@standardagents/builder 0.38.1 → 0.38.2

package/dist/built-in-routes.js

@@ -68323,7 +68323,7 @@ var config_get_default = defineController2(async ({ config, env: env2, req }) =>
 });
 
 // src/version.ts
-var BUILDER_VERSION = "0.38.1".length > 0 ? "0.38.1" : "dev";
+var BUILDER_VERSION = "0.38.2".length > 0 ? "0.38.2" : "dev";
 
 // src/api/diagnostics.get.ts
 init_LLMRequest();
@@ -68442,6 +68442,35 @@ function resolveStreamTimeoutValue(env2, key, fallback) {
   return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
 }
 
+// src/middleware/request-auth.ts
+async function resolveRequestAuth(context) {
+  if (context.auth) return context.auth;
+  if (!isAuthenticationEnv(context.env)) {
+    return new Response(JSON.stringify({ error: "Unauthorized" }), {
+      status: 401,
+      headers: { "Content-Type": "application/json" }
+    });
+  }
+  return requireAuth(context.req, context.env);
+}
+async function resolveRequestPermission(context, permission) {
+  if (context.auth) {
+    if (!hasPermissionInEnvironment(context.auth.user, permission, context.env)) {
+      return Response.json(
+        { error: `Forbidden: '${permission}' access required` },
+        { status: 403 }
+      );
+    }
+    return context.auth;
+  }
+  return requirePermission(context.req, context.env, permission);
+}
+function routerAuthorizedThread(context, threadId) {
+  const access = context.threadAccess;
+  if (!access || !threadId) return null;
+  return access.threadId === threadId ? access.thread : null;
+}
+
 // src/events/access.ts
 var EVENT_STREAM_USER_ID_HEADER = "X-Standard-Agents-Event-User-Id";
 var EVENT_STREAM_SCOPE_HEADER = "X-Standard-Agents-Event-Scope";
@@ -68473,8 +68502,9 @@ function resolveEventStreamSubscription(request, auth) {
 }
 
 // src/api/events.get.ts
-var events_get_default = defineController2(async ({ req, env: env2 }) => {
-  const authResult = await requireAuth(req, env2);
+var events_get_default = defineController2(async (context) => {
+  const { req, env: env2 } = context;
+  const authResult = await resolveRequestAuth(context);
   if (authResult instanceof Response) {
     return authResult;
   }
@@ -68503,9 +68533,10 @@ var events_get_default = defineController2(async ({ req, env: env2 }) => {
     const stub = env2.AGENT_BUILDER.get(agentBuilderId);
     return await stub.fetch(authenticatedUpgrade);
   } catch (error) {
+    const message = error instanceof Error ? error.message : "Failed to establish WebSocket connection";
     console.error("Error establishing events WebSocket:", error);
     return Response.json(
-      { error: error.message || "Failed to establish WebSocket connection" },
+      { error: message },
       { status: 500 }
     );
   }
@@ -70840,35 +70871,6 @@ var id_patch_default = defineController2(async ({ req, env: env2, params }) => {
   }
 });
 
-// src/middleware/request-auth.ts
-async function resolveRequestAuth(context) {
-  if (context.auth) return context.auth;
-  if (!isAuthenticationEnv(context.env)) {
-    return new Response(JSON.stringify({ error: "Unauthorized" }), {
-      status: 401,
-      headers: { "Content-Type": "application/json" }
-    });
-  }
-  return requireAuth(context.req, context.env);
-}
-async function resolveRequestPermission(context, permission) {
-  if (context.auth) {
-    if (!hasPermissionInEnvironment(context.auth.user, permission, context.env)) {
-      return Response.json(
-        { error: `Forbidden: '${permission}' access required` },
-        { status: 403 }
-      );
-    }
-    return context.auth;
-  }
-  return requirePermission(context.req, context.env, permission);
-}
-function routerAuthorizedThread(context, threadId) {
-  const access = context.threadAccess;
-  if (!access || !threadId) return null;
-  return access.threadId === threadId ? access.thread : null;
-}
-
 // src/api/threads/[id].ts
 function resolveIconUrl2(icon, origin) {
   if (!icon) return void 0;
@@ -73832,8 +73834,9 @@ var tools_get_default2 = defineController2(async ({ params, url }) => {
 });
 
 // src/api/threads/[id]/bridge.ts
-var bridge_default = defineController2(async ({ req, params, env: env2 }) => {
-  const authResult = await requireAuth(req, env2);
+var bridge_default = defineController2(async (context) => {
+  const { req, params, env: env2 } = context;
+  const authResult = await resolveRequestAuth(context);
   if (authResult instanceof Response) {
     return authResult;
   }
@@ -73848,22 +73851,31 @@ var bridge_default = defineController2(async ({ req, params, env: env2 }) => {
     );
   }
   try {
-    const agentBuilderId = env2.AGENT_BUILDER.idFromName("singleton");
-    const agentBuilder = env2.AGENT_BUILDER.get(agentBuilderId);
-    const thread = await agentBuilder.getThread(threadId);
-    if (!thread) {
-      return Response.json(
-        { error: `Thread not found: ${threadId}` },
-        { status: 404 }
-      );
+    if (!routerAuthorizedThread(context, threadId)) {
+      const agentBuilderId = env2.AGENT_BUILDER.idFromName("singleton");
+      const agentBuilder = env2.AGENT_BUILDER.get(agentBuilderId);
+      const thread = await agentBuilder.getThread(threadId);
+      if (!thread) {
+        return Response.json(
+          { error: `Thread not found: ${threadId}` },
+          { status: 404 }
+        );
+      }
+      if (!canAccessThread(authResult, thread)) {
+        return Response.json(
+          { error: "Forbidden: You don't have access to this thread" },
+          { status: 403 }
+        );
+      }
     }
     const durableId = env2.AGENT_BUILDER_THREAD.idFromName(threadId);
     const stub = env2.AGENT_BUILDER_THREAD.get(durableId);
     return await stub.fetch(req);
   } catch (error) {
+    const message = error instanceof Error ? error.message : "Failed to establish client bridge";
     console.error(`Error establishing bridge for thread ${threadId}:`, error);
     return Response.json(
-      { error: error.message || "Failed to establish client bridge" },
+      { error: message },
       { status: 500 }
     );
   }
@@ -74789,8 +74801,9 @@ var stop_post_default = defineController2(async ({ params, env: env2 }) => {
 });
 
 // src/api/threads/[id]/stream.ts
-var stream_default = defineController2(async ({ req, params, env: env2 }) => {
-  const authResult = await requireAuth(req, env2);
+var stream_default = defineController2(async (context) => {
+  const { req, params, env: env2 } = context;
+  const authResult = await resolveRequestAuth(context);
   if (authResult instanceof Response) {
     return authResult;
   }
@@ -74805,22 +74818,31 @@ var stream_default = defineController2(async ({ req, params, env: env2 }) => {
     );
   }
   try {
-    const agentBuilderId = env2.AGENT_BUILDER.idFromName("singleton");
-    const agentBuilder = env2.AGENT_BUILDER.get(agentBuilderId);
-    const thread = await agentBuilder.getThread(threadId);
-    if (!thread) {
-      return Response.json(
-        { error: `Thread not found: ${threadId}` },
-        { status: 404 }
-      );
+    if (!routerAuthorizedThread(context, threadId)) {
+      const agentBuilderId = env2.AGENT_BUILDER.idFromName("singleton");
+      const agentBuilder = env2.AGENT_BUILDER.get(agentBuilderId);
+      const thread = await agentBuilder.getThread(threadId);
+      if (!thread) {
+        return Response.json(
+          { error: `Thread not found: ${threadId}` },
+          { status: 404 }
+        );
+      }
+      if (!canAccessThread(authResult, thread)) {
+        return Response.json(
+          { error: "Forbidden: You don't have access to this thread" },
+          { status: 403 }
+        );
+      }
     }
     const durableId = env2.AGENT_BUILDER_THREAD.idFromName(threadId);
     const stub = env2.AGENT_BUILDER_THREAD.get(durableId);
     return await stub.fetch(req);
   } catch (error) {
+    const message = error instanceof Error ? error.message : "Failed to establish message stream";
     console.error(`Error handling message stream for thread ${threadId}:`, error);
     return Response.json(
-      { error: error.message || "Failed to establish message stream" },
+      { error: message },
       { status: 500 }
     );
   }
@@ -75056,8 +75078,9 @@ var env_patch_default = defineController2(async ({ req, env: env2, params }) =>
 });
 
 // src/api/users/[id]/stream.ts
-var stream_default2 = defineController2(async ({ req, env: env2, params }) => {
-  const authResult = await requireAuth(req, env2);
+var stream_default2 = defineController2(async (context) => {
+  const { req, env: env2, params } = context;
+  const authResult = await resolveRequestAuth(context);
   if (authResult instanceof Response) return authResult;
   const isAdmin = authResult.authType === "super_admin" || authResult.user?.role === "admin";
   if (!isAdmin) {
@@ -75485,8 +75508,9 @@ var env_patch_default2 = defineController2(async ({ req, env: env2 }) => {
 });
 
 // src/api/users/me/hub.ts
-var hub_default = defineController2(async ({ req, env: env2 }) => {
-  const authResult = await requireAuth(req, env2);
+var hub_default = defineController2(async (context) => {
+  const { req, env: env2 } = context;
+  const authResult = await resolveRequestAuth(context);
   if (authResult instanceof Response) {
     return authResult;
   }
@@ -75514,9 +75538,10 @@ var hub_default = defineController2(async ({ req, env: env2 }) => {
     const stub = namespace.get(hubId);
     return await stub.fetch(req);
   } catch (error) {
+    const message = error instanceof Error ? error.message : "Failed to establish hub connection";
     console.error("Error establishing user hub socket:", error);
     return Response.json(
-      { error: error.message || "Failed to establish hub connection" },
+      { error: message },
       { status: 500 }
     );
   }
@@ -75658,8 +75683,9 @@ var index_post_default7 = defineController2(async ({ req, env: env2 }) => {
 });
 
 // src/api/users/me/stream.ts
-var stream_default3 = defineController2(async ({ req, env: env2 }) => {
-  const authResult = await requireAuth(req, env2);
+var stream_default3 = defineController2(async (context) => {
+  const { req, env: env2 } = context;
+  const authResult = await resolveRequestAuth(context);
   if (authResult instanceof Response) return authResult;
   if (authResult.authType === "super_admin") {
     return Response.json(