@agent-native/core 0.86.1 → 0.87.0

package/corpus/core/src/server/request-context.ts

@@ -15,7 +15,62 @@
  * process.env so existing `AGENT_USER_EMAIL=x pnpm action foo` invocations
  * continue to work.
  */
-import { AsyncLocalStorage } from "node:async_hooks";
+
+type AsyncLocalStorageLike<T> = {
+  getStore(): T | undefined;
+  run<R>(store: T, callback: () => R): R;
+};
+
+type AsyncLocalStorageCtor = new <T>() => AsyncLocalStorageLike<T>;
+
+class StackAsyncLocalStorage<T> implements AsyncLocalStorageLike<T> {
+  private readonly stack: T[] = [];
+
+  getStore(): T | undefined {
+    return this.stack.at(-1);
+  }
+
+  run<R>(store: T, callback: () => R): R {
+    this.stack.push(store);
+    try {
+      const result = callback();
+      const maybePromise = result as unknown as
+        | { finally?: (callback: () => void) => unknown }
+        | undefined;
+      if (maybePromise && typeof maybePromise.finally === "function") {
+        return maybePromise.finally(() => {
+          this.stack.pop();
+        }) as R;
+      }
+      this.stack.pop();
+      return result;
+    } catch (error) {
+      this.stack.pop();
+      throw error;
+    }
+  }
+}
+
+function getAsyncLocalStorageCtor(): AsyncLocalStorageCtor | undefined {
+  if (
+    typeof window !== "undefined" ||
+    typeof process === "undefined" ||
+    !process.versions?.node ||
+    typeof process.getBuiltinModule !== "function"
+  ) {
+    return undefined;
+  }
+  return process.getBuiltinModule("node:async_hooks")?.AsyncLocalStorage as
+    | AsyncLocalStorageCtor
+    | undefined;
+}
+
+const AsyncLocalStorageCtor = getAsyncLocalStorageCtor();
+
+function processEnv(name: string): string | undefined {
+  if (typeof process === "undefined") return undefined;
+  return process.env?.[name];
+}
 
 /**
  * Per-request agent-run state. Lives on `RequestContext.run` so the
@@ -114,12 +169,14 @@ const GLOBAL_KEY = "__agentNativeRequestContextAls" as const;
 const OBSERVERS_KEY = "__agentNativeRequestContextObservers" as const;
 type RequestContextObserver = (ctx: RequestContext) => void;
 type GlobalWithRequestContext = typeof globalThis & {
-  [GLOBAL_KEY]?: AsyncLocalStorage<RequestContext>;
+  [GLOBAL_KEY]?: AsyncLocalStorageLike<RequestContext>;
   [OBSERVERS_KEY]?: RequestContextObserver[];
 };
 const globalRef = globalThis as GlobalWithRequestContext;
 if (!globalRef[GLOBAL_KEY]) {
-  globalRef[GLOBAL_KEY] = new AsyncLocalStorage<RequestContext>();
+  globalRef[GLOBAL_KEY] = AsyncLocalStorageCtor
+    ? new AsyncLocalStorageCtor<RequestContext>()
+    : new StackAsyncLocalStorage<RequestContext>();
 }
 if (!globalRef[OBSERVERS_KEY]) {
   globalRef[OBSERVERS_KEY] = [];
@@ -211,7 +268,7 @@ export function getRequestUserEmail(): string | undefined {
     if (store.userEmail) markAuthContextAccess(store);
     return store.userEmail;
   }
-  return process.env.AGENT_USER_EMAIL;
+  return processEnv("AGENT_USER_EMAIL");
 }
 
 /**
@@ -227,7 +284,7 @@ export function getRequestUserName(): string | undefined {
     if (store.userName) markAuthContextAccess(store);
     return store.userName;
   }
-  return process.env.AGENT_USER_NAME;
+  return processEnv("AGENT_USER_NAME");
 }
 
 /**
@@ -243,7 +300,7 @@ export function getRequestOrgId(): string | undefined {
     if (store.orgId) markAuthContextAccess(store);
     return store.orgId;
   }
-  return process.env.AGENT_ORG_ID;
+  return processEnv("AGENT_ORG_ID");
 }
 
 function markAuthContextAccess(ctx: RequestContext | undefined) {
@@ -267,7 +324,7 @@ export function hasAuthContextAccess(ctx: RequestContext | undefined): boolean {
 export function getRequestTimezone(): string | undefined {
   const store = als.getStore();
   if (store !== undefined) return store.timezone;
-  return process.env.AGENT_USER_TIMEZONE;
+  return processEnv("AGENT_USER_TIMEZONE");
 }
 
 /**

package/corpus/core/src/shared/agent-access.ts

@@ -0,0 +1,112 @@
+export const AGENT_ACCESS_PARAM = "agent_access";
+export const DEFAULT_AGENT_ACCESS_TTL_SECONDS = 2 * 60 * 60;
+
+export interface AgentAccessResourceScope {
+  resourceKind: string;
+  resourceId: string;
+}
+
+export interface AgentAccessUrlOptions {
+  origin?: string;
+  basePath?: string;
+  tokenParam?: string;
+}
+
+export interface AgentAccessApiUrlOptions extends AgentAccessUrlOptions {
+  endpoint: string;
+  resourceId: string;
+  idParam?: string;
+  token?: string | null;
+  extraParams?: Array<[string, string | number | boolean | null | undefined]>;
+}
+
+function normalizeResourcePart(value: string, label: string): string {
+  const trimmed = value.trim();
+  if (!trimmed) throw new Error(`${label} is required`);
+  return trimmed;
+}
+
+export function scopedAgentAccessResourceId(
+  resourceKind: string,
+  resourceId: string,
+): string {
+  return `${normalizeResourcePart(resourceKind, "resourceKind")}:${normalizeResourcePart(resourceId, "resourceId")}`;
+}
+
+function trimSlashes(value: string): string {
+  return value.replace(/^\/+|\/+$/g, "");
+}
+
+export function normalizeAgentAccessBasePath(basePath?: string): string {
+  const trimmed = trimSlashes(basePath ?? "");
+  return trimmed ? `/${trimmed}` : "";
+}
+
+export function normalizeAgentAccessOrigin(origin?: string): string {
+  if (!origin) return "";
+  return origin.replace(/\/+$/g, "");
+}
+
+function isAbsoluteUrl(value: string): boolean {
+  return /^[a-z][a-z0-9+.-]*:\/\//i.test(value);
+}
+
+export function toAgentAccessUrl(
+  pathOrUrl: string,
+  options: Pick<AgentAccessUrlOptions, "origin" | "basePath"> = {},
+): string {
+  if (isAbsoluteUrl(pathOrUrl)) return pathOrUrl;
+  const path = pathOrUrl.startsWith("/") ? pathOrUrl : `/${pathOrUrl}`;
+  return `${normalizeAgentAccessOrigin(options.origin)}${normalizeAgentAccessBasePath(options.basePath)}${path}`;
+}
+
+export function appendAgentAccessParam(
+  urlOrPath: string,
+  token: string,
+  param = AGENT_ACCESS_PARAM,
+): string {
+  const hashIndex = urlOrPath.indexOf("#");
+  const base = hashIndex >= 0 ? urlOrPath.slice(0, hashIndex) : urlOrPath;
+  const hash = hashIndex >= 0 ? urlOrPath.slice(hashIndex) : "";
+  const sep = base.includes("?") ? "&" : "?";
+  return `${base}${sep}${encodeURIComponent(param)}=${encodeURIComponent(token)}${hash}`;
+}
+
+export function buildAgentAccessUrl({
+  path,
+  token,
+  origin,
+  basePath,
+  tokenParam = AGENT_ACCESS_PARAM,
+}: AgentAccessUrlOptions & {
+  path: string;
+  token: string;
+}): string {
+  return appendAgentAccessParam(
+    toAgentAccessUrl(path, { origin, basePath }),
+    token,
+    tokenParam,
+  );
+}
+
+export function buildAgentAccessApiUrl({
+  endpoint,
+  resourceId,
+  idParam = "id",
+  token,
+  tokenParam = AGENT_ACCESS_PARAM,
+  extraParams,
+  origin,
+  basePath,
+}: AgentAccessApiUrlOptions): string {
+  const params = new URLSearchParams({ [idParam]: resourceId });
+  if (token) params.set(tokenParam, token);
+  for (const [key, value] of extraParams ?? []) {
+    if (value === undefined || value === null || value === "") continue;
+    params.set(key, String(value));
+  }
+  return toAgentAccessUrl(`${endpoint}?${params.toString()}`, {
+    origin,
+    basePath,
+  });
+}

package/corpus/core/src/shared/index.ts

@@ -58,3 +58,17 @@ export {
   EMBED_START_PATH,
   EMBED_TOKEN_QUERY_PARAM,
 } from "./embed-auth.js";
+export {
+  AGENT_ACCESS_PARAM,
+  DEFAULT_AGENT_ACCESS_TTL_SECONDS,
+  appendAgentAccessParam,
+  buildAgentAccessApiUrl,
+  buildAgentAccessUrl,
+  normalizeAgentAccessBasePath,
+  normalizeAgentAccessOrigin,
+  scopedAgentAccessResourceId,
+  toAgentAccessUrl,
+  type AgentAccessApiUrlOptions,
+  type AgentAccessResourceScope,
+  type AgentAccessUrlOptions,
+} from "./agent-access.js";

package/corpus/templates/analytics/AGENTS.md

@@ -177,6 +177,10 @@ details live in `.agents/skills/`.
   scoped to one recording for two hours; SSR embeds an agent discovery payload
   and the JSON APIs expose only summary/timeline metadata plus bounded event
   reads.
+- Use `@agent-native/core/server` and `@agent-native/core/shared` agent-access
+  helpers for scoped token mint/verify and bot-visible URL construction. Keep
+  replay chunk/blob authorization, diagnostics payloads, and the session detail
+  UI in Analytics.
 - Recordings also capture console logs and network request metadata (request
   bodies/headers never captured; response bodies captured only as bounded,
   redacted 5xx snippets; scrubbed URLs, truncated messages, per-session

package/corpus/templates/analytics/app/components/InlineMetric.tsx

@@ -1,5 +1,5 @@
-import { Card, CardContent } from "@/components/ui/card";
-import { Skeleton } from "@/components/ui/skeleton";
+import { Card, CardContent } from "@agent-native/toolkit/ui/card";
+import { Skeleton } from "@agent-native/toolkit/ui/skeleton";
 
 interface InlineMetricProps {
   title: string;

package/corpus/templates/analytics/app/components/dashboard/CumulativeNetChart.tsx

@@ -1,4 +1,11 @@
 import { useT } from "@agent-native/core/client";
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+} from "@agent-native/toolkit/ui/card";
+import { Skeleton } from "@agent-native/toolkit/ui/skeleton";
 import {
   Area,
   AreaChart,
@@ -10,8 +17,6 @@ import {
   YAxis,
 } from "recharts";
 
-import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
-import { Skeleton } from "@/components/ui/skeleton";
 import {
   chartAxisStroke,
   chartGridStroke,

package/corpus/templates/analytics/app/components/dashboard/DataTable.tsx

@@ -1,21 +1,19 @@
 import { useT } from "@agent-native/core/client";
+import { Button } from "@agent-native/toolkit/ui/button";
 import {
-  IconArrowsUpDown,
-  IconChevronLeft,
-  IconChevronRight,
-} from "@tabler/icons-react";
-import { useState, useMemo } from "react";
-
-import { Button } from "@/components/ui/button";
-import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+} from "@agent-native/toolkit/ui/card";
 import {
   Select,
   SelectContent,
   SelectItem,
   SelectTrigger,
   SelectValue,
-} from "@/components/ui/select";
-import { Skeleton } from "@/components/ui/skeleton";
+} from "@agent-native/toolkit/ui/select";
+import { Skeleton } from "@agent-native/toolkit/ui/skeleton";
 import {
   Table,
   TableBody,
@@ -23,7 +21,14 @@ import {
   TableHead,
   TableHeader,
   TableRow,
-} from "@/components/ui/table";
+} from "@agent-native/toolkit/ui/table";
+import {
+  IconArrowsUpDown,
+  IconChevronLeft,
+  IconChevronRight,
+} from "@tabler/icons-react";
+import { useState, useMemo } from "react";
+
 import { cn } from "@/lib/utils";
 
 const PAGE_SIZE_OPTIONS = [10, 25, 50, 100];

package/corpus/templates/analytics/app/components/dashboard/DateRangePicker.tsx

@@ -1,4 +1,5 @@
-import { Button } from "@/components/ui/button";
+import { Button } from "@agent-native/toolkit/ui/button";
+
 import { cn } from "@/lib/utils";
 
 export type DateRange = "7d" | "30d" | "90d";

package/corpus/templates/analytics/app/components/dashboard/MetricCard.tsx

@@ -1,5 +1,10 @@
-import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
-import { Skeleton } from "@/components/ui/skeleton";
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+} from "@agent-native/toolkit/ui/card";
+import { Skeleton } from "@agent-native/toolkit/ui/skeleton";
 
 interface MetricCardProps {
   title: string;

package/corpus/templates/analytics/app/components/dashboard/RecentActivity.tsx

@@ -1,13 +1,16 @@
 import { useT } from "@agent-native/core/client";
-
-import { Avatar, AvatarFallback, AvatarImage } from "@/components/ui/avatar";
+import {
+  Avatar,
+  AvatarFallback,
+  AvatarImage,
+} from "@agent-native/toolkit/ui/avatar";
 import {
   Card,
   CardContent,
   CardHeader,
   CardTitle,
   CardDescription,
-} from "@/components/ui/card";
+} from "@agent-native/toolkit/ui/card";
 
 const activities = [
   {

package/corpus/templates/analytics/app/components/dashboard/RevenueChart.tsx

@@ -1,4 +1,10 @@
 import { useT } from "@agent-native/core/client";
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+} from "@agent-native/toolkit/ui/card";
 import {
   Area,
   AreaChart,
@@ -9,7 +15,6 @@ import {
   YAxis,
 } from "recharts";
 
-import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
 import {
   chartAxisStroke,
   chartGridStroke,

package/corpus/templates/analytics/app/components/dashboard/RevenueComparisonChart.tsx

@@ -1,4 +1,11 @@
 import { useT } from "@agent-native/core/client";
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+} from "@agent-native/toolkit/ui/card";
+import { Skeleton } from "@agent-native/toolkit/ui/skeleton";
 import {
   Bar,
   CartesianGrid,
@@ -12,8 +19,6 @@ import {
   YAxis,
 } from "recharts";
 
-import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
-import { Skeleton } from "@/components/ui/skeleton";
 import { chartAxisStroke, chartGridStroke } from "@/lib/chart-theme";
 
 interface RevenueComparisonChartProps {

package/corpus/templates/analytics/app/components/dashboard/SqlChart.tsx

@@ -1,5 +1,20 @@
 import { useT } from "@agent-native/core/client";
 import { EmbeddedExtension } from "@agent-native/core/client/extensions";
+import { Button } from "@agent-native/toolkit/ui/button";
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+} from "@agent-native/toolkit/ui/card";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@agent-native/toolkit/ui/select";
+import { Skeleton } from "@agent-native/toolkit/ui/skeleton";
 import {
   IconArrowsSort,
   IconSortAscending,
@@ -42,17 +57,6 @@ import {
   YAxis,
 } from "recharts";
 
-import { Button } from "@/components/ui/button";
-import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
-import {
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue,
-} from "@/components/ui/select";
-import { Skeleton } from "@/components/ui/skeleton";
-
 const PAGE_SIZE_OPTIONS = [10, 25, 50, 100];
 import { useSqlQuery } from "@/lib/sql-query";
 import { serializePanelSql } from "@/pages/adhoc/sql-dashboard/panel-sql";

package/corpus/templates/analytics/app/components/dashboard/StatsCard.tsx

@@ -1,4 +1,10 @@
-import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+} from "@agent-native/toolkit/ui/card";
+
 import { cn } from "@/lib/utils";
 
 interface StatsCardProps {

package/corpus/templates/analytics/app/components/dashboard/TimeSeriesChart.tsx

@@ -1,4 +1,11 @@
 import { useT } from "@agent-native/core/client";
+import {
+  Card,
+  CardContent,
+  CardHeader,
+  CardTitle,
+} from "@agent-native/toolkit/ui/card";
+import { Skeleton } from "@agent-native/toolkit/ui/skeleton";
 import {
   Area,
   AreaChart,
@@ -9,8 +16,6 @@ import {
   YAxis,
 } from "recharts";
 
-import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
-import { Skeleton } from "@/components/ui/skeleton";
 import {
   chartAxisStroke,
   chartGridStroke,

package/corpus/templates/analytics/app/components/layout/CommandPalette.tsx

@@ -8,6 +8,22 @@ import {
   useT,
 } from "@agent-native/core/client";
 import { extensionPath } from "@agent-native/core/client/extensions";
+import {
+  CommandDialog,
+  CommandInput,
+  CommandList,
+  CommandEmpty,
+  CommandGroup,
+  CommandItem,
+} from "@agent-native/toolkit/ui/command";
+import {
+  Dialog,
+  DialogContent,
+  DialogHeader,
+  DialogTitle,
+} from "@agent-native/toolkit/ui/dialog";
+import { Label } from "@agent-native/toolkit/ui/label";
+import { Skeleton } from "@agent-native/toolkit/ui/skeleton";
 import {
   IconFlask,
   IconTool,
@@ -23,22 +39,6 @@ import { useTheme } from "next-themes";
 import { useEffect, useState, useCallback } from "react";
 import { useNavigate } from "react-router";
 
-import {
-  CommandDialog,
-  CommandInput,
-  CommandList,
-  CommandEmpty,
-  CommandGroup,
-  CommandItem,
-} from "@/components/ui/command";
-import {
-  Dialog,
-  DialogContent,
-  DialogHeader,
-  DialogTitle,
-} from "@/components/ui/dialog";
-import { Label } from "@/components/ui/label";
-import { Skeleton } from "@/components/ui/skeleton";
 import { dashboards } from "@/pages/adhoc/registry";
 
 import changelog from "../../../CHANGELOG.md?raw";

package/corpus/templates/analytics/app/components/layout/HeaderActions.tsx

@@ -1,4 +1,5 @@
 import { useT } from "@agent-native/core/client";
+import { Skeleton } from "@agent-native/toolkit/ui/skeleton";
 import {
   useEffect,
   useSyncExternalStore,
@@ -6,8 +7,6 @@ import {
   type FC,
 } from "react";
 
-import { Skeleton } from "@/components/ui/skeleton";
-
 /**
  * External store for the page's header title + actions. We use an external
  * store (not React context) so that pages can inject ReactNode without

package/corpus/templates/analytics/app/components/layout/MobileNav.tsx

@@ -1,10 +1,13 @@
 import { useT } from "@agent-native/core/client";
+import {
+  Sheet,
+  SheetContent,
+  SheetTitle,
+} from "@agent-native/toolkit/ui/sheet";
 import { IconMenu } from "@tabler/icons-react";
 import { useState, useEffect } from "react";
 import { useLocation } from "react-router";
 
-import { Sheet, SheetContent, SheetTitle } from "@/components/ui/sheet";
-
 import { Sidebar } from "./Sidebar";
 
 export function MobileNav() {

package/corpus/templates/analytics/app/components/layout/NewAnalysisDialog.tsx

@@ -4,6 +4,12 @@ import {
   useActionQuery,
   useT,
 } from "@agent-native/core/client";
+import { Badge } from "@agent-native/toolkit/ui/badge";
+import {
+  Popover,
+  PopoverContent,
+  PopoverTrigger,
+} from "@agent-native/toolkit/ui/popover";
 import {
   IconAlertCircle,
   IconCheck,
@@ -14,12 +20,6 @@ import {
 import { useMemo, useState } from "react";
 import { Link } from "react-router";
 
-import { Badge } from "@/components/ui/badge";
-import {
-  Popover,
-  PopoverContent,
-  PopoverTrigger,
-} from "@/components/ui/popover";
 import {
   credentialRowsFromStatus,
   getConfiguredDataSources,

package/corpus/templates/analytics/app/components/layout/NewDashboardDialog.tsx

@@ -3,14 +3,13 @@ import {
   PromptComposer,
   useT,
 } from "@agent-native/core/client";
-import { IconPlus } from "@tabler/icons-react";
-import { useState } from "react";
-
 import {
   Popover,
   PopoverContent,
   PopoverTrigger,
-} from "@/components/ui/popover";
+} from "@agent-native/toolkit/ui/popover";
+import { IconPlus } from "@tabler/icons-react";
+import { useState } from "react";
 
 const DASHBOARD_CONTEXT =
   "The user wants to create a new analytics dashboard. " +

package/corpus/templates/analytics/app/components/layout/Sidebar.tsx

@@ -83,7 +83,6 @@ import {
 } from "@agent-native/core/client";
 import { ExtensionsSidebarSection } from "@agent-native/core/client/extensions";
 import { OrgSwitcher } from "@agent-native/core/client/org";
-
 import {
   AlertDialog,
   AlertDialogAction,
@@ -93,29 +92,33 @@ import {
   AlertDialogFooter,
   AlertDialogHeader,
   AlertDialogTitle,
-} from "@/components/ui/alert-dialog";
+} from "@agent-native/toolkit/ui/alert-dialog";
 import {
   DropdownMenu,
   DropdownMenuContent,
   DropdownMenuItem,
   DropdownMenuSeparator,
   DropdownMenuTrigger,
-} from "@/components/ui/dropdown-menu";
-import { Input } from "@/components/ui/input";
+} from "@agent-native/toolkit/ui/dropdown-menu";
+import { Input } from "@agent-native/toolkit/ui/input";
 import {
   Popover,
   PopoverTrigger,
   PopoverContent,
-} from "@/components/ui/popover";
-import { Skeleton } from "@/components/ui/skeleton";
-import { Switch } from "@/components/ui/switch";
-import { ToggleGroup, ToggleGroupItem } from "@/components/ui/toggle-group";
+} from "@agent-native/toolkit/ui/popover";
+import { Skeleton } from "@agent-native/toolkit/ui/skeleton";
+import { Switch } from "@agent-native/toolkit/ui/switch";
+import {
+  ToggleGroup,
+  ToggleGroupItem,
+} from "@agent-native/toolkit/ui/toggle-group";
 import {
   Tooltip,
   TooltipTrigger,
   TooltipContent,
   TooltipProvider,
-} from "@/components/ui/tooltip";
+} from "@agent-native/toolkit/ui/tooltip";
+
 import {
   useDashboardViews,
   useDeleteDashboardView,

package/corpus/templates/analytics/app/components/ui/calendar.tsx

@@ -1,8 +1,8 @@
+import { buttonVariants } from "@agent-native/toolkit/ui/button";
 import { IconChevronLeft, IconChevronRight } from "@tabler/icons-react";
 import * as React from "react";
 import { DayPicker } from "react-day-picker";
 
-import { buttonVariants } from "@/components/ui/button";
 import { cn } from "@/lib/utils";
 
 export type CalendarProps = React.ComponentProps<typeof DayPicker>;