@standardagents/builder 0.37.5 → 0.37.7

package/dist/built-in-routes.js

@@ -13677,7 +13677,7 @@ var init_ThreadStateImpl = __esm({
         return bytes.buffer;
       }
       async readFileStream(path10, options) {
-        const fileInfo = await this._threadInstance.statFile(path10);
+        const fileInfo = this._unwrapStatRecord(await this._threadInstance.statFile(path10));
         if (!fileInfo) {
           return null;
         }
@@ -13732,12 +13732,32 @@ var init_ThreadStateImpl = __esm({
           }
         };
       }
+      /**
+       * Unwrap the thread DO's `{ success, file }` stat envelope (older shapes
+       * returned the record directly). A failed or absent lookup is NULL — the
+       * old code mapped the envelope itself, producing a truthy record with
+       * every field defaulted (size 0, application/octet-stream) even for
+       * NONEXISTENT paths, which let a phantom asset pass an existence check and
+       * a real 1.2MB image read as "0 bytes" (2026-08-11).
+       */
+      _unwrapStatRecord(result) {
+        const record24 = result?.file ?? result;
+        if (!record24 || typeof record24 !== "object") return null;
+        if (!("path" in record24) && !("name" in record24)) return null;
+        return record24;
+      }
       async statFile(path10) {
-        const result = await this._threadInstance.statFile(path10);
-        return result ? this._mapFileRecord(result) : null;
+        const record24 = this._unwrapStatRecord(await this._threadInstance.statFile(path10));
+        return record24 ? this._mapFileRecord(record24) : null;
       }
       async readdirFile(path10) {
-        const entries = await this._threadInstance.readdirFile(path10);
+        const result = await this._threadInstance.readdirFile(path10);
+        const entries = Array.isArray(result) ? result : result?.files;
+        if (!Array.isArray(entries)) {
+          throw new Error(
+            result?.error || `Could not list directory: ${path10}`
+          );
+        }
         return {
           entries: entries.map((e) => this._mapFileRecord(e))
         };
@@ -67967,7 +67987,7 @@ var config_get_default = defineController2(async ({ config, env: env2, req }) =>
 });
 
 // src/version.ts
-var BUILDER_VERSION = "0.37.5".length > 0 ? "0.37.5" : "dev";
+var BUILDER_VERSION = "0.37.7".length > 0 ? "0.37.7" : "dev";
 
 // src/api/diagnostics.get.ts
 init_LLMRequest();
@@ -75585,6 +75605,76 @@ var messageId_patch_default = defineController2(async ({ req, params, env: env2
   }
 });
 
+// src/api/threads/[id]/public/[...path].ts
+var path_default4 = defineController2(async ({ req, params, env: env2 }) => {
+  if (req.method !== "GET" && req.method !== "HEAD") {
+    return Response.json({ error: "Method not allowed" }, { status: 405 });
+  }
+  const threadId = params.id;
+  if (!threadId) {
+    return Response.json({ error: "Thread ID required" }, { status: 400 });
+  }
+  const rawPathParam = params._ || params.path || params["*"] || "";
+  const relative4 = rawPathParam === "public" ? "" : rawPathParam.replace(/^\/?public\//, "");
+  const segments = [];
+  for (const part of relative4.replace(/\\/g, "/").split("/")) {
+    if (!part || part === ".") continue;
+    if (part === "..") return notFound();
+    segments.push(part);
+  }
+  if (segments.length === 0) return notFound();
+  const path10 = `/public/${segments.join("/")}`;
+  try {
+    const durableId = env2.AGENT_BUILDER_THREAD.idFromName(threadId);
+    const stub = env2.AGENT_BUILDER_THREAD.get(durableId);
+    const statResult = await stub.statFile(path10);
+    if (!statResult?.success) return notFound();
+    const file = statResult.file;
+    if (!file || file.isDirectory || file.storage !== "local") return notFound();
+    const headers = {
+      "Content-Type": file.mimeType || "application/octet-stream",
+      "Content-Length": String(file.size),
+      "Content-Disposition": `inline; filename="${file.name}"`,
+      // Public files are mutable (unlike content-addressed assets): cache
+      // briefly so shares are fast without pinning stale content for a year.
+      "Cache-Control": "public, max-age=300"
+    };
+    if (req.method === "HEAD") return new Response(null, { headers });
+    if (file.isChunked && file.chunkCount) {
+      const { readable, writable } = new TransformStream();
+      const writer = writable.getWriter();
+      (async () => {
+        try {
+          for (let i = 0; i < file.chunkCount; i++) {
+            const chunk = await stub.readFileChunk(path10, i);
+            if (!chunk?.success) break;
+            const binary2 = atob(chunk.data);
+            const bytes2 = new Uint8Array(binary2.length);
+            for (let j = 0; j < binary2.length; j++) bytes2[j] = binary2.charCodeAt(j);
+            await writer.write(bytes2);
+          }
+        } finally {
+          await writer.close().catch(() => {
+          });
+        }
+      })();
+      return new Response(readable, { headers });
+    }
+    const result = await stub.readFile(path10);
+    if (!result?.success) return notFound();
+    const binary = atob(result.data);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+    return new Response(bytes, { headers });
+  } catch (error) {
+    console.error(`Error serving public file for thread ${threadId}:`, error);
+    return notFound();
+  }
+});
+function notFound() {
+  return Response.json({ error: "Not found" }, { status: 404 });
+}
+
 // src/api/threads/[id]/variables/[requestId].get.ts
 var requestId_get_default = defineController2(async ({ req, params, env: env2 }) => {
   const authResult = await requireAuth(req, env2);
@@ -76229,6 +76319,7 @@ var routeHandlers = {
   "GET:/threads/:id/logs/:logId": logId_get_default,
   "DELETE:/threads/:id/messages/:messageId": messageId_delete_default,
   "PATCH:/threads/:id/messages/:messageId": messageId_patch_default,
+  "GET:/threads/:id/public/**": path_default4,
   "GET:/threads/:id/variables/:requestId": requestId_get_default,
   "POST:/threads/:id/variables/:requestId": requestId_post_default,
   "POST:/threads/:id/effects/:effectId/cancel": cancel_post_default,