@standardagents/builder 0.36.3 → 0.37.0

package/dist/runtime.d.ts

@@ -1,5 +1,5 @@
-import { e as ThreadEnv, A as Agent, r as ThreadMetadata, t as ToolResult, M as Message, k as ClientToolRequest, l as ClientToolResponse, m as ClientStreamRequest, n as ClientStreamResponse, w as FileRecord, F as FlowState, y as FileStats, G as GrepResult, x as AttachmentRef, J as MessageContent, E as Env, q as ThreadInstance } from './index-DUIfQjBW.js';
-export { f as BuilderThreadEndpointHandler, C as CLIENT_STREAM_CHUNK_BYTES, o as ClientDuplex, p as ClientForwarding, B as Controller, a as ControllerContext, u as FlowResult, D as ImageContentPart, I as ImageMetadata, L as LLMResponse, H as MultimodalContent, R as RequestContext, S as StorageBackend, v as TelemetryEvent, z as TextContentPart, b as ThreadEndpointContext, T as ToolCall, g as callClient, h as callClientStream, c as createThreadEndpointHandler, j as decodeStreamChunk, d as defineController, i as encodeStreamChunk, s as supportsClientForwarding } from './index-DUIfQjBW.js';
+import { e as ThreadEnv, A as Agent, r as ThreadMetadata, t as ToolResult, M as Message, k as ClientToolRequest, l as ClientToolResponse, m as ClientStreamRequest, n as ClientStreamResponse, w as FileRecord, F as FlowState, y as FileStats, G as GrepResult, x as AttachmentRef, J as MessageContent, E as Env, q as ThreadInstance } from './index-yV9JL4r3.js';
+export { f as BuilderThreadEndpointHandler, C as CLIENT_STREAM_CHUNK_BYTES, o as ClientDuplex, p as ClientForwarding, B as Controller, a as ControllerContext, u as FlowResult, D as ImageContentPart, I as ImageMetadata, L as LLMResponse, H as MultimodalContent, R as RequestContext, S as StorageBackend, v as TelemetryEvent, z as TextContentPart, b as ThreadEndpointContext, T as ToolCall, g as callClient, h as callClientStream, c as createThreadEndpointHandler, j as decodeStreamChunk, d as defineController, i as encodeStreamChunk, s as supportsClientForwarding } from './index-yV9JL4r3.js';
 import { CodeExecutionOptions, CodeExecutionResult, SubagentRegistryEntry, InjectMessageInput, QueueMessageInput, CredentialGrant, SkillMetadata, SkillFileInput, ModelDefinition as ModelDefinition$1, ToolArgs, PromptTextPart, PromptEnvPart, VariableDefinition, SubpromptConfig as SubpromptConfig$1, PromptToolConfig as PromptToolConfig$1, SubagentToolConfig as SubagentToolConfig$1, ReasoningConfig, SideConfig as SideConfig$1, LLMProviderInterface, ContentPart, TextPart, ImagePart, FilePart, ThreadState, NamespaceContext, DefinitionLoader } from '@standardagents/spec';
 export { AgentType, DefinitionLoader, GlobalNamespaceContext, HookSignatures, ImageContent, ModelCapabilities, ModelProvider, NamespaceContext, PackageSignature, PackedExports, PackedMeta, PackedMetadata, PackedNamespaceContext, PromptInput, PromptTextPart, ProviderAssistantMessage, ProviderError, ProviderErrorCode, ProviderFactory, ProviderFactoryConfig, ProviderFinishReason, ProviderGeneratedImage, ProviderMessage, ProviderMessageContent, ModelCapabilities as ProviderModelCapabilities, ProviderReasoningDetail, ProviderRequest, ProviderResponse, ProviderStreamChunk, ProviderSystemMessage, ProviderTool, ProviderToolCallPart, ProviderToolMessage, ProviderToolResultContent, ProviderUsage, ProviderUserMessage, ReasoningConfig, StructuredPrompt, TextContent, Tool, ToolArgs, ToolArgsNode, ToolArgsRawShape, ToolContent, belongsToPackage, defineAgent, defineHook, defineModel, definePrompt, defineTool, isPacked, isVisibleInNamespace, mapReasoningLevel } from '@standardagents/spec';
 import { DurableObject, WorkerEntrypoint } from 'cloudflare:workers';
@@ -168,6 +168,24 @@ interface EffectRunActionResult {
     replayedId?: string;
 }
 
+interface RuntimeSafetyStatus {
+    state: 'active' | 'quarantined';
+    reason: string | null;
+    source: string | null;
+    trippedAt: number | null;
+    resumedAt: number | null;
+    forensicHold: boolean;
+    lastActionId: string | null;
+    observed: Record<string, number>;
+}
+interface RuntimeQuarantineInput {
+    actionId: string;
+    reason: string;
+    source?: string;
+    forensicHold?: boolean;
+    observed?: Record<string, number>;
+}
+
 interface CodeExecutionBridgeRegistration {
     call(functionId: string, encodedArgs: unknown[]): Promise<unknown>;
 }
@@ -209,6 +227,7 @@ declare class DurableThread<Env extends ThreadEnv = ThreadEnv> extends DurableOb
     private pendingClientCalls;
     private clientStreams;
     private alarmQueue;
+    private runtimeSafety;
     private alarmQueueRearmed;
     private currentAbortController;
     private isExecuting;
@@ -644,7 +663,7 @@ declare class DurableThread<Env extends ThreadEnv = ThreadEnv> extends DurableOb
      * "Working" spinner. Used by the FlowEngine's terminal catch and the parked
      * forwarded-call TTL.
      */
-    settleTerminalFailure(errorMessage: string): Promise<void>;
+    settleTerminalFailure(errorMessage: string, threadId?: string): Promise<void>;
     stop(): Promise<Response>;
     /**
      * Continue execution from where it stopped (RPC method)
@@ -1140,6 +1159,18 @@ declare class DurableThread<Env extends ThreadEnv = ThreadEnv> extends DurableOb
      * historical accept-anything delivery for old CLIs.
      */
     private sendClientToolRequest;
+    /**
+     * The delivered result of a parked forwarded call, if the client has
+     * already resolved it — lets the approval-park path grace-wait briefly and
+     * return the REAL result inline instead of a "⏳ Awaiting your approval…"
+     * placeholder. Instant auto-accepts (the common case: the client's saved
+     * permission level covers the call) otherwise race the placeholder into
+     * stored history, leaving the model blind to its own tool outcomes.
+     */
+    getDeliveredClientToolResult(toolCallId: string): Promise<{
+        content: string;
+        toolStatus: string | null;
+    } | null>;
     /** Still-pending durable forwarded calls (for re-sending after a reconnect). */
     getPendingClientCalls(): Promise<Array<{
         toolCallId: string;
@@ -1228,6 +1259,17 @@ declare class DurableThread<Env extends ThreadEnv = ThreadEnv> extends DurableOb
      * Filters silent messages based on each socket's includeSilent preference
      */
     private broadcastMessage;
+    /**
+     * The FlowEngine's message emit path: broadcast the record, and stamp
+     * message recency when it is the thread's visible terminal assistant reply.
+     *
+     * This is the frame a client's reducer consumes to retire its provisional
+     * draft, so it is the one place where "the user has something new to read"
+     * is known. The stamp deliberately does NOT carry a preview: previews are
+     * row labels and stay keyed to the user's own message, while recency has to
+     * follow the agent's reply.
+     */
+    private emitFlowMessage;
     private broadcastMessageWithSubagentProjection;
     /**
      * Broadcast a content chunk for real-time streaming
@@ -1277,6 +1319,16 @@ declare class DurableThread<Env extends ThreadEnv = ThreadEnv> extends DurableOb
      * the alarm chain. All errors are caught and logged.
      */
     alarm(): Promise<void>;
+    /** Persist a reversible emergency stop without scanning or deleting thread data. */
+    emergencyQuarantine(input: RuntimeQuarantineInput): Promise<RuntimeSafetyStatus>;
+    /** Return the low-cost quarantine status used by Brolly and diagnostics. */
+    getRuntimeSafetyStatus(): Promise<RuntimeSafetyStatus>;
+    /** Resume only through an explicit idempotent action; forensic holds need release. */
+    emergencyResume(input: {
+        actionId: string;
+        reason: string;
+        releaseForensicHold?: boolean;
+    }): Promise<RuntimeSafetyStatus>;
     /** Heartbeat: called by LLMRequest on each attempt and streamed chunk. */
     noteExecutionProgress(): void;
     /**
@@ -1344,6 +1396,7 @@ declare class DurableThread<Env extends ThreadEnv = ThreadEnv> extends DurableOb
         watchdogStrikes: number;
         watchdogCeilingMs: number;
         stopped: boolean;
+        runtimeSafety: RuntimeSafetyStatus;
         incompleteLogs: Array<{
             id: string;
             model: string | null;
@@ -1873,6 +1926,17 @@ interface ThreadRegistryEntry {
     executing?: boolean;
     /** Short excerpt of the most recent user message, for thread-list rows. */
     last_message_preview?: string | null;
+    /**
+     * Unix seconds of the newest VISIBLE MESSAGE on this thread — the one field
+     * clients key unread indicators on. It moves when a non-empty user (or
+     * operator assistant-role) message arrives, and when a visible terminal
+     * assistant record lands (`isVisibleTerminalAssistantMessage`): terminal
+     * answers, attachment-only replies, and failed rows with visible text — but
+     * never mid-turn tool-calling steps, silent rows, sub-prompt records, or
+     * background execution activity (which move only `last_activity_at`).
+     * Monotonic per thread and never propagated to ancestors.
+     */
+    last_message_at?: number | null;
 }
 interface PendingSubagentAttachmentRef {
     path: string;
@@ -2131,6 +2195,7 @@ declare class DurableAgentBuilder<Env extends AgentBuilderEnv = AgentBuilderEnv>
     recordThreadActivity(threadId: string, options?: {
         executing?: boolean;
         messagePreview?: string | null;
+        messageAt?: number;
     }): Promise<void>;
     /**
      * Fill in previews for threads that predate preview tracking. Callers read