@agent-native/core 0.32.1 → 0.32.17

package/dist/templates/default/DEVELOPING.md

@@ -80,7 +80,8 @@ export default defineNitroPlugin(async (nitroApp) => {
 | `readSetting`, `writeSetting`                | Read/write settings (from `@agent-native/core/settings`)                   |
 | `readResource`, `writeResource`              | Read/write resources (from `@agent-native/core/resources`)                 |
 | `defineEventHandler`, `readBody`, `getQuery` | H3 route handler utilities (re-exported)                                   |
-| `sendToAgentChat`                            | Send messages to agent from UI (client-side)                               |
+| `sendToAgentChat`                            | Send or prefill messages in the agent chat from UI (client-side)           |
+| `setContextToAgentChat`                      | Stage keyed context chips for the next agent chat prompt from UI           |
 | `agentChat`                                  | Send messages to agent from scripts (server-side)                          |
 
 ## Adding a Script
@@ -101,6 +102,19 @@ sendToAgentChat({
 });
 ```
 
+To add hidden context without submitting or filling the prompt text, stage
+keyed context nuggets. Multiple nuggets stack; using the same `key` replaces the
+previous nugget.
+
+```ts
+import { setContextToAgentChat } from "@agent-native/core";
+setContextToAgentChat({
+  key: "selected-record",
+  title: "Selected Record",
+  context: JSON.stringify(record, null, 2),
+});
+```
+
 **From scripts:**
 
 ```ts

package/dist/templates/workspace-core/AGENTS.md

@@ -14,8 +14,10 @@ agent should know.
 - All AI/LLM behavior goes through the app's agent chat. UI and server code
   must not call model providers, AI SDK `generateText()` / `streamText()`, or
   other inline LLM APIs directly. Use `sendToAgentChat()` for local app-agent
-  work, and read `.agents/skills/delegate-to-agent/SKILL.md` before building
-  agent-driven UI or "AI" features.
+  work. When selected UI data should become hidden context for the user's next
+  prompt without submitting anything, use `setContextToAgentChat()` with a
+  stable `key`. Read `.agents/skills/delegate-to-agent/SKILL.md` before
+  building agent-driven UI or "AI" features.
 - Put shared code in `packages/shared` only when multiple apps need it.
 - Keep app-specific screens, actions, state, and skills inside `apps/<app>`.
 - Store shared runtime configuration in the workspace root `.env`; use
@@ -74,7 +76,9 @@ create `defineAction` files in `actions/`, mark reads with
 `http: { method: "GET" }`, and call them from React with `useActionQuery` /
 `useActionMutation`. Do not add duplicate JSON CRUD routes under `/api/*` for
 the same data unless the route is for uploads, streaming, webhooks, OAuth, or
-another route-only concern. Action-backed UI is what makes agent-created or
+another route-only concern. Do not add routes whose main job is to wrap,
+proxy, or re-export an action; the action endpoint already exists at
+`/_agent-native/actions/:name`. Action-backed UI is what makes agent-created or
 agent-edited records appear without a manual refresh.
 
 App database code must be provider-agnostic. Define schemas with

package/dist/templates/workspace-root/AGENTS.md

@@ -11,7 +11,9 @@ coding agents can discover the same workspace-wide guidance from the root.
 - All AI/LLM behavior goes through the app's agent chat. UI and server code
   must not call model providers, AI SDK `generateText()` / `streamText()`, or
   other inline LLM APIs directly. Use `sendToAgentChat()` for local app-agent
-  work, and read `packages/shared/.agents/skills/delegate-to-agent/SKILL.md`
+  work. When selected UI data should become hidden context for the user's next
+  prompt without submitting anything, use `setContextToAgentChat()` with a
+  stable `key`. Read `packages/shared/.agents/skills/delegate-to-agent/SKILL.md`
   before building agent-driven UI or "AI" features.
 
 ## Workspace Resources
@@ -101,8 +103,10 @@ coding agents can discover the same workspace-wide guidance from the root.
   `http: { method: "GET" }`, and call them from React with `useActionQuery` /
   `useActionMutation`. Do not add duplicate JSON CRUD routes under `/api/*`
   for the same data unless the route is for uploads, streaming, webhooks,
-  OAuth, or another route-only concern. Action-backed UI is what makes
-  agent-created or agent-edited records appear without a manual refresh.
+  OAuth, or another route-only concern. Do not add routes whose main job is to
+  wrap, proxy, or re-export an action; the action endpoint already exists at
+  `/_agent-native/actions/:name`. Action-backed UI is what makes agent-created
+  or agent-edited records appear without a manual refresh.
 - App database code must be provider-agnostic. Define schemas with
   `@agent-native/core/db/schema` helpers and write app reads/writes with
   Drizzle's query builder and portable `drizzle-orm` operators. Do not import

package/dist/vite/client.d.ts

@@ -1,4 +1,5 @@
 import type { UserConfig } from "vite";
+import { type AgentNativeRouteWarmupConfigInput } from "../shared/route-warmup-config.js";
 export interface NitroOptions {
     /** Nitro deployment preset (e.g. "node", "vercel", "netlify", "cloudflare_pages"). Default: "node" */
     preset?: string;
@@ -30,6 +31,18 @@ export interface ClientConfigOptions {
     fsDeny?: string[];
     /** Additional Vite optimizeDeps configuration */
     optimizeDeps?: NonNullable<UserConfig["optimizeDeps"]>;
+    /** Additional Vite define constants. */
+    define?: UserConfig["define"];
+    /**
+     * Framework route warmup behavior mounted by AgentSidebar.
+     *
+     * React Router's native prefetch warms both `.data` and JS, but its `.data`
+     * request uses browser link prefetch. Chrome sends `Sec-Purpose: prefetch`
+     * on those requests, which some production CDNs reject for dynamic `.data`
+     * URLs before our SWR cache headers can help. Agent-Native therefore uses
+     * ordinary fetches for `.data` and `modulepreload` for route JS by default.
+     */
+    routeWarmup?: AgentNativeRouteWarmupConfigInput;
     /**
      * Whether to auto-inject the Tailwind v4 Vite plugin (`@tailwindcss/vite`).
      * Defaults to true — set to `false` if a template wants to manage Tailwind

package/dist/vite/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/vite/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAU,UAAU,EAAE,MAAM,MAAM,CAAC;AAwa/C,MAAM,WAAW,YAAY;IAC3B,sGAAsG;IACtG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,YAAY,CAAC,EAAE,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9E,oGAAoG;IACpG,QAAQ,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IAClC,8BAA8B;IAC9B,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAChB,iDAAiD;IACjD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,iDAAiD;IACjD,YAAY,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;IACvD;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjD;AAsdD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,GAAG,SAAS,CAMpB;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,OAAO,CAWT;AA6KD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,UAAU,CAkQ1E"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/vite/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAU,UAAU,EAAE,MAAM,MAAM,CAAC;AAmB/C,OAAO,EAEL,KAAK,iCAAiC,EACvC,MAAM,kCAAkC,CAAC;AAuZ1C,MAAM,WAAW,YAAY;IAC3B,sGAAsG;IACtG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,YAAY,CAAC,EAAE,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9E,oGAAoG;IACpG,QAAQ,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IAClC,8BAA8B;IAC9B,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAChB,iDAAiD;IACjD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,iDAAiD;IACjD,YAAY,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;IACvD,wCAAwC;IACxC,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,iCAAiC,CAAC;IAChD;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjD;AA+dD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,GAAG,SAAS,CAMpB;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,OAAO,CAWT;AAoMD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,UAAU,CA4Q1E"}

package/dist/vite/client.js

@@ -8,7 +8,8 @@ import { findWorkspaceRoot } from "../scripts/utils.js";
 import { getViteDevRecoveryScript } from "../client/vite-dev-recovery-script.js";
 import { verifyEmbedSessionToken } from "../server/embed-session.js";
 import { EMBED_SESSION_COOKIE, EMBED_TOKEN_QUERY_PARAM, MCP_APP_CHAT_BRIDGE_QUERY_PARAM, } from "../shared/embed-auth.js";
-import { isMcpEmbedCorsOrigin, MCP_EMBED_CORS_ALLOW_HEADERS, MCP_EMBED_STATIC_ASSET_HEADERS, mcpEmbedStaticAssetRouteRules, } from "../shared/mcp-embed-headers.js";
+import { isMcpEmbedCorsOrigin, MCP_EMBED_CORS_ALLOW_HEADERS, MCP_EMBED_STATIC_ASSET_HEADERS, mcpEmbedStaticAssetRouteRules, shouldAllowMcpEmbedCredentials, } from "../shared/mcp-embed-headers.js";
+import { normalizeAgentNativeRouteWarmupConfig, } from "../shared/route-warmup-config.js";
 import { fileURLToPath } from "url";
 const require = createRequire(import.meta.url);
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
@@ -689,6 +690,15 @@ function embedDevFrameHeaders() {
                 if (isMcpEmbedCorsOrigin(origin)) {
                     res.setHeader("Access-Control-Allow-Origin", origin);
                     res.setHeader("Vary", "Origin");
+                    // The desktop app's dev origin (http://localhost:1420) also matches
+                    // here, and it logs in with `credentials: "include"`. A credentialed
+                    // request needs this header or the browser discards the response.
+                    // The OPTIONS short-circuit below means we can't rely on the real
+                    // auth handler to set it, so set it here too (production already does
+                    // the same).
+                    if (shouldAllowMcpEmbedCredentials(origin)) {
+                        res.setHeader("Access-Control-Allow-Credentials", "true");
+                    }
                     res.setHeader("Access-Control-Allow-Methods", "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS");
                     res.setHeader("Access-Control-Allow-Headers", MCP_EMBED_CORS_ALLOW_HEADERS);
                     for (const [name, value] of Object.entries(MCP_EMBED_STATIC_ASSET_HEADERS)) {
@@ -875,6 +885,22 @@ function portExposer() {
  * Vite's own connect pipeline.
  */
 function silenceConnectionResets() {
+    const isClosedWebStreamController = (err) => {
+        const e = err;
+        const code = e?.code || e?.cause?.code;
+        const message = [
+            String(e?.message ?? ""),
+            String(e?.cause?.message ?? ""),
+        ].join("\n");
+        const stack = [
+            String(e?.stack ?? ""),
+            String(e?.cause?.stack ?? ""),
+        ].join("\n");
+        return (code === "ERR_INVALID_STATE" &&
+            /Controller is already closed/i.test(message) &&
+            (!stack ||
+                /ReadableStreamDefaultController\.close|internal\/webstreams\/adapters|IncomingMessage\.onclose/.test(stack)));
+    };
     const isBenign = (err) => {
         const e = err;
         const code = e?.code || e?.cause?.code;
@@ -882,6 +908,7 @@ function silenceConnectionResets() {
         return (code === "ECONNRESET" ||
             code === "ECONNABORTED" ||
             code === "EPIPE" ||
+            isClosedWebStreamController(err) ||
             /^(read ECONNRESET|write ECONNRESET|socket hang up|aborted|write EPIPE)$/i.test(message));
     };
     const isBenignErrorPayload = (payload) => {
@@ -1024,6 +1051,14 @@ export function defineConfig(options = {}) {
         logLevel: options.logLevel ?? (isWorkspaceChild ? "warn" : undefined),
         envDir,
         base,
+        define: {
+            ...(options.define ?? {}),
+            // Framework route warmup controls how SSR `.data` routes are fetched:
+            // ordinary fetches keep them CDN-cacheable, while native prefetch headers
+            // can be refused before the CDN/origin sees the request. Keep this value
+            // authoritative even if app config provides its own `define` entries.
+            __AGENT_NATIVE_ROUTE_WARMUP_CONFIG__: JSON.stringify(normalizeAgentNativeRouteWarmupConfig(options.routeWarmup)),
+        },
         server: {
             host: "::",
             port: options.port ?? 8080,