crewly 1.6.1 → 1.6.3

package/dist/backend/backend/src/services/chat-v2/chat-v2.realtime-holder.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Process-wide holder for chat-v2 realtime dependencies.
+ *
+ * The REST router is mounted during `configureRoutes()` — but the
+ * WebSocket gateway + agent dispatcher are only available once the HTTP
+ * server is up (in `start()`). Rather than reshuffling startup order,
+ * the router reads deps from this holder at request time; `start()` sets
+ * them after the gateway + dispatcher are ready.
+ *
+ * Tests can `setChatV2RealtimeDeps(null)` to clear between runs.
+ *
+ * @module services/chat-v2/chat-v2.realtime-holder
+ */
+import type { ChatV2Gateway } from '../../websocket/chat-v2.gateway.js';
+import type { ChatV2DispatcherService } from './chat-v2.dispatcher.service.js';
+/** Realtime deps lazily bound after HTTP server start. */
+export interface ChatV2RealtimeDeps {
+    gateway?: ChatV2Gateway;
+    dispatcher?: ChatV2DispatcherService;
+}
+/** Set the live realtime deps. Call once after gateway/dispatcher init. */
+export declare function setChatV2RealtimeDeps(deps: ChatV2RealtimeDeps | null): void;
+/** Retrieve the live realtime deps. Returns `{}` when unset. */
+export declare function getChatV2RealtimeDeps(): ChatV2RealtimeDeps;
+//# sourceMappingURL=chat-v2.realtime-holder.d.ts.map

package/dist/backend/backend/src/services/chat-v2/chat-v2.realtime-holder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-v2.realtime-holder.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/chat-v2/chat-v2.realtime-holder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE/E,0DAA0D;AAC1D,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,UAAU,CAAC,EAAE,uBAAuB,CAAC;CACtC;AAID,2EAA2E;AAC3E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAE3E;AAED,gEAAgE;AAChE,wBAAgB,qBAAqB,IAAI,kBAAkB,CAE1D"}

package/dist/backend/backend/src/services/chat-v2/chat-v2.realtime-holder.js

@@ -0,0 +1,23 @@
+/**
+ * Process-wide holder for chat-v2 realtime dependencies.
+ *
+ * The REST router is mounted during `configureRoutes()` — but the
+ * WebSocket gateway + agent dispatcher are only available once the HTTP
+ * server is up (in `start()`). Rather than reshuffling startup order,
+ * the router reads deps from this holder at request time; `start()` sets
+ * them after the gateway + dispatcher are ready.
+ *
+ * Tests can `setChatV2RealtimeDeps(null)` to clear between runs.
+ *
+ * @module services/chat-v2/chat-v2.realtime-holder
+ */
+let _deps = null;
+/** Set the live realtime deps. Call once after gateway/dispatcher init. */
+export function setChatV2RealtimeDeps(deps) {
+    _deps = deps;
+}
+/** Retrieve the live realtime deps. Returns `{}` when unset. */
+export function getChatV2RealtimeDeps() {
+    return _deps ?? {};
+}
+//# sourceMappingURL=chat-v2.realtime-holder.js.map

package/dist/backend/backend/src/services/chat-v2/chat-v2.realtime-holder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-v2.realtime-holder.js","sourceRoot":"","sources":["../../../../../../backend/src/services/chat-v2/chat-v2.realtime-holder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAWH,IAAI,KAAK,GAA8B,IAAI,CAAC;AAE5C,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB,CAAC,IAA+B;IACnE,KAAK,GAAG,IAAI,CAAC;AACf,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,qBAAqB;IACnC,OAAO,KAAK,IAAI,EAAE,CAAC;AACrB,CAAC"}

package/dist/backend/backend/src/services/chat-v2/chat-v2.service.d.ts

@@ -0,0 +1,254 @@
+/**
+ * ChatV2Service — orchestrator for the Agent-First Chat MVP.
+ *
+ * Wires ChannelStore + MessageStore, enforces the authorization rules
+ * laid out in the tech spec §7.2, and maps DB rows to wire-format DTOs.
+ *
+ * WebSocket push, offline queuing, and attachment durability land in
+ * later passes of Phase 1 — see §18 rollout plan.
+ *
+ * @module services/chat-v2/chat-v2.service
+ */
+import type { ChatV2Config } from './config.js';
+import { type ChatDatabase } from './sqlite/chat-db.js';
+import { type ChatAttachmentDTO, type ChatChannelDTO, type ChatChannelType, type ChatContentType, type ChatMessageDTO, type ChatMessageListResult, type ChatPrincipal } from './types.js';
+/** Constructor options for `ChatV2Service`. */
+export interface ChatV2ServiceOptions {
+    config: ChatV2Config;
+    /** Optional pre-opened DB (tests pass an in-memory handle). */
+    db?: ChatDatabase;
+    /** Presence lookup — wired to `AgentRegistrationService` in wiring; tests pass a stub. */
+    getPresence?: (agentSession: string) => {
+        status: ChatChannelDTO['agentPresence']['status'];
+        lastSeenAt: number | null;
+    };
+    /**
+     * F2b (#333) — outer-ring tenant defense. Called when creating a
+     * `type='channel'` channel; if the principal cannot bind a channel
+     * to `teamId`, return false → `createChannel` throws
+     * `forbidden_team` (HTTP 403). Sync only, since `createChannel` runs
+     * inside the synchronous `runHandler` wrapper (an async refactor is
+     * a Phase E concern, not a F2b requirement).
+     *
+     * In OSS production, wire to a check that confirms `teamId` exists
+     * in `StorageService.getTeams()` — single-user OSS treats existence
+     * as membership. Cloud Portal Phase E swaps in a real user-tenant
+     * binding check.
+     *
+     * When omitted (legacy tests, REST-only fixtures) `createChannel`
+     * preserves pre-F2b behavior: only validates teamId is non-empty.
+     * The composition root in `backend/src/index.ts` MUST inject this
+     * to close the leak in production.
+     */
+    validateTeamMembership?: (principal: ChatPrincipal, teamId: string) => boolean;
+    /** Clock override for tests. */
+    now?: () => number;
+}
+/** Minimal interface the service needs from a presence provider. */
+export interface ChatPresenceProvider {
+    getPresence(agentSession: string): {
+        status: ChatChannelDTO['agentPresence']['status'];
+        lastSeenAt: number | null;
+    };
+}
+/** Arguments for `createChannel`. */
+export interface CreateChannelArgs {
+    /**
+     * Wire-level session binding. Required when `type='dm'` (default);
+     * for `type='channel'`, callers may omit it (server stores '').
+     */
+    agentSession?: string;
+    name: string;
+    purpose?: string;
+    principal: ChatPrincipal;
+    /**
+     * Phase A (SEALED §3.1) — channel kind. Defaults to `'dm'` to preserve
+     * the Phase 1 contract for callers that omit this field.
+     */
+    type?: ChatChannelType;
+    /** Phase A — required when `type='channel'`. */
+    teamId?: string;
+    /** Phase A — optional even when `type='channel'`. */
+    projectId?: string;
+    /** Phase A — optional when `type='dm'`. */
+    targetMemberId?: string;
+}
+/** Arguments for `listChannels`. */
+export interface ListChannelsArgs {
+    principal: ChatPrincipal;
+    includeArchived?: boolean;
+    limit?: number;
+    /**
+     * Phase C — filter to a single channel type. The controller validates
+     * the wire value against {@link CHAT_CHANNEL_TYPES} before reaching
+     * this layer; an unknown value is rejected as `validation_error`.
+     */
+    type?: ChatChannelType;
+    /**
+     * Phase C — filter to channels with this `team_id`. Empty string is
+     * treated the same as `undefined` (no filter) so callers don't have
+     * to pre-normalize blank query strings. The store-level filter still
+     * uses an exact-match against the column, so DMs (which have null
+     * team_id) drop out of the result.
+     */
+    teamId?: string;
+}
+/** Arguments for `sendMessage`. */
+export interface SendMessageArgs {
+    channelId: string;
+    principal: ChatPrincipal;
+    content: string;
+    contentType?: ChatContentType;
+    clientMessageId?: string;
+    /** Attachment hooks — the store is added in a later step, so pre-resolved DTOs are accepted. */
+    attachments?: ChatAttachmentDTO[];
+    /**
+     * Phase A (SEALED §3.2) — array of mention IDs (member or team)
+     * referenced inline in `content`. Persisted as JSON; emitted on the
+     * outbound message DTO. Empty / omitted → no mentions.
+     */
+    mentions?: string[];
+    /**
+     * Phase A (SEALED §3.2) — Slack-style thread reply root. When set,
+     * the new message is a reply within the thread rooted at this id;
+     * the service validates that the thread root lives in the same
+     * channel before persisting.
+     */
+    threadId?: string;
+}
+/** Arguments for `listMessages`. */
+export interface ListMessagesArgs {
+    channelId: string;
+    principal: ChatPrincipal;
+    cursor?: string | null;
+    limit?: number;
+    direction?: 'backward' | 'forward';
+}
+/**
+ * Orchestrator for chat domain operations.
+ *
+ * Responsibilities:
+ * - Owns the DB handle + stores.
+ * - Enforces authorization per §7.2.
+ * - Maps rows → DTOs.
+ * - Fans out to WebSocket / adapters in later phases.
+ */
+export declare class ChatV2Service {
+    /** Phase A spec §3.2: max mention count per message. */
+    static readonly MAX_MENTIONS_PER_MESSAGE = 50;
+    /** Phase A spec §3.2: max JSON-encoded byte size of the mentions array. */
+    static readonly MAX_MENTIONS_JSON_BYTES = 1024;
+    readonly config: ChatV2Config;
+    private readonly db;
+    private readonly channels;
+    private readonly messages;
+    private readonly presence;
+    private readonly validateTeamMembership;
+    private readonly now;
+    constructor(options: ChatV2ServiceOptions);
+    /** Release the DB handle. Safe to call during graceful shutdown / in tests. */
+    close(): void;
+    /**
+     * Create a channel bound 1:1 to an agent session. Server always assigns
+     * `owner_user_id = principal.userId` — the body's owner fields are ignored.
+     *
+     * F2b (#333): when `type='channel'` and a `validateTeamMembership` provider
+     * is wired into the service, the principal must be authorized for the
+     * requested `teamId`. Failures throw `forbidden_team` (403) — distinct
+     * from generic `forbidden` so the FE can surface a tenant-specific
+     * message.
+     *
+     * @param args - Channel creation args
+     * @returns The created channel as a DTO
+     * @throws {ChatError} `validation_error` (400) / `forbidden_team` (403) /
+     *   `agent_already_bound` (409)
+     */
+    createChannel(args: CreateChannelArgs): ChatChannelDTO;
+    /**
+     * List channels owned by the caller.
+     *
+     * Phase C: extended with optional `type` + `teamId` filters so the
+     * channel-rail can request a focused slice (e.g. "channels in this
+     * workspace only") without paging the full owner-scoped list. An
+     * unknown `type` value is rejected as `validation_error`. Blank
+     * `teamId` is normalized to "no filter" so callers don't need to
+     * sanitize empty query strings.
+     *
+     * @param args - List args (principal + optional filters)
+     * @returns DTO-mapped channels
+     * @throws {ChatError} `validation_error` (400) when `type` is set
+     *   to a value outside {@link CHAT_CHANNEL_TYPES}.
+     */
+    listChannels(args: ListChannelsArgs): ChatChannelDTO[];
+    /**
+     * Look up a single channel the caller owns.
+     *
+     * @param channelId - Channel id
+     * @param principal - Auth principal
+     * @returns DTO shape
+     * @throws {ChatError} `channel_not_found` (404) if the caller doesn't own it
+     */
+    getChannel(channelId: string, principal: ChatPrincipal): ChatChannelDTO;
+    /**
+     * Archive a channel. Returns true if a row was modified.
+     *
+     * @param channelId - Channel id
+     * @param principal - Auth principal
+     * @returns True if newly archived, false if already archived
+     * @throws {ChatError} `channel_not_found` (404)
+     */
+    archiveChannel(channelId: string, principal: ChatPrincipal): boolean;
+    /**
+     * Persist a message sent by the caller. The server decides `sender_type`
+     * and `sender_id` from the auth principal; client fields are ignored.
+     *
+     * @param args - Send args
+     * @returns The persisted message as a DTO (fresh or deduped)
+     * @throws {ChatError} on validation, authorization, or size limit
+     */
+    sendMessage(args: SendMessageArgs): ChatMessageDTO;
+    /**
+     * Phase A — validate the mentions array passed to sendMessage.
+     * Returns the cleaned array (or undefined when input is empty/missing).
+     *
+     * @param raw - The raw `mentions` field from the request body
+     * @returns Validated mention IDs (caller passes to messageStore)
+     * @throws {ChatError} `validation_error` (400) on type / size / count violation
+     */
+    private validateMentions;
+    /**
+     * Phase A — validate the threadId passed to sendMessage.
+     *
+     * Returns the original threadId if it's a valid reference to a message
+     * in the same channel, or undefined when input is empty/missing.
+     * Refuses dangling references and cross-channel thread roots.
+     *
+     * @param raw - The raw `threadId` field from the request body
+     * @param channelId - The channel this message will be inserted into
+     * @returns Validated thread root id (caller passes to messageStore)
+     * @throws {ChatError} `validation_error` (400) when invalid
+     */
+    private validateThreadId;
+    /**
+     * Page messages for a channel the caller may read.
+     *
+     * @param args - List args
+     * @returns A pagination envelope
+     * @throws {ChatError} on auth or invalid cursor
+     */
+    listMessages(args: ListMessagesArgs): ChatMessageListResult;
+    /** Fetch the channel and enforce caller = owner. */
+    private requireOwnedChannel;
+    /**
+     * Fetch the channel and allow if the caller is the owner OR the bound agent.
+     * Used for read + send; agents must always be acting from their own session.
+     */
+    private requireReadableChannel;
+    /** Decide sender_type + sender_id for a message based on principal + channel. */
+    private resolveSender;
+    /** Map a channel row + live presence into the wire DTO. */
+    private toChannelDTO;
+    /** Map a message row to the wire DTO. Attachments passed in by the caller. */
+    private toMessageDTO;
+}
+//# sourceMappingURL=chat-v2.service.d.ts.map

package/dist/backend/backend/src/services/chat-v2/chat-v2.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-v2.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/chat-v2/chat-v2.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAKL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EAEnB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAE1B,KAAK,aAAa,EAEnB,MAAM,YAAY,CAAC;AAMpB,+CAA+C;AAC/C,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,YAAY,CAAC;IACrB,+DAA+D;IAC/D,EAAE,CAAC,EAAE,YAAY,CAAC;IAClB,0FAA0F;IAC1F,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK;QACtC,MAAM,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;IACF;;;;;;;;;;;;;;;;;OAiBG;IACH,sBAAsB,CAAC,EAAE,CACvB,SAAS,EAAE,aAAa,EACxB,MAAM,EAAE,MAAM,KACX,OAAO,CAAC;IACb,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,oEAAoE;AACpE,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG;QACjC,MAAM,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;CACH;AAMD,qCAAqC;AACrC,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,aAAa,CAAC;IACzB;;;OAGG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,oCAAoC;AACpC,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,aAAa,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,mCAAmC;AACnC,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,aAAa,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gGAAgG;IAChG,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,oCAAoC;AACpC,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,aAAa,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CACpC;AAYD;;;;;;;;GAQG;AACH,qBAAa,aAAa;IACxB,wDAAwD;IACxD,MAAM,CAAC,QAAQ,CAAC,wBAAwB,MAAM;IAC9C,2EAA2E;IAC3E,MAAM,CAAC,QAAQ,CAAC,uBAAuB,QAAQ;IAE/C,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAe;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsC;IAC/D,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAiD;IACxF,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,OAAO,EAAE,oBAAoB;IAUzC,+EAA+E;IAC/E,KAAK,IAAI,IAAI;IAYb;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,cAAc;IA+GtD;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,cAAc,EAAE;IAwBtD;;;;;;;OAOG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,GAAG,cAAc;IAKvE;;;;;;;OAOG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,GAAG,OAAO;IASpE;;;;;;;OAOG;IACH,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,cAAc;IAwDlD;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IA4CxB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,gBAAgB;IA+BxB;;;;;;OAMG;IACH,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,qBAAqB;IAqB3D,oDAAoD;IACpD,OAAO,CAAC,mBAAmB;IAW3B;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAiB9B,iFAAiF;IACjF,OAAO,CAAC,aAAa;IAkBrB,2DAA2D;IAC3D,OAAO,CAAC,YAAY;IA2BpB,8EAA8E;IAC9E,OAAO,CAAC,YAAY;CAwCrB"}