@agent-native/core 0.159.5 → 0.160.0

package/dist/server/realtime-voice.js

@@ -5,7 +5,7 @@ import { redactSensitiveFields, sanitizeToolErrorText, sanitizeToolErrorValue, }
 import { TOOL_SEARCH_ACTION_NAME } from "../agent/tool-search.js";
 import { parseAcceptLanguage } from "../localization/server.js";
 import { getSession } from "./auth.js";
-import { getBuilderGatewayBaseUrl, resolveBuilderCredentials, resolveSecret, } from "./credential-provider.js";
+import { gatewayLaneUnavailableMessage, getBuilderGatewayBaseUrl, resolveBuilderGatewayCredentials, resolveSecret, } from "./credential-provider.js";
 import { getH3App } from "./framework-request-handler.js";
 import { runWithRequestContext } from "./request-context.js";
 import { isSameOriginRequest } from "./request-origin.js";
@@ -379,7 +379,7 @@ function createSessionHandler(tools, options) {
                 ? { browserTabId: auth.browserTabId }
                 : undefined,
         }, async () => {
-            const builderCredentials = await resolveBuilderCredentials();
+            const builderCredentials = await resolveBuilderGatewayCredentials();
             const builderConfigured = Boolean(builderCredentials.privateKey?.trim() &&
                 builderCredentials.publicKey?.trim());
             const apiKey = builderConfigured
@@ -388,7 +388,7 @@ function createSessionHandler(tools, options) {
             if (!builderConfigured && !apiKey) {
                 setResponseStatus(event, 409);
                 return {
-                    error: "Connect Builder (free tier available) or configure an OpenAI API key to use realtime voice.",
+                    error: gatewayLaneUnavailableMessage("Connect Builder (free tier available) or configure an OpenAI API key to use realtime voice."),
                     code: "realtime_voice_setup_required",
                 };
             }
@@ -466,22 +466,28 @@ function createSessionHandler(tools, options) {
                 setResponseStatus(event, 502);
                 return {
                     error: builderConfigured
-                        ? "Could not reach the Builder realtime voice gateway"
+                        ? gatewayLaneUnavailableMessage("Could not reach the Builder realtime voice gateway")
                         : "Could not reach the OpenAI Realtime API",
                 };
             }
             if (!upstream.ok) {
                 const detail = await safeOpenAiErrorDetail(upstream, builderConfigured ? builderCredentials.privateKey : apiKey);
                 setResponseStatus(event, builderConfigured ? upstream.status : 502);
+                const rejection = `${builderConfigured ? "Builder" : "OpenAI"} rejected the realtime session (${upstream.status})${detail ? `: ${detail}` : ""}`;
                 return {
-                    error: `${builderConfigured ? "Builder" : "OpenAI"} rejected the realtime session (${upstream.status})${detail ? `: ${detail}` : ""}`,
+                    error: builderConfigured
+                        ? gatewayLaneUnavailableMessage(rejection)
+                        : rejection,
                 };
             }
             const answerSdp = await upstream.text().catch(() => "");
             if (!answerSdp.trim()) {
                 setResponseStatus(event, 502);
+                const emptyAnswer = `${builderConfigured ? "Builder" : "OpenAI"} returned an empty realtime session answer`;
                 return {
-                    error: `${builderConfigured ? "Builder" : "OpenAI"} returned an empty realtime session answer`,
+                    error: builderConfigured
+                        ? gatewayLaneUnavailableMessage(emptyAnswer)
+                        : emptyAnswer,
                 };
             }
             setResponseStatus(event, upstream.status);

package/dist/server/transcribe-voice.d.ts

@@ -20,6 +20,6 @@ export declare function createTranscribeVoiceHandler(): import("h3").EventHandle
     error: string;
     text?: undefined;
 } | {
-    error?: undefined;
     text: string;
+    error?: undefined;
 }>>;

package/dist/server/transcribe-voice.js

@@ -23,7 +23,7 @@ import { getOrgContext } from "../org/context.js";
 import { transcribeWithBuilder } from "../transcription/builder-transcription.js";
 import { applyVoiceContextReplacements, buildVoiceGuidanceBlock, parseVoiceContextPack, voiceContextTermsOnly, } from "../voice/index.js";
 import { getSession } from "./auth.js";
-import { resolveHasBuilderPrivateKey, resolveSecret, } from "./credential-provider.js";
+import { gatewayLaneUnavailableMessage, resolveHasBuilderGatewayCredential, resolveSecret, } from "./credential-provider.js";
 import { runWithRequestContext } from "./request-context.js";
 import { isSameOriginRequest } from "./request-origin.js";
 const WHISPER_URL = "https://api.openai.com/v1/audio/transcriptions";
@@ -149,7 +149,7 @@ export function createTranscribeVoiceHandler() {
         const withRequestContext = async (fn) => requestContext.userEmail
             ? runWithRequestContext(requestContext, fn)
             : fn();
-        const hasBuilderPrivateKey = async () => withRequestContext(() => resolveHasBuilderPrivateKey());
+        const hasBuilderCredential = async () => withRequestContext(() => resolveHasBuilderGatewayCredential());
         const transcribeWithBuilderForRequest = (opts) => withRequestContext(() => transcribeWithBuilder(opts));
         const sessionId = session?.email ?? "local";
         let providerPref;
@@ -212,7 +212,7 @@ export function createTranscribeVoiceHandler() {
                 instructions: voiceGuidance,
                 contextPack: voiceContext,
                 providerPref,
-                hasBuilderPrivateKey,
+                hasBuilderCredential,
                 withRequestContext,
                 resolveApiKey,
                 clientAbortSignal: clientAbort,
@@ -266,10 +266,10 @@ export function createTranscribeVoiceHandler() {
             const label = providerPref === "builder-gemini"
                 ? "Builder Gemini Flash-Lite"
                 : "Builder";
-            if (!(await hasBuilderPrivateKey())) {
+            if (!(await hasBuilderCredential())) {
                 setResponseStatus(event, 400);
                 return {
-                    error: `${label} is selected but Builder.io is not connected. Connect Builder.io (free tier available) in Settings, or change the provider preference.`,
+                    error: gatewayLaneUnavailableMessage(`${label} is selected but Builder.io is not connected. Connect Builder.io (free tier available) in Settings, or change the provider preference.`),
                 };
             }
             try {
@@ -288,10 +288,12 @@ export function createTranscribeVoiceHandler() {
                 const message = err?.message ?? String(err);
                 if (message.includes("credits exhausted")) {
                     setResponseStatus(event, 402);
-                    return { error: message };
+                    return { error: gatewayLaneUnavailableMessage(message) };
                 }
                 setResponseStatus(event, 502);
-                return { error: `${label} transcription failed: ${message}` };
+                return {
+                    error: gatewayLaneUnavailableMessage(`${label} transcription failed: ${message}`),
+                };
             }
         }
         if (providerPref === "groq") {
@@ -322,7 +324,7 @@ export function createTranscribeVoiceHandler() {
         // ── Builder Gemini Flash-Lite path ─────────────────────────────────
         // First-priority in auto mode when Builder is connected. This lets users
         // try Gemini 3.1 Flash-Lite without bringing their own Google key.
-        if (providerPref !== "openai" && (await hasBuilderPrivateKey())) {
+        if (providerPref !== "openai" && (await hasBuilderCredential())) {
             try {
                 const result = await transcribeWithBuilderForRequest({
                     audioBytes,
@@ -339,7 +341,7 @@ export function createTranscribeVoiceHandler() {
                 // a specific upgrade prompt.
                 if (message.includes("credits exhausted")) {
                     setResponseStatus(event, 402);
-                    return { error: message };
+                    return { error: gatewayLaneUnavailableMessage(message) };
                 }
                 builderError = message;
             }
@@ -401,9 +403,9 @@ export function createTranscribeVoiceHandler() {
         if (!provider) {
             setResponseStatus(event, builderError ? 502 : 400);
             return {
-                error: builderError
+                error: gatewayLaneUnavailableMessage(builderError
                     ? `Builder transcription failed: ${builderError}. Add GEMINI_API_KEY, GROQ_API_KEY, or OPENAI_API_KEY in Settings → API Keys to enable a fallback provider.`
-                    : "No voice transcription provider configured. Connect Builder.io (free tier available) or add GEMINI_API_KEY / GROQ_API_KEY / OPENAI_API_KEY in Settings → API Keys.",
+                    : "No voice transcription provider configured. Connect Builder.io (free tier available) or add GEMINI_API_KEY / GROQ_API_KEY / OPENAI_API_KEY in Settings → API Keys."),
             };
         }
         return await callWhisperCompat({
@@ -477,7 +479,7 @@ async function callWhisperCompat({ event, provider, audioBytes, mime, language,
         clearTimeout(timeout);
     }
 }
-async function cleanupTranscriptText({ event, text, instructions, contextPack, providerPref, hasBuilderPrivateKey, withRequestContext, resolveApiKey, clientAbortSignal, }) {
+async function cleanupTranscriptText({ event, text, instructions, contextPack, providerPref, hasBuilderCredential, withRequestContext, resolveApiKey, clientAbortSignal, }) {
     const original = text.trim();
     if (!original)
         return { text: "" };
@@ -486,10 +488,10 @@ async function cleanupTranscriptText({ event, text, instructions, contextPack, p
         return { text: finalizeText(original) };
     }
     if (providerPref === "builder" || providerPref === "builder-gemini") {
-        if (!(await hasBuilderPrivateKey())) {
+        if (!(await hasBuilderCredential())) {
             setResponseStatus(event, 400);
             return {
-                error: "Builder.io cleanup is selected but Builder.io is not connected. Connect Builder.io (free tier available) in Settings, or change the provider preference.",
+                error: gatewayLaneUnavailableMessage("Builder.io cleanup is selected but Builder.io is not connected. Connect Builder.io (free tier available) in Settings, or change the provider preference."),
             };
         }
         try {
@@ -506,7 +508,7 @@ async function cleanupTranscriptText({ event, text, instructions, contextPack, p
         catch (err) {
             setResponseStatus(event, 502);
             return {
-                error: `Builder.io cleanup failed: ${err?.message ?? String(err)}`,
+                error: gatewayLaneUnavailableMessage(`Builder.io cleanup failed: ${err?.message ?? String(err)}`),
             };
         }
     }
@@ -560,7 +562,7 @@ async function cleanupTranscriptText({ event, text, instructions, contextPack, p
             };
         }
     }
-    if (await hasBuilderPrivateKey()) {
+    if (await hasBuilderCredential()) {
         try {
             const cleaned = await withRequestContext(() => cleanupWithBuilder({ text: original, instructions, clientAbortSignal }));
             if (cleaned)

package/dist/transcription/builder-transcription.js

@@ -1,4 +1,4 @@
-import { resolveBuilderAuthHeader, getBuilderProxyOrigin, } from "../server/credential-provider.js";
+import { resolveBuilderGatewayAuth, getBuilderProxyOrigin, } from "../server/credential-provider.js";
 function describeError(err) {
     if (!(err instanceof Error))
         return String(err);
@@ -7,8 +7,8 @@ function describeError(err) {
     return `${err.name}: ${err.message}${causeText}`;
 }
 export async function transcribeWithBuilder(opts) {
-    const authHeader = await resolveBuilderAuthHeader();
-    if (!authHeader) {
+    const auth = await resolveBuilderGatewayAuth();
+    if (!auth) {
         throw new Error("Builder private key not configured. Connect your Builder.io account (free tier available) in Settings.");
     }
     const params = new URLSearchParams();
@@ -39,8 +39,12 @@ export async function transcribeWithBuilder(opts) {
         res = await fetch(url, {
             method: "POST",
             headers: {
-                Authorization: authHeader,
+                Authorization: auth.authorization,
                 "Content-Type": "application/octet-stream",
+                // A gateway token without a space id is rejected before any route
+                // policy is consulted, so the space id travels with every call.
+                ...(auth.spaceId ? { "x-builder-api-key": auth.spaceId } : {}),
+                ...(auth.userId ? { "x-builder-user-id": auth.userId } : {}),
             },
             body,
             signal: controller.signal,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.159.5",
+  "version": "0.160.0",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {