@things-factory/ai-assistant 10.1.88 → 10.1.90

package/dist-server/service/data-entry/entry-resolver.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EntryProposalResolver = void 0;
+const tslib_1 = require("tslib");
+const type_graphql_1 = require("type-graphql");
+const graphql_scalars_1 = require("graphql-scalars");
+const typeorm_1 = require("typeorm");
+const env_1 = require("@things-factory/env");
+const graphql_tag_1 = tslib_1.__importDefault(require("graphql-tag"));
+const shell_1 = require("@things-factory/shell");
+const chat_session_js_1 = require("../chat-session/chat-session.js");
+const chat_message_js_1 = require("../chat-message/chat-message.js");
+const session_write_gate_js_1 = require("../chat-session/session-write-gate.js");
+const participant_lookup_js_1 = require("../chat-session-participant/participant-lookup.js");
+const proposal_outcome_js_1 = require("../chat-message/proposal-outcome.js");
+const tool_access_js_1 = require("../tool-access.js");
+const entry_apply_js_1 = require("./entry-apply.js");
+let EntryProposalResolver = class EntryProposalResolver {
+    /*
+     * Not `@transaction`: each row is its own call of the application's mutation (entry-apply.ts), so one
+     * refused row keeps the others. The dock reports the outcome afterwards through `reportProposalOutcome`.
+     */
+    async applyEntryProposal(sessionId, proposalKey, context) {
+        const { domain, user } = context.state;
+        const session = await (0, shell_1.getRepository)(chat_session_js_1.ChatSession).findOneBy({ id: sessionId, domain: { id: domain.id } });
+        if (!session)
+            throw new Error(`ChatSession ${sessionId} not found`);
+        await (0, session_write_gate_js_1.assertMayWriteSession)({
+            session,
+            userId: user?.id,
+            isParticipant: () => (0, participant_lookup_js_1.isSessionParticipant)(domain.id, session.id, user?.id),
+            t: (key, options) => (context.t ? context.t(key, options) : String(options?.defaultValue ?? key))
+        });
+        const key = (proposalKey ?? '').trim();
+        const carrying = await (0, shell_1.getRepository)(chat_message_js_1.ChatMessage).find({
+            select: ['id', 'proposals', 'createdAt'],
+            where: { session: { id: session.id }, proposals: (0, typeorm_1.Not)((0, typeorm_1.IsNull)()) },
+            order: { createdAt: 'ASC' }
+        });
+        const lines = await (0, shell_1.getRepository)(chat_message_js_1.ChatMessage).find({
+            select: ['content'],
+            where: { session: { id: session.id }, role: 'system', content: (0, typeorm_1.Like)(`${proposal_outcome_js_1.PROPOSAL_OUTCOME_PREFIX}${key}:%`) }
+        });
+        const passes = (0, tool_access_js_1.toolAccessFor)(context);
+        return await (0, entry_apply_js_1.applyEntryProposal)(key, {
+            messages: carrying.map((message) => ({ id: message.id, proposals: message.proposalsJson ?? [] })),
+            answered: (0, entry_apply_js_1.entryProposalAnswered)(key, lines.map((line) => line.content)),
+            passesDoor: door => passes(door),
+            state: context.state,
+            /*
+             * The application's API, as the person - the same request state the door would have seen had they typed
+             * the row in: domain, user, and what their address and prohibitions say. No `tx` is handed on, so the
+             * door opens its own transaction per row.
+             */
+            execute: async (mutation, variables) => {
+                const { tx: _tx, afterCommit: _after, ...state } = context.state;
+                const result = await shell_1.GraphqlLocalClient.client.mutate({ mutation: (0, graphql_tag_1.default)(mutation), variables, context: { state, t: context.t } });
+                return { data: result.data, errors: result.errors };
+            },
+            report: (message, error) => env_1.logger.error(message, error)
+        });
+    }
+};
+exports.EntryProposalResolver = EntryProposalResolver;
+tslib_1.__decorate([
+    (0, type_graphql_1.Mutation)(() => graphql_scalars_1.GraphQLJSON, {
+        description: 'Enter the rows of a data entry proposal the person pressed. The rows are the stored proposal\'s; the door, a newer proposal and the target\'s checks are asked again, and each row is written in its own transaction.'
+    }),
+    (0, type_graphql_1.Directive)('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)'),
+    tslib_1.__param(0, (0, type_graphql_1.Arg)('sessionId')),
+    tslib_1.__param(1, (0, type_graphql_1.Arg)('proposalKey')),
+    tslib_1.__param(2, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], EntryProposalResolver.prototype, "applyEntryProposal", null);
+exports.EntryProposalResolver = EntryProposalResolver = tslib_1.__decorate([
+    (0, type_graphql_1.Resolver)()
+], EntryProposalResolver);
+//# sourceMappingURL=entry-resolver.js.map

package/dist-server/service/data-entry/entry-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry-resolver.js","sourceRoot":"","sources":["../../../server/service/data-entry/entry-resolver.ts"],"names":[],"mappings":";;;;AAAA,+CAAsE;AACtE,qDAA6C;AAC7C,qCAA2C;AAE3C,6CAA4C;AAC5C,sEAA6B;AAE7B,iDAAyE;AAEzE,qEAA6D;AAC7D,qEAA6D;AAC7D,iFAA6E;AAC7E,6FAAwF;AACxF,6EAA6E;AAC7E,sDAAiD;AACjD,qDAAoG;AAG7F,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC;;;OAGG;IAMG,AAAN,KAAK,CAAC,kBAAkB,CACJ,SAAiB,EACf,WAAmB,EAChC,OAAwB;QAE/B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QACtC,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAa,EAAC,6BAAW,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAS,CAAC,CAAA;QAC/G,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,SAAS,YAAY,CAAC,CAAA;QACnE,MAAM,IAAA,6CAAqB,EAAC;YAC1B,OAAO;YACP,MAAM,EAAE,IAAI,EAAE,EAAE;YAChB,aAAa,EAAE,GAAG,EAAE,CAAC,IAAA,4CAAoB,EAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;YAC1E,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,IAAI,GAAG,CAAC,CAAC;SAClG,CAAC,CAAA;QAEF,MAAM,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAA,qBAAa,EAAC,6BAAW,CAAC,CAAC,IAAI,CAAC;YACrD,MAAM,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAQ;YAC/C,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAS,EAAE,SAAS,EAAE,IAAA,aAAG,EAAC,IAAA,gBAAM,GAAE,CAAC,EAAS;YAC9E,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAS;SACnC,CAAC,CAAA;QACF,MAAM,KAAK,GAAG,MAAM,IAAA,qBAAa,EAAC,6BAAW,CAAC,CAAC,IAAI,CAAC;YAClD,MAAM,EAAE,CAAC,SAAS,CAAQ;YAC1B,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAA,cAAI,EAAC,GAAG,6CAAuB,GAAG,GAAG,IAAI,CAAC,EAAS;SAC1H,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,IAAA,8BAAa,EAAC,OAAO,CAAC,CAAA;QACrC,OAAO,MAAM,IAAA,mCAAkB,EAAC,GAAG,EAAE;YACnC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAY,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC,CAAC;YACtG,QAAQ,EAAE,IAAA,sCAAqB,EAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5E,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;YAChC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB;;;;eAIG;YACH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE;gBACrC,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC,KAAY,CAAA;gBACvE,MAAM,MAAM,GAAQ,MAAM,0BAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAA,qBAAG,EAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;gBACpI,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;YACrD,CAAC;YACD,MAAM,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,YAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC;SACzD,CAAC,CAAA;IACJ,CAAC;CACF,CAAA;AAvDY,sDAAqB;AAU1B;IALL,IAAA,uBAAQ,EAAC,GAAG,EAAE,CAAC,6BAAW,EAAE;QAC3B,WAAW,EACT,uNAAuN;KAC1N,CAAC;IACD,IAAA,wBAAS,EAAC,uFAAuF,CAAC;IAEhG,mBAAA,IAAA,kBAAG,EAAC,WAAW,CAAC,CAAA;IAChB,mBAAA,IAAA,kBAAG,EAAC,aAAa,CAAC,CAAA;IAClB,mBAAA,IAAA,kBAAG,GAAE,CAAA;;;;+DAyCP;gCAtDU,qBAAqB;IADjC,IAAA,uBAAQ,GAAE;GACE,qBAAqB,CAuDjC","sourcesContent":["import { Resolver, Mutation, Arg, Ctx, Directive } from 'type-graphql'\nimport { GraphQLJSON } from 'graphql-scalars'\nimport { Like, Not, IsNull } from 'typeorm'\n\nimport { logger } from '@things-factory/env'\nimport gql from 'graphql-tag'\n\nimport { getRepository, GraphqlLocalClient } from '@things-factory/shell'\n\nimport { ChatSession } from '../chat-session/chat-session.js'\nimport { ChatMessage } from '../chat-message/chat-message.js'\nimport { assertMayWriteSession } from '../chat-session/session-write-gate.js'\nimport { isSessionParticipant } from '../chat-session-participant/participant-lookup.js'\nimport { PROPOSAL_OUTCOME_PREFIX } from '../chat-message/proposal-outcome.js'\nimport { toolAccessFor } from '../tool-access.js'\nimport { applyEntryProposal, entryProposalAnswered, type EntryApplyOutcome } from './entry-apply.js'\n\n@Resolver()\nexport class EntryProposalResolver {\n  /*\n   * Not `@transaction`: each row is its own call of the application's mutation (entry-apply.ts), so one\n   * refused row keeps the others. The dock reports the outcome afterwards through `reportProposalOutcome`.\n   */\n  @Mutation(() => GraphQLJSON, {\n    description:\n      'Enter the rows of a data entry proposal the person pressed. The rows are the stored proposal\\'s; the door, a newer proposal and the target\\'s checks are asked again, and each row is written in its own transaction.'\n  })\n  @Directive('@privilege(category: \"ai-assistant\", privilege: \"mutation\", domainOwnerGranted: true)')\n  async applyEntryProposal(\n    @Arg('sessionId') sessionId: string,\n    @Arg('proposalKey') proposalKey: string,\n    @Ctx() context: ResolverContext\n  ): Promise<EntryApplyOutcome> {\n    const { domain, user } = context.state\n    const session = await getRepository(ChatSession).findOneBy({ id: sessionId, domain: { id: domain.id } } as any)\n    if (!session) throw new Error(`ChatSession ${sessionId} not found`)\n    await assertMayWriteSession({\n      session,\n      userId: user?.id,\n      isParticipant: () => isSessionParticipant(domain.id, session.id, user?.id),\n      t: (key, options) => (context.t ? context.t(key, options) : String(options?.defaultValue ?? key))\n    })\n\n    const key = (proposalKey ?? '').trim()\n    const carrying = await getRepository(ChatMessage).find({\n      select: ['id', 'proposals', 'createdAt'] as any,\n      where: { session: { id: session.id } as any, proposals: Not(IsNull()) } as any,\n      order: { createdAt: 'ASC' } as any\n    })\n    const lines = await getRepository(ChatMessage).find({\n      select: ['content'] as any,\n      where: { session: { id: session.id } as any, role: 'system', content: Like(`${PROPOSAL_OUTCOME_PREFIX}${key}:%`) } as any\n    })\n\n    const passes = toolAccessFor(context)\n    return await applyEntryProposal(key, {\n      messages: carrying.map((message: any) => ({ id: message.id, proposals: message.proposalsJson ?? [] })),\n      answered: entryProposalAnswered(key, lines.map((line: any) => line.content)),\n      passesDoor: door => passes(door),\n      state: context.state,\n      /*\n       * The application's API, as the person - the same request state the door would have seen had they typed\n       * the row in: domain, user, and what their address and prohibitions say. No `tx` is handed on, so the\n       * door opens its own transaction per row.\n       */\n      execute: async (mutation, variables) => {\n        const { tx: _tx, afterCommit: _after, ...state } = context.state as any\n        const result: any = await GraphqlLocalClient.client.mutate({ mutation: gql(mutation), variables, context: { state, t: context.t } })\n        return { data: result.data, errors: result.errors }\n      },\n      report: (message, error) => logger.error(message, error)\n    })\n  }\n}\n"]}

package/dist-server/service/data-entry/entry-sources.d.ts

@@ -0,0 +1 @@
+export declare function loadSourceTexts(ids: string[], context: any): Promise<Map<string, string>>;

package/dist-server/service/data-entry/entry-sources.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadSourceTexts = loadSourceTexts;
+/*
+ * The text of the files a proposal cites - read through the conversation's own gate, as readChatAttachment
+ * reads them (chat-session/attachment-tools.ts). A file of another conversation, or of a private one the
+ * caller does not sit in, is not read: it is left out, and the rows citing it say they were not checked.
+ */
+const attachment_base_1 = require("@things-factory/attachment-base");
+const shell_1 = require("@things-factory/shell");
+const chat_session_js_1 = require("../chat-session/chat-session.js");
+const session_visibility_js_1 = require("../chat-session/session-visibility.js");
+const participant_lookup_js_1 = require("../chat-session-participant/participant-lookup.js");
+const session_attachments_js_1 = require("../chat-session/session-attachments.js");
+const attachment_policy_js_1 = require("../chat-session/attachment-policy.js");
+/** The whole text is read - the check must see every line, not the part the model was shown. */
+const MAX_CHARS = 2_000_000;
+async function loadSourceTexts(ids, context) {
+    const { domain, user } = context?.state ?? {};
+    const texts = new Map();
+    if (!domain?.id)
+        return texts;
+    for (const id of [...new Set(ids)].slice(0, 20)) {
+        const row = await (0, shell_1.getRepository)(attachment_base_1.Attachment).findOne({ where: { id, domain: { id: domain.id }, refType: session_attachments_js_1.CHAT_ATTACHMENT_REF } });
+        const session = row && (await (0, shell_1.getRepository)(chat_session_js_1.ChatSession).findOne({ where: { id: row.refBy, domain: { id: domain.id } } }));
+        if (!row || !session)
+            continue;
+        if (!(0, session_visibility_js_1.mayReadSession)(session.visibility, await (0, participant_lookup_js_1.isSessionParticipant)(domain.id, session.id, user?.id)))
+            continue;
+        if ((0, attachment_policy_js_1.attachmentKindOf)({ type: row.mimetype, name: row.name }) !== 'text')
+            continue;
+        try {
+            texts.set(id, String(await attachment_base_1.STORAGE.readFile(row.path, 'utf8')).slice(0, MAX_CHARS));
+        }
+        catch {
+            /* gone from storage - the rows citing it say they were not checked */
+        }
+    }
+    return texts;
+}
+//# sourceMappingURL=entry-sources.js.map

package/dist-server/service/data-entry/entry-sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry-sources.js","sourceRoot":"","sources":["../../../server/service/data-entry/entry-sources.ts"],"names":[],"mappings":";;AAiBA,0CAiBC;AAlCD;;;;GAIG;AACH,qEAAqE;AACrE,iDAAqD;AAErD,qEAA6D;AAC7D,iFAAsE;AACtE,6FAAwF;AACxF,mFAA4E;AAC5E,+EAAuE;AAEvE,gGAAgG;AAChG,MAAM,SAAS,GAAG,SAAS,CAAA;AAEpB,KAAK,UAAU,eAAe,CAAC,GAAa,EAAE,OAAY;IAC/D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAA;IAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,IAAI,CAAC,MAAM,EAAE,EAAE;QAAE,OAAO,KAAK,CAAA;IAC7B,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAChD,MAAM,GAAG,GAAQ,MAAM,IAAA,qBAAa,EAAC,4BAAU,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,4CAAmB,EAAS,EAAE,CAAC,CAAA;QAC3I,MAAM,OAAO,GAAQ,GAAG,IAAI,CAAC,MAAM,IAAA,qBAAa,EAAC,6BAAW,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAS,EAAE,CAAC,CAAC,CAAA;QACtI,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO;YAAE,SAAQ;QAC9B,IAAI,CAAC,IAAA,sCAAc,EAAC,OAAO,CAAC,UAAU,EAAE,MAAM,IAAA,4CAAoB,EAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAAE,SAAQ;QAC9G,IAAI,IAAA,uCAAgB,EAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM;YAAE,SAAQ;QACjF,IAAI,CAAC;YACH,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,yBAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC","sourcesContent":["/*\n * The text of the files a proposal cites - read through the conversation's own gate, as readChatAttachment\n * reads them (chat-session/attachment-tools.ts). A file of another conversation, or of a private one the\n * caller does not sit in, is not read: it is left out, and the rows citing it say they were not checked.\n */\nimport { Attachment, STORAGE } from '@things-factory/attachment-base'\nimport { getRepository } from '@things-factory/shell'\n\nimport { ChatSession } from '../chat-session/chat-session.js'\nimport { mayReadSession } from '../chat-session/session-visibility.js'\nimport { isSessionParticipant } from '../chat-session-participant/participant-lookup.js'\nimport { CHAT_ATTACHMENT_REF } from '../chat-session/session-attachments.js'\nimport { attachmentKindOf } from '../chat-session/attachment-policy.js'\n\n/** The whole text is read - the check must see every line, not the part the model was shown. */\nconst MAX_CHARS = 2_000_000\n\nexport async function loadSourceTexts(ids: string[], context: any): Promise<Map<string, string>> {\n  const { domain, user } = context?.state ?? {}\n  const texts = new Map<string, string>()\n  if (!domain?.id) return texts\n  for (const id of [...new Set(ids)].slice(0, 20)) {\n    const row: any = await getRepository(Attachment).findOne({ where: { id, domain: { id: domain.id }, refType: CHAT_ATTACHMENT_REF } as any })\n    const session: any = row && (await getRepository(ChatSession).findOne({ where: { id: row.refBy, domain: { id: domain.id } } as any }))\n    if (!row || !session) continue\n    if (!mayReadSession(session.visibility, await isSessionParticipant(domain.id, session.id, user?.id))) continue\n    if (attachmentKindOf({ type: row.mimetype, name: row.name }) !== 'text') continue\n    try {\n      texts.set(id, String(await STORAGE.readFile(row.path, 'utf8')).slice(0, MAX_CHARS))\n    } catch {\n      /* gone from storage - the rows citing it say they were not checked */\n    }\n  }\n  return texts\n}\n"]}

package/dist-server/service/data-entry/entry-target.d.ts

@@ -0,0 +1,157 @@
+export type EntryFieldType = 'string' | 'text' | 'number' | 'integer' | 'date' | 'boolean' | 'enum';
+export interface EntryField {
+    name: string;
+    type: EntryFieldType;
+    required?: boolean;
+    /** The allowed values of an `enum` field. */
+    values?: string[];
+    /** What the model reads about the field - English, like every tool description. */
+    description?: string;
+    /** i18n key of the column heading on the card. Absent: the field name. */
+    labelKey?: string;
+    /** A number field the card sums - and compares with the total the material prints (§ totals). */
+    total?: boolean;
+}
+/** Where a row came from - which file, and where in it. Shown on the card beside the row. */
+export interface EntrySource {
+    attachmentId?: string;
+    /** "row 3", "the receipt photo", "the person's message" - the model's words. */
+    where?: string;
+}
+export interface EntryIssue {
+    /** The field it is about. Absent: the row as a whole. */
+    field?: string;
+    /** A code the screen translates: `ai-assistant.entry.issue.<code>`, or the target's own `messageKey`. */
+    code: string;
+    messageKey?: string;
+    params?: Record<string, unknown>;
+    /** A blocking issue keeps the row out when the person presses the button. */
+    blocking: boolean;
+}
+export interface EntryRowInput {
+    values?: Record<string, unknown>;
+    sources?: EntrySource[];
+}
+export interface EntryRow {
+    index: number;
+    values: Record<string, unknown>;
+    sources: EntrySource[];
+    issues: EntryIssue[];
+    /** The line of a text source where this row's numbers and dates were all found - the server's check, not the model's word. */
+    evidence?: {
+        attachmentId: string;
+        line: number;
+    };
+}
+export interface EntryContext {
+    /** The request state - domain, user, and when writing, `tx` and `afterCommit`. */
+    state: any;
+}
+export interface EntryApplied {
+    /** The created record's id, when there is one. */
+    id?: string;
+    /** A short name for the conversation line - "2026-09-12 · 택시 · ₩12,400". */
+    label?: string;
+}
+/** What happened, for an application that writes down every assistant call (office's AI audit). */
+export interface EntryEvent {
+    phase: 'propose' | 'apply';
+    tool: string;
+    rows: number;
+    ok: boolean;
+    applied?: number;
+    missed?: number;
+    error?: string;
+    /** propose: the rows as the model gave them; apply: the proposal key and each row's result. */
+    detail?: unknown;
+}
+export interface EntryTarget {
+    /** `<app>.<record>` - `office.expense-line`. */
+    key: string;
+    /** i18n key of the record's name on the card. */
+    labelKey: string;
+    /** What one row is, for the model. */
+    description: string;
+    fields: EntryField[];
+    /**
+     * The application's own mutation that enters one record, as a GraphQL document with one root field -
+     * `mutation ($line: NewExpenseLine!) { addExpenseLine(line: $line) { id } }`. Its root field is the door:
+     * the propose tool is offered only to someone who passes it, and each row is entered by running it with
+     * the person's request state, so `@privilege`, `@transaction` and the door's own checks apply as they do
+     * to a person typing it in.
+     */
+    mutation: string;
+    /** The mutation's variables for one row. */
+    variables(row: EntryRow): Record<string, unknown>;
+    /** What the conversation says of an entered row - its id and a short name. */
+    appliedOf?(data: any, row: EntryRow): EntryApplied | undefined;
+    /** At most this many rows in one proposal. Default 200. */
+    maxRows?: number;
+    /**
+     * Read-only checks the application owns - a duplicate of what is already entered, a code that does not
+     * exist. Asked when the rows are proposed and again when they are entered: the records may have moved.
+     * Returns one list per row, in order.
+     */
+    check?(rows: EntryRow[], context: EntryContext): EntryIssue[][] | Promise<EntryIssue[][]>;
+    /** Told of every proposal and every entering - an application that audits its assistant writes it down. A throw is ignored. */
+    record?(event: EntryEvent, context: EntryContext): void | Promise<void>;
+}
+/**
+ * `Mutation.<root field>` of the target's mutation - the one declaration both the tool's gate and the
+ * entering read. A document that is not one mutation with one root field is refused at boot.
+ */
+export declare function entryDoorOf(mutation: string): string;
+/** Tells the target, and never lets its record keeping stop the work. */
+export declare function recordEntryEvent(target: EntryTarget, event: EntryEvent, context: EntryContext): Promise<void>;
+export declare const DEFAULT_MAX_ROWS = 200;
+/** Validates and keeps a target - `registerEntryTarget` (entry-tools.ts) also opens its tool. A malformed declaration is refused at boot, not in a conversation. */
+export declare function declareEntryTarget(target: EntryTarget): void;
+export declare function entryTargetOf(key: string | undefined): EntryTarget | undefined;
+export declare function entryTargets(): EntryTarget[];
+/** For tests. */
+export declare function clearEntryTargets(): void;
+/** `office.expense-line` → `proposeOfficeExpenseLineEntries` - one tool per target, so each has its own door. */
+export declare function entryToolName(key: string): string;
+export declare function entryCategoryName(key: string): string;
+/**
+ * The rows as the target reads them - each value in its field's type, and what was wrong said as an issue.
+ *
+ * A value that does not fit is **kept as it was written and marked**, never dropped or guessed: the card
+ * shows what the material said, and the person corrects it in the conversation.
+ */
+export declare function normalizeEntryRows(target: EntryTarget, input: unknown): {
+    rows: EntryRow[];
+    cut: number;
+};
+/** Adds the target's own findings to each row. A check that throws marks nothing and is reported by the caller. */
+export declare function withCheckedIssues(rows: EntryRow[], found: EntryIssue[][] | undefined): EntryRow[];
+export declare function isBlocked(row: EntryRow): boolean;
+/** The ways a number or a date is written in a file. */
+export declare function writtenForms(type: EntryFieldType, value: unknown): string[];
+/**
+ * A form found as a whole number - "12,400" is not found in "112,400", "12,4001", "12,400.50" or "12,400,000";
+ * "2026-09-12" not in "2026-09-120". A CSV's own commas are not part of the number.
+ */
+export declare function lineHas(line: string, forms: string[]): boolean;
+/**
+ * Checks each row against the text of the files it cites. `texts` holds what could be read, by attachment id;
+ * an id that is not there was an image, or could not be opened.
+ */
+export declare function verifyRowsAgainstSources(rows: EntryRow[], fields: EntryField[], texts: Map<string, string>): EntryRow[];
+export interface EntryTotal {
+    field: string;
+    /** The sum over every row, and over the rows that will be entered. */
+    all: number;
+    ready: number;
+    /** The total the material prints, as the model read it - and whether the server found it in the file. */
+    declared?: number;
+    declaredFound?: boolean;
+    /** declared - all. */
+    difference?: number;
+}
+/** The sums of the fields declared `total`, and how they stand against the total the material prints. */
+export declare function entryTotals(rows: EntryRow[], fields: EntryField[], declared: {
+    field?: string;
+    value?: unknown;
+    attachmentId?: string;
+} | undefined, texts: Map<string, string>): EntryTotal[];

package/dist-server/service/data-entry/entry-target.js

@@ -0,0 +1,343 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_MAX_ROWS = void 0;
+exports.entryDoorOf = entryDoorOf;
+exports.recordEntryEvent = recordEntryEvent;
+exports.declareEntryTarget = declareEntryTarget;
+exports.entryTargetOf = entryTargetOf;
+exports.entryTargets = entryTargets;
+exports.clearEntryTargets = clearEntryTargets;
+exports.entryToolName = entryToolName;
+exports.entryCategoryName = entryCategoryName;
+exports.normalizeEntryRows = normalizeEntryRows;
+exports.withCheckedIssues = withCheckedIssues;
+exports.isBlocked = isBlocked;
+exports.writtenForms = writtenForms;
+exports.lineHas = lineHas;
+exports.verifyRowsAgainstSources = verifyRowsAgainstSources;
+exports.entryTotals = entryTotals;
+/*
+ * Data entry from material - what an application declares so the assistant can enter its records
+ * (operato-application/design/ai/data-entry.md).
+ *
+ * A person hands the conversation what the records are made of - a bank export, a photo of a receipt,
+ * lines pasted from a mail - and the assistant turns it into rows of one of the application's records.
+ * Nothing is written by the model. It proposes the rows; the card shows them with what was wrong in
+ * each and where each came from; a correction is said in the conversation and the model proposes again;
+ * the person presses the button; the server enters each row **through the application's own GraphQL
+ * mutation**, run with the person's request state - the same door, directives and checks as entering by hand.
+ * There is no second way into the record.
+ *
+ * This file is pure - no framework, no database - so the rules a row passes are tested without a server.
+ */
+const graphql_1 = require("graphql");
+/**
+ * `Mutation.<root field>` of the target's mutation - the one declaration both the tool's gate and the
+ * entering read. A document that is not one mutation with one root field is refused at boot.
+ */
+function entryDoorOf(mutation) {
+    const doc = (0, graphql_1.parse)(mutation);
+    const operations = doc.definitions.filter((one) => one.kind === 'OperationDefinition');
+    if (operations.length !== 1 || operations[0].operation !== 'mutation')
+        throw new Error('is not one mutation');
+    const fields = operations[0].selectionSet.selections.filter((one) => one.kind === 'Field');
+    if (fields.length !== 1)
+        throw new Error('must have exactly one root field');
+    return `Mutation.${fields[0].name.value}`;
+}
+/** Tells the target, and never lets its record keeping stop the work. */
+async function recordEntryEvent(target, event, context) {
+    if (!target.record)
+        return;
+    try {
+        await target.record(event, context);
+    }
+    catch {
+        /* an audit that failed to write is the application's to report */
+    }
+}
+exports.DEFAULT_MAX_ROWS = 200;
+const targets = new Map();
+const KEY = /^[a-z][a-z0-9-]*\.[a-z][a-z0-9-]*$/;
+/** Validates and keeps a target - `registerEntryTarget` (entry-tools.ts) also opens its tool. A malformed declaration is refused at boot, not in a conversation. */
+function declareEntryTarget(target) {
+    if (!KEY.test(target?.key ?? ''))
+        throw new Error(`[ai-assistant] entry target key '${target?.key}' is not '<app>.<record>'.`);
+    try {
+        entryDoorOf(target.mutation ?? '');
+    }
+    catch (error) {
+        throw new Error(`[ai-assistant] entry target '${target.key}': its mutation ${error?.message ?? 'does not parse'}.`);
+    }
+    if (typeof target.variables !== 'function')
+        throw new Error(`[ai-assistant] entry target '${target.key}' has no variables.`);
+    if (!target.fields?.length)
+        throw new Error(`[ai-assistant] entry target '${target.key}' declares no fields.`);
+    const names = new Set();
+    for (const field of target.fields) {
+        if (names.has(field.name))
+            throw new Error(`[ai-assistant] entry target '${target.key}' declares '${field.name}' twice.`);
+        names.add(field.name);
+        if (field.type === 'enum' && !field.values?.length)
+            throw new Error(`[ai-assistant] entry target '${target.key}': enum field '${field.name}' lists no values.`);
+    }
+    targets.set(target.key, target);
+}
+function entryTargetOf(key) {
+    return key ? targets.get(key) : undefined;
+}
+function entryTargets() {
+    return [...targets.values()];
+}
+/** For tests. */
+function clearEntryTargets() {
+    targets.clear();
+}
+/** `office.expense-line` → `proposeOfficeExpenseLineEntries` - one tool per target, so each has its own door. */
+function entryToolName(key) {
+    const pascal = key
+        .split(/[.-]/)
+        .filter(Boolean)
+        .map(part => part[0].toUpperCase() + part.slice(1))
+        .join('');
+    return `propose${pascal}Entries`;
+}
+function entryCategoryName(key) {
+    return `data-entry:${key}`;
+}
+const empty = (value) => value === undefined || value === null || (typeof value === 'string' && !value.trim());
+/** "12,400" · "₩12,400" · "12 400" → 12400. Only the separators people write; anything else is not a number. */
+function toNumber(value) {
+    if (typeof value === 'number')
+        return Number.isFinite(value) ? value : undefined;
+    if (typeof value !== 'string')
+        return undefined;
+    const cleaned = value.trim().replace(/^[₩$€¥£]\s*/, '').replace(/[,\s]/g, '').replace(/원$/, '');
+    if (!/^-?\d+(\.\d+)?$/.test(cleaned))
+        return undefined;
+    return Number(cleaned);
+}
+/** A calendar date as `YYYY-MM-DD` - "2026.9.12", "2026/09/12" too. A day that does not exist is not a date. */
+function toDate(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    const match = value.trim().match(/^(\d{4})[-./](\d{1,2})[-./](\d{1,2})\.?$/);
+    if (!match)
+        return undefined;
+    const [year, month, day] = [Number(match[1]), Number(match[2]), Number(match[3])];
+    const date = new Date(Date.UTC(year, month - 1, day));
+    if (date.getUTCFullYear() !== year || date.getUTCMonth() !== month - 1 || date.getUTCDate() !== day)
+        return undefined;
+    return `${match[1]}-${String(month).padStart(2, '0')}-${String(day).padStart(2, '0')}`;
+}
+function toBoolean(value) {
+    if (typeof value === 'boolean')
+        return value;
+    if (typeof value !== 'string')
+        return undefined;
+    const text = value.trim().toLowerCase();
+    if (['true', 'yes', 'y', '1'].includes(text))
+        return true;
+    if (['false', 'no', 'n', '0'].includes(text))
+        return false;
+    return undefined;
+}
+/**
+ * The rows as the target reads them - each value in its field's type, and what was wrong said as an issue.
+ *
+ * A value that does not fit is **kept as it was written and marked**, never dropped or guessed: the card
+ * shows what the material said, and the person corrects it in the conversation.
+ */
+function normalizeEntryRows(target, input) {
+    const list = Array.isArray(input) ? input : [];
+    const max = target.maxRows ?? exports.DEFAULT_MAX_ROWS;
+    const fields = new Map(target.fields.map(field => [field.name, field]));
+    const rows = list.slice(0, max).map((raw, index) => {
+        const given = raw && typeof raw.values === 'object' && raw.values ? raw.values : {};
+        const values = {};
+        const issues = [];
+        for (const name of Object.keys(given)) {
+            if (!fields.has(name))
+                issues.push({ field: name, code: 'unknown-field', blocking: false });
+        }
+        for (const field of target.fields) {
+            const value = given[field.name];
+            if (empty(value)) {
+                if (field.required)
+                    issues.push({ field: field.name, code: 'required', blocking: true });
+                continue;
+            }
+            let read;
+            let code = '';
+            switch (field.type) {
+                case 'number':
+                    read = toNumber(value);
+                    code = 'not-a-number';
+                    break;
+                case 'integer':
+                    read = toNumber(value);
+                    if (read !== undefined && !Number.isInteger(read))
+                        read = undefined;
+                    code = 'not-an-integer';
+                    break;
+                case 'date':
+                    read = toDate(value);
+                    code = 'not-a-date';
+                    break;
+                case 'boolean':
+                    read = toBoolean(value);
+                    code = 'not-a-boolean';
+                    break;
+                case 'enum':
+                    read = field.values.includes(String(value).trim()) ? String(value).trim() : undefined;
+                    code = 'not-in-list';
+                    break;
+                default:
+                    read = String(value).trim();
+            }
+            if (read === undefined) {
+                values[field.name] = value;
+                issues.push({ field: field.name, code, params: code === 'not-in-list' ? { values: field.values } : undefined, blocking: true });
+            }
+            else {
+                values[field.name] = read;
+            }
+        }
+        const sources = Array.isArray(raw?.sources)
+            ? raw.sources
+                .filter((one) => one && (one.attachmentId || one.where))
+                .map((one) => ({
+                ...(typeof one.attachmentId === 'string' ? { attachmentId: one.attachmentId } : {}),
+                ...(typeof one.where === 'string' ? { where: one.where.slice(0, 120) } : {})
+            }))
+            : [];
+        if (!sources.length)
+            issues.push({ code: 'no-source', blocking: false });
+        return { index, values, sources, issues };
+    });
+    return { rows, cut: Math.max(0, list.length - max) };
+}
+/** Adds the target's own findings to each row. A check that throws marks nothing and is reported by the caller. */
+function withCheckedIssues(rows, found) {
+    if (!found)
+        return rows;
+    return rows.map((row, i) => (found[i]?.length ? { ...row, issues: [...row.issues, ...found[i]] } : row));
+}
+function isBlocked(row) {
+    return row.issues.some(issue => issue.blocking);
+}
+/* ── Checking the rows against the material (design/ai/data-entry.md §4-1) ─────────────────────────────
+ *
+ * A row cites where it came from; the model's word is not proof. For a text source the server looks: the
+ * row's numbers and dates must stand together on one line of the cited file. Found - the row carries that
+ * line as evidence. A value the file does not have is marked, unless the row also cites the person's
+ * message (a correction said in the conversation). A photo cannot be read here - the row says so.
+ * Names and descriptions are not looked for: the model tidies them, and a tidied name is not a wrong one.
+ */
+const PERSON = /person|message|user|사용자|말/i;
+/** The ways a number or a date is written in a file. */
+function writtenForms(type, value) {
+    if (type === 'number' || type === 'integer') {
+        if (typeof value !== 'number' || !Number.isFinite(value))
+            return [];
+        const negative = value < 0;
+        const abs = Math.abs(value);
+        const fixed = Number.isInteger(abs) ? String(abs) : abs.toFixed(2).replace(/0+$/, '').replace(/\.$/, '');
+        const [int, frac] = fixed.split('.');
+        const grouped = int.replace(/\B(?=(\d{3})+(?!\d))/g, ',');
+        const forms = new Set();
+        for (const whole of [int, grouped]) {
+            forms.add(frac ? `${whole}.${frac}` : whole);
+            if (!frac)
+                forms.add(`${whole}.00`);
+        }
+        return [...forms].map(form => (negative ? `-${form}` : form));
+    }
+    if (type === 'date') {
+        const match = typeof value === 'string' ? value.match(/^(\d{4})-(\d{2})-(\d{2})$/) : null;
+        if (!match)
+            return [];
+        const [, y, m, d] = match;
+        const mm = String(Number(m));
+        const dd = String(Number(d));
+        return [`${y}-${m}-${d}`, `${y}.${m}.${d}`, `${y}/${m}/${d}`, `${y}${m}${d}`, `${y}.${mm}.${dd}`, `${y}/${mm}/${dd}`, `${y}-${mm}-${dd}`, `${y.slice(2)}.${m}.${d}`, `${y.slice(2)}/${m}/${d}`];
+    }
+    return [];
+}
+/**
+ * A form found as a whole number - "12,400" is not found in "112,400", "12,4001", "12,400.50" or "12,400,000";
+ * "2026-09-12" not in "2026-09-120". A CSV's own commas are not part of the number.
+ */
+function lineHas(line, forms) {
+    const digit = (c) => !!c && c >= '0' && c <= '9';
+    return forms.some(form => {
+        for (let at = line.indexOf(form); at >= 0; at = line.indexOf(form, at + 1)) {
+            const before = line[at - 1];
+            const after = line[at + form.length];
+            /* A comma is also the column separator of a CSV: only a comma and three digits more continue the number. */
+            if (digit(before) || (before === '.' && digit(line[at - 2])))
+                continue;
+            if (digit(after) || (after === '.' && digit(line[at + form.length + 1])))
+                continue;
+            if (after === ',' && /^,\d{3}(?!\d)/.test(line.slice(at + form.length)))
+                continue;
+            return true;
+        }
+        return false;
+    });
+}
+/**
+ * Checks each row against the text of the files it cites. `texts` holds what could be read, by attachment id;
+ * an id that is not there was an image, or could not be opened.
+ */
+function verifyRowsAgainstSources(rows, fields, texts) {
+    const checked = fields.filter(field => ['number', 'integer', 'date'].includes(field.type));
+    return rows.map(row => {
+        const files = row.sources.map(source => source.attachmentId).filter((id) => !!id);
+        if (!files.length || !checked.length)
+            return row;
+        const readable = files.filter(id => texts.has(id));
+        if (!readable.length)
+            return { ...row, issues: [...row.issues, { code: 'source-not-checked', blocking: false }] };
+        const forms = checked
+            .map(field => ({ field, forms: writtenForms(field.type, row.values[field.name]) }))
+            .filter(one => one.forms.length);
+        if (!forms.length)
+            return row;
+        for (const id of readable) {
+            const lines = texts.get(id).split(/\r?\n/);
+            const at = lines.findIndex(line => forms.every(one => lineHas(line, one.forms)));
+            if (at >= 0)
+                return { ...row, evidence: { attachmentId: id, line: at + 1 } };
+        }
+        const saidByPerson = row.sources.some(source => !source.attachmentId && PERSON.test(source.where ?? ''));
+        const issues = [...row.issues];
+        for (const one of forms) {
+            const anywhere = readable.some(id => texts.get(id).split(/\r?\n/).some(line => lineHas(line, one.forms)));
+            if (!anywhere && !saidByPerson)
+                issues.push({ field: one.field.name, code: 'not-in-source', blocking: false });
+        }
+        if (issues.length === row.issues.length)
+            issues.push({ code: 'source-scattered', blocking: false });
+        return { ...row, issues };
+    });
+}
+/** The sums of the fields declared `total`, and how they stand against the total the material prints. */
+function entryTotals(rows, fields, declared, texts) {
+    return fields
+        .filter(field => field.total && (field.type === 'number' || field.type === 'integer'))
+        .map(field => {
+        const sum = (list) => Math.round(list.reduce((acc, row) => acc + (typeof row.values[field.name] === 'number' ? row.values[field.name] : 0), 0) * 100) / 100;
+        const total = { field: field.name, all: sum(rows), ready: sum(rows.filter(row => !isBlocked(row))) };
+        const value = declared && (declared.field ?? field.name) === field.name ? toNumber(declared.value) : undefined;
+        if (value !== undefined) {
+            total.declared = value;
+            total.difference = Math.round((value - total.all) * 100) / 100;
+            const text = declared.attachmentId ? texts.get(declared.attachmentId) : undefined;
+            if (text !== undefined)
+                total.declaredFound = text.split(/\r?\n/).some(line => lineHas(line, writtenForms(field.type, value)));
+        }
+        return total;
+    });
+}
+//# sourceMappingURL=entry-target.js.map