npm - @standardagents/builder - Versions diffs - 0.22.0 → 0.23.0 - Mend

@standardagents/builder 0.22.0 → 0.23.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (35) hide show

package/dist/client/index.html CHANGED Viewed

@@ -26,14 +26,14 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <link rel="icon" type="image/svg+xml" href="/agents/assets/img/favicon-9uH1rb2F.svg">
     <title>AgentBuilder Admin</title>
-    <script type="module" crossorigin src="/agents/index-DR9DbKrm.js"></script>
+    <script type="module" crossorigin src="/agents/index-TIntu1KJ.js"></script>
     <link rel="modulepreload" crossorigin href="/agents/formkit-DcuuXZjC.js">
     <link rel="modulepreload" crossorigin href="/agents/vendor-TPZjEwCU.js">
     <link rel="modulepreload" crossorigin href="/agents/syntax-D-ZcovVx.js">
     <link rel="modulepreload" crossorigin href="/agents/vue-2tGL2Ulx.js">
     <link rel="modulepreload" crossorigin href="/agents/monaco-DI2r3M8m.js">
     <link rel="stylesheet" crossorigin href="/agents/assets/monaco-DbLkoLD4.css">
-    <link rel="stylesheet" crossorigin href="/agents/assets/index-_JaOWezk.css">
+    <link rel="stylesheet" crossorigin href="/agents/assets/index-V68N0r_5.css">
   </head>
   <body>
     <div id="app"></div>

package/dist/index.js CHANGED Viewed

@@ -5739,7 +5739,7 @@ ${attachmentPaths}`;
             const attachmentId = crypto.randomUUID();
             const timestamp = Date.now();
             const ext = attachment.mimeType === "image/png" ? "png" : attachment.mimeType === "image/jpeg" ? "jpg" : attachment.mimeType === "image/gif" ? "gif" : attachment.mimeType === "image/webp" ? "webp" : attachment.name.split(".").pop() || "bin";
-            const path20 = `/attachments/${timestamp}-${attachmentId}.${ext}`;
+            const path20 = `/attachments/${timestamp}-${attachmentId.slice(0, 8)}.${ext}`;
             const binaryString = atob(attachment.data);
             const dataBuffer = new Uint8Array(binaryString.length);
             for (let i = 0; i < binaryString.length; i++) {
@@ -6066,9 +6066,10 @@ var init_context = __esm({
 // src/agents/FlowEngine.ts
 var FlowEngine_exports = {};
 __export(FlowEngine_exports, {
-  FlowEngine: () => FlowEngine
+  FlowEngine: () => FlowEngine,
+  HookBlockedExecutionError: () => HookBlockedExecutionError
 });
-var IMMEDIATE_BOOTSTRAP_TOOL_NAME, FlowEngine;
+var IMMEDIATE_BOOTSTRAP_TOOL_NAME, HookBlockedExecutionError, FlowEngine;
 var init_FlowEngine = __esm({
   "src/agents/FlowEngine.ts"() {
     init_types();
@@ -6079,6 +6080,12 @@ var init_FlowEngine = __esm({
     init_sessionTools();
     init_ThreadStateImpl();
     IMMEDIATE_BOOTSTRAP_TOOL_NAME = "bootstrap_immediate_subagent";
+    HookBlockedExecutionError = class extends Error {
+      constructor(message) {
+        super(message);
+        this.name = "HookBlockedExecutionError";
+      }
+    };
     FlowEngine = class _FlowEngine {
       static IMMEDIATE_SCOPED_ENV_CONTEXT_KEY = "__immediate_scoped_env_by_call_id";
       /**
@@ -6626,7 +6633,26 @@ This usually points to something I can't fix from here \u2014 for example the wo
         state.messageHistory = await this.loadMessageHistory(state);
         const context = await this.assembleContext(state);
         state.allowedTools = context.tools;
-        context.messages = await this.runPrefilterLLMHistoryHook(state, context.messages);
+        try {
+          context.messages = await this.runPrefilterLLMHistoryHook(state, context.messages);
+        } catch (error) {
+          if (error instanceof HookBlockedExecutionError) {
+            const threadState = ThreadStateImpl.fromFlowState(state);
+            await threadState.injectMessage({ role: "assistant", content: error.message });
+            state.stopped = true;
+            state.stoppedBy = state.currentSide;
+            state.stopReason = error.message;
+            state.stopReasonCode = "hook_blocked";
+            state.emitTelemetry?.({
+              type: "stopped",
+              reason: state.stopReason,
+              side: state.currentSide,
+              timestamp: Date.now()
+            });
+            return;
+          }
+          throw error;
+        }
         const pendingMessageId = await this.createPendingMessage(state);
         state.pendingMessageId = pendingMessageId;
         let responseStatus = "completed";
@@ -8782,6 +8808,9 @@ ${lines.join("\n\n")}`
           try {
             result = await executor(threadState, result);
           } catch (error) {
+            if (error && typeof error === "object" && error.block === true) {
+              throw new HookBlockedExecutionError(error instanceof Error ? error.message : String(error));
+            }
             console.error("[Hooks] \u2717 Error running prefilter_llm_history hook:", error);
           }
         }
@@ -9390,7 +9419,7 @@ ${lines.join("\n\n")}`
           const base64Data = match[2];
           const ext = mimeType.split("/")[1] || "png";
           const attachmentId = crypto.randomUUID();
-          const path20 = `/attachments/${Date.now()}-${attachmentId}.${ext}`;
+          const path20 = `/attachments/${Date.now()}-${attachmentId.slice(0, 8)}.${ext}`;
           try {
             await state.thread.instance.writeFile(path20, base64Data, mimeType);
             if (image.id) {
@@ -9460,7 +9489,7 @@ ${lines.join("\n\n")}`
           const base64Data = imageUrl.slice(base64Index + base64Marker.length);
           const ext = mimeType.split("/")[1] || "png";
           const attachmentId = crypto.randomUUID();
-          const path20 = `/attachments/${Date.now()}-${attachmentId}.${ext}`;
+          const path20 = `/attachments/${Date.now()}-${attachmentId.slice(0, 8)}.${ext}`;
           try {
             await state.thread.instance.writeFile(path20, base64Data, mimeType);
             const attachmentRef = {
@@ -20849,6 +20878,14 @@ function isPublicRoute(routePath, hosted) {
     return true;
   }
+  // Device-code CLI login: start/poll are public by design (possession of the
+  // one-time code is the secret) and the approve page must reach its controller
+  // even when anonymous so it can redirect the browser through the platform
+  // login (the controller enforces session auth itself).
+  if (routePath === '/api/auth/device/start' || routePath.startsWith('/api/auth/device/')) {
+    return true;
+  }
   // Provider icon routes are public (used by <img src>)
   if (routePath.startsWith('/api/providers/') && routePath.includes('/icon')) {
     return true;
@@ -26462,6 +26499,38 @@ ${resultContent}${attachmentSummary}`;
       throw error;
     }
   }
+  /**
+   * This thread's OWN request-log cost summary (no descendants), aggregated
+   * in SQL so subtree cost reporting doesn't page full log rows out of every
+   * thread in the tree. Used by GET /api/threads/:id/cost, which merges these
+   * across the thread and all of its subagent descendants.
+   */
+  async getCostSummary() {
+    await this.ensureMigrated();
+    const byModel = {};
+    let totalCost = 0;
+    let requestCount = 0;
+    const modelRows = await this.ctx.storage.sql.exec(
+      `
+      SELECT COALESCE(model_name, model, 'unknown') AS model_key,
+             SUM(cost_total) AS total_cost,
+             COUNT(*) AS request_count
+      FROM logs
+      WHERE cost_total IS NOT NULL
+      GROUP BY model_key
+      `
+    );
+    for (const row of modelRows.toArray()) {
+      byModel[row.model_key] = { totalCost: row.total_cost, count: row.request_count };
+      totalCost += row.total_cost;
+      requestCount += row.request_count;
+    }
+    const messageRow = await this.ctx.storage.sql.exec(
+      `SELECT COUNT(DISTINCT message_id) AS message_count FROM logs WHERE cost_total IS NOT NULL`
+    );
+    const messageCount = messageRow.one().message_count || 0;
+    return { totalCost, requestCount, messageCount, byModel };
+  }
   /**
    * Get specific logs, optionally including all descendant logs.
    */
@@ -29854,6 +29923,37 @@ ${result ?? error ?? "No result content."}${attachmentSummary}`;
       created_at: row.created_at
     };
   }
+  /**
+   * All descendant threads of a root thread (children, grandchildren, …),
+   * excluding the root itself. Used for subtree cost reporting: a thread's
+   * displayed cost is its own plus every subagent thread it spawned,
+   * recursively. Ordered parents-before-children (breadth by creation time).
+   */
+  async getDescendantThreads(rootId) {
+    await this.ensureMigrated();
+    const cursor = await this.ctx.storage.sql.exec(
+      `
+      WITH RECURSIVE descendants(id) AS (
+        SELECT id FROM threads WHERE parent = ?
+        UNION ALL
+        SELECT t.id FROM threads t JOIN descendants d ON t.parent = d.id
+      )
+      SELECT id, agent_name, parent, tags, terminated, created_at
+      FROM threads
+      WHERE id IN (SELECT id FROM descendants)
+      ORDER BY created_at ASC
+      `,
+      rootId
+    );
+    return cursor.toArray().map((row) => ({
+      id: row.id,
+      agent_name: row.agent_name,
+      parent: row.parent,
+      tags: row.tags ? JSON.parse(row.tags) : null,
+      terminated: row.terminated,
+      created_at: row.created_at
+    }));
+  }
   /**
    * List threads with optional filtering.
    * Note: tenvs are not decrypted in list operations for performance.