@superblocksteam/gateway 2.0.161 → 2.0.162-next.1

package/dist/events/schema.js

@@ -1,93 +0,0 @@
-import { z } from "zod";
-import { CHAT_ROLES, EVENT_CONTRACT_VERSION, EVENT_PRODUCERS, GENERATION_STATES, MAX_IDENTIFIER_LENGTH, MAX_LABEL_LENGTH, MAX_SEQUENCE, MAX_TEXT_LENGTH, SESSION_STATUSES, } from "./types.js";
-const identifier = z.string().min(1).max(MAX_IDENTIFIER_LENGTH);
-/**
- * Payloads are strict objects: an unrecognized key fails the parse rather than
- * being dropped. A field nobody declared is a field nobody bounded, and this
- * body arrives from outside the process.
- */
-const payloadByKind = {
-    auth_required: z
-        .object({ reason: z.string().max(MAX_LABEL_LENGTH).optional() })
-        .strict(),
-    chat_message: z
-        .object({
-        messageId: z.string().max(MAX_IDENTIFIER_LENGTH).optional(),
-        messageType: z.string().max(MAX_IDENTIFIER_LENGTH).optional(),
-        role: z.enum(CHAT_ROLES),
-        text: z.string().min(1).max(MAX_TEXT_LENGTH),
-    })
-        .strict(),
-    generation_state: z
-        .object({
-        hasError: z.boolean().optional(),
-        hasSuggestions: z.boolean().optional(),
-        state: z.enum(GENERATION_STATES),
-    })
-        .strict(),
-    progress: z
-        .object({ label: z.string().min(1).max(MAX_LABEL_LENGTH) })
-        .strict(),
-    session: z.object({ status: z.enum(SESSION_STATUSES) }).strict(),
-};
-const envelope = z
-    .object({
-    applicationId: identifier,
-    eventId: identifier,
-    gatewayTurnId: z.string().max(MAX_IDENTIFIER_LENGTH).optional(),
-    kind: z.enum(Object.keys(payloadByKind)),
-    liveEditId: identifier,
-    occurredAt: z.string().min(1),
-    organizationId: identifier,
-    payload: z.unknown(),
-    producer: z.enum(EVENT_PRODUCERS),
-    sequence: z.number().int().positive().max(MAX_SEQUENCE),
-    version: z.number().int(),
-})
-    .strict();
-/**
- * Validates one inbound event against the contract.
- *
- * SABS validates the same shape before pushing it, which is not a reason to
- * skip it here: a validated producer is not a trusted one, and this is the
- * process boundary where the bytes become Gateway's problem.
- */
-export function parseLiveEditEvent(input) {
-    const parsed = envelope.safeParse(input);
-    if (!parsed.success) {
-        return { ok: false, reason: "malformed_event" };
-    }
-    // Version is checked before the payload so an event from a future contract
-    // is reported as such rather than as a malformed body.
-    if (parsed.data.version !== EVENT_CONTRACT_VERSION) {
-        return { ok: false, reason: "unsupported_version" };
-    }
-    const occurredAtMs = Date.parse(parsed.data.occurredAt);
-    if (Number.isNaN(occurredAtMs)) {
-        return { ok: false, reason: "malformed_event" };
-    }
-    const payload = payloadByKind[parsed.data.kind].safeParse(parsed.data.payload);
-    if (!payload.success) {
-        return { ok: false, reason: "malformed_event" };
-    }
-    const event = {
-        applicationId: parsed.data.applicationId,
-        eventId: parsed.data.eventId,
-        ...(parsed.data.gatewayTurnId
-            ? { gatewayTurnId: parsed.data.gatewayTurnId }
-            : {}),
-        kind: parsed.data.kind,
-        liveEditId: parsed.data.liveEditId,
-        occurredAtMs,
-        organizationId: parsed.data.organizationId,
-        payload: {
-            kind: parsed.data.kind,
-            ...payload.data,
-        },
-        producer: parsed.data.producer,
-        sequence: parsed.data.sequence,
-        version: EVENT_CONTRACT_VERSION,
-    };
-    return { ok: true, event };
-}
-//# sourceMappingURL=schema.js.map

package/dist/events/schema.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/events/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,UAAU,EACV,sBAAsB,EACtB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,EAChB,YAAY,EACZ,eAAe,EACf,gBAAgB,GAIjB,MAAM,YAAY,CAAC;AAEpB,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,aAAa,GAAG;IACpB,aAAa,EAAE,CAAC;SACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;SAC/D,MAAM,EAAE;IACX,YAAY,EAAE,CAAC;SACZ,MAAM,CAAC;QACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;QAC3D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;QAC7D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;KAC7C,CAAC;SACD,MAAM,EAAE;IACX,gBAAgB,EAAE,CAAC;SAChB,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAChC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACtC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;KACjC,CAAC;SACD,MAAM,EAAE;IACX,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;SAC1D,MAAM,EAAE;IACX,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CACxD,CAAC;AAEX,MAAM,QAAQ,GAAG,CAAC;KACf,MAAM,CAAC;IACN,aAAa,EAAE,UAAU;IACzB,OAAO,EAAE,UAAU;IACnB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IAC/D,IAAI,EAAE,CAAC,CAAC,IAAI,CACV,MAAM,CAAC,IAAI,CAAC,aAAa,CAGxB,CACF;IACD,UAAU,EAAE,UAAU;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,cAAc,EAAE,UAAU;IAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC1B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAClD,CAAC;IACD,2EAA2E;IAC3E,uDAAuD;IACvD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,sBAAsB,EAAE,CAAC;QACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAClD,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CACvD,MAAM,CAAC,IAAI,CAAC,OAAO,CACpB,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAClD,CAAC;IAED,MAAM,KAAK,GAAkB;QAC3B,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa;QACxC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;QAC5B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa;YAC3B,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE;YAC9C,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;QACtB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;QAClC,YAAY;QACZ,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;QAC1C,OAAO,EAAE;YACP,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,GAAG,OAAO,CAAC,IAAI;SACQ;QACzB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;QAC9B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;QAC9B,OAAO,EAAE,sBAAsB;KAChC,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/dist/events/snapshot.d.ts

@@ -1,32 +0,0 @@
-import { type EventCursor } from "./cursor.js";
-import type { EventProducer, EventSnapshot, LiveEditEvent } from "./types.js";
-export type SnapshotReads = {
-    /**
-     * Lowest sequence this producer's stream still holds, or undefined when the
-     * stream is empty. This is the retention boundary a stale cursor fell off.
-     */
-    firstRetainedSequence(producer: EventProducer): Promise<number | undefined>;
-    /** Strictly-after-sequence read, done by the store rather than by filtering. */
-    readAfter(input: {
-        afterSequence: number;
-        limit?: number;
-        producer: EventProducer;
-    }): Promise<LiveEditEvent[]>;
-    /** Newest `count` events of one producer's stream, oldest first. */
-    readTail(input: {
-        count: number;
-        producer: EventProducer;
-    }): Promise<LiveEditEvent[]>;
-};
-/**
- * Assembles a snapshot from a store's three reads.
- *
- * Shared rather than written twice so the memory and Redis stores cannot drift
- * into disagreeing about what resuming means — the same reason both build
- * their keys from one builder. Each store supplies only the reads; the cursor
- * arithmetic and the staleness rule live here.
- */
-export declare function buildSnapshot(input: {
-    cursor?: EventCursor;
-    limit?: number;
-}, reads: SnapshotReads): Promise<EventSnapshot>;

package/dist/events/snapshot.js

@@ -1,57 +0,0 @@
-import { advanceEventCursor, cursorPosition, } from "./cursor.js";
-import { PRODUCERS_IN_ORDER, sortEvents } from "./merge.js";
-import { EVENT_SNAPSHOT_TAIL } from "./types.js";
-/**
- * Assembles a snapshot from a store's three reads.
- *
- * Shared rather than written twice so the memory and Redis stores cannot drift
- * into disagreeing about what resuming means — the same reason both build
- * their keys from one builder. Each store supplies only the reads; the cursor
- * arithmetic and the staleness rule live here.
- */
-export async function buildSnapshot(input, reads) {
-    const collected = [];
-    const tail = [];
-    const lost = [];
-    for (const producer of PRODUCERS_IN_ORDER) {
-        const resumedAfterSequence = cursorPosition(input.cursor, producer);
-        const afterEvents = await reads.readAfter({
-            afterSequence: resumedAfterSequence,
-            ...(input.limit === undefined ? {} : { limit: input.limit }),
-            producer,
-        });
-        collected.push(...afterEvents);
-        tail.push(...(await reads.readTail({ count: EVENT_SNAPSHOT_TAIL, producer })));
-        const firstRetainedSequence = await reads.firstRetainedSequence(producer);
-        // readAfter and firstRetainedSequence are two separate reads, not one
-        // atomic one, so retention can advance between them: firstRetainedSequence
-        // can then report a boundary past events readAfter had already captured
-        // moments earlier. A delivered sequence below that boundary proves the
-        // read beat the eviction, so what looks like a gap here never actually
-        // reached the caller as one.
-        const minDelivered = afterEvents.length > 0
-            ? Math.min(...afterEvents.map((event) => event.sequence))
-            : undefined;
-        const provenByDelivery = firstRetainedSequence !== undefined &&
-            minDelivered !== undefined &&
-            minDelivered < firstRetainedSequence;
-        // A gap only exists when the stream starts *past* the next sequence the
-        // cursor expects. An empty stream is not a gap: nothing was produced yet.
-        if (firstRetainedSequence !== undefined &&
-            firstRetainedSequence > resumedAfterSequence + 1 &&
-            !provenByDelivery) {
-            lost.push({ firstRetainedSequence, producer, resumedAfterSequence });
-        }
-    }
-    const events = sortEvents(collected);
-    const limited = input.limit === undefined ? events : events.slice(0, input.limit);
-    return {
-        // Advanced past what is actually being handed over, never past what was
-        // read and then cut by the limit — otherwise the remainder is skipped.
-        cursor: advanceEventCursor(input.cursor, limited),
-        events: limited,
-        lost,
-        tail: sortEvents(tail),
-    };
-}
-//# sourceMappingURL=snapshot.js.map

package/dist/events/snapshot.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../src/events/snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,cAAc,GAEf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE5D,OAAO,EAAE,mBAAmB,EAAuB,MAAM,YAAY,CAAC;AAqBtE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAA+C,EAC/C,KAAoB;IAEpB,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAqB,EAAE,CAAC;IAElC,KAAK,MAAM,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QAC1C,MAAM,oBAAoB,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC;YACxC,aAAa,EAAE,oBAAoB;YACnC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5D,QAAQ;SACT,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CACP,GAAG,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,CAAC,CAAC,CACpE,CAAC;QAEF,MAAM,qBAAqB,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAC1E,sEAAsE;QACtE,2EAA2E;QAC3E,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,6BAA6B;QAC7B,MAAM,YAAY,GAChB,WAAW,CAAC,MAAM,GAAG,CAAC;YACpB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACzD,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,gBAAgB,GACpB,qBAAqB,KAAK,SAAS;YACnC,YAAY,KAAK,SAAS;YAC1B,YAAY,GAAG,qBAAqB,CAAC;QAEvC,wEAAwE;QACxE,0EAA0E;QAC1E,IACE,qBAAqB,KAAK,SAAS;YACnC,qBAAqB,GAAG,oBAAoB,GAAG,CAAC;YAChD,CAAC,gBAAgB,EACjB,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,EAAE,qBAAqB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,OAAO,GACX,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACpE,OAAO;QACL,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC;QACjD,MAAM,EAAE,OAAO;QACf,IAAI;QACJ,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;KACvB,CAAC;AACJ,CAAC"}

package/dist/events/stream-key.d.ts

@@ -1,2 +0,0 @@
-import type { EventProducer, EventScope } from "./types.js";
-export declare function streamSuffix(scope: EventScope, producer: EventProducer): string;

package/dist/events/stream-key.js

@@ -1,31 +0,0 @@
-import { createHash } from "node:crypto";
-/**
- * Builds the stream address shared by every event store, so the two
- * implementations cannot drift into addressing streams differently.
- *
- * Tenant identifiers (organization, application, live edit) are length-
- * prefixed and SHA-256-digested before they reach Redis. Length-prefixing
- * keeps `a:b`+`c` and `a`+`b:c` from colliding; digesting keeps the
- * identifiers themselves out of key listings — ProgressStore already does
- * the same for caller/org/app. The producer stays in the clear: it is a
- * closed enum (`dev_server` | `sabs`), cannot identify a tenant, and naming
- * the stream at a glance is worth more than the nothing it discloses.
- *
- * v0 has not shipped this key format, so there is no dual-read. Existing
- * local Redis event keys from earlier builds are orphaned after deploy.
- */
-function digest(parts) {
-    const hash = createHash("sha256");
-    for (const part of parts) {
-        hash.update(`${part.length}:${part}`);
-    }
-    return hash.digest("hex");
-}
-export function streamSuffix(scope, producer) {
-    return `${digest([
-        scope.organizationId,
-        scope.applicationId,
-        scope.liveEditId,
-    ])}:${producer}`;
-}
-//# sourceMappingURL=stream-key.js.map

package/dist/events/stream-key.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stream-key.js","sourceRoot":"","sources":["../../src/events/stream-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC;;;;;;;;;;;;;;GAcG;AACH,SAAS,MAAM,CAAC,KAAwB;IACtC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,KAAiB,EACjB,QAAuB;IAEvB,OAAO,GAAG,MAAM,CAAC;QACf,KAAK,CAAC,cAAc;QACpB,KAAK,CAAC,aAAa;QACnB,KAAK,CAAC,UAAU;KACjB,CAAC,IAAI,QAAQ,EAAE,CAAC;AACnB,CAAC"}

package/dist/events/types.d.ts

@@ -1,179 +0,0 @@
-import type { EventCursor } from "./cursor.js";
-/**
- * The versioned event contract SABS pushes over the direct authenticated
- * callback. This mirrors `sabs/internal/gateway/event.go`; the two are kept in
- * step by hand because the channel is deliberately not proto, and the bounds
- * below are the only thing standing between a producer bug and unbounded
- * Redis growth.
- */
-export declare const EVENT_CONTRACT_VERSION = 1;
-export declare const MAX_IDENTIFIER_LENGTH = 128;
-export declare const MAX_LABEL_LENGTH = 512;
-export declare const MAX_TEXT_LENGTH = 8192;
-/**
- * Ceiling on an inbound sequence number. Every consumer of `sequence`
- * (cursor comparisons, gap detection) does so with ordinary JS number
- * arithmetic, which stops being exact past this point; a producer sequence
- * that reached it would silently corrupt ordering rather than fail loudly.
- */
-export declare const MAX_SEQUENCE: number;
-/** Kinds of fact a live-edit session reports. */
-export declare const EVENT_KINDS: readonly ["auth_required", "chat_message", "generation_state", "progress", "session"];
-export type LiveEditEventKind = (typeof EVENT_KINDS)[number];
-/**
- * Which stream a sequence number belongs to. The SABS control plane and the
- * dev server both push about the same live edit and neither can see the
- * other's counter, so ordering is defined per producer and Gateway keeps the
- * two streams apart.
- */
-export declare const EVENT_PRODUCERS: readonly ["dev_server", "sabs"];
-export type EventProducer = (typeof EVENT_PRODUCERS)[number];
-export declare const GENERATION_STATES: readonly ["awaiting_user_input", "cancelled", "completed", "debugging", "generating", "idle", "summarizing"];
-export declare const CHAT_ROLES: readonly ["assistant", "user"];
-export declare const SESSION_STATUSES: readonly ["created", "terminated"];
-export type LiveEditEventPayload = {
-    kind: "auth_required";
-    reason?: string;
-} | {
-    kind: "chat_message";
-    messageId?: string;
-    messageType?: string;
-    role: (typeof CHAT_ROLES)[number];
-    text: string;
-} | {
-    kind: "generation_state";
-    hasError?: boolean;
-    hasSuggestions?: boolean;
-    state: (typeof GENERATION_STATES)[number];
-} | {
-    kind: "progress";
-    label: string;
-} | {
-    kind: "session";
-    status: (typeof SESSION_STATUSES)[number];
-};
-/**
- * One accepted event. `occurredAtMs` replaces the wire's ISO string so
- * ordering never depends on re-parsing, and `payload` is narrowed by `kind`.
- */
-export type LiveEditEvent = {
-    applicationId: string;
-    eventId: string;
-    gatewayTurnId?: string;
-    kind: LiveEditEventKind;
-    liveEditId: string;
-    occurredAtMs: number;
-    organizationId: string;
-    payload: LiveEditEventPayload;
-    producer: EventProducer;
-    sequence: number;
-    version: typeof EVENT_CONTRACT_VERSION;
-};
-/**
- * Why an event was refused. These values reach a metric label, so the set is
- * closed and carries nothing derived from the event's content.
- */
-export type EventRejectionReason = "malformed_event" | "unsupported_version";
-export type ParseResult = {
-    ok: true;
-    event: LiveEditEvent;
-} | {
-    ok: false;
-    reason: EventRejectionReason;
-};
-/** Outcome of persisting one event. */
-export type AppendOutcome = "accepted" | "duplicate";
-/**
- * The whole tenant path to one live-edit stream.
- *
- * A live-edit id alone would be enough to address a stream, and that is
- * exactly the problem: it makes the store's isolation depend entirely on
- * every caller having validated ownership first. Carrying the tenant in the
- * key means a read cannot reach another tenant's history even if something
- * upstream let the wrong id through.
- */
-export type EventScope = {
-    applicationId: string;
-    liveEditId: string;
-    organizationId: string;
-};
-/**
- * A producer whose retention boundary overtook a caller's cursor.
- *
- * Reported rather than hidden: the caller asked to continue from a position
- * that no longer exists, and answering with only the events that survived
- * would present a stream with a hole in it as a complete one. Naming the
- * producer and both boundaries lets a caller say exactly what it lost.
- */
-export type LostEventRange = {
-    /** Lowest sequence this producer's stream still holds. */
-    firstRetainedSequence: number;
-    producer: EventProducer;
-    /** Last sequence the caller's cursor had consumed. */
-    resumedAfterSequence: number;
-};
-/**
- * How many events at the end of each producer's stream a snapshot carries.
- *
- * Current state has to be read from the stream's end rather than from the
- * window after the cursor: a caller that already consumed the terminal event
- * would otherwise be told nothing is known and would poll a build that ended.
- * A tail bounds that read so it does not grow with the length of the session.
- */
-export declare const EVENT_SNAPSHOT_TAIL = 64;
-/**
- * What one caller sees when it resumes reading a live edit.
- *
- * `events` is what is new for this caller and `tail` is where the session
- * currently stands; the two overlap freely and a reader is expected to take
- * activity from the first and state from the second.
- */
-export type EventSnapshot = {
-    /** Advanced past every event in {@link EventSnapshot.events}. */
-    cursor: EventCursor;
-    /** Strictly after the incoming cursor, ordered deterministically. */
-    events: LiveEditEvent[];
-    /** Empty when the cursor was still inside every stream's retention. */
-    lost: LostEventRange[];
-    /** Newest {@link EVENT_SNAPSHOT_TAIL} events per producer, cursor aside. */
-    tail: LiveEditEvent[];
-};
-/**
- * Durable, bounded record of what happened in a live-edit session.
- *
- * Retention is bounded twice over: a stream holds at most
- * {@link MAX_EVENTS_PER_STREAM} events and expires after
- * {@link EVENT_STREAM_TTL_MS} of silence. This is the source a resumed caller
- * reads. Live turns hear Clark over the editor websocket.
- */
-export type EventStore = {
-    /** The event carries its own scope, so an append cannot be misfiled. */
-    append(event: LiveEditEvent): Promise<AppendOutcome>;
-    /** Events for a live edit, ordered deterministically across producers. */
-    list(input: EventScope & {
-        afterSequence?: number;
-        limit?: number;
-        producer?: EventProducer;
-    }): Promise<LiveEditEvent[]>;
-    /**
-     * Everything one caller needs to continue from where it left off, read
-     * without consuming anything: two callers resuming the same live edit each
-     * get their own view of it.
-     */
-    snapshot(input: EventScope & {
-        cursor?: EventCursor;
-        limit?: number;
-    }): Promise<EventSnapshot>;
-};
-/**
- * Per-(live edit, producer) retention bound. A runaway producer overwrites its
- * own oldest events rather than growing Redis without limit. The trade-off is
- * explicit: an event evicted by count loses its de-duplication record, so a
- * redelivery arriving after eviction is accepted again. Bounded memory is
- * worth more than perfect de-duplication of an event nobody can still read.
- */
-export declare const MAX_EVENTS_PER_STREAM = 500;
-/** How long a silent stream is kept before Redis reclaims it. */
-export declare const EVENT_STREAM_TTL_MS = 3600000;
-/** Cap on one inbound batch, matching the SABS publish bound. */
-export declare const MAX_EVENTS_PER_REQUEST = 64;

package/dist/events/types.js

@@ -1,66 +0,0 @@
-/**
- * The versioned event contract SABS pushes over the direct authenticated
- * callback. This mirrors `sabs/internal/gateway/event.go`; the two are kept in
- * step by hand because the channel is deliberately not proto, and the bounds
- * below are the only thing standing between a producer bug and unbounded
- * Redis growth.
- */
-export const EVENT_CONTRACT_VERSION = 1;
-export const MAX_IDENTIFIER_LENGTH = 128;
-export const MAX_LABEL_LENGTH = 512;
-export const MAX_TEXT_LENGTH = 8192;
-/**
- * Ceiling on an inbound sequence number. Every consumer of `sequence`
- * (cursor comparisons, gap detection) does so with ordinary JS number
- * arithmetic, which stops being exact past this point; a producer sequence
- * that reached it would silently corrupt ordering rather than fail loudly.
- */
-export const MAX_SEQUENCE = Number.MAX_SAFE_INTEGER;
-/** Kinds of fact a live-edit session reports. */
-export const EVENT_KINDS = [
-    "auth_required",
-    "chat_message",
-    "generation_state",
-    "progress",
-    "session",
-];
-/**
- * Which stream a sequence number belongs to. The SABS control plane and the
- * dev server both push about the same live edit and neither can see the
- * other's counter, so ordering is defined per producer and Gateway keeps the
- * two streams apart.
- */
-export const EVENT_PRODUCERS = ["dev_server", "sabs"];
-export const GENERATION_STATES = [
-    "awaiting_user_input",
-    "cancelled",
-    "completed",
-    "debugging",
-    "generating",
-    "idle",
-    "summarizing",
-];
-export const CHAT_ROLES = ["assistant", "user"];
-export const SESSION_STATUSES = ["created", "terminated"];
-/**
- * How many events at the end of each producer's stream a snapshot carries.
- *
- * Current state has to be read from the stream's end rather than from the
- * window after the cursor: a caller that already consumed the terminal event
- * would otherwise be told nothing is known and would poll a build that ended.
- * A tail bounds that read so it does not grow with the length of the session.
- */
-export const EVENT_SNAPSHOT_TAIL = 64;
-/**
- * Per-(live edit, producer) retention bound. A runaway producer overwrites its
- * own oldest events rather than growing Redis without limit. The trade-off is
- * explicit: an event evicted by count loses its de-duplication record, so a
- * redelivery arriving after eviction is accepted again. Bounded memory is
- * worth more than perfect de-duplication of an event nobody can still read.
- */
-export const MAX_EVENTS_PER_STREAM = 500;
-/** How long a silent stream is kept before Redis reclaims it. */
-export const EVENT_STREAM_TTL_MS = 3_600_000;
-/** Cap on one inbound batch, matching the SABS publish bound. */
-export const MAX_EVENTS_PER_REQUEST = 64;
-//# sourceMappingURL=types.js.map

package/dist/events/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/events/types.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AACpC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAEpC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,gBAAgB,CAAC;AAEpD,iDAAiD;AACjD,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,eAAe;IACf,cAAc;IACd,kBAAkB;IAClB,UAAU;IACV,SAAS;CACD,CAAC;AAGX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,YAAY,EAAE,MAAM,CAAU,CAAC;AAG/D,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,qBAAqB;IACrB,WAAW;IACX,WAAW;IACX,WAAW;IACX,YAAY;IACZ,MAAM;IACN,aAAa;CACL,CAAC;AAEX,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,WAAW,EAAE,MAAM,CAAU,CAAC;AAEzD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,YAAY,CAAU,CAAC;AAkFnE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAiDtC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC,iEAAiE;AACjE,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAE7C,iEAAiE;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC"}

package/dist/resume/memory-progress-store.d.ts

@@ -1,39 +0,0 @@
-import { type AppScopeKey, type ProgressCursorKey, type ProgressCursorRecord, type ProgressStore } from "./types.js";
-/**
- * Cap on how many cursors and pointers a single process will hold.
- *
- * Redis expires keys on its own; a plain Map does not, and a gateway that ran
- * for a week would hold one entry per (caller, application) it had ever
- * served. Insertion order is iteration order for a Map, so the oldest write
- * is the one dropped — a caller evicted this way re-reads the retained
- * history rather than losing anything, which is the same outcome as its
- * cursor having expired.
- */
-export declare const MAX_MEMORY_PROGRESS_ENTRIES = 2048;
-/**
- * Local-only fallback, matching the other in-memory stores.
- *
- * Not a second source of truth: two replicas with private maps would hand the
- * same caller two different positions in the same stream, which is exactly
- * the divergence Redis is required outside local to prevent.
- */
-export declare class MemoryProgressStore implements ProgressStore {
-    private readonly cursors;
-    private readonly lastActivity;
-    private readonly liveEdits;
-    getCursor(key: ProgressCursorKey): Promise<ProgressCursorRecord | undefined>;
-    getLastActivityAtMs(key: AppScopeKey): Promise<number | undefined>;
-    getLiveEditId(key: AppScopeKey): Promise<string | undefined>;
-    setCursor(input: ProgressCursorKey & {
-        record: ProgressCursorRecord;
-        ttlMs?: number;
-    }): Promise<void>;
-    setLastActivityAtMs(input: AppScopeKey & {
-        atMs: number;
-        ttlMs?: number;
-    }): Promise<void>;
-    setLiveEditId(input: AppScopeKey & {
-        liveEditId: string;
-        ttlMs?: number;
-    }): Promise<void>;
-}

package/dist/resume/memory-progress-store.js

@@ -1,82 +0,0 @@
-import { cursorKey, lastActivityKey, liveEditKey } from "./progress-key.js";
-import { DEFAULT_LIVE_EDIT_POINTER_TTL_MS, DEFAULT_PROGRESS_CURSOR_TTL_MS, } from "./types.js";
-/**
- * Cap on how many cursors and pointers a single process will hold.
- *
- * Redis expires keys on its own; a plain Map does not, and a gateway that ran
- * for a week would hold one entry per (caller, application) it had ever
- * served. Insertion order is iteration order for a Map, so the oldest write
- * is the one dropped — a caller evicted this way re-reads the retained
- * history rather than losing anything, which is the same outcome as its
- * cursor having expired.
- */
-export const MAX_MEMORY_PROGRESS_ENTRIES = 2_048;
-/**
- * Local-only fallback, matching the other in-memory stores.
- *
- * Not a second source of truth: two replicas with private maps would hand the
- * same caller two different positions in the same stream, which is exactly
- * the divergence Redis is required outside local to prevent.
- */
-export class MemoryProgressStore {
-    cursors = new Map();
-    lastActivity = new Map();
-    liveEdits = new Map();
-    async getCursor(key) {
-        return read(this.cursors, cursorKey(key));
-    }
-    async getLastActivityAtMs(key) {
-        return read(this.lastActivity, lastActivityKey(key));
-    }
-    async getLiveEditId(key) {
-        return read(this.liveEdits, liveEditKey(key));
-    }
-    async setCursor(input) {
-        write(this.cursors, cursorKey(input), input.record, {
-            ttlMs: input.ttlMs ?? DEFAULT_PROGRESS_CURSOR_TTL_MS,
-        });
-    }
-    async setLastActivityAtMs(input) {
-        // Same retention as a cursor: past that, there is no history left to
-        // measure a quiet spell against anyway.
-        write(this.lastActivity, lastActivityKey(input), input.atMs, {
-            ttlMs: input.ttlMs ?? DEFAULT_PROGRESS_CURSOR_TTL_MS,
-        });
-    }
-    async setLiveEditId(input) {
-        write(this.liveEdits, liveEditKey(input), input.liveEditId, {
-            ttlMs: input.ttlMs ?? DEFAULT_LIVE_EDIT_POINTER_TTL_MS,
-        });
-    }
-}
-function read(entries, key) {
-    const entry = entries.get(key);
-    if (!entry) {
-        return undefined;
-    }
-    if (entry.expiresAtMs <= Date.now()) {
-        entries.delete(key);
-        return undefined;
-    }
-    return entry.value;
-}
-function write(entries, key, value, options) {
-    const now = Date.now();
-    for (const [candidate, entry] of entries) {
-        if (entry.expiresAtMs <= now) {
-            entries.delete(candidate);
-        }
-    }
-    // Re-inserting moves the key to the end, so a cursor being written is never
-    // the next one evicted.
-    entries.delete(key);
-    entries.set(key, { expiresAtMs: now + options.ttlMs, value });
-    while (entries.size > MAX_MEMORY_PROGRESS_ENTRIES) {
-        const oldest = entries.keys().next();
-        if (oldest.done) {
-            return;
-        }
-        entries.delete(oldest.value);
-    }
-}
-//# sourceMappingURL=memory-progress-store.js.map

package/dist/resume/memory-progress-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"memory-progress-store.js","sourceRoot":"","sources":["../../src/resume/memory-progress-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EACL,gCAAgC,EAChC,8BAA8B,GAK/B,MAAM,YAAY,CAAC;AAOpB;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACb,OAAO,GAAG,IAAI,GAAG,EAAuC,CAAC;IACzD,YAAY,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE9D,KAAK,CAAC,SAAS,CACb,GAAsB;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAgB;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAgB;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,SAAS,CACb,KAA2E;QAE3E,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE;YAClD,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,8BAA8B;SACrD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,KAAqD;QAErD,qEAAqE;QACrE,wCAAwC;QACxC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE;YAC3D,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,8BAA8B;SACrD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,KAA2D;QAE3D,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE;YAC1D,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,gCAAgC;SACvD,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,IAAI,CAAI,OAA8B,EAAE,GAAW;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC;AACrB,CAAC;AAED,SAAS,KAAK,CACZ,OAA8B,EAC9B,GAAW,EACX,KAAQ,EACR,OAA0B;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,WAAW,IAAI,GAAG,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,4EAA4E;IAC5E,wBAAwB;IACxB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,OAAO,OAAO,CAAC,IAAI,GAAG,2BAA2B,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC"}

package/dist/resume/memory-recent-app-store.d.ts

@@ -1,14 +0,0 @@
-import { type RecentApp, type RecentAppStore } from "./types.js";
-export declare class MemoryRecentAppStore implements RecentAppStore {
-    private readonly byPrincipal;
-    get(input: {
-        organizationId: string;
-        userId: string;
-    }): Promise<RecentApp | undefined>;
-    set(input: {
-        applicationId: string;
-        organizationId: string;
-        ttlMs?: number;
-        userId: string;
-    }): Promise<void>;
-}

package/dist/resume/memory-recent-app-store.js

@@ -1,27 +0,0 @@
-import { DEFAULT_RECENT_APP_TTL_MS, } from "./types.js";
-function principalKey(organizationId, userId) {
-    return `${organizationId}:${userId}`;
-}
-export class MemoryRecentAppStore {
-    byPrincipal = new Map();
-    async get(input) {
-        const key = principalKey(input.organizationId, input.userId);
-        const entry = this.byPrincipal.get(key);
-        if (!entry) {
-            return undefined;
-        }
-        if (entry.expiresAtMs <= Date.now()) {
-            this.byPrincipal.delete(key);
-            return undefined;
-        }
-        return { applicationId: entry.applicationId };
-    }
-    async set(input) {
-        const ttlMs = input.ttlMs ?? DEFAULT_RECENT_APP_TTL_MS;
-        this.byPrincipal.set(principalKey(input.organizationId, input.userId), {
-            applicationId: input.applicationId,
-            expiresAtMs: Date.now() + ttlMs,
-        });
-    }
-}
-//# sourceMappingURL=memory-recent-app-store.js.map