@agent-native/core 0.149.4 → 0.149.5

package/dist/private-blob/registry.js

@@ -2,6 +2,7 @@ import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
 import { uploadFile } from "../file-upload/index.js";
 import { decryptSecretValue, encryptSecretValue, getSecretEncryptionKey, } from "../secrets/crypto.js";
 const PUBLIC_UPLOAD_HANDLE_PREFIX = "public-upload:v1:";
+const PUBLIC_UPLOAD_READ_RETRY_DELAYS_MS = [100, 250, 500];
 const globals = globalThis;
 const providers = (globals.__agentNativePrivateBlobProviders ??= new Map());
 const publicUploadFallbackRef = (globals.__agentNativePrivateBlobPublicUploadFallback ??= {
@@ -47,6 +48,16 @@ function decodePublicUploadDescriptor(id) {
 function isPublicUploadFallbackHandle(handle) {
     return handle.id.startsWith(PUBLIC_UPLOAD_HANDLE_PREFIX);
 }
+function isRetryablePublicUploadStatus(status) {
+    return (status === 404 ||
+        status === 408 ||
+        status === 425 ||
+        status === 429 ||
+        (status >= 500 && status <= 599));
+}
+function waitForPublicUploadRetry(delayMs) {
+    return new Promise((resolve) => setTimeout(resolve, delayMs));
+}
 async function putViaEncryptedPublicUpload(input) {
     const bytes = toBytes(input.data);
     const encrypted = encryptBytes(bytes);
@@ -71,7 +82,7 @@ async function putViaEncryptedPublicUpload(input) {
         size: bytes.byteLength,
         createdAt: new Date().toISOString(),
     };
-    return {
+    const handle = {
         id: encodePublicUploadDescriptor(descriptor),
         provider: `public-upload:${uploaded.provider}`,
         opaque: true,
@@ -81,12 +92,64 @@ async function putViaEncryptedPublicUpload(input) {
         createdAt: descriptor.createdAt,
         metadata: input.metadata,
     };
+    // Do not hand callers a reference that the next request cannot read yet.
+    // The public-upload fallback is eventually consistent at the URL boundary,
+    // so readiness belongs to the write path as well as the later read path.
+    await readViaEncryptedPublicUpload(handle);
+    return handle;
 }
 async function readViaEncryptedPublicUpload(handle) {
     const descriptor = decodePublicUploadDescriptor(handle.id);
-    const response = await fetch(descriptor.url);
-    if (!response.ok) {
-        throw new Error(`Private blob public-upload read failed (${response.status}): ${response.statusText}`);
+    const startedAt = Date.now();
+    let response;
+    let attempts = 0;
+    for (let attempt = 0; attempt <= PUBLIC_UPLOAD_READ_RETRY_DELAYS_MS.length; attempt++) {
+        attempts = attempt + 1;
+        try {
+            response = await fetch(descriptor.url);
+        }
+        catch (error) {
+            if (attempt === PUBLIC_UPLOAD_READ_RETRY_DELAYS_MS.length) {
+                console.warn("[private-blob] public-upload read failed", {
+                    attempts: attempt + 1,
+                    elapsedMs: Date.now() - startedAt,
+                    provider: handle.provider,
+                    reason: "network",
+                });
+                throw new Error(`Private blob public-upload read failed: ${error instanceof Error ? error.message : "network error"}`, { cause: error });
+            }
+            await waitForPublicUploadRetry(PUBLIC_UPLOAD_READ_RETRY_DELAYS_MS[attempt]);
+            continue;
+        }
+        if (response.ok)
+            break;
+        if (!isRetryablePublicUploadStatus(response.status) ||
+            attempt === PUBLIC_UPLOAD_READ_RETRY_DELAYS_MS.length) {
+            console.warn("[private-blob] public-upload read failed", {
+                attempts: attempt + 1,
+                elapsedMs: Date.now() - startedAt,
+                provider: handle.provider,
+                status: response.status,
+            });
+            throw new Error(`Private blob public-upload read failed (${response.status}): ${response.statusText}`);
+        }
+        await waitForPublicUploadRetry(PUBLIC_UPLOAD_READ_RETRY_DELAYS_MS[attempt]);
+    }
+    if (!response?.ok) {
+        console.warn("[private-blob] public-upload read failed", {
+            attempts: PUBLIC_UPLOAD_READ_RETRY_DELAYS_MS.length + 1,
+            elapsedMs: Date.now() - startedAt,
+            provider: handle.provider,
+            reason: "no-response",
+        });
+        throw new Error("Private blob public-upload read failed without a response");
+    }
+    if (attempts > 1) {
+        console.info("[private-blob] public-upload read recovered after retry", {
+            attempts,
+            elapsedMs: Date.now() - startedAt,
+            provider: handle.provider,
+        });
     }
     // The uploaded ciphertext is intentionally opaque; the descriptor carries
     // auth tag + IV separately so the backing public URL is useless by itself.

package/dist/secrets/routes.d.ts

@@ -34,37 +34,37 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    status?: undefined;
     ok?: undefined;
+    status?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     status: string;
-    error?: undefined;
 } | {
+    ok?: undefined;
     error: string;
     removed?: undefined;
-    ok?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
  * or the current stored value without changing anything.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+    ok?: undefined;
     error: string;
     note?: undefined;
-    ok?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note?: undefined;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note: string;
-    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,11 +95,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;

package/dist/server/agent-engine-api-key-route.d.ts

@@ -27,10 +27,10 @@ export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scop
 export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: any;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
-    error?: undefined;
 }>>;
 export {};

package/dist/templates/default/pnpm-workspace.yaml

@@ -2,6 +2,50 @@ overrides:
   "@assistant-ui/store": ">=0.2.9 <0.2.14"
   "@assistant-ui/tap": "^0.5.14"
   nf3: "0.3.17"
+  # Tiptap 3.28 packages use caret ranges for their internal dependencies.
+  # Keep a fresh scaffold on one tested family so extension-list does not
+  # resolve to 3.30 alongside core 3.28 during a generated build.
+  "@tiptap/core": "3.28.0"
+  "@tiptap/extension-blockquote": "3.28.0"
+  "@tiptap/extension-bold": "3.28.0"
+  "@tiptap/extension-bubble-menu": "3.28.0"
+  "@tiptap/extension-bullet-list": "3.28.0"
+  "@tiptap/extension-code": "3.28.0"
+  "@tiptap/extension-code-block": "3.28.0"
+  "@tiptap/extension-code-block-lowlight": "3.28.0"
+  "@tiptap/extension-collaboration": "3.28.0"
+  "@tiptap/extension-collaboration-caret": "3.28.0"
+  "@tiptap/extension-color": "3.28.0"
+  "@tiptap/extension-document": "3.28.0"
+  "@tiptap/extension-dropcursor": "3.28.0"
+  "@tiptap/extension-floating-menu": "3.28.0"
+  "@tiptap/extension-gapcursor": "3.28.0"
+  "@tiptap/extension-hard-break": "3.28.0"
+  "@tiptap/extension-heading": "3.28.0"
+  "@tiptap/extension-horizontal-rule": "3.28.0"
+  "@tiptap/extension-image": "3.28.0"
+  "@tiptap/extension-italic": "3.28.0"
+  "@tiptap/extension-link": "3.28.0"
+  "@tiptap/extension-list": "3.28.0"
+  "@tiptap/extension-list-item": "3.28.0"
+  "@tiptap/extension-list-keymap": "3.28.0"
+  "@tiptap/extension-ordered-list": "3.28.0"
+  "@tiptap/extension-paragraph": "3.28.0"
+  "@tiptap/extension-placeholder": "3.28.0"
+  "@tiptap/extension-strike": "3.28.0"
+  "@tiptap/extension-table": "3.28.0"
+  "@tiptap/extension-table-cell": "3.28.0"
+  "@tiptap/extension-table-header": "3.28.0"
+  "@tiptap/extension-table-row": "3.28.0"
+  "@tiptap/extension-task-item": "3.28.0"
+  "@tiptap/extension-task-list": "3.28.0"
+  "@tiptap/extension-text": "3.28.0"
+  "@tiptap/extension-text-style": "3.28.0"
+  "@tiptap/extension-underline": "3.28.0"
+  "@tiptap/extensions": "3.28.0"
+  "@tiptap/pm": "3.28.0"
+  "@tiptap/react": "3.28.0"
+  "@tiptap/starter-kit": "3.28.0"
 
 allowBuilds:
   better-sqlite3: true

package/dist/templates/workspace-root/pnpm-workspace.yaml

@@ -15,6 +15,50 @@ overrides:
   esbuild: "^0.28.1"
   srvx: "^0.12.4"
   zod: "^4.4.3"
+  # Tiptap 3.28 packages use caret ranges for their internal dependencies.
+  # Keep a fresh scaffold on one tested family: otherwise extension-list can
+  # resolve to 3.30 alongside core 3.28 and fail during the generated build.
+  "@tiptap/core": "3.28.0"
+  "@tiptap/extension-blockquote": "3.28.0"
+  "@tiptap/extension-bold": "3.28.0"
+  "@tiptap/extension-bubble-menu": "3.28.0"
+  "@tiptap/extension-bullet-list": "3.28.0"
+  "@tiptap/extension-code": "3.28.0"
+  "@tiptap/extension-code-block": "3.28.0"
+  "@tiptap/extension-code-block-lowlight": "3.28.0"
+  "@tiptap/extension-collaboration": "3.28.0"
+  "@tiptap/extension-collaboration-caret": "3.28.0"
+  "@tiptap/extension-color": "3.28.0"
+  "@tiptap/extension-document": "3.28.0"
+  "@tiptap/extension-dropcursor": "3.28.0"
+  "@tiptap/extension-floating-menu": "3.28.0"
+  "@tiptap/extension-gapcursor": "3.28.0"
+  "@tiptap/extension-hard-break": "3.28.0"
+  "@tiptap/extension-heading": "3.28.0"
+  "@tiptap/extension-horizontal-rule": "3.28.0"
+  "@tiptap/extension-image": "3.28.0"
+  "@tiptap/extension-italic": "3.28.0"
+  "@tiptap/extension-link": "3.28.0"
+  "@tiptap/extension-list": "3.28.0"
+  "@tiptap/extension-list-item": "3.28.0"
+  "@tiptap/extension-list-keymap": "3.28.0"
+  "@tiptap/extension-ordered-list": "3.28.0"
+  "@tiptap/extension-paragraph": "3.28.0"
+  "@tiptap/extension-placeholder": "3.28.0"
+  "@tiptap/extension-strike": "3.28.0"
+  "@tiptap/extension-table": "3.28.0"
+  "@tiptap/extension-table-cell": "3.28.0"
+  "@tiptap/extension-table-header": "3.28.0"
+  "@tiptap/extension-table-row": "3.28.0"
+  "@tiptap/extension-task-item": "3.28.0"
+  "@tiptap/extension-task-list": "3.28.0"
+  "@tiptap/extension-text": "3.28.0"
+  "@tiptap/extension-text-style": "3.28.0"
+  "@tiptap/extension-underline": "3.28.0"
+  "@tiptap/extensions": "3.28.0"
+  "@tiptap/pm": "3.28.0"
+  "@tiptap/react": "3.28.0"
+  "@tiptap/starter-kit": "3.28.0"
 
 onlyBuiltDependencies:
   - "@swc/core"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.149.4",
+  "version": "0.149.5",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {

package/src/templates/default/pnpm-workspace.yaml

@@ -2,6 +2,50 @@ overrides:
   "@assistant-ui/store": ">=0.2.9 <0.2.14"
   "@assistant-ui/tap": "^0.5.14"
   nf3: "0.3.17"
+  # Tiptap 3.28 packages use caret ranges for their internal dependencies.
+  # Keep a fresh scaffold on one tested family so extension-list does not
+  # resolve to 3.30 alongside core 3.28 during a generated build.
+  "@tiptap/core": "3.28.0"
+  "@tiptap/extension-blockquote": "3.28.0"
+  "@tiptap/extension-bold": "3.28.0"
+  "@tiptap/extension-bubble-menu": "3.28.0"
+  "@tiptap/extension-bullet-list": "3.28.0"
+  "@tiptap/extension-code": "3.28.0"
+  "@tiptap/extension-code-block": "3.28.0"
+  "@tiptap/extension-code-block-lowlight": "3.28.0"
+  "@tiptap/extension-collaboration": "3.28.0"
+  "@tiptap/extension-collaboration-caret": "3.28.0"
+  "@tiptap/extension-color": "3.28.0"
+  "@tiptap/extension-document": "3.28.0"
+  "@tiptap/extension-dropcursor": "3.28.0"
+  "@tiptap/extension-floating-menu": "3.28.0"
+  "@tiptap/extension-gapcursor": "3.28.0"
+  "@tiptap/extension-hard-break": "3.28.0"
+  "@tiptap/extension-heading": "3.28.0"
+  "@tiptap/extension-horizontal-rule": "3.28.0"
+  "@tiptap/extension-image": "3.28.0"
+  "@tiptap/extension-italic": "3.28.0"
+  "@tiptap/extension-link": "3.28.0"
+  "@tiptap/extension-list": "3.28.0"
+  "@tiptap/extension-list-item": "3.28.0"
+  "@tiptap/extension-list-keymap": "3.28.0"
+  "@tiptap/extension-ordered-list": "3.28.0"
+  "@tiptap/extension-paragraph": "3.28.0"
+  "@tiptap/extension-placeholder": "3.28.0"
+  "@tiptap/extension-strike": "3.28.0"
+  "@tiptap/extension-table": "3.28.0"
+  "@tiptap/extension-table-cell": "3.28.0"
+  "@tiptap/extension-table-header": "3.28.0"
+  "@tiptap/extension-table-row": "3.28.0"
+  "@tiptap/extension-task-item": "3.28.0"
+  "@tiptap/extension-task-list": "3.28.0"
+  "@tiptap/extension-text": "3.28.0"
+  "@tiptap/extension-text-style": "3.28.0"
+  "@tiptap/extension-underline": "3.28.0"
+  "@tiptap/extensions": "3.28.0"
+  "@tiptap/pm": "3.28.0"
+  "@tiptap/react": "3.28.0"
+  "@tiptap/starter-kit": "3.28.0"
 
 allowBuilds:
   better-sqlite3: true

package/src/templates/workspace-root/pnpm-workspace.yaml

@@ -15,6 +15,50 @@ overrides:
   esbuild: "^0.28.1"
   srvx: "^0.12.4"
   zod: "^4.4.3"
+  # Tiptap 3.28 packages use caret ranges for their internal dependencies.
+  # Keep a fresh scaffold on one tested family: otherwise extension-list can
+  # resolve to 3.30 alongside core 3.28 and fail during the generated build.
+  "@tiptap/core": "3.28.0"
+  "@tiptap/extension-blockquote": "3.28.0"
+  "@tiptap/extension-bold": "3.28.0"
+  "@tiptap/extension-bubble-menu": "3.28.0"
+  "@tiptap/extension-bullet-list": "3.28.0"
+  "@tiptap/extension-code": "3.28.0"
+  "@tiptap/extension-code-block": "3.28.0"
+  "@tiptap/extension-code-block-lowlight": "3.28.0"
+  "@tiptap/extension-collaboration": "3.28.0"
+  "@tiptap/extension-collaboration-caret": "3.28.0"
+  "@tiptap/extension-color": "3.28.0"
+  "@tiptap/extension-document": "3.28.0"
+  "@tiptap/extension-dropcursor": "3.28.0"
+  "@tiptap/extension-floating-menu": "3.28.0"
+  "@tiptap/extension-gapcursor": "3.28.0"
+  "@tiptap/extension-hard-break": "3.28.0"
+  "@tiptap/extension-heading": "3.28.0"
+  "@tiptap/extension-horizontal-rule": "3.28.0"
+  "@tiptap/extension-image": "3.28.0"
+  "@tiptap/extension-italic": "3.28.0"
+  "@tiptap/extension-link": "3.28.0"
+  "@tiptap/extension-list": "3.28.0"
+  "@tiptap/extension-list-item": "3.28.0"
+  "@tiptap/extension-list-keymap": "3.28.0"
+  "@tiptap/extension-ordered-list": "3.28.0"
+  "@tiptap/extension-paragraph": "3.28.0"
+  "@tiptap/extension-placeholder": "3.28.0"
+  "@tiptap/extension-strike": "3.28.0"
+  "@tiptap/extension-table": "3.28.0"
+  "@tiptap/extension-table-cell": "3.28.0"
+  "@tiptap/extension-table-header": "3.28.0"
+  "@tiptap/extension-table-row": "3.28.0"
+  "@tiptap/extension-task-item": "3.28.0"
+  "@tiptap/extension-task-list": "3.28.0"
+  "@tiptap/extension-text": "3.28.0"
+  "@tiptap/extension-text-style": "3.28.0"
+  "@tiptap/extension-underline": "3.28.0"
+  "@tiptap/extensions": "3.28.0"
+  "@tiptap/pm": "3.28.0"
+  "@tiptap/react": "3.28.0"
+  "@tiptap/starter-kit": "3.28.0"
 
 onlyBuiltDependencies:
   - "@swc/core"