@agent-native/core 0.149.4 → 0.149.6

package/corpus/templates/slides/server/lib/uploaded-reference-storage.ts

@@ -84,25 +84,44 @@ export async function readUploadedReferenceBlob(
       decryptSecretValue(reference.slice(UPLOADED_REFERENCE_PREFIX.length)),
     ) as UploadedReferenceDescriptor;
   } catch {
+    console.warn("[slides-upload] invalid uploaded reference descriptor", {
+      reason: "decrypt-or-parse",
+    });
     throw new Error("Invalid uploaded file reference");
   }
 
+  const requestOrgId = getRequestOrgId() ?? null;
+  const ownerMatches = descriptor?.ownerKey === tenantFileKey(email);
+  const orgMatches = descriptor?.orgId === requestOrgId;
+  const filename = descriptor?.filename;
+  const safeFilename =
+    typeof filename === "string" && filename === path.basename(filename)
+      ? filename
+      : null;
+  const handleIsOpaque = descriptor?.handle?.opaque === true;
   if (
     descriptor?.kind !== "slides-upload" ||
-    descriptor.version !== 1 ||
-    descriptor.ownerKey !== tenantFileKey(email) ||
-    descriptor.orgId !== (getRequestOrgId() ?? null) ||
-    typeof descriptor.filename !== "string" ||
-    descriptor.filename !== path.basename(descriptor.filename) ||
-    typeof descriptor.handle?.id !== "string" ||
-    typeof descriptor.handle?.provider !== "string" ||
-    descriptor.handle.opaque !== true
+    descriptor?.version !== 1 ||
+    !ownerMatches ||
+    !orgMatches ||
+    safeFilename === null ||
+    typeof descriptor?.handle?.id !== "string" ||
+    typeof descriptor?.handle?.provider !== "string" ||
+    !handleIsOpaque
   ) {
+    console.warn("[slides-upload] uploaded reference rejected", {
+      handleIsOpaque,
+      hasDescriptorOrg: descriptor?.orgId != null,
+      hasRequestOrg: requestOrgId != null,
+      orgMatches,
+      ownerMatches,
+      reason: "scope-or-handle-validation",
+    });
     throw new Error(
       "Access denied: uploaded file reference is not valid for this user or organization",
     );
   }
 
   const blob = await readPrivateBlob(descriptor.handle);
-  return { data: Buffer.from(blob.data), filename: descriptor.filename };
+  return { data: Buffer.from(blob.data), filename: safeFilename };
 }

package/corpus/templates/slides/server/plugins/agent-chat.ts

@@ -1,10 +1,10 @@
-import { getOrgContext } from "@agent-native/core/org";
 import {
   createAgentChatPlugin,
   loadActionsFromStaticRegistry,
 } from "@agent-native/core/server";
 
 import actionsRegistry from "../../.generated/actions-registry.js";
+import { resolveSlidesRequestAuthContext } from "../handlers/request-auth-context.js";
 import { prepareSlidesChatAttachments } from "../lib/chat-attachments.js";
 import "../register-secrets.js";
 
@@ -48,12 +48,21 @@ export default createAgentChatPlugin({
   // paginate, and reduce provider data through providerFetch() without us
   // hardcoding one action per Google Drive endpoint.
   codeExecution: { production: "sandboxed" },
-  resolveOrgId: async (event) => (await getOrgContext(event)).orgId,
+  // Upload routes and action routes must use the same session/org resolver.
+  // Reading getOrgContext directly here skipped the upload route's session
+  // fallback and could reject a freshly uploaded reference after a transient
+  // org lookup or active-org transition.
+  resolveOrgId: async (event) => {
+    const authContext = await resolveSlidesRequestAuthContext(event);
+    return authContext.orgId === undefined ? null : authContext.orgId;
+  },
   prepareRequest: prepareSlidesChatAttachments,
   systemPrompt: `You are an AI deck assistant. You create, edit, import, export, style, share, and navigate decks through actions and shared application state. For a newly created presentation, use create-deck with slides: [] only when you are creating the deck yourself, then add-slide sequentially with full rendered HTML. The legacy generate-slides-ai action returns Markdown drafts and is not part of the persisted presentation workflow.
 
 When the user asks to improve, beautify, restyle, or make an uploaded/existing deck on-brand, treat it as an in-place source-preserving edit unless the user explicitly asks to rewrite the story or change slide count. First call view-screen when the active deck is unclear, then get-deck with compact=true for deck orientation. If you need slide markup, call get-deck with compact=false explicitly and only when the edit requires the full HTML. If get-deck.sourceImport exists, preserve its slide count, order, IDs, factual copy, notes, images, charts, tables, diagrams, freeform objects, and source aspect ratio. For a deck-wide restyle, use one patch-deck call with requireAllSourceSlides=true and one patch-slide operation with fields.content for every source slide ID; the action rejects partial coverage. Do not split a full-deck restyle into arbitrary batches or use one-by-one update-slide calls - reserve update-slide for targeted one-slide edits. After the patch succeeds, verify with get-deck using compact=true so the verification does not retransmit every slide's HTML. Do not claim a partial or initial pass. Do not use add-slide, delete, reorder, or replace source imagery with generic cards for this workflow. If sourceImport.fidelity is partial or imagesSkipped is nonzero, stop and report the exact fidelity warning instead of claiming a reliable improvement.
-For a targeted one-slide edit, prefer get-deck with the stable slideId from view-screen or compact get-deck. It returns only that slide's full HTML by default, so do not load the full deck when one slide is enough. Pass compact=true when you only need a lightweight check of that slide.
+For a targeted one-slide edit, prefer get-deck with the stable slideId from view-screen or compact get-deck. It returns only that slide's full HTML by default, so do not load the full deck when one slide is enough. For code-style edits, request compact=false and format=true, then call update-slide with that slide's contentHash as baseContentHash and an ordered edits list. Use exact replace, insert-before/after, replace-between, or regex-replace edits; include expectedMatches for ambiguous markers. The action applies the whole list atomically under the deck lock, so a failed required match writes nothing. Set format=true on update-slide when readable line breaks should be persisted. Use fullContent only for an intentional full rewrite. Pass compact=true when you only need a lightweight check of that slide.
+
+For click-to-reveal animations, keep the slide HTML as the visual source and store reveals only in the slide's animations metadata. Read the target slide's full HTML, preserve its existing structure, and patch the complete ordered animations list with elementPath values from that final HTML. Leave labels and headings visible by omitting them from the list. Never simulate reveals by adding duplicate elements, visibility:hidden, fmd-layout-spacer, fmd-freeform-object, absolute positioning, transforms, or placeholder markup. If content and reveals both change, send them together in one patch-deck patch-slide operation. If a user asks to remove or revert reveals, send the existing content with animations: [], then re-read the slide; do not use a simplified replacement or rely on update-slide text alone.
 
 When the active Slides editor is already showing the deck you just changed, do not include an "Open the updated deck" or similar link in the final response. The deck is already open and the action updated it in place; say that plainly instead. Only provide an open-deck link when the user is elsewhere, the active deck is different, or the user explicitly asks for a link.
 

package/corpus/templates/tasks/.agents/skills/frontend-design/SKILL.md

@@ -168,6 +168,11 @@ the useful information remains dense and scannable.
 - Do not build custom dropdowns, menus, popovers, modals, or confirmations with manual absolute positioning and click-outside effects.
 - Never use browser dialogs (`window.alert`, `window.confirm`, `window.prompt`). Use `AlertDialog`, `Dialog`, or app-specific confirmation UI.
 - Use Tabler icons for all first-party UI icons. Do not add Lucide, Heroicons, inline SVG icon sets, or emoji icons.
+- Never guess a Tabler icon name. Names like `IconPartyPopper` or `IconConfettiCannon` feel
+  plausible but don't exist and crash Vite with a "Named export not found" error. Before importing
+  an icon you haven't used elsewhere in this app, confirm it exists by grepping
+  `node_modules/@tabler/icons-react/dist/tabler-icons-react.d.ts` (or the package's icon list)
+  for the exact name, and pick the closest real match if your first guess isn't there.
 - Keep inline help/info glyphs next to labels at `size-3` (12px) or smaller than the adjacent text. Preserve a larger hit area on the trigger, not the glyph. Use `guard:allow-large-help-icon` only for deliberate heading documentation or menu action exceptions.
 - Use `useActionQuery` and `useActionMutation` from `@agent-native/core/client` for action-backed UI. Standard CRUD should go through actions, not custom `/api/` routes.
 - Keep UI optimistic where possible: update cache and navigation immediately, then reconcile or roll back on mutation result.

package/dist/cli/create.js

@@ -17,6 +17,49 @@ const STANDALONE_EXACT_DEPENDENCY_OVERRIDES = {
     "@react-router/fs-routes": "8.1.0",
     "react-router": "8.1.0",
 };
+const TIPTAP_WORKSPACE_OVERRIDES = {
+    '"@tiptap/core"': '"3.28.0"',
+    '"@tiptap/extension-blockquote"': '"3.28.0"',
+    '"@tiptap/extension-bold"': '"3.28.0"',
+    '"@tiptap/extension-bubble-menu"': '"3.28.0"',
+    '"@tiptap/extension-bullet-list"': '"3.28.0"',
+    '"@tiptap/extension-code"': '"3.28.0"',
+    '"@tiptap/extension-code-block"': '"3.28.0"',
+    '"@tiptap/extension-code-block-lowlight"': '"3.28.0"',
+    '"@tiptap/extension-collaboration"': '"3.28.0"',
+    '"@tiptap/extension-collaboration-caret"': '"3.28.0"',
+    '"@tiptap/extension-color"': '"3.28.0"',
+    '"@tiptap/extension-document"': '"3.28.0"',
+    '"@tiptap/extension-dropcursor"': '"3.28.0"',
+    '"@tiptap/extension-floating-menu"': '"3.28.0"',
+    '"@tiptap/extension-gapcursor"': '"3.28.0"',
+    '"@tiptap/extension-hard-break"': '"3.28.0"',
+    '"@tiptap/extension-heading"': '"3.28.0"',
+    '"@tiptap/extension-horizontal-rule"': '"3.28.0"',
+    '"@tiptap/extension-image"': '"3.28.0"',
+    '"@tiptap/extension-italic"': '"3.28.0"',
+    '"@tiptap/extension-link"': '"3.28.0"',
+    '"@tiptap/extension-list"': '"3.28.0"',
+    '"@tiptap/extension-list-item"': '"3.28.0"',
+    '"@tiptap/extension-list-keymap"': '"3.28.0"',
+    '"@tiptap/extension-ordered-list"': '"3.28.0"',
+    '"@tiptap/extension-paragraph"': '"3.28.0"',
+    '"@tiptap/extension-placeholder"': '"3.28.0"',
+    '"@tiptap/extension-strike"': '"3.28.0"',
+    '"@tiptap/extension-table"': '"3.28.0"',
+    '"@tiptap/extension-table-cell"': '"3.28.0"',
+    '"@tiptap/extension-table-header"': '"3.28.0"',
+    '"@tiptap/extension-table-row"': '"3.28.0"',
+    '"@tiptap/extension-task-item"': '"3.28.0"',
+    '"@tiptap/extension-task-list"': '"3.28.0"',
+    '"@tiptap/extension-text"': '"3.28.0"',
+    '"@tiptap/extension-text-style"': '"3.28.0"',
+    '"@tiptap/extension-underline"': '"3.28.0"',
+    '"@tiptap/extensions"': '"3.28.0"',
+    '"@tiptap/pm"': '"3.28.0"',
+    '"@tiptap/react"': '"3.28.0"',
+    '"@tiptap/starter-kit"': '"3.28.0"',
+};
 const REACT_ROUTER_BUILD_DEPENDENCIES = [
     "@react-router/dev",
     "@react-router/fs-routes",
@@ -1457,6 +1500,12 @@ function postProcessStandalone(name, targetDir, templateName, resolution) {
                 nf3: '"0.3.17"',
             };
         }
+        if (templateName && getTemplate(templateName)) {
+            sections.overrides = {
+                ...sections.overrides,
+                ...TIPTAP_WORKSPACE_OVERRIDES,
+            };
+        }
         const localToolkit = localToolkitOverride();
         if (localToolkit) {
             sections.overrides ??= {};

package/dist/client/chat-first/index.d.ts

@@ -6,7 +6,7 @@ export { defaultChatFirstCopy } from "./copy.js";
 export { ChatFirstChatHistory, type ChatFirstChatHistoryProps, } from "./chat-history.js";
 export { ChatFirstSessionWatchPane } from "./session-watch-pane.js";
 export { ChatFirstSurfacePanel, type ChatFirstSurfacePanelProps, } from "./surface-panel.js";
-export { ChatFirstPrimaryNavigation } from "./primary-nav.js";
+export { ChatFirstPrimaryNavigation, type ChatFirstPrimaryTab, } from "./primary-nav.js";
 export { emitChatFirstOpenApp, resolveChatFirstAppTarget, CHAT_FIRST_DEFAULT_APP_IDS, type ChatFirstOpenAppDetail, } from "../chat-first.js";
 export { buildChatFirstAppCreationPrompt, titleFromChatFirstAppPrompt, type ChatFirstAppCreationPromptInput, type ChatFirstAppCreationResource, type ChatFirstAppCreationVaultAccessMode, } from "../../shared/chat-first-app-creation.js";
 export { ChatFirstSurfaceContent, ChatFirstSurfaceTabs, } from "./surface-tabs.js";

package/dist/client/chat-first/index.js

@@ -6,7 +6,7 @@ export { defaultChatFirstCopy } from "./copy.js";
 export { ChatFirstChatHistory, } from "./chat-history.js";
 export { ChatFirstSessionWatchPane } from "./session-watch-pane.js";
 export { ChatFirstSurfacePanel, } from "./surface-panel.js";
-export { ChatFirstPrimaryNavigation } from "./primary-nav.js";
+export { ChatFirstPrimaryNavigation, } from "./primary-nav.js";
 export { emitChatFirstOpenApp, resolveChatFirstAppTarget, CHAT_FIRST_DEFAULT_APP_IDS, } from "../chat-first.js";
 export { buildChatFirstAppCreationPrompt, titleFromChatFirstAppPrompt, } from "../../shared/chat-first-app-creation.js";
 export { ChatFirstSurfaceContent, ChatFirstSurfaceTabs, } from "./surface-tabs.js";

package/dist/client/chat-first/primary-nav.d.ts

@@ -1,8 +1,10 @@
 import type { ChatFirstCopy } from "./types.js";
-export declare function ChatFirstPrimaryNavigation({ onNewChat, onOpenIntegrations, onOpenScheduled, onSearch, copy, }: {
+export type ChatFirstPrimaryTab = "new-chat" | "integrations" | "scheduled";
+export declare function ChatFirstPrimaryNavigation({ onNewChat, onOpenIntegrations, onOpenScheduled, onSearch, activeTab, copy, }: {
     onNewChat?: () => void;
     onOpenIntegrations: () => void;
     onOpenScheduled: () => void;
     onSearch?: () => void;
+    activeTab?: ChatFirstPrimaryTab;
     copy?: ChatFirstCopy;
 }): import("react").JSX.Element;

package/dist/client/chat-first/primary-nav.js

@@ -1,6 +1,12 @@
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { IconClock, IconPlus, IconPlugConnected, IconSearch, } from "@tabler/icons-react";
 import { defaultChatFirstCopy } from "./copy.js";
-export function ChatFirstPrimaryNavigation({ onNewChat, onOpenIntegrations, onOpenScheduled, onSearch, copy = defaultChatFirstCopy, }) {
-    return (_jsxs(_Fragment, { children: [onNewChat ? (_jsxs("button", { type: "button", className: "flex h-8 w-full items-center gap-2 rounded-md px-2 text-[13px] font-medium text-sidebar-foreground/80 hover:bg-sidebar-accent hover:text-sidebar-accent-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring", onClick: onNewChat, children: [_jsx(IconPlus, { size: 15, className: "shrink-0", "aria-hidden": "true" }), _jsx("span", { children: copy("newChat") })] })) : null, _jsxs("button", { type: "button", className: "flex h-8 w-full items-center gap-2 rounded-md px-2 text-[13px] font-medium text-sidebar-foreground/80 hover:bg-sidebar-accent hover:text-sidebar-accent-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring", onClick: onOpenIntegrations, children: [_jsx(IconPlugConnected, { size: 15, className: "shrink-0", "aria-hidden": "true" }), _jsx("span", { children: copy("integrations") })] }), _jsxs("button", { type: "button", className: "flex h-8 w-full items-center gap-2 rounded-md px-2 text-[13px] font-medium text-sidebar-foreground/80 hover:bg-sidebar-accent hover:text-sidebar-accent-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring", onClick: onOpenScheduled, children: [_jsx(IconClock, { size: 15, className: "shrink-0", "aria-hidden": "true" }), _jsx("span", { children: copy("scheduled") })] }), onSearch ? (_jsxs("button", { type: "button", className: "flex h-8 w-full items-center gap-2 rounded-md px-2 text-[13px] font-medium text-sidebar-foreground/80 hover:bg-sidebar-accent hover:text-sidebar-accent-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring", onClick: onSearch, children: [_jsx(IconSearch, { size: 15, className: "shrink-0", "aria-hidden": "true" }), _jsx("span", { children: copy("search") })] })) : null] }));
+export function ChatFirstPrimaryNavigation({ onNewChat, onOpenIntegrations, onOpenScheduled, onSearch, activeTab, copy = defaultChatFirstCopy, }) {
+    const tabClassName = (tab) => `flex h-8 w-full items-center gap-2 rounded-md px-2 text-[13px] font-medium transition-[background-color,color] focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring ${activeTab === tab
+        ? "bg-sidebar-accent text-sidebar-accent-foreground"
+        : "text-sidebar-foreground/80 hover:bg-sidebar-accent hover:text-sidebar-accent-foreground"}`;
+    const renderTab = (tab, content, onSelect) => (_jsx("button", { type: "button", role: "tab", "aria-selected": activeTab === tab, className: tabClassName(tab), onClick: onSelect, children: content }));
+    return (_jsxs("div", { children: [_jsxs("div", { role: "tablist", "aria-label": "Primary navigation", className: "grid gap-px", children: [onNewChat
+                        ? renderTab("new-chat", _jsxs(_Fragment, { children: [_jsx(IconPlus, { size: 15, className: "shrink-0", "aria-hidden": "true" }), _jsx("span", { children: copy("newChat") })] }), onNewChat)
+                        : null, renderTab("integrations", _jsxs(_Fragment, { children: [_jsx(IconPlugConnected, { size: 15, className: "shrink-0", "aria-hidden": "true" }), _jsx("span", { children: copy("integrations") })] }), onOpenIntegrations), renderTab("scheduled", _jsxs(_Fragment, { children: [_jsx(IconClock, { size: 15, className: "shrink-0", "aria-hidden": "true" }), _jsx("span", { children: copy("scheduled") })] }), onOpenScheduled)] }), onSearch ? (_jsxs("button", { type: "button", className: "mt-px flex h-8 w-full items-center gap-2 rounded-md px-2 text-[13px] font-medium text-sidebar-foreground/80 transition-[background-color,color] hover:bg-sidebar-accent hover:text-sidebar-accent-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring", onClick: onSearch, children: [_jsx(IconSearch, { size: 15, className: "shrink-0", "aria-hidden": "true" }), _jsx("span", { children: copy("search") })] })) : null] }));
 }

package/dist/mcp/screen-memory-stdio.d.ts

@@ -137,13 +137,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -159,6 +159,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -174,7 +175,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -190,6 +190,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             minutes: {
                 type: string;
                 description: string;
@@ -199,7 +200,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -216,6 +216,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -234,7 +235,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             };
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -250,6 +250,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
@@ -263,7 +264,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
                 description: string;
             };
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             includeMicrophone?: undefined;
@@ -314,13 +314,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt: {
                 type: string;
                 description: string;
@@ -349,13 +349,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;

package/dist/notifications/routes.d.ts

@@ -16,18 +16,18 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
     error?: undefined;
     ok?: undefined;
 } | {
+    count?: undefined;
     updated: number;
     error?: undefined;
     ok?: undefined;
-    count?: undefined;
 } | {
+    count?: undefined;
     updated?: undefined;
     error: string;
     ok?: undefined;
-    count?: undefined;
 } | {
+    count?: undefined;
     updated?: undefined;
     error?: undefined;
     ok: boolean;
-    count?: undefined;
 }>>;

package/dist/observability/routes.d.ts

@@ -41,16 +41,16 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
-    error?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
+    error?: undefined;
     ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;
+    error?: undefined;
     ok?: undefined;
 } | {
     summary?: undefined;
@@ -59,9 +59,9 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     error: any;
     ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
+    error?: undefined;
     ok: boolean;
 }>>;

package/dist/private-blob/registry.js

@@ -2,6 +2,7 @@ import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
 import { uploadFile } from "../file-upload/index.js";
 import { decryptSecretValue, encryptSecretValue, getSecretEncryptionKey, } from "../secrets/crypto.js";
 const PUBLIC_UPLOAD_HANDLE_PREFIX = "public-upload:v1:";
+const PUBLIC_UPLOAD_READ_RETRY_DELAYS_MS = [100, 250, 500];
 const globals = globalThis;
 const providers = (globals.__agentNativePrivateBlobProviders ??= new Map());
 const publicUploadFallbackRef = (globals.__agentNativePrivateBlobPublicUploadFallback ??= {
@@ -47,6 +48,16 @@ function decodePublicUploadDescriptor(id) {
 function isPublicUploadFallbackHandle(handle) {
     return handle.id.startsWith(PUBLIC_UPLOAD_HANDLE_PREFIX);
 }
+function isRetryablePublicUploadStatus(status) {
+    return (status === 404 ||
+        status === 408 ||
+        status === 425 ||
+        status === 429 ||
+        (status >= 500 && status <= 599));
+}
+function waitForPublicUploadRetry(delayMs) {
+    return new Promise((resolve) => setTimeout(resolve, delayMs));
+}
 async function putViaEncryptedPublicUpload(input) {
     const bytes = toBytes(input.data);
     const encrypted = encryptBytes(bytes);
@@ -71,7 +82,7 @@ async function putViaEncryptedPublicUpload(input) {
         size: bytes.byteLength,
         createdAt: new Date().toISOString(),
     };
-    return {
+    const handle = {
         id: encodePublicUploadDescriptor(descriptor),
         provider: `public-upload:${uploaded.provider}`,
         opaque: true,
@@ -81,12 +92,64 @@ async function putViaEncryptedPublicUpload(input) {
         createdAt: descriptor.createdAt,
         metadata: input.metadata,
     };
+    // Do not hand callers a reference that the next request cannot read yet.
+    // The public-upload fallback is eventually consistent at the URL boundary,
+    // so readiness belongs to the write path as well as the later read path.
+    await readViaEncryptedPublicUpload(handle);
+    return handle;
 }
 async function readViaEncryptedPublicUpload(handle) {
     const descriptor = decodePublicUploadDescriptor(handle.id);
-    const response = await fetch(descriptor.url);
-    if (!response.ok) {
-        throw new Error(`Private blob public-upload read failed (${response.status}): ${response.statusText}`);
+    const startedAt = Date.now();
+    let response;
+    let attempts = 0;
+    for (let attempt = 0; attempt <= PUBLIC_UPLOAD_READ_RETRY_DELAYS_MS.length; attempt++) {
+        attempts = attempt + 1;
+        try {
+            response = await fetch(descriptor.url);
+        }
+        catch (error) {
+            if (attempt === PUBLIC_UPLOAD_READ_RETRY_DELAYS_MS.length) {
+                console.warn("[private-blob] public-upload read failed", {
+                    attempts: attempt + 1,
+                    elapsedMs: Date.now() - startedAt,
+                    provider: handle.provider,
+                    reason: "network",
+                });
+                throw new Error(`Private blob public-upload read failed: ${error instanceof Error ? error.message : "network error"}`, { cause: error });
+            }
+            await waitForPublicUploadRetry(PUBLIC_UPLOAD_READ_RETRY_DELAYS_MS[attempt]);
+            continue;
+        }
+        if (response.ok)
+            break;
+        if (!isRetryablePublicUploadStatus(response.status) ||
+            attempt === PUBLIC_UPLOAD_READ_RETRY_DELAYS_MS.length) {
+            console.warn("[private-blob] public-upload read failed", {
+                attempts: attempt + 1,
+                elapsedMs: Date.now() - startedAt,
+                provider: handle.provider,
+                status: response.status,
+            });
+            throw new Error(`Private blob public-upload read failed (${response.status}): ${response.statusText}`);
+        }
+        await waitForPublicUploadRetry(PUBLIC_UPLOAD_READ_RETRY_DELAYS_MS[attempt]);
+    }
+    if (!response?.ok) {
+        console.warn("[private-blob] public-upload read failed", {
+            attempts: PUBLIC_UPLOAD_READ_RETRY_DELAYS_MS.length + 1,
+            elapsedMs: Date.now() - startedAt,
+            provider: handle.provider,
+            reason: "no-response",
+        });
+        throw new Error("Private blob public-upload read failed without a response");
+    }
+    if (attempts > 1) {
+        console.info("[private-blob] public-upload read recovered after retry", {
+            attempts,
+            elapsedMs: Date.now() - startedAt,
+            provider: handle.provider,
+        });
     }
     // The uploaded ciphertext is intentionally opaque; the descriptor carries
     // auth tag + IV separately so the backing public URL is useless by itself.

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/server/realtime-token.d.ts

@@ -26,8 +26,8 @@ export declare function createRealtimeTokenHandler(): import("h3").EventHandlerW
     expiresAt?: undefined;
     ttlSeconds?: undefined;
 } | {
-    error?: undefined;
     token: string;
     expiresAt: string;
     ttlSeconds: number;
+    error?: undefined;
 }>>;

package/dist/server/transcribe-voice.d.ts

@@ -20,6 +20,6 @@ export declare function createTranscribeVoiceHandler(): import("h3").EventHandle
     error: string;
     text?: undefined;
 } | {
-    error?: undefined;
     text: string;
+    error?: undefined;
 }>>;

package/dist/templates/chat/.agents/skills/frontend-design/SKILL.md

@@ -168,6 +168,11 @@ the useful information remains dense and scannable.
 - Do not build custom dropdowns, menus, popovers, modals, or confirmations with manual absolute positioning and click-outside effects.
 - Never use browser dialogs (`window.alert`, `window.confirm`, `window.prompt`). Use `AlertDialog`, `Dialog`, or app-specific confirmation UI.
 - Use Tabler icons for all first-party UI icons. Do not add Lucide, Heroicons, inline SVG icon sets, or emoji icons.
+- Never guess a Tabler icon name. Names like `IconPartyPopper` or `IconConfettiCannon` feel
+  plausible but don't exist and crash Vite with a "Named export not found" error. Before importing
+  an icon you haven't used elsewhere in this app, confirm it exists by grepping
+  `node_modules/@tabler/icons-react/dist/tabler-icons-react.d.ts` (or the package's icon list)
+  for the exact name, and pick the closest real match if your first guess isn't there.
 - Keep inline help/info glyphs next to labels at `size-3` (12px) or smaller than the adjacent text. Preserve a larger hit area on the trigger, not the glyph. Use `guard:allow-large-help-icon` only for deliberate heading documentation or menu action exceptions.
 - Use `useActionQuery` and `useActionMutation` from `@agent-native/core/client` for action-backed UI. Standard CRUD should go through actions, not custom `/api/` routes.
 - Keep UI optimistic where possible: update cache and navigation immediately, then reconcile or roll back on mutation result.

package/dist/templates/default/.agents/skills/frontend-design/SKILL.md

@@ -168,6 +168,11 @@ the useful information remains dense and scannable.
 - Do not build custom dropdowns, menus, popovers, modals, or confirmations with manual absolute positioning and click-outside effects.
 - Never use browser dialogs (`window.alert`, `window.confirm`, `window.prompt`). Use `AlertDialog`, `Dialog`, or app-specific confirmation UI.
 - Use Tabler icons for all first-party UI icons. Do not add Lucide, Heroicons, inline SVG icon sets, or emoji icons.
+- Never guess a Tabler icon name. Names like `IconPartyPopper` or `IconConfettiCannon` feel
+  plausible but don't exist and crash Vite with a "Named export not found" error. Before importing
+  an icon you haven't used elsewhere in this app, confirm it exists by grepping
+  `node_modules/@tabler/icons-react/dist/tabler-icons-react.d.ts` (or the package's icon list)
+  for the exact name, and pick the closest real match if your first guess isn't there.
 - Keep inline help/info glyphs next to labels at `size-3` (12px) or smaller than the adjacent text. Preserve a larger hit area on the trigger, not the glyph. Use `guard:allow-large-help-icon` only for deliberate heading documentation or menu action exceptions.
 - Use `useActionQuery` and `useActionMutation` from `@agent-native/core/client` for action-backed UI. Standard CRUD should go through actions, not custom `/api/` routes.
 - Keep UI optimistic where possible: update cache and navigation immediately, then reconcile or roll back on mutation result.

package/dist/templates/default/pnpm-workspace.yaml

@@ -2,6 +2,50 @@ overrides:
   "@assistant-ui/store": ">=0.2.9 <0.2.14"
   "@assistant-ui/tap": "^0.5.14"
   nf3: "0.3.17"
+  # Tiptap 3.28 packages use caret ranges for their internal dependencies.
+  # Keep a fresh scaffold on one tested family so extension-list does not
+  # resolve to 3.30 alongside core 3.28 during a generated build.
+  "@tiptap/core": "3.28.0"
+  "@tiptap/extension-blockquote": "3.28.0"
+  "@tiptap/extension-bold": "3.28.0"
+  "@tiptap/extension-bubble-menu": "3.28.0"
+  "@tiptap/extension-bullet-list": "3.28.0"
+  "@tiptap/extension-code": "3.28.0"
+  "@tiptap/extension-code-block": "3.28.0"
+  "@tiptap/extension-code-block-lowlight": "3.28.0"
+  "@tiptap/extension-collaboration": "3.28.0"
+  "@tiptap/extension-collaboration-caret": "3.28.0"
+  "@tiptap/extension-color": "3.28.0"
+  "@tiptap/extension-document": "3.28.0"
+  "@tiptap/extension-dropcursor": "3.28.0"
+  "@tiptap/extension-floating-menu": "3.28.0"
+  "@tiptap/extension-gapcursor": "3.28.0"
+  "@tiptap/extension-hard-break": "3.28.0"
+  "@tiptap/extension-heading": "3.28.0"
+  "@tiptap/extension-horizontal-rule": "3.28.0"
+  "@tiptap/extension-image": "3.28.0"
+  "@tiptap/extension-italic": "3.28.0"
+  "@tiptap/extension-link": "3.28.0"
+  "@tiptap/extension-list": "3.28.0"
+  "@tiptap/extension-list-item": "3.28.0"
+  "@tiptap/extension-list-keymap": "3.28.0"
+  "@tiptap/extension-ordered-list": "3.28.0"
+  "@tiptap/extension-paragraph": "3.28.0"
+  "@tiptap/extension-placeholder": "3.28.0"
+  "@tiptap/extension-strike": "3.28.0"
+  "@tiptap/extension-table": "3.28.0"
+  "@tiptap/extension-table-cell": "3.28.0"
+  "@tiptap/extension-table-header": "3.28.0"
+  "@tiptap/extension-table-row": "3.28.0"
+  "@tiptap/extension-task-item": "3.28.0"
+  "@tiptap/extension-task-list": "3.28.0"
+  "@tiptap/extension-text": "3.28.0"
+  "@tiptap/extension-text-style": "3.28.0"
+  "@tiptap/extension-underline": "3.28.0"
+  "@tiptap/extensions": "3.28.0"
+  "@tiptap/pm": "3.28.0"
+  "@tiptap/react": "3.28.0"
+  "@tiptap/starter-kit": "3.28.0"
 
 allowBuilds:
   better-sqlite3: true

package/dist/templates/workspace-core/.agents/skills/frontend-design/SKILL.md

@@ -168,6 +168,11 @@ the useful information remains dense and scannable.
 - Do not build custom dropdowns, menus, popovers, modals, or confirmations with manual absolute positioning and click-outside effects.
 - Never use browser dialogs (`window.alert`, `window.confirm`, `window.prompt`). Use `AlertDialog`, `Dialog`, or app-specific confirmation UI.
 - Use Tabler icons for all first-party UI icons. Do not add Lucide, Heroicons, inline SVG icon sets, or emoji icons.
+- Never guess a Tabler icon name. Names like `IconPartyPopper` or `IconConfettiCannon` feel
+  plausible but don't exist and crash Vite with a "Named export not found" error. Before importing
+  an icon you haven't used elsewhere in this app, confirm it exists by grepping
+  `node_modules/@tabler/icons-react/dist/tabler-icons-react.d.ts` (or the package's icon list)
+  for the exact name, and pick the closest real match if your first guess isn't there.
 - Keep inline help/info glyphs next to labels at `size-3` (12px) or smaller than the adjacent text. Preserve a larger hit area on the trigger, not the glyph. Use `guard:allow-large-help-icon` only for deliberate heading documentation or menu action exceptions.
 - Use `useActionQuery` and `useActionMutation` from `@agent-native/core/client` for action-backed UI. Standard CRUD should go through actions, not custom `/api/` routes.
 - Keep UI optimistic where possible: update cache and navigation immediately, then reconcile or roll back on mutation result.