@tangle-network/agent-app 0.60.191 → 0.60.193

package/dist/app-auth/index.js

@@ -1,11 +1,11 @@
+import {
+  noticeEmail
+} from "../chunk-WOTWQ2ST.js";
 import {
   createAuthGuard,
   createBetterAuthSessionCookieMinter,
   createTangleSsoHandlers
 } from "../chunk-OGLTKK72.js";
-import {
-  noticeEmail
-} from "../chunk-WOTWQ2ST.js";
 import "../chunk-D6UJEOZQ.js";
 import "../chunk-UTAIRVOK.js";
 import "../chunk-RN4WPTBH.js";

package/dist/assistant/index.js

@@ -1,14 +1,15 @@
 import {
   ReasoningRow,
   chatToolCallPart
-} from "../chunk-Y2SOQOJE.js";
-import "../chunk-3HUFJ5LO.js";
+} from "../chunk-KNTRS7OZ.js";
 import "../chunk-KMIDRUUH.js";
+import "../chunk-3HUFJ5LO.js";
 import "../chunk-FBVLEGEG.js";
 import "../chunk-Y6PRDUFJ.js";
+import "../chunk-GEYACSFW.js";
 import {
   ChatComposer
-} from "../chunk-MSAGTFN4.js";
+} from "../chunk-6RFNLZCK.js";
 import "../chunk-L7MB2LLM.js";
 import "../chunk-GNBBY3KN.js";
 import "../chunk-A2GG4D4A.js";
@@ -20,22 +21,21 @@ import "../chunk-HEPEGY6Q.js";
 import {
   ModelPicker
 } from "../chunk-XG6FODYO.js";
-import "../chunk-GEYACSFW.js";
 import "../chunk-ATQQCG4I.js";
 import "../chunk-WSEXFTN4.js";
-import "../chunk-RASGKEAL.js";
 import {
   AsyncView
 } from "../chunk-AVP5SNIG.js";
+import "../chunk-RASGKEAL.js";
 import "../chunk-FQYAJYPW.js";
-import "../chunk-WTC6AOPL.js";
+import "../chunk-PBQYVAB6.js";
 import "../chunk-VBRUG4N5.js";
 import "../chunk-B7CL7ENS.js";
 import "../chunk-PV33JZKV.js";
 import "../chunk-AMUXRAUO.js";
-import "../chunk-TNWDYAFX.js";
-import "../chunk-YHRWZZJN.js";
+import "../chunk-E6UTFXKQ.js";
 import "../chunk-ZVEEWGDK.js";
+import "../chunk-YHRWZZJN.js";
 import "../chunk-TXD5HXLE.js";
 import "../chunk-ZGUXI5SI.js";
 import "../chunk-6VQCFJWP.js";

package/dist/chat-react/index.js

@@ -1,14 +1,14 @@
 import {
   ComposerModeControls,
   EntryComposer
-} from "../chunk-MSAGTFN4.js";
+} from "../chunk-6RFNLZCK.js";
 import "../chunk-L7MB2LLM.js";
 import "../chunk-SJWIZT7B.js";
 import "../chunk-5IS3GCMR.js";
 import "../chunk-HEPEGY6Q.js";
 import "../chunk-XG6FODYO.js";
 import "../chunk-RASGKEAL.js";
-import "../chunk-WTC6AOPL.js";
+import "../chunk-PBQYVAB6.js";
 import "../chunk-VBRUG4N5.js";
 import "../chunk-AMUXRAUO.js";
 import "../chunk-YHRWZZJN.js";

package/dist/chat-routes/attachment-upload.d.ts

@@ -29,7 +29,7 @@
  */
 import type { ChatAttachmentKind } from './wire';
 import { type AtomicAttachmentWriter, type WriteAttachmentFn } from './attachment-store';
-import { type AttachmentPathCheck } from './resolve-attachments';
+import { type AttachmentPathCheck } from './attachment-validation';
 /** Stable authorization result for the original writer contract. */
 export type AttachmentUploadAuthorization = {
     ok: true;

package/dist/chat-routes/attachment-validation.d.ts

@@ -2,7 +2,9 @@
  * Shared attachment validation core — constants, type-gate, and filename
  * sanitization used by BOTH the (server) attachment upload route and the
  * (browser) composer's client-side pre-validation, so a rejection never
- * differs depending on which side classified the bytes first.
+ * differs depending on which side classified the bytes first. The structural
+ * `attachments` parser lives here too, so the chat route and the operator API
+ * refuse the same turn bodies without either pulling in the chat store.
  *
  * ≈ gtm-agent's `src/lib/attachment-limits.ts`, minus what agent-app already
  * has (`ATTACHMENT_MAX_COUNT`/`MAX_ATTACHMENT_TOTAL_BYTES`/
@@ -14,6 +16,7 @@
  * (`tests/browser-safe-subpaths.test.ts` walks the graph), so nothing here
  * may reach a Node builtin or an engine package.
  */
+import { type ChatAttachmentInput } from './wire';
 import type { SniffResult } from './binary-sniff';
 /** Ceiling on a binary attachment's raw (pre-encoding) byte size. */
 export declare const MAX_BINARY_ATTACHMENT_BYTES: number;
@@ -93,3 +96,49 @@ export declare function attachmentSizeErrorMessage(name: string, actualBytes: nu
 /** Human-readable error for a chat message whose combined attachments exceed
  *  the aggregate raw-byte ceiling. */
 export declare function attachmentTotalSizeErrorMessage(totalBytes: number, limitBytes: number): string;
+/** Verdict of a path check: OK, or a rejection naming why. Mirrors
+ *  `SandboxMentionPathCheck` in `./wire`. */
+export type AttachmentPathCheck = {
+    succeeded: true;
+} | {
+    succeeded: false;
+    error: string;
+};
+/**
+ * Default path validator when a caller supplies none. Rejects the ways a path
+ * picked in a client can escape the store root — traversal (`..` segment),
+ * absolute (leading `/`), backslashes, null bytes, control characters (see
+ * {@link CONTROL_CHARS} — a path also feeds {@link buildAttachmentPromptBlock}'s
+ * `(vault: ${path})` pointer, so it is exposed to the same injection surface as
+ * `name`) — plus a dotfile/hidden segment (a leading `.` on any segment).
+ * Generalized from gtm's `validateVaultFilePath`, in the spirit of
+ * `validateSandboxMentionPath` (`/chat-routes`'s wire mention-path validator) —
+ * but the dotfile rejection here is INTENTIONALLY stricter than that sibling:
+ * an uploaded attachment path is sanitized store-relative storage the product
+ * itself assigned, whereas a mention path points at a file that already exists
+ * in the sandbox and may legitimately live under a dotfile segment. A caller
+ * that needs gtm's exact (looser) rule can supply `validatePath` to override
+ * this default entirely.
+ */
+export declare function defaultValidateAttachmentPath(path: string): AttachmentPathCheck;
+/** Structural limits for {@link parseChatAttachmentInputs}. */
+export interface ParseChatAttachmentInputsOptions {
+    /** Most attachments one request may carry. Default {@link ATTACHMENT_MAX_COUNT}. */
+    maxCount?: number;
+    /** Path validator override. Default {@link defaultValidateAttachmentPath}. */
+    validatePath?: (path: string) => AttachmentPathCheck;
+}
+/**
+ * Validate an `attachments` value's shape without reading the store: an
+ * array of at most `maxCount` {@link ChatAttachmentInput}s with valid,
+ * distinct paths. Absent (`undefined`/`null`) is an empty list. Sizes are
+ * still client-reported here; {@link resolveChatAttachments} re-derives them
+ * from the store.
+ */
+export declare function parseChatAttachmentInputs(value: unknown, options?: ParseChatAttachmentInputsOptions): {
+    succeeded: true;
+    value: ChatAttachmentInput[];
+} | {
+    succeeded: false;
+    error: string;
+};

package/dist/chat-routes/index.js

@@ -22,9 +22,11 @@ import {
   attachmentSizeErrorMessage,
   attachmentTotalSizeErrorMessage,
   checkAttachmentType,
+  defaultValidateAttachmentPath,
+  parseChatAttachmentInputs,
   sanitizeAttachmentFileName,
   sniffBinary
-} from "../chunk-WTC6AOPL.js";
+} from "../chunk-PBQYVAB6.js";
 import {
   DEFAULT_STALE_TURN_LOCK_GRACE_MS,
   DEFAULT_TERMINAL_TURN_LOCK_GRACE_MS,
@@ -43,13 +45,13 @@ import {
   readHttpStatusHint,
   readUpstreamUnavailableCode,
   runWithModelFailover
-} from "../chunk-63EKFZOE.js";
+} from "../chunk-ZLX4BA27.js";
 import "../chunk-VBRUG4N5.js";
 import "../chunk-LWSJK546.js";
-import "../chunk-QAF7ZTO3.js";
+import "../chunk-L5JLOC2F.js";
 import "../chunk-6A7MYOUI.js";
-import "../chunk-S5SRJJQG.js";
 import "../chunk-2RCPPOQ4.js";
+import "../chunk-S5SRJJQG.js";
 import "../chunk-IJAXOQJU.js";
 import "../chunk-UGWQLQDS.js";
 import "../chunk-E65YV7VV.js";
@@ -72,7 +74,7 @@ import {
   rowIdOf,
   storeSupportsDraftPersistence,
   streamChatRouteAsSandboxEvents
-} from "../chunk-J26IXWFK.js";
+} from "../chunk-XP77DJEF.js";
 import "../chunk-Q7WEEN7P.js";
 import "../chunk-UTAIRVOK.js";
 import "../chunk-RN4WPTBH.js";
@@ -87,7 +89,8 @@ import {
   attachmentInputToPart,
   attachmentKindForMime,
   toChatMessageParts
-} from "../chunk-TNWDYAFX.js";
+} from "../chunk-E6UTFXKQ.js";
+import "../chunk-ZVEEWGDK.js";
 import {
   ChatTurnInputError,
   DISPATCH_MAX_MEDIA_PARTS,
@@ -121,7 +124,6 @@ import {
   turnResponseEventFor,
   validateSandboxMentionPath
 } from "../chunk-YHRWZZJN.js";
-import "../chunk-ZVEEWGDK.js";
 import {
   isWorkspaceFileExportable
 } from "../chunk-TXD5HXLE.js";
@@ -154,6 +156,7 @@ import {
   planFollowUpTurnId,
   planToPersistedPart
 } from "../chunk-LQYIBL3G.js";
+import "../chunk-XELWWXJJ.js";
 
 // src/chat-routes/model-failover-stream.ts
 var TERMINAL_FAILURE_TYPES = /* @__PURE__ */ new Set(["error", "session.run.failed"]);
@@ -483,6 +486,7 @@ function streamWithModelFailover(options) {
     const settled = runWithModelFailover({
       models: options.models,
       run: probe,
+      ...options.policy ? { policy: options.policy } : {},
       // The probe has already classified the raw payload with
       // `isUpstreamUnavailable`; this reads its verdict rather than
       // re-classifying a wrapper object, so the two can never disagree.
@@ -767,6 +771,7 @@ function createSandboxChatProducer(options) {
       models: chain,
       open: options.openEvents,
       log,
+      ...options.modelPolicy ? { policy: options.modelPolicy } : {},
       ...options.openTimeoutMs !== void 0 ? { openTimeoutMs: options.openTimeoutMs } : {},
       ...options.firstResponseTimeoutMs !== void 0 ? { firstResponseTimeoutMs: options.firstResponseTimeoutMs } : {},
       ...options.emptyTurnRetries !== void 0 ? { emptyTurnRetries: options.emptyTurnRetries } : {},
@@ -2465,83 +2470,11 @@ function createAtomicAttachmentWriter(input) {
 }
 
 // src/chat-routes/resolve-attachments.ts
-var MAX_ATTACHMENT_NAME_LENGTH = 256;
-function isAttachmentKind(value) {
-  return value === "image" || value === "file";
-}
-var CONTROL_CHARS = /[\x00-\x1F\x7F]/;
-function defaultValidateAttachmentPath(path) {
-  if (path.includes("\0")) return { succeeded: false, error: "attachment path must not contain null bytes" };
-  if (path.includes("\\")) return { succeeded: false, error: "attachment path must not contain backslashes" };
-  if (CONTROL_CHARS.test(path)) return { succeeded: false, error: "attachment path must not contain control characters" };
-  if (path.startsWith("/")) return { succeeded: false, error: "attachment path must be store-relative, not absolute" };
-  const segments = path.split("/");
-  if (segments.some((segment) => segment === "..")) {
-    return { succeeded: false, error: 'attachment path must not contain ".." segments' };
-  }
-  if (segments.some((segment) => segment.startsWith("."))) {
-    return { succeeded: false, error: "attachment path must not contain a hidden (dotfile) segment" };
-  }
-  return { succeeded: true };
-}
-function parseAttachmentInput(value, index, validatePath) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    return { succeeded: false, error: `attachments[${index}] must be an object` };
-  }
-  const record2 = value;
-  const path = record2.path;
-  if (typeof path !== "string" || !path) {
-    return { succeeded: false, error: `attachments[${index}].path must be a non-empty string` };
-  }
-  const name = record2.name;
-  if (typeof name !== "string" || !name.trim()) {
-    return { succeeded: false, error: `attachments[${index}].name must be a non-empty string` };
-  }
-  if (name.length > MAX_ATTACHMENT_NAME_LENGTH) {
-    return { succeeded: false, error: `attachments[${index}].name must not exceed ${MAX_ATTACHMENT_NAME_LENGTH} characters` };
-  }
-  if (CONTROL_CHARS.test(name)) {
-    return { succeeded: false, error: `attachments[${index}].name must not contain control characters` };
-  }
-  const size = record2.size;
-  if (typeof size !== "number" || !Number.isFinite(size)) {
-    return { succeeded: false, error: `attachments[${index}].size must be a finite number` };
-  }
-  if (size < 0) {
-    return { succeeded: false, error: `attachments[${index}].size must not be negative` };
-  }
-  const mediaType = record2.mediaType;
-  if (typeof mediaType !== "string") {
-    return { succeeded: false, error: `attachments[${index}].mediaType must be a string` };
-  }
-  const kind = record2.kind;
-  if (!isAttachmentKind(kind)) {
-    return { succeeded: false, error: `attachments[${index}].kind must be "image" or "file"` };
-  }
-  const pathCheck = validatePath(path);
-  if (!pathCheck.succeeded) return { succeeded: false, error: pathCheck.error };
-  return { succeeded: true, value: { path, name, size, mediaType, kind } };
-}
 async function resolveChatAttachments(value, options) {
-  const maxCount = options.maxCount ?? ATTACHMENT_MAX_COUNT;
   const maxTotalBytes = options.maxTotalBytes ?? MAX_ATTACHMENT_TOTAL_BYTES;
-  const validatePath = options.validatePath ?? defaultValidateAttachmentPath;
-  if (value === void 0 || value === null) return { succeeded: true, value: [] };
-  if (!Array.isArray(value)) return { succeeded: false, error: "attachments must be an array" };
-  if (value.length > maxCount) {
-    return { succeeded: false, error: `attachments must not exceed ${maxCount} entries` };
-  }
-  const inputs = [];
-  const seenPaths = /* @__PURE__ */ new Set();
-  for (let index = 0; index < value.length; index += 1) {
-    const parsed = parseAttachmentInput(value[index], index, validatePath);
-    if (!parsed.succeeded) return parsed;
-    if (seenPaths.has(parsed.value.path)) {
-      return { succeeded: false, error: `attachments must not repeat a path: ${parsed.value.path}` };
-    }
-    seenPaths.add(parsed.value.path);
-    inputs.push(parsed.value);
-  }
+  const parsed = parseChatAttachmentInputs(value, options);
+  if (!parsed.succeeded) return parsed;
+  const inputs = parsed.value;
   const advisoryTotal = inputs.reduce((sum2, input) => sum2 + input.size, 0);
   if (advisoryTotal > maxTotalBytes) {
     return { succeeded: false, error: attachmentTotalSizeErrorMessage(advisoryTotal, maxTotalBytes) };
@@ -3636,6 +3569,7 @@ export {
   normalizeChatPromptForSandbox,
   observeChatTurnStream,
   observeNativeCompletion,
+  parseChatAttachmentInputs,
   parseChatTurnParts,
   parseFileMentions,
   parsePlanFollowUpAttach,