@agent-native/core 0.72.3 → 0.73.0

package/corpus/README.md

@@ -28,4 +28,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 ## Generated Counts
 
 - core files: 1160
-- template files: 4008
+- template files: 4022

package/corpus/core/CHANGELOG.md

@@ -1,5 +1,43 @@
 # @agent-native/core
 
+## 0.73.0
+
+### Minor Changes
+
+- d684bbf: Durable background agent runs are now **on by default** for hosted apps. Previously the `AGENT_CHAT_DURABLE_BACKGROUND` flag was opt-in (off unless set truthy); it is now opt-out — unset means enabled, and an app disables it with an explicit falsy value (`AGENT_CHAT_DURABLE_BACKGROUND=false`).
+
+  The gate still composes with the existing guards, so a run only goes durable when the runtime is hosted/serverless **and** `A2A_SECRET` is configured — local dev and unconfigured apps stay on the synchronous inline path unchanged. Default-on uses the server-driven agnostic continuation path (verified in prod: long multi-step runs complete past the 40s soft-timeout with no thrash and no int4 overflow). The Netlify 15-min `-background` function emit (`isDurableBackgroundDeployEnabled`) remains opt-in until its path is separately verified.
+
+### Patch Changes
+
+- d684bbf: Clarify the Clips "agent-readable clips" docs so the "see and hear" promise is
+  accurate: frame-viewing works in any image-capable agent (ChatGPT, Claude Code,
+  Cursor, Codex, MCP-connected agents), while text-only web chats fall back to the
+  transcript and can take an uploaded frame. Verified empirically — ChatGPT fetches
+  the JPEG frame URLs and describes the screen; claude.ai's web chat reads the
+  transcript only. Docs-only copy change; the agent-context/frame APIs are
+  unchanged.
+- d684bbf: Add scaffold skill refresh commands for generated Agent Native apps and workspaces, plus public `@agent-native/skills` status/update forwarding.
+- d684bbf: Redesign the Google sign-in preflight notice on the onboarding/sign-in screen
+  to match the in-app connect popover: an amber warning-icon chip beside a bold
+  heading and muted body copy, with the close affordance moved to the top-right.
+  The `googleSignInNotice.body` already accepts a string array, so reassurance
+  like "It's safe to continue." now renders on its own line. The Continue /
+  Run-locally action buttons no longer wrap their labels (`white-space: nowrap`).
+  Purely presentational — the host-gating, Continue, and Run-locally behaviors are
+  unchanged.
+- d684bbf: Add a secondary hosted-app signup notice linking to the Agent-Native Terms and Privacy Policy.
+
+## 0.72.4
+
+### Patch Changes
+
+- 17b696f: Avoid credentialed cross-origin demo status checks from opaque embedded MCP app frames.
+- 17b696f: Mint a fresh MCP App embed session when cached host state contains an expired one-time embed ticket, and keep native MCP host shells alive so they can recover on refresh.
+- 17b696f: Handle asset picker selections from opaque MCP App parent frames and wait for native MCP host initialization before forwarding selected asset messages.
+- 17b696f: Inject per-request identity tokens for trusted first-party org-scoped remote MCP servers, preserving static headers for third-party remotes.
+- 17b696f: Bound MCP client connection and tools/list handshakes so stale org MCP servers do not stall dev-server startup after reloads.
+
 ## 0.72.3
 
 ### Patch Changes

package/corpus/core/docs/content/skills-guide.md

@@ -264,3 +264,17 @@ npx @agent-native/core@latest skills update visual-plan
 the copied folder hash to the latest bundled skill, and rewrites stale folders in
 place. Newly copied Agent Native skills include an `agent-native-skill.json`
 marker so future status output can identify the source and hash.
+
+Generated Agent Native apps and workspaces also include framework-provided
+skills under `.agents/skills` (or `packages/shared/.agents/skills` in a
+workspace). Refresh those scaffolded skills from the current/latest CLI with:
+
+```bash
+npm run skills:update
+# or, without relying on the local package script:
+npx @agent-native/core@latest skills update scaffold --project
+```
+
+`AGENTS.md` and `.agents/skills` stay canonical. The update command also repairs
+Claude compatibility links (`CLAUDE.md` and `.claude/skills`) so Claude Code sees
+the same instructions without maintaining a second copy.

package/corpus/core/docs/content/template-clips.md

@@ -15,7 +15,7 @@ A capture-everything app: screen recordings, meeting notes from your calendar, a
 }
 ```
 
-Think along the lines of Loom + Granola + Wispr Flow rolled into one app — but the agent is a first-class editor across every surface, and the recordings, meetings, and dictations are yours, not a SaaS vendor's. Clips also makes shared recordings agent-readable: paste a normal Clips share link into an agent, and it can "hear" the transcript and "see" timestamped frames even when the underlying model cannot ingest raw video or audio.
+Think along the lines of Loom + Granola + Wispr Flow rolled into one app — but the agent is a first-class editor across every surface, and the recordings, meetings, and dictations are yours, not a SaaS vendor's. Clips also makes shared recordings agent-readable: paste a normal Clips share link into an agent and it can "hear" the transcript as text and "see" timestamped screen frames as images — no raw video needed. Frame-viewing works in any image-capable agent (ChatGPT, Claude Code, Cursor, Codex); text-only web chats still get the full transcript and can take a frame you upload.
 
 ```an-diagram title="Capture, transcribe, reuse" summary="Three capture types land in one library; the agent transcribes, titles, and summarizes, then every transcript is searchable and shareable."
 {
@@ -69,6 +69,12 @@ a compact agent context URL, and that context points to the transcript and frame
 APIs, so models that only accept text or still images can still understand what
 happened in the recording.
 
+Any agent that can fetch an image URL into its vision — ChatGPT, Claude Code,
+Cursor, Codex, and MCP-connected agents — reads the transcript and sees the
+frames. A few text-only web chats read the transcript but won't pull frame images
+in on their own; there, upload a key frame or open the clip in an image-capable
+agent.
+
 | Endpoint                                          | What agents get                                                                                                |
 | ------------------------------------------------- | -------------------------------------------------------------------------------------------------------------- |
 | `/api/agent-context.json?id=<recordingId>`        | Clip metadata, transcript status, chapters, CTAs, recommended frames, and links to the transcript/frame APIs   |

package/corpus/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.72.3",
+  "version": "0.73.0",
   "type": "module",
   "engines": {
     "node": ">=22"
@@ -70,6 +70,11 @@
     "./client/observability": "./dist/client/observability/index.js",
     "./client/onboarding": "./dist/client/onboarding/index.js",
     "./client/settings/useBuilderStatus": "./dist/client/settings/useBuilderStatus.js",
+    "./embedding": "./dist/embedding/index.js",
+    "./embedding/agent": "./dist/embedding/agent.js",
+    "./embedding/bridge": "./dist/embedding/bridge.js",
+    "./embedding/protocol": "./dist/embedding/protocol.js",
+    "./embedding/react": "./dist/embedding/react.js",
     "./onboarding": "./dist/onboarding/index.js",
     "./shared": "./dist/shared/index.js",
     "./scripts": "./dist/scripts/index.js",
@@ -117,11 +122,6 @@
     "./router": "./dist/router/index.js",
     "./collab": "./dist/collab/index.js",
     "./a2a": "./dist/a2a/index.js",
-    "./embedding": "./dist/embedding/index.js",
-    "./embedding/react": "./dist/embedding/react.js",
-    "./embedding/bridge": "./dist/embedding/bridge.js",
-    "./embedding/agent": "./dist/embedding/agent.js",
-    "./embedding/protocol": "./dist/embedding/protocol.js",
     "./mcp": "./dist/mcp/index.js",
     "./mcp-client": "./dist/mcp-client/index.js",
     "./tracking": "./dist/tracking/index.js",

package/corpus/core/src/a2a/client.ts

@@ -43,6 +43,7 @@ export async function signA2AToken(
   options?: {
     expiresIn?: string | number;
     preferGlobalSecret?: boolean;
+    audience?: string | string[];
     /**
      * Extra JWT claims to merge alongside `sub` / `org_domain`. Used by the
      * MCP connect flow to add a revocable `jti` and a `scope: "mcp-connect"`
@@ -67,7 +68,7 @@ export async function signA2AToken(
     process.env.BETTER_AUTH_URL ||
     "http://localhost:3000";
 
-  return new jose.SignJWT({
+  const jwt = new jose.SignJWT({
     ...(options?.extraClaims ?? {}),
     // `sub` / `org_domain` are spread AFTER extraClaims so a caller-supplied
     // map can never override the verified identity claims.
@@ -77,8 +78,11 @@ export async function signA2AToken(
     .setProtectedHeader({ alg: "HS256" })
     .setIssuer(appUrl)
     .setIssuedAt()
-    .setExpirationTime(options?.expiresIn ?? "15m")
-    .sign(new TextEncoder().encode(secret));
+    .setExpirationTime(options?.expiresIn ?? "15m");
+
+  if (options?.audience) jwt.setAudience(options.audience);
+
+  return jwt.sign(new TextEncoder().encode(secret));
 }
 
 export class A2AClient {

package/corpus/core/src/agent/durable-background.ts

@@ -17,8 +17,10 @@
  *
  * GUARDRAIL: when `isAgentChatDurableBackgroundEnabled()` returns false, the
  * agent-chat handler must behave byte-for-byte like the current synchronous
- * path. The flag is only ever true when ALL of these hold:
- *   1. `AGENT_CHAT_DURABLE_BACKGROUND` env is a truthy value.
+ * path. The gate is true only when ALL of these hold:
+ *   1. `AGENT_CHAT_DURABLE_BACKGROUND` env is not explicitly disabled. It is
+ *      DEFAULT-ON: unset/empty counts as enabled; set it to a falsy value
+ *      (`false`/`0`/`no`/`off`) to opt a specific app back out.
  *   2. The runtime is hosted/serverless (local dev keeps the inline path so SSE
  *      stays a single live stream and no second function is needed).
  *   3. `A2A_SECRET` is configured (the HMAC handoff is required to authenticate
@@ -41,7 +43,10 @@ import {
 export const AGENT_CHAT_PROCESS_RUN_PATH =
   "/_agent-native/agent-chat/_process-run";
 
-/** Env flag (off by default) that opts an app into durable background runs. */
+/**
+ * Env flag for durable background runs. DEFAULT-ON: unset means enabled; an app
+ * opts OUT with an explicit falsy value (`false`/`0`/`no`/`off`).
+ */
 export const AGENT_CHAT_DURABLE_BACKGROUND_ENV =
   "AGENT_CHAT_DURABLE_BACKGROUND";
 
@@ -87,21 +92,29 @@ function isFlagEnabled(): boolean {
   // Read the literal key (not `process.env[CONST]`) so guard:no-env-credentials
   // can statically verify it against the allowlisted `AGENT_*` prefix. Keep this
   // in sync with AGENT_CHAT_DURABLE_BACKGROUND_ENV.
+  //
+  // DEFAULT-ON: durable background runs are the desired behavior for every
+  // hosted app (verified in prod — long multi-step runs complete past the 40s
+  // soft-timeout with no thrash). So an unset flag means ON; an app opts OUT
+  // only with an explicit falsy value. This still composes with the hosted +
+  // A2A_SECRET gates below, so non-hosted / unconfigured apps stay synchronous.
   const raw = process.env.AGENT_CHAT_DURABLE_BACKGROUND;
-  if (raw == null) return false;
+  if (raw == null) return true;
   const normalized = raw.trim().toLowerCase();
-  return (
-    normalized === "1" ||
-    normalized === "true" ||
-    normalized === "yes" ||
-    normalized === "on"
+  return !(
+    normalized === "0" ||
+    normalized === "false" ||
+    normalized === "no" ||
+    normalized === "off"
   );
 }
 
 /**
- * The single gate. True only when the flag is on AND the runtime is hosted AND
- * A2A_SECRET is configured. False otherwise — and false means the current
- * synchronous behavior is used, unchanged.
+ * The single gate. True when the flag is not explicitly disabled (default-on)
+ * AND the runtime is hosted AND A2A_SECRET is configured. False otherwise — and
+ * false means the current synchronous behavior is used, unchanged. So a local /
+ * non-hosted / unconfigured app stays synchronous even with the flag defaulting
+ * on; durable only engages where the runtime actually supports it.
  */
 export function isAgentChatDurableBackgroundEnabled(): boolean {
   return (

package/corpus/core/src/cli/create.ts

@@ -1893,7 +1893,7 @@ function copyDir(src: string, dest: string, root?: string): void {
 
 function shouldSkipScaffoldEntry(name: string, srcPath?: string): boolean {
   if (
-    name === "settings.json" &&
+    /^settings(?:\..*)?\.json$/.test(name) &&
     srcPath?.split(path.sep).includes(".claude")
   ) {
     return true;