@sanoma-ai/workflows 0.11.15 → 0.11.17

package/dist/chats.js.map

@@ -1 +1 @@
-{"version":3,"file":"chats.js","sourceRoot":"","sources":["../src/chats.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA2C1C,MAAM,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,GAAG,EAA6B,EAAQ,EAAE,CAAC,CAAC;IACnF,GAAG,GAAG;IACN,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;IACxC,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE;CAC/B,CAAC,CAAC;AAEH,8FAA8F;AAC9F,MAAM,UAAU,SAAS,CAAC,EAAqB;IAC7C,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;YACtC,MAAM,MAAM,GAAG,MAAM,CACnB,MAAM,EAAE,EAAE,CACX;iBACE,MAAM,CAAC,KAAK,CAAC;iBACb,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;iBACrC,mBAAmB,EAAE;iBACrB,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,QAAQ,EAAE,0CAA0C,CAAC,CAAC;QACnH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO;YACtB,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ;YACvB,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAAE,OAAO;YAC7B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;YACtG,sEAAsE;YACtE,MAAM,IAAI,GAAG,GAAG,CAAA,wBAAwB,YAAY,CAAC,GAAG,cAAc,YAAY,UAAU,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC;YAC3H,MAAM,CACJ,MAAM,EAAE,EAAE,CACX;iBACE,MAAM,CAAC,YAAY,CAAC;iBACpB,MAAM,CACL,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAQ,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAC9G;iBACA,kBAAkB,CAAC;gBAClB,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;gBAC9C,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,CAAA,kBAAkB,EAAE;aACxC,CAAC,CAAC;QACP,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE;YACX,MAAM,IAAI,GAAG,MAAM,CACjB,MAAM,EAAE,EAAE,CACX;iBACE,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC;iBACzC,IAAI,CAAC,YAAY,CAAC;iBAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;iBAClC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE;YACV,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC9E,OAAO,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,MAAM,IAAI,GAAG,MAAM,CACjB,MAAM,EAAE,EAAE,CACX;iBACE,MAAM,EAAE;iBACR,IAAI,CAAC,KAAK,CAAC;iBACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;iBAC/B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;iBAC7C,KAAK,CAAC,EAAE,CAAC,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"chats.js","sourceRoot":"","sources":["../src/chats.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE9D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA0D1C,MAAM,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAA6B,EAAQ,EAAE,CAAC,CAAC;IACtG,EAAE;IACF,MAAM;IACN,MAAM;IACN,KAAK;IACL,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;IACxC,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE;CAC/B,CAAC,CAAC;AAEH,8FAA8F;AAC9F,MAAM,UAAU,SAAS,CAAC,EAAqB;IAC7C,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;YACtC,MAAM,MAAM,GAAG,MAAM,CACnB,MAAM,EAAE,EAAE,CACX;iBACE,MAAM,CAAC,KAAK,CAAC;iBACb,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;iBACrC,mBAAmB,EAAE;iBACrB,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,QAAQ,EAAE,0CAA0C,CAAC,CAAC;QACnH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO;YACtB,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO;YAChC,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAAE,OAAO;YAC7B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;YACtG,yFAAyF;YACzF,MAAM,IAAI,GAAG,GAAG,CAAA,wBAAwB,YAAY,CAAC,GAAG,cAAc,YAAY,UAAU,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC;YAC3H,MAAM,CACJ,MAAM,EAAE,EAAE,CACX;iBACE,MAAM,CAAC,YAAY,CAAC;iBACpB,MAAM,CACL,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAQ,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAC9G;iBACA,kBAAkB,CAAC;gBAClB,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;gBAC9C,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,CAAA,kBAAkB,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,GAAG,EAAE,GAAG,CAAA,cAAc,EAAE,CAAC,EAAE;aAC1F,CAAC,CAAC;QACP,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE;YACX,MAAM,IAAI,GAAG,MAAM,CACjB,MAAM,EAAE,EAAE,CACX;iBACE,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC;iBACzC,IAAI,CAAC,YAAY,CAAC;iBAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;iBAClC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO;YACnB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAClB,MAAM,EAAE,EAAE,CACX;iBACE,MAAM,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC;iBAC/B,IAAI,CAAC,YAAY,CAAC;iBAClB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;YACzE,OAAO,GAAG,KAAK,SAAS,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE;YACV,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC9E,OAAO,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI;YAClB,MAAM,QAAQ,GAAG,MAAM,EAAE,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,QAAQ;iBACzB,MAAM,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;iBACb,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAA,GAAG,KAAK,CAAC,IAAI,qBAAqB,IAAI,EAAE,CAAC,CAAC;iBACzE,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,MAAM,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACpG,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM;YAC3B,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI;YAChB,MAAM,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK;YACtB,MAAM,IAAI,GAAG,MAAM,CACjB,MAAM,EAAE,EAAE,CACX;iBACE,MAAM,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;iBACxD,IAAI,CAAC,UAAU,CAAC;iBAChB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;iBACjE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,KAAK;gBAC/B,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI;aACnC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,MAAM,IAAI,GAAG,MAAM,CACjB,MAAM,EAAE,EAAE,CACX;iBACE,MAAM,EAAE;iBACR,IAAI,CAAC,KAAK,CAAC;iBACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;iBAC/B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;iBAC7C,KAAK,CAAC,EAAE,CAAC,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,KAAK,UAAU,YAAY,CAAC,EAAM,EAAE,EAAU,EAAE,IAAY,EAAE,MAA0C;IACtG,gEAAgE;IAChE,MAAM,IAAI,GAAG,GAAG,CAAA,wBAAwB,UAAU,CAAC,GAAG,cAAc,UAAU,UAAU,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;IACtH,MAAM,EAAE;SACL,MAAM,CAAC,UAAU,CAAC;SAClB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAQ,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AAClH,CAAC"}

package/dist/client.d.ts

@@ -6,6 +6,7 @@ import { ApprovalMessage } from "./approvals.ts";
 import { type Chats } from "./chats.ts";
 import { type Tokens } from "./tokens.ts";
 import { type SanomaConfig } from "./config.ts";
+import { type AppBehind } from "./db.ts";
 import { type CredentialStatus } from "./env.ts";
 import { type ApprovalState, Principal, type WorkflowDefinition } from "./define.ts";
 import { type ApplyInput, type ApplyReport } from "./apply.ts";
@@ -15,7 +16,9 @@ import { type LedgerRecord } from "./ledger.ts";
 import type { SignInMethod } from "./op.ts";
 import { type SecretLocation } from "./secret-store.ts";
 import { type RunStatus } from "./shared.ts";
-import { type RemoteEvent, type Source } from "./source.ts";
+import type { ChatTurnInput } from "./chat-workflow.ts";
+import type { RunChecks } from "./scenario.ts";
+import type { RemoteEvent } from "./source.ts";
 /** A run's status from DBOS's, and whether it has an approval pending. */
 export declare function runStatus(dbosStatus: string, approvals: readonly ApprovalState[]): RunStatus;
 /** The DBOS statuses the run statuses come from; `running` and `waiting` both come from PENDING. */
@@ -122,11 +125,6 @@ export interface ClientOptions {
      * runs a worker that stops when idle starts it again with it (`Supervisor.resume`). Must not throw.
      */
     onWrite?: () => void;
-    /**
-     * The company's repository, as the worker is given it: what `remoteEvent` acts for (its
-     * `origin`) and fetches a draft's new commits into. Without one, `remoteEvent` does nothing.
-     */
-    source?: Source;
     /**
      * The version each run it starts is queued for, so only a worker of that code runs it: the app
      * bundle's (its snapshot's), which is live beside a worker of another version while a deploy
@@ -169,7 +167,9 @@ export declare class SanomaClient {
      * The policy's answer to starting a run of `workflow` as `startedBy` (`decideStart`), for a
      * workflow of the config's own: a deny throws `policy_denied`; a hold is what the run waits on
      * before its body. A run `runId` names already is returned as it is, whatever the policy says now, but to a visitor.
-     * A visitor (`isVisitor`) starts no built-in but `call`, whose calls the policy decides as direct ones.
+     * A visitor (`isVisitor`, an api token's principal too) starts no built-in but `call`, whose calls
+     * the policy decides as direct ones: the app's own actions on the repository (`app-workflows.ts`)
+     * are staff's, as their server functions were, which no site's host answered.
      */
     private startHold;
     /**
@@ -330,6 +330,11 @@ export declare class SanomaClient {
      * or the others, else all; at most `limit` (20).
      */
     changes({ open, limit }?: ChangesFilter): Promise<ChangeView[]>;
+    /**
+     * Whether a change is merging or deploying `main` now (`ChangeState.phase`, as its run last
+     * published it), which follows `main` and applies the hosts itself.
+     */
+    changeDeploying(): Promise<boolean>;
     /** The change of the draft `id`: its latest run's (`openChange`), or undefined when it has none. */
     change(id: string): Promise<ChangeView | undefined>;
     /**
@@ -347,34 +352,40 @@ export declare class SanomaClient {
         key?: string;
     }): Promise<void>;
     /**
-     * Does what a host's webhook says happened (`RemoteEvent`, from a remote half's `webhook`) to the
-     * company's repository, the `origin` of `ClientOptions.source` (`repositoryOf`); an event of
-     * another repository, or with no source, is ignored. A delivery told again does nothing more.
-     *
-     * - `pushed` to `main`: the checkout follows `main`, then apply on the declared hosts
-     *   (`ResolvedConfig.hosts`) as `host-check`, as the run `deploy:<head>`, once per head; nothing
-     *   with no host, nor while a change is merging or deploying, which does both itself.
-     * - `pushed` to a draft's branch (`draftOf`) with its change open: the host's commits fetched into
-     *   the draft (`Source.follow` on its branch), then the change told `commits`, as `by`; nothing
-     *   when the change or the draft is at that head already (the run's own push), or when the draft
-     *   cannot fast-forward to it (warned).
-     * - `closed` for the open change's pull request: the change told `merged` (with its merge commit)
-     *   or `closed`, as `by`. The run checks either on the host before it believes it.
-     */
-    remoteEvent(event: RemoteEvent, options: {
+     * Starts the built-in follow workflow on what a host's webhook says happened (`RemoteEvent`,
+     * from a remote half's `webhook`, verified), as the runtime's agent `host-check`: the worker,
+     * which has the checkout, follows it there (`follow-workflow.ts`). Its run id is
+     * `follow:<sha256 of the event>`, so a delivery told again is the one run. Its id.
+     */
+    follow(event: RemoteEvent): Promise<string>;
+    /**
+     * Starts a turn of the chat `input.chat` on the person's new message `input.message`, already in
+     * its transcript (`chats.upsert`), as `startedBy`, the chat's person: the built-in chat workflow,
+     * as the run `chat:<chat>:<message>` (`chatRunId`), after the chat's turn before it, which it
+     * waits for; that turn, when it has not ended, is told to stop. The worker runs the turn and
+     * writes its reply (`chats.chunks`, then the transcript). Its run id.
+     */
+    startTurn(input: Omit<ChatTurnInput, "after">, options: StartOptions): Promise<string>;
+    /** The chat's latest turn (`startTurn`), or undefined when it has had none. */
+    turn(chat: string): Promise<RunSummary | undefined>;
+    /**
+     * Hands `code`, which the person pasted on their own agent's sign-in card, to the sign-in waiting
+     * in the turn under way of their chat `chat`, sealed (`sealChatCode`), so the run's messages never
+     * show it. `run_not_found` when the chat has no turn under way of `by`'s.
+     */
+    turnCode(chat: string, code: string, options: {
         by: Principal | string;
     }): Promise<void>;
-    /** After a push of `head` to `main` (`remoteEvent`): the checkout follows it, then apply on the declared hosts. */
-    private deployPush;
-    /** Where each open change is (`ChangeState.phase`), read from what its run last published. */
-    private openChangePhases;
     /**
-     * Brings `head`, pushed to the draft's `branch` on the host, into the draft: false when it holds
-     * it already, or cannot take it (no `follow`, a commit of its own, or one uncommitted: warned).
+     * How far the app `folder` (taken from a source) is behind its source, or why that cannot be
+     * told, as the worker last checked (at its start and after the checkout follows `main`);
+     * undefined when it has not told it.
      */
-    private fetched;
-    /** The repository of `ClientOptions.source` on its host (`repositoryOf`); undefined with no source, remote or half for it. */
-    private repository;
+    appBehind(folder: string): Promise<AppBehind | undefined>;
+    /** A sandbox run's checks against its scenario as the worker last ran them (when the run last waited or ended); undefined for none yet. */
+    runChecks(runId: string): Promise<RunChecks | undefined>;
+    /** The latest `limit` turns of the chat `chat`, newest first: its runs `chat:<chat>:<message>` (`chatRunPrefix`). */
+    private turns;
     /** The runs of the draft `id`'s change, newest first: `change:<id>` and `change:<id>~<n>`. */
     private changeRuns;
     /** A change run's row as the app shows it: its summary, its last `ChangeState` and, once finished, its report. */

package/dist/client.js

@@ -13,23 +13,21 @@ import { tokenStore } from "./tokens.js";
 import { collectionsDriver } from "./collection.js";
 import { resolveConfig } from "./config.js";
 import { configuredSecrets } from "./credentials.js";
-import { dbosClient, lazyDb, spendInviteRequest } from "./db.js";
+import { dbosClient, lazyDb, readAppBehind, readRunChecks, spendInviteRequest, } from "./db.js";
 import { credentialsOf } from "./env.js";
 import { Principal } from "./define.js";
 import { APPLY_WORKFLOW } from "./apply.js";
-import { ADMIN, BASE, ChangeEventSchema, ChangeInput, followBase, initialChangeState, repositoryOf, } from "./change.js";
+import { ADMIN, ChangeEventSchema, ChangeInput, initialChangeState, } from "./change.js";
 import { DRIFT_WORKFLOW } from "./drift.js";
 import { isDirect } from "./direct.js";
-import { ApprovalPendingError, errorCode, errorInfo, NotAdmittedError, parseOrThrow, PolicyDeniedError, SanomaError, vendorCodeOf, } from "./errors.js";
+import { ApprovalPendingError, errorCode, errorInfo, NotAdmittedError, parseOrThrow, PolicyDeniedError, SanomaError, } from "./errors.js";
 import { insertRecord, lastInvite, lastSignIns, loginRecord, ownedLedger, } from "./ledger.js";
-import { warn } from "./log.js";
 import { allowAll } from "./policy.js";
 import { admit, readPeople } from "./resources.js";
 import { SecretStoreError } from "./secret-store.js";
-import { BUILT_IN_WORKFLOWS, CALL_WORKFLOW, CHANGE_EVENT, CHANGE_MERGE, CHANGE_TOPIC, CHANGE_WORKFLOW, changeIdOf, DATA_VENDOR, ENDED_STATUSES, errorMessage, HOST_CHECK_AGENT, isEnded, isToken, isVisitor, refusalOf, SCHEDULE_AGENT, WORKFLOW_ACTION, } from "./shared.js";
-import { draftOf } from "./source.js";
-/** Whether two references name one repository: a host's names are compared without case. */
-const sameRepo = (a, b) => a.owner.toLowerCase() === b.owner.toLowerCase() && a.name.toLowerCase() === b.name.toLowerCase();
+import { BUILT_IN_WORKFLOWS, CALL_WORKFLOW, CHANGE_EVENT, CHANGE_MERGE, CHANGE_TOPIC, CHANGE_WORKFLOW, CHAT_TOPIC, CHAT_WORKFLOW, changeIdOf, chatRunId, chatRunPrefix, DATA_VENDOR, DRAFT_ID, ENDED_STATUSES, errorMessage, FOLLOW_WORKFLOW, HOST_CHECK_AGENT, isEnded, isToken, isVisitor, refusalOf, SCHEDULE_AGENT, WORKFLOW_ACTION, } from "./shared.js";
+import { RemoteEventSchema } from "./follow-workflow.js";
+import { sealChatCode } from "./seal.js";
 /** A principal, or its id alone. */
 const PrincipalOrId = z.union([
     z
@@ -142,10 +140,12 @@ export class SanomaClient {
         const parsed = parseOrThrow(workflow.input, input, `The input does not match ${workflow.name}'s schema`);
         const { runId } = options;
         const sandbox = parseOrThrow(z.string().min(1).optional(), options.sandbox, "`sandbox` must be the name of a scenario in the config's `scenarios/`");
-        if (workflow.name === CHANGE_WORKFLOW && !isChangeRunOf(parsed.id, runId)) {
-            throw new SanomaError("invalid_input", "A change is started with openChange, which names its run", { runId });
-        }
         const hold = await this.startHold(workflow.name, parsed, startedBy, runId);
+        const own = OWN_STARTS[workflow.name];
+        if (own && !(await own.admits(parsed, startedBy, runId, this))) {
+            const refused = `A run of ${workflow.name} is started with ${own.by}, which names its run`;
+            throw new SanomaError("invalid_input", refused, { runId });
+        }
         const args = { input, startedBy, ...(sandbox === undefined ? {} : { sandbox }), ...(hold && { hold }) };
         // Kept on the run's status row too, so a listing tells sandbox runs apart without its input,
         // and says whom an agent's run is for (DBOS keeps the principal's id and groups itself); a
@@ -183,7 +183,9 @@ export class SanomaClient {
      * The policy's answer to starting a run of `workflow` as `startedBy` (`decideStart`), for a
      * workflow of the config's own: a deny throws `policy_denied`; a hold is what the run waits on
      * before its body. A run `runId` names already is returned as it is, whatever the policy says now, but to a visitor.
-     * A visitor (`isVisitor`) starts no built-in but `call`, whose calls the policy decides as direct ones.
+     * A visitor (`isVisitor`, an api token's principal too) starts no built-in but `call`, whose calls
+     * the policy decides as direct ones: the app's own actions on the repository (`app-workflows.ts`)
+     * are staff's, as their server functions were, which no site's host answered.
      */
     async startHold(workflow, input, startedBy, runId) {
         const { policy } = this.config;
@@ -660,6 +662,21 @@ export class SanomaClient {
         const rows = await this.dbos.listWorkflows({ workflowIDs: ids, sortDesc: true, loadInput: true, loadOutput: true });
         return Promise.all(rows.map((row) => this.changeView(row)));
     }
+    /**
+     * Whether a change is merging or deploying `main` now (`ChangeState.phase`, as its run last
+     * published it), which follows `main` and applies the hosts itself.
+     */
+    async changeDeploying() {
+        const rows = await this.dbos.listWorkflows({
+            workflowName: CHANGE_WORKFLOW,
+            applicationName: this.config.appName,
+            status: dbosStatusesOf("queued", "running"),
+            loadInput: false,
+            loadOutput: false,
+        });
+        const phases = await Promise.all(rows.map(async (row) => (await this.dbos.getEvent(row.workflowID, CHANGE_EVENT, 0))?.phase));
+        return phases.some((phase) => phase === "merging" || phase === "deploying");
+    }
     /** The change of the draft `id`: its latest run's (`openChange`), or undefined when it has none. */
     async change(id) {
         const [row] = await this.changeRuns(id, { load: true });
@@ -708,108 +725,78 @@ export class SanomaClient {
         }
     }
     /**
-     * Does what a host's webhook says happened (`RemoteEvent`, from a remote half's `webhook`) to the
-     * company's repository, the `origin` of `ClientOptions.source` (`repositoryOf`); an event of
-     * another repository, or with no source, is ignored. A delivery told again does nothing more.
-     *
-     * - `pushed` to `main`: the checkout follows `main`, then apply on the declared hosts
-     *   (`ResolvedConfig.hosts`) as `host-check`, as the run `deploy:<head>`, once per head; nothing
-     *   with no host, nor while a change is merging or deploying, which does both itself.
-     * - `pushed` to a draft's branch (`draftOf`) with its change open: the host's commits fetched into
-     *   the draft (`Source.follow` on its branch), then the change told `commits`, as `by`; nothing
-     *   when the change or the draft is at that head already (the run's own push), or when the draft
-     *   cannot fast-forward to it (warned).
-     * - `closed` for the open change's pull request: the change told `merged` (with its merge commit)
-     *   or `closed`, as `by`. The run checks either on the host before it believes it.
+     * Starts the built-in follow workflow on what a host's webhook says happened (`RemoteEvent`,
+     * from a remote half's `webhook`, verified), as the runtime's agent `host-check`: the worker,
+     * which has the checkout, follows it there (`follow-workflow.ts`). Its run id is
+     * `follow:<sha256 of the event>`, so a delivery told again is the one run. Its id.
      */
-    async remoteEvent(event, options) {
-        const main = event.kind === "pushed" && event.branch === BASE;
-        const id = draftOf(event.branch);
-        if (!main && id === undefined)
-            return;
-        const repository = await this.repository();
-        if (!repository || !sameRepo(repository.repo, event.repo))
-            return;
-        if (main)
-            return this.deployPush(repository, event.head);
-        const change = await this.change(id);
-        if (!change || isEnded(change.status))
-            return;
-        let told;
-        let key;
-        if (event.kind === "closed") {
-            // A pull request of an earlier change of the draft is not this one's.
-            if (event.number !== change.state.pullRequest?.number)
-                return;
-            told = event.merged && event.sha !== undefined ? { kind: "merged", sha: event.sha } : { kind: "closed" };
-            key = `${event.number}:${event.sha ?? "closed"}`;
-        }
-        else {
-            if (change.state.head === event.head || !(await this.fetched(repository, event.branch, event.head)))
-                return;
-            told = { kind: "commits" };
-            key = event.head;
-        }
-        await this.changeEvent(id, told, { by: options.by, key: `${event.kind}:${event.branch}:${key}` }).catch((err) => {
-            // Ended, or gone, since it was read: nothing to tell.
-            if (!["run_ended", "run_not_found"].includes(errorCode(err) ?? ""))
-                throw err;
-        });
+    async follow(event) {
+        const parsed = parseOrThrow(RemoteEventSchema, event, "Not an event of a host's webhook");
+        return this.start(FOLLOW_WORKFLOW, parsed, { startedBy: HOST_CHECK_AGENT, runId: followRunId(parsed) });
     }
-    /** After a push of `head` to `main` (`remoteEvent`): the checkout follows it, then apply on the declared hosts. */
-    async deployPush({ source }, head) {
-        const runId = `deploy:${head}`;
-        const [deployed, phases] = await Promise.all([this.run(runId), this.openChangePhases()]);
-        if (deployed || phases.some((phase) => phase === "merging" || phase === "deploying"))
-            return;
-        // First, as a change's deploy does: the hosts, and what apply reads, are then main's.
-        const moved = await followBase(this.config.remotes, this.storedSecrets, source);
-        if (!("revision" in moved)) {
-            // Not on stale files, and nothing recorded as `deploy:<head>`: a redelivery may deploy it.
-            warn(`${BASE} was not deployed: the checkout did not follow it: ${"skipped" in moved ? moved.skipped : moved.error}`);
-            return;
+    /**
+     * Starts a turn of the chat `input.chat` on the person's new message `input.message`, already in
+     * its transcript (`chats.upsert`), as `startedBy`, the chat's person: the built-in chat workflow,
+     * as the run `chat:<chat>:<message>` (`chatRunId`), after the chat's turn before it, which it
+     * waits for; that turn, when it has not ended, is told to stop. The worker runs the turn and
+     * writes its reply (`chats.chunks`, then the transcript). Its run id.
+     */
+    async startTurn(input, options) {
+        const runId = chatRunId(input.chat, input.message);
+        // The latest other than this one, which a start told again finds first.
+        const before = (await this.turns(input.chat, 2)).find((row) => row.workflowID !== runId);
+        await this.start(CHAT_WORKFLOW, { ...input, ...(before && { after: before.workflowID }) }, {
+            ...options,
+            runId,
+        });
+        // Once the new turn stands, which refused anyone but the chat's person.
+        if (before && !isEnded(runStatus(before.status, []))) {
+            await this.dbos.send(before.workflowID, { kind: "stop" }, CHAT_TOPIC);
         }
-        const hosts = await this.config.hosts();
-        if (hosts.length)
-            await this.apply({ only: hosts }, { startedBy: HOST_CHECK_AGENT, runId });
+        return runId;
     }
-    /** Where each open change is (`ChangeState.phase`), read from what its run last published. */
-    async openChangePhases() {
-        const rows = await this.dbos.listWorkflows({
-            workflowName: CHANGE_WORKFLOW,
-            applicationName: this.config.appName,
-            status: dbosStatusesOf("queued", "running"),
-            loadInput: false,
-            loadOutput: false,
-        });
-        return Promise.all(rows.map(async (r) => (await this.dbos.getEvent(r.workflowID, CHANGE_EVENT, 0))?.phase));
+    /** The chat's latest turn (`startTurn`), or undefined when it has had none. */
+    async turn(chat) {
+        const [row] = await this.turns(chat, 1);
+        return row && this.summarize(row);
     }
     /**
-     * Brings `head`, pushed to the draft's `branch` on the host, into the draft: false when it holds
-     * it already, or cannot take it (no `follow`, a commit of its own, or one uncommitted: warned).
+     * Hands `code`, which the person pasted on their own agent's sign-in card, to the sign-in waiting
+     * in the turn under way of their chat `chat`, sealed (`sealChatCode`), so the run's messages never
+     * show it. `run_not_found` when the chat has no turn under way of `by`'s.
      */
-    async fetched({ source, url, host }, branch, head) {
-        const local = await Promise.resolve(source.head(branch)).catch(() => undefined);
-        if (local === head)
-            return false;
-        const moved = source.follow
-            ? await source.follow({ url, token: await host.token(), ref: branch })
-            : { skipped: "this repository cannot follow its remote" };
-        if ("skipped" in moved) {
-            warn(`${branch} did not take the host's commits: ${moved.skipped}`);
-            return false;
+    async turnCode(chat, code, options) {
+        const by = await this.admitted(parseOrThrow(PrincipalOrId, options?.by, '`by` must be a principal, such as "alice" or { id: "alice" }'));
+        const [row] = await this.turns(chat, 1);
+        if (!row || isEnded(runStatus(row.status, [])) || row.authenticatedUser !== by.id) {
+            throw new SanomaError("run_not_found", `No turn of chat ${chat} is under way`, { chat });
         }
-        return true;
+        const told = { kind: "code", sealed: sealChatCode(row.workflowID, code) };
+        await this.dbos.send(row.workflowID, told, CHAT_TOPIC);
     }
-    /** The repository of `ClientOptions.source` on its host (`repositoryOf`); undefined with no source, remote or half for it. */
-    async repository() {
-        const { source } = this.options;
-        if (!source)
-            return undefined;
-        return repositoryOf(this.config.remotes, this.storedSecrets, source).catch((err) => {
-            if (["no_remote", "no_remote_half"].includes(vendorCodeOf(err) ?? ""))
-                return undefined;
-            throw err;
+    /**
+     * How far the app `folder` (taken from a source) is behind its source, or why that cannot be
+     * told, as the worker last checked (at its start and after the checkout follows `main`);
+     * undefined when it has not told it.
+     */
+    async appBehind(folder) {
+        return readAppBehind(await this.database.db(), folder);
+    }
+    /** A sandbox run's checks against its scenario as the worker last ran them (when the run last waited or ended); undefined for none yet. */
+    async runChecks(runId) {
+        return readRunChecks(await this.database.db(), runId);
+    }
+    /** The latest `limit` turns of the chat `chat`, newest first: its runs `chat:<chat>:<message>` (`chatRunPrefix`). */
+    async turns(chat, limit) {
+        return this.dbos.listWorkflows({
+            // DBOS matches the prefix with LIKE as given, where a chat id's `_` is any character: escaped.
+            workflow_id_prefix: chatRunPrefix(chat).replaceAll(/[\\%_]/g, "\\$&"),
+            workflowName: CHAT_WORKFLOW,
+            applicationName: this.config.appName,
+            sortDesc: true,
+            limit,
+            loadInput: false,
+            loadOutput: false,
         });
     }
     /** The runs of the draft `id`'s change, newest first: `change:<id>` and `change:<id>~<n>`. */
@@ -1273,6 +1260,32 @@ const alreadyDecided = (runId, a) => new SanomaError("already_decided", a.status
     ...(a.decidedBy === undefined ? {} : { decidedBy: a.decidedBy }),
     ...(a.withdrawnReason === undefined ? {} : { withdrawnReason: a.withdrawnReason }),
 });
+/**
+ * The built-ins only one of the client's methods starts, by name: that method (`by`), and whether
+ * a start is its own (`admits`), which `start` asks once the policy has (a visitor is denied
+ * first), refusing any other: a change under the id `openChange` names; a follow as `host-check`
+ * under its event's id; a chat turn under its chat's and message's id, after a turn of the same
+ * chat, as the chat's person.
+ */
+const OWN_STARTS = {
+    [CHANGE_WORKFLOW]: { by: "openChange", admits: (input, _by, runId) => isChangeRunOf(input.id, runId) },
+    [FOLLOW_WORKFLOW]: {
+        by: "follow",
+        admits: (event, by, runId) => runId === followRunId(event) && by.id === HOST_CHECK_AGENT,
+    },
+    [CHAT_WORKFLOW]: {
+        by: "startTurn",
+        admits: async ({ chat, message, after }, by, runId, client) => runId === chatRunId(chat, message) &&
+            (after === undefined ||
+                (after.startsWith(chatRunPrefix(chat)) && DRAFT_ID.test(after.slice(chatRunPrefix(chat).length)))) &&
+            (await client.chats.get(chat))?.person === by.id,
+    },
+};
+/**
+ * A follow's run id (`SanomaClient.follow`): `follow:` and the SHA-256 of the event as its schema
+ * parsed it, its keys then in the schema's order, so one event is one id however its JSON was laid out.
+ */
+const followRunId = (parsed) => `follow:${createHash("sha256").update(JSON.stringify(parsed)).digest("hex")}`;
 /** A change's first run's id: `change:<draft id>`. */
 const changeRunId = (id) => `change:${id}`;
 /** True when `runId` is a run of the draft `id`'s change: `change:<id>` or `change:<id>~<n>`. */