@agent-native/core 0.168.2 → 0.168.3

package/corpus/templates/analytics/server/lib/dashboards-store.ts

@@ -15,11 +15,11 @@
 import { isPostgres } from "@agent-native/core/db";
 import { recordChange } from "@agent-native/core/server";
 import {
-  getAllSettings,
   getOrgSetting,
   getUserSetting,
   deleteOrgSetting,
   deleteUserSetting,
+  listSettingsByPrefix,
 } from "@agent-native/core/settings";
 import {
   accessFilter,
@@ -167,6 +167,33 @@ interface AccessCtx {
   orgId: string | null;
 }
 
+/**
+ * Legacy KV rows are only ever reachable under `o:<orgId>:` or `u:<email>:`,
+ * so a caller can match nothing else. Reading them with `getAllSettings()`
+ * pulled and JSON-parsed every tenant's settings row into the Lambda to
+ * string-match those two prefixes, putting the whole deployment's settings
+ * table on the critical path of every dashboard and analysis list read.
+ */
+async function getScopedLegacySettings(
+  ctx: Pick<AccessCtx, "email" | "orgId">,
+): Promise<Record<string, Record<string, unknown>>> {
+  // User scope first, then org: callers append these to the SQL rows in
+  // iteration order and never re-sort, so the order is user-visible. The
+  // previous full-table read inherited whatever order the settings table
+  // returned, which no query pinned.
+  const prefixes: string[] = [];
+  if (ctx.email) prefixes.push(`u:${ctx.email}:`);
+  if (ctx.orgId) prefixes.push(`o:${ctx.orgId}:`);
+  if (prefixes.length === 0) return {};
+  const scoped: Record<string, Record<string, unknown>> = {};
+  for (const entries of await Promise.all(
+    prefixes.map((prefix) => listSettingsByPrefix(prefix)),
+  )) {
+    for (const { key, value } of entries) scoped[key] = value;
+  }
+  return scoped;
+}
+
 const SQL_PREFIX = "sql-dashboard-";
 const EXPLORER_PREFIX = "dashboard-";
 
@@ -666,7 +693,7 @@ export async function listDashboards(
   // entirely when the caller wants archived-only or hidden-only records.
   if (archived === "archived" || hidden === "hidden") return out;
   try {
-    const all = await getAllSettings();
+    const all = await getScopedLegacySettings(ctx);
     for (const [key, value] of Object.entries(all)) {
       let id: string | null = null;
       let kind: DashboardKind | null = null;
@@ -814,7 +841,7 @@ export async function listDashboardSummaries(
 
   if (archived === "archived" || hidden === "hidden") return out;
   try {
-    const all = await getAllSettings();
+    const all = await getScopedLegacySettings(ctx);
     for (const [key, value] of Object.entries(all)) {
       let id: string | null = null;
       let kind: DashboardKind | null = null;
@@ -962,7 +989,7 @@ export async function searchDashboardReferences(
   const seen = new Set(
     ranked.map(({ record }) => `${record.kind}:${record.id}`),
   );
-  const allSettings = await getAllSettings();
+  const allSettings = await getScopedLegacySettings(ctx);
   for (const [key, value] of Object.entries(allSettings)) {
     const scope = legacyDashboardReferenceScope(key, ctx);
     if (
@@ -2040,7 +2067,7 @@ export async function listAnalyses(
   // the legacy scan entirely.
   if (hidden === "hidden") return out;
   try {
-    const all = await getAllSettings();
+    const all = await getScopedLegacySettings(ctx);
     for (const [key, value] of Object.entries(all)) {
       let id: string | null = null;
       let ownerEmail = ctx.email;

package/corpus/templates/analytics/server/lib/scoped-settings.ts

@@ -11,6 +11,7 @@ import {
   getOrgSetting,
   getUserSetting,
   listOrgSettings,
+  listSettingsByPrefix,
   putOrgSetting,
   putUserSetting,
 } from "@agent-native/core/settings";
@@ -35,11 +36,9 @@ async function listUserSettings(
   email: string,
   prefix: string,
 ): Promise<Record<string, Record<string, unknown>>> {
-  const all = await getAllSettings();
   const scopedPrefix = `${userPrefix(email)}${prefix}`;
   const out: Record<string, Record<string, unknown>> = {};
-  for (const [key, value] of Object.entries(all)) {
-    if (!key.startsWith(scopedPrefix)) continue;
+  for (const { key, value } of await listSettingsByPrefix(scopedPrefix)) {
     out[key.slice(userPrefix(email).length)] = value;
   }
   return out;

package/corpus/templates/calendar/app/root.tsx

@@ -5,6 +5,7 @@ import {
   createAgentNativeQueryClient,
   useDbSync,
 } from "@agent-native/core/client/hooks";
+import { isEmbedAuthActive } from "@agent-native/core/client/host";
 import {
   getLocaleInitScript,
   type LocaleCode,
@@ -278,6 +279,7 @@ export default function Root() {
       <AppProviders
         queryClient={queryClient}
         isPublicPath={isPublicPath}
+        sessionBypass={isEmbedAuthActive()}
         clientOnlyFallback={<DefaultSpinner />}
         toaster={<Toaster richColors position="bottom-center" />}
         i18n={{

package/corpus/templates/clips/desktop/src/app.tsx

@@ -67,7 +67,6 @@ import {
   startBubbleWebrtc,
   type BubbleWebrtcHandle,
 } from "./lib/bubble-webrtc";
-import { openBoundOAuthWindow } from "./lib/desktop-oauth-window";
 import {
   getCameraStreamWithFallback,
   isMediaConstraintFailure,
@@ -2127,17 +2126,15 @@ export function App() {
     void tick();
   }
 
-  // Google verification stays in a child of the bound Tauri WebView so the
-  // callback sees the same browser-binding cookie. Magic-link verification
-  // still completes in the system browser through its own exchange flow.
+  // Google verification opens in the system browser so the user's Google
+  // cookies are available. The client-held verifier still gates the exchange
+  // back into this Tauri app.
   async function signInExternal() {
     if (signInInflightRef.current) return;
     signInInflightRef.current = true;
-    let oauthWindow: ReturnType<typeof openBoundOAuthWindow> | null = null;
 
     try {
       setSignInError(null);
-      oauthWindow = openBoundOAuthWindow();
       const flowId = crypto.randomUUID?.() ?? null;
       const verifier = (() => {
         const randomUuid = crypto.randomUUID;
@@ -2196,12 +2193,11 @@ export function App() {
               : "Could not start Google sign-in.";
         throw new Error(message);
       }
-      oauthWindow.location.href = authPayload.url;
+      await openExternal(authPayload.url);
       setSignInPending("google");
       startDesktopAuthExchange(flowId, "google", verifier);
     } catch (err) {
       console.error("[clips-tray] signInExternal failed:", err);
-      oauthWindow?.close();
       signInInflightRef.current = false;
       setSignInPending(null);
       setSignInError(

package/corpus/templates/clips/server/routes/_agent-native/google/auth-url.get.ts

@@ -64,6 +64,7 @@ export default defineEventHandler(async (event: H3Event) => {
     }
     const calendarConnect =
       q.calendar === "1" || q.calendar === "true" || q.product === "calendar";
+    const desktopWebview = desktop && q.webview === "1" && !calendarConnect;
     let desktopVerifierHash: string | undefined;
     let desktopBrowserBindingHash: string | undefined;
     if (flowId && !calendarConnect) {
@@ -77,12 +78,20 @@ export default defineEventHandler(async (event: H3Event) => {
         return { error: "Invalid desktop exchange challenge." };
       }
       try {
-        desktopBrowserBindingHash = prepareDesktopOAuthBrowserBinding(event);
-        desktopVerifierHash = await registerDesktopExchange(
-          flowId,
-          verifier,
-          desktopBrowserBindingHash,
-        );
+        // The system-browser flow deliberately uses the user's existing
+        // Google cookies. The client-held verifier still gates the exchange
+        // token returned to the initiating Tauri app. Only an in-app WebView
+        // needs the additional browser-partition binding.
+        if (desktopWebview) {
+          desktopBrowserBindingHash = prepareDesktopOAuthBrowserBinding(event);
+          desktopVerifierHash = await registerDesktopExchange(
+            flowId,
+            verifier,
+            desktopBrowserBindingHash,
+          );
+        } else {
+          desktopVerifierHash = await registerDesktopExchange(flowId, verifier);
+        }
       } catch {
         setResponseStatus(event, 400);
         return { error: "Invalid desktop exchange challenge." };
@@ -116,13 +125,10 @@ export default defineEventHandler(async (event: H3Event) => {
       redirectUri,
       owner,
       desktop,
-      desktopWebview: desktop && q.webview === "1" && !calendarConnect,
+      desktopWebview,
       addAccount: calendarConnect,
       app: CLIPS_GOOGLE_OAUTH_APP_ID,
-      returnUrl:
-        desktop && q.webview === "1" && !calendarConnect
-          ? "/?desktop_auth=complete"
-          : returnUrl,
+      returnUrl: desktopWebview ? "/?desktop_auth=complete" : returnUrl,
       flowId: calendarConnect ? undefined : flowId,
       desktopVerifierHash,
       desktopBrowserBindingHash,

package/corpus/templates/clips/server/routes/_agent-native/google/callback.get.ts

@@ -35,11 +35,12 @@ async function handleGoogleSignInCallback(
   if (
     flowId &&
     (!state.desktopVerifierHash ||
-      !state.desktopBrowserBindingHash ||
-      !matchesDesktopOAuthBrowserBinding(
-        event,
-        state.desktopBrowserBindingHash,
-      ))
+      (state.desktopWebview &&
+        (!state.desktopBrowserBindingHash ||
+          !matchesDesktopOAuthBrowserBinding(
+            event,
+            state.desktopBrowserBindingHash,
+          ))))
   ) {
     return oauthErrorPage("Desktop OAuth browser binding is invalid.");
   }

package/corpus/templates/design/app/root.tsx

@@ -7,7 +7,10 @@ import {
   getBrowserTabId,
   useSession,
 } from "@agent-native/core/client/hooks";
-import { setAgentNativeApiDisabled } from "@agent-native/core/client/host";
+import {
+  isEmbedAuthActive,
+  setAgentNativeApiDisabled,
+} from "@agent-native/core/client/host";
 import { getLocaleInitScript, useT } from "@agent-native/core/client/i18n";
 import {
   CommandMenu,
@@ -230,6 +233,7 @@ export default function Root() {
       <AppProviders
         queryClient={queryClient}
         isPublicPath={isPublicPath}
+        sessionBypass={isEmbedAuthActive()}
         i18n={{ catalog: i18nCatalog, persistPreference: !isPublicPath }}
         toaster={<DesignToaster />}
       >

package/dist/app-config/store.d.ts

@@ -8,6 +8,14 @@ import { type AppConfig, type AppConfigInput } from "./schema.js";
  */
 declare const LAYER_ORDER: readonly ["env", "legacy", "app"];
 export type AppConfigLayer = (typeof LAYER_ORDER)[number];
+/**
+ * Nitro embeds build-only deployment markers into direct env reads. Netlify's
+ * prebuilt beta lane has those markers while building, but does not copy them
+ * into the deployed Function environment. Keep the embedded values as the
+ * fallback for this one config boundary so a later dynamic `env[key]` read
+ * cannot erase the build decision from the server bundle.
+ */
+export declare function readConfigEnvironment(embedded?: Record<string, string | undefined>): Record<string, string | undefined>;
 /**
  * Writes one layer of the ladder. Framework-internal: the deprecated setters
  * use it to keep working without reintroducing a second namespace.

package/dist/app-config/store.js

@@ -48,6 +48,24 @@ function resolve(envLayer) {
     }
     return appConfigSchema.parse(merged);
 }
+/**
+ * Nitro embeds build-only deployment markers into direct env reads. Netlify's
+ * prebuilt beta lane has those markers while building, but does not copy them
+ * into the deployed Function environment. Keep the embedded values as the
+ * fallback for this one config boundary so a later dynamic `env[key]` read
+ * cannot erase the build decision from the server bundle.
+ */
+export function readConfigEnvironment(embedded = {
+    AGENT_NATIVE_RELEASE_MIGRATIONS: process.env.AGENT_NATIVE_RELEASE_MIGRATIONS,
+    AGENT_NATIVE_BETA_SCHEMA_OWNER: process.env.AGENT_NATIVE_BETA_SCHEMA_OWNER,
+}) {
+    const env = { ...process.env };
+    for (const [key, value] of Object.entries(embedded)) {
+        if (!env[key] && value)
+            env[key] = value;
+    }
+    return env;
+}
 /**
  * Writes one layer of the ladder. Framework-internal: the deprecated setters
  * use it to keep working without reintroducing a second namespace.
@@ -84,7 +102,7 @@ export function defineAppConfig(config) {
  * remove.
  */
 export function getAppConfig() {
-    const envLayer = readEnvConfigLayer(appConfigSchema, process.env);
+    const envLayer = readEnvConfigLayer(appConfigSchema, readConfigEnvironment());
     const signature = JSON.stringify(envLayer);
     if (state.resolved && state.envSignature === signature)
         return state.resolved;

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/file-upload/actions/upload-image.d.ts

@@ -17,11 +17,11 @@ declare const _default: import("../../action.js").ActionDefinition<{
     id?: undefined;
     provider?: undefined;
 } | {
+    error?: undefined;
     configured?: undefined;
     connectPath?: undefined;
     url: string;
     id: string;
     provider: string;
-    error?: undefined;
 }>;
 export default _default;

package/dist/notifications/routes.d.ts

@@ -28,6 +28,6 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;

package/dist/server/agent-engine-api-key-route.d.ts

@@ -27,10 +27,10 @@ export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scop
 export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: any;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
-    error?: undefined;
 }>>;
 export {};

package/dist/settings/index.d.ts

@@ -1,4 +1,4 @@
-export { getSetting, mutateSetting, putSetting, deleteSetting, deleteSettingIfValue, getAllSettings, getSettingsEmitter, type StoreWriteOptions, } from "./store.js";
+export { getSetting, mutateSetting, putSetting, deleteSetting, deleteSettingIfValue, getAllSettings, listSettingsByPrefix, getSettingsEmitter, type StoreWriteOptions, } from "./store.js";
 export { getSettingHandler, putSettingHandler, deleteSettingHandler, } from "./handlers.js";
 export { readSetting, writeSetting, removeSetting } from "./script-helpers.js";
 export { getUserSetting, putUserSetting, deleteUserSetting, } from "./user-settings.js";

package/dist/settings/index.js

@@ -1,5 +1,5 @@
 // Store
-export { getSetting, mutateSetting, putSetting, deleteSetting, deleteSettingIfValue, getAllSettings, getSettingsEmitter, } from "./store.js";
+export { getSetting, mutateSetting, putSetting, deleteSetting, deleteSettingIfValue, getAllSettings, listSettingsByPrefix, getSettingsEmitter, } from "./store.js";
 // H3 route handlers
 export { getSettingHandler, putSettingHandler, deleteSettingHandler, } from "./handlers.js";
 // Script helpers

package/dist/settings/org-settings.js

@@ -7,7 +7,7 @@
  * No global fallback — each org starts with a clean slate. This
  * prevents one org's data from leaking to another.
  */
-import { getSetting, mutateSetting, putSetting, deleteSetting, deleteSettingsByPrefix, getAllSettings, } from "./store.js";
+import { getSetting, mutateSetting, putSetting, deleteSetting, deleteSettingsByPrefix, listSettingsByPrefix, } from "./store.js";
 function orgKey(orgId, key) {
     return `o:${orgId}:${key}`;
 }
@@ -37,9 +37,13 @@ export async function deleteAllOrgSettings(orgId, options) {
  * Returns a map of `<key>` (without the org prefix) to value.
  */
 export async function listOrgSettings(orgId, subPrefix) {
-    const all = await getAllSettings();
+    // Narrow in SQL, then apply the same checks as before. Reading this with
+    // `getAllSettings()` pulled and JSON-parsed every org's rows into the caller
+    // to keep one org's, putting the whole deployment's settings table on the
+    // critical path of any org-scoped list read.
+    const scoped = await listSettingsByPrefix(`o:${orgId}:${subPrefix ?? ""}`);
     const out = {};
-    for (const [fullKey, value] of Object.entries(all)) {
+    for (const { key: fullKey, value } of scoped) {
         const m = ORG_PREFIX_RE.exec(fullKey);
         if (!m || m[1] !== orgId)
             continue;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.168.2",
+  "version": "0.168.3",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {