@agent-native/core 0.175.1 → 0.175.2-nightly-20260826150235

package/dist/client/embed-auth.js

@@ -291,8 +291,10 @@ function isOpaqueOriginFrame(win) {
 function stripTokenFromUrl(win) {
     // Keep the token in the URL for opaque-origin frames — see
     // isOpaqueOriginFrame. Stripping it there breaks re-auth on any document
-    // reload. Referrer-Policy is set to no-referrer on embed responses, so the
-    // retained token does not leak via the Referer header.
+    // reload. Embed responses now use Referrer-Policy: same-origin, but that
+    // never leaks the retained token here: an opaque origin never equals any
+    // other origin (including its own), so "same-origin" requests from this
+    // document never qualify and no Referer is sent at all.
     if (isOpaqueOriginFrame(win))
         return;
     try {

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/observability/routes.d.ts

@@ -62,6 +62,6 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/server/embed-session.js

@@ -761,7 +761,7 @@ export async function resolveEmbedSessionFromRequest(event) {
         if (candidate.source === "query" && candidate.token) {
             try {
                 setEmbedSessionCookie(event, candidate.token);
-                setResponseHeader(event, "Referrer-Policy", "no-referrer");
+                setResponseHeader(event, "Referrer-Policy", "same-origin");
             }
             catch {
                 // Some tests and edge runtimes expose read-only request shims. The

package/dist/server/realtime-token.d.ts

@@ -26,8 +26,8 @@ export declare function createRealtimeTokenHandler(): import("h3").EventHandlerW
     expiresAt?: undefined;
     ttlSeconds?: undefined;
 } | {
-    error?: undefined;
     token: string;
     expiresAt: string;
     ttlSeconds: number;
+    error?: undefined;
 }>>;

package/dist/server/security-headers.d.ts

@@ -19,6 +19,9 @@
  *   - `Referrer-Policy: strict-origin-when-cross-origin` — strips path/query
  *     from outbound Referer headers when the request crosses origin, so a
  *     public-share viewer's outbound link clicks never leak the share token.
+ *     Validated embed-session responses tighten this to `same-origin`, which
+ *     sends nothing cross-origin at all while keeping the same-origin Referer
+ *     that parent-vs-child app checks depend on.
  *   - `Permissions-Policy: camera=*, microphone=(self), geolocation=(),
  *     screen-wake-lock=()` — allows microphone access for composer dictation
  *     and camera access for media-capture UI (the Clips recorder, and the

package/dist/server/security-headers.js

@@ -19,6 +19,9 @@
  *   - `Referrer-Policy: strict-origin-when-cross-origin` — strips path/query
  *     from outbound Referer headers when the request crosses origin, so a
  *     public-share viewer's outbound link clicks never leak the share token.
+ *     Validated embed-session responses tighten this to `same-origin`, which
+ *     sends nothing cross-origin at all while keeping the same-origin Referer
+ *     that parent-vs-child app checks depend on.
  *   - `Permissions-Policy: camera=*, microphone=(self), geolocation=(),
  *     screen-wake-lock=()` — allows microphone access for composer dictation
  *     and camera access for media-capture UI (the Clips recorder, and the
@@ -112,7 +115,13 @@ export function createSecurityHeadersMiddleware() {
         const iframeNavigationRequest = isIframeNavigationRequest(event);
         const requestOrigin = getHeader(event, "origin");
         setResponseHeader(event, "X-Content-Type-Options", "nosniff");
-        setResponseHeader(event, "Referrer-Policy", embedFrameRequest ? "no-referrer" : "strict-origin-when-cross-origin");
+        setResponseHeader(event, "Referrer-Policy", 
+        /**
+         * Dispatch is served as an embed, and the parent page's path cannot be forged by a
+         * same-origin child app, so stripping it made minting an app session from Dispatch
+         * impossible.
+         */
+        embedFrameRequest ? "same-origin" : "strict-origin-when-cross-origin");
         setResponseHeader(event, "Permissions-Policy", PERMISSIONS_POLICY);
         setResponseHeader(event, "Cross-Origin-Opener-Policy", "same-origin");
         if (embedFrameRequest || iframeNavigationRequest) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.175.1",
+  "version": "0.175.2-nightly-20260826150235",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {