@standardagents/builder 0.41.9 → 0.41.11

package/dist/{resolver-DWuGxI4w.d.ts → resolver-Db4EfjkK.d.ts}

@@ -1904,8 +1904,10 @@ declare class DurableUserHub extends DurableObject<DurableUserHubEnv> {
     private roomLimits;
     /** Detach notices held for the presence grace window, by client id. */
     private pendingDetach;
-    /** The project's room definition, loaded once per instance. */
+    /** The project's room definition, loaded once per instance, and its
+     *  registry key, which names room executions for grant policies. */
     private roomDefinition;
+    private roomKey;
     constructor(ctx: DurableObjectState, env: DurableUserHubEnv);
     private ensureMigrated;
     /**
@@ -1941,6 +1943,11 @@ declare class DurableUserHub extends DurableObject<DurableUserHubEnv> {
     private limitsFor;
     /** Load the project's room definition from the users registry, once. */
     private loadRoom;
+    /**
+     * How a room execution presents itself to grant policies: as the endpoint
+     * it declares it fronts, otherwise as a room named by its registry key.
+     */
+    private roomCaller;
     /** Whether `key` is room-owned state, exempt from `user_value_changed`. */
     private roomOwnsKey;
     /**

package/dist/runtime.d.ts

@@ -1,4 +1,4 @@
-export { m as AgentBuilderEnv, n as AgentBuilderEvent, A as AgentDefinition, ah as BroadcastOptions, C as CodeExecutionBridge, h as DurableAgentBuilder, D as DurableThread, l as DurableUserHub, af as FlowStateSdk, ai as FlowStateWithSdk, G as HandlerSide, H as HubClientInfo, E as HumanSide, aq as ImageContextConfig, ae as InjectMessageOptions, as as LLMProviderInterface, M as ModelDefinition, aL as NamespaceResolutionError, w as PromptContent, s as PromptDefinition, y as PromptIncludePart, x as PromptPart, F as PromptSide, t as PromptToolConfig, P as Provider, at as ProviderContentPart, aw as ProviderFilePart, av as ProviderImagePart, ar as ProviderRegistry, au as ProviderTextPart, B as SessionToolBinding, z as SessionToolConfig, I as SideConfig, J as SubagentRelationship, u as SubagentToolConfig, S as SubpromptConfig, o as ThreadEventPayload, p as ThreadRegistryEntry, T as ThreadWatchdog, j as ThreadWatchdogState, v as ToolConfig, U as UpdateThreadParams, q as User, k as WatchdogCheckin, W as WatchdogProbeResult, f as applyRuntimeCors, am as buildImageDescription, c as canAccessThread, a9 as cat, aJ as createNamespaceContext, Q as emitThreadEvent, ag as enhanceFlowState, a0 as exists, ad as find, R as forceTurn, ap as generateImageDescription, a7 as getFileStats, N as getMessages, al as getMessagesToSummarize, az as getShortName, a8 as getThumbnail, ak as getUnsummarizedImageAttachments, aG as getVisibleAgentNames, aI as getVisibleModelNames, aH as getVisiblePromptNames, aF as getVisibleToolNames, ac as grep, aj as hasImageAttachments, aa as head, L as injectMessage, d as isAdminOnlyApiRoute, i as isHostedInstance, b as isPublicApiRoute, aK as isQualifiedName, e as isSameOriginBrowserRequest, a as isTrustedLocalDevelopmentRequest, Z as linkFile, a2 as mkdir, a5 as move, ao as optimizeImageContext, ax as parseQualifiedName, ay as qualifyName, K as queueTool, _ as readFile, a3 as readdir, O as reloadHistory, a6 as rename, an as replaceImagesWithDescriptions, aD as resolveAgent, aE as resolveHook, aC as resolveModel, aB as resolvePrompt, aA as resolveTool, a4 as rmdir, r as runtimeCorsHeaders, g as runtimePreflightResponse, $ as stat, ab as tail, a1 as unlink, V as updateThread, X as writeFile, Y as writeImage } from './resolver-DWuGxI4w.js';
+export { m as AgentBuilderEnv, n as AgentBuilderEvent, A as AgentDefinition, ah as BroadcastOptions, C as CodeExecutionBridge, h as DurableAgentBuilder, D as DurableThread, l as DurableUserHub, af as FlowStateSdk, ai as FlowStateWithSdk, G as HandlerSide, H as HubClientInfo, E as HumanSide, aq as ImageContextConfig, ae as InjectMessageOptions, as as LLMProviderInterface, M as ModelDefinition, aL as NamespaceResolutionError, w as PromptContent, s as PromptDefinition, y as PromptIncludePart, x as PromptPart, F as PromptSide, t as PromptToolConfig, P as Provider, at as ProviderContentPart, aw as ProviderFilePart, av as ProviderImagePart, ar as ProviderRegistry, au as ProviderTextPart, B as SessionToolBinding, z as SessionToolConfig, I as SideConfig, J as SubagentRelationship, u as SubagentToolConfig, S as SubpromptConfig, o as ThreadEventPayload, p as ThreadRegistryEntry, T as ThreadWatchdog, j as ThreadWatchdogState, v as ToolConfig, U as UpdateThreadParams, q as User, k as WatchdogCheckin, W as WatchdogProbeResult, f as applyRuntimeCors, am as buildImageDescription, c as canAccessThread, a9 as cat, aJ as createNamespaceContext, Q as emitThreadEvent, ag as enhanceFlowState, a0 as exists, ad as find, R as forceTurn, ap as generateImageDescription, a7 as getFileStats, N as getMessages, al as getMessagesToSummarize, az as getShortName, a8 as getThumbnail, ak as getUnsummarizedImageAttachments, aG as getVisibleAgentNames, aI as getVisibleModelNames, aH as getVisiblePromptNames, aF as getVisibleToolNames, ac as grep, aj as hasImageAttachments, aa as head, L as injectMessage, d as isAdminOnlyApiRoute, i as isHostedInstance, b as isPublicApiRoute, aK as isQualifiedName, e as isSameOriginBrowserRequest, a as isTrustedLocalDevelopmentRequest, Z as linkFile, a2 as mkdir, a5 as move, ao as optimizeImageContext, ax as parseQualifiedName, ay as qualifyName, K as queueTool, _ as readFile, a3 as readdir, O as reloadHistory, a6 as rename, an as replaceImagesWithDescriptions, aD as resolveAgent, aE as resolveHook, aC as resolveModel, aB as resolvePrompt, aA as resolveTool, a4 as rmdir, r as runtimeCorsHeaders, g as runtimePreflightResponse, $ as stat, ab as tail, a1 as unlink, V as updateThread, X as writeFile, Y as writeImage } from './resolver-Db4EfjkK.js';
 export { v as Agent, J as AttachmentRef, i as AuthContext, A as AuthUser, e as BuilderThreadEndpointHandler, C as CLIENT_STREAM_CHUNK_BYTES, t as ClientDuplex, u as ClientForwarding, p as ClientStreamRequest, q as ClientStreamResponse, n as ClientToolRequest, o as ClientToolResponse, B as Controller, a as ControllerContext, G as Env, H as FileRecord, N as FileStats, D as FlowResult, F as FlowState, K as GrepResult, P as ImageContentPart, I as ImageMetadata, L as LLMResponse, M as Message, U as MessageContent, Q as MultimodalContent, R as RequestContext, S as StorageBackend, E as TelemetryEvent, O as TextContentPart, T as ThreadEndpointContext, b as ThreadEnv, w as ThreadInstance, x as ThreadMetadata, y as ToolCall, z as ToolResult, f as authenticate, j as callClient, k as callClientStream, c as createThreadEndpointHandler, m as decodeStreamChunk, d as defineController, l as encodeStreamChunk, h as endpointCallerFromAuth, g as requireAdmin, r as requireAuth, s as supportsClientForwarding } from './index-ChHAVogf.js';
 export { AgentType, DefineHandlerOptions, DefinitionLoader, GlobalNamespaceContext, HANDLER_SYMBOL, HandlerDefinition, HookExecutionContext, HookExecutionSource, HookSignatures, ImageContent, ModelCapabilities, ModelProvider, NamespaceContext, PackageSignature, PackedExports, PackedMeta, PackedMetadata, PackedNamespaceContext, ParentHookRequirement, ParentHookStage, PromptInput, PromptTextPart, ProviderAssistantMessage, ProviderError, ProviderErrorCode, ProviderFactory, ProviderFactoryConfig, ProviderFinishReason, ProviderGeneratedImage, ProviderMessage, ProviderMessageContent, ModelCapabilities as ProviderModelCapabilities, ProviderReasoningDetail, ProviderRequest, ProviderResponse, ProviderStreamChunk, ProviderSystemMessage, ProviderTool, ProviderToolCallPart, ProviderToolMessage, ProviderToolResultContent, ProviderUsage, ProviderUserMessage, ReasoningConfig, StructuredPrompt, TextContent, ThreadHookName, Tool, ToolArgs, ToolArgsNode, ToolArgsRawShape, ToolContent, belongsToPackage, defineAgent, defineHandler, defineHook, defineModel, definePrompt, defineProvider, defineTool, isHandler, isPacked, isVisibleInNamespace, mapReasoningLevel, providerConst, providerEnv, providerValue } from '@standardagents/spec';
 export { N as NamespacedRegistry } from './types-Dhd0M369.js';

package/dist/runtime.js

@@ -30808,6 +30808,9 @@ function callerAllowed(allow, caller) {
     endpoint: allow.endpoints,
     userEndpoint: allow.userEndpoints,
     userHook: allow.userEndpoints,
+    // A room execution is policy-named by its registry key; a policy may
+    // list it under `userRooms` or alongside the endpoints it serves.
+    userRoom: allow.userRooms ?? allow.userEndpoints,
     agent: allow.agents
   };
   const list = lists[caller.kind];
@@ -30845,8 +30848,10 @@ var DurableUserHub = class extends DurableObject {
   roomLimits = /* @__PURE__ */ new Map();
   /** Detach notices held for the presence grace window, by client id. */
   pendingDetach = /* @__PURE__ */ new Map();
-  /** The project's room definition, loaded once per instance. */
+  /** The project's room definition, loaded once per instance, and its
+   *  registry key, which names room executions for grant policies. */
   roomDefinition = null;
+  roomKey = null;
   constructor(ctx, env) {
     super(ctx, env);
     ctx.blockConcurrencyWhile(async () => {
@@ -31038,7 +31043,10 @@ var DurableUserHub = class extends DurableObject {
           try {
             const loaded = await registry[key]();
             const candidate = loaded.default ?? loaded;
-            if (isUserRoom(candidate)) return candidate;
+            if (isUserRoom(candidate)) {
+              this.roomKey = key;
+              return candidate;
+            }
           } catch {
           }
         }
@@ -31047,6 +31055,16 @@ var DurableUserHub = class extends DurableObject {
     }
     return this.roomDefinition;
   }
+  /**
+   * How a room execution presents itself to grant policies: as the endpoint
+   * it declares it fronts, otherwise as a room named by its registry key.
+   */
+  roomCaller(room) {
+    if (typeof room.endpoint === "string" && room.endpoint.length > 0) {
+      return { kind: "userEndpoint", name: room.endpoint };
+    }
+    return { kind: "userRoom", name: this.roomKey ?? "room" };
+  }
   /** Whether `key` is room-owned state, exempt from `user_value_changed`. */
   async roomOwnsKey(key) {
     const room = await this.loadRoom();
@@ -31084,7 +31102,7 @@ var DurableUserHub = class extends DurableObject {
     const run = this.executionChain.run(async () => {
       const room = await this.loadRoom();
       if (!room?.onPresence) return;
-      const user = new UserStateImpl(this.roomUserId(), this.scopeHost(), { kind: "userRoom", name: "presence" });
+      const user = new UserStateImpl(this.roomUserId(), this.scopeHost(), this.roomCaller(room));
       try {
         await room.onPresence(user, event);
       } catch (error) {
@@ -31106,7 +31124,7 @@ var DurableUserHub = class extends DurableObject {
         this.sendRoomFrame(ws, JSON.stringify({ type: "room", id: frame.id, error: "no_room" }));
         return;
       }
-      const user = new UserStateImpl(this.roomUserId(), this.scopeHost(), { kind: "userRoom", name: "frame" });
+      const user = new UserStateImpl(this.roomUserId(), this.scopeHost(), this.roomCaller(room));
       try {
         await room.onFrame(user, connection, frame);
       } catch (error) {