@agent-native/core 0.79.1 → 0.79.5

package/corpus/core/src/localization/actions/set-localization-preference.ts

@@ -4,6 +4,7 @@ import { defineAction } from "../../action.js";
 import { putUserSetting } from "../../settings/user-settings.js";
 import {
   LOCALIZATION_SETTING_KEY,
+  SUPPORTED_LOCALES,
   normalizeLocalePreference,
   type LocalizationPreference,
 } from "../shared.js";
@@ -21,7 +22,7 @@ export default defineAction({
     const locale = normalizeLocalePreference(args.locale);
     if (!locale) {
       throw new Error(
-        "Unsupported locale. Use system, en-US, zh-CN, es-ES, fr-FR, de-DE, ja-JP, ko-KR, pt-BR, hi-IN, or ar-SA.",
+        `Unsupported locale. Use system, ${SUPPORTED_LOCALES.join(", ")}.`,
       );
     }
     const value: LocalizationPreference & Record<string, unknown> = { locale };

package/corpus/core/src/localization/shared.ts

@@ -1,6 +1,7 @@
 export const SUPPORTED_LOCALES = [
   "en-US",
   "zh-CN",
+  "zh-TW",
   "es-ES",
   "fr-FR",
   "de-DE",
@@ -43,6 +44,12 @@ export const LOCALE_METADATA: Record<LocaleCode, LocaleMetadata> = {
     nativeName: "简体中文",
     dir: "ltr",
   },
+  "zh-TW": {
+    code: "zh-TW",
+    englishName: "Chinese (Traditional, Taiwan)",
+    nativeName: "繁體中文",
+    dir: "ltr",
+  },
   "es-ES": {
     code: "es-ES",
     englishName: "Spanish",
@@ -95,6 +102,42 @@ export const LOCALE_METADATA: Record<LocaleCode, LocaleMetadata> = {
 
 const SUPPORTED_LOCALE_SET = new Set<string>(SUPPORTED_LOCALES);
 
+const CHINESE_LOCALE_ALIASES: Record<string, LocaleCode> = {
+  "zh-cn": "zh-CN",
+  "zh-hans": "zh-CN",
+  "zh-hans-cn": "zh-CN",
+  "zh-hans-sg": "zh-CN",
+  "zh-hant": "zh-TW",
+  "zh-hant-hk": "zh-TW",
+  "zh-hant-mo": "zh-TW",
+  "zh-hant-tw": "zh-TW",
+  "zh-hk": "zh-TW",
+  "zh-mo": "zh-TW",
+  "zh-sg": "zh-CN",
+  "zh-tw": "zh-TW",
+};
+
+function normalizeChineseLocaleAlias(canonical: string): LocaleCode | null {
+  const normalized = canonical.toLowerCase();
+  const alias = CHINESE_LOCALE_ALIASES[normalized];
+  if (alias) return alias;
+
+  const parts = normalized.split("-");
+  if (parts[0] !== "zh") return null;
+  if (
+    parts.includes("hant") ||
+    parts.includes("tw") ||
+    parts.includes("hk") ||
+    parts.includes("mo")
+  ) {
+    return "zh-TW";
+  }
+  if (parts.includes("hans") || parts.includes("cn") || parts.includes("sg")) {
+    return "zh-CN";
+  }
+  return null;
+}
+
 export function isLocaleCode(value: unknown): value is LocaleCode {
   return typeof value === "string" && SUPPORTED_LOCALE_SET.has(value);
 }
@@ -104,6 +147,8 @@ export function normalizeLocaleCode(value: unknown): LocaleCode | null {
   try {
     for (const canonical of Intl.getCanonicalLocales(value.trim())) {
       if (isLocaleCode(canonical)) return canonical;
+      const alias = normalizeChineseLocaleAlias(canonical);
+      if (alias) return alias;
       const language = canonical.split("-")[0]?.toLowerCase();
       const match = SUPPORTED_LOCALES.find(
         (locale) => locale.split("-")[0]?.toLowerCase() === language,

package/corpus/core/src/server/agent-chat-plugin.ts

@@ -7779,6 +7779,44 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
             }
           }
         }
+        // Cookieless durable background worker: getSession()/getOrgContext()
+        // resolve from the (absent) session, so org-scoped credential resolution
+        // (the Builder engine) would miss the owner's org and resolveEngine would
+        // fall back to the anthropic default — bailing on a missing key before
+        // the worker claims its run. The owner IS known here (seeded via
+        // OWNER_CONTEXT_KEY from the run's thread), so resolve the org directly
+        // from the owner email, the same active-org logic the foreground session
+        // would yield.
+        if (!resolvedOrgId && owner) {
+          try {
+            const { resolveOrgIdForEmail } = await import("../org/context.js");
+            resolvedOrgId = (await resolveOrgIdForEmail(owner)) ?? undefined;
+          } catch {
+            // org tables unavailable — proceed without org (foreground-equivalent)
+          }
+        }
+
+        // DURABLE OWNER CONTEXT, PART 2: ORG.
+        // The cookieless `_process-run` self-dispatch (and any other background
+        // re-entry) resolves the owner from the run row, but has NO session —
+        // every org resolver above ultimately derives identity from
+        // getSession(event), so they all come back null here. That silently
+        // scopes the agent to `org_id IS NULL` rows only: it sees and writes
+        // resources outside the user's org, while the foreground UI — which
+        // carries the session cookie — resolves the real org. The result is the
+        // observed split where the agent can't list/read the same resources the
+        // UI shows and writes new rows with a null org. Resolve the org from the
+        // now-known owner email (the same active-org / membership logic
+        // getOrgContext uses, minus the session) so the agent and the UI operate
+        // over the same org-scoped data.
+        if (!resolvedOrgId && owner && !ownerContext.anonymous) {
+          try {
+            const { resolveOrgIdForEmail } = await import("../org/context.js");
+            resolvedOrgId = (await resolveOrgIdForEmail(owner)) ?? undefined;
+          } catch {
+            // org tables unavailable (first boot) — leave org unscoped
+          }
+        }
 
         // Propagate the caller's IANA timezone from `x-user-timezone` so that
         // tool calls made by the agent (e.g. log-meal with no explicit date)
@@ -7923,9 +7961,10 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
           // request body, which the HMAC does not cover and a caller could forge —
           // and pre-seed the owner context the handler reads (resolveOwnerContext
           // returns it before attempting any session lookup).
+          let backgroundOwner: string | null = null;
           try {
             const { getRunOwnerEmail } = await import("../agent/run-store.js");
-            const backgroundOwner = await getRunOwnerEmail(prepared.runId);
+            backgroundOwner = await getRunOwnerEmail(prepared.runId);
             if (backgroundOwner) {
               (event as any).context[OWNER_CONTEXT_KEY] = {
                 owner: backgroundOwner,
@@ -7938,7 +7977,20 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
           }
 
           try {
-            return await invokeAgentChatHandler(event);
+            // Run the worker INSIDE the owner's AsyncLocalStorage request context.
+            // Seeding OWNER_CONTEXT_KEY (above) only feeds getOwnerFromEvent; the
+            // engine-resolution path (detectEngineFromUserSecrets) and other
+            // owner-scoped reads use getRequestUserEmail()/getRequestOrgId(),
+            // which a cookieless background worker otherwise leaves empty. Without
+            // this, resolveEngine can't see the owner's Builder credential, falls
+            // back to the anthropic default, and — when the owner has no stored
+            // anthropic key and deploy-credential fallback is blocked — bails at
+            // the API-key check BEFORE claiming its run (the analytics durable
+            // worker's "stalls at post_model, never claims" bug).
+            const invoke = () => invokeAgentChatHandler(event);
+            return await (backgroundOwner
+              ? runWithRequestContext({ userEmail: backgroundOwner }, invoke)
+              : invoke());
           } catch (err: any) {
             console.error("[agent-chat] _process-run failed:", err);
             // DIAGNOSTIC: the worker invocation threw at the route boundary —

package/corpus/core/src/server/onboarding-html.ts

@@ -253,6 +253,95 @@ const AUTH_LOCALE_COPY: Record<LocaleCode, typeof EN_AUTH_COPY> = {
     googleNeverFinished:
       "Google 登录未完成。请检查 Google OAuth 重定向 URI 和服务器日志中的 [agent-native][google-oauth]。",
   },
+  "zh-TW": {
+    languageLabel: "語言",
+    systemLanguage: "系統",
+    pageTitleSignIn: "登入",
+    pageTitleWelcome: "歡迎",
+    welcomeTitle: "歡迎",
+    signInTitle: "登入",
+    welcomeBackTitle: "歡迎回來",
+    checkEmailTitle: "檢查你的電子郵件",
+    resetPasswordTitle: "重設密碼",
+    createAccountSubtitle: "建立帳號即可開始",
+    googleOnlySubtitle: "使用你的工作區 Google 帳號繼續",
+    signInSubtitle: "登入你的帳號",
+    finishAccountSubtitle: "完成帳號建立",
+    resetPasswordSubtitle: "重設你的密碼",
+    upgradeCopy: "繼續登入，將此應用程式連結到你的帳號並遷移本機資料。",
+    googleButton: "使用 Google 登入",
+    dividerOr: "或",
+    createAccount: "建立帳號",
+    signIn: "登入",
+    email: "電子郵件",
+    password: "密碼",
+    confirmPassword: "確認密碼",
+    passwordMinPlaceholder: "至少 8 個字元",
+    confirmPasswordPlaceholder: "確認密碼",
+    enterPasswordPlaceholder: "輸入密碼",
+    signupProgress: "註冊進度",
+    progressAccount: "帳號",
+    progressVerify: "驗證",
+    progressStart: "開始",
+    verificationSent: "驗證郵件已送出",
+    verifyCopyPrefix: "我們已將安全連結寄到",
+    verifyCopySuffix: "。點擊連結後回到這裡，應用程式會自動完成登入。",
+    verificationNote:
+      "你可以保持此分頁開啟。如果回來後沒有自動重新整理，請點擊繼續。",
+    continue: "繼續",
+    resendEmail: "重新寄送郵件",
+    back: "返回",
+    forgotPassword: "忘記密碼？",
+    sendResetLink: "寄送重設連結",
+    backToSignIn: "返回登入",
+    localNotePrefix: "你的帳號儲存在此應用程式自己的資料庫中",
+    localNoteSuffix: "，而不是第三方服務。",
+    runLocally: "在本機執行",
+    runLocallySentence: "在本機執行",
+    openSource: "100% 免費且開源",
+    useOwnGoogleClient: "使用你自己的 Google OAuth 用戶端：",
+    copyCommand: "複製指令",
+    copied: "已複製",
+    close: "關閉",
+    closeGoogleChoices: "關閉 Google 登入選項",
+    legalPrefix: "註冊即表示你接受我們的",
+    legalTerms: "條款",
+    legalConnector: "和",
+    legalPrivacy: "隱私權政策",
+    legalSuffix: "。",
+    invalidEmail: "請輸入有效的電子郵件地址，例如 you@example.com。",
+    signInToContinue: "登入以繼續。",
+    finishSignInFailed: "無法自動完成登入。",
+    enterPasswordAfterVerification: "驗證電子郵件後請輸入密碼。",
+    finishSignInManually: "無法自動完成登入。請登入以繼續。",
+    stillWaitingVerification:
+      "仍在等待驗證。請點擊郵件中的連結，然後再次點擊繼續。",
+    checkVerificationFailed: "無法檢查驗證狀態。請重試。",
+    checking: "正在檢查...",
+    checkingVerification: "正在檢查驗證狀態...",
+    sending: "正在寄送...",
+    sent: "已送出",
+    sentVerification: "新的驗證連結已送出。",
+    resendVerificationFailed: "無法重新寄送驗證郵件。",
+    networkErrorRetry: "網路錯誤。請重試。",
+    networkErrorDashRetry: "網路錯誤 - 請重試",
+    passwordsMismatch: "兩次輸入的密碼不一致",
+    creatingAccount: "正在建立帳號...",
+    registrationFailed: "註冊失敗",
+    accountCreatedSigningIn: "帳號已建立，正在登入...",
+    emailVerifiedFinishing: "電子郵件已驗證。正在完成登入...",
+    emailVerifiedSignIn: "電子郵件已驗證。請登入以繼續。",
+    resetEmailSent: "如果該電子郵件存在，重設連結已在寄送途中。",
+    resetEmailFailed: "無法寄送重設郵件。",
+    signingIn: "正在登入...",
+    invalidLogin: "電子郵件或密碼無效",
+    googleNotConfigured: "Google OAuth 尚未設定。",
+    failedToConnect: "連線失敗。請重試。",
+    migrateLocalFallback: "繼續登入以遷移本機資料。",
+    googlePopupHelp: "請允許此網站開啟彈出式視窗後重試",
+    googleNeverFinished:
+      "Google 登入未完成。請檢查 Google OAuth 重新導向 URI，以及伺服器記錄中的 [agent-native][google-oauth]。",
+  },
   "es-ES": {
     languageLabel: "Idioma",
     systemLanguage: "Sistema",
@@ -1038,6 +1127,16 @@ const AUTH_MARKETING_LOCALE_COPY: Partial<
       ],
     },
   },
+  "zh-TW": {
+    forms: {
+      tagline: "你的 AI 代理會和你一起建立、發布與分析表單。",
+      features: [
+        "用一句話建立完整表單",
+        "立即發布，產生可分享連結與驗證碼",
+        "依需求取得回覆摘要、匯出與趨勢分析",
+      ],
+    },
+  },
   "es-ES": {
     forms: {
       tagline: "Tu agente de IA crea, publica y analiza formularios contigo.",

package/corpus/core/src/templates/default/app/i18n/index.ts

@@ -9,6 +9,8 @@ export const i18nCatalog = {
     switch (locale) {
       case "zh-CN":
         return (await import("./zh-CN")).default;
+      case "zh-TW":
+        return (await import("./zh-TW")).default;
       case "es-ES":
         return (await import("./es-ES")).default;
       case "fr-FR":