npm - @standardagents/builder - Versions diffs - 0.37.6 → 0.37.7 - Mend

@standardagents/builder 0.37.6 → 0.37.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (33) hide show

package/dist/runtime.d.ts CHANGED Viewed

@@ -116,7 +116,6 @@ declare function canAccessThread(auth: AuthContext, thread: {
     user_id: string | null;
 }): boolean;
-/** Central API exposure policy shared by the generated Worker router and tests. */
 declare function isHostedInstance(env: Record<string, unknown> | undefined): boolean;
 /**
  * Local-only conveniences are enabled by the request destination, not merely

package/dist/runtime.js CHANGED Viewed

@@ -14963,6 +14963,10 @@ var PUBLIC_ROUTES = /* @__PURE__ */ new Set([
 function isProviderIconRoute(routePath) {
   return /^\/api\/providers\/[^/]+\/icon$/.test(routePath);
 }
+function isPublicThreadFileRoute(routePath, method) {
+  if (method !== "GET" && method !== "HEAD") return false;
+  return /^\/api\/threads\/[^/]+\/public\/.+/.test(routePath);
+}
 function isHostedInstance(env) {
   const value = env?.STANDARD_AGENTS_HOSTED;
   if (typeof value === "string") {
@@ -14989,6 +14993,9 @@ function isPublicApiRoute(routePath, request, env) {
   if (isProviderIconRoute(routePath)) {
     return true;
   }
+  if (isPublicThreadFileRoute(routePath, request.method.toUpperCase())) {
+    return true;
+  }
   if (!isTrustedLocalDevelopmentRequest(request, env)) return false;
   return routePath === "/api/threads" || routePath.startsWith("/api/threads/") || routePath === "/api/platform" || routePath.startsWith("/api/platform/") || routePath === "/api/platform-session" || routePath.startsWith("/api/platform-session/") || routePath === "/api/platform-auth" || routePath.startsWith("/api/platform-auth/");
 }