@agent-native/core 0.157.23 → 0.157.27

package/corpus/templates/dispatch/server/plugins/identity-sso.ts

@@ -10,8 +10,9 @@
  *      identity assertion server-to-server.
  *
  * The browser never receives a JWT, password, or reusable identity assertion.
- * The default-off Desktop flag still gates only the packaged Canary path;
- * ordinary browser federation remains controlled by the client's explicit
+ * The device-local Desktop setting controls whether the parent login surface
+ * appears. The per-user Desktop flag still gates session fan-out; ordinary
+ * browser federation remains controlled by the client's explicit
  * identity-hub configuration.
  */
 
@@ -47,12 +48,12 @@ import {
 
 const AVAILABILITY_PATH = "/_agent-native/identity/availability";
 const AUTHORIZE_PATH = "/_agent-native/identity/authorize";
-const DESKTOP_SSO_CANARY_USER_AGENT = /AgentNativeDesktopSsoCanary\//i;
+const DESKTOP_SSO_USER_AGENT = /AgentNativeDesktop(?:SsoCanary)?\//i;
 
 export function isDesktopWorkspaceSsoRequest(
   userAgent: string | undefined,
 ): boolean {
-  return DESKTOP_SSO_CANARY_USER_AGENT.test(userAgent ?? "");
+  return DESKTOP_SSO_USER_AGENT.test(userAgent ?? "");
 }
 
 function getRequestUrl(event: H3Event): string {

package/dist/collab/awareness.d.ts

@@ -62,11 +62,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
-    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
+    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -77,9 +77,9 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
-    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
+    error?: undefined;
 }>>;

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/extensions/html-shell.js

@@ -4,6 +4,7 @@ export const EXTENSION_FRAME_ANCESTORS = [
     "'self'",
     "https://agent-native.com",
     "https://*.agent-native.com",
+    "https://agent-workspace.builder.io",
     "http://localhost:*",
     "http://127.0.0.1:*",
     "https://*.claudemcpcontent.com",

package/dist/file-upload/actions/upload-image.d.ts

@@ -17,11 +17,11 @@ declare const _default: import("../../action.js").ActionDefinition<{
     id?: undefined;
     provider?: undefined;
 } | {
-    error?: undefined;
     configured?: undefined;
     connectPath?: undefined;
     url: string;
     id: string;
     provider: string;
+    error?: undefined;
 }>;
 export default _default;

package/dist/mcp/screen-memory-stdio.d.ts

@@ -137,13 +137,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
-            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -159,7 +159,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
-            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -175,6 +174,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -190,7 +190,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
-            count?: undefined;
             minutes: {
                 type: string;
                 description: string;
@@ -200,6 +199,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -216,7 +216,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
-            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -235,6 +234,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             };
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -250,7 +250,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
-            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
@@ -264,6 +263,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
                 description: string;
             };
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             includeMicrophone?: undefined;
@@ -314,13 +314,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
-            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt: {
                 type: string;
                 description: string;
@@ -349,13 +349,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
-            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;

package/dist/notifications/routes.d.ts

@@ -16,18 +16,18 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
     error?: undefined;
     ok?: undefined;
 } | {
-    count?: undefined;
     updated: number;
     error?: undefined;
     ok?: undefined;
-} | {
     count?: undefined;
+} | {
     updated?: undefined;
     error: string;
     ok?: undefined;
-} | {
     count?: undefined;
+} | {
     updated?: undefined;
     error?: undefined;
     ok: boolean;
+    count?: undefined;
 }>>;

package/dist/observability/routes.d.ts

@@ -62,6 +62,6 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/server/auth.js

@@ -65,7 +65,7 @@ import { getAllowedCorsOrigin, readCorsAllowedOrigins, } from "./cors-origins.js
 import { readDesktopSso, writeDesktopSso, clearDesktopSso, } from "./desktop-sso.js";
 import { resolveGoogleSignInCredentials } from "./google-oauth-credentials.js";
 import { isElectron as isElectronRequest, getAppBasePath, getAppUrl, getOrigin, encodeOAuthState, decodeOAuthState, createOAuthSession, oauthCallbackResponse, oauthDesktopExchangePage, oauthErrorPage, resolveOAuthRedirectUri, isAllowedOAuthRedirectUri, } from "./google-oauth.js";
-import { isCanonicalAgentNativeAppRequest, isCanonicalIdentitySsoClientRequest, isDesktopSsoCanaryUserAgent, isIdentitySsoExplicitlyEnabled, } from "./identity-sso-store.js";
+import { isCanonicalAgentNativeAppRequest, isCanonicalIdentitySsoClientRequest, isDesktopSsoUserAgent, isIdentitySsoExplicitlyEnabled, } from "./identity-sso-store.js";
 import { ensureCanonicalUserForLegacySession } from "./legacy-auth-migration.js";
 import { encodeMagicLinkSignupAttribution, MAGIC_LINK_ATTRIBUTION_PARAM, } from "./magic-link-attribution.js";
 import { safeOAuthReturnUrl } from "./oauth-return-url.js";
@@ -1769,12 +1769,12 @@ function createAuthGuardFn(app) {
         // identity subpath.
         const isIdentitySsoEntryPath = p === "/_agent-native/identity/login" ||
             p === "/_agent-native/identity/callback";
-        const isDesktopCanaryIdentityRequest = isDesktopSsoCanaryUserAgent(getHeader(event, "user-agent")) &&
+        const isDesktopIdentityRequest = isDesktopSsoUserAgent(getHeader(event, "user-agent")) &&
             isCanonicalAgentNativeAppRequest(getHeader(event, "host"), getHeader(event, "x-forwarded-proto"));
         const isCanonicalHostedIdentityRequest = isCanonicalIdentitySsoClientRequest(getHeader(event, "host"), getHeader(event, "x-forwarded-proto"));
         if (isIdentitySsoEntryPath &&
             (isIdentitySsoExplicitlyEnabled() ||
-                isDesktopCanaryIdentityRequest ||
+                isDesktopIdentityRequest ||
                 isCanonicalHostedIdentityRequest)) {
             return;
         }

package/dist/server/identity-sso.js

@@ -329,12 +329,49 @@ function safeRequestReturnPath(event) {
     }
 }
 export async function handleIdentitySso(event, subpath) {
-    const hub = resolveIdentityHubUrl(event);
-    if (!hub)
-        return new Response("Not found", { status: 404 });
     const method = getMethod(event);
     const sub = ("/" + subpath.replace(/^\/+/, "").replace(/\/+$/, "")).replace(/^\/$/, "");
     const loginPath = SIGN_IN_ENTRY_PATH;
+    // Dispatch is the identity authority, so it has no SSO hub for the
+    // browser to federate to. Its authenticated desktop completion page still
+    // lives on this route and must be reachable after ordinary sign-in.
+    if (sub === "/desktop-complete") {
+        if (method !== "GET" && method !== "HEAD") {
+            return new Response("Method not allowed", { status: 405 });
+        }
+        let nonce = "";
+        try {
+            nonce =
+                new URL(requestUrl(event), "http://an.invalid").searchParams.get("nonce") || "";
+        }
+        catch {
+            return new Response("Invalid completion request", { status: 400 });
+        }
+        if (!DESKTOP_COMPLETION_NONCE.test(nonce)) {
+            return new Response("Invalid completion request", { status: 400 });
+        }
+        const current = await getSession(event).catch((error) => {
+            void error;
+            return null;
+        });
+        if (!current?.email) {
+            return new Response("Authentication required", { status: 401 });
+        }
+        return new Response('<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8">' +
+            '<meta name="viewport" content="width=device-width,initial-scale=1">' +
+            "<title>Signed in</title></head><body>Signed in. You can close this window.</body></html>", {
+            status: 200,
+            headers: {
+                "Cache-Control": "no-store",
+                "Content-Security-Policy": "default-src 'none'; style-src 'none'",
+                "Content-Type": "text/html; charset=utf-8",
+                "Referrer-Policy": "no-referrer",
+            },
+        });
+    }
+    const hub = resolveIdentityHubUrl(event);
+    if (!hub)
+        return new Response("Not found", { status: 404 });
     if (sub === "/login") {
         if (method !== "GET" && method !== "HEAD") {
             return new Response("Method not allowed", { status: 405 });
@@ -437,40 +474,6 @@ export async function handleIdentitySso(event, subpath) {
         }
         return redirect(event, safeReturnPath(stateResult.returnPath));
     }
-    if (sub === "/desktop-complete") {
-        if (method !== "GET" && method !== "HEAD") {
-            return new Response("Method not allowed", { status: 405 });
-        }
-        let nonce = "";
-        try {
-            nonce =
-                new URL(requestUrl(event), "http://an.invalid").searchParams.get("nonce") || "";
-        }
-        catch {
-            return new Response("Invalid completion request", { status: 400 });
-        }
-        if (!DESKTOP_COMPLETION_NONCE.test(nonce)) {
-            return new Response("Invalid completion request", { status: 400 });
-        }
-        const current = await getSession(event).catch((error) => {
-            void error;
-            return null;
-        });
-        if (!current?.email) {
-            return new Response("Authentication required", { status: 401 });
-        }
-        return new Response('<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8">' +
-            '<meta name="viewport" content="width=device-width,initial-scale=1">' +
-            "<title>Signed in</title></head><body>Signed in. You can close this window.</body></html>", {
-            status: 200,
-            headers: {
-                "Cache-Control": "no-store",
-                "Content-Security-Policy": "default-src 'none'; style-src 'none'",
-                "Content-Type": "text/html; charset=utf-8",
-                "Referrer-Policy": "no-referrer",
-            },
-        });
-    }
     return new Response("Not found", { status: 404 });
 }
 export function isIdentitySsoBypassPath(p) {

package/dist/server/realtime-token.d.ts

@@ -26,8 +26,8 @@ export declare function createRealtimeTokenHandler(): import("h3").EventHandlerW
     expiresAt?: undefined;
     ttlSeconds?: undefined;
 } | {
+    error?: undefined;
     token: string;
     expiresAt: string;
     ttlSeconds: number;
-    error?: undefined;
 }>>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.157.23",
+  "version": "0.157.27",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {