@standardagents/builder 0.37.6 → 0.37.8

package/dist/runtime.d.ts

@@ -116,7 +116,6 @@ declare function canAccessThread(auth: AuthContext, thread: {
     user_id: string | null;
 }): boolean;
 
-/** Central API exposure policy shared by the generated Worker router and tests. */
 declare function isHostedInstance(env: Record<string, unknown> | undefined): boolean;
 /**
  * Local-only conveniences are enabled by the request destination, not merely

package/dist/runtime.js

@@ -9551,7 +9551,12 @@ ${msg.content}` : `${imageDescriptions}${nonImageList}`;
         const threadState = ThreadStateImpl.fromFlowState(state);
         for (const executor of executors) {
           try {
-            result = await executor(threadState, result);
+            const hooked = await executor(threadState, _FlowEngine.rowToHookMessage(result));
+            result = {
+              ...result,
+              ...hooked,
+              attachments: hooked.attachments === void 0 ? result.attachments : hooked.attachments === null ? null : typeof hooked.attachments === "string" ? hooked.attachments : JSON.stringify(hooked.attachments)
+            };
           } catch (error) {
             console.error("[Hooks] \u2717 Error running before_create_message hook:", error);
           }
@@ -9571,12 +9576,31 @@ ${msg.content}` : `${imageDescriptions}${nonImageList}`;
         const threadState = ThreadStateImpl.fromFlowState(state);
         for (const executor of executors) {
           try {
-            await executor(threadState, message);
+            await executor(threadState, _FlowEngine.rowToHookMessage(message));
           } catch (error) {
             console.error("[Hooks] \u2717 Error running after_create_message hook:", error);
           }
         }
       }
+      /**
+       * Builder rows store `attachments` as a JSON string; the spec hook surface
+       * carries parsed AttachmentRef[]. Convert at every hook boundary so hooks
+       * see the spec shape and cannot corrupt the stored row shape.
+       */
+      static rowToHookMessage(row) {
+        const { attachments, ...rest } = row;
+        let parsed = void 0;
+        if (attachments === null) parsed = null;
+        else if (typeof attachments === "string" && attachments) {
+          try {
+            const p = JSON.parse(attachments);
+            parsed = Array.isArray(p) ? p : void 0;
+          } catch {
+            parsed = void 0;
+          }
+        }
+        return { ...rest, attachments: parsed };
+      }
       /**
        * Run the before_update_message hook if it exists
        * This hook allows developers to modify a message before it's updated
@@ -9615,7 +9639,7 @@ ${msg.content}` : `${imageDescriptions}${nonImageList}`;
         const threadState = ThreadStateImpl.fromFlowState(state);
         for (const executor of executors) {
           try {
-            await executor(threadState, message);
+            await executor(threadState, _FlowEngine.rowToHookMessage(message));
           } catch (error) {
             console.error("[Hooks] \u2717 Error running after_update_message hook:", error);
           }
@@ -10704,7 +10728,11 @@ ${msg.content}` : `${imageDescriptions}${nonImageList}`;
         const threadState = ThreadStateImpl.fromFlowState(state);
         for (const executor of executors) {
           try {
-            result = await executor(threadState, result);
+            const byId = /* @__PURE__ */ new Map();
+            for (const row of result) if (row.id) byId.set(row.id, row);
+            const hookView = result.map((row) => _FlowEngine.rowToHookMessage(row));
+            const kept = await executor(threadState, hookView);
+            result = kept.map((m) => m.id && byId.get(m.id) || null).filter((row) => row !== null);
           } catch (error) {
             console.error("[Hooks] \u2717 Error running filter_messages hook:", error);
           }
@@ -14291,9 +14319,25 @@ var init_ThreadStateImpl = __esm({
           parent_id: msg.parent_id,
           depth: msg.depth,
           silent: msg.silent,
-          metadata: msg.metadata
+          metadata: msg.metadata,
+          status: msg.status,
+          tool_status: msg.tool_status,
+          attachments: this._parseAttachmentRefs(msg.attachments)
         };
       };
+      /** Builder rows store attachments as a JSON string of AttachmentRef[];
+       *  spec messages carry the parsed refs. Dropping them here is what made
+       *  generated assets invisible to every session_state consumer. */
+      _parseAttachmentRefs = (raw) => {
+        if (!raw) return void 0;
+        if (Array.isArray(raw)) return raw;
+        try {
+          const parsed = JSON.parse(raw);
+          return Array.isArray(parsed) ? parsed : void 0;
+        } catch {
+          return void 0;
+        }
+      };
       _mapFileRecord = (record) => {
         return {
           path: record.path,
@@ -14963,6 +15007,10 @@ var PUBLIC_ROUTES = /* @__PURE__ */ new Set([
 function isProviderIconRoute(routePath) {
   return /^\/api\/providers\/[^/]+\/icon$/.test(routePath);
 }
+function isPublicThreadFileRoute(routePath, method) {
+  if (method !== "GET" && method !== "HEAD") return false;
+  return /^\/api\/threads\/[^/]+\/public\/.+/.test(routePath);
+}
 function isHostedInstance(env) {
   const value = env?.STANDARD_AGENTS_HOSTED;
   if (typeof value === "string") {
@@ -14989,6 +15037,9 @@ function isPublicApiRoute(routePath, request, env) {
   if (isProviderIconRoute(routePath)) {
     return true;
   }
+  if (isPublicThreadFileRoute(routePath, request.method.toUpperCase())) {
+    return true;
+  }
   if (!isTrustedLocalDevelopmentRequest(request, env)) return false;
   return routePath === "/api/threads" || routePath.startsWith("/api/threads/") || routePath === "/api/platform" || routePath.startsWith("/api/platform/") || routePath === "/api/platform-session" || routePath.startsWith("/api/platform-session/") || routePath === "/api/platform-auth" || routePath.startsWith("/api/platform-auth/");
 }