@agent-native/core 0.198.3 → 0.198.5

package/dist/server/core-routes-plugin.js

@@ -1476,22 +1476,37 @@ export async function resolveOAuthCustodyBuilderKeyStatus(dependencies = {
     }
 }
 const OAUTH_POPUP_WAITING_HTML = '<!doctype html><html><head><meta charset="utf-8"><meta name="color-scheme" content="light dark"><title></title></head><body></body></html>';
+const OAUTH_POPUP_COMPLETE_HTML = '<!doctype html><html><head><meta charset="utf-8"><title></title></head><body><script>window.opener?.postMessage({type:"agent-native:workspace-connection-complete"},window.location.origin);window.close();</script></body></html>';
+const OAUTH_POPUP_RESUME_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+function oauthPopupCompletionHtml(completionId) {
+    const storageKey = `agent-native:mcp-connection-completion:${completionId}`;
+    return `<!doctype html><html><head><meta charset="utf-8"><title></title></head><body><script>try{localStorage.setItem("${storageKey}","1")}catch(error){console.error("Could not persist OAuth completion",error)}window.opener?.postMessage({type:"agent-native:workspace-connection-complete",completionId:"${completionId}"},window.location.origin);window.close();</script></body></html>`;
+}
 export function createOAuthPopupWaitingHandler() {
     return defineEventHandler((event) => {
         if (getMethod(event) !== "GET") {
             setResponseStatus(event, 405);
             return { error: "Method not allowed" };
         }
+        const completingWorkspaceConnection = getRequestURL(event).searchParams.get("complete") ===
+            "workspace-connection";
+        const resumeId = getRequestURL(event).searchParams.get("resume");
         setResponseHeader(event, "Content-Type", "text/html; charset=utf-8");
-        setResponseHeader(event, "Cache-Control", "public, max-age=300");
-        setResponseHeader(event, "Content-Security-Policy", "default-src 'none'; frame-ancestors 'none'");
+        setResponseHeader(event, "Cache-Control", completingWorkspaceConnection ? "no-store" : "public, max-age=300");
+        setResponseHeader(event, "Content-Security-Policy", completingWorkspaceConnection
+            ? "default-src 'none'; script-src 'unsafe-inline'; frame-ancestors 'none'"
+            : "default-src 'none'; frame-ancestors 'none'");
         setResponseHeader(event, "X-Frame-Options", "DENY");
         // Keep the opener alive until the client replaces this inert page with the
         // provider URL. This only works while every opener document sends no COOP
         // or `same-origin-allow-popups` (security-headers.ts); an opener sending
         // `same-origin` severs the popup here and leaves it blank.
         setResponseHeader(event, "Cross-Origin-Opener-Policy", "unsafe-none");
-        return OAUTH_POPUP_WAITING_HTML;
+        return completingWorkspaceConnection
+            ? resumeId && OAUTH_POPUP_RESUME_ID.test(resumeId)
+                ? oauthPopupCompletionHtml(resumeId)
+                : OAUTH_POPUP_COMPLETE_HTML
+            : OAUTH_POPUP_WAITING_HTML;
     });
 }
 export function mountApplicationStateRoutes(nitroApp, routePrefix = FRAMEWORK_ROUTE_PREFIX, app = getH3App(nitroApp), options = {}) {

package/dist/server/index.d.ts

@@ -90,7 +90,7 @@ export { GEMINI_API_KEY, LEGACY_GEMINI_API_KEY, canonicalSecretKey, readGeminiDe
 export { SERVICE_IDS, SERVICE_PROVIDERS_SETTING_KEY, SERVICE_PROVIDER_KEYS, SERVICE_PROVIDER_OPTIONS, isServiceProviderOption, readServiceProviderChoice, readServiceProviderSettings, serviceProviderOrder, writeServiceProviderChoice, type ServiceId, type ServiceProviderChoices, type ServiceProviderId, type ServiceProviderSettings, } from "./service-providers.js";
 export { getInfrastructureStatus, type InfrastructureApp, type InfrastructureDatabase, type InfrastructureDatabaseProvider, type InfrastructureHosting, type InfrastructureSetupTag, type InfrastructureSetupTags, type InfrastructureStatus, type InfrastructureVariable, type InfrastructureVariableKey, } from "./infrastructure-status.js";
 export { resolveDeployPlatform, type DeployPlatform, } from "./deploy-environment.js";
-export { BUILDER_PUBLISH_MCP_RESOURCE, canAuthorizeBuilderApiRequest, hasBuilderApiCredentialCustody, resolveBuilderApiAuthorization, resolveBuilderRequestAuthorization, type BuilderLegacyCredentialKey, type BuilderRequestAuthorization, } from "./builder-api-auth.js";
+export { BUILDER_PUBLISH_MCP_RESOURCE, canAuthorizeBuilderApiRequest, hasBuilderApiCredentialCustody, resolveBuilderApiAuthorization, resolveBuilderLegacyRequestAuthorization, resolveBuilderRequestAuthorization, type BuilderLegacyCredentialKey, type BuilderRequestAuthorization, } from "./builder-api-auth.js";
 export { BUILDER_ASSETS_WRITE_SCOPE, BUILDER_OAUTH_SCOPE, type BuilderOAuthPermissionScope, } from "./builder-oauth.js";
 export { assertBuilderDesignSystemCodeIndexingAllowed, builderDesignSystemUrl, builderProjectBranchUrl, buildBuilderDesignSystemIndexFiles, collectBuilderDesignSystemGitHubFiles, createBuilderDesignSystemProxyFields, designSystemTierUpgradeUrl, fetchBuilderDesignSystemDecodeJobStatus, fetchBuilderDesignSystemDocs, fetchBuilderDesignSystemDocumentCount, fetchBuilderDesignSystemRecord, fetchBuilderDesignSystemTierLimit, getBuilderDesignSystemsBaseUrl, hydrateBuilderDesignSystemReference, indexBuilderDesignSystem, isBuilderDesignSystemReadyByCount, localBuilderDesignSystemId, mimeTypeForBuilderDesignSystemFilename, parseBuilderDesignSystemProxyReference, startBuilderDesignSystemIndex, startBuilderDesignSystemUpload, type BuildBuilderDesignSystemIndexFilesOptions, type BuilderDesignSystemCodeFileInput, type BuilderDesignSystemDecodeJobStatus, type BuilderDesignSystemDocsOptions, type BuilderDesignSystemDocument, type BuilderDesignSystemDocumentCountResult, type BuilderDesignSystemHydratedReference, type BuilderDesignSystemIndexFile, type BuilderDesignSystemIndexFromSourcesOptions, type BuilderDesignSystemIndexOptions, type BuilderDesignSystemIndexResult, type BuilderDesignSystemRecord, type BuilderDesignSystemStatus, type BuilderDesignSystemTierLimit, type BuilderDesignSystemGitHubFile, type BuilderDesignSystemGitHubFileCollection, type BuilderDesignSystemGitHubSource, type BuilderDesignSystemUploadAttachment, type BuilderDesignSystemUploadSlot, type BuilderDesignSystemProxyFields, type BuilderDesignSystemProxyFieldsOptions, type BuilderDesignSystemProxyReference, type BuilderDesignSystemSourceKind, } from "./builder-design-systems.js";
 export { cdnSafeOriginStatus, createBuilderProject, ensureBuilderProject, findBuilderProjectForRepo, getBuilderBranchProjectId, isBuilderBranchingEnabled, requestBuilderBrowserConnection, resolveBuilderBranchProjectId, resolveIsBuilderBranchingEnabled, runBuilderAgent, type BuilderAgentAttachment, type BuilderAgentUploadAttachment, type BuilderAgentUrlAttachment, type BuilderProjectResult, type RunBuilderAgentResult, } from "./builder-browser.js";

package/dist/server/index.js

@@ -85,7 +85,7 @@ export { GEMINI_API_KEY, LEGACY_GEMINI_API_KEY, canonicalSecretKey, readGeminiDe
 export { SERVICE_IDS, SERVICE_PROVIDERS_SETTING_KEY, SERVICE_PROVIDER_KEYS, SERVICE_PROVIDER_OPTIONS, isServiceProviderOption, readServiceProviderChoice, readServiceProviderSettings, serviceProviderOrder, writeServiceProviderChoice, } from "./service-providers.js";
 export { getInfrastructureStatus, } from "./infrastructure-status.js";
 export { resolveDeployPlatform, } from "./deploy-environment.js";
-export { BUILDER_PUBLISH_MCP_RESOURCE, canAuthorizeBuilderApiRequest, hasBuilderApiCredentialCustody, resolveBuilderApiAuthorization, resolveBuilderRequestAuthorization, } from "./builder-api-auth.js";
+export { BUILDER_PUBLISH_MCP_RESOURCE, canAuthorizeBuilderApiRequest, hasBuilderApiCredentialCustody, resolveBuilderApiAuthorization, resolveBuilderLegacyRequestAuthorization, resolveBuilderRequestAuthorization, } from "./builder-api-auth.js";
 export { BUILDER_ASSETS_WRITE_SCOPE, BUILDER_OAUTH_SCOPE, } from "./builder-oauth.js";
 export { assertBuilderDesignSystemCodeIndexingAllowed, builderDesignSystemUrl, builderProjectBranchUrl, buildBuilderDesignSystemIndexFiles, collectBuilderDesignSystemGitHubFiles, createBuilderDesignSystemProxyFields, designSystemTierUpgradeUrl, fetchBuilderDesignSystemDecodeJobStatus, fetchBuilderDesignSystemDocs, fetchBuilderDesignSystemDocumentCount, fetchBuilderDesignSystemRecord, fetchBuilderDesignSystemTierLimit, getBuilderDesignSystemsBaseUrl, hydrateBuilderDesignSystemReference, indexBuilderDesignSystem, isBuilderDesignSystemReadyByCount, localBuilderDesignSystemId, mimeTypeForBuilderDesignSystemFilename, parseBuilderDesignSystemProxyReference, startBuilderDesignSystemIndex, startBuilderDesignSystemUpload, } from "./builder-design-systems.js";
 export { cdnSafeOriginStatus, createBuilderProject, ensureBuilderProject, findBuilderProjectForRepo, getBuilderBranchProjectId, isBuilderBranchingEnabled, requestBuilderBrowserConnection, resolveBuilderBranchProjectId, resolveIsBuilderBranchingEnabled, runBuilderAgent, } from "./builder-browser.js";

package/dist/server/workspace-provider-oauth.d.ts

@@ -16,6 +16,7 @@ export interface WorkspaceProviderOAuthFlow {
     orgId?: string;
     appId: string;
     scope: WorkspaceProviderOAuthScope;
+    returnUrl?: string;
     salesforceLoginUrl?: string;
     expiresAt: number;
 }

package/dist/server/workspace-provider-oauth.js

@@ -69,6 +69,7 @@ function isWorkspaceProviderOAuthFlow(value) {
         typeof flow.appId === "string" &&
         flow.appId.length > 0 &&
         isWorkspaceProviderOAuthScope(flow.scope) &&
+        (flow.returnUrl === undefined || typeof flow.returnUrl === "string") &&
         (flow.salesforceLoginUrl === undefined ||
             typeof flow.salesforceLoginUrl === "string") &&
         typeof flow.expiresAt === "number" &&
@@ -168,7 +169,6 @@ export async function handleWorkspaceProviderOAuthStart(event, providerId) {
             app: appId,
             scope: orgContext.oauthScope,
             ...(useRootGoogleCallback ? { provider: providerId } : {}),
-            returnUrl,
             flowId,
         });
         const flow = {
@@ -180,6 +180,7 @@ export async function handleWorkspaceProviderOAuthStart(event, providerId) {
             orgId,
             appId,
             scope: orgContext.oauthScope,
+            ...(returnUrl ? { returnUrl } : {}),
             ...(salesforceLoginUrl ? { salesforceLoginUrl } : {}),
             expiresAt: Date.now() + FLOW_TTL_SECONDS * 1_000,
         };
@@ -338,7 +339,8 @@ export async function handleWorkspaceProviderOAuthCallback(event, providerId) {
                 config: connectionConfig,
             });
         }
-        const returnPath = state.returnUrl ??
+        const returnPath = flow.returnUrl ??
+            state.returnUrl ??
             `/settings/integrations?connected=${encodeURIComponent(providerId)}`;
         return redirectWithStagedCookies(event, getAppUrl(event, returnPath));
     });

package/dist/templates/chat/app/components/chat/ChatRouteContent.tsx

@@ -389,6 +389,10 @@ function ChatMcpConnectionRequest({
   return (
     <McpAgentKitConnectionRequestCard
       provider={request.provider}
+      reason={request.reason}
+      status={request.status}
+      appId={request.appId}
+      source={request.source}
       {...(request.detail ? { detail: request.detail } : {})}
       target={{ threadId, runId, requestId: request.id }}
       onConnected={() => resolve("connected")}
@@ -401,22 +405,11 @@ function ChatMcpConnectionRequest({
 function ChatMcpConnectionResume() {
   const { controller, threadId } = useAgentKit();
   const onResume = useCallback(
-    async (
-      target: { threadId: string; runId: string; requestId: string },
-      request: { message: string },
-    ) => {
-      try {
-        await controller.resolveConnectionRequest({
-          ...target,
-          response: { status: "connected" },
-        });
-      } catch {
-        await controller.sendMessage({
-          threadId: target.threadId,
-          text: request.message,
-        });
-      }
-    },
+    (target: { threadId: string; runId: string; requestId: string }) =>
+      controller.resolveConnectionRequest({
+        ...target,
+        response: { status: "connected" },
+      }),
     [controller],
   );
   const onMessageResume = useCallback(

package/dist/triggers/actions/manage-automation.d.ts

@@ -13,6 +13,8 @@ declare const _default: import("../../action.js").ActionDefinition<{
     executionEngine?: string;
     executionCwd?: string;
 }, {
+    deleted?: undefined;
+    enabled?: undefined;
     created: boolean;
     name: string;
     scope: "organization" | "personal";
@@ -23,33 +25,31 @@ declare const _default: import("../../action.js").ActionDefinition<{
     reasoningEffort: "auto" | "high" | "low" | "max" | "medium" | "minimal" | "none" | "xhigh";
     webhookPath: string;
     nextRun: string;
-    deleted?: undefined;
-    enabled?: undefined;
     executionHostId?: undefined;
     executionEngine?: undefined;
     executionCwd?: undefined;
 } | {
+    enabled?: undefined;
+    nextRun?: undefined;
     created?: undefined;
     scope?: undefined;
     triggerType?: undefined;
     event?: undefined;
     deleted: boolean;
     name: string;
-    enabled?: undefined;
     schedule?: undefined;
     timezone?: undefined;
     reasoningEffort?: undefined;
     executionHostId?: undefined;
     executionEngine?: undefined;
     executionCwd?: undefined;
-    nextRun?: undefined;
     webhookPath?: undefined;
 } | {
+    deleted?: undefined;
     created?: undefined;
     scope?: undefined;
     triggerType?: undefined;
     event?: undefined;
-    deleted?: undefined;
     name: string;
     enabled: boolean;
     schedule: string;

package/dist/vite/action-types-plugin.js

@@ -29,6 +29,10 @@ const CORE_SHARING_ACTIONS = [
         name: "get-labs",
         specifier: "@agent-native/core/labs/actions/get-labs",
     },
+    {
+        name: "get-lab-states",
+        specifier: "@agent-native/core/labs/actions/get-lab-states",
+    },
     {
         name: "set-lab",
         specifier: "@agent-native/core/labs/actions/set-lab",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.198.3",
+  "version": "0.198.5",
   "description": "The agentic application framework for building autonomous agents with intuitive UIs",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -252,6 +252,7 @@
     "./labs/registry": "./dist/labs/registry.js",
     "./labs/server": "./dist/labs/server.js",
     "./labs/actions/get-labs": "./dist/labs/actions/get-labs.js",
+    "./labs/actions/get-lab-states": "./dist/labs/actions/get-lab-states.js",
     "./labs/actions/set-lab": "./dist/labs/actions/set-lab.js",
     "./experiments": "./dist/experiments/index.js",
     "./experiments/registry": "./dist/experiments/registry.js",
@@ -275,6 +276,7 @@
     "./integrations/actions/list-messaging-channels": "./dist/integrations/actions/list-messaging-channels.js",
     "./integrations/actions/manage-messaging-channel": "./dist/integrations/actions/manage-messaging-channel.js",
     "./private-blob": "./dist/private-blob/index.js",
+    "./icon-assets": "./dist/icon-assets/index.js",
     "./agent/tool-result-images": "./dist/agent/tool-result-images.js",
     "./agent/context-xray/actions/context-manifest-get": "./dist/agent/context-xray/actions/context-manifest-get.js",
     "./agent/context-xray/actions/context-pin": "./dist/agent/context-xray/actions/context-pin.js",
@@ -640,6 +642,7 @@
     "dotenv": "^17.2.1",
     "drizzle-orm": "^0.45.2",
     "esbuild": "^0.28.1",
+    "fast-xml-parser": "5.11.1",
     "h3": "^2.0.1-rc.20",
     "i18next": "26.3.1",
     "ink": "6.8.0",
@@ -659,8 +662,8 @@
     "yaml": "^2.9.0",
     "yjs": "^13.6.33",
     "zod": "^4.3.6",
-    "@agent-native/agentkit": "^0.198.3",
-    "@agent-native/recap-cli": "^0.5.53"
+    "@agent-native/agentkit": "^0.198.5",
+    "@agent-native/recap-cli": "^0.5.55"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",
@@ -710,7 +713,6 @@
     "botframework-connector": "^4.23.3",
     "drizzle-kit": "^0.31.10",
     "express": "^5.2.1",
-    "fast-xml-parser": "^5.10.1",
     "jszip": "^3.10.1",
     "mammoth": "^1.12.0",
     "mermaid": "11.15.0",
@@ -721,7 +723,7 @@
     "prettier": "^3.8.3",
     "react": "19.2.7",
     "react-dom": "^19.2.7",
-    "react-router": "^8.1.0",
+    "react-router": "8.1.0",
     "sharp": "^0.35.3",
     "tailwindcss": "^4.2.4",
     "ts-morph": "^28.0.0",
@@ -762,7 +764,6 @@
     "ai-sdk-ollama": ">=3",
     "botframework-connector": "^4.23.3",
     "drizzle-kit": ">=0.31",
-    "fast-xml-parser": "^5.10.1",
     "jszip": "^3.10.1",
     "mammoth": "^1.12.0",
     "node-pty": ">=1",
@@ -872,9 +873,6 @@
     "drizzle-kit": {
       "optional": true
     },
-    "fast-xml-parser": {
-      "optional": true
-    },
     "jszip": {
       "optional": true
     },

package/src/templates/chat/app/components/chat/ChatRouteContent.tsx

@@ -389,6 +389,10 @@ function ChatMcpConnectionRequest({
   return (
     <McpAgentKitConnectionRequestCard
       provider={request.provider}
+      reason={request.reason}
+      status={request.status}
+      appId={request.appId}
+      source={request.source}
       {...(request.detail ? { detail: request.detail } : {})}
       target={{ threadId, runId, requestId: request.id }}
       onConnected={() => resolve("connected")}
@@ -401,22 +405,11 @@ function ChatMcpConnectionRequest({
 function ChatMcpConnectionResume() {
   const { controller, threadId } = useAgentKit();
   const onResume = useCallback(
-    async (
-      target: { threadId: string; runId: string; requestId: string },
-      request: { message: string },
-    ) => {
-      try {
-        await controller.resolveConnectionRequest({
-          ...target,
-          response: { status: "connected" },
-        });
-      } catch {
-        await controller.sendMessage({
-          threadId: target.threadId,
-          text: request.message,
-        });
-      }
-    },
+    (target: { threadId: string; runId: string; requestId: string }) =>
+      controller.resolveConnectionRequest({
+        ...target,
+        response: { status: "connected" },
+      }),
     [controller],
   );
   const onMessageResume = useCallback(