@opengeni/core 0.28.0 → 1.0.0

package/dist/canonical-human-identities.js

@@ -1,23 +1,36 @@
 import {
-  getManagedSession
-} from "./chunk-IBOEYG6N.js";
+  getManagedAuthRequestActorAdmissionStamp,
+  getManagedAuthRequestActorLeaseStamp,
+  getManagedSession,
+  markManagedAuthRequestActorTransitionApplied
+} from "./chunk-MM6N7CTO.js";
+import "./chunk-QO5GVFFO.js";
 
 // src/canonical-human-identities.ts
 import { HTTPException } from "hono/http-exception";
 async function requireCanonicalHumanRequestIdentity(context, input) {
   if (!input.managedAuth) {
-    throw new HTTPException(404, { message: "Canonical human identity is unavailable" });
+    throw new HTTPException(404, {
+      message: "Canonical human identity is unavailable"
+    });
   }
   const session = await getManagedSession(context, input.managedAuth, {
     db: input.db,
+    sessionAdapter: input.managedAuthSessionAdapter,
+    sessionSetMode: input.managedAuthSessionSetMode,
     ...input.allowRecovery === void 0 ? {} : { allowIdentityRecovery: input.allowRecovery }
   });
   if (!session?.user || typeof session.session?.id !== "string") {
-    throw new HTTPException(401, { message: "Managed human authentication required" });
+    throw new HTTPException(401, {
+      message: "Managed human authentication required"
+    });
   }
   return { authUserId: session.user.id, authSessionId: session.session.id };
 }
 export {
+  getManagedAuthRequestActorAdmissionStamp,
+  getManagedAuthRequestActorLeaseStamp,
+  markManagedAuthRequestActorTransitionApplied,
   requireCanonicalHumanRequestIdentity
 };
 //# sourceMappingURL=canonical-human-identities.js.map

package/dist/canonical-human-identities.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/canonical-human-identities.ts"],"sourcesContent":["import type { Database } from \"@opengeni/db\";\nimport type { Context } from \"hono\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ManagedAuth } from \"./managed-auth-type\";\nimport { getManagedSession } from \"./managed-session\";\n\nexport type CanonicalHumanRequestIdentity = {\n  authUserId: string;\n  authSessionId: string;\n};\n\nexport async function requireCanonicalHumanRequestIdentity(\n  context: Context,\n  input: { db: Database; managedAuth?: ManagedAuth | null; allowRecovery?: boolean },\n): Promise<CanonicalHumanRequestIdentity> {\n  if (!input.managedAuth) {\n    throw new HTTPException(404, { message: \"Canonical human identity is unavailable\" });\n  }\n  const session = await getManagedSession(context, input.managedAuth, {\n    db: input.db,\n    ...(input.allowRecovery === undefined ? {} : { allowIdentityRecovery: input.allowRecovery }),\n  });\n  if (!session?.user || typeof session.session?.id !== \"string\") {\n    throw new HTTPException(401, { message: \"Managed human authentication required\" });\n  }\n  return { authUserId: session.user.id, authSessionId: session.session.id };\n}\n"],"mappings":";;;;;AAEA,SAAS,qBAAqB;AAS9B,eAAsB,qCACpB,SACA,OACwC;AACxC,MAAI,CAAC,MAAM,aAAa;AACtB,UAAM,IAAI,cAAc,KAAK,EAAE,SAAS,0CAA0C,CAAC;AAAA,EACrF;AACA,QAAM,UAAU,MAAM,kBAAkB,SAAS,MAAM,aAAa;AAAA,IAClE,IAAI,MAAM;AAAA,IACV,GAAI,MAAM,kBAAkB,SAAY,CAAC,IAAI,EAAE,uBAAuB,MAAM,cAAc;AAAA,EAC5F,CAAC;AACD,MAAI,CAAC,SAAS,QAAQ,OAAO,QAAQ,SAAS,OAAO,UAAU;AAC7D,UAAM,IAAI,cAAc,KAAK,EAAE,SAAS,wCAAwC,CAAC;AAAA,EACnF;AACA,SAAO,EAAE,YAAY,QAAQ,KAAK,IAAI,eAAe,QAAQ,QAAQ,GAAG;AAC1E;","names":[]}
+{"version":3,"sources":["../src/canonical-human-identities.ts"],"sourcesContent":["import type { Database } from \"@opengeni/db\";\nimport type { Context } from \"hono\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ManagedAuth } from \"./managed-auth-type\";\nimport { getManagedSession } from \"./managed-session\";\nexport {\n  getManagedAuthRequestActorAdmissionStamp,\n  getManagedAuthRequestActorLeaseStamp,\n  markManagedAuthRequestActorTransitionApplied,\n} from \"./managed-session\";\nimport type { ManagedAuthSessionAdapter } from \"./managed-auth-session-sets\";\nimport type { ManagedAuthSessionSetMode } from \"@opengeni/contracts/managed-auth-session-sets\";\n\nexport type CanonicalHumanRequestIdentity = {\n  authUserId: string;\n  authSessionId: string;\n};\n\nexport async function requireCanonicalHumanRequestIdentity(\n  context: Context,\n  input: {\n    db: Database;\n    managedAuth?: ManagedAuth | null | undefined;\n    managedAuthSessionAdapter?: ManagedAuthSessionAdapter | null | undefined;\n    managedAuthSessionSetMode?: ManagedAuthSessionSetMode | undefined;\n    allowRecovery?: boolean | undefined;\n  },\n): Promise<CanonicalHumanRequestIdentity> {\n  if (!input.managedAuth) {\n    throw new HTTPException(404, {\n      message: \"Canonical human identity is unavailable\",\n    });\n  }\n  const session = await getManagedSession(context, input.managedAuth, {\n    db: input.db,\n    sessionAdapter: input.managedAuthSessionAdapter,\n    sessionSetMode: input.managedAuthSessionSetMode,\n    ...(input.allowRecovery === undefined ? {} : { allowIdentityRecovery: input.allowRecovery }),\n  });\n  if (!session?.user || typeof session.session?.id !== \"string\") {\n    throw new HTTPException(401, {\n      message: \"Managed human authentication required\",\n    });\n  }\n  return { authUserId: session.user.id, authSessionId: session.session.id };\n}\n"],"mappings":";;;;;;;;;AAEA,SAAS,qBAAqB;AAgB9B,eAAsB,qCACpB,SACA,OAOwC;AACxC,MAAI,CAAC,MAAM,aAAa;AACtB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,QAAM,UAAU,MAAM,kBAAkB,SAAS,MAAM,aAAa;AAAA,IAClE,IAAI,MAAM;AAAA,IACV,gBAAgB,MAAM;AAAA,IACtB,gBAAgB,MAAM;AAAA,IACtB,GAAI,MAAM,kBAAkB,SAAY,CAAC,IAAI,EAAE,uBAAuB,MAAM,cAAc;AAAA,EAC5F,CAAC;AACD,MAAI,CAAC,SAAS,QAAQ,OAAO,QAAQ,SAAS,OAAO,UAAU;AAC7D,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,SAAO,EAAE,YAAY,QAAQ,KAAK,IAAI,eAAe,QAAQ,QAAQ,GAAG;AAC1E;","names":[]}

package/dist/{chunk-6WKPWE5S.js → chunk-2MKMRGSY.js}

@@ -25,15 +25,39 @@ import {
   editableArtifactSnapshotId,
   editableArtifactStateHash,
   validateEditableArtifactActor
-} from "./chunk-JJU6I5XD.js";
+} from "./chunk-LCQXNR62.js";
 
 // src/domain/editable-artifacts/durable-export.ts
 import { createHash } from "crypto";
 var EDITABLE_ARTIFACT_EXPORT_MAX_DOWNLOAD_BYTES = 512 * 1024 * 1024;
 var EDITABLE_ARTIFACT_EXPORT_MAX_OPTIONS_BYTES = 256 * 1024;
+var EDITABLE_ARTIFACT_EXPORT_FORMATS = Object.freeze({
+  spreadsheet: Object.freeze(["xlsx"]),
+  document: Object.freeze([]),
+  presentation: Object.freeze([])
+});
+function describeEditableArtifactExportFormats() {
+  return describeConfiguredExportFormats(EDITABLE_ARTIFACT_EXPORT_FORMATS);
+}
+function describeConfiguredExportFormats(configuredFormats) {
+  const entries = Object.entries(configuredFormats);
+  const supported = entries.filter(([, formats]) => formats.length > 0).map(([modality, formats]) => `${modality} \u2192 ${formats.join(", ")}`);
+  const none = entries.filter(([, formats]) => formats.length === 0).map(([modality]) => modality);
+  return [
+    supported.length > 0 ? `Supported exports: ${supported.join("; ")}.` : "No exports are available.",
+    none.length > 0 ? `${none.join(" and ")} artifacts cannot be exported yet (no PDF, DOCX, PPTX, or image export); share the live artifact with its artifactReference link instead.` : ""
+  ].filter(Boolean).join(" ");
+}
+function unsupportedEditableArtifactExport(modality, format, formats = EDITABLE_ARTIFACT_EXPORT_FORMATS) {
+  const listed = formats[modality].includes(format);
+  return new EditableArtifactDurableExportError(
+    "unsupported_format",
+    listed ? `unsupported_format: this deployment does not serve a ${format} export of a ${modality} artifact with these options; retry with options omitted. ${describeConfiguredExportFormats(formats)}` : `unsupported_format: a ${modality} artifact cannot be exported as ${format}. ${describeConfiguredExportFormats(formats)}`
+  );
+}
 var EditableArtifactDurableExportError = class extends Error {
-  constructor(code) {
-    super(code);
+  constructor(code, message) {
+    super(message ?? code);
     this.code = code;
     this.name = "EditableArtifactDurableExportError";
   }
@@ -47,6 +71,30 @@ var EditableArtifactDurableExportService = class {
   constructor(dependencies) {
     this.dependencies = dependencies;
   }
+  describeFormats() {
+    const formats = this.dependencies.profiles.supportedFormats;
+    return formats ? describeConfiguredExportFormats(formats) : "Export formats are determined by this deployment's configured exporter; unsupported format/options combinations are refused before pinning.";
+  }
+  /** Read-only exact preflight: no snapshot, ID allocation, or store write. */
+  async preflight(input) {
+    const format = materializationFormat(input.format);
+    const options = exactOptions(input.options ?? Object.freeze({}));
+    const profile = await this.dependencies.profiles.resolve({
+      modality: input.modality,
+      format,
+      options
+    });
+    if (!profile) {
+      const formats = this.dependencies.profiles.supportedFormats;
+      if (formats) throw unsupportedEditableArtifactExport(input.modality, format, formats);
+      throw new EditableArtifactDurableExportError(
+        "unsupported_format",
+        `unsupported_format: this deployment does not serve ${input.modality} \u2192 ${format} with these options. ${this.describeFormats()}`
+      );
+    }
+    validateProfile(profile, input.modality, format);
+    return profile;
+  }
   async pinVersion(input) {
     const context = normalizeContext(input);
     const idempotencyKey = portableIdempotencyKey(input.idempotencyKey);
@@ -88,13 +136,11 @@ var EditableArtifactDurableExportService = class {
     const format = materializationFormat(input.format);
     const options = exactOptions(input.options ?? Object.freeze({}));
     const version = await this.getVersion(context, versionId);
-    const profile = await this.dependencies.profiles.resolve({
+    const profile = await this.preflight({
       modality: version.modality,
       format,
       options
     });
-    if (!profile) throw new EditableArtifactDurableExportError("unsupported_format");
-    validateProfile(profile, version.modality, format);
     const requestHash = hashPublicRequest("materialize", [
       idempotencyKey,
       versionId,
@@ -423,15 +469,13 @@ function validateEditableArtifactMaterializationJob(job) {
 
 // src/domain/editable-artifacts/agent-application.ts
 import { createHash as createHash2 } from "crypto";
-import {
-  COMMITTED_TRANSACTION_PROTOCOL_VERSION,
-  EDITABLE_ARTIFACT_MODEL_SCHEMA_VERSION
-} from "@opengeni/contracts/editable-artifact-versions";
 import {
   DOCUMENT_ARTIFACT_COMMAND_VERSION,
+  EDITABLE_ARTIFACT_INTENT_PROTOCOL_VERSION,
   EDITABLE_ARTIFACT_INTENT_VERSION,
   PRESENTATION_ARTIFACT_COMMAND_VERSION,
   SPREADSHEET_ARTIFACT_COMMAND_VERSION,
+  currentEditableArtifactCompatibility,
   decodeEditableArtifactMutationIntent,
   decodeDocumentArtifactQueryResponse,
   decodePresentationArtifactQueryResponse,
@@ -455,6 +499,9 @@ var EditableArtifactAgentApplication = class {
   constructor(dependencies) {
     this.dependencies = dependencies;
   }
+  describeExportFormats() {
+    return this.dependencies.exports.describeFormats();
+  }
   async list(input) {
     const context = agentContext(input);
     const limit = boundedLimit(input.limit ?? 64);
@@ -543,8 +590,18 @@ var EditableArtifactAgentApplication = class {
     const queryBytes = encodeQuery(input.request);
     const responseBytes = await this.dependencies.inspector.query({ state, queryBytes });
     const projection = decodeQueryResponse(input.request.modality, responseBytes);
+    const inspectionReceiptId = state.modality === "document" ? await this.dependencies.recordInspection?.({
+      ...context,
+      artifact: projectArtifact(state.artifact),
+      queryHash: createHash2("sha256").update(queryBytes).digest("hex"),
+      queryKind: input.request.query.kind
+    }) : void 0;
     await this.touch(context, artifactId);
-    return Object.freeze({ artifact: projectArtifact(state.artifact), projection });
+    return Object.freeze({
+      artifact: projectArtifact(state.artifact),
+      projection,
+      ...inspectionReceiptId ? { inspectionReceiptId } : {}
+    });
   }
   async apply(input) {
     const context = agentContext(input);
@@ -586,8 +643,8 @@ var EditableArtifactAgentApplication = class {
     }
     const authored = hashEditableArtifactMutationIntent({
       envelopeVersion: EDITABLE_ARTIFACT_INTENT_VERSION,
-      protocolVersion: COMMITTED_TRANSACTION_PROTOCOL_VERSION,
-      modelSchemaVersion: EDITABLE_ARTIFACT_MODEL_SCHEMA_VERSION,
+      protocolVersion: EDITABLE_ARTIFACT_INTENT_PROTOCOL_VERSION,
+      modelSchemaVersion: currentEditableArtifactCompatibility(input.batch.modality).modelSchemaVersion,
       commandProtocolVersion: commandProtocolVersion(input.batch.modality),
       artifactId,
       clientTransactionId,
@@ -646,6 +703,11 @@ var EditableArtifactAgentApplication = class {
       actor: context.actor,
       artifactId
     });
+    await this.dependencies.exports.preflight({
+      modality: artifact.modality,
+      format: input.format,
+      ...input.options ? { options: input.options } : {}
+    });
     const version = await this.dependencies.exports.pinVersion({
       scope: context.scope,
       actor: context.actor,
@@ -738,12 +800,21 @@ function agentContext(input) {
 }
 function encodeCommands(batch) {
   if (batch.modality === "spreadsheet") {
-    return encodeSpreadsheetArtifactCommandBatch({ version: 1, commands: batch.commands });
+    return encodeSpreadsheetArtifactCommandBatch({
+      version: SPREADSHEET_ARTIFACT_COMMAND_VERSION,
+      commands: batch.commands
+    });
   }
   if (batch.modality === "document") {
-    return encodeDocumentArtifactCommandBatch({ version: 1, commands: batch.commands });
+    return encodeDocumentArtifactCommandBatch({
+      version: DOCUMENT_ARTIFACT_COMMAND_VERSION,
+      commands: batch.commands
+    });
   }
-  return encodePresentationArtifactCommandBatch({ version: 1, commands: batch.commands });
+  return encodePresentationArtifactCommandBatch({
+    version: PRESENTATION_ARTIFACT_COMMAND_VERSION,
+    commands: batch.commands
+  });
 }
 function encodeQuery(request) {
   if (request.modality === "spreadsheet") {
@@ -765,6 +836,7 @@ function commandProtocolVersion(modality) {
 function projectArtifact(artifact) {
   return Object.freeze({
     id: artifact.id,
+    artifactReference: `[Open report](/workspaces/${artifact.scope.workspaceId}/artifacts/editable/${artifact.id})`,
     modality: artifact.modality,
     title: artifact.title,
     lifecycle: artifact.lifecycle,
@@ -1216,6 +1288,9 @@ var InMemoryEditableArtifactStore = class {
     });
   }
   async readTransactionBasis(scope, artifactId, request) {
+    if (request.authorizeCommit) {
+      throw new TypeError("Transactional artifact authority requires a PostgreSQL store");
+    }
     const normalizedScope = editableArtifactScope(scope);
     const normalizedArtifactId = editableArtifactId(artifactId);
     const key = aggregateKey(normalizedScope, normalizedArtifactId);
@@ -1265,6 +1340,9 @@ var InMemoryEditableArtifactStore = class {
     });
   }
   async tryCommitAppliedTransaction(request) {
+    if (request.authorizeCommit) {
+      throw new TypeError("Transactional artifact authority requires a PostgreSQL store");
+    }
     const scope = editableArtifactScope(request.scope);
     const artifactId = editableArtifactId(request.artifactId);
     const key = aggregateKey(scope, artifactId);
@@ -2072,6 +2150,8 @@ function editableArtifactLiveTicketStorePortFromPostgres(store) {
 
 // src/domain/editable-artifacts/snapshot-compaction.ts
 import { BoundedObjectWriteError } from "@opengeni/storage";
+import { EDITABLE_ARTIFACT_CODEC_REGISTRY } from "@opengeni/contracts/editable-artifacts";
+import { COMMITTED_TRANSACTION_PROTOCOL_VERSION } from "@opengeni/contracts/editable-artifact-committed-transaction";
 var SNAPSHOT_MIME_TYPE = "application/vnd.opengeni.editable-artifact-snapshot";
 var EditableArtifactCompactionPipeline = class {
   #dependencies;
@@ -2148,6 +2228,7 @@ function validateBasis(state, scope, artifactId) {
   }
 }
 function validateGenerated(value, state, scope, artifactId) {
+  const currentCodec = EDITABLE_ARTIFACT_CODEC_REGISTRY[value.modality];
   if (value.scope.accountId !== scope.accountId || value.scope.workspaceId !== scope.workspaceId || value.artifactId !== artifactId || value.modality !== state.modality) {
     throw new EditableArtifactSnapshotVerificationError("identity_mismatch");
   }
@@ -2161,8 +2242,7 @@ function validateGenerated(value, state, scope, artifactId) {
     throw new EditableArtifactSnapshotVerificationError("limit_exceeded");
   }
   editableArtifactContentHash(value.canonicalContentHash);
-  const versions = value.modality === "spreadsheet" ? [value.modelSchemaVersion, value.operationProtocolVersion, value.crdtStateVersion] : [value.modelSchemaVersion];
-  if (versions.some((version) => !Number.isSafeInteger(version) || version <= 0)) {
+  if (value.modelSchemaVersion !== currentCodec.modelSchemaVersion || value.modality === "spreadsheet" && (value.operationProtocolVersion !== COMMITTED_TRANSACTION_PROTOCOL_VERSION || value.crdtStateVersion !== currentCodec.snapshotVersion)) {
     throw new EditableArtifactSnapshotVerificationError("version_mismatch");
   }
   try {
@@ -2189,6 +2269,8 @@ function throwIfCancelled(signal) {
 
 // src/domain/editable-artifacts/snapshot-verifier-genesis.ts
 import { BoundedObjectWriteError as BoundedObjectWriteError2 } from "@opengeni/storage";
+import { EDITABLE_ARTIFACT_CODEC_REGISTRY as EDITABLE_ARTIFACT_CODEC_REGISTRY2 } from "@opengeni/contracts/editable-artifacts";
+import { COMMITTED_TRANSACTION_PROTOCOL_VERSION as COMMITTED_TRANSACTION_PROTOCOL_VERSION2 } from "@opengeni/contracts/editable-artifact-committed-transaction";
 var SNAPSHOT_MIME_TYPE2 = "application/vnd.opengeni.editable-artifact-snapshot";
 var EditableArtifactGenesisPipeline = class {
   #dependencies;
@@ -2265,6 +2347,7 @@ var EditableArtifactGenesisPipeline = class {
   }
 };
 function validateGeneratedGenesis(value, scope, artifactId, modality) {
+  const currentCodec = EDITABLE_ARTIFACT_CODEC_REGISTRY2[value.modality];
   if (value.scope.accountId !== scope.accountId || value.scope.workspaceId !== scope.workspaceId || value.artifactId !== artifactId || value.modality !== modality) {
     throw new EditableArtifactSnapshotVerificationError("identity_mismatch");
   }
@@ -2276,11 +2359,8 @@ function validateGeneratedGenesis(value, scope, artifactId, modality) {
   }
   editableArtifactContentHash(value.canonicalContentHash);
   editableArtifactStateHash(value.stateHash);
-  const versions = value.modality === "spreadsheet" ? [value.modelSchemaVersion, value.operationProtocolVersion, value.crdtStateVersion] : [value.modelSchemaVersion];
-  for (const version of versions) {
-    if (!Number.isSafeInteger(version) || version <= 0) {
-      throw new EditableArtifactSnapshotVerificationError("version_mismatch");
-    }
+  if (value.modelSchemaVersion !== currentCodec.modelSchemaVersion || value.modality === "spreadsheet" && (value.operationProtocolVersion !== COMMITTED_TRANSACTION_PROTOCOL_VERSION2 || value.crdtStateVersion !== currentCodec.snapshotVersion)) {
+    throw new EditableArtifactSnapshotVerificationError("version_mismatch");
   }
   try {
     assertBoundedKernelVersion(value.kernelVersion);
@@ -2356,6 +2436,10 @@ function editableArtifactMaterializationKey(input) {
 export {
   EDITABLE_ARTIFACT_EXPORT_MAX_DOWNLOAD_BYTES,
   EDITABLE_ARTIFACT_EXPORT_MAX_OPTIONS_BYTES,
+  EDITABLE_ARTIFACT_EXPORT_FORMATS,
+  describeEditableArtifactExportFormats,
+  describeConfiguredExportFormats,
+  unsupportedEditableArtifactExport,
   EditableArtifactDurableExportError,
   EditableArtifactDurableExportService,
   editableArtifactMaterializationMimeType,
@@ -2377,4 +2461,4 @@ export {
   EditableArtifactGenesisPipeline,
   editableArtifactMaterializationKey
 };
-//# sourceMappingURL=chunk-6WKPWE5S.js.map
+//# sourceMappingURL=chunk-2MKMRGSY.js.map