@rei-standard/amsg-server 2.6.0-next.20 → 2.6.0-next.21

package/dist/cloudflare.cjs

@@ -24,10 +24,10 @@
 
 
 
-var _chunkWOXSQBAMcjs = require('./chunk-WOXSQBAM.cjs');
-require('./chunk-V6NZQ22S.cjs');
 
 
+var _chunkQHVID3V2cjs = require('./chunk-QHVID3V2.cjs');
+require('./chunk-7NMQFTDJ.cjs');
 
 
 
@@ -52,4 +52,8 @@ require('./chunk-V6NZQ22S.cjs');
 
 
 
-exports.MAX_PUSH_PAYLOAD_BYTES = _chunkWOXSQBAMcjs.MAX_PUSH_PAYLOAD_BYTES; exports.NonRetryableError = _chunkWOXSQBAMcjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkWOXSQBAMcjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkWOXSQBAMcjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkWOXSQBAMcjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkWOXSQBAMcjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkWOXSQBAMcjs.advanceOccurrence; exports.createD1Adapter = _chunkWOXSQBAMcjs.createD1Adapter; exports.createSingleUserCloudflareWorker = _chunkWOXSQBAMcjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkWOXSQBAMcjs.createSingleUserServer; exports.createWebCryptoWebPush = _chunkWOXSQBAMcjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkWOXSQBAMcjs.decryptFromStorage; exports.decryptPayload = _chunkWOXSQBAMcjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkWOXSQBAMcjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkWOXSQBAMcjs.encryptForStorage; exports.ensureSchema = _chunkWOXSQBAMcjs.ensureSchema; exports.getSchemaVersion = _chunkWOXSQBAMcjs.getSchemaVersion; exports.isNonRetryableError = _chunkWOXSQBAMcjs.isNonRetryableError; exports.isValidTimeZoneId = _chunkWOXSQBAMcjs.isValidTimeZoneId; exports.measurePushPayload = _chunkWOXSQBAMcjs.measurePushPayload; exports.nextFutureOccurrence = _chunkWOXSQBAMcjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkWOXSQBAMcjs.planNextOccurrence; exports.runScheduledTick = _chunkWOXSQBAMcjs.runScheduledTick; exports.runTask = _chunkWOXSQBAMcjs.runTask; exports.summarizeErrorCause = _chunkWOXSQBAMcjs.summarizeErrorCause;
+
+
+
+
+exports.DEFAULT_MAX_REQUEST_BODY_BYTES = _chunkQHVID3V2cjs.DEFAULT_MAX_REQUEST_BODY_BYTES; exports.MAX_PUSH_PAYLOAD_BYTES = _chunkQHVID3V2cjs.MAX_PUSH_PAYLOAD_BYTES; exports.NonRetryableError = _chunkQHVID3V2cjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkQHVID3V2cjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkQHVID3V2cjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkQHVID3V2cjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkQHVID3V2cjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkQHVID3V2cjs.advanceOccurrence; exports.createD1Adapter = _chunkQHVID3V2cjs.createD1Adapter; exports.createSingleUserCloudflareWorker = _chunkQHVID3V2cjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkQHVID3V2cjs.createSingleUserServer; exports.createWebCryptoWebPush = _chunkQHVID3V2cjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkQHVID3V2cjs.decryptFromStorage; exports.decryptPayload = _chunkQHVID3V2cjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkQHVID3V2cjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkQHVID3V2cjs.encryptForStorage; exports.ensureSchema = _chunkQHVID3V2cjs.ensureSchema; exports.getSchemaVersion = _chunkQHVID3V2cjs.getSchemaVersion; exports.isNonRetryableError = _chunkQHVID3V2cjs.isNonRetryableError; exports.isValidTimeZoneId = _chunkQHVID3V2cjs.isValidTimeZoneId; exports.measurePushPayload = _chunkQHVID3V2cjs.measurePushPayload; exports.nextFutureOccurrence = _chunkQHVID3V2cjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkQHVID3V2cjs.planNextOccurrence; exports.readRequestBody = _chunkQHVID3V2cjs.readRequestBody; exports.runScheduledTick = _chunkQHVID3V2cjs.runScheduledTick; exports.runTask = _chunkQHVID3V2cjs.runTask; exports.summarizeErrorCause = _chunkQHVID3V2cjs.summarizeErrorCause;

package/dist/cloudflare.d.ts

@@ -6,4 +6,5 @@ export { runScheduledTick, runTask } from "./lib/run-tick.js";
 export { getSchemaVersion, ensureSchema, SCHEMA_VERSION } from "./lib/schema-version.js";
 export { summarizeErrorCause, NonRetryableError, isNonRetryableError } from "./lib/errors.js";
 export { isValidTimeZoneId, advanceOccurrence, nextFutureOccurrence, planNextOccurrence } from "./lib/recurrence.js";
+export { readRequestBody, DEFAULT_MAX_REQUEST_BODY_BYTES } from "./lib/request.js";
 export { deriveUserEncryptionKey, decryptPayload, encryptForStorage, decryptFromStorage } from "./lib/encryption.js";

package/dist/cloudflare.mjs

@@ -1,4 +1,5 @@
 import {
+  DEFAULT_MAX_REQUEST_BODY_BYTES,
   MAX_PUSH_PAYLOAD_BYTES,
   NonRetryableError,
   PUSH_ENVELOPE_RESERVED_BYTES,
@@ -21,12 +22,14 @@ import {
   measurePushPayload,
   nextFutureOccurrence,
   planNextOccurrence,
+  readRequestBody,
   runScheduledTick,
   runTask,
   summarizeErrorCause
-} from "./chunk-HTGYGGUH.mjs";
-import "./chunk-5FXVSC5O.mjs";
+} from "./chunk-KOJQVOYS.mjs";
+import "./chunk-GN44PST5.mjs";
 export {
+  DEFAULT_MAX_REQUEST_BODY_BYTES,
   MAX_PUSH_PAYLOAD_BYTES,
   NonRetryableError,
   PUSH_ENVELOPE_RESERVED_BYTES,
@@ -49,6 +52,7 @@ export {
   measurePushPayload,
   nextFutureOccurrence,
   planNextOccurrence,
+  readRequestBody,
   runScheduledTick,
   runTask,
   summarizeErrorCause

package/dist/index.cjs

@@ -67,8 +67,12 @@
 
 
 
-var _chunkWOXSQBAMcjs = require('./chunk-WOXSQBAM.cjs');
-require('./chunk-V6NZQ22S.cjs');
+
+
+
+
+var _chunkQHVID3V2cjs = require('./chunk-QHVID3V2.cjs');
+require('./chunk-7NMQFTDJ.cjs');
 
 // src/server/adapters/factory.js
 async function createAdapter(config) {
@@ -84,11 +88,11 @@ async function createAdapter(config) {
   }
   switch (config.driver) {
     case "neon": {
-      const { NeonAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./neon-U6TQFKMJ.cjs")));
+      const { NeonAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./neon-KP2CPA57.cjs")));
       return new NeonAdapter(config.connectionString);
     }
     case "pg": {
-      const { PgAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./pg-B324Q2R4.cjs")));
+      const { PgAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./pg-RZPQGXR3.cjs")));
       return new PgAdapter(config.connectionString);
     }
     default:
@@ -101,7 +105,7 @@ async function createAdapter(config) {
 // src/server/handlers/init-tenant.js
 function createInitTenantHandler(ctx) {
   async function POST(headers, body) {
-    const initSecret = _chunkWOXSQBAMcjs.getHeader.call(void 0, headers, "x-init-secret");
+    const initSecret = _chunkQHVID3V2cjs.getHeader.call(void 0, headers, "x-init-secret");
     if (ctx.tenant.initSecret && initSecret !== ctx.tenant.initSecret) {
       return {
         status: 401,
@@ -114,7 +118,7 @@ function createInitTenantHandler(ctx) {
         }
       };
     }
-    const parsed = _chunkWOXSQBAMcjs.parseJsonBody.call(void 0, body);
+    const parsed = _chunkQHVID3V2cjs.parseJsonBody.call(void 0, body);
     if (!parsed.ok) {
       return {
         status: 400,
@@ -128,7 +132,7 @@ function createInitTenantHandler(ctx) {
     const tenantId = payload.tenantId || void 0;
     const driver = payload.driver;
     const databaseUrl = payload.databaseUrl || payload.connectionString;
-    if (tenantId && !_chunkWOXSQBAMcjs.isValidUUIDv4.call(void 0, tenantId)) {
+    if (tenantId && !_chunkQHVID3V2cjs.isValidUUIDv4.call(void 0, tenantId)) {
       return {
         status: 400,
         body: {
@@ -248,7 +252,7 @@ function createSendNotificationsHandler(ctx) {
         }
       };
     }
-    const data = await _chunkWOXSQBAMcjs.runScheduledTick.call(void 0, { ...ctx, db, masterKey });
+    const data = await _chunkQHVID3V2cjs.runScheduledTick.call(void 0, { ...ctx, db, masterKey });
     return { status: 200, body: { success: true, data } };
   }
   return { POST };
@@ -270,16 +274,16 @@ function encryptConfig(config, kekBuffer) {
   const plaintext = Buffer.from(JSON.stringify(config), "utf8");
   const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
   const authTag = cipher.getAuthTag();
-  return `v1.${_chunkWOXSQBAMcjs.bytesToBase64Url.call(void 0, iv)}.${_chunkWOXSQBAMcjs.bytesToBase64Url.call(void 0, authTag)}.${_chunkWOXSQBAMcjs.bytesToBase64Url.call(void 0, ciphertext)}`;
+  return `v1.${_chunkQHVID3V2cjs.bytesToBase64Url.call(void 0, iv)}.${_chunkQHVID3V2cjs.bytesToBase64Url.call(void 0, authTag)}.${_chunkQHVID3V2cjs.bytesToBase64Url.call(void 0, ciphertext)}`;
 }
 function decryptConfig(encrypted, kekBuffer) {
   const parts = String(encrypted || "").split(".");
   if (parts.length !== 4 || parts[0] !== "v1") {
     throw new Error("INVALID_TENANT_CONFIG");
   }
-  const iv = _chunkWOXSQBAMcjs.base64UrlToBytes.call(void 0, parts[1]);
-  const authTag = _chunkWOXSQBAMcjs.base64UrlToBytes.call(void 0, parts[2]);
-  const ciphertext = _chunkWOXSQBAMcjs.base64UrlToBytes.call(void 0, parts[3]);
+  const iv = _chunkQHVID3V2cjs.base64UrlToBytes.call(void 0, parts[1]);
+  const authTag = _chunkQHVID3V2cjs.base64UrlToBytes.call(void 0, parts[2]);
+  const ciphertext = _chunkQHVID3V2cjs.base64UrlToBytes.call(void 0, parts[3]);
   const decipher = _crypto.createDecipheriv.call(void 0, "aes-256-gcm", kekBuffer, iv);
   decipher.setAuthTag(authTag);
   const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
@@ -347,7 +351,7 @@ function createTenantBlobStore(options) {
 // src/server/tenant/token.js
 
 function sign(input, secret) {
-  return _chunkWOXSQBAMcjs.bytesToBase64Url.call(void 0, _crypto.createHmac.call(void 0, "sha256", secret).update(input).digest());
+  return _chunkQHVID3V2cjs.bytesToBase64Url.call(void 0, _crypto.createHmac.call(void 0, "sha256", secret).update(input).digest());
 }
 function nowEpochSeconds() {
   return Math.floor(Date.now() / 1e3);
@@ -363,8 +367,8 @@ function createTenantToken(params, secret) {
     v: 1
   };
   const header = { alg: "HS256", typ: "JWT" };
-  const encodedHeader = _chunkWOXSQBAMcjs.bytesToBase64Url.call(void 0, _chunkWOXSQBAMcjs.utf8.call(void 0, JSON.stringify(header)));
-  const encodedPayload = _chunkWOXSQBAMcjs.bytesToBase64Url.call(void 0, _chunkWOXSQBAMcjs.utf8.call(void 0, JSON.stringify(payload)));
+  const encodedHeader = _chunkQHVID3V2cjs.bytesToBase64Url.call(void 0, _chunkQHVID3V2cjs.utf8.call(void 0, JSON.stringify(header)));
+  const encodedPayload = _chunkQHVID3V2cjs.bytesToBase64Url.call(void 0, _chunkQHVID3V2cjs.utf8.call(void 0, JSON.stringify(payload)));
   const signingInput = `${encodedHeader}.${encodedPayload}`;
   const signature = sign(signingInput, secret);
   return `${signingInput}.${signature}`;
@@ -383,17 +387,17 @@ function verifyTenantToken(token, secret, options = {}) {
   let receivedBytes;
   let expectedBytes;
   try {
-    receivedBytes = _chunkWOXSQBAMcjs.base64UrlToBytes.call(void 0, receivedSignature);
-    expectedBytes = _chunkWOXSQBAMcjs.base64UrlToBytes.call(void 0, expectedSignature);
+    receivedBytes = _chunkQHVID3V2cjs.base64UrlToBytes.call(void 0, receivedSignature);
+    expectedBytes = _chunkQHVID3V2cjs.base64UrlToBytes.call(void 0, expectedSignature);
   } catch (e) {
     throw new Error("INVALID_TENANT_AUTH");
   }
-  if (!_chunkWOXSQBAMcjs.timingSafeEqualBytes.call(void 0, receivedBytes, expectedBytes)) {
+  if (!_chunkQHVID3V2cjs.timingSafeEqualBytes.call(void 0, receivedBytes, expectedBytes)) {
     throw new Error("INVALID_TENANT_AUTH");
   }
   let payload;
   try {
-    payload = JSON.parse(_chunkWOXSQBAMcjs.utf8Decode.call(void 0, _chunkWOXSQBAMcjs.base64UrlToBytes.call(void 0, encodedPayload)));
+    payload = JSON.parse(_chunkQHVID3V2cjs.utf8Decode.call(void 0, _chunkQHVID3V2cjs.base64UrlToBytes.call(void 0, encodedPayload)));
   } catch (e2) {
     throw new Error("INVALID_TENANT_AUTH");
   }
@@ -605,6 +609,10 @@ async function createReiServer(config) {
       privateKey: vapid.privateKey || ""
     },
     webpush: webpushModule,
+    // 分片传输的限额（与 installReiSW 的 multipart 同一份）。instant 消息在
+    // schedule-message 里就地投递、定时消息走 send-notifications 的 tick，两条路
+    // 都从这个 ctx 展开，所以配一次两边都认。
+    multipart: config.multipart || null,
     tenant: {
       initSecret
     },
@@ -613,15 +621,15 @@ async function createReiServer(config) {
   return {
     handlers: {
       initTenant: createInitTenantHandler(ctx),
-      getUserKey: _chunkWOXSQBAMcjs.createGetUserKeyHandler.call(void 0, ctx),
-      scheduleMessage: _chunkWOXSQBAMcjs.createScheduleMessageHandler.call(void 0, ctx),
+      getUserKey: _chunkQHVID3V2cjs.createGetUserKeyHandler.call(void 0, ctx),
+      scheduleMessage: _chunkQHVID3V2cjs.createScheduleMessageHandler.call(void 0, ctx),
       sendNotifications: createSendNotificationsHandler(ctx),
-      updateMessage: _chunkWOXSQBAMcjs.createUpdateMessageHandler.call(void 0, ctx),
-      cancelMessage: _chunkWOXSQBAMcjs.createCancelMessageHandler.call(void 0, ctx),
-      messages: _chunkWOXSQBAMcjs.createMessagesHandler.call(void 0, ctx),
-      getMessage: _chunkWOXSQBAMcjs.createGetMessageHandler.call(void 0, ctx),
-      pushSubscription: _chunkWOXSQBAMcjs.createPushSubscriptionHandler.call(void 0, ctx),
-      llmCredentials: _chunkWOXSQBAMcjs.createLlmCredentialsHandler.call(void 0, ctx)
+      updateMessage: _chunkQHVID3V2cjs.createUpdateMessageHandler.call(void 0, ctx),
+      cancelMessage: _chunkQHVID3V2cjs.createCancelMessageHandler.call(void 0, ctx),
+      messages: _chunkQHVID3V2cjs.createMessagesHandler.call(void 0, ctx),
+      getMessage: _chunkQHVID3V2cjs.createGetMessageHandler.call(void 0, ctx),
+      pushSubscription: _chunkQHVID3V2cjs.createPushSubscriptionHandler.call(void 0, ctx),
+      llmCredentials: _chunkQHVID3V2cjs.createLlmCredentialsHandler.call(void 0, ctx)
     }
   };
 }
@@ -683,4 +691,8 @@ async function createReiServer(config) {
 
 
 
-exports.CORS_ALLOW_HEADERS = _chunkWOXSQBAMcjs.CORS_ALLOW_HEADERS; exports.CORS_ALLOW_METHODS = _chunkWOXSQBAMcjs.CORS_ALLOW_METHODS; exports.CRED_ID_MAX_LENGTH = _chunkWOXSQBAMcjs.CRED_ID_MAX_LENGTH; exports.CRED_PUT_BATCH_MAX = _chunkWOXSQBAMcjs.CRED_PUT_BATCH_MAX; exports.CRED_REFS_MAX_ENTRIES = _chunkWOXSQBAMcjs.CRED_REFS_MAX_ENTRIES; exports.CRED_ROWS_PER_USER_MAX = _chunkWOXSQBAMcjs.CRED_ROWS_PER_USER_MAX; exports.DEFAULT_CLAIM_LEASE_MS = _chunkWOXSQBAMcjs.DEFAULT_CLAIM_LEASE_MS; exports.DEFAULT_HEARTBEAT_LEASE_TTL_MS = _chunkWOXSQBAMcjs.DEFAULT_HEARTBEAT_LEASE_TTL_MS; exports.DEFAULT_LEASE_HEARTBEAT_MS = _chunkWOXSQBAMcjs.DEFAULT_LEASE_HEARTBEAT_MS; exports.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE = _chunkWOXSQBAMcjs.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE; exports.DEFAULT_MAX_TOOL_ITERATIONS = _chunkWOXSQBAMcjs.DEFAULT_MAX_TOOL_ITERATIONS; exports.DEFAULT_TOTAL_TIMEOUT_MS = _chunkWOXSQBAMcjs.DEFAULT_TOTAL_TIMEOUT_MS; exports.MAX_PUSH_PAYLOAD_BYTES = _chunkWOXSQBAMcjs.MAX_PUSH_PAYLOAD_BYTES; exports.MIN_SCHEDULE_LEAD_MS = _chunkWOXSQBAMcjs.MIN_SCHEDULE_LEAD_MS; exports.NonRetryableError = _chunkWOXSQBAMcjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkWOXSQBAMcjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkWOXSQBAMcjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkWOXSQBAMcjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkWOXSQBAMcjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkWOXSQBAMcjs.advanceOccurrence; exports.createAdapter = createAdapter; exports.createD1Adapter = _chunkWOXSQBAMcjs.createD1Adapter; exports.createReiServer = createReiServer; exports.createSingleUserCloudflareWorker = _chunkWOXSQBAMcjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkWOXSQBAMcjs.createSingleUserServer; exports.createTenantToken = createTenantToken; exports.createWebCryptoWebPush = _chunkWOXSQBAMcjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkWOXSQBAMcjs.decryptFromStorage; exports.decryptPayload = _chunkWOXSQBAMcjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkWOXSQBAMcjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkWOXSQBAMcjs.encryptForStorage; exports.ensureSchema = _chunkWOXSQBAMcjs.ensureSchema; exports.getSchemaVersion = _chunkWOXSQBAMcjs.getSchemaVersion; exports.hasChatCredRef = _chunkWOXSQBAMcjs.hasChatCredRef; exports.isNonRetryableError = _chunkWOXSQBAMcjs.isNonRetryableError; exports.isValidCredId = _chunkWOXSQBAMcjs.isValidCredId; exports.isValidISO8601 = _chunkWOXSQBAMcjs.isValidISO8601; exports.isValidTimeZoneId = _chunkWOXSQBAMcjs.isValidTimeZoneId; exports.isValidUUID = _chunkWOXSQBAMcjs.isValidUUID; exports.isValidUUIDv4 = _chunkWOXSQBAMcjs.isValidUUIDv4; exports.isValidUrl = _chunkWOXSQBAMcjs.isValidUrl; exports.measurePushPayload = _chunkWOXSQBAMcjs.measurePushPayload; exports.nextFutureOccurrence = _chunkWOXSQBAMcjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkWOXSQBAMcjs.planNextOccurrence; exports.resolveLlmCredential = _chunkWOXSQBAMcjs.resolveLlmCredential; exports.runScheduledTick = _chunkWOXSQBAMcjs.runScheduledTick; exports.runTask = _chunkWOXSQBAMcjs.runTask; exports.sanitizeErrorSummary = _chunkWOXSQBAMcjs.sanitizeErrorSummary; exports.summarizeErrorCause = _chunkWOXSQBAMcjs.summarizeErrorCause; exports.supportsLlmCredentialsStore = _chunkWOXSQBAMcjs.supportsLlmCredentialsStore; exports.validateAvatarUrl = _chunkWOXSQBAMcjs.validateAvatarUrl; exports.validateCredRefs = _chunkWOXSQBAMcjs.validateCredRefs; exports.validateCredValue = _chunkWOXSQBAMcjs.validateCredValue; exports.validateLlmMessagesArray = _chunkWOXSQBAMcjs.validateLlmMessagesArray; exports.validateScheduleMessagePayload = _chunkWOXSQBAMcjs.validateScheduleMessagePayload; exports.validateSplitPattern = _chunkWOXSQBAMcjs.validateSplitPattern; exports.verifyTenantToken = verifyTenantToken;
+
+
+
+
+exports.CORS_ALLOW_HEADERS = _chunkQHVID3V2cjs.CORS_ALLOW_HEADERS; exports.CORS_ALLOW_METHODS = _chunkQHVID3V2cjs.CORS_ALLOW_METHODS; exports.CRED_ID_MAX_LENGTH = _chunkQHVID3V2cjs.CRED_ID_MAX_LENGTH; exports.CRED_PUT_BATCH_MAX = _chunkQHVID3V2cjs.CRED_PUT_BATCH_MAX; exports.CRED_REFS_MAX_ENTRIES = _chunkQHVID3V2cjs.CRED_REFS_MAX_ENTRIES; exports.CRED_ROWS_PER_USER_MAX = _chunkQHVID3V2cjs.CRED_ROWS_PER_USER_MAX; exports.DEFAULT_CLAIM_LEASE_MS = _chunkQHVID3V2cjs.DEFAULT_CLAIM_LEASE_MS; exports.DEFAULT_HEARTBEAT_LEASE_TTL_MS = _chunkQHVID3V2cjs.DEFAULT_HEARTBEAT_LEASE_TTL_MS; exports.DEFAULT_LEASE_HEARTBEAT_MS = _chunkQHVID3V2cjs.DEFAULT_LEASE_HEARTBEAT_MS; exports.DEFAULT_MAX_REQUEST_BODY_BYTES = _chunkQHVID3V2cjs.DEFAULT_MAX_REQUEST_BODY_BYTES; exports.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE = _chunkQHVID3V2cjs.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE; exports.DEFAULT_MAX_TOOL_ITERATIONS = _chunkQHVID3V2cjs.DEFAULT_MAX_TOOL_ITERATIONS; exports.DEFAULT_TOTAL_TIMEOUT_MS = _chunkQHVID3V2cjs.DEFAULT_TOTAL_TIMEOUT_MS; exports.DeploymentConfigError = _chunkQHVID3V2cjs.DeploymentConfigError; exports.MAX_PUSH_PAYLOAD_BYTES = _chunkQHVID3V2cjs.MAX_PUSH_PAYLOAD_BYTES; exports.MAX_TASK_PAYLOAD_BYTES = _chunkQHVID3V2cjs.MAX_TASK_PAYLOAD_BYTES; exports.MIN_SCHEDULE_LEAD_MS = _chunkQHVID3V2cjs.MIN_SCHEDULE_LEAD_MS; exports.NonRetryableError = _chunkQHVID3V2cjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkQHVID3V2cjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkQHVID3V2cjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkQHVID3V2cjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkQHVID3V2cjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkQHVID3V2cjs.advanceOccurrence; exports.createAdapter = createAdapter; exports.createD1Adapter = _chunkQHVID3V2cjs.createD1Adapter; exports.createReiServer = createReiServer; exports.createSingleUserCloudflareWorker = _chunkQHVID3V2cjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkQHVID3V2cjs.createSingleUserServer; exports.createTenantToken = createTenantToken; exports.createWebCryptoWebPush = _chunkQHVID3V2cjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkQHVID3V2cjs.decryptFromStorage; exports.decryptPayload = _chunkQHVID3V2cjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkQHVID3V2cjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkQHVID3V2cjs.encryptForStorage; exports.ensureSchema = _chunkQHVID3V2cjs.ensureSchema; exports.getSchemaVersion = _chunkQHVID3V2cjs.getSchemaVersion; exports.hasChatCredRef = _chunkQHVID3V2cjs.hasChatCredRef; exports.isNonRetryableError = _chunkQHVID3V2cjs.isNonRetryableError; exports.isValidCredId = _chunkQHVID3V2cjs.isValidCredId; exports.isValidISO8601 = _chunkQHVID3V2cjs.isValidISO8601; exports.isValidTimeZoneId = _chunkQHVID3V2cjs.isValidTimeZoneId; exports.isValidUUID = _chunkQHVID3V2cjs.isValidUUID; exports.isValidUUIDv4 = _chunkQHVID3V2cjs.isValidUUIDv4; exports.isValidUrl = _chunkQHVID3V2cjs.isValidUrl; exports.measurePushPayload = _chunkQHVID3V2cjs.measurePushPayload; exports.nextFutureOccurrence = _chunkQHVID3V2cjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkQHVID3V2cjs.planNextOccurrence; exports.readRequestBody = _chunkQHVID3V2cjs.readRequestBody; exports.resolveLlmCredential = _chunkQHVID3V2cjs.resolveLlmCredential; exports.runScheduledTick = _chunkQHVID3V2cjs.runScheduledTick; exports.runTask = _chunkQHVID3V2cjs.runTask; exports.sanitizeErrorSummary = _chunkQHVID3V2cjs.sanitizeErrorSummary; exports.summarizeErrorCause = _chunkQHVID3V2cjs.summarizeErrorCause; exports.supportsLlmCredentialsStore = _chunkQHVID3V2cjs.supportsLlmCredentialsStore; exports.validateAvatarUrl = _chunkQHVID3V2cjs.validateAvatarUrl; exports.validateCredRefs = _chunkQHVID3V2cjs.validateCredRefs; exports.validateCredValue = _chunkQHVID3V2cjs.validateCredValue; exports.validateLlmMessagesArray = _chunkQHVID3V2cjs.validateLlmMessagesArray; exports.validateScheduleMessagePayload = _chunkQHVID3V2cjs.validateScheduleMessagePayload; exports.validateSplitPattern = _chunkQHVID3V2cjs.validateSplitPattern; exports.verifyTenantToken = verifyTenantToken;

package/dist/index.d.cts

@@ -18,6 +18,11 @@
  * @typedef {Object} ReiServerConfig
  * @property {VapidConfig} [vapid]   - VAPID keys for Web Push.
  * @property {TenantServerConfig} tenant - Tenant config & auth settings.
+ * @property {{ maxChunkBytes?: number, maxChunks?: number, maxTotalBytes?: number, ttlMs?: number }} [multipart]
+ *   分片传输的限额，跟传给 `installReiSW` 的那一份保持一致（同名同键，原样传过来
+ *   即可）。一条 push 装不下的思考过程要切片发，切多大、最多几片、重组窗口多长由
+ *   接收端说了算——发送端不知道这份配置的话，切出来的分片到了那边会被逐片拒收，
+ *   或者整批没能在重组窗口内发完，一条也拼不回来。不配 = 两边都用默认值。
  */
 /**
  * @typedef {Object} ReiHandlers
@@ -98,6 +103,18 @@ export type ReiServerConfig = {
      * - Tenant config & auth settings.
      */
     tenant: TenantServerConfig;
+    /**
+     * 分片传输的限额，跟传给 `installReiSW` 的那一份保持一致（同名同键，原样传过来
+     * 即可）。一条 push 装不下的思考过程要切片发，切多大、最多几片、重组窗口多长由
+     * 接收端说了算——发送端不知道这份配置的话，切出来的分片到了那边会被逐片拒收，
+     * 或者整批没能在重组窗口内发完，一条也拼不回来。不配 = 两边都用默认值。
+     */
+    multipart?: {
+        maxChunkBytes?: number;
+        maxChunks?: number;
+        maxTotalBytes?: number;
+        ttlMs?: number;
+    };
 };
 export type ReiHandlers = {
     initTenant: {
@@ -142,13 +159,14 @@ export type ReiServer = {
     handlers: ReiHandlers;
 };
 export { runScheduledTick, runTask, DEFAULT_CLAIM_LEASE_MS, DEFAULT_LEASE_HEARTBEAT_MS, DEFAULT_HEARTBEAT_LEASE_TTL_MS, sanitizeErrorSummary } from "./lib/run-tick.js";
-export { NonRetryableError, isNonRetryableError, summarizeErrorCause } from "./lib/errors.js";
+export { NonRetryableError, DeploymentConfigError, isNonRetryableError, summarizeErrorCause } from "./lib/errors.js";
 export { getSchemaVersion, ensureSchema, SCHEMA_VERSION } from "./lib/schema-version.js";
 export { DEFAULT_MAX_TOOL_ITERATIONS, DEFAULT_TOTAL_TIMEOUT_MS, DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE, MIN_SCHEDULE_LEAD_MS } from "./lib/agentic-fire.js";
 export { CORS_ALLOW_HEADERS, CORS_ALLOW_METHODS, createSingleUserCloudflareWorker } from "./cloudflare/single-user-worker.js";
 export { createWebCryptoWebPush, measurePushPayload, MAX_PUSH_PAYLOAD_BYTES, PUSH_ENVELOPE_RESERVED_BYTES, WEB_PUSH_MAX_BODY_BYTES, WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES } from "./lib/webpush-webcrypto.js";
 export { deriveUserEncryptionKey, decryptPayload, encryptForStorage, decryptFromStorage } from "./lib/encryption.js";
-export { validateScheduleMessagePayload, validateLlmMessagesArray, validateSplitPattern, validateAvatarUrl, isValidISO8601, isValidUrl, isValidUUID, isValidUUIDv4, isValidTimeZoneId } from "./lib/validation.js";
+export { validateScheduleMessagePayload, validateLlmMessagesArray, validateSplitPattern, validateAvatarUrl, isValidISO8601, isValidUrl, isValidUUID, isValidUUIDv4, isValidTimeZoneId, MAX_TASK_PAYLOAD_BYTES } from "./lib/validation.js";
+export { readRequestBody, DEFAULT_MAX_REQUEST_BODY_BYTES } from "./lib/request.js";
 export { supportsLlmCredentialsStore, isValidCredId, validateCredRefs, validateCredValue, hasChatCredRef, resolveLlmCredential, CRED_ID_MAX_LENGTH, CRED_PUT_BATCH_MAX, CRED_ROWS_PER_USER_MAX, CRED_REFS_MAX_ENTRIES } from "./lib/llm-credentials-store.js";
 export { advanceOccurrence, nextFutureOccurrence, planNextOccurrence } from "./lib/recurrence.js";
 export { createTenantToken, verifyTenantToken } from "./tenant/token.js";

package/dist/index.d.ts

@@ -18,6 +18,11 @@
  * @typedef {Object} ReiServerConfig
  * @property {VapidConfig} [vapid]   - VAPID keys for Web Push.
  * @property {TenantServerConfig} tenant - Tenant config & auth settings.
+ * @property {{ maxChunkBytes?: number, maxChunks?: number, maxTotalBytes?: number, ttlMs?: number }} [multipart]
+ *   分片传输的限额，跟传给 `installReiSW` 的那一份保持一致（同名同键，原样传过来
+ *   即可）。一条 push 装不下的思考过程要切片发，切多大、最多几片、重组窗口多长由
+ *   接收端说了算——发送端不知道这份配置的话，切出来的分片到了那边会被逐片拒收，
+ *   或者整批没能在重组窗口内发完，一条也拼不回来。不配 = 两边都用默认值。
  */
 /**
  * @typedef {Object} ReiHandlers
@@ -98,6 +103,18 @@ export type ReiServerConfig = {
      * - Tenant config & auth settings.
      */
     tenant: TenantServerConfig;
+    /**
+     * 分片传输的限额，跟传给 `installReiSW` 的那一份保持一致（同名同键，原样传过来
+     * 即可）。一条 push 装不下的思考过程要切片发，切多大、最多几片、重组窗口多长由
+     * 接收端说了算——发送端不知道这份配置的话，切出来的分片到了那边会被逐片拒收，
+     * 或者整批没能在重组窗口内发完，一条也拼不回来。不配 = 两边都用默认值。
+     */
+    multipart?: {
+        maxChunkBytes?: number;
+        maxChunks?: number;
+        maxTotalBytes?: number;
+        ttlMs?: number;
+    };
 };
 export type ReiHandlers = {
     initTenant: {
@@ -142,13 +159,14 @@ export type ReiServer = {
     handlers: ReiHandlers;
 };
 export { runScheduledTick, runTask, DEFAULT_CLAIM_LEASE_MS, DEFAULT_LEASE_HEARTBEAT_MS, DEFAULT_HEARTBEAT_LEASE_TTL_MS, sanitizeErrorSummary } from "./lib/run-tick.js";
-export { NonRetryableError, isNonRetryableError, summarizeErrorCause } from "./lib/errors.js";
+export { NonRetryableError, DeploymentConfigError, isNonRetryableError, summarizeErrorCause } from "./lib/errors.js";
 export { getSchemaVersion, ensureSchema, SCHEMA_VERSION } from "./lib/schema-version.js";
 export { DEFAULT_MAX_TOOL_ITERATIONS, DEFAULT_TOTAL_TIMEOUT_MS, DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE, MIN_SCHEDULE_LEAD_MS } from "./lib/agentic-fire.js";
 export { CORS_ALLOW_HEADERS, CORS_ALLOW_METHODS, createSingleUserCloudflareWorker } from "./cloudflare/single-user-worker.js";
 export { createWebCryptoWebPush, measurePushPayload, MAX_PUSH_PAYLOAD_BYTES, PUSH_ENVELOPE_RESERVED_BYTES, WEB_PUSH_MAX_BODY_BYTES, WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES } from "./lib/webpush-webcrypto.js";
 export { deriveUserEncryptionKey, decryptPayload, encryptForStorage, decryptFromStorage } from "./lib/encryption.js";
-export { validateScheduleMessagePayload, validateLlmMessagesArray, validateSplitPattern, validateAvatarUrl, isValidISO8601, isValidUrl, isValidUUID, isValidUUIDv4, isValidTimeZoneId } from "./lib/validation.js";
+export { validateScheduleMessagePayload, validateLlmMessagesArray, validateSplitPattern, validateAvatarUrl, isValidISO8601, isValidUrl, isValidUUID, isValidUUIDv4, isValidTimeZoneId, MAX_TASK_PAYLOAD_BYTES } from "./lib/validation.js";
+export { readRequestBody, DEFAULT_MAX_REQUEST_BODY_BYTES } from "./lib/request.js";
 export { supportsLlmCredentialsStore, isValidCredId, validateCredRefs, validateCredValue, hasChatCredRef, resolveLlmCredential, CRED_ID_MAX_LENGTH, CRED_PUT_BATCH_MAX, CRED_ROWS_PER_USER_MAX, CRED_REFS_MAX_ENTRIES } from "./lib/llm-credentials-store.js";
 export { advanceOccurrence, nextFutureOccurrence, planNextOccurrence } from "./lib/recurrence.js";
 export { createTenantToken, verifyTenantToken } from "./tenant/token.js";

package/dist/index.mjs

@@ -8,10 +8,13 @@ import {
   DEFAULT_CLAIM_LEASE_MS,
   DEFAULT_HEARTBEAT_LEASE_TTL_MS,
   DEFAULT_LEASE_HEARTBEAT_MS,
+  DEFAULT_MAX_REQUEST_BODY_BYTES,
   DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE,
   DEFAULT_MAX_TOOL_ITERATIONS,
   DEFAULT_TOTAL_TIMEOUT_MS,
+  DeploymentConfigError,
   MAX_PUSH_PAYLOAD_BYTES,
+  MAX_TASK_PAYLOAD_BYTES,
   MIN_SCHEDULE_LEAD_MS,
   NonRetryableError,
   PUSH_ENVELOPE_RESERVED_BYTES,
@@ -52,6 +55,7 @@ import {
   nextFutureOccurrence,
   parseJsonBody,
   planNextOccurrence,
+  readRequestBody,
   resolveLlmCredential,
   runScheduledTick,
   runTask,
@@ -67,8 +71,8 @@ import {
   validateLlmMessagesArray,
   validateScheduleMessagePayload,
   validateSplitPattern
-} from "./chunk-HTGYGGUH.mjs";
-import "./chunk-5FXVSC5O.mjs";
+} from "./chunk-KOJQVOYS.mjs";
+import "./chunk-GN44PST5.mjs";
 
 // src/server/adapters/factory.js
 async function createAdapter(config) {
@@ -84,11 +88,11 @@ async function createAdapter(config) {
   }
   switch (config.driver) {
     case "neon": {
-      const { NeonAdapter } = await import("./neon-Y4KEZO5C.mjs");
+      const { NeonAdapter } = await import("./neon-ZIMHALYI.mjs");
       return new NeonAdapter(config.connectionString);
     }
     case "pg": {
-      const { PgAdapter } = await import("./pg-GWJZBWAM.mjs");
+      const { PgAdapter } = await import("./pg-QGC2XHUT.mjs");
       return new PgAdapter(config.connectionString);
     }
     default:
@@ -605,6 +609,10 @@ async function createReiServer(config) {
       privateKey: vapid.privateKey || ""
     },
     webpush: webpushModule,
+    // 分片传输的限额（与 installReiSW 的 multipart 同一份）。instant 消息在
+    // schedule-message 里就地投递、定时消息走 send-notifications 的 tick，两条路
+    // 都从这个 ctx 展开，所以配一次两边都认。
+    multipart: config.multipart || null,
     tenant: {
       initSecret
     },
@@ -635,10 +643,13 @@ export {
   DEFAULT_CLAIM_LEASE_MS,
   DEFAULT_HEARTBEAT_LEASE_TTL_MS,
   DEFAULT_LEASE_HEARTBEAT_MS,
+  DEFAULT_MAX_REQUEST_BODY_BYTES,
   DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE,
   DEFAULT_MAX_TOOL_ITERATIONS,
   DEFAULT_TOTAL_TIMEOUT_MS,
+  DeploymentConfigError,
   MAX_PUSH_PAYLOAD_BYTES,
+  MAX_TASK_PAYLOAD_BYTES,
   MIN_SCHEDULE_LEAD_MS,
   NonRetryableError,
   PUSH_ENVELOPE_RESERVED_BYTES,
@@ -670,6 +681,7 @@ export {
   measurePushPayload,
   nextFutureOccurrence,
   planNextOccurrence,
+  readRequestBody,
   resolveLlmCredential,
   runScheduledTick,
   runTask,

package/dist/lib/client-state-store.d.ts

@@ -1,5 +1,24 @@
 /** value 的 UTF-8 字节数——各处限额判断用的都是这个口径。 */
 export function stateValueBytes(value: any): number;
+/**
+ * 把 `clientStateTtl` 配置（`{ 命名空间: 天数 }`）算成清理指令。
+ *
+ * 一个命名空间出两条：它自己，加上它的切片命名空间（大值分块存在那儿，见
+ * lib/state-chunks.js）。两边共用同一个截止时刻——同一次写入的根行和切片行
+ * `updated_at` 相同，所以要么一起留、要么一起走，不会留下半截数据。
+ *
+ * 天数不是正数的条目跳过并告警（每个键只说一次）：配错了就该看得见，但不能
+ * 让 cron 每分钟刷一条。
+ *
+ * @param {Record<string, number>|null|undefined} ttl - `{ 命名空间: 天数 }`；天数可带小数
+ * @param {number} now - 当前时刻（epoch 毫秒）
+ * @returns {Array<{ namespace: string, updatedBefore: number }>}
+ *   `updatedBefore` 是 epoch 毫秒：这个命名空间下 `updated_at` 早于它的条目该清掉。
+ */
+export function planClientStateCleanup(ttl: Record<string, number> | null | undefined, now: number): Array<{
+    namespace: string;
+    updatedBefore: number;
+}>;
 /**
  * 把逻辑条目写进 client_state。条目要么是覆盖写（`value` 是字符串），要么是
  * 删除（`value` 为 `null`）：

package/dist/lib/errors.d.ts

@@ -6,12 +6,96 @@
  * @returns {boolean}
  */
 export function isNonRetryableError(error: unknown): boolean;
+/**
+ * 把一个已经构造好的错误标成确定性失败（就地改，原样返回），顺带补一个稳定
+ * 的 `code`（错误自己带了 code 就不覆盖）。
+ *
+ * 用在错误由别处构造、又想保住它原本类型的时候——比如契约校验抛的
+ * `TypeError`：宿主按 `instanceof TypeError` 分流的代码不该因为库多标了一个
+ * 字段就走岔。自己现造错误的地方直接用 {@link NonRetryableError} 更直白。
+ *
+ * @template T
+ * @param {T} error
+ * @param {string} [code]
+ * @returns {T}
+ */
+export function markPermanent<T>(error: T, code?: string): T;
+/**
+ * 这个错误是不是「投递期间任务被取消/顶替」。
+ *
+ * @param {unknown} error
+ * @returns {boolean}
+ */
+export function isTaskCancelledError(error: unknown): boolean;
+/**
+ * 这次投递失败要不要判成永久性的（不再重试）。四个来源：
+ *   - 已知的永久性错误码（见 {@link PERMANENT_ERROR_CODES}）；
+ *   - hook 侧抛出的 NonRetryableError（`permanent`，见 {@link NonRetryableError}）——
+ *     fire_pack 缺失、解析失败这类重试必然同败的错，隔两分钟再试三次只是让用户
+ *     多白等十二分钟，还把情绪评估之类的计费重跑三遍；
+ *   - 推送服务判了这条订阅的死刑（见 {@link TERMINAL_PUSH_STATUSES}）；
+ *   - 推送服务说这条 payload 太大（见 {@link PUSH_PAYLOAD_TOO_LARGE_STATUS}）。
+ *
+ * @param {{ permanent?: unknown, errorCode?: unknown, pushStatus?: unknown }} failure
+ * @returns {boolean}
+ */
+export function isPermanentDeliveryFailure(failure: {
+    permanent?: unknown;
+    errorCode?: unknown;
+    pushStatus?: unknown;
+}): boolean;
+/**
+ * 发一条 push，失败时自动标上「这是发 push 那一步抛的」。
+ *
+ * 发 push 的地方一律走这里，别各自写 `try { send } catch { throw
+ * tagPushStatusCode(e) }`：漏标一处，那条路上的 410 就读不出状态码，一条早就
+ * 失效的订阅会被当成普通失败，在退避阶梯上把 LLM 重跑三轮。忘了标是没有任何
+ * 提示的。
+ *
+ * @param {{ sendNotification: (subscription: any, payload: string) => Promise<any> }} webpush
+ * @param {any} subscription
+ * @param {string} payloadJson
+ * @returns {Promise<any>}
+ */
+export function sendTaggedPush(webpush: {
+    sendNotification: (subscription: any, payload: string) => Promise<any>;
+}, subscription: any, payloadJson: string): Promise<any>;
+/**
+ * 读推送服务回的状态码。没被 {@link tagPushStatusCode} 标过 → null。
+ *
+ * @param {unknown} error
+ * @returns {number|null}
+ */
+export function readPushStatusCode(error: unknown): number | null;
+/**
+ * lastError 里的机读标注：`errorCode` 是底层错误的稳定 code（如
+ * `PUSH_PAYLOAD_TOO_LARGE`），`pushStatus` 是推送服务回的 HTTP 状态码。两个都
+ * 没有 → undefined，不往记录里塞空字段。
+ *
+ * reason 那句是给用户看的人话、措辞随时会变，判断「该让用户重建订阅还是裁短
+ * 内容」得读这两个字段。定时任务（run-tick）与 instant 任务
+ * （processMessagesByUuid）共用这一份，两条路记下来的形状一致。
+ *
+ * code 是标识符不是人话，不用脱敏，但也别让一个来路不明的超长 code 撑大明文
+ * 列——截到 64 字符，够放所有约定过的码。
+ *
+ * @param {string|null|undefined} errorCode
+ * @param {number|null|undefined} pushStatus
+ * @returns {{ errorCode?: string, pushStatus?: number }|undefined}
+ */
+export function buildErrorExtra(errorCode: string | null | undefined, pushStatus: number | null | undefined): {
+    errorCode?: string;
+    pushStatus?: number;
+} | undefined;
 /**
  * 把错误原因脱敏成能明文落库（任务行 last_error 列）的摘要。
  *
  * 任务内容一律密文落库，last_error 是唯一一列明文的「为什么没发出去」——
  * 错误消息偶尔会回显请求细节（上游 API 的报错带 URL、header 片段），所以
- * 长得像凭据的 token 一律遮掉，再截断到 500 字符。
+ * 长得像凭据的 token 一律遮掉，再截断。
+ *
+ * 遮什么、怎么遮由 @rei-standard/amsg-shared 的 `redactCredentials` 说了算，
+ * 这里只负责压平空白和截断。
  *
  * @param {unknown} reason
  * @returns {string}
@@ -21,7 +105,10 @@ export function sanitizeErrorSummary(reason: unknown): string;
  * @typedef {Object} ErrorCause
  * @property {'config'|'request'|'tick'} stage - 在哪一段炸的
  * @property {string} name - 错误类型（`error.name`，认不出来时是 'Error'）
- * @property {string} message - 脱敏后的错误消息
+ * @property {string} [message] - 脱敏后的错误消息。降级 500（配置都没建起来那条
+ *   路）回给跨域调用方时不带这个字段——那条路的 CORS 头是回显来访 Origin 的，任
+ *   意第三方页面都能读，而构建期异常原文里常有 binding 名、内网域名、环境变量
+ *   名。同源 / 无 Origin 的请求照旧带全文，`wrangler tail` 里也一直有。
  * @property {string} [code] - 错误自带的 `code` 字符串（有才带）
  */
 /**
@@ -42,9 +129,6 @@ export function sanitizeErrorSummary(reason: unknown): string;
  * @returns {ErrorCause}
  */
 export function summarizeErrorCause(error: unknown, stage: "config" | "request" | "tick"): ErrorCause;
-/**
- * 错误类型：宿主 hook 与库内部共用的失败语义标注。
- */
 /**
  * 确定性失败——重试必然同败，别再排退避阶梯。
  *
@@ -73,6 +157,41 @@ export class NonRetryableError extends Error {
     permanent: boolean;
     code: string;
 }
+/**
+ * 部署级的配置 / 适配器能力错误——坏的不是这条任务，是这个部署。
+ *
+ * 典型场景：`hooks.onBeforeFire` 配了但 `onLLMOutput` 忘了配、`executeToolCalls`
+ * 没配、自定义适配器缺 `createTask` / `deleteTaskByUuid` / `upsertClientState`。
+ * 这类错误重试确实好不了，但**不能**判终态：同一个坏部署下每条到点的任务都会
+ * 撞同一个错，判终态就等于在那段时间里把每一条一次性任务都永久标 `failed`，
+ * 运维改好配置重新部署也捞不回来了（行已不在 pending，`PUT /update-message`
+ * 回 409）。所以留在退避阶梯上——配置一修好，还在阶梯上的任务下一跳就正常发
+ * 出去。这跟 VAPID 配错回的 400/401/403 是同一个道理，见
+ * {@link PUSH_PAYLOAD_TOO_LARGE_STATUS} 那段注释。
+ *
+ * 带 `code` 但不带 `permanent`：失败原因照旧进 last_error 的 `errorCode`，宿主
+ * 想分流照样读得到，只是不再跳过重试。
+ */
+export class DeploymentConfigError extends Error {
+    /**
+     * @param {string} message
+     * @param {{ code?: string, cause?: unknown }} [options]
+     */
+    constructor(message: string, options?: {
+        code?: string;
+        cause?: unknown;
+    });
+    code: string;
+}
+/**
+ * 投递期间发现「这条任务已经不归本次投递管了」时，推送侧抛的错误码：行被
+ * `DELETE /message` 取消、被 `supersedesUuid` 顶替，或被别的执行者收尾了。
+ *
+ * 发送方（message-processor 的正文投递、agentic-fire 的 hook 投递）靠它区分
+ * 「取消」和「发失败」——两者的收尾完全不同：取消要把这一批还没发出去的
+ * outbox 行撤掉，发失败则要把它们留着等补收。
+ */
+export const TASK_CANCELLED_CODE: "TASK_CANCELLED";
 export type ErrorCause = {
     /**
      * - 在哪一段炸的
@@ -83,9 +202,12 @@ export type ErrorCause = {
      */
     name: string;
     /**
-     * - 脱敏后的错误消息
+     * - 脱敏后的错误消息。降级 500（配置都没建起来那条
+     * 路）回给跨域调用方时不带这个字段——那条路的 CORS 头是回显来访 Origin 的，任
+     * 意第三方页面都能读，而构建期异常原文里常有 binding 名、内网域名、环境变量
+     * 名。同源 / 无 Origin 的请求照旧带全文，`wrangler tail` 里也一直有。
      */
-    message: string;
+    message?: string;
     /**
      * - 错误自带的 `code` 字符串（有才带）
      */