@agent-native/core 0.131.7 → 0.132.0

package/dist/server/core-routes-plugin.js

@@ -5,7 +5,7 @@ import { registerBuiltinEngines } from "../agent/engine/builtin.js";
 import { OPENAI_BASE_URL_ENV_VAR, PROVIDER_ENV_META, } from "../agent/engine/provider-env-vars.js";
 import { isAgentEngineSettingConfigured, getAgentEngineEntry, detectEngineFromEnv, detectEngineFromUserSecrets, isStoredEngineUsableForRequest, normalizeModelForEngine, } from "../agent/engine/registry.js";
 import { canUpdateAgentLoopSettings, readAgentLoopSettings, resetAgentLoopSettings, validateMaxIterationsInput, writeAgentLoopSettings, } from "../agent/loop-settings.js";
-import { getState, putState, deleteState, listComposeDrafts, getComposeDraft, putComposeDraft, deleteComposeDraft, deleteAllComposeDrafts, } from "../application-state/handlers.js";
+import { getState, putState, deleteState, listComposeDrafts, getComposeDraft, putComposeDraft, deleteComposeDraft, deleteAllComposeDrafts, getStateMany, } from "../application-state/handlers.js";
 import { mountBrowserSessionRoutes } from "../browser-sessions/routes.js";
 import { mountDbAdminRoutes } from "../db-admin/routes.js";
 import { getDbExec } from "../db/client.js";
@@ -39,7 +39,7 @@ import { getSession } from "./auth.js";
 import { BUILDER_CONNECT_PARAM, BUILDER_CONNECT_OWNER_COOKIE, BUILDER_ENV_KEYS, BUILDER_OPENER_PARAM, BUILDER_RELAY_FLOW_HEADER, BUILDER_RELAY_SIGNATURE_HEADER, BUILDER_RELAY_STATE_PARAM, BUILDER_RELAY_TIMESTAMP_HEADER, BUILDER_STATE_PARAM, appendBuilderConnectToken, builderConnectTrackingProperties, buildBuilderCliAuthUrl, createBuilderBrowserCallbackErrorPage, createBuilderBrowserCallbackPage, createBuilderRelayRequest, getBuilderConnectTrackingParams, getBuilderCliAuthCallbackOriginForEvent, getBuilderBrowserOriginForEvent, resolveBuilderCallbackReturnUrl, getBuilderBrowserStatusForEvent, resolveBuilderBranchProjectId, resolveBuilderPreviewRelayParentOrigin, resolveBuilderPreviewRelayTargetOrigin, resolveSafePreviewUrl, runBuilderAgent, signBuilderCallbackState, signBuilderPreviewRelayState, verifyBuilderRelayRequest, verifyBuilderPreviewRelayStateForCallback, verifyBuilderConnectTokenAndGetOwner, verifyBuilderCallbackStateAndGetOwner, signBuilderConnectToken, } from "./builder-browser.js";
 import { captureError, registerErrorCaptureProvider } from "./capture-error.js";
 import { getAllowedCorsOrigin, readCorsAllowedOrigins, } from "./cors-origins.js";
-import { canUseDeployCredentialFallbackForRequest, readDeployCredentialEnv, resolveSecret, } from "./credential-provider.js";
+import { canUseDeployCredentialFallbackForRequest, prefetchSecrets, readDeployCredentialEnv, resolveSecret, } from "./credential-provider.js";
 import { createEmbedStartRouteHandler } from "./embed-route.js";
 import { getH3App, awaitBootstrap, markDefaultPluginProvided, trackPluginInit, } from "./framework-request-handler.js";
 import { createGatewayAccessCheckHandler } from "./gateway-access-check.js";
@@ -784,6 +784,7 @@ export async function readLegacyCoreRouteInitSettings(readSetting = getSetting)
  *   GET    /_agent-native/health                        — DB liveness probe + scale-to-zero warmup
  *   GET    /_agent-native/env-status                    — env key configuration status (when envKeys provided)
  *   POST   /_agent-native/env-vars                      — compatibility route that saves keys to scoped DB secrets
+ *   GET    /_agent-native/application-state?keys=a,b,c  — batched read of many keys
  *   GET    /_agent-native/application-state/:key        — read application state
  *   PUT    /_agent-native/application-state/:key        — write application state
  *   DELETE /_agent-native/application-state/:key        — delete application state
@@ -2335,8 +2336,13 @@ export function createCoreRoutesPlugin(options = {}) {
                             /* org module not present in this template */
                         }
                     }
+                    // One context for the whole sweep so the per-request secret memo is
+                    // shared, and one batched read per scope to fill it. Without this
+                    // every key pays its own four-scope waterfall.
+                    const requestContext = { userEmail, orgId };
+                    await runWithRequestContext(requestContext, () => prefetchSecrets(allowedEnvKeyNames));
                     return Promise.all(envKeys.map(async (cfg) => {
-                        const configured = await runWithRequestContext({ userEmail, orgId }, () => resolveSecret(cfg.key).then(Boolean));
+                        const configured = await runWithRequestContext(requestContext, () => resolveSecret(cfg.key).then(Boolean));
                         return {
                             key: cfg.key,
                             label: cfg.label,
@@ -3042,8 +3048,16 @@ export function createCoreRoutesPlugin(options = {}) {
                     const key = (event.url?.pathname || "").replace(/^\/+/, "").split("/")[0] ||
                         "";
                     // Skip — compose handler above already handled it
-                    if (key === "compose" || key === "")
+                    if (key === "compose")
                         return;
+                    // Collection root: `GET ?keys=a,b,c` batches many single-key reads
+                    // into one request (and one identity resolution) — the chat rail
+                    // alone reads ~6 keys on every mount.
+                    if (key === "") {
+                        if (getMethod(event) === "GET")
+                            return getStateMany(event);
+                        return;
+                    }
                     if (event.context) {
                         event.context.params = { ...event.context.params, key };
                     }