@agent-native/core 0.79.27 → 0.80.1

package/corpus/core/src/client/extensions/portable-extension.ts

@@ -47,7 +47,7 @@ export interface AgentNativeExtensionStorageOptions {
 export interface AgentNativeExtensionStorageContext {
   extensionId: string;
   slotId?: string;
-  scope?: Exclude<AgentNativeExtensionStorageScope, "all"> | string;
+  scope?: Exclude<AgentNativeExtensionStorageScope, "all">;
   userId?: string;
   organizationId?: string;
   [key: string]: unknown;

package/corpus/core/src/client/frame-protocol.ts

@@ -84,6 +84,10 @@ export interface PresentationModeMessage {
   data: { active: boolean };
 }
 
+export interface DesignCloseMessage {
+  type: "design:close";
+}
+
 export type AppToFrameMessage =
   | AppReadyMessage
   | SubmitChatMessage
@@ -97,7 +101,8 @@ export type AppToFrameMessage =
   | EnterStyleEditingMessage
   | EnterTextEditingMessage
   | ExitSelectionModeMessage
-  | PresentationModeMessage;
+  | PresentationModeMessage
+  | DesignCloseMessage;
 
 // ---------------------------------------------------------------------------
 // Messages FROM frame TO app
@@ -138,13 +143,23 @@ export interface SidebarModeMessage {
   };
 }
 
+export interface DesignInitMessage {
+  type: "design:init";
+  data: {
+    previewUrl: string;
+    themeVars?: Record<string, string>;
+    context?: { projectId?: string; branchId?: string; orgId?: string };
+  };
+}
+
 export type FrameToAppMessage =
   | FrameOriginMessage
   | ChatRunningMessage
   | UserInfoMessage
   | CodeCompleteMessage
   | SidebarModeMessage
-  | PresentationModeMessage;
+  | PresentationModeMessage
+  | DesignInitMessage;
 
 // ---------------------------------------------------------------------------
 // All message types

package/corpus/core/src/client/rich-markdown-editor/RegistryBlockNode.tsx

@@ -344,7 +344,7 @@ export function RegistryBlockNodeView(props: NodeViewProps) {
               data-plan-interactive
               aria-label={`Edit ${spec.label}`}
               onClick={() => setPanelOpen(true)}
-              className="an-block-edit-trigger flex size-7 items-center justify-center rounded-md border border-border bg-background/85 text-muted-foreground opacity-0 shadow-sm backdrop-blur transition-opacity hover:bg-muted hover:text-foreground focus-visible:opacity-100 data-[visible=true]:opacity-100"
+              className="an-block-edit-trigger flex size-7 items-center justify-center rounded-md border border-border bg-background text-muted-foreground opacity-0 shadow-sm transition-opacity hover:bg-muted hover:text-foreground focus-visible:opacity-100 data-[visible=true]:opacity-100"
               data-visible={panelOpen || shellHovered}
             >
               <IconPencil className="size-4" />
@@ -485,7 +485,7 @@ export function LegacyJsonEditSurface({
       data-plan-interactive
       aria-label={`Edit ${block.title ?? "block"}`}
       onClick={() => onOpenChange(true)}
-      className="an-block-edit-trigger flex size-7 items-center justify-center rounded-md border border-border bg-background/85 text-muted-foreground opacity-0 shadow-sm backdrop-blur transition-opacity hover:bg-muted hover:text-foreground focus-visible:opacity-100 data-[visible=true]:opacity-100"
+      className="an-block-edit-trigger flex size-7 items-center justify-center rounded-md border border-border bg-background text-muted-foreground opacity-0 shadow-sm transition-opacity hover:bg-muted hover:text-foreground focus-visible:opacity-100 data-[visible=true]:opacity-100"
       data-visible={selected || open}
     >
       <IconPencil className="size-4" />

package/corpus/core/src/client/sharing/ShareButton.tsx

@@ -47,6 +47,8 @@ export interface ShareButtonProps {
   variant?: "compact" | "label";
   /** Optional trigger style. Defaults to the Google-Docs-style "Share" label. */
   trigger?: "label" | "icon";
+  /** Hide the visibility/share glyph in the label trigger. */
+  hideTriggerIcon?: boolean;
   /** Optional className applied to the trigger button. */
   triggerClassName?: string;
   /** Notified when the share popover opens or closes. Hosts that render the
@@ -154,7 +156,7 @@ const BUTTON_GHOST_ICON = cn(
   "h-7 w-7 p-0 text-muted-foreground hover:bg-accent hover:text-accent-foreground",
 );
 const SHARE_POPOVER_SURFACE =
-  "border-[hsl(var(--sidebar-border,var(--border)))] bg-[hsl(var(--sidebar-background,var(--popover)))]";
+  "border border-border bg-popover text-popover-foreground";
 const MEMBER_SUGGESTION_LIMIT = 25;
 const MEMBER_SEARCH_DEBOUNCE_MS = 140;
 
@@ -311,6 +313,7 @@ export function ShareButton(props: ShareButtonProps) {
       : currentVisibility === "org"
         ? IconBuilding
         : IconLock;
+  const showTriggerIcon = iconOnly || !props.hideTriggerIcon;
   const TriggerIcon = iconOnly ? IconShare3 : VisibilityIcon;
 
   return (
@@ -324,14 +327,16 @@ export function ShareButton(props: ShareButtonProps) {
           )}
           aria-label={iconOnly ? "Share" : undefined}
         >
-          {loaded || iconOnly ? (
-            <TriggerIcon size={16} strokeWidth={1.75} />
-          ) : (
-            <span
-              aria-hidden
-              className="inline-block h-4 w-4 rounded-sm bg-muted animate-pulse"
-            />
-          )}
+          {showTriggerIcon ? (
+            loaded || iconOnly ? (
+              <TriggerIcon size={16} strokeWidth={1.75} />
+            ) : (
+              <span
+                aria-hidden
+                className="inline-block h-4 w-4 rounded-sm bg-muted animate-pulse"
+              />
+            )
+          ) : null}
           {!iconOnly && <span>Share</span>}
         </button>
       </PopoverTrigger>
@@ -1029,7 +1034,7 @@ function AdvancedAccessPopover({
             disabled={!canManage || control.pending}
             onClick={onToggle}
             className={cn(
-              "flex w-full items-start gap-3 rounded-md border border-border/70 bg-background px-3 py-2.5 text-start transition-colors hover:bg-accent/45 disabled:cursor-not-allowed disabled:opacity-60",
+              "flex w-full items-start gap-3 rounded-md border border-border/70 bg-card px-3 py-2.5 text-start transition-colors hover:bg-accent/45 disabled:cursor-not-allowed disabled:opacity-60",
               control.checked && "border-border bg-accent/35 text-foreground",
             )}
           >
@@ -1042,7 +1047,7 @@ function AdvancedAccessPopover({
             >
               <span
                 className={cn(
-                  "ml-0.5 size-4 rounded-full bg-background shadow-sm transition-transform",
+                  "ml-0.5 size-4 rounded-full bg-popover shadow-sm transition-transform",
                   control.checked && "translate-x-4",
                 )}
               />
@@ -1210,7 +1215,7 @@ function MemberAutocomplete({
             }}
             onKeyDown={handleKeyDown}
             autoComplete="off"
-            className="h-9 w-full min-w-0 rounded-md border border-input bg-background ps-8 pe-8 text-sm text-foreground placeholder:text-muted-foreground focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 focus:ring-offset-background"
+            className="h-9 w-full min-w-0 rounded-md border border-input bg-card ps-8 pe-8 text-sm text-foreground placeholder:text-muted-foreground focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 focus:ring-offset-background"
           />
           {search.isLoading ? (
             <IconLoader2
@@ -1355,13 +1360,13 @@ function CopyLinkField({
         <input
           readOnly
           value={value}
-          className="h-9 min-w-0 flex-1 rounded-md border border-input bg-background px-3 text-sm text-muted-foreground outline-none"
+          className="h-9 min-w-0 flex-1 rounded-md border border-input bg-card px-3 text-sm text-muted-foreground outline-none"
           onFocus={(event) => event.currentTarget.select()}
         />
         <button
           type="button"
           onClick={handleCopy}
-          className="inline-flex h-9 shrink-0 items-center gap-2 rounded-md border border-input bg-background px-3 text-sm font-medium text-foreground hover:bg-accent"
+          className="inline-flex h-9 shrink-0 items-center gap-2 rounded-md border border-input bg-card px-3 text-sm font-medium text-foreground hover:bg-accent"
         >
           {copied ? <IconCheck size={15} /> : <IconCopy size={15} />}
           {copied ? "Copied" : "Copy"}
@@ -1439,7 +1444,7 @@ function RoleSelect(props: {
               )
             : cn(
                 BUTTON_BASE,
-                "h-9 px-3 border border-input bg-background hover:bg-accent hover:text-accent-foreground",
+                "h-9 px-3 border border-input bg-card hover:bg-accent hover:text-accent-foreground",
               )
         }
         aria-label="Role"

package/corpus/core/src/client/use-agent-engine-configured.ts

@@ -14,6 +14,83 @@ export interface UseAgentEngineConfiguredResult {
   state: AgentEngineConfiguredState;
 }
 
+export interface FetchAgentEngineConfiguredStateOptions {
+  missingFallback?: boolean;
+  timeoutMs?: number;
+}
+
+const DEFAULT_STATUS_CHECK_TIMEOUT_MS = 2500;
+
+async function fetchStatusJson(
+  path: string,
+  timeoutMs: number,
+): Promise<unknown | null> {
+  const controller =
+    typeof AbortController !== "undefined" ? new AbortController() : null;
+  let timeoutId: ReturnType<typeof setTimeout> | undefined;
+  const timeout = new Promise<null>((resolve) => {
+    timeoutId = setTimeout(() => {
+      controller?.abort();
+      resolve(null);
+    }, timeoutMs);
+  });
+
+  const request = fetch(
+    agentNativePath(path),
+    controller ? { signal: controller.signal } : undefined,
+  )
+    .then((r) => (r.ok ? r.json() : null))
+    .catch(() => null)
+    .finally(() => {
+      if (timeoutId !== undefined) clearTimeout(timeoutId);
+    });
+
+  return Promise.race([request, timeout]);
+}
+
+function hasConfiguredFlag(value: unknown): value is { configured: boolean } {
+  return (
+    typeof value === "object" &&
+    value !== null &&
+    "configured" in value &&
+    typeof (value as { configured?: unknown }).configured === "boolean"
+  );
+}
+
+export async function fetchAgentEngineConfiguredState(
+  enabled = true,
+  options?: FetchAgentEngineConfiguredStateOptions,
+): Promise<AgentEngineConfiguredState> {
+  if (!enabled) return "configured";
+
+  const timeoutMs =
+    typeof options?.timeoutMs === "number" && options.timeoutMs > 0
+      ? options.timeoutMs
+      : DEFAULT_STATUS_CHECK_TIMEOUT_MS;
+  const [envKeys, builderStatus, engineStatus] = await Promise.all([
+    fetchStatusJson("/_agent-native/env-status", timeoutMs),
+    fetchStatusJson("/_agent-native/builder/status", timeoutMs),
+    fetchStatusJson("/_agent-native/agent-engine/status", timeoutMs),
+  ]);
+
+  // All three failed — likely a flaky network; keep the caller in unknown
+  // unless this check is reacting to an explicit missing-key stream event.
+  if (envKeys == null && builderStatus == null && engineStatus == null) {
+    return options?.missingFallback ? "missing" : "unknown";
+  }
+
+  const keys = (envKeys ?? []) as Array<{
+    key: string;
+    configured: boolean;
+  }>;
+  const llmKeys = keys.filter((k) => PROVIDER_ENV_VAR_SET.has(k.key));
+  const anyConfigured =
+    llmKeys.some((k) => k.configured) ||
+    (hasConfiguredFlag(builderStatus) && builderStatus.configured) ||
+    (hasConfiguredFlag(engineStatus) && engineStatus.configured);
+  return anyConfigured ? "configured" : "missing";
+}
+
 /**
  * Shared "can the agent run?" gate — the single source of truth for the sidebar
  * composer and app prompt boxes. Checks the env-key / Builder / BYOK status
@@ -29,37 +106,12 @@ export function useAgentEngineConfigured(
   useEffect(() => {
     let cancelled = false;
     const check = async (options?: { missingFallback?: boolean }) => {
-      if (!enabled) {
-        setState("configured");
-        return;
-      }
-      const [envKeys, builderStatus, engineStatus] = await Promise.all([
-        fetch(agentNativePath("/_agent-native/env-status"))
-          .then((r) => (r.ok ? r.json() : null))
-          .catch(() => null),
-        fetch(agentNativePath("/_agent-native/builder/status"))
-          .then((r) => (r.ok ? r.json() : null))
-          .catch(() => null),
-        fetch(agentNativePath("/_agent-native/agent-engine/status"))
-          .then((r) => (r.ok ? r.json() : null))
-          .catch(() => null),
-      ]);
+      const nextState = await fetchAgentEngineConfiguredState(enabled, options);
       if (cancelled) return;
-      // All three failed — likely a flaky network; keep the current state.
-      if (envKeys == null && builderStatus == null && engineStatus == null) {
-        if (options?.missingFallback) setState("missing");
+      if (nextState === "unknown") {
         return;
       }
-      const keys = (envKeys ?? []) as Array<{
-        key: string;
-        configured: boolean;
-      }>;
-      const llmKeys = keys.filter((k) => PROVIDER_ENV_VAR_SET.has(k.key));
-      const anyConfigured =
-        llmKeys.some((k) => k.configured) ||
-        builderStatus?.configured === true ||
-        engineStatus?.configured === true;
-      setState(anyConfigured ? "configured" : "missing");
+      setState(nextState);
     };
     const onConfiguredChanged = () => {
       void check();

package/corpus/core/src/code-agents/transcript-normalizer.ts

@@ -576,7 +576,7 @@ function joinAssistantChunks(previous: string, next: string): string {
   if (!next) return previous;
   if (/\s$/.test(previous) || /^\s/.test(next)) return `${previous}${next}`;
   if (/^[.,!?;:)\]}'"`]/.test(next)) return `${previous}${next}`;
-  if (/[(\[{'"`]$/.test(previous)) return `${previous}${next}`;
+  if (/[([{'"`]$/.test(previous)) return `${previous}${next}`;
   return `${previous} ${next}`;
 }
 

package/corpus/core/src/extensions/path.ts

@@ -19,10 +19,7 @@ export function extensionNameToSlug(
   return sliced || "extension";
 }
 
-export function extensionPath(
-  id: string,
-  name?: string | null | undefined,
-): string {
+export function extensionPath(id: string, name?: string | null): string {
   const encodedId = encodeURIComponent(id);
   if (name === undefined) return `/extensions/${encodedId}`;
   return `/extensions/${encodedId}/${extensionNameToSlug(name)}`;

package/corpus/core/src/integrations/a2a-continuation-processor.ts

@@ -528,7 +528,7 @@ function expandRelativeUrls(text: string, agentUrl: string): string {
   if (!text || !agentUrl) return text;
   const base = publicAgentBaseUrl(agentUrl);
   return text.replace(
-    /(^|[\s(\[<"'`])(\/[a-z0-9_-][a-z0-9_/?&=%#.,:-]*)/gi,
+    /(^|[\s([<"'`])(\/[a-z0-9_-][a-z0-9_/?&=%#.,:-]*)/gi,
     (_match, lead, path) => `${lead}${base}${path}`,
   );
 }

package/corpus/core/src/mcp/build-server.ts

@@ -1889,7 +1889,7 @@ async function isConnectTokenAllowed(
  */
 export async function verifyAuth(
   authHeader: string | undefined,
-  ownerEmailHeader?: string | undefined,
+  ownerEmailHeader?: string,
   options: { allowDevOpen?: boolean; resourceUrl?: string | string[] } = {},
 ): Promise<{
   authed: boolean;

package/corpus/core/src/org/handlers.ts

@@ -17,8 +17,8 @@ function extractInvitationId(event: H3Event): string | undefined {
   if (fromRouter) return fromRouter;
   const path = getRequestURL(event).pathname;
   const match =
-    path.match(/^\/([^\/]+)\/accept\/?$/) ??
-    path.match(/\/org\/invitations\/([^\/]+)\/accept\/?$/);
+    path.match(/^\/([^/]+)\/accept\/?$/) ??
+    path.match(/\/org\/invitations\/([^/]+)\/accept\/?$/);
   return match?.[1] ? decodeURIComponent(match[1]) : undefined;
 }
 
@@ -28,9 +28,9 @@ function extractMemberEmail(event: H3Event): string | undefined {
   if (fromRouter) return fromRouter;
   const path = getRequestURL(event).pathname;
   const match =
-    path.match(/^\/([^\/]+)\/role\/?$/) ??
-    path.match(/^\/([^\/]+)\/?$/) ??
-    path.match(/\/org\/members\/([^\/]+)(?:\/role)?\/?$/);
+    path.match(/^\/([^/]+)\/role\/?$/) ??
+    path.match(/^\/([^/]+)\/?$/) ??
+    path.match(/\/org\/members\/([^/]+)(?:\/role)?\/?$/);
   return match?.[1] ? decodeURIComponent(match[1]) : undefined;
 }
 const nanoid = (): string =>

package/corpus/core/src/org/plugin.ts

@@ -100,7 +100,7 @@ export function createOrgPlugin(): NitroPluginDef {
           return listMembersHandler(event);
         }
         // Tail is /:email/role
-        if (/^\/[^\/]+\/role\/?$/.test(tail)) {
+        if (/^\/[^/]+\/role\/?$/.test(tail)) {
           if (method !== "PUT") {
             setResponseStatus(event, 405);
             return { error: "Method not allowed" };
@@ -129,7 +129,7 @@ export function createOrgPlugin(): NitroPluginDef {
           return { error: "Method not allowed" };
         }
         // Tail is /:id/accept
-        if (/^\/[^\/]+\/accept\/?$/.test(tail)) {
+        if (/^\/[^/]+\/accept\/?$/.test(tail)) {
           if (method !== "POST") {
             setResponseStatus(event, 405);
             return { error: "Method not allowed" };

package/corpus/core/src/scripts/call-agent.ts

@@ -434,7 +434,7 @@ export function expandRelativeUrls(text: string, agentUrl: string): string {
   // Path must start at boundary (start, whitespace, or punctuation that isn't
   // ':' — to avoid mangling `https://example.com/foo` or markdown link bodies).
   return text.replace(
-    /(^|[\s(\[<"'`])(\/[a-z0-9_-][a-z0-9_/?&=%#.,:-]*)/gi,
+    /(^|[\s([<"'`])(\/[a-z0-9_-][a-z0-9_/?&=%#.,:-]*)/gi,
     (_match, lead, path) => `${lead}${base}${path}`,
   );
 }

package/corpus/core/src/scripts/db/safety.ts

@@ -171,7 +171,7 @@ const ACCESS_CONTROL_COLUMN_TOKENS = new Set([
 function normalizeIdentifier(value: string): string {
   return value
     .trim()
-    .replace(/^["'`\[]/, "")
+    .replace(/^["'`[]/, "")
     .replace(/["'`\]]$/, "")
     .toLowerCase();
 }

package/corpus/core/src/server/auth.ts

@@ -1855,6 +1855,9 @@ function createAuthGuardFn(): (
     // the gate below 401s anonymous /_agent-native/* requests before any DB
     // query, so the database would never get warmed.
     if (p === "/_agent-native/health") return;
+    if (getMethod(event) === "GET" && p.startsWith("/_agent-native/avatar/")) {
+      return;
+    }
     if (isPublicPath(normalizedUrl, publicPaths)) return;
     if (shouldBypassAuthForBuilderConnect(event, p)) return;
     if (isPublicWorkspacePageRequest(event, p, config)) {