@promptbook/cli 0.112.0-99 → 0.112.0

package/src/scrapers/_common/utils/getScraperIntermediateSource.ts

@@ -1,4 +1,4 @@
-import { SHA256 as sha256 } from 'crypto-js';
+import CryptoJS from 'crypto-js';
 import hexEncoder from 'crypto-js/enc-hex';
 import { mkdir, rm } from 'fs/promises';
 import { dirname, join } from 'path';
@@ -45,7 +45,7 @@ export async function getScraperIntermediateSource(
     const { rootDirname, cacheDirname, intermediateFilesStrategy, extension, isVerbose } = options;
 
     // TODO: [👬] DRY
-    const hash = sha256(
+    const hash = CryptoJS.SHA256(
         //    <- TODO: [🥬] Encapsulate sha256 to some private utility function
         hexEncoder.parse(
             sourceFilename || url || 'untitled',

package/src/scrapers/website/WebsiteScraper.ts

@@ -6,7 +6,7 @@ import type { Scraper, ScraperSourceHandler } from '../_common/Scraper';
 // import PipelineCollection from '../../../books/books';
 import { Readability } from '@mozilla/readability';
 import { JSDOM } from 'jsdom';
-import { Converter as ShowdownConverter } from 'showdown';
+import type { Converter as ShowdownConverter } from 'showdown';
 import { DEFAULT_INTERMEDIATE_FILES_STRATEGY, DEFAULT_IS_VERBOSE, DEFAULT_SCRAPE_CACHE_DIRNAME } from '../../config';
 import { EnvironmentMismatchError } from '../../errors/EnvironmentMismatchError';
 import { KnowledgeScrapeError } from '../../errors/KnowledgeScrapeError';

package/src/scrapers/website/utils/createShowdownConverter.ts

@@ -1,4 +1,4 @@
-import { Converter as ShowdownConverter } from 'showdown';
+import showdown from 'showdown';
 
 /**
  * Create a new showdown converter instance
@@ -6,7 +6,7 @@ import { Converter as ShowdownConverter } from 'showdown';
  * @private utility of `WebsiteScraper`
  */
 export function createShowdownConverter() {
-    return new ShowdownConverter({
+    return new showdown.Converter({
         flavor: 'github',
         /*
         > import showdownHighlight from 'showdown-highlight';

package/src/scripting/javascript/JavascriptEvalExecutionTools.ts

@@ -23,7 +23,7 @@ import { removeDiacritics as _removeDiacritics } from '../../utils/normalization
 import { removeEmojis as _removeEmojis } from '../../utils/normalization/removeEmojis';
 import { removeQuotes as _removeQuotes } from '../../utils/normalization/removeQuotes';
 import { unwrapResult as _unwrapResult } from '../../utils/normalization/unwrapResult';
-import { TODO_any } from '../../utils/organization/TODO_any';
+import type { TODO_any } from '../../utils/organization/TODO_any';
 import { $preserve } from '../../utils/organization/preserve';
 import type { JavascriptExecutionToolsOptions } from './JavascriptExecutionToolsOptions';
 

package/src/utils/agents/resolveAgentAvatarImageUrl.ts

@@ -51,7 +51,7 @@ export type ResolveAgentAvatarImageUrlOptions = ResolveAgentAvatarOptions;
  *
  * @private shared avatar contract
  */
-export const DEFAULT_AGENT_AVATAR_VISUAL_ID: AvatarVisualId = 'octopus3';
+export const DEFAULT_AGENT_AVATAR_VISUAL_ID: AvatarVisualId = 'octopus3d4';
 
 /**
  * Resolved avatar descriptor used by interactive UIs to pick either an image or a live canvas visual.

package/src/utils/chat/chatAttachments/resolveChatAttachmentContent.ts

@@ -1,3 +1,4 @@
+import { spaceTrim } from 'spacetrim';
 import { decodeAttachmentAsText, DEFAULT_ATTACHMENT_TEXT_DECODE_BYTES } from '../../files/decodeAttachmentAsText';
 import { readResponseBytes } from '../../files/readResponseBytes';
 import { isUrlOnPrivateNetwork } from '../../validators/url/isUrlOnPrivateNetwork';
@@ -34,7 +35,13 @@ function truncateAttachmentInlineText(
     }
 
     return {
-        content: `${content.slice(0, Math.max(0, maxCharacters))}\n\n[...truncated...]`,
+        content: spaceTrim(
+            (block) => `
+                ${block(content.slice(0, Math.max(0, maxCharacters)))}
+
+                [...truncated...]
+            `,
+        ),
         isTruncated: true,
     };
 }

package/src/utils/isTimingSafeEqualString.ts

@@ -0,0 +1,43 @@
+import { timingSafeEqual } from 'crypto';
+
+/**
+ * Compares two strings in constant time to prevent timing attacks.
+ *
+ * Plain JavaScript `===` / `!==` string comparisons short-circuit on the first
+ * byte that differs, which lets a remote attacker who can measure response
+ * timing recover the expected value one byte at a time. This helper performs
+ * the comparison through Node's `timingSafeEqual`, which always inspects every
+ * byte of the equal-length buffers.
+ *
+ * Returning `false` early when the byte lengths differ does not expose
+ * character content — only length — which is an acceptable trade-off, since
+ * `timingSafeEqual` requires equal-length buffers and length is typically not
+ * secret.
+ *
+ * `null` and `undefined` inputs are treated as non-matching so callers can
+ * forward raw request values (for example `request.headers.get(name)`) without
+ * an extra guard.
+ *
+ * @param candidate - Value supplied by the caller (for example a request header or cookie).
+ * @param expected - Value to compare against (for example a configured secret).
+ * @returns `true` when both values are strings of equal length with identical bytes.
+ *
+ * @private internal helper function
+ */
+export function isTimingSafeEqualString(
+    candidate: string | null | undefined,
+    expected: string | null | undefined,
+): boolean {
+    if (typeof candidate !== 'string' || typeof expected !== 'string') {
+        return false;
+    }
+
+    const candidateBuffer = Buffer.from(candidate);
+    const expectedBuffer = Buffer.from(expected);
+
+    if (candidateBuffer.length !== expectedBuffer.length) {
+        return false;
+    }
+
+    return timingSafeEqual(candidateBuffer, expectedBuffer);
+}

package/src/utils/misc/computeHash.ts

@@ -1,4 +1,4 @@
-import { SHA256 as sha256 } from 'crypto-js';
+import CryptoJS from 'crypto-js';
 import hexEncoder from 'crypto-js/enc-hex';
 import { spaceTrim } from 'spacetrim';
 import type { string_sha256 } from '../../types/string_sha256';
@@ -11,7 +11,7 @@ import { valueToString } from '../parameters/valueToString';
  * @public exported from `@promptbook/utils`
  */
 export function computeHash(value: really_unknown): string_sha256 {
-    return sha256(hexEncoder.parse(spaceTrim(valueToString(value)))).toString(/* hex */);
+    return CryptoJS.SHA256(hexEncoder.parse(spaceTrim(valueToString(value)))).toString(/* hex */);
 }
 
 // TODO: [🥬][🥬] Use this ACRY

package/src/utils/random/$randomToken.ts

@@ -1,4 +1,4 @@
-import { randomBytes } from 'crypto';
+import CryptoJS from 'crypto-js';
 import type { string_token } from '../../types/string_token';
 
 /**
@@ -12,7 +12,7 @@ import type { string_token } from '../../types/string_token';
  * @private internal helper function
  */
 export function $randomToken(randomness: number): string_token {
-    return randomBytes(randomness).toString('hex');
+    return CryptoJS.lib.WordArray.random(randomness).toString(CryptoJS.enc.Hex);
 }
 
 // TODO: [🤶] Maybe export through `@promptbook/utils` or `@promptbook/random` package

package/src/utils/validators/url/isValidAgentUrl.ts

@@ -10,6 +10,11 @@ import { isValidUrl } from './isValidUrl';
  * - `isValidAgentUrl` *(this one)* which tests just agent URL
  * - `isValidPipelineUrl` which tests just pipeline URL
  *
+ * Note: This is a pure structural validator and does not block private/internal network
+ * addresses. Callers that fetch the URL server-side from an untrusted network context must
+ * additionally apply the `assertSafeUrl` SSRF guard from the Agents Server before any
+ * outbound request.
+ *
  * @public exported from `@promptbook/utils`
  */
 export function isValidAgentUrl(url: really_unknown): url is string_agent_url {
@@ -26,13 +31,6 @@ export function isValidAgentUrl(url: really_unknown): url is string_agent_url {
         return false;
     }
 
-    /*
-    Note: [👣][🧠] Is it secure to allow pipeline URLs on private and unsecured networks?
-    if (isUrlOnPrivateNetwork(url)) {
-        return false;
-    }
-    */
-
     return true;
 }
 

package/src/version.ts

@@ -16,11 +16,11 @@ export const BOOK_LANGUAGE_VERSION: string_semantic_version = '2.0.0';
  * @generated
  * @see https://github.com/webgptorg/promptbook
  */
-export const PROMPTBOOK_ENGINE_VERSION: string_promptbook_version = '0.112.0-99';
+export const PROMPTBOOK_ENGINE_VERSION: string_promptbook_version = '0.112.0';
 
 /**
  * Represents the version string of the Promptbook engine.
- * It follows semantic versioning (e.g., `0.112.0-98`).
+ * It follows semantic versioning (e.g., `0.112.0-140`).
  *
  * @generated
  */

package/src/versions.txt

@@ -1134,3 +1134,35 @@
 0.112.0-97
 0.112.0-98
 0.112.0-99
+0.112.0-100
+0.112.0-101
+0.112.0-102
+0.112.0-104
+0.112.0-105
+0.112.0-106
+0.112.0-107
+0.112.0-108
+0.112.0-109
+0.112.0-110
+0.112.0-111
+0.112.0-112
+0.112.0-113
+0.112.0-114
+0.112.0-115
+0.112.0-116
+0.112.0-117
+0.112.0-118
+0.112.0-119
+0.112.0-122
+0.112.0-123
+0.112.0-126
+0.112.0-128
+0.112.0-131
+0.112.0-132
+0.112.0-133
+0.112.0-135
+0.112.0-136
+0.112.0-137
+0.112.0-139
+0.112.0-140
+0.112.0

package/umd/apps/agents-server/src/constants/federatedAgentImport.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Metadata key storing the delay between retry attempts when importing federated agent books.
+ *
+ * @private internal Agents Server constant
+ */
+export declare const FEDERATED_AGENT_IMPORT_RETRY_DELAY_MS_METADATA_KEY: "FEDERATED_AGENT_IMPORT_RETRY_DELAY_MS";
+/**
+ * Total number of attempts used when loading a federated imported agent before falling back.
+ *
+ * @private internal Agents Server constant
+ */
+export declare const FEDERATED_AGENT_IMPORT_MAX_ATTEMPTS: 3;
+/**
+ * Default delay in milliseconds between federated imported-agent retry attempts.
+ *
+ * @private internal Agents Server constant
+ */
+export declare const DEFAULT_FEDERATED_AGENT_IMPORT_RETRY_DELAY_MS = 500;
+/**
+ * Runtime configuration applied to federated imported-agent retries.
+ *
+ * @private internal Agents Server type
+ */
+export type FederatedAgentImportConfiguration = {
+    /**
+     * Total number of attempts used before returning the fallback book.
+     */
+    readonly maxAttempts: number;
+    /**
+     * Delay in milliseconds between retry attempts.
+     */
+    readonly retryDelayMs: number;
+};
+/**
+ * Default retry configuration for federated imported-agent loading.
+ *
+ * @private internal Agents Server constant
+ */
+export declare const DEFAULT_FEDERATED_AGENT_IMPORT_CONFIGURATION: Readonly<{
+    maxAttempts: 3;
+    retryDelayMs: 500;
+}>;

package/umd/apps/agents-server/src/constants/serverLimits.d.ts

@@ -0,0 +1,207 @@
+/**
+ * Legacy metadata key storing the maximum accepted file upload size in megabytes.
+ *
+ * @private shared Agents Server constant
+ */
+export declare const MAX_FILE_UPLOAD_SIZE_MB_METADATA_KEY: "MAX_FILE_UPLOAD_SIZE_MB";
+/**
+ * Default maximum accepted spawn depth in one tool-runtime context.
+ *
+ * @private shared Agents Server constant
+ */
+export declare const DEFAULT_SPAWN_AGENT_MAX_DEPTH = 2;
+/**
+ * Default maximum number of spawned agents allowed per actor in one time window.
+ *
+ * @private shared Agents Server constant
+ */
+export declare const DEFAULT_SPAWN_AGENT_RATE_LIMIT_MAX = 5;
+/**
+ * Default spawn rate-limit window size in milliseconds.
+ *
+ * @private shared Agents Server constant
+ */
+export declare const DEFAULT_SPAWN_AGENT_RATE_LIMIT_WINDOW_MS: number;
+/**
+ * Default maximum number of failed local runner attempts before a queued message is moved to `messages/failed`.
+ *
+ * @private shared Agents Server constant
+ */
+export declare const DEFAULT_LOCAL_AGENT_RUNNER_MAX_FAILED_ATTEMPTS = 3;
+/**
+ * Stable keys used by the dedicated server-limits table.
+ *
+ * @private shared Agents Server constant
+ */
+export declare const SERVER_LIMIT_KEYS: {
+    readonly TIMEOUT_MAX_ACTIVE_PER_CHAT: "TIMEOUT_MAX_ACTIVE_PER_CHAT";
+    readonly TIMEOUT_MAX_FIRED_PER_DAY_PER_CHAT: "TIMEOUT_MAX_FIRED_PER_DAY_PER_CHAT";
+    readonly MAX_FILE_UPLOAD_SIZE_MB: "MAX_FILE_UPLOAD_SIZE_MB";
+    readonly FEDERATED_AGENT_IMPORT_RETRY_DELAY_MS: "FEDERATED_AGENT_IMPORT_RETRY_DELAY_MS";
+    readonly SPAWN_AGENT_MAX_DEPTH: "SPAWN_AGENT_MAX_DEPTH";
+    readonly SPAWN_AGENT_RATE_LIMIT_MAX: "SPAWN_AGENT_RATE_LIMIT_MAX";
+    readonly SPAWN_AGENT_RATE_LIMIT_WINDOW_MS: "SPAWN_AGENT_RATE_LIMIT_WINDOW_MS";
+    readonly LOCAL_AGENT_RUNNER_MAX_FAILED_ATTEMPTS: "LOCAL_AGENT_RUNNER_MAX_FAILED_ATTEMPTS";
+};
+/**
+ * One supported dedicated server-limit key.
+ *
+ * @private shared Agents Server type
+ */
+export type ServerLimitKey = (typeof SERVER_LIMIT_KEYS)[keyof typeof SERVER_LIMIT_KEYS];
+/**
+ * Supported units rendered in the admin limits page.
+ *
+ * @private shared Agents Server type
+ */
+export type ServerLimitUnit = 'count' | 'MB' | 'ms';
+/**
+ * Shared definition describing one supported configurable limit.
+ *
+ * @private shared Agents Server type
+ */
+export type ServerLimitDefinition = {
+    readonly key: ServerLimitKey;
+    readonly category: 'Timeout tools' | 'Files' | 'Federation' | 'Agent spawning' | 'Local agent runner';
+    readonly title: string;
+    readonly description: string;
+    readonly unit: ServerLimitUnit;
+    readonly defaultValue: number;
+    readonly minimumValue: number;
+    readonly step: number;
+    readonly legacyMetadataKeys: ReadonlyArray<string>;
+};
+/**
+ * Shared metadata for all server limits exposed in the admin UI and runtime loaders.
+ *
+ * @private shared Agents Server constant
+ */
+export declare const SERVER_LIMIT_DEFINITIONS: ({
+    key: "TIMEOUT_MAX_ACTIVE_PER_CHAT";
+    category: "Timeout tools";
+    title: string;
+    description: string;
+    unit: "count";
+    defaultValue: number;
+    minimumValue: number;
+    step: number;
+    legacyMetadataKeys: string[];
+} | {
+    key: "TIMEOUT_MAX_FIRED_PER_DAY_PER_CHAT";
+    category: "Timeout tools";
+    title: string;
+    description: string;
+    unit: "count";
+    defaultValue: number;
+    minimumValue: number;
+    step: number;
+    legacyMetadataKeys: string[];
+} | {
+    key: "MAX_FILE_UPLOAD_SIZE_MB";
+    category: "Files";
+    title: string;
+    description: string;
+    unit: "MB";
+    defaultValue: number;
+    minimumValue: number;
+    step: number;
+    legacyMetadataKeys: "MAX_FILE_UPLOAD_SIZE_MB"[];
+} | {
+    key: "FEDERATED_AGENT_IMPORT_RETRY_DELAY_MS";
+    category: "Federation";
+    title: string;
+    description: string;
+    unit: "ms";
+    defaultValue: number;
+    minimumValue: number;
+    step: number;
+    legacyMetadataKeys: "FEDERATED_AGENT_IMPORT_RETRY_DELAY_MS"[];
+} | {
+    key: "SPAWN_AGENT_MAX_DEPTH";
+    category: "Agent spawning";
+    title: string;
+    description: string;
+    unit: "count";
+    defaultValue: number;
+    minimumValue: number;
+    step: number;
+    legacyMetadataKeys: never[];
+} | {
+    key: "SPAWN_AGENT_RATE_LIMIT_MAX";
+    category: "Agent spawning";
+    title: string;
+    description: string;
+    unit: "count";
+    defaultValue: number;
+    minimumValue: number;
+    step: number;
+    legacyMetadataKeys: never[];
+} | {
+    key: "SPAWN_AGENT_RATE_LIMIT_WINDOW_MS";
+    category: "Agent spawning";
+    title: string;
+    description: string;
+    unit: "ms";
+    defaultValue: number;
+    minimumValue: number;
+    step: number;
+    legacyMetadataKeys: never[];
+} | {
+    key: "LOCAL_AGENT_RUNNER_MAX_FAILED_ATTEMPTS";
+    category: "Local agent runner";
+    title: string;
+    description: string;
+    unit: "count";
+    defaultValue: number;
+    minimumValue: number;
+    step: number;
+    legacyMetadataKeys: never[];
+})[];
+/**
+ * Fast lookup map used by server-limit validators and UI helpers.
+ *
+ * @private shared Agents Server constant
+ */
+export declare const SERVER_LIMIT_DEFINITION_BY_KEY: Map<ServerLimitKey, ServerLimitDefinition>;
+/**
+ * Default values used whenever a server-limit row has not been persisted yet.
+ *
+ * @private shared Agents Server constant
+ */
+export declare const DEFAULT_SERVER_LIMIT_VALUES: Readonly<Record<ServerLimitKey, number>>;
+/**
+ * Deprecated metadata keys that now mirror dedicated server-limit rows for backward compatibility.
+ *
+ * @private shared Agents Server constant
+ */
+export declare const DEPRECATED_LIMIT_METADATA_KEYS: string[];
+/**
+ * Description of one deprecated metadata key that now points to the dedicated limits page.
+ *
+ * @private shared Agents Server type
+ */
+export type DeprecatedLimitMetadataDefinition = {
+    readonly key: string;
+    readonly href: '/admin/limits';
+    readonly limitKeys: ReadonlyArray<ServerLimitKey>;
+    readonly limitTitles: ReadonlyArray<string>;
+    readonly message: string;
+};
+/**
+ * Returns the deprecated-metadata descriptor when one metadata key now belongs to the limits page.
+ *
+ * @param metadataKey - Metadata key being rendered in the admin metadata UI.
+ * @returns Deprecated metadata descriptor or `null`.
+ *
+ * @private shared Agents Server helper
+ */
+export declare function getDeprecatedLimitMetadataDefinition(metadataKey: string): DeprecatedLimitMetadataDefinition | null;
+/**
+ * Resolves one shared server-limit definition by key.
+ *
+ * @param key - Dedicated server-limit key.
+ * @returns Matching definition or `null`.
+ *
+ * @private shared Agents Server helper
+ */
+export declare function getServerLimitDefinition(key: string): ServerLimitDefinition | null;

package/umd/apps/agents-server/src/constants/toolUsageLimits.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Metadata key used to persist tool-usage limits.
+ *
+ * @private shared constant for Agents Server
+ */
+export declare const TOOL_USAGE_LIMITS_METADATA_KEY = "TOOL_USAGE_LIMITS";
+/**
+ * Timeout-specific limits supported by the current admin UI.
+ *
+ * @private shared type for Agents Server
+ */
+export type TimeoutToolUsageLimits = {
+    maxActivePerChat: number;
+    maxFiredPerDayPerChat: number;
+};
+/**
+ * Full tool-limits payload stored in metadata.
+ *
+ * The shape is intentionally extensible so other tools can be added later.
+ *
+ * @private shared type for Agents Server
+ */
+export type ToolUsageLimits = Record<string, unknown> & {
+    timeout: TimeoutToolUsageLimits;
+};
+/**
+ * Default timeout limits applied when administrators do not override them.
+ *
+ * @private shared constant for Agents Server
+ */
+export declare const DEFAULT_TIMEOUT_TOOL_USAGE_LIMITS: TimeoutToolUsageLimits;
+/**
+ * Default tool-limits payload used across metadata, admin UI, and runtime enforcement.
+ *
+ * @private shared constant for Agents Server
+ */
+export declare const DEFAULT_TOOL_USAGE_LIMITS: ToolUsageLimits;
+/**
+ * Normalizes the complete tool-limits payload while preserving unknown future keys.
+ *
+ * @param rawValue - Unknown persisted payload.
+ * @returns Normalized tool-usage limits.
+ *
+ * @private shared Agents Server helper
+ */
+export declare function normalizeToolUsageLimits(rawValue: unknown): ToolUsageLimits;
+/**
+ * Normalizes timeout-specific limits with defaults and integer guards.
+ *
+ * @param rawValue - Unknown timeout payload.
+ * @returns Normalized timeout tool limits.
+ *
+ * @private shared Agents Server helper
+ */
+export declare function normalizeTimeoutToolUsageLimits(rawValue: unknown): TimeoutToolUsageLimits;