@standardagents/builder 0.36.3 → 0.37.1

package/dist/client/index.html

@@ -26,7 +26,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <link rel="icon" type="image/svg+xml" href="/agents/assets/img/favicon-9uH1rb2F.svg">
     <title>AgentBuilder Admin</title>
-    <script type="module" crossorigin src="/agents/index-BTs3PMFs.js"></script>
+    <script type="module" crossorigin src="/agents/index-BgZnQr8X.js"></script>
     <link rel="modulepreload" crossorigin href="/agents/formkit-0eyyCEP_.js">
     <link rel="modulepreload" crossorigin href="/agents/vendor-TPZjEwCU.js">
     <link rel="modulepreload" crossorigin href="/agents/syntax-D-ZcovVx.js">

package/dist/{index-DUIfQjBW.d.ts → index-DceFbLG9.d.ts}

@@ -407,7 +407,7 @@ interface ThreadInstance {
     }>;
     hasBridge?(): Promise<boolean>;
     failPendingMessagesAndBroadcast?(): Promise<number>;
-    settleTerminalFailure?(errorMessage: string): Promise<void>;
+    settleTerminalFailure?(errorMessage: string, threadId?: string): Promise<void>;
     notifyClientWaiting?(toolCallId: string, threadId: string, userId: string | null): Promise<void>;
     registerCodeExecutionBridge?(runId: string, bridge: {
         call(functionId: string, encodedArgs: unknown[]): Promise<unknown>;
@@ -1112,6 +1112,48 @@ interface FileStats {
     fileCount: number;
 }
 
+/**
+ * Authentication middleware for protecting API routes
+ *
+ * Supports multiple authentication types:
+ * - Super admin token (signed with ENCRYPTION_KEY)
+ * - User session token (validated against DurableAgentBuilder)
+ * - API key (validated against DurableAgentBuilder)
+ */
+interface AuthUser {
+    id: string;
+    username: string;
+    /** 'admin' | 'user' | 'api' (API-only: normal API access, no UI, no logs). */
+    role: string;
+    /**
+     * Explicit permission grants (e.g. 'logs'). `null`/absent = legacy row with
+     * no explicit set — see {@link hasPermission} for the fallback rules.
+     */
+    permissions?: string[] | null;
+    platform_user_id?: string | null;
+    email?: string | null;
+    display_name?: string | null;
+    avatar_url?: string | null;
+}
+interface AuthContext {
+    user: AuthUser;
+    authType: 'super_admin' | 'session' | 'api_key';
+}
+/**
+ * Authenticate a request using various token types
+ */
+declare function authenticate(request: Request, env: any): Promise<AuthContext | null>;
+/**
+ * Middleware to require authentication
+ * Returns 401 if not authenticated
+ */
+declare function requireAuth(request: Request, env: any): Promise<AuthContext | Response>;
+/**
+ * Middleware to require admin role
+ * Returns 401 if not authenticated, 403 if not admin
+ */
+declare function requireAdmin(request: Request, env: any): Promise<AuthContext | Response>;
+
 /**
  * Router and endpoint definition module for AgentBuilder.
  *
@@ -1237,6 +1279,19 @@ interface LogDetails {
  */
 interface DurableThreadRpc {
     stop(): Promise<Response>;
+    emergencyQuarantine?(input: {
+        actionId: string;
+        reason: string;
+        source?: string;
+        forensicHold?: boolean;
+        observed?: Record<string, number>;
+    }): Promise<unknown>;
+    emergencyResume?(input: {
+        actionId: string;
+        reason: string;
+        releaseForensicHold?: boolean;
+    }): Promise<unknown>;
+    getRuntimeSafetyStatus?(): Promise<unknown>;
     /** Newest non-empty user message on the thread, for thread-list previews. */
     getLatestUserMessagePreview(): Promise<string | null>;
     executeBlocking?(threadId: string, agentId: string, initial_messages?: unknown[], data?: unknown): Promise<{
@@ -1428,6 +1483,8 @@ interface ThreadRegistryEntry {
     executing?: boolean;
     /** Short excerpt of the most recent user message, for thread-list rows. */
     last_message_preview?: string | null;
+    /** Unix seconds of the newest message on this thread (never bumped by background activity). */
+    last_message_at?: number | null;
 }
 /**
  * RPC methods exposed by DurableAgentBuilder for external callers.
@@ -1640,6 +1697,7 @@ interface DurableAgentBuilderRpc {
     recordThreadActivity?(threadId: string, options?: {
         executing?: boolean;
         messagePreview?: string | null;
+        messageAt?: number;
     }): Promise<void>;
     getThreadTreeIds?(threadId: string): Promise<string[]>;
     deleteThread(threadId: string): Promise<void>;
@@ -1680,6 +1738,8 @@ interface BuilderControllerContext<Env extends ThreadEnv = ThreadEnv> extends Om
     providerFactories?: Record<string, () => Promise<unknown>>;
     /** Namespaced registry for packed agent support */
     registry?: NamespacedRegistry;
+    /** Authenticated caller, populated by the generated runtime router. */
+    auth?: AuthContext | null;
 }
 /**
  * Builder-specific controller type with typed env.
@@ -1745,4 +1805,4 @@ declare function defineController<Env extends ThreadEnv = ThreadEnv>(controller:
  */
 declare function createThreadEndpointHandler<Env extends ThreadEnv = ThreadEnv>(handler: ThreadEndpointHandler): BuilderController<Env>;
 
-export { type Agent as A, type BuilderController as B, CLIENT_STREAM_CHUNK_BYTES as C, type ImageContentPart as D, type Env as E, type FlowState as F, type GrepResult as G, type MultimodalContent as H, type ImageMetadata as I, type MessageContent as J, type LLMResponse as L, type Message as M, type RequestContext as R, type StorageBackend as S, type ToolCall as T, type BuilderControllerContext as a, type ThreadEndpointContext as b, createThreadEndpointHandler as c, defineController as d, type ThreadEnv as e, type BuilderThreadEndpointHandler as f, callClient as g, callClientStream as h, encodeStreamChunk as i, decodeStreamChunk as j, type ClientToolRequest as k, type ClientToolResponse as l, type ClientStreamRequest as m, type ClientStreamResponse as n, type ClientDuplex as o, type ClientForwarding as p, type ThreadInstance as q, type ThreadMetadata as r, supportsClientForwarding as s, type ToolResult as t, type FlowResult as u, type TelemetryEvent as v, type FileRecord as w, type AttachmentRef as x, type FileStats as y, type TextContentPart as z };
+export { type AuthUser as A, type BuilderController as B, CLIENT_STREAM_CHUNK_BYTES as C, type TelemetryEvent as D, type Env as E, type FlowState as F, type FileRecord as G, type AttachmentRef as H, type ImageMetadata as I, type GrepResult as J, type FileStats as K, type LLMResponse as L, type Message as M, type TextContentPart as N, type ImageContentPart as O, type MultimodalContent as P, type MessageContent as Q, type RequestContext as R, type StorageBackend as S, type ToolCall as T, type BuilderControllerContext as a, type ThreadEndpointContext as b, createThreadEndpointHandler as c, defineController as d, type ThreadEnv as e, type BuilderThreadEndpointHandler as f, authenticate as g, requireAdmin as h, type AuthContext as i, callClient as j, callClientStream as k, encodeStreamChunk as l, decodeStreamChunk as m, type ClientToolRequest as n, type ClientToolResponse as o, type ClientStreamRequest as p, type ClientStreamResponse as q, requireAuth as r, supportsClientForwarding as s, type ClientDuplex as t, type ClientForwarding as u, type Agent as v, type ThreadInstance as w, type ThreadMetadata as x, type ToolResult as y, type FlowResult as z };

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { ModelDefinition, AgentDefinition } from './runtime.js';
-export { AgentBuilderEnv, AuthContext, AuthUser, BroadcastOptions, CodeExecutionBridge, DurableAgentBuilder, DurableThread, DurableUserHub, FlowStateSdk, FlowStateWithSdk, HubClientInfo, ImageContextConfig, InjectMessageOptions, LLMProviderInterface, NamespaceResolutionError, PromptContent, PromptDefinition, PromptIncludePart, PromptPart, PromptToolConfig, Provider, ProviderContentPart, ProviderFilePart, ProviderImagePart, ProviderRegistry, ProviderTextPart, SessionToolBinding, SessionToolConfig, SideConfig, SubagentToolConfig, SubpromptConfig, ThreadRegistryEntry, ThreadWatchdog, ThreadWatchdogState, ToolConfig, UpdateThreadParams, User, WatchdogCheckin, WatchdogProbeResult, authenticate, buildImageDescription, cat, createNamespaceContext, emitThreadEvent, enhanceFlowState, exists, find, forceTurn, generateImageDescription, getFileStats, getMessages, getMessagesToSummarize, getShortName, getThumbnail, getUnsummarizedImageAttachments, getVisibleAgentNames, getVisibleModelNames, getVisiblePromptNames, getVisibleToolNames, grep, hasImageAttachments, head, injectMessage, isQualifiedName, linkFile, mkdir, move, optimizeImageContext, parseQualifiedName, qualifyName, queueTool, readFile, readdir, reloadHistory, rename, replaceImagesWithDescriptions, requireAdmin, requireAuth, resolveAgent, resolveHook, resolveModel, resolvePrompt, resolveTool, rmdir, stat, tail, unlink, updateThread, writeFile, writeImage } from './runtime.js';
+export { AgentBuilderEnv, AgentBuilderEvent, BroadcastOptions, CodeExecutionBridge, DurableAgentBuilder, DurableThread, DurableUserHub, FlowStateSdk, FlowStateWithSdk, HubClientInfo, ImageContextConfig, InjectMessageOptions, LLMProviderInterface, NamespaceResolutionError, PromptContent, PromptDefinition, PromptIncludePart, PromptPart, PromptToolConfig, Provider, ProviderContentPart, ProviderFilePart, ProviderImagePart, ProviderRegistry, ProviderTextPart, SessionToolBinding, SessionToolConfig, SideConfig, SubagentToolConfig, SubpromptConfig, ThreadEventPayload, ThreadRegistryEntry, ThreadWatchdog, ThreadWatchdogState, ToolConfig, UpdateThreadParams, User, WatchdogCheckin, WatchdogProbeResult, buildImageDescription, canAccessThread, cat, createNamespaceContext, emitThreadEvent, enhanceFlowState, exists, find, forceTurn, generateImageDescription, getFileStats, getMessages, getMessagesToSummarize, getShortName, getThumbnail, getUnsummarizedImageAttachments, getVisibleAgentNames, getVisibleModelNames, getVisiblePromptNames, getVisibleToolNames, grep, hasImageAttachments, head, injectMessage, isAdminOnlyApiRoute, isHostedInstance, isPublicApiRoute, isQualifiedName, isTrustedLocalDevelopmentRequest, linkFile, mkdir, move, optimizeImageContext, parseQualifiedName, qualifyName, queueTool, readFile, readdir, reloadHistory, rename, replaceImagesWithDescriptions, resolveAgent, resolveHook, resolveModel, resolvePrompt, resolveTool, rmdir, stat, tail, unlink, updateThread, writeFile, writeImage } from './runtime.js';
 export { AgentPluginOptions, agentbuilder, builder } from './plugin.js';
-export { A as Agent, x as AttachmentRef, f as BuilderThreadEndpointHandler, C as CLIENT_STREAM_CHUNK_BYTES, o as ClientDuplex, p as ClientForwarding, m as ClientStreamRequest, n as ClientStreamResponse, k as ClientToolRequest, l as ClientToolResponse, B as Controller, a as ControllerContext, E as Env, w as FileRecord, y as FileStats, u as FlowResult, F as FlowState, G as GrepResult, D as ImageContentPart, I as ImageMetadata, L as LLMResponse, M as Message, J as MessageContent, H as MultimodalContent, R as RequestContext, S as StorageBackend, v as TelemetryEvent, z as TextContentPart, b as ThreadEndpointContext, e as ThreadEnv, q as ThreadInstance, r as ThreadMetadata, T as ToolCall, t as ToolResult, g as callClient, h as callClientStream, c as createThreadEndpointHandler, j as decodeStreamChunk, d as defineController, i as encodeStreamChunk, s as supportsClientForwarding } from './index-DUIfQjBW.js';
+export { v as Agent, H as AttachmentRef, i as AuthContext, A as AuthUser, f as BuilderThreadEndpointHandler, C as CLIENT_STREAM_CHUNK_BYTES, t as ClientDuplex, u as ClientForwarding, p as ClientStreamRequest, q as ClientStreamResponse, n as ClientToolRequest, o as ClientToolResponse, B as Controller, a as ControllerContext, E as Env, G as FileRecord, K as FileStats, z as FlowResult, F as FlowState, J as GrepResult, O as ImageContentPart, I as ImageMetadata, L as LLMResponse, M as Message, Q as MessageContent, P as MultimodalContent, R as RequestContext, S as StorageBackend, D as TelemetryEvent, N as TextContentPart, b as ThreadEndpointContext, e as ThreadEnv, w as ThreadInstance, x as ThreadMetadata, T as ToolCall, y as ToolResult, g as authenticate, j as callClient, k as callClientStream, c as createThreadEndpointHandler, m as decodeStreamChunk, d as defineController, l as encodeStreamChunk, h as requireAdmin, r as requireAuth, s as supportsClientForwarding } from './index-DceFbLG9.js';
 export { AgentType, DefinitionLoader, GlobalNamespaceContext, HookSignatures, ImageContent, ModelCapabilities, ModelProvider, NamespaceContext, PackageSignature, PackedExports, PackedMeta, PackedMetadata, PackedNamespaceContext, PromptInput, PromptTextPart, ProviderAssistantMessage, ProviderConfigSlot, ProviderConfigSlots, ProviderConfigValueSource, ProviderDefinition, ProviderError, ProviderErrorCode, ProviderFactory, ProviderFactoryConfig, ProviderFinishReason, ProviderGeneratedImage, ProviderMessage, ProviderMessageContent, ProviderMethodOverrides, ModelCapabilities as ProviderModelCapabilities, ProviderOverride, ProviderOverrideContext, ProviderReasoningDetail, ProviderRequest, ProviderResponse, ProviderStreamChunk, ProviderSyncOverride, ProviderSystemMessage, ProviderTool, ProviderToolCallPart, ProviderToolMessage, ProviderToolResultContent, ProviderUsage, ProviderUserMessage, ReasoningConfig, StructuredPrompt, TextContent, Tool, ToolArgs, ToolArgsNode, ToolArgsRawShape, ToolContent, belongsToPackage, defineAgent, defineHook, defineModel, definePrompt, defineProvider, defineTool, isPacked, isVisibleInNamespace, mapReasoningLevel, providerConst, providerEnv, providerValue } from '@standardagents/spec';
 export { C as ConstituentItem, D as DiscoveredPackage, N as NamespacedRegistry, P as PackingAnalysis, a as PackingOptions, b as PackingResult, c as UnpackOptions, d as UnpackResult } from './types-Bpe7IANZ.js';
 export { D as DiscoveryConfig, P as PackageDiscoveryService, d as discoverPackages } from './discovery-DiMJWisl.js';
@@ -10,6 +10,64 @@ import 'vite';
 import '@cloudflare/workers-types';
 import 'zod';
 
+/**
+ * The "visible terminal assistant" boundary, server side.
+ *
+ * A client's session-state reducer retires its provisional draft on exactly
+ * this class of record: a durable assistant message that is no longer pending,
+ * is not silent, and carries visible text. Unread state has to agree with that
+ * boundary — a thread is unread when a reply the user has not seen has landed,
+ * which is the same instant the draft stops being provisional. Anything the
+ * reducer refuses to treat as an answer must not stamp recency either:
+ *
+ * - Pending/streaming partials: the answer has not landed yet.
+ * - Empty assistant envelopes: interleaved-reasoning providers persist one at
+ *   every reasoning/generation boundary mid-turn, and a tool-calling step
+ *   persists one with tool_calls and no prose. Neither renders anywhere.
+ * - Reasoning-only records: reasoning lives in its own column and in content
+ *   blocks that carry no `text`, so both flatten to an empty string here.
+ * - Silent rows: never rendered in any head.
+ *
+ * A FAILED record with visible text does stamp, matching the reducer: a
+ * terminal error message is a real, visible end state the user has not read.
+ * A failed record with no content is excluded by the empty-content rule.
+ *
+ * A record carrying TOOL CALLS is never terminal, no matter how much prose
+ * rides along with it: FlowEngine persists the step (content + tool_calls,
+ * status completed) BEFORE executing its tools, so a narrated preamble like
+ * "Let me check the repo…" is a mid-turn working step every client still
+ * renders under a Working indicator. Stamping it would re-mark the thread
+ * unread on every step of a narrated turn — the exact false-dot class this
+ * field exists to eliminate.
+ *
+ * Visibility is text OR attachments: an attachment-only reply (content null
+ * plus generated images) is a supported terminal answer shape that every head
+ * renders, so it must stamp even though its text flattens to empty.
+ */
+declare function isVisibleTerminalAssistantMessage(message: Record<string, unknown> | null | undefined): boolean;
+/**
+ * True when a column holding a JSON array (tool_calls, attachments) actually
+ * carries entries. Rows store these as JSON strings; in-memory records may
+ * hold real arrays. Unparseable non-empty strings count as present — failing
+ * toward "not terminal" for tool_calls is the safe direction, and attachments
+ * only reach here after the text check already failed.
+ */
+declare function hasJsonArrayEntries(raw: unknown): boolean;
+/**
+ * Visible text of a message record, matching the reducer's extractor: plain
+ * string content, or the concatenated `text` of content blocks. Blocks without
+ * a string `text` (reasoning, images, tool payloads) contribute nothing.
+ */
+declare function assistantMessageText(content: unknown): string;
+/**
+ * Unix SECONDS for a message record whose timestamps are stored in
+ * microseconds. Prefers the completion time over the creation time: a pending
+ * row is created when the request goes out, so `created_at` can precede the
+ * visible answer by the whole generation. Returns null when neither column
+ * holds a usable number, letting the registry fall back to its own clock.
+ */
+declare function messageTimestampSeconds(message: Record<string, unknown> | null | undefined): number | null;
+
 /**
  * Options for generating a model file.
  */
@@ -157,4 +215,4 @@ declare function generatePromptFile(data: PromptFileData): string;
  */
 declare function generateAgentFile(data: AgentDefinition): string;
 
-export { AgentDefinition, ModelDefinition, generateAgentFile, generateModelFile, generatePromptFile };
+export { AgentDefinition, ModelDefinition, assistantMessageText, generateAgentFile, generateModelFile, generatePromptFile, hasJsonArrayEntries, isVisibleTerminalAssistantMessage, messageTimestampSeconds };