veryfront 0.1.63 → 0.1.65

package/src/src/server/handlers/request/agent-stream.handler.ts

@@ -0,0 +1,125 @@
+import * as dntShim from "../../../../_dnt.shims.js";
+import type { Agent } from "../../../agent/index.js";
+import { defaultChannelInvokeDeps } from "../../../channels/invoke.js";
+import { type RuntimeAgentDiscoveryDeps } from "../../../channels/control-plane.js";
+import {
+  createRuntimeAgentStreamResponse,
+  type RuntimeAgentStreamExecutionDeps,
+} from "../../../internal-agents/run-stream.js";
+import {
+  ControlPlaneRequestError,
+  verifyControlPlaneRequest,
+} from "../../../internal-agents/control-plane-auth.js";
+import {
+  INTERNAL_AGENT_STREAM_MAX_BODY_BYTES,
+  InternalAgentRequestBodyTooLargeError,
+  readInternalAgentRequestBody,
+} from "../../../internal-agents/request-body.js";
+import {
+  AgentRunAlreadyExistsError,
+  agentRunSessionManager,
+} from "../../../internal-agents/session-manager.js";
+import { RuntimeRunAgentInputSchema } from "../../../internal-agents/schema.js";
+import { BaseHandler } from "../response/base.js";
+import type { HandlerContext, HandlerMetadata, HandlerPriority, HandlerResult } from "../types.js";
+import { PRIORITY_MEDIUM_API } from "../../../utils/constants/index.js";
+
+export interface AgentStreamHandlerDeps
+  extends RuntimeAgentDiscoveryDeps, RuntimeAgentStreamExecutionDeps {}
+
+const defaultDeps: AgentStreamHandlerDeps = {
+  ...defaultChannelInvokeDeps,
+  sessionManager: agentRunSessionManager,
+};
+
+function applyBuilderHeaders(target: dntShim.Response, source: dntShim.Headers): dntShim.Response {
+  const headers = new dntShim.Headers(target.headers);
+  for (const [key, value] of source.entries()) {
+    if (!headers.has(key)) {
+      headers.set(key, value);
+    }
+  }
+
+  return new dntShim.Response(target.body, {
+    status: target.status,
+    statusText: target.statusText,
+    headers,
+  });
+}
+
+export class AgentStreamHandler extends BaseHandler {
+  metadata: HandlerMetadata = {
+    name: "AgentStreamHandler",
+    priority: PRIORITY_MEDIUM_API as HandlerPriority,
+    patterns: [{ pattern: "/internal/agents/stream", exact: true, method: "POST" }],
+  };
+
+  constructor(private readonly deps: AgentStreamHandlerDeps = defaultDeps) {
+    super();
+  }
+
+  async handle(req: dntShim.Request, ctx: HandlerContext): Promise<HandlerResult> {
+    if (!this.shouldHandle(req, ctx)) {
+      return this.continue();
+    }
+
+    return this.withProxyContext(ctx, async () => {
+      const builder = this.createResponseBuilder(ctx)
+        .withCORS(req, ctx.securityConfig?.cors)
+        .withSecurity(ctx.securityConfig ?? undefined, req);
+
+      try {
+        const rawBody = await readInternalAgentRequestBody(
+          req,
+          INTERNAL_AGENT_STREAM_MAX_BODY_BYTES,
+        );
+        const payload = RuntimeRunAgentInputSchema.parse(JSON.parse(rawBody));
+        await verifyControlPlaneRequest(req, ctx, rawBody, {
+          expectedSubject: payload.runId,
+          expectedSurface: "studio",
+        });
+
+        await this.deps.ensureProjectDiscovery(ctx);
+
+        const agent = this.deps.getAgent(payload.agentId);
+        if (!agent) {
+          return this.respond(builder.json({ error: "Agent not found" }, 404));
+        }
+
+        const response = await createRuntimeAgentStreamResponse(payload, agent as Agent, this.deps);
+        return this.respond(applyBuilderHeaders(response, builder.headers));
+      } catch (error) {
+        if (error instanceof InternalAgentRequestBodyTooLargeError) {
+          return this.respond(builder.json({ error: error.message }, error.status));
+        }
+
+        if (error instanceof ControlPlaneRequestError) {
+          return this.respond(builder.json({ error: error.message }, error.status));
+        }
+
+        if (error instanceof SyntaxError) {
+          return this.respond(
+            builder.json({ error: "Invalid internal agent stream request" }, 400),
+          );
+        }
+
+        if (error instanceof AgentRunAlreadyExistsError) {
+          return this.respond(builder.json({ error: error.message }, 409));
+        }
+
+        if (error instanceof Error && error.name === "ZodError") {
+          return this.respond(
+            builder.json({ error: "Invalid internal agent stream request" }, 400),
+          );
+        }
+
+        this.logWarn("Internal agent stream request failed", {
+          error: error instanceof Error ? error.message : String(error),
+          projectId: ctx.projectId,
+          projectSlug: ctx.projectSlug,
+        });
+        return this.respond(builder.json({ error: "Internal agent stream failed" }, 500));
+      }
+    });
+  }
+}

package/src/src/server/handlers/request/internal-agents-list.handler.ts

@@ -0,0 +1,100 @@
+import * as dntShim from "../../../../_dnt.shims.js";
+import { BaseHandler } from "../response/base.js";
+import type { HandlerContext, HandlerMetadata, HandlerPriority, HandlerResult } from "../types.js";
+import {
+  type ControlPlaneAgentsListRequest,
+  ControlPlaneAgentsListRequestSchema,
+  listRuntimeAgents,
+  type RuntimeAgentDiscoveryDeps,
+} from "../../../channels/control-plane.js";
+import { defaultChannelInvokeDeps } from "../../../channels/invoke.js";
+import {
+  ControlPlaneRequestError,
+  verifyControlPlaneRequest,
+} from "../../../internal-agents/control-plane-auth.js";
+import {
+  INTERNAL_AGENT_CONTROL_PLANE_MAX_BODY_BYTES,
+  InternalAgentRequestBodyTooLargeError,
+  readInternalAgentRequestBody,
+} from "../../../internal-agents/request-body.js";
+import { PRIORITY_MEDIUM_API } from "../../../utils/constants/index.js";
+import { ZodError } from "zod";
+
+export class InternalAgentsListHandler extends BaseHandler {
+  metadata: HandlerMetadata = {
+    name: "InternalAgentsListHandler",
+    priority: PRIORITY_MEDIUM_API as HandlerPriority,
+    patterns: [{ pattern: "/internal/agents/list", exact: true, method: "POST" }],
+  };
+
+  constructor(private readonly deps: RuntimeAgentDiscoveryDeps = defaultChannelInvokeDeps) {
+    super();
+  }
+
+  async handle(req: dntShim.Request, ctx: HandlerContext): Promise<HandlerResult> {
+    if (!this.shouldHandle(req, ctx)) {
+      return this.continue();
+    }
+
+    return this.withProxyContext(ctx, async () => {
+      const builder = this.createResponseBuilder(ctx)
+        .withCORS(req, ctx.securityConfig?.cors)
+        .withSecurity(ctx.securityConfig ?? undefined, req);
+
+      try {
+        const rawBody = await readInternalAgentRequestBody(
+          req,
+          INTERNAL_AGENT_CONTROL_PLANE_MAX_BODY_BYTES,
+        );
+        const payload: ControlPlaneAgentsListRequest = ControlPlaneAgentsListRequestSchema.parse(
+          JSON.parse(rawBody),
+        );
+        const claims = await verifyControlPlaneRequest(req, ctx, rawBody, {
+          expectedSubject: payload.requestId,
+          expectedSurface: payload.surface,
+        });
+
+        if (
+          payload.projectId !== claims.project_id ||
+          (ctx.projectId !== undefined && payload.projectId !== ctx.projectId)
+        ) {
+          this.logWarn("Internal agents list request body did not match signed claims", {
+            projectSlug: ctx.projectSlug,
+            projectId: ctx.projectId,
+            requestId: payload.requestId,
+            signedRequestId: claims.sub,
+            surface: payload.surface,
+            signedSurface: claims.surface,
+          });
+          return this.respond(builder.json({ error: "Invalid control-plane signature" }, 401));
+        }
+        const response = await listRuntimeAgents(ctx, this.deps);
+        return this.respond(builder.json(response, 200));
+      } catch (error) {
+        if (error instanceof InternalAgentRequestBodyTooLargeError) {
+          return this.respond(builder.json({ error: error.message }, error.status));
+        }
+
+        if (error instanceof ControlPlaneRequestError) {
+          this.logWarn("Internal agents list signature verification failed", {
+            error: error.message,
+            projectSlug: ctx.projectSlug,
+            projectId: ctx.projectId,
+          });
+          return this.respond(builder.json({ error: error.message }, error.status));
+        }
+
+        if (error instanceof SyntaxError || error instanceof ZodError) {
+          this.logWarn("Internal agents list request validation failed", {
+            error: error instanceof Error ? error.message : String(error),
+            projectSlug: ctx.projectSlug,
+            projectId: ctx.projectId,
+          });
+          return this.respond(builder.json({ error: "Invalid internal agents request" }, 400));
+        }
+
+        throw error;
+      }
+    });
+  }
+}

package/src/src/server/runtime-handler/index.ts

@@ -53,6 +53,10 @@ import { HMRHandler } from "../handlers/preview/hmr.handler.js";
 import { MarkdownPreviewHandler } from "../handlers/preview/markdown-preview.handler.js";
 import { OpenAPIHandler } from "../handlers/request/openapi.handler.js";
 import { OpenAPIDocsHandler } from "../handlers/request/openapi-docs.handler.js";
+import { InternalAgentsListHandler } from "../handlers/request/internal-agents-list.handler.js";
+import { AgentStreamHandler } from "../handlers/request/agent-stream.handler.js";
+import { AgentRunResumeHandler } from "../handlers/request/agent-run-resume.handler.js";
+import { AgentRunCancelHandler } from "../handlers/request/agent-run-cancel.handler.js";
 import { ChannelInvokeHandler } from "../handlers/request/channel-invoke.handler.js";
 import { DevDashboardHandler } from "../handlers/dev/dashboard/index.js";
 import { ProjectsHandler } from "../handlers/dev/projects/index.js";
@@ -205,6 +209,10 @@ export function createVeryfrontHandler(
     new DebugContextHandler(),
     new OpenAPIHandler(),
     new OpenAPIDocsHandler(),
+    new InternalAgentsListHandler(),
+    new AgentStreamHandler(),
+    new AgentRunResumeHandler(),
+    new AgentRunCancelHandler(),
     new ChannelInvokeHandler(),
     new DevDashboardHandler(),
     new ProjectsHandler(),