@agent-native/core 0.164.4 → 0.164.12

package/dist/secrets/routes.d.ts

@@ -34,37 +34,37 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    ok?: undefined;
     status?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     status: string;
+    error?: undefined;
 } | {
-    ok?: undefined;
     error: string;
     removed?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
  * or the current stored value without changing anything.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
     note?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     note?: undefined;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     note: string;
+    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,11 +95,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;

package/dist/secrets/storage.d.ts

@@ -12,6 +12,7 @@
  * Secret values are NEVER logged and NEVER returned from any route handler.
  */
 import type { SecretScope } from "./register.js";
+export declare function ensureTable(): Promise<void>;
 /**
  * Return the last 4 characters of a secret, with any leading characters
  * masked. Used to show a preview without leaking the value.

package/dist/secrets/storage.js

@@ -21,7 +21,7 @@ import { APP_SECRETS_CREATE_SQL } from "./schema.js";
 // Table bootstrap
 // ---------------------------------------------------------------------------
 let _initPromise;
-async function ensureTable() {
+export async function ensureTable() {
     if (!_initPromise) {
         _initPromise = (async () => {
             const client = getDbExec();

package/dist/server/agent-chat-plugin.js

@@ -1811,9 +1811,7 @@ export function createAgentChatPlugin(options) {
             // `nativeActionsInDev` or `leanPrompt`), the dev prompt's "invoke
             // template actions via bash" guidance is wrong — use the prod prompt
             // + tool-format action list instead, same as production.
-            const devNative = options?.nativeActionsInDev === true ||
-                leanPrompt ||
-                Boolean(options?.resolveActionSurface);
+            const devNative = options?.nativeActionsInDev === true || leanPrompt;
             // Keep legacy names for the composition below
             const basePrompt = prodPrompt;
             const getFrameworkPromptActions = () => Object.fromEntries(Object.entries(prodActions).filter(([name]) => !templateScripts[name] && !mcpActionEntries[name]));
@@ -2955,11 +2953,44 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                 // template's actions as native tools instead of routing through bash.
                 // Templates with structured-arg actions (objects/arrays) need this to
                 // avoid round-tripping JSON through the CLI parser.
+                // Request-scoped dev actions are present for authorization and the
+                // `pnpm action` prompt, but remain CLI-only instead of becoming native
+                // tools. The resolver therefore sees the same action names that the
+                // dev prompt can teach without changing the shell-backed dev surface.
+                const requestScopedDevActions = options?.resolveActionSurface
+                    ? Object.fromEntries(Object.entries({ ...discoveredActions, ...templateScripts }).map(([name, entry]) => [name, { ...entry, agentTool: false }]))
+                    : {};
+                // Keep the local coding registry in every dev handler variant. Native
+                // action mode changes how app actions are called; it must not remove
+                // bash/read/edit/write from Electron's local chat surface.
+                const devScriptRegistry = await createDevScriptRegistry({
+                    databaseTools: databaseToolsMode,
+                });
+                const localDevActionNames = new Set(Object.keys(devScriptRegistry));
+                const resolveDevActionSurface = options?.resolveActionSurface
+                    ? async (details) => {
+                        const appActionNames = details.availableActionNames.filter((name) => !localDevActionNames.has(name));
+                        const surface = await options.resolveActionSurface({
+                            ...details,
+                            availableActionNames: appActionNames,
+                        });
+                        const localActionNames = details.availableActionNames.filter((name) => localDevActionNames.has(name));
+                        return {
+                            allowedActionNames: [
+                                ...new Set([
+                                    ...surface.allowedActionNames,
+                                    ...localActionNames,
+                                ]),
+                            ],
+                        };
+                    }
+                    : undefined;
                 const devActions = attachToolSearch(leanPrompt
-                    ? leanActions
+                    ? { ...devScriptRegistry, ...leanActions }
                     : devNative
-                        ? prodActions
+                        ? { ...devScriptRegistry, ...prodActions }
                         : {
+                            ...requestScopedDevActions,
                             ...resourceScripts,
                             ...docsScripts,
                             ...(lazyContext ? frameworkContextTool : {}),
@@ -2981,9 +3012,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             ...coreAttachmentTools,
                             ...browserTools,
                             ...mcpActionEntries,
-                            ...(await createDevScriptRegistry({
-                                databaseTools: databaseToolsMode,
-                            })),
+                            ...devScriptRegistry,
                             // Full-database admin tools (NODE_ENV=development gate — see
                             // dbAdminScripts; also in prodActions so App mode has them too).
                             ...dbAdminScripts,
@@ -3073,7 +3102,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                         }
                         return options?.prepareRequest?.(details);
                     },
-                    resolveActionSurface: options?.resolveActionSurface,
+                    resolveActionSurface: resolveDevActionSurface,
                     skipFilesContext,
                     initialToolNames: effectiveInitialToolNames,
                     ...(options?.toolLimits ? { toolLimits: options.toolLimits } : {}),

package/dist/server/agent-engine-api-key-route.d.ts

@@ -27,10 +27,10 @@ export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scop
 export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: any;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
+    error?: undefined;
 }>>;
 export {};

package/dist/server/agent-teams-run-queue.d.ts

@@ -51,6 +51,7 @@ export interface AgentTeamRunQueueRow {
     createdAt: number;
     updatedAt: number;
 }
+export declare function ensureTable(): Promise<void>;
 declare function getAffectedRowCount(result: unknown): number;
 export interface EnqueueAgentTeamRunInput {
     taskId: string;

package/dist/server/agent-teams-run-queue.js

@@ -37,7 +37,7 @@ export const RUN_DISPATCH_STUCK_AFTER_MS = 15_000;
  * retried (side-effectful work may already have happened). Mirrors A2A. */
 export const RUN_PROCESSING_STUCK_AFTER_MS = 5 * 60 * 1000;
 let _initPromise;
-async function ensureTable() {
+export async function ensureTable() {
     if (!_initPromise) {
         _initPromise = (async () => {
             const client = getDbExec();

package/dist/server/auth-marketing.js

@@ -203,7 +203,9 @@ function slugFromHost(value) {
     if (!host)
         return undefined;
     if (host.endsWith(".agent-native.com")) {
-        return normalizeSlug(host.slice(0, -".agent-native.com".length));
+        const hostSlug = host.slice(0, -".agent-native.com".length);
+        return (normalizeSlug(hostSlug) ??
+            normalizeSlug(hostSlug.replace(/^beta[.-]/, "")));
     }
     return undefined;
 }

package/dist/server/auth.d.ts

@@ -211,6 +211,7 @@ export declare function isLoopbackAddress(ip: string | undefined): boolean;
  */
 export declare function isLoopbackRequest(event: H3Event): boolean;
 export declare function isExpectedAuthFailure(error: unknown): boolean;
+export declare function ensureSessionTable(): Promise<void>;
 /**
  * Create a new session in the legacy sessions table.
  * Used by google-oauth.ts for mobile deep linking.
@@ -244,7 +245,23 @@ export interface DesktopExchangeErrorPayload {
     existingOwner?: string;
     attemptedOwner?: string;
 }
-export declare function setDesktopExchange(flowId: string, token: string, email: string): void;
+export declare const DESKTOP_OAUTH_BROWSER_BINDING_COOKIE = "an_desktop_oauth_binding";
+/**
+ * Create or reuse the browser-local binding for a desktop Google OAuth flow.
+ * The raw value stays in an HttpOnly cookie; only its hash travels in signed
+ * OAuth state and the exchange challenge. This prevents a caller from
+ * initiating a flow and handing its authorization URL to another browser.
+ */
+export declare function prepareDesktopOAuthBrowserBinding(event: H3Event): string;
+/** Verify that a desktop OAuth callback is returning to its initiating browser. */
+export declare function matchesDesktopOAuthBrowserBinding(event: H3Event, expectedHash: string): boolean;
+export declare function setDesktopExchange(flowId: string, token: string, email: string, verifierHash: string): Promise<void>;
+/**
+ * Register the client-held verifier for a desktop OAuth flow before Google
+ * sees the request. Only the verifier hash is persisted; the initiating
+ * browser keeps the raw verifier and presents it when polling the exchange.
+ */
+export declare function registerDesktopExchange(flowId: string, verifier: string, browserBindingHash?: string): Promise<string>;
 export declare function setDesktopExchangeError(flowId: string, error: DesktopExchangeErrorPayload): void;
 /**
  * Run the auth guard on an event. Returns a Response/object to block the