@agent-native/core 0.90.1 → 0.90.3

package/corpus/core/src/review/types.ts

@@ -0,0 +1,97 @@
+import type { Visibility } from "../sharing/schema.js";
+
+export type ReviewResourceRole = "viewer" | "editor" | "admin" | "owner";
+export type ReviewCommentKind =
+  | "comment"
+  | "annotation"
+  | "correction"
+  | "question"
+  | "decision"
+  | "review";
+export type ReviewCommentStatus = "open" | "resolved" | "deleted";
+export type ReviewResolutionTarget = "agent" | "human";
+export type ReviewStatus =
+  | "draft"
+  | "in_review"
+  | "approved"
+  | "changes_requested";
+export type ReviewActorKind = "human" | "agent" | "import" | "system";
+
+export interface ReviewResourceAccess {
+  role: ReviewResourceRole;
+  ownerEmail?: string | null;
+  orgId?: string | null;
+  visibility?: Visibility | null;
+  resource?: unknown;
+}
+
+export interface ReviewResourceContext {
+  userEmail?: string | null;
+  orgId?: string | null;
+  caller?: string | null;
+  request?: unknown;
+  [key: string]: unknown;
+}
+
+export interface ReviewableResourceRegistration {
+  type: string;
+  displayName?: string;
+  resolveAccess?: (
+    resourceId: string,
+    ctx?: ReviewResourceContext,
+  ) => Promise<ReviewResourceAccess | null> | ReviewResourceAccess | null;
+}
+
+export interface ReviewMention {
+  label: string;
+  email?: string | null;
+  id?: string | null;
+}
+
+export interface ReviewComment {
+  id: string;
+  resourceType: string;
+  resourceId: string;
+  threadId: string;
+  parentCommentId: string | null;
+  targetId: string | null;
+  kind: ReviewCommentKind;
+  status: ReviewCommentStatus;
+  anchor: unknown | null;
+  body: string;
+  authorEmail: string | null;
+  authorName: string | null;
+  createdBy: ReviewActorKind;
+  resolutionTarget: ReviewResolutionTarget | null;
+  mentions: ReviewMention[];
+  ownerEmail: string | null;
+  orgId: string | null;
+  visibility: Visibility;
+  resolvedBy: string | null;
+  resolvedAt: string | null;
+  consumedAt: string | null;
+  deletedBy: string | null;
+  deletedAt: string | null;
+  createdAt: string;
+  updatedAt: string;
+  metadata: Record<string, unknown> | null;
+}
+
+export interface ReviewStatusEntry {
+  id: string;
+  resourceType: string;
+  resourceId: string;
+  status: ReviewStatus;
+  note: string | null;
+  updatedBy: string | null;
+  updatedAt: string;
+  ownerEmail: string | null;
+  orgId: string | null;
+  visibility: Visibility;
+  metadata: Record<string, unknown> | null;
+}
+
+export interface ReviewScope {
+  userEmail?: string | null;
+  orgId?: string | null;
+}

package/corpus/core/src/server/action-discovery.ts

@@ -606,6 +606,60 @@ export async function mergeCoreSharingActions(
       () => import("../audit/actions/list-audit-events.js"),
     ],
     ["get-audit-event", () => import("../audit/actions/get-audit-event.js")],
+    // History kit — reusable version snapshots and restore surface.
+    [
+      "create-resource-version",
+      () => import("../history/actions/create-resource-version.js"),
+    ],
+    [
+      "list-resource-versions",
+      () => import("../history/actions/list-resource-versions.js"),
+    ],
+    [
+      "get-resource-version",
+      () => import("../history/actions/get-resource-version.js"),
+    ],
+    [
+      "restore-resource-version",
+      () => import("../history/actions/restore-resource-version.js"),
+    ],
+    [
+      "list-resource-history",
+      () => import("../history/actions/list-resource-history.js"),
+    ],
+    // Comments/review kit — reusable inline comments, feedback, and review status.
+    [
+      "list-review-comments",
+      () => import("../review/actions/list-review-comments.js"),
+    ],
+    [
+      "create-review-comment",
+      () => import("../review/actions/create-review-comment.js"),
+    ],
+    [
+      "reply-review-comment",
+      () => import("../review/actions/reply-review-comment.js"),
+    ],
+    [
+      "resolve-review-thread",
+      () => import("../review/actions/resolve-review-thread.js"),
+    ],
+    [
+      "delete-review-comment",
+      () => import("../review/actions/delete-review-comment.js"),
+    ],
+    [
+      "consume-review-feedback",
+      () => import("../review/actions/consume-review-feedback.js"),
+    ],
+    [
+      "get-review-feedback",
+      () => import("../review/actions/get-review-feedback.js"),
+    ],
+    [
+      "set-review-status",
+      () => import("../review/actions/set-review-status.js"),
+    ],
     // Org service tokens (CI credentials, e.g. PLAN_RECAP_TOKEN). Mint/revoke
     // are toolCallable:false — preserved via preserveActionFlags below.
     [

package/corpus/core/src/server/agent-engine-api-key-route.ts

@@ -13,6 +13,7 @@ import {
 import { getOrgContext } from "../org/context.js";
 import { deleteAppSecret, writeAppSecret } from "../secrets/storage.js";
 import { getSession } from "./auth.js";
+import { clearProviderCredentialAuthFailure } from "./credential-provider.js";
 import { readBody } from "./h3-helpers.js";
 
 const PROVIDER_TO_ENV_VAR = new Map(
@@ -202,6 +203,10 @@ export function createAgentEngineApiKeyHandler() {
         scope: resolved.target.scope,
         scopeId: resolved.target.scopeId,
       });
+      await clearProviderCredentialAuthFailure({
+        key: payload.key,
+        value: payload.value,
+      });
     }
 
     if (payload.baseUrl) {

package/corpus/core/src/server/credential-provider.ts

@@ -720,6 +720,114 @@ export async function clearBuilderCredentialAuthFailure(creds: {
   }
 }
 
+const PROVIDER_AUTH_FAILURE_SETTING_PREFIX = "provider-auth-failure:";
+
+export interface ProviderCredentialAuthFailure {
+  fingerprint: string;
+  key: string;
+  message: string;
+  status?: number;
+  code?: string;
+  at: number;
+  ownerEmail?: string | null;
+  orgId?: string | null;
+}
+
+export function providerCredentialFingerprint(
+  key?: string | null,
+  value?: string | null,
+): string | null {
+  const normalizedKey = key?.trim().toUpperCase();
+  const normalizedValue = value?.trim();
+  if (!normalizedKey || !normalizedValue) return null;
+  return createHash("sha256")
+    .update(normalizedKey)
+    .update("\0")
+    .update(normalizedValue)
+    .digest("hex")
+    .slice(0, 24);
+}
+
+function providerAuthFailureSettingKey(fingerprint: string): string {
+  return `${PROVIDER_AUTH_FAILURE_SETTING_PREFIX}${fingerprint}`;
+}
+
+export async function getProviderCredentialAuthFailure(opts: {
+  key?: string | null;
+  value?: string | null;
+}): Promise<ProviderCredentialAuthFailure | null> {
+  const key = opts.key?.trim().toUpperCase() ?? "";
+  const fingerprint = providerCredentialFingerprint(key, opts.value);
+  if (!fingerprint) return null;
+  try {
+    const { getSetting } = await import("../settings/store.js");
+    const row = await getSetting(providerAuthFailureSettingKey(fingerprint));
+    if (!row) return null;
+    if (row.fingerprint !== fingerprint) return null;
+    return {
+      fingerprint,
+      key:
+        typeof row.key === "string" && row.key
+          ? row.key
+          : key || "UNKNOWN_PROVIDER_KEY",
+      message:
+        typeof row.message === "string" && row.message
+          ? row.message
+          : "The model provider rejected the saved API key.",
+      status: typeof row.status === "number" ? row.status : undefined,
+      code: typeof row.code === "string" ? row.code : undefined,
+      at: typeof row.at === "number" ? row.at : Date.now(),
+      ownerEmail:
+        typeof row.ownerEmail === "string" ? row.ownerEmail : undefined,
+      orgId: typeof row.orgId === "string" ? row.orgId : undefined,
+    };
+  } catch {
+    return null;
+  }
+}
+
+export async function recordProviderCredentialAuthFailure(opts: {
+  key?: string | null;
+  value?: string | null;
+  status?: number;
+  code?: string;
+  message?: string;
+}): Promise<void> {
+  try {
+    const key = opts.key?.trim().toUpperCase() ?? "";
+    const value = opts.value?.trim();
+    const fingerprint = providerCredentialFingerprint(key, value);
+    if (!fingerprint) return;
+    const { putSetting } = await import("../settings/store.js");
+    await putSetting(providerAuthFailureSettingKey(fingerprint), {
+      fingerprint,
+      key,
+      message: opts.message || "The model provider rejected the saved API key.",
+      ...(typeof opts.status === "number" && { status: opts.status }),
+      ...(opts.code && { code: opts.code }),
+      at: Date.now(),
+      ownerEmail: getRequestUserEmail() ?? null,
+      orgId: getRequestOrgId() ?? null,
+    });
+  } catch {
+    // Best-effort marker only; the chat error is still returned to the user.
+  }
+}
+
+export async function clearProviderCredentialAuthFailure(opts: {
+  key?: string | null;
+  value?: string | null;
+}): Promise<void> {
+  const fingerprint = providerCredentialFingerprint(opts.key, opts.value);
+  if (!fingerprint) return;
+  try {
+    const { deleteSetting } = await import("../settings/store.js");
+    await deleteSetting(providerAuthFailureSettingKey(fingerprint));
+  } catch {
+    // A stale failure marker should not block writing or using fresh keys.
+  }
+}
+
 /**
  * Write Builder credentials to `app_secrets`.
  *

package/corpus/core/src/server/framework-request-handler.ts

@@ -364,6 +364,48 @@ function installPluginReadyPlaceholders(
   }
 }
 
+function logFrameworkRouteError(args: {
+  method: string | undefined;
+  route: string;
+  status: number;
+  error: unknown;
+}): void {
+  const error = args.error as any;
+  const message = error?.message || String(args.error);
+  const prefix = `[agent-native] ${args.method ?? ""} ${args.route} failed (${args.status})`;
+  if (process.env.NODE_ENV === "production") {
+    console.error(`${prefix}: ${message}`);
+    return;
+  }
+  console.error(`${prefix}: ${message}`, error?.stack || args.error);
+}
+
+function isClientAbortError(error: unknown, event: H3Event): boolean {
+  const err = error as any;
+  const message = typeof err?.message === "string" ? err.message : "";
+  const code = typeof err?.code === "string" ? err.code : "";
+  const node = (event as any).node;
+  return (
+    message === "aborted" ||
+    code === "ECONNRESET" ||
+    node?.req?.destroyed === true ||
+    node?.res?.destroyed === true
+  );
+}
+
+function debugClientAbort(args: {
+  method: string | undefined;
+  route: string;
+  error: unknown;
+}): void {
+  if (process.env.NODE_ENV === "production") return;
+  const err = args.error as any;
+  const message = err?.message || String(args.error);
+  console.debug?.(
+    `[agent-native] ${args.method ?? ""} ${args.route} aborted by client: ${message}`,
+  );
+}
+
 /**
  * Await all tracked plugin initializations. Called by the readiness gate
  * middleware before dispatching framework routes.
@@ -500,10 +542,16 @@ function registerMiddleware(
           : typeof e?.status === "number"
             ? e.status
             : 500;
-      console.error(
-        `[agent-native] ${event.method ?? ""} ${reqPath} failed (${status}):`,
-        e?.stack || e?.message || e,
-      );
+      if (isClientAbortError(err, event)) {
+        debugClientAbort({ method: event.method, route: reqPath, error: err });
+        return undefined;
+      }
+      logFrameworkRouteError({
+        method: event.method,
+        route: reqPath,
+        status,
+        error: err,
+      });
       // Forward 5xx to server-side Sentry — Nitro's own `error` hook may not
       // fire here because we convert the throw into a normal JSON response,
       // and a console.error alone is invisible in deployed environments.

package/corpus/core/src/setup-connections/index.ts

@@ -0,0 +1,89 @@
+export {
+  registerOnboardingStep,
+  listOnboardingSteps,
+  createOnboardingPlugin,
+  defaultOnboardingPlugin,
+  registerDefaultOnboardingSteps,
+  type OnboardingFormField,
+  type OnboardingMethod,
+  type OnboardingMethodBadge,
+  type OnboardingPluginOptions,
+  type OnboardingStep,
+  type OnboardingStepStatus,
+} from "../onboarding/index.js";
+export {
+  deleteAppSecret,
+  getAppSecretMeta,
+  getRequiredSecret,
+  last4,
+  listAppSecretsForScope,
+  listRequiredSecrets,
+  maybeRegisterSecretOnboardingStep,
+  readAppSecret,
+  readAppSecretMeta,
+  registerRequiredSecret,
+  resolveKeyReferences,
+  validateUrlAllowlist,
+  writeAppSecret,
+  type ReadSecretResult,
+  type RegisteredSecret,
+  type SecretKind,
+  type SecretMeta,
+  type SecretRef,
+  type SecretScope,
+  type SecretValidator,
+  type ValidatorResult,
+  type WriteSecretArgs,
+} from "../secrets/index.js";
+export {
+  WORKSPACE_CONNECTION_PROVIDERS,
+  defineWorkspaceConnectionProvider,
+  getWorkspaceConnectionProvider,
+  isWorkspaceConnectionProviderId,
+  listWorkspaceConnectionProviders,
+  listWorkspaceConnectionProvidersForCapability,
+  listWorkspaceConnectionProvidersForTemplate,
+  workspaceConnectionProviderSupports,
+  type ListWorkspaceConnectionProvidersOptions,
+  type WorkspaceConnectionCapability,
+  type WorkspaceConnectionCredentialKey,
+  type WorkspaceConnectionProvider,
+  type WorkspaceConnectionProviderId,
+  type WorkspaceConnectionTemplateUse,
+} from "../connections/index.js";
+export {
+  deleteWorkspaceConnection,
+  getWorkspaceConnection,
+  listWorkspaceConnectionProviderCatalogForApp,
+  listWorkspaceConnectionGrants,
+  listWorkspaceConnections,
+  listWorkspaceConnectionsForApp,
+  markWorkspaceConnectionUsed,
+  resolveWorkspaceConnectionCredentialForApp,
+  resolveWorkspaceConnectionCredentialsForApp,
+  resolveWorkspaceConnectionForApp,
+  revokeWorkspaceConnectionGrant,
+  summarizeWorkspaceConnectionProviderForApp,
+  summarizeWorkspaceConnectionProviderReadiness,
+  upsertWorkspaceConnection,
+  upsertWorkspaceConnectionGrant,
+  type ListWorkspaceConnectionProviderCatalogForAppOptions,
+  type ResolvedWorkspaceConnectionForApp,
+  type ResolveWorkspaceConnectionForAppOptions,
+  type SerializedWorkspaceConnection,
+  type SerializedWorkspaceConnectionGrant,
+  type SummarizeWorkspaceConnectionProviderReadinessOptions,
+  type UpsertWorkspaceConnectionGrantInput,
+  type UpsertWorkspaceConnectionInput,
+  type WorkspaceConnection,
+  type WorkspaceConnectionForAppSummary,
+  type WorkspaceConnectionGrant,
+  type WorkspaceConnectionProviderCatalogForApp,
+  type WorkspaceConnectionProviderCatalogForAppItem,
+  type WorkspaceConnectionProviderReadiness,
+  type WorkspaceConnectionProviderReadinessStatus,
+} from "../workspace-connections/index.js";
+export {
+  registerWorkspaceConnectionOnboardingStep,
+  type RegisterWorkspaceConnectionOnboardingStepOptions,
+} from "./onboarding.js";

package/corpus/core/src/setup-connections/onboarding.ts

@@ -0,0 +1,47 @@
+import { registerOnboardingStep } from "../onboarding/registry.js";
+import type { OnboardingStep } from "../onboarding/types.js";
+
+export interface RegisterWorkspaceConnectionOnboardingStepOptions {
+  id?: string;
+  providerId: string;
+  providerLabel?: string;
+  title?: string;
+  description?: string;
+  order?: number;
+  required?: boolean;
+  settingsUrl?: string;
+  isComplete: OnboardingStep["isComplete"];
+}
+
+export function registerWorkspaceConnectionOnboardingStep({
+  id,
+  providerId,
+  providerLabel,
+  title,
+  description,
+  order = 50,
+  required = false,
+  settingsUrl = "/settings#connections",
+  isComplete,
+}: RegisterWorkspaceConnectionOnboardingStepOptions): void {
+  const label = providerLabel ?? providerId;
+  registerOnboardingStep({
+    id: id ?? `${providerId}-connection`,
+    title: title ?? `Connect ${label}`,
+    description:
+      description ??
+      `Connect ${label} so the app and agent can use the shared workspace connection.`,
+    order,
+    required,
+    methods: [
+      {
+        id: "settings",
+        kind: "link",
+        label: "Open connections",
+        primary: true,
+        payload: { url: settingsUrl },
+      },
+    ],
+    isComplete,
+  });
+}

package/corpus/core/src/transcription/builder-transcription.ts

@@ -12,6 +12,7 @@ export interface BuilderTranscribeOptions {
   maxSpeakers?: number;
   language?: string;
   instructions?: string;
+  timeoutMs?: number;
 }
 
 export interface BuilderTranscribeResult {
@@ -69,8 +70,12 @@ export async function transcribeWithBuilder(
     opts.audioBytes.byteOffset + opts.audioBytes.byteLength,
   ) as ArrayBuffer;
 
+  const timeoutMs =
+    typeof opts.timeoutMs === "number" && Number.isFinite(opts.timeoutMs)
+      ? Math.max(1, Math.floor(opts.timeoutMs))
+      : 45_000;
   const controller = new AbortController();
-  const timeout = setTimeout(() => controller.abort(), 45_000);
+  const timeout = setTimeout(() => controller.abort(), timeoutMs);
   let res: Response;
   try {
     res = await fetch(url, {
@@ -84,7 +89,9 @@ export async function transcribeWithBuilder(
     });
   } catch (err) {
     if ((err as Error)?.name === "AbortError") {
-      throw new Error("Builder transcription timed out after 45 seconds.");
+      throw new Error(
+        `Builder transcription timed out after ${Math.ceil(timeoutMs / 1000)} seconds.`,
+      );
     }
     throw new Error(
       `Builder transcription request failed before response: ${describeError(err)}`,

package/corpus/core/src/vite/action-types-plugin.ts

@@ -89,6 +89,58 @@ const CORE_SHARING_ACTIONS: Array<{ name: string; specifier: string }> = [
     specifier:
       "@agent-native/core/localization/actions/set-localization-preference",
   },
+  {
+    name: "create-resource-version",
+    specifier: "@agent-native/core/history/actions/create-resource-version",
+  },
+  {
+    name: "list-resource-versions",
+    specifier: "@agent-native/core/history/actions/list-resource-versions",
+  },
+  {
+    name: "get-resource-version",
+    specifier: "@agent-native/core/history/actions/get-resource-version",
+  },
+  {
+    name: "restore-resource-version",
+    specifier: "@agent-native/core/history/actions/restore-resource-version",
+  },
+  {
+    name: "list-resource-history",
+    specifier: "@agent-native/core/history/actions/list-resource-history",
+  },
+  {
+    name: "list-review-comments",
+    specifier: "@agent-native/core/review/actions/list-review-comments",
+  },
+  {
+    name: "create-review-comment",
+    specifier: "@agent-native/core/review/actions/create-review-comment",
+  },
+  {
+    name: "reply-review-comment",
+    specifier: "@agent-native/core/review/actions/reply-review-comment",
+  },
+  {
+    name: "resolve-review-thread",
+    specifier: "@agent-native/core/review/actions/resolve-review-thread",
+  },
+  {
+    name: "delete-review-comment",
+    specifier: "@agent-native/core/review/actions/delete-review-comment",
+  },
+  {
+    name: "consume-review-feedback",
+    specifier: "@agent-native/core/review/actions/consume-review-feedback",
+  },
+  {
+    name: "get-review-feedback",
+    specifier: "@agent-native/core/review/actions/get-review-feedback",
+  },
+  {
+    name: "set-review-status",
+    specifier: "@agent-native/core/review/actions/set-review-status",
+  },
 ];
 
 function isRuntimeSourceFile(filename: string): boolean {

package/corpus/templates/analytics/app/components/layout/Layout.tsx

@@ -146,6 +146,7 @@ export function Layout({ children }: LayoutProps) {
     location.pathname === "/extensions" ||
     location.pathname.startsWith("/extensions/");
   const isSessionsRoute = isAnalyticsSessionsRoute(location.pathname);
+  const isSessionDetailRoute = /^\/sessions\/[^/]+/.test(location.pathname);
   const isAskRoute = location.pathname === "/ask";
   const chatHomeHandoffActive = useAgentChatHomeHandoff({
     storageKey: ANALYTICS_CHAT_STORAGE_KEY,
@@ -221,7 +222,7 @@ export function Layout({ children }: LayoutProps) {
   const contentFrame = (
     <div className="flex h-full flex-1 flex-col overflow-hidden">
       <MobileNav showNewChat={isAskRoute} />
-      {!isExtensionsRoute && !isAskRoute && <Header />}
+      {!isExtensionsRoute && !isAskRoute && !isSessionDetailRoute && <Header />}
       <InvitationBanner />
       <main
         className={

package/corpus/templates/analytics/app/components/layout/Sidebar.tsx

@@ -17,10 +17,10 @@ import {
   IconActivity,
   IconPin,
   IconPlus,
-  IconBuilding,
   IconLock,
   IconLink,
   IconMessageCircle,
+  IconUsersGroup,
   IconEye,
   IconEyeOff,
   IconPlayerPlay,
@@ -704,7 +704,7 @@ function SortableRow({
                   }}
                 >
                   {visibility === "private" ? (
-                    <IconBuilding className="me-2 h-3.5 w-3.5" />
+                    <IconUsersGroup className="me-2 h-3.5 w-3.5" />
                   ) : (
                     <IconLock className="me-2 h-3.5 w-3.5" />
                   )}

package/corpus/templates/analytics/app/global.css

@@ -243,27 +243,39 @@
 .an-replay-stage-root .replayer-mouse {
   position: absolute;
   z-index: 2;
-  width: 0.875rem;
-  height: 0.875rem;
-  border-radius: 9999px;
-  background: hsl(217 91% 60%);
+  width: 1.125rem;
+  height: 1.5rem;
+  border-radius: 0;
+  background: transparent;
   background-image: none;
-  box-shadow:
-    0 0 0 2px hsl(0 0% 100% / 0.9),
-    0 1px 6px hsl(0 0% 0% / 0.35);
-  transform: translate(-50%, -50%);
+  box-shadow: none;
+  transform: none;
   transition:
     left 80ms linear,
     top 80ms linear;
   pointer-events: none;
 }
 
-.an-replay-stage-root .replayer-mouse::after {
+.an-replay-stage-root .replayer-mouse::before {
   content: "";
   position: absolute;
   inset: 0;
+  background: hsl(0 0% 100%);
+  clip-path: polygon(0 0, 0 77%, 30% 57%, 48% 100%, 68% 92%, 50% 51%, 92% 51%);
+  filter: drop-shadow(0 0 1px hsl(0 0% 0% / 0.95))
+    drop-shadow(0 1px 3px hsl(0 0% 0% / 0.35));
+}
+
+.an-replay-stage-root .replayer-mouse::after {
+  content: "";
+  position: absolute;
+  left: -0.5rem;
+  top: -0.5rem;
+  width: 1rem;
+  height: 1rem;
   border-radius: 9999px;
-  background: hsl(217 91% 60%);
+  border: 2px solid hsl(217 91% 60%);
+  background: transparent;
   opacity: 0;
 }