@standardagents/builder 0.41.11 → 0.41.13

package/dist/{resolver-Db4EfjkK.d.ts → resolver-DE5HFRlb.d.ts}

@@ -1950,6 +1950,12 @@ declare class DurableUserHub extends DurableObject<DurableUserHubEnv> {
     private roomCaller;
     /** Whether `key` is room-owned state, exempt from `user_value_changed`. */
     private roomOwnsKey;
+    /**
+     * The value-key prefixes this user's room declares as its own, so the
+     * client-facing KV routes refuse writes under room-owned state. The platform
+     * reserves whatever the tenant declares via `defineUserRoom({ valuePrefix })`.
+     */
+    roomValuePrefixes(): Promise<string[]>;
     /**
      * Presence runs inside the serialization chain, after any execution the
      * event raced with, so a room's presence write never interleaves with a
@@ -2513,6 +2519,11 @@ declare class DurableAgentBuilder<Env extends AgentBuilderEnv = AgentBuilderEnv>
      */
     private userHub;
     /** Read one JSON value from a user's account-wide key-value store. */
+    /**
+     * The pre-hub singleton hosts no user room, so it reserves no room prefixes.
+     * Kept to satisfy the shared UserValueStore contract for fallback runtimes.
+     */
+    roomValuePrefixes(): Promise<string[]>;
     getUserValue(userId: string, key: string): Promise<unknown | null>;
     /** Write one JSON value to a user's account-wide store; null/undefined deletes. */
     setUserValue(userId: string, key: string, value: unknown): Promise<void>;

package/dist/runtime.d.ts

@@ -1,4 +1,4 @@
-export { m as AgentBuilderEnv, n as AgentBuilderEvent, A as AgentDefinition, ah as BroadcastOptions, C as CodeExecutionBridge, h as DurableAgentBuilder, D as DurableThread, l as DurableUserHub, af as FlowStateSdk, ai as FlowStateWithSdk, G as HandlerSide, H as HubClientInfo, E as HumanSide, aq as ImageContextConfig, ae as InjectMessageOptions, as as LLMProviderInterface, M as ModelDefinition, aL as NamespaceResolutionError, w as PromptContent, s as PromptDefinition, y as PromptIncludePart, x as PromptPart, F as PromptSide, t as PromptToolConfig, P as Provider, at as ProviderContentPart, aw as ProviderFilePart, av as ProviderImagePart, ar as ProviderRegistry, au as ProviderTextPart, B as SessionToolBinding, z as SessionToolConfig, I as SideConfig, J as SubagentRelationship, u as SubagentToolConfig, S as SubpromptConfig, o as ThreadEventPayload, p as ThreadRegistryEntry, T as ThreadWatchdog, j as ThreadWatchdogState, v as ToolConfig, U as UpdateThreadParams, q as User, k as WatchdogCheckin, W as WatchdogProbeResult, f as applyRuntimeCors, am as buildImageDescription, c as canAccessThread, a9 as cat, aJ as createNamespaceContext, Q as emitThreadEvent, ag as enhanceFlowState, a0 as exists, ad as find, R as forceTurn, ap as generateImageDescription, a7 as getFileStats, N as getMessages, al as getMessagesToSummarize, az as getShortName, a8 as getThumbnail, ak as getUnsummarizedImageAttachments, aG as getVisibleAgentNames, aI as getVisibleModelNames, aH as getVisiblePromptNames, aF as getVisibleToolNames, ac as grep, aj as hasImageAttachments, aa as head, L as injectMessage, d as isAdminOnlyApiRoute, i as isHostedInstance, b as isPublicApiRoute, aK as isQualifiedName, e as isSameOriginBrowserRequest, a as isTrustedLocalDevelopmentRequest, Z as linkFile, a2 as mkdir, a5 as move, ao as optimizeImageContext, ax as parseQualifiedName, ay as qualifyName, K as queueTool, _ as readFile, a3 as readdir, O as reloadHistory, a6 as rename, an as replaceImagesWithDescriptions, aD as resolveAgent, aE as resolveHook, aC as resolveModel, aB as resolvePrompt, aA as resolveTool, a4 as rmdir, r as runtimeCorsHeaders, g as runtimePreflightResponse, $ as stat, ab as tail, a1 as unlink, V as updateThread, X as writeFile, Y as writeImage } from './resolver-Db4EfjkK.js';
+export { m as AgentBuilderEnv, n as AgentBuilderEvent, A as AgentDefinition, ah as BroadcastOptions, C as CodeExecutionBridge, h as DurableAgentBuilder, D as DurableThread, l as DurableUserHub, af as FlowStateSdk, ai as FlowStateWithSdk, G as HandlerSide, H as HubClientInfo, E as HumanSide, aq as ImageContextConfig, ae as InjectMessageOptions, as as LLMProviderInterface, M as ModelDefinition, aL as NamespaceResolutionError, w as PromptContent, s as PromptDefinition, y as PromptIncludePart, x as PromptPart, F as PromptSide, t as PromptToolConfig, P as Provider, at as ProviderContentPart, aw as ProviderFilePart, av as ProviderImagePart, ar as ProviderRegistry, au as ProviderTextPart, B as SessionToolBinding, z as SessionToolConfig, I as SideConfig, J as SubagentRelationship, u as SubagentToolConfig, S as SubpromptConfig, o as ThreadEventPayload, p as ThreadRegistryEntry, T as ThreadWatchdog, j as ThreadWatchdogState, v as ToolConfig, U as UpdateThreadParams, q as User, k as WatchdogCheckin, W as WatchdogProbeResult, f as applyRuntimeCors, am as buildImageDescription, c as canAccessThread, a9 as cat, aJ as createNamespaceContext, Q as emitThreadEvent, ag as enhanceFlowState, a0 as exists, ad as find, R as forceTurn, ap as generateImageDescription, a7 as getFileStats, N as getMessages, al as getMessagesToSummarize, az as getShortName, a8 as getThumbnail, ak as getUnsummarizedImageAttachments, aG as getVisibleAgentNames, aI as getVisibleModelNames, aH as getVisiblePromptNames, aF as getVisibleToolNames, ac as grep, aj as hasImageAttachments, aa as head, L as injectMessage, d as isAdminOnlyApiRoute, i as isHostedInstance, b as isPublicApiRoute, aK as isQualifiedName, e as isSameOriginBrowserRequest, a as isTrustedLocalDevelopmentRequest, Z as linkFile, a2 as mkdir, a5 as move, ao as optimizeImageContext, ax as parseQualifiedName, ay as qualifyName, K as queueTool, _ as readFile, a3 as readdir, O as reloadHistory, a6 as rename, an as replaceImagesWithDescriptions, aD as resolveAgent, aE as resolveHook, aC as resolveModel, aB as resolvePrompt, aA as resolveTool, a4 as rmdir, r as runtimeCorsHeaders, g as runtimePreflightResponse, $ as stat, ab as tail, a1 as unlink, V as updateThread, X as writeFile, Y as writeImage } from './resolver-DE5HFRlb.js';
 export { v as Agent, J as AttachmentRef, i as AuthContext, A as AuthUser, e as BuilderThreadEndpointHandler, C as CLIENT_STREAM_CHUNK_BYTES, t as ClientDuplex, u as ClientForwarding, p as ClientStreamRequest, q as ClientStreamResponse, n as ClientToolRequest, o as ClientToolResponse, B as Controller, a as ControllerContext, G as Env, H as FileRecord, N as FileStats, D as FlowResult, F as FlowState, K as GrepResult, P as ImageContentPart, I as ImageMetadata, L as LLMResponse, M as Message, U as MessageContent, Q as MultimodalContent, R as RequestContext, S as StorageBackend, E as TelemetryEvent, O as TextContentPart, T as ThreadEndpointContext, b as ThreadEnv, w as ThreadInstance, x as ThreadMetadata, y as ToolCall, z as ToolResult, f as authenticate, j as callClient, k as callClientStream, c as createThreadEndpointHandler, m as decodeStreamChunk, d as defineController, l as encodeStreamChunk, h as endpointCallerFromAuth, g as requireAdmin, r as requireAuth, s as supportsClientForwarding } from './index-ChHAVogf.js';
 export { AgentType, DefineHandlerOptions, DefinitionLoader, GlobalNamespaceContext, HANDLER_SYMBOL, HandlerDefinition, HookExecutionContext, HookExecutionSource, HookSignatures, ImageContent, ModelCapabilities, ModelProvider, NamespaceContext, PackageSignature, PackedExports, PackedMeta, PackedMetadata, PackedNamespaceContext, ParentHookRequirement, ParentHookStage, PromptInput, PromptTextPart, ProviderAssistantMessage, ProviderError, ProviderErrorCode, ProviderFactory, ProviderFactoryConfig, ProviderFinishReason, ProviderGeneratedImage, ProviderMessage, ProviderMessageContent, ModelCapabilities as ProviderModelCapabilities, ProviderReasoningDetail, ProviderRequest, ProviderResponse, ProviderStreamChunk, ProviderSystemMessage, ProviderTool, ProviderToolCallPart, ProviderToolMessage, ProviderToolResultContent, ProviderUsage, ProviderUserMessage, ReasoningConfig, StructuredPrompt, TextContent, ThreadHookName, Tool, ToolArgs, ToolArgsNode, ToolArgsRawShape, ToolContent, belongsToPackage, defineAgent, defineHandler, defineHook, defineModel, definePrompt, defineProvider, defineTool, isHandler, isPacked, isVisibleInNamespace, mapReasoningLevel, providerConst, providerEnv, providerValue } from '@standardagents/spec';
 export { N as NamespacedRegistry } from './types-Dhd0M369.js';

package/dist/runtime.js

@@ -12011,6 +12011,13 @@ ${result ?? error ?? "No result content."}${attachmentSummary}`;
         return namespace.get(namespace.idFromName(userId));
       }
       /** Read one JSON value from a user's account-wide key-value store. */
+      /**
+       * The pre-hub singleton hosts no user room, so it reserves no room prefixes.
+       * Kept to satisfy the shared UserValueStore contract for fallback runtimes.
+       */
+      async roomValuePrefixes() {
+        return [];
+      }
       async getUserValue(userId, key) {
         await this.ensureMigrated();
         this.assertValidUserValueUserId(userId);
@@ -30199,7 +30206,7 @@ function canAccessThread(auth, thread) {
 }
 
 // src/users/upstream-timing.ts
-var UPSTREAM_TIMING_HEADER = "x-standard-upstream-timing";
+var UPSTREAM_TIMING_HEADER = "x-agentbuilder-upstream-timing";
 var MAX_HEADER_CHARS = 512;
 function formatUpstreamTiming(name, durationMs) {
   const safe = Number.isFinite(durationMs) && durationMs > 0 ? durationMs : 0;
@@ -30538,11 +30545,19 @@ var UserStateImpl = class {
     const { entries, total } = await this.host.listUserValues(this.userId, options);
     return { entries, total };
   }
+  /** User-account value first, then the instance's (Users §2.3). */
   async env(name) {
-    const values = await this.singleton().getUserEnv(this.userId);
-    const value = values[name];
-    if (value === void 0) throw new Error(`Environment variable not found: ${name}`);
-    return value;
+    const singleton = this.singleton();
+    const userValues = await singleton.getUserEnv(this.userId);
+    if (userValues[name] !== void 0) return userValues[name];
+    const instanceValues = await singleton.getInstanceEnv();
+    if (instanceValues[name] !== void 0) return instanceValues[name];
+    throw new Error(`Environment variable not found: ${name}`);
+  }
+  /** The instance's value only, for trust anchors (Users §2.3). */
+  async instanceEnv(name) {
+    const values = await this.singleton().getInstanceEnv();
+    return values[name];
   }
   emit(event, data) {
     this.host.broadcastUserEvent(this.userId, event, data);
@@ -31070,6 +31085,15 @@ var DurableUserHub = class extends DurableObject {
     const room = await this.loadRoom();
     return Boolean(room?.valuePrefix && key.startsWith(room.valuePrefix));
   }
+  /**
+   * The value-key prefixes this user's room declares as its own, so the
+   * client-facing KV routes refuse writes under room-owned state. The platform
+   * reserves whatever the tenant declares via `defineUserRoom({ valuePrefix })`.
+   */
+  async roomValuePrefixes() {
+    const room = await this.loadRoom();
+    return room?.valuePrefix ? [room.valuePrefix] : [];
+  }
   /**
    * Presence runs inside the serialization chain, after any execution the
    * event raced with, so a room's presence write never interleaves with a