@agentage/extension 0.4.1 → 0.4.2

package/dist/command/args.js

@@ -2,7 +2,7 @@ import { parseArgs } from 'node:util';
 import {} from '../manifest/manifest.schema.js';
 export class UsageError extends Error {
 }
-export const isOptional = (arg) => arg.optional === true || arg.required === false;
+export const isOptional = (arg) => arg.required === false;
 const coerce = (arg, raw) => {
     if (arg.type === 'boolean')
         return raw === true || raw === 'true';

package/dist/manifest/manifest.schema.d.ts

@@ -44,7 +44,6 @@ declare const CommandSchema: z.ZodObject<{
             boolean: "boolean";
             integer: "integer";
         }>;
-        optional: z.ZodOptional<z.ZodBoolean>;
         required: z.ZodOptional<z.ZodBoolean>;
         description: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>>;
@@ -99,7 +98,6 @@ export declare const PackageSchema: z.ZodObject<{
                     boolean: "boolean";
                     integer: "integer";
                 }>;
-                optional: z.ZodOptional<z.ZodBoolean>;
                 required: z.ZodOptional<z.ZodBoolean>;
                 description: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>>;

package/dist/manifest/manifest.schema.js

@@ -27,7 +27,6 @@ const CommandSchema = z.strictObject({
         .array(z.strictObject({
         name: CommandNameSchema,
         type: ArgTypeSchema,
-        optional: z.boolean().optional(),
         required: z.boolean().optional(),
         description: z.string().min(1).max(200).optional(),
     }))

package/dist/mcp/mcp-app.js

@@ -39,10 +39,11 @@ const guard = async (options, req, body) => {
     if (!options.tokenCheck) {
         if (listing.length > 0)
             throw fail('UNAUTHORIZED', 'tools/list needs a token');
-        return;
+        return false;
     }
-    if (needed.length > 0)
-        await options.tokenCheck(req.get('authorization'), strongest(needed));
+    if (needed.length === 0)
+        return false;
+    return (await options.tokenCheck(req.get('authorization'), strongest(needed))) !== null;
 };
 const webRequest = (req, body) => {
     const headers = new Headers();
@@ -56,9 +57,12 @@ const webRequest = (req, body) => {
         body,
     });
 };
-const send = async (response, res) => {
+const send = async (response, res, auth) => {
     res.status(response.status);
     response.headers.forEach((value, key) => void res.setHeader(key, value));
+    // After the SDK headers: its SSE answer sets no-cache, which a token-checked answer overrides.
+    if (auth)
+        res.setHeader('Cache-Control', 'no-store');
     if (!response.body)
         return void res.end();
     await pipeline(Readable.fromWeb(response.body), res);
@@ -69,8 +73,8 @@ const handle = (handler, options) => async (req, res) => {
     // The SDK reads a body again when given none (a BOM, say): it must only run what guard read.
     if (message === undefined)
         return void res.status(400).json(PARSE_ERROR);
-    await guard(options, req, message);
-    await send(await handler.fetch(webRequest(req, body), { parsedBody: message }), res);
+    const auth = await guard(options, req, message);
+    await send(await handler.fetch(webRequest(req, body), { parsedBody: message }), res, auth);
 };
 const methodNotAllowed = (_req, res) => {
     res.setHeader('Allow', 'POST');

package/dist/server/app.js

@@ -57,11 +57,14 @@ export const createPartApp = (options) => {
 // The committed OpenAPI document, bare JSON and anonymous like discovery (api-standards section 1).
 const openapiHandler = (doc) => (_req, res) => void res.json(doc);
 // Before the body is read: each request checked for the access its OpenAPI operation declares.
-const routeGuard = (options) => async (req, _res, next) => {
+const routeGuard = (options) => async (req, res, next) => {
     if (!options.tokenCheck)
         return next();
     const access = routeAccess(options.openapi, req.method, `/api/v1${req.path}`);
-    setCaller(req, await options.tokenCheck(req.get('authorization'), access));
+    const caller = await options.tokenCheck(req.get('authorization'), access);
+    if (caller)
+        res.setHeader('Cache-Control', 'no-store');
+    setCaller(req, caller);
     next();
 };
 export const createApiApp = (options) => createPartApp({

package/dist/server/errors.js

@@ -19,7 +19,19 @@ const toFailure = (err) => {
 export const notFound = () => {
     throw fail('NOT_FOUND', 'Not found');
 };
+const GONE_CODES = ['ERR_STREAM_PREMATURE_CLOSE', 'ECONNABORTED'];
+// A client abort leaves the socket destroyed; the same code from an app-side stream does not.
+const clientGone = (err, res) => GONE_CODES.includes(err?.code) && res.socket?.destroyed !== false;
 export const errorHandler = (log) => (err, _req, res, _next) => {
+    // A gone client or a started answer cannot take an envelope: close it, never write twice.
+    const gone = clientGone(err, res);
+    if (gone || res.headersSent) {
+        if (gone)
+            log.warn('client closed early');
+        else
+            log.error(err);
+        return void res.destroy();
+    }
     const failure = toFailure(err);
     if (failure.status >= 500)
         log.error(err);

package/dist/tool/exec.js

@@ -51,7 +51,8 @@ const tail = (text) => text ? `\n${text.trim().split('\n').slice(-15).join('\n')
 export const mustRun = async (run, command, args, options) => {
     const result = await run(command, args, options);
     if (result.code !== 0) {
-        throw new Error(`${command} ${args[0] ?? ''} failed with exit code ${result.code}${tail(result.stderr)}`);
+        // tsc writes its diagnostics to stdout, so an empty stderr falls back to it.
+        throw new Error(`${command} ${args[0] ?? ''} failed with exit code ${result.code}${tail(result.stderr?.trim() ? result.stderr : result.stdout)}`);
     }
     return result.stdout;
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentage/extension",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "The agentage extension kit: create(ctx) per part (pages, ui, api, mcp, worker, cli), the store, /health, discovery, the envelope, and the build tool with up and token",
   "type": "module",
   "license": "MIT",

package/schemas/extension-package.schema.json

@@ -213,9 +213,6 @@
                         "boolean"
                       ]
                     },
-                    "optional": {
-                      "type": "boolean"
-                    },
                     "required": {
                       "type": "boolean"
                     },