@promptbook/cli 0.112.0-99 → 0.112.0

package/umd/src/collection/agent-collection/constructors/agent-collection-in-supabase/AgentCollectionInSupabase.d.ts

@@ -60,6 +60,28 @@ export declare class AgentCollectionInSupabase {
      * Gets all agents in the collection
      */
     listAgents(): Promise<ReadonlyArray<AgentBasicInformation>>;
+    /**
+     * Finds one active agent profile by its human-readable name or permanent id.
+     *
+     * This keeps route-level lookups from loading the whole agent collection when only
+     * one canonical route identifier is needed.
+     *
+     * @param agentNameOrPermanentId - Agent name or stable permanent identifier.
+     * @returns Matching active agent profile or `null` when not found.
+     *
+     * @public exported from `@promptbook/core`
+     */
+    findAgentBasicInformation(agentNameOrPermanentId: string_agent_name | string_agent_permanent_id): Promise<AgentBasicInformation | null>;
+    /**
+     * Converts one database row into public agent information.
+     *
+     * @param row - Database row carrying the persisted profile snapshot.
+     * @param isVerbose - Whether profile-name mismatches should be logged.
+     * @returns Agent profile with canonical database name and permanent id.
+     *
+     * @private internal helper of `AgentCollectionInSupabase`
+     */
+    private mapAgentBasicInformationRow;
     /**
      * Retrieves the permanent ID of an agent by its name or permanent ID.
      */

package/umd/src/commitments/_common/teamInternalAgentAccess.d.ts

@@ -26,7 +26,15 @@ export type TeamInternalAgentAccessHeadersOptions = {
 /**
  * Resolves the internal token used by same-server TEAM calls.
  *
- * @returns Hashed token, or `null` when the server does not have a private secret.
+ * `PROMPTBOOK_TEAM_AGENT_ACCESS_TOKEN` must be a dedicated secret — falling
+ * back to `ADMIN_PASSWORD`, `SUPABASE_SERVICE_ROLE_KEY`, or any other shared
+ * credential would let a leak of one secret compromise both authentication
+ * boundaries (admin login and same-server teammate-agent access). When the
+ * dedicated variable is missing, this function returns `null` so the calling
+ * server fails closed — same-server TEAM access is disabled and no header is
+ * sent — instead of silently authorizing requests with the wrong secret.
+ *
+ * @returns Hashed token, or `null` when the dedicated secret is not configured.
  *
  * @private internal Agents Server access wiring
  */

package/umd/src/llm-providers/_common/register/$provideLlmToolsConfigurationFromEnv.d.ts

@@ -6,7 +6,7 @@ import type { LlmToolsConfiguration } from './LlmToolsConfiguration';
  *
  * It looks for environment variables:
  * - `process.env.OPENAI_API_KEY`
- * - `process.env.ANTHROPIC_CLAUDE_API_KEY`
+ * - `process.env.ANTHROPIC_API_KEY` (or the deprecated `process.env.ANTHROPIC_CLAUDE_API_KEY`)
  * - ...
  *
  * @see Environment variables documentation or .env file for required variables.

package/umd/src/llm-providers/_common/register/$provideLlmToolsFromEnv.d.ts

@@ -13,7 +13,7 @@ import type { CreateLlmToolsFromConfigurationOptions } from './createLlmToolsFro
  *
  * It looks for environment variables:
  * - `process.env.OPENAI_API_KEY`
- * - `process.env.ANTHROPIC_CLAUDE_API_KEY`
+ * - `process.env.ANTHROPIC_API_KEY` (or the deprecated `process.env.ANTHROPIC_CLAUDE_API_KEY`)
  * - ...
  *
  * @param options Configuration options for the LLM tools

package/umd/src/scrapers/website/utils/createShowdownConverter.d.ts

@@ -1,7 +1,7 @@
-import { Converter as ShowdownConverter } from 'showdown';
+import showdown from 'showdown';
 /**
  * Create a new showdown converter instance
  *
  * @private utility of `WebsiteScraper`
  */
-export declare function createShowdownConverter(): ShowdownConverter;
+export declare function createShowdownConverter(): showdown.Converter;

package/umd/src/utils/isTimingSafeEqualString.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Compares two strings in constant time to prevent timing attacks.
+ *
+ * Plain JavaScript `===` / `!==` string comparisons short-circuit on the first
+ * byte that differs, which lets a remote attacker who can measure response
+ * timing recover the expected value one byte at a time. This helper performs
+ * the comparison through Node's `timingSafeEqual`, which always inspects every
+ * byte of the equal-length buffers.
+ *
+ * Returning `false` early when the byte lengths differ does not expose
+ * character content — only length — which is an acceptable trade-off, since
+ * `timingSafeEqual` requires equal-length buffers and length is typically not
+ * secret.
+ *
+ * `null` and `undefined` inputs are treated as non-matching so callers can
+ * forward raw request values (for example `request.headers.get(name)`) without
+ * an extra guard.
+ *
+ * @param candidate - Value supplied by the caller (for example a request header or cookie).
+ * @param expected - Value to compare against (for example a configured secret).
+ * @returns `true` when both values are strings of equal length with identical bytes.
+ *
+ * @private internal helper function
+ */
+export declare function isTimingSafeEqualString(candidate: string | null | undefined, expected: string | null | undefined): boolean;

package/umd/src/utils/validators/url/isValidAgentUrl.d.ts

@@ -8,6 +8,11 @@ import type { really_unknown } from '../../organization/really_unknown';
  * - `isValidAgentUrl` *(this one)* which tests just agent URL
  * - `isValidPipelineUrl` which tests just pipeline URL
  *
+ * Note: This is a pure structural validator and does not block private/internal network
+ * addresses. Callers that fetch the URL server-side from an untrusted network context must
+ * additionally apply the `assertSafeUrl` SSRF guard from the Agents Server before any
+ * outbound request.
+ *
  * @public exported from `@promptbook/utils`
  */
 export declare function isValidAgentUrl(url: really_unknown): url is string_agent_url;

package/umd/src/version.d.ts

@@ -15,7 +15,7 @@ export declare const BOOK_LANGUAGE_VERSION: string_semantic_version;
 export declare const PROMPTBOOK_ENGINE_VERSION: string_promptbook_version;
 /**
  * Represents the version string of the Promptbook engine.
- * It follows semantic versioning (e.g., `0.112.0-98`).
+ * It follows semantic versioning (e.g., `0.112.0-140`).
  *
  * @generated
  */

package/apps/agents-server/src/app/api/long-streaming/route.ts

@@ -1,23 +0,0 @@
-import { forTime } from 'waitasecond';
-import { just } from '../../../../../../src/utils/organization/just';
-
-/**
- * Handles get.
- */
-export async function GET() {
-    const readableStream = new ReadableStream({
-        async start(controller) {
-            while (just(true)) {
-                await forTime(100);
-                controller.enqueue(new TextEncoder().encode('x'));
-            }
-
-            controller.close();
-        },
-    });
-
-    return new Response(readableStream, {
-        status: 200,
-        headers: { 'Content-Type': 'text/plain' },
-    });
-}

package/apps/agents-server/src/message-providers/email/_common/utils/parseEmailAddress.test.ts.todo

@@ -1,108 +0,0 @@
-import { describe, expect, it } from '@jest/globals';
-import { parseEmailAddress } from './parseEmailAddress';
-
-describe('how parseEmailAddress works', () => {
-    it('should work with simple email', () => {
-        expect(parseEmailAddress('pavol@webgpt.cz')).toEqual({
-            fullName: null,
-            baseEmail: 'pavol@webgpt.cz',
-            fullEmail: 'pavol@webgpt.cz',
-            plus: [],
-        });
-        expect(parseEmailAddress('jirka@webgpt.cz')).toEqual({
-            fullName: null,
-            baseEmail: 'jirka@webgpt.cz',
-            fullEmail: 'jirka@webgpt.cz',
-            plus: [],
-        });
-        expect(parseEmailAddress('tomas@webgpt.cz')).toEqual({
-            fullName: null,
-            baseEmail: 'tomas@webgpt.cz',
-            fullEmail: 'tomas@webgpt.cz',
-            plus: [],
-        });
-    });
-
-    it('should work with fullname', () => {
-        expect(parseEmailAddress('Pavol Hejný <pavol@webgpt.cz>')).toEqual({
-            fullName: 'Pavol Hejný',
-            baseEmail: 'pavol@webgpt.cz',
-            fullEmail: 'pavol@webgpt.cz',
-            plus: [],
-        });
-        expect(parseEmailAddress('Jirka <jirka@webgpt.cz>')).toEqual({
-            fullName: 'Jirka',
-            baseEmail: 'jirka@webgpt.cz',
-            fullEmail: 'jirka@webgpt.cz',
-            plus: [],
-        });
-        expect(parseEmailAddress('"Tomáš Studeník" <tomas@webgpt.cz>')).toEqual({
-            fullName: 'Tomáš Studeník',
-            baseEmail: 'tomas@webgpt.cz',
-            fullEmail: 'tomas@webgpt.cz',
-            plus: [],
-        });
-    });
-
-    it('should work with plus', () => {
-        expect(parseEmailAddress('pavol+test@webgpt.cz')).toEqual({
-            fullName: null,
-            baseEmail: 'pavol@webgpt.cz',
-            fullEmail: 'pavol+test@webgpt.cz',
-            plus: ['test'],
-        });
-        expect(parseEmailAddress('jirka+test@webgpt.cz')).toEqual({
-            fullName: null,
-            baseEmail: 'jirka@webgpt.cz',
-            fullEmail: 'jirka+test@webgpt.cz',
-            plus: ['test'],
-        });
-        expect(parseEmailAddress('tomas+test+ainautes@webgpt.cz')).toEqual({
-            fullName: null,
-            baseEmail: 'tomas@webgpt.cz',
-            fullEmail: 'tomas+test+ainautes@webgpt.cz',
-            plus: ['test', 'ainautes'],
-        });
-    });
-
-    it('should work with both fullname and plus', () => {
-        expect(parseEmailAddress('Pavol Hejný <pavol+foo@webgpt.cz>')).toEqual({
-            fullName: 'Pavol Hejný',
-            baseEmail: 'pavol@webgpt.cz',
-            fullEmail: 'pavol+foo@webgpt.cz',
-            plus: ['foo'],
-        });
-        expect(parseEmailAddress('Jirka <jirka+test@webgpt.cz>')).toEqual({
-            fullName: 'Jirka',
-            baseEmail: 'jirka@webgpt.cz',
-            fullEmail: 'jirka+test@webgpt.cz',
-            plus: ['test'],
-        });
-        expect(parseEmailAddress('"Tomáš Studeník" <tomas+test+ainautes@webgpt.cz>')).toEqual({
-            fullName: 'Tomáš Studeník',
-            baseEmail: 'tomas@webgpt.cz',
-            fullEmail: 'tomas+test+ainautes@webgpt.cz',
-            plus: ['test', 'ainautes'],
-        });
-    });
-
-    it('throws on multiple adresses', () => {
-        expect(() => parseEmailAddress('Pavol <pavol@webgpt.cz>, Jirka <jirka@webgpt.cz>')).toThrowError(
-            /Seems like you are trying to parse multiple email addresses/,
-        );
-    });
-
-    it('throws on invalid email adresses', () => {
-        expect(() => parseEmailAddress('')).toThrowError(/Invalid email address/);
-        expect(() => parseEmailAddress('Pavol Hejný')).toThrowError(/Invalid email address/);
-        expect(() => parseEmailAddress('Pavol Hejný <>')).toThrowError(/Invalid email address/);
-        expect(() => parseEmailAddress('Pavol Hejný <@webgpt.cz>')).toThrowError(/Invalid email address/);
-        expect(() => parseEmailAddress('Pavol Hejný <webgpt.cz>')).toThrowError(/Invalid email address/);
-        expect(() => parseEmailAddress('Pavol Hejný <pavol@>')).toThrowError(/Invalid email address/);
-        expect(() => parseEmailAddress('Pavol Hejný <a@b>')).toThrowError(/Invalid email address/);
-    });
-});
-
-/**
- * TODO: [🐫] This test fails because of aliased imports `import type { string_emails } from '@promptbook-local/types';`, fix it
- */

package/apps/agents-server/src/message-providers/email/_common/utils/parseEmailAddresses.test.ts.todo

@@ -1,117 +0,0 @@
-import { describe, expect, it } from '@jest/globals';
-import { parseEmailAddresses } from './parseEmailAddresses';
-
-describe('how parseEmailAddresses works', () => {
-    it('should work with single email', () => {
-        expect(parseEmailAddresses('pavol@webgpt.cz')).toEqual([
-            {
-                fullName: null,
-                baseEmail: 'pavol@webgpt.cz',
-                fullEmail: 'pavol@webgpt.cz',
-                plus: [],
-            },
-        ]);
-    });
-
-    it('should work with simple emails', () => {
-        expect(parseEmailAddresses('pavol@webgpt.cz, jirka@webgpt.cz, tomas@webgpt.cz')).toEqual([
-            {
-                fullName: null,
-                baseEmail: 'pavol@webgpt.cz',
-                fullEmail: 'pavol@webgpt.cz',
-                plus: [],
-            },
-            {
-                fullName: null,
-                baseEmail: 'jirka@webgpt.cz',
-                fullEmail: 'jirka@webgpt.cz',
-                plus: [],
-            },
-            {
-                fullName: null,
-                baseEmail: 'tomas@webgpt.cz',
-                fullEmail: 'tomas@webgpt.cz',
-                plus: [],
-            },
-        ]);
-    });
-
-    it('should work with fullname', () => {
-        expect(
-            parseEmailAddresses(
-                'Pavol Hejný <pavol@webgpt.cz>, Jirka <jirka@webgpt.cz>, "Tomáš Studeník" <tomas@webgpt.cz>',
-            ),
-        ).toEqual([
-            {
-                fullName: 'Pavol Hejný',
-                baseEmail: 'pavol@webgpt.cz',
-                fullEmail: 'pavol@webgpt.cz',
-                plus: [],
-            },
-            {
-                fullName: 'Jirka',
-                baseEmail: 'jirka@webgpt.cz',
-                fullEmail: 'jirka@webgpt.cz',
-                plus: [],
-            },
-            {
-                fullName: 'Tomáš Studeník',
-                baseEmail: 'tomas@webgpt.cz',
-                fullEmail: 'tomas@webgpt.cz',
-                plus: [],
-            },
-        ]);
-    });
-
-    it('not confused by comma', () => {
-        expect(parseEmailAddresses(', pavol@webgpt.cz, ')).toEqual([
-            {
-                fullName: null,
-                fullEmail: 'pavol@webgpt.cz',
-                baseEmail: 'pavol@webgpt.cz',
-                plus: [],
-            },
-        ]);
-    });
-
-    it('works on real-life example', () => {
-        expect(
-            parseEmailAddresses(
-                '"bob" <bob@bot.webgpt.cz>, "pavolto" <pavol+to@ptbk.io>, "Pavol" <pavol@collboard.com>',
-            ),
-        ).toEqual([
-            {
-                fullName: 'bob',
-                fullEmail: 'bob@bot.webgpt.cz',
-                baseEmail: 'bob@bot.webgpt.cz',
-                plus: [],
-            },
-            {
-                fullName: 'pavolto',
-                fullEmail: 'pavol+to@ptbk.io',
-                baseEmail: 'pavol@ptbk.io',
-                plus: ['to'],
-            },
-            {
-                fullName: 'Pavol',
-                fullEmail: 'pavol@collboard.com',
-                baseEmail: 'pavol@collboard.com',
-                plus: [],
-            },
-        ]);
-    });
-
-    it('throws on invalid email adresses', () => {
-        expect(() => parseEmailAddresses('Pavol, Hejný')).toThrowError(/Invalid email address/);
-        expect(() => parseEmailAddresses('Pavol Hejný <>')).toThrowError(/Invalid email address/);
-        expect(() => parseEmailAddresses('Pavol Hejný, <@webgpt.cz>')).toThrowError(/Invalid email address/);
-        expect(() => parseEmailAddresses('Pavol Hejný <webgpt.cz>')).toThrowError(/Invalid email address/);
-        expect(() => parseEmailAddresses('Pavol Hejný <pavol@>')).toThrowError(/Invalid email address/);
-        expect(() => parseEmailAddresses('Pavol Hejný <a@b>,')).toThrowError(/Invalid email address/);
-    });
-});
-
-
-/**
- * TODO: [🐫] This test fails because of aliased imports `import type { string_emails } from '@promptbook-local/types';`, fix it
- */

package/apps/agents-server/src/message-providers/email/_common/utils/stringifyEmailAddress.test.ts.todo

@@ -1,119 +0,0 @@
-import { describe, expect, it } from '@jest/globals';
-import { stringifyEmailAddress } from './stringifyEmailAddress';
-
-describe('how stringifyEmailAddress works', () => {
-    it('should work with simple email', () => {
-        expect(
-            stringifyEmailAddress({
-                fullName: null,
-                baseEmail: 'pavol@webgpt.cz',
-                fullEmail: 'pavol@webgpt.cz',
-                plus: [],
-            }),
-        ).toBe('pavol@webgpt.cz');
-        expect(
-            stringifyEmailAddress({
-                fullName: null,
-                baseEmail: 'jirka@webgpt.cz',
-                fullEmail: 'jirka@webgpt.cz',
-                plus: [],
-            }),
-        ).toBe('jirka@webgpt.cz');
-        expect(
-            stringifyEmailAddress({
-                fullName: null,
-                baseEmail: 'tomas@webgpt.cz',
-                fullEmail: 'tomas@webgpt.cz',
-                plus: [],
-            }),
-        ).toBe('tomas@webgpt.cz');
-    });
-
-    it('should work with fullname', () => {
-        expect(
-            stringifyEmailAddress({
-                fullName: 'Pavol Hejný',
-                baseEmail: 'pavol@webgpt.cz',
-                fullEmail: 'pavol@webgpt.cz',
-                plus: [],
-            }),
-        ).toBe('"Pavol Hejný" <pavol@webgpt.cz>');
-        expect(
-            stringifyEmailAddress({
-                fullName: 'Jirka',
-                baseEmail: 'jirka@webgpt.cz',
-                fullEmail: 'jirka@webgpt.cz',
-                plus: [],
-            }),
-        ).toBe('"Jirka" <jirka@webgpt.cz>');
-        expect(
-            stringifyEmailAddress({
-                fullName: 'Tomáš Studeník',
-                baseEmail: 'tomas@webgpt.cz',
-                fullEmail: 'tomas@webgpt.cz',
-                plus: [],
-            }),
-        ).toBe('"Tomáš Studeník" <tomas@webgpt.cz>');
-    });
-
-    it('should work with plus', () => {
-        expect(
-            stringifyEmailAddress({
-                fullName: null,
-                baseEmail: 'pavol@webgpt.cz',
-                fullEmail: 'pavol+test@webgpt.cz',
-                plus: ['test'],
-            }),
-        ).toBe('pavol+test@webgpt.cz');
-        expect(
-            stringifyEmailAddress({
-                fullName: null,
-                baseEmail: 'jirka@webgpt.cz',
-                fullEmail: 'jirka+test@webgpt.cz',
-                plus: ['test'],
-            }),
-        ).toBe('jirka+test@webgpt.cz');
-        expect(
-            stringifyEmailAddress({
-                fullName: null,
-                baseEmail: 'tomas@webgpt.cz',
-                fullEmail: 'tomas+test+ainautes@webgpt.cz',
-                plus: ['test', 'ainautes'],
-            }),
-        ).toBe('tomas+test+ainautes@webgpt.cz');
-    });
-
-    it('should work with both fullname and plus', () => {
-        expect(
-            stringifyEmailAddress({
-                fullName: 'Pavol Hejný',
-                baseEmail: 'pavol@webgpt.cz',
-                fullEmail: 'pavol+test@webgpt.cz',
-                plus: ['test'],
-            }),
-        ).toBe('"Pavol Hejný" <pavol+test@webgpt.cz>');
-        expect(
-            stringifyEmailAddress({
-                fullName: 'Jirka',
-                baseEmail: 'jirka@webgpt.cz',
-                fullEmail: 'jirka+test@webgpt.cz',
-                plus: ['test'],
-            }),
-        ).toBe('"Jirka" <jirka+test@webgpt.cz>');
-        expect(
-            stringifyEmailAddress({
-                fullName: 'Tomáš Studeník',
-                baseEmail: 'tomas@webgpt.cz',
-                fullEmail: 'tomas+test+ainautes@webgpt.cz',
-                plus: ['test', 'ainautes'],
-            }),
-        ).toBe('"Tomáš Studeník" <tomas+test+ainautes@webgpt.cz>');
-    });
-
-    // TODO: [🎾] Implement and test here escaping
-});
-
-
-/**
- * TODO: [🐫] This test fails because of aliased imports `import type { string_emails } from '@promptbook-local/types';`, fix it
- */

package/apps/agents-server/src/message-providers/email/_common/utils/stringifyEmailAddresses.test.ts.todo

@@ -1,74 +0,0 @@
-import { describe, expect, it } from '@jest/globals';
-import { stringifyEmailAddresses } from './stringifyEmailAddresses';
-
-describe('how stringifyEmailAddresses works', () => {
-    it('should work with single email', () => {
-        expect(
-            stringifyEmailAddresses([
-                {
-                    fullName: null,
-                    baseEmail: 'pavol@webgpt.cz',
-                    fullEmail: 'pavol@webgpt.cz',
-                    plus: [],
-                },
-            ]),
-        ).toEqual('pavol@webgpt.cz');
-    });
-
-    it('should work with simple emails', () => {
-        expect(
-            stringifyEmailAddresses([
-                {
-                    fullName: null,
-                    baseEmail: 'pavol@webgpt.cz',
-                    fullEmail: 'pavol@webgpt.cz',
-                    plus: [],
-                },
-                {
-                    fullName: null,
-                    baseEmail: 'jirka@webgpt.cz',
-                    fullEmail: 'jirka@webgpt.cz',
-                    plus: [],
-                },
-                {
-                    fullName: null,
-                    baseEmail: 'tomas@webgpt.cz',
-                    fullEmail: 'tomas@webgpt.cz',
-                    plus: [],
-                },
-            ]),
-        ).toEqual('pavol@webgpt.cz, jirka@webgpt.cz, tomas@webgpt.cz');
-    });
-
-    it('should work with fullname', () => {
-        expect(
-            stringifyEmailAddresses([
-                {
-                    fullName: 'Pavol Hejný',
-                    baseEmail: 'pavol@webgpt.cz',
-                    fullEmail: 'pavol@webgpt.cz',
-                    plus: [],
-                },
-                {
-                    fullName: 'Jiří Jahn',
-                    baseEmail: 'jirka@webgpt.cz',
-                    fullEmail: 'jirka@webgpt.cz',
-                    plus: [],
-                },
-                {
-                    fullName: 'Tomáš Studeník',
-                    baseEmail: 'tomas@webgpt.cz',
-                    fullEmail: 'tomas@webgpt.cz',
-                    plus: [],
-                },
-            ]),
-        ).toEqual('"Pavol Hejný" <pavol@webgpt.cz>, "Jiří Jahn" <jirka@webgpt.cz>, "Tomáš Studeník" <tomas@webgpt.cz>');
-    });
-
-    // TODO: [🎾] Implement and test here escaping
-});
-
-
-/**
- * TODO: [🐫] This test fails because of aliased imports `import type { string_emails } from '@promptbook-local/types';`, fix it
- */

package/apps/agents-server/src/utils/defaultFederatedAgents/DefaultFederatedAgentsSyncOptions.ts

@@ -1,9 +0,0 @@
-/**
- * Minimal context needed to schedule or execute one default federated-agent sync pass.
- *
- * @private shared type for `scheduleDefaultFederatedAgentsSync`
- */
-export type DefaultFederatedAgentsSyncOptions = {
-    readonly tablePrefix: string;
-    readonly localServerUrl: string;
-};