@segmentstream-cloud/ontology 0.15.0 → 0.16.0

package/dist/storage/maintenance.js

@@ -1,9 +1,14 @@
 import { randomUUID } from "node:crypto";
 import { Effect } from "effect";
-/** A scheduler-owned capability: lifecycle operations only, with persisted deletion fencing. */
+import { maintainAttachments } from "./attachments.js";
+/**
+ * A scheduler-owned capability: lifecycle operations only, with persisted deletion fencing. The
+ * agent's attachments expire first, so that their files are removed in the same run.
+ */
 export function maintainBlobStorage(sql, provider, limit = 100) {
     return Effect.gen(function* () {
-        let removed = 0;
+        const attachments = yield* maintainAttachments(sql, provider, limit);
+        let removed = attachments.removed;
         for (let count = 0; count < limit; count += 1) {
             const claim = randomUUID();
             const candidate = yield* sql.withTransaction(Effect.gen(function* () {

package/dist/storage/neon.js

@@ -175,6 +175,20 @@ export function neonBlobProvider(binding) {
             }
             return response.Body.transformToByteArray();
         }),
+        read: (key, maxBytes) => attempt("blob.read", async () => {
+            const response = await client.send(new GetObjectCommand(object(key)));
+            if (!response.Body) {
+                throw new Error("Neon returned no object body.");
+            }
+            if (response.ContentLength !== undefined && response.ContentLength > maxBytes) {
+                throw new Error("The stored object exceeds the size it may have.");
+            }
+            const bytes = await response.Body.transformToByteArray();
+            if (bytes.byteLength > maxBytes) {
+                throw new Error("The stored object exceeds the size it may have.");
+            }
+            return bytes;
+        }),
         download: ({ key, filename, contentType, inline }) => attempt("blob.download", async () => {
             await client.send(new HeadObjectCommand(object(key)));
             const signedAt = signingDate();

package/dist/storage/provider.d.ts

@@ -61,6 +61,8 @@ declare const BlobProvider_base: Context.ServiceClass<BlobProvider, "@segmentstr
     }) => Effect.Effect<void, BlobStorageError>;
     readonly inspect: (key: string) => Effect.Effect<StoredObject | undefined, BlobStorageError>;
     readonly readPrefix: (key: string) => Effect.Effect<Uint8Array, BlobStorageError>;
+    /** The whole object, at most `maxBytes`; for verifying an agent attachment's digest. */
+    readonly read: (key: string, maxBytes: number) => Effect.Effect<Uint8Array, BlobStorageError>;
     readonly download: (input: {
         key: string;
         filename: string;

package/dist/storage/tables.d.ts

@@ -1,2 +1,10 @@
 /** Storage metadata lives in the ontology database and is migrated by its SDK. */
 export declare const BLOB_TABLES_DDL: ReadonlyArray<string>;
+/** The agent's temporary attachments, beside the blob tables whose storage they share. */
+export declare const ATTACHMENTS_TABLE = "_agent_attachments";
+/**
+ * A file a member sent the app's agent: platform metadata, never an ontology record. The bytes are
+ * a `_blobs` revision in the same storage as uploads; the row binds them to their owner, the chat
+ * and the agent session that received them, and expires 24 hours after receipt unless promoted.
+ */
+export declare const ATTACHMENT_TABLES_DDL: ReadonlyArray<string>;

package/dist/storage/tables.js

@@ -53,3 +53,35 @@ export const BLOB_TABLES_DDL = [
     PRIMARY KEY ("principal_id", "key")
   )`,
 ];
+/** The agent's temporary attachments, beside the blob tables whose storage they share. */
+export const ATTACHMENTS_TABLE = "_agent_attachments";
+/**
+ * A file a member sent the app's agent: platform metadata, never an ontology record. The bytes are
+ * a `_blobs` revision in the same storage as uploads; the row binds them to their owner, the chat
+ * and the agent session that received them, and expires 24 hours after receipt unless promoted.
+ */
+export const ATTACHMENT_TABLES_DDL = [
+    `CREATE TABLE IF NOT EXISTS "${ATTACHMENTS_TABLE}" (
+    "id" uuid PRIMARY KEY,
+    "blob_id" uuid NOT NULL UNIQUE REFERENCES "_blobs" ("id"),
+    "branch_id" text NOT NULL,
+    "owner_id" uuid NOT NULL REFERENCES "user" ("id"),
+    "conversation" text NOT NULL,
+    "session_id" text,
+    "source" text NOT NULL CHECK ("source" IN ('telegram')),
+    "source_ref" text NOT NULL,
+    "filename" text NOT NULL,
+    "content_type" text NOT NULL,
+    "size" bigint NOT NULL CHECK ("size" > 0),
+    "sha256" text NOT NULL CHECK ("sha256" ~ '^[0-9a-f]{64}$'),
+    "state" text NOT NULL CHECK ("state" IN ('received', 'ready', 'promoted', 'discarded', 'expired')),
+    "provider_upload_id" text,
+    "promotion" jsonb,
+    "created_at" timestamptz NOT NULL DEFAULT now(),
+    "expires_at" timestamptz NOT NULL DEFAULT now() + interval '24 hours',
+    "removed_at" timestamptz,
+    UNIQUE ("owner_id", "conversation", "source_ref")
+  )`,
+    `CREATE INDEX IF NOT EXISTS "${ATTACHMENTS_TABLE}_expiry_idx" ON "${ATTACHMENTS_TABLE}" ("state", "expires_at")`,
+    `CREATE INDEX IF NOT EXISTS "${ATTACHMENTS_TABLE}_sha256_idx" ON "${ATTACHMENTS_TABLE}" ("sha256")`,
+];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@segmentstream-cloud/ontology",
-  "version": "0.15.0",
+  "version": "0.16.0",
   "description": "Define a SegmentStream workspace app's ontology: entities, relationships, roles and actions, written with Effect.",
   "license": "Apache-2.0",
   "author": "SegmentStream",