@agent-native/core 0.32.1 → 0.32.17

package/dist/server/core-routes-plugin.js

@@ -47,7 +47,7 @@ import { isEnvVarWriteAllowed } from "./env-var-writes.js";
 import { llmConnectionTrackingProperties } from "../shared/llm-connection.js";
 import { mountBrowserSessionRoutes } from "../browser-sessions/routes.js";
 import { mountDbAdminRoutes } from "../db-admin/routes.js";
-import { DEFAULT_SSR_CACHE_CONTROL, EMPTY_SPECULATION_RULES, } from "../shared/cache-control.js";
+import { DEFAULT_SSR_CACHE_HEADERS, EMPTY_SPECULATION_RULES, } from "../shared/cache-control.js";
 /**
  * The base path prefix for all framework-level routes.
  * All agent-native core routes live under this namespace to avoid
@@ -55,6 +55,11 @@ import { DEFAULT_SSR_CACHE_CONTROL, EMPTY_SPECULATION_RULES, } from "../shared/c
  */
 export const FRAMEWORK_ROUTE_PREFIX = "/_agent-native";
 registerBuiltinEngines();
+function parseBuilderCallbackBoolean(value) {
+    if (value == null || value === "")
+        return null;
+    return /^(1|true)$/i.test(value);
+}
 const PROVIDER_ENV_VAR_KEYS = new Set(Object.values(PROVIDER_ENV_META).map(({ envVar }) => envVar));
 async function detectUsageEngineName(event, userEmail) {
     try {
@@ -486,9 +491,15 @@ export function createCoreRoutesPlugin(options = {}) {
                 // edge prefetch rules. Keep this route public and side-effect free:
                 // browsers may request it while parsing any SSR HTML document.
                 setResponseHeader(event, "content-type", "application/speculationrules+json; charset=utf-8");
-                setResponseHeader(event, "cache-control", DEFAULT_SSR_CACHE_CONTROL);
+                for (const [name, value] of Object.entries(DEFAULT_SSR_CACHE_HEADERS)) {
+                    setResponseHeader(event, name, value);
+                }
                 return EMPTY_SPECULATION_RULES;
             }));
+            {
+                const { createAgentNativeOgImageHandler } = await import("./social-og-image.js");
+                getH3App(nitroApp).use(`${P}/og-image.png`, createAgentNativeOgImageHandler());
+            }
             mountBrowserSessionRoutes(nitroApp, { routePrefix: P });
             // Dev-mode DB admin (Supabase-Studio-like). Mounted unconditionally; every
             // handler self-gates on dev + localhost (the authoritative gate lives in
@@ -565,6 +576,11 @@ export function createCoreRoutesPlugin(options = {}) {
                                     userId: undefined,
                                     orgName: undefined,
                                     orgKind: undefined,
+                                    subscription: undefined,
+                                    subscriptionLevel: undefined,
+                                    subscriptionName: undefined,
+                                    isEnterprise: undefined,
+                                    isFreeAccount: undefined,
                                     connectError: {
                                         message: errRow.message,
                                         at: typeof errRow.at === "number"
@@ -597,6 +613,11 @@ export function createCoreRoutesPlugin(options = {}) {
                                 userId: undefined,
                                 orgName: undefined,
                                 orgKind: undefined,
+                                subscription: undefined,
+                                subscriptionLevel: undefined,
+                                subscriptionName: undefined,
+                                isEnterprise: undefined,
+                                isFreeAccount: undefined,
                                 credentialSource: credentialSource ?? undefined,
                                 // Surface durable credential rejection separately from
                                 // one-shot cli-auth callback failures. The reconnect UI keeps
@@ -618,6 +639,15 @@ export function createCoreRoutesPlugin(options = {}) {
                                 userId: creds.userId || envStatus.userId,
                                 orgName: creds.orgName || envStatus.orgName,
                                 orgKind: creds.orgKind || envStatus.orgKind,
+                                subscription: creds.subscription || envStatus.subscription || undefined,
+                                subscriptionLevel: creds.subscriptionLevel ||
+                                    envStatus.subscriptionLevel ||
+                                    undefined,
+                                subscriptionName: creds.subscriptionName ||
+                                    envStatus.subscriptionName ||
+                                    undefined,
+                                isEnterprise: creds.isEnterprise ?? envStatus.isEnterprise ?? undefined,
+                                isFreeAccount: creds.isFreeAccount ?? envStatus.isFreeAccount ?? undefined,
                                 credentialSource: credentialSource ?? undefined,
                             });
                         }
@@ -637,6 +667,11 @@ export function createCoreRoutesPlugin(options = {}) {
                                 userId: undefined,
                                 orgName: undefined,
                                 orgKind: undefined,
+                                subscription: undefined,
+                                subscriptionLevel: undefined,
+                                subscriptionName: undefined,
+                                isEnterprise: undefined,
+                                isFreeAccount: undefined,
                             });
                         }
                     }
@@ -654,6 +689,11 @@ export function createCoreRoutesPlugin(options = {}) {
                         userId: undefined,
                         orgName: undefined,
                         orgKind: undefined,
+                        subscription: undefined,
+                        subscriptionLevel: undefined,
+                        subscriptionName: undefined,
+                        isEnterprise: undefined,
+                        isFreeAccount: undefined,
                     });
                 });
             }));
@@ -1082,6 +1122,11 @@ export function createCoreRoutesPlugin(options = {}) {
                 const userId = requestUrl.searchParams.get("user-id");
                 const orgName = requestUrl.searchParams.get("org-name");
                 const orgKind = requestUrl.searchParams.get("kind");
+                const subscription = requestUrl.searchParams.get("subscription");
+                const subscriptionLevel = requestUrl.searchParams.get("subscription-level");
+                const subscriptionName = requestUrl.searchParams.get("subscription-name");
+                const isEnterprise = parseBuilderCallbackBoolean(requestUrl.searchParams.get("is-enterprise"));
+                const isFreeAccount = parseBuilderCallbackBoolean(requestUrl.searchParams.get("is-free-account"));
                 // Store per-user in app_secrets so each user's Builder connection
                 // is independent. No more shared env vars that the last connector
                 // overwrites.
@@ -1115,7 +1160,18 @@ export function createCoreRoutesPlugin(options = {}) {
                             /* org module not present in this template — keep user scope */
                         }
                     }
-                    const target = await writeBuilderCredentials(ownerEmail, { privateKey, publicKey, userId, orgName, orgKind }, { orgId, role });
+                    const target = await writeBuilderCredentials(ownerEmail, {
+                        privateKey,
+                        publicKey,
+                        userId,
+                        orgName,
+                        orgKind,
+                        subscription,
+                        subscriptionLevel,
+                        subscriptionName,
+                        isEnterprise,
+                        isFreeAccount,
+                    }, { orgId, role });
                     console.log(`[builder-connect] wrote credentials email=${ownerEmail} requestOrgId=${orgId ?? "(none)"} role=${role ?? "(none)"} scope=${target.scope} scopeId=${target.scopeId}`);
                 }
                 catch (err) {
@@ -1170,6 +1226,11 @@ export function createCoreRoutesPlugin(options = {}) {
                     stage: "callback",
                     has_preview_url: Boolean(previewUrl),
                     org_kind: orgKind || undefined,
+                    subscription: subscription || undefined,
+                    subscription_level: subscriptionLevel || undefined,
+                    subscription_name: subscriptionName || undefined,
+                    is_enterprise: isEnterprise ?? undefined,
+                    is_free_account: isFreeAccount ?? undefined,
                 });
                 setResponseHeader(event, "Content-Type", "text/html; charset=utf-8");
                 // The parent (opener) is the original preview surface that started the
@@ -1661,7 +1722,7 @@ export function createCoreRoutesPlugin(options = {}) {
                     const { resolveBuilderPrivateKey } = await import("./credential-provider.js");
                     const resolve = () => resolveBuilderPrivateKey().then((k) => !!k);
                     builderConfigured = userEmail
-                        ? await runWithRequestContext({ userEmail }, resolve)
+                        ? await runWithRequestContext({ userEmail, orgId: session?.orgId }, resolve)
                         : await resolve();
                 }
                 catch {
@@ -1712,7 +1773,7 @@ export function createCoreRoutesPlugin(options = {}) {
                     return { error: "Unauthorized" };
                 }
                 const userEmail = session.email;
-                const result = await runWithRequestContext({ userEmail }, () => uploadFile({
+                const result = await runWithRequestContext({ userEmail, orgId: session.orgId }, () => uploadFile({
                     data: filePart.data,
                     filename: filePart.filename,
                     mimeType: filePart.type,