veryfront 0.1.64 → 0.1.67

package/src/src/server/handlers/request/agent-run-resume.handler.ts

@@ -0,0 +1,108 @@
+import * as dntShim from "../../../../_dnt.shims.js";
+import {
+  ControlPlaneRequestError,
+  verifyControlPlaneRequest,
+} from "../../../internal-agents/control-plane-auth.js";
+import {
+  type AgentRunSessionManager,
+  agentRunSessionManager,
+  RunNotActiveError,
+  ToolResultConflictError,
+  ToolResultNotWaitingError,
+} from "../../../internal-agents/session-manager.js";
+import {
+  INTERNAL_AGENT_CONTROL_PLANE_MAX_BODY_BYTES,
+  InternalAgentRequestBodyTooLargeError,
+  readInternalAgentRequestBody,
+} from "../../../internal-agents/request-body.js";
+import { ResumeSignalSchema } from "../../../internal-agents/schema.js";
+import { BaseHandler } from "../response/base.js";
+import type { HandlerContext, HandlerMetadata, HandlerPriority, HandlerResult } from "../types.js";
+import { PRIORITY_MEDIUM_API } from "../../../utils/constants/index.js";
+
+const RESUME_PATH_REGEX = /^\/internal\/agents\/runs\/([^/]+)\/resume$/;
+
+function getRunId(pathname: string): string | null {
+  return RESUME_PATH_REGEX.exec(pathname)?.[1] ?? null;
+}
+
+export class AgentRunResumeHandler extends BaseHandler {
+  metadata: HandlerMetadata = {
+    name: "AgentRunResumeHandler",
+    priority: PRIORITY_MEDIUM_API as HandlerPriority,
+    patterns: [{ pattern: "/internal/agents/runs/", prefix: true, method: "POST" }],
+  };
+
+  constructor(private readonly sessionManager: AgentRunSessionManager = agentRunSessionManager) {
+    super();
+  }
+
+  async handle(req: dntShim.Request, ctx: HandlerContext): Promise<HandlerResult> {
+    if (!this.shouldHandle(req, ctx)) {
+      return this.continue();
+    }
+
+    const runId = getRunId(new URL(req.url).pathname);
+    if (!runId) {
+      return this.continue();
+    }
+
+    return this.withProxyContext(ctx, async () => {
+      const builder = this.createResponseBuilder(ctx)
+        .withCORS(req, ctx.securityConfig?.cors)
+        .withSecurity(ctx.securityConfig ?? undefined, req);
+
+      try {
+        const rawBody = await readInternalAgentRequestBody(
+          req,
+          INTERNAL_AGENT_CONTROL_PLANE_MAX_BODY_BYTES,
+        );
+        await verifyControlPlaneRequest(req, ctx, rawBody, {
+          expectedSubject: runId,
+          expectedSurface: "studio",
+        });
+
+        const signal = ResumeSignalSchema.parse(JSON.parse(rawBody));
+        const outcome = this.sessionManager.submitToolResult(runId, {
+          toolCallId: signal.toolCallId,
+          result: signal.result,
+          isError: signal.isError,
+        });
+
+        return this.respond(builder.json(outcome, 200));
+      } catch (error) {
+        if (error instanceof InternalAgentRequestBodyTooLargeError) {
+          return this.respond(builder.json({ error: error.message }, error.status));
+        }
+
+        if (error instanceof ControlPlaneRequestError) {
+          return this.respond(builder.json({ error: error.message }, error.status));
+        }
+
+        if (error instanceof SyntaxError || (error instanceof Error && error.name === "ZodError")) {
+          return this.respond(builder.json({ error: "Invalid resume request" }, 400));
+        }
+
+        if (error instanceof ToolResultConflictError) {
+          return this.respond(builder.json({ error: "TOOL_RESULT_CONFLICT" }, 409));
+        }
+
+        if (error instanceof ToolResultNotWaitingError) {
+          return this.respond(builder.json({ error: "TOOL_RESULT_NOT_WAITING" }, 409));
+        }
+
+        if (error instanceof RunNotActiveError) {
+          return this.respond(builder.json({ error: "RUN_NOT_ACTIVE" }, 410));
+        }
+
+        this.logWarn("Internal agent run resume failed", {
+          error: error instanceof Error ? error.message : String(error),
+          runId,
+          projectId: ctx.projectId,
+          projectSlug: ctx.projectSlug,
+        });
+        return this.respond(builder.json({ error: "Internal resume failed" }, 500));
+      }
+    });
+  }
+}

package/src/src/server/handlers/request/agent-stream.handler.ts

@@ -0,0 +1,125 @@
+import * as dntShim from "../../../../_dnt.shims.js";
+import type { Agent } from "../../../agent/index.js";
+import { defaultChannelInvokeDeps } from "../../../channels/invoke.js";
+import { type RuntimeAgentDiscoveryDeps } from "../../../channels/control-plane.js";
+import {
+  createRuntimeAgentStreamResponse,
+  type RuntimeAgentStreamExecutionDeps,
+} from "../../../internal-agents/run-stream.js";
+import {
+  ControlPlaneRequestError,
+  verifyControlPlaneRequest,
+} from "../../../internal-agents/control-plane-auth.js";
+import {
+  INTERNAL_AGENT_STREAM_MAX_BODY_BYTES,
+  InternalAgentRequestBodyTooLargeError,
+  readInternalAgentRequestBody,
+} from "../../../internal-agents/request-body.js";
+import {
+  AgentRunAlreadyExistsError,
+  agentRunSessionManager,
+} from "../../../internal-agents/session-manager.js";
+import { RuntimeRunAgentInputSchema } from "../../../internal-agents/schema.js";
+import { BaseHandler } from "../response/base.js";
+import type { HandlerContext, HandlerMetadata, HandlerPriority, HandlerResult } from "../types.js";
+import { PRIORITY_MEDIUM_API } from "../../../utils/constants/index.js";
+
+export interface AgentStreamHandlerDeps
+  extends RuntimeAgentDiscoveryDeps, RuntimeAgentStreamExecutionDeps {}
+
+const defaultDeps: AgentStreamHandlerDeps = {
+  ...defaultChannelInvokeDeps,
+  sessionManager: agentRunSessionManager,
+};
+
+function applyBuilderHeaders(target: dntShim.Response, source: dntShim.Headers): dntShim.Response {
+  const headers = new dntShim.Headers(target.headers);
+  for (const [key, value] of source.entries()) {
+    if (!headers.has(key)) {
+      headers.set(key, value);
+    }
+  }
+
+  return new dntShim.Response(target.body, {
+    status: target.status,
+    statusText: target.statusText,
+    headers,
+  });
+}
+
+export class AgentStreamHandler extends BaseHandler {
+  metadata: HandlerMetadata = {
+    name: "AgentStreamHandler",
+    priority: PRIORITY_MEDIUM_API as HandlerPriority,
+    patterns: [{ pattern: "/internal/agents/stream", exact: true, method: "POST" }],
+  };
+
+  constructor(private readonly deps: AgentStreamHandlerDeps = defaultDeps) {
+    super();
+  }
+
+  async handle(req: dntShim.Request, ctx: HandlerContext): Promise<HandlerResult> {
+    if (!this.shouldHandle(req, ctx)) {
+      return this.continue();
+    }
+
+    return this.withProxyContext(ctx, async () => {
+      const builder = this.createResponseBuilder(ctx)
+        .withCORS(req, ctx.securityConfig?.cors)
+        .withSecurity(ctx.securityConfig ?? undefined, req);
+
+      try {
+        const rawBody = await readInternalAgentRequestBody(
+          req,
+          INTERNAL_AGENT_STREAM_MAX_BODY_BYTES,
+        );
+        const payload = RuntimeRunAgentInputSchema.parse(JSON.parse(rawBody));
+        await verifyControlPlaneRequest(req, ctx, rawBody, {
+          expectedSubject: payload.runId,
+          expectedSurface: "studio",
+        });
+
+        await this.deps.ensureProjectDiscovery(ctx);
+
+        const agent = this.deps.getAgent(payload.agentId);
+        if (!agent) {
+          return this.respond(builder.json({ error: "Agent not found" }, 404));
+        }
+
+        const response = await createRuntimeAgentStreamResponse(payload, agent as Agent, this.deps);
+        return this.respond(applyBuilderHeaders(response, builder.headers));
+      } catch (error) {
+        if (error instanceof InternalAgentRequestBodyTooLargeError) {
+          return this.respond(builder.json({ error: error.message }, error.status));
+        }
+
+        if (error instanceof ControlPlaneRequestError) {
+          return this.respond(builder.json({ error: error.message }, error.status));
+        }
+
+        if (error instanceof SyntaxError) {
+          return this.respond(
+            builder.json({ error: "Invalid internal agent stream request" }, 400),
+          );
+        }
+
+        if (error instanceof AgentRunAlreadyExistsError) {
+          return this.respond(builder.json({ error: error.message }, 409));
+        }
+
+        if (error instanceof Error && error.name === "ZodError") {
+          return this.respond(
+            builder.json({ error: "Invalid internal agent stream request" }, 400),
+          );
+        }
+
+        this.logWarn("Internal agent stream request failed", {
+          error: error instanceof Error ? error.message : String(error),
+          projectId: ctx.projectId,
+          projectSlug: ctx.projectSlug,
+        });
+        return this.respond(builder.json({ error: "Internal agent stream failed" }, 500));
+      }
+    });
+  }
+}

package/src/src/server/handlers/request/internal-agents-list.handler.ts

@@ -0,0 +1,100 @@
+import * as dntShim from "../../../../_dnt.shims.js";
+import { BaseHandler } from "../response/base.js";
+import type { HandlerContext, HandlerMetadata, HandlerPriority, HandlerResult } from "../types.js";
+import {
+  type ControlPlaneAgentsListRequest,
+  ControlPlaneAgentsListRequestSchema,
+  listRuntimeAgents,
+  type RuntimeAgentDiscoveryDeps,
+} from "../../../channels/control-plane.js";
+import { defaultChannelInvokeDeps } from "../../../channels/invoke.js";
+import {
+  ControlPlaneRequestError,
+  verifyControlPlaneRequest,
+} from "../../../internal-agents/control-plane-auth.js";
+import {
+  INTERNAL_AGENT_CONTROL_PLANE_MAX_BODY_BYTES,
+  InternalAgentRequestBodyTooLargeError,
+  readInternalAgentRequestBody,
+} from "../../../internal-agents/request-body.js";
+import { PRIORITY_MEDIUM_API } from "../../../utils/constants/index.js";
+import { ZodError } from "zod";
+
+export class InternalAgentsListHandler extends BaseHandler {
+  metadata: HandlerMetadata = {
+    name: "InternalAgentsListHandler",
+    priority: PRIORITY_MEDIUM_API as HandlerPriority,
+    patterns: [{ pattern: "/internal/agents/list", exact: true, method: "POST" }],
+  };
+
+  constructor(private readonly deps: RuntimeAgentDiscoveryDeps = defaultChannelInvokeDeps) {
+    super();
+  }
+
+  async handle(req: dntShim.Request, ctx: HandlerContext): Promise<HandlerResult> {
+    if (!this.shouldHandle(req, ctx)) {
+      return this.continue();
+    }
+
+    return this.withProxyContext(ctx, async () => {
+      const builder = this.createResponseBuilder(ctx)
+        .withCORS(req, ctx.securityConfig?.cors)
+        .withSecurity(ctx.securityConfig ?? undefined, req);
+
+      try {
+        const rawBody = await readInternalAgentRequestBody(
+          req,
+          INTERNAL_AGENT_CONTROL_PLANE_MAX_BODY_BYTES,
+        );
+        const payload: ControlPlaneAgentsListRequest = ControlPlaneAgentsListRequestSchema.parse(
+          JSON.parse(rawBody),
+        );
+        const claims = await verifyControlPlaneRequest(req, ctx, rawBody, {
+          expectedSubject: payload.requestId,
+          expectedSurface: payload.surface,
+        });
+
+        if (
+          payload.projectId !== claims.project_id ||
+          (ctx.projectId !== undefined && payload.projectId !== ctx.projectId)
+        ) {
+          this.logWarn("Internal agents list request body did not match signed claims", {
+            projectSlug: ctx.projectSlug,
+            projectId: ctx.projectId,
+            requestId: payload.requestId,
+            signedRequestId: claims.sub,
+            surface: payload.surface,
+            signedSurface: claims.surface,
+          });
+          return this.respond(builder.json({ error: "Invalid control-plane signature" }, 401));
+        }
+        const response = await listRuntimeAgents(ctx, this.deps);
+        return this.respond(builder.json(response, 200));
+      } catch (error) {
+        if (error instanceof InternalAgentRequestBodyTooLargeError) {
+          return this.respond(builder.json({ error: error.message }, error.status));
+        }
+
+        if (error instanceof ControlPlaneRequestError) {
+          this.logWarn("Internal agents list signature verification failed", {
+            error: error.message,
+            projectSlug: ctx.projectSlug,
+            projectId: ctx.projectId,
+          });
+          return this.respond(builder.json({ error: error.message }, error.status));
+        }
+
+        if (error instanceof SyntaxError || error instanceof ZodError) {
+          this.logWarn("Internal agents list request validation failed", {
+            error: error instanceof Error ? error.message : String(error),
+            projectSlug: ctx.projectSlug,
+            projectId: ctx.projectId,
+          });
+          return this.respond(builder.json({ error: "Invalid internal agents request" }, 400));
+        }
+
+        throw error;
+      }
+    });
+  }
+}

package/src/src/server/runtime-handler/index.ts

@@ -53,7 +53,10 @@ import { HMRHandler } from "../handlers/preview/hmr.handler.js";
 import { MarkdownPreviewHandler } from "../handlers/preview/markdown-preview.handler.js";
 import { OpenAPIHandler } from "../handlers/request/openapi.handler.js";
 import { OpenAPIDocsHandler } from "../handlers/request/openapi-docs.handler.js";
-import { ChannelAssistantsHandler } from "../handlers/request/channel-assistants.handler.js";
+import { InternalAgentsListHandler } from "../handlers/request/internal-agents-list.handler.js";
+import { AgentStreamHandler } from "../handlers/request/agent-stream.handler.js";
+import { AgentRunResumeHandler } from "../handlers/request/agent-run-resume.handler.js";
+import { AgentRunCancelHandler } from "../handlers/request/agent-run-cancel.handler.js";
 import { ChannelInvokeHandler } from "../handlers/request/channel-invoke.handler.js";
 import { DevDashboardHandler } from "../handlers/dev/dashboard/index.js";
 import { ProjectsHandler } from "../handlers/dev/projects/index.js";
@@ -206,7 +209,10 @@ export function createVeryfrontHandler(
     new DebugContextHandler(),
     new OpenAPIHandler(),
     new OpenAPIDocsHandler(),
-    new ChannelAssistantsHandler(),
+    new InternalAgentsListHandler(),
+    new AgentStreamHandler(),
+    new AgentRunResumeHandler(),
+    new AgentRunCancelHandler(),
     new ChannelInvokeHandler(),
     new DevDashboardHandler(),
     new ProjectsHandler(),

package/esm/src/server/handlers/request/channel-assistants.handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"channel-assistants.handler.d.ts","sourceRoot":"","sources":["../../../../../src/src/server/handlers/request/channel-assistants.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAmB,aAAa,EAAE,MAAM,aAAa,CAAC;AACnG,OAAO,EAEL,KAAK,iBAAiB,EAIvB,MAAM,6BAA6B,CAAC;AASrC,qBAAa,wBAAyB,SAAQ,WAAW;IAO3C,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,QAAQ,EAAE,eAAe,CAIvB;gBAE2B,IAAI,GAAE,iBAA4C;IAIzE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CAgEhF"}

package/esm/src/server/handlers/request/channel-assistants.handler.js

@@ -1,71 +0,0 @@
-import { BaseHandler } from "../response/base.js";
-import { ChannelAssistantsRequestSchema, defaultChannelInvokeDeps, listChannelAssistants, verifyDispatchJws, } from "../../../channels/invoke.js";
-import { HTTP_INTERNAL_SERVER_ERROR, PRIORITY_MEDIUM_API, } from "../../../utils/constants/index.js";
-const DISPATCH_JWS_HEADER = "x-veryfront-dispatch-jws";
-const MAX_DISPATCH_SIGNATURE_AGE_SECONDS = 60;
-export class ChannelAssistantsHandler extends BaseHandler {
-    deps;
-    metadata = {
-        name: "ChannelAssistantsHandler",
-        priority: PRIORITY_MEDIUM_API,
-        patterns: [{ pattern: "/channels/assistants", exact: true, method: "POST" }],
-    };
-    constructor(deps = defaultChannelInvokeDeps) {
-        super();
-        this.deps = deps;
-    }
-    async handle(req, ctx) {
-        if (!this.shouldHandle(req, ctx)) {
-            return this.continue();
-        }
-        return this.withProxyContext(ctx, async () => {
-            const builder = this.createResponseBuilder(ctx)
-                .withCORS(req, ctx.securityConfig?.cors)
-                .withSecurity(ctx.securityConfig ?? undefined, req);
-            const publicKeyPem = ctx.adapter.env.get("CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY");
-            if (!publicKeyPem) {
-                this.logWarn("Missing CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY for channel assistants endpoint");
-                return this.respond(builder.json({ error: "Channel dispatch verification is not configured" }, HTTP_INTERNAL_SERVER_ERROR));
-            }
-            const projectSlug = ctx.projectSlug;
-            if (!projectSlug) {
-                this.logWarn("Channel assistants request arrived without resolved project slug");
-                return this.respond(builder.json({ error: "Project context is unavailable" }, 400));
-            }
-            const dispatchJws = req.headers.get(DISPATCH_JWS_HEADER);
-            if (!dispatchJws) {
-                return this.respond(builder.json({ error: "Missing dispatch signature" }, 401));
-            }
-            const rawBody = await req.text();
-            try {
-                await verifyDispatchJws(dispatchJws, rawBody, {
-                    audience: projectSlug,
-                    expectedProjectId: ctx.projectId,
-                    publicKeyPem,
-                    maxAgeSeconds: MAX_DISPATCH_SIGNATURE_AGE_SECONDS,
-                });
-            }
-            catch (error) {
-                this.logWarn("Channel assistants signature verification failed", {
-                    error: error instanceof Error ? error.message : String(error),
-                    projectSlug,
-                    projectId: ctx.projectId,
-                });
-                return this.respond(builder.json({ error: "Invalid dispatch signature" }, 401));
-            }
-            try {
-                ChannelAssistantsRequestSchema.parse(JSON.parse(rawBody));
-            }
-            catch (error) {
-                this.logWarn("Channel assistants request validation failed", {
-                    error: error instanceof Error ? error.message : String(error),
-                    projectSlug,
-                    projectId: ctx.projectId,
-                });
-                return this.respond(builder.json({ error: "Invalid channel assistants request" }, 400));
-            }
-            const response = await listChannelAssistants(ctx, this.deps);
-            return this.respond(builder.json(response, 200));
-        });
-    }
-}

package/src/src/server/handlers/request/channel-assistants.handler.ts

@@ -1,94 +0,0 @@
-import * as dntShim from "../../../../_dnt.shims.js";
-import { BaseHandler } from "../response/base.js";
-import type { HandlerContext, HandlerMetadata, HandlerPriority, HandlerResult } from "../types.js";
-import {
-  ChannelAssistantsRequestSchema,
-  type ChannelInvokeDeps,
-  defaultChannelInvokeDeps,
-  listChannelAssistants,
-  verifyDispatchJws,
-} from "../../../channels/invoke.js";
-import {
-  HTTP_INTERNAL_SERVER_ERROR,
-  PRIORITY_MEDIUM_API,
-} from "../../../utils/constants/index.js";
-
-const DISPATCH_JWS_HEADER = "x-veryfront-dispatch-jws";
-const MAX_DISPATCH_SIGNATURE_AGE_SECONDS = 60;
-
-export class ChannelAssistantsHandler extends BaseHandler {
-  metadata: HandlerMetadata = {
-    name: "ChannelAssistantsHandler",
-    priority: PRIORITY_MEDIUM_API as HandlerPriority,
-    patterns: [{ pattern: "/channels/assistants", exact: true, method: "POST" }],
-  };
-
-  constructor(private readonly deps: ChannelInvokeDeps = defaultChannelInvokeDeps) {
-    super();
-  }
-
-  async handle(req: dntShim.Request, ctx: HandlerContext): Promise<HandlerResult> {
-    if (!this.shouldHandle(req, ctx)) {
-      return this.continue();
-    }
-
-    return this.withProxyContext(ctx, async () => {
-      const builder = this.createResponseBuilder(ctx)
-        .withCORS(req, ctx.securityConfig?.cors)
-        .withSecurity(ctx.securityConfig ?? undefined, req);
-
-      const publicKeyPem = ctx.adapter.env.get("CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY");
-      if (!publicKeyPem) {
-        this.logWarn("Missing CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY for channel assistants endpoint");
-        return this.respond(
-          builder.json(
-            { error: "Channel dispatch verification is not configured" },
-            HTTP_INTERNAL_SERVER_ERROR,
-          ),
-        );
-      }
-
-      const projectSlug = ctx.projectSlug;
-      if (!projectSlug) {
-        this.logWarn("Channel assistants request arrived without resolved project slug");
-        return this.respond(builder.json({ error: "Project context is unavailable" }, 400));
-      }
-
-      const dispatchJws = req.headers.get(DISPATCH_JWS_HEADER);
-      if (!dispatchJws) {
-        return this.respond(builder.json({ error: "Missing dispatch signature" }, 401));
-      }
-
-      const rawBody = await req.text();
-      try {
-        await verifyDispatchJws(dispatchJws, rawBody, {
-          audience: projectSlug,
-          expectedProjectId: ctx.projectId,
-          publicKeyPem,
-          maxAgeSeconds: MAX_DISPATCH_SIGNATURE_AGE_SECONDS,
-        });
-      } catch (error) {
-        this.logWarn("Channel assistants signature verification failed", {
-          error: error instanceof Error ? error.message : String(error),
-          projectSlug,
-          projectId: ctx.projectId,
-        });
-        return this.respond(builder.json({ error: "Invalid dispatch signature" }, 401));
-      }
-
-      try {
-        ChannelAssistantsRequestSchema.parse(JSON.parse(rawBody));
-      } catch (error) {
-        this.logWarn("Channel assistants request validation failed", {
-          error: error instanceof Error ? error.message : String(error),
-          projectSlug,
-          projectId: ctx.projectId,
-        });
-        return this.respond(builder.json({ error: "Invalid channel assistants request" }, 400));
-      }
-
-      const response = await listChannelAssistants(ctx, this.deps);
-      return this.respond(builder.json(response, 200));
-    });
-  }
-}