@standardagents/builder 0.41.6 → 0.41.7

package/dist/runtime.d.ts

@@ -1,5 +1,5 @@
-import { j as AuthContext, e as ThreadEnv, w as Agent, y as ThreadMetadata, z as ToolResult, M as Message, o as ClientToolRequest, p as ClientToolResponse, V as ProxyStreamReceiver, W as ProxyStreamFrame, q as ClientStreamRequest, X as ProxyStreamTarget, t as ClientStreamResponse, Y as ProxyStreamOpenResult, H as FileRecord, Z as SkillStorageScope, F as FlowState, N as FileStats, K as GrepResult, J as AttachmentRef, U as MessageContent, G as Env, x as ThreadInstance } from './index-By8TkPrK.js';
-export { A as AuthUser, f as BuilderThreadEndpointHandler, C as CLIENT_STREAM_CHUNK_BYTES, u as ClientDuplex, v as ClientForwarding, B as Controller, a as ControllerContext, D as FlowResult, P as ImageContentPart, I as ImageMetadata, L as LLMResponse, Q as MultimodalContent, R as RequestContext, S as StorageBackend, E as TelemetryEvent, O as TextContentPart, b as ThreadEndpointContext, T as ToolCall, g as authenticate, k as callClient, l as callClientStream, c as createThreadEndpointHandler, n as decodeStreamChunk, d as defineController, m as encodeStreamChunk, i as endpointCallerFromAuth, h as requireAdmin, r as requireAuth, s as supportsClientForwarding } from './index-By8TkPrK.js';
+import { j as AuthContext, e as ThreadEnv, w as Agent, y as ThreadMetadata, z as ToolResult, M as Message, o as ClientToolRequest, p as ClientToolResponse, V as ProxyStreamReceiver, W as ProxyStreamFrame, q as ClientStreamRequest, X as ProxyStreamTarget, t as ClientStreamResponse, Y as ProxyStreamOpenResult, H as FileRecord, Z as SkillStorageScope, F as FlowState, N as FileStats, K as GrepResult, J as AttachmentRef, U as MessageContent, G as Env, x as ThreadInstance } from './index-PSu6cMEz.js';
+export { A as AuthUser, f as BuilderThreadEndpointHandler, C as CLIENT_STREAM_CHUNK_BYTES, u as ClientDuplex, v as ClientForwarding, B as Controller, a as ControllerContext, D as FlowResult, P as ImageContentPart, I as ImageMetadata, L as LLMResponse, Q as MultimodalContent, R as RequestContext, S as StorageBackend, E as TelemetryEvent, O as TextContentPart, b as ThreadEndpointContext, T as ToolCall, g as authenticate, k as callClient, l as callClientStream, c as createThreadEndpointHandler, n as decodeStreamChunk, d as defineController, m as encodeStreamChunk, i as endpointCallerFromAuth, h as requireAdmin, r as requireAuth, s as supportsClientForwarding } from './index-PSu6cMEz.js';
 import { CodeExecutionOptions, CodeExecutionResult, SubagentRegistryEntry, InjectMessageInput, QueueMessageInput, CredentialGrant, SkillMetadata, SkillFileInput, ModelDefinition as ModelDefinition$1, ToolArgs, PromptTextPart, PromptEnvPart, VariableDefinition, SubpromptConfig as SubpromptConfig$1, PromptToolConfig as PromptToolConfig$1, ReasoningConfig, HumanSide as HumanSide$1, SubagentRelationship as SubagentRelationship$1, ParentHookRequirement, LLMProviderInterface, ContentPart, TextPart, ImagePart, FilePart, ThreadState, NamespaceContext, DefinitionLoader } from '@standardagents/spec';
 export { AgentType, DefineHandlerOptions, DefinitionLoader, GlobalNamespaceContext, HANDLER_SYMBOL, HandlerDefinition, HookExecutionContext, HookExecutionSource, HookSignatures, ImageContent, ModelCapabilities, ModelProvider, NamespaceContext, PackageSignature, PackedExports, PackedMeta, PackedMetadata, PackedNamespaceContext, ParentHookRequirement, ParentHookStage, PromptInput, PromptTextPart, ProviderAssistantMessage, ProviderError, ProviderErrorCode, ProviderFactory, ProviderFactoryConfig, ProviderFinishReason, ProviderGeneratedImage, ProviderMessage, ProviderMessageContent, ModelCapabilities as ProviderModelCapabilities, ProviderReasoningDetail, ProviderRequest, ProviderResponse, ProviderStreamChunk, ProviderSystemMessage, ProviderTool, ProviderToolCallPart, ProviderToolMessage, ProviderToolResultContent, ProviderUsage, ProviderUserMessage, ReasoningConfig, StructuredPrompt, TextContent, ThreadHookName, Tool, ToolArgs, ToolArgsNode, ToolArgsRawShape, ToolContent, belongsToPackage, defineAgent, defineHandler, defineHook, defineModel, definePrompt, defineProvider, defineTool, isHandler, isPacked, isVisibleInNamespace, mapReasoningLevel, providerConst, providerEnv, providerValue } from '@standardagents/spec';
 import { DurableObject, WorkerEntrypoint } from 'cloudflare:workers';
@@ -1888,6 +1888,8 @@ declare class DurableThread<Env extends ThreadEnv = ThreadEnv> extends DurableOb
 }
 
 interface DurableUserHubEnv {
+    /** Secret JSON registry of runtime-managed grants shared by all users. */
+    AGENT_BUILDER_CREDENTIAL_GRANTS?: string;
     [key: string]: unknown;
 }
 interface HubClientInfo {

package/dist/runtime.js

@@ -30561,6 +30561,105 @@ function createExecutionChain() {
 }
 
 // src/users/grants.ts
+var INSTANCE_GRANTS_MAX_BYTES = 64 * 1024;
+var INSTANCE_GRANTS_MAX_COUNT = 64;
+var GRANT_NAME = /^[a-z0-9][a-z0-9._-]{0,127}$/;
+var HEADER_NAME = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+var QUERY_NAME = /^[A-Za-z0-9._~-]{1,128}$/;
+var SUPPORTED_KINDS = /* @__PURE__ */ new Set(["bearer", "header", "query", "basic"]);
+var RECORD_KEYS = /* @__PURE__ */ new Set(["name", "kind", "origins", "inject", "allow", "metadata", "secret"]);
+var ALLOW_KEYS = /* @__PURE__ */ new Set(["tools", "endpoints", "userEndpoints", "agents"]);
+var INJECT_KEYS = /* @__PURE__ */ new Set(["header", "format", "query"]);
+function parseInstanceCredentialGrants(value) {
+  const records = /* @__PURE__ */ new Map();
+  if (typeof value !== "string" || value.length === 0 || value.length > INSTANCE_GRANTS_MAX_BYTES) {
+    return records;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(value);
+  } catch {
+    return records;
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return records;
+  const envelope = parsed;
+  if (envelope.version !== 1 || !Array.isArray(envelope.grants) || envelope.grants.length > INSTANCE_GRANTS_MAX_COUNT) {
+    return records;
+  }
+  for (const candidate of envelope.grants) {
+    const record = validateCredentialGrantRecord(candidate);
+    if (!record || records.has(record.grant.name)) return /* @__PURE__ */ new Map();
+    records.set(record.grant.name, record);
+  }
+  return records;
+}
+function validateCredentialGrantRecord(value, routeName) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  const input = value;
+  if (Object.keys(input).some((key) => !RECORD_KEYS.has(key))) return null;
+  const name = input.name;
+  if (typeof name !== "string" || !GRANT_NAME.test(name)) return null;
+  if (input.name !== void 0 && input.name !== name) return null;
+  if (typeof input.secret !== "string" || input.secret.length === 0 || input.secret.length > 16 * 1024) return null;
+  if (typeof input.kind !== "string" || !SUPPORTED_KINDS.has(input.kind)) return null;
+  if ((input.kind === "bearer" || input.kind === "header") && /[\r\n]/.test(input.secret)) return null;
+  if (!Array.isArray(input.origins) || input.origins.length === 0 || input.origins.length > 64) return null;
+  const origins = [];
+  for (const origin of input.origins) {
+    if (typeof origin !== "string" || origin.length > 512) return null;
+    if (origin.startsWith("*.")) {
+      if (!/^\*\.[a-z0-9.-]+$/i.test(origin)) return null;
+    } else {
+      try {
+        const url = new URL(origin);
+        if (url.origin !== origin || url.protocol !== "https:" || url.username || url.password) return null;
+      } catch {
+        return null;
+      }
+    }
+    origins.push(origin);
+  }
+  if (!input.allow || typeof input.allow !== "object" || Array.isArray(input.allow)) return null;
+  const allowInput = input.allow;
+  if (Object.keys(allowInput).some((key) => !ALLOW_KEYS.has(key))) return null;
+  const allow = {};
+  for (const key of ["tools", "endpoints", "userEndpoints", "agents"]) {
+    const list = allowInput[key];
+    if (list === void 0) continue;
+    if (!Array.isArray(list) || list.length > 128 || !list.every((item) => typeof item === "string" && item.length > 0 && item.length <= 256)) {
+      return null;
+    }
+    allow[key] = [...list];
+  }
+  if (Object.keys(allow).length === 0) return null;
+  const inject = input.inject;
+  if (inject !== void 0 && (!inject || typeof inject !== "object" || Array.isArray(inject))) return null;
+  if (inject !== void 0) {
+    const injection = inject;
+    if (Object.keys(injection).some((key) => !INJECT_KEYS.has(key))) return null;
+    if (injection.header !== void 0 && (typeof injection.header !== "string" || !HEADER_NAME.test(injection.header))) return null;
+    if (injection.format !== void 0 && (typeof injection.format !== "string" || injection.format.length > 1024 || /[\r\n]/.test(injection.format))) return null;
+    if (injection.query !== void 0 && (typeof injection.query !== "string" || !QUERY_NAME.test(injection.query))) return null;
+  }
+  const metadata = input.metadata;
+  if (metadata !== void 0 && (!metadata || typeof metadata !== "object" || Array.isArray(metadata))) return null;
+  if (metadata !== void 0) {
+    try {
+      if (JSON.stringify(metadata).length > 16 * 1024) return null;
+    } catch {
+      return null;
+    }
+  }
+  const grant = {
+    name,
+    kind: input.kind,
+    origins,
+    allow,
+    ...inject === void 0 ? {} : { inject },
+    ...metadata === void 0 ? {} : { metadata }
+  };
+  return { grant, secret: input.secret };
+}
 function originAllowed(origins, target) {
   if (!Array.isArray(origins)) return false;
   for (const allowed of origins) {
@@ -30906,14 +31005,20 @@ var DurableUserHub = class extends DurableObject {
       `SELECT name, config FROM user_grants WHERE user_id = ? ORDER BY name ASC`,
       userId
     );
-    return cursor.toArray().map((row) => {
+    const grants = /* @__PURE__ */ new Map();
+    for (const record of parseInstanceCredentialGrants(this.env.AGENT_BUILDER_CREDENTIAL_GRANTS).values()) {
+      const { name, ...config } = record.grant;
+      grants.set(name, { name, ...config });
+    }
+    for (const row of cursor.toArray()) {
       let config = {};
       try {
         config = JSON.parse(row.config);
       } catch {
       }
-      return { name: row.name, ...config };
-    });
+      grants.set(row.name, { name: row.name, ...config });
+    }
+    return [...grants.values()].sort((a, b) => a.name.localeCompare(b.name));
   }
   /** Perform a privileged fetch with the grant's credential injected. */
   async grantFetch(userId, grantName, req) {
@@ -30923,15 +31028,24 @@ var DurableUserHub = class extends DurableObject {
       userId,
       grantName
     );
-    const row = cursor.toArray()[0];
-    if (!row) {
+    const stored = cursor.toArray()[0];
+    const instance = stored ? null : parseInstanceCredentialGrants(this.env.AGENT_BUILDER_CREDENTIAL_GRANTS).get(grantName) ?? null;
+    if (!stored && !instance) {
       return Response.json({ error: "grant_not_found", grant: grantName }, { status: 404 });
     }
     let config;
-    try {
-      config = JSON.parse(row.config);
-    } catch {
-      return Response.json({ error: "grant_config_invalid" }, { status: 500 });
+    let secret;
+    if (stored) {
+      try {
+        config = JSON.parse(stored.config);
+      } catch {
+        return Response.json({ error: "grant_config_invalid" }, { status: 500 });
+      }
+      secret = stored.secret;
+    } else {
+      const { name: _name, ...instanceConfig } = instance.grant;
+      config = instanceConfig;
+      secret = instance.secret;
     }
     let target;
     try {
@@ -30946,7 +31060,7 @@ var DurableUserHub = class extends DurableObject {
       return Response.json({ error: "grant_caller_denied" }, { status: 403 });
     }
     const headers = new Headers(req.headers);
-    if (!injectGrantCredential(config, row.secret, target, headers)) {
+    if (!injectGrantCredential(config, secret, target, headers)) {
       return Response.json({ error: "grant_kind_unsupported" }, { status: 501 });
     }
     try {