@agent-native/core 0.155.0 → 0.157.0

package/dist/server/request-context.js

@@ -57,8 +57,10 @@ function processEnv(name) {
 const GLOBAL_KEY = "__agentNativeRequestContextAls";
 const OBSERVERS_KEY = "__agentNativeRequestContextObservers";
 const BOUNDARY_KEY = "__agentNativeRequestBoundaryInstalled";
+const CONTINUATION_LOCAL_KEY = "__agentNativeRequestContextContinuationLocal";
 const globalRef = globalThis;
 if (!globalRef[GLOBAL_KEY]) {
+    globalRef[CONTINUATION_LOCAL_KEY] = Boolean(AsyncLocalStorageCtor);
     globalRef[GLOBAL_KEY] = AsyncLocalStorageCtor
         ? new AsyncLocalStorageCtor()
         : new StackAsyncLocalStorage();
@@ -68,6 +70,16 @@ if (!globalRef[OBSERVERS_KEY]) {
 }
 const als = globalRef[GLOBAL_KEY];
 const observers = globalRef[OBSERVERS_KEY];
+/**
+ * Authorization state must never use the shared-stack compatibility fallback:
+ * overlapping async requests are only isolated by native AsyncLocalStorage.
+ */
+export function assertRequestActionSurfaceIsolation() {
+    if (globalRef[CONTINUATION_LOCAL_KEY] === true)
+        return;
+    throw new Error("Request-scoped action surfaces require continuation-local request context storage; " +
+        "this runtime only provides the non-isolated fallback.");
+}
 /**
  * Register a callback fired every time `runWithRequestContext` enters a new
  * scope. The hook runs INSIDE the AsyncLocalStorage scope, so observability
@@ -95,6 +107,9 @@ export function addRequestContextObserver(observer) {
  * isolation-scoped backends (Sentry, OpenTelemetry, etc.).
  */
 export function runWithRequestContext(ctx, fn) {
+    if (ctx.run?.allowedActionNames !== undefined) {
+        assertRequestActionSurfaceIsolation();
+    }
     return als.run(ctx, () => {
         if (observers.length > 0) {
             for (const obs of observers) {

package/docs/content/agent-surfaces.mdx

@@ -167,6 +167,36 @@ React widget, use [Generative UI](/docs/generative-ui): it renders sandboxed
 Alpine/Tailwind UI inline, can read app state and slot context, and can send
 selected values back to chat.
 
+### Request-scoped action surfaces
+
+Use `resolveActionSurface` when the selected agent or thread must expose only a
+server-authorized subset of native actions. The callback runs for every
+interactive chat request after `prepareRequest`. Returned names form a hard
+allowlist for that request: omitted actions are absent from provider schemas,
+the execution registry, plan-mode preloading, and `tool-search` discovery.
+
+```ts
+createAgentChatPlugin({
+  actions,
+  nativeActionsInDev: true,
+  resolveActionSurface: async ({ threadId, availableActionNames }) => ({
+    allowedActionNames: await loadAllowedActions(
+      threadId,
+      availableActionNames,
+    ),
+  }),
+});
+```
+
+An empty list exposes no native actions. Unknown names fail the request instead
+of widening access. Every allowed action is loaded directly on the first model
+request; include `tool-search` explicitly only when discovery inside the
+already-authorized catalog is wanted. The callback scopes interactive agent
+chat only—it does not change HTTP, MCP, A2A, job, or trigger exposure. Default
+framework guidance and spawned sub-agents inherit the same surface. Trusted
+shell tools are automatically reduced to the request-filtered sandbox because
+an unrestricted shell cannot enforce a hard action boundary.
+
 ## Native inline UI {#native-inline-ui}
 
 Use this when your actions return structured data — a list of records, a chart dataset, a status summary — that should render as a real UI component inside the chat thread rather than a plain text description. You define a `chatUI` renderer on the action, and Agent-Native renders it as a first-party React component: no iframes, no separate rendering path.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.155.0",
+  "version": "0.157.0",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -424,7 +424,7 @@
     "yjs": "^13.6.31",
     "zod": "^4.3.6",
     "@agent-native/recap-cli": "0.5.4",
-    "@agent-native/toolkit": "^0.14.3"
+    "@agent-native/toolkit": "^0.15.0"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",