@rei-standard/amsg-server 2.6.0-next.17 → 2.6.0-next.19

package/README.md

@@ -197,8 +197,13 @@ ctx / metadata / push 上）。
 - fire 时的解析顺序：`credRefs.chat` → 查表；行没了 → 退回任务里的内联三件套
   （如有）；都没有 → 本轮失败，`lastError` 记 `CREDENTIAL_MISSING`，走常规重
   试——补传凭据后下一轮自愈。
-- hook 的 `ctx.scheduleTask()` 自排任务时：父任务带 `credRefs` 就复制**引用**
-  （不复制凭据本体），换 Key 自动作用于整条自排链；存量内联任务照旧复制三件套。
+- hook 的 `ctx.scheduleTask()` 自排任务时按 **`credRefs.chat`** 分支：父任务带
+  chat 引用 → 复制整份引用、不复制凭据本体，换 Key 自动作用于整条自排链；父任
+  务只带非 chat 引用（如仅 emotion）→ 引用与内联三件套**都**复制（引用归 hook
+  用途，聊天凭据在内联那份里）；存量内联任务照旧复制三件套。
+- `prompted` / `auto` 任务 fire 时既无 `credRefs.chat` 也无内联三件套 → 按
+  `CREDENTIAL_MISSING` 失败进常规重试（不会被静默判成「不需要 LLM」）。
+  `instant` 保持「无凭据 = 纯推送 `userMessage`」的路由语义。
 - 任务投影（`GET /messages` / hook 的 `ctx.task`）带 `credRefs`（只是名字，不
   是机密），客户端对账用；凭据本体照旧被白名单挡在外面。
 - 数据库侧是 `llm_credentials` 表（`(user_id, cred_id)` 主键，`encrypted_value`

package/dist/{chunk-QL6PMTIN.mjs → chunk-PRQHHRAK.mjs}

@@ -270,6 +270,10 @@ function hasChatCredRef(payload) {
   const refs = payload && payload.credRefs;
   return !!refs && typeof refs === "object" && !Array.isArray(refs) && typeof refs.chat === "string" && refs.chat.length > 0;
 }
+function hasCredRefs(payload) {
+  const refs = payload && payload.credRefs;
+  return !!refs && typeof refs === "object" && !Array.isArray(refs) && Object.keys(refs).length > 0;
+}
 async function saveLlmCredentials({ db, userId, userKey, credentials }) {
   const entries = [];
   for (const { credId, value } of credentials) {
@@ -307,7 +311,17 @@ function codedError(code, message) {
   return error;
 }
 async function resolveFireCredentials({ db, userId, userKey, decryptedPayload }) {
-  if (!hasChatCredRef(decryptedPayload)) return null;
+  if (!hasChatCredRef(decryptedPayload)) {
+    const type = decryptedPayload.messageType;
+    const hasInlineTrio = !!(decryptedPayload.apiUrl && decryptedPayload.apiKey && decryptedPayload.primaryModel);
+    if ((type === "prompted" || type === "auto") && !hasInlineTrio) {
+      throw codedError(
+        "CREDENTIAL_MISSING",
+        "\u4EFB\u52A1\u65E2\u65E0 credRefs.chat \u4E5F\u65E0\u5185\u8054 apiUrl / apiKey / primaryModel\uFF08\u8865\u4F20\u51ED\u636E\u6216\u66F4\u65B0\u4EFB\u52A1\u540E\uFF0C\u4E0B\u4E00\u8F6E\u91CD\u8BD5\u5373\u81EA\u6108\uFF09"
+      );
+    }
+    return null;
+  }
   const credId = decryptedPayload.credRefs.chat;
   if (supportsLlmCredentialsStore(db)) {
     const resolved = await resolveLlmCredential({ db, userId, userKey, credId });
@@ -1179,10 +1193,15 @@ async function runAgenticFire({ task, decryptedPayload, userKey, ctx }) {
       firstSendTime: nextSendAt,
       recurrenceType,
       tzId,
-      // 凭据：父任务带 credRefs 就复制**引用**（换 Key 只要覆盖 llm_credentials
-      // 里那一行，自排链上的后代自动跟随），不复制内联；存量内联任务照旧复制
-      // 三件套——这正是「自排链传旧 Key」那个洞的修口。
-      ...decryptedPayload.credRefs && typeof decryptedPayload.credRefs === "object" && !Array.isArray(decryptedPayload.credRefs) && Object.keys(decryptedPayload.credRefs).length > 0 ? {
+      // 凭据继承按 **credRefs.chat** 分支：
+      //   - 父带 chat 引用 → 复制整份引用、内联置空（换 Key 只要覆盖
+      //     llm_credentials 里那一行，自排链上的后代自动跟随——「自排链传旧
+      //     Key」那个洞的修口）；
+      //   - 父只带非 chat 引用（如仅 emotion）→ 引用与内联**都**复制：引用归
+      //     hook 用途，聊天凭据在内联那份里，只复制引用会造出既无引用可解析
+      //     又无内联的空壳后代；
+      //   - 父没带引用 → 照旧复制内联三件套。
+      ...hasChatCredRef(decryptedPayload) ? {
         apiUrl: null,
         apiKey: null,
         primaryModel: null,
@@ -1191,7 +1210,7 @@ async function runAgenticFire({ task, decryptedPayload, userKey, ctx }) {
         apiUrl: decryptedPayload.apiUrl || null,
         apiKey: decryptedPayload.apiKey || null,
         primaryModel: decryptedPayload.primaryModel || null,
-        credRefs: null
+        credRefs: hasCredRefs(decryptedPayload) ? { ...decryptedPayload.credRefs } : null
       },
       // 见文件头：fire-time hook 每次现场重组 prompt，旧 prompt 带过去只会在新
       // 任务走回老链路时顶替宿主的意图。
@@ -3270,6 +3289,10 @@ var SQLITE_REQUIRED_SCHEMA = Object.freeze({
 function escapeLikePrefix(prefix) {
   return prefix.replace(/[\\%_]/g, (ch) => `\\${ch}`);
 }
+var INTERNAL_TABLE_PREFIXES = ["sqlite_", "_cf_"];
+function isInternalTableName(name) {
+  return INTERNAL_TABLE_PREFIXES.some((prefix) => name.startsWith(prefix));
+}
 var D1Adapter = class {
   /** @param {{ prepare: (sql: string) => any }} db - Cloudflare D1 binding */
   constructor(db) {
@@ -3337,13 +3360,15 @@ var D1Adapter = class {
    */
   async describeSchema() {
     const tableRes = await this._db.prepare(
-      `SELECT name FROM sqlite_master WHERE type = 'table' AND name NOT LIKE 'sqlite_%'`
+      `SELECT name FROM sqlite_master WHERE type = 'table'`
     ).all();
     const tables = {};
     for (const row of tableRes.results || []) {
-      if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(row.name)) continue;
-      const columnRes = await this._db.prepare(`PRAGMA table_info(${row.name})`).all();
-      tables[row.name] = (columnRes.results || []).map((column) => column.name);
+      const name = String(row.name ?? "");
+      if (isInternalTableName(name)) continue;
+      if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) continue;
+      const columnRes = await this._db.prepare(`PRAGMA table_info(${name})`).all();
+      tables[name] = (columnRes.results || []).map((column) => column.name);
     }
     const indexRes = await this._db.prepare(
       `SELECT name FROM sqlite_master WHERE type = 'index' AND name IS NOT NULL`
@@ -4224,7 +4249,7 @@ function createClientStateHandler(ctx) {
 }
 
 // src/server/lib/version.js
-var SERVER_VERSION = true ? "2.6.0-next.17" : "0.0.0-dev";
+var SERVER_VERSION = true ? "2.6.0-next.19" : "0.0.0-dev";
 
 // src/server/handlers/capabilities.js
 var SERVER_FEATURES = Object.freeze([

package/dist/{chunk-QHWGWKB4.cjs → chunk-XVJ7ZLZX.cjs}

@@ -270,6 +270,10 @@ function hasChatCredRef(payload) {
   const refs = payload && payload.credRefs;
   return !!refs && typeof refs === "object" && !Array.isArray(refs) && typeof refs.chat === "string" && refs.chat.length > 0;
 }
+function hasCredRefs(payload) {
+  const refs = payload && payload.credRefs;
+  return !!refs && typeof refs === "object" && !Array.isArray(refs) && Object.keys(refs).length > 0;
+}
 async function saveLlmCredentials({ db, userId, userKey, credentials }) {
   const entries = [];
   for (const { credId, value } of credentials) {
@@ -307,7 +311,17 @@ function codedError(code, message) {
   return error;
 }
 async function resolveFireCredentials({ db, userId, userKey, decryptedPayload }) {
-  if (!hasChatCredRef(decryptedPayload)) return null;
+  if (!hasChatCredRef(decryptedPayload)) {
+    const type = decryptedPayload.messageType;
+    const hasInlineTrio = !!(decryptedPayload.apiUrl && decryptedPayload.apiKey && decryptedPayload.primaryModel);
+    if ((type === "prompted" || type === "auto") && !hasInlineTrio) {
+      throw codedError(
+        "CREDENTIAL_MISSING",
+        "\u4EFB\u52A1\u65E2\u65E0 credRefs.chat \u4E5F\u65E0\u5185\u8054 apiUrl / apiKey / primaryModel\uFF08\u8865\u4F20\u51ED\u636E\u6216\u66F4\u65B0\u4EFB\u52A1\u540E\uFF0C\u4E0B\u4E00\u8F6E\u91CD\u8BD5\u5373\u81EA\u6108\uFF09"
+      );
+    }
+    return null;
+  }
   const credId = decryptedPayload.credRefs.chat;
   if (supportsLlmCredentialsStore(db)) {
     const resolved = await resolveLlmCredential({ db, userId, userKey, credId });
@@ -1179,10 +1193,15 @@ async function runAgenticFire({ task, decryptedPayload, userKey, ctx }) {
       firstSendTime: nextSendAt,
       recurrenceType,
       tzId,
-      // 凭据：父任务带 credRefs 就复制**引用**（换 Key 只要覆盖 llm_credentials
-      // 里那一行，自排链上的后代自动跟随），不复制内联；存量内联任务照旧复制
-      // 三件套——这正是「自排链传旧 Key」那个洞的修口。
-      ...decryptedPayload.credRefs && typeof decryptedPayload.credRefs === "object" && !Array.isArray(decryptedPayload.credRefs) && Object.keys(decryptedPayload.credRefs).length > 0 ? {
+      // 凭据继承按 **credRefs.chat** 分支：
+      //   - 父带 chat 引用 → 复制整份引用、内联置空（换 Key 只要覆盖
+      //     llm_credentials 里那一行，自排链上的后代自动跟随——「自排链传旧
+      //     Key」那个洞的修口）；
+      //   - 父只带非 chat 引用（如仅 emotion）→ 引用与内联**都**复制：引用归
+      //     hook 用途，聊天凭据在内联那份里，只复制引用会造出既无引用可解析
+      //     又无内联的空壳后代；
+      //   - 父没带引用 → 照旧复制内联三件套。
+      ...hasChatCredRef(decryptedPayload) ? {
         apiUrl: null,
         apiKey: null,
         primaryModel: null,
@@ -1191,7 +1210,7 @@ async function runAgenticFire({ task, decryptedPayload, userKey, ctx }) {
         apiUrl: decryptedPayload.apiUrl || null,
         apiKey: decryptedPayload.apiKey || null,
         primaryModel: decryptedPayload.primaryModel || null,
-        credRefs: null
+        credRefs: hasCredRefs(decryptedPayload) ? { ...decryptedPayload.credRefs } : null
       },
       // 见文件头：fire-time hook 每次现场重组 prompt，旧 prompt 带过去只会在新
       // 任务走回老链路时顶替宿主的意图。
@@ -3270,6 +3289,10 @@ var SQLITE_REQUIRED_SCHEMA = Object.freeze({
 function escapeLikePrefix(prefix) {
   return prefix.replace(/[\\%_]/g, (ch) => `\\${ch}`);
 }
+var INTERNAL_TABLE_PREFIXES = ["sqlite_", "_cf_"];
+function isInternalTableName(name) {
+  return INTERNAL_TABLE_PREFIXES.some((prefix) => name.startsWith(prefix));
+}
 var D1Adapter = class {
   /** @param {{ prepare: (sql: string) => any }} db - Cloudflare D1 binding */
   constructor(db) {
@@ -3337,13 +3360,15 @@ var D1Adapter = class {
    */
   async describeSchema() {
     const tableRes = await this._db.prepare(
-      `SELECT name FROM sqlite_master WHERE type = 'table' AND name NOT LIKE 'sqlite_%'`
+      `SELECT name FROM sqlite_master WHERE type = 'table'`
     ).all();
     const tables = {};
     for (const row of tableRes.results || []) {
-      if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(row.name)) continue;
-      const columnRes = await this._db.prepare(`PRAGMA table_info(${row.name})`).all();
-      tables[row.name] = (columnRes.results || []).map((column) => column.name);
+      const name = String(_nullishCoalesce(row.name, () => ( "")));
+      if (isInternalTableName(name)) continue;
+      if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) continue;
+      const columnRes = await this._db.prepare(`PRAGMA table_info(${name})`).all();
+      tables[name] = (columnRes.results || []).map((column) => column.name);
     }
     const indexRes = await this._db.prepare(
       `SELECT name FROM sqlite_master WHERE type = 'index' AND name IS NOT NULL`
@@ -4224,7 +4249,7 @@ function createClientStateHandler(ctx) {
 }
 
 // src/server/lib/version.js
-var SERVER_VERSION = true ? "2.6.0-next.17" : "0.0.0-dev";
+var SERVER_VERSION = true ? "2.6.0-next.19" : "0.0.0-dev";
 
 // src/server/handlers/capabilities.js
 var SERVER_FEATURES = Object.freeze([

package/dist/cloudflare.cjs

@@ -24,7 +24,7 @@
 
 
 
-var _chunkQHWGWKB4cjs = require('./chunk-QHWGWKB4.cjs');
+var _chunkXVJ7ZLZXcjs = require('./chunk-XVJ7ZLZX.cjs');
 require('./chunk-V6NZQ22S.cjs');
 
 
@@ -52,4 +52,4 @@ require('./chunk-V6NZQ22S.cjs');
 
 
 
-exports.MAX_PUSH_PAYLOAD_BYTES = _chunkQHWGWKB4cjs.MAX_PUSH_PAYLOAD_BYTES; exports.NonRetryableError = _chunkQHWGWKB4cjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkQHWGWKB4cjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkQHWGWKB4cjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkQHWGWKB4cjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkQHWGWKB4cjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkQHWGWKB4cjs.advanceOccurrence; exports.createD1Adapter = _chunkQHWGWKB4cjs.createD1Adapter; exports.createSingleUserCloudflareWorker = _chunkQHWGWKB4cjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkQHWGWKB4cjs.createSingleUserServer; exports.createWebCryptoWebPush = _chunkQHWGWKB4cjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkQHWGWKB4cjs.decryptFromStorage; exports.decryptPayload = _chunkQHWGWKB4cjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkQHWGWKB4cjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkQHWGWKB4cjs.encryptForStorage; exports.ensureSchema = _chunkQHWGWKB4cjs.ensureSchema; exports.getSchemaVersion = _chunkQHWGWKB4cjs.getSchemaVersion; exports.isNonRetryableError = _chunkQHWGWKB4cjs.isNonRetryableError; exports.isValidTimeZoneId = _chunkQHWGWKB4cjs.isValidTimeZoneId; exports.measurePushPayload = _chunkQHWGWKB4cjs.measurePushPayload; exports.nextFutureOccurrence = _chunkQHWGWKB4cjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkQHWGWKB4cjs.planNextOccurrence; exports.runScheduledTick = _chunkQHWGWKB4cjs.runScheduledTick; exports.runTask = _chunkQHWGWKB4cjs.runTask; exports.summarizeErrorCause = _chunkQHWGWKB4cjs.summarizeErrorCause;
+exports.MAX_PUSH_PAYLOAD_BYTES = _chunkXVJ7ZLZXcjs.MAX_PUSH_PAYLOAD_BYTES; exports.NonRetryableError = _chunkXVJ7ZLZXcjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkXVJ7ZLZXcjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkXVJ7ZLZXcjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkXVJ7ZLZXcjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkXVJ7ZLZXcjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkXVJ7ZLZXcjs.advanceOccurrence; exports.createD1Adapter = _chunkXVJ7ZLZXcjs.createD1Adapter; exports.createSingleUserCloudflareWorker = _chunkXVJ7ZLZXcjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkXVJ7ZLZXcjs.createSingleUserServer; exports.createWebCryptoWebPush = _chunkXVJ7ZLZXcjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkXVJ7ZLZXcjs.decryptFromStorage; exports.decryptPayload = _chunkXVJ7ZLZXcjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkXVJ7ZLZXcjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkXVJ7ZLZXcjs.encryptForStorage; exports.ensureSchema = _chunkXVJ7ZLZXcjs.ensureSchema; exports.getSchemaVersion = _chunkXVJ7ZLZXcjs.getSchemaVersion; exports.isNonRetryableError = _chunkXVJ7ZLZXcjs.isNonRetryableError; exports.isValidTimeZoneId = _chunkXVJ7ZLZXcjs.isValidTimeZoneId; exports.measurePushPayload = _chunkXVJ7ZLZXcjs.measurePushPayload; exports.nextFutureOccurrence = _chunkXVJ7ZLZXcjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkXVJ7ZLZXcjs.planNextOccurrence; exports.runScheduledTick = _chunkXVJ7ZLZXcjs.runScheduledTick; exports.runTask = _chunkXVJ7ZLZXcjs.runTask; exports.summarizeErrorCause = _chunkXVJ7ZLZXcjs.summarizeErrorCause;

package/dist/cloudflare.mjs

@@ -24,7 +24,7 @@ import {
   runScheduledTick,
   runTask,
   summarizeErrorCause
-} from "./chunk-QL6PMTIN.mjs";
+} from "./chunk-PRQHHRAK.mjs";
 import "./chunk-5FXVSC5O.mjs";
 export {
   MAX_PUSH_PAYLOAD_BYTES,

package/dist/index.cjs

@@ -67,7 +67,7 @@
 
 
 
-var _chunkQHWGWKB4cjs = require('./chunk-QHWGWKB4.cjs');
+var _chunkXVJ7ZLZXcjs = require('./chunk-XVJ7ZLZX.cjs');
 require('./chunk-V6NZQ22S.cjs');
 
 // src/server/adapters/factory.js
@@ -101,7 +101,7 @@ async function createAdapter(config) {
 // src/server/handlers/init-tenant.js
 function createInitTenantHandler(ctx) {
   async function POST(headers, body) {
-    const initSecret = _chunkQHWGWKB4cjs.getHeader.call(void 0, headers, "x-init-secret");
+    const initSecret = _chunkXVJ7ZLZXcjs.getHeader.call(void 0, headers, "x-init-secret");
     if (ctx.tenant.initSecret && initSecret !== ctx.tenant.initSecret) {
       return {
         status: 401,
@@ -114,7 +114,7 @@ function createInitTenantHandler(ctx) {
         }
       };
     }
-    const parsed = _chunkQHWGWKB4cjs.parseJsonBody.call(void 0, body);
+    const parsed = _chunkXVJ7ZLZXcjs.parseJsonBody.call(void 0, body);
     if (!parsed.ok) {
       return {
         status: 400,
@@ -128,7 +128,7 @@ function createInitTenantHandler(ctx) {
     const tenantId = payload.tenantId || void 0;
     const driver = payload.driver;
     const databaseUrl = payload.databaseUrl || payload.connectionString;
-    if (tenantId && !_chunkQHWGWKB4cjs.isValidUUIDv4.call(void 0, tenantId)) {
+    if (tenantId && !_chunkXVJ7ZLZXcjs.isValidUUIDv4.call(void 0, tenantId)) {
       return {
         status: 400,
         body: {
@@ -248,7 +248,7 @@ function createSendNotificationsHandler(ctx) {
         }
       };
     }
-    const data = await _chunkQHWGWKB4cjs.runScheduledTick.call(void 0, { ...ctx, db, masterKey });
+    const data = await _chunkXVJ7ZLZXcjs.runScheduledTick.call(void 0, { ...ctx, db, masterKey });
     return { status: 200, body: { success: true, data } };
   }
   return { POST };
@@ -270,16 +270,16 @@ function encryptConfig(config, kekBuffer) {
   const plaintext = Buffer.from(JSON.stringify(config), "utf8");
   const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
   const authTag = cipher.getAuthTag();
-  return `v1.${_chunkQHWGWKB4cjs.bytesToBase64Url.call(void 0, iv)}.${_chunkQHWGWKB4cjs.bytesToBase64Url.call(void 0, authTag)}.${_chunkQHWGWKB4cjs.bytesToBase64Url.call(void 0, ciphertext)}`;
+  return `v1.${_chunkXVJ7ZLZXcjs.bytesToBase64Url.call(void 0, iv)}.${_chunkXVJ7ZLZXcjs.bytesToBase64Url.call(void 0, authTag)}.${_chunkXVJ7ZLZXcjs.bytesToBase64Url.call(void 0, ciphertext)}`;
 }
 function decryptConfig(encrypted, kekBuffer) {
   const parts = String(encrypted || "").split(".");
   if (parts.length !== 4 || parts[0] !== "v1") {
     throw new Error("INVALID_TENANT_CONFIG");
   }
-  const iv = _chunkQHWGWKB4cjs.base64UrlToBytes.call(void 0, parts[1]);
-  const authTag = _chunkQHWGWKB4cjs.base64UrlToBytes.call(void 0, parts[2]);
-  const ciphertext = _chunkQHWGWKB4cjs.base64UrlToBytes.call(void 0, parts[3]);
+  const iv = _chunkXVJ7ZLZXcjs.base64UrlToBytes.call(void 0, parts[1]);
+  const authTag = _chunkXVJ7ZLZXcjs.base64UrlToBytes.call(void 0, parts[2]);
+  const ciphertext = _chunkXVJ7ZLZXcjs.base64UrlToBytes.call(void 0, parts[3]);
   const decipher = _crypto.createDecipheriv.call(void 0, "aes-256-gcm", kekBuffer, iv);
   decipher.setAuthTag(authTag);
   const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
@@ -347,7 +347,7 @@ function createTenantBlobStore(options) {
 // src/server/tenant/token.js
 
 function sign(input, secret) {
-  return _chunkQHWGWKB4cjs.bytesToBase64Url.call(void 0, _crypto.createHmac.call(void 0, "sha256", secret).update(input).digest());
+  return _chunkXVJ7ZLZXcjs.bytesToBase64Url.call(void 0, _crypto.createHmac.call(void 0, "sha256", secret).update(input).digest());
 }
 function nowEpochSeconds() {
   return Math.floor(Date.now() / 1e3);
@@ -363,8 +363,8 @@ function createTenantToken(params, secret) {
     v: 1
   };
   const header = { alg: "HS256", typ: "JWT" };
-  const encodedHeader = _chunkQHWGWKB4cjs.bytesToBase64Url.call(void 0, _chunkQHWGWKB4cjs.utf8.call(void 0, JSON.stringify(header)));
-  const encodedPayload = _chunkQHWGWKB4cjs.bytesToBase64Url.call(void 0, _chunkQHWGWKB4cjs.utf8.call(void 0, JSON.stringify(payload)));
+  const encodedHeader = _chunkXVJ7ZLZXcjs.bytesToBase64Url.call(void 0, _chunkXVJ7ZLZXcjs.utf8.call(void 0, JSON.stringify(header)));
+  const encodedPayload = _chunkXVJ7ZLZXcjs.bytesToBase64Url.call(void 0, _chunkXVJ7ZLZXcjs.utf8.call(void 0, JSON.stringify(payload)));
   const signingInput = `${encodedHeader}.${encodedPayload}`;
   const signature = sign(signingInput, secret);
   return `${signingInput}.${signature}`;
@@ -383,17 +383,17 @@ function verifyTenantToken(token, secret, options = {}) {
   let receivedBytes;
   let expectedBytes;
   try {
-    receivedBytes = _chunkQHWGWKB4cjs.base64UrlToBytes.call(void 0, receivedSignature);
-    expectedBytes = _chunkQHWGWKB4cjs.base64UrlToBytes.call(void 0, expectedSignature);
+    receivedBytes = _chunkXVJ7ZLZXcjs.base64UrlToBytes.call(void 0, receivedSignature);
+    expectedBytes = _chunkXVJ7ZLZXcjs.base64UrlToBytes.call(void 0, expectedSignature);
   } catch (e) {
     throw new Error("INVALID_TENANT_AUTH");
   }
-  if (!_chunkQHWGWKB4cjs.timingSafeEqualBytes.call(void 0, receivedBytes, expectedBytes)) {
+  if (!_chunkXVJ7ZLZXcjs.timingSafeEqualBytes.call(void 0, receivedBytes, expectedBytes)) {
     throw new Error("INVALID_TENANT_AUTH");
   }
   let payload;
   try {
-    payload = JSON.parse(_chunkQHWGWKB4cjs.utf8Decode.call(void 0, _chunkQHWGWKB4cjs.base64UrlToBytes.call(void 0, encodedPayload)));
+    payload = JSON.parse(_chunkXVJ7ZLZXcjs.utf8Decode.call(void 0, _chunkXVJ7ZLZXcjs.base64UrlToBytes.call(void 0, encodedPayload)));
   } catch (e2) {
     throw new Error("INVALID_TENANT_AUTH");
   }
@@ -613,15 +613,15 @@ async function createReiServer(config) {
   return {
     handlers: {
       initTenant: createInitTenantHandler(ctx),
-      getUserKey: _chunkQHWGWKB4cjs.createGetUserKeyHandler.call(void 0, ctx),
-      scheduleMessage: _chunkQHWGWKB4cjs.createScheduleMessageHandler.call(void 0, ctx),
+      getUserKey: _chunkXVJ7ZLZXcjs.createGetUserKeyHandler.call(void 0, ctx),
+      scheduleMessage: _chunkXVJ7ZLZXcjs.createScheduleMessageHandler.call(void 0, ctx),
       sendNotifications: createSendNotificationsHandler(ctx),
-      updateMessage: _chunkQHWGWKB4cjs.createUpdateMessageHandler.call(void 0, ctx),
-      cancelMessage: _chunkQHWGWKB4cjs.createCancelMessageHandler.call(void 0, ctx),
-      messages: _chunkQHWGWKB4cjs.createMessagesHandler.call(void 0, ctx),
-      getMessage: _chunkQHWGWKB4cjs.createGetMessageHandler.call(void 0, ctx),
-      pushSubscription: _chunkQHWGWKB4cjs.createPushSubscriptionHandler.call(void 0, ctx),
-      llmCredentials: _chunkQHWGWKB4cjs.createLlmCredentialsHandler.call(void 0, ctx)
+      updateMessage: _chunkXVJ7ZLZXcjs.createUpdateMessageHandler.call(void 0, ctx),
+      cancelMessage: _chunkXVJ7ZLZXcjs.createCancelMessageHandler.call(void 0, ctx),
+      messages: _chunkXVJ7ZLZXcjs.createMessagesHandler.call(void 0, ctx),
+      getMessage: _chunkXVJ7ZLZXcjs.createGetMessageHandler.call(void 0, ctx),
+      pushSubscription: _chunkXVJ7ZLZXcjs.createPushSubscriptionHandler.call(void 0, ctx),
+      llmCredentials: _chunkXVJ7ZLZXcjs.createLlmCredentialsHandler.call(void 0, ctx)
     }
   };
 }
@@ -683,4 +683,4 @@ async function createReiServer(config) {
 
 
 
-exports.CORS_ALLOW_HEADERS = _chunkQHWGWKB4cjs.CORS_ALLOW_HEADERS; exports.CORS_ALLOW_METHODS = _chunkQHWGWKB4cjs.CORS_ALLOW_METHODS; exports.CRED_ID_MAX_LENGTH = _chunkQHWGWKB4cjs.CRED_ID_MAX_LENGTH; exports.CRED_PUT_BATCH_MAX = _chunkQHWGWKB4cjs.CRED_PUT_BATCH_MAX; exports.CRED_REFS_MAX_ENTRIES = _chunkQHWGWKB4cjs.CRED_REFS_MAX_ENTRIES; exports.CRED_ROWS_PER_USER_MAX = _chunkQHWGWKB4cjs.CRED_ROWS_PER_USER_MAX; exports.DEFAULT_CLAIM_LEASE_MS = _chunkQHWGWKB4cjs.DEFAULT_CLAIM_LEASE_MS; exports.DEFAULT_HEARTBEAT_LEASE_TTL_MS = _chunkQHWGWKB4cjs.DEFAULT_HEARTBEAT_LEASE_TTL_MS; exports.DEFAULT_LEASE_HEARTBEAT_MS = _chunkQHWGWKB4cjs.DEFAULT_LEASE_HEARTBEAT_MS; exports.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE = _chunkQHWGWKB4cjs.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE; exports.DEFAULT_MAX_TOOL_ITERATIONS = _chunkQHWGWKB4cjs.DEFAULT_MAX_TOOL_ITERATIONS; exports.DEFAULT_TOTAL_TIMEOUT_MS = _chunkQHWGWKB4cjs.DEFAULT_TOTAL_TIMEOUT_MS; exports.MAX_PUSH_PAYLOAD_BYTES = _chunkQHWGWKB4cjs.MAX_PUSH_PAYLOAD_BYTES; exports.MIN_SCHEDULE_LEAD_MS = _chunkQHWGWKB4cjs.MIN_SCHEDULE_LEAD_MS; exports.NonRetryableError = _chunkQHWGWKB4cjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkQHWGWKB4cjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkQHWGWKB4cjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkQHWGWKB4cjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkQHWGWKB4cjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkQHWGWKB4cjs.advanceOccurrence; exports.createAdapter = createAdapter; exports.createD1Adapter = _chunkQHWGWKB4cjs.createD1Adapter; exports.createReiServer = createReiServer; exports.createSingleUserCloudflareWorker = _chunkQHWGWKB4cjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkQHWGWKB4cjs.createSingleUserServer; exports.createTenantToken = createTenantToken; exports.createWebCryptoWebPush = _chunkQHWGWKB4cjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkQHWGWKB4cjs.decryptFromStorage; exports.decryptPayload = _chunkQHWGWKB4cjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkQHWGWKB4cjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkQHWGWKB4cjs.encryptForStorage; exports.ensureSchema = _chunkQHWGWKB4cjs.ensureSchema; exports.getSchemaVersion = _chunkQHWGWKB4cjs.getSchemaVersion; exports.hasChatCredRef = _chunkQHWGWKB4cjs.hasChatCredRef; exports.isNonRetryableError = _chunkQHWGWKB4cjs.isNonRetryableError; exports.isValidCredId = _chunkQHWGWKB4cjs.isValidCredId; exports.isValidISO8601 = _chunkQHWGWKB4cjs.isValidISO8601; exports.isValidTimeZoneId = _chunkQHWGWKB4cjs.isValidTimeZoneId; exports.isValidUUID = _chunkQHWGWKB4cjs.isValidUUID; exports.isValidUUIDv4 = _chunkQHWGWKB4cjs.isValidUUIDv4; exports.isValidUrl = _chunkQHWGWKB4cjs.isValidUrl; exports.measurePushPayload = _chunkQHWGWKB4cjs.measurePushPayload; exports.nextFutureOccurrence = _chunkQHWGWKB4cjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkQHWGWKB4cjs.planNextOccurrence; exports.resolveLlmCredential = _chunkQHWGWKB4cjs.resolveLlmCredential; exports.runScheduledTick = _chunkQHWGWKB4cjs.runScheduledTick; exports.runTask = _chunkQHWGWKB4cjs.runTask; exports.sanitizeErrorSummary = _chunkQHWGWKB4cjs.sanitizeErrorSummary; exports.summarizeErrorCause = _chunkQHWGWKB4cjs.summarizeErrorCause; exports.supportsLlmCredentialsStore = _chunkQHWGWKB4cjs.supportsLlmCredentialsStore; exports.validateAvatarUrl = _chunkQHWGWKB4cjs.validateAvatarUrl; exports.validateCredRefs = _chunkQHWGWKB4cjs.validateCredRefs; exports.validateCredValue = _chunkQHWGWKB4cjs.validateCredValue; exports.validateLlmMessagesArray = _chunkQHWGWKB4cjs.validateLlmMessagesArray; exports.validateScheduleMessagePayload = _chunkQHWGWKB4cjs.validateScheduleMessagePayload; exports.validateSplitPattern = _chunkQHWGWKB4cjs.validateSplitPattern; exports.verifyTenantToken = verifyTenantToken;
+exports.CORS_ALLOW_HEADERS = _chunkXVJ7ZLZXcjs.CORS_ALLOW_HEADERS; exports.CORS_ALLOW_METHODS = _chunkXVJ7ZLZXcjs.CORS_ALLOW_METHODS; exports.CRED_ID_MAX_LENGTH = _chunkXVJ7ZLZXcjs.CRED_ID_MAX_LENGTH; exports.CRED_PUT_BATCH_MAX = _chunkXVJ7ZLZXcjs.CRED_PUT_BATCH_MAX; exports.CRED_REFS_MAX_ENTRIES = _chunkXVJ7ZLZXcjs.CRED_REFS_MAX_ENTRIES; exports.CRED_ROWS_PER_USER_MAX = _chunkXVJ7ZLZXcjs.CRED_ROWS_PER_USER_MAX; exports.DEFAULT_CLAIM_LEASE_MS = _chunkXVJ7ZLZXcjs.DEFAULT_CLAIM_LEASE_MS; exports.DEFAULT_HEARTBEAT_LEASE_TTL_MS = _chunkXVJ7ZLZXcjs.DEFAULT_HEARTBEAT_LEASE_TTL_MS; exports.DEFAULT_LEASE_HEARTBEAT_MS = _chunkXVJ7ZLZXcjs.DEFAULT_LEASE_HEARTBEAT_MS; exports.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE = _chunkXVJ7ZLZXcjs.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE; exports.DEFAULT_MAX_TOOL_ITERATIONS = _chunkXVJ7ZLZXcjs.DEFAULT_MAX_TOOL_ITERATIONS; exports.DEFAULT_TOTAL_TIMEOUT_MS = _chunkXVJ7ZLZXcjs.DEFAULT_TOTAL_TIMEOUT_MS; exports.MAX_PUSH_PAYLOAD_BYTES = _chunkXVJ7ZLZXcjs.MAX_PUSH_PAYLOAD_BYTES; exports.MIN_SCHEDULE_LEAD_MS = _chunkXVJ7ZLZXcjs.MIN_SCHEDULE_LEAD_MS; exports.NonRetryableError = _chunkXVJ7ZLZXcjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkXVJ7ZLZXcjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkXVJ7ZLZXcjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkXVJ7ZLZXcjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkXVJ7ZLZXcjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkXVJ7ZLZXcjs.advanceOccurrence; exports.createAdapter = createAdapter; exports.createD1Adapter = _chunkXVJ7ZLZXcjs.createD1Adapter; exports.createReiServer = createReiServer; exports.createSingleUserCloudflareWorker = _chunkXVJ7ZLZXcjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkXVJ7ZLZXcjs.createSingleUserServer; exports.createTenantToken = createTenantToken; exports.createWebCryptoWebPush = _chunkXVJ7ZLZXcjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkXVJ7ZLZXcjs.decryptFromStorage; exports.decryptPayload = _chunkXVJ7ZLZXcjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkXVJ7ZLZXcjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkXVJ7ZLZXcjs.encryptForStorage; exports.ensureSchema = _chunkXVJ7ZLZXcjs.ensureSchema; exports.getSchemaVersion = _chunkXVJ7ZLZXcjs.getSchemaVersion; exports.hasChatCredRef = _chunkXVJ7ZLZXcjs.hasChatCredRef; exports.isNonRetryableError = _chunkXVJ7ZLZXcjs.isNonRetryableError; exports.isValidCredId = _chunkXVJ7ZLZXcjs.isValidCredId; exports.isValidISO8601 = _chunkXVJ7ZLZXcjs.isValidISO8601; exports.isValidTimeZoneId = _chunkXVJ7ZLZXcjs.isValidTimeZoneId; exports.isValidUUID = _chunkXVJ7ZLZXcjs.isValidUUID; exports.isValidUUIDv4 = _chunkXVJ7ZLZXcjs.isValidUUIDv4; exports.isValidUrl = _chunkXVJ7ZLZXcjs.isValidUrl; exports.measurePushPayload = _chunkXVJ7ZLZXcjs.measurePushPayload; exports.nextFutureOccurrence = _chunkXVJ7ZLZXcjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkXVJ7ZLZXcjs.planNextOccurrence; exports.resolveLlmCredential = _chunkXVJ7ZLZXcjs.resolveLlmCredential; exports.runScheduledTick = _chunkXVJ7ZLZXcjs.runScheduledTick; exports.runTask = _chunkXVJ7ZLZXcjs.runTask; exports.sanitizeErrorSummary = _chunkXVJ7ZLZXcjs.sanitizeErrorSummary; exports.summarizeErrorCause = _chunkXVJ7ZLZXcjs.summarizeErrorCause; exports.supportsLlmCredentialsStore = _chunkXVJ7ZLZXcjs.supportsLlmCredentialsStore; exports.validateAvatarUrl = _chunkXVJ7ZLZXcjs.validateAvatarUrl; exports.validateCredRefs = _chunkXVJ7ZLZXcjs.validateCredRefs; exports.validateCredValue = _chunkXVJ7ZLZXcjs.validateCredValue; exports.validateLlmMessagesArray = _chunkXVJ7ZLZXcjs.validateLlmMessagesArray; exports.validateScheduleMessagePayload = _chunkXVJ7ZLZXcjs.validateScheduleMessagePayload; exports.validateSplitPattern = _chunkXVJ7ZLZXcjs.validateSplitPattern; exports.verifyTenantToken = verifyTenantToken;

package/dist/index.mjs

@@ -67,7 +67,7 @@ import {
   validateLlmMessagesArray,
   validateScheduleMessagePayload,
   validateSplitPattern
-} from "./chunk-QL6PMTIN.mjs";
+} from "./chunk-PRQHHRAK.mjs";
 import "./chunk-5FXVSC5O.mjs";
 
 // src/server/adapters/factory.js

package/dist/lib/llm-credentials-store.d.ts

@@ -32,6 +32,14 @@ export function validateCredRefs(credRefs: unknown): string | null;
  * @returns {boolean}
  */
 export function hasChatCredRef(payload: any | null | undefined): boolean;
+/**
+ * payload 带没带非空的 credRefs 映射（不管里面是什么 purpose）。自排继承要在
+ * 「有 chat 引用」和「只有非 chat 引用」之间分支，这是后者用的那半个判据。
+ *
+ * @param {Object|null|undefined} payload
+ * @returns {boolean}
+ */
+export function hasCredRefs(payload: any | null | undefined): boolean;
 /**
  * 批量写入（覆盖）这个用户的凭据。value 在这里加密。
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rei-standard/amsg-server",
-  "version": "2.6.0-next.17",
+  "version": "2.6.0-next.19",
   "description": "ReiStandard Active Messaging server SDK with pluggable database adapters. Three-axis push schema (messageKind / messageType / messageSubtype) from @rei-standard/amsg-shared. Auto-emits ReasoningPush when the LLM response carries reasoning_content.",
   "repository": {
     "type": "git",