@radaros/transport 0.3.10 → 0.3.12

package/dist/index.js

@@ -64,10 +64,19 @@ function generateMultiAgentCard(agents, serverUrl, provider, version) {
 var _require = createRequire(import.meta.url);
 var TaskStore = class {
   tasks = /* @__PURE__ */ new Map();
+  maxTasks = 1e4;
   get(id) {
     return this.tasks.get(id);
   }
   set(task) {
+    if (this.tasks.size >= this.maxTasks) {
+      for (const [id, t] of this.tasks) {
+        if (t.status?.state === "completed" || t.status?.state === "canceled") {
+          this.tasks.delete(id);
+          break;
+        }
+      }
+    }
     this.tasks.set(task.id, task);
   }
   updateState(id, state, message) {
@@ -870,6 +879,23 @@ var API_KEY_HEADERS = {
   "x-anthropic-api-key": "anthropic",
   "x-api-key": "_generic"
 };
+function validateBody(body, fields) {
+  if (!body || typeof body !== "object") throw new Error("Invalid request body");
+  const result = {};
+  for (const [key, type] of Object.entries(fields)) {
+    const val = body[key];
+    const isOptional = type.endsWith("?");
+    const baseType = type.replace("?", "");
+    if (val === void 0 || val === null) {
+      if (!isOptional) throw new Error(`Missing required field: ${key}`);
+      continue;
+    }
+    if (baseType === "string" && typeof val !== "string") throw new Error(`Field ${key} must be a string`);
+    if (baseType === "object" && typeof val !== "object") throw new Error(`Field ${key} must be an object`);
+    result[key] = val;
+  }
+  return result;
+}
 function extractApiKey(req, agent) {
   for (const [header, provider] of Object.entries(API_KEY_HEADERS)) {
     const value = req.headers[header];
@@ -928,25 +954,38 @@ function createAgentRouter(opts) {
         `/agents/${name}/run`,
         withUpload(async (req, res) => {
           try {
-            const input = buildMultiModalInput(req.body, req.files);
+            const validated = validateBody(req.body, {
+              input: "string",
+              sessionId: "string?",
+              userId: "string?"
+            });
+            const input = buildMultiModalInput(req.body, req.files) ?? validated.input;
             if (!input) {
               return res.status(400).json({ error: "input is required" });
             }
-            const { sessionId, userId } = req.body ?? {};
+            const sessionId = validated.sessionId;
+            const userId = validated.userId;
             const apiKey = extractApiKey(req, agent);
             const result = await agent.run(input, { sessionId, userId, apiKey });
             res.json(result);
           } catch (error) {
-            res.status(500).json({ error: error.message });
+            res.status(400).json({ error: error.message });
           }
         })
       );
       router.post(`/agents/${name}/stream`, async (req, res) => {
         try {
-          const { input, sessionId, userId } = req.body ?? {};
+          const validated = validateBody(req.body, {
+            input: "string",
+            sessionId: "string?",
+            userId: "string?"
+          });
+          const input = validated.input;
           if (!input) {
             return res.status(400).json({ error: "input is required" });
           }
+          const sessionId = validated.sessionId;
+          const userId = validated.userId;
           const apiKey = extractApiKey(req, agent);
           res.writeHead(200, {
             "Content-Type": "text/event-stream",
@@ -978,10 +1017,17 @@ function createAgentRouter(opts) {
     for (const [name, team] of Object.entries(opts.teams)) {
       router.post(`/teams/${name}/run`, async (req, res) => {
         try {
-          const { input, sessionId, userId } = req.body ?? {};
+          const validated = validateBody(req.body, {
+            input: "string",
+            sessionId: "string?",
+            userId: "string?"
+          });
+          const input = validated.input;
           if (!input) {
             return res.status(400).json({ error: "input is required" });
           }
+          const sessionId = validated.sessionId;
+          const userId = validated.userId;
           const apiKey = req.headers["x-api-key"] ?? req.body?.apiKey;
           const result = await team.run(input, { sessionId, userId, apiKey });
           res.json(result);
@@ -991,10 +1037,17 @@ function createAgentRouter(opts) {
       });
       router.post(`/teams/${name}/stream`, async (req, res) => {
         try {
-          const { input, sessionId, userId } = req.body ?? {};
+          const validated = validateBody(req.body, {
+            input: "string",
+            sessionId: "string?",
+            userId: "string?"
+          });
+          const input = validated.input;
           if (!input) {
             return res.status(400).json({ error: "input is required" });
           }
+          const sessionId = validated.sessionId;
+          const userId = validated.userId;
           const apiKey = req.headers["x-api-key"] ?? req.body?.apiKey;
           res.writeHead(200, {
             "Content-Type": "text/event-stream",
@@ -1159,6 +1212,14 @@ function createAgentGateway(opts) {
   }
   ns.on("connection", (socket) => {
     socket.on("agent.run", async (data) => {
+      if (!data || typeof data.input !== "string" || !data.input.trim()) {
+        socket.emit("agent.error", { error: "Invalid input: must be a non-empty string" });
+        return;
+      }
+      if (data.sessionId !== void 0 && typeof data.sessionId !== "string") {
+        socket.emit("agent.error", { error: "Invalid sessionId: must be a string" });
+        return;
+      }
       const agent = opts.agents?.[data.name];
       if (!agent) {
         socket.emit("agent.error", {
@@ -1191,6 +1252,8 @@ function createAgentGateway(opts) {
         socket.emit("agent.error", { error: error.message });
       }
     });
+    socket.on("disconnect", () => {
+    });
     socket.on("team.run", async (data) => {
       const team = opts.teams?.[data.name];
       if (!team) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@radaros/transport",
-  "version": "0.3.10",
+  "version": "0.3.12",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -24,10 +24,10 @@
     "typescript": "^5.6.0"
   },
   "peerDependencies": {
-    "@radaros/core": "^0.3.10",
+    "@radaros/core": "^0.3.12",
     "@types/express": "^4.0.0 || ^5.0.0",
     "express": "^4.0.0 || ^5.0.0",
-    "multer": ">=1.4.0",
+    "multer": ">=2.0.0",
     "socket.io": "^4.0.0",
     "swagger-ui-express": "^5.0.0"
   },