@agent-native/core 0.7.82 → 0.8.0

package/dist/server/core-routes-plugin.d.ts

@@ -5,6 +5,21 @@ import type { EnvKeyConfig } from "./create-server.js";
  * collisions with template-specific `/api/*` routes.
  */
 export declare const FRAMEWORK_ROUTE_PREFIX = "/_agent-native";
+/**
+ * Resolves the page-level legacy `/tools` → `/extensions` redirect target.
+ *
+ * Returns the absolute path (with optional query string) to redirect to,
+ * or `null` if the request should fall through to the SPA / next handler.
+ *
+ * Skips:
+ *   - Framework API namespace (`/_agent-native/tools/*` is handled separately
+ *     as a legacy alias and intentionally stays mounted as `tools`).
+ *   - Anything that isn't `/tools` or a `/tools/...` page navigation, after
+ *     the configured app base path is stripped off.
+ *
+ * Exported for tests; the runtime middleware below is a thin wrapper.
+ */
+export declare function resolveLegacyToolsRedirect(rawPath: string, search: string): string | null;
 type NitroPluginDef = (nitroApp: any) => void | Promise<void>;
 export interface CoreRoutesPluginOptions {
     /** Route path for the SSE endpoint. Default: "/_agent-native/events" */

package/dist/server/core-routes-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core-routes-plugin.d.ts","sourceRoot":"","sources":["../../src/server/core-routes-plugin.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAyEvD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AA6CvD,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9D,MAAM,WAAW,uBAAuB;IACtC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,oDAAoD;IACpD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,2DAA2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,qEAAqE;IACrE,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,GAAE,uBAA4B,GACpC,cAAc,CA0qDhB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,EAAE,cAAyC,CAAC"}
+{"version":3,"file":"core-routes-plugin.d.ts","sourceRoot":"","sources":["../../src/server/core-routes-plugin.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAyEvD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AAqCvD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,MAAM,GAAG,IAAI,CAWf;AAUD,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9D,MAAM,WAAW,uBAAuB;IACtC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,oDAAoD;IACpD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,2DAA2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,qEAAqE;IACrE,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,GAAE,uBAA4B,GACpC,cAAc,CAssDhB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,EAAE,cAAyC,CAAC"}

package/dist/server/core-routes-plugin.js

@@ -65,6 +65,31 @@ function stripAppBasePath(pathname) {
     }
     return pathname;
 }
+/**
+ * Resolves the page-level legacy `/tools` → `/extensions` redirect target.
+ *
+ * Returns the absolute path (with optional query string) to redirect to,
+ * or `null` if the request should fall through to the SPA / next handler.
+ *
+ * Skips:
+ *   - Framework API namespace (`/_agent-native/tools/*` is handled separately
+ *     as a legacy alias and intentionally stays mounted as `tools`).
+ *   - Anything that isn't `/tools` or a `/tools/...` page navigation, after
+ *     the configured app base path is stripped off.
+ *
+ * Exported for tests; the runtime middleware below is a thin wrapper.
+ */
+export function resolveLegacyToolsRedirect(rawPath, search) {
+    if (rawPath === "/_agent-native" || rawPath.startsWith("/_agent-native/")) {
+        return null;
+    }
+    const pathname = stripAppBasePath(rawPath);
+    if (pathname !== "/tools" && !pathname.startsWith("/tools/"))
+        return null;
+    const suffix = pathname === "/tools" ? "" : pathname.slice("/tools".length);
+    const basePath = normalizeAppBasePath(process.env.VITE_APP_BASE_PATH || process.env.APP_BASE_PATH);
+    return `${basePath}/extensions${suffix}${search}`;
+}
 function redactValues(text, values) {
     let out = text;
     for (const value of values) {
@@ -201,9 +226,7 @@ export function createCoreRoutesPlugin(options = {}) {
                 String(event.node?.req?.url ?? event.path ?? "/").split("?")[0]);
             if (!pathname.startsWith(P) && !pathname.startsWith("/api/"))
                 return;
-            const reqHeaders = (event.node?.req?.headers ?? {});
-            const originRaw = reqHeaders["origin"];
-            const origin = Array.isArray(originRaw) ? originRaw[0] : originRaw;
+            const origin = getHeader(event, "origin");
             const method = getMethod(event);
             // Decide whether this origin is allowed. We never fall back to the
             // first allowlist entry — that previously echoed `Access-Control-
@@ -1265,22 +1288,51 @@ export function createCoreRoutesPlugin(options = {}) {
         // POST   /_agent-native/notifications/read-all
         // DELETE /_agent-native/notifications/:id
         getH3App(nitroApp).use(`${P}/notifications`, createNotificationsHandler());
-        // ─── Tools (mini-app runtime + proxy) ───────────────────────────────
+        // ─── Extensions (sandboxed mini-app runtime + proxy) ────────────────
         try {
-            const { ensureToolsTables, registerToolsShareable } = await import("../tools/store.js");
-            const { createToolsHandler } = await import("../tools/routes.js");
-            ensureToolsTables().catch(() => { });
-            registerToolsShareable();
-            getH3App(nitroApp).use(`${P}/tools`, createToolsHandler());
-            // Tool extension-point slots — sub-system of tools.
-            const { ensureSlotTables } = await import("../tools/slots/store.js");
-            const { createSlotsHandler } = await import("../tools/slots/routes.js");
+            const { ensureExtensionsTables, registerExtensionsShareable } = await import("../extensions/store.js");
+            const { createExtensionsHandler } = await import("../extensions/routes.js");
+            ensureExtensionsTables().catch(() => { });
+            registerExtensionsShareable();
+            const extensionsHandler = createExtensionsHandler();
+            getH3App(nitroApp).use(`${P}/extensions`, extensionsHandler);
+            // Legacy alias — the previous public API was /_agent-native/tools/*.
+            // Mounted in addition to /extensions/* so any deployed iframes mid-flight
+            // (or external integrations bookmarked the old path) keep working.
+            getH3App(nitroApp).use(`${P}/tools`, extensionsHandler);
+            // Extension-point slots — sub-system of extensions.
+            const { ensureSlotTables } = await import("../extensions/slots/store.js");
+            const { createSlotsHandler } = await import("../extensions/slots/routes.js");
             ensureSlotTables().catch(() => { });
             getH3App(nitroApp).use(`${P}/slots`, createSlotsHandler());
         }
         catch {
-            // Tools module not available — skip
+            // Extensions module not available — skip
         }
+        // ─── Page-level legacy redirect: /tools → /extensions ──────────────
+        // Catches direct browser navigation / bookmarks for the old page route
+        // (`/tools`, `/tools/:id`) and 302s to the renamed equivalent under
+        // `/extensions`. The framework API alias above (`/_agent-native/tools/*`)
+        // is intentionally untouched — it stays mounted in parallel.
+        //
+        // Mounted with no path so the helper can do its own base-path stripping
+        // (h3 mount-matching only allows base-path stripping for `/_agent-native`
+        // and `/.well-known`). Returns undefined to fall through for anything
+        // that isn't a `/tools` page navigation.
+        getH3App(nitroApp).use(defineEventHandler((event) => {
+            const method = getMethod(event);
+            if (method !== "GET" && method !== "HEAD")
+                return;
+            const rawPath = event.url?.pathname ??
+                String(event.node?.req?.url ?? event.path ?? "/").split("?")[0];
+            const search = event.url?.search ?? "";
+            const target = resolveLegacyToolsRedirect(rawPath, search);
+            if (!target)
+                return;
+            setResponseStatus(event, 302);
+            setResponseHeader(event, "Location", target);
+            return "";
+        }));
         // ─── Agent run progress ───────────────────────────────────────────
         // GET    /_agent-native/runs[?active&limit]
         // GET    /_agent-native/runs/:id