@agent-native/core 0.157.21 → 0.157.23

package/dist/collab/awareness.d.ts

@@ -62,11 +62,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
+    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
-    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -77,9 +77,9 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
+    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
-    error?: undefined;
 }>>;

package/dist/mcp/screen-memory-stdio.d.ts

@@ -137,13 +137,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -159,6 +159,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -174,7 +175,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -190,6 +190,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             minutes: {
                 type: string;
                 description: string;
@@ -199,7 +200,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -216,6 +216,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -234,7 +235,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             };
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -250,6 +250,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
@@ -263,7 +264,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
                 description: string;
             };
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             includeMicrophone?: undefined;
@@ -314,13 +314,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt: {
                 type: string;
                 description: string;
@@ -349,13 +349,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;

package/dist/notifications/routes.d.ts

@@ -16,18 +16,18 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
     error?: undefined;
     ok?: undefined;
 } | {
+    count?: undefined;
     updated: number;
     error?: undefined;
     ok?: undefined;
-    count?: undefined;
 } | {
+    count?: undefined;
     updated?: undefined;
     error: string;
     ok?: undefined;
-    count?: undefined;
 } | {
+    count?: undefined;
     updated?: undefined;
     error?: undefined;
     ok: boolean;
-    count?: undefined;
 }>>;

package/dist/progress/routes.d.ts

@@ -15,6 +15,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/server/embed-route.js

@@ -83,6 +83,53 @@ function textResponse(event, message, status) {
         }),
     });
 }
+function embedTargetOrigin(event) {
+    const host = getHeader(event, "host")?.trim();
+    if (!host)
+        return null;
+    const forwardedProto = getHeader(event, "x-forwarded-proto")
+        ?.split(",", 1)[0]
+        ?.trim()
+        .toLowerCase();
+    const protocol = forwardedProto === "http" || forwardedProto === "https"
+        ? forwardedProto
+        : "https";
+    return `${protocol}://${host}`;
+}
+function embedTargetAppId(origin) {
+    if (origin) {
+        try {
+            const hostname = new URL(origin).hostname;
+            const suffix = ".agent-native.com";
+            if (hostname.endsWith(suffix) && hostname.length > suffix.length) {
+                return hostname.slice(0, -suffix.length);
+            }
+            // coercion-ok: diagnostic host parsing must never change the auth response.
+        }
+        catch {
+            // The host is diagnostic context only; keep the response path independent.
+        }
+    }
+    const configured = [process.env.AGENT_NATIVE_APP_ID, process.env.APP_ID].find((value) => /^[a-z0-9][a-z0-9._-]{0,63}$/i.test(value?.trim() ?? ""));
+    if (configured)
+        return configured.trim();
+    return "unknown";
+}
+function logEmbedConsumeResult(event, diagnostic, responseStatus) {
+    const targetOrigin = embedTargetOrigin(event);
+    console.info("[agent-native] workspace embed consume", {
+        targetAppId: embedTargetAppId(targetOrigin),
+        targetOrigin,
+        ticketKey: diagnostic.ticketKey,
+        outcome: diagnostic.outcome,
+        ticketRowFound: diagnostic.ticketRowFound,
+        consumed: diagnostic.consumed,
+        expired: diagnostic.expired,
+        expectedOrgKey: diagnostic.expectedOrgKey,
+        ticketOrgKey: diagnostic.ticketOrgKey,
+        responseStatus,
+    });
+}
 function expiredEmbedSessionResponse(event) {
     setEmbedStartResponseHeaders(event);
     return new Response(`<!doctype html>
@@ -204,14 +251,24 @@ export function createEmbedStartRouteHandler(options = {}) {
         const existingSession = await options
             .getExistingSession?.(event)
             .catch(() => null);
+        let consumeDiagnostic = null;
         const consumed = await consumeEmbedSessionTicket(ticket, {
             expectedOrgId: existingSession?.orgId ?? null,
+            onResult: (diagnostic) => {
+                consumeDiagnostic = diagnostic;
+            },
         });
         if (!consumed) {
+            if (consumeDiagnostic) {
+                logEmbedConsumeResult(event, consumeDiagnostic, 401);
+            }
             return expiredEmbedSessionResponse(event);
         }
         const target = normalizeEmbedTargetPath(consumed.targetPath);
         if (!target) {
+            if (consumeDiagnostic) {
+                logEmbedConsumeResult(event, consumeDiagnostic, 400);
+            }
             return textResponse(event, "Invalid embed target.", 400);
         }
         const token = signEmbedSessionToken({
@@ -230,7 +287,11 @@ export function createEmbedStartRouteHandler(options = {}) {
         const chatBridgeActive = firstQueryValue(query[MCP_APP_CHAT_BRIDGE_QUERY_PARAM]) === "1" ||
             firstQueryValue(query[MCP_APP_CHAT_BRIDGE_QUERY_PARAM]) === "true";
         const location = withConfiguredBasePath(withCollapsedAgentSidebarParam(appendEmbedParams(target, token, chatBridgeActive)));
-        if (wantsTransplantLocationResponse(event)) {
+        const transplant = wantsTransplantLocationResponse(event);
+        if (consumeDiagnostic) {
+            logEmbedConsumeResult(event, consumeDiagnostic, transplant ? 200 : 302);
+        }
+        if (transplant) {
             return transplantLocationResponse(event, location);
         }
         return redirectWithStagedCookies(event, location);

package/dist/server/embed-session.d.ts

@@ -12,8 +12,19 @@ export interface EmbedSessionTicket {
     ticketHash: string;
     expiresAt: number;
 }
+export type EmbedSessionTicketConsumeOutcome = "missing-ticket" | "not-found" | "already-consumed" | "expired" | "org-mismatch" | "consumption-race" | "invalid-row" | "consumed";
+export interface EmbedSessionTicketConsumeDiagnostic {
+    outcome: EmbedSessionTicketConsumeOutcome;
+    ticketKey: string | null;
+    ticketRowFound: boolean;
+    consumed: boolean;
+    expired: boolean;
+    expectedOrgKey: string | null;
+    ticketOrgKey: string | null;
+}
 export interface ConsumeEmbedSessionTicketOptions {
     expectedOrgId?: string | null;
+    onResult?: (result: EmbedSessionTicketConsumeDiagnostic) => void;
 }
 export interface ConsumedEmbedSessionTicket {
     ownerEmail: string;

package/dist/server/embed-session.js

@@ -133,6 +133,11 @@ function signPayload(payload) {
 function hashTicket(ticket) {
     return crypto.createHash("sha256").update(ticket).digest("hex");
 }
+function redactedIdentifier(value) {
+    if (!value)
+        return null;
+    return crypto.createHash("sha256").update(value).digest("hex").slice(0, 12);
+}
 function numberOrNull(value) {
     if (value == null)
         return null;
@@ -458,27 +463,79 @@ export async function createEmbedSessionTicket(input) {
     return { ticket, ticketHash, expiresAt };
 }
 export async function consumeEmbedSessionTicket(ticket, options = {}) {
-    if (!ticket)
+    const expectedOrgKey = redactedIdentifier(options.expectedOrgId);
+    if (!ticket) {
+        options.onResult?.({
+            outcome: "missing-ticket",
+            ticketKey: null,
+            ticketRowFound: false,
+            consumed: false,
+            expired: false,
+            expectedOrgKey,
+            ticketOrgKey: null,
+        });
         return null;
+    }
     await ensureTable();
     const ticketHash = hashTicket(ticket);
+    const ticketKey = ticketHash.slice(0, 12);
     const now = Date.now();
     const { rows } = await getDbExec().execute({
         sql: "SELECT ticket_hash, owner_email, org_id, target_path, scope, expires_at, consumed_at " +
             "FROM agent_native_embed_tickets WHERE ticket_hash = ?",
         args: [ticketHash],
     });
-    if (rows.length === 0)
+    if (rows.length === 0) {
+        options.onResult?.({
+            outcome: "not-found",
+            ticketKey,
+            ticketRowFound: false,
+            consumed: false,
+            expired: false,
+            expectedOrgKey,
+            ticketOrgKey: null,
+        });
         return null;
+    }
     const row = rows[0];
     const expiresAt = numberOrNull(row.expires_at ?? row.expiresAt);
     const consumedAt = numberOrNull(row.consumed_at ?? row.consumedAt);
     const orgId = stringOrUndefined(row.org_id ?? row.orgId);
-    if (consumedAt != null)
+    const ticketOrgKey = redactedIdentifier(orgId);
+    if (consumedAt != null) {
+        options.onResult?.({
+            outcome: "already-consumed",
+            ticketKey,
+            ticketRowFound: true,
+            consumed: true,
+            expired: false,
+            expectedOrgKey,
+            ticketOrgKey,
+        });
         return null;
-    if (expiresAt != null && expiresAt < now)
+    }
+    if (expiresAt != null && expiresAt < now) {
+        options.onResult?.({
+            outcome: "expired",
+            ticketKey,
+            ticketRowFound: true,
+            consumed: false,
+            expired: true,
+            expectedOrgKey,
+            ticketOrgKey,
+        });
         return null;
+    }
     if (options.expectedOrgId && orgId && orgId !== options.expectedOrgId) {
+        options.onResult?.({
+            outcome: "org-mismatch",
+            ticketKey,
+            ticketRowFound: true,
+            consumed: false,
+            expired: false,
+            expectedOrgKey,
+            ticketOrgKey,
+        });
         return null;
     }
     const result = await getDbExec().execute({
@@ -486,12 +543,41 @@ export async function consumeEmbedSessionTicket(ticket, options = {}) {
             "WHERE ticket_hash = ? AND consumed_at IS NULL",
         args: [now, ticketHash],
     });
-    if (result.rowsAffected === 0)
+    if (result.rowsAffected === 0) {
+        options.onResult?.({
+            outcome: "consumption-race",
+            ticketKey,
+            ticketRowFound: true,
+            consumed: false,
+            expired: false,
+            expectedOrgKey,
+            ticketOrgKey,
+        });
         return null;
+    }
     const targetPath = normalizeEmbedTargetPath(stringOrUndefined(row.target_path ?? row.targetPath));
     const ownerEmail = stringOrUndefined(row.owner_email ?? row.ownerEmail);
-    if (!targetPath || !ownerEmail || expiresAt == null)
+    if (!targetPath || !ownerEmail || expiresAt == null) {
+        options.onResult?.({
+            outcome: "invalid-row",
+            ticketKey,
+            ticketRowFound: true,
+            consumed: true,
+            expired: false,
+            expectedOrgKey,
+            ticketOrgKey,
+        });
         return null;
+    }
+    options.onResult?.({
+        outcome: "consumed",
+        ticketKey,
+        ticketRowFound: true,
+        consumed: true,
+        expired: false,
+        expectedOrgKey,
+        ticketOrgKey,
+    });
     return {
         ownerEmail,
         ...(orgId ? { orgId } : {}),

package/dist/server/identity-sso-store.d.ts

@@ -23,6 +23,7 @@ export declare function getIdentityHubUrl(): string | undefined;
 export declare function isIdentitySsoExplicitlyEnabled(): boolean;
 export declare function isIdentitySsoEnabled(): boolean;
 export declare function isDesktopSsoCanaryUserAgent(userAgent: string | undefined): boolean;
+export declare function isDesktopSsoUserAgent(userAgent: string | undefined): boolean;
 export declare function isCanonicalAgentNativeAppOrigin(origin: string | undefined): boolean;
 export declare function isCanonicalIdentitySsoClientOrigin(origin: string | undefined): boolean;
 export declare function isCanonicalAgentNativeAppRequest(host: string | undefined, forwardedProtocol: string | undefined): boolean;

package/dist/server/identity-sso-store.js

@@ -19,6 +19,7 @@ import { randomBytes } from "node:crypto";
 import { getDbExec, intType, isConnectionError, isPostgres, isProductionServerlessFunctionRuntime, } from "../db/client.js";
 import { ensureTableExists } from "../db/ddl-guard.js";
 let _initPromise;
+const DESKTOP_SSO_USER_AGENT = /AgentNativeDesktop(?:SsoCanary)?\//i;
 const DESKTOP_SSO_CANARY_USER_AGENT = /AgentNativeDesktopSsoCanary\//i;
 export const CANONICAL_IDENTITY_SSO_HUB_URL = "https://dispatch.agent-native.com";
 const CANONICAL_IDENTITY_SSO_APP_ORIGINS = new Set([
@@ -110,6 +111,9 @@ export function isIdentitySsoEnabled() {
 export function isDesktopSsoCanaryUserAgent(userAgent) {
     return DESKTOP_SSO_CANARY_USER_AGENT.test(userAgent ?? "");
 }
+export function isDesktopSsoUserAgent(userAgent) {
+    return DESKTOP_SSO_USER_AGENT.test(userAgent ?? "");
+}
 export function isCanonicalAgentNativeAppOrigin(origin) {
     if (!origin)
         return false;

package/dist/server/identity-sso.js

@@ -21,7 +21,7 @@ import { getAppName } from "./app-name.js";
 import { getSession, isExpectedAuthFailure, safeReturnPath } from "./auth.js";
 import { getBetterAuth, getBetterAuthInternalAdapter, } from "./better-auth-instance.js";
 import { createOAuthSession, getOrigin } from "./google-oauth.js";
-import { consumeSsoState, createSsoState, CANONICAL_IDENTITY_SSO_HUB_URL, getIdentityHubUrl, identitySsoLoginButtonHtml, isCanonicalAgentNativeAppRequest, isCanonicalIdentitySsoClientRequest, isDesktopSsoCanaryUserAgent, isIdentitySsoExplicitlyEnabled, isIdentitySsoEnabled, isJtiReplayed, SSO_STATE_TTL_MS, } from "./identity-sso-store.js";
+import { consumeSsoState, createSsoState, CANONICAL_IDENTITY_SSO_HUB_URL, getIdentityHubUrl, identitySsoLoginButtonHtml, isCanonicalIdentitySsoClientRequest, isDesktopSsoUserAgent, isIdentitySsoExplicitlyEnabled, isIdentitySsoEnabled, isJtiReplayed, SSO_STATE_TTL_MS, } from "./identity-sso-store.js";
 export { getIdentityHubUrl, identitySsoLoginButtonHtml, isIdentitySsoEnabled };
 export const IDENTITY_SSO_PROVIDER_ID = "agent-native";
 export const IDENTITY_SSO_SCOPE = "identity";
@@ -164,11 +164,11 @@ export function resolveIdentityHubUrl(event) {
     if (isCanonicalIdentitySsoClientRequest(getHeader(event, "host"), getHeader(event, "x-forwarded-proto"))) {
         return CANONICAL_IDENTITY_SSO_HUB_URL;
     }
-    if (!isDesktopSsoCanaryUserAgent(getHeader(event, "user-agent"))) {
+    if (!isDesktopSsoUserAgent(getHeader(event, "user-agent"))) {
         return undefined;
     }
     try {
-        if (!isCanonicalAgentNativeAppRequest(getHeader(event, "host"), getHeader(event, "x-forwarded-proto"))) {
+        if (!isCanonicalIdentitySsoClientRequest(getHeader(event, "host"), getHeader(event, "x-forwarded-proto"))) {
             return undefined;
         }
         return CANONICAL_IDENTITY_SSO_HUB_URL;

package/dist/server/realtime-token.d.ts

@@ -26,8 +26,8 @@ export declare function createRealtimeTokenHandler(): import("h3").EventHandlerW
     expiresAt?: undefined;
     ttlSeconds?: undefined;
 } | {
-    error?: undefined;
     token: string;
     expiresAt: string;
     ttlSeconds: number;
+    error?: undefined;
 }>>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.157.21",
+  "version": "0.157.23",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {