@sumeru/server 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+export { loadConfig } from "./config.js";
+export { envelope, errorEnvelope, gatewayEnvelope, gatewayListEnvelope, instanceEnvelope, searchResultEnvelope, sessionEnvelope, sessionListEnvelope, } from "./envelope.js";
+export { buildSessionExport } from "./export/index.js";
+export { createHandler } from "./handler.js";
+export { getRegisteredSchema, openSumeruOcas, recordPayload, SUMERU_SESSION_META_SCHEMA, SUMERU_SESSION_META_SCHEMA_HASH, SUMERU_TURN_SCHEMA, SUMERU_TURN_SCHEMA_HASH, type SumeruOcas, validatePayload, } from "./ocas/index.js";
+export { createSearchIndex, quoteFtsPhrase, rebuildSearchIndex, type SearchHit, type SearchIndex, type SearchOptions, type SearchResult, searchSessions, } from "./search/index.js";
+export type { SessionStore, TransitionResult } from "./session/index.js";
+export { createSessionStore, generateSessionId, type ResolveCwdResult, resolveSessionCwd, } from "./session/index.js";
+export { toWire } from "./session/store.js";
+export { resolveOcasDir, startServer } from "./start.js";
+export type { Envelope, ErrorValue, Gateway, GatewayCapabilities, GatewayConfig, Instance, InstanceConfig, MessageHistoryValue, OcasConfig, SearchResultHit, SearchResultValue, ServerConfig, Session, SessionListEntry, SessionStatus, SessionWire, StartConfig, StartedServer, TurnValue, UserSessionConfig, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACN,QAAQ,EACR,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,mBAAmB,GACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EACN,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,0BAA0B,EAC1B,+BAA+B,EAC/B,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,UAAU,EACf,eAAe,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,cAAc,GACd,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,iBAAiB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzD,YAAY,EACX,QAAQ,EACR,UAAU,EACV,OAAO,EACP,mBAAmB,EACnB,aAAa,EACb,QAAQ,EACR,cAAc,EACd,mBAAmB,EACnB,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,OAAO,EACP,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,WAAW,EACX,aAAa,EACb,SAAS,EACT,iBAAiB,GACjB,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,10 @@
+export { loadConfig } from "./config.js";
+export { envelope, errorEnvelope, gatewayEnvelope, gatewayListEnvelope, instanceEnvelope, searchResultEnvelope, sessionEnvelope, sessionListEnvelope, } from "./envelope.js";
+export { buildSessionExport } from "./export/index.js";
+export { createHandler } from "./handler.js";
+export { getRegisteredSchema, openSumeruOcas, recordPayload, SUMERU_SESSION_META_SCHEMA, SUMERU_SESSION_META_SCHEMA_HASH, SUMERU_TURN_SCHEMA, SUMERU_TURN_SCHEMA_HASH, validatePayload, } from "./ocas/index.js";
+export { createSearchIndex, quoteFtsPhrase, rebuildSearchIndex, searchSessions, } from "./search/index.js";
+export { createSessionStore, generateSessionId, resolveSessionCwd, } from "./session/index.js";
+export { toWire } from "./session/store.js";
+export { resolveOcasDir, startServer } from "./start.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACN,QAAQ,EACR,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,mBAAmB,GACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EACN,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,0BAA0B,EAC1B,+BAA+B,EAC/B,kBAAkB,EAClB,uBAAuB,EAEvB,eAAe,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAKlB,cAAc,GACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EAEjB,iBAAiB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/ocas/index.d.ts

@@ -0,0 +1,3 @@
+export { SUMERU_SESSION_META_SCHEMA, SUMERU_SESSION_META_SCHEMA_HASH, SUMERU_TURN_SCHEMA, SUMERU_TURN_SCHEMA_HASH, } from "./schemas.js";
+export { getRegisteredSchema, openSumeruOcas, recordPayload, type SumeruOcas, validatePayload, } from "./store.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/ocas/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ocas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,0BAA0B,EAC1B,+BAA+B,EAC/B,kBAAkB,EAClB,uBAAuB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACN,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,KAAK,UAAU,EACf,eAAe,GACf,MAAM,YAAY,CAAC"}

package/dist/ocas/index.js

@@ -0,0 +1,3 @@
+export { SUMERU_SESSION_META_SCHEMA, SUMERU_SESSION_META_SCHEMA_HASH, SUMERU_TURN_SCHEMA, SUMERU_TURN_SCHEMA_HASH, } from "./schemas.js";
+export { getRegisteredSchema, openSumeruOcas, recordPayload, validatePayload, } from "./store.js";
+//# sourceMappingURL=index.js.map

package/dist/ocas/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ocas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,0BAA0B,EAC1B,+BAA+B,EAC/B,kBAAkB,EAClB,uBAAuB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACN,mBAAmB,EACnB,cAAc,EACd,aAAa,EAEb,eAAe,GACf,MAAM,YAAY,CAAC"}

package/dist/ocas/schemas.d.ts

@@ -0,0 +1,41 @@
+/**
+ * JSON Schemas registered against the ocas store at startup.
+ *
+ * The schema bodies are byte-stable contracts — the schema hash is a function
+ * of the schema body, so changing field order or adding properties changes
+ * the hash. Treat these definitions as immutable.
+ */
+import type { Hash, JSONSchema } from "@ocas/core";
+/**
+ * `@sumeru/session-meta` — per-session metadata snapshot, written once at
+ * session create. `additionalProperties: false` forces opaque adapter config
+ * to live inside the `config` field rather than at the top level.
+ *
+ * `resolvedCwd` (issue #27) records the absolute path that Sumeru actually
+ * forwarded to the adapter under the well-known `config.cwd` key, AFTER
+ * `resolveSessionCwd` resolved it against the instance `workspaceRoot`. It is
+ * `null` when the client did not send `config.cwd` (no cwd hint), and a
+ * non-empty string otherwise. The original opaque `config` blob is preserved
+ * verbatim so `config.cwd` (if present) and `resolvedCwd` together describe
+ * the request → resolution mapping.
+ */
+export declare const SUMERU_SESSION_META_SCHEMA: JSONSchema;
+/**
+ * Pre-computed hash of `SUMERU_SESSION_META_SCHEMA`. Hardcoded to avoid
+ * requiring WASM init (`initHasher()`) at import time. A test asserts this
+ * stays in sync with `computeSelfHashSync(SUMERU_SESSION_META_SCHEMA)`.
+ */
+export declare const SUMERU_SESSION_META_SCHEMA_HASH: Hash;
+/**
+ * `@sumeru/turn` — one turn in a session. Used for both user and assistant
+ * turns; the `role` enum excludes "system" because Sumeru does not record
+ * system turns through the message endpoint.
+ */
+export declare const SUMERU_TURN_SCHEMA: JSONSchema;
+/**
+ * Pre-computed hash of `SUMERU_TURN_SCHEMA`. Hardcoded to avoid requiring
+ * WASM init (`initHasher()`) at import time. A test asserts this stays in
+ * sync with `computeSelfHashSync(SUMERU_TURN_SCHEMA)`.
+ */
+export declare const SUMERU_TURN_SCHEMA_HASH: Hash;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/ocas/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/ocas/schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEnD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B,EAAE,UAgBxC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,EAAE,IAAsB,CAAC;AAErE;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,UAqDhC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,IAAsB,CAAC"}

package/dist/ocas/schemas.js

@@ -0,0 +1,108 @@
+/**
+ * JSON Schemas registered against the ocas store at startup.
+ *
+ * The schema bodies are byte-stable contracts — the schema hash is a function
+ * of the schema body, so changing field order or adding properties changes
+ * the hash. Treat these definitions as immutable.
+ */
+/**
+ * `@sumeru/session-meta` — per-session metadata snapshot, written once at
+ * session create. `additionalProperties: false` forces opaque adapter config
+ * to live inside the `config` field rather than at the top level.
+ *
+ * `resolvedCwd` (issue #27) records the absolute path that Sumeru actually
+ * forwarded to the adapter under the well-known `config.cwd` key, AFTER
+ * `resolveSessionCwd` resolved it against the instance `workspaceRoot`. It is
+ * `null` when the client did not send `config.cwd` (no cwd hint), and a
+ * non-empty string otherwise. The original opaque `config` blob is preserved
+ * verbatim so `config.cwd` (if present) and `resolvedCwd` together describe
+ * the request → resolution mapping.
+ */
+export const SUMERU_SESSION_META_SCHEMA = {
+    title: "@sumeru/session-meta",
+    description: "Per-session metadata snapshot. Written once at session create.",
+    type: "object",
+    additionalProperties: false,
+    required: ["id", "gateway", "adapter", "createdAt", "config", "resolvedCwd"],
+    properties: {
+        id: { type: "string", pattern: "^ses_[0-9A-HJKMNP-TV-Z]{26}$" },
+        gateway: { type: "string", minLength: 1 },
+        adapter: { type: "string", minLength: 1 },
+        createdAt: { type: "string", format: "date-time" },
+        config: { type: "object" },
+        resolvedCwd: {
+            anyOf: [{ type: "null" }, { type: "string", minLength: 1 }],
+        },
+    },
+};
+/**
+ * Pre-computed hash of `SUMERU_SESSION_META_SCHEMA`. Hardcoded to avoid
+ * requiring WASM init (`initHasher()`) at import time. A test asserts this
+ * stays in sync with `computeSelfHashSync(SUMERU_SESSION_META_SCHEMA)`.
+ */
+export const SUMERU_SESSION_META_SCHEMA_HASH = "5C30THA7BZ814";
+/**
+ * `@sumeru/turn` — one turn in a session. Used for both user and assistant
+ * turns; the `role` enum excludes "system" because Sumeru does not record
+ * system turns through the message endpoint.
+ */
+export const SUMERU_TURN_SCHEMA = {
+    title: "@sumeru/turn",
+    description: "One turn in a session — a user message OR an assistant response.",
+    type: "object",
+    additionalProperties: false,
+    required: ["index", "role", "content", "timestamp", "toolCalls"],
+    properties: {
+        index: { type: "integer", minimum: 0 },
+        role: { type: "string", enum: ["user", "assistant"] },
+        content: { type: "string" },
+        timestamp: { type: "string", format: "date-time" },
+        toolCalls: {
+            anyOf: [
+                { type: "null" },
+                {
+                    type: "array",
+                    items: {
+                        type: "object",
+                        additionalProperties: false,
+                        required: ["tool", "input", "output", "durationMs", "exitCode"],
+                        properties: {
+                            tool: { type: "string", minLength: 1 },
+                            input: { type: "object" },
+                            output: {
+                                anyOf: [{ type: "null" }, { type: "string" }],
+                            },
+                            durationMs: {
+                                anyOf: [{ type: "null" }, { type: "integer", minimum: 0 }],
+                            },
+                            exitCode: {
+                                anyOf: [{ type: "null" }, { type: "integer" }],
+                            },
+                        },
+                    },
+                },
+            ],
+        },
+        tokens: {
+            anyOf: [
+                { type: "null" },
+                {
+                    type: "object",
+                    additionalProperties: false,
+                    required: ["input", "output"],
+                    properties: {
+                        input: { type: "integer", minimum: 0 },
+                        output: { type: "integer", minimum: 0 },
+                    },
+                },
+            ],
+        },
+    },
+};
+/**
+ * Pre-computed hash of `SUMERU_TURN_SCHEMA`. Hardcoded to avoid requiring
+ * WASM init (`initHasher()`) at import time. A test asserts this stays in
+ * sync with `computeSelfHashSync(SUMERU_TURN_SCHEMA)`.
+ */
+export const SUMERU_TURN_SCHEMA_HASH = "718S3WF704TZ6";
+//# sourceMappingURL=schemas.js.map

package/dist/ocas/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/ocas/schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAe;IACrD,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,gEAAgE;IAC7E,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC;IAC5E,UAAU,EAAE;QACX,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,8BAA8B,EAAE;QAC/D,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACzC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QACzC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE;QAClD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1B,WAAW,EAAE;YACZ,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;SAC3D;KACD;CACD,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAS,eAAe,CAAC;AAErE;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAe;IAC7C,KAAK,EAAE,cAAc;IACrB,WAAW,EACV,kEAAkE;IACnE,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,CAAC;IAChE,UAAU,EAAE;QACX,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;QACtC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE;QACrD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE;QAClD,SAAS,EAAE;YACV,KAAK,EAAE;gBACN,EAAE,IAAI,EAAE,MAAM,EAAE;gBAChB;oBACC,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,oBAAoB,EAAE,KAAK;wBAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC;wBAC/D,UAAU,EAAE;4BACX,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;4BACtC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACzB,MAAM,EAAE;gCACP,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;6BAC7C;4BACD,UAAU,EAAE;gCACX,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;6BAC1D;4BACD,QAAQ,EAAE;gCACT,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;6BAC9C;yBACD;qBACD;iBACD;aACD;SACD;QACD,MAAM,EAAE;YACP,KAAK,EAAE;gBACN,EAAE,IAAI,EAAE,MAAM,EAAE;gBAChB;oBACC,IAAI,EAAE,QAAQ;oBACd,oBAAoB,EAAE,KAAK;oBAC3B,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;oBAC7B,UAAU,EAAE;wBACX,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;wBACtC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;qBACvC;iBACD;aACD;SACD;KACD;CACD,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAS,eAAe,CAAC"}

package/dist/ocas/store.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Sumeru ocas store wrapper — opens an `@ocas/fs` CAS-backed store, runs
+ * bootstrap so the schema-of-schemas exists, and registers the two Sumeru
+ * schemas. Exposes the resulting `Store` and the schema hashes.
+ *
+ * The wrapper validates payloads against their schema before writing.
+ * `@ocas/core.Store.cas.put` is intentionally non-validating; recording paths
+ * always go through {@link recordTurn} / {@link recordSessionMeta} so invalid
+ * payloads are rejected before they reach disk.
+ */
+import { type Hash, type JSONSchema, type Store } from "@ocas/core";
+import { type SearchIndex } from "../search/index.js";
+/** Hash alias for the schema-of-schemas (assigned at bootstrap). */
+export type SumeruOcas = {
+    store: Store;
+    turnSchemaHash: Hash;
+    sessionMetaSchemaHash: Hash;
+    /** Schema-of-schemas hash from `@ocas/core` bootstrap. */
+    metaSchemaHash: Hash;
+    /** Map: schema hash → human alias for the `/ocas/:hash` endpoint. */
+    schemaAliases: Record<Hash, string>;
+    /** Phase 5: FTS5-backed session search index. */
+    searchIndex: SearchIndex;
+};
+/**
+ * Open or create the on-disk store at `dir`. Creates the directory if needed.
+ * Bootstraps `@ocas/core` schemas and registers `@sumeru/turn` +
+ * `@sumeru/session-meta`.
+ *
+ * Throws with a `failed to open ocas store at <dir>: <cause>` message when
+ * the directory cannot be created or accessed.
+ */
+export declare function openSumeruOcas(dir: string): SumeruOcas;
+/**
+ * Validate `payload` against the schema identified by `schemaHash`. Throws
+ * `SchemaValidationError` if invalid.
+ *
+ * This is needed because `@ocas/core.Store.cas.put` does not validate — it
+ * just hashes and stores. We always validate before writing recording data
+ * so corrupted nodes never land in the store.
+ *
+ * The validator is our own ajv instance (not `@ocas/core`'s internal one)
+ * so we can recognise the `date-time` format without pulling in
+ * `ajv-formats`.
+ */
+export declare function validatePayload(store: Store, schemaHash: Hash, payload: unknown): void;
+/**
+ * Validate `payload` and put it in the store. Returns the resulting hash.
+ * Wraps `store.cas.put` with a pre-write validation step.
+ */
+export declare function recordPayload(store: Store, schemaHash: Hash, payload: unknown): Hash;
+/**
+ * Look up a schema body. Returns `null` if `schemaHash` is not in the store.
+ * Convenience wrapper kept here so handlers don't need to import @ocas/core
+ * directly for trivial reads.
+ */
+export declare function getRegisteredSchema(store: Store, schemaHash: Hash): JSONSchema | null;
+//# sourceMappingURL=store.d.ts.map

package/dist/ocas/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/ocas/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAEN,KAAK,IAAI,EACT,KAAK,UAAU,EAGf,KAAK,KAAK,EACV,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAyBzE,oEAAoE;AACpE,MAAM,MAAM,UAAU,GAAG;IACxB,KAAK,EAAE,KAAK,CAAC;IACb,cAAc,EAAE,IAAI,CAAC;IACrB,qBAAqB,EAAE,IAAI,CAAC;IAC5B,0DAA0D;IAC1D,cAAc,EAAE,IAAI,CAAC;IACrB,qEAAqE;IACrE,aAAa,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,iDAAiD;IACjD,WAAW,EAAE,WAAW,CAAC;CACzB,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAsDtD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC9B,KAAK,EAAE,KAAK,EACZ,UAAU,EAAE,IAAI,EAChB,OAAO,EAAE,OAAO,GACd,IAAI,CAkBN;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC5B,KAAK,EAAE,KAAK,EACZ,UAAU,EAAE,IAAI,EAChB,OAAO,EAAE,OAAO,GACd,IAAI,CAGN;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,KAAK,EACZ,UAAU,EAAE,IAAI,GACd,UAAU,GAAG,IAAI,CAInB"}

package/dist/ocas/store.js

@@ -0,0 +1,139 @@
+/**
+ * Sumeru ocas store wrapper — opens an `@ocas/fs` CAS-backed store, runs
+ * bootstrap so the schema-of-schemas exists, and registers the two Sumeru
+ * schemas. Exposes the resulting `Store` and the schema hashes.
+ *
+ * The wrapper validates payloads against their schema before writing.
+ * `@ocas/core.Store.cas.put` is intentionally non-validating; recording paths
+ * always go through {@link recordTurn} / {@link recordSessionMeta} so invalid
+ * payloads are rejected before they reach disk.
+ */
+import { mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { bootstrap, putSchema, SchemaValidationError, } from "@ocas/core";
+import { createFsStore, createSqliteVarStore } from "@ocas/fs";
+import * as AjvModule from "ajv";
+import { createSearchIndex } from "../search/index.js";
+import { SUMERU_SESSION_META_SCHEMA, SUMERU_TURN_SCHEMA } from "./schemas.js";
+// ajv CJS interop: the constructor lives on `.default` at runtime, but the
+// namespace shape is what tsc's verbatimModuleSyntax surfaces.
+// biome-ignore lint/suspicious/noExplicitAny: CJS interop
+const Ajv = (AjvModule.default ??
+    AjvModule);
+/**
+ * Local ajv instance used for validating Sumeru recording payloads. We do not
+ * reuse `@ocas/core`'s internal ajv because we need the `date-time` format
+ * registered (without pulling in `ajv-formats`).
+ *
+ * `date-time` is registered with a permissive ISO-8601 regex matching what
+ * `Date.prototype.toISOString` emits — sufficient for validating timestamps
+ * the server itself produces.
+ */
+const ajv = new Ajv();
+ajv.addFormat("ocas_ref", /^[0-9A-HJKMNP-TV-Z]{13}$/);
+ajv.addFormat("date-time", /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d{1,9})?(Z|[+-]\d{2}:\d{2})$/);
+/**
+ * Open or create the on-disk store at `dir`. Creates the directory if needed.
+ * Bootstraps `@ocas/core` schemas and registers `@sumeru/turn` +
+ * `@sumeru/session-meta`.
+ *
+ * Throws with a `failed to open ocas store at <dir>: <cause>` message when
+ * the directory cannot be created or accessed.
+ */
+export function openSumeruOcas(dir) {
+    let store;
+    try {
+        // Ensure parent + dir exist before handing off to @ocas/fs.
+        mkdirSync(dir, { recursive: true });
+        const cas = createFsStore(dir);
+        const sqlite = createSqliteVarStore(dir, cas);
+        store = { cas, var: sqlite.var, tag: sqlite.tag };
+    }
+    catch (err) {
+        const cause = err instanceof Error ? err.message : String(err);
+        throw new Error(`failed to open ocas store at ${dir}: ${cause}`);
+    }
+    let aliases;
+    try {
+        aliases = bootstrap(store);
+    }
+    catch (err) {
+        const cause = err instanceof Error ? err.message : String(err);
+        throw new Error(`failed to open ocas store at ${dir}: ${cause}`);
+    }
+    const turnSchemaHash = putSchema(store, SUMERU_TURN_SCHEMA);
+    const sessionMetaSchemaHash = putSchema(store, SUMERU_SESSION_META_SCHEMA);
+    const metaSchemaHash = aliases["@ocas/schema"];
+    if (metaSchemaHash === undefined) {
+        throw new Error(`failed to open ocas store at ${dir}: bootstrap did not register @ocas/schema`);
+    }
+    const schemaAliases = {
+        [metaSchemaHash]: "@ocas/schema",
+        [turnSchemaHash]: "@sumeru/turn",
+        [sessionMetaSchemaHash]: "@sumeru/session-meta",
+    };
+    let searchIndex;
+    try {
+        searchIndex = createSearchIndex(join(dir, "_store.db"));
+    }
+    catch (err) {
+        const cause = err instanceof Error ? err.message : String(err);
+        throw new Error(`failed to open ocas store at ${dir}: ${cause}`);
+    }
+    const indexedTurns = searchIndex.turnCount();
+    console.log(`[sumeru] search index ready: ${indexedTurns} turns indexed`);
+    return {
+        store,
+        turnSchemaHash,
+        sessionMetaSchemaHash,
+        metaSchemaHash,
+        schemaAliases,
+        searchIndex,
+    };
+}
+/**
+ * Validate `payload` against the schema identified by `schemaHash`. Throws
+ * `SchemaValidationError` if invalid.
+ *
+ * This is needed because `@ocas/core.Store.cas.put` does not validate — it
+ * just hashes and stores. We always validate before writing recording data
+ * so corrupted nodes never land in the store.
+ *
+ * The validator is our own ajv instance (not `@ocas/core`'s internal one)
+ * so we can recognise the `date-time` format without pulling in
+ * `ajv-formats`.
+ */
+export function validatePayload(store, schemaHash, payload) {
+    const schemaNode = store.cas.get(schemaHash);
+    if (schemaNode === null) {
+        throw new SchemaValidationError(`Schema ${schemaHash} is not registered in the store`);
+    }
+    const schema = schemaNode.payload;
+    const valid = ajv.validate(schema, payload);
+    if (!valid) {
+        const detail = ajv.errors !== null && ajv.errors !== undefined && ajv.errors.length > 0
+            ? ajv.errorsText(ajv.errors)
+            : "(no detail)";
+        throw new SchemaValidationError(`Payload does not validate against schema ${schemaHash}: ${detail}`);
+    }
+}
+/**
+ * Validate `payload` and put it in the store. Returns the resulting hash.
+ * Wraps `store.cas.put` with a pre-write validation step.
+ */
+export function recordPayload(store, schemaHash, payload) {
+    validatePayload(store, schemaHash, payload);
+    return store.cas.put(schemaHash, payload);
+}
+/**
+ * Look up a schema body. Returns `null` if `schemaHash` is not in the store.
+ * Convenience wrapper kept here so handlers don't need to import @ocas/core
+ * directly for trivial reads.
+ */
+export function getRegisteredSchema(store, schemaHash) {
+    const node = store.cas.get(schemaHash);
+    if (node === null)
+        return null;
+    return node.payload;
+}
+//# sourceMappingURL=store.js.map

package/dist/ocas/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/ocas/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACN,SAAS,EAGT,SAAS,EACT,qBAAqB,GAErB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,KAAK,SAAS,MAAM,KAAK,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAoB,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAE9E,2EAA2E;AAC3E,+DAA+D;AAC/D,0DAA0D;AAC1D,MAAM,GAAG,GAAG,CAAE,SAAiB,CAAC,OAAO;IACtC,SAAS,CAAiC,CAAC;AAE5C;;;;;;;;GAQG;AACH,MAAM,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;AACtB,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC;AACtD,GAAG,CAAC,SAAS,CACZ,WAAW,EACX,sEAAsE,CACtE,CAAC;AAeF;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACzC,IAAI,KAAY,CAAC;IACjB,IAAI,CAAC;QACJ,4DAA4D;QAC5D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9C,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,OAA6B,CAAC;IAClC,IAAI,CAAC;QACJ,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAC5D,MAAM,qBAAqB,GAAG,SAAS,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;IAC3E,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACd,gCAAgC,GAAG,2CAA2C,CAC9E,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAyB;QAC3C,CAAC,cAAc,CAAC,EAAE,cAAc;QAChC,CAAC,cAAc,CAAC,EAAE,cAAc;QAChC,CAAC,qBAAqB,CAAC,EAAE,sBAAsB;KAC/C,CAAC;IAEF,IAAI,WAAwB,CAAC;IAC7B,IAAI,CAAC;QACJ,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,YAAY,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,gCAAgC,YAAY,gBAAgB,CAAC,CAAC;IAE1E,OAAO;QACN,KAAK;QACL,cAAc;QACd,qBAAqB;QACrB,cAAc;QACd,aAAa;QACb,WAAW;KACX,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAC9B,KAAY,EACZ,UAAgB,EAChB,OAAgB;IAEhB,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,qBAAqB,CAC9B,UAAU,UAAU,iCAAiC,CACrD,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAqB,CAAC;IAChD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,MAAM,GACX,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACvE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;YAC5B,CAAC,CAAC,aAAa,CAAC;QAClB,MAAM,IAAI,qBAAqB,CAC9B,4CAA4C,UAAU,KAAK,MAAM,EAAE,CACnE,CAAC;IACH,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC5B,KAAY,EACZ,UAAgB,EAChB,OAAgB;IAEhB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAClC,KAAY,EACZ,UAAgB;IAEhB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAO,IAAI,CAAC,OAAqB,CAAC;AACnC,CAAC"}

package/dist/search/handler.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Phase 5 — search HTTP handlers.
+ *
+ * Wired into `createHandler` so:
+ *   - `GET /sessions?q=...`                    runs cross-gateway search
+ *   - `GET /gateways/:name/sessions?q=...`     runs per-gateway search
+ *
+ * When `q` is missing or empty after trimming, the per-gateway route falls
+ * back to the existing `@sumeru/session-list` behavior; the top-level route
+ * 400s because there is no listing fallback.
+ */
+import type { ServerResponse } from "node:http";
+import type { SearchIndex } from "../search/index.js";
+/** Result of parsing the query string for a search request. */
+export type ParsedSearchParams = {
+    ok: true;
+    value: ParsedSearchParamsOk;
+} | {
+    ok: false;
+    status: 400;
+    error: string;
+    message: string;
+};
+export type ParsedSearchParamsOk = {
+    /** Trimmed query. Always non-empty when `ok === true`. */
+    query: string;
+    /** When `null`, the request is for the top-level (cross-gateway) route OR no filter applied. */
+    gateway: string | null;
+    limit: number;
+    offset: number;
+};
+/**
+ * Parse `q`, `limit`, `offset`, and (top-level only) `gateway` from a query
+ * string. Trimming `q` to empty is treated as "absent" — the caller decides
+ * whether that means fall through to listing or 400.
+ */
+export declare function parseSearchParams(queryString: string, allowGatewayFilter: boolean): ParsedSearchParams;
+/**
+ * Run a cross-gateway search and write the response. Caller must have
+ * already validated method == GET / HEAD.
+ */
+export declare function handleSearchTopLevel(res: ServerResponse, queryString: string, searchIndex: SearchIndex): void;
+/**
+ * Run a per-gateway search and write the response. The route's gateway is
+ * authoritative; any `?gateway=` param is ignored (per spec).
+ */
+export declare function handleSearchPerGateway(res: ServerResponse, queryString: string, searchIndex: SearchIndex, gateway: string): void;
+/**
+ * Detect whether a query string carries a search request (`?q=` non-empty
+ * after trimming). Used by the per-gateway sessions route to decide between
+ * the Phase-2 listing and Phase-5 search.
+ */
+export declare function isSearchRequest(queryString: string): boolean;
+//# sourceMappingURL=handler.d.ts.map

package/dist/search/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/search/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAUtD,+DAA+D;AAC/D,MAAM,MAAM,kBAAkB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,oBAAoB,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,MAAM,MAAM,oBAAoB,GAAG;IAClC,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAChC,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,OAAO,GACzB,kBAAkB,CAsDpB;AAiCD;;;GAGG;AACH,wBAAgB,oBAAoB,CACnC,GAAG,EAAE,cAAc,EACnB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,WAAW,GACtB,IAAI,CAON;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACrC,GAAG,EAAE,cAAc,EACnB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,WAAW,EACxB,OAAO,EAAE,MAAM,GACb,IAAI,CAQN;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAK5D"}