@tangle-network/agent-app 0.43.43 → 0.43.44

package/dist/chat-store/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/chat-store/schema.ts","../../src/chat-store/store.ts"],"sourcesContent":["/**\n * Drizzle schema factory for the chat thread/message tables — the same\n * injection pattern as `createTeamTables`: the product owns the workspace\n * table; the factory wires the thread FK into it so the whole graph lives in\n * one drizzle schema with real cascade semantics. Column names, types,\n * defaults, enums, and indexes mirror legal's and gtm's hand-rolled `thread`/\n * `message` tables so a product with those tables adopts the factory without\n * rewriting rows; `tablePrefix` covers products that namespace (tax's\n * `chat_messages` style).\n *\n * The core is the superset the three products agree on. Divergences dropped,\n * and why:\n * - `thread.status` ('active'|'archived', legal+gtm) — archive semantics\n *   diverge (tax uses `archivedAt`); product-domain lifecycle → extra column.\n * - `thread.scopeKind`/`scopeKey`/`harness` (gtm) — artifact anchoring and\n *   harness pinning are product-domain → extra columns.\n * - tax's `tax_sessions` session columns (`taxYear`, `projectRef`,\n *   `agentSessionId`, `agentRuntime`, `agentHarness`, `profile`, `error`,\n *   `userId`) — sandbox-session state, not chat state → extra columns.\n * - `message.toolInput`/`toolOutput` (legal+gtm) — duplicate of the tool\n *   part's `state.input`/`state.output` inside `parts` (the shape `/stream`'s\n *   `normalizePersistedPart` owns); keeping both invites drift.\n * - `message.vaultFiles` (legal+gtm) — vault is product-domain → extra column.\n * - tax's re-declared `turn_events`/`turn_status` DDL — deliberately NOT here;\n *   `/stream`'s turn-buffer owns that DDL (`TURN_BUFFER_D1_SCHEMA_SQL`).\n *\n * Kept beyond the intersection: tax's per-message `model`/`inputTokens`/\n * `outputTokens`, extended to the full usage receipt the harness actually\n * reports in `step-finish` parts (`tokens {input, output, reasoning,\n * cache{read, write}}` + `cost`) — see `./parts`.\n *\n * `threadExtraColumns`/`messageExtraColumns` merge product columns into the\n * table definitions (the `/missions` opaque-extras pattern: the store writes\n * `extras` values verbatim in the SAME insert statement and never reads,\n * validates, or defaults them).\n *\n * SERVER-side module (D1/libsql/better-sqlite3 behind a worker or server\n * route) — but free of `node:` builtins on purpose: D1 workers have none.\n */\n\nimport { sql } from 'drizzle-orm'\nimport { index, integer, real, sqliteTable, text } from 'drizzle-orm/sqlite-core'\nimport type { AnySQLiteColumn, AnySQLiteTable, SQLiteColumnBuilderBase } from 'drizzle-orm/sqlite-core'\nimport type { ChatMessagePart } from './parts'\n\n/** A product table referenced by FK — only the `id` column is touched. */\nexport type ChatParentTable = AnySQLiteTable & { id: AnySQLiteColumn }\n\nexport interface CreateChatTablesOptions<\n  TThreadExtras extends Record<string, SQLiteColumnBuilderBase> = {},\n  TMessageExtras extends Record<string, SQLiteColumnBuilderBase> = {},\n> {\n  /** The product's workspace table — threads reference `workspaceTable.id`\n   *  with cascade. Omitted: `workspace_id` stays a plain indexed text column\n   *  (products whose tenant table lives in another database). */\n  workspaceTable?: ChatParentTable\n  /** Prefixes table AND index names (`'chat_'` → `chat_thread`,\n   *  `idx_chat_thread_workspace`) for products that namespace chat tables in a\n   *  shared database. Default: unprefixed `thread`/`message` (legal/gtm row\n   *  compatibility). */\n  tablePrefix?: string\n  /** Product columns merged into the thread table (the `/missions` extras\n   *  pattern) — e.g. a `status` lifecycle enum or gtm's scope columns. */\n  threadExtraColumns?: TThreadExtras\n  /** Product columns merged into the message table — e.g. legal's\n   *  `vault_files`. */\n  messageExtraColumns?: TMessageExtras\n}\n\nconst hexId = () => text('id').primaryKey().default(sql`(lower(hex(randomblob(16))))`)\n\nconst createdAt = () => integer('created_at', { mode: 'timestamp' }).notNull().default(sql`(unixepoch())`)\n\nconst updatedAt = () => integer('updated_at', { mode: 'timestamp' }).notNull().default(sql`(unixepoch())`)\n\nexport function createChatTables<\n  TThreadExtras extends Record<string, SQLiteColumnBuilderBase> = {},\n  TMessageExtras extends Record<string, SQLiteColumnBuilderBase> = {},\n>(options: CreateChatTablesOptions<TThreadExtras, TMessageExtras> = {}) {\n  const { workspaceTable, tablePrefix = '' } = options\n  const threadExtras = options.threadExtraColumns ?? ({} as TThreadExtras)\n  const messageExtras = options.messageExtraColumns ?? ({} as TMessageExtras)\n\n  const threads = sqliteTable(`${tablePrefix}thread`, {\n    id: hexId(),\n    workspaceId: workspaceTable\n      ? text('workspace_id').notNull().references(() => workspaceTable.id, { onDelete: 'cascade' })\n      : text('workspace_id').notNull(),\n    title: text('title').notNull(),\n    category: text('category'),\n    isPinned: integer('is_pinned', { mode: 'boolean' }).notNull().default(false),\n    createdAt: createdAt(),\n    updatedAt: updatedAt(),\n    ...threadExtras,\n  }, (table) => [\n    index(`idx_${tablePrefix}thread_workspace`).on(table.workspaceId),\n    // Supports the store's list ordering (updatedAt desc within a workspace).\n    index(`idx_${tablePrefix}thread_workspace_updated`).on(table.workspaceId, table.updatedAt),\n  ])\n\n  const messages = sqliteTable(`${tablePrefix}message`, {\n    id: hexId(),\n    threadId: text('thread_id').notNull().references(() => threads.id, { onDelete: 'cascade' }),\n    role: text('role', { enum: ['user', 'assistant', 'system', 'tool'] }).notNull(),\n    content: text('content').notNull(),\n    parts: text('parts', { mode: 'json' }).$type<ChatMessagePart[]>().default([]),\n    toolName: text('tool_name'),\n    model: text('model'),\n    // Usage receipt, flattened from the harness's `step-finish` shape\n    // (`tokens {input, output, reasoning, cache{read, write}}` + `cost`).\n    inputTokens: integer('input_tokens'),\n    outputTokens: integer('output_tokens'),\n    reasoningTokens: integer('reasoning_tokens'),\n    cacheReadTokens: integer('cache_read_tokens'),\n    cacheWriteTokens: integer('cache_write_tokens'),\n    costUsd: real('cost_usd'),\n    createdAt: createdAt(),\n    ...messageExtras,\n  }, (table) => [\n    index(`idx_${tablePrefix}message_thread`).on(table.threadId),\n    index(`idx_${tablePrefix}message_thread_created`).on(table.threadId, table.createdAt),\n  ])\n\n  return { threads, messages }\n}\n\n/**\n * The base (no-extras) table pair, pinned via an instantiation expression:\n * `ReturnType<typeof createChatTables>` on the bare generic substitutes the\n * extras params with their CONSTRAINT (`Record<string,\n * SQLiteColumnBuilderBase>`), stamping an index signature into the column map\n * that widens every concrete column to `unknown`/`notNull: false` — concrete\n * factory results then fail `extends ChatTables`. (`teams`' `createTeamTables`\n * is non-generic, so its plain `ReturnType` never hits this.)\n */\nexport type ChatTables = ReturnType<typeof createChatTables<{}, {}>>\n\nexport type ChatThreadRow = ChatTables['threads']['$inferSelect']\nexport type ChatMessageRow = ChatTables['messages']['$inferSelect']\nexport type NewChatThreadRow = ChatTables['threads']['$inferInsert']\nexport type NewChatMessageRow = ChatTables['messages']['$inferInsert']\n","/**\n * Typed CRUD over the tables from `createChatTables`. Works against any\n * SQLite drizzle driver (D1, libsql, better-sqlite3) — builders are awaited,\n * never `.run()`/`.all()`, so sync and async drivers behave identically.\n *\n * Access control is an injected seam, never an import: single-thread routes\n * check workspace access themselves (they know the thread), while\n * `bulkDeleteThreads` REQUIRES an `assertAccess` callback because one request\n * can span workspaces — it is called once per distinct workspace and any\n * throw rejects the whole request before a single delete runs (fail-closed;\n * legal's bulk-delete semantics).\n *\n * Deletes run messages-first in ONE `db.batch` round trip when the driver has\n * one (D1, libsql), so a partial failure never leaves orphaned rows behind a\n * deleted thread; drivers without `batch` (better-sqlite3) fall back to\n * sequential awaits in the same order.\n */\n\nimport { asc, desc, eq, inArray, sql } from 'drizzle-orm'\nimport type { BaseSQLiteDatabase } from 'drizzle-orm/sqlite-core'\nimport { BULK_DELETE_MAX_THREADS, ChatStoreInputError, threadTitleFromMessage } from './core'\nimport type { ChatMessagePart } from './parts'\nimport type { ChatMessageRow, ChatTables, ChatThreadRow, NewChatMessageRow, NewChatThreadRow } from './schema'\n\n/** Any SQLite drizzle database — `any` erases the driver-specific run-result\n *  and schema generics so better-sqlite3, D1, and libsql handles all fit.\n *  `batch` is structural: present on D1/libsql drizzle instances. */\nexport type ChatDatabase = BaseSQLiteDatabase<'sync' | 'async', any, any> & {\n  batch?: (statements: [unknown, ...unknown[]]) => Promise<unknown[]>\n}\n\n/** Product-injected access check. Throw to deny; the store never interprets\n *  users or roles itself. */\nexport type WorkspaceAccessCheck = (workspaceId: string) => void | Promise<void>\n\nexport interface ListThreadsInput {\n  workspaceId: string\n  /** Clamped to 1..200; default 50 (legal's list route semantics). */\n  limit?: number\n  /** Clamped to >= 0; default 0. */\n  offset?: number\n}\n\nexport interface ListThreadsResult<TThread = ChatThreadRow> {\n  threads: TThread[]\n  total: number\n  limit: number\n  offset: number\n}\n\nexport interface CreateThreadInput {\n  workspaceId: string\n  /** Title source when `title` is absent: first non-empty line, 80-char cap\n   *  (`threadTitleFromMessage`). */\n  firstMessage?: string\n  /** Explicit title; still normalized through `threadTitleFromMessage` so a\n   *  multi-page paste never becomes a sidebar entry. */\n  title?: string\n  category?: string | null\n  isPinned?: boolean\n  /** Opaque product-column values written verbatim in the SAME insert (the\n   *  `/missions` extras pattern). Never read, validated, or defaulted here. */\n  extras?: Record<string, unknown>\n}\n\nexport interface AppendMessageInput {\n  threadId: string\n  role: 'user' | 'assistant' | 'system' | 'tool'\n  content: string\n  parts?: ChatMessagePart[]\n  toolName?: string | null\n  model?: string | null\n  inputTokens?: number | null\n  outputTokens?: number | null\n  reasoningTokens?: number | null\n  cacheReadTokens?: number | null\n  cacheWriteTokens?: number | null\n  costUsd?: number | null\n  /** Opaque product-column values written verbatim in the SAME insert. */\n  extras?: Record<string, unknown>\n}\n\nexport interface ListMessagesOptions {\n  limit?: number\n  offset?: number\n}\n\nexport interface BulkDeleteThreadsInput {\n  ids: string[]\n  /** Called once per distinct workspace the ids touch, before ANY delete. */\n  assertAccess: WorkspaceAccessCheck\n}\n\nexport interface ChatStore<TThread = ChatThreadRow, TMessage = ChatMessageRow> {\n  listThreads(input: ListThreadsInput): Promise<ListThreadsResult<TThread>>\n  getThread(threadId: string): Promise<TThread | null>\n  createThread(input: CreateThreadInput): Promise<TThread>\n  renameThread(threadId: string, title: string): Promise<TThread | null>\n  pinThread(threadId: string, isPinned: boolean): Promise<TThread | null>\n  /** Messages + thread in one batch. Resolves false when the thread does not\n   *  exist. `assertAccess` (optional) receives the thread's workspaceId before\n   *  the delete — single-thread callers usually check access themselves. */\n  deleteThread(threadId: string, options?: { assertAccess?: WorkspaceAccessCheck }): Promise<boolean>\n  bulkDeleteThreads(input: BulkDeleteThreadsInput): Promise<{ deleted: number }>\n  /** Ordered oldest-first: `created_at`, then rowid (insertion order within a\n   *  same-second burst — a user+assistant pair lands in one epoch second). */\n  listMessages(threadId: string, options?: ListMessagesOptions): Promise<TMessage[]>\n  /** Inserts the message and bumps the thread's `updatedAt` in one batch so\n   *  workspace recency sorts stay truthful. */\n  appendMessage(input: AppendMessageInput): Promise<TMessage>\n}\n\n/** One driver round trip when `db.batch` exists; sequential awaits in the\n *  given order otherwise. Statement order is the caller's integrity contract\n *  (children before parents). */\nasync function runStatements(\n  db: ChatDatabase,\n  statements: [unknown, ...unknown[]],\n): Promise<unknown[]> {\n  if (typeof db.batch === 'function') {\n    return await db.batch(statements)\n  }\n  const results: unknown[] = []\n  for (const statement of statements) results.push(await statement)\n  return results\n}\n\nfunction clampLimit(limit: number | undefined, fallback: number, max: number): number {\n  const value = Number.isFinite(limit) ? Math.trunc(limit as number) : fallback\n  return Math.min(Math.max(value, 1), max)\n}\n\nfunction clampOffset(offset: number | undefined): number {\n  const value = Number.isFinite(offset) ? Math.trunc(offset as number) : 0\n  return Math.max(value, 0)\n}\n\nexport function createChatStore<TTables extends ChatTables>(\n  db: ChatDatabase,\n  tables: TTables,\n): ChatStore<TTables['threads']['$inferSelect'], TTables['messages']['$inferSelect']> {\n  type TThread = TTables['threads']['$inferSelect']\n  type TMessage = TTables['messages']['$inferSelect']\n  const threads = tables.threads as ChatTables['threads']\n  const messages = tables.messages as ChatTables['messages']\n\n  return {\n    async listThreads(input) {\n      const limit = clampLimit(input.limit, 50, 200)\n      const offset = clampOffset(input.offset)\n      const scope = eq(threads.workspaceId, input.workspaceId)\n      const [list, [countRow]] = await Promise.all([\n        db.select().from(threads).where(scope)\n          // `id` tiebreak keeps pagination stable across same-second updates.\n          .orderBy(desc(threads.updatedAt), asc(threads.id))\n          .limit(limit)\n          .offset(offset),\n        db.select({ total: sql<number>`count(*)` }).from(threads).where(scope),\n      ])\n      return { threads: list as TThread[], total: countRow?.total ?? 0, limit, offset }\n    },\n\n    async getThread(threadId) {\n      const [row] = await db.select().from(threads).where(eq(threads.id, threadId)).limit(1)\n      return (row as TThread | undefined) ?? null\n    },\n\n    async createThread(input) {\n      const title = threadTitleFromMessage(input.title ?? input.firstMessage ?? '')\n      const values = {\n        workspaceId: input.workspaceId,\n        title,\n        ...(input.category !== undefined ? { category: input.category } : {}),\n        ...(input.isPinned !== undefined ? { isPinned: input.isPinned } : {}),\n        ...(input.extras ?? {}),\n      } as NewChatThreadRow\n      const [row] = await db.insert(threads).values(values).returning()\n      if (!row) throw new Error('thread insert returned no row')\n      return row as TThread\n    },\n\n    async renameThread(threadId, title) {\n      const trimmed = title.trim()\n      if (!trimmed) throw new ChatStoreInputError('Missing title')\n      const [row] = await db.update(threads)\n        .set({ title: trimmed, updatedAt: new Date() })\n        .where(eq(threads.id, threadId))\n        .returning()\n      return (row as TThread | undefined) ?? null\n    },\n\n    async pinThread(threadId, isPinned) {\n      const [row] = await db.update(threads)\n        .set({ isPinned, updatedAt: new Date() })\n        .where(eq(threads.id, threadId))\n        .returning()\n      return (row as TThread | undefined) ?? null\n    },\n\n    async deleteThread(threadId, options) {\n      const [existing] = await db.select({ id: threads.id, workspaceId: threads.workspaceId })\n        .from(threads)\n        .where(eq(threads.id, threadId))\n        .limit(1)\n      if (!existing) return false\n      if (options?.assertAccess) await options.assertAccess(existing.workspaceId)\n      // Messages first so a partial failure never leaves orphaned rows behind\n      // a deleted thread.\n      await runStatements(db, [\n        db.delete(messages).where(eq(messages.threadId, threadId)),\n        db.delete(threads).where(eq(threads.id, threadId)),\n      ])\n      return true\n    },\n\n    async bulkDeleteThreads(input) {\n      const { ids, assertAccess } = input\n      if (typeof assertAccess !== 'function') throw new ChatStoreInputError('Missing assertAccess')\n      if (!Array.isArray(ids) || ids.length === 0 || !ids.every((id) => typeof id === 'string' && id.length > 0)) {\n        throw new ChatStoreInputError('Missing ids')\n      }\n      if (ids.length > BULK_DELETE_MAX_THREADS) {\n        throw new ChatStoreInputError(`Too many ids (max ${BULK_DELETE_MAX_THREADS})`)\n      }\n\n      const rows = await db.select({ id: threads.id, workspaceId: threads.workspaceId })\n        .from(threads)\n        .where(inArray(threads.id, ids))\n      if (rows.length === 0) return { deleted: 0 }\n\n      // Access is verified once per workspace the ids touch. Fail-closed: one\n      // inaccessible workspace rejects the whole request before any delete.\n      // Sorted so the check order (and therefore which denial surfaces) is\n      // deterministic — row order follows random hex ids and varies per run.\n      const workspaceIds = [...new Set(rows.map((row) => row.workspaceId))].sort()\n      for (const workspaceId of workspaceIds) {\n        await assertAccess(workspaceId)\n      }\n\n      const foundIds = rows.map((row) => row.id)\n      await runStatements(db, [\n        db.delete(messages).where(inArray(messages.threadId, foundIds)),\n        db.delete(threads).where(inArray(threads.id, foundIds)),\n      ])\n      return { deleted: foundIds.length }\n    },\n\n    async listMessages(threadId, options) {\n      const query = db.select().from(messages)\n        .where(eq(messages.threadId, threadId))\n        .orderBy(asc(messages.createdAt), sql`rowid`)\n        .$dynamic()\n      if (options?.limit !== undefined) query.limit(clampLimit(options.limit, 1, 1000))\n      if (options?.offset !== undefined) query.offset(clampOffset(options.offset))\n      return await query as TMessage[]\n    },\n\n    async appendMessage(input) {\n      const values = {\n        threadId: input.threadId,\n        role: input.role,\n        content: input.content,\n        ...(input.parts !== undefined ? { parts: input.parts } : {}),\n        ...(input.toolName !== undefined ? { toolName: input.toolName } : {}),\n        ...(input.model !== undefined ? { model: input.model } : {}),\n        ...(input.inputTokens !== undefined ? { inputTokens: input.inputTokens } : {}),\n        ...(input.outputTokens !== undefined ? { outputTokens: input.outputTokens } : {}),\n        ...(input.reasoningTokens !== undefined ? { reasoningTokens: input.reasoningTokens } : {}),\n        ...(input.cacheReadTokens !== undefined ? { cacheReadTokens: input.cacheReadTokens } : {}),\n        ...(input.cacheWriteTokens !== undefined ? { cacheWriteTokens: input.cacheWriteTokens } : {}),\n        ...(input.costUsd !== undefined ? { costUsd: input.costUsd } : {}),\n        ...(input.extras ?? {}),\n      } as NewChatMessageRow\n      const [insertResult] = await runStatements(db, [\n        db.insert(messages).values(values).returning(),\n        db.update(threads).set({ updatedAt: new Date() }).where(eq(threads.id, input.threadId)),\n      ])\n      const row = (insertResult as TMessage[] | undefined)?.[0]\n      if (!row) throw new Error('message insert returned no row')\n      return row\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAwCA,SAAS,WAAW;AACpB,SAAS,OAAO,SAAS,MAAM,aAAa,YAAY;AA4BxD,IAAM,QAAQ,MAAM,KAAK,IAAI,EAAE,WAAW,EAAE,QAAQ,iCAAiC;AAErF,IAAM,YAAY,MAAM,QAAQ,cAAc,EAAE,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,kBAAkB;AAEzG,IAAM,YAAY,MAAM,QAAQ,cAAc,EAAE,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,kBAAkB;AAElG,SAAS,iBAGd,UAAkE,CAAC,GAAG;AACtE,QAAM,EAAE,gBAAgB,cAAc,GAAG,IAAI;AAC7C,QAAM,eAAe,QAAQ,sBAAuB,CAAC;AACrD,QAAM,gBAAgB,QAAQ,uBAAwB,CAAC;AAEvD,QAAM,UAAU,YAAY,GAAG,WAAW,UAAU;AAAA,IAClD,IAAI,MAAM;AAAA,IACV,aAAa,iBACT,KAAK,cAAc,EAAE,QAAQ,EAAE,WAAW,MAAM,eAAe,IAAI,EAAE,UAAU,UAAU,CAAC,IAC1F,KAAK,cAAc,EAAE,QAAQ;AAAA,IACjC,OAAO,KAAK,OAAO,EAAE,QAAQ;AAAA,IAC7B,UAAU,KAAK,UAAU;AAAA,IACzB,UAAU,QAAQ,aAAa,EAAE,MAAM,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA,IAC3E,WAAW,UAAU;AAAA,IACrB,WAAW,UAAU;AAAA,IACrB,GAAG;AAAA,EACL,GAAG,CAAC,UAAU;AAAA,IACZ,MAAM,OAAO,WAAW,kBAAkB,EAAE,GAAG,MAAM,WAAW;AAAA;AAAA,IAEhE,MAAM,OAAO,WAAW,0BAA0B,EAAE,GAAG,MAAM,aAAa,MAAM,SAAS;AAAA,EAC3F,CAAC;AAED,QAAM,WAAW,YAAY,GAAG,WAAW,WAAW;AAAA,IACpD,IAAI,MAAM;AAAA,IACV,UAAU,KAAK,WAAW,EAAE,QAAQ,EAAE,WAAW,MAAM,QAAQ,IAAI,EAAE,UAAU,UAAU,CAAC;AAAA,IAC1F,MAAM,KAAK,QAAQ,EAAE,MAAM,CAAC,QAAQ,aAAa,UAAU,MAAM,EAAE,CAAC,EAAE,QAAQ;AAAA,IAC9E,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,OAAO,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC,EAAE,MAAyB,EAAE,QAAQ,CAAC,CAAC;AAAA,IAC5E,UAAU,KAAK,WAAW;AAAA,IAC1B,OAAO,KAAK,OAAO;AAAA;AAAA;AAAA,IAGnB,aAAa,QAAQ,cAAc;AAAA,IACnC,cAAc,QAAQ,eAAe;AAAA,IACrC,iBAAiB,QAAQ,kBAAkB;AAAA,IAC3C,iBAAiB,QAAQ,mBAAmB;AAAA,IAC5C,kBAAkB,QAAQ,oBAAoB;AAAA,IAC9C,SAAS,KAAK,UAAU;AAAA,IACxB,WAAW,UAAU;AAAA,IACrB,GAAG;AAAA,EACL,GAAG,CAAC,UAAU;AAAA,IACZ,MAAM,OAAO,WAAW,gBAAgB,EAAE,GAAG,MAAM,QAAQ;AAAA,IAC3D,MAAM,OAAO,WAAW,wBAAwB,EAAE,GAAG,MAAM,UAAU,MAAM,SAAS;AAAA,EACtF,CAAC;AAED,SAAO,EAAE,SAAS,SAAS;AAC7B;;;AC1GA,SAAS,KAAK,MAAM,IAAI,SAAS,OAAAA,YAAW;AAiG5C,eAAe,cACb,IACA,YACoB;AACpB,MAAI,OAAO,GAAG,UAAU,YAAY;AAClC,WAAO,MAAM,GAAG,MAAM,UAAU;AAAA,EAClC;AACA,QAAM,UAAqB,CAAC;AAC5B,aAAW,aAAa,WAAY,SAAQ,KAAK,MAAM,SAAS;AAChE,SAAO;AACT;AAEA,SAAS,WAAW,OAA2B,UAAkB,KAAqB;AACpF,QAAM,QAAQ,OAAO,SAAS,KAAK,IAAI,KAAK,MAAM,KAAe,IAAI;AACrE,SAAO,KAAK,IAAI,KAAK,IAAI,OAAO,CAAC,GAAG,GAAG;AACzC;AAEA,SAAS,YAAY,QAAoC;AACvD,QAAM,QAAQ,OAAO,SAAS,MAAM,IAAI,KAAK,MAAM,MAAgB,IAAI;AACvE,SAAO,KAAK,IAAI,OAAO,CAAC;AAC1B;AAEO,SAAS,gBACd,IACA,QACoF;AAGpF,QAAM,UAAU,OAAO;AACvB,QAAM,WAAW,OAAO;AAExB,SAAO;AAAA,IACL,MAAM,YAAY,OAAO;AACvB,YAAM,QAAQ,WAAW,MAAM,OAAO,IAAI,GAAG;AAC7C,YAAM,SAAS,YAAY,MAAM,MAAM;AACvC,YAAM,QAAQ,GAAG,QAAQ,aAAa,MAAM,WAAW;AACvD,YAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,QAC3C,GAAG,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,KAAK,EAElC,QAAQ,KAAK,QAAQ,SAAS,GAAG,IAAI,QAAQ,EAAE,CAAC,EAChD,MAAM,KAAK,EACX,OAAO,MAAM;AAAA,QAChB,GAAG,OAAO,EAAE,OAAOC,eAAsB,CAAC,EAAE,KAAK,OAAO,EAAE,MAAM,KAAK;AAAA,MACvE,CAAC;AACD,aAAO,EAAE,SAAS,MAAmB,OAAO,UAAU,SAAS,GAAG,OAAO,OAAO;AAAA,IAClF;AAAA,IAEA,MAAM,UAAU,UAAU;AACxB,YAAM,CAAC,GAAG,IAAI,MAAM,GAAG,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,GAAG,QAAQ,IAAI,QAAQ,CAAC,EAAE,MAAM,CAAC;AACrF,aAAQ,OAA+B;AAAA,IACzC;AAAA,IAEA,MAAM,aAAa,OAAO;AACxB,YAAM,QAAQ,uBAAuB,MAAM,SAAS,MAAM,gBAAgB,EAAE;AAC5E,YAAM,SAAS;AAAA,QACb,aAAa,MAAM;AAAA,QACnB;AAAA,QACA,GAAI,MAAM,aAAa,SAAY,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,QACnE,GAAI,MAAM,aAAa,SAAY,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,QACnE,GAAI,MAAM,UAAU,CAAC;AAAA,MACvB;AACA,YAAM,CAAC,GAAG,IAAI,MAAM,GAAG,OAAO,OAAO,EAAE,OAAO,MAAM,EAAE,UAAU;AAChE,UAAI,CAAC,IAAK,OAAM,IAAI,MAAM,+BAA+B;AACzD,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,aAAa,UAAU,OAAO;AAClC,YAAM,UAAU,MAAM,KAAK;AAC3B,UAAI,CAAC,QAAS,OAAM,IAAI,oBAAoB,eAAe;AAC3D,YAAM,CAAC,GAAG,IAAI,MAAM,GAAG,OAAO,OAAO,EAClC,IAAI,EAAE,OAAO,SAAS,WAAW,oBAAI,KAAK,EAAE,CAAC,EAC7C,MAAM,GAAG,QAAQ,IAAI,QAAQ,CAAC,EAC9B,UAAU;AACb,aAAQ,OAA+B;AAAA,IACzC;AAAA,IAEA,MAAM,UAAU,UAAU,UAAU;AAClC,YAAM,CAAC,GAAG,IAAI,MAAM,GAAG,OAAO,OAAO,EAClC,IAAI,EAAE,UAAU,WAAW,oBAAI,KAAK,EAAE,CAAC,EACvC,MAAM,GAAG,QAAQ,IAAI,QAAQ,CAAC,EAC9B,UAAU;AACb,aAAQ,OAA+B;AAAA,IACzC;AAAA,IAEA,MAAM,aAAa,UAAU,SAAS;AACpC,YAAM,CAAC,QAAQ,IAAI,MAAM,GAAG,OAAO,EAAE,IAAI,QAAQ,IAAI,aAAa,QAAQ,YAAY,CAAC,EACpF,KAAK,OAAO,EACZ,MAAM,GAAG,QAAQ,IAAI,QAAQ,CAAC,EAC9B,MAAM,CAAC;AACV,UAAI,CAAC,SAAU,QAAO;AACtB,UAAI,SAAS,aAAc,OAAM,QAAQ,aAAa,SAAS,WAAW;AAG1E,YAAM,cAAc,IAAI;AAAA,QACtB,GAAG,OAAO,QAAQ,EAAE,MAAM,GAAG,SAAS,UAAU,QAAQ,CAAC;AAAA,QACzD,GAAG,OAAO,OAAO,EAAE,MAAM,GAAG,QAAQ,IAAI,QAAQ,CAAC;AAAA,MACnD,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,kBAAkB,OAAO;AAC7B,YAAM,EAAE,KAAK,aAAa,IAAI;AAC9B,UAAI,OAAO,iBAAiB,WAAY,OAAM,IAAI,oBAAoB,sBAAsB;AAC5F,UAAI,CAAC,MAAM,QAAQ,GAAG,KAAK,IAAI,WAAW,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC,GAAG;AAC1G,cAAM,IAAI,oBAAoB,aAAa;AAAA,MAC7C;AACA,UAAI,IAAI,SAAS,yBAAyB;AACxC,cAAM,IAAI,oBAAoB,qBAAqB,uBAAuB,GAAG;AAAA,MAC/E;AAEA,YAAM,OAAO,MAAM,GAAG,OAAO,EAAE,IAAI,QAAQ,IAAI,aAAa,QAAQ,YAAY,CAAC,EAC9E,KAAK,OAAO,EACZ,MAAM,QAAQ,QAAQ,IAAI,GAAG,CAAC;AACjC,UAAI,KAAK,WAAW,EAAG,QAAO,EAAE,SAAS,EAAE;AAM3C,YAAM,eAAe,CAAC,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,CAAC,EAAE,KAAK;AAC3E,iBAAW,eAAe,cAAc;AACtC,cAAM,aAAa,WAAW;AAAA,MAChC;AAEA,YAAM,WAAW,KAAK,IAAI,CAAC,QAAQ,IAAI,EAAE;AACzC,YAAM,cAAc,IAAI;AAAA,QACtB,GAAG,OAAO,QAAQ,EAAE,MAAM,QAAQ,SAAS,UAAU,QAAQ,CAAC;AAAA,QAC9D,GAAG,OAAO,OAAO,EAAE,MAAM,QAAQ,QAAQ,IAAI,QAAQ,CAAC;AAAA,MACxD,CAAC;AACD,aAAO,EAAE,SAAS,SAAS,OAAO;AAAA,IACpC;AAAA,IAEA,MAAM,aAAa,UAAU,SAAS;AACpC,YAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,QAAQ,EACpC,MAAM,GAAG,SAAS,UAAU,QAAQ,CAAC,EACrC,QAAQ,IAAI,SAAS,SAAS,GAAGA,WAAU,EAC3C,SAAS;AACZ,UAAI,SAAS,UAAU,OAAW,OAAM,MAAM,WAAW,QAAQ,OAAO,GAAG,GAAI,CAAC;AAChF,UAAI,SAAS,WAAW,OAAW,OAAM,OAAO,YAAY,QAAQ,MAAM,CAAC;AAC3E,aAAO,MAAM;AAAA,IACf;AAAA,IAEA,MAAM,cAAc,OAAO;AACzB,YAAM,SAAS;AAAA,QACb,UAAU,MAAM;AAAA,QAChB,MAAM,MAAM;AAAA,QACZ,SAAS,MAAM;AAAA,QACf,GAAI,MAAM,UAAU,SAAY,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,QAC1D,GAAI,MAAM,aAAa,SAAY,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,QACnE,GAAI,MAAM,UAAU,SAAY,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,QAC1D,GAAI,MAAM,gBAAgB,SAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,QAC5E,GAAI,MAAM,iBAAiB,SAAY,EAAE,cAAc,MAAM,aAAa,IAAI,CAAC;AAAA,QAC/E,GAAI,MAAM,oBAAoB,SAAY,EAAE,iBAAiB,MAAM,gBAAgB,IAAI,CAAC;AAAA,QACxF,GAAI,MAAM,oBAAoB,SAAY,EAAE,iBAAiB,MAAM,gBAAgB,IAAI,CAAC;AAAA,QACxF,GAAI,MAAM,qBAAqB,SAAY,EAAE,kBAAkB,MAAM,iBAAiB,IAAI,CAAC;AAAA,QAC3F,GAAI,MAAM,YAAY,SAAY,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,QAChE,GAAI,MAAM,UAAU,CAAC;AAAA,MACvB;AACA,YAAM,CAAC,YAAY,IAAI,MAAM,cAAc,IAAI;AAAA,QAC7C,GAAG,OAAO,QAAQ,EAAE,OAAO,MAAM,EAAE,UAAU;AAAA,QAC7C,GAAG,OAAO,OAAO,EAAE,IAAI,EAAE,WAAW,oBAAI,KAAK,EAAE,CAAC,EAAE,MAAM,GAAG,QAAQ,IAAI,MAAM,QAAQ,CAAC;AAAA,MACxF,CAAC;AACD,YAAM,MAAO,eAA0C,CAAC;AACxD,UAAI,CAAC,IAAK,OAAM,IAAI,MAAM,gCAAgC;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":["sql","sql"]}
+{"version":3,"sources":["../../src/chat-store/schema.ts","../../src/chat-store/store.ts"],"sourcesContent":["/**\n * Drizzle schema factory for the chat thread/message tables — the same\n * injection pattern as `createTeamTables`: the product owns the workspace\n * table; the factory wires the thread FK into it so the whole graph lives in\n * one drizzle schema with real cascade semantics. Column names, types,\n * defaults, enums, and indexes mirror legal's and gtm's hand-rolled `thread`/\n * `message` tables so a product with those tables adopts the factory without\n * rewriting rows; `tablePrefix` covers products that namespace (tax's\n * `chat_messages` style).\n *\n * The core is the superset the three products agree on. Divergences dropped,\n * and why:\n * - `thread.status` ('active'|'archived', legal+gtm) — archive semantics\n *   diverge (tax uses `archivedAt`); product-domain lifecycle → extra column.\n * - `thread.scopeKind`/`scopeKey`/`harness` (gtm) — artifact anchoring and\n *   harness pinning are product-domain → extra columns.\n * - tax's `tax_sessions` session columns (`taxYear`, `projectRef`,\n *   `agentSessionId`, `agentRuntime`, `agentHarness`, `profile`, `error`,\n *   `userId`) — sandbox-session state, not chat state → extra columns.\n * - `message.toolInput`/`toolOutput` (legal+gtm) — duplicate of the tool\n *   part's `state.input`/`state.output` inside `parts` (the shape `/stream`'s\n *   `normalizePersistedPart` owns); keeping both invites drift.\n * - `message.vaultFiles` (legal+gtm) — vault is product-domain → extra column.\n * - tax's re-declared `turn_events`/`turn_status` DDL — deliberately NOT here;\n *   `/stream`'s turn-buffer owns that DDL (`TURN_BUFFER_D1_SCHEMA_SQL`).\n *\n * Kept beyond the intersection: tax's per-message `model`/`inputTokens`/\n * `outputTokens`, extended to the full usage receipt the harness actually\n * reports in `step-finish` parts (`tokens {input, output, reasoning,\n * cache{read, write}}` + `cost`) — see `./parts`.\n *\n * `threadExtraColumns`/`messageExtraColumns` merge product columns into the\n * table definitions (the `/missions` opaque-extras pattern: the store writes\n * `extras` values verbatim in the SAME insert statement and never reads,\n * validates, or defaults them).\n *\n * SERVER-side module (D1/libsql/better-sqlite3 behind a worker or server\n * route) — but free of `node:` builtins on purpose: D1 workers have none.\n */\n\nimport { sql } from 'drizzle-orm'\nimport { index, integer, real, sqliteTable, text } from 'drizzle-orm/sqlite-core'\nimport type { AnySQLiteColumn, AnySQLiteTable, SQLiteColumnBuilderBase } from 'drizzle-orm/sqlite-core'\nimport type { ChatMessagePart } from './parts'\n\n/** A product table referenced by FK — only the `id` column is touched. */\nexport type ChatParentTable = AnySQLiteTable & { id: AnySQLiteColumn }\n\nexport interface CreateChatTablesOptions<\n  TThreadExtras extends Record<string, SQLiteColumnBuilderBase> = {},\n  TMessageExtras extends Record<string, SQLiteColumnBuilderBase> = {},\n> {\n  /** The product's workspace table — threads reference `workspaceTable.id`\n   *  with cascade. Omitted: `workspace_id` stays a plain indexed text column\n   *  (products whose tenant table lives in another database). */\n  workspaceTable?: ChatParentTable\n  /** Prefixes table AND index names (`'chat_'` → `chat_thread`,\n   *  `idx_chat_thread_workspace`) for products that namespace chat tables in a\n   *  shared database. Default: unprefixed `thread`/`message` (legal/gtm row\n   *  compatibility). */\n  tablePrefix?: string\n  /** Product columns merged into the thread table (the `/missions` extras\n   *  pattern) — e.g. a `status` lifecycle enum or gtm's scope columns. */\n  threadExtraColumns?: TThreadExtras\n  /** Product columns merged into the message table — e.g. legal's\n   *  `vault_files`. */\n  messageExtraColumns?: TMessageExtras\n}\n\nconst hexId = () => text('id').primaryKey().default(sql`(lower(hex(randomblob(16))))`)\n\nconst createdAt = () => integer('created_at', { mode: 'timestamp' }).notNull().default(sql`(unixepoch())`)\n\nconst updatedAt = () => integer('updated_at', { mode: 'timestamp' }).notNull().default(sql`(unixepoch())`)\n\nexport function createChatTables<\n  TThreadExtras extends Record<string, SQLiteColumnBuilderBase> = {},\n  TMessageExtras extends Record<string, SQLiteColumnBuilderBase> = {},\n>(options: CreateChatTablesOptions<TThreadExtras, TMessageExtras> = {}) {\n  const { workspaceTable, tablePrefix = '' } = options\n  const threadExtras = options.threadExtraColumns ?? ({} as TThreadExtras)\n  const messageExtras = options.messageExtraColumns ?? ({} as TMessageExtras)\n\n  const threads = sqliteTable(`${tablePrefix}thread`, {\n    id: hexId(),\n    workspaceId: workspaceTable\n      ? text('workspace_id').notNull().references(() => workspaceTable.id, { onDelete: 'cascade' })\n      : text('workspace_id').notNull(),\n    title: text('title').notNull(),\n    category: text('category'),\n    isPinned: integer('is_pinned', { mode: 'boolean' }).notNull().default(false),\n    createdAt: createdAt(),\n    updatedAt: updatedAt(),\n    ...threadExtras,\n  }, (table) => [\n    index(`idx_${tablePrefix}thread_workspace`).on(table.workspaceId),\n    // Supports the store's list ordering (updatedAt desc within a workspace).\n    index(`idx_${tablePrefix}thread_workspace_updated`).on(table.workspaceId, table.updatedAt),\n  ])\n\n  const messages = sqliteTable(`${tablePrefix}message`, {\n    id: hexId(),\n    threadId: text('thread_id').notNull().references(() => threads.id, { onDelete: 'cascade' }),\n    role: text('role', { enum: ['user', 'assistant', 'system', 'tool'] }).notNull(),\n    content: text('content').notNull(),\n    parts: text('parts', { mode: 'json' }).$type<ChatMessagePart[]>().default([]),\n    toolName: text('tool_name'),\n    model: text('model'),\n    // Usage receipt, flattened from the harness's `step-finish` shape\n    // (`tokens {input, output, reasoning, cache{read, write}}` + `cost`).\n    inputTokens: integer('input_tokens'),\n    outputTokens: integer('output_tokens'),\n    reasoningTokens: integer('reasoning_tokens'),\n    cacheReadTokens: integer('cache_read_tokens'),\n    cacheWriteTokens: integer('cache_write_tokens'),\n    costUsd: real('cost_usd'),\n    createdAt: createdAt(),\n    ...messageExtras,\n  }, (table) => [\n    index(`idx_${tablePrefix}message_thread`).on(table.threadId),\n    index(`idx_${tablePrefix}message_thread_created`).on(table.threadId, table.createdAt),\n  ])\n\n  return { threads, messages }\n}\n\n/**\n * The base (no-extras) table pair, pinned via an instantiation expression:\n * `ReturnType<typeof createChatTables>` on the bare generic substitutes the\n * extras params with their CONSTRAINT (`Record<string,\n * SQLiteColumnBuilderBase>`), stamping an index signature into the column map\n * that widens every concrete column to `unknown`/`notNull: false` — concrete\n * factory results then fail `extends ChatTables`. (`teams`' `createTeamTables`\n * is non-generic, so its plain `ReturnType` never hits this.)\n */\nexport type ChatTables = ReturnType<typeof createChatTables<{}, {}>>\n\nexport type ChatThreadRow = ChatTables['threads']['$inferSelect']\nexport type ChatMessageRow = ChatTables['messages']['$inferSelect']\nexport type NewChatThreadRow = ChatTables['threads']['$inferInsert']\nexport type NewChatMessageRow = ChatTables['messages']['$inferInsert']\n","/**\n * Typed CRUD over the tables from `createChatTables`. Works against any\n * SQLite drizzle driver (D1, libsql, better-sqlite3) — builders are awaited,\n * never `.run()`/`.all()`, so sync and async drivers behave identically.\n *\n * Access control is an injected seam, never an import: single-thread routes\n * check workspace access themselves (they know the thread), while\n * `bulkDeleteThreads` REQUIRES an `assertAccess` callback because one request\n * can span workspaces — it is called once per distinct workspace and any\n * throw rejects the whole request before a single delete runs (fail-closed;\n * legal's bulk-delete semantics).\n *\n * Deletes run messages-first in ONE `db.batch` round trip when the driver has\n * one (D1, libsql), so a partial failure never leaves orphaned rows behind a\n * deleted thread; drivers without `batch` (better-sqlite3) fall back to\n * sequential awaits in the same order.\n */\n\nimport { asc, desc, eq, inArray, sql } from 'drizzle-orm'\nimport type { BaseSQLiteDatabase } from 'drizzle-orm/sqlite-core'\nimport { BULK_DELETE_MAX_THREADS, ChatStoreInputError, threadTitleFromMessage } from './core'\nimport type { ChatMessagePart } from './parts'\nimport type { ChatMessageRow, ChatTables, ChatThreadRow, NewChatMessageRow, NewChatThreadRow } from './schema'\n\n/** Any SQLite drizzle database — `any` erases the driver-specific run-result\n *  and schema generics so better-sqlite3, D1, and libsql handles all fit.\n *  `batch` is structural: present on D1/libsql drizzle instances. */\nexport type ChatDatabase = BaseSQLiteDatabase<'sync' | 'async', any, any> & {\n  batch?: (statements: [unknown, ...unknown[]]) => Promise<unknown[]>\n}\n\n/** Product-injected access check. Throw to deny; the store never interprets\n *  users or roles itself. */\nexport type WorkspaceAccessCheck = (workspaceId: string) => void | Promise<void>\n\nexport interface ListThreadsInput {\n  workspaceId: string\n  /** Clamped to 1..200; default 50 (legal's list route semantics). */\n  limit?: number\n  /** Clamped to >= 0; default 0. */\n  offset?: number\n}\n\nexport interface ListThreadsResult<TThread = ChatThreadRow> {\n  threads: TThread[]\n  total: number\n  limit: number\n  offset: number\n}\n\nexport interface CreateThreadInput {\n  workspaceId: string\n  /** Title source when `title` is absent: first non-empty line, 80-char cap\n   *  (`threadTitleFromMessage`). */\n  firstMessage?: string\n  /** Explicit title; still normalized through `threadTitleFromMessage` so a\n   *  multi-page paste never becomes a sidebar entry. */\n  title?: string\n  category?: string | null\n  isPinned?: boolean\n  /** Opaque product-column values written verbatim in the SAME insert (the\n   *  `/missions` extras pattern). Never read, validated, or defaulted here. */\n  extras?: Record<string, unknown>\n}\n\nexport interface AppendMessageInput {\n  threadId: string\n  role: 'user' | 'assistant' | 'system' | 'tool'\n  content: string\n  parts?: ChatMessagePart[]\n  toolName?: string | null\n  model?: string | null\n  inputTokens?: number | null\n  outputTokens?: number | null\n  reasoningTokens?: number | null\n  cacheReadTokens?: number | null\n  cacheWriteTokens?: number | null\n  costUsd?: number | null\n  /** Opaque product-column values written verbatim in the SAME insert. */\n  extras?: Record<string, unknown>\n}\n\nexport interface ListMessagesOptions {\n  limit?: number\n  offset?: number\n}\n\nexport interface BulkDeleteThreadsInput {\n  ids: string[]\n  /** Called once per distinct workspace the ids touch, before ANY delete. */\n  assertAccess: WorkspaceAccessCheck\n}\n\nexport interface ChatStore<TThread = ChatThreadRow, TMessage = ChatMessageRow> {\n  listThreads(input: ListThreadsInput): Promise<ListThreadsResult<TThread>>\n  getThread(threadId: string): Promise<TThread | null>\n  createThread(input: CreateThreadInput): Promise<TThread>\n  renameThread(threadId: string, title: string): Promise<TThread | null>\n  pinThread(threadId: string, isPinned: boolean): Promise<TThread | null>\n  /** Messages + thread in one batch. Resolves false when the thread does not\n   *  exist. `assertAccess` (optional) receives the thread's workspaceId before\n   *  the delete — single-thread callers usually check access themselves. */\n  deleteThread(threadId: string, options?: { assertAccess?: WorkspaceAccessCheck }): Promise<boolean>\n  bulkDeleteThreads(input: BulkDeleteThreadsInput): Promise<{ deleted: number }>\n  /** Ordered oldest-first: `created_at`, then rowid (insertion order within a\n   *  same-second burst — a user+assistant pair lands in one epoch second). */\n  listMessages(threadId: string, options?: ListMessagesOptions): Promise<TMessage[]>\n  /** Inserts the message and bumps the thread's `updatedAt` in one batch so\n   *  workspace recency sorts stay truthful. */\n  appendMessage(input: AppendMessageInput): Promise<TMessage>\n}\n\n/** One driver round trip when `db.batch` exists; sequential awaits in the\n *  given order otherwise. Statement order is the caller's integrity contract\n *  (children before parents). */\nasync function runStatements(\n  db: ChatDatabase,\n  statements: [unknown, ...unknown[]],\n): Promise<unknown[]> {\n  if (typeof db.batch === 'function') {\n    return await db.batch(statements)\n  }\n  const results: unknown[] = []\n  for (const statement of statements) results.push(await statement)\n  return results\n}\n\nfunction clampLimit(limit: number | undefined, fallback: number, max: number): number {\n  const value = Number.isFinite(limit) ? Math.trunc(limit as number) : fallback\n  return Math.min(Math.max(value, 1), max)\n}\n\nfunction clampOffset(offset: number | undefined): number {\n  const value = Number.isFinite(offset) ? Math.trunc(offset as number) : 0\n  return Math.max(value, 0)\n}\n\nexport function createChatStore<TTables extends ChatTables>(\n  db: ChatDatabase,\n  tables: TTables,\n): ChatStore<TTables['threads']['$inferSelect'], TTables['messages']['$inferSelect']> {\n  type TThread = TTables['threads']['$inferSelect']\n  type TMessage = TTables['messages']['$inferSelect']\n  const threads = tables.threads as ChatTables['threads']\n  const messages = tables.messages as ChatTables['messages']\n\n  return {\n    async listThreads(input) {\n      const limit = clampLimit(input.limit, 50, 200)\n      const offset = clampOffset(input.offset)\n      const scope = eq(threads.workspaceId, input.workspaceId)\n      const [list, [countRow]] = await Promise.all([\n        db.select().from(threads).where(scope)\n          // `id` tiebreak keeps pagination stable across same-second updates.\n          .orderBy(desc(threads.updatedAt), asc(threads.id))\n          .limit(limit)\n          .offset(offset),\n        db.select({ total: sql<number>`count(*)` }).from(threads).where(scope),\n      ])\n      return { threads: list as TThread[], total: countRow?.total ?? 0, limit, offset }\n    },\n\n    async getThread(threadId) {\n      const [row] = await db.select().from(threads).where(eq(threads.id, threadId)).limit(1)\n      return (row as TThread | undefined) ?? null\n    },\n\n    async createThread(input) {\n      const title = threadTitleFromMessage(input.title ?? input.firstMessage ?? '')\n      const values = {\n        workspaceId: input.workspaceId,\n        title,\n        ...(input.category !== undefined ? { category: input.category } : {}),\n        ...(input.isPinned !== undefined ? { isPinned: input.isPinned } : {}),\n        ...(input.extras ?? {}),\n      } as NewChatThreadRow\n      const [row] = await db.insert(threads).values(values).returning()\n      if (!row) throw new Error('thread insert returned no row')\n      return row as TThread\n    },\n\n    async renameThread(threadId, title) {\n      const trimmed = title.trim()\n      if (!trimmed) throw new ChatStoreInputError('Missing title')\n      const [row] = await db.update(threads)\n        .set({ title: trimmed, updatedAt: new Date() })\n        .where(eq(threads.id, threadId))\n        .returning()\n      return (row as TThread | undefined) ?? null\n    },\n\n    async pinThread(threadId, isPinned) {\n      const [row] = await db.update(threads)\n        .set({ isPinned, updatedAt: new Date() })\n        .where(eq(threads.id, threadId))\n        .returning()\n      return (row as TThread | undefined) ?? null\n    },\n\n    async deleteThread(threadId, options) {\n      const [existing] = await db.select({ id: threads.id, workspaceId: threads.workspaceId })\n        .from(threads)\n        .where(eq(threads.id, threadId))\n        .limit(1)\n      if (!existing) return false\n      if (options?.assertAccess) await options.assertAccess(existing.workspaceId)\n      // Messages first so a partial failure never leaves orphaned rows behind\n      // a deleted thread.\n      await runStatements(db, [\n        db.delete(messages).where(eq(messages.threadId, threadId)),\n        db.delete(threads).where(eq(threads.id, threadId)),\n      ])\n      return true\n    },\n\n    async bulkDeleteThreads(input) {\n      const { ids, assertAccess } = input\n      if (typeof assertAccess !== 'function') throw new ChatStoreInputError('Missing assertAccess')\n      if (!Array.isArray(ids) || ids.length === 0 || !ids.every((id) => typeof id === 'string' && id.length > 0)) {\n        throw new ChatStoreInputError('Missing ids')\n      }\n      if (ids.length > BULK_DELETE_MAX_THREADS) {\n        throw new ChatStoreInputError(`Too many ids (max ${BULK_DELETE_MAX_THREADS})`)\n      }\n\n      const rows = await db.select({ id: threads.id, workspaceId: threads.workspaceId })\n        .from(threads)\n        .where(inArray(threads.id, ids))\n      if (rows.length === 0) return { deleted: 0 }\n\n      // Access is verified once per workspace the ids touch. Fail-closed: one\n      // inaccessible workspace rejects the whole request before any delete.\n      // Sorted so the check order (and therefore which denial surfaces) is\n      // deterministic — row order follows random hex ids and varies per run.\n      const workspaceIds = [...new Set(rows.map((row) => row.workspaceId))].sort()\n      for (const workspaceId of workspaceIds) {\n        await assertAccess(workspaceId)\n      }\n\n      const foundIds = rows.map((row) => row.id)\n      await runStatements(db, [\n        db.delete(messages).where(inArray(messages.threadId, foundIds)),\n        db.delete(threads).where(inArray(threads.id, foundIds)),\n      ])\n      return { deleted: foundIds.length }\n    },\n\n    async listMessages(threadId, options) {\n      const query = db.select().from(messages)\n        .where(eq(messages.threadId, threadId))\n        .orderBy(asc(messages.createdAt), sql`rowid`)\n        .$dynamic()\n      if (options?.limit !== undefined) query.limit(clampLimit(options.limit, 1, 1000))\n      if (options?.offset !== undefined) query.offset(clampOffset(options.offset))\n      return await query as TMessage[]\n    },\n\n    async appendMessage(input) {\n      const values = {\n        threadId: input.threadId,\n        role: input.role,\n        content: input.content,\n        ...(input.parts !== undefined ? { parts: input.parts } : {}),\n        ...(input.toolName !== undefined ? { toolName: input.toolName } : {}),\n        ...(input.model !== undefined ? { model: input.model } : {}),\n        ...(input.inputTokens !== undefined ? { inputTokens: input.inputTokens } : {}),\n        ...(input.outputTokens !== undefined ? { outputTokens: input.outputTokens } : {}),\n        ...(input.reasoningTokens !== undefined ? { reasoningTokens: input.reasoningTokens } : {}),\n        ...(input.cacheReadTokens !== undefined ? { cacheReadTokens: input.cacheReadTokens } : {}),\n        ...(input.cacheWriteTokens !== undefined ? { cacheWriteTokens: input.cacheWriteTokens } : {}),\n        ...(input.costUsd !== undefined ? { costUsd: input.costUsd } : {}),\n        ...(input.extras ?? {}),\n      } as NewChatMessageRow\n      const [insertResult] = await runStatements(db, [\n        db.insert(messages).values(values).returning(),\n        db.update(threads).set({ updatedAt: new Date() }).where(eq(threads.id, input.threadId)),\n      ])\n      const row = (insertResult as TMessage[] | undefined)?.[0]\n      if (!row) throw new Error('message insert returned no row')\n      return row\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAwCA,SAAS,WAAW;AACpB,SAAS,OAAO,SAAS,MAAM,aAAa,YAAY;AA4BxD,IAAM,QAAQ,MAAM,KAAK,IAAI,EAAE,WAAW,EAAE,QAAQ,iCAAiC;AAErF,IAAM,YAAY,MAAM,QAAQ,cAAc,EAAE,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,kBAAkB;AAEzG,IAAM,YAAY,MAAM,QAAQ,cAAc,EAAE,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,kBAAkB;AAElG,SAAS,iBAGd,UAAkE,CAAC,GAAG;AACtE,QAAM,EAAE,gBAAgB,cAAc,GAAG,IAAI;AAC7C,QAAM,eAAe,QAAQ,sBAAuB,CAAC;AACrD,QAAM,gBAAgB,QAAQ,uBAAwB,CAAC;AAEvD,QAAM,UAAU,YAAY,GAAG,WAAW,UAAU;AAAA,IAClD,IAAI,MAAM;AAAA,IACV,aAAa,iBACT,KAAK,cAAc,EAAE,QAAQ,EAAE,WAAW,MAAM,eAAe,IAAI,EAAE,UAAU,UAAU,CAAC,IAC1F,KAAK,cAAc,EAAE,QAAQ;AAAA,IACjC,OAAO,KAAK,OAAO,EAAE,QAAQ;AAAA,IAC7B,UAAU,KAAK,UAAU;AAAA,IACzB,UAAU,QAAQ,aAAa,EAAE,MAAM,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA,IAC3E,WAAW,UAAU;AAAA,IACrB,WAAW,UAAU;AAAA,IACrB,GAAG;AAAA,EACL,GAAG,CAAC,UAAU;AAAA,IACZ,MAAM,OAAO,WAAW,kBAAkB,EAAE,GAAG,MAAM,WAAW;AAAA;AAAA,IAEhE,MAAM,OAAO,WAAW,0BAA0B,EAAE,GAAG,MAAM,aAAa,MAAM,SAAS;AAAA,EAC3F,CAAC;AAED,QAAM,WAAW,YAAY,GAAG,WAAW,WAAW;AAAA,IACpD,IAAI,MAAM;AAAA,IACV,UAAU,KAAK,WAAW,EAAE,QAAQ,EAAE,WAAW,MAAM,QAAQ,IAAI,EAAE,UAAU,UAAU,CAAC;AAAA,IAC1F,MAAM,KAAK,QAAQ,EAAE,MAAM,CAAC,QAAQ,aAAa,UAAU,MAAM,EAAE,CAAC,EAAE,QAAQ;AAAA,IAC9E,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,OAAO,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC,EAAE,MAAyB,EAAE,QAAQ,CAAC,CAAC;AAAA,IAC5E,UAAU,KAAK,WAAW;AAAA,IAC1B,OAAO,KAAK,OAAO;AAAA;AAAA;AAAA,IAGnB,aAAa,QAAQ,cAAc;AAAA,IACnC,cAAc,QAAQ,eAAe;AAAA,IACrC,iBAAiB,QAAQ,kBAAkB;AAAA,IAC3C,iBAAiB,QAAQ,mBAAmB;AAAA,IAC5C,kBAAkB,QAAQ,oBAAoB;AAAA,IAC9C,SAAS,KAAK,UAAU;AAAA,IACxB,WAAW,UAAU;AAAA,IACrB,GAAG;AAAA,EACL,GAAG,CAAC,UAAU;AAAA,IACZ,MAAM,OAAO,WAAW,gBAAgB,EAAE,GAAG,MAAM,QAAQ;AAAA,IAC3D,MAAM,OAAO,WAAW,wBAAwB,EAAE,GAAG,MAAM,UAAU,MAAM,SAAS;AAAA,EACtF,CAAC;AAED,SAAO,EAAE,SAAS,SAAS;AAC7B;;;AC1GA,SAAS,KAAK,MAAM,IAAI,SAAS,OAAAA,YAAW;AAiG5C,eAAe,cACb,IACA,YACoB;AACpB,MAAI,OAAO,GAAG,UAAU,YAAY;AAClC,WAAO,MAAM,GAAG,MAAM,UAAU;AAAA,EAClC;AACA,QAAM,UAAqB,CAAC;AAC5B,aAAW,aAAa,WAAY,SAAQ,KAAK,MAAM,SAAS;AAChE,SAAO;AACT;AAEA,SAAS,WAAW,OAA2B,UAAkB,KAAqB;AACpF,QAAM,QAAQ,OAAO,SAAS,KAAK,IAAI,KAAK,MAAM,KAAe,IAAI;AACrE,SAAO,KAAK,IAAI,KAAK,IAAI,OAAO,CAAC,GAAG,GAAG;AACzC;AAEA,SAAS,YAAY,QAAoC;AACvD,QAAM,QAAQ,OAAO,SAAS,MAAM,IAAI,KAAK,MAAM,MAAgB,IAAI;AACvE,SAAO,KAAK,IAAI,OAAO,CAAC;AAC1B;AAEO,SAAS,gBACd,IACA,QACoF;AAGpF,QAAM,UAAU,OAAO;AACvB,QAAM,WAAW,OAAO;AAExB,SAAO;AAAA,IACL,MAAM,YAAY,OAAO;AACvB,YAAM,QAAQ,WAAW,MAAM,OAAO,IAAI,GAAG;AAC7C,YAAM,SAAS,YAAY,MAAM,MAAM;AACvC,YAAM,QAAQ,GAAG,QAAQ,aAAa,MAAM,WAAW;AACvD,YAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,QAC3C,GAAG,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,KAAK,EAElC,QAAQ,KAAK,QAAQ,SAAS,GAAG,IAAI,QAAQ,EAAE,CAAC,EAChD,MAAM,KAAK,EACX,OAAO,MAAM;AAAA,QAChB,GAAG,OAAO,EAAE,OAAOC,eAAsB,CAAC,EAAE,KAAK,OAAO,EAAE,MAAM,KAAK;AAAA,MACvE,CAAC;AACD,aAAO,EAAE,SAAS,MAAmB,OAAO,UAAU,SAAS,GAAG,OAAO,OAAO;AAAA,IAClF;AAAA,IAEA,MAAM,UAAU,UAAU;AACxB,YAAM,CAAC,GAAG,IAAI,MAAM,GAAG,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,GAAG,QAAQ,IAAI,QAAQ,CAAC,EAAE,MAAM,CAAC;AACrF,aAAQ,OAA+B;AAAA,IACzC;AAAA,IAEA,MAAM,aAAa,OAAO;AACxB,YAAM,QAAQ,uBAAuB,MAAM,SAAS,MAAM,gBAAgB,EAAE;AAC5E,YAAM,SAAS;AAAA,QACb,aAAa,MAAM;AAAA,QACnB;AAAA,QACA,GAAI,MAAM,aAAa,SAAY,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,QACnE,GAAI,MAAM,aAAa,SAAY,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,QACnE,GAAI,MAAM,UAAU,CAAC;AAAA,MACvB;AACA,YAAM,CAAC,GAAG,IAAI,MAAM,GAAG,OAAO,OAAO,EAAE,OAAO,MAAM,EAAE,UAAU;AAChE,UAAI,CAAC,IAAK,OAAM,IAAI,MAAM,+BAA+B;AACzD,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,aAAa,UAAU,OAAO;AAClC,YAAM,UAAU,MAAM,KAAK;AAC3B,UAAI,CAAC,QAAS,OAAM,IAAI,oBAAoB,eAAe;AAC3D,YAAM,CAAC,GAAG,IAAI,MAAM,GAAG,OAAO,OAAO,EAClC,IAAI,EAAE,OAAO,SAAS,WAAW,oBAAI,KAAK,EAAE,CAAC,EAC7C,MAAM,GAAG,QAAQ,IAAI,QAAQ,CAAC,EAC9B,UAAU;AACb,aAAQ,OAA+B;AAAA,IACzC;AAAA,IAEA,MAAM,UAAU,UAAU,UAAU;AAClC,YAAM,CAAC,GAAG,IAAI,MAAM,GAAG,OAAO,OAAO,EAClC,IAAI,EAAE,UAAU,WAAW,oBAAI,KAAK,EAAE,CAAC,EACvC,MAAM,GAAG,QAAQ,IAAI,QAAQ,CAAC,EAC9B,UAAU;AACb,aAAQ,OAA+B;AAAA,IACzC;AAAA,IAEA,MAAM,aAAa,UAAU,SAAS;AACpC,YAAM,CAAC,QAAQ,IAAI,MAAM,GAAG,OAAO,EAAE,IAAI,QAAQ,IAAI,aAAa,QAAQ,YAAY,CAAC,EACpF,KAAK,OAAO,EACZ,MAAM,GAAG,QAAQ,IAAI,QAAQ,CAAC,EAC9B,MAAM,CAAC;AACV,UAAI,CAAC,SAAU,QAAO;AACtB,UAAI,SAAS,aAAc,OAAM,QAAQ,aAAa,SAAS,WAAW;AAG1E,YAAM,cAAc,IAAI;AAAA,QACtB,GAAG,OAAO,QAAQ,EAAE,MAAM,GAAG,SAAS,UAAU,QAAQ,CAAC;AAAA,QACzD,GAAG,OAAO,OAAO,EAAE,MAAM,GAAG,QAAQ,IAAI,QAAQ,CAAC;AAAA,MACnD,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,kBAAkB,OAAO;AAC7B,YAAM,EAAE,KAAK,aAAa,IAAI;AAC9B,UAAI,OAAO,iBAAiB,WAAY,OAAM,IAAI,oBAAoB,sBAAsB;AAC5F,UAAI,CAAC,MAAM,QAAQ,GAAG,KAAK,IAAI,WAAW,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC,GAAG;AAC1G,cAAM,IAAI,oBAAoB,aAAa;AAAA,MAC7C;AACA,UAAI,IAAI,SAAS,yBAAyB;AACxC,cAAM,IAAI,oBAAoB,qBAAqB,uBAAuB,GAAG;AAAA,MAC/E;AAEA,YAAM,OAAO,MAAM,GAAG,OAAO,EAAE,IAAI,QAAQ,IAAI,aAAa,QAAQ,YAAY,CAAC,EAC9E,KAAK,OAAO,EACZ,MAAM,QAAQ,QAAQ,IAAI,GAAG,CAAC;AACjC,UAAI,KAAK,WAAW,EAAG,QAAO,EAAE,SAAS,EAAE;AAM3C,YAAM,eAAe,CAAC,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,CAAC,EAAE,KAAK;AAC3E,iBAAW,eAAe,cAAc;AACtC,cAAM,aAAa,WAAW;AAAA,MAChC;AAEA,YAAM,WAAW,KAAK,IAAI,CAAC,QAAQ,IAAI,EAAE;AACzC,YAAM,cAAc,IAAI;AAAA,QACtB,GAAG,OAAO,QAAQ,EAAE,MAAM,QAAQ,SAAS,UAAU,QAAQ,CAAC;AAAA,QAC9D,GAAG,OAAO,OAAO,EAAE,MAAM,QAAQ,QAAQ,IAAI,QAAQ,CAAC;AAAA,MACxD,CAAC;AACD,aAAO,EAAE,SAAS,SAAS,OAAO;AAAA,IACpC;AAAA,IAEA,MAAM,aAAa,UAAU,SAAS;AACpC,YAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,QAAQ,EACpC,MAAM,GAAG,SAAS,UAAU,QAAQ,CAAC,EACrC,QAAQ,IAAI,SAAS,SAAS,GAAGA,WAAU,EAC3C,SAAS;AACZ,UAAI,SAAS,UAAU,OAAW,OAAM,MAAM,WAAW,QAAQ,OAAO,GAAG,GAAI,CAAC;AAChF,UAAI,SAAS,WAAW,OAAW,OAAM,OAAO,YAAY,QAAQ,MAAM,CAAC;AAC3E,aAAO,MAAM;AAAA,IACf;AAAA,IAEA,MAAM,cAAc,OAAO;AACzB,YAAM,SAAS;AAAA,QACb,UAAU,MAAM;AAAA,QAChB,MAAM,MAAM;AAAA,QACZ,SAAS,MAAM;AAAA,QACf,GAAI,MAAM,UAAU,SAAY,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,QAC1D,GAAI,MAAM,aAAa,SAAY,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,QACnE,GAAI,MAAM,UAAU,SAAY,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,QAC1D,GAAI,MAAM,gBAAgB,SAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,QAC5E,GAAI,MAAM,iBAAiB,SAAY,EAAE,cAAc,MAAM,aAAa,IAAI,CAAC;AAAA,QAC/E,GAAI,MAAM,oBAAoB,SAAY,EAAE,iBAAiB,MAAM,gBAAgB,IAAI,CAAC;AAAA,QACxF,GAAI,MAAM,oBAAoB,SAAY,EAAE,iBAAiB,MAAM,gBAAgB,IAAI,CAAC;AAAA,QACxF,GAAI,MAAM,qBAAqB,SAAY,EAAE,kBAAkB,MAAM,iBAAiB,IAAI,CAAC;AAAA,QAC3F,GAAI,MAAM,YAAY,SAAY,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,QAChE,GAAI,MAAM,UAAU,CAAC;AAAA,MACvB;AACA,YAAM,CAAC,YAAY,IAAI,MAAM,cAAc,IAAI;AAAA,QAC7C,GAAG,OAAO,QAAQ,EAAE,OAAO,MAAM,EAAE,UAAU;AAAA,QAC7C,GAAG,OAAO,OAAO,EAAE,IAAI,EAAE,WAAW,oBAAI,KAAK,EAAE,CAAC,EAAE,MAAM,GAAG,QAAQ,IAAI,MAAM,QAAQ,CAAC;AAAA,MACxF,CAAC;AACD,YAAM,MAAO,eAA0C,CAAC;AACxD,UAAI,CAAC,IAAK,OAAM,IAAI,MAAM,gCAAgC;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":["sql","sql"]}

package/dist/{chunk-5GWXCSLQ.js → chunk-5RJNEEO2.js}

@@ -28,6 +28,66 @@ var fail = (error) => ({
   error: error instanceof Error ? error : new Error(String(error))
 });
 
+// src/sandbox/binary-read.ts
+function shellQuote(value) {
+  return `'${value.replaceAll("'", `'"'"'`)}'`;
+}
+function base64ToBytes(base64) {
+  const binary = atob(base64);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i += 1) bytes[i] = binary.charCodeAt(i);
+  return bytes;
+}
+function execInSandbox(box, command, options) {
+  return options?.sessionId ? box.exec(command, { sessionId: options.sessionId }) : box.exec(command);
+}
+async function statSandboxFileSize(box, absolutePath, options) {
+  const quotedPath = shellQuote(absolutePath);
+  let result;
+  try {
+    result = await execInSandbox(box, `wc -c < ${quotedPath}`, options);
+  } catch (err) {
+    return { succeeded: false, error: err instanceof Error ? err.message : String(err) };
+  }
+  if (result.exitCode !== 0) {
+    return { succeeded: false, error: result.stderr || "unknown error" };
+  }
+  const size = Number.parseInt(result.stdout.trim(), 10);
+  if (!Number.isFinite(size)) {
+    return { succeeded: false, error: `could not parse file size from "${result.stdout.trim()}"` };
+  }
+  return { succeeded: true, value: size };
+}
+async function readSandboxBinaryBytes(box, absolutePath, expectedSize, options) {
+  const quotedPath = shellQuote(absolutePath);
+  let result;
+  try {
+    result = await execInSandbox(box, `base64 ${quotedPath}`, options);
+  } catch (err) {
+    return { succeeded: false, error: err instanceof Error ? err.message : String(err) };
+  }
+  if (result.exitCode !== 0) {
+    return { succeeded: false, error: result.stderr || "unknown error" };
+  }
+  const cleaned = result.stdout.replace(/\s+/g, "");
+  let bytes;
+  try {
+    bytes = base64ToBytes(cleaned);
+  } catch (err) {
+    return {
+      succeeded: false,
+      error: `could not decode file contents: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+  if (bytes.byteLength !== expectedSize) {
+    return {
+      succeeded: false,
+      error: `read returned ${bytes.byteLength} bytes, expected ${expectedSize} \u2014 output truncated in transit`
+    };
+  }
+  return { succeeded: true, value: { bytes, size: expectedSize } };
+}
+
 // src/sandbox/terminal-proxy-token.ts
 var TERMINAL_PROXY_TOKEN_TTL_MS = 15 * 60 * 1e3;
 async function mintTerminalProxyToken(secret, identity, ttlMs = TERMINAL_PROXY_TOKEN_TTL_MS, now = Date.now) {
@@ -1016,13 +1076,30 @@ async function resumeStoppedBox(box, timeoutMs, onProgress) {
     return fail(err);
   }
 }
-async function ensureWorkspaceSandbox(shell, options) {
-  const { workspaceId, userId, harness, forceNew, onProgress, billingOwnerId } = options;
+async function resolveWorkspaceSandboxClient(shell, workspaceId, userId) {
   const scope = { workspaceId, ...userId ? { userId } : {} };
   const creds = await shell.credentials(scope);
   if (!creds) throw new Error("sandbox credentials are required (apiKey/baseUrl)");
-  const client = getClientFromCreds(creds);
-  let name = shell.boxKey ? shell.boxKey(scope) : shell.name(workspaceId);
+  return {
+    scope,
+    client: getClientFromCreds(creds),
+    name: shell.boxKey ? shell.boxKey(scope) : shell.name(workspaceId)
+  };
+}
+async function peekWorkspaceSandbox(shell, options) {
+  const { client, name } = await resolveWorkspaceSandboxClient(shell, options.workspaceId, options.userId);
+  const displayName = shell.name(options.workspaceId);
+  const boxes = await client.list();
+  const match = boxes.find((box) => box.name === name) ?? boxes.find((box) => box.name === displayName);
+  if (!match) return { status: "absent" };
+  if (match.status !== "running") return { status: "not-running", state: match.status, box: match };
+  return { status: "running", box: match };
+}
+async function ensureWorkspaceSandbox(shell, options) {
+  const { workspaceId, userId, harness, forceNew, onProgress, billingOwnerId } = options;
+  const resolved = await resolveWorkspaceSandboxClient(shell, workspaceId, userId);
+  const { scope, client } = resolved;
+  let name = resolved.name;
   let recoveryRestore;
   const resources = shell.resources ?? DEFAULT_SANDBOX_RESOURCES;
   const resumeTimeout = 12e4;
@@ -1491,6 +1568,9 @@ function firstQuestionText(value) {
 }
 
 export {
+  shellQuote,
+  statSandboxFileSize,
+  readSandboxBinaryBytes,
   mintTerminalProxyToken,
   verifyTerminalProxyToken,
   createWorkspaceSandboxManager,
@@ -1526,6 +1606,7 @@ export {
   ENV_TOTAL_MAX_BYTES,
   assertProvisionPayloadWithinCap,
   assertEnvWithinLimits,
+  peekWorkspaceSandbox,
   ensureWorkspaceSandbox,
   resolveModel,
   flattenHistory,
@@ -1547,4 +1628,4 @@ export {
   isTerminalPromptEvent,
   detectInteractiveQuestion
 };
-//# sourceMappingURL=chunk-5GWXCSLQ.js.map
+//# sourceMappingURL=chunk-5RJNEEO2.js.map