@ouraihub/aether-worker 0.1.0 → 0.1.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouraihub/aether-worker",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "license": "LGPL-3.0-only",
   "repository": {
     "type": "git",
@@ -19,8 +19,8 @@
     "./*": "./src/*.ts"
   },
   "dependencies": {
-    "@ouraihub/aether-contracts": "0.1.0",
-    "@ouraihub/aether-core": "0.1.0"
+    "@ouraihub/aether-contracts": "0.1.1",
+    "@ouraihub/aether-core": "0.1.1"
   },
   "devDependencies": {},
   "files": [
@@ -35,6 +35,7 @@
   },
   "scripts": {
     "typecheck": "tsc --noEmit",
-    "test": "tsx --test \"src/**/*.test.ts\""
+    "test": "tsx --test \"src/**/*.test.ts\"",
+    "scenarios": "tsx scenarios/run.ts"
   }
 }

package/src/app.ts

@@ -47,7 +47,11 @@ const statuses: Record<KitErrorCode, number> = {
 function failureResponse(error: unknown): Response {
   let safe: KitError = safeError(error)
   if (safe.code === 'internal')
-    safe = { code: 'internal', message: 'Internal request failure', details: { errorId: crypto.randomUUID() } }
+    safe = {
+      code: 'internal',
+      message: 'Internal request failure',
+      details: { errorId: crypto.randomUUID() },
+    }
   return Response.json(safe, { status: statuses[safe.code] })
 }
 function loopback(url: URL): boolean {
@@ -97,17 +101,25 @@ function secured(response: Response, origin: string | null, allowed: string): Re
   headers.set('Referrer-Policy', 'no-referrer')
   headers.set(
     'Cache-Control',
-    headers.get('content-type')?.startsWith('text/event-stream') ? 'no-cache, no-transform' : 'no-store',
+    headers.get('content-type')?.startsWith('text/event-stream')
+      ? 'no-cache, no-transform'
+      : 'no-store',
   )
   if (origin === allowed) {
     headers.set('Access-Control-Allow-Origin', allowed)
     headers.set('Access-Control-Allow-Credentials', 'true')
     headers.append('Vary', 'Origin')
   }
-  return new Response(response.body, { status: response.status, statusText: response.statusText, headers })
+  return new Response(response.body, {
+    status: response.status,
+    statusText: response.statusText,
+    headers,
+  })
 }
 /** Product entrypoints compose this handler; this package never supplies product login or business tools. */
-export function createAetherWorkerApp(options: WorkerAppOptions): { fetch(request: Request): Promise<Response> } {
+export function createAetherWorkerApp(options: WorkerAppOptions): {
+  fetch(request: Request): Promise<Response>
+} {
   const publicOrigin = new URL(options.origin)
   if (
     !options.applicationId ||
@@ -127,9 +139,13 @@ export function createAetherWorkerApp(options: WorkerAppOptions): { fetch(reques
         origin = raw.headers.get('origin')
       let response: Response
       try {
-        if (url.protocol !== 'https:' && !(options.allowLoopbackHttp && url.protocol === 'http:' && loopback(url)))
+        if (
+          url.protocol !== 'https:' &&
+          !(options.allowLoopbackHttp && url.protocol === 'http:' && loopback(url))
+        )
           throw new KitFailure('forbidden', 'Secure transport required')
-        if (origin !== null && origin !== options.origin) throw new KitFailure('forbidden', 'Origin rejected')
+        if (origin !== null && origin !== options.origin)
+          throw new KitFailure('forbidden', 'Origin rejected')
         if (raw.method === 'OPTIONS') {
           if (origin !== options.origin) throw new KitFailure('forbidden', 'Origin rejected')
           return secured(
@@ -147,12 +163,15 @@ export function createAetherWorkerApp(options: WorkerAppOptions): { fetch(reques
         }
         const mutating = !['GET', 'HEAD'].includes(raw.method)
         const publicRoute =
-          url.pathname === '/mcp' || url.pathname.startsWith('/oauth/') || url.pathname.startsWith('/.well-known/')
+          url.pathname === '/mcp' ||
+          url.pathname.startsWith('/oauth/') ||
+          url.pathname.startsWith('/.well-known/')
         if (
           mutating &&
           raw.body !== null &&
           !publicRoute &&
-          raw.headers.get('content-type')?.split(';')[0]?.trim().toLowerCase() !== 'application/json'
+          raw.headers.get('content-type')?.split(';')[0]?.trim().toLowerCase() !==
+            'application/json'
         )
           throw badRequest('contentType', 'json_required')
         const request = await boundedRequest(raw, maximum)
@@ -162,7 +181,8 @@ export function createAetherWorkerApp(options: WorkerAppOptions): { fetch(reques
             publicResponse = await handler.handlePublic(request)
             if (publicResponse) break
           }
-          if (!publicResponse) throw new KitFailure('not_found', 'Unknown route', { entity: 'route' })
+          if (!publicResponse)
+            throw new KitFailure('not_found', 'Unknown route', { entity: 'route' })
           response = publicResponse
         } else {
           const actor = await options.identity.resolve(request)
@@ -176,7 +196,12 @@ export function createAetherWorkerApp(options: WorkerAppOptions): { fetch(reques
           )
             throw new KitFailure('forbidden', 'Request authorization rejected')
           await options.authorizeRoute(actor, request)
-          const context: WorkerContext = { actor: immutableActor(actor), requestId, now, signal: request.signal }
+          const context: WorkerContext = {
+            actor: immutableActor(actor),
+            requestId,
+            now,
+            signal: request.signal,
+          }
           if (url.pathname === '/api/v1/runs' && request.method === 'POST') {
             const input: unknown = await request.json()
             if (!isContract('RunRequest', input)) throw badRequest('run', 'invalid')
@@ -190,25 +215,33 @@ export function createAetherWorkerApp(options: WorkerAppOptions): { fetch(reques
             })
             const value: unknown = await accepted.json()
             if (accepted.status !== 202) {
-              if (isContract('KitError', value)) throw new KitFailure(value.code, value.message, value.details)
+              if (isContract('KitError', value))
+                throw new KitFailure(value.code, value.message, value.details)
               throw new KitFailure('internal', 'Invalid coordinator reply')
             }
-            if (!isContract('RunAccepted', value)) throw new KitFailure('internal', 'Invalid coordinator acceptance')
+            if (!isContract('RunAccepted', value))
+              throw new KitFailure('internal', 'Invalid coordinator acceptance')
             response = Response.json(
               { accepted: value, events: `/api/v1/runs/${encodeURIComponent(runId)}/events` },
               { status: 202 },
             )
           } else {
-            const run = /^\/api\/v1\/runs\/([^/]+)(?:\/(events|cancel|approval))?$/u.exec(url.pathname)
+            const run = /^\/api\/v1\/runs\/([^/]+)(?:\/(events|cancel|approval))?$/u.exec(
+              url.pathname,
+            )
             if (run) {
               const runId = decodeURIComponent(run[1] ?? ''),
                 action = run[2] ?? 'snapshot'
               if (
                 !/^[A-Za-z0-9_-]{1,128}$/u.test(runId) ||
-                (['events', 'snapshot'].includes(action) ? request.method !== 'GET' : request.method !== 'POST')
+                (['events', 'snapshot'].includes(action)
+                  ? request.method !== 'GET'
+                  : request.method !== 'POST')
               )
                 throw badRequest('run', 'invalid')
-              const stub = options.runs.get(options.runs.idFromName(`${options.applicationId}:${runId}`)),
+              const stub = options.runs.get(
+                  options.runs.idFromName(`${options.applicationId}:${runId}`),
+                ),
                 headers = new Headers({ 'x-aether-actor': actorHeader(context.actor) })
               if (request.headers.has('Last-Event-ID'))
                 headers.set('Last-Event-ID', request.headers.get('Last-Event-ID') ?? '')
@@ -244,7 +277,10 @@ export function createAetherWorkerApp(options: WorkerAppOptions): { fetch(reques
                     stub
                       .fetch('https://aether.internal/cancel', {
                         method: 'POST',
-                        headers: { 'x-aether-actor': actorHeader(context.actor), 'Content-Type': 'application/json' },
+                        headers: {
+                          'x-aether-actor': actorHeader(context.actor),
+                          'Content-Type': 'application/json',
+                        },
                         body: '{}',
                       })
                       .then(async (reply) => {

package/src/context.ts

@@ -29,14 +29,20 @@ export function isActor(value: unknown): value is Actor {
     (value.kind === 'user' || value.kind === 'service' || value.kind === 'mcp_client') &&
     'tenantId' in value &&
     (value.tenantId === null ||
-      (typeof value.tenantId === 'string' && value.tenantId.length > 0 && value.tenantId.length <= 256)) &&
+      (typeof value.tenantId === 'string' &&
+        value.tenantId.length > 0 &&
+        value.tenantId.length <= 256)) &&
     'sessionId' in value &&
     (value.sessionId === null ||
-      (typeof value.sessionId === 'string' && value.sessionId.length > 0 && value.sessionId.length <= 256)) &&
+      (typeof value.sessionId === 'string' &&
+        value.sessionId.length > 0 &&
+        value.sessionId.length <= 256)) &&
     'scopes' in value &&
     Array.isArray(value.scopes) &&
     value.scopes.length <= 256 &&
-    value.scopes.every((scope: unknown) => typeof scope === 'string' && scope.length > 0 && scope.length <= 256)
+    value.scopes.every(
+      (scope: unknown) => typeof scope === 'string' && scope.length > 0 && scope.length <= 256,
+    )
   )
 }
 export function immutableActor(actor: Actor): Actor {

package/src/conversations/action.ts

@@ -21,7 +21,9 @@ export type Action =
   | { kind: 'retry'; sourceId: string }
   | { kind: 'translation'; sourceId: string; targetLanguage: string }
 export type SelectionGuard =
-  { kind: 'explicit' } | { kind: 'selected'; turnId: string } | { kind: 'latest'; turnId: string | null }
+  | { kind: 'explicit' }
+  | { kind: 'selected'; turnId: string }
+  | { kind: 'latest'; turnId: string | null }
 export interface ReservationInput {
   input: string
   images: ImagePart[]
@@ -46,12 +48,16 @@ export function authoritative(
   guard: SelectionGuard,
   document: ConversationDocument | null,
 ): ReservationInput {
-  if ((request.conversationId ?? null) !== (document?.summary.id ?? null)) throw notFound('conversation')
+  if ((request.conversationId ?? null) !== (document?.summary.id ?? null))
+    throw notFound('conversation')
   if (document) {
     idle(document)
     if (guard.kind === 'selected' && document.summary.selectedTurnId !== guard.turnId)
       throw conflict('preparation_changed')
-    if (guard.kind === 'latest' && (document.summary.selectedTurnId !== null || latest(document) !== guard.turnId))
+    if (
+      guard.kind === 'latest' &&
+      (document.summary.selectedTurnId !== null || latest(document) !== guard.turnId)
+    )
       throw conflict('preparation_changed')
   }
   let input = request.input,
@@ -101,7 +107,11 @@ async function digest(value: string): Promise<string> {
   const bytes = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(value))
   return Array.from(new Uint8Array(bytes), (byte) => byte.toString(16).padStart(2, '0')).join('')
 }
-async function imageBasis(turnId: string, kind: string, images: readonly StoredImage[]): Promise<unknown[]> {
+async function imageBasis(
+  turnId: string,
+  kind: string,
+  images: readonly StoredImage[],
+): Promise<unknown[]> {
   return Promise.all(
     images.map(async (image, index) => ({
       turnId,
@@ -151,7 +161,11 @@ export async function fingerprint(
     })),
   )
   const currentImages = await Promise.all(
-    input.images.map(async (image, index) => ({ index, mime: image.mime, data: await digest(image.data) })),
+    input.images.map(async (image, index) => ({
+      index,
+      mime: image.mime,
+      data: await digest(image.data),
+    })),
   )
   return digest(
     canonicalJson({
@@ -185,13 +199,22 @@ export async function resolveAction(
   checkText('input', request.input, 100_000)
   validateImages(request.images ?? [])
   const sourced = Boolean(request.retryTurnId || request.translateTurnId || request.regenerate)
-  if (Number(Boolean(request.retryTurnId)) + Number(Boolean(request.translateTurnId)) + Number(request.regenerate) > 1)
+  if (
+    Number(Boolean(request.retryTurnId)) +
+      Number(Boolean(request.translateTurnId)) +
+      Number(request.regenerate) >
+    1
+  )
     throw badRequest('action', 'multiple')
   if (sourced && request.replyToId) throw badRequest('replyToId', 'action_conflict')
   if (sourced && (request.images?.length ?? 0) > 0) throw badRequest('images', 'action_conflict')
-  if (Boolean(request.translateTurnId) !== (request.targetLanguage !== null && request.targetLanguage !== undefined))
+  if (
+    Boolean(request.translateTurnId) !==
+    (request.targetLanguage !== null && request.targetLanguage !== undefined)
+  )
     throw badRequest('targetLanguage', 'translation_required')
-  if (!request.conversationId && (sourced || request.replyToId)) throw badRequest('conversationId', 'required')
+  if (!request.conversationId && (sourced || request.replyToId))
+    throw badRequest('conversationId', 'required')
   if ((request.retryTurnId || request.translateTurnId) && request.webSearch)
     throw badRequest('webSearch', 'action_conflict')
   let guard: SelectionGuard = { kind: 'explicit' },