@agent-native/core 0.158.4 → 0.158.5

package/dist/collab/awareness.d.ts

@@ -62,11 +62,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
+    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
-    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -77,9 +77,9 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
+    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
-    error?: undefined;
 }>>;

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/file-upload/actions/upload-image.d.ts

@@ -17,11 +17,11 @@ declare const _default: import("../../action.js").ActionDefinition<{
     id?: undefined;
     provider?: undefined;
 } | {
+    error?: undefined;
     configured?: undefined;
     connectPath?: undefined;
     url: string;
     id: string;
     provider: string;
-    error?: undefined;
 }>;
 export default _default;

package/dist/mcp/screen-memory-stdio.d.ts

@@ -137,13 +137,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -159,6 +159,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -174,7 +175,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -190,6 +190,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             minutes: {
                 type: string;
                 description: string;
@@ -199,7 +200,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -216,6 +216,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -234,7 +235,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             };
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -250,6 +250,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
@@ -263,7 +264,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
                 description: string;
             };
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             includeMicrophone?: undefined;
@@ -314,13 +314,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt: {
                 type: string;
                 description: string;
@@ -349,13 +349,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;

package/dist/notifications/routes.d.ts

@@ -16,18 +16,18 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
     error?: undefined;
     ok?: undefined;
 } | {
+    count?: undefined;
     updated: number;
     error?: undefined;
     ok?: undefined;
-    count?: undefined;
 } | {
+    count?: undefined;
     updated?: undefined;
     error: string;
     ok?: undefined;
-    count?: undefined;
 } | {
+    count?: undefined;
     updated?: undefined;
     error?: undefined;
     ok: boolean;
-    count?: undefined;
 }>>;

package/dist/observability/routes.d.ts

@@ -41,16 +41,16 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
-    error?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
+    error?: undefined;
     ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;
+    error?: undefined;
     ok?: undefined;
 } | {
     summary?: undefined;
@@ -59,9 +59,9 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     error: any;
     ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/progress/routes.d.ts

@@ -15,6 +15,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/server/agent-engine-api-key-route.d.ts

@@ -27,10 +27,10 @@ export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scop
 export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: any;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
+    error?: undefined;
 }>>;
 export {};

package/dist/server/auth.js

@@ -1538,9 +1538,44 @@ function escapeHtmlAttr(value) {
 const DESKTOP_MAGIC_LINK_CALLBACK_PATH = "/_agent-native/auth/magic-link/desktop-callback";
 const DESKTOP_MAGIC_LINK_LANDING_PATH = "/_agent-native/auth/magic-link/desktop-landing";
 const BETTER_AUTH_MAGIC_LINK_VERIFY_PATH = "/_agent-native/auth/ba/magic-link/verify";
-function desktopMagicLinkLandingPage(verificationUrl) {
-    const safeVerificationUrl = escapeHtmlAttr(verificationUrl);
-    const html = `<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Continue sign-in</title></head><body><main><h1>Continue signing in</h1><p>Click continue to finish signing in to the Agent Native desktop app.</p><form method="get" action="${safeVerificationUrl}"><button type="submit">Continue</button></form></main></body></html>`;
+function desktopMagicLinkVerificationUrl(event, values) {
+    const value = (key) => typeof values[key] === "string" ? values[key] : "";
+    const token = value("token").trim();
+    const callbackURL = value("callbackURL");
+    if (!token || !callbackURL)
+        return undefined;
+    try {
+        const callback = new URL(callbackURL, getOrigin(event));
+        if (callback.origin !== new URL(getOrigin(event)).origin ||
+            !callback.pathname.endsWith(DESKTOP_MAGIC_LINK_CALLBACK_PATH) ||
+            !normalizeDesktopFlowId(callback.searchParams.get("flow_id")) ||
+            !normalizeDesktopFlowVerifier(callback.searchParams.get("verifier"))) {
+            return undefined;
+        }
+        const verificationURL = new URL(getAppUrl(event, BETTER_AUTH_MAGIC_LINK_VERIFY_PATH));
+        verificationURL.searchParams.set("token", token);
+        for (const key of [
+            "callbackURL",
+            "newUserCallbackURL",
+            "errorCallbackURL",
+        ]) {
+            const queryValue = value(key);
+            if (queryValue)
+                verificationURL.searchParams.set(key, queryValue);
+        }
+        return verificationURL;
+        // coercion-ok: malformed user-supplied callback data is rejected as absent.
+    }
+    catch {
+        return undefined;
+    }
+}
+function desktopMagicLinkLandingPage(actionUrl, fields) {
+    const safeActionUrl = escapeHtmlAttr(actionUrl);
+    const hiddenInputs = Object.entries(fields)
+        .map(([name, value]) => `<input type="hidden" name="${escapeHtmlAttr(name)}" value="${escapeHtmlAttr(value)}">`)
+        .join("");
+    const html = `<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Continue sign-in</title></head><body><main><h1>Continue signing in</h1><p>Click continue to finish signing in to the Agent Native desktop app.</p><form method="post" action="${safeActionUrl}" autocomplete="off">${hiddenInputs}<button type="submit">Continue</button></form></main></body></html>`;
     return new Response(html, {
         status: 200,
         headers: {
@@ -3054,47 +3089,45 @@ async function mountBetterAuthRoutes(app, options) {
     // on the first verification GET. The explicit form action below is the only
     // request that reaches Better Auth's consuming verification endpoint.
     app.use(DESKTOP_MAGIC_LINK_LANDING_PATH, defineEventHandler((event) => {
+        if (getMethod(event) === "POST") {
+            return readBody(event).then((body) => {
+                const verificationURL = desktopMagicLinkVerificationUrl(event, body);
+                if (!verificationURL) {
+                    setResponseStatus(event, 400);
+                    return { error: "Invalid desktop magic-link" };
+                }
+                return new Response(null, {
+                    status: 303,
+                    headers: {
+                        "cache-control": "no-store",
+                        location: verificationURL.toString(),
+                        "referrer-policy": "no-referrer",
+                    },
+                });
+            });
+        }
         if (!isReadMethod(event)) {
             setResponseStatus(event, 405);
             return { error: "Method not allowed" };
         }
         const query = getQuery(event);
-        const token = typeof query.token === "string" ? query.token.trim() : "";
-        const callbackURL = typeof query.callbackURL === "string" ? query.callbackURL : "";
-        if (!token || !callbackURL) {
-            setResponseStatus(event, 400);
-            return { error: "Invalid desktop magic-link" };
-        }
-        let callback;
-        try {
-            callback = new URL(callbackURL, getOrigin(event));
-        }
-        catch {
-            setResponseStatus(event, 400);
-            return { error: "Invalid desktop magic-link" };
-        }
-        if (callback.origin !== new URL(getOrigin(event)).origin ||
-            !callback.pathname.endsWith(DESKTOP_MAGIC_LINK_CALLBACK_PATH) ||
-            !normalizeDesktopFlowId(callback.searchParams.get("flow_id")) ||
-            !normalizeDesktopFlowVerifier(callback.searchParams.get("verifier"))) {
+        const verificationURL = desktopMagicLinkVerificationUrl(event, query);
+        if (!verificationURL) {
             setResponseStatus(event, 400);
             return { error: "Invalid desktop magic-link" };
         }
-        const verificationURL = new URL(getOrigin(event));
-        verificationURL.pathname =
-            getAppBasePath() + BETTER_AUTH_MAGIC_LINK_VERIFY_PATH;
-        verificationURL.searchParams.set("token", token);
+        const fields = {};
         for (const key of [
+            "token",
             "callbackURL",
             "newUserCallbackURL",
             "errorCallbackURL",
         ]) {
-            const value = query[key];
-            if (typeof value === "string" && value) {
-                verificationURL.searchParams.set(key, value);
+            if (typeof query[key] === "string" && query[key]) {
+                fields[key] = query[key];
             }
         }
-        return desktopMagicLinkLandingPage(verificationURL.toString());
+        return desktopMagicLinkLandingPage(getAppUrl(event, DESKTOP_MAGIC_LINK_LANDING_PATH), fields);
     }));
     app.use("/_agent-native/auth/magic-link/desktop-callback", defineEventHandler(async (event) => {
         if (!isReadMethod(event)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.158.4",
+  "version": "0.158.5",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {