@agent-native/core 0.101.2 → 0.101.3

package/dist/server/derived-secret.d.ts

@@ -1,3 +1,3 @@
 export declare function deriveServerSecret(rootSecret: string, purpose: string): string;
-export declare function getWorkspaceA2ADerivedSecret(purpose: "better-auth" | "oauth-state" | "short-lived-token"): string | undefined;
+export declare function getWorkspaceA2ADerivedSecret(purpose: "better-auth" | "oauth-state" | "short-lived-token" | "secrets-encryption"): string | undefined;
 //# sourceMappingURL=derived-secret.d.ts.map

package/dist/server/derived-secret.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"derived-secret.d.ts","sourceRoot":"","sources":["../../src/server/derived-secret.ts"],"names":[],"mappings":"AAWA,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,MAAM,CAKR;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,aAAa,GAAG,aAAa,GAAG,mBAAmB,GAC3D,MAAM,GAAG,SAAS,CAIpB"}
+{"version":3,"file":"derived-secret.d.ts","sourceRoot":"","sources":["../../src/server/derived-secret.ts"],"names":[],"mappings":"AAWA,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,MAAM,CAKR;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EACH,aAAa,GACb,aAAa,GACb,mBAAmB,GACnB,oBAAoB,GACvB,MAAM,GAAG,SAAS,CAIpB"}

package/dist/server/derived-secret.js.map

@@ -1 +1 @@
-{"version":3,"file":"derived-secret.js","sourceRoot":"","sources":["../../src/server/derived-secret.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,qBAAqB,GAAG,gCAAgC,CAAC;AAE/D,SAAS,kBAAkB;IACzB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,GAAG;QAC1C,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG,CAChD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,OAAe;IAEf,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC;SAChC,MAAM,CAAC,GAAG,qBAAqB,IAAI,OAAO,EAAE,CAAC;SAC7C,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAA4D;IAE5D,IAAI,CAAC,kBAAkB,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAClD,OAAO,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC","sourcesContent":["import crypto from \"node:crypto\";\n\nconst DERIVED_SECRET_PREFIX = \"agent-native:derived-secret:v1\";\n\nfunction isWorkspaceRuntime(): boolean {\n  return (\n    process.env.AGENT_NATIVE_WORKSPACE === \"1\" ||\n    process.env.VITE_AGENT_NATIVE_WORKSPACE === \"1\"\n  );\n}\n\nexport function deriveServerSecret(\n  rootSecret: string,\n  purpose: string,\n): string {\n  return crypto\n    .createHmac(\"sha256\", rootSecret)\n    .update(`${DERIVED_SECRET_PREFIX}:${purpose}`)\n    .digest(\"hex\");\n}\n\nexport function getWorkspaceA2ADerivedSecret(\n  purpose: \"better-auth\" | \"oauth-state\" | \"short-lived-token\",\n): string | undefined {\n  if (!isWorkspaceRuntime()) return undefined;\n  const rootSecret = process.env.A2A_SECRET?.trim();\n  return rootSecret ? deriveServerSecret(rootSecret, purpose) : undefined;\n}\n"]}
+{"version":3,"file":"derived-secret.js","sourceRoot":"","sources":["../../src/server/derived-secret.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,qBAAqB,GAAG,gCAAgC,CAAC;AAE/D,SAAS,kBAAkB;IACzB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,GAAG;QAC1C,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG,CAChD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,OAAe;IAEf,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC;SAChC,MAAM,CAAC,GAAG,qBAAqB,IAAI,OAAO,EAAE,CAAC;SAC7C,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAIwB;IAExB,IAAI,CAAC,kBAAkB,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAClD,OAAO,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC","sourcesContent":["import crypto from \"node:crypto\";\n\nconst DERIVED_SECRET_PREFIX = \"agent-native:derived-secret:v1\";\n\nfunction isWorkspaceRuntime(): boolean {\n  return (\n    process.env.AGENT_NATIVE_WORKSPACE === \"1\" ||\n    process.env.VITE_AGENT_NATIVE_WORKSPACE === \"1\"\n  );\n}\n\nexport function deriveServerSecret(\n  rootSecret: string,\n  purpose: string,\n): string {\n  return crypto\n    .createHmac(\"sha256\", rootSecret)\n    .update(`${DERIVED_SECRET_PREFIX}:${purpose}`)\n    .digest(\"hex\");\n}\n\nexport function getWorkspaceA2ADerivedSecret(\n  purpose:\n    | \"better-auth\"\n    | \"oauth-state\"\n    | \"short-lived-token\"\n    | \"secrets-encryption\",\n): string | undefined {\n  if (!isWorkspaceRuntime()) return undefined;\n  const rootSecret = process.env.A2A_SECRET?.trim();\n  return rootSecret ? deriveServerSecret(rootSecret, purpose) : undefined;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.101.2",
+  "version": "0.101.3",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -335,7 +335,7 @@
     "y-protocols": "^1.0.7",
     "yjs": "^13.6.31",
     "zod": "^4.3.6",
-    "@agent-native/recap-cli": "0.3.0",
+    "@agent-native/recap-cli": "0.4.0",
     "@agent-native/toolkit": "^0.4.10"
   },
   "devDependencies": {

package/corpus/templates/clips/app/components/sharing/slack-share-hint.tsx

@@ -1,68 +0,0 @@
-import { appPath, useActionQuery, useT } from "@agent-native/core/client";
-import { IconBrandSlack } from "@tabler/icons-react";
-
-interface SlackInstallation {
-  status: string;
-}
-
-interface SlackInstallationsResponse {
-  oauthConfigured: boolean;
-  installations: SlackInstallation[];
-}
-
-/**
- * Contextual nudge shown in the share popover's Link tab for public clips.
- *
- * A public Clips link unfurls into a playable video when pasted in a connected
- * Slack workspace, but that integration is otherwise only discoverable in
- * Settings. When a workspace is connected we confirm the payoff; when none is,
- * clip owners/admins get a one-click link to connect one in Settings.
- *
- * Only rendered for public clips (the caller gates on `isPublic`), so the
- * `list-slack-installations` query never runs for private shares.
- */
-export function SlackShareHint({ canManage }: { canManage: boolean }) {
-  const t = useT();
-  const slack = useActionQuery<SlackInstallationsResponse>(
-    "list-slack-installations",
-    undefined,
-    { retry: false },
-  );
-
-  const data = slack.data;
-  const connected =
-    data?.installations?.some((i) => i.status === "connected") ?? false;
-
-  if (connected) {
-    return (
-      <div className="flex items-center gap-2 rounded-md bg-muted/35 px-2.5 py-1.5 text-xs text-muted-foreground">
-        <IconBrandSlack className="h-4 w-4 shrink-0 text-muted-foreground" />
-        <span className="min-w-0 truncate">
-          {t("slackShareHint.playsInline")}
-        </span>
-      </div>
-    );
-  }
-
-  // No workspace connected yet. Connecting needs the deployment's Slack OAuth
-  // credentials, so only point managers at Settings when it's actually set up —
-  // otherwise the Connect button there is disabled and the link is a dead end.
-  // While the query is loading or errored, `data` is undefined and we render
-  // nothing rather than guess at the workspace state.
-  if (!data || !canManage || !data.oauthConfigured) return null;
-
-  return (
-    <a
-      href={appPath("/settings#slack")}
-      className="flex items-center gap-2 rounded-md bg-muted/35 px-2.5 py-1.5 text-xs text-muted-foreground transition-colors hover:bg-muted/55"
-    >
-      <IconBrandSlack className="h-4 w-4 shrink-0 text-muted-foreground" />
-      <span className="min-w-0 flex-1 truncate">
-        {t("slackShareHint.makeInline")}
-      </span>
-      <span className="shrink-0 font-medium text-primary">
-        {t("slackShareHint.connect")}
-      </span>
-    </a>
-  );
-}