studiograph 1.3.48-next.26 → 1.3.48-next.261

package/dist/agent/orchestrator.d.ts

@@ -4,13 +4,18 @@
  * Manages the Pi-Mono agent instance and coordinates with workspace managers.
  * Loads skills, handles system prompts, and manages conversation flow.
  */
-import { Agent } from '@mariozechner/pi-agent-core';
+import { Agent } from '@earendil-works/pi-agent-core';
 import { WorkspaceManager } from '../core/workspace-manager.js';
 import { WorkspaceConfig } from '../core/types.js';
 import { GitUser } from '../services/git.js';
 import { type MutationEvent } from './tools/graph-tools.js';
+import { type ArtifactBundle } from '../core/artifact-frame-model.js';
+import { AuthService } from '../services/auth-service.js';
 import type { AuthUser } from '../services/auth-service.js';
+import type { CommentService } from '../services/comment-service.js';
+import type { ChatSessionService } from '../services/chat-session-service.js';
 import { AgentPool } from './agent-pool.js';
+import { type InferenceUsageSummary } from '../services/cloud-inference-billing.js';
 export interface AgentConfig {
     workspacePath: string;
     workspaceConfig: WorkspaceConfig;
@@ -23,15 +28,50 @@ export interface AgentConfig {
     recentMemory?: string;
     /** Shared WorkspaceManager instance (used by server to share state with agent). */
     workspaceManager?: WorkspaceManager;
-    /** Shared MessageService instance (for searching collection messages). */
-    messageService?: import('../services/message-service.js').MessageService;
     /**
-     * Called after the agent mutates an entity on disk, so the server can
-     * push the new content into any active Y.Doc and keep live editors in
-     * sync. Without this, agent edits bypass the Y.Doc and cause content
-     * duplication on the next resync.
+     * Shared AuthService — pass the route-level instance so the
+     * orchestrator participates in the same OAuth-mutation pubsub and uses
+     * the master-key-wired crypto path for `oauth_tokens` reads.
+     *
+     * Without this, the orchestrator constructs a fresh AuthService that
+     * (a) has no master key, so reads of encrypted oauth_tokens rows
+     * throw; (b) subscribes to a different pubsub channel than the one
+     * `connectors-api.ts` fires, so OAuth-mutation invalidations never
+     * reach the agent pool. Phase 8 (May 11 2026) wired crypto into the
+     * route-level AuthService but missed this instance — latent until
+     * the 2026-05-13 per-user OAuth runtime wiring made the orchestrator
+     * actually read encrypted oauth_tokens.
+     *
+     * Tests and CLI surfaces still construct their own — back-compat
+     * fallback below.
      */
-    onEntityContentMutation?: (repo: string, entityType: string, entityId: string) => void;
+    authService?: AuthService;
+    /**
+     * Optional CommentService — when supplied, the agent's generic read tools
+     * (`get_entity`/`list_entities`/`get_related`) can resolve the virtual
+     * `comment` entity type, giving the in-app agent the same read parity the
+     * MCP surface already has. Omitted by CLI/test callers (comments simply
+     * don't appear there).
+     */
+    commentService?: CommentService;
+    /**
+     * Optional ChatSessionService — lets the agent's `save_file_to_assets` tool
+     * promote a conversation-scratch image into the curated asset library. Omitted
+     * by CLI/test callers (the tool then resolves no scratch images and no-ops).
+     */
+    chatSessionService?: ChatSessionService;
+    /**
+     * Resolve headless-render asset access for inspect_artifact — the server
+     * origin (where `/api/assets` is served) plus a signed, short-lived token
+     * scoped to the bundle. Injected by the server layer, which can mint the
+     * token (`mintArtifactAssetTokenForBundle`) and knows its own origin; the
+     * agent layer can do neither. Without it, inspect renders with assets
+     * disabled and every workspace image shows the broken-image placeholder.
+     */
+    mintInspectAssets?: (repo: string, entityId: string, bundle: ArtifactBundle, userId: string) => {
+        baseUrl: string;
+        assetToken: string;
+    } | null;
 }
 export interface AgentResponse {
     content: string;
@@ -40,6 +80,7 @@ export interface AgentResponse {
         input: any;
         output: any;
     }>;
+    usage?: InferenceUsageSummary;
 }
 export declare class AgentOrchestrator {
     private workspacePath;
@@ -51,10 +92,11 @@ export declare class AgentOrchestrator {
     private toolsDirs;
     private registryRef;
     private authService;
-    private messageService;
+    private commentService;
+    private chatSessionService;
+    private mintInspectAssets?;
     private recentMemory?;
     private sessionsDir;
-    private onEntityContentMutation?;
     private _currentUser;
     private _highlightCallback;
     private _mutationCallback;
@@ -71,6 +113,14 @@ export declare class AgentOrchestrator {
      * Runs async after construction — custom tools may not be available for the
      * very first message if initialisation is extremely fast, but in practice
      * the first user message arrives well after startup.
+     *
+     * `userId` is forwarded into `ConnectorManager.buildTools` so per-user MCP
+     * OAuth tokens are resolved at tool-build time. Without it the runtime
+     * silently falls back to workspace-shared static headers (the deferred
+     * gap before 2026-05-13). The agent pool keys agents per-session and
+     * supplies the session's userId on creation; CLI / non-interactive
+     * spawns pass `undefined` and intentionally land on the workspace
+     * fallback.
      */
     private loadCustomToolsAsync;
     /**
@@ -83,6 +133,7 @@ export declare class AgentOrchestrator {
      * entrypoint. Priority order: user's private folder first, then shared
      * folders alphabetically. First occurrence of a given name wins.
      */
+    private getPromptRepoScope;
     private enumerateGraphSkills;
     /**
      * Load the markdown body of a skill entity by (repo, id).
@@ -95,6 +146,13 @@ export declare class AgentOrchestrator {
      * Returns null if no organization entries exist.
      */
     private buildWorkspaceIdentity;
+    /**
+     * Per-repo subfolder summary for the system prompt. Lists each accessible
+     * repo with up to MAX_PER_REPO subfolder paths so the agent can route new
+     * entries into existing folders without calling list_folders for every
+     * decision. Refresh cadence is per-session (system prompt is built once).
+     */
+    private buildFolderInventory;
     /**
      * Fallback system prompt when prompts/system.md is not found.
      */
@@ -123,6 +181,47 @@ export declare class AgentOrchestrator {
      * Get workspace manager (for tools)
      */
     getWorkspaceManager(): WorkspaceManager;
+    getModelSelection(): {
+        provider: string;
+        modelId: string;
+    };
+    /**
+     * The active chat model's context window (max prompt tokens), or null if it
+     * can't be resolved. Used by the chat route's reactive overflow detection
+     * (isContextOverflow needs the window to catch silent overflow). Mirrors the
+     * model resolution in createAgentInstance, including the Credits gateway.
+     */
+    getContextWindow(): number | null;
+    /** Can the active chat model accept image input? Drives the composer's
+     *  vision-attach affordance (disable + tooltip when false). The Studiograph
+     *  Credits gateway is vision-capable (A6); otherwise resolve from the model. */
+    supportsVision(): boolean;
+    /**
+     * Delete the agent-pool's persisted state for a chat session — evicts the warm
+     * agent + unlinks its on-disk JSON, which holds base64 copies of any vision
+     * images the agent saw. Called when a chat is deleted so those copies don't
+     * outlive the conversation (composer-vision cleanup). `rawSessionId` is the
+     * client session id; the pool keys by the resolved `user:{id}:{raw}` form.
+     */
+    deleteChatSessionState(userId: number, rawSessionId: string): void;
+    /** Delete agent-pool state for ALL of a user's chats (reset / delete-all). */
+    deleteAllChatSessionState(userId: number): void;
+    /**
+     * One-shot, tool-free model call that names a conversation from its opening
+     * exchange (the ChatGPT pattern). Used by POST /api/chat/title after the
+     * first assistant reply. Deliberately lightweight: no agent pool, no tools,
+     * no system context — just the configured model and a tight instruction.
+     *
+     * Returns null (caller keeps the truncated first-message title) when there's
+     * no usable title, no API key, or we're in Studiograph Credits gateway mode —
+     * the gateway routes inference through its own client (cloud-inference-billing),
+     * not pi-ai's complete(), so a direct completeSimple() can't reach it. Titles
+     * via the gateway are a follow-up if we want them.
+     */
+    generateConversationTitle(firstUserMessage: string, assistantReply: string): Promise<{
+        title: string;
+        usage?: InferenceUsageSummary;
+    } | null>;
     /**
      * Get workspace summary
      */
@@ -137,7 +236,7 @@ export declare class AgentOrchestrator {
      */
     getRepoNames(): string[];
     /**
-     * Set the current authenticated user for per-collection access filtering.
+     * Set the current authenticated user for per-folder access filtering.
      * Called per-request by the chat endpoint. Null = full access (API key / open mode).
      */
     setCurrentUser(user: AuthUser | null): void;