@mindstudio-ai/agent 0.1.34 → 0.1.36

package/dist/cli.js

@@ -1225,13 +1225,26 @@ async function requestWithRetry(config, method, url, body, attempt) {
     return requestWithRetry(config, method, url, body, attempt + 1);
   }
   if (!res.ok) {
-    const errorBody = await res.json().catch(() => ({}));
-    throw new MindStudioError(
-      errorBody.message || `${res.status} ${res.statusText}`,
-      errorBody.code || "api_error",
-      res.status,
-      errorBody
-    );
+    let message = `${res.status} ${res.statusText}`;
+    let code = "api_error";
+    let details;
+    try {
+      const text = await res.text();
+      try {
+        const body2 = JSON.parse(text);
+        details = body2;
+        const errMsg = (typeof body2.error === "string" ? body2.error : void 0) ?? (typeof body2.message === "string" ? body2.message : void 0) ?? (typeof body2.details === "string" ? body2.details : void 0);
+        if (errMsg) message = errMsg;
+        else if (body2.error || body2.message || body2.details) {
+          message = JSON.stringify(body2.error ?? body2.message ?? body2.details);
+        }
+        if (body2.code) code = body2.code;
+      } catch {
+        if (text && text.length < 500) message = text;
+      }
+    } catch {
+    }
+    throw new MindStudioError(message, code, res.status, details);
   }
   const data = await res.json();
   return { data, headers: res.headers };
@@ -1464,6 +1477,7 @@ function escapeValue(val) {
   return `'${json.replace(/'/g, "''")}'`;
 }
 function deserializeRow(row, columns) {
+  if (row == null) return row;
   const result = {};
   for (const [key, value] of Object.entries(row)) {
     const col = columns.find((c) => c.name === key);
@@ -2085,6 +2099,8 @@ var init_query = __esm({
       _limit;
       _offset;
       _config;
+      /** @internal Post-process transform applied after row deserialization. */
+      _postProcess;
       constructor(config, options) {
         this._config = config;
         this._predicates = options?.predicates ?? [];
@@ -2092,6 +2108,7 @@ var init_query = __esm({
         this._reversed = options?.reversed ?? false;
         this._limit = options?.limit;
         this._offset = options?.offset;
+        this._postProcess = options?.postProcess;
       }
       _clone(overrides) {
         return new _Query(this._config, {
@@ -2099,7 +2116,8 @@ var init_query = __esm({
           sortAccessor: overrides.sortAccessor ?? this._sortAccessor,
           reversed: overrides.reversed ?? this._reversed,
           limit: overrides.limit ?? this._limit,
-          offset: overrides.offset ?? this._offset
+          offset: overrides.offset ?? this._offset,
+          postProcess: overrides.postProcess
         });
       }
       // -------------------------------------------------------------------------
@@ -2123,13 +2141,18 @@ var init_query = __esm({
       // -------------------------------------------------------------------------
       // Terminal methods
       // -------------------------------------------------------------------------
-      async first() {
-        const rows = await this._clone({ limit: 1 })._execute();
-        return rows[0] ?? null;
+      first() {
+        return this._clone({
+          limit: 1,
+          postProcess: (rows) => rows[0] ?? null
+        });
       }
-      async last() {
-        const rows = await this._clone({ limit: 1, reversed: !this._reversed })._execute();
-        return rows[0] ?? null;
+      last() {
+        return this._clone({
+          limit: 1,
+          reversed: !this._reversed,
+          postProcess: (rows) => rows[0] ?? null
+        });
       }
       async count() {
         const compiled = this._compilePredicates();
@@ -2178,10 +2201,10 @@ var init_query = __esm({
           (row) => this._predicates.every((pred) => pred(row))
         );
       }
-      async min(accessor) {
+      min(accessor) {
         return this.sortBy(accessor).first();
       }
-      async max(accessor) {
+      max(accessor) {
         return this.sortBy(accessor).reverse().first();
       }
       async groupBy(accessor) {
@@ -2220,7 +2243,7 @@ var init_query = __esm({
             limit: this._limit,
             offset: this._offset
           });
-          return { type: "query", query, fallbackQuery: null, config: this._config };
+          return { type: "query", query, fallbackQuery: null, config: this._config, postProcess: this._postProcess };
         }
         const fallbackQuery = buildSelect(this._config.tableName);
         return {
@@ -2232,7 +2255,8 @@ var init_query = __esm({
           sortAccessor: this._sortAccessor,
           reversed: this._reversed,
           limit: this._limit,
-          offset: this._offset
+          offset: this._offset,
+          postProcess: this._postProcess
         };
       }
       /**
@@ -2249,7 +2273,9 @@ var init_query = __esm({
             compiled.config.columns
           )
         );
-        if (compiled.query) return rows;
+        if (compiled.query) {
+          return compiled.postProcess ? compiled.postProcess(rows) : rows;
+        }
         let filtered = compiled.predicates ? rows.filter((row) => compiled.predicates.every((pred) => pred(row))) : rows;
         if (compiled.sortAccessor) {
           const accessor = compiled.sortAccessor;
@@ -2267,16 +2293,19 @@ var init_query = __esm({
           const end = compiled.limit != null ? start + compiled.limit : void 0;
           filtered = filtered.slice(start, end);
         }
-        return filtered;
+        return compiled.postProcess ? compiled.postProcess(filtered) : filtered;
       }
       // -------------------------------------------------------------------------
       // PromiseLike
       // -------------------------------------------------------------------------
       then(onfulfilled, onrejected) {
-        return this._execute().then(onfulfilled, onrejected);
+        const promise = this._execute().then(
+          (rows) => this._postProcess ? this._postProcess(rows) : rows
+        );
+        return promise.then(onfulfilled, onrejected);
       }
       catch(onrejected) {
-        return this._execute().catch(onrejected);
+        return this.then(void 0, onrejected);
       }
       // -------------------------------------------------------------------------
       // Execution internals
@@ -2515,6 +2544,9 @@ var init_table = __esm({
         const items = (isArray ? data : [data]).map(
           (item) => this._config.defaults ? { ...this._config.defaults, ...item } : item
         );
+        for (const item of items) {
+          this._checkManagedColumns(item);
+        }
         const queries = items.map(
           (item) => buildInsert(
             this._config.tableName,
@@ -2532,7 +2564,13 @@ var init_table = __esm({
             }
             return void 0;
           });
-          return isArray ? rows : rows[0];
+          const result = isArray ? rows : rows[0];
+          this._syncRolesIfNeeded(
+            items,
+            result,
+            isArray
+          );
+          return result;
         });
       }
       /**
@@ -2540,20 +2578,25 @@ var init_table = __esm({
        * Returns the updated row via `UPDATE ... RETURNING *`.
        */
       update(id, data) {
+        this._checkManagedColumns(data);
         const query = buildUpdate(
           this._config.tableName,
           id,
           data,
           this._config.columns
         );
-        return new Mutation(
-          this._config,
-          [query],
-          (results) => deserializeRow(
+        return new Mutation(this._config, [query], (results) => {
+          const result = deserializeRow(
             results[0].rows[0],
             this._config.columns
-          )
-        );
+          );
+          this._syncRolesIfNeeded(
+            [data],
+            result,
+            false
+          );
+          return result;
+        });
       }
       remove(id) {
         const query = buildDelete(this._config.tableName, `id = ?`, [id]);
@@ -2608,24 +2651,65 @@ var init_table = __esm({
         const conflictColumns = Array.isArray(conflictKey) ? conflictKey : [conflictKey];
         this._validateUniqueConstraint(conflictColumns);
         const withDefaults = this._config.defaults ? { ...this._config.defaults, ...data } : data;
+        this._checkManagedColumns(withDefaults);
         const query = buildUpsert(
           this._config.tableName,
           withDefaults,
           conflictColumns,
           this._config.columns
         );
-        return new Mutation(
-          this._config,
-          [query],
-          (results) => deserializeRow(
+        return new Mutation(this._config, [query], (results) => {
+          const result = deserializeRow(
             results[0].rows[0],
             this._config.columns
-          )
-        );
+          );
+          this._syncRolesIfNeeded([withDefaults], result, false);
+          return result;
+        });
       }
       // -------------------------------------------------------------------------
       // Internal helpers
       // -------------------------------------------------------------------------
+      /** @internal Throw if data includes a platform-managed email/phone column. */
+      _checkManagedColumns(data) {
+        const mc = this._config.managedColumns;
+        if (!mc) return;
+        const keys = Object.keys(data);
+        for (const key of keys) {
+          if (mc.email && key === mc.email || mc.phone && key === mc.phone) {
+            throw new MindStudioError(
+              `Cannot write to "${key}" \u2014 this column is managed by auth. Use the auth API to change a user's ${key === mc.email ? "email" : "phone"}.`,
+              "managed_column_write",
+              400
+            );
+          }
+        }
+      }
+      /**
+       * @internal Fire role sync for rows that wrote to the roles column.
+       * Called inside processResult (runs after SQL execution in both
+       * standalone and batch paths). Fire-and-forget.
+       */
+      _syncRolesIfNeeded(inputItems, result, isArray) {
+        const rolesCol = this._config.managedColumns?.roles;
+        const syncRoles = this._config.syncRoles;
+        if (!rolesCol || !syncRoles) return;
+        if (!inputItems.some((item) => rolesCol in item)) return;
+        if (isArray) {
+          for (const row of result) {
+            if (row?.id) {
+              syncRoles(row.id, row[rolesCol]).catch(() => {
+              });
+            }
+          }
+        } else {
+          const row = result;
+          if (row?.id) {
+            syncRoles(row.id, row[rolesCol]).catch(() => {
+            });
+          }
+        }
+      }
       /** @internal Validate that the given columns match a declared unique constraint. */
       _validateUniqueConstraint(columns) {
         if (!this._config.unique?.length) {
@@ -2652,7 +2736,7 @@ var init_table = __esm({
 });
 
 // src/db/index.ts
-function createDb(databases, executeBatch) {
+function createDb(databases, executeBatch, authConfig, syncRoles) {
   return {
     defineTable(name, options) {
       const resolved = resolveTable(databases, name, options?.database);
@@ -2662,6 +2746,8 @@ function createDb(databases, executeBatch) {
         columns: resolved.columns,
         unique: options?.unique,
         defaults: options?.defaults,
+        managedColumns: authConfig?.table === name ? authConfig.columns : void 0,
+        syncRoles: authConfig?.table === name && authConfig.columns.roles ? syncRoles : void 0,
         executeBatch: (queries) => executeBatch(resolved.databaseId, queries)
       };
       return new Table(config);
@@ -3923,6 +4009,12 @@ var init_client = __esm({
        * ```
        */
       get auth() {
+        if (this._authType === "internal") {
+          const ai = globalThis.ai;
+          if (ai?.auth) {
+            return new AuthContext(ai.auth);
+          }
+        }
         if (!this._auth) {
           this._trySandboxHydration();
         }
@@ -4011,7 +4103,9 @@ var init_client = __esm({
         this._auth = new AuthContext(context.auth);
         this._db = createDb(
           context.databases,
-          this._executeDbBatch.bind(this)
+          this._executeDbBatch.bind(this),
+          context.authConfig,
+          this._syncRoles.bind(this)
         );
       }
       /**
@@ -4027,7 +4121,8 @@ var init_client = __esm({
         if (ai?.auth && ai?.databases) {
           this._applyContext({
             auth: ai.auth,
-            databases: ai.databases
+            databases: ai.databases,
+            authConfig: ai.authConfig
           });
         }
       }
@@ -4056,8 +4151,11 @@ var init_client = __esm({
             const text = await res.text();
             try {
               const body = JSON.parse(text);
-              const errMsg = body.error ?? body.message ?? body.details;
+              const errMsg = (typeof body.error === "string" ? body.error : void 0) ?? (typeof body.message === "string" ? body.message : void 0) ?? (typeof body.details === "string" ? body.details : void 0);
               if (errMsg) message = errMsg;
+              else if (body.error || body.message || body.details) {
+                message = JSON.stringify(body.error ?? body.message ?? body.details);
+              }
               if (body.code) code = body.code;
             } catch {
               if (text && text.length < 500) message = text;
@@ -4073,6 +4171,39 @@ var init_client = __esm({
         const data = await res.json();
         return data.results;
       }
+      /**
+       * @internal Sync a user's roles to the platform after a successful
+       * auth table write. Calls POST /_internal/v2/auth/sync-user.
+       * Fire-and-forget: errors are caught and logged, never propagated.
+       */
+      async _syncRoles(userId, roles) {
+        try {
+          const url = `${this._httpConfig.baseUrl}/_internal/v2/auth/sync-user`;
+          const res = await fetch(url, {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/json",
+              Authorization: this._token
+            },
+            body: JSON.stringify({
+              appId: this._appId,
+              userId,
+              roles
+            })
+          });
+          if (!res.ok) {
+            const text = await res.text().catch(() => "");
+            console.warn(
+              `[mindstudio] Failed to sync roles for user ${userId}: ${res.status} ${text}`
+            );
+          }
+        } catch (err) {
+          console.warn(
+            `[mindstudio] Failed to sync roles for user ${userId}:`,
+            err
+          );
+        }
+      }
       /**
        * @internal Create a lazy Db proxy that auto-hydrates context.
        *
@@ -4085,7 +4216,7 @@ var init_client = __esm({
         return {
           defineTable(name, options) {
             const databaseHint = options?.database;
-            return new Table({
+            const tableConfig = {
               databaseId: "",
               tableName: name,
               columns: [],
@@ -4093,6 +4224,13 @@ var init_client = __esm({
               defaults: options?.defaults,
               executeBatch: async (queries) => {
                 await agent.ensureContext();
+                const ac = agent._context.authConfig;
+                if (ac && ac.table === name && !tableConfig.managedColumns) {
+                  tableConfig.managedColumns = ac.columns;
+                  if (ac.columns.roles) {
+                    tableConfig.syncRoles = agent._syncRoles.bind(agent);
+                  }
+                }
                 const databases = agent._context.databases;
                 let targetDb;
                 if (databaseHint) {
@@ -4107,7 +4245,8 @@ var init_client = __esm({
                 const databaseId = targetDb?.id ?? databases[0]?.id ?? "";
                 return agent._executeDbBatch(databaseId, queries);
               }
-            });
+            };
+            return new Table(tableConfig);
           },
           // Time helpers work without context
           now: () => Date.now(),
@@ -4566,6 +4705,8 @@ var init_instructions = __esm({
   - **Missing MindStudioError handling** \u2014 the SDK has structured errors with \`code\`, \`status\`, \`details\`. Catching generic \`Error\` loses actionable information. Always include \`MindStudioError\` handling in code examples.
   - **One-at-a-time db writes when batch exists** \u2014 N sequential \`update()\` or \`push()\` calls should be a single \`db.batch()\` call. One round trip instead of N.
   - **Hardcoded model IDs without context** \u2014 model IDs can change. When writing code with a specific model, include a comment noting which model it is and why it was chosen, so the caller can swap it later.
+  - Do not recommend using thread persistence. This is an advanced feature - if someone needs this they will discover it on their own.
+  - Generate text is great for one-off text generation requests to models. For sustained conversations, conversations that require history, persistence, or multiple threads or tool use, recommend that the developer add an Agent interface to their MindStudio app and use that directly. They will understand what you mean by this.
   </anti_patterns>
 
   <model_guidance>
@@ -4885,7 +5026,7 @@ async function startMcpServer(options) {
           capabilities: { tools: {} },
           serverInfo: {
             name: "mindstudio-agent",
-            version: "0.1.34"
+            version: "0.1.36"
           },
           instructions: 'Welcome to MindStudio \u2014 a platform with 200+ AI models, 850+ third-party integrations, and pre-built agents.\n\nGetting started:\n1. Call `ask` with any question about the SDK \u2014 it knows every action, model, and connector and returns working code with real model IDs and config options. Examples: ask("generate an image with FLUX"), ask("what models support vision?"), ask("how do I send a Slack message?").\n2. Call `changeName` to set your display name \u2014 use your name or whatever your user calls you. This is how you\'ll appear in MindStudio request logs.\n3. If you have a profile picture or icon, call `uploadFile` to upload it, then `changeProfilePicture` with the returned URL.\n4. For manual browsing, call `listActions` to discover all available actions.\n\nThen use the tools to generate text, images, video, audio, search the web, work with data sources, run agents, and more.\n\nImportant:\n- AI-powered actions (text generation, image generation, video, audio, etc.) cost money. Before running these, call `estimateActionCost` and confirm with the user before proceeding \u2014 unless they\'ve explicitly told you to go ahead.\n- Not all agents from `listAgents` are configured for API use. Do not try to run an agent just because it appears in the list \u2014 it will likely fail. Only run agents the user specifically asks you to run.'
         });
@@ -5841,7 +5982,7 @@ function isNewerVersion(current, latest) {
   return false;
 }
 async function checkForUpdate() {
-  const currentVersion = "0.1.34";
+  const currentVersion = "0.1.36";
   if (!currentVersion) return null;
   try {
     const { loadConfig: loadConfig2, saveConfig: saveConfig2 } = await Promise.resolve().then(() => (init_config(), config_exports));
@@ -5870,7 +6011,7 @@ async function checkForUpdate() {
   }
 }
 function printUpdateNotice(latestVersion) {
-  const currentVersion = "0.1.34";
+  const currentVersion = "0.1.36";
   process.stderr.write(
     `
   ${ansi2.cyanBright("Update available")} ${ansi2.gray(currentVersion + " \u2192")} ${ansi2.cyanBold(latestVersion)}
@@ -5883,7 +6024,7 @@ function isStandaloneBinary() {
   return !argv1.includes("node_modules");
 }
 async function cmdUpdate() {
-  const currentVersion = "0.1.34";
+  const currentVersion = "0.1.36";
   process.stderr.write(
     `  ${ansi2.gray("Current version:")} ${currentVersion}
 `
@@ -6018,7 +6159,7 @@ async function cmdLogin(options) {
   process.stderr.write("\n");
   printLogo();
   process.stderr.write("\n");
-  const ver = "0.1.34";
+  const ver = "0.1.36";
   process.stderr.write(
     `  ${ansi2.bold("MindStudio Agent")} ${ver ? " " + ansi2.gray("v" + ver) : ""}
 `
@@ -6345,7 +6486,7 @@ async function main() {
   try {
     if (command === "version" || command === "-v") {
       process.stdout.write(
-        "0.1.34\n"
+        "0.1.36\n"
       );
       return;
     }