@standardagents/builder 0.40.0 → 0.40.1

package/dist/{index-9MaIifn3.d.ts → index-0NI3m5DR.d.ts}

@@ -1590,6 +1590,7 @@ interface DurableAgentBuilderRpc {
         status: string;
         token?: string;
     } | null>;
+    denyDeviceLogin(codeHash: string): Promise<boolean>;
     approveDeviceLogin(params: {
         code_hash: string;
         user_id: string;

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { ModelDefinition, AgentDefinition } from './runtime.js';
 export { AgentBuilderEnv, AgentBuilderEvent, BroadcastOptions, CodeExecutionBridge, DurableAgentBuilder, DurableThread, DurableUserHub, FlowStateSdk, FlowStateWithSdk, HubClientInfo, ImageContextConfig, InjectMessageOptions, LLMProviderInterface, NamespaceResolutionError, PromptContent, PromptDefinition, PromptIncludePart, PromptPart, PromptToolConfig, Provider, ProviderContentPart, ProviderFilePart, ProviderImagePart, ProviderRegistry, ProviderTextPart, SessionToolBinding, SessionToolConfig, SideConfig, SubagentToolConfig, SubpromptConfig, ThreadEventPayload, ThreadRegistryEntry, ThreadWatchdog, ThreadWatchdogState, ToolConfig, UpdateThreadParams, User, WatchdogCheckin, WatchdogProbeResult, applyRuntimeCors, buildImageDescription, canAccessThread, cat, createNamespaceContext, emitThreadEvent, enhanceFlowState, exists, find, forceTurn, generateImageDescription, getFileStats, getMessages, getMessagesToSummarize, getShortName, getThumbnail, getUnsummarizedImageAttachments, getVisibleAgentNames, getVisibleModelNames, getVisiblePromptNames, getVisibleToolNames, grep, hasImageAttachments, head, injectMessage, isAdminOnlyApiRoute, isHostedInstance, isPublicApiRoute, isQualifiedName, isSameOriginBrowserRequest, isTrustedLocalDevelopmentRequest, linkFile, mkdir, move, optimizeImageContext, parseQualifiedName, qualifyName, queueTool, readFile, readdir, reloadHistory, rename, replaceImagesWithDescriptions, resolveAgent, resolveHook, resolveModel, resolvePrompt, resolveTool, rmdir, runtimeCorsHeaders, runtimePreflightResponse, stat, tail, unlink, updateThread, writeFile, writeImage } from './runtime.js';
 export { AgentPluginOptions, agentbuilder, builder } from './plugin.js';
-export { w as Agent, J as AttachmentRef, j as AuthContext, A as AuthUser, f as BuilderThreadEndpointHandler, C as CLIENT_STREAM_CHUNK_BYTES, u as ClientDuplex, v as ClientForwarding, q as ClientStreamRequest, t as ClientStreamResponse, o as ClientToolRequest, p as ClientToolResponse, B as Controller, a as ControllerContext, G as Env, H as FileRecord, N as FileStats, D as FlowResult, F as FlowState, K as GrepResult, P as ImageContentPart, I as ImageMetadata, L as LLMResponse, M as Message, U as MessageContent, Q as MultimodalContent, R as RequestContext, S as StorageBackend, E as TelemetryEvent, O as TextContentPart, b as ThreadEndpointContext, e as ThreadEnv, x as ThreadInstance, y as ThreadMetadata, T as ToolCall, z as ToolResult, g as authenticate, k as callClient, l as callClientStream, c as createThreadEndpointHandler, n as decodeStreamChunk, d as defineController, m as encodeStreamChunk, i as endpointCallerFromAuth, h as requireAdmin, r as requireAuth, s as supportsClientForwarding } from './index-9MaIifn3.js';
+export { w as Agent, J as AttachmentRef, j as AuthContext, A as AuthUser, f as BuilderThreadEndpointHandler, C as CLIENT_STREAM_CHUNK_BYTES, u as ClientDuplex, v as ClientForwarding, q as ClientStreamRequest, t as ClientStreamResponse, o as ClientToolRequest, p as ClientToolResponse, B as Controller, a as ControllerContext, G as Env, H as FileRecord, N as FileStats, D as FlowResult, F as FlowState, K as GrepResult, P as ImageContentPart, I as ImageMetadata, L as LLMResponse, M as Message, U as MessageContent, Q as MultimodalContent, R as RequestContext, S as StorageBackend, E as TelemetryEvent, O as TextContentPart, b as ThreadEndpointContext, e as ThreadEnv, x as ThreadInstance, y as ThreadMetadata, T as ToolCall, z as ToolResult, g as authenticate, k as callClient, l as callClientStream, c as createThreadEndpointHandler, n as decodeStreamChunk, d as defineController, m as encodeStreamChunk, i as endpointCallerFromAuth, h as requireAdmin, r as requireAuth, s as supportsClientForwarding } from './index-0NI3m5DR.js';
 export { AgentType, DefinitionLoader, GlobalNamespaceContext, HookExecutionContext, HookExecutionSource, HookSignatures, ImageContent, ModelCapabilities, ModelProvider, NamespaceContext, PackageSignature, PackedExports, PackedMeta, PackedMetadata, PackedNamespaceContext, ParentHookRequirement, ParentHookStage, PromptInput, PromptTextPart, ProviderAssistantMessage, ProviderConfigSlot, ProviderConfigSlots, ProviderConfigValueSource, ProviderDefinition, ProviderError, ProviderErrorCode, ProviderFactory, ProviderFactoryConfig, ProviderFinishReason, ProviderGeneratedImage, ProviderMessage, ProviderMessageContent, ProviderMethodOverrides, ModelCapabilities as ProviderModelCapabilities, ProviderOverride, ProviderOverrideContext, ProviderReasoningDetail, ProviderRequest, ProviderResponse, ProviderStreamChunk, ProviderSyncOverride, ProviderSystemMessage, ProviderTool, ProviderToolCallPart, ProviderToolMessage, ProviderToolResultContent, ProviderUsage, ProviderUserMessage, ReasoningConfig, StructuredPrompt, TextContent, ThreadHookName, Tool, ToolArgs, ToolArgsNode, ToolArgsRawShape, ToolContent, belongsToPackage, defineAgent, defineHook, defineModel, definePrompt, defineProvider, defineTool, isPacked, isVisibleInNamespace, mapReasoningLevel, providerConst, providerEnv, providerValue } from '@standardagents/spec';
 export { C as ConstituentItem, D as DiscoveredPackage, N as NamespacedRegistry, P as PackingAnalysis, a as PackingOptions, b as PackingResult, c as UnpackOptions, d as UnpackResult } from './types-BMnBYNwn.js';
 export { D as DiscoveryConfig, P as PackageDiscoveryService, d as discoverPackages } from './discovery-DZ7fv-b4.js';

package/dist/index.js

@@ -11701,7 +11701,12 @@ function queueTool(flow, toolName, args = {}) {
 }
 async function injectMessage(flow, options) {
   const messageId = options.id ?? crypto.randomUUID();
-  const timestamp = Date.now() * TIMESTAMP_MULTIPLIER;
+  const wallClockTimestamp = Date.now() * TIMESTAMP_MULTIPLIER;
+  const latestLiveTimestamp = flow.messageHistory.reduce(
+    (latest, entry) => Math.max(latest, entry.created_at),
+    0
+  );
+  const timestamp = options.beforeMessageId ? wallClockTimestamp : Math.max(wallClockTimestamp, latestLiveTimestamp + 1);
   const silent = options.silent ?? false;
   const forceTopLevel = options.forceTopLevel ?? false;
   let message = {
@@ -23823,7 +23828,8 @@ async function loadVirtualModule(id, context) {
     effectsDir,
     installedProviders,
     rou3Code,
-    hmr
+    hmr,
+    deviceApproval
   } = context;
   if (id === RESOLVED_VIRTUAL_TOOLS_ID) {
     const tools = await scanToolsDirectory(toolsDir);
@@ -23887,6 +23893,7 @@ export const config = {
   providersDir: "${relativeProvidersDir}",
   promptsDir: "${relativePromptsDir}",
   agentsDir: "${relativeAgentsDir}",
+  deviceApproval: ${JSON.stringify(deviceApproval ?? null)},
 };`;
   }
   if (id === RESOLVED_VIRTUAL_MODELS_ID) {
@@ -24246,8 +24253,50 @@ function applyPluginEnvironmentConfig(config) {
   }
 }
 
+// src/plugin/device-approval.ts
+function requiredText(value, field, maxLength) {
+  if (typeof value !== "string" || !value.trim() || value.trim().length > maxLength) {
+    throw new Error(`deviceApproval.${field} must be a non-empty string of ${maxLength} characters or fewer`);
+  }
+  return value.trim();
+}
+function optionalText(value, field, maxLength) {
+  if (value === void 0 || value === null || value === "") return void 0;
+  if (typeof value !== "string" || !value.trim() || value.trim().length > maxLength) {
+    throw new Error(`deviceApproval.${field} must be a string of ${maxLength} characters or fewer`);
+  }
+  return value.trim();
+}
+function safeLogoUrl(value) {
+  const logoUrl = optionalText(value, "logoUrl", 2048);
+  if (!logoUrl) return void 0;
+  if (logoUrl.startsWith("/") && !logoUrl.startsWith("//") && !logoUrl.includes("#") && !logoUrl.includes("\\")) {
+    return logoUrl;
+  }
+  try {
+    const parsed = new URL(logoUrl);
+    if (parsed.protocol !== "https:" || parsed.username || parsed.password || parsed.hash) throw new Error();
+    return parsed.toString();
+  } catch {
+    throw new Error("deviceApproval.logoUrl must be a safe HTTPS or root-relative URL");
+  }
+}
+function normalizeDeviceApprovalBrand(value) {
+  if (value === void 0) return void 0;
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("deviceApproval must be an object");
+  }
+  const normalized = { name: requiredText(value.name, "name", 100) };
+  const description = optionalText(value.description, "description", 280);
+  const logoUrl = safeLogoUrl(value.logoUrl);
+  if (description) normalized.description = description;
+  if (logoUrl) normalized.logoUrl = logoUrl;
+  return normalized;
+}
+
 // src/plugin.ts
 function agentbuilder(options = {}) {
+  const deviceApproval = normalizeDeviceApprovalBrand(options.deviceApproval);
   const toolsDir = options.toolsDir ? path9__default.resolve(process.cwd(), options.toolsDir) : path9__default.resolve(process.cwd(), "agents/tools");
   const hooksDir = options.hooksDir ? path9__default.resolve(process.cwd(), options.hooksDir) : path9__default.resolve(process.cwd(), "agents/hooks");
   const threadApiDir = options.apiDir ? path9__default.resolve(process.cwd(), options.apiDir) : path9__default.resolve(process.cwd(), "agents/api");
@@ -24338,7 +24387,8 @@ export { CodeExecutionBridge, DurableAgentBuilder, DurableThread, ThreadWatchdog
     effectsDir,
     installedProviders,
     rou3Code,
-    hmr
+    hmr,
+    deviceApproval
   };
   const devMiddlewareContext = {
     toolsDir,
@@ -30595,6 +30645,17 @@ ${result ?? error ?? "No result content."}${attachmentSummary}`;
     }
     return { status: row.status };
   }
+  /** Deny a pending device login without creating a user or API key. */
+  async denyDeviceLogin(codeHash) {
+    await this.ensureMigrated();
+    await this.sweepDeviceLogins();
+    const cursor = await this.ctx.storage.sql.exec(
+      `UPDATE device_logins SET status = 'denied', user_id = NULL, token = NULL
+       WHERE code_hash = ? AND status = 'pending'`,
+      codeHash
+    );
+    return cursor.rowsWritten > 0;
+  }
   /** Approve a pending device login: mint a personal API key for the user and
    *  park its plaintext for the single claim. Returns false when the code is
    *  unknown, expired, or not pending. */