@standardagents/builder 0.41.7 → 0.41.9

package/dist/built-in-routes.js

@@ -79652,7 +79652,7 @@ var config_get_default = defineController2(async ({ config, env: env2, req }) =>
 });
 
 // src/version.ts
-var BUILDER_VERSION = "0.41.7".length > 0 ? "0.41.7" : "dev";
+var BUILDER_VERSION = "0.41.9".length > 0 ? "0.41.9" : "dev";
 
 // src/api/diagnostics.get.ts
 init_LLMRequest();
@@ -85035,11 +85035,14 @@ var USER_CLIENT_RESERVED_KEYS = /* @__PURE__ */ new Set([
   "standardcode.lines.leases",
   "standardcode.lines.capacity_cache"
 ]);
+var USER_CLIENT_RESERVED_PREFIXES = [
+  "standard."
+];
 function isThreadKvKeyClientWritable(key) {
   return !THREAD_CLIENT_RESERVED_KEYS.has(key) && !THREAD_CLIENT_RESERVED_PREFIXES.some((prefix) => key.startsWith(prefix));
 }
 function isUserKvKeyClientWritable(key) {
-  return !USER_CLIENT_RESERVED_KEYS.has(key);
+  return !USER_CLIENT_RESERVED_KEYS.has(key) && !USER_CLIENT_RESERVED_PREFIXES.some((prefix) => key.startsWith(prefix));
 }
 function reservedKvKeyResponse() {
   return Response.json(
@@ -85716,6 +85719,16 @@ var analyze_get_default2 = defineController2(async ({ req, env: env2 }) => {
 });
 
 // src/users/dispatch.ts
+function userValueStore(env2, userId) {
+  const hub = env2.AGENT_BUILDER_USER_HUB;
+  if (hub) return hub.get(hub.idFromName(userId));
+  const singleton = env2.AGENT_BUILDER;
+  if (!singleton) return null;
+  return singleton.get(singleton.idFromName("singleton"));
+}
+function validUserValueKey(key) {
+  return typeof key === "string" && key.length > 0 && key.length <= 512;
+}
 function userHubStub(env2, userId) {
   const namespace = env2.AGENT_BUILDER_USER_HUB;
   if (!namespace) return null;
@@ -85740,8 +85753,9 @@ async function forwardToUserScope(req, env2, userId, scopePath, channel = "user"
 }
 
 // src/api/users/[id]/[...rest].ts
-var rest_default = defineController2(async ({ req, env: env2, params }) => {
-  const authResult = await requireAuth(req, env2);
+var rest_default = defineController2(async (context) => {
+  const { req, env: env2, params } = context;
+  const authResult = await resolveRequestAuth(context);
   if (authResult instanceof Response) return authResult;
   const isAdmin = authResult.authType === "super_admin" || authResult.user?.role === "admin";
   if (!isAdmin) {
@@ -86192,8 +86206,9 @@ var start_get_default = defineController2(async ({ req, env: env2 }) => {
 });
 
 // src/api/users/me/[...rest].ts
-var rest_default2 = defineController2(async ({ req, env: env2, params }) => {
-  const authResult = await requireAuth(req, env2);
+var rest_default2 = defineController2(async (context) => {
+  const { req, env: env2, params } = context;
+  const authResult = await resolveRequestAuth(context);
   if (authResult instanceof Response) return authResult;
   if (authResult.authType === "super_admin") {
     return Response.json(
@@ -86293,7 +86308,7 @@ var hub_default = defineController2(async (context) => {
   if (req.headers.get("upgrade")?.toLowerCase() !== "websocket") {
     return Response.json(
       { error: "This endpoint only supports WebSocket connections" },
-      { status: 400 }
+      { status: 426 }
     );
   }
   const namespace = env2.AGENT_BUILDER_USER_HUB;
@@ -86318,9 +86333,10 @@ var hub_default = defineController2(async (context) => {
 });
 
 // src/api/users/me/kv/index.delete.ts
-var index_delete_default = defineController2(async ({ req, env: env2 }) => {
+var index_delete_default = defineController2(async (context) => {
+  const { req, env: env2 } = context;
   try {
-    const authResult = await requireAuth(req, env2);
+    const authResult = await resolveRequestAuth(context);
     if (authResult instanceof Response) {
       return authResult;
     }
@@ -86332,19 +86348,18 @@ var index_delete_default = defineController2(async ({ req, env: env2 }) => {
     }
     const url = new URL(req.url);
     const key = url.searchParams.get("key");
-    if (!key) {
-      return Response.json({ error: "key query parameter required" }, { status: 400 });
+    if (!validUserValueKey(key)) {
+      return Response.json({ error: "key query parameter required (1 to 512 characters)" }, { status: 400 });
     }
     if (!isUserKvKeyClientWritable(key)) return reservedKvKeyResponse();
-    const agentBuilderId = env2.AGENT_BUILDER.idFromName("singleton");
-    const agentBuilder = env2.AGENT_BUILDER.get(agentBuilderId);
-    if (typeof agentBuilder.setUserValue !== "function") {
+    const store = userValueStore(env2, authResult.user.id);
+    if (!store) {
       return Response.json(
         { error: "User value storage is not supported by this runtime" },
         { status: 500 }
       );
     }
-    await agentBuilder.setUserValue(authResult.user.id, key, null);
+    await store.setUserValue(authResult.user.id, key, null);
     return Response.json({ status: "ok", key });
   } catch (error) {
     console.error("Delete user kv error:", error);
@@ -86356,9 +86371,10 @@ var index_delete_default = defineController2(async ({ req, env: env2 }) => {
 });
 
 // src/api/users/me/kv/index.get.ts
-var index_get_default5 = defineController2(async ({ req, env: env2 }) => {
+var index_get_default5 = defineController2(async (context) => {
+  const { req, env: env2 } = context;
   try {
-    const authResult = await requireAuth(req, env2);
+    const authResult = await resolveRequestAuth(context);
     if (authResult instanceof Response) {
       return authResult;
     }
@@ -86369,28 +86385,24 @@ var index_get_default5 = defineController2(async ({ req, env: env2 }) => {
       );
     }
     const url = new URL(req.url);
-    const agentBuilderId = env2.AGENT_BUILDER.idFromName("singleton");
-    const agentBuilder = env2.AGENT_BUILDER.get(agentBuilderId);
-    const key = url.searchParams.get("key");
-    if (key) {
-      if (typeof agentBuilder.getUserValue !== "function") {
-        return Response.json(
-          { error: "User value storage is not supported by this runtime" },
-          { status: 500 }
-        );
-      }
-      const value = await agentBuilder.getUserValue(authResult.user.id, key);
-      return Response.json({ key, value });
-    }
-    if (typeof agentBuilder.listUserValues !== "function") {
+    const store = userValueStore(env2, authResult.user.id);
+    if (!store) {
       return Response.json(
         { error: "User value storage is not supported by this runtime" },
         { status: 500 }
       );
     }
+    const key = url.searchParams.get("key");
+    if (key !== null) {
+      if (!validUserValueKey(key)) {
+        return Response.json({ error: "key must be 1 to 512 characters" }, { status: 400 });
+      }
+      const value = await store.getUserValue(authResult.user.id, key);
+      return Response.json({ key, value });
+    }
     const limitParam = Number.parseInt(url.searchParams.get("limit") ?? "", 10);
     const offsetParam = Number.parseInt(url.searchParams.get("offset") ?? "", 10);
-    const result = await agentBuilder.listUserValues(authResult.user.id, {
+    const result = await store.listUserValues(authResult.user.id, {
       prefix: url.searchParams.get("prefix"),
       limit: Number.isFinite(limitParam) ? limitParam : void 0,
       offset: Number.isFinite(offsetParam) ? offsetParam : void 0
@@ -86406,9 +86418,10 @@ var index_get_default5 = defineController2(async ({ req, env: env2 }) => {
 });
 
 // src/api/users/me/kv/index.post.ts
-var index_post_default7 = defineController2(async ({ req, env: env2 }) => {
+var index_post_default7 = defineController2(async (context) => {
+  const { req, env: env2 } = context;
   try {
-    const authResult = await requireAuth(req, env2);
+    const authResult = await resolveRequestAuth(context);
     if (authResult instanceof Response) {
       return authResult;
     }
@@ -86429,19 +86442,18 @@ var index_post_default7 = defineController2(async ({ req, env: env2 }) => {
       return Response.json({ error: "Invalid JSON body" }, { status: 400 });
     }
     const key = body.key;
-    if (typeof key !== "string" || key.length === 0) {
-      return Response.json({ error: "key required" }, { status: 400 });
+    if (!validUserValueKey(key)) {
+      return Response.json({ error: "key required (1 to 512 characters)" }, { status: 400 });
     }
     if (!isUserKvKeyClientWritable(key)) return reservedKvKeyResponse();
-    const agentBuilderId = env2.AGENT_BUILDER.idFromName("singleton");
-    const agentBuilder = env2.AGENT_BUILDER.get(agentBuilderId);
-    if (typeof agentBuilder.setUserValue !== "function") {
+    const store = userValueStore(env2, authResult.user.id);
+    if (!store) {
       return Response.json(
         { error: "User value storage is not supported by this runtime" },
         { status: 500 }
       );
     }
-    await agentBuilder.setUserValue(authResult.user.id, key, body.value ?? null);
+    await store.setUserValue(authResult.user.id, key, body.value ?? null);
     return Response.json({ status: "ok", key });
   } catch (error) {
     console.error("Set user kv error:", error);