@standardagents/builder 0.38.0 → 0.38.1

package/dist/runtime.d.ts

@@ -1,5 +1,5 @@
-import { j as AuthContext, e as ThreadEnv, w as Agent, y as ThreadMetadata, z as ToolResult, M as Message, o as ClientToolRequest, p as ClientToolResponse, q as ClientStreamRequest, t as ClientStreamResponse, H as FileRecord, F as FlowState, N as FileStats, K as GrepResult, J as AttachmentRef, U as MessageContent, G as Env, x as ThreadInstance } from './index-BBu-Osn5.js';
-export { A as AuthUser, f as BuilderThreadEndpointHandler, C as CLIENT_STREAM_CHUNK_BYTES, u as ClientDuplex, v as ClientForwarding, B as Controller, a as ControllerContext, D as FlowResult, P as ImageContentPart, I as ImageMetadata, L as LLMResponse, Q as MultimodalContent, R as RequestContext, S as StorageBackend, E as TelemetryEvent, O as TextContentPart, b as ThreadEndpointContext, T as ToolCall, g as authenticate, k as callClient, l as callClientStream, c as createThreadEndpointHandler, n as decodeStreamChunk, d as defineController, m as encodeStreamChunk, i as endpointCallerFromAuth, h as requireAdmin, r as requireAuth, s as supportsClientForwarding } from './index-BBu-Osn5.js';
+import { j as AuthContext, e as ThreadEnv, w as Agent, y as ThreadMetadata, z as ToolResult, M as Message, o as ClientToolRequest, p as ClientToolResponse, q as ClientStreamRequest, t as ClientStreamResponse, H as FileRecord, V as SkillStorageScope, F as FlowState, N as FileStats, K as GrepResult, J as AttachmentRef, U as MessageContent, G as Env, x as ThreadInstance } from './index-CF-lgN47.js';
+export { A as AuthUser, f as BuilderThreadEndpointHandler, C as CLIENT_STREAM_CHUNK_BYTES, u as ClientDuplex, v as ClientForwarding, B as Controller, a as ControllerContext, D as FlowResult, P as ImageContentPart, I as ImageMetadata, L as LLMResponse, Q as MultimodalContent, R as RequestContext, S as StorageBackend, E as TelemetryEvent, O as TextContentPart, b as ThreadEndpointContext, T as ToolCall, g as authenticate, k as callClient, l as callClientStream, c as createThreadEndpointHandler, n as decodeStreamChunk, d as defineController, m as encodeStreamChunk, i as endpointCallerFromAuth, h as requireAdmin, r as requireAuth, s as supportsClientForwarding } from './index-CF-lgN47.js';
 import { CodeExecutionOptions, CodeExecutionResult, SubagentRegistryEntry, InjectMessageInput, QueueMessageInput, CredentialGrant, SkillMetadata, SkillFileInput, ModelDefinition as ModelDefinition$1, ToolArgs, PromptTextPart, PromptEnvPart, VariableDefinition, SubpromptConfig as SubpromptConfig$1, PromptToolConfig as PromptToolConfig$1, SubagentToolConfig as SubagentToolConfig$1, ReasoningConfig, SideConfig as SideConfig$1, LLMProviderInterface, ContentPart, TextPart, ImagePart, FilePart, ThreadState, NamespaceContext, DefinitionLoader } from '@standardagents/spec';
 export { AgentType, DefinitionLoader, GlobalNamespaceContext, HookSignatures, ImageContent, ModelCapabilities, ModelProvider, NamespaceContext, PackageSignature, PackedExports, PackedMeta, PackedMetadata, PackedNamespaceContext, PromptInput, PromptTextPart, ProviderAssistantMessage, ProviderError, ProviderErrorCode, ProviderFactory, ProviderFactoryConfig, ProviderFinishReason, ProviderGeneratedImage, ProviderMessage, ProviderMessageContent, ModelCapabilities as ProviderModelCapabilities, ProviderReasoningDetail, ProviderRequest, ProviderResponse, ProviderStreamChunk, ProviderSystemMessage, ProviderTool, ProviderToolCallPart, ProviderToolMessage, ProviderToolResultContent, ProviderUsage, ProviderUserMessage, ReasoningConfig, StructuredPrompt, TextContent, Tool, ToolArgs, ToolArgsNode, ToolArgsRawShape, ToolContent, belongsToPackage, defineAgent, defineHook, defineModel, definePrompt, defineTool, isPacked, isVisibleInNamespace, mapReasoningLevel } from '@standardagents/spec';
 import { DurableObject, WorkerEntrypoint } from 'cloudflare:workers';
@@ -117,7 +117,7 @@ declare function canAccessThread(auth: AuthContext, thread: {
 }): boolean;
 
 /** Central API exposure policy shared by the generated Worker router and tests. */
-declare function isHostedInstance(env: Record<string, unknown> | undefined): boolean;
+declare function isHostedInstance(env: unknown): boolean;
 /**
  * Local-only conveniences are enabled by the request destination, not merely
  * by the absence of a deployment flag. This makes an incorrectly configured
@@ -125,9 +125,23 @@ declare function isHostedInstance(env: Record<string, unknown> | undefined): boo
  */
 declare function isTrustedLocalDevelopmentRequest(request: Request, env: Record<string, unknown> | undefined): boolean;
 declare function isPublicApiRoute(routePath: string, request: Request, env: Record<string, unknown> | undefined): boolean;
+/**
+ * Reject browser requests initiated by another origin. Requests without
+ * browser provenance headers remain available to local CLI/test clients; they
+ * still need the normal route credential once bootstrap has completed.
+ *
+ * `Sec-Fetch-Site: same-origin` is a forbidden header, so a real browser that
+ * sends it is attesting same-origin even when a local reverse proxy rewrote
+ * `request.url`. Page JavaScript cannot forge that header.
+ */
+declare function isSameOriginBrowserRequest(request: Request): boolean;
 /** Instance-global authoring and package-management surfaces are admin-only. */
 declare function isAdminOnlyApiRoute(routePath: string, method?: string): boolean;
 
+declare function runtimeCorsHeaders(request: Request, env: Record<string, unknown> | undefined): Record<string, string>;
+declare function applyRuntimeCors(response: Response, request: Request, env: Record<string, unknown> | undefined): Response;
+declare function runtimePreflightResponse(request: Request, env: Record<string, unknown> | undefined): Response;
+
 type AlarmQueueStatus = "pending" | "processing" | "completed" | "failed" | "agent_canceled" | "user_canceled";
 type EffectCancelSource = "agent" | "user";
 interface EffectRunRecord {
@@ -183,6 +197,7 @@ interface CodeExecutionBridgeRegistration {
     call(functionId: string, encodedArgs: unknown[]): Promise<unknown>;
 }
 
+declare const INTERNAL_TOOL_DELIVERY: unique symbol;
 type ThreadEndpointCodeOptions = Pick<CodeExecutionOptions, "language" | "filename" | "execute" | "modules" | "memoryLimitBytes">;
 /**
  * Result of one watchdog assessment (see performWatchdogAssessment). Returned
@@ -1208,7 +1223,7 @@ declare class DurableThread<Env extends ThreadEnv = ThreadEnv> extends DurableOb
      * call resolved. Returns the side to continue, or null if there is no pending
      * call (unknown id or already resolved — the delivery is idempotent).
      */
-    deliverClientToolResult(toolCallId: string, ok: boolean, result?: string, error?: string, deliveredByClientId?: string, deliveredGeneration?: number): Promise<{
+    deliverClientToolResult(toolCallId: string, ok: boolean, result?: string, error?: string, deliveredByClientId?: string, deliveredGeneration?: number, deliveryToken?: string, internalAuthorization?: typeof INTERNAL_TOOL_DELIVERY): Promise<{
         side: "a" | "b";
     } | null>;
     /** Default time to wait for the client to accept a stream open. */
@@ -2583,6 +2598,48 @@ declare class DurableAgentBuilder<Env extends AgentBuilderEnv = AgentBuilderEnv>
      * Delete a session.
      */
     deleteSession(tokenHash: string): Promise<void>;
+    /** Register a short-lived super-admin token so it can be revoked alone. */
+    createSuperAdminSession(params: {
+        token_hash: string;
+        expires_at: number;
+    }): Promise<void>;
+    /** A valid signature is insufficient: the session must still be registered. */
+    validateSuperAdminSession(tokenHash: string): Promise<boolean>;
+    /** Revoke only the presented super-admin session; no key rotation required. */
+    deleteSuperAdminSession(tokenHash: string): Promise<void>;
+    /** Register a path-bound bearer ticket for one WebSocket handshake. */
+    createWebSocketTicket(params: {
+        ticket_hash: string;
+        pathname: string;
+        auth_json: string;
+        expires_at: number;
+    }): Promise<void>;
+    /**
+     * Atomically consume a WebSocket ticket. Deleting before validating its path
+     * means even a mistaken or malicious first presentation burns the bearer.
+     */
+    consumeWebSocketTicket(params: {
+        ticket_hash: string;
+        pathname: string;
+    }): Promise<string | null>;
+    /** Atomically accept an unexpired platform handoff identifier once. */
+    consumePlatformHandoffJti(params: {
+        jti: string;
+        expires_at: number;
+    }): Promise<boolean>;
+    /**
+     * Atomically consume one attempt from a fixed-window authentication bucket.
+     * The singleton Durable Object serializes calls, preventing parallel bypass.
+     */
+    consumeAuthRateLimit(params: {
+        key: string;
+        limit: number;
+        window_seconds: number;
+    }): Promise<{
+        allowed: boolean;
+        retry_after: number;
+        remaining: number;
+    }>;
     /**
      * Create an API key.
      */
@@ -2699,22 +2756,22 @@ declare class DurableAgentBuilder<Env extends AgentBuilderEnv = AgentBuilderEnv>
      */
     webSocketError(ws: WebSocket, error: unknown): Promise<void>;
     /** Installed skills, metadata only (no file contents). */
-    listSkills(options?: {
+    listSkills(scope: SkillStorageScope, options?: {
         includeDisabled?: boolean;
     }): Promise<SkillMetadata[]>;
     /** One skill's metadata (null when not installed). */
-    getSkill(name: string): Promise<SkillMetadata | null>;
+    getSkill(scope: SkillStorageScope, name: string): Promise<SkillMetadata | null>;
     /** One bundled file's text (null when the skill or file is missing). */
-    getSkillFile(name: string, path: string): Promise<string | null>;
+    getSkillFile(scope: SkillStorageScope, name: string, path: string): Promise<string | null>;
     /**
      * Install (or replace) a skill from its file set. Validates the payload and
      * the root SKILL.md frontmatter; the skill's identity always comes from
      * that frontmatter. Throws SkillValidationError with an actionable message
      * on any standard violation.
      */
-    upsertSkill(files: SkillFileInput[]): Promise<SkillMetadata>;
+    upsertSkill(scope: SkillStorageScope, files: SkillFileInput[]): Promise<SkillMetadata>;
     /** Enable/disable an installed skill. Returns false when not installed. */
-    setSkillEnabled(name: string, enabled: boolean): Promise<boolean>;
+    setSkillEnabled(scope: SkillStorageScope, name: string, enabled: boolean): Promise<boolean>;
     private sweepDeviceLogins;
     startDeviceLogin(codeHash: string): Promise<void>;
     /** Poll a device login. An approved row returns its token exactly once. */
@@ -2735,7 +2792,7 @@ declare class DurableAgentBuilder<Env extends AgentBuilderEnv = AgentBuilderEnv>
         key_name: string;
     }): Promise<boolean>;
     /** Uninstall a skill and its files. Returns false when not installed. */
-    deleteSkill(name: string): Promise<boolean>;
+    deleteSkill(scope: SkillStorageScope, name: string): Promise<boolean>;
 }
 
 interface CodeExecutionBridgeProps {
@@ -4303,4 +4360,4 @@ declare function createNamespaceContext(agentDef: {
  */
 declare function isQualifiedName(name: string): boolean;
 
-export { Agent, type AgentBuilderEnv, type AgentBuilderEvent, type AgentDefinition, AttachmentRef, AuthContext, type BroadcastOptions, ClientStreamRequest, ClientStreamResponse, ClientToolRequest, ClientToolResponse, CodeExecutionBridge, DurableAgentBuilder, DurableThread, DurableUserHub, Env, FileRecord, FileStats, FlowState, FlowStateSdk, type FlowStateWithSdk, GrepResult, type HubClientInfo, type ImageContextConfig, type InjectMessageOptions$1 as InjectMessageOptions, type Provider as LLMProviderInterface, Message, MessageContent, type ModelDefinition, NamespaceResolutionError, NamespacedRegistry, type PromptContent, type PromptDefinition, type PromptIncludePart, type PromptPart, type PromptToolConfig, type Provider$1 as Provider, type ProviderContentPart, type ProviderFilePart, type ProviderImagePart, ProviderRegistry, type ProviderTextPart, type SessionToolBinding, type SessionToolConfig, type SideConfig, type SubagentToolConfig, type SubpromptConfig, ThreadEnv, type ThreadEventPayload, ThreadInstance, ThreadMetadata, type ThreadRegistryEntry, ThreadWatchdog, type ThreadWatchdogState, type ToolConfig, ToolResult, type UpdateThreadParams, type User, type WatchdogCheckin, type WatchdogProbeResult, buildImageDescription, canAccessThread, cat, createNamespaceContext, emitThreadEvent, enhanceFlowState, exists, find, forceTurn, generateImageDescription, getFileStats, getMessages, getMessagesToSummarize, getShortName, getThumbnail, getUnsummarizedImageAttachments, getVisibleAgentNames, getVisibleModelNames, getVisiblePromptNames, getVisibleToolNames, grep, hasImageAttachments, head, injectMessage, isAdminOnlyApiRoute, isHostedInstance, isPublicApiRoute, isQualifiedName, isTrustedLocalDevelopmentRequest, linkFile, mkdir, move, optimizeImageContext, parseQualifiedName, qualifyName, queueTool, readFile, readdir, reloadHistory, rename, replaceImagesWithDescriptions, resolveAgent, resolveHook, resolveModel, resolvePrompt, resolveTool, rmdir, stat, tail, unlink, updateThread, writeFile, writeImage };
+export { Agent, type AgentBuilderEnv, type AgentBuilderEvent, type AgentDefinition, AttachmentRef, AuthContext, type BroadcastOptions, ClientStreamRequest, ClientStreamResponse, ClientToolRequest, ClientToolResponse, CodeExecutionBridge, DurableAgentBuilder, DurableThread, DurableUserHub, Env, FileRecord, FileStats, FlowState, FlowStateSdk, type FlowStateWithSdk, GrepResult, type HubClientInfo, type ImageContextConfig, type InjectMessageOptions$1 as InjectMessageOptions, type Provider as LLMProviderInterface, Message, MessageContent, type ModelDefinition, NamespaceResolutionError, NamespacedRegistry, type PromptContent, type PromptDefinition, type PromptIncludePart, type PromptPart, type PromptToolConfig, type Provider$1 as Provider, type ProviderContentPart, type ProviderFilePart, type ProviderImagePart, ProviderRegistry, type ProviderTextPart, type SessionToolBinding, type SessionToolConfig, type SideConfig, type SubagentToolConfig, type SubpromptConfig, ThreadEnv, type ThreadEventPayload, ThreadInstance, ThreadMetadata, type ThreadRegistryEntry, ThreadWatchdog, type ThreadWatchdogState, type ToolConfig, ToolResult, type UpdateThreadParams, type User, type WatchdogCheckin, type WatchdogProbeResult, applyRuntimeCors, buildImageDescription, canAccessThread, cat, createNamespaceContext, emitThreadEvent, enhanceFlowState, exists, find, forceTurn, generateImageDescription, getFileStats, getMessages, getMessagesToSummarize, getShortName, getThumbnail, getUnsummarizedImageAttachments, getVisibleAgentNames, getVisibleModelNames, getVisiblePromptNames, getVisibleToolNames, grep, hasImageAttachments, head, injectMessage, isAdminOnlyApiRoute, isHostedInstance, isPublicApiRoute, isQualifiedName, isSameOriginBrowserRequest, isTrustedLocalDevelopmentRequest, linkFile, mkdir, move, optimizeImageContext, parseQualifiedName, qualifyName, queueTool, readFile, readdir, reloadHistory, rename, replaceImagesWithDescriptions, resolveAgent, resolveHook, resolveModel, resolvePrompt, resolveTool, rmdir, runtimeCorsHeaders, runtimePreflightResponse, stat, tail, unlink, updateThread, writeFile, writeImage };