@agent-native/core 0.101.10 → 0.101.11

package/corpus/templates/content/shared/inline-math.ts

@@ -0,0 +1,128 @@
+export const MAX_INLINE_MATH_LENGTH = 1_000;
+
+export type InlineMathSyntax = "plain" | "github";
+
+export interface InlineMathMatch {
+  from: number;
+  to: number;
+  latex: string;
+  syntax: InlineMathSyntax;
+}
+
+export function isEscapedInlineDelimiter(text: string, index: number): boolean {
+  let backslashes = 0;
+  for (let cursor = index - 1; cursor >= 0 && text[cursor] === "\\"; cursor--) {
+    backslashes += 1;
+  }
+  return backslashes % 2 === 1;
+}
+
+function matchGithubInlineMath(
+  text: string,
+  start: number,
+): InlineMathMatch | null {
+  if (!text.startsWith("$`", start)) return null;
+
+  const close = text.indexOf("`$", start + 2);
+  if (close === -1 || close - (start + 2) > MAX_INLINE_MATH_LENGTH) {
+    return null;
+  }
+
+  return {
+    from: start,
+    to: close + 2,
+    latex: text.slice(start + 2, close),
+    syntax: "github",
+  };
+}
+
+function matchPlainInlineMath(
+  text: string,
+  start: number,
+): InlineMathMatch | null {
+  if (
+    text[start] !== "$" ||
+    text[start + 1] === "$" ||
+    text[start + 1] === "`" ||
+    !text[start + 1] ||
+    /\s/.test(text[start + 1])
+  ) {
+    return null;
+  }
+
+  const searchLimit = Math.min(text.length, start + MAX_INLINE_MATH_LENGTH + 2);
+  for (let close = start + 1; close < searchLimit; close++) {
+    const char = text[close];
+    if (char === "\n" || char === "\r") return null;
+    if (
+      char !== "$" ||
+      isEscapedInlineDelimiter(text, close) ||
+      text[close - 1] === "$" ||
+      text[close + 1] === "$" ||
+      /\s/.test(text[close - 1]) ||
+      /\d/.test(text[close + 1] || "")
+    ) {
+      continue;
+    }
+
+    return {
+      from: start,
+      to: close + 1,
+      latex: text.slice(start + 1, close),
+      syntax: "plain",
+    };
+  }
+
+  return null;
+}
+
+export function matchInlineMathAt(
+  text: string,
+  start: number,
+): InlineMathMatch | null {
+  if (text[start] !== "$" || isEscapedInlineDelimiter(text, start)) {
+    return null;
+  }
+
+  return (
+    matchGithubInlineMath(text, start) ?? matchPlainInlineMath(text, start)
+  );
+}
+
+export function findTrailingPlainInlineMath(
+  text: string,
+): InlineMathMatch | null {
+  if (!text.endsWith("$") || text.endsWith("$$")) return null;
+
+  for (let start = text.length - 2; start >= 0; start--) {
+    if (text[start] !== "$") continue;
+    const match = matchInlineMathAt(text, start);
+    if (
+      match?.syntax === "plain" &&
+      match.to === text.length &&
+      !hasUnclosedCodeSpan(text.slice(0, start))
+    ) {
+      return match;
+    }
+  }
+
+  return null;
+}
+
+function hasUnclosedCodeSpan(text: string): boolean {
+  let openRun = 0;
+
+  for (let cursor = 0; cursor < text.length; cursor++) {
+    if (text[cursor] !== "`" || isEscapedInlineDelimiter(text, cursor)) {
+      continue;
+    }
+
+    let run = 1;
+    while (text[cursor + run] === "`") run += 1;
+    if (openRun === 0) openRun = run;
+    else if (openRun === run) openRun = 0;
+    cursor += run - 1;
+  }
+
+  return openRun !== 0;
+}

package/corpus/templates/content/shared/math-rendering.ts

@@ -0,0 +1,50 @@
+import katex, { type KatexOptions } from "katex";
+
+export const KATEX_VERSION = "0.17.0";
+export const KATEX_STYLESHEET_URL = `https://cdn.jsdelivr.net/npm/katex@${KATEX_VERSION}/dist/katex.min.css`;
+
+export interface MathRenderSuccess {
+  ok: true;
+  html: string;
+}
+
+export interface MathRenderFailure {
+  ok: false;
+  error: string;
+}
+
+export type MathRenderResult = MathRenderSuccess | MathRenderFailure;
+
+export function mathRenderOptions(displayMode: boolean): KatexOptions {
+  return {
+    displayMode,
+    maxExpand: 1_000,
+    output: "htmlAndMathml",
+    strict: "warn",
+    throwOnError: true,
+    trust: false,
+  };
+}
+
+export function mathRenderErrorMessage(error: unknown): string {
+  if (error instanceof Error && error.message.trim()) return error.message;
+  return "This equation could not be rendered.";
+}
+
+export function renderMathToHtml(
+  latex: string,
+  displayMode: boolean,
+): MathRenderResult {
+  if (!latex.trim()) {
+    return { ok: false, error: "This equation is empty." };
+  }
+
+  try {
+    return {
+      ok: true,
+      html: katex.renderToString(latex, mathRenderOptions(displayMode)),
+    };
+  } catch (error) {
+    return { ok: false, error: mathRenderErrorMessage(error) };
+  }
+}

package/corpus/templates/content/shared/nfm.ts

@@ -41,6 +41,7 @@
  * exposing simple string props for the editor preview layer.
  */
 
+import { matchInlineMathAt } from "./inline-math.js";
 import { isRegistryBlockTag, registryBlockSpecByTag } from "./nfm-registry.js";
 
 // ── Shared PM JSON types ────────────────────────────────────────────
@@ -279,7 +280,7 @@ function serializeInlineAtom(node: PMNode): string {
     attrs = {};
   }
   if (tagName === "math") {
-    return "$`" + (label || attrs.latex || "") + "`$";
+    return "$" + (label || attrs.latex || "") + "$";
   }
   const attrEntries = Object.entries(attrs).filter(([k]) => k !== "latex");
   const attrStr = serializeAttrs(attrEntries);
@@ -446,19 +447,21 @@ function parseInline(input: string): PMNode[] {
       continue;
     }
 
-    // Inline math $`...`$
-    if (ch === "$" && input[i + 1] === "`") {
-      const close = input.indexOf("`$", i + 2);
-      if (close !== -1) {
-        flush();
-        const latex = input.slice(i + 2, close);
-        out.push({
-          type: "notionInlineAtom",
-          attrs: { tagName: "math", attrsJson: "{}", label: latex },
-        });
-        i = close + 2;
-        continue;
-      }
+    // Canonical inline math is $...$; GitHub's $`...`$ form remains a
+    // backwards-compatible input alias and canonicalizes on the next write.
+    const inlineMath = ch === "$" ? matchInlineMathAt(input, i) : null;
+    if (inlineMath) {
+      flush();
+      out.push({
+        type: "notionInlineAtom",
+        attrs: {
+          tagName: "math",
+          attrsJson: "{}",
+          label: inlineMath.latex,
+        },
+      });
+      i = inlineMath.to;
+      continue;
     }
 
     // Inline code `...` — CommonMark-style variable-length delimiter: the

package/corpus/templates/content/vite.config.ts

@@ -413,7 +413,6 @@ const cloudflareSsrStubs =
         "@xterm/addon-fit",
         "@xterm/addon-web-links",
         "@xterm/xterm",
-        "katex",
         "lowlight",
         "prettier",
         "react-markdown",

package/corpus/templates/mail/.agents/skills/email-drafts/SKILL.md

@@ -121,6 +121,23 @@ const drafts = await listAppState("compose-");
 
 The `send-email` action accepts an optional `attachments` array. Each entry must reference a file that was previously uploaded via the media-upload endpoint (`/api/media/upload`). Pass the server-side `filename` (the key returned by the upload endpoint, e.g. `abc123.pdf`), and optionally `originalName` (display name for the recipient) and `mimeType`. The attachment plumbing resolves the file from `data/uploads/` or from the configured file-storage URL recorded by the upload endpoint, then includes it as a MIME multipart attachment in the outgoing Gmail message. Do not store or paste attachment bytes, base64, or `data:` URLs in draft state/settings; files are never sent speculatively — only attach what the user has explicitly provided and confirmed.
 
+### Local files from an MCP host
+
+A hosted Mail app cannot read a path on the MCP host's local filesystem. Use
+`create-attachment-upload` with the file's display name. It returns a
+five-minute, owner-bound `uploadUrl`, a `PUT` method, and the attachment handle
+Mail expects. From the local host, upload the raw bytes directly:
+
+```bash
+curl --fail-with-body --request PUT --header '<Authorization header>' --data-binary @/absolute/path/to/report.pdf '<uploadUrl>'
+```
+
+Use the response's `attachment` object in the draft/send request. The upload
+Authorization header is a short-lived bearer credential: do not log, persist,
+reuse, or share it. Creating or consuming it does not send mail. Keep `send-email` behind its
+normal explicit-intent and human-approval gate; for drafting, pass the handle
+through `ask_app` or open the returned compose deep link.
+
 Example:
 ```json
 {

package/corpus/templates/mail/AGENTS.md

@@ -60,8 +60,9 @@ needed.
 - Never send mail unless the user explicitly asks to send. Draft or queue
   review by default. `send-email` has `needsApproval: true` — it is the
   canonical, intentionally rare use of the human-in-the-loop gate in this
-  framework; the loop pauses for approval on every real send. Drafting and
-  queueing are unaffected.
+  framework. An authenticated A2A caller may carry the user's exact chat
+  authorization for one matching send; otherwise the loop pauses for approval.
+  Drafting and queueing are unaffected.
 - When drafting, first read `get-mail-settings` for signature and writing
   style. Use `signature` exactly when present — draft-writing paths that build
   a `compose-*` entry (`manage-draft`, `open-queued-draft`) call
@@ -93,23 +94,24 @@ needed.
 
 ## Action Map
 
-| Action                                                                                                                                 | Purpose                                                                                |
-| -------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------- |
-| `search-emails` / `list-emails`                                                                                                        | Query across Gmail or local-fallback data by view/query.                               |
-| `get-email` / `get-thread`                                                                                                             | Full body/metadata for one message or thread.                                          |
-| `find-contact`                                                                                                                         | Resolve a name/partial address to a real email.                                        |
-| `get-hubspot-contact`                                                                                                                  | CRM contact + deals + tickets by email (HubSpot only).                                 |
-| `manage-draft`                                                                                                                         | Create/update/delete a `compose-{id}` draft (signature-aware).                         |
-| `send-email`                                                                                                                           | Real send. `needsApproval: true` — always pauses for human approval.                   |
-| `queue-email-draft` / `list-queued-drafts` / `update-queued-draft` / `open-queued-draft` / `send-queued-drafts`                        | Teammate/Slack draft-review workflow — see `draft-queue`.                              |
-| `mark-read` / `mark-thread-read` / `star-email` / `archive-email` / `unarchive-email` / `trash-email` / `untrash-email` / `move-email` | Per-message or per-thread state changes; most call `refresh-list` internally.          |
-| `manage-gmail-filters`                                                                                                                 | Provider-native Gmail filters (create/replace/delete).                                 |
-| `manage-automations` / `trigger-automations`                                                                                           | Natural-language inbox automation rules.                                               |
-| `respond-calendar-invite`                                                                                                              | Accept/decline/tentative an invite found in Mail.                                      |
-| `get-mail-settings` / `update-mail-settings` / `import-gmail-signature`                                                                | Signature and writing-style settings.                                                  |
-| `manage-snippets`                                                                                                                      | List/create/update/delete saved reply snippets insertable from the compose slash menu. |
-| `get-tracking`                                                                                                                         | Open/click stats for a previously sent, tracked message.                               |
-| `provider-api-catalog` / `provider-api-docs` / `provider-api-request`                                                                  | Raw Gmail, Calendar, or HubSpot API calls beyond the canned actions.                   |
+| Action                                                                                                                                 | Purpose                                                                                                       |
+| -------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------- |
+| `search-emails` / `list-emails`                                                                                                        | Query across Gmail or local-fallback data by view/query.                                                      |
+| `get-email` / `get-thread`                                                                                                             | Full body/metadata for one message or thread.                                                                 |
+| `find-contact`                                                                                                                         | Resolve a name/partial address to a real email.                                                               |
+| `get-hubspot-contact`                                                                                                                  | CRM contact + deals + tickets by email (HubSpot only).                                                        |
+| `create-attachment-upload`                                                                                                             | Mint a five-minute, owner-bound raw-byte upload URL for one local attachment.                                 |
+| `manage-draft`                                                                                                                         | Create/update/delete a `compose-{id}` draft (signature-aware).                                                |
+| `send-email`                                                                                                                           | Real send. `needsApproval: true`; exact authenticated chat grants run once, otherwise it pauses for approval. |
+| `queue-email-draft` / `list-queued-drafts` / `update-queued-draft` / `open-queued-draft` / `send-queued-drafts`                        | Teammate/Slack draft-review workflow — see `draft-queue`.                                                     |
+| `mark-read` / `mark-thread-read` / `star-email` / `archive-email` / `unarchive-email` / `trash-email` / `untrash-email` / `move-email` | Per-message or per-thread state changes; most call `refresh-list` internally.                                 |
+| `manage-gmail-filters`                                                                                                                 | Provider-native Gmail filters (create/replace/delete).                                                        |
+| `manage-automations` / `trigger-automations`                                                                                           | Natural-language inbox automation rules.                                                                      |
+| `respond-calendar-invite`                                                                                                              | Accept/decline/tentative an invite found in Mail.                                                             |
+| `get-mail-settings` / `update-mail-settings` / `import-gmail-signature`                                                                | Signature and writing-style settings.                                                                         |
+| `manage-snippets`                                                                                                                      | List/create/update/delete saved reply snippets insertable from the compose slash menu.                        |
+| `get-tracking`                                                                                                                         | Open/click stats for a previously sent, tracked message.                                                      |
+| `provider-api-catalog` / `provider-api-docs` / `provider-api-request`                                                                  | Raw Gmail, Calendar, or HubSpot API calls beyond the canned actions.                                          |
 
 ## Application State
 

package/corpus/templates/mail/actions/create-attachment-upload.ts

@@ -0,0 +1,49 @@
+import { defineAction } from "@agent-native/core/action";
+import {
+  getAppProductionUrl,
+  getRequestUserEmail,
+  withConfiguredAppBasePath,
+} from "@agent-native/core/server";
+import { z } from "zod";
+
+import { createAttachmentUploadTicket } from "../server/lib/attachment-upload-ticket.js";
+
+const originalNameSchema = z
+  .string()
+  .trim()
+  .min(1)
+  .max(255)
+  .refine(
+    (value) => !/[\\/\0\r\n]/.test(value),
+    "Filename must not contain path separators or control characters",
+  );
+
+export default defineAction({
+  description:
+    "Create a short-lived authenticated Mail upload URL for one local attachment. Upload the file bytes with HTTP PUT, then pass the returned attachment handle to ask_app so Mail can include it in a draft or approved send. Creating the URL does not send email.",
+  schema: z.object({
+    originalName: originalNameSchema.describe(
+      "Display filename, including its extension (for example, report.png)",
+    ),
+  }),
+  run: async ({ originalName }) => {
+    const ownerEmail = getRequestUserEmail();
+    if (!ownerEmail) throw new Error("Authentication required");
+    const ticket = await createAttachmentUploadTicket(ownerEmail, originalName);
+    const appUrl = withConfiguredAppBasePath(getAppProductionUrl());
+    const uploadUrl = `${appUrl}/api/media/attachment-upload/${encodeURIComponent(ticket.uploadId)}`;
+    return {
+      method: "PUT" as const,
+      uploadUrl,
+      headers: { Authorization: `Bearer ${ticket.token}` },
+      expiresAt: new Date(ticket.expiresAt).toISOString(),
+      maxBytes: 10 * 1024 * 1024,
+      attachment: {
+        filename: ticket.filename,
+        originalName: ticket.originalName,
+        mimeType: ticket.mimeType,
+      },
+      next: "PUT the raw local file bytes to uploadUrl with the returned Authorization header before passing attachment to ask_app. Do not paste base64 into chat or action arguments.",
+    };
+  },
+});

package/corpus/templates/mail/changelog/2026-07-14-connected-agents-can-now-securely-upload-local-files-for-mai.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-07-14
+---
+
+Connected agents can now securely upload local attachments, honor an exact send you explicitly authorized in chat, and otherwise pause real sends for browser approval.

package/corpus/templates/mail/server/handlers/media.ts

@@ -1,10 +1,10 @@
 import fs from "node:fs";
 import path from "node:path";
 
-import { uploadFile } from "@agent-native/core/file-upload";
 import { streamFile, getSession } from "@agent-native/core/server";
 import {
   defineEventHandler,
+  getHeader,
   getQuery,
   readRawBody,
   getRouterParam,
@@ -15,9 +15,20 @@ import {
 } from "h3";
 import { nanoid } from "nanoid";
 
-import { getStoredUpload, putStoredUpload } from "../lib/upload-store.js";
+import {
+  claimAttachmentUploadTicket,
+  verifyAttachmentUploadTicket,
+} from "../lib/attachment-upload-ticket.js";
+import {
+  MAX_UPLOAD_BYTES,
+  MediaStorageSetupError,
+  mimeTypeForUpload,
+  storeMediaUpload,
+  uploadsDirectory,
+} from "../lib/media-upload.js";
+import { getStoredUpload } from "../lib/upload-store.js";
 
-const UPLOADS_DIR = path.resolve("data/uploads");
+const UPLOADS_DIR = uploadsDirectory();
 
 // Ensure uploads directory exists (guarded for edge runtimes without filesystem)
 try {
@@ -28,26 +39,6 @@ try {
   // Edge runtime (e.g. Cloudflare Workers) — no local filesystem
 }
 
-const MIME_MAP: Record<string, string> = {
-  ".png": "image/png",
-  ".jpg": "image/jpeg",
-  ".jpeg": "image/jpeg",
-  ".gif": "image/gif",
-  ".webp": "image/webp",
-  ".svg": "image/svg+xml",
-  ".pdf": "application/pdf",
-  ".txt": "text/plain",
-  ".csv": "text/csv",
-  ".doc": "application/msword",
-  ".docx":
-    "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-  ".xls": "application/vnd.ms-excel",
-  ".xlsx": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
-  ".zip": "application/zip",
-};
-
-const MAX_UPLOAD_BYTES = 10 * 1024 * 1024; // 10 MB
-
 export const uploadMedia = defineEventHandler(async (event: H3Event) => {
   const session = await getSession(event).catch(() => null);
   if (!session?.email) {
@@ -69,51 +60,83 @@ export const uploadMedia = defineEventHandler(async (event: H3Event) => {
 
     const originalName = (getQuery(event).filename as string) || "upload";
     const ext = path.extname(originalName).toLowerCase() || ".bin";
-    const id = nanoid(12) + ext;
-    const filePath = path.join(UPLOADS_DIR, id);
-
-    const mimeType = MIME_MAP[ext] || "application/octet-stream";
-    const payload = {
-      url: `/api/media/${id}`,
-      filename: id,
+    return await storeMediaUpload({
+      ownerEmail: session.email,
+      data: body instanceof Uint8Array ? body : new Uint8Array(body),
+      filename: nanoid(12) + ext,
       originalName,
-      mimeType,
-      size: body.byteLength,
-    };
+    });
+  } catch (err) {
+    if (err instanceof MediaStorageSetupError) {
+      setResponseStatus(event, 503);
+      return {
+        error: err.message,
+        storageSetupRequired: true,
+      };
+    }
+    console.error("[media] Upload failed:", err);
+    setResponseStatus(event, 500);
+    return { error: "Upload failed" };
+  }
+});
+
+export const uploadAttachmentWithTicket = defineEventHandler(
+  async (event: H3Event) => {
+    const uploadId = getRouterParam(event, "uploadId") as string;
+    const authorization = getHeader(event, "authorization") || "";
+    const token = authorization.startsWith("Bearer ")
+      ? authorization.slice("Bearer ".length).trim()
+      : "";
+    // Reject an invalid bearer before buffering request bytes. The later
+    // atomic claim remains the concurrency boundary immediately before the
+    // storage side effect.
+    const verified = await verifyAttachmentUploadTicket(uploadId, token);
+    if (!verified) {
+      setResponseStatus(event, 401);
+      return { error: "Invalid or expired attachment upload URL" };
+    }
+    const body = await readRawBody(event, false);
+    if (!body || !body.byteLength) {
+      setResponseStatus(event, 400);
+      return { error: "No file data" };
+    }
+    if (body.byteLength > MAX_UPLOAD_BYTES) {
+      setResponseStatus(event, 413);
+      return { error: "File too large (max 10 MB)" };
+    }
+
+    const claimed = await claimAttachmentUploadTicket(uploadId, token);
+    if (!claimed) {
+      setResponseStatus(event, 401);
+      return { error: "Invalid or expired attachment upload URL" };
+    }
 
     try {
-      fs.writeFileSync(filePath, body);
-    } catch {
-      const uploaded = await uploadFile({
+      const uploaded = await storeMediaUpload({
+        ownerEmail: claimed.ownerEmail,
         data: body instanceof Uint8Array ? body : new Uint8Array(body),
-        filename: originalName,
-        mimeType,
-        ownerEmail: session.email,
-        recordAsset: false,
+        filename: claimed.ticket.filename,
+        originalName: claimed.ticket.originalName,
       });
-      if (!uploaded?.url) {
+      return {
+        ...uploaded,
+        attachment: {
+          filename: uploaded.filename,
+          originalName: uploaded.originalName,
+          mimeType: uploaded.mimeType,
+        },
+      };
+    } catch (err) {
+      if (err instanceof MediaStorageSetupError) {
         setResponseStatus(event, 503);
-        return {
-          error:
-            "File storage is not configured. Connect Builder.io or another upload provider before attaching files in hosted environments.",
-          storageSetupRequired: true,
-        };
+        return { error: err.message, storageSetupRequired: true };
       }
-      await putStoredUpload(session.email, {
-        ...payload,
-        url: uploaded.url,
-        createdAt: Date.now(),
-      });
-      return { ...payload, url: uploaded.url, provider: uploaded.provider };
+      console.error("[media] Ticketed attachment upload failed:", err);
+      setResponseStatus(event, 500);
+      return { error: "Upload failed" };
     }
-
-    return payload;
-  } catch (err) {
-    console.error("[media] Upload failed:", err);
-    setResponseStatus(event, 500);
-    return { error: "Upload failed" };
-  }
-});
+  },
+);
 
 export const serveMedia = defineEventHandler(async (event: H3Event) => {
   const filename = getRouterParam(event, "filename") as string;
@@ -161,7 +184,7 @@ export const serveMedia = defineEventHandler(async (event: H3Event) => {
     return Buffer.from(stored.dataBase64, "base64");
   }
 
-  const mimeType = MIME_MAP[ext] || "application/octet-stream";
+  const mimeType = mimeTypeForUpload(filename);
 
   setResponseHeader(event, "Content-Type", mimeType);
   setResponseHeader(