@standardagents/builder 0.41.6 → 0.41.8

package/dist/runtime.js

@@ -30198,6 +30198,41 @@ function canAccessThread(auth, thread) {
   return thread.user_id === auth.user.id;
 }
 
+// src/users/upstream-timing.ts
+var UPSTREAM_TIMING_HEADER = "x-standard-upstream-timing";
+var MAX_HEADER_CHARS = 512;
+function formatUpstreamTiming(name, durationMs) {
+  const safe = Number.isFinite(durationMs) && durationMs > 0 ? durationMs : 0;
+  return `${name};dur=${Math.round(safe * 10) / 10}`;
+}
+function appendUpstreamTiming(current, name, durationMs) {
+  const entry = formatUpstreamTiming(name, durationMs);
+  if (!current) return entry;
+  const combined = `${current}, ${entry}`;
+  return combined.length > MAX_HEADER_CHARS ? current : combined;
+}
+function withUpstreamTiming(request, value) {
+  const headers = new Headers(request.headers);
+  headers.set(UPSTREAM_TIMING_HEADER, value);
+  return new Request(request, { headers });
+}
+function responseWithUpstreamTiming(response, name, durationMs) {
+  if (response.status === 101) return response;
+  const value = appendUpstreamTiming(response.headers.get(UPSTREAM_TIMING_HEADER), name, durationMs);
+  try {
+    response.headers.set(UPSTREAM_TIMING_HEADER, value);
+    return response;
+  } catch {
+    const headers = new Headers(response.headers);
+    headers.set(UPSTREAM_TIMING_HEADER, value);
+    return new Response(response.body, {
+      status: response.status,
+      statusText: response.statusText,
+      headers
+    });
+  }
+}
+
 // src/runtime.ts
 init_client_forwarding();
 init_DurableThread();
@@ -30451,6 +30486,9 @@ var UserStateImpl = class {
   host;
   /** Caller descriptor for grant `allow` policy checks. */
   caller;
+  /** One identity lookup per execution: the singleton RPC runs at most once. */
+  identityLookup = null;
+  identityLookupMs = null;
   constructor(userId, host, caller) {
     this.userId = userId;
     this.host = host;
@@ -30462,6 +30500,22 @@ var UserStateImpl = class {
     return ns.get(ns.idFromName("singleton"));
   }
   async identity() {
+    if (!this.identityLookup) {
+      const started = Date.now();
+      this.identityLookup = this.lookupIdentity().finally(() => {
+        this.identityLookupMs = Date.now() - started;
+      });
+      this.identityLookup.catch(() => {
+        this.identityLookup = null;
+      });
+    }
+    return this.identityLookup;
+  }
+  /** Milliseconds the execution spent resolving identity, once it has. */
+  timing() {
+    return { identity_ms: this.identityLookupMs };
+  }
+  async lookupIdentity() {
     const user = await this.singleton().getUserById(this.userId);
     if (!user) throw new Error(`Unknown user: ${this.userId}`);
     return {
@@ -30560,7 +30614,109 @@ function createExecutionChain() {
   };
 }
 
+// src/durable-objects/DurableUserHub.ts
+init_bridge_owner();
+
 // src/users/grants.ts
+var INSTANCE_GRANTS_MAX_BYTES = 64 * 1024;
+var INSTANCE_GRANTS_MAX_COUNT = 64;
+var GRANT_NAME = /^[a-z0-9][a-z0-9._-]{0,127}$/;
+var HEADER_NAME = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+var QUERY_NAME = /^[A-Za-z0-9._~-]{1,128}$/;
+var SUPPORTED_KINDS = /* @__PURE__ */ new Set(["bearer", "header", "query", "basic"]);
+var RECORD_KEYS = /* @__PURE__ */ new Set(["name", "kind", "origins", "inject", "allow", "metadata", "secret"]);
+var ALLOW_KEYS = /* @__PURE__ */ new Set(["tools", "endpoints", "userEndpoints", "agents"]);
+var INJECT_KEYS = /* @__PURE__ */ new Set(["header", "format", "query"]);
+function parseInstanceCredentialGrants(value) {
+  const records = /* @__PURE__ */ new Map();
+  if (typeof value !== "string" || value.length === 0 || value.length > INSTANCE_GRANTS_MAX_BYTES) {
+    return records;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(value);
+  } catch {
+    return records;
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return records;
+  const envelope = parsed;
+  if (envelope.version !== 1 || !Array.isArray(envelope.grants) || envelope.grants.length > INSTANCE_GRANTS_MAX_COUNT) {
+    return records;
+  }
+  for (const candidate of envelope.grants) {
+    const record = validateCredentialGrantRecord(candidate);
+    if (!record || records.has(record.grant.name)) return /* @__PURE__ */ new Map();
+    records.set(record.grant.name, record);
+  }
+  return records;
+}
+function validateCredentialGrantRecord(value, routeName) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  const input = value;
+  if (Object.keys(input).some((key) => !RECORD_KEYS.has(key))) return null;
+  const name = input.name;
+  if (typeof name !== "string" || !GRANT_NAME.test(name)) return null;
+  if (input.name !== void 0 && input.name !== name) return null;
+  if (typeof input.secret !== "string" || input.secret.length === 0 || input.secret.length > 16 * 1024) return null;
+  if (typeof input.kind !== "string" || !SUPPORTED_KINDS.has(input.kind)) return null;
+  if ((input.kind === "bearer" || input.kind === "header") && /[\r\n]/.test(input.secret)) return null;
+  if (!Array.isArray(input.origins) || input.origins.length === 0 || input.origins.length > 64) return null;
+  const origins = [];
+  for (const origin of input.origins) {
+    if (typeof origin !== "string" || origin.length > 512) return null;
+    if (origin.startsWith("*.")) {
+      if (!/^\*\.[a-z0-9.-]+$/i.test(origin)) return null;
+    } else {
+      try {
+        const url = new URL(origin);
+        if (url.origin !== origin || url.protocol !== "https:" || url.username || url.password) return null;
+      } catch {
+        return null;
+      }
+    }
+    origins.push(origin);
+  }
+  if (!input.allow || typeof input.allow !== "object" || Array.isArray(input.allow)) return null;
+  const allowInput = input.allow;
+  if (Object.keys(allowInput).some((key) => !ALLOW_KEYS.has(key))) return null;
+  const allow = {};
+  for (const key of ["tools", "endpoints", "userEndpoints", "agents"]) {
+    const list = allowInput[key];
+    if (list === void 0) continue;
+    if (!Array.isArray(list) || list.length > 128 || !list.every((item) => typeof item === "string" && item.length > 0 && item.length <= 256)) {
+      return null;
+    }
+    allow[key] = [...list];
+  }
+  if (Object.keys(allow).length === 0) return null;
+  const inject = input.inject;
+  if (inject !== void 0 && (!inject || typeof inject !== "object" || Array.isArray(inject))) return null;
+  if (inject !== void 0) {
+    const injection = inject;
+    if (Object.keys(injection).some((key) => !INJECT_KEYS.has(key))) return null;
+    if (injection.header !== void 0 && (typeof injection.header !== "string" || !HEADER_NAME.test(injection.header))) return null;
+    if (injection.format !== void 0 && (typeof injection.format !== "string" || injection.format.length > 1024 || /[\r\n]/.test(injection.format))) return null;
+    if (injection.query !== void 0 && (typeof injection.query !== "string" || !QUERY_NAME.test(injection.query))) return null;
+  }
+  const metadata = input.metadata;
+  if (metadata !== void 0 && (!metadata || typeof metadata !== "object" || Array.isArray(metadata))) return null;
+  if (metadata !== void 0) {
+    try {
+      if (JSON.stringify(metadata).length > 16 * 1024) return null;
+    } catch {
+      return null;
+    }
+  }
+  const grant = {
+    name,
+    kind: input.kind,
+    origins,
+    allow,
+    ...inject === void 0 ? {} : { inject },
+    ...metadata === void 0 ? {} : { metadata }
+  };
+  return { grant, secret: input.secret };
+}
 function originAllowed(origins, target) {
   if (!Array.isArray(origins)) return false;
   for (const allowed of origins) {
@@ -30701,11 +30857,7 @@ var DurableUserHub = class extends DurableObject {
     if (request.headers.get("Upgrade") === "websocket") {
       const pair = new WebSocketPair();
       const [client, server] = [pair[0], pair[1]];
-      const info = {
-        clientId: url.searchParams.get("client_id"),
-        clientName: url.searchParams.get("client_name"),
-        clientKind: url.searchParams.get("client_kind")
-      };
+      const info = parseBridgeClientParams(url).info;
       this.ensureHeartbeatAutoResponse();
       this.ctx.acceptWebSocket(server);
       server.serializeAttachment({ type: "hub_client", ...info });
@@ -30804,13 +30956,21 @@ var DurableUserHub = class extends DurableObject {
         { status: 500 }
       );
     }
+    const queuedAt = Date.now();
     return this.executionChain.run(async () => {
+      const queueMs = Date.now() - queuedAt;
+      const timed = withUpstreamTiming(
+        request,
+        appendUpstreamTiming(request.headers.get(UPSTREAM_TIMING_HEADER), "queue", queueMs)
+      );
       const user = new UserStateImpl(userId, this.scopeHost(), {
         kind: "userEndpoint",
         name: match.key
       });
       try {
-        return await handler.__handler(request, user, match.params);
+        const response = await handler.__handler(timed, user, match.params);
+        const identityMs = user.timing().identity_ms;
+        return identityMs === null ? response : responseWithUpstreamTiming(response, "identity", identityMs);
       } catch (error) {
         return Response.json(
           { error: error instanceof Error ? error.message : "User endpoint failed" },
@@ -30857,6 +31017,8 @@ var DurableUserHub = class extends DurableObject {
     this.ctx.waitUntil(run());
   }
   async webSocketClose(ws) {
+    this.clientSockets.delete(ws);
+    this.clientInfo.delete(ws);
     const attachment = ws.deserializeAttachment();
     if (attachment?.type === "user_stream") {
       this.dispatchUserHooks(String(attachment.userId), "user_client_detached", [
@@ -30865,10 +31027,7 @@ var DurableUserHub = class extends DurableObject {
           kind: typeof attachment.clientKind === "string" ? attachment.clientKind : void 0
         }
       ]);
-      return;
     }
-    this.clientSockets.delete(ws);
-    this.clientInfo.delete(ws);
   }
   // ─── User scope: credential grants (spec: Users §6) ───────────────────────
   /**
@@ -30906,14 +31065,20 @@ var DurableUserHub = class extends DurableObject {
       `SELECT name, config FROM user_grants WHERE user_id = ? ORDER BY name ASC`,
       userId
     );
-    return cursor.toArray().map((row) => {
+    const grants = /* @__PURE__ */ new Map();
+    for (const record of parseInstanceCredentialGrants(this.env.AGENT_BUILDER_CREDENTIAL_GRANTS).values()) {
+      const { name, ...config } = record.grant;
+      grants.set(name, { name, ...config });
+    }
+    for (const row of cursor.toArray()) {
       let config = {};
       try {
         config = JSON.parse(row.config);
       } catch {
       }
-      return { name: row.name, ...config };
-    });
+      grants.set(row.name, { name: row.name, ...config });
+    }
+    return [...grants.values()].sort((a, b) => a.name.localeCompare(b.name));
   }
   /** Perform a privileged fetch with the grant's credential injected. */
   async grantFetch(userId, grantName, req) {
@@ -30923,15 +31088,24 @@ var DurableUserHub = class extends DurableObject {
       userId,
       grantName
     );
-    const row = cursor.toArray()[0];
-    if (!row) {
+    const stored = cursor.toArray()[0];
+    const instance = stored ? null : parseInstanceCredentialGrants(this.env.AGENT_BUILDER_CREDENTIAL_GRANTS).get(grantName) ?? null;
+    if (!stored && !instance) {
       return Response.json({ error: "grant_not_found", grant: grantName }, { status: 404 });
     }
     let config;
-    try {
-      config = JSON.parse(row.config);
-    } catch {
-      return Response.json({ error: "grant_config_invalid" }, { status: 500 });
+    let secret;
+    if (stored) {
+      try {
+        config = JSON.parse(stored.config);
+      } catch {
+        return Response.json({ error: "grant_config_invalid" }, { status: 500 });
+      }
+      secret = stored.secret;
+    } else {
+      const { name: _name, ...instanceConfig } = instance.grant;
+      config = instanceConfig;
+      secret = instance.secret;
     }
     let target;
     try {
@@ -30946,7 +31120,7 @@ var DurableUserHub = class extends DurableObject {
       return Response.json({ error: "grant_caller_denied" }, { status: 403 });
     }
     const headers = new Headers(req.headers);
-    if (!injectGrantCredential(config, row.secret, target, headers)) {
+    if (!injectGrantCredential(config, secret, target, headers)) {
       return Response.json({ error: "grant_kind_unsupported" }, { status: 501 });
     }
     try {
@@ -30974,7 +31148,16 @@ var DurableUserHub = class extends DurableObject {
     });
   }
   async webSocketMessage(ws, _message) {
-    if (!this.clientSockets.has(ws)) this.clientSockets.add(ws);
+    const attachment = ws.deserializeAttachment();
+    if (attachment?.type !== "hub_client") return;
+    if (!this.clientSockets.has(ws)) {
+      this.clientSockets.add(ws);
+      this.clientInfo.set(ws, {
+        clientId: typeof attachment.clientId === "string" ? attachment.clientId : null,
+        clientName: typeof attachment.clientName === "string" ? attachment.clientName : null,
+        clientKind: typeof attachment.clientKind === "string" ? attachment.clientKind : null
+      });
+    }
   }
   async webSocketError(ws) {
     await this.webSocketClose(ws);
@@ -31404,6 +31587,6 @@ init_ProviderRegistry();
 init_types2();
 init_resolver();
 
-export { CLIENT_STREAM_CHUNK_BYTES, CodeExecutionBridge, DurableAgentBuilder, DurableThread, DurableUserHub, FlowStateSdk, NamespaceResolutionError, ProviderRegistry, ThreadWatchdog, applyRuntimeCors, authenticate, buildImageDescription, callClient, callClientStream, canAccessThread, cat, createNamespaceContext, createThreadEndpointHandler, decodeStreamChunk, defineController2 as defineController, emitThreadEvent, encodeStreamChunk, endpointCallerFromAuth, enhanceFlowState, exists, find, forceTurn, generateImageDescription, getFileStats, getMessages, getMessagesToSummarize, getShortName, getThumbnail, getUnsummarizedImageAttachments, getVisibleAgentNames, getVisibleModelNames, getVisiblePromptNames, getVisibleToolNames, grep, hasImageAttachments, head, injectMessage, isAdminOnlyApiRoute, isHostedInstance, isPublicApiRoute, isQualifiedName, isSameOriginBrowserRequest, isTrustedLocalDevelopmentRequest, linkFile, mkdir, move, optimizeImageContext, parseQualifiedName, qualifyName, queueTool, readFile, readdir, reloadHistory, rename, replaceImagesWithDescriptions, requireAdmin, requireAuth, resolveAgent, resolveHook, resolveModel, resolvePrompt, resolveTool, rmdir, runtimeCorsHeaders, runtimePreflightResponse, stat, supportsClientForwarding, tail, unlink, updateThread, writeFile, writeImage };
+export { CLIENT_STREAM_CHUNK_BYTES, CodeExecutionBridge, DurableAgentBuilder, DurableThread, DurableUserHub, FlowStateSdk, NamespaceResolutionError, ProviderRegistry, ThreadWatchdog, applyRuntimeCors, authenticate, buildImageDescription, callClient, callClientStream, canAccessThread, cat, createNamespaceContext, createThreadEndpointHandler, decodeStreamChunk, defineController2 as defineController, emitThreadEvent, encodeStreamChunk, endpointCallerFromAuth, enhanceFlowState, exists, find, forceTurn, formatUpstreamTiming, generateImageDescription, getFileStats, getMessages, getMessagesToSummarize, getShortName, getThumbnail, getUnsummarizedImageAttachments, getVisibleAgentNames, getVisibleModelNames, getVisiblePromptNames, getVisibleToolNames, grep, hasImageAttachments, head, injectMessage, isAdminOnlyApiRoute, isHostedInstance, isPublicApiRoute, isQualifiedName, isSameOriginBrowserRequest, isTrustedLocalDevelopmentRequest, linkFile, mkdir, move, optimizeImageContext, parseQualifiedName, qualifyName, queueTool, readFile, readdir, reloadHistory, rename, replaceImagesWithDescriptions, requireAdmin, requireAuth, resolveAgent, resolveHook, resolveModel, resolvePrompt, resolveTool, rmdir, runtimeCorsHeaders, runtimePreflightResponse, stat, supportsClientForwarding, tail, unlink, updateThread, withUpstreamTiming, writeFile, writeImage };
 //# sourceMappingURL=runtime.js.map
 //# sourceMappingURL=runtime.js.map