@orthacms/copilot-server 0.0.0-reserve.0

package/dist/lib/infrastructure/model-registry.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildModelRegistry = buildModelRegistry;
+const copilot_domain_1 = require("@orthacms/copilot-domain");
+/**
+ * Builds an immutable {@link ModelRegistry} over the host's provider list.
+ * Bound to `MODEL_REGISTRY` at the composition root; the resolver returns a
+ * name, the core looks the provider up here.
+ *
+ * Registration order is preserved, so {@link ModelRegistry.catalogue} renders
+ * in the order the operator wrote — the first entry reads as the house default.
+ *
+ * @throws When a name is blank or registered twice. A list can express both,
+ *   unlike a map, so the guard has to be explicit — and silently dropping one
+ *   of two same-named providers would route runs to a backend nobody chose.
+ */
+function buildModelRegistry(registrations) {
+    // Snapshot into a **null-prototype** object so a later mutation of the
+    // host's list can't reroute a run mid-flight, and a lookup of
+    // `constructor`/`toString` misses instead of resolving something off
+    // `Object.prototype` that is not a provider.
+    const entries = Object.create(null);
+    const order = [];
+    for (const { name, provider } of registrations) {
+        if (!name.trim()) {
+            throw new Error('Every copilot model provider needs a non-empty name — it is what a run, and a resolver, refer to it by.');
+        }
+        if (Object.prototype.hasOwnProperty.call(entries, name)) {
+            throw new Error(`Duplicate copilot model provider name "${name}". Names must be unique across the provider list.`);
+        }
+        entries[name] = provider;
+        order.push(name);
+    }
+    return {
+        get(name) {
+            const provider = entries[name];
+            if (!provider) {
+                throw new copilot_domain_1.UnknownModelProviderError(name, [...order]);
+            }
+            return provider;
+        },
+        has(name) {
+            return Object.prototype.hasOwnProperty.call(entries, name);
+        },
+        names() {
+            return [...order];
+        },
+        catalogue() {
+            return order.flatMap((name) => entries[name]
+                .models()
+                .map((model) => ({ provider: name, model })));
+        }
+    };
+}

package/dist/lib/skills/application/dto/create-skill.dto.d.ts

@@ -0,0 +1,36 @@
+import { type SkillMode } from '@orthacms/copilot-domain';
+/** The two modes, as a value the strict pipe can check against. */
+export declare const SKILL_MODES: readonly SkillMode[];
+/**
+ * Body of `POST /api/copilot/skills`.
+ *
+ * The bounds come from `@orthacms/copilot-domain` rather than being repeated
+ * here, because the same numbers govern the host's boot-time validation of
+ * code-defined skills — one set of limits, whichever way a skill was written.
+ */
+export declare class CreateSkillDto {
+    /**
+     * Machine name. Refused if the workspace, or a code-defined skill, already
+     * holds it — a name resolves to exactly one body or the model's
+     * instructions become a matter of row order.
+     */
+    name: string;
+    /** What a person reads in the picker and on a chip. */
+    title: string;
+    /**
+     * When to use it, written for the model — and **required**. It is the only
+     * thing in the prompt for a skill nobody has attached, so a skill without
+     * one exists but can never be found.
+     */
+    description: string;
+    /**
+     * The body — prompt text, not content. Bounded because it is spent from the
+     * same context window the conversation and the tool results come out of.
+     */
+    instructions: string;
+    /** `always` puts it in force on every run in the workspace. */
+    mode?: SkillMode;
+    /** Defaults to on. */
+    enabled?: boolean;
+}
+//# sourceMappingURL=create-skill.dto.d.ts.map

package/dist/lib/skills/application/dto/create-skill.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-skill.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/skills/application/dto/create-skill.dto.ts"],"names":[],"mappings":"AAWA,OAAO,EAMH,KAAK,SAAS,EACjB,MAAM,0BAA0B,CAAC;AAElC,mEAAmE;AACnE,eAAO,MAAM,WAAW,EAAE,SAAS,SAAS,EAAyB,CAAC;AAQtE;;;;;;GAMG;AACH,qBAAa,cAAc;IACvB;;;;OAIG;IAcH,IAAI,EAAG,MAAM,CAAC;IAEd,uDAAuD;IAUvD,KAAK,EAAG,MAAM,CAAC;IAEf;;;;OAIG;IAUH,WAAW,EAAG,MAAM,CAAC;IAErB;;;OAGG;IAQH,YAAY,EAAG,MAAM,CAAC;IAEtB,+DAA+D;IAI/D,IAAI,CAAC,EAAE,SAAS,CAAC;IAEjB,sBAAsB;IAItB,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB"}

package/dist/lib/skills/application/dto/create-skill.dto.js

@@ -0,0 +1,106 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateSkillDto = exports.SKILL_MODES = void 0;
+const tslib_1 = require("tslib");
+const swagger_1 = require("@nestjs/swagger");
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const copilot_domain_1 = require("@orthacms/copilot-domain");
+/** The two modes, as a value the strict pipe can check against. */
+exports.SKILL_MODES = ['manual', 'always'];
+/** Trims a string value during transformation, before the validators run. */
+const trimmed = () => (0, class_transformer_1.Transform)(({ value }) => typeof value === 'string' ? value.trim() : value);
+/**
+ * Body of `POST /api/copilot/skills`.
+ *
+ * The bounds come from `@orthacms/copilot-domain` rather than being repeated
+ * here, because the same numbers govern the host's boot-time validation of
+ * code-defined skills — one set of limits, whichever way a skill was written.
+ */
+class CreateSkillDto {
+    /**
+     * Machine name. Refused if the workspace, or a code-defined skill, already
+     * holds it — a name resolves to exactly one body or the model's
+     * instructions become a matter of row order.
+     */
+    name;
+    /** What a person reads in the picker and on a chip. */
+    title;
+    /**
+     * When to use it, written for the model — and **required**. It is the only
+     * thing in the prompt for a skill nobody has attached, so a skill without
+     * one exists but can never be found.
+     */
+    description;
+    /**
+     * The body — prompt text, not content. Bounded because it is spent from the
+     * same context window the conversation and the tool results come out of.
+     */
+    instructions;
+    /** `always` puts it in force on every run in the workspace. */
+    mode;
+    /** Defaults to on. */
+    enabled;
+}
+exports.CreateSkillDto = CreateSkillDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        type: String,
+        maxLength: copilot_domain_1.MAX_SKILL_NAME_LENGTH,
+        pattern: copilot_domain_1.SKILL_NAME_PATTERN.source,
+        example: 'house-style'
+    }),
+    trimmed(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(copilot_domain_1.MAX_SKILL_NAME_LENGTH),
+    (0, class_validator_1.Matches)(copilot_domain_1.SKILL_NAME_PATTERN, {
+        message: 'name must be lowercase letters, digits and hyphens, e.g. "house-style"'
+    }),
+    tslib_1.__metadata("design:type", String)
+], CreateSkillDto.prototype, "name", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        type: String,
+        maxLength: copilot_domain_1.MAX_SKILL_TITLE_LENGTH,
+        example: 'House style'
+    }),
+    trimmed(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(copilot_domain_1.MAX_SKILL_TITLE_LENGTH),
+    tslib_1.__metadata("design:type", String)
+], CreateSkillDto.prototype, "title", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        type: String,
+        maxLength: copilot_domain_1.MAX_SKILL_DESCRIPTION_LENGTH,
+        example: 'How we write product copy: sentence case, second person.'
+    }),
+    trimmed(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(copilot_domain_1.MAX_SKILL_DESCRIPTION_LENGTH),
+    tslib_1.__metadata("design:type", String)
+], CreateSkillDto.prototype, "description", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        type: String,
+        maxLength: copilot_domain_1.MAX_SKILL_INSTRUCTIONS_LENGTH
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(copilot_domain_1.MAX_SKILL_INSTRUCTIONS_LENGTH),
+    tslib_1.__metadata("design:type", String)
+], CreateSkillDto.prototype, "instructions", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ enum: exports.SKILL_MODES, default: 'manual' }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsIn)(exports.SKILL_MODES),
+    tslib_1.__metadata("design:type", String)
+], CreateSkillDto.prototype, "mode", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ type: Boolean, default: true }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    tslib_1.__metadata("design:type", Boolean)
+], CreateSkillDto.prototype, "enabled", void 0);

package/dist/lib/skills/application/dto/update-skill.dto.d.ts

@@ -0,0 +1,28 @@
+import { type SkillMode } from '@orthacms/copilot-domain';
+/**
+ * Body of `PATCH /api/copilot/skills/:id`.
+ *
+ * A **patch**: every property is optional and only the ones present are
+ * written. The controller rejects an empty body — answering 200 to it would
+ * report success for a write that never happened.
+ *
+ * Not `PartialType(CreateSkillDto)`: the generated class would inherit whatever
+ * `CreateSkillDto` grows later, and this endpoint deliberately does not accept
+ * everything a create does (there is no `workspaceId` to move a skill between
+ * workspaces with, and there never should be).
+ */
+export declare class UpdateSkillDto {
+    /** Rename. Refused if the new name is taken, by either source. */
+    name?: string;
+    /** New display title. */
+    title?: string;
+    /** New description. */
+    description?: string;
+    /** New body. */
+    instructions?: string;
+    /** Switch between always-on and attach-to-use. */
+    mode?: SkillMode;
+    /** Turn the skill off without deleting it. */
+    enabled?: boolean;
+}
+//# sourceMappingURL=update-skill.dto.d.ts.map

package/dist/lib/skills/application/dto/update-skill.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-skill.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/skills/application/dto/update-skill.dto.ts"],"names":[],"mappings":"AAWA,OAAO,EAMH,KAAK,SAAS,EACjB,MAAM,0BAA0B,CAAC;AAQlC;;;;;;;;;;;GAWG;AACH,qBAAa,cAAc;IACvB,kEAAkE;IAclE,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,yBAAyB;IAOzB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,uBAAuB;IAUvB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,gBAAgB;IAShB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,kDAAkD;IAIlD,IAAI,CAAC,EAAE,SAAS,CAAC;IAEjB,8CAA8C;IAI9C,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB"}

package/dist/lib/skills/application/dto/update-skill.dto.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateSkillDto = void 0;
+const tslib_1 = require("tslib");
+const swagger_1 = require("@nestjs/swagger");
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const copilot_domain_1 = require("@orthacms/copilot-domain");
+const create_skill_dto_1 = require("./create-skill.dto");
+const trimmed = () => (0, class_transformer_1.Transform)(({ value }) => typeof value === 'string' ? value.trim() : value);
+/**
+ * Body of `PATCH /api/copilot/skills/:id`.
+ *
+ * A **patch**: every property is optional and only the ones present are
+ * written. The controller rejects an empty body — answering 200 to it would
+ * report success for a write that never happened.
+ *
+ * Not `PartialType(CreateSkillDto)`: the generated class would inherit whatever
+ * `CreateSkillDto` grows later, and this endpoint deliberately does not accept
+ * everything a create does (there is no `workspaceId` to move a skill between
+ * workspaces with, and there never should be).
+ */
+class UpdateSkillDto {
+    /** Rename. Refused if the new name is taken, by either source. */
+    name;
+    /** New display title. */
+    title;
+    /** New description. */
+    description;
+    /** New body. */
+    instructions;
+    /** Switch between always-on and attach-to-use. */
+    mode;
+    /** Turn the skill off without deleting it. */
+    enabled;
+}
+exports.UpdateSkillDto = UpdateSkillDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: String,
+        maxLength: copilot_domain_1.MAX_SKILL_NAME_LENGTH,
+        pattern: copilot_domain_1.SKILL_NAME_PATTERN.source
+    }),
+    (0, class_validator_1.IsOptional)(),
+    trimmed(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(copilot_domain_1.MAX_SKILL_NAME_LENGTH),
+    (0, class_validator_1.Matches)(copilot_domain_1.SKILL_NAME_PATTERN, {
+        message: 'name must be lowercase letters, digits and hyphens, e.g. "house-style"'
+    }),
+    tslib_1.__metadata("design:type", String)
+], UpdateSkillDto.prototype, "name", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ type: String, maxLength: copilot_domain_1.MAX_SKILL_TITLE_LENGTH }),
+    (0, class_validator_1.IsOptional)(),
+    trimmed(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(copilot_domain_1.MAX_SKILL_TITLE_LENGTH),
+    tslib_1.__metadata("design:type", String)
+], UpdateSkillDto.prototype, "title", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: String,
+        maxLength: copilot_domain_1.MAX_SKILL_DESCRIPTION_LENGTH
+    }),
+    (0, class_validator_1.IsOptional)(),
+    trimmed(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(copilot_domain_1.MAX_SKILL_DESCRIPTION_LENGTH),
+    tslib_1.__metadata("design:type", String)
+], UpdateSkillDto.prototype, "description", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: String,
+        maxLength: copilot_domain_1.MAX_SKILL_INSTRUCTIONS_LENGTH
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(copilot_domain_1.MAX_SKILL_INSTRUCTIONS_LENGTH),
+    tslib_1.__metadata("design:type", String)
+], UpdateSkillDto.prototype, "instructions", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ enum: create_skill_dto_1.SKILL_MODES }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsIn)(create_skill_dto_1.SKILL_MODES),
+    tslib_1.__metadata("design:type", String)
+], UpdateSkillDto.prototype, "mode", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ type: Boolean }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    tslib_1.__metadata("design:type", Boolean)
+], UpdateSkillDto.prototype, "enabled", void 0);

package/dist/lib/skills/application/skill-catalog.service.d.ts

@@ -0,0 +1,97 @@
+import { type Skill, type SkillRegistry } from '@orthacms/copilot-domain';
+import { SkillRepository } from '../infrastructure/persistence/skill.repository';
+/**
+ * A skill as the picker and the manage page render it — **never** carrying
+ * `instructions`.
+ *
+ * The body is withheld from the list on purpose. Everyone with `copilot:use`
+ * can read this route, and while a skill's text is not a secret, it is also not
+ * something a picker needs: shipping it would put an 8 000-character body per
+ * skill into a request the composer makes on every mount. The manage page,
+ * which does need it, reads one skill at a time behind
+ * `copilot:skills:manage`.
+ */
+export interface SkillSummary {
+    /** Row id for a CMS skill; `null` for a code-defined one, which has none. */
+    id: string | null;
+    name: string;
+    title: string;
+    description: string;
+    mode: Skill['mode'];
+    source: Skill['source'];
+    /** Always true in the run catalogue; the manage list shows both. */
+    enabled: boolean;
+    /**
+     * Whether this deployment lets the skill be edited here. False for code
+     * skills, so the manage page can render them read-only rather than
+     * offering a form whose save is refused.
+     */
+    editable: boolean;
+}
+/** Thrown when a run names skills that do not resolve in its workspace. */
+export declare class SkillResolutionError extends Error {
+    constructor(message: string);
+}
+/**
+ * The one place the two sources of skills become one catalogue.
+ *
+ * Code skills come from the registry the host built at boot; CMS skills come
+ * from this workspace's rows. `mergeSkills` decides collisions (code wins), and
+ * everything downstream — the picker, the prompt, the run resolver — reads the
+ * merged view rather than either source.
+ */
+export declare class SkillCatalogService {
+    private readonly registry;
+    private readonly repository;
+    constructor(registry: SkillRegistry, repository: SkillRepository);
+    /**
+     * Every skill a run in this workspace could use: the deployment's code
+     * skills plus the workspace's **enabled** rows.
+     */
+    available(workspaceId: string): Promise<Skill[]>;
+    /** The picker's view — the available catalogue, without the bodies. */
+    catalogue(workspaceId: string): Promise<SkillSummary[]>;
+    /**
+     * The manage page's view — code skills (read-only) and **every** CMS row,
+     * disabled ones included.
+     *
+     * A shadowed row is still listed, because the manage page is the only place
+     * anyone could discover that a deploy has taken its name over; hiding it
+     * would leave an admin editing a skill that silently never runs.
+     */
+    manageList(workspaceId: string): Promise<SkillSummary[]>;
+    /** Whether a name is already taken in this workspace, by either source. */
+    nameTaken(name: string, workspaceId: string, exceptId?: string): Promise<'code' | 'cms' | null>;
+    /**
+     * What one run needs to know about skills: everything the workspace offers,
+     * and the subset in force.
+     *
+     * Both together in one call because the prompt needs both and they come
+     * from the same query — the bodies of the active ones, and one line each
+     * for the rest so the model can recommend one it was not given.
+     */
+    resolveRunSkills(workspaceId: string, requested: readonly string[]): Promise<{
+        available: Skill[];
+        inForce: Skill[];
+    }>;
+    /**
+     * The skills one run actually runs with: the workspace's always-on skills,
+     * then the ones the person attached, de-duplicated.
+     *
+     * **Always-on first.** They are the workspace's standing instructions and
+     * an attached skill is the specific request on top of them, so the specific
+     * one reads last — closest to the message, which is where a model resolves
+     * a conflict in its favour.
+     *
+     * @throws {SkillResolutionError} When a requested name does not resolve.
+     *   The message names a **count**, never which name: this resolver is
+     *   workspace-scoped, so "belongs to another workspace" and "was just
+     *   deleted" are indistinguishable here, and saying which would turn the one
+     *   place a caller picks names into an oracle for other workspaces' skills.
+     *   Same rule the attachment resolver follows.
+     */
+    resolveForRun(workspaceId: string, requested: readonly string[]): Promise<Skill[]>;
+    /** The pure half of {@link resolveForRun}, over an already-loaded catalogue. */
+    private selectInForce;
+}
+//# sourceMappingURL=skill-catalog.service.d.ts.map

package/dist/lib/skills/application/skill-catalog.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-catalog.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/skills/application/skill-catalog.service.ts"],"names":[],"mappings":"AACA,OAAO,EAEH,KAAK,KAAK,EACV,KAAK,aAAa,EACrB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACH,eAAe,EAElB,MAAM,gDAAgD,CAAC;AAExD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,YAAY;IACzB,6EAA6E;IAC7E,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxB,oEAAoE;IACpE,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CAAC;CACrB;AAED,2EAA2E;AAC3E,qBAAa,oBAAqB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI9B;AAED;;;;;;;GAOG;AACH,qBACa,mBAAmB;IAGxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,QAAQ,EAAE,aAAa,EACvB,UAAU,EAAE,eAAe;IAGhD;;;OAGG;IACG,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAKtD,uEAAuE;IACjE,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAQ7D;;;;;;;OAOG;IACG,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAmB9D,2EAA2E;IACrE,SAAS,CACX,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,QAAQ,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC;IAWjC;;;;;;;OAOG;IACG,gBAAgB,CAClB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,SAAS,MAAM,EAAE,GAC7B,OAAO,CAAC;QAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAAC,OAAO,EAAE,KAAK,EAAE,CAAA;KAAE,CAAC;IAQpD;;;;;;;;;;;;;;;OAeG;IACG,aAAa,CACf,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,SAAS,MAAM,EAAE,GAC7B,OAAO,CAAC,KAAK,EAAE,CAAC;IAInB,gFAAgF;IAChF,OAAO,CAAC,aAAa;CA+BxB"}

package/dist/lib/skills/application/skill-catalog.service.js

@@ -0,0 +1,157 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SkillCatalogService = exports.SkillResolutionError = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const copilot_domain_1 = require("@orthacms/copilot-domain");
+const copilot_tokens_1 = require("../../copilot.tokens");
+const skill_repository_1 = require("../infrastructure/persistence/skill.repository");
+/** Thrown when a run names skills that do not resolve in its workspace. */
+class SkillResolutionError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'SkillResolutionError';
+    }
+}
+exports.SkillResolutionError = SkillResolutionError;
+/**
+ * The one place the two sources of skills become one catalogue.
+ *
+ * Code skills come from the registry the host built at boot; CMS skills come
+ * from this workspace's rows. `mergeSkills` decides collisions (code wins), and
+ * everything downstream — the picker, the prompt, the run resolver — reads the
+ * merged view rather than either source.
+ */
+let SkillCatalogService = class SkillCatalogService {
+    registry;
+    repository;
+    constructor(registry, repository) {
+        this.registry = registry;
+        this.repository = repository;
+    }
+    /**
+     * Every skill a run in this workspace could use: the deployment's code
+     * skills plus the workspace's **enabled** rows.
+     */
+    async available(workspaceId) {
+        const rows = await this.repository.list(workspaceId, true);
+        return (0, copilot_domain_1.mergeSkills)(this.registry.all(), rows);
+    }
+    /** The picker's view — the available catalogue, without the bodies. */
+    async catalogue(workspaceId) {
+        const rows = await this.repository.list(workspaceId, true);
+        const byName = new Map(rows.map((row) => [row.name, row]));
+        return (0, copilot_domain_1.mergeSkills)(this.registry.all(), rows).map((skill) => toSummary(skill, byName.get(skill.name) ?? null, true));
+    }
+    /**
+     * The manage page's view — code skills (read-only) and **every** CMS row,
+     * disabled ones included.
+     *
+     * A shadowed row is still listed, because the manage page is the only place
+     * anyone could discover that a deploy has taken its name over; hiding it
+     * would leave an admin editing a skill that silently never runs.
+     */
+    async manageList(workspaceId) {
+        const rows = await this.repository.list(workspaceId);
+        const shadowed = new Set(rows
+            .filter((row) => this.registry.has(row.name))
+            .map((row) => row.name));
+        return [
+            ...this.registry.all().map((skill) => toSummary(skill, null, true)),
+            ...rows.map((row) => ({
+                ...toSummary(row, row, row.enabled),
+                // A shadowed row can be edited (renaming it is the fix) but is
+                // reported as not enabled, because it is not: the code skill
+                // holds the name and this row never reaches a run.
+                enabled: row.enabled && !shadowed.has(row.name)
+            }))
+        ];
+    }
+    /** Whether a name is already taken in this workspace, by either source. */
+    async nameTaken(name, workspaceId, exceptId) {
+        if (this.registry.has(name)) {
+            return 'code';
+        }
+        const existing = await this.repository.findByName(name, workspaceId);
+        if (existing && existing.id !== exceptId) {
+            return 'cms';
+        }
+        return null;
+    }
+    /**
+     * What one run needs to know about skills: everything the workspace offers,
+     * and the subset in force.
+     *
+     * Both together in one call because the prompt needs both and they come
+     * from the same query — the bodies of the active ones, and one line each
+     * for the rest so the model can recommend one it was not given.
+     */
+    async resolveRunSkills(workspaceId, requested) {
+        const available = await this.available(workspaceId);
+        return {
+            available,
+            inForce: this.selectInForce(available, requested)
+        };
+    }
+    /**
+     * The skills one run actually runs with: the workspace's always-on skills,
+     * then the ones the person attached, de-duplicated.
+     *
+     * **Always-on first.** They are the workspace's standing instructions and
+     * an attached skill is the specific request on top of them, so the specific
+     * one reads last — closest to the message, which is where a model resolves
+     * a conflict in its favour.
+     *
+     * @throws {SkillResolutionError} When a requested name does not resolve.
+     *   The message names a **count**, never which name: this resolver is
+     *   workspace-scoped, so "belongs to another workspace" and "was just
+     *   deleted" are indistinguishable here, and saying which would turn the one
+     *   place a caller picks names into an oracle for other workspaces' skills.
+     *   Same rule the attachment resolver follows.
+     */
+    async resolveForRun(workspaceId, requested) {
+        return this.selectInForce(await this.available(workspaceId), requested);
+    }
+    /** The pure half of {@link resolveForRun}, over an already-loaded catalogue. */
+    selectInForce(available, requested) {
+        const always = available.filter((skill) => skill.mode === 'always');
+        if (requested.length === 0) {
+            return always;
+        }
+        const byName = new Map(available.map((skill) => [skill.name, skill]));
+        const unique = [...new Set(requested)];
+        const attached = unique
+            .map((name) => byName.get(name))
+            .filter((skill) => skill !== undefined);
+        if (attached.length !== unique.length) {
+            const missing = unique.length - attached.length;
+            throw new SkillResolutionError(missing === 1
+                ? 'One of the selected skills is no longer available.'
+                : `${missing} of the selected skills are no longer available.`);
+        }
+        const seen = new Set(always.map((skill) => skill.name));
+        return [
+            ...always,
+            ...attached.filter((skill) => !seen.has(skill.name))
+        ];
+    }
+};
+exports.SkillCatalogService = SkillCatalogService;
+exports.SkillCatalogService = SkillCatalogService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(copilot_tokens_1.COPILOT_SKILL_REGISTRY)),
+    tslib_1.__metadata("design:paramtypes", [Object, skill_repository_1.SkillRepository])
+], SkillCatalogService);
+/** The list view of a skill, with its row id when it has one. */
+function toSummary(skill, row, enabled) {
+    return {
+        id: row?.id ?? null,
+        name: skill.name,
+        title: skill.title,
+        description: skill.description,
+        mode: skill.mode,
+        source: skill.source,
+        enabled,
+        editable: skill.source === 'cms'
+    };
+}

package/dist/lib/skills/http/controllers/list-skills.controller.d.ts

@@ -0,0 +1,19 @@
+import { SkillCatalogService, type SkillSummary } from '../../application/skill-catalog.service';
+/**
+ * `GET /api/copilot/skills` — the catalogue the composer's picker renders.
+ *
+ * Gated on `copilot:use`, not on the manage permission: everybody who can chat
+ * can attach a skill, and a picker that showed nothing to a contributor would
+ * make the feature invisible to the people it is mostly for. What it does
+ * **not** carry is `instructions` — see `SkillSummary` for why.
+ *
+ * `WorkspaceGuard` because the catalogue differs per workspace: code skills are
+ * deployment-wide, CMS skills are not, and serving the union to an unvalidated
+ * workspace id would leak one workspace's editorial guidance to another.
+ */
+export declare class ListSkillsController {
+    private readonly catalog;
+    constructor(catalog: SkillCatalogService);
+    list(workspaceId: string): Promise<SkillSummary[]>;
+}
+//# sourceMappingURL=list-skills.controller.d.ts.map

package/dist/lib/skills/http/controllers/list-skills.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-skills.controller.d.ts","sourceRoot":"","sources":["../../../../../src/lib/skills/http/controllers/list-skills.controller.ts"],"names":[],"mappings":"AAQA,OAAO,EACH,mBAAmB,EACnB,KAAK,YAAY,EACpB,MAAM,yCAAyC,CAAC;AAEjD;;;;;;;;;;;GAWG;AACH,qBAGa,oBAAoB;IACjB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,mBAAmB;IAUnD,IAAI,CACc,WAAW,EAAE,MAAM,GACxC,OAAO,CAAC,YAAY,EAAE,CAAC;CAG7B"}

package/dist/lib/skills/http/controllers/list-skills.controller.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ListSkillsController = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const identity_server_1 = require("@orthacms/identity-server");
+const workspaces_server_1 = require("@orthacms/workspaces-server");
+const skill_catalog_service_1 = require("../../application/skill-catalog.service");
+/**
+ * `GET /api/copilot/skills` — the catalogue the composer's picker renders.
+ *
+ * Gated on `copilot:use`, not on the manage permission: everybody who can chat
+ * can attach a skill, and a picker that showed nothing to a contributor would
+ * make the feature invisible to the people it is mostly for. What it does
+ * **not** carry is `instructions` — see `SkillSummary` for why.
+ *
+ * `WorkspaceGuard` because the catalogue differs per workspace: code skills are
+ * deployment-wide, CMS skills are not, and serving the union to an unvalidated
+ * workspace id would leak one workspace's editorial guidance to another.
+ */
+let ListSkillsController = class ListSkillsController {
+    catalog;
+    constructor(catalog) {
+        this.catalog = catalog;
+    }
+    async list(workspaceId) {
+        return this.catalog.catalogue(workspaceId);
+    }
+};
+exports.ListSkillsController = ListSkillsController;
+tslib_1.__decorate([
+    (0, common_1.Get)('skills'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'List the skills available in this workspace',
+        description: 'Code-defined skills first, then the workspace’s own enabled ones. ' +
+            'Instruction bodies are not included.'
+    }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'The available skills.' }),
+    tslib_1.__param(0, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ListSkillsController.prototype, "list", null);
+exports.ListSkillsController = ListSkillsController = tslib_1.__decorate([
+    (0, common_1.UseGuards)(identity_server_1.PermissionsGuard, workspaces_server_1.WorkspaceGuard),
+    (0, identity_server_1.RequirePermissions)(identity_server_1.PERMISSIONS.COPILOT_USE),
+    (0, common_1.Controller)('copilot'),
+    tslib_1.__metadata("design:paramtypes", [skill_catalog_service_1.SkillCatalogService])
+], ListSkillsController);