@agent-native/core 0.157.17 → 0.157.19

package/corpus/templates/calendar/server/handlers/google-auth.ts

@@ -50,6 +50,7 @@ type CalendarOAuthStateOptions = {
   owner?: string;
   orgId?: string;
   desktop?: boolean;
+  mobile?: boolean;
   addAccount?: boolean;
   app?: string;
   returnUrl?: string;
@@ -245,6 +246,7 @@ export const getGoogleAuthUrl = defineEventHandler(async (event: H3Event) => {
     const orgId = session?.orgId;
     const desktop =
       isElectron(event) || q.desktop === "1" || q.desktop === "true";
+    const mobile = q.mobile === "1" || q.mobile === "true";
     const flowId = desktop ? (q.flow_id as string) || undefined : undefined;
     const calendarConnect = isCalendarConnectRequest(q, owner);
     const credentials = calendarConnect
@@ -279,6 +281,7 @@ export const getGoogleAuthUrl = defineEventHandler(async (event: H3Event) => {
       owner,
       orgId,
       desktop,
+      mobile,
       addAccount: calendarConnect,
       app: OAUTH_STATE_APP_ID,
       returnUrl,
@@ -309,6 +312,7 @@ export const getGoogleAuthUrl = defineEventHandler(async (event: H3Event) => {
 export const handleGoogleCallback = defineEventHandler(
   async (event: H3Event) => {
     let desktop = false;
+    let mobile = false;
     let flowId: string | undefined;
     try {
       const query = getQuery(event);
@@ -317,6 +321,7 @@ export const handleGoogleCallback = defineEventHandler(
         getAppUrl(event, "/_agent-native/google/callback"),
       );
       desktop = state.desktop ?? false;
+      mobile = state.mobile ?? false;
       flowId = state.flowId;
 
       const googleError = query.error as string | undefined;
@@ -358,6 +363,7 @@ export const handleGoogleCallback = defineEventHandler(
           {
             hasProductionSession,
             desktop,
+            ...(mobile ? { mobile: true } : {}),
             trackSignup: {
               authProvider: "google",
               authUserId: identity.id,
@@ -373,6 +379,7 @@ export const handleGoogleCallback = defineEventHandler(
         return oauthCallbackResponse(event, identity.email, {
           sessionToken,
           desktop,
+          mobile,
           returnUrl,
           flowId,
           appName: "Calendar",
@@ -398,11 +405,14 @@ export const handleGoogleCallback = defineEventHandler(
         addAccount || (owner !== undefined && email !== owner);
       const sessionOwner = isAddAccount ? (owner ?? email) : email;
       const shouldCreateSession =
-        !isAddAccount || (desktop && flowId && sessionOwner);
+        !isAddAccount ||
+        (desktop && flowId && sessionOwner) ||
+        (mobile && sessionOwner);
       const { sessionToken } = shouldCreateSession
         ? await createOAuthSession(event, sessionOwner, {
             hasProductionSession,
             desktop,
+            ...(mobile ? { mobile: true } : {}),
           })
         : { sessionToken: undefined };
 
@@ -414,6 +424,7 @@ export const handleGoogleCallback = defineEventHandler(
       return oauthCallbackResponse(event, email, {
         sessionToken,
         desktop,
+        mobile,
         addAccount: isAddAccount,
         flowId,
         appName: "Calendar",
@@ -434,6 +445,7 @@ export const getGoogleAddAccountUrl = defineEventHandler(
     const q = getQuery(event);
     const desktop =
       isElectron(event) || q.desktop === "1" || q.desktop === "true";
+    const mobile = q.mobile === "1" || q.mobile === "true";
     const flowId = desktop ? (q.flow_id as string) || undefined : undefined;
     if (!(await resolveCalendarOAuthCredentials(event))) {
       return missingCredentialsResponse(
@@ -456,6 +468,7 @@ export const getGoogleAddAccountUrl = defineEventHandler(
         owner: session.email,
         orgId: session.orgId,
         desktop,
+        mobile,
         addAccount: true,
         app: OAUTH_STATE_APP_ID,
         flowId,
@@ -481,6 +494,7 @@ export const getGoogleAddAccountUrl = defineEventHandler(
 export const handleGoogleAddAccountCallback = defineEventHandler(
   async (event: H3Event) => {
     let desktop = false;
+    let mobile = false;
     let flowId: string | undefined;
     try {
       const session = await getSession(event);
@@ -490,6 +504,7 @@ export const handleGoogleAddAccountCallback = defineEventHandler(
         getAppUrl(event, "/_agent-native/google/add-account/callback"),
       );
       desktop = state.desktop ?? false;
+      mobile = state.mobile ?? false;
       flowId = state.flowId;
 
       const googleError = query.error as string | undefined;
@@ -530,10 +545,11 @@ export const handleGoogleAddAccountCallback = defineEventHandler(
         session?.orgId ?? stateOrgId,
       );
       const { sessionToken } =
-        desktop && flowId
+        (desktop && flowId) || mobile
           ? await createOAuthSession(event, ownerEmail, {
               hasProductionSession: !!session?.email,
               desktop,
+              ...(mobile ? { mobile: true } : {}),
             })
           : { sessionToken: undefined };
 
@@ -544,6 +560,7 @@ export const handleGoogleAddAccountCallback = defineEventHandler(
       return oauthCallbackResponse(event, addedEmail, {
         sessionToken,
         desktop,
+        mobile,
         addAccount: true,
         flowId,
         appName: "Calendar",

package/corpus/templates/dispatch/shared/feature-flags.ts

@@ -2,9 +2,12 @@ import {
   defineFeatureFlag,
   defineFeatureFlags,
 } from "@agent-native/core/feature-flags";
-import { DISPATCH_WORKSPACE_SSO_FLAG } from "@agent-native/dispatch/shared/feature-flags";
+import {
+  DISPATCH_WORKSPACE_APP_LIST_FLAG,
+  DISPATCH_WORKSPACE_SSO_FLAG,
+} from "@agent-native/dispatch/shared/feature-flags";
 
-export { DISPATCH_WORKSPACE_SSO_FLAG };
+export { DISPATCH_WORKSPACE_APP_LIST_FLAG, DISPATCH_WORKSPACE_SSO_FLAG };
 
 export const DESKTOP_WORKSPACE_SSO_FLAG = defineFeatureFlag({
   key: "desktop.workspace-sso",
@@ -16,4 +19,5 @@ export const DESKTOP_WORKSPACE_SSO_FLAG = defineFeatureFlag({
 export const DISPATCH_FEATURE_FLAGS = defineFeatureFlags([
   DESKTOP_WORKSPACE_SSO_FLAG,
   DISPATCH_WORKSPACE_SSO_FLAG,
+  DISPATCH_WORKSPACE_APP_LIST_FLAG,
 ]);

package/dist/a2a/index.d.ts

@@ -3,6 +3,7 @@ export type { A2ATokenPayload } from "./server.js";
 export { generateAgentCard } from "./agent-card.js";
 export { A2A_AGENT_ACTIVITY_KIND, A2A_AGENT_ACTIVITY_VERSION, MAX_A2A_ACTIVITY_REASONING_CHARS, MAX_A2A_ACTIVITY_REASONING_SEGMENTS, MAX_A2A_ACTIVITY_RESPONSE_CHARS, MAX_A2A_ACTIVITY_TOOL_CALLS, MAX_A2A_ACTIVITY_TOTAL_CHARS, MAX_A2A_ACTIVITY_TOOL_ID_CHARS, MAX_A2A_ACTIVITY_TOOL_INPUT_CHARS, MAX_A2A_ACTIVITY_TOOL_NAME_CHARS, MAX_A2A_ACTIVITY_TOOL_PAYLOAD_CHARS, MAX_A2A_ACTIVITY_TOOL_RESULT_CHARS, applyA2AAgentActivityEvent, buildA2AAgentActivityPart, buildA2AAgentActivitySnapshot, createA2AAgentActivityState, parseA2AAgentActivityPart, } from "./activity.js";
 export { A2AClient, callAction, callAgent, signA2AToken } from "./client.js";
+export { canonicalA2AAudience } from "./audience.js";
 export { resolveA2ACallerAuth } from "./caller-auth.js";
 export type { A2ACallerAuth } from "./caller-auth.js";
 export { AgentInvocationError, buildAgentInvocationPrompt, invokeAgent, invokeAgentAction, looksLikeAgentUrl, resolveAgentInvocationTarget, } from "./invoke.js";

package/dist/a2a/index.js

@@ -4,5 +4,6 @@ export { generateAgentCard } from "./agent-card.js";
 export { A2A_AGENT_ACTIVITY_KIND, A2A_AGENT_ACTIVITY_VERSION, MAX_A2A_ACTIVITY_REASONING_CHARS, MAX_A2A_ACTIVITY_REASONING_SEGMENTS, MAX_A2A_ACTIVITY_RESPONSE_CHARS, MAX_A2A_ACTIVITY_TOOL_CALLS, MAX_A2A_ACTIVITY_TOTAL_CHARS, MAX_A2A_ACTIVITY_TOOL_ID_CHARS, MAX_A2A_ACTIVITY_TOOL_INPUT_CHARS, MAX_A2A_ACTIVITY_TOOL_NAME_CHARS, MAX_A2A_ACTIVITY_TOOL_PAYLOAD_CHARS, MAX_A2A_ACTIVITY_TOOL_RESULT_CHARS, applyA2AAgentActivityEvent, buildA2AAgentActivityPart, buildA2AAgentActivitySnapshot, createA2AAgentActivityState, parseA2AAgentActivityPart, } from "./activity.js";
 // Client
 export { A2AClient, callAction, callAgent, signA2AToken } from "./client.js";
+export { canonicalA2AAudience } from "./audience.js";
 export { resolveA2ACallerAuth } from "./caller-auth.js";
 export { AgentInvocationError, buildAgentInvocationPrompt, invokeAgent, invokeAgentAction, looksLikeAgentUrl, resolveAgentInvocationTarget, } from "./invoke.js";

package/dist/collab/awareness.d.ts

@@ -62,11 +62,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
+    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
-    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -77,9 +77,9 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
+    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
-    error?: undefined;
 }>>;

package/dist/file-upload/actions/upload-image.d.ts

@@ -17,11 +17,11 @@ declare const _default: import("../../action.js").ActionDefinition<{
     id?: undefined;
     provider?: undefined;
 } | {
+    error?: undefined;
     configured?: undefined;
     connectPath?: undefined;
     url: string;
     id: string;
     provider: string;
-    error?: undefined;
 }>;
 export default _default;

package/dist/mcp/screen-memory-stdio.d.ts

@@ -137,13 +137,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -159,6 +159,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -174,7 +175,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -190,6 +190,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             minutes: {
                 type: string;
                 description: string;
@@ -199,7 +200,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -216,6 +216,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -234,7 +235,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             };
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -250,6 +250,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
@@ -263,7 +264,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
                 description: string;
             };
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             includeMicrophone?: undefined;
@@ -314,13 +314,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt: {
                 type: string;
                 description: string;
@@ -349,13 +349,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;

package/dist/notifications/routes.d.ts

@@ -16,18 +16,18 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
     error?: undefined;
     ok?: undefined;
 } | {
+    count?: undefined;
     updated: number;
     error?: undefined;
     ok?: undefined;
-    count?: undefined;
 } | {
+    count?: undefined;
     updated?: undefined;
     error: string;
     ok?: undefined;
-    count?: undefined;
 } | {
+    count?: undefined;
     updated?: undefined;
     error?: undefined;
     ok: boolean;
-    count?: undefined;
 }>>;

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/server/auth.js

@@ -564,7 +564,8 @@ function shouldExposeSessionTokenInBody(event) {
     // X-Request-Source; browsers can only use that cross-origin after our CORS
     // allowlist has approved the origin, and same-origin pages already receive
     // an equivalent httpOnly session cookie on successful login.
-    return !origin && getHeader(event, "x-request-source") === "clips-desktop";
+    const requestSource = getHeader(event, "x-request-source");
+    return (!origin && (requestSource === "clips-desktop" || requestSource === "mobile"));
 }
 function authLoginResponse(event, token, email) {
     if (!shouldExposeSessionTokenInBody(event))
@@ -2683,6 +2684,7 @@ async function mountBetterAuthRoutes(app, options) {
             }
             const q = getQuery(event);
             const desktop = isElectronRequest(event) || q.desktop === "1" || q.desktop === "true";
+            const mobile = q.mobile === "1" || q.mobile === "true";
             const flowId = desktop ? q.flow_id || undefined : undefined;
             // Validate the caller's return param up front and only embed it
             // into the OAuth state when it normalises to a non-root path —
@@ -2701,6 +2703,7 @@ async function mountBetterAuthRoutes(app, options) {
             const state = encodeOAuthState({
                 redirectUri,
                 desktop,
+                mobile,
                 addAccount: false,
                 app: getOAuthStateAppId(),
                 returnUrl,
@@ -2711,6 +2714,7 @@ async function mountBetterAuthRoutes(app, options) {
             logGoogleOAuthDebug(event, "auth-url", {
                 flowId,
                 desktop,
+                mobile,
                 redirectPath: oauthDebugUrlPath(redirectUri),
                 returnUrl,
                 redirect: q.redirect === "1",
@@ -2755,15 +2759,18 @@ async function mountBetterAuthRoutes(app, options) {
                 return callbackRelay;
             let callbackFlowId;
             let callbackDesktop = false;
+            let callbackMobile = false;
             try {
                 const query = getQuery(event);
                 const code = query.code;
-                const { redirectUri, desktop, returnUrl, flowId, signupAttribution, signupAnonymousId, } = decodeOAuthState(query.state, getAppUrl(event, "/_agent-native/google/callback"));
+                const { redirectUri, desktop, mobile, returnUrl, flowId, signupAttribution, signupAnonymousId, } = decodeOAuthState(query.state, getAppUrl(event, "/_agent-native/google/callback"));
                 callbackFlowId = flowId;
                 callbackDesktop = desktop ?? false;
+                callbackMobile = mobile ?? false;
                 logGoogleOAuthDebug(event, "callback-start", {
                     flowId,
                     desktop,
+                    mobile,
                     redirectPath: oauthDebugUrlPath(redirectUri),
                     hasCode: !!code,
                     returnUrl,
@@ -2870,6 +2877,7 @@ async function mountBetterAuthRoutes(app, options) {
                 const { sessionToken } = await createOAuthSession(event, email, {
                     hasProductionSession: false,
                     desktop,
+                    mobile,
                     trackSignup: {
                         authProvider: "google",
                         authUserId: typeof user.id === "string" ? user.id : undefined,
@@ -2881,6 +2889,7 @@ async function mountBetterAuthRoutes(app, options) {
                 logGoogleOAuthDebug(event, "callback-session-created", {
                     flowId,
                     desktop,
+                    mobile,
                     hasSessionToken: !!sessionToken,
                     emailDomain: email.split("@")[1] || "",
                 });
@@ -2894,6 +2903,7 @@ async function mountBetterAuthRoutes(app, options) {
                 return oauthCallbackResponse(event, email, {
                     sessionToken,
                     desktop,
+                    mobile,
                     returnUrl,
                     flowId,
                 });
@@ -2909,6 +2919,7 @@ async function mountBetterAuthRoutes(app, options) {
                 logGoogleOAuthDebug(event, "callback-error", {
                     flowId: callbackFlowId,
                     desktop: callbackDesktop,
+                    mobile: callbackMobile,
                     message: msg,
                 });
                 return oauthErrorPage(AUTH_GOOGLE_FALLBACK);

package/dist/server/embed-route.js

@@ -1,8 +1,9 @@
 import { defineEventHandler, getHeader, getMethod, getQuery, setResponseHeader, } from "h3";
 import { withCollapsedAgentSidebarParam } from "../shared/agent-sidebar-url.js";
 import { EMBED_MODE_QUERY_PARAM, EMBED_START_PATH, EMBED_TOKEN_QUERY_PARAM, MCP_APP_CHAT_BRIDGE_QUERY_PARAM, } from "../shared/embed-auth.js";
-import { isMcpEmbedCorsOrigin, MCP_EMBED_CORS_ALLOW_HEADERS, } from "../shared/mcp-embed-headers.js";
+import { isMcpEmbedTransplantOrigin, MCP_EMBED_CORS_ALLOW_HEADERS, } from "../shared/mcp-embed-headers.js";
 import { getConfiguredAppBasePath } from "./app-base-path.js";
+import { readCorsAllowedOrigins } from "./cors-origins.js";
 import { consumeEmbedSessionTicket, isEmbedCapabilityScope, normalizeEmbedTargetPath, setEmbedSessionCookie, signEmbedSessionToken, } from "./embed-session.js";
 function withConfiguredBasePath(path) {
     const base = getConfiguredAppBasePath();
@@ -48,7 +49,11 @@ function setEmbedStartResponseHeaders(event) {
 }
 function embedStartCorsOrigin(event) {
     const origin = getHeader(event, "origin");
-    return isMcpEmbedCorsOrigin(origin) ? (origin ?? null) : null;
+    if (!origin)
+        return null;
+    if (isMcpEmbedTransplantOrigin(origin))
+        return origin;
+    return readCorsAllowedOrigins().includes(origin) ? origin : null;
 }
 function embedStartResponseHeaders(event, init = {}) {
     const headers = new Headers({
@@ -138,6 +143,12 @@ function firstQueryValue(value) {
             : "";
 }
 function wantsTransplantLocationResponse(event) {
+    const origin = getHeader(event, "origin");
+    const canReadLocation = !origin ||
+        embedStartCorsOrigin(event) !== null ||
+        isMcpEmbedTransplantOrigin(origin);
+    if (!canReadLocation)
+        return false;
     if (getHeader(event, "x-agent-native-embed-transplant") === "1") {
         return true;
     }

package/dist/server/google-oauth.d.ts

@@ -88,6 +88,13 @@ export interface OAuthStatePayload {
     owner?: string;
     orgId?: string;
     desktop?: boolean;
+    /**
+     * Explicit native-mobile intent from an embedded app. The callback may be
+     * served by a browser with a non-mobile user-agent, so relying on
+     * `isMobile(event)` alone can strand the native client on the web sign-in
+     * page.
+     */
+    mobile?: boolean;
     addAccount?: boolean;
     app?: string;
     /**
@@ -113,6 +120,7 @@ export interface EncodeOAuthStateOptions {
     owner?: string;
     orgId?: string;
     desktop?: boolean;
+    mobile?: boolean;
     addAccount?: boolean;
     app?: string;
     returnUrl?: string;
@@ -165,6 +173,7 @@ export interface OAuthSessionResult {
 export declare function createOAuthSession(event: H3Event, email: string, opts: {
     hasProductionSession: boolean;
     desktop?: boolean;
+    mobile?: boolean;
     trackSignup?: {
         authProvider: string;
         authUserId?: string;
@@ -182,6 +191,7 @@ export declare function createOAuthSession(event: H3Event, email: string, opts:
 export declare function oauthCallbackResponse(event: H3Event, email: string, opts: {
     sessionToken?: string;
     desktop?: boolean;
+    mobile?: boolean;
     addAccount?: boolean;
     /**
      * Same-origin path to return the viewer to after a successful web

package/dist/server/google-oauth.js

@@ -453,6 +453,8 @@ export function encodeOAuthState(redirectUriOrOpts, owner, desktop, addAccount,
         payload.g = opts.orgId;
     if (opts.desktop)
         payload.d = true;
+    if (opts.mobile)
+        payload.m = true;
     if (opts.addAccount)
         payload.a = true;
     if (opts.app)
@@ -500,6 +502,7 @@ export function decodeOAuthState(stateParam, fallbackUri) {
                 owner: parsed.o || undefined,
                 orgId: typeof parsed.g === "string" ? parsed.g : undefined,
                 desktop: !!parsed.d,
+                mobile: !!parsed.m,
                 addAccount: !!parsed.a,
                 app: typeof parsed.app === "string" ? parsed.app : undefined,
                 // Pass returnUrl through as-is — same-origin validation runs at the
@@ -537,7 +540,10 @@ export async function resolveOAuthOwner(event, stateOwner) {
  * app can inject it.
  */
 export async function createOAuthSession(event, email, opts) {
-    const mobile = isMobile(event);
+    // A native callback can arrive through a browser whose callback request
+    // user-agent does not identify as mobile. Prefer the signed flow intent and
+    // retain UA detection for ordinary mobile web sign-ins.
+    const mobile = opts.mobile || isMobile(event);
     const needsDeepLink = opts.desktop || mobile;
     const maxAge = getSessionMaxAge();
     let sessionToken;
@@ -592,7 +598,9 @@ export async function createOAuthSession(event, email, opts) {
  * pages, and plain web redirects — so templates don't have to.
  */
 export function oauthCallbackResponse(event, email, opts) {
-    const mobile = isMobile(event);
+    // The mobile flag is carried inside HMAC-signed OAuth state by native
+    // clients. UA detection remains the fallback for ordinary mobile browsers.
+    const mobile = opts.mobile || isMobile(event);
     const query = getQuery(event);
     const callbackState = typeof query.state === "string" && query.state.length > 0
         ? query.state

package/dist/server/onboarding-html.js

@@ -1299,6 +1299,16 @@ export function getOnboardingHtml(opts = {}) {
     const googleAuthMode = resolveGoogleAuthMode(opts.googleAuthMode);
     const builderPreviewLocalDevEnabled = isBuilderPreviewLocalDevEnabled();
     const localeInitScript = getLocaleInitScript();
+    const embeddedAuthInitScript = `(function() {
+  try {
+    var params = new URLSearchParams(window.location.search || "");
+    if (params.get("embedded") === "1" || window.self !== window.top) {
+      document.documentElement.setAttribute("data-agent-native-embedded", "1");
+    }
+  } catch (error) {
+    void error;
+  }
+})();`;
     const marketing = opts.marketing ??
         resolveBuiltInAuthMarketing({
             requestHost: opts.requestHost,
@@ -1397,6 +1407,9 @@ ${localeMenuItemsHtml}
       </div>`
         : "";
     const identitySsoHtml = identitySsoLoginButtonHtml();
+    const embeddedAuthCss = identitySsoHtml
+        ? '  html[data-agent-native-embedded="1"] #identity-sso-btn { display: none !important; }\n'
+        : "";
     const localDevHtml = `
   <div class="local-dev-signin" id="local-dev-signin" hidden>
     <button type="button" class="btn-local-dev btn-primary" id="local-dev-btn" title="${esc(t("localDevDescription"))}"${i18nAttr("localDevButton")} data-i18n-title="localDevDescription" aria-describedby="local-dev-description">${esc(t("localDevButton"))}</button>
@@ -1758,6 +1771,7 @@ ${marketing.description ? `      <p class="app-desc" data-marketing-field="descr
 <head>
 <meta charset="UTF-8">
 <script data-agent-native-locale-init>${localeInitScript}</script>
+<script data-agent-native-embedded-init>${embeddedAuthInitScript}</script>
 <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
 <title>${hasMarketing ? esc(marketing.appName) + " — " + esc(t("pageTitleSignIn")) : esc(t("pageTitleWelcome"))}</title>
 <link rel="icon" type="image/svg+xml" href="${withAppBasePath("/favicon.svg")}">
@@ -2305,6 +2319,7 @@ ${marketingStyles}
   body.simplified-auth { background: #141414; }
   body.simplified-auth .card { border-color: transparent; box-shadow: none; }
   body.simplified-auth .local-note { display: none !important; }
+${embeddedAuthCss}
 </style>
 </head>
 <body${simplifiedAuth ? ' class="simplified-auth"' : hasMarketing ? ' class="has-marketing"' : ""}>

package/dist/server/transcribe-voice.d.ts

@@ -20,6 +20,6 @@ export declare function createTranscribeVoiceHandler(): import("h3").EventHandle
     error: string;
     text?: undefined;
 } | {
-    text: string;
     error?: undefined;
+    text: string;
 }>>;

package/dist/shared/mcp-embed-headers.d.ts

@@ -7,6 +7,13 @@ export declare function isMcpProductHostOrigin(origin: string | null | undefined
 export declare function isAgentNativeFirstPartyAppOrigin(origin: string | null | undefined): boolean;
 export declare function isBuilderIoEmbedOrigin(origin: string | null | undefined): boolean;
 export declare function isMcpEmbedCorsOrigin(origin: string | null | undefined): boolean;
+/**
+ * Origins allowed to read the one-time embed location returned by a browser
+ * transplant request. Builder and localhost origins may use the broader MCP
+ * CORS surface, but must not receive a reusable session location unless they
+ * are explicitly configured through CORS_ALLOWED_ORIGINS.
+ */
+export declare function isMcpEmbedTransplantOrigin(origin: string | null | undefined): boolean;
 export declare function shouldAllowMcpEmbedCredentials(origin: string | null | undefined): boolean;
 export declare const MCP_EMBED_STATIC_ASSET_HEADERS: {
     readonly "Access-Control-Allow-Origin": "*";

package/dist/shared/mcp-embed-headers.js

@@ -8,6 +8,14 @@ const MCP_PRODUCT_HOST_ORIGINS = new Set([
     "https://chatgpt.com",
     "https://claude.ai",
 ]);
+const TRUSTED_NATIVE_APP_ORIGIN_RE = /^(?:tauri:\/\/localhost|https?:\/\/tauri\.localhost(?::\d+)?)$/;
+function isExplicitCorsAllowedOrigin(origin) {
+    return (process.env.CORS_ALLOWED_ORIGINS ?? "")
+        .split(",")
+        .map((value) => value.trim())
+        .filter(Boolean)
+        .includes(origin);
+}
 export function isLocalMcpEmbedOrigin(origin) {
     if (!origin)
         return false;
@@ -97,12 +105,27 @@ export function isMcpEmbedCorsOrigin(origin) {
         isAgentNativeFirstPartyAppOrigin(origin) ||
         isBuilderIoEmbedOrigin(origin));
 }
+/**
+ * Origins allowed to read the one-time embed location returned by a browser
+ * transplant request. Builder and localhost origins may use the broader MCP
+ * CORS surface, but must not receive a reusable session location unless they
+ * are explicitly configured through CORS_ALLOWED_ORIGINS.
+ */
+export function isMcpEmbedTransplantOrigin(origin) {
+    return (isClaudeMcpContentOrigin(origin) ||
+        isChatGptMcpSandboxOrigin(origin) ||
+        isMcpProductHostOrigin(origin) ||
+        isAgentNativeFirstPartyAppOrigin(origin));
+}
 export function shouldAllowMcpEmbedCredentials(origin) {
-    return (origin !== "null" &&
-        !isClaudeMcpContentOrigin(origin) &&
-        !isChatGptMcpSandboxOrigin(origin) &&
-        !isMcpProductHostOrigin(origin) &&
-        !isAgentNativeFirstPartyAppOrigin(origin));
+    if (!origin || origin === "null")
+        return false;
+    // Credentialed CORS is an explicit deployment decision. MCP product,
+    // Builder, localhost, and arbitrary origins use bearer/embed credentials;
+    // only the configured browser allowlist and the framework's exact native
+    // app origins may receive cookies.
+    return (TRUSTED_NATIVE_APP_ORIGIN_RE.test(origin) ||
+        isExplicitCorsAllowedOrigin(origin));
 }
 // These paths are served straight off the CDN, so the security-headers h3
 // middleware never runs for them — anything it sets that must also hold for

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.157.17",
+  "version": "0.157.19",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {