@tokenfactory/acc-runner 0.40.27 → 0.40.29

package/dist/attachments/allowlist.d.ts

@@ -0,0 +1,16 @@
+/**
+ * CX-1 UPLOADS — runner-side type guards + size ceiling.
+ *
+ * Deliberately MIRRORS api/chat/attachments-allowlist.ts (separate package, so
+ * it cannot import it). Keep the two in sync: the server is the authority and
+ * rejects first; this is the runner's defence-in-depth ceiling so a tampered or
+ * oversized object never reaches the engine.
+ */
+import type { AttachmentKind } from "./types.js";
+export declare const MAX_ATTACHMENT_BYTES: Record<AttachmentKind, number>;
+export declare const ALLOWED_CONTENT_TYPES: Record<string, AttachmentKind>;
+/** "text/plain; charset=utf-8" -> "text/plain". */
+export declare function normalizeContentType(contentType: string): string;
+export declare function kindForContentType(contentType: string): AttachmentKind | null;
+export declare function isWithinSizeCeiling(kind: AttachmentKind, byteSize: number): boolean;
+//# sourceMappingURL=allowlist.d.ts.map

package/dist/attachments/allowlist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.d.ts","sourceRoot":"","sources":["../../src/attachments/allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAI/D,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAShE,CAAC;AAEF,mDAAmD;AACnD,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAE7E;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnF"}

package/dist/attachments/allowlist.js

@@ -0,0 +1,34 @@
+/**
+ * CX-1 UPLOADS — runner-side type guards + size ceiling.
+ *
+ * Deliberately MIRRORS api/chat/attachments-allowlist.ts (separate package, so
+ * it cannot import it). Keep the two in sync: the server is the authority and
+ * rejects first; this is the runner's defence-in-depth ceiling so a tampered or
+ * oversized object never reaches the engine.
+ */
+export const MAX_ATTACHMENT_BYTES = {
+    image: 20 * 1024 * 1024, // 20 MiB
+    pdf: 20 * 1024 * 1024, // 20 MiB
+    text: 5 * 1024 * 1024, // 5 MiB
+};
+export const ALLOWED_CONTENT_TYPES = {
+    "image/png": "image",
+    "image/jpeg": "image",
+    "image/gif": "image",
+    "image/webp": "image",
+    "application/pdf": "pdf",
+    "text/plain": "text",
+    "text/csv": "text",
+    "text/markdown": "text",
+};
+/** "text/plain; charset=utf-8" -> "text/plain". */
+export function normalizeContentType(contentType) {
+    return (contentType ?? "").split(";")[0].trim().toLowerCase();
+}
+export function kindForContentType(contentType) {
+    return ALLOWED_CONTENT_TYPES[normalizeContentType(contentType)] ?? null;
+}
+export function isWithinSizeCeiling(kind, byteSize) {
+    return Number.isFinite(byteSize) && byteSize >= 0 && byteSize <= MAX_ATTACHMENT_BYTES[kind];
+}
+//# sourceMappingURL=allowlist.js.map

package/dist/attachments/allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.js","sourceRoot":"","sources":["../../src/attachments/allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,CAAC,MAAM,oBAAoB,GAAmC;IAClE,KAAK,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,SAAS;IAClC,GAAG,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,SAAS;IAChC,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ;CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAmC;IACnE,WAAW,EAAE,OAAO;IACpB,YAAY,EAAE,OAAO;IACrB,WAAW,EAAE,OAAO;IACpB,YAAY,EAAE,OAAO;IACrB,iBAAiB,EAAE,KAAK;IACxB,YAAY,EAAE,MAAM;IACpB,UAAU,EAAE,MAAM;IAClB,eAAe,EAAE,MAAM;CACxB,CAAC;AAEF,mDAAmD;AACnD,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,OAAO,qBAAqB,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,IAAI,IAAI,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAoB,EAAE,QAAgB;IACxE,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;AAC9F,CAAC"}

package/dist/attachments/content-block.d.ts

@@ -0,0 +1,16 @@
+/**
+ * CX-1 UPLOADS — decode fetched bytes into a provider-neutral engine content
+ * block for genuine vision.
+ *
+ *   image -> { type: "image",    source: { base64 } }   (vision)
+ *   pdf   -> { type: "document", source: { base64 } }    (vision)
+ *   text  -> { type: "text",     text }                  (inlined)
+ *
+ * A Track A follow-up hands the resulting block(s) to the frozen engine adapters
+ * via EngineStreamTurnOptions; this helper never touches those adapters.
+ */
+import type { EngineContentBlock, FetchedAttachment } from "./types.js";
+export declare function toEngineContentBlock(attachment: FetchedAttachment): EngineContentBlock;
+/** Convenience: map a batch of fetched attachments to engine content blocks. */
+export declare function toEngineContentBlocks(attachments: readonly FetchedAttachment[]): EngineContentBlock[];
+//# sourceMappingURL=content-block.d.ts.map

package/dist/attachments/content-block.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-block.d.ts","sourceRoot":"","sources":["../../src/attachments/content-block.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAExE,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,iBAAiB,GAAG,kBAAkB,CAqBtF;AAED,gFAAgF;AAChF,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,SAAS,iBAAiB,EAAE,GACxC,kBAAkB,EAAE,CAEtB"}

package/dist/attachments/content-block.js

@@ -0,0 +1,38 @@
+/**
+ * CX-1 UPLOADS — decode fetched bytes into a provider-neutral engine content
+ * block for genuine vision.
+ *
+ *   image -> { type: "image",    source: { base64 } }   (vision)
+ *   pdf   -> { type: "document", source: { base64 } }    (vision)
+ *   text  -> { type: "text",     text }                  (inlined)
+ *
+ * A Track A follow-up hands the resulting block(s) to the frozen engine adapters
+ * via EngineStreamTurnOptions; this helper never touches those adapters.
+ */
+import { Buffer } from "node:buffer";
+export function toEngineContentBlock(attachment) {
+    if (attachment.kind === "text") {
+        return { type: "text", text: Buffer.from(attachment.bytes).toString("utf-8") };
+    }
+    const data = Buffer.from(attachment.bytes).toString("base64");
+    if (attachment.kind === "pdf") {
+        return {
+            type: "document",
+            source: { type: "base64", media_type: "application/pdf", data },
+        };
+    }
+    // image
+    return {
+        type: "image",
+        source: {
+            type: "base64",
+            media_type: attachment.contentType || "image/png",
+            data,
+        },
+    };
+}
+/** Convenience: map a batch of fetched attachments to engine content blocks. */
+export function toEngineContentBlocks(attachments) {
+    return attachments.map(toEngineContentBlock);
+}
+//# sourceMappingURL=content-block.js.map

package/dist/attachments/content-block.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-block.js","sourceRoot":"","sources":["../../src/attachments/content-block.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,MAAM,UAAU,oBAAoB,CAAC,UAA6B;IAChE,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;IACjF,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC9D,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,iBAAiB,EAAE,IAAI,EAAE;SAChE,CAAC;IACJ,CAAC;IACD,QAAQ;IACR,OAAO;QACL,IAAI,EAAE,OAAO;QACb,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,UAAU,CAAC,WAAW,IAAI,WAAW;YACjD,IAAI;SACL;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CACnC,WAAyC;IAEzC,OAAO,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAC/C,CAAC"}

package/dist/attachments/fetch-attachment.d.ts

@@ -0,0 +1,24 @@
+/**
+ * CX-1 UPLOADS — resolve an attachment's bytes via a short-lived signed URL.
+ *
+ * Two hops, both authorized, never public:
+ *   1. POST /api/chat/attachments { op: "sign-download", attachment_id } with a
+ *      Bearer token (CRON_SECRET in fleet serving, or a delegation bearer). The
+ *      API mints a short-lived signed download URL from the private bucket.
+ *   2. GET the signed URL for the raw bytes.
+ *
+ * Self-contained: deps are injected, so this is unit-testable with a fake fetch
+ * and carries no dependency on watch.ts or the engine adapters. The Track A
+ * wiring decides which bearer to pass.
+ */
+import type { FetchedAttachment } from "./types.js";
+export interface FetchAttachmentDeps {
+    /** Base URL of the ACC API, e.g. cfg.publicUrl. Trailing slashes are trimmed. */
+    publicUrl: string;
+    /** Bearer read at call time (CRON_SECRET for fleet serving, or delegation). */
+    authToken: string;
+    /** Injectable for tests; defaults to the global fetch. */
+    fetchImpl?: typeof fetch;
+}
+export declare function fetchAttachment(attachmentId: string, deps: FetchAttachmentDeps): Promise<FetchedAttachment>;
+//# sourceMappingURL=fetch-attachment.d.ts.map

package/dist/attachments/fetch-attachment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-attachment.d.ts","sourceRoot":"","sources":["../../src/attachments/fetch-attachment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAkB,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAGpE,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAWD,wBAAsB,eAAe,CACnC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,iBAAiB,CAAC,CA6C5B"}

package/dist/attachments/fetch-attachment.js

@@ -0,0 +1,55 @@
+/**
+ * CX-1 UPLOADS — resolve an attachment's bytes via a short-lived signed URL.
+ *
+ * Two hops, both authorized, never public:
+ *   1. POST /api/chat/attachments { op: "sign-download", attachment_id } with a
+ *      Bearer token (CRON_SECRET in fleet serving, or a delegation bearer). The
+ *      API mints a short-lived signed download URL from the private bucket.
+ *   2. GET the signed URL for the raw bytes.
+ *
+ * Self-contained: deps are injected, so this is unit-testable with a fake fetch
+ * and carries no dependency on watch.ts or the engine adapters. The Track A
+ * wiring decides which bearer to pass.
+ */
+import { kindForContentType, MAX_ATTACHMENT_BYTES } from "./allowlist.js";
+export async function fetchAttachment(attachmentId, deps) {
+    if (!attachmentId)
+        throw new Error("fetchAttachment: attachmentId required");
+    const doFetch = deps.fetchImpl ?? fetch;
+    const base = deps.publicUrl.replace(/\/+$/, "");
+    const signRes = await doFetch(`${base}/api/chat/attachments`, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${deps.authToken}`,
+        },
+        body: JSON.stringify({ op: "sign-download", attachment_id: attachmentId }),
+    });
+    if (!signRes.ok) {
+        throw new Error(`sign-download failed: HTTP ${signRes.status}`);
+    }
+    const json = (await signRes.json());
+    if (!json.ok || !json.signed_url) {
+        throw new Error(`sign-download rejected: ${json.error ?? "no signed_url"}`);
+    }
+    const kind = json.kind ?? kindForContentType(json.content_type ?? "");
+    if (!kind) {
+        throw new Error(`unsupported attachment content-type: ${json.content_type ?? "unknown"}`);
+    }
+    const fileRes = await doFetch(json.signed_url);
+    if (!fileRes.ok) {
+        throw new Error(`attachment fetch failed: HTTP ${fileRes.status}`);
+    }
+    const bytes = new Uint8Array(await fileRes.arrayBuffer());
+    if (bytes.byteLength > MAX_ATTACHMENT_BYTES[kind]) {
+        throw new Error(`attachment ${bytes.byteLength} bytes exceeds ${MAX_ATTACHMENT_BYTES[kind]}-byte ceiling for ${kind}`);
+    }
+    return {
+        attachmentId,
+        kind,
+        contentType: json.content_type ?? "",
+        filename: json.filename ?? "file",
+        bytes,
+    };
+}
+//# sourceMappingURL=fetch-attachment.js.map

package/dist/attachments/fetch-attachment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-attachment.js","sourceRoot":"","sources":["../../src/attachments/fetch-attachment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAoB1E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,YAAoB,EACpB,IAAyB;IAEzB,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEhD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,uBAAuB,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE;SAC1C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;KAC3E,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAyB,CAAC;IAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,IAAI,GACP,IAAI,CAAC,IAAmC,IAAI,kBAAkB,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,CAAC,YAAY,IAAI,SAAS,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,cAAc,KAAK,CAAC,UAAU,kBAAkB,oBAAoB,CAAC,IAAI,CAAC,qBAAqB,IAAI,EAAE,CACtG,CAAC;IACJ,CAAC;IAED,OAAO;QACL,YAAY;QACZ,IAAI;QACJ,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;QACpC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM;QACjC,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/attachments/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * CX-1 UPLOADS: the runner attachment-vision barrel.
+ *
+ * Self-contained PRIMITIVES, intentionally `dead-until-wired`. A serving runner
+ * resolves an attachment's bytes via a short-lived signed URL and decodes them
+ * into a provider-neutral engine content block:
+ *   - allowlist.ts       — type guards + size ceiling mirroring the server.
+ *   - fetch-attachment.ts — signed-URL resolve + authorized byte fetch.
+ *   - content-block.ts    — bytes -> provider-neutral vision/text block.
+ *
+ * Attachments are UNTRUSTED model input. These primitives only READ bytes and
+ * shape them for the engine; the propose-confirm firewall remains the sole
+ * mutation path. The Track A follow-up wires toEngineContentBlock output into
+ * the frozen engine adapters (EngineStreamTurnOptions) and mounts the fetch on
+ * the chat serve path.
+ */
+export type { AttachmentKind, FetchedAttachment, EngineContentBlock, EngineBase64Source, } from "./types.js";
+export { MAX_ATTACHMENT_BYTES, ALLOWED_CONTENT_TYPES, normalizeContentType, kindForContentType, isWithinSizeCeiling, } from "./allowlist.js";
+export { fetchAttachment, type FetchAttachmentDeps } from "./fetch-attachment.js";
+export { toEngineContentBlock, toEngineContentBlocks } from "./content-block.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/attachments/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/attachments/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAElF,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/attachments/index.js

@@ -0,0 +1,20 @@
+/**
+ * CX-1 UPLOADS: the runner attachment-vision barrel.
+ *
+ * Self-contained PRIMITIVES, intentionally `dead-until-wired`. A serving runner
+ * resolves an attachment's bytes via a short-lived signed URL and decodes them
+ * into a provider-neutral engine content block:
+ *   - allowlist.ts       — type guards + size ceiling mirroring the server.
+ *   - fetch-attachment.ts — signed-URL resolve + authorized byte fetch.
+ *   - content-block.ts    — bytes -> provider-neutral vision/text block.
+ *
+ * Attachments are UNTRUSTED model input. These primitives only READ bytes and
+ * shape them for the engine; the propose-confirm firewall remains the sole
+ * mutation path. The Track A follow-up wires toEngineContentBlock output into
+ * the frozen engine adapters (EngineStreamTurnOptions) and mounts the fetch on
+ * the chat serve path.
+ */
+export { MAX_ATTACHMENT_BYTES, ALLOWED_CONTENT_TYPES, normalizeContentType, kindForContentType, isWithinSizeCeiling, } from "./allowlist.js";
+export { fetchAttachment } from "./fetch-attachment.js";
+export { toEngineContentBlock, toEngineContentBlocks } from "./content-block.js";
+//# sourceMappingURL=index.js.map

package/dist/attachments/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/attachments/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AASH,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,eAAe,EAA4B,MAAM,uBAAuB,CAAC;AAElF,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/attachments/types.d.ts

@@ -0,0 +1,39 @@
+/**
+ * CX-1 UPLOADS — runner attachment primitive types.
+ *
+ * These are self-contained, provider-neutral shapes. A Track A follow-up hands
+ * an EngineContentBlock[] to the frozen engine adapters (EngineStreamTurnOptions);
+ * nothing here edits those adapters.
+ */
+export type AttachmentKind = "image" | "pdf" | "text";
+/** Bytes + metadata for one attachment the serving runner resolved. */
+export interface FetchedAttachment {
+    attachmentId: string;
+    kind: AttachmentKind;
+    contentType: string;
+    filename: string;
+    bytes: Uint8Array;
+}
+/**
+ * Provider-neutral engine content block. The union mirrors the claude-native
+ * block shape the engine adapters already parse on the OUTPUT path
+ * (`{ type: "text" | "image" | "document", ... }`), so the Track A wiring can
+ * pass these straight through for genuine vision — the model answers about the
+ * chart/screenshot content, not OCR'd text.
+ */
+export type EngineContentBlock = {
+    type: "text";
+    text: string;
+} | {
+    type: "image";
+    source: EngineBase64Source;
+} | {
+    type: "document";
+    source: EngineBase64Source;
+};
+export interface EngineBase64Source {
+    type: "base64";
+    media_type: string;
+    data: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/attachments/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/attachments/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;AAEtD,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,cAAc,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAErD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd"}

package/dist/attachments/types.js

@@ -0,0 +1,9 @@
+/**
+ * CX-1 UPLOADS — runner attachment primitive types.
+ *
+ * These are self-contained, provider-neutral shapes. A Track A follow-up hands
+ * an EngineContentBlock[] to the frozen engine adapters (EngineStreamTurnOptions);
+ * nothing here edits those adapters.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/attachments/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/attachments/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/chat-cancel/cancel-controller.d.ts

@@ -0,0 +1,77 @@
+/**
+ * CX-3 STOP-CANCEL: the runner-side cancel controller.
+ *
+ * The browser's Stop calls acc.cancel_chat_turn (migration 0278), which makes the
+ * turn terminal-CANCELLED server-side. This controller is the local counterpart
+ * that tears the still-running engine down promptly so the child is provably dead
+ * and the runner's slot frees:
+ *
+ *   • register(turn)      — a companion registers each in-flight turn (its abort +
+ *                           optional engine-child handle) as it launches.
+ *   • requestCancel(id)   — abort the drive loop AND escalate-terminate the child
+ *                           (SIGTERM → grace → SIGKILL). Called on a direct signal
+ *                           (a broadcast, or a shutdown fan-out).
+ *   • reconcile(source)   — poll the server for which in-flight turns are now
+ *                           cancelled and requestCancel each. One deterministic
+ *                           pass; the e2e rig drives this directly.
+ *   • start(source, ms)   — production convenience: reconcile on an interval.
+ *
+ * Because acc.cancel_chat_turn already made the turn terminal, the driver's
+ * abort-path requeue no-ops against the cancelled row (api/chat/_lane-materialize
+ * requeueTurn is guarded to claimed/streaming) — so tearing down here never revives
+ * or double-completes the turn. Everything is injected, so the whole thing runs
+ * without a network or a real child.
+ *
+ * NOTE (scope): this module ships the primitives + a Supabase-backed source
+ * (cancel-source.ts). Wiring it into ChatCompanion.launch (registering each turn
+ * and starting the reconcile loop) is a follow-up, mirroring how the AS-3 resume
+ * controller and the FLEET-SERVE watch-chat primitives landed ahead of their
+ * watch.ts wiring.
+ */
+import { type TerminateChildOptions } from "./child-terminator.js";
+import type { CancellableTurn, CancelSource, ChatCancelReason, TurnCancelResult } from "./types.js";
+export interface ChatCancelControllerOptions {
+    /** Options forwarded to terminateEngineChild (grace window + timer seam). */
+    terminate?: TerminateChildOptions;
+    /** Schedule a repeating callback; injected in tests. Defaults to unref'd setInterval. */
+    scheduleInterval?: (ms: number, cb: () => void) => () => void;
+    /** Best-effort structured log sink. */
+    onLog?: (line: string) => void;
+    /** Best-effort observability: fired after each local cancel settles. */
+    onCancel?: (result: TurnCancelResult) => void;
+}
+export declare class ChatCancelController {
+    private readonly opts;
+    private readonly turns;
+    /** Turns already cancelled here, so a repeated reconcile is a no-op (idempotent). */
+    private readonly cancelled;
+    private stopInterval;
+    private reconciling;
+    constructor(opts?: ChatCancelControllerOptions);
+    /** Register an in-flight turn as cancellable. Idempotent per turn id. */
+    register(turn: CancellableTurn): void;
+    /** Drop a turn once it settles (the companion calls this from its `finally`). */
+    unregister(turnId: string): void;
+    /** Turn ids currently registered as in flight. */
+    inFlightTurnIds(): string[];
+    /**
+     * Cancel one in-flight turn locally: fire its abort (stops the drive loop /
+     * SIGTERMs the child via the engine's signal) AND escalate-terminate the child
+     * handle if one was registered, so a SIGTERM-swallowing engine is still provably
+     * dead. Idempotent: a second call for the same turn is a no-op.
+     */
+    requestCancel(turnId: string, reason?: ChatCancelReason): Promise<TurnCancelResult>;
+    /**
+     * One reconcile pass: ask the source which registered turns the operator has
+     * cancelled server-side and tear each down. Returns the turn ids cancelled this
+     * pass. Never throws — a source read error logs and yields an empty pass so the
+     * loop survives a transient DB blip. Guarded against overlap so a slow pass does
+     * not stack on the interval.
+     */
+    reconcile(source: CancelSource): Promise<string[]>;
+    /** Start reconciling against `source` every `intervalMs`. Returns a stopper. */
+    start(source: CancelSource, intervalMs?: number): () => void;
+    /** Stop the reconcile loop (does not abort in-flight turns). */
+    stop(): void;
+}
+//# sourceMappingURL=cancel-controller.d.ts.map

package/dist/chat-cancel/cancel-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cancel-controller.d.ts","sourceRoot":"","sources":["../../src/chat-cancel/cancel-controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAwB,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACzF,OAAO,KAAK,EACV,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,2BAA2B;IAC1C,6EAA6E;IAC7E,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,yFAAyF;IACzF,gBAAgB,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;IAC9D,uCAAuC;IACvC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,wEAAwE;IACxE,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAC;CAC/C;AAQD,qBAAa,oBAAoB;IAOnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsC;IAC5D,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,WAAW,CAAS;gBAEC,IAAI,GAAE,2BAAgC;IAEnE,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI;IAIrC,iFAAiF;IACjF,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAKhC,kDAAkD;IAClD,eAAe,IAAI,MAAM,EAAE;IAI3B;;;;;OAKG;IACG,aAAa,CACjB,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,gBAAuC,GAC9C,OAAO,CAAC,gBAAgB,CAAC;IA+B5B;;;;;;OAMG;IACG,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAwBxD,gFAAgF;IAChF,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,SAAM,GAAG,MAAM,IAAI;IAazD,gEAAgE;IAChE,IAAI,IAAI,IAAI;CAGb"}

package/dist/chat-cancel/cancel-controller.js

@@ -0,0 +1,148 @@
+/**
+ * CX-3 STOP-CANCEL: the runner-side cancel controller.
+ *
+ * The browser's Stop calls acc.cancel_chat_turn (migration 0278), which makes the
+ * turn terminal-CANCELLED server-side. This controller is the local counterpart
+ * that tears the still-running engine down promptly so the child is provably dead
+ * and the runner's slot frees:
+ *
+ *   • register(turn)      — a companion registers each in-flight turn (its abort +
+ *                           optional engine-child handle) as it launches.
+ *   • requestCancel(id)   — abort the drive loop AND escalate-terminate the child
+ *                           (SIGTERM → grace → SIGKILL). Called on a direct signal
+ *                           (a broadcast, or a shutdown fan-out).
+ *   • reconcile(source)   — poll the server for which in-flight turns are now
+ *                           cancelled and requestCancel each. One deterministic
+ *                           pass; the e2e rig drives this directly.
+ *   • start(source, ms)   — production convenience: reconcile on an interval.
+ *
+ * Because acc.cancel_chat_turn already made the turn terminal, the driver's
+ * abort-path requeue no-ops against the cancelled row (api/chat/_lane-materialize
+ * requeueTurn is guarded to claimed/streaming) — so tearing down here never revives
+ * or double-completes the turn. Everything is injected, so the whole thing runs
+ * without a network or a real child.
+ *
+ * NOTE (scope): this module ships the primitives + a Supabase-backed source
+ * (cancel-source.ts). Wiring it into ChatCompanion.launch (registering each turn
+ * and starting the reconcile loop) is a follow-up, mirroring how the AS-3 resume
+ * controller and the FLEET-SERVE watch-chat primitives landed ahead of their
+ * watch.ts wiring.
+ */
+import { terminateEngineChild } from "./child-terminator.js";
+function defaultScheduleInterval(ms, cb) {
+    const t = setInterval(cb, ms);
+    t.unref?.();
+    return () => clearInterval(t);
+}
+export class ChatCancelController {
+    opts;
+    turns = new Map();
+    /** Turns already cancelled here, so a repeated reconcile is a no-op (idempotent). */
+    cancelled = new Set();
+    stopInterval = null;
+    reconciling = false;
+    constructor(opts = {}) {
+        this.opts = opts;
+    }
+    /** Register an in-flight turn as cancellable. Idempotent per turn id. */
+    register(turn) {
+        this.turns.set(turn.turnId, turn);
+    }
+    /** Drop a turn once it settles (the companion calls this from its `finally`). */
+    unregister(turnId) {
+        this.turns.delete(turnId);
+        this.cancelled.delete(turnId);
+    }
+    /** Turn ids currently registered as in flight. */
+    inFlightTurnIds() {
+        return [...this.turns.keys()];
+    }
+    /**
+     * Cancel one in-flight turn locally: fire its abort (stops the drive loop /
+     * SIGTERMs the child via the engine's signal) AND escalate-terminate the child
+     * handle if one was registered, so a SIGTERM-swallowing engine is still provably
+     * dead. Idempotent: a second call for the same turn is a no-op.
+     */
+    async requestCancel(turnId, reason = "operator_cancelled") {
+        const turn = this.turns.get(turnId);
+        if (!turn) {
+            return { turnId, aborted: false, notFound: true };
+        }
+        if (this.cancelled.has(turnId)) {
+            // Already torn down; report as handled without re-signalling.
+            return { turnId, aborted: true, notFound: false };
+        }
+        this.cancelled.add(turnId);
+        try {
+            turn.abort(reason);
+        }
+        catch (err) {
+            this.opts.onLog?.(`[acc-runner] chat cancel abort(${turnId}) threw: ${err.message}`);
+        }
+        const result = { turnId, aborted: true, notFound: false };
+        if (turn.child) {
+            try {
+                result.child = await terminateEngineChild(turn.child, this.opts.terminate);
+            }
+            catch (err) {
+                this.opts.onLog?.(`[acc-runner] chat cancel terminate(${turnId}) threw: ${err.message}`);
+            }
+        }
+        this.opts.onCancel?.(result);
+        return result;
+    }
+    /**
+     * One reconcile pass: ask the source which registered turns the operator has
+     * cancelled server-side and tear each down. Returns the turn ids cancelled this
+     * pass. Never throws — a source read error logs and yields an empty pass so the
+     * loop survives a transient DB blip. Guarded against overlap so a slow pass does
+     * not stack on the interval.
+     */
+    async reconcile(source) {
+        if (this.reconciling)
+            return [];
+        this.reconciling = true;
+        try {
+            const ids = this.inFlightTurnIds().filter((id) => !this.cancelled.has(id));
+            if (ids.length === 0)
+                return [];
+            let cancelledIds;
+            try {
+                cancelledIds = await source.listCancelled(ids);
+            }
+            catch (err) {
+                this.opts.onLog?.(`[acc-runner] chat cancel reconcile source failed: ${err.message}`);
+                return [];
+            }
+            const done = [];
+            for (const id of cancelledIds) {
+                const r = await this.requestCancel(id, "operator_cancelled");
+                if (r.aborted)
+                    done.push(id);
+            }
+            return done;
+        }
+        finally {
+            this.reconciling = false;
+        }
+    }
+    /** Start reconciling against `source` every `intervalMs`. Returns a stopper. */
+    start(source, intervalMs = 750) {
+        if (this.stopInterval)
+            return this.stopInterval;
+        const schedule = this.opts.scheduleInterval ?? defaultScheduleInterval;
+        const cancel = schedule(intervalMs, () => {
+            void this.reconcile(source);
+        });
+        this.stopInterval = () => {
+            cancel();
+            this.stopInterval = null;
+        };
+        return this.stopInterval;
+    }
+    /** Stop the reconcile loop (does not abort in-flight turns). */
+    stop() {
+        this.stopInterval?.();
+    }
+}
+//# sourceMappingURL=cancel-controller.js.map

package/dist/chat-cancel/cancel-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cancel-controller.js","sourceRoot":"","sources":["../../src/chat-cancel/cancel-controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,oBAAoB,EAA8B,MAAM,uBAAuB,CAAC;AAmBzF,SAAS,uBAAuB,CAAC,EAAU,EAAE,EAAc;IACzD,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IACZ,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,OAAO,oBAAoB;IAOF;IANZ,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC5D,qFAAqF;IACpE,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,YAAY,GAAwB,IAAI,CAAC;IACzC,WAAW,GAAG,KAAK,CAAC;IAE5B,YAA6B,OAAoC,EAAE;QAAtC,SAAI,GAAJ,IAAI,CAAkC;IAAG,CAAC;IAEvE,yEAAyE;IACzE,QAAQ,CAAC,IAAqB;QAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,iFAAiF;IACjF,UAAU,CAAC,MAAc;QACvB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,kDAAkD;IAClD,eAAe;QACb,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,MAAc,EACd,SAA2B,oBAAoB;QAE/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACpD,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,8DAA8D;YAC9D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE3B,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,kCAAkC,MAAM,YAAa,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAClG,CAAC;QAED,MAAM,MAAM,GAAqB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC5E,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CACf,sCAAsC,MAAM,YAAa,GAAa,CAAC,OAAO,EAAE,CACjF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CAAC,MAAoB;QAClC,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3E,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAChC,IAAI,YAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,YAAY,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,qDAAsD,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjG,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;gBAC7D,IAAI,CAAC,CAAC,OAAO;oBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,MAAoB,EAAE,UAAU,GAAG,GAAG;QAC1C,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;QACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;YACvC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,GAAG,EAAE;YACvB,MAAM,EAAE,CAAC;YACT,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC,CAAC;QACF,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,gEAAgE;IAChE,IAAI;QACF,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;IACxB,CAAC;CACF"}

package/dist/chat-cancel/cancel-source.d.ts

@@ -0,0 +1,37 @@
+/**
+ * CX-3 STOP-CANCEL: the production CancelSource — reads acc.chat_turns to learn
+ * which in-flight turns the operator has cancelled server-side (status set to
+ * 'cancelled' by acc.cancel_chat_turn / migration 0278).
+ *
+ * The runner authenticates as the conversation owner (an org member), so the
+ * chat_turns_select RLS policy (0254) lets it SELECT its own turns. Kept behind a
+ * minimal client interface (not the full RunnerSupabaseClient) so it is trivially
+ * faked in tests and carries no heavyweight import.
+ */
+import type { CancelSource } from "./types.js";
+/** The sliver of a supabase-js query builder this source needs. */
+export interface CancelQueryClient {
+    from(table: string): {
+        select(columns: string): {
+            in(column: string, values: readonly string[]): PromiseLike<{
+                data: Array<{
+                    id: string;
+                    status: string | null;
+                }> | null;
+                error: {
+                    message: string;
+                } | null;
+            }>;
+        };
+    };
+}
+/**
+ * Build a CancelSource over a supabase client. Each reconcile pass reads the given
+ * in-flight turn ids and returns those whose status is a terminal 'cancelled'. A
+ * read error surfaces as a thrown error (the controller's reconcile swallows it as
+ * an empty pass), never a false "cancelled".
+ */
+export declare function buildSupabaseCancelSource(client: CancelQueryClient, opts?: {
+    onLog?: (line: string) => void;
+}): CancelSource;
+//# sourceMappingURL=cancel-source.d.ts.map

package/dist/chat-cancel/cancel-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cancel-source.d.ts","sourceRoot":"","sources":["../../src/chat-cancel/cancel-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,mEAAmE;AACnE,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG;QACnB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG;YACvB,EAAE,CACA,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,SAAS,MAAM,EAAE,GACxB,WAAW,CAAC;gBACb,IAAI,EAAE,KAAK,CAAC;oBAAE,EAAE,EAAE,MAAM,CAAC;oBAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;iBAAE,CAAC,GAAG,IAAI,CAAC;gBAC1D,KAAK,EAAE;oBAAE,OAAO,EAAE,MAAM,CAAA;iBAAE,GAAG,IAAI,CAAC;aACnC,CAAC,CAAC;SACJ,CAAC;KACH,CAAC;CACH;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,iBAAiB,EACzB,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GAC5C,YAAY,CAiBd"}

package/dist/chat-cancel/cancel-source.js

@@ -0,0 +1,26 @@
+/**
+ * Build a CancelSource over a supabase client. Each reconcile pass reads the given
+ * in-flight turn ids and returns those whose status is a terminal 'cancelled'. A
+ * read error surfaces as a thrown error (the controller's reconcile swallows it as
+ * an empty pass), never a false "cancelled".
+ */
+export function buildSupabaseCancelSource(client, opts = {}) {
+    return {
+        async listCancelled(turnIds) {
+            if (turnIds.length === 0)
+                return [];
+            const { data, error } = await client
+                .from("chat_turns")
+                .select("id, status")
+                .in("id", turnIds);
+            if (error) {
+                opts.onLog?.(`[acc-runner] cancel-source read failed: ${error.message}`);
+                throw new Error(error.message);
+            }
+            return (data ?? [])
+                .filter((row) => row.status === "cancelled")
+                .map((row) => row.id);
+        },
+    };
+}
+//# sourceMappingURL=cancel-source.js.map

package/dist/chat-cancel/cancel-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cancel-source.js","sourceRoot":"","sources":["../../src/chat-cancel/cancel-source.ts"],"names":[],"mappings":"AA2BA;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAyB,EACzB,OAA2C,EAAE;IAE7C,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,OAA0B;YAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YACpC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM;iBACjC,IAAI,CAAC,YAAY,CAAC;iBAClB,MAAM,CAAC,YAAY,CAAC;iBACpB,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACrB,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,KAAK,EAAE,CAAC,2CAA2C,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;YACD,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;iBAChB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC;iBAC3C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC"}