@agent-native/core 0.168.13 → 0.169.1

package/dist/progress/routes.d.ts

@@ -15,6 +15,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,9 +75,9 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    deleted?: undefined;
-    found?: undefined;
     id?: undefined;
+    provider?: undefined;
+    deleted?: undefined;
     providers: {
         id: string;
         label: string;
@@ -88,46 +88,46 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         updatedAt: number;
     }[];
     count: number;
-    provider?: undefined;
+    found?: undefined;
     registered?: undefined;
     label?: undefined;
     message?: undefined;
 } | {
-    deleted?: undefined;
     id?: undefined;
-    providers?: undefined;
     count?: undefined;
+    deleted?: undefined;
+    providers?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
     registered?: undefined;
     label?: undefined;
     message?: undefined;
 } | {
-    deleted?: undefined;
-    providers?: undefined;
     count?: undefined;
     provider?: undefined;
+    deleted?: undefined;
+    providers?: undefined;
     found: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
     message?: undefined;
 } | {
-    found?: undefined;
-    providers?: undefined;
     count?: undefined;
     provider?: undefined;
+    providers?: undefined;
+    found?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
     message?: undefined;
 } | {
-    deleted?: undefined;
-    found?: undefined;
-    providers?: undefined;
     count?: undefined;
     provider?: undefined;
+    deleted?: undefined;
+    providers?: undefined;
+    found?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -311,10 +311,10 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
-        id?: undefined;
-        deleted?: undefined;
-        found?: undefined;
         message?: undefined;
+        deleted?: undefined;
+        id?: undefined;
+        provider?: undefined;
         providers: {
             id: string;
             label: string;
@@ -325,45 +325,45 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
-        provider?: undefined;
+        found?: undefined;
         registered?: undefined;
         label?: undefined;
     } | {
-        id?: undefined;
-        deleted?: undefined;
         message?: undefined;
-        providers?: undefined;
+        deleted?: undefined;
         count?: undefined;
+        id?: undefined;
+        providers?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
         registered?: undefined;
         label?: undefined;
     } | {
-        deleted?: undefined;
         message?: undefined;
-        providers?: undefined;
+        deleted?: undefined;
         count?: undefined;
         provider?: undefined;
+        providers?: undefined;
         found: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
     } | {
-        found?: undefined;
         message?: undefined;
-        providers?: undefined;
         count?: undefined;
         provider?: undefined;
+        providers?: undefined;
+        found?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
     } | {
         deleted?: undefined;
-        found?: undefined;
-        providers?: undefined;
         count?: undefined;
         provider?: undefined;
+        providers?: undefined;
+        found?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/provider-api/corpus-jobs.d.ts

@@ -73,7 +73,6 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     offset?: unknown;
     limit?: unknown;
 }, {
-    deleted?: undefined;
     jobs: {
         id: string;
         name: string;
@@ -84,6 +83,7 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
         updatedAt: string;
     }[];
     total: number;
+    deleted?: undefined;
     jobId?: undefined;
 } | {
     jobs?: undefined;
@@ -91,9 +91,9 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     deleted: boolean;
     jobId: string;
 } | {
-    deleted?: undefined;
     jobs?: undefined;
     total?: undefined;
+    deleted?: undefined;
     jobId?: undefined;
     hits: Record<string, unknown>[];
     offset: number;

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/scripts/db/check-scoping.js

@@ -12,9 +12,15 @@
  *   pnpm action db-check-scoping [--db path] [--require-org] [--format json]
  */
 import path from "path";
-import { createClient } from "@libsql/client";
-import { getDatabaseUrl, getDatabaseAuthToken } from "../../db/client.js";
+import { getDatabaseUrl } from "../../db/client.js";
 import { parseArgs } from "../utils.js";
+// The `@libsql/client` node entry pulls the `libsql` native addon into whatever
+// graph imports it, and this maintenance script was its only importer in the
+// server bundle — which is how a 9.3MB Linux SQLite driver reached the docs
+// function, a deployment that runs Postgres. `createSqliteScriptClient` reaches
+// the same two backends through dynamic imports instead, so nothing static
+// depends on the native package.
+import { createSqliteScriptClient } from "./sqlite-client.js";
 function isPostgresUrl(url) {
     return url.startsWith("postgres://") || url.startsWith("postgresql://");
 }
@@ -125,10 +131,7 @@ Options:
         }
     }
     else {
-        const client = createClient({
-            url,
-            authToken: getDatabaseAuthToken(),
-        });
+        const client = await createSqliteScriptClient(url);
         try {
             allColumns = await discoverColumnsSqlite(client);
         }

package/dist/secrets/routes.d.ts

@@ -37,17 +37,17 @@ export declare function createWriteSecretHandler(): import("h3").EventHandlerWit
     ok?: undefined;
     status?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     status: string;
+    error?: undefined;
 } | {
     ok?: undefined;
     error: string;
     removed?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
@@ -58,13 +58,13 @@ export declare function createTestSecretHandler(): import("h3").EventHandlerWith
     error: string;
     note?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     note?: undefined;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     note: string;
+    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,11 +95,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;

package/dist/server/agent-chat-plugin.js

@@ -14,6 +14,7 @@ import { SYSTEM_PROMPT_CACHE_SPLIT } from "../agent/engine/prompt-cache.js";
 import { PROVIDER_TO_ENV } from "../agent/engine/provider-env-vars.js";
 import { hostedHarnessSystemPrompt } from "../agent/harness/hosted.js";
 import { createProductionAgentHandler, actionsToEngineTools, executeAgentToolCall, filterActionsByAllowedNames, normalizeAgentActionSurfaceResolution, readPersistedActionSurface, toolCallCacheKey, getActiveRunForThreadAsync, abortRunDurably, abortTurnDurably, subscribeToRun, } from "../agent/production-agent.js";
+import { clientAbortReason } from "../agent/run-loop-with-resume.js";
 import { callerHasRunAccess, callerHasThreadAccess, } from "../agent/run-ownership.js";
 import { markTurnAborted, readBackgroundRunClaim } from "../agent/run-store.js";
 import { buildCurrentTimeUserContext, buildRuntimeContextPrompt, } from "../agent/runtime-context.js";
@@ -4142,10 +4143,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                     let reason = "user";
                     try {
                         const body = await readBody(event);
-                        if (typeof body?.reason === "string" &&
-                            /^[a-z0-9_-]{1,64}$/i.test(body.reason)) {
-                            reason = body.reason;
-                        }
+                        reason = clientAbortReason(body?.reason);
                     }
                     catch {
                         // Empty/invalid body — keep the default user abort reason.

package/dist/server/builder-browser.d.ts

@@ -339,11 +339,15 @@ export declare function createBuilderBrowserCallbackErrorPage(message: string, o
 }): string;
 export interface RunBuilderAgentArgs {
     prompt: string;
+    context?: string;
     projectId?: string;
     branchName?: string;
     userEmail?: string;
     userId?: string;
 }
+export declare const BUILDER_AGENT_CONTEXT_MAX_CHARS = 32000;
+export declare function normalizeBuilderAgentContext(value: unknown): string | undefined;
+export declare function buildBuilderAgentUserPrompt(prompt: string, context?: string): string;
 export interface RunBuilderAgentResult {
     branchName: string;
     projectId: string;

package/dist/server/builder-browser.js

@@ -1381,6 +1381,27 @@ export function createBuilderBrowserCallbackErrorPage(message, opts = {}) {
   </body>
 </html>`;
 }
+export const BUILDER_AGENT_CONTEXT_MAX_CHARS = 32_000;
+export function normalizeBuilderAgentContext(value) {
+    if (value == null)
+        return undefined;
+    if (typeof value !== "string") {
+        throw new Error("context must be a string");
+    }
+    const context = value.trim();
+    if (!context)
+        return undefined;
+    if (context.length > BUILDER_AGENT_CONTEXT_MAX_CHARS) {
+        throw new Error(`context must be ${BUILDER_AGENT_CONTEXT_MAX_CHARS} characters or fewer`);
+    }
+    return context;
+}
+export function buildBuilderAgentUserPrompt(prompt, context) {
+    const normalizedContext = normalizeBuilderAgentContext(context);
+    if (!normalizedContext)
+        return prompt;
+    return `${prompt.trim()}\n\n<context>\n${normalizedContext}\n</context>`;
+}
 function normalizeBuilderApiString(value, fieldName) {
     if (typeof value !== "string" || !value.trim()) {
         throw new Error(`Builder agent run returned a blank ${fieldName}`);
@@ -1636,11 +1657,12 @@ export async function runBuilderAgent(args) {
     if (!builderUserEmail && !builderUserId) {
         throw new Error("userEmail or userId is required");
     }
+    const userPrompt = buildBuilderAgentUserPrompt(args.prompt, args.context);
     const url = new URL("/agents/run", getBuilderApiHost());
     url.searchParams.set("apiKey", creds.publicKey);
     const postRun = async (actor) => {
         const body = {
-            userMessage: { userPrompt: args.prompt },
+            userMessage: { userPrompt },
             projectId,
         };
         if (args.branchName)

package/dist/server/core-routes-plugin.js

@@ -42,7 +42,7 @@ import { readAnalyticsClientPlatformHeader, readBrowserSessionIdHeader, } from "
 import { getConfiguredAppBasePath, stripAppBasePath } from "./app-base-path.js";
 import { getAppName } from "./app-name.js";
 import { getSession } from "./auth.js";
-import { BUILDER_CONNECT_PARAM, BUILDER_ENV_KEYS, BUILDER_OPENER_PARAM, BUILDER_RELAY_FLOW_HEADER, BUILDER_RELAY_SIGNATURE_HEADER, BUILDER_RELAY_STATE_PARAM, BUILDER_RELAY_TIMESTAMP_HEADER, appendBuilderConnectToken, builderConnectTrackingProperties, createBuilderConnectState, createBuilderBrowserCallbackErrorPage, createBuilderBrowserCallbackPage, createBuilderRelayRequest, getBuilderConnectTrackingParams, getBuilderBrowserOriginForEvent, getBuilderBrowserStatusForEvent, isBuilderConnectCallbackUrlAllowed, isSignedBuilderConnectState, resolveBuilderBranchProjectId, resolveBuilderConnectCallbackUrl, resolveBuilderPreviewRelayParentOrigin, runBuilderAgent, verifyBuilderRelayRequest, verifyBuilderPreviewRelayStateForCallback, verifyBuilderConnectTokenAndGetOwner, } from "./builder-browser.js";
+import { BUILDER_CONNECT_PARAM, BUILDER_ENV_KEYS, BUILDER_OPENER_PARAM, BUILDER_RELAY_FLOW_HEADER, BUILDER_RELAY_SIGNATURE_HEADER, BUILDER_RELAY_STATE_PARAM, BUILDER_RELAY_TIMESTAMP_HEADER, appendBuilderConnectToken, builderConnectTrackingProperties, createBuilderConnectState, createBuilderBrowserCallbackErrorPage, createBuilderBrowserCallbackPage, createBuilderRelayRequest, getBuilderConnectTrackingParams, getBuilderBrowserOriginForEvent, getBuilderBrowserStatusForEvent, isBuilderConnectCallbackUrlAllowed, isSignedBuilderConnectState, normalizeBuilderAgentContext, resolveBuilderBranchProjectId, resolveBuilderConnectCallbackUrl, resolveBuilderPreviewRelayParentOrigin, runBuilderAgent, verifyBuilderRelayRequest, verifyBuilderPreviewRelayStateForCallback, verifyBuilderConnectTokenAndGetOwner, } from "./builder-browser.js";
 import { BUILDER_OAUTH_SCOPE, deleteBuilderOAuthSession, finishBuilderOAuthAuthorization, hasBuilderOAuthSession, resolveBuilderOAuthRequestAccess, startBuilderOAuthAuthorization, } from "./builder-oauth.js";
 import { captureError, registerErrorCaptureProvider } from "./capture-error.js";
 import { getAllowedCorsOrigin, readCorsAllowedOrigins, } from "./cors-origins.js";
@@ -1930,12 +1930,23 @@ export function createCoreRoutesPlugin(options = {}) {
                     setResponseStatus(event, 405);
                     return { error: "Method not allowed" };
                 }
+                await assertBodySize(event, 64 * 1024);
                 const body = await readBody(event).catch(() => ({}));
                 const prompt = typeof body?.prompt === "string" ? body.prompt : "";
                 if (!prompt.trim()) {
                     setResponseStatus(event, 400);
                     return { error: "prompt is required" };
                 }
+                let context;
+                try {
+                    context = normalizeBuilderAgentContext(body?.context);
+                }
+                catch (error) {
+                    setResponseStatus(event, 400);
+                    return {
+                        error: error instanceof Error ? error.message : "Invalid context",
+                    };
+                }
                 const session = await getSession(event).catch(() => null);
                 if (!session?.email) {
                     setResponseStatus(event, 401);
@@ -1973,6 +1984,7 @@ export function createCoreRoutesPlugin(options = {}) {
                     try {
                         const result = await runBuilderAgent({
                             prompt,
+                            context,
                             projectId,
                             branchName: typeof body?.branchName === "string"
                                 ? body.branchName

package/dist/server/transcribe-voice.d.ts

@@ -20,6 +20,6 @@ export declare function createTranscribeVoiceHandler(): import("h3").EventHandle
     error: string;
     text?: undefined;
 } | {
-    error?: undefined;
     text: string;
+    error?: undefined;
 }>>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.168.13",
+  "version": "0.169.1",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -428,8 +428,8 @@
     "y-protocols": "^1.0.7",
     "yjs": "^13.6.32",
     "zod": "^4.3.6",
-    "@agent-native/recap-cli": "0.5.7",
-    "@agent-native/toolkit": "^0.16.9"
+    "@agent-native/recap-cli": "0.5.8",
+    "@agent-native/toolkit": "^0.16.10"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",