@agent-native/core 0.107.0 → 0.107.2

package/corpus/core/src/client/resources/McpIntegrationDialog.tsx

@@ -9,6 +9,7 @@ import { useEffect, useMemo, useRef, useState } from "react";
 
 import { AgentAskPopover } from "../AgentAskPopover.js";
 import { agentNativePath } from "../api-path.js";
+import { openAgentSettings } from "../CommandMenu.js";
 import {
   Dialog,
   DialogContent,
@@ -27,6 +28,7 @@ import {
   buildMcpOAuthStartUrl,
   createMcpIntegrationFormDefaults,
   filterMcpIntegrations,
+  getMcpIntegrationApiFallback,
   getDefaultMcpIntegrations,
   isCustomMcpIntegrationEnabled,
   resolveMcpIntegrationScope,
@@ -445,6 +447,7 @@ export function McpIntegrationDialog({
               )}
               <div className="grid gap-3 sm:grid-cols-2">
                 {filteredIntegrations.map((integration) => {
+                  const apiFallback = getMcpIntegrationApiFallback(integration);
                   const connected = connectedUrls.has(
                     compareUrl(integration.url),
                   );
@@ -515,15 +518,30 @@ export function McpIntegrationDialog({
                             {t("mcpIntegrations.connected")}
                           </button>
                         ) : setupOnly ? (
-                          <a
-                            href={integration.docsUrl}
-                            target="_blank"
-                            rel="noopener noreferrer"
-                            className="inline-flex h-8 flex-1 items-center justify-center gap-1.5 rounded-md border border-border bg-background px-2.5 text-[12px] font-medium text-foreground hover:bg-accent"
-                          >
-                            {t("mcpIntegrations.viewSetup")}
-                            <IconExternalLink className="h-3.5 w-3.5" />
-                          </a>
+                          <>
+                            {apiFallback && (
+                              <button
+                                type="button"
+                                onClick={() =>
+                                  openAgentSettings(
+                                    `secrets:${apiFallback.secretKey}`,
+                                  )
+                                }
+                                className="inline-flex h-8 flex-1 items-center justify-center gap-1.5 rounded-md bg-primary px-2.5 text-[12px] font-medium text-primary-foreground hover:bg-primary/90"
+                              >
+                                {t("mcpIntegrations.useApiToken")}
+                              </button>
+                            )}
+                            <a
+                              href={integration.docsUrl}
+                              target="_blank"
+                              rel="noopener noreferrer"
+                              className="inline-flex h-8 flex-1 items-center justify-center gap-1.5 rounded-md border border-border bg-background px-2.5 text-[12px] font-medium text-foreground hover:bg-accent"
+                            >
+                              {t("mcpIntegrations.viewSetup")}
+                              <IconExternalLink className="h-3.5 w-3.5" />
+                            </a>
+                          </>
                         ) : (
                           <button
                             type="button"

package/corpus/core/src/client/resources/mcp-integration-catalog.ts

@@ -24,6 +24,7 @@ export type McpIntegrationVerification =
 declare const __AGENT_NATIVE_MCP_INTEGRATIONS_CONFIG__:
   | NormalizedMcpIntegrationsConfig
   | undefined;
+declare const __AGENT_NATIVE_TEMPLATE__: string | undefined;
 
 export interface DefaultMcpIntegration {
   id: string;
@@ -41,6 +42,11 @@ export interface DefaultMcpIntegration {
   logoUrl: string;
   docsUrl?: string;
   setupNoteKey?: string;
+  apiFallback?: {
+    secretKey: string;
+    docsUrl: string;
+    templateUses?: readonly string[];
+  };
   headerPlaceholder?: string;
   keywords: string[];
 }
@@ -272,6 +278,12 @@ export const DEFAULT_MCP_INTEGRATIONS: DefaultMcpIntegration[] = [
     logoUrl: mcpIntegrationLogo("figma"),
     docsUrl: "https://developers.figma.com/docs/figma-mcp-server/",
     setupNoteKey: "mcpIntegrations.catalog.figma.setupNote",
+    apiFallback: {
+      secretKey: "FIGMA_ACCESS_TOKEN",
+      docsUrl:
+        "https://developers.figma.com/docs/rest-api/personal-access-tokens/",
+      templateUses: ["design"],
+    },
     keywords: ["design", "figjam", "components", "variables", "canvas"],
   },
   {
@@ -532,6 +544,39 @@ function readRuntimeMcpIntegrationsConfig(): NormalizedMcpIntegrationsConfig {
   return normalizeMcpIntegrationsConfig();
 }
 
+function normalizeTemplateName(value: unknown): string | null {
+  if (typeof value !== "string") return null;
+  const normalized = value.trim().toLowerCase();
+  return normalized || null;
+}
+
+function getActiveTemplateName(): string | null {
+  try {
+    const compiledTemplate = normalizeTemplateName(__AGENT_NATIVE_TEMPLATE__);
+    if (compiledTemplate) return compiledTemplate;
+  } catch {
+    // Test and non-Vite contexts may not define the compile-time constant.
+  }
+
+  const runtimeConfig = (
+    globalThis as typeof globalThis & {
+      __AGENT_NATIVE_CONFIG__?: { template?: unknown };
+    }
+  ).__AGENT_NATIVE_CONFIG__;
+  return normalizeTemplateName(runtimeConfig?.template);
+}
+
+export function getMcpIntegrationApiFallback(
+  integration: DefaultMcpIntegration,
+  templateName = getActiveTemplateName(),
+): DefaultMcpIntegration["apiFallback"] | null {
+  const fallback = integration.apiFallback;
+  if (!fallback) return null;
+  if (!fallback.templateUses?.length) return fallback;
+  if (!templateName) return null;
+  return fallback.templateUses.includes(templateName) ? fallback : null;
+}
+
 function normalizePresetConfig(
   config?: McpIntegrationsConfigInput | NormalizedMcpIntegrationsConfig,
 ): NormalizedMcpIntegrationsConfig {

package/corpus/core/src/client/sharing/ShareButton.tsx

@@ -261,6 +261,7 @@ function handleSharePopoverInteractOutside(
  */
 export function ShareButton(props: ShareButtonProps) {
   const [open, setOpen] = useState(false);
+  const [inviteEmail, setInviteEmail] = useState("");
   const shareTabDefaultValue = props.shareTabs?.defaultValue ?? "share";
   const [activeShareTab, setActiveShareTab] = useState(shareTabDefaultValue);
   const [pendingVisibility, setPendingVisibility] = useState<Visibility | null>(
@@ -295,6 +296,10 @@ export function ShareButton(props: ShareButtonProps) {
     }
   };
 
+  useEffect(() => {
+    setInviteEmail("");
+  }, [props.resourceType, props.resourceId]);
+
   const handleShareTabChange = (value: string) => {
     setActiveShareTab(value);
     props.shareTabs?.onValueChange?.(value);
@@ -399,6 +404,8 @@ export function ShareButton(props: ShareButtonProps) {
       >
         <SharePanel
           {...props}
+          inviteEmail={inviteEmail}
+          onInviteEmailChange={setInviteEmail}
           sharesQuery={sharesQuery}
           visibilityOverride={pendingVisibility}
           onVisibilityChange={handleVisibilityChange}
@@ -575,6 +582,8 @@ function mergeMembers(existing: OrgMember[], next: OrgMember[]): OrgMember[] {
 
 function SharePanel(
   props: ShareButtonProps & {
+    inviteEmail: string;
+    onInviteEmailChange: (email: string) => void;
     sharesQuery: ReturnType<typeof useActionQuery<SharesResponse>>;
     visibilityOverride: Visibility | null;
     onVisibilityChange: (visibility: Visibility) => Promise<void>;
@@ -591,17 +600,18 @@ function SharePanel(
     visibilityOverride,
     onVisibilityChange,
     onClose,
+    inviteEmail,
+    onInviteEmailChange,
   } = props;
 
   const share = useActionMutation("share-resource");
   const unshare = useActionMutation("unshare-resource");
 
-  const [email, setEmail] = useState("");
   const [role, setRole] = useState<Role>("viewer");
   const [notifyPeople, setNotifyPeople] = useState(true);
   const [shareError, setShareError] = useState<string | null>(null);
   const [suggestionsOpen, setSuggestionsOpen] = useState(false);
-  const hasInviteEmail = email.trim().length > 0;
+  const hasInviteEmail = inviteEmail.trim().length > 0;
 
   // Optimistic overlays so clicks feel instant.
   const [pendingAdds, setPendingAdds] = useState<Share[]>([]);
@@ -685,7 +695,10 @@ function SharePanel(
       .map((s) => ({ ...s, role: roleOverrides[keyOf(s)] ?? s.role })),
     ...pendingAdds,
   ];
-  const memberSearch = useOrgMemberSearch(email, canManage && suggestionsOpen);
+  const memberSearch = useOrgMemberSearch(
+    inviteEmail,
+    canManage && suggestionsOpen,
+  );
   const excludedMemberEmails = new Set<string>();
   if (data?.ownerEmail) excludedMemberEmails.add(data.ownerEmail.toLowerCase());
   for (const s of shares) {
@@ -726,7 +739,7 @@ function SharePanel(
   };
 
   const handleAdd = () => {
-    const trimmed = email.trim();
+    const trimmed = inviteEmail.trim();
     if (!trimmed) return;
     const optimistic: Share = {
       id: `pending-${trimmed}`,
@@ -739,7 +752,7 @@ function SharePanel(
     if (inFlight.has(k)) return;
     setShareError(null);
     setPendingAdds((p) => [...p, optimistic]);
-    setEmail("");
+    onInviteEmailChange("");
     setSuggestionsOpen(false);
     addInFlight(k);
     share.mutate(
@@ -762,7 +775,7 @@ function SharePanel(
         onError: (err: any) => {
           setPendingAdds((p) => p.filter((s) => s.id !== optimistic.id));
           clearInFlight(k);
-          setEmail(trimmed);
+          onInviteEmailChange(trimmed);
           setShareError(extractShareErrorMessage(err));
         },
       },
@@ -898,15 +911,15 @@ function SharePanel(
         <div className="mb-4 space-y-2">
           <div className="flex items-stretch gap-2">
             <MemberAutocomplete
-              value={email}
+              value={inviteEmail}
               open={suggestionsOpen}
               onOpenChange={setSuggestionsOpen}
               onValueChange={(next) => {
-                setEmail(next);
+                onInviteEmailChange(next);
                 if (shareError) setShareError(null);
               }}
               onSelectMember={(member) => {
-                setEmail(member.email);
+                onInviteEmailChange(member.email);
                 setSuggestionsOpen(false);
                 if (shareError) setShareError(null);
               }}
@@ -920,6 +933,14 @@ function SharePanel(
               search={memberSearch}
             />
             <RoleSelect value={role} onChange={setRole} />
+            <button
+              type="button"
+              onClick={handleAdd}
+              disabled={!hasInviteEmail}
+              className={BUTTON_PRIMARY_SM}
+            >
+              Add
+            </button>
           </div>
           {shareError ? (
             <div

package/corpus/core/src/client/use-agent-chat-home-handoff.ts

@@ -35,7 +35,7 @@ export interface UseAgentChatHomeHandoffLinksOptions {
   enabled?: boolean;
   /** How long the handoff marker remains valid. Defaults to 6 hours. */
   ttlMs?: number;
-  /** Only intercept links if a recent handoff marker already exists. */
+  /** Only intercept links if a recent handoff marker already exists. Defaults to true. */
   requireActiveHandoff?: boolean;
 }
 
@@ -148,7 +148,7 @@ export function useAgentChatHomeHandoffLinks({
   isChatPath,
   enabled = true,
   ttlMs,
-  requireActiveHandoff = false,
+  requireActiveHandoff = true,
 }: UseAgentChatHomeHandoffLinksOptions): void {
   const location = useLocation();
   const navigate = useNavigate();

package/corpus/core/src/integrations/a2a-continuation-processor.ts

@@ -171,11 +171,22 @@ async function processClaimedContinuation(
     ...(auth.apiKeyFallbacks ? { fallbackApiKeys: auth.apiKeyFallbacks } : {}),
   });
   const deadline = Date.now() + PROCESSOR_WAIT_MS;
+  const recoverableArtifactSecrets =
+    await resolveContinuationArtifactSecrets(continuation);
   let task: Task | null = null;
+  let latestRecoverableArtifactText: string | null = null;
 
   try {
     while (Date.now() < deadline) {
       task = await client.getTask(continuation.a2aTaskId);
+      const recoverableArtifactText = extractVerifiedRecoverableArtifactText(
+        task,
+        continuation.agentUrl,
+        recoverableArtifactSecrets,
+      );
+      if (recoverableArtifactText) {
+        latestRecoverableArtifactText = recoverableArtifactText;
+      }
       if (TERMINAL_STATES.has(task.status.state)) break;
       await reportA2AContinuationProgress(continuation, progress, task);
       await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL_MS));
@@ -183,6 +194,17 @@ async function processClaimedContinuation(
   } catch (err) {
     if (isTransientA2APollError(err)) {
       if (shouldStopPollingRemoteTask(continuation)) {
+        if (latestRecoverableArtifactText) {
+          await deliverAndCompleteA2AContinuation(
+            continuation,
+            adapter,
+            formatRecoverableArtifactFallbackText(
+              latestRecoverableArtifactText,
+            ),
+            progress,
+          );
+          return;
+        }
         await notifyAndFailA2AContinuation(
           continuation,
           adapter,
@@ -209,6 +231,15 @@ async function processClaimedContinuation(
 
   if (!task || !TERMINAL_STATES.has(task.status.state)) {
     if (shouldStopPollingRemoteTask(continuation)) {
+      if (latestRecoverableArtifactText) {
+        await deliverAndCompleteA2AContinuation(
+          continuation,
+          adapter,
+          formatRecoverableArtifactFallbackText(latestRecoverableArtifactText),
+          progress,
+        );
+        return;
+      }
       await notifyAndFailA2AContinuation(
         continuation,
         adapter,
@@ -222,6 +253,15 @@ async function processClaimedContinuation(
   }
 
   if (task.status.state !== "completed") {
+    if (latestRecoverableArtifactText) {
+      await deliverAndCompleteA2AContinuation(
+        continuation,
+        adapter,
+        formatRecoverableArtifactFallbackText(latestRecoverableArtifactText),
+        progress,
+      );
+      return;
+    }
     const reason =
       extractTaskText(task) ||
       `Remote A2A task ${continuation.a2aTaskId} ended with state ${task.status.state}`;
@@ -234,6 +274,15 @@ async function processClaimedContinuation(
     continuation.agentUrl,
   );
   if (!text.trim()) {
+    if (latestRecoverableArtifactText) {
+      await deliverAndCompleteA2AContinuation(
+        continuation,
+        adapter,
+        formatRecoverableArtifactFallbackText(latestRecoverableArtifactText),
+        progress,
+      );
+      return;
+    }
     await notifyAndFailA2AContinuation(
       continuation,
       adapter,
@@ -382,6 +431,8 @@ async function deliverAndCompleteA2AContinuation(
       `${deliveryContinuation.platform} response delivery timed out`,
     );
     let persistenceError: unknown;
+    const artifactSecrets =
+      await resolveContinuationArtifactSecrets(deliveryContinuation);
     for (let attempt = 0; attempt < 3; attempt += 1) {
       try {
         await persistA2AContinuationDelivery(
@@ -389,6 +440,7 @@ async function deliverAndCompleteA2AContinuation(
           outgoing,
           deliveryReceipt,
           text,
+          artifactSecrets,
         );
         persistenceError = undefined;
         break;
@@ -463,6 +515,7 @@ async function persistA2AContinuationDelivery(
   outgoing: OutgoingMessage,
   receipt: PlatformDeliveryReceipt,
   artifactText: string,
+  artifactSecrets: readonly string[],
 ): Promise<void> {
   const mapping = await getThreadMapping(
     continuation.platform,
@@ -480,9 +533,12 @@ async function persistA2AContinuationDelivery(
   }
   if (!Array.isArray(repo.messages)) repo.messages = [];
 
-  const artifacts = extractA2AArtifactIdentities([
-    { tool: "call-agent", result: artifactText },
-  ]);
+  const artifacts = extractA2AArtifactIdentities(
+    [{ tool: "call-agent", result: artifactText }],
+    {
+      persistedArtifactSecrets: artifactSecrets,
+    },
+  );
   const metadata: Record<string, unknown> = {
     integrationDeliveryAttempted: true,
     integrationDelivery: {
@@ -726,6 +782,24 @@ async function signFreshContinuationTokens(
   return tokens;
 }
 
+async function resolveContinuationArtifactSecrets(
+  continuation: A2AContinuation,
+): Promise<string[]> {
+  const secrets: string[] = [];
+  const add = (secret: string | null | undefined) => {
+    const value = secret?.trim();
+    if (value && !secrets.includes(value)) secrets.push(value);
+  };
+  add(process.env.A2A_SECRET);
+  if (continuation.orgId) {
+    try {
+      const { getOrgA2ASecret } = await import("../org/context.js");
+      add(await getOrgA2ASecret(continuation.orgId));
+    } catch {}
+  }
+  return secrets;
+}
+
 function isLikelyJwt(token: string): boolean {
   return token.split(".").length === 3;
 }
@@ -740,6 +814,36 @@ function extractTaskText(task: Task): string {
     .join("\n");
 }
 
+function extractVerifiedRecoverableArtifactText(
+  task: Task,
+  agentUrl: string,
+  artifactSecrets: readonly string[],
+): string | null {
+  if (task.status.message?.metadata?.agentNativeRecoverableArtifacts !== true) {
+    return null;
+  }
+
+  const text = formatContinuationArtifactText(extractTaskText(task), agentUrl);
+  if (!text.trim()) return null;
+
+  // Require the signed identity ledger so arbitrary peer progress prose cannot
+  // prematurely complete the continuation.
+  const artifacts = extractA2AArtifactIdentities(
+    [{ tool: "call-agent", result: text }],
+    {
+      persistedArtifactSecrets: artifactSecrets,
+    },
+  );
+  return artifacts.length > 0 ? text : null;
+}
+
+function formatRecoverableArtifactFallbackText(text: string): string {
+  return text.replace(
+    "The agent is still working on the full response, but these verified artifacts already exist:",
+    "The downstream agent did not finish its full response, but these verified artifacts already exist:",
+  );
+}
+
 function formatContinuationArtifactText(
   text: string,
   agentUrl: string,

package/corpus/core/src/integrations/pending-tasks-store.ts

@@ -272,6 +272,19 @@ export async function claimPendingTask(
                AND active.status = 'processing'
                AND active.id <> integration_pending_tasks.id
            )
+           AND NOT EXISTS (
+             SELECT 1 FROM integration_pending_tasks earlier
+             WHERE earlier.platform = integration_pending_tasks.platform
+               AND earlier.external_thread_id = integration_pending_tasks.external_thread_id
+               AND earlier.status = 'pending'
+               AND (
+                 earlier.created_at < integration_pending_tasks.created_at
+                 OR (
+                   earlier.created_at = integration_pending_tasks.created_at
+                   AND earlier.id < integration_pending_tasks.id
+                 )
+               )
+           )
          RETURNING id, platform, external_thread_id, payload, owner_email, org_id, status, attempts, error_message, created_at, updated_at, completed_at`
       : `UPDATE integration_pending_tasks
          SET status = ?, attempts = attempts + 1, updated_at = ?
@@ -282,6 +295,19 @@ export async function claimPendingTask(
                AND active.external_thread_id = integration_pending_tasks.external_thread_id
                AND active.status = 'processing'
                AND active.id <> integration_pending_tasks.id
+           )
+           AND NOT EXISTS (
+             SELECT 1 FROM integration_pending_tasks earlier
+             WHERE earlier.platform = integration_pending_tasks.platform
+               AND earlier.external_thread_id = integration_pending_tasks.external_thread_id
+               AND earlier.status = 'pending'
+               AND (
+                 earlier.created_at < integration_pending_tasks.created_at
+                 OR (
+                   earlier.created_at = integration_pending_tasks.created_at
+                   AND earlier.id < integration_pending_tasks.id
+                 )
+               )
            )`,
     args: ["processing", now, id],
   });
@@ -312,7 +338,7 @@ export async function getNextPendingTaskIdForThread(
   const { rows } = await getDbExec().execute({
     sql: `SELECT id FROM integration_pending_tasks
       WHERE platform = ? AND external_thread_id = ? AND status = 'pending'
-      ORDER BY created_at ASC LIMIT 1`,
+      ORDER BY created_at ASC, id ASC LIMIT 1`,
     args: [platform, externalThreadId],
   });
   return rows[0]?.id ? String(rows[0].id) : null;
@@ -354,6 +380,77 @@ export async function markTaskRetryable(
   });
 }
 
+export async function stageTaskDeliveryPayload(
+  id: string,
+  payload: string,
+): Promise<void> {
+  await ensureTable();
+  const client = getDbExec();
+  const now = Date.now();
+  const result = await client.execute({
+    sql: `UPDATE integration_pending_tasks
+          SET payload = ?, updated_at = ?
+          WHERE id = ? AND status = 'processing'`,
+    args: [payload, now, id],
+  });
+  const affected = Number(
+    (result as { rowsAffected?: number }).rowsAffected ??
+      (result as { rowCount?: number }).rowCount ??
+      0,
+  );
+  if (affected === 0) {
+    throw new Error("Integration task is no longer claimable for delivery");
+  }
+}
+
+export async function markTaskDeliveryRetryable(
+  id: string,
+  payload: string,
+  errorMessage: string,
+): Promise<void> {
+  await ensureTable();
+  const client = getDbExec();
+  const result = await client.execute({
+    sql: `UPDATE integration_pending_tasks
+          SET status = ?, payload = ?, updated_at = ?, error_message = ?
+          WHERE id = ? AND status = 'processing'`,
+    args: ["pending", payload, Date.now(), errorMessage.slice(0, 2000), id],
+  });
+  const affected = Number(
+    (result as { rowsAffected?: number }).rowsAffected ??
+      (result as { rowCount?: number }).rowCount ??
+      0,
+  );
+  if (affected === 0) {
+    throw new Error(
+      "Integration task is no longer claimable for delivery retry",
+    );
+  }
+}
+
+export async function failTaskDeliveryTransition(
+  id: string,
+  errorMessage: string,
+): Promise<void> {
+  await ensureTable();
+  const result = await getDbExec().execute({
+    sql: `UPDATE integration_pending_tasks
+          SET status = ?, updated_at = ?, error_message = ?, payload = ?
+          WHERE id = ? AND status = 'processing'`,
+    args: ["failed", Date.now(), errorMessage.slice(0, 2000), "{}", id],
+  });
+  const affected = Number(
+    (result as { rowsAffected?: number }).rowsAffected ??
+      (result as { rowCount?: number }).rowCount ??
+      0,
+  );
+  if (affected === 0) {
+    throw new Error(
+      "Integration task delivery failure transition lost its race",
+    );
+  }
+}
+
 /** Mark a task as failed and stash an error message. */
 export async function markTaskFailed(
   id: string,