@andreprado/agentkit 0.1.0-alpha.2 → 0.1.0-alpha.4

package/src/runtime/targets/cloudflare/build.ts

@@ -542,9 +542,33 @@ export class AgentKitConversationStore extends DurableObject {
       return this.persistMessages(await request.json());
     }
 
+    if (request.method === "GET" && url.pathname === "/messages") {
+      return this.getMessages(url.searchParams.get("conversationId"));
+    }
+
     return Response.json({ error: { code: "not_found", message: "Unknown Durable Object route." } }, { status: 404 });
   }
 
+  getMessages(conversationId) {
+    if (!conversationId) {
+      return Response.json({ messages: [] });
+    }
+
+    const rows = this.sql.exec(
+      "SELECT role, content FROM messages WHERE conversation_id = ? ORDER BY rowid ASC",
+      String(conversationId),
+    ).toArray();
+
+    return Response.json({
+      messages: rows
+        .filter((row) => row.role === "user" || row.role === "assistant")
+        .map((row) => ({
+          role: String(row.role),
+          content: String(row.content),
+        })),
+    });
+  }
+
   persistMessages(input) {
     const now = new Date().toISOString();
     const conversationId = String(input.conversationId || crypto.randomUUID());
@@ -662,6 +686,10 @@ export default {
       });
     }
 
+    if (request.method === "GET" && url.pathname === "/health") {
+      return Response.json({ status: "ok", agent: manifest.name });
+    }
+
     if (request.method === "POST" && (url.pathname === "/chat" || url.pathname === "/v1/chat")) {
       return handleChat(request, env);
     }
@@ -911,7 +939,15 @@ async function handleChat(request, env) {
     );
   }
 
-  const conversationId = String(body.conversationId || crypto.randomUUID());
+  let conversationId;
+
+  try {
+    conversationId = normalizeConversationId(body.conversationId) ?? crypto.randomUUID();
+  } catch (error) {
+    return hostedErrorResponse(error);
+  }
+
+  const previousMessages = await loadConversationMessages(env, conversationId).catch(() => []);
   let content;
   const toolCalls = [];
 
@@ -939,7 +975,7 @@ async function handleChat(request, env) {
 
   if (content === undefined) {
     try {
-      content = await callHostedProvider(env, message, request.signal);
+      content = await callHostedProvider(env, [...previousMessages, { role: "user", content: message }], request.signal);
     } catch (error) {
       await persistFailure(env, conversationId, message, error);
       return hostedErrorResponse(error);
@@ -978,7 +1014,7 @@ function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
-async function callHostedProvider(env, message, signal) {
+async function callHostedProvider(env, messages, signal) {
   const adapter = getProviderAdapter(manifest.provider);
   const result = await adapter.run({
     agent: {
@@ -987,7 +1023,7 @@ async function callHostedProvider(env, message, signal) {
       provider: manifest.provider,
     },
     instructions: withToolVisibilityInstructions(instructions, hostedTools),
-    messages: [{ role: "user", content: message }],
+    messages,
     tools: hostedTools,
     toolRuntime: createHostedProviderToolRuntime(env, signal),
     env,
@@ -1566,6 +1602,49 @@ async function persist(env, input) {
   return response.json();
 }
 
+async function loadConversationMessages(env, conversationId) {
+  if (!env.AGENTKIT_CONVERSATIONS || !conversationId) {
+    return [];
+  }
+
+  const id = env.AGENTKIT_CONVERSATIONS.idFromName(conversationId);
+  const stub = env.AGENTKIT_CONVERSATIONS.get(id);
+  const response = await stub.fetch(
+    \`https://agentkit.internal/messages?conversationId=\${encodeURIComponent(conversationId)}\`,
+  );
+
+  if (!response.ok) {
+    return [];
+  }
+
+  const payload = await response.json();
+  return Array.isArray(payload.messages)
+    ? payload.messages.filter((message) =>
+        message &&
+        typeof message === "object" &&
+        (message.role === "user" || message.role === "assistant") &&
+        typeof message.content === "string"
+      )
+    : [];
+}
+
+function normalizeConversationId(value) {
+  if (value === undefined || value === null) {
+    return null;
+  }
+
+  if (typeof value !== "string") {
+    throw agentKitError("validation_error", "conversationId must be a non-empty string when provided.");
+  }
+
+  const conversationId = value.trim();
+  if (!conversationId) {
+    throw agentKitError("validation_error", "conversationId must be a non-empty string when provided.");
+  }
+
+  return conversationId;
+}
+
 function agentKitError(code, message) {
   const error = new Error(message);
   error.code = code;

package/src/storage/sqlite.ts

@@ -218,10 +218,10 @@ export class SqliteAgentKitStore {
     this.db.close();
   }
 
-  createConversation(input: { agentName: string; title: string | null; now?: string }): ConversationSummary {
+  createConversation(input: { id?: string; agentName: string; title: string | null; now?: string }): ConversationSummary {
     return this.sqlite(() => {
       const now = input.now ?? new Date().toISOString();
-      const id = randomId();
+      const id = input.id ?? randomId();
 
       this.db
         .prepare(

package/src/templates/blank.ts

@@ -65,6 +65,7 @@ node_modules/
         contents: `# Optional: only needed after switching agentkit.config.ts to a Pi-backed real provider.
 OPENAI_API_KEY=
 ANTHROPIC_API_KEY=
+OPENROUTER_API_KEY=
 `,
       },
       {
@@ -151,12 +152,13 @@ Start building immediately:
 - Edit \`prompts/instructions.md\` for the agent behavior.
 - Edit \`agentkit.config.ts\` for provider, tools, secrets, access, and storage.
 - Add TypeScript tools under \`tools/\` when the requested agent needs actions or external data.
+- Do not wait for a wizard or recipe. AgentKit provides the scaffold and contract; you decide the implementation from the owner's brief.
 - Ask follow-up questions only when missing information blocks a safe local implementation.
 - State assumptions in the final response.
 
 ## Local Commands
 
-- \`npm install\`: install capsule dependencies.
+- \`npm install\`: restore capsule dependencies if this capsule used \`--no-install\`, install failed, or \`node_modules\` was deleted.
 - \`npm run dev\`: run the local Agent Capsule runtime.
 - \`npm run chat -- --message "hello"\`: send one local chat message.
 - \`npm run eval\`: run agent evals.
@@ -166,10 +168,17 @@ Start building immediately:
 - \`npm run agentkit -- db seed --file seed.sql\`: apply local fixture data after migrate.
 - \`npm run agentkit -- db shell\`: inspect local development data when needed.
 - \`npm run agentkit -- inspect\`: print machine-readable capsule state.
-- \`npm run agentkit -- env set <NAME> <VALUE>\`: write a local secret value to ignored \`.env\`.
+- \`printf %s "$VALUE" | npm run agentkit -- env set <NAME> --stdin\`: write a local secret value to ignored \`.env\` without putting it in shell history.
 - \`npm run agentkit -- env list\`: list local secret names without printing values.
 - \`npm run agentkit -- docs full\`: print the full AgentKit contract path.
 
+## Testing With A UI
+
+- Local UI: run \`npm run dev\`, open the printed \`Chat:\` URL, and tell the owner the exact URL.
+- Hosted UI: after \`npm run agentkit -- deploy\`, run \`npm run agentkit -- chat-ui --deploy\`, open the printed \`Chat:\` URL, and tell the owner it is connected to the hosted deploy.
+- \`test/fake\` is deterministic. It is useful for scaffold checks, direct tool checks, and fake-provider evals, but it does not validate natural conversation quality.
+- Before claiming real conversation behavior is tested, ask the owner which provider to use: OpenRouter, OpenAI, Anthropic, or another supported provider. Do not choose for them.
+
 This blank capsule starts with the built-in \`test/fake\` provider, so local chat works without secrets or internet access. It is also deploy-ready by default: the user can edit the prompt, add tools, and run \`npm run agentkit -- deploy\`.
 
 ## Local Runtime Contract
@@ -210,14 +219,16 @@ Use \`ctx.db\` as the canonical helper. \`ctx.database\` and \`ctx.storage.sql\`
 - AgentKit owns the hosted runtime, managed database, file storage, and production secret injection.
 - Local scaffold, dev, chat, eval, inspect, database, and build commands are token-free.
 - Hosted deploy requires an invited AgentKit Cloud alpha token. If no token is stored yet, ask the owner for one and run \`npm run agentkit -- login --token <token>\`.
-- Put production secret values into managed secrets with \`npm run agentkit -- secret set <NAME> <VALUE>\`, not into committed files.
+- Put production secret values into managed secrets with \`npm run agentkit -- secret set <NAME> --from-local-env\`, \`--from-env\`, or \`--stdin\`, not into committed files or shell history.
 - The user should not choose a deploy target, create hosted databases, create buckets, copy production secrets into this capsule, or run operator/admin commands.
-- After a hosted deploy, create client-facing deploy access tokens with \`npm run agentkit -- access token create <name>\`.
+- Hosted deploy writes the local chat/UI deploy access token to \`.agentkit/chat-access-token.json\`. Create extra client-facing tokens with \`npm run agentkit -- access token create <name> --out <path>\`.
+- Use \`npm run agentkit -- deploy --smoke "hello"\` or \`npm run agentkit -- deploy smoke --message "hello"\` for an official hosted chat smoke check.
 
 ## Rules
 
 - Keep required local secret names in \`.env.schema\` and values in ignored \`.env\`. AgentKit local commands load \`.env\` directly.
 - Real providers are resolved by AgentKit through the internal Pi SDK backend; keep project code on \`@andreprado/agentkit\`.
+- The owner must choose the real provider before you switch from \`test/fake\`. Update \`agentkit.config.ts\`, \`.env.schema\`, and local/hosted secrets after that choice.
 - Do not commit \`.env\` or \`.agentkit/\`.
 - Edit the agent contract in \`agentkit.config.ts\`.
 - Edit instructions in \`prompts/instructions.md\`.
@@ -243,26 +254,51 @@ Turn the request into a working local capsule:
 - Update \`agentkit.config.ts\` when tools, secrets, provider, or access rules change.
 - Add TypeScript tools under \`tools/\` for real actions or external data.
 - Keep the first version runnable with \`test/fake\` unless the owner explicitly asks for a real provider.
+- Do not use a wizard or recipe. Build the capsule directly from the scaffold, the AgentKit contract, and the owner's brief.
 - Make practical assumptions and list them in your final response.
 - Ask follow-up questions only when missing information blocks a safe local implementation.
 
 ## Local Commands
 
 \`\`\`sh
-npm install
 npm run typecheck
 npm run agentkit -- inspect
 npm run chat -- --message "hello"
 \`\`\`
 
+\`test/fake\` proves the scaffold and deterministic tool paths. It does not prove natural conversation quality.
+
+\`agentkit new\` installs dependencies by default. Run \`npm install\` only if the capsule was created with \`--no-install\`, install failed, or \`node_modules\` was deleted.
+
 Set local development secrets without opening code:
 
 \`\`\`sh
-npm run agentkit -- env set OPENAI_API_KEY "<value>"
+printf %s "$OPENAI_API_KEY" | npm run agentkit -- env set OPENAI_API_KEY --stdin
 npm run agentkit -- inspect
 npm run chat -- --message "hello"
 \`\`\`
 
+## Testing With A UI
+
+Local UI:
+
+\`\`\`sh
+npm run dev
+\`\`\`
+
+Open the printed \`Chat:\` URL and tell the owner the exact URL.
+
+Hosted deploy UI:
+
+\`\`\`sh
+npm run agentkit -- deploy
+npm run agentkit -- chat-ui --deploy
+\`\`\`
+
+Open the printed \`Chat:\` URL and tell the owner this local UI is connected to the hosted deploy.
+
+Before claiming real conversation behavior has been tested, ask the owner which provider to use: OpenRouter, OpenAI, Anthropic, or another supported provider. Do not choose for them. After they choose, update \`agentkit.config.ts\`, \`.env.schema\`, local secrets, hosted secrets if deploying, then rerun chat/UI checks.
+
 If you add a tool, also run a fake-provider tool smoke test:
 
 \`\`\`sh
@@ -283,9 +319,10 @@ This capsule is hosted-deploy ready by default.
 2. Put agent-owned tables in \`schema.sql\`. AgentKit applies it locally and migrates/provisions hosted storage during deploy.
 3. Run \`npm run agentkit -- build\` only when you want to validate the artifact locally.
 4. If the owner has not logged in yet, ask for an invited AgentKit Cloud alpha token and run \`npm run agentkit -- login --token <token>\`.
-5. Put production secrets into managed secrets with \`npm run agentkit -- secret set <NAME> <VALUE>\`.
+5. Put production secrets into managed secrets with \`npm run agentkit -- secret set <NAME> --from-local-env\`, \`--from-env\`, or \`--stdin\`.
 6. Run \`npm run agentkit -- deploy\`.
-7. Create client-facing deploy access tokens with \`npm run agentkit -- access token create <name>\` when a website or app needs to call the hosted agent.
+7. Run \`npm run agentkit -- chat-ui --deploy\` to test the hosted agent through a local UI using the auto-created \`.agentkit/chat-access-token.json\`. Create extra client-facing deploy access tokens with \`npm run agentkit -- access token create <name> --out <path>\` when a separate website or app needs its own credential.
+8. Use \`npm run agentkit -- deploy --smoke "hello"\` during deploy or \`npm run agentkit -- deploy smoke --message "hello"\` afterward for an official hosted smoke check.
 
 AgentKit owns hosted infrastructure and production secrets. Do not put production secret values in this capsule. Do not run operator/admin commands from a user capsule.
 `,
@@ -302,6 +339,7 @@ Use AgentKit conventions when editing this project.
 - Local runtime state lives in \`.agentkit/\` and should not be committed.
 - The default provider is \`test/fake\`, which needs no secrets.
 - Real providers run through AgentKit's internal Pi SDK backend.
+- Ask the owner which real provider to use before switching from \`test/fake\`; do not choose OpenRouter, OpenAI, or Anthropic automatically.
 - Production secrets must be managed secrets, not committed files.
 - Keep required local secret names in \`.env.schema\` and values in ignored \`.env\`. AgentKit local commands load \`.env\` directly.
 - Treat the owner's natural-language request as the brief and start implementing inside this capsule.
@@ -316,16 +354,21 @@ Generated by AgentKit as an Agent Capsule.
 ## Setup
 
 \`\`\`sh
-npm install
 npm run chat -- --message "hello"
 npm run dev
 \`\`\`
 
+\`agentkit new\` installs dependencies by default. Run \`npm install\` only if this capsule was created with \`--no-install\`, install failed, or \`node_modules\` was deleted.
+
 \`agentkit.config.ts\` uses the built-in \`test/fake\` provider by default, so the first chat works without editing \`.env\`.
 When a real provider or tool needs a local development secret, keep the required name in \`.env.schema\`, keep the value in ignored \`.env\`, and run AgentKit commands normally; the local runtime loads \`.env\` directly.
 
 \`npm run dev\` runs the whole capsule locally. It should expose local chat, API, inspect, and storage endpoints.
 
+For UI testing, run \`npm run dev\` and open the printed \`Chat:\` URL. After hosted deploy, run \`npm run agentkit -- chat-ui --deploy\` and open its printed \`Chat:\` URL.
+
+\`test/fake\` does not validate real conversation quality. The owner must choose OpenRouter, OpenAI, Anthropic, or another supported provider before real model behavior is tested.
+
 ## Files
 
 - \`agentkit.config.ts\`: agent contract.