mirror of
https://github.com/wu736139669/hapi.git
synced 2026-11-11 02:11:37 +00:00
feat(a2a): P3 AGENT_NOTIFY_SUMMARY → work-graph status ingest (#1467)
* feat(a2a): P3 AGENT_NOTIFY_SUMMARY → work-graph status ingest Land A0 events/event_links substrate (aligned with #1374 contracts) plus thin P3 ingest so opt-in notify footers become durable work_ad rows. Co-authored-by: Cursor <cursoragent@cursor.com> * fix(a2a): address #1467 cold pass-1 Majors on notify ingest Populate expires_at from message ts+TTL, persist message timestamps on insert, pin append-only ledger survival, and defer project column to P4. * test(hub): cover notify ingest via syncEngine message-received Pins the display-never-gates-capture invariant on the real handleRealtimeEvent wiring path (cold pass-1 minor 12). * fix(a2a): address #1467 Sol cold Majors on notify ingest Support AGY agy_message text extraction, bind audit principal to session id, map stalled→blocked (never self-stale), and cap work-graph POST bodies. * fix(a2a): validate work-graph creates at store insert (Sol S4) Notify ingest built WorkGraphEventCreate and inserted without schema bounds; oversized footer summaries could land past HTTP Zod limits. Validate WorkGraphEventCreateSchema in insertWorkGraphEvent, clamp untrusted notify strings at elevation, and regress 2049-char summaries. * fix(a2a): reject fractional work-graph list limit Bot Minor: limit=1.5 passed Number.isFinite and hit SQLite LIMIT as a non-integer, surfacing as 500. Require Number.isInteger before query. * fix(a2a): keep notify elevation inside payload budget Drop duplicated notify_summary nesting that could exceed the 32 KiB payload_json cap after per-field clamps, and measure the cap in UTF-8 bytes via TextEncoder instead of UTF-16 string.length. * fix(a2a): clamp notify footer fields by UTF-8 bytes Per-field string.length clamps still let CJK footers exceed the UTF-8 payload_json budget and silent-drop elevation. Truncate action/project/ agent/summary (and tags) to the ledger byte caps before insert. * fix(a2a): clamp notify payload fields by JSON-escaped UTF-8 Raw UTF-8 clamps still let backslash-heavy footers expand past the payload_json budget after JSON.stringify. Budget the escaped form so elevation inserts instead of silent-dropping. --------- Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
HeavyGee
@@ -0,0 +1,155 @@
|
||||
import { z } from 'zod'
|
||||
|
||||
/**
|
||||
* Structured principal for A2A work-graph ledger writes (RFC Layer 1 / P1).
|
||||
* Non-human principals must name an accountable human owner via on_behalf_of.
|
||||
*/
|
||||
export const WorkGraphPrincipalSchema = z.discriminatedUnion('kind', [
|
||||
z.object({
|
||||
kind: z.literal('human'),
|
||||
id: z.string().min(1).max(256)
|
||||
}),
|
||||
z.object({
|
||||
kind: z.literal('agent'),
|
||||
id: z.string().min(1).max(256),
|
||||
on_behalf_of: z.string().min(1).max(256)
|
||||
}),
|
||||
z.object({
|
||||
kind: z.literal('service'),
|
||||
id: z.string().min(1).max(256),
|
||||
on_behalf_of: z.string().min(1).max(256)
|
||||
})
|
||||
])
|
||||
export type WorkGraphPrincipal = z.infer<typeof WorkGraphPrincipalSchema>
|
||||
|
||||
/** Caps for HTTP write bodies (paired with route bodyLimit). */
|
||||
export const WORK_GRAPH_MAX_STRING = 8_192
|
||||
export const WORK_GRAPH_MAX_SUMMARY = 2_048
|
||||
export const WORK_GRAPH_MAX_TAGS = 32
|
||||
export const WORK_GRAPH_MAX_ARTIFACT_REFS = 32
|
||||
export const WORK_GRAPH_MAX_PAYLOAD_JSON_BYTES = 32 * 1024
|
||||
/** Hono bodyLimit for POST /work-graph/* (JSON + overhead). */
|
||||
export const WORK_GRAPH_MAX_BODY_BYTES = 64 * 1024
|
||||
|
||||
export const WorkGraphArtifactRefSchema = z.object({
|
||||
kind: z.string().min(1).max(128),
|
||||
url: z.string().max(WORK_GRAPH_MAX_STRING).optional(),
|
||||
title: z.string().max(512).optional(),
|
||||
ref: z.string().max(WORK_GRAPH_MAX_STRING).nullable().optional(),
|
||||
source: z.string().max(128).optional(),
|
||||
created_at: z.number().optional()
|
||||
}).passthrough()
|
||||
export type WorkGraphArtifactRef = z.infer<typeof WorkGraphArtifactRefSchema>
|
||||
|
||||
/** Open vocabulary; common Layer 1 types listed for docs, not enforced as enum. */
|
||||
export const WORK_GRAPH_EVENT_TYPES = ['work_ad', 'handoff', 'handoff_receipt'] as const
|
||||
|
||||
const utf8Encoder = new TextEncoder()
|
||||
|
||||
function payloadJsonWithinLimit(value: unknown): boolean {
|
||||
if (value === undefined) return true
|
||||
try {
|
||||
const json = JSON.stringify(value)
|
||||
// Persist/wire as UTF-8 — string.length is UTF-16 code units and
|
||||
// under-counts CJK/emoji relative to stored bytes.
|
||||
return utf8Encoder.encode(json).byteLength <= WORK_GRAPH_MAX_PAYLOAD_JSON_BYTES
|
||||
} catch {
|
||||
return false
|
||||
}
|
||||
}
|
||||
|
||||
export const WorkGraphEventCreateSchema = z.object({
|
||||
source_kind: z.string().min(1).max(128),
|
||||
source_ref: z.string().min(1).max(WORK_GRAPH_MAX_STRING),
|
||||
sink_kind: z.string().min(1).max(128).optional(),
|
||||
sink_ref: z.string().min(1).max(WORK_GRAPH_MAX_STRING).optional(),
|
||||
event_type: z.string().min(1).max(128),
|
||||
summary: z.string().max(WORK_GRAPH_MAX_SUMMARY).optional(),
|
||||
payload_json: z.unknown().optional().refine(payloadJsonWithinLimit, {
|
||||
message: `payload_json exceeds ${WORK_GRAPH_MAX_PAYLOAD_JSON_BYTES} bytes`
|
||||
}),
|
||||
artifact_refs: z.array(WorkGraphArtifactRefSchema).max(WORK_GRAPH_MAX_ARTIFACT_REFS).optional(),
|
||||
tags: z.array(z.string().max(256)).max(WORK_GRAPH_MAX_TAGS).optional(),
|
||||
related_session_id: z.string().min(1).max(256).optional(),
|
||||
related_event_id: z.string().min(1).max(256).optional(),
|
||||
provenance: z.string().max(512).optional(),
|
||||
idempotency_key: z.string().min(1).max(512).optional(),
|
||||
dedupe_key: z.string().min(1).max(512).optional(),
|
||||
confidence: z.number().optional(),
|
||||
severity: z.string().max(64).optional(),
|
||||
expires_at: z.number().optional(),
|
||||
principal: WorkGraphPrincipalSchema
|
||||
})
|
||||
export type WorkGraphEventCreate = z.infer<typeof WorkGraphEventCreateSchema>
|
||||
|
||||
export const WorkGraphEventLinkCreateSchema = z.object({
|
||||
from_event_id: z.string().min(1).max(256),
|
||||
to_event_id: z.string().min(1).max(256),
|
||||
relation_type: z.string().min(1).max(128),
|
||||
metadata_json: z.unknown().optional().refine(payloadJsonWithinLimit, {
|
||||
message: `metadata_json exceeds ${WORK_GRAPH_MAX_PAYLOAD_JSON_BYTES} bytes`
|
||||
})
|
||||
})
|
||||
export type WorkGraphEventLinkCreate = z.infer<typeof WorkGraphEventLinkCreateSchema>
|
||||
|
||||
export type WorkGraphEvent = {
|
||||
id: string
|
||||
ts: number
|
||||
sourceKind: string
|
||||
sourceRef: string
|
||||
sinkKind: string | null
|
||||
sinkRef: string | null
|
||||
eventType: string
|
||||
summary: string | null
|
||||
payloadJson: unknown | null
|
||||
artifactRefs: WorkGraphArtifactRef[]
|
||||
tags: string[]
|
||||
relatedSessionId: string | null
|
||||
relatedEventId: string | null
|
||||
provenance: string | null
|
||||
idempotencyKey: string | null
|
||||
dedupeKey: string | null
|
||||
confidence: number | null
|
||||
severity: string | null
|
||||
expiresAt: number | null
|
||||
namespace: string
|
||||
principal: WorkGraphPrincipal
|
||||
}
|
||||
|
||||
export type WorkGraphEventLink = {
|
||||
id: string
|
||||
fromEventId: string
|
||||
toEventId: string
|
||||
relationType: string
|
||||
createdAt: number
|
||||
metadataJson: unknown | null
|
||||
namespace: string
|
||||
}
|
||||
|
||||
/**
|
||||
* Kill criterion from the A2A RFC: a non-human principal with no resolvable
|
||||
* human owner must be refused. Schema already requires on_behalf_of for
|
||||
* agent/service; this is the shared runtime check for callers that build
|
||||
* principals without going through Zod.
|
||||
*/
|
||||
export function isPrincipalAccountable(principal: WorkGraphPrincipal): boolean {
|
||||
if (principal.kind === 'human') {
|
||||
return principal.id.trim().length > 0
|
||||
}
|
||||
return typeof principal.on_behalf_of === 'string' && principal.on_behalf_of.trim().length > 0
|
||||
}
|
||||
|
||||
/**
|
||||
* Hub HTTP writes: the accountable human must match the authenticated user.
|
||||
* Humans write as themselves; agents/services write only under that owner.
|
||||
*/
|
||||
export function principalMatchesAuthenticatedOwner(
|
||||
principal: WorkGraphPrincipal,
|
||||
ownerUserId: number | string
|
||||
): boolean {
|
||||
const ownerId = String(ownerUserId)
|
||||
if (principal.kind === 'human') {
|
||||
return principal.id === ownerId
|
||||
}
|
||||
return principal.on_behalf_of === ownerId
|
||||
}
|
||||
Reference in New Issue
Block a user