veryfront 0.1.1044 → 0.1.1046

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.1044",
+    "version": "0.1.1046",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "minimumDependencyAge": {

package/esm/src/server/handlers/request/agent-stream.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-stream.handler.d.ts","sourceRoot":"","sources":["../../../../../src/src/server/handlers/request/agent-stream.handler.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,KAAK,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,wCAAwC,CAAC;AAQhD,OAAO,EACL,4BAA4B,EAE7B,MAAM,2CAA2C,CAAC;AAyBnD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAmB,aAAa,EAAE,MAAM,aAAa,CAAC;AAcnG,MAAM,WAAW,sBACf,SAAQ,yBAAyB,EAAE,+BAA+B;IAClE,4BAA4B,CAAC,EAAE,OAAO,4BAA4B,CAAC;IACnE,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,+BAA+B,CAAC,YAAY,CAAC,CAAC;CACpF;AAwgBD,qBAAa,kBAAmB,SAAQ,WAAW;IASrC,OAAO,CAAC,QAAQ,CAAC,IAAI;IARjC,QAAQ,EAAE,eAAe,CAMvB;gBAE2B,IAAI,GAAE,sBAAoC;IAIvE,OAAO,CAAC,sBAAsB;IAwBxB,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CA4LxE"}
+{"version":3,"file":"agent-stream.handler.d.ts","sourceRoot":"","sources":["../../../../../src/src/server/handlers/request/agent-stream.handler.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,KAAK,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,wCAAwC,CAAC;AAQhD,OAAO,EACL,4BAA4B,EAE7B,MAAM,2CAA2C,CAAC;AAyBnD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAmB,aAAa,EAAE,MAAM,aAAa,CAAC;AAcnG,MAAM,WAAW,sBACf,SAAQ,yBAAyB,EAAE,+BAA+B;IAClE,4BAA4B,CAAC,EAAE,OAAO,4BAA4B,CAAC;IACnE,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,+BAA+B,CAAC,YAAY,CAAC,CAAC;CACpF;AAwgBD,qBAAa,kBAAmB,SAAQ,WAAW;IASrC,OAAO,CAAC,QAAQ,CAAC,IAAI;IARjC,QAAQ,EAAE,eAAe,CAMvB;gBAE2B,IAAI,GAAE,sBAAoC;IAIvE,OAAO,CAAC,sBAAsB;IAwBxB,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CAqMxE"}

package/esm/src/server/handlers/request/agent-stream.handler.js

@@ -423,145 +423,150 @@ export class AgentStreamHandler extends BaseHandler {
         if (isServerShuttingDown()) {
             return this.respond(buildRuntimeShuttingDownResponse(this.createResponseBuilder(ctx)));
         }
-        return this.withProxyContext(ctx, async () => {
-            const builder = this.createResponseBuilder(ctx)
-                .withCORS(req, ctx.securityConfig?.cors)
-                .withSecurity(ctx.securityConfig ?? undefined, req);
-            try {
-                const pathRunId = getPathRunId(new URL(req.url).pathname);
-                const rawBody = await readInternalAgentRequestBody(req, INTERNAL_AGENT_STREAM_MAX_BODY_BYTES);
-                const payload = parseAgentStreamPayload(JSON.parse(rawBody));
-                if (!pathRunId || pathRunId !== payload.runId) {
-                    return this.respond(builder.json({ error: "CONTROL_PLANE_RUN_ID_MISMATCH" }, 400));
+        const builder = this.createResponseBuilder(ctx)
+            .withCORS(req, ctx.securityConfig?.cors)
+            .withSecurity(ctx.securityConfig ?? undefined, req);
+        try {
+            const pathRunId = getPathRunId(new URL(req.url).pathname);
+            const rawBody = await readInternalAgentRequestBody(req, INTERNAL_AGENT_STREAM_MAX_BODY_BYTES);
+            const payload = parseAgentStreamPayload(JSON.parse(rawBody));
+            if (!pathRunId || pathRunId !== payload.runId) {
+                return this.respond(builder.json({ error: "CONTROL_PLANE_RUN_ID_MISMATCH" }, 400));
+            }
+            await verifyControlPlaneRequest(req, ctx, rawBody, {
+                expectedSubject: payload.runId,
+                expectedSurface: "studio",
+            });
+            const apiAuthToken = payload.credentials?.authToken || ctx.proxyToken ||
+                getHostEnv("VERYFRONT_API_TOKEN") || "";
+            const requestScopedContext = {
+                ...ctx,
+                proxyToken: apiAuthToken || undefined,
+                requestContext: ctx.requestContext
+                    ? { ...ctx.requestContext, token: apiAuthToken }
+                    : ctx.requestContext,
+            };
+            logger.info("Accepted internal agent stream request", {
+                runId: payload.runId,
+                threadId: payload.threadId,
+                agentId: payload.agentId,
+                projectId: requestScopedContext.projectId,
+                projectSlug: requestScopedContext.projectSlug,
+                messageCount: payload.messages.length,
+                toolCount: payload.tools.length,
+                hasAgentSource: Boolean(payload.agentSource),
+                hasAgentConfig: Boolean(payload.agentConfig),
+            });
+            return await this.withProxyContext(requestScopedContext, () => this.withAgentSourceContext(requestScopedContext, payload.agentSource, async () => {
+                await this.deps.ensureProjectDiscovery(requestScopedContext);
+                const agent = this.deps.getAgent(payload.agentId);
+                if (!agent) {
+                    logger.warn("Internal agent stream request referenced unknown agent", {
+                        runId: payload.runId,
+                        agentId: payload.agentId,
+                        projectId: requestScopedContext.projectId,
+                        projectSlug: requestScopedContext.projectSlug,
+                    });
+                    return this.respond(builder.json({ error: "Agent not found" }, 404));
                 }
-                await verifyControlPlaneRequest(req, ctx, rawBody, {
-                    expectedSubject: payload.runId,
-                    expectedSurface: "studio",
+                // veryfront-api is the trusted control-plane caller; it resolves
+                // authorization before attaching request-scoped project-agent config.
+                const runtimeBaseAgent = payload.agentConfig
+                    ? createRuntimeAgentFromMarkdownDefinition(payload.agentConfig)
+                    : agent;
+                const runtimeInput = sanitizeRuntimeRunAgentInput(toRuntimeRunAgentInput(payload));
+                const localTools = this.deps.getLocalTools?.(runtimeBaseAgent.id);
+                const platformRuntimeAgent = await withVeryfrontPlatformRemoteTools({
+                    agent: runtimeBaseAgent,
+                    token: apiAuthToken || null,
+                    projectId: requestScopedContext.projectId ?? null,
+                    availableToolNames: runtimeInput.tools.map((tool) => tool.name),
                 });
-                logger.info("Accepted internal agent stream request", {
-                    runId: payload.runId,
-                    threadId: payload.threadId,
-                    agentId: payload.agentId,
-                    projectId: ctx.projectId,
-                    projectSlug: ctx.projectSlug,
-                    messageCount: payload.messages.length,
-                    toolCount: payload.tools.length,
-                    hasAgentSource: Boolean(payload.agentSource),
-                    hasAgentConfig: Boolean(payload.agentConfig),
+                const runtimeAgent = withVeryfrontStudioRemoteTools({
+                    agent: platformRuntimeAgent,
+                    token: apiAuthToken || null,
+                    projectId: requestScopedContext.projectId ?? null,
+                    forwardedProps: runtimeInput.forwardedProps,
+                    availableToolNames: runtimeInput.tools.map((tool) => tool.name),
+                    conversationId: runtimeInput.threadId,
                 });
-                return await this.withAgentSourceContext(ctx, payload.agentSource, async () => {
-                    await this.deps.ensureProjectDiscovery(ctx);
-                    const agent = this.deps.getAgent(payload.agentId);
-                    if (!agent) {
-                        logger.warn("Internal agent stream request referenced unknown agent", {
+                // Load project env vars so source-defined MCP tool headers resolve
+                // via _getProjectEnv(). Control-plane requests don't go through the proxy and
+                // therefore don't carry x-environment-id, so we discover the production env ID
+                // from the API (one fetch per project per server lifetime, then cached).
+                let envVarsForAgent = {};
+                if (requestScopedContext.projectSlug && apiAuthToken) {
+                    const environmentId = requestScopedContext.environmentId ??
+                        await _resolveProductionEnvironmentId(requestScopedContext.projectSlug, apiAuthToken);
+                    if (environmentId) {
+                        envVarsForAgent = await _agentEnvVarCache.get(environmentId, apiAuthToken, requestScopedContext.projectSlug);
+                        logger.debug("Agent stream env vars loaded", {
                             runId: payload.runId,
-                            agentId: payload.agentId,
-                            projectId: ctx.projectId,
-                            projectSlug: ctx.projectSlug,
+                            projectSlug: requestScopedContext.projectSlug,
+                            environmentId,
+                            count: Object.keys(envVarsForAgent).length,
                         });
-                        return this.respond(builder.json({ error: "Agent not found" }, 404));
                     }
-                    // veryfront-api is the trusted control-plane caller; it resolves
-                    // authorization before attaching request-scoped project-agent config.
-                    const runtimeBaseAgent = payload.agentConfig
-                        ? createRuntimeAgentFromMarkdownDefinition(payload.agentConfig)
-                        : agent;
-                    const runtimeInput = sanitizeRuntimeRunAgentInput(toRuntimeRunAgentInput(payload));
-                    const localTools = this.deps.getLocalTools?.(runtimeBaseAgent.id);
-                    const apiAuthToken = payload.credentials?.authToken || ctx.proxyToken ||
-                        getHostEnv("VERYFRONT_API_TOKEN") || "";
-                    const platformRuntimeAgent = await withVeryfrontPlatformRemoteTools({
-                        agent: runtimeBaseAgent,
-                        token: apiAuthToken || null,
-                        projectId: ctx.projectId ?? null,
-                        availableToolNames: runtimeInput.tools.map((tool) => tool.name),
-                    });
-                    const runtimeAgent = withVeryfrontStudioRemoteTools({
-                        agent: platformRuntimeAgent,
-                        token: apiAuthToken || null,
-                        projectId: ctx.projectId ?? null,
-                        forwardedProps: runtimeInput.forwardedProps,
-                        availableToolNames: runtimeInput.tools.map((tool) => tool.name),
-                        conversationId: runtimeInput.threadId,
-                    });
-                    // Load project env vars so source-defined MCP tool headers resolve
-                    // via _getProjectEnv(). Control-plane requests don't go through the proxy and
-                    // therefore don't carry x-environment-id, so we discover the production env ID
-                    // from the API (one fetch per project per server lifetime, then cached).
-                    let envVarsForAgent = {};
-                    if (ctx.projectSlug && apiAuthToken) {
-                        const environmentId = ctx.environmentId ??
-                            await _resolveProductionEnvironmentId(ctx.projectSlug, apiAuthToken);
-                        if (environmentId) {
-                            envVarsForAgent = await _agentEnvVarCache.get(environmentId, apiAuthToken, ctx.projectSlug);
-                            logger.debug("Agent stream env vars loaded", {
-                                runId: payload.runId,
-                                projectSlug: ctx.projectSlug,
-                                environmentId,
-                                count: Object.keys(envVarsForAgent).length,
-                            });
-                        }
-                    }
-                    const runAgentStream = () => createRuntimeAgentStreamResponse(runtimeInput, runtimeAgent, {
-                        ...this.deps,
-                        localTools,
-                        projectAgentSandbox: {
-                            apiUrl: resolveVeryfrontApiBaseUrlFromHostEnv(),
-                            authToken: apiAuthToken || undefined,
-                            projectId: ctx.projectId ?? null,
-                        },
-                    });
-                    const shouldIsolateEnv = apiAuthToken.length > 0;
-                    const response = shouldIsolateEnv
-                        ? await runWithProjectEnv(buildAgentStreamEnv({
-                            envVars: envVarsForAgent,
-                            proxyToken: apiAuthToken,
-                            projectSlug: ctx.projectSlug,
-                        }), runAgentStream)
-                        : await runAgentStream();
-                    logger.info("Internal agent stream response created", {
-                        runId: payload.runId,
-                        threadId: payload.threadId,
-                        agentId: payload.agentId,
-                        projectId: ctx.projectId,
-                        projectSlug: ctx.projectSlug,
-                    });
-                    const runtimeOwnerInvokeUrl = await this.deps.resolveRuntimeOwnerInvokeUrl?.(req) ??
-                        null;
-                    const responseWithOwner = runtimeOwnerInvokeUrl
-                        ? setResponseHeader(response, RUNTIME_OWNER_INVOKE_URL_HEADER, runtimeOwnerInvokeUrl)
-                        : response;
-                    return this.respond(applyBuilderHeaders(responseWithOwner, builder.headers));
-                });
-            }
-            catch (error) {
-                if (error instanceof InternalAgentRequestBodyTooLargeError) {
-                    return this.respond(builder.json({ error: error.message }, error.status));
-                }
-                if (error instanceof ControlPlaneRequestError) {
-                    return this.respond(builder.json({ error: error.message }, error.status));
-                }
-                if (error instanceof SyntaxError) {
-                    return this.respond(builder.json({ error: "Invalid internal agent stream request" }, 400));
-                }
-                if (error instanceof AgentRunAlreadyExistsError) {
-                    return this.respond(builder.json({ error: error.message }, 409));
-                }
-                if (error instanceof Error && error.name === "ZodError") {
-                    return this.respond(builder.json({ error: "Invalid internal agent stream request" }, 400));
                 }
-                this.logWarn("Internal agent stream request failed", {
-                    error: error instanceof Error ? error.message : String(error),
-                    projectId: ctx.projectId,
-                    projectSlug: ctx.projectSlug,
+                const runAgentStream = () => createRuntimeAgentStreamResponse(runtimeInput, runtimeAgent, {
+                    ...this.deps,
+                    localTools,
+                    projectAgentSandbox: {
+                        apiUrl: resolveVeryfrontApiBaseUrlFromHostEnv(),
+                        authToken: apiAuthToken || undefined,
+                        projectId: requestScopedContext.projectId ?? null,
+                    },
                 });
-                logger.error("Internal agent stream handler failed", {
-                    projectId: ctx.projectId,
-                    projectSlug: ctx.projectSlug,
-                    error: error instanceof Error ? error.message : String(error),
+                const shouldIsolateEnv = apiAuthToken.length > 0;
+                const response = shouldIsolateEnv
+                    ? await runWithProjectEnv(buildAgentStreamEnv({
+                        envVars: envVarsForAgent,
+                        proxyToken: apiAuthToken,
+                        projectSlug: requestScopedContext.projectSlug,
+                    }), runAgentStream)
+                    : await runAgentStream();
+                logger.info("Internal agent stream response created", {
+                    runId: payload.runId,
+                    threadId: payload.threadId,
+                    agentId: payload.agentId,
+                    projectId: requestScopedContext.projectId,
+                    projectSlug: requestScopedContext.projectSlug,
                 });
-                return this.respond(builder.json({ error: "Internal agent stream failed" }, 500));
+                const runtimeOwnerInvokeUrl = await this.deps.resolveRuntimeOwnerInvokeUrl?.(req) ??
+                    null;
+                const responseWithOwner = runtimeOwnerInvokeUrl
+                    ? setResponseHeader(response, RUNTIME_OWNER_INVOKE_URL_HEADER, runtimeOwnerInvokeUrl)
+                    : response;
+                return this.respond(applyBuilderHeaders(responseWithOwner, builder.headers));
+            }));
+        }
+        catch (error) {
+            if (error instanceof InternalAgentRequestBodyTooLargeError) {
+                return this.respond(builder.json({ error: error.message }, error.status));
             }
-        });
+            if (error instanceof ControlPlaneRequestError) {
+                return this.respond(builder.json({ error: error.message }, error.status));
+            }
+            if (error instanceof SyntaxError) {
+                return this.respond(builder.json({ error: "Invalid internal agent stream request" }, 400));
+            }
+            if (error instanceof AgentRunAlreadyExistsError) {
+                return this.respond(builder.json({ error: error.message }, 409));
+            }
+            if (error instanceof Error && error.name === "ZodError") {
+                return this.respond(builder.json({ error: "Invalid internal agent stream request" }, 400));
+            }
+            this.logWarn("Internal agent stream request failed", {
+                error: error instanceof Error ? error.message : String(error),
+                projectId: ctx.projectId,
+                projectSlug: ctx.projectSlug,
+            });
+            logger.error("Internal agent stream handler failed", {
+                projectId: ctx.projectId,
+                projectSlug: ctx.projectSlug,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return this.respond(builder.json({ error: "Internal agent stream failed" }, 500));
+        }
     }
 }

package/esm/src/utils/version-constant.d.ts

@@ -1,3 +1,3 @@
 /** Shared version value. */
-export declare const VERSION = "0.1.1044";
+export declare const VERSION = "0.1.1046";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.js

@@ -1,4 +1,4 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
 /** Shared version value. */
-export const VERSION = "0.1.1044";
+export const VERSION = "0.1.1046";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.1044",
+  "version": "0.1.1046",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",
@@ -330,9 +330,9 @@
     "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "ws": "8.21.0",
-    "@veryfront/ext-bundler-esbuild": "0.1.1044",
-    "@veryfront/ext-content-mdx": "0.1.1044",
-    "@veryfront/ext-css-tailwind": "0.1.1044"
+    "@veryfront/ext-bundler-esbuild": "0.1.1046",
+    "@veryfront/ext-content-mdx": "0.1.1046",
+    "@veryfront/ext-css-tailwind": "0.1.1046"
   },
   "devDependencies": {
     "@types/node": "20.9.0"