@rudderhq/server 0.1.0-canary.9 → 0.1.0

package/dist/routes/calendar.js

@@ -0,0 +1,265 @@
+import { Router } from "express";
+import { calendarEventListQuerySchema, createCalendarEventSchema, createCalendarSourceSchema, googleCalendarSyncSchema, updateGoogleCalendarOAuthConfigSchema, updateCalendarEventSchema, updateCalendarSourceSchema, } from "@rudderhq/shared";
+import { validate } from "../middleware/validate.js";
+import { assertBoard, assertCompanyAccess, getActorInfo } from "./authz.js";
+import { calendarService } from "../services/calendar.js";
+import { logActivity } from "../services/activity-log.js";
+function csv(value) {
+    return value
+        ?.split(",")
+        .map((part) => part.trim())
+        .filter(Boolean);
+}
+function redirectUri(req) {
+    return `${req.protocol}://${req.get("host")}/api/orgs/${encodeURIComponent(req.params.orgId)}/calendar/google/callback`;
+}
+export function calendarRoutes(db) {
+    const router = Router();
+    const svc = calendarService(db);
+    router.get("/orgs/:orgId/calendar/sources", async (req, res) => {
+        assertBoard(req);
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        res.json(await svc.listSources(orgId));
+    });
+    router.post("/orgs/:orgId/calendar/sources", validate(createCalendarSourceSchema), async (req, res) => {
+        assertBoard(req);
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        const actor = getActorInfo(req);
+        const source = await svc.createSource(orgId, req.body, { userId: actor.actorId });
+        await logActivity(db, {
+            orgId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            action: "calendar.source_created",
+            entityType: "calendar_source",
+            entityId: source.id,
+            details: { name: source.name, type: source.type, visibilityDefault: source.visibilityDefault },
+        });
+        res.status(201).json(source);
+    });
+    router.patch("/orgs/:orgId/calendar/sources/:sourceId", validate(updateCalendarSourceSchema), async (req, res) => {
+        assertBoard(req);
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        const actor = getActorInfo(req);
+        const source = await svc.updateSource(orgId, req.params.sourceId, req.body, { userId: actor.actorId });
+        await logActivity(db, {
+            orgId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            action: "calendar.source_updated",
+            entityType: "calendar_source",
+            entityId: source.id,
+            details: { name: source.name, status: source.status, visibilityDefault: source.visibilityDefault },
+        });
+        res.json(source);
+    });
+    router.delete("/orgs/:orgId/calendar/sources/:sourceId", async (req, res) => {
+        assertBoard(req);
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        const actor = getActorInfo(req);
+        await svc.deleteSource(orgId, req.params.sourceId);
+        await logActivity(db, {
+            orgId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            action: "calendar.source_deleted",
+            entityType: "calendar_source",
+            entityId: req.params.sourceId,
+        });
+        res.json({ ok: true });
+    });
+    router.get("/orgs/:orgId/calendar/events", async (req, res) => {
+        assertBoard(req);
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        const parsed = calendarEventListQuerySchema.parse(req.query);
+        const filters = {
+            start: parsed.start,
+            end: parsed.end,
+            agentIds: csv(parsed.agentIds),
+            sourceIds: csv(parsed.sourceIds),
+            eventKinds: csv(parsed.eventKinds),
+            statuses: csv(parsed.statuses),
+        };
+        res.json({ events: await svc.listEvents(orgId, filters) });
+    });
+    router.post("/orgs/:orgId/calendar/events", validate(createCalendarEventSchema), async (req, res) => {
+        assertBoard(req);
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        const actor = getActorInfo(req);
+        const event = await svc.createEvent(orgId, req.body, { userId: actor.actorId });
+        if (!event) {
+            res.status(500).json({ error: "Calendar event was not created" });
+            return;
+        }
+        await logActivity(db, {
+            orgId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            action: "calendar.event_created",
+            entityType: "calendar_event",
+            entityId: event.id,
+            details: svc.eventSummary(event),
+        });
+        res.status(201).json(event);
+    });
+    router.get("/orgs/:orgId/calendar/events/:eventId", async (req, res) => {
+        assertBoard(req);
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        const event = await svc.getEvent(orgId, req.params.eventId);
+        if (!event) {
+            res.status(404).json({ error: "Calendar event not found" });
+            return;
+        }
+        res.json(event);
+    });
+    router.patch("/orgs/:orgId/calendar/events/:eventId", validate(updateCalendarEventSchema), async (req, res) => {
+        assertBoard(req);
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        const actor = getActorInfo(req);
+        const { previous, event } = await svc.updateEvent(orgId, req.params.eventId, req.body, { userId: actor.actorId });
+        if (!event) {
+            res.status(500).json({ error: "Calendar event was not updated" });
+            return;
+        }
+        await logActivity(db, {
+            orgId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            action: "calendar.event_updated",
+            entityType: "calendar_event",
+            entityId: event.id,
+            details: {
+                previous: svc.eventSummary(previous),
+                current: svc.eventSummary(event),
+            },
+        });
+        res.json(event);
+    });
+    router.delete("/orgs/:orgId/calendar/events/:eventId", async (req, res) => {
+        assertBoard(req);
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        const actor = getActorInfo(req);
+        const deleted = await svc.deleteEvent(orgId, req.params.eventId, { userId: actor.actorId });
+        await logActivity(db, {
+            orgId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            action: "calendar.event_deleted",
+            entityType: "calendar_event",
+            entityId: deleted.id,
+            details: svc.eventSummary(deleted),
+        });
+        res.json({ ok: true });
+    });
+    router.post("/orgs/:orgId/calendar/google/connect", async (req, res) => {
+        assertBoard(req);
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        const actor = getActorInfo(req);
+        const result = await svc.connectGoogle(orgId, redirectUri(req), { userId: actor.actorId });
+        await logActivity(db, {
+            orgId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            action: "calendar.google_connected",
+            entityType: "calendar_source",
+            entityId: result.source.id,
+            details: { status: result.status, visibilityDefault: result.source.visibilityDefault },
+        });
+        res.json(result);
+    });
+    router.get("/orgs/:orgId/calendar/google/config", async (req, res) => {
+        assertBoard(req);
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        res.json(await svc.getGoogleOAuthConfig(orgId, redirectUri(req)));
+    });
+    router.patch("/orgs/:orgId/calendar/google/config", validate(updateGoogleCalendarOAuthConfigSchema), async (req, res) => {
+        assertBoard(req);
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        const actor = getActorInfo(req);
+        const config = await svc.updateGoogleOAuthConfig(orgId, req.body, redirectUri(req), { userId: actor.actorId });
+        await logActivity(db, {
+            orgId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            action: "calendar.google_oauth_config_updated",
+            entityType: "calendar_source",
+            entityId: orgId,
+            details: {
+                clientIdConfigured: config.clientId.trim().length > 0,
+                clientSecretConfigured: config.clientSecretConfigured,
+                cleared: req.body.clear === true,
+            },
+        });
+        res.json(config);
+    });
+    router.get("/orgs/:orgId/calendar/google/callback", async (req, res) => {
+        assertBoard(req);
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        const actor = getActorInfo(req);
+        const code = String(req.query.code ?? "");
+        const state = typeof req.query.state === "string" ? req.query.state : null;
+        const source = await svc.completeGoogleCallback(orgId, { code, state, redirectUri: redirectUri(req) }, { userId: actor.actorId });
+        await logActivity(db, {
+            orgId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            action: "calendar.google_authorized",
+            entityType: "calendar_source",
+            entityId: source.id,
+            details: { visibilityDefault: source.visibilityDefault },
+        });
+        res.redirect(303, "/calendar?google=connected");
+    });
+    router.post("/orgs/:orgId/calendar/google/sync", validate(googleCalendarSyncSchema), async (req, res) => {
+        assertBoard(req);
+        const orgId = req.params.orgId;
+        assertCompanyAccess(req, orgId);
+        const actor = getActorInfo(req);
+        const result = await svc.syncGoogle(orgId, req.body.sourceId);
+        await logActivity(db, {
+            orgId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            action: "calendar.google_synced",
+            entityType: "calendar_source",
+            entityId: result.source.id,
+            details: { importedCount: result.importedCount, status: result.source.status },
+        });
+        res.json(result);
+    });
+    return router;
+}
+//# sourceMappingURL=calendar.js.map

package/dist/routes/calendar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar.js","sourceRoot":"","sources":["../../src/routes/calendar.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAgB,MAAM,SAAS,CAAC;AAE/C,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,qCAAqC,EACrC,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAE,eAAe,EAA6B,MAAM,yBAAyB,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE1D,SAAS,GAAG,CAAC,KAAyB;IACpC,OAAO,KAAK;QACV,EAAE,KAAK,CAAC,GAAG,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC,2BAA2B,CAAC;AACpI,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAM;IACnC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IAEhC,MAAM,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7D,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACpG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,yBAAyB;YACjC,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE;SAC/F,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/G,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,QAAkB,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjH,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,yBAAyB;YACjC,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE;SACnG,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,yCAAyC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1E,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,QAAkB,CAAC,CAAC;QAC7D,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,yBAAyB;YACjC,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAkB;SACxC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5D,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAyB;YACpC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC9B,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;YAChC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;YAClC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;SAC/B,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,QAAQ,CAAC,yBAAyB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,wBAAwB;YAChC,UAAU,EAAE,gBAAgB;YAC5B,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,uCAAuC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACrE,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,OAAiB,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,QAAQ,CAAC,yBAAyB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5G,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,OAAiB,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5H,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,wBAAwB;YAChC,UAAU,EAAE,gBAAgB;YAC5B,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,OAAO,EAAE;gBACP,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC;gBACpC,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;aACjC;SACF,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,uCAAuC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxE,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,OAAiB,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACtG,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,wBAAwB;YAChC,UAAU,EAAE,gBAAgB;YAC5B,QAAQ,EAAE,OAAO,CAAC,EAAE;YACpB,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC;SACnC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACrE,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,2BAA2B;YACnC,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;YAC1B,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE;SACvF,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,qCAAqC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnE,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,QAAQ,CAAC,qCAAqC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtH,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,uBAAuB,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/G,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,sCAAsC;YAC9C,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE;gBACP,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBACrD,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;gBACrD,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI;aACjC;SACF,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,uCAAuC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACrE,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,sBAAsB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClI,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,4BAA4B;YACpC,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,OAAO,EAAE,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE;SACzD,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,QAAQ,CAAC,wBAAwB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC;QACzC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,wBAAwB;YAChC,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;YAC1B,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;SAC/E,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/chats.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chats.d.ts","sourceRoot":"","sources":["../../src/routes/chats.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAiBvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAgC1D,wBAAgB,UAAU,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,8CA02CzD"}
+{"version":3,"file":"chats.d.ts","sourceRoot":"","sources":["../../src/routes/chats.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAkBvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAgC1D,wBAAgB,UAAU,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,8CA+/CzD"}

package/dist/routes/chats.js

@@ -9,7 +9,7 @@ import { emitExecutionTranscriptTree } from "../langfuse-transcript.js";
 import { validate } from "../middleware/validate.js";
 import { logger } from "../middleware/logger.js";
 import { ChatAssistantStreamError, chatAssistantService, } from "../services/chat-assistant.js";
-import { claimChatGeneration } from "../services/chat-generation-locks.js";
+import { cancelActiveChatGeneration, claimChatGeneration } from "../services/chat-generation-locks.js";
 import { agentService, chatService, operatorProfileService, organizationService, goalService, issueService, logActivity, projectService, } from "../services/index.js";
 import { summarizeRuntimeSkillsForTrace } from "../services/runtime-trace-metadata.js";
 import { assertBoard, assertCompanyAccess, getActorInfo } from "./authz.js";
@@ -27,6 +27,10 @@ export function chatRoutes(db, storage) {
         storage: multer.memoryStorage(),
         limits: { fileSize: MAX_ATTACHMENT_BYTES, files: 1 },
     });
+    const messageUpload = multer({
+        storage: multer.memoryStorage(),
+        limits: { fileSize: MAX_ATTACHMENT_BYTES, files: 10 },
+    });
     async function runSingleFileUpload(req, res) {
         await new Promise((resolve, reject) => {
             upload.single("file")(req, res, (err) => {
@@ -37,6 +41,38 @@ export function chatRoutes(db, storage) {
             });
         });
     }
+    async function runMessageFileUpload(req, res) {
+        await new Promise((resolve, reject) => {
+            messageUpload.array("files", 10)(req, res, (err) => {
+                if (err)
+                    reject(err);
+                else
+                    resolve();
+            });
+        });
+    }
+    function isMultipartRequest(req) {
+        return (req.headers["content-type"] ?? "").toLowerCase().startsWith("multipart/form-data");
+    }
+    function uploadedMessageFiles(req) {
+        const files = req.files;
+        const list = Array.isArray(files) ? files : [];
+        return list.filter((file) => typeof file === "object" &&
+            file !== null &&
+            Buffer.isBuffer(file.buffer));
+    }
+    function validateUploadedMessageFiles(files) {
+        for (const file of files) {
+            const contentType = (file.mimetype || "").toLowerCase();
+            if (!isAllowedContentType(contentType)) {
+                return `Unsupported attachment type: ${contentType || "unknown"}`;
+            }
+            if (file.buffer.length <= 0) {
+                return "Attachment is empty";
+            }
+        }
+        return null;
+    }
     async function assertConversationAccess(req, conversationId) {
         const conversation = await svc.getById(conversationId);
         if (!conversation)
@@ -209,6 +245,56 @@ export function chatRoutes(db, storage) {
         });
         return userMessage;
     }
+    async function attachFilesToUserMessage(conversation, messageId, files, actor) {
+        const attachments = [];
+        for (const file of files) {
+            const contentType = (file.mimetype || "").toLowerCase();
+            if (!isAllowedContentType(contentType)) {
+                throw new HttpError(422, `Unsupported attachment type: ${contentType || "unknown"}`);
+            }
+            if (file.buffer.length <= 0) {
+                throw new HttpError(422, "Attachment is empty");
+            }
+            const stored = await storage.putFile({
+                orgId: conversation.orgId,
+                namespace: `chats/${conversation.id}`,
+                originalFilename: file.originalname || null,
+                contentType,
+                body: file.buffer,
+            });
+            const attachment = await svc.createAttachment({
+                orgId: conversation.orgId,
+                conversationId: conversation.id,
+                messageId,
+                provider: stored.provider,
+                objectKey: stored.objectKey,
+                contentType: stored.contentType,
+                byteSize: stored.byteSize,
+                sha256: stored.sha256,
+                originalFilename: stored.originalFilename,
+                createdByAgentId: actor.agentId,
+                createdByUserId: actor.actorType === "user" ? actor.actorId : null,
+            });
+            attachments.push(attachment);
+            await logActivity(db, {
+                orgId: conversation.orgId,
+                actorType: actor.actorType,
+                actorId: actor.actorId,
+                agentId: actor.agentId,
+                runId: actor.runId,
+                action: "chat.attachment_added",
+                entityType: "chat",
+                entityId: conversation.id,
+                details: {
+                    attachmentId: attachment.id,
+                    messageId: attachment.messageId,
+                    originalFilename: attachment.originalFilename,
+                    contentType: attachment.contentType,
+                },
+            });
+        }
+        return attachments;
+    }
     async function loadAssistantInput(conversation, actor) {
         const freshConversation = await svc.getById(conversation.id);
         const hydratedConversation = await assistantSvc.enrichConversation((freshConversation ?? conversation));
@@ -650,7 +736,34 @@ export function chatRoutes(db, storage) {
             releaseGeneration();
         }
     });
-    router.post("/chats/:id/messages/stream", validate(addChatMessageSchema), async (req, res) => {
+    router.post("/chats/:id/messages/stream", async (req, res) => {
+        if (isMultipartRequest(req)) {
+            try {
+                await runMessageFileUpload(req, res);
+            }
+            catch (err) {
+                if (err instanceof multer.MulterError) {
+                    if (err.code === "LIMIT_FILE_SIZE") {
+                        res.status(422).json({ error: `Attachment exceeds ${MAX_ATTACHMENT_BYTES} bytes` });
+                        return;
+                    }
+                    res.status(400).json({ error: err.message });
+                    return;
+                }
+                throw err;
+            }
+        }
+        const parsedBody = addChatMessageSchema.safeParse(req.body ?? {});
+        if (!parsedBody.success) {
+            res.status(400).json({ error: "Invalid chat message", details: parsedBody.error.issues });
+            return;
+        }
+        const messageFiles = uploadedMessageFiles(req);
+        const attachmentValidationError = validateUploadedMessageFiles(messageFiles);
+        if (attachmentValidationError) {
+            res.status(422).json({ error: attachmentValidationError });
+            return;
+        }
         const conversation = await assertConversationAccess(req, req.params.id);
         if (!conversation) {
             res.status(404).json({ error: "Chat conversation not found" });
@@ -661,7 +774,8 @@ export function chatRoutes(db, storage) {
             res.status(503).json({ error: assistantAvailability.error });
             return;
         }
-        const releaseGeneration = claimChatGeneration(conversation.id);
+        const abortController = new AbortController();
+        const releaseGeneration = claimChatGeneration(conversation.id, abortController);
         if (!releaseGeneration) {
             res.status(409).json({ error: "A chat reply is already being generated for this conversation" });
             return;
@@ -672,13 +786,11 @@ export function chatRoutes(db, storage) {
         let chatObservation = null;
         const transcript = [];
         const observedTranscript = [];
-        let requestClosed = false;
-        const abortController = new AbortController();
+        let clientClosed = false;
         const handleClosed = () => {
-            if (requestClosed || res.writableEnded)
+            if (clientClosed || res.writableEnded)
                 return;
-            requestClosed = true;
-            abortController.abort();
+            clientClosed = true;
         };
         req.on("aborted", handleClosed);
         res.on("close", handleClosed);
@@ -688,7 +800,12 @@ export function chatRoutes(db, storage) {
         res.setHeader("X-Accel-Buffering", "no");
         res.flushHeaders();
         try {
-            const userMessage = await addUserMessage(conversation, req.body.body, actor, req.body.editUserMessageId ?? null);
+            const userMessage = await addUserMessage(conversation, parsedBody.data.body, actor, parsedBody.data.editUserMessageId ?? null);
+            const userAttachments = await attachFilesToUserMessage(conversation, userMessage.id, messageFiles, actor);
+            const hydratedUserMessage = {
+                ...userMessage,
+                attachments: userAttachments,
+            };
             turnContextForPartial = turnContextFromUserMessage(userMessage);
             chatObservation = buildChatObservabilityContext(conversation, {
                 surface: "chat_turn",
@@ -698,18 +815,19 @@ export function chatRoutes(db, storage) {
                 metadata: {
                     stream: true,
                     userMessageId: userMessage.id,
-                    editUserMessageId: req.body.editUserMessageId ?? null,
+                    editUserMessageId: parsedBody.data.editUserMessageId ?? null,
+                    attachmentCount: userAttachments.length,
                 },
             });
             const traceInputBase = {
                 conversationId: conversation.id,
-                body: req.body.body,
+                body: parsedBody.data.body,
                 userMessageId: userMessage.id,
             };
             let currentChatTraceInput = buildChatTraceInput(traceInputBase);
             writeStreamEvent(res, {
                 type: "ack",
-                userMessage,
+                userMessage: hydratedUserMessage,
             });
             await withChatObservation(chatObservation, {
                 name: "chat_turn",
@@ -739,7 +857,7 @@ export function chatRoutes(db, storage) {
                             });
                         },
                         onAssistantState: async (state) => {
-                            if (requestClosed)
+                            if (clientClosed)
                                 return;
                             writeStreamEvent(res, {
                                 type: "assistant_state",
@@ -748,7 +866,7 @@ export function chatRoutes(db, storage) {
                         },
                         onTranscriptEntry: async (entry) => {
                             transcript.push(entry);
-                            if (requestClosed)
+                            if (clientClosed)
                                 return;
                             writeStreamEvent(res, {
                                 type: "transcript_entry",
@@ -779,7 +897,7 @@ export function chatRoutes(db, storage) {
                                 observedTranscriptEntries: observedTranscript.length,
                             },
                         });
-                        if (!requestClosed) {
+                        if (!clientClosed) {
                             writeStreamEvent(res, {
                                 type: "final",
                                 messages: stoppedMessage ? [stoppedMessage] : [],
@@ -803,11 +921,13 @@ export function chatRoutes(db, storage) {
                             ...summarizeChatObservationMessages(createdMessages),
                         },
                     });
-                    writeStreamEvent(res, {
-                        type: "final",
-                        messages: createdMessages,
-                    });
-                    res.end();
+                    if (!clientClosed) {
+                        writeStreamEvent(res, {
+                            type: "final",
+                            messages: createdMessages,
+                        });
+                        res.end();
+                    }
                 }
                 catch (error) {
                     finalChatStatus = "failed";
@@ -872,7 +992,7 @@ export function chatRoutes(db, storage) {
                 });
             }
             logger.warn({ err, conversationId: conversation.id }, "chat assistant stream failed");
-            if (!requestClosed) {
+            if (!clientClosed) {
                 writeStreamEvent(res, {
                     type: "error",
                     error: err instanceof Error ? err.message : "Chat assistant failed to respond",
@@ -887,6 +1007,14 @@ export function chatRoutes(db, storage) {
             releaseGeneration();
         }
     });
+    router.post("/chats/:id/messages/stream/stop", async (req, res) => {
+        const conversation = await assertConversationAccess(req, req.params.id);
+        if (!conversation) {
+            res.status(404).json({ error: "Chat conversation not found" });
+            return;
+        }
+        res.json({ stopped: cancelActiveChatGeneration(conversation.id) });
+    });
     router.post("/orgs/:orgId/chats/:chatId/attachments", async (req, res) => {
         const orgId = req.params.orgId;
         const chatId = req.params.chatId;