@rei-standard/amsg-server 3.0.0 → 3.1.0-next.0

package/dist/index.cjs

@@ -73,7 +73,8 @@
 
 
 
-var _chunkYBDQJVFQcjs = require('./chunk-YBDQJVFQ.cjs');
+
+var _chunk3NIYNYZYcjs = require('./chunk-3NIYNYZY.cjs');
 require('./chunk-7NMQFTDJ.cjs');
 
 // src/server/adapters/factory.js
@@ -107,7 +108,7 @@ async function createAdapter(config) {
 // src/server/handlers/init-tenant.js
 function createInitTenantHandler(ctx) {
   async function POST(headers, body) {
-    const initSecret = _chunkYBDQJVFQcjs.getHeader.call(void 0, headers, "x-init-secret");
+    const initSecret = _chunk3NIYNYZYcjs.getHeader.call(void 0, headers, "x-init-secret");
     if (ctx.tenant.initSecret && initSecret !== ctx.tenant.initSecret) {
       return {
         status: 401,
@@ -120,7 +121,7 @@ function createInitTenantHandler(ctx) {
         }
       };
     }
-    const parsed = _chunkYBDQJVFQcjs.parseJsonBody.call(void 0, body);
+    const parsed = _chunk3NIYNYZYcjs.parseJsonBody.call(void 0, body);
     if (!parsed.ok) {
       return {
         status: 400,
@@ -134,7 +135,7 @@ function createInitTenantHandler(ctx) {
     const tenantId = payload.tenantId || void 0;
     const driver = payload.driver;
     const databaseUrl = payload.databaseUrl || payload.connectionString;
-    if (tenantId && !_chunkYBDQJVFQcjs.isValidUUIDv4.call(void 0, tenantId)) {
+    if (tenantId && !_chunk3NIYNYZYcjs.isValidUUIDv4.call(void 0, tenantId)) {
       return {
         status: 400,
         body: {
@@ -254,7 +255,7 @@ function createSendNotificationsHandler(ctx) {
         }
       };
     }
-    const data = await _chunkYBDQJVFQcjs.runScheduledTick.call(void 0, { ...ctx, db, masterKey });
+    const data = await _chunk3NIYNYZYcjs.runScheduledTick.call(void 0, { ...ctx, db, masterKey });
     return { status: 200, body: { success: true, data } };
   }
   return { POST };
@@ -276,16 +277,16 @@ function encryptConfig(config, kekBuffer) {
   const plaintext = Buffer.from(JSON.stringify(config), "utf8");
   const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
   const authTag = cipher.getAuthTag();
-  return `v1.${_chunkYBDQJVFQcjs.bytesToBase64Url.call(void 0, iv)}.${_chunkYBDQJVFQcjs.bytesToBase64Url.call(void 0, authTag)}.${_chunkYBDQJVFQcjs.bytesToBase64Url.call(void 0, ciphertext)}`;
+  return `v1.${_chunk3NIYNYZYcjs.bytesToBase64Url.call(void 0, iv)}.${_chunk3NIYNYZYcjs.bytesToBase64Url.call(void 0, authTag)}.${_chunk3NIYNYZYcjs.bytesToBase64Url.call(void 0, ciphertext)}`;
 }
 function decryptConfig(encrypted, kekBuffer) {
   const parts = String(encrypted || "").split(".");
   if (parts.length !== 4 || parts[0] !== "v1") {
     throw new Error("INVALID_TENANT_CONFIG");
   }
-  const iv = _chunkYBDQJVFQcjs.base64UrlToBytes.call(void 0, parts[1]);
-  const authTag = _chunkYBDQJVFQcjs.base64UrlToBytes.call(void 0, parts[2]);
-  const ciphertext = _chunkYBDQJVFQcjs.base64UrlToBytes.call(void 0, parts[3]);
+  const iv = _chunk3NIYNYZYcjs.base64UrlToBytes.call(void 0, parts[1]);
+  const authTag = _chunk3NIYNYZYcjs.base64UrlToBytes.call(void 0, parts[2]);
+  const ciphertext = _chunk3NIYNYZYcjs.base64UrlToBytes.call(void 0, parts[3]);
   const decipher = _crypto.createDecipheriv.call(void 0, "aes-256-gcm", kekBuffer, iv);
   decipher.setAuthTag(authTag);
   const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
@@ -353,7 +354,7 @@ function createTenantBlobStore(options) {
 // src/server/tenant/token.js
 
 function sign(input, secret) {
-  return _chunkYBDQJVFQcjs.bytesToBase64Url.call(void 0, _crypto.createHmac.call(void 0, "sha256", secret).update(input).digest());
+  return _chunk3NIYNYZYcjs.bytesToBase64Url.call(void 0, _crypto.createHmac.call(void 0, "sha256", secret).update(input).digest());
 }
 function nowEpochSeconds() {
   return Math.floor(Date.now() / 1e3);
@@ -369,8 +370,8 @@ function createTenantToken(params, secret) {
     v: 1
   };
   const header = { alg: "HS256", typ: "JWT" };
-  const encodedHeader = _chunkYBDQJVFQcjs.bytesToBase64Url.call(void 0, _chunkYBDQJVFQcjs.utf8.call(void 0, JSON.stringify(header)));
-  const encodedPayload = _chunkYBDQJVFQcjs.bytesToBase64Url.call(void 0, _chunkYBDQJVFQcjs.utf8.call(void 0, JSON.stringify(payload)));
+  const encodedHeader = _chunk3NIYNYZYcjs.bytesToBase64Url.call(void 0, _chunk3NIYNYZYcjs.utf8.call(void 0, JSON.stringify(header)));
+  const encodedPayload = _chunk3NIYNYZYcjs.bytesToBase64Url.call(void 0, _chunk3NIYNYZYcjs.utf8.call(void 0, JSON.stringify(payload)));
   const signingInput = `${encodedHeader}.${encodedPayload}`;
   const signature = sign(signingInput, secret);
   return `${signingInput}.${signature}`;
@@ -389,17 +390,17 @@ function verifyTenantToken(token, secret, options = {}) {
   let receivedBytes;
   let expectedBytes;
   try {
-    receivedBytes = _chunkYBDQJVFQcjs.base64UrlToBytes.call(void 0, receivedSignature);
-    expectedBytes = _chunkYBDQJVFQcjs.base64UrlToBytes.call(void 0, expectedSignature);
+    receivedBytes = _chunk3NIYNYZYcjs.base64UrlToBytes.call(void 0, receivedSignature);
+    expectedBytes = _chunk3NIYNYZYcjs.base64UrlToBytes.call(void 0, expectedSignature);
   } catch (e) {
     throw new Error("INVALID_TENANT_AUTH");
   }
-  if (!_chunkYBDQJVFQcjs.timingSafeEqualBytes.call(void 0, receivedBytes, expectedBytes)) {
+  if (!_chunk3NIYNYZYcjs.timingSafeEqualBytes.call(void 0, receivedBytes, expectedBytes)) {
     throw new Error("INVALID_TENANT_AUTH");
   }
   let payload;
   try {
-    payload = JSON.parse(_chunkYBDQJVFQcjs.utf8Decode.call(void 0, _chunkYBDQJVFQcjs.base64UrlToBytes.call(void 0, encodedPayload)));
+    payload = JSON.parse(_chunk3NIYNYZYcjs.utf8Decode.call(void 0, _chunk3NIYNYZYcjs.base64UrlToBytes.call(void 0, encodedPayload)));
   } catch (e2) {
     throw new Error("INVALID_TENANT_AUTH");
   }
@@ -627,15 +628,15 @@ async function createReiServer(config) {
   return {
     handlers: {
       initTenant: createInitTenantHandler(ctx),
-      getUserKey: _chunkYBDQJVFQcjs.createGetUserKeyHandler.call(void 0, ctx),
-      scheduleMessage: _chunkYBDQJVFQcjs.createScheduleMessageHandler.call(void 0, ctx),
+      getUserKey: _chunk3NIYNYZYcjs.createGetUserKeyHandler.call(void 0, ctx),
+      scheduleMessage: _chunk3NIYNYZYcjs.createScheduleMessageHandler.call(void 0, ctx),
       sendNotifications: createSendNotificationsHandler(ctx),
-      updateMessage: _chunkYBDQJVFQcjs.createUpdateMessageHandler.call(void 0, ctx),
-      cancelMessage: _chunkYBDQJVFQcjs.createCancelMessageHandler.call(void 0, ctx),
-      messages: _chunkYBDQJVFQcjs.createMessagesHandler.call(void 0, ctx),
-      getMessage: _chunkYBDQJVFQcjs.createGetMessageHandler.call(void 0, ctx),
-      pushSubscription: _chunkYBDQJVFQcjs.createPushSubscriptionHandler.call(void 0, ctx),
-      llmCredentials: _chunkYBDQJVFQcjs.createLlmCredentialsHandler.call(void 0, ctx)
+      updateMessage: _chunk3NIYNYZYcjs.createUpdateMessageHandler.call(void 0, ctx),
+      cancelMessage: _chunk3NIYNYZYcjs.createCancelMessageHandler.call(void 0, ctx),
+      messages: _chunk3NIYNYZYcjs.createMessagesHandler.call(void 0, ctx),
+      getMessage: _chunk3NIYNYZYcjs.createGetMessageHandler.call(void 0, ctx),
+      pushSubscription: _chunk3NIYNYZYcjs.createPushSubscriptionHandler.call(void 0, ctx),
+      llmCredentials: _chunk3NIYNYZYcjs.createLlmCredentialsHandler.call(void 0, ctx)
     }
   };
 }
@@ -703,4 +704,5 @@ async function createReiServer(config) {
 
 
 
-exports.CORS_ALLOW_HEADERS = _chunkYBDQJVFQcjs.CORS_ALLOW_HEADERS; exports.CORS_ALLOW_METHODS = _chunkYBDQJVFQcjs.CORS_ALLOW_METHODS; exports.CRED_ID_MAX_LENGTH = _chunkYBDQJVFQcjs.CRED_ID_MAX_LENGTH; exports.CRED_PUT_BATCH_MAX = _chunkYBDQJVFQcjs.CRED_PUT_BATCH_MAX; exports.CRED_REFS_MAX_ENTRIES = _chunkYBDQJVFQcjs.CRED_REFS_MAX_ENTRIES; exports.CRED_ROWS_PER_USER_MAX = _chunkYBDQJVFQcjs.CRED_ROWS_PER_USER_MAX; exports.DEFAULT_CLAIM_LEASE_MS = _chunkYBDQJVFQcjs.DEFAULT_CLAIM_LEASE_MS; exports.DEFAULT_HEARTBEAT_LEASE_TTL_MS = _chunkYBDQJVFQcjs.DEFAULT_HEARTBEAT_LEASE_TTL_MS; exports.DEFAULT_LEASE_HEARTBEAT_MS = _chunkYBDQJVFQcjs.DEFAULT_LEASE_HEARTBEAT_MS; exports.DEFAULT_MAX_DELIVERY_RETRIES = _chunkYBDQJVFQcjs.DEFAULT_MAX_DELIVERY_RETRIES; exports.DEFAULT_MAX_REQUEST_BODY_BYTES = _chunkYBDQJVFQcjs.DEFAULT_MAX_REQUEST_BODY_BYTES; exports.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE = _chunkYBDQJVFQcjs.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE; exports.DEFAULT_MAX_TOOL_ITERATIONS = _chunkYBDQJVFQcjs.DEFAULT_MAX_TOOL_ITERATIONS; exports.DEFAULT_TOTAL_TIMEOUT_MS = _chunkYBDQJVFQcjs.DEFAULT_TOTAL_TIMEOUT_MS; exports.DeploymentConfigError = _chunkYBDQJVFQcjs.DeploymentConfigError; exports.MAX_DEFER_AFTER_MS = _chunkYBDQJVFQcjs.MAX_DEFER_AFTER_MS; exports.MAX_PUSH_PAYLOAD_BYTES = _chunkYBDQJVFQcjs.MAX_PUSH_PAYLOAD_BYTES; exports.MAX_TASK_PAYLOAD_BYTES = _chunkYBDQJVFQcjs.MAX_TASK_PAYLOAD_BYTES; exports.MIN_SCHEDULE_LEAD_MS = _chunkYBDQJVFQcjs.MIN_SCHEDULE_LEAD_MS; exports.NonRetryableError = _chunkYBDQJVFQcjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkYBDQJVFQcjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkYBDQJVFQcjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkYBDQJVFQcjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkYBDQJVFQcjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkYBDQJVFQcjs.advanceOccurrence; exports.createAdapter = createAdapter; exports.createD1Adapter = _chunkYBDQJVFQcjs.createD1Adapter; exports.createReiServer = createReiServer; exports.createSingleUserCloudflareWorker = _chunkYBDQJVFQcjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkYBDQJVFQcjs.createSingleUserServer; exports.createTenantToken = createTenantToken; exports.createWebCryptoWebPush = _chunkYBDQJVFQcjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkYBDQJVFQcjs.decryptFromStorage; exports.decryptPayload = _chunkYBDQJVFQcjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkYBDQJVFQcjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkYBDQJVFQcjs.encryptForStorage; exports.ensureSchema = _chunkYBDQJVFQcjs.ensureSchema; exports.getSchemaVersion = _chunkYBDQJVFQcjs.getSchemaVersion; exports.hasChatCredRef = _chunkYBDQJVFQcjs.hasChatCredRef; exports.isNonRetryableError = _chunkYBDQJVFQcjs.isNonRetryableError; exports.isValidCredId = _chunkYBDQJVFQcjs.isValidCredId; exports.isValidISO8601 = _chunkYBDQJVFQcjs.isValidISO8601; exports.isValidTimeZoneId = _chunkYBDQJVFQcjs.isValidTimeZoneId; exports.isValidUUID = _chunkYBDQJVFQcjs.isValidUUID; exports.isValidUUIDv4 = _chunkYBDQJVFQcjs.isValidUUIDv4; exports.isValidUrl = _chunkYBDQJVFQcjs.isValidUrl; exports.measurePushPayload = _chunkYBDQJVFQcjs.measurePushPayload; exports.nextFutureOccurrence = _chunkYBDQJVFQcjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkYBDQJVFQcjs.planNextOccurrence; exports.readRequestBody = _chunkYBDQJVFQcjs.readRequestBody; exports.resolveLlmCredential = _chunkYBDQJVFQcjs.resolveLlmCredential; exports.runScheduledTick = _chunkYBDQJVFQcjs.runScheduledTick; exports.runTask = _chunkYBDQJVFQcjs.runTask; exports.sanitizeErrorSummary = _chunkYBDQJVFQcjs.sanitizeErrorSummary; exports.summarizeErrorCause = _chunkYBDQJVFQcjs.summarizeErrorCause; exports.supportsLlmCredentialsStore = _chunkYBDQJVFQcjs.supportsLlmCredentialsStore; exports.validateAvatarUrl = _chunkYBDQJVFQcjs.validateAvatarUrl; exports.validateCredRefs = _chunkYBDQJVFQcjs.validateCredRefs; exports.validateCredValue = _chunkYBDQJVFQcjs.validateCredValue; exports.validateLlmMessagesArray = _chunkYBDQJVFQcjs.validateLlmMessagesArray; exports.validateScheduleMessagePayload = _chunkYBDQJVFQcjs.validateScheduleMessagePayload; exports.validateSplitPattern = _chunkYBDQJVFQcjs.validateSplitPattern; exports.verifyTenantToken = verifyTenantToken;
+
+exports.CORS_ALLOW_HEADERS = _chunk3NIYNYZYcjs.CORS_ALLOW_HEADERS; exports.CORS_ALLOW_METHODS = _chunk3NIYNYZYcjs.CORS_ALLOW_METHODS; exports.CRED_ID_MAX_LENGTH = _chunk3NIYNYZYcjs.CRED_ID_MAX_LENGTH; exports.CRED_PUT_BATCH_MAX = _chunk3NIYNYZYcjs.CRED_PUT_BATCH_MAX; exports.CRED_REFS_MAX_ENTRIES = _chunk3NIYNYZYcjs.CRED_REFS_MAX_ENTRIES; exports.CRED_ROWS_PER_USER_MAX = _chunk3NIYNYZYcjs.CRED_ROWS_PER_USER_MAX; exports.DEFAULT_CLAIM_LEASE_MS = _chunk3NIYNYZYcjs.DEFAULT_CLAIM_LEASE_MS; exports.DEFAULT_HEARTBEAT_LEASE_TTL_MS = _chunk3NIYNYZYcjs.DEFAULT_HEARTBEAT_LEASE_TTL_MS; exports.DEFAULT_LEASE_HEARTBEAT_MS = _chunk3NIYNYZYcjs.DEFAULT_LEASE_HEARTBEAT_MS; exports.DEFAULT_MAX_DELIVERY_RETRIES = _chunk3NIYNYZYcjs.DEFAULT_MAX_DELIVERY_RETRIES; exports.DEFAULT_MAX_REQUEST_BODY_BYTES = _chunk3NIYNYZYcjs.DEFAULT_MAX_REQUEST_BODY_BYTES; exports.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE = _chunk3NIYNYZYcjs.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE; exports.DEFAULT_MAX_TOOL_ITERATIONS = _chunk3NIYNYZYcjs.DEFAULT_MAX_TOOL_ITERATIONS; exports.DEFAULT_TOTAL_TIMEOUT_MS = _chunk3NIYNYZYcjs.DEFAULT_TOTAL_TIMEOUT_MS; exports.DeploymentConfigError = _chunk3NIYNYZYcjs.DeploymentConfigError; exports.MAX_DEFER_AFTER_MS = _chunk3NIYNYZYcjs.MAX_DEFER_AFTER_MS; exports.MAX_PUSH_PAYLOAD_BYTES = _chunk3NIYNYZYcjs.MAX_PUSH_PAYLOAD_BYTES; exports.MAX_TASK_PAYLOAD_BYTES = _chunk3NIYNYZYcjs.MAX_TASK_PAYLOAD_BYTES; exports.MIN_SCHEDULE_LEAD_MS = _chunk3NIYNYZYcjs.MIN_SCHEDULE_LEAD_MS; exports.NonRetryableError = _chunk3NIYNYZYcjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunk3NIYNYZYcjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunk3NIYNYZYcjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunk3NIYNYZYcjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunk3NIYNYZYcjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunk3NIYNYZYcjs.advanceOccurrence; exports.createAdapter = createAdapter; exports.createD1Adapter = _chunk3NIYNYZYcjs.createD1Adapter; exports.createReiServer = createReiServer; exports.createSingleUserCloudflareWorker = _chunk3NIYNYZYcjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunk3NIYNYZYcjs.createSingleUserServer; exports.createTenantToken = createTenantToken; exports.createWebCryptoWebPush = _chunk3NIYNYZYcjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunk3NIYNYZYcjs.decryptFromStorage; exports.decryptPayload = _chunk3NIYNYZYcjs.decryptPayload; exports.deriveUserEncryptionKey = _chunk3NIYNYZYcjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunk3NIYNYZYcjs.encryptForStorage; exports.encryptPayload = _chunk3NIYNYZYcjs.encryptPayload; exports.ensureSchema = _chunk3NIYNYZYcjs.ensureSchema; exports.getSchemaVersion = _chunk3NIYNYZYcjs.getSchemaVersion; exports.hasChatCredRef = _chunk3NIYNYZYcjs.hasChatCredRef; exports.isNonRetryableError = _chunk3NIYNYZYcjs.isNonRetryableError; exports.isValidCredId = _chunk3NIYNYZYcjs.isValidCredId; exports.isValidISO8601 = _chunk3NIYNYZYcjs.isValidISO8601; exports.isValidTimeZoneId = _chunk3NIYNYZYcjs.isValidTimeZoneId; exports.isValidUUID = _chunk3NIYNYZYcjs.isValidUUID; exports.isValidUUIDv4 = _chunk3NIYNYZYcjs.isValidUUIDv4; exports.isValidUrl = _chunk3NIYNYZYcjs.isValidUrl; exports.measurePushPayload = _chunk3NIYNYZYcjs.measurePushPayload; exports.nextFutureOccurrence = _chunk3NIYNYZYcjs.nextFutureOccurrence; exports.planNextOccurrence = _chunk3NIYNYZYcjs.planNextOccurrence; exports.readRequestBody = _chunk3NIYNYZYcjs.readRequestBody; exports.resolveLlmCredential = _chunk3NIYNYZYcjs.resolveLlmCredential; exports.runScheduledTick = _chunk3NIYNYZYcjs.runScheduledTick; exports.runTask = _chunk3NIYNYZYcjs.runTask; exports.sanitizeErrorSummary = _chunk3NIYNYZYcjs.sanitizeErrorSummary; exports.summarizeErrorCause = _chunk3NIYNYZYcjs.summarizeErrorCause; exports.supportsLlmCredentialsStore = _chunk3NIYNYZYcjs.supportsLlmCredentialsStore; exports.validateAvatarUrl = _chunk3NIYNYZYcjs.validateAvatarUrl; exports.validateCredRefs = _chunk3NIYNYZYcjs.validateCredRefs; exports.validateCredValue = _chunk3NIYNYZYcjs.validateCredValue; exports.validateLlmMessagesArray = _chunk3NIYNYZYcjs.validateLlmMessagesArray; exports.validateScheduleMessagePayload = _chunk3NIYNYZYcjs.validateScheduleMessagePayload; exports.validateSplitPattern = _chunk3NIYNYZYcjs.validateSplitPattern; exports.verifyTenantToken = verifyTenantToken;

package/dist/index.d.cts

@@ -178,7 +178,7 @@ export { getSchemaVersion, ensureSchema, SCHEMA_VERSION } from "./lib/schema-ver
 export { DEFAULT_MAX_TOOL_ITERATIONS, DEFAULT_TOTAL_TIMEOUT_MS, DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE, MIN_SCHEDULE_LEAD_MS, MAX_DEFER_AFTER_MS } from "./lib/agentic-fire.js";
 export { CORS_ALLOW_HEADERS, CORS_ALLOW_METHODS, createSingleUserCloudflareWorker } from "./cloudflare/single-user-worker.js";
 export { createWebCryptoWebPush, measurePushPayload, MAX_PUSH_PAYLOAD_BYTES, PUSH_ENVELOPE_RESERVED_BYTES, WEB_PUSH_MAX_BODY_BYTES, WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES } from "./lib/webpush-webcrypto.js";
-export { deriveUserEncryptionKey, decryptPayload, encryptForStorage, decryptFromStorage } from "./lib/encryption.js";
+export { deriveUserEncryptionKey, decryptPayload, encryptPayload, encryptForStorage, decryptFromStorage } from "./lib/encryption.js";
 export { validateScheduleMessagePayload, validateLlmMessagesArray, validateSplitPattern, validateAvatarUrl, isValidISO8601, isValidUrl, isValidUUID, isValidUUIDv4, isValidTimeZoneId, MAX_TASK_PAYLOAD_BYTES } from "./lib/validation.js";
 export { readRequestBody, DEFAULT_MAX_REQUEST_BODY_BYTES } from "./lib/request.js";
 export { supportsLlmCredentialsStore, isValidCredId, validateCredRefs, validateCredValue, hasChatCredRef, resolveLlmCredential, CRED_ID_MAX_LENGTH, CRED_PUT_BATCH_MAX, CRED_ROWS_PER_USER_MAX, CRED_REFS_MAX_ENTRIES } from "./lib/llm-credentials-store.js";

package/dist/index.d.ts

@@ -178,7 +178,7 @@ export { getSchemaVersion, ensureSchema, SCHEMA_VERSION } from "./lib/schema-ver
 export { DEFAULT_MAX_TOOL_ITERATIONS, DEFAULT_TOTAL_TIMEOUT_MS, DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE, MIN_SCHEDULE_LEAD_MS, MAX_DEFER_AFTER_MS } from "./lib/agentic-fire.js";
 export { CORS_ALLOW_HEADERS, CORS_ALLOW_METHODS, createSingleUserCloudflareWorker } from "./cloudflare/single-user-worker.js";
 export { createWebCryptoWebPush, measurePushPayload, MAX_PUSH_PAYLOAD_BYTES, PUSH_ENVELOPE_RESERVED_BYTES, WEB_PUSH_MAX_BODY_BYTES, WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES } from "./lib/webpush-webcrypto.js";
-export { deriveUserEncryptionKey, decryptPayload, encryptForStorage, decryptFromStorage } from "./lib/encryption.js";
+export { deriveUserEncryptionKey, decryptPayload, encryptPayload, encryptForStorage, decryptFromStorage } from "./lib/encryption.js";
 export { validateScheduleMessagePayload, validateLlmMessagesArray, validateSplitPattern, validateAvatarUrl, isValidISO8601, isValidUrl, isValidUUID, isValidUUIDv4, isValidTimeZoneId, MAX_TASK_PAYLOAD_BYTES } from "./lib/validation.js";
 export { readRequestBody, DEFAULT_MAX_REQUEST_BODY_BYTES } from "./lib/request.js";
 export { supportsLlmCredentialsStore, isValidCredId, validateCredRefs, validateCredValue, hasChatCredRef, resolveLlmCredential, CRED_ID_MAX_LENGTH, CRED_PUT_BATCH_MAX, CRED_ROWS_PER_USER_MAX, CRED_REFS_MAX_ENTRIES } from "./lib/llm-credentials-store.js";

package/dist/index.mjs

@@ -42,6 +42,7 @@ import {
   decryptPayload,
   deriveUserEncryptionKey,
   encryptForStorage,
+  encryptPayload,
   ensureSchema,
   getHeader,
   getSchemaVersion,
@@ -73,7 +74,7 @@ import {
   validateLlmMessagesArray,
   validateScheduleMessagePayload,
   validateSplitPattern
-} from "./chunk-RL7V7VSS.mjs";
+} from "./chunk-6TCZEACV.mjs";
 import "./chunk-GN44PST5.mjs";
 
 // src/server/adapters/factory.js
@@ -676,6 +677,7 @@ export {
   decryptPayload,
   deriveUserEncryptionKey,
   encryptForStorage,
+  encryptPayload,
   ensureSchema,
   getSchemaVersion,
   hasChatCredRef,

package/dist/lib/agentic-fire.d.ts

@@ -147,6 +147,7 @@ export type BeforeFireResult = Array<any> | {
     totalTimeoutMs?: number;
     tools?: Array<any>;
     toolChoice?: any;
+    allowedToolNames?: string[];
 } | {
     skip: true;
 } | {

package/dist/lib/attachments.d.ts

@@ -0,0 +1,39 @@
+/**
+ * @typedef {Object} AttachmentRef
+ * @property {1} version
+ * @property {string} namespace
+ * @property {string} key
+ * @property {string} taskUuid
+ * @property {number} occurrenceMs
+ * @property {number} expiresAt
+ */
+/** Each write gets an independent immutable identity. Reads never delete: an
+ * outbox retry or another device can still resolve the same reference. Shorter
+ * TTLs expire logically; cron defaults to 30-day physical retention, which the host may override.
+ * @param {{ task: Object, occurrenceMs: number|null, writeState: Function, now: () => number }} args
+ */
+export function createAttachmentStore({ task, occurrenceMs, writeState, now }: {
+    task: any;
+    occurrenceMs: number | null;
+    writeState: Function;
+    now: () => number;
+}): (value: string, { ttlMs, owner, kind, ownerGeneration }?: {
+    ttlMs?: number;
+    owner?: {
+        type: string;
+        id: string;
+    };
+    kind?: string;
+    ownerGeneration?: number;
+}) => Promise<AttachmentRef>;
+export const ATTACHMENT_NAMESPACE: "amsg:attachments";
+export const ATTACHMENT_RETENTION_DAYS: 30;
+export const MAX_ATTACHMENT_TTL_MS: number;
+export type AttachmentRef = {
+    version: 1;
+    namespace: string;
+    key: string;
+    taskUuid: string;
+    occurrenceMs: number;
+    expiresAt: number;
+};

package/dist/lib/client-state-store.d.ts

@@ -52,12 +52,13 @@ export function planClientStateCleanup(ttl: Record<string, number> | null | unde
  *   比较用它（写进行的 updated_at 列）；没带照旧用 `updatedAt`。
  * @param {() => number} [args.now] - 取服务端当前时刻（测试可注入假时钟）。适配器
  *   拿它认出库里「来自未来」的脏行。
- * @returns {Promise<{ upserted: number, skipped: number, deleted: number, skippedEntries: Array<{ namespace: string, key: string }> }>}
- *   `upserted` / `skipped` / `deleted` 按逻辑条目计（切片行不计），三者之和等于
- *   条目数。`deleted` 是删除之后 key 已不在库里的条数——删掉了、或本来就没有，
+ * @returns {Promise<{ upserted: number, skipped: number, deleted: number, unknown?: number, skippedEntries: Array<{ namespace: string, key: string }> }>}
+ *   `upserted` / `skipped` / `deleted` 按逻辑条目计（切片行不计）。旧适配器
+ *   回执不完整时，未能确认的逻辑写入计入可选的 `unknown`。四者之和等于条目数。
+ *   `deleted` 是删除之后 key 已不在库里的条数——删掉了、或本来就没有，
  *   两种都算；被 last-write-wins 拦下的删除（库里那行更新）计入 `skipped`。
  *   `skippedEntries` 逐条列出被拦下的 key，写入与删除都在里面（适配器不回
- *   outcomes / cleanupOutcomes 时分不清是哪条：写入按物理行计数兜底，删除一律
+ *   outcomes / cleanupOutcomes 时，仅整批物理行写入成功可折算成逻辑计数；其余写入计入 unknown，删除一律
  *   按「已删」计）。
  */
 export function writeClientStateEntries({ db, userId, userKey, entries, now }: {
@@ -78,6 +79,7 @@ export function writeClientStateEntries({ db, userId, userKey, entries, now }: {
     upserted: number;
     skipped: number;
     deleted: number;
+    unknown?: number;
     skippedEntries: Array<{
         namespace: string;
         key: string;

package/dist/lib/state-accessors.d.ts

@@ -1,9 +1,9 @@
 /**
  * @typedef {Object} StateAccessors
- * @property {(namespace: string) => Promise<Array<{ namespace: string, key: string, value: string, updatedAt: number }>>} readState
- *   一个 namespace 下的全部条目（值已解密、分块的已拼回原文）。适配器不支持
+ * @property {(namespace: string, options?: { key?: string }) => Promise<Array<{ namespace: string, key: string, value: string, updatedAt: number }>>} readState
+ *   一个 namespace 下的全部条目，或指定 key 的零至一条（值已解密、分块的已拼回原文）。适配器不支持
  *   client_state 时返回空数组——读不到状态，hook 走自己的兜底就行。
- * @property {(namespace: string, entries: Array<{ key: string, value: string|null, updatedAt?: number }>) => Promise<{ upserted: number, skipped: number, deleted: number }>} writeState
+ * @property {(namespace: string, entries: Array<{ key: string, value: string|null, updatedAt?: number }>) => Promise<{ upserted: number, skipped: number, deleted: number, unknown?: number }>} writeState
  *   批量写。`value` 是字符串 → 整条覆盖（不是追加，宿主自己序列化）；
  *   `value` 为 `null` → 删掉这个 key（连它的分块切片行一起）。`updatedAt`
  *   默认取当前时刻，语义与客户端同步一致：比库里已有值旧的写入（或删除）
@@ -18,9 +18,10 @@
  * lib/webpush-webcrypto.js 的 MAX_PUSH_PAYLOAD_BYTES），塞不下的内容先写进
  * client_state，push 里只带一个引用键，客户端上线后按键取回。
  *
- * 谁清、什么时候清：库不做 TTL 也不自动回收，写进去的东西一直在，直到有人
- * 覆盖或删除它。旁路内容建议放在固定的少量 key 上（例如每个角色一个），下次
- * 写同一个 key 直接覆盖，存量天然有上限；一次性的大内容在确认客户端取走后，
+ * 谁清、什么时候清：普通命名空间默认不过期，宿主可用 clientStateTtl 配清理
+ * 天数；amsg:attachments 默认 30 天且宿主同名配置优先。普通旁路内容可以放在
+ * 固定的少量 key 上（例如每个角色一个），下次写同一个 key 直接覆盖，存量天然
+ * 有上限；一次性的大内容在确认客户端取走后，
  * 用 `{ key, value: null }` 删掉。`DELETE /client-state` 仍然是清空这个用户
  * 全部状态的兜底。
  *
@@ -41,10 +42,12 @@ export function createStateAccessors({ db, userId, userKey, maxStateValueBytes,
 }): StateAccessors;
 export type StateAccessors = {
     /**
-     *   一个 namespace 下的全部条目（值已解密、分块的已拼回原文）。适配器不支持
+     *   一个 namespace 下的全部条目，或指定 key 的零至一条（值已解密、分块的已拼回原文）。适配器不支持
      *   client_state 时返回空数组——读不到状态，hook 走自己的兜底就行。
      */
-    readState: (namespace: string) => Promise<Array<{
+    readState: (namespace: string, options?: {
+        key?: string;
+    }) => Promise<Array<{
         namespace: string;
         key: string;
         value: string;
@@ -66,5 +69,6 @@ export type StateAccessors = {
         upserted: number;
         skipped: number;
         deleted: number;
+        unknown?: number;
     }>;
 };

package/dist/lib/task-projection.d.ts

@@ -1,8 +1,8 @@
 /**
  * 任务行的对外投影：`GET /messages` 列出来的那一份形状。
  *
- * 一份实现两处用：HTTP 列表接口，以及 fire-time hook 的
- * `ctx.scheduleTask()` 撞 uuid 时回给宿主的那条已存在任务。两边给出的字段
+ * HTTP 列表／单条接口与 fire-time hook 的任务查询、变更回执共用。
+ * `ctx.scheduleTask()` 创建和撞 uuid 时均带完整 metadata。各处基础字段
  * 一样，宿主拿到哪一份都能直接进自己的任务面板。
  *
  * 白名单式取字段：解密后的 payload 里还躺着 `apiKey` / `apiUrl` /

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rei-standard/amsg-server",
-  "version": "3.0.0",
+  "version": "3.1.0-next.0",
   "description": "ReiStandard Active Messaging server SDK with pluggable database adapters. Three-axis push schema (messageKind / messageType / messageSubtype) from @rei-standard/amsg-shared. Auto-emits ReasoningPush when the LLM response carries reasoning_content.",
   "repository": {
     "type": "git",