@agent-native/core 0.159.0 → 0.159.2

package/dist/collab/awareness.d.ts

@@ -62,11 +62,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
-    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
+    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -77,9 +77,9 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
-    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
+    error?: undefined;
 }>>;

package/dist/mcp/screen-memory-stdio.d.ts

@@ -137,13 +137,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -159,6 +159,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -174,7 +175,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -190,6 +190,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             minutes: {
                 type: string;
                 description: string;
@@ -199,7 +200,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -216,6 +216,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -234,7 +235,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             };
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -250,6 +250,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
@@ -263,7 +264,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
                 description: string;
             };
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             includeMicrophone?: undefined;
@@ -314,13 +314,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt: {
                 type: string;
                 description: string;
@@ -349,13 +349,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;

package/dist/notifications/routes.d.ts

@@ -16,18 +16,18 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
     error?: undefined;
     ok?: undefined;
 } | {
+    count?: undefined;
     updated: number;
     error?: undefined;
     ok?: undefined;
-    count?: undefined;
 } | {
+    count?: undefined;
     updated?: undefined;
     error: string;
     ok?: undefined;
-    count?: undefined;
 } | {
+    count?: undefined;
     updated?: undefined;
     error?: undefined;
     ok: boolean;
-    count?: undefined;
 }>>;

package/dist/server/embed-route.js

@@ -125,6 +125,8 @@ function logEmbedConsumeResult(event, diagnostic, responseStatus) {
         ticketRowFound: diagnostic.ticketRowFound,
         consumed: diagnostic.consumed,
         expired: diagnostic.expired,
+        expectedOwnerKey: diagnostic.expectedOwnerKey,
+        ticketOwnerKey: diagnostic.ticketOwnerKey,
         expectedOrgKey: diagnostic.expectedOrgKey,
         ticketOrgKey: diagnostic.ticketOrgKey,
         responseStatus,
@@ -253,7 +255,10 @@ export function createEmbedStartRouteHandler(options = {}) {
             .catch(() => null);
         let consumeDiagnostic = null;
         const consumed = await consumeEmbedSessionTicket(ticket, {
-            expectedOrgId: existingSession?.orgId ?? null,
+            // Org ids are app-local in the workspace: the Dispatch parent and a
+            // target app can represent the same signed-in person with different
+            // ids. Bind an existing target session to the ticket owner instead.
+            expectedOwnerEmail: existingSession?.email ?? null,
             onResult: (diagnostic) => {
                 consumeDiagnostic = diagnostic;
             },

package/dist/server/embed-session.d.ts

@@ -12,17 +12,20 @@ export interface EmbedSessionTicket {
     ticketHash: string;
     expiresAt: number;
 }
-export type EmbedSessionTicketConsumeOutcome = "missing-ticket" | "not-found" | "already-consumed" | "expired" | "org-mismatch" | "consumption-race" | "invalid-row" | "consumed";
+export type EmbedSessionTicketConsumeOutcome = "missing-ticket" | "not-found" | "already-consumed" | "expired" | "identity-mismatch" | "org-mismatch" | "consumption-race" | "invalid-row" | "consumed";
 export interface EmbedSessionTicketConsumeDiagnostic {
     outcome: EmbedSessionTicketConsumeOutcome;
     ticketKey: string | null;
     ticketRowFound: boolean;
     consumed: boolean;
     expired: boolean;
+    expectedOwnerKey: string | null;
+    ticketOwnerKey: string | null;
     expectedOrgKey: string | null;
     ticketOrgKey: string | null;
 }
 export interface ConsumeEmbedSessionTicketOptions {
+    expectedOwnerEmail?: string | null;
     expectedOrgId?: string | null;
     onResult?: (result: EmbedSessionTicketConsumeDiagnostic) => void;
 }

package/dist/server/embed-session.js

@@ -139,6 +139,10 @@ function redactedIdentifier(value) {
         return null;
     return crypto.createHash("sha256").update(value).digest("hex").slice(0, 12);
 }
+function normalizedEmail(value) {
+    const normalized = value?.trim().toLowerCase();
+    return normalized || null;
+}
 function numberOrNull(value) {
     if (value == null)
         return null;
@@ -464,6 +468,8 @@ export async function createEmbedSessionTicket(input) {
     return { ticket, ticketHash, expiresAt };
 }
 export async function consumeEmbedSessionTicket(ticket, options = {}) {
+    const expectedOwnerEmail = normalizedEmail(options.expectedOwnerEmail);
+    const expectedOwnerKey = redactedIdentifier(expectedOwnerEmail);
     const expectedOrgKey = redactedIdentifier(options.expectedOrgId);
     if (!ticket) {
         options.onResult?.({
@@ -472,6 +478,8 @@ export async function consumeEmbedSessionTicket(ticket, options = {}) {
             ticketRowFound: false,
             consumed: false,
             expired: false,
+            expectedOwnerKey,
+            ticketOwnerKey: null,
             expectedOrgKey,
             ticketOrgKey: null,
         });
@@ -493,6 +501,8 @@ export async function consumeEmbedSessionTicket(ticket, options = {}) {
             ticketRowFound: false,
             consumed: false,
             expired: false,
+            expectedOwnerKey,
+            ticketOwnerKey: null,
             expectedOrgKey,
             ticketOrgKey: null,
         });
@@ -501,6 +511,8 @@ export async function consumeEmbedSessionTicket(ticket, options = {}) {
     const row = rows[0];
     const expiresAt = numberOrNull(row.expires_at ?? row.expiresAt);
     const consumedAt = numberOrNull(row.consumed_at ?? row.consumedAt);
+    const ownerEmail = stringOrUndefined(row.owner_email ?? row.ownerEmail);
+    const ticketOwnerKey = redactedIdentifier(normalizedEmail(ownerEmail));
     const orgId = stringOrUndefined(row.org_id ?? row.orgId);
     const ticketOrgKey = redactedIdentifier(orgId);
     if (consumedAt != null) {
@@ -510,6 +522,8 @@ export async function consumeEmbedSessionTicket(ticket, options = {}) {
             ticketRowFound: true,
             consumed: true,
             expired: false,
+            expectedOwnerKey,
+            ticketOwnerKey,
             expectedOrgKey,
             ticketOrgKey,
         });
@@ -522,6 +536,24 @@ export async function consumeEmbedSessionTicket(ticket, options = {}) {
             ticketRowFound: true,
             consumed: false,
             expired: true,
+            expectedOwnerKey,
+            ticketOwnerKey,
+            expectedOrgKey,
+            ticketOrgKey,
+        });
+        return null;
+    }
+    if (expectedOwnerEmail &&
+        ownerEmail &&
+        normalizedEmail(ownerEmail) !== expectedOwnerEmail) {
+        options.onResult?.({
+            outcome: "identity-mismatch",
+            ticketKey,
+            ticketRowFound: true,
+            consumed: false,
+            expired: false,
+            expectedOwnerKey,
+            ticketOwnerKey,
             expectedOrgKey,
             ticketOrgKey,
         });
@@ -534,6 +566,8 @@ export async function consumeEmbedSessionTicket(ticket, options = {}) {
             ticketRowFound: true,
             consumed: false,
             expired: false,
+            expectedOwnerKey,
+            ticketOwnerKey,
             expectedOrgKey,
             ticketOrgKey,
         });
@@ -551,13 +585,14 @@ export async function consumeEmbedSessionTicket(ticket, options = {}) {
             ticketRowFound: true,
             consumed: false,
             expired: false,
+            expectedOwnerKey,
+            ticketOwnerKey,
             expectedOrgKey,
             ticketOrgKey,
         });
         return null;
     }
     const targetPath = normalizeEmbedTargetPath(stringOrUndefined(row.target_path ?? row.targetPath));
-    const ownerEmail = stringOrUndefined(row.owner_email ?? row.ownerEmail);
     if (!targetPath || !ownerEmail || expiresAt == null) {
         options.onResult?.({
             outcome: "invalid-row",
@@ -565,6 +600,8 @@ export async function consumeEmbedSessionTicket(ticket, options = {}) {
             ticketRowFound: true,
             consumed: true,
             expired: false,
+            expectedOwnerKey,
+            ticketOwnerKey,
             expectedOrgKey,
             ticketOrgKey,
         });
@@ -576,6 +613,8 @@ export async function consumeEmbedSessionTicket(ticket, options = {}) {
         ticketRowFound: true,
         consumed: true,
         expired: false,
+        expectedOwnerKey,
+        ticketOwnerKey,
         expectedOrgKey,
         ticketOrgKey,
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.159.0",
+  "version": "0.159.2",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {