\n\nconst URI_SCHEME_CANDIDATE_PATTERN = /\\b[a-z][a-z0-9+.-]*:\\S+/giu;\nconst WINDOWS_DRIVE_PATH_PATTERN = /^[a-z]:[\\\\/](?![\\\\/])[^:]*$/iu;\n\nconst SCHEMELESS_HOST_CANDIDATE_PATTERN =\n  /\\b(?:www\\.)?(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\\.)+[a-z](?:[a-z0-9-]{0,61}[a-z0-9])?(?::\\d{1,5})?(?:[/?#][^\\s]*)?/giu;\n\nconst SCHEMELESS_LOCAL_NETWORK_PATTERNS = [\n  /\\blocalhost(?:(?::\\d{1,5})(?:[/?#][^\\s]*)?|[/?#][^\\s]*)/iu,\n  /\\b(?:(?:25[0-5]|2[0-4]\\d|1?\\d?\\d)\\.){3}(?:25[0-5]|2[0-4]\\d|1?\\d?\\d)(?:(?::\\d{1,5})(?:[/?#][^\\s]*)?|[/?#][^\\s]*)/u,\n  /\\[(?=[0-9a-f:.]*:[0-9a-f:.]*\\])[0-9a-f:.]+\\](?:(?::\\d{1,5})(?:[/?#][^\\s]*)?|[/?#][^\\s]*)/iu,\n] as const;\n\nconst FILE_LIKE_HOST_SUFFIXES = new Set([\n  \"css\",\n  \"html\",\n  \"js\",\n  \"json\",\n  \"jsx\",\n  \"lock\",\n  \"md\",\n  \"sql\",\n  \"toml\",\n  \"ts\",\n  \"tsx\",\n  \"xml\",\n  \"yaml\",\n  \"yml\",\n]);\n\n// These authorities are established framework/namespace notation whose exact\n// casing is meaningful. Keep this exception deliberately narrow: generic\n// PascalCase or uppercase authorities remain host-like because an uppercase\n// real domain (for example MICROSOFT.COM/Admin) must not bypass the URL gate.\nconst DOTTED_TECHNOLOGY_PATH_AUTHORITIES = new Set([\n  \"ASP.NET\",\n  \"AWS.SDK\",\n  \"Microsoft.Extensions\",\n  \"System.IO\",\n]);\n\nconst SECRET_ASSIGNMENT_CANDIDATE_PATTERN =\n  /(?:^|[^A-Za-z0-9])(?:(['\"])([A-Za-z][A-Za-z0-9_. -]*)\\1|([A-Za-z][A-Za-z0-9_.-]*))\\s*[=:]\\s*[^\\s,;]+/gu;\n\nconst SECRET_LABEL_ASSIGNMENT_PATTERN =\n  /\\b(?:api[ _-]?key|access[ _-]?token|auth[ _-]?token|credential|credentials|password|passwd|private[ _-]?key|secret|token)\\b\\s*[=:]\\s*[^\\s,;]+/iu;\n\nconst SENSITIVE_ASSIGNMENT_KEY_SUFFIXES = new Set([\n  \"credential\",\n  \"credentials\",\n  \"password\",\n  \"passwd\",\n  \"secret\",\n  \"token\",\n]);\n\nconst COMPACT_SENSITIVE_ASSIGNMENT_KEY_SUFFIXES = [\n  \"apikey\",\n  \"accesskey\",\n  \"accesskeyid\",\n  \"accesstoken\",\n  \"authtoken\",\n  \"credential\",\n  \"credentials\",\n  \"password\",\n  \"passwd\",\n  \"privatekey\",\n  \"secret\",\n  \"secretkey\",\n  \"token\",\n] as const;\n\nconst SENSITIVE_ASSIGNMENT_KEY_WORD_SUFFIXES = [\n  [\"api\", \"key\"],\n  [\"access\", \"key\"],\n  [\"access\", \"key\", \"id\"],\n  [\"auth\", \"key\"],\n  [\"private\", \"key\"],\n  [\"secret\", \"key\"],\n] as const;\n\nfunction hasWordSuffix(words: readonly string[], suffix: readonly string[]): boolean {\n  if (words.length < suffix.length) return false;\n  const offset = words.length - suffix.length;\n  return suffix.every((word, index) => words[offset + index] === word);\n}\n\nfunction containsSensitiveAssignment(value: string): boolean {\n  for (const match of value.matchAll(SECRET_ASSIGNMENT_CANDIDATE_PATTERN)) {\n    const key = match[2] ?? match[3];\n    if (!key) continue;\n    const words = key\n      .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n      .replace(/([A-Z]+)([A-Z][a-z])/g, \"$1 $2\")\n      .toLowerCase()\n      .split(/[^a-z0-9]+/)\n      .filter(Boolean);\n    const last = words.at(-1);\n    if (last && SENSITIVE_ASSIGNMENT_KEY_SUFFIXES.has(last)) return true;\n    if (last && COMPACT_SENSITIVE_ASSIGNMENT_KEY_SUFFIXES.some((suffix) => last.endsWith(suffix))) {\n      return true;\n    }\n    if (SENSITIVE_ASSIGNMENT_KEY_WORD_SUFFIXES.some((suffix) => hasWordSuffix(words, suffix))) {\n      return true;\n    }\n  }\n  return false;\n}\n\nfunction containsUriScheme(value: string): boolean {\n  for (const match of value.matchAll(URI_SCHEME_CANDIDATE_PATTERN)) {\n    // A Windows drive path is the one scheme-shaped token accepted here. Keep\n    // the exception exact: one separator after the drive letter and no later\n    // colon, so x://host and a nested scheme remain rejected.\n    if (!WINDOWS_DRIVE_PATH_PATTERN.test(match[0])) return true;\n  }\n  return false;\n}\n\nfunction isDottedTechnologyPath(candidate: string): boolean {\n  if (/[?:#]/u.test(candidate)) return false;\n  const [authority, ...pathSegments] = candidate.split(\"/\");\n  if (!authority || pathSegments.length === 0 || pathSegments.some((segment) => !segment)) {\n    return false;\n  }\n  if (\n    !DOTTED_TECHNOLOGY_PATH_AUTHORITIES.has(authority) ||\n    pathSegments.some((segment) => !/^[A-Z][A-Za-z0-9_-]*$/u.test(segment))\n  ) {\n    return false;\n  }\n  return true;\n}\n\nfunction containsSchemelessUrl(value: string): boolean {\n  if (SCHEMELESS_LOCAL_NETWORK_PATTERNS.some((pattern) => pattern.test(value))) return true;\n\n  for (const match of value.matchAll(SCHEMELESS_HOST_CANDIDATE_PATTERN)) {\n    const candidate = match[0];\n    if (candidate.toLowerCase().startsWith(\"www.\")) return true;\n    if (!/[/?#]/u.test(candidate)) continue;\n\n    const authority = candidate.split(/[/?#]/u, 1)[0] ?? \"\";\n    const hostname = authority.replace(/:\\d{1,5}$/u, \"\");\n    const suffix = hostname.split(\".\").at(-1)?.toLowerCase();\n    if (suffix && FILE_LIKE_HOST_SUFFIXES.has(suffix)) continue;\n    if (isDottedTechnologyPath(candidate)) continue;\n    return true;\n  }\n  return false;\n}\n\nconst OPAQUE_IDENTIFIER_PATTERN =\n  /\\b(?=[A-Za-z0-9_-]{32,}\\b)(?=[A-Za-z0-9_-]*[A-Za-z])(?=[A-Za-z0-9_-]*\\d)[A-Za-z0-9_-]+\\b/u;\n\nconst DEFAULT_IGNORABLE_CODE_POINTS = /\\p{Default_Ignorable_Code_Point}+/gu;\nconst ESCAPED_QUOTE_DELIMITERS = /\\\\+(?=[\"'])/gu;\n\nconst TITLE_LABEL_PATTERN =\n  /^(?:(?:suggested|generated|concise)\\s+)?(?:(?:session|chat|conversation|task)\\s+)?title\\s*[:\\-–—]\\s*/iu;\n\nconst LEADING_BOILERPLATE_PATTERNS = [\n  /^(?:hi|hello|hey)(?:\\s+there)?\\s*[,!:.\\-–—]*\\s*/iu,\n  /^(?:i\\s+(?:would\\s+like|want|need)\\s+you\\s+to|i['’]d\\s+like\\s+you\\s+to)\\s+/iu,\n  /^(?:please\\s+)?(?:can|could|would|will)\\s+you\\s+/iu,\n  /^(?:your|the)\\s+(?:task|job)\\s+is\\s+to\\s+/iu,\n  /^(?:please\\s+)?help\\s+me\\s+(?:to\\s+)?/iu,\n  /^please(?:\\s*[,!:.\\-–—]+\\s*|\\s+|$)/iu,\n] as const;\n\nfunction automaticTitleDetectionValue(value: string): string {\n  // Detection uses a compatibility-normalized shadow value so fullwidth\n  // punctuation/letters, invisible token splits, and serialized quote\n  // delimiters cannot evade the policy.\n  // The accepted title itself stays byte-for-byte in the user's language and\n  // emoji form; this shadow is never returned or persisted.\n  return value\n    .normalize(\"NFKC\")\n    .replace(DEFAULT_IGNORABLE_CODE_POINTS, \"\")\n    .replace(ESCAPED_QUOTE_DELIMITERS, \"\");\n}\n\nfunction hasVisibleAutomaticTitleContent(value: string): boolean {\n  return automaticTitleDetectionValue(value).trim().length > 0;\n}\n\n/**\n * Whether a bounded automatic-title candidate contains a credential, URL, or\n * opaque identifier that must stay out of navigation and other display-title\n * surfaces. Callers handling an unbounded source must bound it before invoking\n * this helper.\n */\nexport function containsSensitiveAutomaticSessionTitleValue(value: string): boolean {\n  const detectionValue = automaticTitleDetectionValue(value);\n\n  if (KNOWN_SENSITIVE_VALUE_PATTERNS.some((pattern) => pattern.test(detectionValue))) return true;\n  if (containsUriScheme(detectionValue)) return true;\n  if (containsSchemelessUrl(detectionValue)) return true;\n  if (SECRET_LABEL_ASSIGNMENT_PATTERN.test(detectionValue)) return true;\n  if (containsSensitiveAssignment(detectionValue)) return true;\n  if (OPAQUE_IDENTIFIER_PATTERN.test(detectionValue)) return true;\n  return false;\n}\n\nfunction stripAutomaticTitleBoilerplate(value: string): string {\n  let title = value;\n  for (let pass = 0; pass < 4; pass += 1) {\n    const before = title;\n    title = title\n      .replace(/^(?:```[^\\n]*|[\\s#>*_`\"'“”‘’\\-–—]+)+/u, \"\")\n      .replace(TITLE_LABEL_PATTERN, \"\");\n    for (const pattern of LEADING_BOILERPLATE_PATTERNS) {\n      title = title.replace(pattern, \"\");\n    }\n    title = title.trim();\n    if (title === before) break;\n  }\n  return title;\n}\n\nconst AUTOMATIC_TITLE_TRAILING_PUNCTUATION = /[\\s.!?,;:\\-–—]+$/u;\n\n// Closing quote and markdown marks, mapped to the distinct opening mark that\n// would pair with them inside the title.\nconst TRAILING_WRAPPER_MARKS = new Map<string, string | null>([\n  ['\"', null],\n  [\"'\", null],\n  [\"`\", null],\n  [\"*\", null],\n  [\"”\", \"“\"],\n  [\"’\", \"‘\"],\n  [\"»\", \"«\"],\n]);\n\n/**\n * Remove trailing punctuation and a closing quote or markdown mark whose\n * opening counterpart was already stripped as a leading wrapper, so\n * `\"Pod Crash Debugging\"` and `**Pod Crash Debugging**` do not keep a dangling\n * closing mark. A mark that still pairs with one inside the title stays.\n */\nfunction trimAutomaticTitleEnd(value: string): string {\n  let title = value;\n  for (let pass = 0; pass < 4; pass += 1) {\n    const before = title;\n    title = title.replace(AUTOMATIC_TITLE_TRAILING_PUNCTUATION, \"\");\n    const last = title.at(-1);\n    const opening = last === undefined ? undefined : TRAILING_WRAPPER_MARKS.get(last);\n    if (last !== undefined && opening !== undefined) {\n      let rest = title;\n      while (rest.endsWith(last)) rest = rest.slice(0, -last.length);\n      if (!rest.includes(last) && (opening === null || !rest.includes(opening))) {\n        title = rest;\n      }\n    }\n    if (title === before) break;\n  }\n  return title.trim();\n}\n\nfunction automaticTitleGraphemes(value: string): string[] {\n  if (titleSegmenter === undefined) {\n    titleSegmenter =\n      typeof Intl.Segmenter === \"function\"\n        ? new Intl.Segmenter(undefined, { granularity: \"grapheme\" })\n        : null;\n  }\n  if (titleSegmenter) {\n    return Array.from(titleSegmenter.segment(value), (part) => part.segment);\n  }\n\n  // Older embedded runtimes may not ship Intl.Segmenter. Preserve surrogate\n  // pairs plus common combining/emoji sequences instead of failing module load\n  // or slicing UTF-16 code units.\n  const graphemes: string[] = [];\n  for (const point of value) {\n    const prior = graphemes.at(-1);\n    if (\n      prior &&\n      (/^[\\p{Mark}\\u{FE0E}\\u{FE0F}\\p{Emoji_Modifier}]$/u.test(point) ||\n        point === \"\\u200d\" ||\n        prior.endsWith(\"\\u200d\"))\n    ) {\n      graphemes[graphemes.length - 1] = `${prior}${point}`;\n    } else {\n      graphemes.push(point);\n    }\n  }\n  return graphemes;\n}\n\n/**\n * Model control tokens such as `<|fim_suffix|>`, `<|im_end|>` or `<｜end▁of▁sentence｜>`\n * sometimes leak into generated text. They are never title content: each one\n * becomes a line break, so a title keeps only its first real segment.\n */\nconst MODEL_CONTROL_TOKEN = /<[|｜][^<>|｜\\s]{1,64}[|｜]>/gu;\n\nfunction withoutModelControlTokens(value: string): string {\n  return value.replace(MODEL_CONTROL_TOKEN, \"\\n\");\n}\n\n/**\n * Read-side cleanup for a durable title. Automatic titles written before\n * control-token stripping can still hold a token (\"Release plan<|fim_suffix|>\");\n * those keep only their first real segment, and a token-only title reads as no\n * title. Human renames and titles without a token are returned unchanged.\n */\nexport function cleanStoredSessionTitle(\n  title: string | null | undefined,\n  titleSource: string | null | undefined,\n): string | null {\n  if (title === null || title === undefined) return null;\n  if (titleSource === \"user\") return title;\n  const stripped = withoutModelControlTokens(title);\n  if (stripped === title) return title;\n  return (\n    stripped\n      .split(\"\\n\")\n      .map((part) => part.trim())\n      .find(Boolean) ?? null\n  );\n}\n\n/** Bound an already-normalized automatic-title candidate without splitting graphemes. */\nexport function boundAutomaticSessionTitle(value: string): string {\n  const words = value.split(/\\s+/u);\n  const wordBounded = words.length > 10 ? words.slice(0, 10).join(\" \") : value;\n  const graphemes = automaticTitleGraphemes(wordBounded);\n  if (graphemes.length <= AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES) return wordBounded;\n\n  const prefix = graphemes.slice(0, AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES).join(\"\");\n  const lastWhitespace = prefix.search(/\\s+\\S*$/u);\n  return (lastWhitespace >= 16 ? prefix.slice(0, lastWhitespace) : prefix).trimEnd();\n}\n\n/**\n * Normalize a model/system-authored title before it reaches durable session\n * metadata. Human renames intentionally do not use this path.\n *\n * Returns null when the candidate is empty, only boilerplate, or appears to\n * contain a credential/opaque prompt value. Callers should retain the current\n * title (normally {@link AUTOMATIC_SESSION_TITLE_FALLBACK}) in that case.\n */\nexport function normalizeAutomaticSessionTitle(value: string): string | null {\n  const firstLine = withoutModelControlTokens(value)\n    .replace(/[\\u0000-\\u001f\\u007f-\\u009f]+/gu, \"\\n\")\n    .split(/\\n+/u)\n    .map((line) => line.trim())\n    .find(Boolean);\n  if (\n    !firstLine ||\n    !hasVisibleAutomaticTitleContent(firstLine) ||\n    containsSensitiveAutomaticSessionTitleValue(firstLine)\n  ) {\n    return null;\n  }\n\n  let title = trimAutomaticTitleEnd(\n    stripAutomaticTitleBoilerplate(firstLine).replace(/\\s+/gu, \" \"),\n  );\n  if (\n    !title ||\n    !hasVisibleAutomaticTitleContent(title) ||\n    containsSensitiveAutomaticSessionTitleValue(title)\n  ) {\n    return null;\n  }\n\n  title = trimAutomaticTitleEnd(boundAutomaticSessionTitle(title));\n  if (!title || !hasVisibleAutomaticTitleContent(title)) return null;\n  return title;\n}\n\nexport type SessionDisplayTitleInput = {\n  id?: string | null | undefined;\n  title?: string | null | undefined;\n  titleSource?: \"user\" | \"agent\" | null | undefined;\n  initialMessage?: string | null | undefined;\n  metadata?: Readonly<Record<string, unknown>> | undefined;\n};\n\nexport type SessionDisplayTitleOptions = {\n  /** Optional metadata fields to try before the opening-prompt preview. */\n  metadataKeys?: readonly string[] | undefined;\n};\n\n/**\n * Derive a bounded, sensitive-safe preview from the opening prompt.\n *\n * Unsafe leading lines are skipped instead of forcing the whole session back\n * to a generic label. This covers prompts that begin with a pasted URL or\n * identifier followed by an ordinary natural-language request on the next\n * line, without putting the rejected value into navigation surfaces.\n */\nexport function deriveAutomaticSessionTitlePreview(value: unknown): string | null {\n  if (typeof value !== \"string\") return null;\n\n  const lines = value\n    .slice(0, PROMPT_PREVIEW_SCAN_MAX_CODE_UNITS)\n    .replace(/[\\u0000-\\u001f\\u007f-\\u009f]+/gu, \"\\n\")\n    .split(/\\n+/u);\n\n  for (const candidate of lines) {\n    const line = candidate.trim();\n    if (!line || containsSensitiveAutomaticSessionTitleValue(line)) continue;\n\n    const preview = boundAutomaticSessionTitle(line.replace(/\\s+/gu, \" \"))\n      .replace(/[\\s.!?,;:\\-–—]+$/u, \"\")\n      .trim();\n    if (preview) return preview;\n  }\n\n  return null;\n}\n\nfunction automaticSessionReferenceTitle(id: unknown): string {\n  const sessionId = typeof id === \"string\" ? id.trim() : \"\";\n  return SESSION_ID_PATTERN.test(sessionId)\n    ? `Conversation ${sessionId.slice(0, 13)}`\n    : AUTOMATIC_SESSION_TITLE_FALLBACK;\n}\n\n/**\n * Whether the durable title still represents the automatic-title pending state.\n * A user-authored title always wins, even when its literal value is the marker.\n */\nexport function sessionTitleIsPending(input: SessionDisplayTitleInput): boolean {\n  const title = input.title?.trim() ?? \"\";\n  return input.titleSource !== \"user\" && (!title || title === AUTOMATIC_SESSION_TITLE_FALLBACK);\n}\n\n/**\n * Derive the title a human-facing client should display for a session.\n *\n * A semantic agent title or human rename wins. While automatic naming is still\n * pending, clients show a short, sensitive-safe preview of the opening prompt.\n * If no safe prompt text exists, a UUID-derived reference keeps real sessions\n * distinguishable without exposing prompt bytes. The durable pending marker is\n * therefore an internal lifecycle value rather than the ordinary visible name.\n */\nexport function deriveSessionDisplayTitle(\n  input: SessionDisplayTitleInput,\n  options: SessionDisplayTitleOptions = {},\n): string {\n  const title = input.title?.trim() ?? \"\";\n  if (input.titleSource === \"user\") {\n    return title || automaticSessionReferenceTitle(input.id);\n  }\n  if (title && !sessionTitleIsPending(input)) {\n    const clean = cleanStoredSessionTitle(title, input.titleSource)?.trim();\n    if (clean) return clean;\n  }\n\n  for (const key of options.metadataKeys ?? []) {\n    const value = input.metadata?.[key];\n    if (typeof value === \"string\" && value.trim().length > 0) {\n      return value.trim();\n    }\n  }\n\n  return (\n    deriveAutomaticSessionTitlePreview(input.initialMessage) ??\n    automaticSessionReferenceTitle(input.id)\n  );\n}\n"],"mappings":";AACO,IAAM,+BAA+B;AAOrC,IAAM,wCAAwC;AAO9C,IAAM,mCAAmC;AAKzC,IAAM,qCAAqC;AAElD,IAAM,qBACJ;AAEF,IAAI;AAEJ,IAAM,iCAAiC;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,+BAA+B;AACrC,IAAM,6BAA6B;AAEnC,IAAM,oCACJ;AAEF,IAAM,oCAAoC;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,0BAA0B,oBAAI,IAAI;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMD,IAAM,qCAAqC,oBAAI,IAAI;AAAA,EACjD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,sCACJ;AAEF,IAAM,kCACJ;AAEF,IAAM,oCAAoC,oBAAI,IAAI;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,4CAA4C;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,yCAAyC;AAAA,EAC7C,CAAC,OAAO,KAAK;AAAA,EACb,CAAC,UAAU,KAAK;AAAA,EAChB,CAAC,UAAU,OAAO,IAAI;AAAA,EACtB,CAAC,QAAQ,KAAK;AAAA,EACd,CAAC,WAAW,KAAK;AAAA,EACjB,CAAC,UAAU,KAAK;AAClB;AAEA,SAAS,cAAc,OAA0B,QAAoC;AACnF,MAAI,MAAM,SAAS,OAAO,OAAQ,QAAO;AACzC,QAAM,SAAS,MAAM,SAAS,OAAO;AACrC,SAAO,OAAO,MAAM,CAAC,MAAM,UAAU,MAAM,SAAS,KAAK,MAAM,IAAI;AACrE;AAEA,SAAS,4BAA4B,OAAwB;AAC3D,aAAW,SAAS,MAAM,SAAS,mCAAmC,GAAG;AACvE,UAAM,MAAM,MAAM,CAAC,KAAK,MAAM,CAAC;AAC/B,QAAI,CAAC,IAAK;AACV,UAAM,QAAQ,IACX,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,yBAAyB,OAAO,EACxC,YAAY,EACZ,MAAM,YAAY,EAClB,OAAO,OAAO;AACjB,UAAM,OAAO,MAAM,GAAG,EAAE;AACxB,QAAI,QAAQ,kCAAkC,IAAI,IAAI,EAAG,QAAO;AAChE,QAAI,QAAQ,0CAA0C,KAAK,CAAC,WAAW,KAAK,SAAS,MAAM,CAAC,GAAG;AAC7F,aAAO;AAAA,IACT;AACA,QAAI,uCAAuC,KAAK,CAAC,WAAW,cAAc,OAAO,MAAM,CAAC,GAAG;AACzF,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,OAAwB;AACjD,aAAW,SAAS,MAAM,SAAS,4BAA4B,GAAG;AAIhE,QAAI,CAAC,2BAA2B,KAAK,MAAM,CAAC,CAAC,EAAG,QAAO;AAAA,EACzD;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB,WAA4B;AAC1D,MAAI,SAAS,KAAK,SAAS,EAAG,QAAO;AACrC,QAAM,CAAC,WAAW,GAAG,YAAY,IAAI,UAAU,MAAM,GAAG;AACxD,MAAI,CAAC,aAAa,aAAa,WAAW,KAAK,aAAa,KAAK,CAAC,YAAY,CAAC,OAAO,GAAG;AACvF,WAAO;AAAA,EACT;AACA,MACE,CAAC,mCAAmC,IAAI,SAAS,KACjD,aAAa,KAAK,CAAC,YAAY,CAAC,yBAAyB,KAAK,OAAO,CAAC,GACtE;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,OAAwB;AACrD,MAAI,kCAAkC,KAAK,CAAC,YAAY,QAAQ,KAAK,KAAK,CAAC,EAAG,QAAO;AAErF,aAAW,SAAS,MAAM,SAAS,iCAAiC,GAAG;AACrE,UAAM,YAAY,MAAM,CAAC;AACzB,QAAI,UAAU,YAAY,EAAE,WAAW,MAAM,EAAG,QAAO;AACvD,QAAI,CAAC,SAAS,KAAK,SAAS,EAAG;AAE/B,UAAM,YAAY,UAAU,MAAM,UAAU,CAAC,EAAE,CAAC,KAAK;AACrD,UAAM,WAAW,UAAU,QAAQ,cAAc,EAAE;AACnD,UAAM,SAAS,SAAS,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,YAAY;AACvD,QAAI,UAAU,wBAAwB,IAAI,MAAM,EAAG;AACnD,QAAI,uBAAuB,SAAS,EAAG;AACvC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,IAAM,4BACJ;AAEF,IAAM,gCAAgC;AACtC,IAAM,2BAA2B;AAEjC,IAAM,sBACJ;AAEF,IAAM,+BAA+B;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,6BAA6B,OAAuB;AAM3D,SAAO,MACJ,UAAU,MAAM,EAChB,QAAQ,+BAA+B,EAAE,EACzC,QAAQ,0BAA0B,EAAE;AACzC;AAEA,SAAS,gCAAgC,OAAwB;AAC/D,SAAO,6BAA6B,KAAK,EAAE,KAAK,EAAE,SAAS;AAC7D;AAQO,SAAS,4CAA4C,OAAwB;AAClF,QAAM,iBAAiB,6BAA6B,KAAK;AAEzD,MAAI,+BAA+B,KAAK,CAAC,YAAY,QAAQ,KAAK,cAAc,CAAC,EAAG,QAAO;AAC3F,MAAI,kBAAkB,cAAc,EAAG,QAAO;AAC9C,MAAI,sBAAsB,cAAc,EAAG,QAAO;AAClD,MAAI,gCAAgC,KAAK,cAAc,EAAG,QAAO;AACjE,MAAI,4BAA4B,cAAc,EAAG,QAAO;AACxD,MAAI,0BAA0B,KAAK,cAAc,EAAG,QAAO;AAC3D,SAAO;AACT;AAEA,SAAS,+BAA+B,OAAuB;AAC7D,MAAI,QAAQ;AACZ,WAAS,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG;AACtC,UAAM,SAAS;AACf,YAAQ,MACL,QAAQ,yCAAyC,EAAE,EACnD,QAAQ,qBAAqB,EAAE;AAClC,eAAW,WAAW,8BAA8B;AAClD,cAAQ,MAAM,QAAQ,SAAS,EAAE;AAAA,IACnC;AACA,YAAQ,MAAM,KAAK;AACnB,QAAI,UAAU,OAAQ;AAAA,EACxB;AACA,SAAO;AACT;AAEA,IAAM,uCAAuC;AAI7C,IAAM,yBAAyB,oBAAI,IAA2B;AAAA,EAC5D,CAAC,KAAK,IAAI;AAAA,EACV,CAAC,KAAK,IAAI;AAAA,EACV,CAAC,KAAK,IAAI;AAAA,EACV,CAAC,KAAK,IAAI;AAAA,EACV,CAAC,UAAK,QAAG;AAAA,EACT,CAAC,UAAK,QAAG;AAAA,EACT,CAAC,QAAK,MAAG;AACX,CAAC;AAQD,SAAS,sBAAsB,OAAuB;AACpD,MAAI,QAAQ;AACZ,WAAS,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG;AACtC,UAAM,SAAS;AACf,YAAQ,MAAM,QAAQ,sCAAsC,EAAE;AAC9D,UAAM,OAAO,MAAM,GAAG,EAAE;AACxB,UAAM,UAAU,SAAS,SAAY,SAAY,uBAAuB,IAAI,IAAI;AAChF,QAAI,SAAS,UAAa,YAAY,QAAW;AAC/C,UAAI,OAAO;AACX,aAAO,KAAK,SAAS,IAAI,EAAG,QAAO,KAAK,MAAM,GAAG,CAAC,KAAK,MAAM;AAC7D,UAAI,CAAC,KAAK,SAAS,IAAI,MAAM,YAAY,QAAQ,CAAC,KAAK,SAAS,OAAO,IAAI;AACzE,gBAAQ;AAAA,MACV;AAAA,IACF;AACA,QAAI,UAAU,OAAQ;AAAA,EACxB;AACA,SAAO,MAAM,KAAK;AACpB;AAEA,SAAS,wBAAwB,OAAyB;AACxD,MAAI,mBAAmB,QAAW;AAChC,qBACE,OAAO,KAAK,cAAc,aACtB,IAAI,KAAK,UAAU,QAAW,EAAE,aAAa,WAAW,CAAC,IACzD;AAAA,EACR;AACA,MAAI,gBAAgB;AAClB,WAAO,MAAM,KAAK,eAAe,QAAQ,KAAK,GAAG,CAAC,SAAS,KAAK,OAAO;AAAA,EACzE;AAKA,QAAM,YAAsB,CAAC;AAC7B,aAAW,SAAS,OAAO;AACzB,UAAM,QAAQ,UAAU,GAAG,EAAE;AAC7B,QACE,UACC,kDAAkD,KAAK,KAAK,KAC3D,UAAU,YACV,MAAM,SAAS,QAAQ,IACzB;AACA,gBAAU,UAAU,SAAS,CAAC,IAAI,GAAG,KAAK,GAAG,KAAK;AAAA,IACpD,OAAO;AACL,gBAAU,KAAK,KAAK;AAAA,IACtB;AAAA,EACF;AACA,SAAO;AACT;AAOA,IAAM,sBAAsB;AAE5B,SAAS,0BAA0B,OAAuB;AACxD,SAAO,MAAM,QAAQ,qBAAqB,IAAI;AAChD;AAQO,SAAS,wBACd,OACA,aACe;AACf,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,MAAI,gBAAgB,OAAQ,QAAO;AACnC,QAAM,WAAW,0BAA0B,KAAK;AAChD,MAAI,aAAa,MAAO,QAAO;AAC/B,SACE,SACG,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,KAAK,OAAO,KAAK;AAExB;AAGO,SAAS,2BAA2B,OAAuB;AAChE,QAAM,QAAQ,MAAM,MAAM,MAAM;AAChC,QAAM,cAAc,MAAM,SAAS,KAAK,MAAM,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,IAAI;AACvE,QAAM,YAAY,wBAAwB,WAAW;AACrD,MAAI,UAAU,UAAU,sCAAuC,QAAO;AAEtE,QAAM,SAAS,UAAU,MAAM,GAAG,qCAAqC,EAAE,KAAK,EAAE;AAChF,QAAM,iBAAiB,OAAO,OAAO,UAAU;AAC/C,UAAQ,kBAAkB,KAAK,OAAO,MAAM,GAAG,cAAc,IAAI,QAAQ,QAAQ;AACnF;AAUO,SAAS,+BAA+B,OAA8B;AAC3E,QAAM,YAAY,0BAA0B,KAAK,EAC9C,QAAQ,mCAAmC,IAAI,EAC/C,MAAM,MAAM,EACZ,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,KAAK,OAAO;AACf,MACE,CAAC,aACD,CAAC,gCAAgC,SAAS,KAC1C,4CAA4C,SAAS,GACrD;AACA,WAAO;AAAA,EACT;AAEA,MAAI,QAAQ;AAAA,IACV,+BAA+B,SAAS,EAAE,QAAQ,SAAS,GAAG;AAAA,EAChE;AACA,MACE,CAAC,SACD,CAAC,gCAAgC,KAAK,KACtC,4CAA4C,KAAK,GACjD;AACA,WAAO;AAAA,EACT;AAEA,UAAQ,sBAAsB,2BAA2B,KAAK,CAAC;AAC/D,MAAI,CAAC,SAAS,CAAC,gCAAgC,KAAK,EAAG,QAAO;AAC9D,SAAO;AACT;AAuBO,SAAS,mCAAmC,OAA+B;AAChF,MAAI,OAAO,UAAU,SAAU,QAAO;AAEtC,QAAM,QAAQ,MACX,MAAM,GAAG,kCAAkC,EAC3C,QAAQ,mCAAmC,IAAI,EAC/C,MAAM,MAAM;AAEf,aAAW,aAAa,OAAO;AAC7B,UAAM,OAAO,UAAU,KAAK;AAC5B,QAAI,CAAC,QAAQ,4CAA4C,IAAI,EAAG;AAEhE,UAAM,UAAU,2BAA2B,KAAK,QAAQ,SAAS,GAAG,CAAC,EAClE,QAAQ,qBAAqB,EAAE,EAC/B,KAAK;AACR,QAAI,QAAS,QAAO;AAAA,EACtB;AAEA,SAAO;AACT;AAEA,SAAS,+BAA+B,IAAqB;AAC3D,QAAM,YAAY,OAAO,OAAO,WAAW,GAAG,KAAK,IAAI;AACvD,SAAO,mBAAmB,KAAK,SAAS,IACpC,gBAAgB,UAAU,MAAM,GAAG,EAAE,CAAC,KACtC;AACN;AAMO,SAAS,sBAAsB,OAA0C;AAC9E,QAAM,QAAQ,MAAM,OAAO,KAAK,KAAK;AACrC,SAAO,MAAM,gBAAgB,WAAW,CAAC,SAAS,UAAU;AAC9D;AAWO,SAAS,0BACd,OACA,UAAsC,CAAC,GAC/B;AACR,QAAM,QAAQ,MAAM,OAAO,KAAK,KAAK;AACrC,MAAI,MAAM,gBAAgB,QAAQ;AAChC,WAAO,SAAS,+BAA+B,MAAM,EAAE;AAAA,EACzD;AACA,MAAI,SAAS,CAAC,sBAAsB,KAAK,GAAG;AAC1C,UAAM,QAAQ,wBAAwB,OAAO,MAAM,WAAW,GAAG,KAAK;AACtE,QAAI,MAAO,QAAO;AAAA,EACpB;AAEA,aAAW,OAAO,QAAQ,gBAAgB,CAAC,GAAG;AAC5C,UAAM,QAAQ,MAAM,WAAW,GAAG;AAClC,QAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,GAAG;AACxD,aAAO,MAAM,KAAK;AAAA,IACpB;AAAA,EACF;AAEA,SACE,mCAAmC,MAAM,cAAc,KACvD,+BAA+B,MAAM,EAAE;AAE3C;","names":[]}