@agent-native/core 0.155.0 → 0.157.1

package/dist/server/index.d.ts

@@ -13,7 +13,7 @@ export { requireEnvKey, type MissingKeyResponse } from "./missing-key.js";
 export { assertCurrentRequestUserIsOrgAdmin, currentRequestUserIsOrgAdmin, } from "./org-admin.js";
 export { verifyCaptcha, type CaptchaVerifyResult } from "./captcha.js";
 export { getLocaleInitScript, parseAcceptLanguage, resolveLocaleFromRequest, type LocaleInitScriptOptions, type ResolveLocaleFromRequestOptions, type ResolvedRequestLocale, } from "../localization/server.js";
-export { createProductionAgentHandler, type ActionEntry, type ScriptEntry, type ProductionAgentOptions, type ActionTool, type ScriptTool, type AgentMessage, type AgentChatRequest, type AgentChatEvent, type AgentChatAttachment, type AgentChatReference, type MentionProvider, type MentionProviderItem, type AgentLoopFinalResponseGuard, type AgentLoopFinalResponseGuardContext, type AgentLoopFinalResponseGuardResult, type AgentLoopToolCallSummary, type AgentLoopToolResultSummary, } from "../agent/index.js";
+export { createProductionAgentHandler, type ActionEntry, type ScriptEntry, type ProductionAgentOptions, type AgentActionSurface, type AgentActionSurfaceDetails, type ActionTool, type ScriptTool, type AgentMessage, type AgentChatRequest, type AgentChatEvent, type AgentChatAttachment, type AgentChatReference, type MentionProvider, type MentionProviderItem, type AgentLoopFinalResponseGuard, type AgentLoopFinalResponseGuardContext, type AgentLoopFinalResponseGuardResult, type AgentLoopToolCallSummary, type AgentLoopToolResultSummary, } from "../agent/index.js";
 export { actionsToEngineTools, executeAgentToolCall, getOwnerActiveApiKey, getOwnerApiKeyForEngine, resolveOwnerEngineApiKey, runAgentLoop, type AgentToolCallExecutionResult, type ExecuteAgentToolCallOptions, type ResolvedOwnerApiKey, } from "../agent/production-agent.js";
 export { mountRealtimeVoiceRoutes, realtimeVoiceSafetyIdentifier, REALTIME_VOICE_MAX_SDP_BYTES, REALTIME_VOICE_MAX_TOOL_BODY_BYTES, REALTIME_VOICE_MAX_TOOL_OUTPUT_CHARS, REALTIME_VOICE_SESSION_PATH, REALTIME_VOICE_TOOL_PATH, type MountRealtimeVoiceRoutesOptions, type RealtimeVoiceRequestContext, type RealtimeVoiceToolExecutionRequest, type RealtimeVoiceToolExecutionResult, } from "./realtime-voice.js";
 export { getStoredModelForEngine, resolveEngine, } from "../agent/engine/index.js";

package/dist/server/onboarding-html.d.ts

@@ -37,6 +37,7 @@ export interface OnboardingHtmlOptions {
         tagline: string;
         description?: string;
         features?: string[];
+        /** @deprecated Local execution is no longer offered from auth pages. */
         runLocalCommand?: string;
     };
     /**

package/dist/server/onboarding-html.js

@@ -115,8 +115,6 @@ const EN_AUTH_COPY = {
     localDevSigningIn: "Signing in locally…",
     localDevFailed: "Local development sign-in is unavailable.",
     localDevFullOptions: "Show full sign in options",
-    runLocally: "Run Locally",
-    runLocallySentence: "Run locally",
     openSource: "100% free and open source",
     useOwnGoogleClient: "Use your own Google OAuth client:",
     copyCommand: "Copy command",
@@ -218,8 +216,6 @@ const AUTH_LOCALE_COPY = {
         localDevSigningIn: "正在本地登录…",
         localDevFailed: "本地开发登录不可用。",
         localDevFullOptions: "显示完整登录选项",
-        runLocally: "本地运行",
-        runLocallySentence: "本地运行",
         openSource: "100% 免费且开源",
         useOwnGoogleClient: "使用你自己的 Google OAuth 客户端：",
         copyCommand: "复制命令",
@@ -319,8 +315,6 @@ const AUTH_LOCALE_COPY = {
         localDevSigningIn: "正在本機登入…",
         localDevFailed: "本機開發登入無法使用。",
         localDevFullOptions: "顯示完整登入選項",
-        runLocally: "在本機執行",
-        runLocallySentence: "在本機執行",
         openSource: "100% 免費且開源",
         useOwnGoogleClient: "使用你自己的 Google OAuth 用戶端：",
         copyCommand: "複製指令",
@@ -420,8 +414,6 @@ const AUTH_LOCALE_COPY = {
         localDevSigningIn: "Iniciando sesión localmente…",
         localDevFailed: "El inicio de sesión de desarrollo local no está disponible.",
         localDevFullOptions: "Mostrar todas las opciones de inicio de sesión",
-        runLocally: "Ejecutar localmente",
-        runLocallySentence: "Ejecutar localmente",
         openSource: "100% gratis y de código abierto",
         useOwnGoogleClient: "Usa tu propio cliente de Google OAuth:",
         copyCommand: "Copiar comando",
@@ -521,8 +513,6 @@ const AUTH_LOCALE_COPY = {
         localDevSigningIn: "Connexion locale…",
         localDevFailed: "La connexion de développement local est indisponible.",
         localDevFullOptions: "Afficher toutes les options de connexion",
-        runLocally: "Exécuter localement",
-        runLocallySentence: "Exécuter localement",
         openSource: "100 % gratuit et open source",
         useOwnGoogleClient: "Utilisez votre propre client Google OAuth :",
         copyCommand: "Copier la commande",
@@ -622,8 +612,6 @@ const AUTH_LOCALE_COPY = {
         localDevSigningIn: "Lokale Anmeldung…",
         localDevFailed: "Die lokale Entwicklungsanmeldung ist nicht verfügbar.",
         localDevFullOptions: "Alle Anmeldeoptionen anzeigen",
-        runLocally: "Lokal ausführen",
-        runLocallySentence: "Lokal ausführen",
         openSource: "100 % kostenlos und Open Source",
         useOwnGoogleClient: "Eigenen Google-OAuth-Client verwenden:",
         copyCommand: "Befehl kopieren",
@@ -723,8 +711,6 @@ const AUTH_LOCALE_COPY = {
         localDevSigningIn: "ローカルでサインイン中…",
         localDevFailed: "ローカル開発のサインインは利用できません。",
         localDevFullOptions: "完全なサインイン オプションを表示",
-        runLocally: "ローカルで実行",
-        runLocallySentence: "ローカルで実行",
         openSource: "100% 無料でオープンソース",
         useOwnGoogleClient: "自分の Google OAuth クライアントを使用:",
         copyCommand: "コマンドをコピー",
@@ -824,8 +810,6 @@ const AUTH_LOCALE_COPY = {
         localDevSigningIn: "로컬로 로그인하는 중…",
         localDevFailed: "로컬 개발 로그인을 사용할 수 없습니다.",
         localDevFullOptions: "전체 로그인 옵션 보기",
-        runLocally: "로컬에서 실행",
-        runLocallySentence: "로컬에서 실행",
         openSource: "100% 무료 오픈 소스",
         useOwnGoogleClient: "내 Google OAuth 클라이언트 사용:",
         copyCommand: "명령 복사",
@@ -925,8 +909,6 @@ const AUTH_LOCALE_COPY = {
         localDevSigningIn: "Entrando localmente…",
         localDevFailed: "O login de desenvolvimento local não está disponível.",
         localDevFullOptions: "Mostrar todas as opções de login",
-        runLocally: "Executar localmente",
-        runLocallySentence: "Executar localmente",
         openSource: "100% grátis e open source",
         useOwnGoogleClient: "Use seu próprio cliente Google OAuth:",
         copyCommand: "Copiar comando",
@@ -1026,8 +1008,6 @@ const AUTH_LOCALE_COPY = {
         localDevSigningIn: "स्थानीय रूप से साइन इन हो रहा है…",
         localDevFailed: "स्थानीय विकास साइन-इन उपलब्ध नहीं है।",
         localDevFullOptions: "साइन-इन के सभी विकल्प दिखाएं",
-        runLocally: "लोकल चलाएं",
-        runLocallySentence: "लोकल चलाएं",
         openSource: "100% मुफ्त और open source",
         useOwnGoogleClient: "अपना Google OAuth client उपयोग करें:",
         copyCommand: "कमांड कॉपी करें",
@@ -1127,8 +1107,6 @@ const AUTH_LOCALE_COPY = {
         localDevSigningIn: "جارٍ تسجيل الدخول محليًا…",
         localDevFailed: "تسجيل دخول التطوير المحلي غير متاح.",
         localDevFullOptions: "عرض خيارات تسجيل الدخول الكاملة",
-        runLocally: "تشغيل محليًا",
-        runLocallySentence: "تشغيل محليًا",
         openSource: "مجاني ومفتوح المصدر 100%",
         useOwnGoogleClient: "استخدم عميل Google OAuth الخاص بك:",
         copyCommand: "نسخ الأمر",
@@ -1335,7 +1313,6 @@ export function getOnboardingHtml(opts = {}) {
             features: marketing.features,
         }
         : undefined;
-    const runLocalCommand = marketing?.runLocalCommand?.trim();
     const signupLocalModeNote = isAgentNativeHostedHost(opts.requestHost) &&
         marketing?.signupLocalModeNote?.command.trim()
         ? {
@@ -1555,44 +1532,6 @@ ${localeMenuItemsHtml}
     gap: 0.75rem;
     margin-top: 2rem;
   }
-  .run-local-button {
-    display: inline-flex;
-    align-items: center;
-    justify-content: center;
-    min-height: 2.25rem;
-    padding: 0.5rem 0.875rem;
-    background: rgba(255,255,255,0.08);
-    color: #fff;
-    border: 1px solid rgba(255,255,255,0.14);
-    border-radius: 8px;
-    font-size: 0.8125rem;
-    font-weight: 500;
-    cursor: pointer;
-  }
-  .run-local-button:hover {
-    background: rgba(255,255,255,0.12);
-    border-color: rgba(255,255,255,0.24);
-  }
-  .run-local-panel {
-    max-width: 480px;
-    margin-top: 0.75rem;
-    padding: 0.75rem;
-    background: rgba(20,20,20,0.86);
-    border: 1px solid rgba(255,255,255,0.1);
-    border-radius: 10px;
-    box-shadow: 0 14px 36px rgba(0,0,0,0.28);
-  }
-  .run-local-panel[hidden] { display: none; }
-  .run-local-panel code {
-    display: block;
-    overflow-x: auto;
-    padding-bottom: 0.125rem;
-    color: #e5e5e5;
-    font-family: "SFMono-Regular", Consolas, "Liberation Mono", monospace;
-    font-size: 0.75rem;
-    line-height: 1.5;
-    white-space: nowrap;
-  }
   .copy-run-local {
     margin-top: 0.625rem;
     padding: 0.375rem 0.625rem;
@@ -1639,17 +1578,11 @@ ${localeMenuItemsHtml}
 ${marketing.description ? `      <p class="app-desc" data-marketing-field="description">${esc(marketing.description)}</p>\n` : ""}${marketing.features?.length
             ? `      <ul class="feature-list">\n${marketing.features.map((f, index) => `        <li data-marketing-feature-index="${index}">${esc(f)}</li>`).join("\n")}\n      </ul>\n`
             : ""}      <div class="marketing-actions">
-${runLocalCommand ? `        <button type="button" class="run-local-button" id="run-local-button" aria-expanded="false" aria-controls="run-local-panel" onclick="__anToggleRunLocalCommand()"${i18nAttr("runLocally")}>${esc(t("runLocally"))}</button>\n` : ""}        <a class="oss-link" href="https://github.com/BuilderIO/agent-native" target="_blank" rel="noreferrer">
+        <a class="oss-link" href="https://github.com/BuilderIO/agent-native" target="_blank" rel="noreferrer">
         <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M9 19c-4.3 1.4-4.3-2.5-6-3m12 5v-3.5c0-1 .1-1.4-.5-2 2.8-.3 5.5-1.4 5.5-6a4.6 4.6 0 00-1.3-3.2 4.2 4.2 0 00-.1-3.2s-1.1-.3-3.5 1.3a12.3 12.3 0 00-6.2 0C6.5 2.8 5.4 3.1 5.4 3.1a4.2 4.2 0 00-.1 3.2A4.6 4.6 0 004 9.5c0 4.6 2.7 5.7 5.5 6-.6.6-.6 1.2-.5 2V21"/></svg>
         <span${i18nAttr("openSource")}>${esc(t("openSource"))}</span>
       </a>
       </div>
-${runLocalCommand
-            ? `      <div class="run-local-panel" id="run-local-panel" hidden data-command="${esc(runLocalCommand)}">
-        <code>${esc(runLocalCommand)}</code>
-        <button type="button" class="copy-run-local" id="copy-run-local" onclick="__anCopyRunLocalCommand()"${i18nAttr("copyCommand")}>${esc(t("copyCommand"))}</button>
-      </div>\n`
-            : ""}
     </div>
   </div>
   <div class="form-panel">`
@@ -4021,24 +3954,8 @@ ${renderGoogleButton
   }`
         : ""}
 ${starfieldScript}
-${runLocalCommand || signupLocalModeNote
+${signupLocalModeNote
         ? `
-  function __anSetRunLocalCommandOpen(open) {
-    var panel = document.getElementById('run-local-panel');
-    var button = document.getElementById('run-local-button');
-    if (!panel || !button) return;
-    if (open) {
-      panel.removeAttribute('hidden');
-    } else {
-      panel.setAttribute('hidden', '');
-    }
-    button.setAttribute('aria-expanded', String(open));
-  }
-  function __anToggleRunLocalCommand() {
-    var panel = document.getElementById('run-local-panel');
-    if (!panel) return;
-    __anSetRunLocalCommandOpen(panel.hasAttribute('hidden'));
-  }
   function __anCopyCommandFromPanel(panelId, buttonId) {
     var panel = document.getElementById(panelId);
     var button = document.getElementById(buttonId);
@@ -4053,9 +3970,6 @@ ${runLocalCommand || signupLocalModeNote
       navigator.clipboard.writeText(command).then(markCopied).catch(function() {});
     }
   }
-  function __anCopyRunLocalCommand() {
-    __anCopyCommandFromPanel('run-local-panel', 'copy-run-local');
-  }
   function __anCopySignupLocalModeCommand() {
     __anCopyCommandFromPanel('signup-local-mode-note', 'copy-signup-local-mode');
   }

package/dist/server/realtime-token.d.ts

@@ -26,8 +26,8 @@ export declare function createRealtimeTokenHandler(): import("h3").EventHandlerW
     expiresAt?: undefined;
     ttlSeconds?: undefined;
 } | {
+    error?: undefined;
     token: string;
     expiresAt: string;
     ttlSeconds: number;
-    error?: undefined;
 }>>;

package/dist/server/request-context.d.ts

@@ -59,6 +59,8 @@ export interface RequestRunContext {
     engine?: import("../agent/engine/types.js").AgentEngine;
     /** Model name for this run (set by onEngineResolved). */
     model?: string;
+    /** Request-authorized action names exposed to this agent run. */
+    allowedActionNames?: readonly string[];
     /**
      * True when this run is executing inside the durable background-function
      * worker (the `_process-run` self-dispatch), not the synchronous foreground
@@ -175,6 +177,11 @@ export interface RequestContext {
     run?: RequestRunContext;
 }
 type RequestContextObserver = (ctx: RequestContext) => void;
+/**
+ * Authorization state must never use the shared-stack compatibility fallback:
+ * overlapping async requests are only isolated by native AsyncLocalStorage.
+ */
+export declare function assertRequestActionSurfaceIsolation(): void;
 /**
  * Register a callback fired every time `runWithRequestContext` enters a new
  * scope. The hook runs INSIDE the AsyncLocalStorage scope, so observability

package/dist/server/request-context.js

@@ -57,8 +57,10 @@ function processEnv(name) {
 const GLOBAL_KEY = "__agentNativeRequestContextAls";
 const OBSERVERS_KEY = "__agentNativeRequestContextObservers";
 const BOUNDARY_KEY = "__agentNativeRequestBoundaryInstalled";
+const CONTINUATION_LOCAL_KEY = "__agentNativeRequestContextContinuationLocal";
 const globalRef = globalThis;
 if (!globalRef[GLOBAL_KEY]) {
+    globalRef[CONTINUATION_LOCAL_KEY] = Boolean(AsyncLocalStorageCtor);
     globalRef[GLOBAL_KEY] = AsyncLocalStorageCtor
         ? new AsyncLocalStorageCtor()
         : new StackAsyncLocalStorage();
@@ -68,6 +70,16 @@ if (!globalRef[OBSERVERS_KEY]) {
 }
 const als = globalRef[GLOBAL_KEY];
 const observers = globalRef[OBSERVERS_KEY];
+/**
+ * Authorization state must never use the shared-stack compatibility fallback:
+ * overlapping async requests are only isolated by native AsyncLocalStorage.
+ */
+export function assertRequestActionSurfaceIsolation() {
+    if (globalRef[CONTINUATION_LOCAL_KEY] === true)
+        return;
+    throw new Error("Request-scoped action surfaces require continuation-local request context storage; " +
+        "this runtime only provides the non-isolated fallback.");
+}
 /**
  * Register a callback fired every time `runWithRequestContext` enters a new
  * scope. The hook runs INSIDE the AsyncLocalStorage scope, so observability
@@ -95,6 +107,9 @@ export function addRequestContextObserver(observer) {
  * isolation-scoped backends (Sentry, OpenTelemetry, etc.).
  */
 export function runWithRequestContext(ctx, fn) {
+    if (ctx.run?.allowedActionNames !== undefined) {
+        assertRequestActionSurfaceIsolation();
+    }
     return als.run(ctx, () => {
         if (observers.length > 0) {
             for (const obs of observers) {

package/dist/shared/markdown-block-split.d.ts

@@ -12,6 +12,22 @@
  *    it re-renders as the fence grows.
  *  - Joining completedBlocks with "\n\n" + tail re-produces the original text
  *    (modulo collapsed blank-line sequences, which don't affect rendered output).
+ *
+ * FIDELITY IS THE CONTRACT, not an optimization detail. Rendering the blocks
+ * separately must produce what rendering the whole document produces, because
+ * the same split drives both the streaming render and the final one. When the
+ * split was allowed to diverge, two things broke at once: the streamed text was
+ * visibly WRONG (a blank-line-separated list rendered as several one-item
+ * lists, a link whose reference definition landed in a later block rendered as
+ * literal `[text]`), and the end of the stream had to swap to a whole-document
+ * render to fix it — which rebuilt the message's entire DOM and produced the
+ * flash and scroll jump users reported. Two constructs reach across a blank
+ * line, so neither may be split:
+ *  - lists, which continue across blank lines (and become "loose"), including
+ *    indented fenced code blocks nested inside a list item
+ *  - link-reference and footnote definitions, which resolve document-wide
+ * `markdown-block-split.spec.ts` asserts this parity construct by construct.
+ * Do not add a split rule without adding its parity case.
  */
 export interface MarkdownBlockSplit {
     /** Fully-terminated top-level blocks. Each element is the raw markdown for

package/dist/shared/markdown-block-split.js

@@ -1,3 +1,19 @@
+/** A bullet or ordered list marker, at any indent depth. */
+const LIST_MARKER = /^\s*(?:[-*+]|\d{1,9}[.)])\s/;
+/** An indented continuation line — a paragraph or nested block inside a list item. */
+const CONTINUATION_INDENT = /^\s{2,}\S/;
+/**
+ * A link-reference or footnote definition (`[id]: url`, `[^1]: note`). These
+ * resolve across the whole document, so any block boundary can orphan a
+ * reference from its definition and render it as literal text.
+ */
+const REFERENCE_DEFINITION = /^ {0,3}\[[^\]]+\]:\s*\S/;
+/**
+ * An indented (4-space or tab) code block line. Like a list, an indented code
+ * block continues across blank lines, so splitting on one turns a single code
+ * block into several.
+ */
+const INDENTED_CODE = /^(?: {4}|\t)/;
 /**
  * Split `text` into completed top-level markdown blocks and a trailing
  * in-progress tail.
@@ -15,6 +31,18 @@ export function splitMarkdownBlocks(text) {
     let fenceMarker = ""; // the opening marker: ``` or ~~~
     let currentBlockLines = [];
     let pendingBlanks = 0; // blank lines accumulated between blocks
+    // Whether the block being accumulated started as a list. A list swallows
+    // blank lines and keeps going, so its boundary is not decidable until a
+    // non-list, non-indented line arrives.
+    let currentBlockIsList = false;
+    // Same for an indented code block, which also swallows blank lines.
+    let currentBlockIsIndentedCode = false;
+    // Reference definitions are detected during the scan, NOT with a regex over
+    // the raw text: `[key: string]: string` inside a ```ts fence looks exactly
+    // like `[id]: url`, and this product emits TypeScript constantly. Testing the
+    // raw text disabled splitting for those whole messages, so every commit
+    // re-parsed the entire document — O(n²) rendering, which is its own jank.
+    let sawReferenceDefinition = false;
     for (let i = 0; i < lines.length; i++) {
         const line = lines[i];
         const trimmed = line.trimStart();
@@ -22,15 +50,30 @@ export function splitMarkdownBlocks(text) {
             // Detect a fence opening: line starts with ``` or ~~~ (3+ chars)
             const fenceMatch = /^(`{3,}|~{3,})/.exec(trimmed);
             if (fenceMatch) {
+                // An indented fence after a blank line is still a child of the active
+                // list item. Flushing here would render it as a top-level fence.
+                const continuesListWithIndentedFence = pendingBlanks > 0 &&
+                    currentBlockLines.length > 0 &&
+                    currentBlockIsList &&
+                    CONTINUATION_INDENT.test(line);
                 inFence = true;
                 fenceMarker = fenceMatch[1].charAt(0).repeat(fenceMatch[1].length);
                 // If there are pending blanks and existing content, flush the current
                 // block before starting the fence block.
-                if (pendingBlanks > 0 && currentBlockLines.length > 0) {
+                if (pendingBlanks > 0 &&
+                    currentBlockLines.length > 0 &&
+                    !continuesListWithIndentedFence) {
                     completedBlocks.push(currentBlockLines.join("\n"));
                     currentBlockLines = [];
                 }
+                if (continuesListWithIndentedFence) {
+                    for (let blank = 0; blank < pendingBlanks; blank++) {
+                        currentBlockLines.push("");
+                    }
+                }
                 pendingBlanks = 0;
+                if (currentBlockLines.length === 0)
+                    currentBlockIsList = false;
                 currentBlockLines.push(line);
                 continue;
             }
@@ -41,14 +84,36 @@ export function splitMarkdownBlocks(text) {
             }
             // Non-blank, non-fence line outside a fence
             if (pendingBlanks > 0 && currentBlockLines.length > 0) {
-                // We have a completed block followed by blank lines
-                completedBlocks.push(currentBlockLines.join("\n"));
-                currentBlockLines = [];
+                // A list continues across blank lines: a following list marker is the
+                // next item, and an indented line is a continuation paragraph inside
+                // the current item. Splitting either one produces several separate
+                // lists instead of one, and drops continuation text out of its item.
+                const continuesList = currentBlockIsList &&
+                    (LIST_MARKER.test(line) || CONTINUATION_INDENT.test(line));
+                const continuesIndentedCode = currentBlockIsIndentedCode && INDENTED_CODE.test(line);
+                if (continuesList || continuesIndentedCode) {
+                    // Keep the blank lines: they are what makes the list "loose", which
+                    // changes how it renders.
+                    for (let blank = 0; blank < pendingBlanks; blank++) {
+                        currentBlockLines.push("");
+                    }
+                }
+                else {
+                    completedBlocks.push(currentBlockLines.join("\n"));
+                    currentBlockLines = [];
+                }
                 pendingBlanks = 0;
             }
             else {
                 pendingBlanks = 0;
             }
+            if (currentBlockLines.length === 0) {
+                currentBlockIsIndentedCode = INDENTED_CODE.test(line);
+                currentBlockIsList =
+                    !currentBlockIsIndentedCode && LIST_MARKER.test(line);
+            }
+            if (REFERENCE_DEFINITION.test(line))
+                sawReferenceDefinition = true;
             currentBlockLines.push(line);
         }
         else {
@@ -72,8 +137,19 @@ export function splitMarkdownBlocks(text) {
     }
     // If we ended outside a fence with trailing blank lines, the last content
     // block is complete — flush it and return an empty tail.
+    // A definition makes every boundary unsafe: the reference may sit in any
+    // other block, and splitting orphans it into literal `[text]`.
+    if (sawReferenceDefinition) {
+        return { completedBlocks: [], tail: text };
+    }
     let tail;
-    if (!inFence && pendingBlanks > 0 && currentBlockLines.length > 0) {
+    if (!inFence &&
+        !currentBlockIsList &&
+        !currentBlockIsIndentedCode &&
+        pendingBlanks > 0 &&
+        currentBlockLines.length > 0) {
+        // A trailing blank line does not end a list — the next streamed chunk may
+        // add another item. Leave it in the tail so it stays one list.
         completedBlocks.push(currentBlockLines.join("\n"));
         tail = "";
     }

package/dist/styles/agent-native.css

@@ -213,6 +213,19 @@
   transition: none !important;
 }
 
+.agent-sidebar-resize-overlay {
+  position: fixed;
+  inset: 0;
+  z-index: 90;
+  cursor: col-resize;
+  user-select: none;
+}
+
+.agent-sidebar-shell[data-agent-sidebar-resizing="true"] iframe,
+.agent-sidebar-shell[data-agent-sidebar-resizing="true"] webview {
+  pointer-events: none !important;
+}
+
 .agent-native-app-main {
   container: agent-native-main / inline-size;
 }

package/dist/voice/voice-cleanup-prompt.js

@@ -14,6 +14,7 @@ export function buildVoiceGuidanceBlock({ instructions, contextPack, }) {
     const sections = [
         "Use the following voice guidance only to improve transcription, cleanup, terminology, casing, punctuation, and formatting.",
         "Never add facts or content that are not present in the audio or transcript.",
+        "When audio input is available, treat it as the primary source of intent, names, and corrections.",
     ];
     if (customInstructions) {
         sections.push(`User instructions:\n${customInstructions}`);

package/docs/content/agent-surfaces.mdx

@@ -167,6 +167,36 @@ React widget, use [Generative UI](/docs/generative-ui): it renders sandboxed
 Alpine/Tailwind UI inline, can read app state and slot context, and can send
 selected values back to chat.
 
+### Request-scoped action surfaces
+
+Use `resolveActionSurface` when the selected agent or thread must expose only a
+server-authorized subset of native actions. The callback runs for every
+interactive chat request after `prepareRequest`. Returned names form a hard
+allowlist for that request: omitted actions are absent from provider schemas,
+the execution registry, plan-mode preloading, and `tool-search` discovery.
+
+```ts
+createAgentChatPlugin({
+  actions,
+  nativeActionsInDev: true,
+  resolveActionSurface: async ({ threadId, availableActionNames }) => ({
+    allowedActionNames: await loadAllowedActions(
+      threadId,
+      availableActionNames,
+    ),
+  }),
+});
+```
+
+An empty list exposes no native actions. Unknown names fail the request instead
+of widening access. Every allowed action is loaded directly on the first model
+request; include `tool-search` explicitly only when discovery inside the
+already-authorized catalog is wanted. The callback scopes interactive agent
+chat only—it does not change HTTP, MCP, A2A, job, or trigger exposure. Default
+framework guidance and spawned sub-agents inherit the same surface. Trusted
+shell tools are automatically reduced to the request-filtered sandbox because
+an unrestricted shell cannot enforce a hard action boundary.
+
 ## Native inline UI {#native-inline-ui}
 
 Use this when your actions return structured data — a list of records, a chart dataset, a status summary — that should render as a real UI component inside the chat thread rather than a plain text description. You define a `chatUI` renderer on the action, and Agent-Native renders it as a first-party React component: no iframes, no separate rendering path.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.155.0",
+  "version": "0.157.1",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -424,7 +424,7 @@
     "yjs": "^13.6.31",
     "zod": "^4.3.6",
     "@agent-native/recap-cli": "0.5.4",
-    "@agent-native/toolkit": "^0.14.3"
+    "@agent-native/toolkit": "^0.15.1"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",