@standardagents/builder 0.37.8 → 0.38.1

package/dist/{index-Lfan8QMN.d.ts → index-CF-lgN47.d.ts}

@@ -1,7 +1,7 @@
 import { DurableObjectStorage } from '@cloudflare/workers-types';
 import { ZodObject, ZodRawShape } from 'zod';
 import { N as NamespacedRegistry } from './types-Bpe7IANZ.js';
-import { ThreadState, ToolResult as ToolResult$1, VariableDefinition, HookName, HookSignatures, HookMessage, HookToolCall, HookToolResult, CodeExecutionOptions, CodeExecutionResult, InjectMessageInput, QueueMessageInput, SubagentRegistryEntry, ProviderUsagePricing, AgentDefinition, SkillMetadata, SkillFileInput, ControllerContext, Controller, ThreadEndpointHandler } from '@standardagents/spec';
+import { ThreadState, ToolResult as ToolResult$1, VariableDefinition, HookName, HookSignatures, HookMessage, HookToolCall, HookToolResult, CodeExecutionOptions, CodeExecutionResult, InjectMessageInput, QueueMessageInput, SubagentRegistryEntry, ProviderUsagePricing, ThreadUser, AgentDefinition, SkillMetadata, SkillFileInput, ControllerContext, Controller, ThreadEndpointHandler } from '@standardagents/spec';
 
 /**
  * Callback function to execute before stream closes
@@ -1112,6 +1112,12 @@ interface FileStats {
     fileCount: number;
 }
 
+/** Internal storage scope. ThreadState uses its owner id and may read shared skills. */
+interface SkillStorageScope {
+    ownerId: string;
+    includeShared?: boolean;
+}
+
 /**
  * Authentication middleware for protecting API routes
  *
@@ -1120,6 +1126,7 @@ interface FileStats {
  * - User session token (validated against DurableAgentBuilder)
  * - API key (validated against DurableAgentBuilder)
  */
+
 interface AuthUser {
     id: string;
     username: string;
@@ -1138,16 +1145,29 @@ interface AuthUser {
 interface AuthContext {
     user: AuthUser;
     authType: 'super_admin' | 'session' | 'api_key';
+    /** Present only for API-key authentication; identifies the exact credential used. */
+    credentialId?: string;
 }
+/**
+ * Project an authenticated request onto the spec's endpoint caller identity
+ * (`ThreadEndpointAuth.caller` / `ControllerContext.caller`). Returns exactly
+ * the spec `ThreadUser` fields — internal extras like `platform_user_id`
+ * never reach endpoint code.
+ */
+declare function endpointCallerFromAuth(auth: AuthContext | null | undefined): ThreadUser | null;
+type AuthenticationEnv = Pick<ThreadEnv, 'AGENT_BUILDER'> & {
+    SUPER_ADMIN_PASSWORD?: unknown;
+    ENCRYPTION_KEY?: unknown;
+};
 /**
  * Authenticate a request using various token types
  */
-declare function authenticate(request: Request, env: any): Promise<AuthContext | null>;
+declare function authenticate(request: Request, env: AuthenticationEnv): Promise<AuthContext | null>;
 /**
  * Middleware to require authentication
  * Returns 401 if not authenticated
  */
-declare function requireAuth(request: Request, env: any): Promise<AuthContext | Response>;
+declare function requireAuth(request: Request, env: AuthenticationEnv): Promise<AuthContext | Response>;
 /**
  * Middleware to require admin role
  * Returns 401 if not authenticated, 403 if not admin
@@ -1176,7 +1196,7 @@ declare function requireAdmin(request: Request, env: any): Promise<AuthContext |
  *   lookup + access check.
  * - Permission-specific checks stay at the operation boundary: reusing the
  *   authenticated identity never implies a permission; helpers re-evaluate
- *   `hasPermission`/role against the reused context on every call.
+ *   `hasPermissionInEnvironment`/role against the reused context on every call.
  * - Controllers invoked WITHOUT router context (direct tests, standalone
  *   invocation, trusted-local public routes) execute their historical
  *   authentication path unchanged.
@@ -1526,6 +1546,18 @@ interface ThreadRegistryEntry {
     /** Unix seconds of the newest message on this thread (never bumped by background activity). */
     last_message_at?: number | null;
 }
+/** Authentication fields returned by the instance user lookup RPC. */
+interface AuthenticationUser {
+    id: string;
+    username: string;
+    password_hash: string;
+    role: 'admin' | 'user' | 'api';
+    permissions?: string | null;
+    platform_user_id?: string | null;
+    email?: string | null;
+    display_name?: string | null;
+    avatar_url?: string | null;
+}
 /**
  * RPC methods exposed by DurableAgentBuilder for external callers.
  */
@@ -1556,14 +1588,16 @@ interface DurableAgentBuilderRpc {
         last_five: string;
         key_name: string;
     }): Promise<boolean>;
-    listSkills(options?: {
+    /** Delete one API key owned by the given user. */
+    deleteApiKey(id: string, userId: string): Promise<boolean>;
+    listSkills(scope: SkillStorageScope, options?: {
         includeDisabled?: boolean;
     }): Promise<SkillMetadata[]>;
-    getSkill(name: string): Promise<SkillMetadata | null>;
-    getSkillFile(name: string, path: string): Promise<string | null>;
-    upsertSkill(files: SkillFileInput[]): Promise<SkillMetadata>;
-    setSkillEnabled(name: string, enabled: boolean): Promise<boolean>;
-    deleteSkill(name: string): Promise<boolean>;
+    getSkill(scope: SkillStorageScope, name: string): Promise<SkillMetadata | null>;
+    getSkillFile(scope: SkillStorageScope, name: string, path: string): Promise<string | null>;
+    upsertSkill(scope: SkillStorageScope, files: SkillFileInput[]): Promise<SkillMetadata>;
+    setSkillEnabled(scope: SkillStorageScope, name: string, enabled: boolean): Promise<boolean>;
+    deleteSkill(scope: SkillStorageScope, name: string): Promise<boolean>;
     resolveThreadEnv?(params: {
         threadId: string;
         property: string;
@@ -1741,12 +1775,47 @@ interface DurableAgentBuilderRpc {
     }): Promise<void>;
     getThreadTreeIds?(threadId: string): Promise<string[]>;
     deleteThread(threadId: string): Promise<void>;
-    getUserByUsername(username: string): Promise<unknown>;
+    getUserByUsername(username: string): Promise<AuthenticationUser | null>;
+    getUserById(id: string): Promise<AuthenticationUser | null>;
     createSession(session: {
         user_id: string;
         token_hash: string;
         expires_at: number;
     }): Promise<void>;
+    validateSession(tokenHash: string): Promise<{
+        user_id: string;
+        expires_at: number;
+    } | null>;
+    deleteSession(tokenHash: string): Promise<void>;
+    createSuperAdminSession(session: {
+        token_hash: string;
+        expires_at: number;
+    }): Promise<void>;
+    validateSuperAdminSession(tokenHash: string): Promise<boolean>;
+    deleteSuperAdminSession(tokenHash: string): Promise<void>;
+    createWebSocketTicket(params: {
+        ticket_hash: string;
+        pathname: string;
+        auth_json: string;
+        expires_at: number;
+    }): Promise<void>;
+    consumeWebSocketTicket(params: {
+        ticket_hash: string;
+        pathname: string;
+    }): Promise<string | null>;
+    validateApiKey(keyHash: string): Promise<{
+        user_id: string;
+        id: string;
+    } | null>;
+    consumeAuthRateLimit(params: {
+        key: string;
+        limit: number;
+        window_seconds: number;
+    }): Promise<{
+        allowed: boolean;
+        retry_after: number;
+        remaining: number;
+    }>;
     loadAgent(name: string): Promise<AgentDefinition>;
 }
 /**
@@ -1758,6 +1827,8 @@ interface DurableAgentBuilderRpc {
 interface ThreadEnv {
     AGENT_BUILDER_THREAD: DurableObjectNamespace<DurableThreadRpc>;
     AGENT_BUILDER: DurableObjectNamespace<DurableAgentBuilderRpc>;
+    /** Exact public HTTPS hosts allowed for server-side linked-attachment fetches. */
+    AGENT_BUILDER_ATTACHMENT_FETCH_HOSTS?: string;
     /** Optional: deployments generated before 0.26.0 lack this binding. */
     AGENT_BUILDER_WATCHDOG?: DurableObjectNamespace<ThreadWatchdogRpc>;
     /** Optional: deployments generated before the per-user hub lack this binding. */
@@ -1851,4 +1922,4 @@ declare function defineController<Env extends ThreadEnv = ThreadEnv>(controller:
  */
 declare function createThreadEndpointHandler<Env extends ThreadEnv = ThreadEnv>(handler: ThreadEndpointHandler): BuilderController<Env>;
 
-export { type AuthUser as A, type BuilderController as B, CLIENT_STREAM_CHUNK_BYTES as C, type TelemetryEvent as D, type Env as E, type FlowState as F, type FileRecord as G, type AttachmentRef as H, type ImageMetadata as I, type GrepResult as J, type FileStats as K, type LLMResponse as L, type Message as M, type TextContentPart as N, type ImageContentPart as O, type MultimodalContent as P, type MessageContent as Q, type RequestContext as R, type StorageBackend as S, type ToolCall as T, type BuilderControllerContext as a, type ThreadEndpointContext as b, createThreadEndpointHandler as c, defineController as d, type ThreadEnv as e, type BuilderThreadEndpointHandler as f, authenticate as g, requireAdmin as h, type AuthContext as i, callClient as j, callClientStream as k, encodeStreamChunk as l, decodeStreamChunk as m, type ClientToolRequest as n, type ClientToolResponse as o, type ClientStreamRequest as p, type ClientStreamResponse as q, requireAuth as r, supportsClientForwarding as s, type ClientDuplex as t, type ClientForwarding as u, type Agent as v, type ThreadInstance as w, type ThreadMetadata as x, type ToolResult as y, type FlowResult as z };
+export { type AuthUser as A, type BuilderController as B, CLIENT_STREAM_CHUNK_BYTES as C, type FlowResult as D, type TelemetryEvent as E, type FlowState as F, type Env as G, type FileRecord as H, type ImageMetadata as I, type AttachmentRef as J, type GrepResult as K, type LLMResponse as L, type Message as M, type FileStats as N, type TextContentPart as O, type ImageContentPart as P, type MultimodalContent as Q, type RequestContext as R, type StorageBackend as S, type ToolCall as T, type MessageContent as U, type SkillStorageScope as V, type BuilderControllerContext as a, type ThreadEndpointContext as b, createThreadEndpointHandler as c, defineController as d, type ThreadEnv as e, type BuilderThreadEndpointHandler as f, authenticate as g, requireAdmin as h, endpointCallerFromAuth as i, type AuthContext as j, callClient as k, callClientStream as l, encodeStreamChunk as m, decodeStreamChunk as n, type ClientToolRequest as o, type ClientToolResponse as p, type ClientStreamRequest as q, requireAuth as r, supportsClientForwarding as s, type ClientStreamResponse as t, type ClientDuplex as u, type ClientForwarding as v, type Agent as w, type ThreadInstance as x, type ThreadMetadata as y, type ToolResult as z };

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { ModelDefinition, AgentDefinition } from './runtime.js';
-export { AgentBuilderEnv, AgentBuilderEvent, BroadcastOptions, CodeExecutionBridge, DurableAgentBuilder, DurableThread, DurableUserHub, FlowStateSdk, FlowStateWithSdk, HubClientInfo, ImageContextConfig, InjectMessageOptions, LLMProviderInterface, NamespaceResolutionError, PromptContent, PromptDefinition, PromptIncludePart, PromptPart, PromptToolConfig, Provider, ProviderContentPart, ProviderFilePart, ProviderImagePart, ProviderRegistry, ProviderTextPart, SessionToolBinding, SessionToolConfig, SideConfig, SubagentToolConfig, SubpromptConfig, ThreadEventPayload, ThreadRegistryEntry, ThreadWatchdog, ThreadWatchdogState, ToolConfig, UpdateThreadParams, User, WatchdogCheckin, WatchdogProbeResult, buildImageDescription, canAccessThread, cat, createNamespaceContext, emitThreadEvent, enhanceFlowState, exists, find, forceTurn, generateImageDescription, getFileStats, getMessages, getMessagesToSummarize, getShortName, getThumbnail, getUnsummarizedImageAttachments, getVisibleAgentNames, getVisibleModelNames, getVisiblePromptNames, getVisibleToolNames, grep, hasImageAttachments, head, injectMessage, isAdminOnlyApiRoute, isHostedInstance, isPublicApiRoute, isQualifiedName, isTrustedLocalDevelopmentRequest, linkFile, mkdir, move, optimizeImageContext, parseQualifiedName, qualifyName, queueTool, readFile, readdir, reloadHistory, rename, replaceImagesWithDescriptions, resolveAgent, resolveHook, resolveModel, resolvePrompt, resolveTool, rmdir, stat, tail, unlink, updateThread, writeFile, writeImage } from './runtime.js';
+export { AgentBuilderEnv, AgentBuilderEvent, BroadcastOptions, CodeExecutionBridge, DurableAgentBuilder, DurableThread, DurableUserHub, FlowStateSdk, FlowStateWithSdk, HubClientInfo, ImageContextConfig, InjectMessageOptions, LLMProviderInterface, NamespaceResolutionError, PromptContent, PromptDefinition, PromptIncludePart, PromptPart, PromptToolConfig, Provider, ProviderContentPart, ProviderFilePart, ProviderImagePart, ProviderRegistry, ProviderTextPart, SessionToolBinding, SessionToolConfig, SideConfig, SubagentToolConfig, SubpromptConfig, ThreadEventPayload, ThreadRegistryEntry, ThreadWatchdog, ThreadWatchdogState, ToolConfig, UpdateThreadParams, User, WatchdogCheckin, WatchdogProbeResult, applyRuntimeCors, buildImageDescription, canAccessThread, cat, createNamespaceContext, emitThreadEvent, enhanceFlowState, exists, find, forceTurn, generateImageDescription, getFileStats, getMessages, getMessagesToSummarize, getShortName, getThumbnail, getUnsummarizedImageAttachments, getVisibleAgentNames, getVisibleModelNames, getVisiblePromptNames, getVisibleToolNames, grep, hasImageAttachments, head, injectMessage, isAdminOnlyApiRoute, isHostedInstance, isPublicApiRoute, isQualifiedName, isSameOriginBrowserRequest, isTrustedLocalDevelopmentRequest, linkFile, mkdir, move, optimizeImageContext, parseQualifiedName, qualifyName, queueTool, readFile, readdir, reloadHistory, rename, replaceImagesWithDescriptions, resolveAgent, resolveHook, resolveModel, resolvePrompt, resolveTool, rmdir, runtimeCorsHeaders, runtimePreflightResponse, stat, tail, unlink, updateThread, writeFile, writeImage } from './runtime.js';
 export { AgentPluginOptions, agentbuilder, builder } from './plugin.js';
-export { v as Agent, H as AttachmentRef, i as AuthContext, A as AuthUser, f as BuilderThreadEndpointHandler, C as CLIENT_STREAM_CHUNK_BYTES, t as ClientDuplex, u as ClientForwarding, p as ClientStreamRequest, q as ClientStreamResponse, n as ClientToolRequest, o as ClientToolResponse, B as Controller, a as ControllerContext, E as Env, G as FileRecord, K as FileStats, z as FlowResult, F as FlowState, J as GrepResult, O as ImageContentPart, I as ImageMetadata, L as LLMResponse, M as Message, Q as MessageContent, P as MultimodalContent, R as RequestContext, S as StorageBackend, D as TelemetryEvent, N as TextContentPart, b as ThreadEndpointContext, e as ThreadEnv, w as ThreadInstance, x as ThreadMetadata, T as ToolCall, y as ToolResult, g as authenticate, j as callClient, k as callClientStream, c as createThreadEndpointHandler, m as decodeStreamChunk, d as defineController, l as encodeStreamChunk, h as requireAdmin, r as requireAuth, s as supportsClientForwarding } from './index-Lfan8QMN.js';
+export { w as Agent, J as AttachmentRef, j as AuthContext, A as AuthUser, f as BuilderThreadEndpointHandler, C as CLIENT_STREAM_CHUNK_BYTES, u as ClientDuplex, v as ClientForwarding, q as ClientStreamRequest, t as ClientStreamResponse, o as ClientToolRequest, p as ClientToolResponse, B as Controller, a as ControllerContext, G as Env, H as FileRecord, N as FileStats, D as FlowResult, F as FlowState, K as GrepResult, P as ImageContentPart, I as ImageMetadata, L as LLMResponse, M as Message, U as MessageContent, Q as MultimodalContent, R as RequestContext, S as StorageBackend, E as TelemetryEvent, O as TextContentPart, b as ThreadEndpointContext, e as ThreadEnv, x as ThreadInstance, y as ThreadMetadata, T as ToolCall, z as ToolResult, g as authenticate, k as callClient, l as callClientStream, c as createThreadEndpointHandler, n as decodeStreamChunk, d as defineController, m as encodeStreamChunk, i as endpointCallerFromAuth, h as requireAdmin, r as requireAuth, s as supportsClientForwarding } from './index-CF-lgN47.js';
 export { AgentType, DefinitionLoader, GlobalNamespaceContext, HookSignatures, ImageContent, ModelCapabilities, ModelProvider, NamespaceContext, PackageSignature, PackedExports, PackedMeta, PackedMetadata, PackedNamespaceContext, PromptInput, PromptTextPart, ProviderAssistantMessage, ProviderConfigSlot, ProviderConfigSlots, ProviderConfigValueSource, ProviderDefinition, ProviderError, ProviderErrorCode, ProviderFactory, ProviderFactoryConfig, ProviderFinishReason, ProviderGeneratedImage, ProviderMessage, ProviderMessageContent, ProviderMethodOverrides, ModelCapabilities as ProviderModelCapabilities, ProviderOverride, ProviderOverrideContext, ProviderReasoningDetail, ProviderRequest, ProviderResponse, ProviderStreamChunk, ProviderSyncOverride, ProviderSystemMessage, ProviderTool, ProviderToolCallPart, ProviderToolMessage, ProviderToolResultContent, ProviderUsage, ProviderUserMessage, ReasoningConfig, StructuredPrompt, TextContent, Tool, ToolArgs, ToolArgsNode, ToolArgsRawShape, ToolContent, belongsToPackage, defineAgent, defineHook, defineModel, definePrompt, defineProvider, defineTool, isPacked, isVisibleInNamespace, mapReasoningLevel, providerConst, providerEnv, providerValue } from '@standardagents/spec';
 export { C as ConstituentItem, D as DiscoveredPackage, N as NamespacedRegistry, P as PackingAnalysis, a as PackingOptions, b as PackingResult, c as UnpackOptions, d as UnpackResult } from './types-Bpe7IANZ.js';
 export { D as DiscoveryConfig, P as PackageDiscoveryService, d as discoverPackages } from './discovery-DiMJWisl.js';