@agent-native/core 0.101.7 → 0.101.11

package/corpus/core/src/client/review/ReviewCommentComposer.tsx

@@ -1,7 +1,7 @@
 import { Button } from "@agent-native/toolkit/ui/button";
 import { Spinner } from "@agent-native/toolkit/ui/spinner";
 import { Textarea } from "@agent-native/toolkit/ui/textarea";
-import { IconMessageCircle, IconSend } from "@tabler/icons-react";
+import { IconFocus2, IconMessageCircle, IconSend } from "@tabler/icons-react";
 
 import type { ReviewResolutionTarget } from "../../review/types.js";
 import { cn } from "../utils.js";
@@ -16,6 +16,7 @@ export interface ReviewCommentComposerProps {
   placeholder?: string;
   commentLabel?: string;
   agentLabel?: string;
+  contextLabel?: string;
   autoFocus?: boolean;
   submitOnEnter?: boolean;
   onEscape?: () => void;
@@ -32,6 +33,7 @@ export function ReviewCommentComposer({
   placeholder = "Add a comment...",
   commentLabel = "Comment",
   agentLabel = "Send to agent",
+  contextLabel,
   autoFocus = false,
   submitOnEnter = false,
   onEscape,
@@ -51,6 +53,12 @@ export function ReviewCommentComposer({
         submit("human");
       }}
     >
+      {contextLabel ? (
+        <div className="mb-2 flex min-w-0 items-center gap-1.5 text-xs text-muted-foreground">
+          <IconFocus2 className="size-3.5 shrink-0" />
+          <span className="truncate">{contextLabel}</span>
+        </div>
+      ) : null}
       <Textarea
         autoFocus={autoFocus}
         value={value}

package/corpus/core/src/client/review/ReviewThreadPanel.tsx

@@ -52,6 +52,14 @@ export interface ReviewThreadPanelProps {
   resourceType: string;
   resourceId: string;
   targetId?: string | null;
+  /** Persist new comments against this target while targetId continues to filter the list. */
+  composerTargetId?: string | null;
+  /** Optional element/point anchor attached to new comments from the composer. */
+  composerAnchor?: unknown | null;
+  /** Host metadata attached to new comments from the composer. */
+  composerMetadata?: Record<string, unknown>;
+  /** Visible label describing the element currently targeted by the composer. */
+  composerContextLabel?: string;
   title?: string;
   className?: string;
   includeResolved?: boolean;
@@ -89,6 +97,10 @@ export function ReviewThreadPanel({
   resourceType,
   resourceId,
   targetId,
+  composerTargetId,
+  composerAnchor,
+  composerMetadata,
+  composerContextLabel,
   title = "Review",
   className,
   includeResolved = true,
@@ -145,9 +157,11 @@ export function ReviewThreadPanel({
       {
         resourceType,
         resourceId,
-        targetId,
+        targetId: composerTargetId === undefined ? targetId : composerTargetId,
+        ...(composerAnchor !== undefined ? { anchor: composerAnchor } : {}),
+        ...(composerMetadata ? { metadata: composerMetadata } : {}),
         body,
-        ...(showComposerTargetPicker ? { resolutionTarget } : {}),
+        resolutionTarget: showComposerTargetPicker ? resolutionTarget : "human",
       },
       {
         onSuccess: (comment) => {
@@ -194,6 +208,7 @@ export function ReviewThreadPanel({
           placeholder={placeholder}
           commentLabel={composerCommentLabel}
           agentLabel={composerAgentLabel}
+          contextLabel={composerContextLabel}
         />
       ) : null}
 

package/corpus/core/src/client/settings/SettingsPanel.tsx

@@ -45,6 +45,7 @@ import {
   TooltipTrigger,
 } from "../components/ui/tooltip.js";
 import { TeamPage } from "../org/TeamPage.js";
+import { BuilderConnectCard } from "../setup-connections/BuilderConnectCard.js";
 import { callAction } from "../use-action.js";
 import { uploadAvatar, useAvatarUrl } from "../use-avatar.js";
 import { useDevMode } from "../use-dev-mode.js";
@@ -2578,6 +2579,7 @@ interface SettingsPanelContentProps extends SettingsPanelProps {
   showCapabilityStrip?: boolean;
   className?: string;
   surface?: SettingsSurface;
+  builderConnectionOwnedExternally?: boolean;
 }
 
 function SettingsPanelContent({
@@ -2591,8 +2593,11 @@ function SettingsPanelContent({
   showCapabilityStrip = true,
   className,
   surface = "sidebar",
+  builderConnectionOwnedExternally = false,
 }: SettingsPanelContentProps) {
-  const { status: builder, loading: builderLoading } = useBuilderStatus();
+  const { status: builder, loading: builderLoading } = useBuilderStatus({
+    enabled: !builderConnectionOwnedExternally,
+  });
   const connected = builder?.configured ?? false;
   const connectUrl = builder?.cliAuthUrl ?? builder?.connectUrl;
   const orgName = builder?.orgName;
@@ -2600,6 +2605,7 @@ function SettingsPanelContent({
   const credentialSource = builder?.credentialSource;
   const builderBranchesAvailable = !!builder?.builderEnabled;
   const builderFlow = useBuilderConnectFlow({
+    enabled: !builderConnectionOwnedExternally,
     popupUrl: connectUrl,
     trackingSource: "settings_panel_builder_card",
   });
@@ -2965,20 +2971,22 @@ function SettingsPanelContent({
             icon={<IconBrowser size={14} />}
             title="Browser Automation"
             subtitle="Let agents control a real browser for web tasks."
-            connected={connected}
+            connected={builderConnectionOwnedExternally ? undefined : connected}
             open={openSection === "browser"}
             onToggle={() => toggle("browser")}
           >
-            <UseBuilderCard
-              builderFlow={builderFlow}
-              connectUrl={connectUrl}
-              connected={connected}
-              orgName={orgName}
-              envManaged={envManaged}
-              credentialSource={credentialSource}
-              trackingSource="browser_settings"
-              trackingFlow="browser_automation"
-            />
+            {!builderConnectionOwnedExternally ? (
+              <UseBuilderCard
+                builderFlow={builderFlow}
+                connectUrl={connectUrl}
+                connected={connected}
+                orgName={orgName}
+                envManaged={envManaged}
+                credentialSource={credentialSource}
+                trackingSource="browser_settings"
+                trackingFlow="browser_automation"
+              />
+            ) : null}
           </SettingsSection>
         )}
 
@@ -3057,6 +3065,26 @@ export function SettingsPanel(props: SettingsPanelProps) {
   return <SettingsPanelContent {...props} />;
 }
 
+export function ConnectionsSettingsContent({
+  settingsPanelProps,
+}: {
+  settingsPanelProps: SettingsPanelProps;
+}) {
+  return (
+    <div className="mx-auto w-full max-w-2xl space-y-4">
+      <BuilderConnectCard trackingSource="settings_connections" />
+      <SettingsPanelContent
+        {...settingsPanelProps}
+        surface="page"
+        sections={CONNECTION_SETTINGS_SECTIONS}
+        showCapabilityStrip={false}
+        className="w-full"
+        builderConnectionOwnedExternally
+      />
+    </div>
+  );
+}
+
 export function useAgentSettingsTabs(): SettingsTabItem[] {
   const { isDevMode, canToggle, setDevMode } = useDevMode();
   const baseProps = useMemo<SettingsPanelProps>(
@@ -3102,15 +3130,7 @@ export function useAgentSettingsTabs(): SettingsTabItem[] {
         ...connections,
         icon: IconPlugConnected,
         group: "agent",
-        content: (
-          <SettingsPanelContent
-            {...baseProps}
-            surface="page"
-            sections={CONNECTION_SETTINGS_SECTIONS}
-            showCapabilityStrip={false}
-            className="mx-auto w-full max-w-2xl"
-          />
-        ),
+        content: <ConnectionsSettingsContent settingsPanelProps={baseProps} />,
       },
       {
         ...organization,

package/corpus/core/src/client/settings/useBuilderStatus.ts

@@ -53,10 +53,14 @@ export interface BuilderStatus {
 }
 
 /**
- * Fetches Builder connection status from /_agent-native/builder/status.
+ * Fetches Builder connection status from the neutral connection-status route.
+ * The legacy /_agent-native/builder/status route remains available for older
+ * clients.
  * Re-fetches on window focus to detect post-redirect state changes.
  */
-export function useBuilderStatus() {
+export function useBuilderStatus({
+  enabled = true,
+}: { enabled?: boolean } = {}) {
   const [status, setStatus] = useState<BuilderStatus | null>(null);
   const [loading, setLoading] = useState(true);
   const [error, setError] = useState<string | null>(null);
@@ -64,6 +68,7 @@ export function useBuilderStatus() {
   const lastGoodStatusRef = useRef<BuilderStatus | null>(null);
 
   const fetchStatus = useCallback(async () => {
+    if (!enabled) return;
     const keepLastGoodStatus = (message: string) => {
       const lastGoodStatus = lastGoodStatusRef.current;
       setStatus(lastGoodStatus);
@@ -72,7 +77,9 @@ export function useBuilderStatus() {
     };
 
     try {
-      const res = await fetch(agentNativePath("/_agent-native/builder/status"));
+      const res = await fetch(
+        agentNativePath("/_agent-native/connection-status/builder"),
+      );
       if (!res.ok) {
         keepLastGoodStatus(`Builder status unavailable (${res.status})`);
         return;
@@ -91,9 +98,18 @@ export function useBuilderStatus() {
     } finally {
       setLoading(false);
     }
-  }, []);
+  }, [enabled]);
 
   useEffect(() => {
+    if (!enabled) {
+      setStatus(null);
+      setLoading(false);
+      setError(null);
+      setStale(false);
+      lastGoodStatusRef.current = null;
+      return;
+    }
+    setLoading(true);
     fetchStatus();
 
     function onFocus() {
@@ -115,7 +131,7 @@ export function useBuilderStatus() {
         fetchStatus,
       );
     };
-  }, [fetchStatus]);
+  }, [enabled, fetchStatus]);
 
   return { status, loading, error, stale, refetch: fetchStatus };
 }
@@ -123,7 +139,7 @@ export function useBuilderStatus() {
 // ─── useBuilderConnectFlow ──────────────────────────────────────────────────
 //
 // Shared state machine for the "open Builder CLI-auth popup + poll
-// /builder/status until credentials land" interaction. Replaces three
+// /connection-status/builder until credentials land" interaction. Replaces three
 // near-duplicate inline implementations: `BuilderCliAuthMethod` in
 // OnboardingPanel, `ConnectBuilderCard`, and `BuilderConnectCta` in
 // AssistantChat. Each consumer supplies its own popup URL / completion
@@ -158,7 +174,7 @@ export interface BuilderConnectStartOptions {
 
 export interface BuilderConnectFlow {
   configured: boolean;
-  /** True after at least one successful `/builder/status` response. */
+  /** True after at least one successful Builder connection-status response. */
   statusResolved: boolean;
   /**
    * True when the deploy has BUILDER_PRIVATE_KEY set as a fallback. Connect
@@ -176,7 +192,7 @@ export interface BuilderConnectFlow {
   connecting: boolean;
   error: string | null;
   /**
-   * True once the first `/builder/status` fetch has completed (successfully
+   * True once the first Builder connection-status fetch has completed (successfully
    * or not). Consumers that accept an `initialConfigured` prop (e.g. agent
    * tool-call results rendered with server-side state) should treat
    * `configured`/`orgName` as authoritative only once this flips true —
@@ -579,7 +595,10 @@ export function useBuilderConnectFlow(
     const origin = getCallbackOrigin() || window.location.origin;
     try {
       const r = await fetch(
-        new URL(agentNativePath("/_agent-native/builder/status"), origin).href,
+        new URL(
+          agentNativePath("/_agent-native/connection-status/builder"),
+          origin,
+        ).href,
       );
       if (!r.ok) return null;
       return (await r.json()) as {

package/corpus/core/src/client/setup-connections/BuilderConnectCard.tsx

@@ -30,9 +30,7 @@ export function BuilderConnectCard({
     ? "Checking"
     : flow.configured
       ? connectedLabel
-      : flow.builderEnabled
-        ? "Ready to connect"
-        : "Project not configured";
+      : "Ready to connect";
 
   return (
     <section
@@ -73,10 +71,7 @@ export function BuilderConnectCard({
             <button
               type="button"
               onClick={() => flow.start()}
-              disabled={
-                flow.connecting ||
-                (!flow.builderEnabled && flow.hasFetchedStatus)
-              }
+              disabled={flow.connecting}
               className="mt-3 inline-flex h-8 items-center gap-2 rounded-md border border-border bg-foreground px-3 text-xs font-medium text-background transition-colors hover:bg-foreground/90 disabled:cursor-not-allowed disabled:opacity-60"
             >
               {flow.connecting ? (

package/corpus/core/src/mcp/builtin-tools.ts

@@ -31,7 +31,7 @@
  * `mountMCP` — the Node bits are dynamically imported inside `run()`.
  */
 
-import type { Task } from "../a2a/types.js";
+import type { A2AApprovedAction, Task } from "../a2a/types.js";
 import type { ActionEntry } from "../agent/production-agent.js";
 import type { ActionTool } from "../agent/types.js";
 import { getConfiguredAppBasePath } from "../server/app-base-path.js";
@@ -404,6 +404,7 @@ async function submitAskAppA2ATask(
   route: AskAppRoute,
   message: string,
   maxWaitMs: number,
+  approvedActions?: A2AApprovedAction[],
 ): Promise<AskAppTaskResult> {
   const deadline = maxWaitMs > 0 ? Date.now() + maxWaitMs : undefined;
   const { client, metadata } = await createA2AClientForAskApp(
@@ -419,6 +420,7 @@ async function submitAskAppA2ATask(
     {
       async: true,
       metadata,
+      ...(approvedActions?.length ? { approvedActions } : {}),
     },
   );
   const finalOrRunning = await waitForA2ATask(client, task, deadline);
@@ -890,6 +892,7 @@ async function routeAskOverA2A(
     durable?: boolean;
     maxWaitMs?: number;
     requestOrigin?: string;
+    approvedActions?: A2AApprovedAction[];
   },
 ): Promise<
   { app: string; routedVia: "a2a"; response: string } | AskAppTaskResult
@@ -904,6 +907,7 @@ async function routeAskOverA2A(
       },
       message,
       options.maxWaitMs ?? ASK_APP_DEFAULT_INLINE_WAIT_MS,
+      options.approvedActions,
     );
   }
   const { callAgent } = await import("../a2a/client.js");
@@ -919,6 +923,7 @@ async function routeAskOverA2A(
     orgDomain: auth.orgDomain,
     orgSecret: auth.orgSecret,
     requestOrigin: options?.requestOrigin,
+    approvedActions: options?.approvedActions,
     // Bound the wait — cross-app A2A polls async by default.
     timeoutMs: 5 * 60_000,
   });
@@ -1012,6 +1017,19 @@ function askAppTool(
           description:
             "Maximum time to wait inline before returning a taskId. Hosted MCP clamps this to 25000ms.",
         },
+        approvedActions: {
+          type: "array",
+          description:
+            "Exact downstream tool calls the user explicitly authorized in this chat. Never infer authorization or include a different action.",
+          items: {
+            type: "object",
+            properties: {
+              tool: { type: "string" },
+              input: { type: "object", additionalProperties: true },
+            },
+            required: ["tool", "input"],
+          },
+        } as any,
       },
       ["message"],
     ),
@@ -1024,6 +1042,9 @@ function askAppTool(
       const maxWaitMs = isExplicitAsyncAsk(args.async)
         ? 0
         : boundedAskAppWaitMs(args.maxWaitMs);
+      const approvedActions = Array.isArray(args.approvedActions)
+        ? (args.approvedActions as A2AApprovedAction[])
+        : undefined;
 
       // Cross-app: the caller named a *different* workspace app. Route the
       // message to THAT app's agent over A2A (its `/_agent-native/a2a`
@@ -1040,6 +1061,7 @@ function askAppTool(
               durable: useDurableA2A,
               maxWaitMs,
               requestOrigin: targetApp.origin,
+              approvedActions,
             },
           );
         } catch (err: any) {
@@ -1074,6 +1096,7 @@ function askAppTool(
                 durable: useDurableA2A,
                 maxWaitMs,
                 requestOrigin: dirMatch.url,
+                approvedActions,
               },
             );
           } catch (err: any) {
@@ -1120,6 +1143,7 @@ function askAppTool(
           },
           message,
           maxWaitMs,
+          approvedActions,
         );
       }
 

package/corpus/core/src/scripts/call-agent.ts

@@ -6,7 +6,7 @@ import {
   shouldPreferGlobalA2ASecret,
   signA2AToken,
 } from "../a2a/client.js";
-import type { Task } from "../a2a/types.js";
+import type { A2AApprovedAction, Task } from "../a2a/types.js";
 import {
   formatLlmCredentialErrorMessage,
   isLlmCredentialError,
@@ -112,17 +112,34 @@ export const tool: ActionTool = {
         type: "string",
         description: "The message/question to send to the other agent",
       },
+      approvedActions: {
+        type: "array",
+        description:
+          "Exact downstream tool calls the current user explicitly authorized in this chat. Never infer authorization or include a broader/different action.",
+        items: {
+          type: "object",
+          properties: {
+            tool: { type: "string" },
+            input: { type: "object", additionalProperties: true },
+          },
+          required: ["tool", "input"],
+        },
+      },
     },
     required: ["agent", "message"],
   },
 };
 
 export async function run(
-  args: Record<string, string>,
+  args: Record<string, unknown>,
   context?: ActionRunContext,
   selfAppId?: string,
 ): Promise<string> {
-  const { agent: agentIdOrName, message } = args;
+  const agentIdOrName = String(args.agent ?? "");
+  const message = String(args.message ?? "");
+  const approvedActions = Array.isArray(args.approvedActions)
+    ? (args.approvedActions as A2AApprovedAction[])
+    : undefined;
 
   if (!agentIdOrName) return "Error: --agent is required";
   if (!message) return "Error: --message is required";
@@ -320,6 +337,7 @@ export async function run(
           userEmail: callerEmail,
           orgDomain: callerOrgDomain,
           orgSecret: callerOrgSecret,
+          approvedActions,
           onUpdate: onRemotePollUpdate,
           ...(callTimeoutMs
             ? {
@@ -408,6 +426,7 @@ export async function run(
       userEmail: email,
       orgDomain: domain,
       orgSecret,
+      approvedActions,
     });
     const sanitized =
       formatDownstreamLlmCredentialFailure(agent.name, response) ?? response;

package/corpus/core/src/server/agent-chat-plugin.ts

@@ -1,3 +1,4 @@
+import crypto from "node:crypto";
 import nodePath from "node:path";
 
 import {
@@ -19,7 +20,10 @@ import {
   isTrustedLocalRuntime,
 } from "../a2a/auth-policy.js";
 import { applyAgentTextEventToBuffer } from "../a2a/response-text.js";
-import { updateTaskStatusMessage } from "../a2a/task-store.js";
+import {
+  createA2AApproval,
+  updateTaskStatusMessage,
+} from "../a2a/task-store.js";
 import type { ActionHttpConfig } from "../action.js";
 import {
   canUpdateAgentAppModelDefaultSettings,
@@ -52,6 +56,7 @@ import {
   createProductionAgentHandler,
   actionsToEngineTools,
   executeAgentToolCall,
+  toolCallCacheKey,
   getActiveRunForThreadAsync,
   abortRunDurably,
   subscribeToRun,
@@ -1171,6 +1176,25 @@ export function createAgentChatPlugin(
         publicSkillsOnly: true,
         streaming: true,
         durableBackgroundRuns: options?.durableBackgroundRuns,
+        executeApproval: async (approval) => {
+          const result = await executeAgentToolCall({
+            actions: mcpFullActions ?? allScripts,
+            name: approval.tool,
+            input: approval.input,
+            callId: approval.callId,
+            ownerEmail: approval.ownerEmail,
+            orgId: approval.orgId ?? null,
+            approvedToolCalls: [approval.approvalKey],
+          });
+          if (result.status === "approval_required") {
+            return {
+              status: "failed" as const,
+              output:
+                "The approved action was unexpectedly gated again and did not run.",
+            };
+          }
+          return { status: result.status, output: result.output };
+        },
         handler: async function* (message, context) {
           // Resolve the caller's identity for user-scoped data access.
           // Priority: A2A-JWT verified email (set by the A2A handler in
@@ -1495,6 +1519,9 @@ export function createAgentChatPlugin(
               // scope when a processor hop or alternate runner is involved.
               ownerEmail: userEmail,
               orgId: getRequestOrgId() ?? null,
+              approvedToolCalls: context.approvedActions?.map((approved) =>
+                toolCallCacheKey(approved.tool, approved.input),
+              ),
               executionMode: "act",
               send: (event) => {
                 a2aEvents.push(event);
@@ -1549,6 +1576,62 @@ export function createAgentChatPlugin(
             },
           );
 
+          const approval = [...a2aEvents]
+            .reverse()
+            .find(
+              (
+                event,
+              ): event is Extract<
+                AgentChatEvent,
+                { type: "approval_required" }
+              > => event.type === "approval_required",
+            );
+          if (approval) {
+            const pending = await createA2AApproval({
+              taskId: context.taskId,
+              ownerEmail: userEmail,
+              orgId: getRequestOrgId() ?? null,
+              tool: approval.tool,
+              toolInput: approval.input,
+              approvalKey: approval.approvalKey,
+              callId: approval.toolCallId ?? crypto.randomUUID(),
+            });
+            const baseUrl = resolveArtifactBaseUrl(context.event);
+            const approvalPath = `/_agent-native/a2a/approvals/${encodeURIComponent(pending.id)}`;
+            const approvalUrl = baseUrl
+              ? `${baseUrl}${approvalPath}`
+              : approvalPath;
+            yield {
+              role: "agent" as const,
+              metadata: {
+                agentNativeTaskState: "input-required",
+                agentNativeApproval: {
+                  id: pending.id,
+                  tool: approval.tool,
+                  url: approvalUrl,
+                },
+              },
+              parts: [
+                {
+                  type: "text" as const,
+                  text:
+                    `Human approval is required to run ${approval.tool}. ` +
+                    `Open ${approvalUrl} to review and approve this one-time action.`,
+                },
+                {
+                  type: "data" as const,
+                  data: {
+                    kind: "agent-native/approval-required",
+                    approvalId: pending.id,
+                    tool: approval.tool,
+                    approvalUrl,
+                  },
+                },
+              ],
+            };
+            return;
+          }
+
           const { responseText, finalText } = assembleA2AFinalResponse(
             a2aEvents,
             a2aToolResults,
@@ -5621,6 +5704,8 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
         "/_agent-native/agent-model-defaults",
         "/_agent-native/mcp",
         "/mcp",
+        "/.well-known/agent-card.json",
+        "/_agent-native/a2a",
       ],
     });
   };

package/corpus/core/src/server/auth.ts

@@ -104,9 +104,12 @@ import type { BetterAuthConfig } from "./better-auth-instance.js";
 import {
   BUILDER_CONNECT_OWNER_COOKIE,
   BUILDER_CONNECT_PARAM,
+  BUILDER_RELAY_PATH,
+  BUILDER_RELAY_STATE_PARAM,
   BUILDER_STATE_PARAM,
   verifyBuilderCallbackStateAndGetOwner,
   verifyBuilderConnectTokenAndGetOwner,
+  verifyBuilderPreviewRelayStateForCallback,
 } from "./builder-browser.js";
 import { resolveAuthCookieNamespace } from "./cookie-namespace.js";
 import {
@@ -1522,7 +1525,15 @@ function verifiedBuilderConnectOwnerFromUrl(url: string): string | null {
   return verifyBuilderConnectTokenAndGetOwner(token);
 }
 
-function shouldBypassAuthForBuilderConnect(event: H3Event, p: string): boolean {
+export function shouldBypassAuthForBuilderConnect(
+  event: H3Event,
+  p: string,
+): boolean {
+  // The preview-safe second hop is authenticated by its timestamped HMAC and
+  // one-shot pending row. It cannot carry a browser session from the corporate
+  // callback deployment, so let the route perform that stronger check itself.
+  if (p === BUILDER_RELAY_PATH) return true;
+
   if (p === "/_agent-native/builder/connect") {
     const url = event.node?.req?.url ?? event.path ?? "/";
     return Boolean(verifiedBuilderConnectOwnerFromUrl(url));
@@ -1537,6 +1548,19 @@ function shouldBypassAuthForBuilderConnect(event: H3Event, p: string): boolean {
             BUILDER_STATE_PARAM,
           )
         : null;
+    const relayState =
+      queryStart >= 0
+        ? new URLSearchParams(url.slice(queryStart + 1)).get(
+            BUILDER_RELAY_STATE_PARAM,
+          )
+        : null;
+    if (relayState) {
+      try {
+        if (verifyBuilderPreviewRelayStateForCallback(relayState)) return true;
+      } catch {
+        // Dedicated relay secret missing: let the auth guard fail closed.
+      }
+    }
     // The signed `_an_state` authenticates this specific Builder callback
     // flow back to our app. A stale localhost session cookie can otherwise
     // make the global guard reject the callback before the handler gets to