@orthacms/copilot-server 0.0.0-reserve.0

package/dist/lib/chat/application/dto/create-run.dto.d.ts

@@ -0,0 +1,138 @@
+/** Longest message we accept. Bounds the prompt before the model bounds it. */
+export declare const MAX_MESSAGE_LENGTH = 8000;
+/**
+ * Files one turn may carry.
+ *
+ * A ceiling rather than none, because each attachment costs a resolve and a
+ * line of prompt, and a request naming two hundred ids would spend both before
+ * the model is ever called.
+ */
+export declare const MAX_RUN_ATTACHMENTS = 8;
+/** The surfaces a run can be started from (design §2). */
+export declare const RUN_SURFACES: readonly ["chat", "palette", "entry", "records"];
+/**
+ * Where the user was when they asked. Every field is optional — the chat panel
+ * knows only the workspace, the entry editor knows the type and the entry.
+ *
+ * **This class exists because of the host's strict `ValidationPipe`.** It runs
+ * with `whitelist: true` + `forbidNonWhitelisted: true`, and those apply to
+ * nested objects too: without `@ValidateNested()` + `@Type()` here, a nested
+ * `context` object is not traversed as a DTO at all — its properties are
+ * stripped by the whitelist and the handler silently receives `{}`. Declaring
+ * the nested class is what makes the payload arrive intact.
+ */
+export declare class RunContextDto {
+    /** Where the run was started from. */
+    surface?: (typeof RUN_SURFACES)[number];
+    /** The content type in view, if any. */
+    contentType?: string;
+    /** The entry in view, if any. */
+    entryId?: string;
+    /** The content locale in view, if any. */
+    locale?: string;
+}
+/**
+ * One file attached to a turn — an **id only**.
+ *
+ * The client has the whole asset view in hand after uploading, and sending the
+ * name and size along would save the server a lookup. It deliberately does not:
+ * the id is the only part the server can verify, and everything the model is
+ * told about a file has to come from the row rather than from the request, or a
+ * caller could describe someone else's asset — or their own — as anything they
+ * liked.
+ *
+ * A class rather than a bare string array for the same reason `RunContextDto`
+ * is a class: the strict pipe traverses a nested array only with
+ * `@ValidateNested({ each: true })` + `@Type()`, and it leaves room for a
+ * per-attachment field later without changing the wire shape.
+ */
+export declare class RunAttachmentDto {
+    /** The media asset's id, as returned by the upload it came from. */
+    assetId: string;
+}
+/**
+ * One skill attached to a turn — a **name only**.
+ *
+ * The same discipline as {@link RunAttachmentDto}, and the reason is sharper
+ * here: a skill's `instructions` are prompt text, so a request that could carry
+ * a body would let anyone holding `copilot:use` write their own system prompt.
+ * The name is the only part the server can check, and everything the model is
+ * told comes from the catalogue row it resolves to.
+ *
+ * A class rather than a bare string array because the strict pipe traverses a
+ * nested array only with `@ValidateNested({ each: true })` + `@Type()`.
+ */
+export declare class RunSkillDto {
+    /** The skill's machine name, as served by `GET /api/copilot/skills`. */
+    name: string;
+}
+/**
+ * Body of `POST /api/copilot/runs`.
+ *
+ * Every field the client may send is declared here, including the nested
+ * context above — the host's pipe sets `forbidNonWhitelisted: true`, so an
+ * undeclared key is a **400 naming the property**, not a silently ignored
+ * extra. That is the behaviour we want (a typo'd field is a loud failure), but
+ * it means adding a client-side field without adding it here breaks the request
+ * with an error that reads as unrelated.
+ */
+export declare class CreateRunDto {
+    /** What the user typed. */
+    message: string;
+    /** Continue this thread. Omit to start a new one. */
+    conversationId?: string;
+    /**
+     * The admin UI's locale, so the model answers in the language the person
+     * is reading (`docs/design/copilot.md` §8, "Localized output"). Sent by the
+     * client rather than inferred from `Accept-Language`, because the admin's
+     * locale is an app preference, not a browser one.
+     */
+    uiLocale?: string;
+    /**
+     * The registered provider to run on — one of the names in
+     * `GET /api/copilot/models`. Omit to let the host's resolver decide.
+     *
+     * Naming a provider is **not** an escalation: the registry is fixed at boot
+     * by the operator, so the worst a caller can do is pick a different backend
+     * the operator already configured. An unregistered name is refused.
+     */
+    provider?: string;
+    /**
+     * The model id to run on, from the chosen provider's list. Omit for that
+     * provider's default. A user switches model by sending a different value on
+     * the next turn — the choice is **per run**, so a conversation can start
+     * cheap and escalate.
+     *
+     * The thread does carry a `modelChoice` (see `UpdateConversationDto`), and
+     * it is a memory rather than a pin: it is what the picker is *seeded* from
+     * when a saved conversation is reopened, and nothing about it constrains
+     * what this field may be on the next turn.
+     */
+    model?: string;
+    /** Where the user is. */
+    context?: RunContextDto;
+    /**
+     * Files the user attached to this turn, already uploaded to the media
+     * library through `POST /api/media/assets`.
+     *
+     * Uploading is **not** part of the run: it happens first, over the ordinary
+     * media route, with the user's own session and their own `media:create`.
+     * That is what keeps the authority model intact — attaching a file is the
+     * person uploading it, exactly as they would from the Media Library, from a
+     * different button. The copilot never gains a write path; by the time a run
+     * starts, the asset already exists and this names it.
+     */
+    attachments?: RunAttachmentDto[];
+    /**
+     * Skills the person attached to this turn, by name.
+     *
+     * Per turn rather than pinned to the thread, like the model choice: a
+     * conversation can rewrite one paragraph under the house style skill and
+     * the next under none. The workspace's always-on skills are **not** listed
+     * here — they are in force whatever the client sends, and a client that
+     * could omit them could turn workspace configuration off by not asking for
+     * it.
+     */
+    skills?: RunSkillDto[];
+}
+//# sourceMappingURL=create-run.dto.d.ts.map

package/dist/lib/chat/application/dto/create-run.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-run.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/chat/application/dto/create-run.dto.ts"],"names":[],"mappings":"AAqBA,+EAA+E;AAC/E,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AAExC;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,0DAA0D;AAC1D,eAAO,MAAM,YAAY,kDAAmD,CAAC;AAE7E;;;;;;;;;;GAUG;AACH,qBAAa,aAAa;IACtB,sCAAsC;IAItC,OAAO,CAAC,EAAE,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;IAExC,wCAAwC;IAKxC,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,iCAAiC;IAKjC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,0CAA0C;IAK1C,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,gBAAgB;IACzB,oEAAoE;IAGpE,OAAO,EAAG,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,WAAW;IACpB,wEAAwE;IAUxE,IAAI,EAAG,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,qBAAa,YAAY;IACrB,2BAA2B;IAK3B,OAAO,EAAG,MAAM,CAAC;IAEjB,qDAAqD;IAIrD,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;;;OAKG;IAKH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;;;;;OAOG;IAKH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;;;;;;;;OAUG;IAKH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,yBAAyB;IAMzB,OAAO,CAAC,EAAE,aAAa,CAAC;IAExB;;;;;;;;;;OAUG;IAOH,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAEjC;;;;;;;;;OASG;IAOH,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;CAC1B"}

package/dist/lib/chat/application/dto/create-run.dto.js

@@ -0,0 +1,253 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateRunDto = exports.RunSkillDto = exports.RunAttachmentDto = exports.RunContextDto = exports.RUN_SURFACES = exports.MAX_RUN_ATTACHMENTS = exports.MAX_MESSAGE_LENGTH = void 0;
+const tslib_1 = require("tslib");
+const swagger_1 = require("@nestjs/swagger");
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const copilot_domain_1 = require("@orthacms/copilot-domain");
+/** Longest message we accept. Bounds the prompt before the model bounds it. */
+exports.MAX_MESSAGE_LENGTH = 8_000;
+/**
+ * Files one turn may carry.
+ *
+ * A ceiling rather than none, because each attachment costs a resolve and a
+ * line of prompt, and a request naming two hundred ids would spend both before
+ * the model is ever called.
+ */
+exports.MAX_RUN_ATTACHMENTS = 8;
+/** The surfaces a run can be started from (design §2). */
+exports.RUN_SURFACES = ['chat', 'palette', 'entry', 'records'];
+/**
+ * Where the user was when they asked. Every field is optional — the chat panel
+ * knows only the workspace, the entry editor knows the type and the entry.
+ *
+ * **This class exists because of the host's strict `ValidationPipe`.** It runs
+ * with `whitelist: true` + `forbidNonWhitelisted: true`, and those apply to
+ * nested objects too: without `@ValidateNested()` + `@Type()` here, a nested
+ * `context` object is not traversed as a DTO at all — its properties are
+ * stripped by the whitelist and the handler silently receives `{}`. Declaring
+ * the nested class is what makes the payload arrive intact.
+ */
+class RunContextDto {
+    /** Where the run was started from. */
+    surface;
+    /** The content type in view, if any. */
+    contentType;
+    /** The entry in view, if any. */
+    entryId;
+    /** The content locale in view, if any. */
+    locale;
+}
+exports.RunContextDto = RunContextDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ enum: exports.RUN_SURFACES }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsIn)(exports.RUN_SURFACES),
+    tslib_1.__metadata("design:type", Object)
+], RunContextDto.prototype, "surface", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ type: String, maxLength: 128 }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(128),
+    tslib_1.__metadata("design:type", String)
+], RunContextDto.prototype, "contentType", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ type: String, maxLength: 64 }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(64),
+    tslib_1.__metadata("design:type", String)
+], RunContextDto.prototype, "entryId", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ type: String, maxLength: 35 }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(35),
+    tslib_1.__metadata("design:type", String)
+], RunContextDto.prototype, "locale", void 0);
+/**
+ * One file attached to a turn — an **id only**.
+ *
+ * The client has the whole asset view in hand after uploading, and sending the
+ * name and size along would save the server a lookup. It deliberately does not:
+ * the id is the only part the server can verify, and everything the model is
+ * told about a file has to come from the row rather than from the request, or a
+ * caller could describe someone else's asset — or their own — as anything they
+ * liked.
+ *
+ * A class rather than a bare string array for the same reason `RunContextDto`
+ * is a class: the strict pipe traverses a nested array only with
+ * `@ValidateNested({ each: true })` + `@Type()`, and it leaves room for a
+ * per-attachment field later without changing the wire shape.
+ */
+class RunAttachmentDto {
+    /** The media asset's id, as returned by the upload it came from. */
+    assetId;
+}
+exports.RunAttachmentDto = RunAttachmentDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({ type: String, format: 'uuid' }),
+    (0, class_validator_1.IsUUID)(),
+    tslib_1.__metadata("design:type", String)
+], RunAttachmentDto.prototype, "assetId", void 0);
+/**
+ * One skill attached to a turn — a **name only**.
+ *
+ * The same discipline as {@link RunAttachmentDto}, and the reason is sharper
+ * here: a skill's `instructions` are prompt text, so a request that could carry
+ * a body would let anyone holding `copilot:use` write their own system prompt.
+ * The name is the only part the server can check, and everything the model is
+ * told comes from the catalogue row it resolves to.
+ *
+ * A class rather than a bare string array because the strict pipe traverses a
+ * nested array only with `@ValidateNested({ each: true })` + `@Type()`.
+ */
+class RunSkillDto {
+    /** The skill's machine name, as served by `GET /api/copilot/skills`. */
+    name;
+}
+exports.RunSkillDto = RunSkillDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        type: String,
+        maxLength: copilot_domain_1.MAX_SKILL_NAME_LENGTH,
+        pattern: copilot_domain_1.SKILL_NAME_PATTERN.source,
+        example: 'house-style'
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(copilot_domain_1.MAX_SKILL_NAME_LENGTH),
+    (0, class_validator_1.Matches)(copilot_domain_1.SKILL_NAME_PATTERN),
+    tslib_1.__metadata("design:type", String)
+], RunSkillDto.prototype, "name", void 0);
+/**
+ * Body of `POST /api/copilot/runs`.
+ *
+ * Every field the client may send is declared here, including the nested
+ * context above — the host's pipe sets `forbidNonWhitelisted: true`, so an
+ * undeclared key is a **400 naming the property**, not a silently ignored
+ * extra. That is the behaviour we want (a typo'd field is a loud failure), but
+ * it means adding a client-side field without adding it here breaks the request
+ * with an error that reads as unrelated.
+ */
+class CreateRunDto {
+    /** What the user typed. */
+    message;
+    /** Continue this thread. Omit to start a new one. */
+    conversationId;
+    /**
+     * The admin UI's locale, so the model answers in the language the person
+     * is reading (`docs/design/copilot.md` §8, "Localized output"). Sent by the
+     * client rather than inferred from `Accept-Language`, because the admin's
+     * locale is an app preference, not a browser one.
+     */
+    uiLocale;
+    /**
+     * The registered provider to run on — one of the names in
+     * `GET /api/copilot/models`. Omit to let the host's resolver decide.
+     *
+     * Naming a provider is **not** an escalation: the registry is fixed at boot
+     * by the operator, so the worst a caller can do is pick a different backend
+     * the operator already configured. An unregistered name is refused.
+     */
+    provider;
+    /**
+     * The model id to run on, from the chosen provider's list. Omit for that
+     * provider's default. A user switches model by sending a different value on
+     * the next turn — the choice is **per run**, so a conversation can start
+     * cheap and escalate.
+     *
+     * The thread does carry a `modelChoice` (see `UpdateConversationDto`), and
+     * it is a memory rather than a pin: it is what the picker is *seeded* from
+     * when a saved conversation is reopened, and nothing about it constrains
+     * what this field may be on the next turn.
+     */
+    model;
+    /** Where the user is. */
+    context;
+    /**
+     * Files the user attached to this turn, already uploaded to the media
+     * library through `POST /api/media/assets`.
+     *
+     * Uploading is **not** part of the run: it happens first, over the ordinary
+     * media route, with the user's own session and their own `media:create`.
+     * That is what keeps the authority model intact — attaching a file is the
+     * person uploading it, exactly as they would from the Media Library, from a
+     * different button. The copilot never gains a write path; by the time a run
+     * starts, the asset already exists and this names it.
+     */
+    attachments;
+    /**
+     * Skills the person attached to this turn, by name.
+     *
+     * Per turn rather than pinned to the thread, like the model choice: a
+     * conversation can rewrite one paragraph under the house style skill and
+     * the next under none. The workspace's always-on skills are **not** listed
+     * here — they are in force whatever the client sends, and a client that
+     * could omit them could turn workspace configuration off by not asking for
+     * it.
+     */
+    skills;
+}
+exports.CreateRunDto = CreateRunDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({ type: String, minLength: 1, maxLength: exports.MAX_MESSAGE_LENGTH }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(exports.MAX_MESSAGE_LENGTH),
+    tslib_1.__metadata("design:type", String)
+], CreateRunDto.prototype, "message", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ type: String, format: 'uuid' }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsUUID)(),
+    tslib_1.__metadata("design:type", String)
+], CreateRunDto.prototype, "conversationId", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ type: String, maxLength: 35, default: 'en' }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(35),
+    tslib_1.__metadata("design:type", String)
+], CreateRunDto.prototype, "uiLocale", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ type: String, maxLength: 64 }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(64),
+    tslib_1.__metadata("design:type", String)
+], CreateRunDto.prototype, "provider", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ type: String, maxLength: 128 }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(128),
+    tslib_1.__metadata("design:type", String)
+], CreateRunDto.prototype, "model", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ type: RunContextDto }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsObject)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => RunContextDto),
+    tslib_1.__metadata("design:type", RunContextDto)
+], CreateRunDto.prototype, "context", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ type: [RunAttachmentDto] }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMaxSize)(exports.MAX_RUN_ATTACHMENTS),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => RunAttachmentDto),
+    tslib_1.__metadata("design:type", Array)
+], CreateRunDto.prototype, "attachments", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ type: [RunSkillDto], maxItems: copilot_domain_1.MAX_RUN_SKILLS }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMaxSize)(copilot_domain_1.MAX_RUN_SKILLS),
+    (0, class_validator_1.ValidateNested)({ each: true }),
+    (0, class_transformer_1.Type)(() => RunSkillDto),
+    tslib_1.__metadata("design:type", Array)
+], CreateRunDto.prototype, "skills", void 0);

package/dist/lib/chat/application/dto/decide-tool-permission.dto.d.ts

@@ -0,0 +1,20 @@
+import type { ToolPermissionDecision } from '@orthacms/copilot-domain';
+/**
+ * Body of `POST /api/copilot/runs/:runId/permission`.
+ *
+ * Every property is declared because the host's `ValidationPipe` runs with
+ * `forbidNonWhitelisted` — an undeclared key is a 400 naming it.
+ */
+export declare class DecideToolPermissionDto {
+    /**
+     * The tool call being answered, from the `tool-permission-request` frame.
+     *
+     * A plain string, not a UUID: it is the **provider's** call id, and the two
+     * wire formats mint those differently (`toolu_…` from one, `call_…` from
+     * the other). Validating it as a UUID would reject every real run.
+     */
+    callId: string;
+    /** Run it once, run it for the rest of this thread, or refuse it. */
+    decision: ToolPermissionDecision;
+}
+//# sourceMappingURL=decide-tool-permission.dto.d.ts.map

package/dist/lib/chat/application/dto/decide-tool-permission.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decide-tool-permission.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/chat/application/dto/decide-tool-permission.dto.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAKvE;;;;;GAKG;AACH,qBAAa,uBAAuB;IAChC;;;;;;OAMG;IAQH,MAAM,EAAG,MAAM,CAAC;IAEhB,qEAAqE;IAOrE,QAAQ,EAAG,sBAAsB,CAAC;CACrC"}

package/dist/lib/chat/application/dto/decide-tool-permission.dto.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DecideToolPermissionDto = void 0;
+const tslib_1 = require("tslib");
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+/** The three answers a parked run accepts. */
+const DECISIONS = ['once', 'chat', 'deny'];
+/**
+ * Body of `POST /api/copilot/runs/:runId/permission`.
+ *
+ * Every property is declared because the host's `ValidationPipe` runs with
+ * `forbidNonWhitelisted` — an undeclared key is a 400 naming it.
+ */
+class DecideToolPermissionDto {
+    /**
+     * The tool call being answered, from the `tool-permission-request` frame.
+     *
+     * A plain string, not a UUID: it is the **provider's** call id, and the two
+     * wire formats mint those differently (`toolu_…` from one, `call_…` from
+     * the other). Validating it as a UUID would reject every real run.
+     */
+    callId;
+    /** Run it once, run it for the rest of this thread, or refuse it. */
+    decision;
+}
+exports.DecideToolPermissionDto = DecideToolPermissionDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'The `id` from the tool-permission-request frame this answers.'
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(200),
+    tslib_1.__metadata("design:type", String)
+], DecideToolPermissionDto.prototype, "callId", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        enum: [...DECISIONS],
+        description: '`once` runs this call; `chat` also stops asking about this tool in this thread; `deny` refuses it.'
+    }),
+    (0, class_validator_1.IsIn)(DECISIONS),
+    tslib_1.__metadata("design:type", String)
+], DecideToolPermissionDto.prototype, "decision", void 0);

package/dist/lib/chat/application/dto/extend-tool-permission.dto.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Body of `POST /api/copilot/runs/:runId/permission/extend`.
+ *
+ * Every property is declared because the host's `ValidationPipe` runs with
+ * `forbidNonWhitelisted` — an undeclared key is a 400 naming it.
+ */
+export declare class ExtendToolPermissionDto {
+    /**
+     * The tool call whose wait is being extended, from the
+     * `tool-permission-request` frame.
+     *
+     * A plain string, not a UUID, for the same reason as
+     * `DecideToolPermissionDto.callId`: it is the **provider's** call id and the
+     * two wire formats mint those differently.
+     */
+    callId: string;
+}
+//# sourceMappingURL=extend-tool-permission.dto.d.ts.map

package/dist/lib/chat/application/dto/extend-tool-permission.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extend-tool-permission.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/chat/application/dto/extend-tool-permission.dto.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,qBAAa,uBAAuB;IAChC;;;;;;;OAOG;IAQH,MAAM,EAAG,MAAM,CAAC;CACnB"}

package/dist/lib/chat/application/dto/extend-tool-permission.dto.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExtendToolPermissionDto = void 0;
+const tslib_1 = require("tslib");
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+/**
+ * Body of `POST /api/copilot/runs/:runId/permission/extend`.
+ *
+ * Every property is declared because the host's `ValidationPipe` runs with
+ * `forbidNonWhitelisted` — an undeclared key is a 400 naming it.
+ */
+class ExtendToolPermissionDto {
+    /**
+     * The tool call whose wait is being extended, from the
+     * `tool-permission-request` frame.
+     *
+     * A plain string, not a UUID, for the same reason as
+     * `DecideToolPermissionDto.callId`: it is the **provider's** call id and the
+     * two wire formats mint those differently.
+     */
+    callId;
+}
+exports.ExtendToolPermissionDto = ExtendToolPermissionDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'The `id` from the tool-permission-request frame to extend.'
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(200),
+    tslib_1.__metadata("design:type", String)
+], ExtendToolPermissionDto.prototype, "callId", void 0);

package/dist/lib/chat/application/dto/list-conversations-query.dto.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Query parameters for `GET /api/copilot/conversations`.
+ *
+ * Every property is declared because the host's `ValidationPipe` runs with
+ * `forbidNonWhitelisted` — an undeclared key is a 400 naming it.
+ */
+export declare class ListConversationsQueryDto {
+    /**
+     * List archived threads instead of active ones. Omitted, the caller gets
+     * their active threads — the list the rail renders.
+     *
+     * The two sets are **disjoint by design**: archiving is "hide this from the
+     * list", so an archived thread appearing in the default list alongside its
+     * active siblings would defeat the whole point of the flag.
+     */
+    archived?: boolean;
+}
+//# sourceMappingURL=list-conversations-query.dto.d.ts.map

package/dist/lib/chat/application/dto/list-conversations-query.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-conversations-query.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/chat/application/dto/list-conversations-query.dto.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,qBAAa,yBAAyB;IAClC;;;;;;;OAOG;IAYH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB"}

package/dist/lib/chat/application/dto/list-conversations-query.dto.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ListConversationsQueryDto = void 0;
+const tslib_1 = require("tslib");
+const swagger_1 = require("@nestjs/swagger");
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+/**
+ * Query parameters for `GET /api/copilot/conversations`.
+ *
+ * Every property is declared because the host's `ValidationPipe` runs with
+ * `forbidNonWhitelisted` — an undeclared key is a 400 naming it.
+ */
+class ListConversationsQueryDto {
+    /**
+     * List archived threads instead of active ones. Omitted, the caller gets
+     * their active threads — the list the rail renders.
+     *
+     * The two sets are **disjoint by design**: archiving is "hide this from the
+     * list", so an archived thread appearing in the default list alongside its
+     * active siblings would defeat the whole point of the flag.
+     */
+    archived;
+}
+exports.ListConversationsQueryDto = ListConversationsQueryDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: Boolean,
+        default: false,
+        description: 'List archived threads instead of active ones. Defaults to false.'
+    }),
+    (0, class_validator_1.IsOptional)()
+    // A query parameter is a string, and `Boolean('false')` is `true` — the
+    // exact coercion trap `transform: true` alone walks into. Compare instead.
+    ,
+    (0, class_transformer_1.Transform)(({ value }) => value === true || value === 'true'),
+    (0, class_validator_1.IsBoolean)(),
+    tslib_1.__metadata("design:type", Boolean)
+], ListConversationsQueryDto.prototype, "archived", void 0);

package/dist/lib/chat/application/dto/list-proposals-query.dto.d.ts

@@ -0,0 +1,15 @@
+import type { ProposalStatus } from '@orthacms/copilot-domain';
+/**
+ * Query parameters for `GET /api/copilot/proposals`.
+ *
+ * Every property is declared because the host's `ValidationPipe` runs with
+ * `forbidNonWhitelisted` — an undeclared key is a 400 naming it, and an
+ * undeclared *nested* one would be silently stripped.
+ */
+export declare class ListProposalsQueryDto {
+    /** Restrict to one status. Omitted, every proposal is returned. */
+    status?: ProposalStatus;
+    /** Restrict to the proposals made in one thread. */
+    conversationId?: string;
+}
+//# sourceMappingURL=list-proposals-query.dto.d.ts.map

package/dist/lib/chat/application/dto/list-proposals-query.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-proposals-query.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/chat/application/dto/list-proposals-query.dto.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAK/D;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAC9B,mEAAmE;IAQnE,MAAM,CAAC,EAAE,cAAc,CAAC;IAExB,oDAAoD;IASpD,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B"}

package/dist/lib/chat/application/dto/list-proposals-query.dto.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ListProposalsQueryDto = void 0;
+const tslib_1 = require("tslib");
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+/** The statuses a caller may filter the queue by. */
+const STATUSES = ['pending', 'accepted', 'rejected'];
+/**
+ * Query parameters for `GET /api/copilot/proposals`.
+ *
+ * Every property is declared because the host's `ValidationPipe` runs with
+ * `forbidNonWhitelisted` — an undeclared key is a 400 naming it, and an
+ * undeclared *nested* one would be silently stripped.
+ */
+class ListProposalsQueryDto {
+    /** Restrict to one status. Omitted, every proposal is returned. */
+    status;
+    /** Restrict to the proposals made in one thread. */
+    conversationId;
+}
+exports.ListProposalsQueryDto = ListProposalsQueryDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        enum: [...STATUSES],
+        description: 'Restrict to one status. Omit for the whole history; `pending` is the review queue.'
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsIn)(STATUSES),
+    tslib_1.__metadata("design:type", String)
+], ListProposalsQueryDto.prototype, "status", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: String,
+        format: 'uuid',
+        description: 'Restrict to one conversation — what the chat panel asks for when re-opening a thread.'
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsUUID)(),
+    tslib_1.__metadata("design:type", String)
+], ListProposalsQueryDto.prototype, "conversationId", void 0);