@standardagents/builder 0.41.10 → 0.41.12

package/dist/{resolver-kvVdxct2.d.ts → resolver-DE5HFRlb.d.ts}

@@ -1943,8 +1943,19 @@ declare class DurableUserHub extends DurableObject<DurableUserHubEnv> {
     private limitsFor;
     /** Load the project's room definition from the users registry, once. */
     private loadRoom;
+    /**
+     * How a room execution presents itself to grant policies: as the endpoint
+     * it declares it fronts, otherwise as a room named by its registry key.
+     */
+    private roomCaller;
     /** Whether `key` is room-owned state, exempt from `user_value_changed`. */
     private roomOwnsKey;
+    /**
+     * The value-key prefixes this user's room declares as its own, so the
+     * client-facing KV routes refuse writes under room-owned state. The platform
+     * reserves whatever the tenant declares via `defineUserRoom({ valuePrefix })`.
+     */
+    roomValuePrefixes(): Promise<string[]>;
     /**
      * Presence runs inside the serialization chain, after any execution the
      * event raced with, so a room's presence write never interleaves with a
@@ -2508,6 +2519,11 @@ declare class DurableAgentBuilder<Env extends AgentBuilderEnv = AgentBuilderEnv>
      */
     private userHub;
     /** Read one JSON value from a user's account-wide key-value store. */
+    /**
+     * The pre-hub singleton hosts no user room, so it reserves no room prefixes.
+     * Kept to satisfy the shared UserValueStore contract for fallback runtimes.
+     */
+    roomValuePrefixes(): Promise<string[]>;
     getUserValue(userId: string, key: string): Promise<unknown | null>;
     /** Write one JSON value to a user's account-wide store; null/undefined deletes. */
     setUserValue(userId: string, key: string, value: unknown): Promise<void>;

package/dist/runtime.d.ts

@@ -1,4 +1,4 @@
-export { m as AgentBuilderEnv, n as AgentBuilderEvent, A as AgentDefinition, ah as BroadcastOptions, C as CodeExecutionBridge, h as DurableAgentBuilder, D as DurableThread, l as DurableUserHub, af as FlowStateSdk, ai as FlowStateWithSdk, G as HandlerSide, H as HubClientInfo, E as HumanSide, aq as ImageContextConfig, ae as InjectMessageOptions, as as LLMProviderInterface, M as ModelDefinition, aL as NamespaceResolutionError, w as PromptContent, s as PromptDefinition, y as PromptIncludePart, x as PromptPart, F as PromptSide, t as PromptToolConfig, P as Provider, at as ProviderContentPart, aw as ProviderFilePart, av as ProviderImagePart, ar as ProviderRegistry, au as ProviderTextPart, B as SessionToolBinding, z as SessionToolConfig, I as SideConfig, J as SubagentRelationship, u as SubagentToolConfig, S as SubpromptConfig, o as ThreadEventPayload, p as ThreadRegistryEntry, T as ThreadWatchdog, j as ThreadWatchdogState, v as ToolConfig, U as UpdateThreadParams, q as User, k as WatchdogCheckin, W as WatchdogProbeResult, f as applyRuntimeCors, am as buildImageDescription, c as canAccessThread, a9 as cat, aJ as createNamespaceContext, Q as emitThreadEvent, ag as enhanceFlowState, a0 as exists, ad as find, R as forceTurn, ap as generateImageDescription, a7 as getFileStats, N as getMessages, al as getMessagesToSummarize, az as getShortName, a8 as getThumbnail, ak as getUnsummarizedImageAttachments, aG as getVisibleAgentNames, aI as getVisibleModelNames, aH as getVisiblePromptNames, aF as getVisibleToolNames, ac as grep, aj as hasImageAttachments, aa as head, L as injectMessage, d as isAdminOnlyApiRoute, i as isHostedInstance, b as isPublicApiRoute, aK as isQualifiedName, e as isSameOriginBrowserRequest, a as isTrustedLocalDevelopmentRequest, Z as linkFile, a2 as mkdir, a5 as move, ao as optimizeImageContext, ax as parseQualifiedName, ay as qualifyName, K as queueTool, _ as readFile, a3 as readdir, O as reloadHistory, a6 as rename, an as replaceImagesWithDescriptions, aD as resolveAgent, aE as resolveHook, aC as resolveModel, aB as resolvePrompt, aA as resolveTool, a4 as rmdir, r as runtimeCorsHeaders, g as runtimePreflightResponse, $ as stat, ab as tail, a1 as unlink, V as updateThread, X as writeFile, Y as writeImage } from './resolver-kvVdxct2.js';
+export { m as AgentBuilderEnv, n as AgentBuilderEvent, A as AgentDefinition, ah as BroadcastOptions, C as CodeExecutionBridge, h as DurableAgentBuilder, D as DurableThread, l as DurableUserHub, af as FlowStateSdk, ai as FlowStateWithSdk, G as HandlerSide, H as HubClientInfo, E as HumanSide, aq as ImageContextConfig, ae as InjectMessageOptions, as as LLMProviderInterface, M as ModelDefinition, aL as NamespaceResolutionError, w as PromptContent, s as PromptDefinition, y as PromptIncludePart, x as PromptPart, F as PromptSide, t as PromptToolConfig, P as Provider, at as ProviderContentPart, aw as ProviderFilePart, av as ProviderImagePart, ar as ProviderRegistry, au as ProviderTextPart, B as SessionToolBinding, z as SessionToolConfig, I as SideConfig, J as SubagentRelationship, u as SubagentToolConfig, S as SubpromptConfig, o as ThreadEventPayload, p as ThreadRegistryEntry, T as ThreadWatchdog, j as ThreadWatchdogState, v as ToolConfig, U as UpdateThreadParams, q as User, k as WatchdogCheckin, W as WatchdogProbeResult, f as applyRuntimeCors, am as buildImageDescription, c as canAccessThread, a9 as cat, aJ as createNamespaceContext, Q as emitThreadEvent, ag as enhanceFlowState, a0 as exists, ad as find, R as forceTurn, ap as generateImageDescription, a7 as getFileStats, N as getMessages, al as getMessagesToSummarize, az as getShortName, a8 as getThumbnail, ak as getUnsummarizedImageAttachments, aG as getVisibleAgentNames, aI as getVisibleModelNames, aH as getVisiblePromptNames, aF as getVisibleToolNames, ac as grep, aj as hasImageAttachments, aa as head, L as injectMessage, d as isAdminOnlyApiRoute, i as isHostedInstance, b as isPublicApiRoute, aK as isQualifiedName, e as isSameOriginBrowserRequest, a as isTrustedLocalDevelopmentRequest, Z as linkFile, a2 as mkdir, a5 as move, ao as optimizeImageContext, ax as parseQualifiedName, ay as qualifyName, K as queueTool, _ as readFile, a3 as readdir, O as reloadHistory, a6 as rename, an as replaceImagesWithDescriptions, aD as resolveAgent, aE as resolveHook, aC as resolveModel, aB as resolvePrompt, aA as resolveTool, a4 as rmdir, r as runtimeCorsHeaders, g as runtimePreflightResponse, $ as stat, ab as tail, a1 as unlink, V as updateThread, X as writeFile, Y as writeImage } from './resolver-DE5HFRlb.js';
 export { v as Agent, J as AttachmentRef, i as AuthContext, A as AuthUser, e as BuilderThreadEndpointHandler, C as CLIENT_STREAM_CHUNK_BYTES, t as ClientDuplex, u as ClientForwarding, p as ClientStreamRequest, q as ClientStreamResponse, n as ClientToolRequest, o as ClientToolResponse, B as Controller, a as ControllerContext, G as Env, H as FileRecord, N as FileStats, D as FlowResult, F as FlowState, K as GrepResult, P as ImageContentPart, I as ImageMetadata, L as LLMResponse, M as Message, U as MessageContent, Q as MultimodalContent, R as RequestContext, S as StorageBackend, E as TelemetryEvent, O as TextContentPart, T as ThreadEndpointContext, b as ThreadEnv, w as ThreadInstance, x as ThreadMetadata, y as ToolCall, z as ToolResult, f as authenticate, j as callClient, k as callClientStream, c as createThreadEndpointHandler, m as decodeStreamChunk, d as defineController, l as encodeStreamChunk, h as endpointCallerFromAuth, g as requireAdmin, r as requireAuth, s as supportsClientForwarding } from './index-ChHAVogf.js';
 export { AgentType, DefineHandlerOptions, DefinitionLoader, GlobalNamespaceContext, HANDLER_SYMBOL, HandlerDefinition, HookExecutionContext, HookExecutionSource, HookSignatures, ImageContent, ModelCapabilities, ModelProvider, NamespaceContext, PackageSignature, PackedExports, PackedMeta, PackedMetadata, PackedNamespaceContext, ParentHookRequirement, ParentHookStage, PromptInput, PromptTextPart, ProviderAssistantMessage, ProviderError, ProviderErrorCode, ProviderFactory, ProviderFactoryConfig, ProviderFinishReason, ProviderGeneratedImage, ProviderMessage, ProviderMessageContent, ModelCapabilities as ProviderModelCapabilities, ProviderReasoningDetail, ProviderRequest, ProviderResponse, ProviderStreamChunk, ProviderSystemMessage, ProviderTool, ProviderToolCallPart, ProviderToolMessage, ProviderToolResultContent, ProviderUsage, ProviderUserMessage, ReasoningConfig, StructuredPrompt, TextContent, ThreadHookName, Tool, ToolArgs, ToolArgsNode, ToolArgsRawShape, ToolContent, belongsToPackage, defineAgent, defineHandler, defineHook, defineModel, definePrompt, defineProvider, defineTool, isHandler, isPacked, isVisibleInNamespace, mapReasoningLevel, providerConst, providerEnv, providerValue } from '@standardagents/spec';
 export { N as NamespacedRegistry } from './types-Dhd0M369.js';

package/dist/runtime.js

@@ -12011,6 +12011,13 @@ ${result ?? error ?? "No result content."}${attachmentSummary}`;
         return namespace.get(namespace.idFromName(userId));
       }
       /** Read one JSON value from a user's account-wide key-value store. */
+      /**
+       * The pre-hub singleton hosts no user room, so it reserves no room prefixes.
+       * Kept to satisfy the shared UserValueStore contract for fallback runtimes.
+       */
+      async roomValuePrefixes() {
+        return [];
+      }
       async getUserValue(userId, key) {
         await this.ensureMigrated();
         this.assertValidUserValueUserId(userId);
@@ -30199,7 +30206,7 @@ function canAccessThread(auth, thread) {
 }
 
 // src/users/upstream-timing.ts
-var UPSTREAM_TIMING_HEADER = "x-standard-upstream-timing";
+var UPSTREAM_TIMING_HEADER = "x-agentbuilder-upstream-timing";
 var MAX_HEADER_CHARS = 512;
 function formatUpstreamTiming(name, durationMs) {
   const safe = Number.isFinite(durationMs) && durationMs > 0 ? durationMs : 0;
@@ -31055,11 +31062,30 @@ var DurableUserHub = class extends DurableObject {
     }
     return this.roomDefinition;
   }
+  /**
+   * How a room execution presents itself to grant policies: as the endpoint
+   * it declares it fronts, otherwise as a room named by its registry key.
+   */
+  roomCaller(room) {
+    if (typeof room.endpoint === "string" && room.endpoint.length > 0) {
+      return { kind: "userEndpoint", name: room.endpoint };
+    }
+    return { kind: "userRoom", name: this.roomKey ?? "room" };
+  }
   /** Whether `key` is room-owned state, exempt from `user_value_changed`. */
   async roomOwnsKey(key) {
     const room = await this.loadRoom();
     return Boolean(room?.valuePrefix && key.startsWith(room.valuePrefix));
   }
+  /**
+   * The value-key prefixes this user's room declares as its own, so the
+   * client-facing KV routes refuse writes under room-owned state. The platform
+   * reserves whatever the tenant declares via `defineUserRoom({ valuePrefix })`.
+   */
+  async roomValuePrefixes() {
+    const room = await this.loadRoom();
+    return room?.valuePrefix ? [room.valuePrefix] : [];
+  }
   /**
    * Presence runs inside the serialization chain, after any execution the
    * event raced with, so a room's presence write never interleaves with a
@@ -31092,7 +31118,7 @@ var DurableUserHub = class extends DurableObject {
     const run = this.executionChain.run(async () => {
       const room = await this.loadRoom();
       if (!room?.onPresence) return;
-      const user = new UserStateImpl(this.roomUserId(), this.scopeHost(), { kind: "userRoom", name: this.roomKey ?? "room" });
+      const user = new UserStateImpl(this.roomUserId(), this.scopeHost(), this.roomCaller(room));
       try {
         await room.onPresence(user, event);
       } catch (error) {
@@ -31114,7 +31140,7 @@ var DurableUserHub = class extends DurableObject {
         this.sendRoomFrame(ws, JSON.stringify({ type: "room", id: frame.id, error: "no_room" }));
         return;
       }
-      const user = new UserStateImpl(this.roomUserId(), this.scopeHost(), { kind: "userRoom", name: this.roomKey ?? "room" });
+      const user = new UserStateImpl(this.roomUserId(), this.scopeHost(), this.roomCaller(room));
       try {
         await room.onFrame(user, connection, frame);
       } catch (error) {