@standardagents/builder 0.22.1 → 0.24.0

package/dist/built-in-routes.js

@@ -5755,7 +5755,7 @@ ${attachmentPaths}`;
             const attachmentId = crypto.randomUUID();
             const timestamp = Date.now();
             const ext = attachment.mimeType === "image/png" ? "png" : attachment.mimeType === "image/jpeg" ? "jpg" : attachment.mimeType === "image/gif" ? "gif" : attachment.mimeType === "image/webp" ? "webp" : attachment.name.split(".").pop() || "bin";
-            const path9 = `/attachments/${timestamp}-${attachmentId}.${ext}`;
+            const path9 = `/attachments/${timestamp}-${attachmentId.slice(0, 8)}.${ext}`;
             const binaryString = atob(attachment.data);
             const dataBuffer = new Uint8Array(binaryString.length);
             for (let i = 0; i < binaryString.length; i++) {
@@ -9342,7 +9342,7 @@ ${lines.join("\n\n")}`
           const base64Data = match2[2];
           const ext = mimeType.split("/")[1] || "png";
           const attachmentId = crypto.randomUUID();
-          const path9 = `/attachments/${Date.now()}-${attachmentId}.${ext}`;
+          const path9 = `/attachments/${Date.now()}-${attachmentId.slice(0, 8)}.${ext}`;
           try {
             await state.thread.instance.writeFile(path9, base64Data, mimeType);
             if (image.id) {
@@ -9412,7 +9412,7 @@ ${lines.join("\n\n")}`
           const base64Data = imageUrl.slice(base64Index + base64Marker.length);
           const ext = mimeType.split("/")[1] || "png";
           const attachmentId = crypto.randomUUID();
-          const path9 = `/attachments/${Date.now()}-${attachmentId}.${ext}`;
+          const path9 = `/attachments/${Date.now()}-${attachmentId.slice(0, 8)}.${ext}`;
           try {
             await state.thread.instance.writeFile(path9, base64Data, mimeType);
             const attachmentRef = {
@@ -64307,14 +64307,13 @@ async function getPlatformIdentity(env2) {
     platformEndpoint: endpoint
   };
 }
-async function mintLocalSessionForPlatformUser(env2, platformUser) {
+async function upsertReplicaUserForPlatformProfile(env2, profile) {
   const namespace = env2.AGENT_BUILDER;
   if (!namespace || typeof namespace.idFromName !== "function" || typeof namespace.get !== "function") {
     throw new Error("Server misconfigured: AGENT_BUILDER Durable Object binding is required for platform auth");
   }
   const agentBuilder = namespace.get(namespace.idFromName("singleton"));
-  const profile = typeof platformUser === "string" ? { platform_user_id: platformUser, username: `sa-${platformUser.slice(0, 12)}`, role: "admin" } : platformUser;
-  const user = await agentBuilder.upsertPlatformReplicaUser({
+  return await agentBuilder.upsertPlatformReplicaUser({
     platform_user_id: profile.platform_user_id,
     username: profile.username ?? null,
     display_name: profile.display_name ?? null,
@@ -64323,6 +64322,15 @@ async function mintLocalSessionForPlatformUser(env2, platformUser) {
     role: profile.role ?? "admin",
     permissions: profile.permissions ?? null
   });
+}
+async function mintLocalSessionForPlatformUser(env2, platformUser) {
+  const namespace = env2.AGENT_BUILDER;
+  if (!namespace || typeof namespace.idFromName !== "function" || typeof namespace.get !== "function") {
+    throw new Error("Server misconfigured: AGENT_BUILDER Durable Object binding is required for platform auth");
+  }
+  const agentBuilder = namespace.get(namespace.idFromName("singleton"));
+  const profile = typeof platformUser === "string" ? { platform_user_id: platformUser, username: `sa-${platformUser.slice(0, 12)}`, role: "admin" } : platformUser;
+  const user = await upsertReplicaUserForPlatformProfile(env2, profile);
   if (user.role === "api") {
     throw new Error("This account has API-only access. Use an API key instead of signing in.");
   }
@@ -69077,7 +69085,54 @@ var continue_post_default = defineController2(async ({ req, params, env: env2 })
   }
 });
 
+// src/agents/cost-summary.ts
+function emptyCostSummary() {
+  return { totalCost: 0, requestCount: 0, messageCount: 0, byModel: {} };
+}
+function mergeByModel(summaries) {
+  const merged = {};
+  for (const summary of summaries) {
+    for (const [modelName, acc] of Object.entries(summary.byModel)) {
+      const entry = merged[modelName] ?? { totalCost: 0, count: 0 };
+      entry.totalCost += acc.totalCost;
+      entry.count += acc.count;
+      merged[modelName] = entry;
+    }
+  }
+  return merged;
+}
+function sumSummaries(summaries) {
+  let totalCost = 0;
+  let requestCount = 0;
+  let messageCount = 0;
+  for (const summary of summaries) {
+    totalCost += summary.totalCost;
+    requestCount += summary.requestCount;
+    messageCount += summary.messageCount;
+  }
+  return { totalCost, requestCount, messageCount };
+}
+function buildModelBreakdown(byModel) {
+  return Object.entries(byModel).map(([modelName, acc]) => ({
+    modelName,
+    totalCost: acc.totalCost,
+    requestCount: acc.count,
+    avgCostPerRequest: acc.count > 0 ? acc.totalCost / acc.count : 0
+  })).sort((a, b) => b.totalCost - a.totalCost);
+}
+function threadNameFromTags(tags) {
+  for (const tag of tags ?? []) {
+    if (typeof tag === "string" && tag.startsWith("name:")) {
+      const value = tag.slice("name:".length).trim();
+      if (value) return value;
+    }
+  }
+  return null;
+}
+
 // src/api/threads/[id]/cost.get.ts
+var MAX_DESCENDANTS = 200;
+var SUMMARY_BATCH = 10;
 var cost_get_default = defineController2(async ({ req, params, env: env2 }) => {
   const threadId = params.id;
   if (!threadId) {
@@ -69093,52 +69148,70 @@ var cost_get_default = defineController2(async ({ req, params, env: env2 }) => {
         { status: 404 }
       );
     }
-    const durableId = env2.AGENT_BUILDER_THREAD.idFromName(threadId);
-    const stub = env2.AGENT_BUILDER_THREAD.get(durableId);
-    const logsResult = await stub.getLogs(1e4, 0, "ASC");
-    const logs = logsResult.logs || [];
-    let totalCost = 0;
-    const modelCosts = {};
-    const uniqueMessages = /* @__PURE__ */ new Set();
-    for (const log of logs) {
-      const cost = log.cost_total;
-      if (cost !== null && cost !== void 0 && !isNaN(cost)) {
-        totalCost += cost;
-        if (log.message_id) {
-          uniqueMessages.add(log.message_id);
-        }
-        const modelKey = log.model_name || log.model || "unknown";
-        if (!modelCosts[modelKey]) {
-          modelCosts[modelKey] = {
-            totalCost: 0,
-            count: 0
-          };
-        }
-        modelCosts[modelKey].totalCost += cost;
-        modelCosts[modelKey].count += 1;
+    const descendants = (await agentBuilder.getDescendantThreads(threadId) ?? []).slice(
+      0,
+      MAX_DESCENDANTS + 1
+    );
+    const truncated = descendants.length > MAX_DESCENDANTS;
+    if (truncated) descendants.length = MAX_DESCENDANTS;
+    const summarize = async (id) => {
+      try {
+        const durableId = env2.AGENT_BUILDER_THREAD.idFromName(id);
+        const stub = env2.AGENT_BUILDER_THREAD.get(durableId);
+        return await stub.getCostSummary() ?? emptyCostSummary();
+      } catch {
+        return emptyCostSummary();
       }
+    };
+    const ownSummary = await summarize(threadId);
+    const descendantSummaries = [];
+    for (let i = 0; i < descendants.length; i += SUMMARY_BATCH) {
+      const batch = descendants.slice(i, i + SUMMARY_BATCH);
+      descendantSummaries.push(
+        ...await Promise.all(batch.map((child) => summarize(child.id)))
+      );
     }
-    const messageCount = uniqueMessages.size;
-    const avgCostPerMessage = messageCount > 0 ? totalCost / messageCount : 0;
+    const allSummaries = [ownSummary, ...descendantSummaries];
+    const totals = sumSummaries(allSummaries);
+    const byModel = mergeByModel(allSummaries);
+    const modelBreakdown = buildModelBreakdown(byModel);
     const avgCostPerMessageByModel = {};
-    for (const [modelName, data] of Object.entries(modelCosts)) {
-      avgCostPerMessageByModel[modelName] = {
-        avgCost: data.count > 0 ? data.totalCost / data.count : 0,
-        messageCount: data.count
+    for (const entry of modelBreakdown) {
+      avgCostPerMessageByModel[entry.modelName] = {
+        avgCost: entry.avgCostPerRequest,
+        messageCount: entry.requestCount
       };
     }
-    const modelBreakdown = Object.entries(modelCosts).map(([modelName, data]) => ({
-      modelName,
-      totalCost: data.totalCost,
-      requestCount: data.count,
-      avgCostPerRequest: data.count > 0 ? data.totalCost / data.count : 0
-    }));
+    const threads = [
+      {
+        threadId,
+        agentName: thread.agent_name ?? null,
+        threadName: threadNameFromTags(thread.tags),
+        parent: null,
+        isRoot: true,
+        totalCost: ownSummary.totalCost,
+        requestCount: ownSummary.requestCount
+      },
+      ...descendants.map((child, index) => ({
+        threadId: child.id,
+        agentName: child.agent_name ?? null,
+        threadName: threadNameFromTags(child.tags),
+        parent: child.parent,
+        isRoot: false,
+        totalCost: descendantSummaries[index]?.totalCost ?? 0,
+        requestCount: descendantSummaries[index]?.requestCount ?? 0
+      })).filter((row) => row.requestCount > 0)
+    ];
     return Response.json({
-      totalCost,
-      messageCount,
-      avgCostPerMessage,
+      totalCost: totals.totalCost,
+      ownCost: ownSummary.totalCost,
+      requestCount: totals.requestCount,
+      messageCount: totals.messageCount,
+      avgCostPerMessage: totals.messageCount > 0 ? totals.totalCost / totals.messageCount : 0,
       modelBreakdown,
-      avgCostPerMessageByModel
+      avgCostPerMessageByModel,
+      threads,
+      truncated
     });
   } catch (error) {
     console.error(`Error calculating cost for thread ${threadId}:`, error);
@@ -69604,7 +69677,7 @@ var messages_post_default = defineController2(async ({ req, params, env: env2 })
           }
         }
         const ext = mimeType === "image/png" ? "png" : mimeType === "image/jpeg" ? "jpg" : attachment.name.split(".").pop() || "bin";
-        const path9 = `/attachments/${timestamp}-${attachmentId}.${ext}`;
+        const path9 = `/attachments/${timestamp}-${attachmentId.slice(0, 8)}.${ext}`;
         const base64Size = fileData.length;
         const binarySize = Math.ceil(base64Size * 3 / 4);
         console.log(`[writeFile] Storing ${attachment.name}: ${(binarySize / 1024 / 1024).toFixed(2)}MB binary (${(base64Size / 1024 / 1024).toFixed(2)}MB base64) to ${path9}`);
@@ -70046,9 +70119,11 @@ var start_post_default = defineController2(async ({ req, env: env2 }) => {
   const agentBuilder = env2.AGENT_BUILDER.get(agentBuilderId);
   await agentBuilder.startDeviceLogin(await hashToken(code));
   const origin = new URL(req.url).origin;
+  const verifyBaseRaw = env2.STANDARD_AGENTS_DEVICE_VERIFY_URL_BASE;
+  const verifyBase = typeof verifyBaseRaw === "string" ? verifyBaseRaw.trim().replace(/\/+$/, "") : "";
   return Response.json({
     code,
-    verify_url: `${origin}/api/auth/device/${code}/approve`,
+    verify_url: verifyBase ? `${verifyBase}/${code}` : `${origin}/api/auth/device/${code}/approve`,
     poll_url: `${origin}/api/auth/device/${code}`,
     interval: 2,
     expires_in: 600
@@ -70104,6 +70179,15 @@ var callback_get_default = defineController2(async ({ req, env: env2 }) => {
     return failRedirect(req, env2, "forbidden");
   }
   if (payload.role === "api") {
+    const apiReturnTo = safeReturnTo2(url.searchParams.get("return_to"));
+    if (/^\/api\/auth\/device\/[A-Za-z0-9]{8,64}\/approve$/.test(apiReturnTo)) {
+      return new Response(null, {
+        status: 302,
+        headers: {
+          Location: `${url.origin}${apiReturnTo}?handoff=${encodeURIComponent(handoff)}`
+        }
+      });
+    }
     return failRedirect(req, env2, "api_only_account");
   }
   const session = await mintLocalSessionForPlatformUser(env2, {
@@ -70217,23 +70301,49 @@ function page(title, body, ok) {
 var approve_get_default = defineController2(async ({ req, env: env2, params }) => {
   const code = params.code;
   if (!code) return page("Missing code", "This device link is malformed.", false);
-  const authResult = await requireAuth(req, env2);
-  if (authResult instanceof Response) {
-    const url = new URL(req.url);
-    const returnTo = encodeURIComponent(url.pathname);
-    const hosted = Boolean(env2.STANDARD_AGENTS_HOSTED && String(env2.STANDARD_AGENTS_HOSTED) !== "0" && String(env2.STANDARD_AGENTS_HOSTED).toLowerCase() !== "false");
-    const target = hosted ? `/api/auth/sa/start?return_to=${returnTo}` : `/login?return_to=${returnTo}`;
-    return new Response(null, { status: 302, headers: { Location: `${url.origin}${target}` } });
-  }
-  if (authResult.authType === "api_key") {
-    return page("Sign in required", "Device logins must be approved from a signed-in browser session.", false);
+  const url = new URL(req.url);
+  let approvingUserId = null;
+  const handoff = url.searchParams.get("handoff");
+  if (handoff && isPlatformHosted(env2)) {
+    const configuredProjectId = typeof env2.STANDARD_AGENTS_PROJECT_ID === "string" ? env2.STANDARD_AGENTS_PROJECT_ID : void 0;
+    const payload = await verifyPlatformSignedPayload(
+      handoff,
+      env2.STANDARD_AGENTS_AUTH_PUBLIC_KEY_JWK ?? env2.STANDARD_AGENTS_AUTH_PUBLIC_KEY,
+      { kind: "instance_handoff", projectId: configuredProjectId }
+    );
+    const projectOk = payload && (configuredProjectId || payload.project_id === hostedInstanceRedirectId(req, env2));
+    if (!payload || !payload.platform_user_id || !payload.role || !projectOk) {
+      return page("Sign in failed", "This sign-in link is invalid or has expired. Start again from your terminal.", false);
+    }
+    const user = await upsertReplicaUserForPlatformProfile(env2, {
+      platform_user_id: payload.platform_user_id,
+      username: payload.username ?? null,
+      display_name: payload.display_name ?? null,
+      email: payload.email ?? null,
+      avatar_url: payload.avatar_url ?? null,
+      role: payload.role,
+      permissions: payload.permissions ?? null
+    });
+    approvingUserId = user.id;
+  } else {
+    const authResult = await requireAuth(req, env2);
+    if (authResult instanceof Response) {
+      const returnTo = encodeURIComponent(url.pathname);
+      const hosted = Boolean(env2.STANDARD_AGENTS_HOSTED && String(env2.STANDARD_AGENTS_HOSTED) !== "0" && String(env2.STANDARD_AGENTS_HOSTED).toLowerCase() !== "false");
+      const target = hosted ? `/api/auth/sa/start?return_to=${returnTo}` : `/login?return_to=${returnTo}`;
+      return new Response(null, { status: 302, headers: { Location: `${url.origin}${target}` } });
+    }
+    if (authResult.authType === "api_key") {
+      return page("Sign in required", "Device logins must be approved from a signed-in browser session.", false);
+    }
+    approvingUserId = authResult.user.id;
   }
   const token = generateApiKey();
   const agentBuilderId = env2.AGENT_BUILDER.idFromName("singleton");
   const agentBuilder = env2.AGENT_BUILDER.get(agentBuilderId);
   const ok = await agentBuilder.approveDeviceLogin({
     code_hash: await hashToken(code),
-    user_id: authResult.user.id,
+    user_id: approvingUserId,
     token,
     token_hash: await hashToken(token),
     key_prefix: token.slice(0, 12),
@@ -70639,6 +70749,20 @@ async function handleChunkedUploadComplete(stub, filePath, req) {
 
 // src/api/threads/[id]/logs/[logId].get.ts
 var logId_get_default = defineController2(async ({ req, params, env: env2 }) => {
+  if (isPlatformHosted(env2)) {
+    const authResult = await requirePermission(req, env2, "logs");
+    if (authResult instanceof Response) {
+      return authResult;
+    }
+  } else {
+    const authContext = await authenticate(req, env2);
+    if (authContext && !hasPermission(authContext.user, "logs")) {
+      return Response.json(
+        { error: "Forbidden: 'logs' access required" },
+        { status: 403 }
+      );
+    }
+  }
   const threadId = params.id;
   const logId = params.logId;
   if (!threadId) {
@@ -71054,6 +71178,20 @@ function createInspectProviderConfig(providerName, factory, env2) {
   };
 }
 var provider_get_default = defineController2(async ({ req, params, env: env2 }) => {
+  if (isPlatformHosted(env2)) {
+    const authResult = await requirePermission(req, env2, "logs");
+    if (authResult instanceof Response) {
+      return authResult;
+    }
+  } else {
+    const authContext = await authenticate(req, env2);
+    if (authContext && !hasPermission(authContext.user, "logs")) {
+      return Response.json(
+        { error: "Forbidden: 'logs' access required" },
+        { status: 403 }
+      );
+    }
+  }
   const threadId = params.id;
   const logId = params.logId;
   const providerName = params.provider;