@standardagents/builder 0.27.3 → 0.27.5

package/dist/built-in-routes.js

@@ -66192,7 +66192,7 @@ var config_get_default = defineController2(async ({ config, env: env2, req }) =>
 });
 
 // src/version.ts
-var BUILDER_VERSION = "0.27.3".length > 0 ? "0.27.3" : "dev";
+var BUILDER_VERSION = "0.27.5".length > 0 ? "0.27.5" : "dev";
 
 // src/api/diagnostics.get.ts
 init_LLMRequest();

package/dist/index.js

@@ -21416,7 +21416,11 @@ ${packedThreadRouteCode}
       authContext = authResult;
 
       if (routePath.startsWith('/api/threads/')) {
-        const threadId = routeMatch.params?.id || routeMatch.params?.threadId;
+        // Packed and user thread endpoints reserve threadId for the owning
+        // thread while nested endpoint parameters may also be named id.
+        // Prefer the explicit thread parameter so /pending/:id and similar
+        // routes authorize against the thread instead of the nested resource.
+        const threadId = routeMatch.params?.threadId || routeMatch.params?.id;
         if (threadId) {
           const agentBuilderId = env.AGENT_BUILDER.idFromName('singleton');
           const agentBuilder = env.AGENT_BUILDER.get(agentBuilderId);
@@ -24408,6 +24412,9 @@ var DurableThread = class _DurableThread extends DurableObject {
   codeExecutionBridges = /* @__PURE__ */ new Map();
   constructor(ctx, env) {
     super(ctx, env);
+    ctx.setWebSocketAutoResponse(
+      new WebSocketRequestResponsePair("stream_ping", "stream_pong")
+    );
     this.alarmQueue = new AlarmQueue(ctx);
     this.alarmQueue.setExecutor(
       async (method, args, itemId) => {
@@ -30629,6 +30636,9 @@ var DurableAgentBuilder = class extends DurableObject {
   eventSockets = /* @__PURE__ */ new Set();
   constructor(ctx, env) {
     super(ctx, env);
+    ctx.setWebSocketAutoResponse(
+      new WebSocketRequestResponsePair("stream_ping", "stream_pong")
+    );
     const sockets = ctx.getWebSockets();
     for (const ws of sockets) {
       const attachment = ws.deserializeAttachment();