@rei-standard/amsg-server 2.2.0 → 2.3.1

package/README.md

@@ -76,9 +76,26 @@ AI 配置消息的提示词可以用两种形态之一，**互斥二选一**：
 
 可选 `temperature?: number` 透传给 LLM：`completePrompt` 路径未传时默认 0.8（保持旧行为）；`messages` 路径未传时**不发**，让上游主路径自己决定。
 
+## 自定义分句正则 `splitPattern`（2.3.0+）
+
+`processSingleMessage` 默认按 `/([。！？!?]+)/` 把 LLM 返回的整段文本切成多条推送（每条间隔 1.5s）。`splitPattern` 让调用方覆盖这个正则：
+
+- `splitPattern: string` —— 单个正则 source（不带 flags）。例：`"([\\n]+)"` 按换行切。
+- `splitPattern: string[]` —— **级联**应用：第一个正则切完，每段再用第二个切。例：`["(\\n\\n+)", "([。！？!?]+)"]` 先按段落、再按句号。
+- 不传 / `null` / `[]` → 走默认正则，行为字节级与 2.2.x 一致；老库存任务（无此字段）零迁移。
+
+**约定**：
+
+- 传**正则 source**，不要带两边的 `/.../` 也不要带尾部 flag（`/foo/i` 会被当字面量斜杠 + 字面量 `i` 匹配）。需要大小写不敏感请用 `[Aa]` 这种字符类替代。
+- 想让分隔符回贴到前一段（与默认行为一致），把分隔符包进 `(...)` 捕获组。库不会自动包——传 `"\\n+"` 而不是 `"(\\n+)"` 会得到首尾相连、分隔符丢失的奇怪结果。
+- 数组语义是级联，不是"任一匹配就切"。后者请自己用 `|` 合一条正则。
+- 限制：每项 ≤ 200 字符，数组 ≤ 10 项；非法或无法 `new RegExp(...)` 通过 → `400 INVALID_PARAMETERS`（schedule）/ `400 INVALID_UPDATE_DATA`（update）。
+- `update-message` 显式传 `splitPattern: null` 可重置回默认；不传则保留原值。
+
 ## 导出（新增）
 
 - `validateLlmMessagesArray(messages)` — 同步预校验 messages 数组，返回 `string | null`（错误信息 / 通过）。和 `@rei-standard/amsg-instant` 的校验规则字节级一致。
+- `validateSplitPattern(value)` — 同步预校验 splitPattern（string / string[] / null），返回 `string | null`。
 
 ## 一体化初始化流程
 

package/dist/index.cjs

@@ -48,6 +48,48 @@ function isValidUUIDv4(uuid) {
   return uuidV4Regex.test(uuid);
 }
 var VALID_LLM_MESSAGE_ROLES = /* @__PURE__ */ new Set(["system", "user", "assistant", "tool"]);
+var AVATAR_URL_MAX_LENGTH = 2048;
+function validateAvatarUrl(value) {
+  if (value === void 0 || value === null) return null;
+  if (typeof value !== "string") {
+    return "avatarUrl \u5FC5\u987B\u662F\u5B57\u7B26\u4E32";
+  }
+  if (/^data:/i.test(value)) {
+    return "\u5934\u50CF\u4E0D\u652F\u6301\u4F20\u5165 data: URI\uFF0C\u8BF7\u6539\u4E3A\u516C\u7F51\u53EF\u8BBF\u95EE\u7684 https:// \u56FE\u7247 URL";
+  }
+  if (value.length > AVATAR_URL_MAX_LENGTH) {
+    return `\u5934\u50CF URL \u957F\u5EA6 ${value.length} \u5B57\u7B26\u8D85\u8FC7 ${AVATAR_URL_MAX_LENGTH} \u4E0A\u9650\uFF0C\u8BF7\u6539\u4E3A\u66F4\u77ED\u7684\u56FE\u7247 URL`;
+  }
+  if (!isValidUrl(value)) {
+    return "avatarUrl \u4E0D\u662F\u5408\u6CD5 URL";
+  }
+  return null;
+}
+var SPLIT_PATTERN_MAX_LENGTH = 200;
+var SPLIT_PATTERN_MAX_ITEMS = 10;
+function validateSplitPattern(value) {
+  if (value === void 0 || value === null) return null;
+  const isArray = Array.isArray(value);
+  const items = isArray ? value : [value];
+  if (isArray && items.length === 0) return null;
+  if (items.length > SPLIT_PATTERN_MAX_ITEMS) {
+    return `splitPattern \u6570\u7EC4\u6700\u591A ${SPLIT_PATTERN_MAX_ITEMS} \u9879`;
+  }
+  for (let i = 0; i < items.length; i++) {
+    const s = items[i];
+    const label = isArray ? `splitPattern[${i}]` : "splitPattern";
+    if (typeof s !== "string") return `${label} \u5FC5\u987B\u662F\u5B57\u7B26\u4E32`;
+    if (s.length > SPLIT_PATTERN_MAX_LENGTH) {
+      return `${label} \u4E0D\u80FD\u8D85\u8FC7 ${SPLIT_PATTERN_MAX_LENGTH} \u5B57\u7B26`;
+    }
+    try {
+      new RegExp(s);
+    } catch (_) {
+      return `${label} \u4E0D\u662F\u6709\u6548\u6B63\u5219\u8868\u8FBE\u5F0F`;
+    }
+  }
+  return null;
+}
 function validateLlmMessagesArray(messages) {
   if (!Array.isArray(messages) || messages.length === 0) {
     return "messages must be a non-empty array";
@@ -146,8 +188,9 @@ function validateScheduleMessagePayload(payload) {
   if (payload.temperature !== void 0 && payload.temperature !== null && (typeof payload.temperature !== "number" || !Number.isFinite(payload.temperature))) {
     return { valid: false, errorCode: "INVALID_PARAMETERS", errorMessage: "\u7F3A\u5C11\u5FC5\u9700\u53C2\u6570\u6216\u53C2\u6570\u683C\u5F0F\u9519\u8BEF", details: { invalidFields: ["temperature (must be a finite number)"] } };
   }
-  if (payload.avatarUrl && !isValidUrl(payload.avatarUrl)) {
-    return { valid: false, errorCode: "INVALID_PARAMETERS", errorMessage: "\u7F3A\u5C11\u5FC5\u9700\u53C2\u6570\u6216\u53C2\u6570\u683C\u5F0F\u9519\u8BEF", details: { invalidFields: ["avatarUrl (invalid URL format)"] } };
+  const avatarErr = validateAvatarUrl(payload.avatarUrl);
+  if (avatarErr) {
+    return { valid: false, errorCode: "INVALID_PARAMETERS", errorMessage: avatarErr, details: { invalidFields: ["avatarUrl"] } };
   }
   if (payload.uuid && !isValidUUID(payload.uuid)) {
     return { valid: false, errorCode: "INVALID_PARAMETERS", errorMessage: "\u7F3A\u5C11\u5FC5\u9700\u53C2\u6570\u6216\u53C2\u6570\u683C\u5F0F\u9519\u8BEF", details: { invalidFields: ["uuid (invalid UUID format)"] } };
@@ -155,6 +198,10 @@ function validateScheduleMessagePayload(payload) {
   if (payload.messageSubtype !== void 0 && payload.messageSubtype !== null && typeof payload.messageSubtype !== "string") {
     return { valid: false, errorCode: "INVALID_PARAMETERS", errorMessage: "\u7F3A\u5C11\u5FC5\u9700\u53C2\u6570\u6216\u53C2\u6570\u683C\u5F0F\u9519\u8BEF", details: { invalidFields: ["messageSubtype"] } };
   }
+  const splitErr = validateSplitPattern(payload.splitPattern);
+  if (splitErr) {
+    return { valid: false, errorCode: "INVALID_PARAMETERS", errorMessage: splitErr, details: { invalidFields: ["splitPattern"] } };
+  }
   return { valid: true };
 }
 
@@ -435,6 +482,26 @@ function isUniqueViolation(error) {
 
 // src/server/lib/message-processor.js
 
+var DEFAULT_SPLIT_REGEX = /([。！？!?]+)/;
+function splitOnceByRegex(chunk, regex) {
+  const out = chunk.split(regex).reduce((acc, part, i, arr) => {
+    if (i % 2 === 0 && part.trim()) {
+      const punctuation = arr[i + 1] || "";
+      acc.push(part.trim() + punctuation);
+    }
+    return acc;
+  }, []).filter((s) => s.length > 0);
+  return out.length > 0 ? out : [chunk];
+}
+function splitMessageIntoSentences(messageContent, splitPattern = null) {
+  const sources = splitPattern == null ? null : Array.isArray(splitPattern) ? splitPattern : [splitPattern];
+  const regexes = sources && sources.length > 0 ? sources.map((s) => new RegExp(s)) : [DEFAULT_SPLIT_REGEX];
+  let chunks = [messageContent];
+  for (const regex of regexes) {
+    chunks = chunks.flatMap((c) => splitOnceByRegex(c, regex));
+  }
+  return chunks.length > 0 ? chunks : [messageContent];
+}
 async function processSingleMessage(task, ctx, providedMasterKey) {
   try {
     const masterKey = providedMasterKey || ctx.masterKey;
@@ -460,14 +527,7 @@ async function processSingleMessage(task, ctx, providedMasterKey) {
     } else {
       throw new Error("Invalid message configuration: no content source available");
     }
-    const sentences = messageContent.split(/([。！？!?]+)/).reduce((acc, part, i, arr) => {
-      if (i % 2 === 0 && part.trim()) {
-        const punctuation = arr[i + 1] || "";
-        acc.push(part.trim() + punctuation);
-      }
-      return acc;
-    }, []).filter((s) => s.length > 0);
-    const messages = sentences.length > 0 ? sentences : [messageContent];
+    const messages = splitMessageIntoSentences(messageContent, _nullishCoalesce(decryptedPayload.splitPattern, () => ( null)));
     if (!ctx.vapid.email || !ctx.vapid.publicKey || !ctx.vapid.privateKey) {
       throw new Error("VAPID configuration missing - push notifications cannot be sent");
     }
@@ -583,7 +643,7 @@ async function _callAI(payload) {
     );
   }
   const aiData = await aiResponse.json();
-  const content = _optionalChain([aiData, 'optionalAccess', _ => _.choices, 'optionalAccess', _2 => _2[0], 'optionalAccess', _3 => _3.message, 'optionalAccess', _4 => _4.content]);
+  const content = _optionalChain([aiData, 'optionalAccess', _2 => _2.choices, 'optionalAccess', _3 => _3[0], 'optionalAccess', _4 => _4.message, 'optionalAccess', _5 => _5.content]);
   if (typeof content !== "string" || !content.trim()) {
     throw new Error("AI API error: response missing choices[0].message.content");
   }
@@ -706,6 +766,10 @@ function createScheduleMessageHandler(ctx) {
       messages: Array.isArray(payload.messages) ? payload.messages : null,
       maxTokens: _nullishCoalesce(payload.maxTokens, () => ( null)),
       temperature: _nullishCoalesce(payload.temperature, () => ( null)),
+      // 0.6.0+: optional caller-provided regex (string or string[]) used by
+      // the message processor to chunk LLM output into individual pushes.
+      // null → processor falls back to the default /([。！？!?]+)/ regex.
+      splitPattern: _nullishCoalesce(payload.splitPattern, () => ( null)),
       pushSubscription: payload.pushSubscription,
       metadata: payload.metadata || {}
     };
@@ -1029,6 +1093,18 @@ function createUpdateMessageHandler(ctx) {
     if (Object.prototype.hasOwnProperty.call(updates, "temperature") && updates.temperature !== null && (typeof updates.temperature !== "number" || !Number.isFinite(updates.temperature))) {
       return { status: 400, body: { success: false, error: { code: "INVALID_UPDATE_DATA", message: "\u66F4\u65B0\u6570\u636E\u683C\u5F0F\u9519\u8BEF", details: { invalidFields: ["temperature"] } } } };
     }
+    if (Object.prototype.hasOwnProperty.call(updates, "splitPattern")) {
+      const splitErr = validateSplitPattern(updates.splitPattern);
+      if (splitErr) {
+        return { status: 400, body: { success: false, error: { code: "INVALID_UPDATE_DATA", message: splitErr, details: { invalidFields: ["splitPattern"] } } } };
+      }
+    }
+    if (Object.prototype.hasOwnProperty.call(updates, "avatarUrl")) {
+      const avatarErr = validateAvatarUrl(updates.avatarUrl);
+      if (avatarErr) {
+        return { status: 400, body: { success: false, error: { code: "INVALID_UPDATE_DATA", message: avatarErr, details: { invalidFields: ["avatarUrl"] } } } };
+      }
+    }
     const existingTask = await db.getTaskByUuid(taskUuid, userId);
     if (!existingTask) {
       const taskStatus = await db.getTaskStatus(taskUuid, userId);
@@ -1054,7 +1130,11 @@ function createUpdateMessageHandler(ctx) {
       ...updates.avatarUrl && { avatarUrl: updates.avatarUrl },
       ...updates.metadata && { metadata: updates.metadata },
       ...Object.prototype.hasOwnProperty.call(updates, "maxTokens") && { maxTokens: _nullishCoalesce(updates.maxTokens, () => ( null)) },
-      ...Object.prototype.hasOwnProperty.call(updates, "temperature") && { temperature: _nullishCoalesce(updates.temperature, () => ( null)) }
+      ...Object.prototype.hasOwnProperty.call(updates, "temperature") && { temperature: _nullishCoalesce(updates.temperature, () => ( null)) },
+      // splitPattern: hasOwnProperty so that explicit `null` (= revert to
+      // default) doesn't get swallowed by truthy-spread the way the optional
+      // string fields above are.
+      ...Object.prototype.hasOwnProperty.call(updates, "splitPattern") && { splitPattern: _nullishCoalesce(updates.splitPattern, () => ( null)) }
     };
     const encryptedPayload = encryptForStorage(JSON.stringify(updatedData), userKey);
     const extraFields = updates.nextSendAt ? { next_send_at: updates.nextSendAt } : void 0;
@@ -1246,7 +1326,7 @@ async function resolveBlobStore(namespace) {
   }
   try {
     const blobModule = await Promise.resolve().then(() => _interopRequireWildcard(require("@netlify/blobs")));
-    const getStore = blobModule.getStore || _optionalChain([blobModule, 'access', _5 => _5.default, 'optionalAccess', _6 => _6.getStore]);
+    const getStore = blobModule.getStore || _optionalChain([blobModule, 'access', _6 => _6.default, 'optionalAccess', _7 => _7.getStore]);
     if (typeof getStore === "function") {
       return getStore({ name: namespace });
     }
@@ -1578,4 +1658,6 @@ async function createReiServer(config) {
 
 
 
-exports.createAdapter = createAdapter; exports.createReiServer = createReiServer; exports.createTenantToken = createTenantToken; exports.decryptFromStorage = decryptFromStorage; exports.decryptPayload = decryptPayload; exports.deriveUserEncryptionKey = deriveUserEncryptionKey; exports.encryptForStorage = encryptForStorage; exports.isValidISO8601 = isValidISO8601; exports.isValidUUID = isValidUUID; exports.isValidUUIDv4 = isValidUUIDv4; exports.isValidUrl = isValidUrl; exports.validateLlmMessagesArray = validateLlmMessagesArray; exports.validateScheduleMessagePayload = validateScheduleMessagePayload; exports.verifyTenantToken = verifyTenantToken;
+
+
+exports.createAdapter = createAdapter; exports.createReiServer = createReiServer; exports.createTenantToken = createTenantToken; exports.decryptFromStorage = decryptFromStorage; exports.decryptPayload = decryptPayload; exports.deriveUserEncryptionKey = deriveUserEncryptionKey; exports.encryptForStorage = encryptForStorage; exports.isValidISO8601 = isValidISO8601; exports.isValidUUID = isValidUUID; exports.isValidUUIDv4 = isValidUUIDv4; exports.isValidUrl = isValidUrl; exports.validateAvatarUrl = validateAvatarUrl; exports.validateLlmMessagesArray = validateLlmMessagesArray; exports.validateScheduleMessagePayload = validateScheduleMessagePayload; exports.validateSplitPattern = validateSplitPattern; exports.verifyTenantToken = verifyTenantToken;

package/dist/index.d.cts

@@ -103,6 +103,78 @@ function isValidUUIDv4(uuid) {
 
 const VALID_LLM_MESSAGE_ROLES = new Set(['system', 'user', 'assistant', 'tool']);
 
+const AVATAR_URL_MAX_LENGTH = 2048;
+
+/**
+ * Validate the optional `avatarUrl` field. Rejects `data:` URIs (typically
+ * base64-encoded inline images) and anything longer than 2048 chars, both
+ * of which are the dominant trigger for downstream 413 / Web Push 4 KB
+ * payload errors. Returns an error message string, or null when valid.
+ *
+ * Mirrors @rei-standard/amsg-instant's `validateAvatarUrl` (kept in lockstep
+ * on purpose — both packages forward `avatarUrl` to the same SW push payload).
+ *
+ * @param {unknown} value
+ * @returns {string | null}
+ */
+function validateAvatarUrl(value) {
+  if (value === undefined || value === null) return null;
+  if (typeof value !== 'string') {
+    return 'avatarUrl 必须是字符串';
+  }
+  if (/^data:/i.test(value)) {
+    return '头像不支持传入 data: URI，请改为公网可访问的 https:// 图片 URL';
+  }
+  if (value.length > AVATAR_URL_MAX_LENGTH) {
+    return `头像 URL 长度 ${value.length} 字符超过 ${AVATAR_URL_MAX_LENGTH} 上限，请改为更短的图片 URL`;
+  }
+  if (!isValidUrl(value)) {
+    return 'avatarUrl 不是合法 URL';
+  }
+  return null;
+}
+
+const SPLIT_PATTERN_MAX_LENGTH = 200;
+const SPLIT_PATTERN_MAX_ITEMS = 10;
+
+/**
+ * Validate the optional `splitPattern` field. Mirrors
+ * @rei-standard/amsg-instant's `validateSplitPattern` (kept in lockstep).
+ * Accepts `string`, `string[]`, or absent/null. Returns an error message
+ * string, or null when valid.
+ *
+ * Limits (per-item length ≤ 200, array ≤ 10 items, must compile via
+ * `new RegExp(item)`) are an **input-size guard**, NOT a ReDoS defense —
+ * a 6-character pattern like `(a+)+$` is enough to trigger catastrophic
+ * backtracking. The real backstop is Worker / runtime CPU limits + the
+ * fact that splitPattern is stored under the user's own encrypted task
+ * and matched against output from the user's own LLM API key, so the
+ * blast radius is self-inflicted only (no cross-tenant attack surface).
+ *
+ * @param {unknown} value
+ * @returns {string | null}
+ */
+function validateSplitPattern(value) {
+  if (value === undefined || value === null) return null;
+  const isArray = Array.isArray(value);
+  const items = isArray ? value : [value];
+  if (isArray && items.length === 0) return null;          // empty array = use default
+  if (items.length > SPLIT_PATTERN_MAX_ITEMS) {
+    return `splitPattern 数组最多 ${SPLIT_PATTERN_MAX_ITEMS} 项`;
+  }
+  for (let i = 0; i < items.length; i++) {
+    const s = items[i];
+    const label = isArray ? `splitPattern[${i}]` : 'splitPattern';
+    if (typeof s !== 'string') return `${label} 必须是字符串`;
+    if (s.length > SPLIT_PATTERN_MAX_LENGTH) {
+      return `${label} 不能超过 ${SPLIT_PATTERN_MAX_LENGTH} 字符`;
+    }
+    try { new RegExp(s); }
+    catch (_) { return `${label} 不是有效正则表达式`; }
+  }
+  return null;
+}
+
 /**
  * Validate an OpenAI-style messages array. Same shape contract as
  * `@rei-standard/amsg-instant` (kept in lockstep on purpose — both packages
@@ -241,8 +313,9 @@ function validateScheduleMessagePayload(payload) {
     return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { invalidFields: ['temperature (must be a finite number)'] } };
   }
 
-  if (payload.avatarUrl && !isValidUrl(payload.avatarUrl)) {
-    return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { invalidFields: ['avatarUrl (invalid URL format)'] } };
+  const avatarErr = validateAvatarUrl(payload.avatarUrl);
+  if (avatarErr) {
+    return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: avatarErr, details: { invalidFields: ['avatarUrl'] } };
   }
   if (payload.uuid && !isValidUUID(payload.uuid)) {
     return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { invalidFields: ['uuid (invalid UUID format)'] } };
@@ -258,6 +331,11 @@ function validateScheduleMessagePayload(payload) {
     return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { invalidFields: ['messageSubtype'] } };
   }
 
+  const splitErr = validateSplitPattern(payload.splitPattern);
+  if (splitErr) {
+    return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: splitErr, details: { invalidFields: ['splitPattern'] } };
+  }
+
   return { valid: true };
 }
 
@@ -723,6 +801,55 @@ function isUniqueViolation(error) {
  */
 
 
+const DEFAULT_SPLIT_REGEX = /([。！？!?]+)/;
+
+/**
+ * Split a single chunk by one regex; on no-match return [chunk] so a later
+ * regex in a cascade can still take a swing at it.
+ */
+function splitOnceByRegex(chunk, regex) {
+  const out = chunk
+    .split(regex)
+    .reduce((acc, part, i, arr) => {
+      if (i % 2 === 0 && part.trim()) {
+        const punctuation = arr[i + 1] || '';
+        acc.push(part.trim() + punctuation);
+      }
+      return acc;
+    }, [])
+    .filter(s => s.length > 0);
+  return out.length > 0 ? out : [chunk];
+}
+
+/**
+ * Sentence splitter — kept byte-for-byte equivalent to
+ * `@rei-standard/amsg-instant`'s `splitMessageIntoSentences`. Server carries
+ * its own copy to avoid an architectural dependency on the instant package.
+ * Name matches the instant export on purpose so cross-package grep finds
+ * both copies; if you fix a bug here, fix it in the instant copy too.
+ *
+ * @param {string} messageContent
+ * @param {string | string[] | null} [splitPattern=null]
+ * @returns {string[]}
+ */
+function splitMessageIntoSentences(messageContent, splitPattern = null) {
+  const sources =
+    splitPattern == null ? null :
+    Array.isArray(splitPattern) ? splitPattern :
+    [splitPattern];
+
+  const regexes = (sources && sources.length > 0)
+    ? sources.map(s => new RegExp(s))
+    : [DEFAULT_SPLIT_REGEX];
+
+  let chunks = [messageContent];
+  for (const regex of regexes) {
+    chunks = chunks.flatMap(c => splitOnceByRegex(c, regex));
+  }
+
+  return chunks.length > 0 ? chunks : [messageContent];
+}
+
 /**
  * @typedef {Object} ProcessorContext
  * @property {Object}  webpush           - The web-push module instance (already VAPID-configured).
@@ -769,19 +896,12 @@ async function processSingleMessage(task, ctx, providedMasterKey) {
       throw new Error('Invalid message configuration: no content source available');
     }
 
-    // Sentence splitting
-    const sentences = messageContent
-      .split(/([。！？!?]+)/)
-      .reduce((acc, part, i, arr) => {
-        if (i % 2 === 0 && part.trim()) {
-          const punctuation = arr[i + 1] || '';
-          acc.push(part.trim() + punctuation);
-        }
-        return acc;
-      }, [])
-      .filter(s => s.length > 0);
-
-    const messages = sentences.length > 0 ? sentences : [messageContent];
+    // Sentence splitting (mirrors @rei-standard/amsg-instant
+    // splitMessageIntoSentences — keep in lockstep; do not drift). Caller may
+    // override the default regex via decryptedPayload.splitPattern (string
+    // for a single regex, string[] for a cascade). Validation already enforces
+    // length cap + RegExp compilability upstream.
+    const messages = splitMessageIntoSentences(messageContent, decryptedPayload.splitPattern ?? null);
 
     if (!ctx.vapid.email || !ctx.vapid.publicKey || !ctx.vapid.privateKey) {
       throw new Error('VAPID configuration missing - push notifications cannot be sent');
@@ -1150,6 +1270,10 @@ function createScheduleMessageHandler(ctx) {
       messages: Array.isArray(payload.messages) ? payload.messages : null,
       maxTokens: payload.maxTokens ?? null,
       temperature: payload.temperature ?? null,
+      // 0.6.0+: optional caller-provided regex (string or string[]) used by
+      // the message processor to chunk LLM output into individual pushes.
+      // null → processor falls back to the default /([。！？!?]+)/ regex.
+      splitPattern: payload.splitPattern ?? null,
       pushSubscription: payload.pushSubscription,
       metadata: payload.metadata || {}
     };
@@ -1569,6 +1693,18 @@ function createUpdateMessageHandler(ctx) {
     ) {
       return { status: 400, body: { success: false, error: { code: 'INVALID_UPDATE_DATA', message: '更新数据格式错误', details: { invalidFields: ['temperature'] } } } };
     }
+    if (Object.prototype.hasOwnProperty.call(updates, 'splitPattern')) {
+      const splitErr = validateSplitPattern(updates.splitPattern);
+      if (splitErr) {
+        return { status: 400, body: { success: false, error: { code: 'INVALID_UPDATE_DATA', message: splitErr, details: { invalidFields: ['splitPattern'] } } } };
+      }
+    }
+    if (Object.prototype.hasOwnProperty.call(updates, 'avatarUrl')) {
+      const avatarErr = validateAvatarUrl(updates.avatarUrl);
+      if (avatarErr) {
+        return { status: 400, body: { success: false, error: { code: 'INVALID_UPDATE_DATA', message: avatarErr, details: { invalidFields: ['avatarUrl'] } } } };
+      }
+    }
 
     // Fetch existing task
     const existingTask = await db.getTaskByUuid(taskUuid, userId);
@@ -1603,7 +1739,11 @@ function createUpdateMessageHandler(ctx) {
       ...(updates.avatarUrl && { avatarUrl: updates.avatarUrl }),
       ...(updates.metadata && { metadata: updates.metadata }),
       ...(Object.prototype.hasOwnProperty.call(updates, 'maxTokens') && { maxTokens: updates.maxTokens ?? null }),
-      ...(Object.prototype.hasOwnProperty.call(updates, 'temperature') && { temperature: updates.temperature ?? null })
+      ...(Object.prototype.hasOwnProperty.call(updates, 'temperature') && { temperature: updates.temperature ?? null }),
+      // splitPattern: hasOwnProperty so that explicit `null` (= revert to
+      // default) doesn't get swallowed by truthy-spread the way the optional
+      // string fields above are.
+      ...(Object.prototype.hasOwnProperty.call(updates, 'splitPattern') && { splitPattern: updates.splitPattern ?? null })
     };
 
     const encryptedPayload = encryptForStorage(JSON.stringify(updatedData), userKey);
@@ -2337,4 +2477,4 @@ async function createReiServer(config) {
   };
 }
 
-export { createAdapter, createReiServer, createTenantToken, decryptFromStorage, decryptPayload, deriveUserEncryptionKey, encryptForStorage, isValidISO8601, isValidUUID, isValidUUIDv4, isValidUrl, validateLlmMessagesArray, validateScheduleMessagePayload, verifyTenantToken };
+export { createAdapter, createReiServer, createTenantToken, decryptFromStorage, decryptPayload, deriveUserEncryptionKey, encryptForStorage, isValidISO8601, isValidUUID, isValidUUIDv4, isValidUrl, validateAvatarUrl, validateLlmMessagesArray, validateScheduleMessagePayload, validateSplitPattern, verifyTenantToken };

package/dist/index.d.ts

@@ -103,6 +103,78 @@ function isValidUUIDv4(uuid) {
 
 const VALID_LLM_MESSAGE_ROLES = new Set(['system', 'user', 'assistant', 'tool']);
 
+const AVATAR_URL_MAX_LENGTH = 2048;
+
+/**
+ * Validate the optional `avatarUrl` field. Rejects `data:` URIs (typically
+ * base64-encoded inline images) and anything longer than 2048 chars, both
+ * of which are the dominant trigger for downstream 413 / Web Push 4 KB
+ * payload errors. Returns an error message string, or null when valid.
+ *
+ * Mirrors @rei-standard/amsg-instant's `validateAvatarUrl` (kept in lockstep
+ * on purpose — both packages forward `avatarUrl` to the same SW push payload).
+ *
+ * @param {unknown} value
+ * @returns {string | null}
+ */
+function validateAvatarUrl(value) {
+  if (value === undefined || value === null) return null;
+  if (typeof value !== 'string') {
+    return 'avatarUrl 必须是字符串';
+  }
+  if (/^data:/i.test(value)) {
+    return '头像不支持传入 data: URI，请改为公网可访问的 https:// 图片 URL';
+  }
+  if (value.length > AVATAR_URL_MAX_LENGTH) {
+    return `头像 URL 长度 ${value.length} 字符超过 ${AVATAR_URL_MAX_LENGTH} 上限，请改为更短的图片 URL`;
+  }
+  if (!isValidUrl(value)) {
+    return 'avatarUrl 不是合法 URL';
+  }
+  return null;
+}
+
+const SPLIT_PATTERN_MAX_LENGTH = 200;
+const SPLIT_PATTERN_MAX_ITEMS = 10;
+
+/**
+ * Validate the optional `splitPattern` field. Mirrors
+ * @rei-standard/amsg-instant's `validateSplitPattern` (kept in lockstep).
+ * Accepts `string`, `string[]`, or absent/null. Returns an error message
+ * string, or null when valid.
+ *
+ * Limits (per-item length ≤ 200, array ≤ 10 items, must compile via
+ * `new RegExp(item)`) are an **input-size guard**, NOT a ReDoS defense —
+ * a 6-character pattern like `(a+)+$` is enough to trigger catastrophic
+ * backtracking. The real backstop is Worker / runtime CPU limits + the
+ * fact that splitPattern is stored under the user's own encrypted task
+ * and matched against output from the user's own LLM API key, so the
+ * blast radius is self-inflicted only (no cross-tenant attack surface).
+ *
+ * @param {unknown} value
+ * @returns {string | null}
+ */
+function validateSplitPattern(value) {
+  if (value === undefined || value === null) return null;
+  const isArray = Array.isArray(value);
+  const items = isArray ? value : [value];
+  if (isArray && items.length === 0) return null;          // empty array = use default
+  if (items.length > SPLIT_PATTERN_MAX_ITEMS) {
+    return `splitPattern 数组最多 ${SPLIT_PATTERN_MAX_ITEMS} 项`;
+  }
+  for (let i = 0; i < items.length; i++) {
+    const s = items[i];
+    const label = isArray ? `splitPattern[${i}]` : 'splitPattern';
+    if (typeof s !== 'string') return `${label} 必须是字符串`;
+    if (s.length > SPLIT_PATTERN_MAX_LENGTH) {
+      return `${label} 不能超过 ${SPLIT_PATTERN_MAX_LENGTH} 字符`;
+    }
+    try { new RegExp(s); }
+    catch (_) { return `${label} 不是有效正则表达式`; }
+  }
+  return null;
+}
+
 /**
  * Validate an OpenAI-style messages array. Same shape contract as
  * `@rei-standard/amsg-instant` (kept in lockstep on purpose — both packages
@@ -241,8 +313,9 @@ function validateScheduleMessagePayload(payload) {
     return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { invalidFields: ['temperature (must be a finite number)'] } };
   }
 
-  if (payload.avatarUrl && !isValidUrl(payload.avatarUrl)) {
-    return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { invalidFields: ['avatarUrl (invalid URL format)'] } };
+  const avatarErr = validateAvatarUrl(payload.avatarUrl);
+  if (avatarErr) {
+    return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: avatarErr, details: { invalidFields: ['avatarUrl'] } };
   }
   if (payload.uuid && !isValidUUID(payload.uuid)) {
     return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { invalidFields: ['uuid (invalid UUID format)'] } };
@@ -258,6 +331,11 @@ function validateScheduleMessagePayload(payload) {
     return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { invalidFields: ['messageSubtype'] } };
   }
 
+  const splitErr = validateSplitPattern(payload.splitPattern);
+  if (splitErr) {
+    return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: splitErr, details: { invalidFields: ['splitPattern'] } };
+  }
+
   return { valid: true };
 }
 
@@ -723,6 +801,55 @@ function isUniqueViolation(error) {
  */
 
 
+const DEFAULT_SPLIT_REGEX = /([。！？!?]+)/;
+
+/**
+ * Split a single chunk by one regex; on no-match return [chunk] so a later
+ * regex in a cascade can still take a swing at it.
+ */
+function splitOnceByRegex(chunk, regex) {
+  const out = chunk
+    .split(regex)
+    .reduce((acc, part, i, arr) => {
+      if (i % 2 === 0 && part.trim()) {
+        const punctuation = arr[i + 1] || '';
+        acc.push(part.trim() + punctuation);
+      }
+      return acc;
+    }, [])
+    .filter(s => s.length > 0);
+  return out.length > 0 ? out : [chunk];
+}
+
+/**
+ * Sentence splitter — kept byte-for-byte equivalent to
+ * `@rei-standard/amsg-instant`'s `splitMessageIntoSentences`. Server carries
+ * its own copy to avoid an architectural dependency on the instant package.
+ * Name matches the instant export on purpose so cross-package grep finds
+ * both copies; if you fix a bug here, fix it in the instant copy too.
+ *
+ * @param {string} messageContent
+ * @param {string | string[] | null} [splitPattern=null]
+ * @returns {string[]}
+ */
+function splitMessageIntoSentences(messageContent, splitPattern = null) {
+  const sources =
+    splitPattern == null ? null :
+    Array.isArray(splitPattern) ? splitPattern :
+    [splitPattern];
+
+  const regexes = (sources && sources.length > 0)
+    ? sources.map(s => new RegExp(s))
+    : [DEFAULT_SPLIT_REGEX];
+
+  let chunks = [messageContent];
+  for (const regex of regexes) {
+    chunks = chunks.flatMap(c => splitOnceByRegex(c, regex));
+  }
+
+  return chunks.length > 0 ? chunks : [messageContent];
+}
+
 /**
  * @typedef {Object} ProcessorContext
  * @property {Object}  webpush           - The web-push module instance (already VAPID-configured).
@@ -769,19 +896,12 @@ async function processSingleMessage(task, ctx, providedMasterKey) {
       throw new Error('Invalid message configuration: no content source available');
     }
 
-    // Sentence splitting
-    const sentences = messageContent
-      .split(/([。！？!?]+)/)
-      .reduce((acc, part, i, arr) => {
-        if (i % 2 === 0 && part.trim()) {
-          const punctuation = arr[i + 1] || '';
-          acc.push(part.trim() + punctuation);
-        }
-        return acc;
-      }, [])
-      .filter(s => s.length > 0);
-
-    const messages = sentences.length > 0 ? sentences : [messageContent];
+    // Sentence splitting (mirrors @rei-standard/amsg-instant
+    // splitMessageIntoSentences — keep in lockstep; do not drift). Caller may
+    // override the default regex via decryptedPayload.splitPattern (string
+    // for a single regex, string[] for a cascade). Validation already enforces
+    // length cap + RegExp compilability upstream.
+    const messages = splitMessageIntoSentences(messageContent, decryptedPayload.splitPattern ?? null);
 
     if (!ctx.vapid.email || !ctx.vapid.publicKey || !ctx.vapid.privateKey) {
       throw new Error('VAPID configuration missing - push notifications cannot be sent');
@@ -1150,6 +1270,10 @@ function createScheduleMessageHandler(ctx) {
       messages: Array.isArray(payload.messages) ? payload.messages : null,
       maxTokens: payload.maxTokens ?? null,
       temperature: payload.temperature ?? null,
+      // 0.6.0+: optional caller-provided regex (string or string[]) used by
+      // the message processor to chunk LLM output into individual pushes.
+      // null → processor falls back to the default /([。！？!?]+)/ regex.
+      splitPattern: payload.splitPattern ?? null,
       pushSubscription: payload.pushSubscription,
       metadata: payload.metadata || {}
     };
@@ -1569,6 +1693,18 @@ function createUpdateMessageHandler(ctx) {
     ) {
       return { status: 400, body: { success: false, error: { code: 'INVALID_UPDATE_DATA', message: '更新数据格式错误', details: { invalidFields: ['temperature'] } } } };
     }
+    if (Object.prototype.hasOwnProperty.call(updates, 'splitPattern')) {
+      const splitErr = validateSplitPattern(updates.splitPattern);
+      if (splitErr) {
+        return { status: 400, body: { success: false, error: { code: 'INVALID_UPDATE_DATA', message: splitErr, details: { invalidFields: ['splitPattern'] } } } };
+      }
+    }
+    if (Object.prototype.hasOwnProperty.call(updates, 'avatarUrl')) {
+      const avatarErr = validateAvatarUrl(updates.avatarUrl);
+      if (avatarErr) {
+        return { status: 400, body: { success: false, error: { code: 'INVALID_UPDATE_DATA', message: avatarErr, details: { invalidFields: ['avatarUrl'] } } } };
+      }
+    }
 
     // Fetch existing task
     const existingTask = await db.getTaskByUuid(taskUuid, userId);
@@ -1603,7 +1739,11 @@ function createUpdateMessageHandler(ctx) {
       ...(updates.avatarUrl && { avatarUrl: updates.avatarUrl }),
       ...(updates.metadata && { metadata: updates.metadata }),
       ...(Object.prototype.hasOwnProperty.call(updates, 'maxTokens') && { maxTokens: updates.maxTokens ?? null }),
-      ...(Object.prototype.hasOwnProperty.call(updates, 'temperature') && { temperature: updates.temperature ?? null })
+      ...(Object.prototype.hasOwnProperty.call(updates, 'temperature') && { temperature: updates.temperature ?? null }),
+      // splitPattern: hasOwnProperty so that explicit `null` (= revert to
+      // default) doesn't get swallowed by truthy-spread the way the optional
+      // string fields above are.
+      ...(Object.prototype.hasOwnProperty.call(updates, 'splitPattern') && { splitPattern: updates.splitPattern ?? null })
     };
 
     const encryptedPayload = encryptForStorage(JSON.stringify(updatedData), userKey);
@@ -2337,4 +2477,4 @@ async function createReiServer(config) {
   };
 }
 
-export { createAdapter, createReiServer, createTenantToken, decryptFromStorage, decryptPayload, deriveUserEncryptionKey, encryptForStorage, isValidISO8601, isValidUUID, isValidUUIDv4, isValidUrl, validateLlmMessagesArray, validateScheduleMessagePayload, verifyTenantToken };
+export { createAdapter, createReiServer, createTenantToken, decryptFromStorage, decryptPayload, deriveUserEncryptionKey, encryptForStorage, isValidISO8601, isValidUUID, isValidUUIDv4, isValidUrl, validateAvatarUrl, validateLlmMessagesArray, validateScheduleMessagePayload, validateSplitPattern, verifyTenantToken };

package/dist/index.mjs

@@ -48,6 +48,48 @@ function isValidUUIDv4(uuid) {
   return uuidV4Regex.test(uuid);
 }
 var VALID_LLM_MESSAGE_ROLES = /* @__PURE__ */ new Set(["system", "user", "assistant", "tool"]);
+var AVATAR_URL_MAX_LENGTH = 2048;
+function validateAvatarUrl(value) {
+  if (value === void 0 || value === null) return null;
+  if (typeof value !== "string") {
+    return "avatarUrl \u5FC5\u987B\u662F\u5B57\u7B26\u4E32";
+  }
+  if (/^data:/i.test(value)) {
+    return "\u5934\u50CF\u4E0D\u652F\u6301\u4F20\u5165 data: URI\uFF0C\u8BF7\u6539\u4E3A\u516C\u7F51\u53EF\u8BBF\u95EE\u7684 https:// \u56FE\u7247 URL";
+  }
+  if (value.length > AVATAR_URL_MAX_LENGTH) {
+    return `\u5934\u50CF URL \u957F\u5EA6 ${value.length} \u5B57\u7B26\u8D85\u8FC7 ${AVATAR_URL_MAX_LENGTH} \u4E0A\u9650\uFF0C\u8BF7\u6539\u4E3A\u66F4\u77ED\u7684\u56FE\u7247 URL`;
+  }
+  if (!isValidUrl(value)) {
+    return "avatarUrl \u4E0D\u662F\u5408\u6CD5 URL";
+  }
+  return null;
+}
+var SPLIT_PATTERN_MAX_LENGTH = 200;
+var SPLIT_PATTERN_MAX_ITEMS = 10;
+function validateSplitPattern(value) {
+  if (value === void 0 || value === null) return null;
+  const isArray = Array.isArray(value);
+  const items = isArray ? value : [value];
+  if (isArray && items.length === 0) return null;
+  if (items.length > SPLIT_PATTERN_MAX_ITEMS) {
+    return `splitPattern \u6570\u7EC4\u6700\u591A ${SPLIT_PATTERN_MAX_ITEMS} \u9879`;
+  }
+  for (let i = 0; i < items.length; i++) {
+    const s = items[i];
+    const label = isArray ? `splitPattern[${i}]` : "splitPattern";
+    if (typeof s !== "string") return `${label} \u5FC5\u987B\u662F\u5B57\u7B26\u4E32`;
+    if (s.length > SPLIT_PATTERN_MAX_LENGTH) {
+      return `${label} \u4E0D\u80FD\u8D85\u8FC7 ${SPLIT_PATTERN_MAX_LENGTH} \u5B57\u7B26`;
+    }
+    try {
+      new RegExp(s);
+    } catch (_) {
+      return `${label} \u4E0D\u662F\u6709\u6548\u6B63\u5219\u8868\u8FBE\u5F0F`;
+    }
+  }
+  return null;
+}
 function validateLlmMessagesArray(messages) {
   if (!Array.isArray(messages) || messages.length === 0) {
     return "messages must be a non-empty array";
@@ -146,8 +188,9 @@ function validateScheduleMessagePayload(payload) {
   if (payload.temperature !== void 0 && payload.temperature !== null && (typeof payload.temperature !== "number" || !Number.isFinite(payload.temperature))) {
     return { valid: false, errorCode: "INVALID_PARAMETERS", errorMessage: "\u7F3A\u5C11\u5FC5\u9700\u53C2\u6570\u6216\u53C2\u6570\u683C\u5F0F\u9519\u8BEF", details: { invalidFields: ["temperature (must be a finite number)"] } };
   }
-  if (payload.avatarUrl && !isValidUrl(payload.avatarUrl)) {
-    return { valid: false, errorCode: "INVALID_PARAMETERS", errorMessage: "\u7F3A\u5C11\u5FC5\u9700\u53C2\u6570\u6216\u53C2\u6570\u683C\u5F0F\u9519\u8BEF", details: { invalidFields: ["avatarUrl (invalid URL format)"] } };
+  const avatarErr = validateAvatarUrl(payload.avatarUrl);
+  if (avatarErr) {
+    return { valid: false, errorCode: "INVALID_PARAMETERS", errorMessage: avatarErr, details: { invalidFields: ["avatarUrl"] } };
   }
   if (payload.uuid && !isValidUUID(payload.uuid)) {
     return { valid: false, errorCode: "INVALID_PARAMETERS", errorMessage: "\u7F3A\u5C11\u5FC5\u9700\u53C2\u6570\u6216\u53C2\u6570\u683C\u5F0F\u9519\u8BEF", details: { invalidFields: ["uuid (invalid UUID format)"] } };
@@ -155,6 +198,10 @@ function validateScheduleMessagePayload(payload) {
   if (payload.messageSubtype !== void 0 && payload.messageSubtype !== null && typeof payload.messageSubtype !== "string") {
     return { valid: false, errorCode: "INVALID_PARAMETERS", errorMessage: "\u7F3A\u5C11\u5FC5\u9700\u53C2\u6570\u6216\u53C2\u6570\u683C\u5F0F\u9519\u8BEF", details: { invalidFields: ["messageSubtype"] } };
   }
+  const splitErr = validateSplitPattern(payload.splitPattern);
+  if (splitErr) {
+    return { valid: false, errorCode: "INVALID_PARAMETERS", errorMessage: splitErr, details: { invalidFields: ["splitPattern"] } };
+  }
   return { valid: true };
 }
 
@@ -435,6 +482,26 @@ function isUniqueViolation(error) {
 
 // src/server/lib/message-processor.js
 import { randomUUID } from "crypto";
+var DEFAULT_SPLIT_REGEX = /([。！？!?]+)/;
+function splitOnceByRegex(chunk, regex) {
+  const out = chunk.split(regex).reduce((acc, part, i, arr) => {
+    if (i % 2 === 0 && part.trim()) {
+      const punctuation = arr[i + 1] || "";
+      acc.push(part.trim() + punctuation);
+    }
+    return acc;
+  }, []).filter((s) => s.length > 0);
+  return out.length > 0 ? out : [chunk];
+}
+function splitMessageIntoSentences(messageContent, splitPattern = null) {
+  const sources = splitPattern == null ? null : Array.isArray(splitPattern) ? splitPattern : [splitPattern];
+  const regexes = sources && sources.length > 0 ? sources.map((s) => new RegExp(s)) : [DEFAULT_SPLIT_REGEX];
+  let chunks = [messageContent];
+  for (const regex of regexes) {
+    chunks = chunks.flatMap((c) => splitOnceByRegex(c, regex));
+  }
+  return chunks.length > 0 ? chunks : [messageContent];
+}
 async function processSingleMessage(task, ctx, providedMasterKey) {
   try {
     const masterKey = providedMasterKey || ctx.masterKey;
@@ -460,14 +527,7 @@ async function processSingleMessage(task, ctx, providedMasterKey) {
     } else {
       throw new Error("Invalid message configuration: no content source available");
     }
-    const sentences = messageContent.split(/([。！？!?]+)/).reduce((acc, part, i, arr) => {
-      if (i % 2 === 0 && part.trim()) {
-        const punctuation = arr[i + 1] || "";
-        acc.push(part.trim() + punctuation);
-      }
-      return acc;
-    }, []).filter((s) => s.length > 0);
-    const messages = sentences.length > 0 ? sentences : [messageContent];
+    const messages = splitMessageIntoSentences(messageContent, decryptedPayload.splitPattern ?? null);
     if (!ctx.vapid.email || !ctx.vapid.publicKey || !ctx.vapid.privateKey) {
       throw new Error("VAPID configuration missing - push notifications cannot be sent");
     }
@@ -706,6 +766,10 @@ function createScheduleMessageHandler(ctx) {
       messages: Array.isArray(payload.messages) ? payload.messages : null,
       maxTokens: payload.maxTokens ?? null,
       temperature: payload.temperature ?? null,
+      // 0.6.0+: optional caller-provided regex (string or string[]) used by
+      // the message processor to chunk LLM output into individual pushes.
+      // null → processor falls back to the default /([。！？!?]+)/ regex.
+      splitPattern: payload.splitPattern ?? null,
       pushSubscription: payload.pushSubscription,
       metadata: payload.metadata || {}
     };
@@ -1029,6 +1093,18 @@ function createUpdateMessageHandler(ctx) {
     if (Object.prototype.hasOwnProperty.call(updates, "temperature") && updates.temperature !== null && (typeof updates.temperature !== "number" || !Number.isFinite(updates.temperature))) {
       return { status: 400, body: { success: false, error: { code: "INVALID_UPDATE_DATA", message: "\u66F4\u65B0\u6570\u636E\u683C\u5F0F\u9519\u8BEF", details: { invalidFields: ["temperature"] } } } };
     }
+    if (Object.prototype.hasOwnProperty.call(updates, "splitPattern")) {
+      const splitErr = validateSplitPattern(updates.splitPattern);
+      if (splitErr) {
+        return { status: 400, body: { success: false, error: { code: "INVALID_UPDATE_DATA", message: splitErr, details: { invalidFields: ["splitPattern"] } } } };
+      }
+    }
+    if (Object.prototype.hasOwnProperty.call(updates, "avatarUrl")) {
+      const avatarErr = validateAvatarUrl(updates.avatarUrl);
+      if (avatarErr) {
+        return { status: 400, body: { success: false, error: { code: "INVALID_UPDATE_DATA", message: avatarErr, details: { invalidFields: ["avatarUrl"] } } } };
+      }
+    }
     const existingTask = await db.getTaskByUuid(taskUuid, userId);
     if (!existingTask) {
       const taskStatus = await db.getTaskStatus(taskUuid, userId);
@@ -1054,7 +1130,11 @@ function createUpdateMessageHandler(ctx) {
       ...updates.avatarUrl && { avatarUrl: updates.avatarUrl },
       ...updates.metadata && { metadata: updates.metadata },
       ...Object.prototype.hasOwnProperty.call(updates, "maxTokens") && { maxTokens: updates.maxTokens ?? null },
-      ...Object.prototype.hasOwnProperty.call(updates, "temperature") && { temperature: updates.temperature ?? null }
+      ...Object.prototype.hasOwnProperty.call(updates, "temperature") && { temperature: updates.temperature ?? null },
+      // splitPattern: hasOwnProperty so that explicit `null` (= revert to
+      // default) doesn't get swallowed by truthy-spread the way the optional
+      // string fields above are.
+      ...Object.prototype.hasOwnProperty.call(updates, "splitPattern") && { splitPattern: updates.splitPattern ?? null }
     };
     const encryptedPayload = encryptForStorage(JSON.stringify(updatedData), userKey);
     const extraFields = updates.nextSendAt ? { next_send_at: updates.nextSendAt } : void 0;
@@ -1575,7 +1655,9 @@ export {
   isValidUUID,
   isValidUUIDv4,
   isValidUrl,
+  validateAvatarUrl,
   validateLlmMessagesArray,
   validateScheduleMessagePayload,
+  validateSplitPattern,
   verifyTenantToken
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rei-standard/amsg-server",
-  "version": "2.2.0",
+  "version": "2.3.1",
   "description": "ReiStandard Active Messaging server SDK with pluggable database adapters",
   "repository": {
     "type": "git",