@promptbook/cli 0.112.0-137 → 0.112.0-138

package/apps/agents-server/README.md

@@ -44,6 +44,12 @@ ptbk agents-server start --harness github-copilot --model gpt-5.4 --thinking-lev
 <a id="agents-server-env-session-secret"></a>
 -   `SESSION_SECRET`: HMAC signing key used to sign the session cookie. Must be set explicitly in production — the server refuses to start session signing when missing instead of falling back to a hardcoded default. Use a long random string, for example the output of `openssl rand -hex 32`. Keep it separate from `ADMIN_PASSWORD` so a leak of either credential cannot forge the other.
 
+<a id="agents-server-env-ptbk-agents-server-user-chat-worker-token"></a>
+-   `PTBK_AGENTS_SERVER_USER_CHAT_WORKER_TOKEN`: Shared internal token used to authorize background worker routes (`/api/internal/user-chat-jobs/run`, `/api/internal/user-chat-timeouts/run`, and `/api/internal/agent-runner-limits`). Must be set explicitly in production — the server refuses to resolve the worker token when missing instead of falling back to `ADMIN_PASSWORD`, `SUPABASE_SERVICE_ROLE_KEY`, or a hardcoded constant. Use a long random string, for example the output of `openssl rand -hex 32`. The CLI launcher (`ptbk agents-server start`) generates a per-process value automatically when the variable is empty so local development works without configuration.
+
+<a id="agents-server-env-promptbook-team-agent-access-token"></a>
+-   `PROMPTBOOK_TEAM_AGENT_ACCESS_TOKEN`: Dedicated secret used by same-server `TEAM` calls to authorize access to private teammate agents. Must be a dedicated random string — falling back to `ADMIN_PASSWORD` or `SUPABASE_SERVICE_ROLE_KEY` would let a leak of one credential compromise both authentication boundaries. When not configured, same-server team access stays disabled (the integration fails closed) so leaving the variable empty is safe but disables the feature. Use a long random string, for example the output of `openssl rand -hex 32`.
+
 ## Creating servers
 
 When creating new Agents server, search across the repository for [☁]

package/apps/agents-server/env-manual/GITHUB_APP.md

@@ -32,7 +32,7 @@ GitHub App configuration now lives in **Metadata** so you can customize it per s
     - **GITHUB_APP_ID** – numeric GitHub App ID from the app settings.
     - **GITHUB_APP_SLUG** – slug used in `https://github.com/apps/<slug>`.
     - **GITHUB_APP_PRIVATE_KEY** – PEM-encoded private key. Replace literal newlines with `\n` when editing through the UI and keep the `BEGIN/END` markers.
-    - **GITHUB_APP_STATE_SECRET** (optional, recommended) – random string used to sign OAuth/connect state. If unset, `ADMIN_PASSWORD` will be used as a fallback.
+    - **GITHUB_APP_STATE_SECRET** (optional, recommended) – random string used to sign OAuth/connect state.
 
 The values stored in Metadata override any legacy `.env` entries and can differ per server host.
 

package/apps/agents-server/playwright.config.ts

@@ -27,6 +27,8 @@ const APP_URL = `http://127.0.0.1:${APP_PORT}`;
 const APP_E2E_ENV = {
     ADMIN_PASSWORD: 'e2e-admin-password',
     SESSION_SECRET: 'e2e-session-secret-must-differ-from-admin-password',
+    PTBK_AGENTS_SERVER_USER_CHAT_WORKER_TOKEN: 'e2e-user-chat-worker-token-must-differ-from-admin-password',
+    PROMPTBOOK_TEAM_AGENT_ACCESS_TOKEN: 'e2e-team-agent-access-token-must-differ-from-admin-password',
     NEXT_DIST_DIR: '.next-e2e',
     NEXT_PUBLIC_SITE_URL: APP_URL,
     PTBK_AGENTS_SERVER_DATABASE: 'supabase',

package/apps/agents-server/src/utils/userChat/resolveUserChatWorkerInternalToken.ts

@@ -1,18 +1,72 @@
-import { createHash } from 'crypto';
+import { randomBytes } from 'crypto';
+import { spaceTrim } from 'spacetrim';
+import { EnvironmentMismatchError } from '../../../../../src/errors/EnvironmentMismatchError';
+
+/**
+ * Cached internal worker token resolved from `PTBK_AGENTS_SERVER_USER_CHAT_WORKER_TOKEN` on first use.
+ *
+ * Computed lazily so module imports never fail eagerly at build time and the
+ * environment can still be configured before the first internal worker request.
+ *
+ * @private internal cache of `resolveUserChatWorkerInternalToken`
+ */
+let resolvedUserChatWorkerInternalToken: string | null = null;
 
 /**
  * Resolves the shared internal token used to protect background worker routes.
+ *
+ * In production, `PTBK_AGENTS_SERVER_USER_CHAT_WORKER_TOKEN` must be configured
+ * explicitly — falling back to any shared credential (in particular
+ * `ADMIN_PASSWORD` or `SUPABASE_SERVICE_ROLE_KEY`) or a hardcoded literal would
+ * let anyone who learns that value (or computes its publicly-known hash) drive
+ * internal worker jobs at will. Outside production, a per-process random token
+ * is generated on first use so local development works without configuration
+ * while still rejecting unsafe shared fallbacks.
+ *
+ * @returns Shared internal worker token.
+ * @throws {EnvironmentMismatchError} When the environment variable is missing in production.
+ *
+ * @private internal utility of Agents Server
  */
 export function resolveUserChatWorkerInternalToken(): string {
-    if (process.env.PTBK_AGENTS_SERVER_USER_CHAT_WORKER_TOKEN) {
-        return process.env.PTBK_AGENTS_SERVER_USER_CHAT_WORKER_TOKEN;
+    if (resolvedUserChatWorkerInternalToken !== null) {
+        return resolvedUserChatWorkerInternalToken;
+    }
+
+    const configuredToken = process.env.PTBK_AGENTS_SERVER_USER_CHAT_WORKER_TOKEN?.trim();
+    if (configuredToken) {
+        resolvedUserChatWorkerInternalToken = configuredToken;
+        return resolvedUserChatWorkerInternalToken;
     }
 
-    const entropySource =
-        process.env.SUPABASE_SERVICE_ROLE_KEY ||
-        process.env.ADMIN_PASSWORD ||
-        process.env.NEXT_PUBLIC_SITE_URL ||
-        'promptbook-user-chat-worker';
+    if (process.env.NODE_ENV === 'production') {
+        throw new EnvironmentMismatchError(
+            spaceTrim(`
+                Missing required \`PTBK_AGENTS_SERVER_USER_CHAT_WORKER_TOKEN\` environment variable in production.
+
+                The Agents Server protects its internal worker routes
+                (\`/api/internal/user-chat-jobs/run\`,
+                \`/api/internal/user-chat-timeouts/run\`, and
+                \`/api/internal/agent-runner-limits\`) with this shared token.
+                Reusing \`ADMIN_PASSWORD\`, \`SUPABASE_SERVICE_ROLE_KEY\`, or a
+                hardcoded fallback would let anyone who learns that value drive
+                background jobs at will.
+
+                **Fix:** set \`PTBK_AGENTS_SERVER_USER_CHAT_WORKER_TOKEN\` to a long
+                random string (for example the output of \`openssl rand -hex 32\`)
+                in the deployment environment and restart the server.
+            `),
+        );
+    }
 
-    return createHash('sha256').update(`user-chat-worker:${entropySource}`).digest('hex');
+    resolvedUserChatWorkerInternalToken = randomBytes(32).toString('hex');
+    console.warn(
+        spaceTrim(`
+            \`PTBK_AGENTS_SERVER_USER_CHAT_WORKER_TOKEN\` is not configured — generated
+            a random per-process internal worker token for this non-production run.
+            Pending internal worker invocations will be invalidated on every restart
+            until \`PTBK_AGENTS_SERVER_USER_CHAT_WORKER_TOKEN\` is set.
+        `),
+    );
+    return resolvedUserChatWorkerInternalToken;
 }

package/apps/agents-server/src/utils/vpsConfiguration.ts

@@ -23,6 +23,8 @@ export const VPS_ENVIRONMENT_VARIABLE_KEYS = [
     'NEXT_PUBLIC_SITE_URL',
     'ADMIN_PASSWORD',
     'SESSION_SECRET',
+    'PTBK_AGENTS_SERVER_USER_CHAT_WORKER_TOKEN',
+    'PROMPTBOOK_TEAM_AGENT_ACCESS_TOKEN',
     'OPENAI_API_KEY',
     'PTBK_HARNESS',
     'PTBK_MODEL',

package/esm/index.es.js

@@ -59,7 +59,7 @@ const BOOK_LANGUAGE_VERSION = '2.0.0';
  * @generated
  * @see https://github.com/webgptorg/promptbook
  */
-const PROMPTBOOK_ENGINE_VERSION = '0.112.0-137';
+const PROMPTBOOK_ENGINE_VERSION = '0.112.0-138';
 /**
  * TODO: string_promptbook_version should be constrained to the all versions of Promptbook engine
  * Note: [💞] Ignore a discrepancy between file name and entity name
@@ -2671,6 +2671,8 @@ const REQUIRED_AGENTS_SERVER_ENV_VARIABLES = [
     createAgentsServerEnvVariable('SUPABASE_SERVICE_ROLE_KEY', ''),
     createAgentsServerEnvVariable('SUPABASE_AUTO_MIGRATE', 'true'),
     createAgentsServerEnvVariable('ADMIN_PASSWORD', ''),
+    createAgentsServerEnvVariable('PTBK_AGENTS_SERVER_USER_CHAT_WORKER_TOKEN', ''),
+    createAgentsServerEnvVariable('PROMPTBOOK_TEAM_AGENT_ACCESS_TOKEN', ''),
 ];
 /**
  * Ensures `.env` contains all required Agents Server configuration entries.