@agent-native/core 0.159.2 → 0.159.5

package/dist/server/agent-engine-api-key-route.d.ts

@@ -27,10 +27,10 @@ export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scop
 export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: any;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
+    error?: undefined;
 }>>;
 export {};

package/dist/server/auth.js

@@ -1981,6 +1981,16 @@ function createAuthGuardFn(app) {
             p === `${MCP_PUBLIC_ROUTE_PREFIX}/oauth/register`) {
             return;
         }
+        // Remote hosts authenticate these relay calls with their device token,
+        // not a browser session. Keep this list exact: sibling remote routes such
+        // as register, enqueue, and computer controls are session-authenticated.
+        if (p === "/_agent-native/integrations/remote/unregister" ||
+            p === "/_agent-native/integrations/remote/heartbeat" ||
+            p === "/_agent-native/integrations/remote/poll" ||
+            p === "/_agent-native/integrations/remote/result" ||
+            p === "/_agent-native/integrations/remote/run-events") {
+            return;
+        }
         // Cross-app SSO ("Sign in with Agent-Native") — CLIENT side. Both the
         // `/login` entry point and the `/callback` (hit by a user who is, by
         // definition, NOT yet signed in to THIS app) must bypass the blanket

package/dist/server/index.d.ts

@@ -30,7 +30,7 @@ export { initServerSentry, isServerSentryEnabled, setSentryUserForRequest, captu
 export { captureError, captureServerError, registerErrorCaptureProvider, type CaptureErrorContext, type CaptureErrorProvider, } from "./capture-error.js";
 export { createSentryPlugin, defaultSentryPlugin } from "./sentry-plugin.js";
 export { createOrgPlugin, defaultOrgPlugin } from "../org/plugin.js";
-export { createFeatureFlagsPlugin } from "../feature-flags/plugin.js";
+export { createFeatureFlagA2AActionRouteAuth, createFeatureFlagsPlugin, } from "../feature-flags/server.js";
 export { createContextXrayPlugin, defaultContextXrayPlugin, } from "../agent/context-xray/plugin.js";
 export { createObservationalMemoryPlugin, defaultObservationalMemoryPlugin, } from "../agent/observational-memory/plugin.js";
 export { createGoogleAuthPlugin, type GoogleAuthPluginOptions, } from "./google-auth-plugin.js";

package/dist/server/index.js

@@ -33,7 +33,7 @@ export { createSentryPlugin, defaultSentryPlugin } from "./sentry-plugin.js";
 // (which references "defaultOrgPlugin" from @agent-native/core/server) can
 // resolve it during the deploy build worker-entry generation.
 export { createOrgPlugin, defaultOrgPlugin } from "../org/plugin.js";
-export { createFeatureFlagsPlugin } from "../feature-flags/plugin.js";
+export { createFeatureFlagA2AActionRouteAuth, createFeatureFlagsPlugin, } from "../feature-flags/server.js";
 export { createContextXrayPlugin, defaultContextXrayPlugin, } from "../agent/context-xray/plugin.js";
 export { createObservationalMemoryPlugin, defaultObservationalMemoryPlugin, } from "../agent/observational-memory/plugin.js";
 export { createGoogleAuthPlugin, } from "./google-auth-plugin.js";