@agent-native/core 0.151.2 → 0.152.1

package/dist/observability/routes.d.ts

@@ -41,27 +41,27 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
-    error?: undefined;
-    ok?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
-} | {
     error?: undefined;
     ok?: undefined;
+} | {
     summary?: undefined;
     spans?: undefined;
     id: string;
-} | {
+    error?: undefined;
     ok?: undefined;
+} | {
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
     error: any;
+    ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
+    error?: undefined;
     ok: boolean;
 }>>;

package/dist/org/workspace-url.d.ts

@@ -22,6 +22,14 @@ export type ParsedWorkspaceUrl = {
  * app they arrive at.
  */
 export declare function parseWorkspaceUrl(raw: string): ParsedWorkspaceUrl;
+/**
+ * Whether a URL points at a browser-local development origin.
+ *
+ * Local development may use a loopback hostname or a subdomain of the
+ * reserved `.localhost` domain. Hosted previews must remain eligible for
+ * workspace guidance.
+ */
+export declare function isLocalDevelopmentOrigin(currentUrl: string): boolean;
 /**
  * Whether a member currently on `currentUrl` should be pointed at the org's
  * workspace. False when the org has no workspace, when the stored value is

package/dist/org/workspace-url.js

@@ -28,7 +28,8 @@ export function parseWorkspaceUrl(raw) {
     try {
         parsed = new URL(withScheme);
     }
-    catch {
+    catch (error) {
+        void error;
         return { ok: false, reason: "Not a valid URL" };
     }
     if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
@@ -39,6 +40,28 @@ export function parseWorkspaceUrl(raw) {
     }
     return { ok: true, url: parsed.origin };
 }
+/**
+ * Whether a URL points at a browser-local development origin.
+ *
+ * Local development may use a loopback hostname or a subdomain of the
+ * reserved `.localhost` domain. Hosted previews must remain eligible for
+ * workspace guidance.
+ */
+export function isLocalDevelopmentOrigin(currentUrl) {
+    let hostname;
+    try {
+        hostname = new URL(currentUrl).hostname.toLowerCase();
+    }
+    catch (error) {
+        void error;
+        return false;
+    }
+    return (hostname === "localhost" ||
+        hostname.endsWith(".localhost") ||
+        hostname === "127.0.0.1" ||
+        hostname === "::1" ||
+        hostname === "[::1]");
+}
 /**
  * Whether a member currently on `currentUrl` should be pointed at the org's
  * workspace. False when the org has no workspace, when the stored value is
@@ -55,7 +78,8 @@ export function shouldOfferWorkspace(currentUrl, workspaceUrl) {
     try {
         currentOrigin = new URL(currentUrl).origin;
     }
-    catch {
+    catch (error) {
+        void error;
         return false;
     }
     return currentOrigin !== parsed.url;

package/dist/progress/routes.d.ts

@@ -15,6 +15,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/secrets/routes.d.ts

@@ -37,17 +37,17 @@ export declare function createWriteSecretHandler(): import("h3").EventHandlerWit
     ok?: undefined;
     status?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     status: string;
-    error?: undefined;
 } | {
     ok?: undefined;
     error: string;
     removed?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
@@ -58,13 +58,13 @@ export declare function createTestSecretHandler(): import("h3").EventHandlerWith
     error: string;
     note?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note?: undefined;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note: string;
-    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,11 +95,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;

package/dist/server/agent-chat/context-tools.js

@@ -376,8 +376,12 @@ export function createUrlTools() {
             },
         },
         "ask-question": {
+            // The turn is over once the question is on screen. Without this the loop
+            // asks the model for another step, and it keeps working (and re-asking)
+            // over an unanswered question no matter what the tool result says.
+            endsTurn: true,
             tool: {
-                description: "Ask the user a multiple-choice clarifying question and render it inline in the chat. Use this ONLY when you are genuinely blocked on a decision you cannot resolve from context and a wrong guess would be costly — an ambiguous metric, date range, or grain; a real fork in approach. Present 2-5 concrete options and mark the most likely one recommended. Do NOT use it for confirmations, for things the user already specified, or to dodge easy work you could just do. Ask at most once per turn. Calling this yields the turn: stop and wait for the user's answer.",
+                description: "Ask the user a multiple-choice clarifying question and render it inline in the chat. Use this ONLY when you are genuinely blocked on a decision you cannot resolve from context and a wrong guess would be costly — an ambiguous metric, date range, or grain; a real fork in approach. Present 2-5 concrete options and mark the most likely one recommended. Do NOT use it for confirmations, for things the user already specified, or to dodge easy work you could just do. Calling this ends the turn: one question per turn, and any other tool call you emit alongside it will not run.",
                 parameters: {
                     type: "object",
                     properties: {
@@ -408,9 +412,12 @@ export function createUrlTools() {
                 },
             },
             run: async (args) => {
+                // These must throw, not return an error string: `endsTurn` yields the
+                // turn on any non-error result, so a returned string would leave the
+                // run waiting on a question card that was never written.
                 const question = String(args?.question ?? "").trim();
                 if (!question)
-                    return "Error: 'question' is required.";
+                    throw new Error("'question' is required.");
                 const header = String(args?.header ?? "").trim();
                 const allowMultiple = String(args?.allowMultiple ?? "") === "true";
                 const allowFreeText = String(args?.allowFreeText ?? "true") !== "false";
@@ -419,10 +426,10 @@ export function createUrlTools() {
                     parsedOptions = JSON.parse(String(args?.options ?? "[]"));
                 }
                 catch {
-                    return "Error: 'options' must be a JSON array of { label, value?, description?, recommended? }.";
+                    throw new Error("'options' must be a JSON array of { label, value?, description?, recommended? }.");
                 }
                 if (!Array.isArray(parsedOptions) || parsedOptions.length === 0) {
-                    return "Error: 'options' must be a non-empty JSON array of { label, value?, description?, recommended? }.";
+                    throw new Error("'options' must be a non-empty JSON array of { label, value?, description?, recommended? }.");
                 }
                 const options = parsedOptions
                     .map((raw) => {
@@ -450,14 +457,26 @@ export function createUrlTools() {
                 })
                     .filter((opt) => opt !== null);
                 if (options.length === 0) {
-                    return "Error: 'options' must contain at least one option with a label.";
+                    throw new Error("'options' must contain at least one option with a label.");
                 }
                 // Shape must match the GuidedQuestionFlow renderer in
                 // client/guided-questions.tsx: a `text-options` question whose options
                 // carry `value`, with `multiSelect` for multi-pick and `allowOther` for
                 // free text. The renderer otherwise injects "Explore"/"Decide" options,
                 // which would be noise for a focused clarifying question, so disable them.
+                // The application-state key is scoped per browser tab, not per chat, so
+                // the payload has to name the thread that asked. The client hides a
+                // pending question in every other conversation instead of following the
+                // user from chat to chat.
+                // A request that carried no thread id falls back to the run id (see
+                // `onRunStart`), and a per-run value would never match the chat the user
+                // is looking at. Leave those surfaces unbound — they have one chat.
+                const askingRunCtx = getRequestRunContext();
+                const askingThreadId = askingRunCtx?.threadId && askingRunCtx.threadId !== askingRunCtx.runId
+                    ? askingRunCtx.threadId
+                    : undefined;
                 const payload = {
+                    ...(askingThreadId ? { threadId: askingThreadId } : {}),
                     questions: [
                         {
                             id: "q1",
@@ -475,7 +494,9 @@ export function createUrlTools() {
                 };
                 const { writeAppState } = await import("../../application-state/script-helpers.js");
                 await writeAppState(appStateKeyForBrowserTab("guided-questions", getRequestRunContext()?.browserTabId), payload);
-                return "Asked the user a clarifying question and rendered it in the chat. Stop here and wait for their answer — do not proceed or assume an answer.";
+                // The `startsWith` of this text is how integration surfaces recognize a
+                // delivered question (see `extractSlackInputRequest`). Keep the prefix.
+                return "Asked the user a clarifying question and rendered it in the chat. This turn is over — their answer arrives as a new message.";
             },
         },
     };

package/dist/server/agent-chat-plugin.js

@@ -2269,15 +2269,19 @@ export function createAgentChatPlugin(options) {
             catch { }
             // Lean mode: only template actions + essential framework tools. Drop
             // web-request, browser tools, teams, jobs, automations, notifications,
-            // progress, call-agent, and MCP entries to keep the tool list tight and
-            // prevent the LLM from reaching for web-request instead of the
-            // template's native actions (e.g. log-meal).
+            // progress, and MCP entries to keep the tool list tight and prevent the
+            // LLM from reaching for web-request instead of the template's native
+            // actions (e.g. log-meal). Cross-app delegation is the exception: when
+            // it is enabled, keep its two discovery/delegation tools available even
+            // in lean mode because the framework prompt and default starter surface
+            // still promise sibling-app routing.
             const leanActionEntries = {
                 ...templateScripts,
                 ...resourceScripts,
                 ...refreshScreenTool,
                 ...urlTools,
                 ...chatScripts,
+                ...(a2aAgentDelegationEnabled ? callAgentScript : {}),
                 ...toolActions,
             };
             const anonymousReadOnlyActions = attachToolSearch(filterReadOnlyActions(templateScripts));
@@ -2387,7 +2391,11 @@ export function createAgentChatPlugin(options) {
             // Lean mode: use only the template's systemPrompt + actions list.
             // Skip resource loading and schema block — those add DB round-trips
             // and tokens that minimal/voice apps don't need.
-            const leanBasePrompt = (options?.systemPrompt ?? "") + prodActionsPrompt;
+            const leanActionsPrompt = prodActionsPrompt +
+                (a2aAgentDelegationEnabled
+                    ? generateActionsPrompt(callAgentScript, "tool")
+                    : "");
+            const leanBasePrompt = (options?.systemPrompt ?? "") + leanActionsPrompt;
             const anonymousReadOnlyPrompt = (options?.systemPrompt ?? PROD_FRAMEWORK_PROMPT_COMPACT) +
                 generateActionsPrompt(filterReadOnlyActions(templateScripts), "tool", lazyContext ? effectiveInitialToolNames : undefined) +
                 "\n\nYou are answering from a public shared page. Treat the visible resource as read-only: do not create, edit, delete, comment on, share, or otherwise mutate app data. If the user asks for a change, describe what you would change or suggest signing in to edit.";
@@ -2584,8 +2592,8 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                     if (leanPrompt) {
                         const leanRunPolicyPrompt = buildLeanRunPolicyPrompt(codeEditingSurfaceRestriction, prodCodeExecPromptNote);
                         await emitContextXraySystemSections(event, {
-                            frameworkPrompt: leanBasePrompt.slice(0, Math.max(0, leanBasePrompt.length - prodActionsPrompt.length)),
-                            actionsPrompt: prodActionsPrompt,
+                            frameworkPrompt: leanBasePrompt.slice(0, Math.max(0, leanBasePrompt.length - leanActionsPrompt.length)),
+                            actionsPrompt: leanActionsPrompt,
                             additionalFramework: leanRunPolicyPrompt,
                             extra,
                             modelOverlay,
@@ -2823,8 +2831,8 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                         // for the same pattern.
                         if (leanPrompt) {
                             await emitContextXraySystemSections(event, {
-                                frameworkPrompt: leanBasePrompt.slice(0, Math.max(0, leanBasePrompt.length - prodActionsPrompt.length)),
-                                actionsPrompt: prodActionsPrompt,
+                                frameworkPrompt: leanBasePrompt.slice(0, Math.max(0, leanBasePrompt.length - leanActionsPrompt.length)),
+                                actionsPrompt: leanActionsPrompt,
                                 extra,
                                 modelOverlay,
                                 runtimeContext,

package/dist/server/auth.d.ts

@@ -112,17 +112,6 @@ export interface AuthOptions {
         features?: string[];
         runLocalCommand?: string;
     };
-    /**
-     * Optional host-scoped notice shown before the built-in Google sign-in
-     * redirects to Google.
-     */
-    googleSignInNotice?: {
-        host?: string;
-        title: string;
-        body: string | string[];
-        continueLabel?: string;
-        cancelLabel?: string;
-    };
     /**
      * Optional email signup legal copy for the built-in login page.
      * Leave unset to use Agent Native links only on `*.agent-native.com` hosts,

package/dist/server/auth.js

@@ -999,7 +999,6 @@ function getOnboardingHtmlOptions(options, event, rawPath, authMode) {
         authMode,
         googleOnly: options.googleOnly,
         marketing: options.marketing,
-        googleSignInNotice: options.googleSignInNotice,
         signupLegalNotice: options.signupLegalNotice,
         googleAuthMode: options.googleAuthMode,
         requestHost: event ? getRequestHost(event) : undefined,
@@ -1922,6 +1921,13 @@ async function hasAutoDevAccountUser(db) {
     });
     return rows.length > 0;
 }
+async function hasRealUser(db) {
+    const { rows } = await db.execute({
+        sql: 'SELECT 1 FROM "user" WHERE email NOT IN (?, ?) LIMIT 1',
+        args: [AUTO_DEV_ACCOUNT_EMAIL, LEGACY_AUTO_DEV_ACCOUNT_EMAIL],
+    });
+    return rows.length > 0;
+}
 const autoDevAccountCreationPromises = new Map();
 function getAutoDevAccountCreationKey() {
     return `${process.cwd()}:${process.env.APP_BASE_PATH ?? ""}`;
@@ -2012,11 +2018,7 @@ async function createOrReuseAutoDevSession(auth, config) {
     if (session)
         return { email: session.email, token: session.token };
     const db = getDbExec();
-    const { rows: realUsers } = await db.execute({
-        sql: 'SELECT 1 FROM "user" WHERE email NOT IN (?, ?) LIMIT 1',
-        args: [AUTO_DEV_ACCOUNT_EMAIL, LEGACY_AUTO_DEV_ACCOUNT_EMAIL],
-    });
-    if (realUsers.length > 0)
+    if (await hasRealUser(db))
         return null;
     const devPassword = await createAutoDevAccountForSession(auth, db);
     if (!devPassword && !(await hasAutoDevAccountUser(db)))
@@ -2027,8 +2029,30 @@ async function createOrReuseAutoDevSession(auth, config) {
     }
     return session ? { email: session.email, token: session.token } : null;
 }
+async function getLocalDevAuthAvailability(event, config) {
+    if (!isLocalDevAuthAllowed(event)) {
+        return { available: false, reason: "not-allowed" };
+    }
+    try {
+        const db = getDbExec();
+        await getBetterAuth(config);
+        if (await hasAutoDevAccountUser(db))
+            return { available: true };
+        if (await hasRealUser(db)) {
+            return { available: false, reason: "existing-user" };
+        }
+        return { available: true };
+    }
+    catch {
+        return { available: false, reason: "unreadable" };
+    }
+}
 function createLocalDevAuthHandler(config) {
     return defineEventHandler(async (event) => {
+        if (getMethod(event) === "GET") {
+            setResponseHeader(event, "Cache-Control", "no-store");
+            return getLocalDevAuthAvailability(event, config);
+        }
         if (getMethod(event) !== "POST") {
             setResponseStatus(event, 405);
             return { error: "Method not allowed" };
@@ -2105,11 +2129,7 @@ async function maybeAutoCreateDevSession(event, redirectTo) {
         // pre-fix local DB that still holds a `dev@local` row isn't treated
         // as having a "real user" (which would permanently disable
         // auto-create on that DB).
-        const { rows: realUsers } = await db.execute({
-            sql: 'SELECT 1 FROM "user" WHERE email NOT IN (?, ?) LIMIT 1',
-            args: [AUTO_DEV_ACCOUNT_EMAIL, LEGACY_AUTO_DEV_ACCOUNT_EMAIL],
-        });
-        if (realUsers.length > 0)
+        if (await hasRealUser(db))
             return null;
         // If the dev account already exists, this is not a freshly-scaffolded
         // app — the user has been through the auto-create flow at least
@@ -3086,7 +3106,7 @@ async function mountBetterAuthRoutes(app, options) {
                     for (const key of callbackKeys) {
                         if (typeof body[key] !== "string")
                             continue;
-                        const callbackURL = betterAuthCallbackURL(body[key], false, event);
+                        const callbackURL = betterAuthCallbackURL(body[key], true, event);
                         if (callbackURL !== body[key]) {
                             sanitizedBody[key] = callbackURL;
                             changed = true;
@@ -3312,13 +3332,13 @@ async function mountBetterAuthRoutes(app, options) {
                 desktopFlow = await issueDesktopMagicLinkFlow();
                 callbackPath = withDesktopMagicLinkFlow(callbackPath, desktopFlow);
             }
-            const callbackURL = betterAuthCallbackURL(callbackPath, false, event);
+            const callbackURL = betterAuthCallbackURL(callbackPath, true, event);
             const newUserCallbackPath = `${getAppBasePath()}/_agent-native/auth/magic-link/new-user?return=${encodeURIComponent(callbackPath)}`;
             await auth.api.signInMagicLink({
                 body: {
                     email,
                     callbackURL,
-                    newUserCallbackURL: betterAuthCallbackURL(newUserCallbackPath, callbackURL !== callbackPath, event),
+                    newUserCallbackURL: betterAuthCallbackURL(newUserCallbackPath, true, event),
                 },
                 headers: event.headers,
             });
@@ -3347,8 +3367,8 @@ async function mountBetterAuthRoutes(app, options) {
         const email = normalizeAuthEmail(rawEmail);
         const password = body?.password;
         const callbackURL = typeof body?.callbackURL === "string"
-            ? betterAuthCallbackURL(body.callbackURL, false, event)
-            : "/";
+            ? betterAuthCallbackURL(body.callbackURL, true, event)
+            : betterAuthCallbackURL("/", true, event);
         if (!email) {
             setResponseStatus(event, 400);
             return { error: VALID_AUTH_EMAIL_MESSAGE };
@@ -3715,10 +3735,7 @@ export async function autoMountAuth(app, options = {}) {
             customGetSession = options.getSession;
         }
         if (_authGuardConfig) {
-            if (options.googleOnly ||
-                options.loginHtml ||
-                options.marketing ||
-                options.googleSignInNotice) {
+            if (options.googleOnly || options.loginHtml || options.marketing) {
                 const loginHtmlConfig = getOnboardingLoginHtmlConfig(options, _authGuardConfig.authMode);
                 _authGuardConfig.loginHtml = loginHtmlConfig.loginHtml;
                 _authGuardConfig.getLoginHtml = loginHtmlConfig.getLoginHtml;

package/dist/server/better-auth-migrations.js

@@ -224,6 +224,29 @@ export const BETTER_AUTH_MIGRATIONS = [
         },
         run: assertBetterAuthUserIdentityColumns,
     },
+    {
+        version: 3,
+        name: "legacy-auth-sessions-table",
+        sql: {
+            // `addSession()` is still used by the mobile/deep-link OAuth flow and
+            // the workspace callback. Provision its legacy table in the release
+            // runtime so those request paths only perform normal row writes.
+            postgres: `
+        CREATE TABLE IF NOT EXISTS sessions (
+          token TEXT PRIMARY KEY,
+          email TEXT,
+          created_at BIGINT NOT NULL
+        )
+      `,
+            sqlite: `
+        CREATE TABLE IF NOT EXISTS sessions (
+          token TEXT PRIMARY KEY,
+          email TEXT,
+          created_at INTEGER NOT NULL
+        )
+      `,
+        },
+    },
 ];
 export async function runBetterAuthMigrations(nitroApp) {
     await runMigrations(BETTER_AUTH_MIGRATIONS, {

package/dist/server/email-template.d.ts

@@ -74,6 +74,11 @@ export declare function renderEmail(args: RenderEmailArgs): RenderedEmail;
  * paragraph strings passed to `renderEmail`. Escapes the content.
  */
 export declare function emailStrong(text: string): string;
+/**
+ * Build a quoted message block for user-authored text in notification emails.
+ * The message stays escaped while preserving intentional line breaks.
+ */
+export declare function emailQuote(text: string): string;
 /**
  * Build a labelled inline link for paragraph strings passed to `renderEmail`.
  * Use this instead of rendering raw URLs in the visible email body.

package/dist/server/email-template.js

@@ -216,6 +216,15 @@ function stripTags(s) {
 export function emailStrong(text) {
     return `<strong style="color:#fafafa; font-weight:600;">${escapeHtml(text)}</strong>`;
 }
+/**
+ * Build a quoted message block for user-authored text in notification emails.
+ * The message stays escaped while preserving intentional line breaks.
+ */
+export function emailQuote(text) {
+    const content = escapeHtml(text.trim()).replace(/\r?\n/g, "<br />");
+    // guard:allow-raw-color — quoted blocks intentionally use a fixed email-safe accent
+    return `<div style="margin:0 0 16px 0; padding:12px 16px; border-left:3px solid #52525b; background:#18181b; color:#e4e4e7; font-size:16px; line-height:1.6;">${content}</div>`;
+}
 /**
  * Build a labelled inline link for paragraph strings passed to `renderEmail`.
  * Use this instead of rendering raw URLs in the visible email body.

package/dist/server/embed-route.js

@@ -91,19 +91,31 @@ function expiredEmbedSessionResponse(event) {
     main { max-width: 520px; text-align: center; }
     h1 { margin: 0 0 8px; font-size: 16px; line-height: 1.25; }
     p { margin: 0; color: color-mix(in srgb, CanvasText 64%, Canvas); font-size: 13px; line-height: 1.5; }
+    button { margin-top: 16px; border: 1px solid color-mix(in srgb, CanvasText 24%, Canvas); border-radius: 6px; padding: 7px 12px; background: Canvas; color: CanvasText; font: inherit; font-size: 12px; cursor: pointer; }
+    button:hover { background: color-mix(in srgb, CanvasText 8%, Canvas); }
   </style>
 </head>
 <body>
   <main>
     <h1>Embedded app session expired</h1>
-    <p>This chat preview is refreshing. If it does not reload, ask the chat to open the app again.</p>
+    <p>This embedded app session expired. The app will try to reconnect automatically.</p>
+    <button type="button" id="retry">Retry</button>
   </main>
   <script>
-    try {
-      if (window.parent && window.parent !== window) {
-        window.parent.postMessage({ type: "agentNative.embedSessionExpired" }, "*");
+    function notifyParent() {
+      try {
+        if (window.parent && window.parent !== window) {
+          window.parent.postMessage({
+            type: "agentNative.embedSessionExpired",
+            embedStartUrl: window.location.href
+          }, "*");
+        }
+      } catch (error) {
+        void error;
       }
-    } catch {}
+    }
+    document.getElementById("retry")?.addEventListener("click", notifyParent);
+    notifyParent();
   </script>
 </body>
 </html>`, {