@promptbook/cli 0.112.0-136 → 0.112.0-137

package/README.md

@@ -27,6 +27,26 @@ Create persistent AI agents that turn your company's scattered knowledge into ac
 
 
 
+### Standalone VPS
+
+Run the standalone VPS installer only on a fresh server. Interactive mode asks for the installation values:
+
+```bash
+sudo curl -fsSL https://raw.githubusercontent.com/webgptorg/promptbook/refs/heads/main/other/vps/install.sh | bash
+```
+
+Non-interactive mode takes defaults from command-line options and skips initial code-runner CLI setup, which can be configured later from the UI or SSH:
+
+```bash
+sudo curl -fsSL https://raw.githubusercontent.com/webgptorg/promptbook/refs/heads/main/other/vps/install.sh | bash -s -- \
+    --non-interactive \
+    --yes-i-understand-that-script-should-be-run-on-fresh-server \
+    --domain s24.ptbk.io \
+    --openai-api-key sk-proj-abcdef \
+    --sentry-dsn https://abc@def.ingest.de.sentry.io/123 \
+    --admin-password xxx
+```
+
 
 
 <blockquote style="color: #ff8811">

package/apps/agents-server/src/app/api/internal/agent-runner-limits/route.ts

@@ -1,4 +1,5 @@
 import { NextResponse } from 'next/server';
+import { isTimingSafeEqualString } from '../../../../../../../src/utils/isTimingSafeEqualString';
 import { resolveUserChatWorkerInternalToken } from '@/src/utils/userChat';
 import { getLocalAgentRunnerLimits } from '@/src/utils/serverLimits';
 
@@ -47,5 +48,5 @@ async function handleAgentRunnerLimitsRequest(request: Request) {
  */
 function isAuthorizedInternalWorkerRequest(request: Request): boolean {
     const token = request.headers.get('x-user-chat-worker-token');
-    return token === resolveUserChatWorkerInternalToken();
+    return isTimingSafeEqualString(token, resolveUserChatWorkerInternalToken());
 }

package/apps/agents-server/src/app/api/internal/user-chat-jobs/run/route.ts

@@ -5,6 +5,7 @@ import {
     triggerUserChatJobWorker,
 } from '@/src/utils/userChat';
 import { after, NextResponse } from 'next/server';
+import { isTimingSafeEqualString } from '../../../../../../../../src/utils/isTimingSafeEqualString';
 
 /**
  * Allows one worker invocation to run for the platform maximum.
@@ -101,5 +102,5 @@ function isAuthorizedUserChatWorkerRequest(request: Request): boolean {
  */
 function isAuthorizedInternalWorkerRequest(request: Request): boolean {
     const token = request.headers.get('x-user-chat-worker-token');
-    return token === resolveUserChatWorkerInternalToken();
+    return isTimingSafeEqualString(token, resolveUserChatWorkerInternalToken());
 }

package/apps/agents-server/src/utils/localChatRunner/processLocalUserChatJob.ts

@@ -223,7 +223,7 @@ async function synchronizeLocalUserChatJob(
     }
 
     const failedFileContent = await readOptionalTextFile(join(agentDirectoryPath, metadata.failedPath));
-    if (failedFileContent !== null) {
+    if (failedFileContent !== null && job.status !== 'FAILED') {
         const failureReason = parseLocalChatFailedMessageBook({
             bookContent: failedFileContent,
             expectedMessagesBeforeAnswer: metadata.expectedMessagesBeforeAnswer,

package/apps/agents-server/src/utils/session.ts

@@ -3,6 +3,7 @@ import { cookies, headers } from 'next/headers';
 import { cache } from 'react';
 import { spaceTrim } from 'spacetrim';
 import { EnvironmentMismatchError } from '../../../../src/errors/EnvironmentMismatchError';
+import { isTimingSafeEqualString } from '../../../../src/utils/isTimingSafeEqualString';
 import { isStandaloneVpsRawIpBootstrapActive } from './standaloneVpsRawIpBootstrap';
 
 /**
@@ -153,7 +154,7 @@ export function parseSessionToken(token: string | null | undefined): SessionUser
     const payload = Buffer.from(payloadBase64, 'base64').toString('utf-8');
     const expectedSignature = createHmac('sha256', getSessionSigningKey()).update(payload).digest('hex');
 
-    if (signature !== expectedSignature) {
+    if (!isTimingSafeEqualString(signature, expectedSignature)) {
         return null;
     }
 

package/esm/index.es.js

@@ -59,7 +59,7 @@ const BOOK_LANGUAGE_VERSION = '2.0.0';
  * @generated
  * @see https://github.com/webgptorg/promptbook
  */
-const PROMPTBOOK_ENGINE_VERSION = '0.112.0-136';
+const PROMPTBOOK_ENGINE_VERSION = '0.112.0-137';
 /**
  * TODO: string_promptbook_version should be constrained to the all versions of Promptbook engine
  * Note: [💞] Ignore a discrepancy between file name and entity name