@agent-native/core 0.92.0 → 0.92.1

package/corpus/core/src/client/error-capture.ts

@@ -317,6 +317,72 @@ function signatureOf(type: string, message: string, stack?: string): string {
   return `${type}|${message}|${firstStackLine(stack)}`;
 }
 
+function normalizeGlobalErrorEvent(event: ErrorEvent): {
+  type: string;
+  message: string;
+  stack?: string;
+} {
+  const error = event?.error;
+  const normalized = error
+    ? normalizeCapturedError(error)
+    : {
+        type: "Error",
+        message: String(event?.message ?? "Uncaught error"),
+      };
+
+  if (!normalized.stack && event?.filename) {
+    const line = event.lineno ?? 0;
+    const col = event.colno ?? 0;
+    normalized.stack = `at ${event.filename}:${line}:${col}`;
+  }
+
+  return normalized;
+}
+
+function shouldIgnoreAutoCapturedError(normalized: {
+  type: string;
+  message: string;
+  stack?: string;
+}): boolean {
+  const message = (normalized.message || "").trim();
+  const stack = normalized.stack || "";
+
+  if (
+    /^ResizeObserver loop (?:limit exceeded|completed with undelivered notifications\.?)$/i.test(
+      message,
+    )
+  ) {
+    return true;
+  }
+
+  if (
+    normalized.type === "InvalidStateError" &&
+    /^Transition was aborted because of invalid state$/i.test(message)
+  ) {
+    return true;
+  }
+
+  if (
+    /^This script should only be loaded in a browser extension\.?$/i.test(
+      message,
+    )
+  ) {
+    return true;
+  }
+
+  const hasExtensionFrame =
+    /\b(?:chrome|moz|safari|webkit)-extension:\/\//i.test(stack) ||
+    /\binjectScriptAdjust\.js\b/i.test(stack);
+  if (
+    hasExtensionFrame &&
+    /^(?:TypeError:\s*)?Failed to fetch$/i.test(message)
+  ) {
+    return true;
+  }
+
+  return false;
+}
+
 function shouldDedupe(
   runtime: ErrorCaptureRuntime,
   signature: string,
@@ -540,13 +606,8 @@ export function installErrorCapture(
   if (runtime.config.captureGlobalErrors) {
     const onError = (event: ErrorEvent) => {
       try {
-        const error = event?.error;
-        const normalized = error
-          ? normalizeCapturedError(error)
-          : {
-              type: "Error",
-              message: String(event?.message ?? "Uncaught error"),
-            };
+        const normalized = normalizeGlobalErrorEvent(event);
+        if (shouldIgnoreAutoCapturedError(normalized)) return;
         // Global errors are already logged by the session replay recorder, so
         // don't re-emit them onto the replay timeline (avoid double-counting).
         dispatch(
@@ -575,6 +636,7 @@ export function installErrorCapture(
         if (!normalized.type || normalized.type === "Error") {
           normalized.type = "UnhandledRejection";
         }
+        if (shouldIgnoreAutoCapturedError(normalized)) return;
         dispatch(
           runtime,
           buildEvent(runtime, normalized, {

package/corpus/core/src/client/extensions/EmbeddedExtension.tsx

@@ -41,6 +41,7 @@ import {
   type BridgePolicyContext,
   type ExtensionBridgeRole,
 } from "./iframe-bridge.js";
+import { normalizeAgentNativeExtensionSandbox } from "./portable-extension.js";
 
 interface Extension {
   id: string;
@@ -55,6 +56,9 @@ interface Extension {
   };
 }
 
+const EXTENSION_IFRAME_SANDBOX =
+  normalizeAgentNativeExtensionSandbox(undefined);
+
 // Read the host app's *actual* computed theme values for the shared token set
 // (THEME_VAR_NAMES). The iframe ships with a generic baked palette
 // (getThemeVars); syncing the live values keeps embedded extensions visually
@@ -392,7 +396,7 @@ export function EmbeddedExtension({
         key={`${extensionId}-${extension.updatedAt ?? ""}`}
         src={iframeSrc}
         title={extension.name}
-        sandbox="allow-scripts allow-forms"
+        sandbox={EXTENSION_IFRAME_SANDBOX}
         style={{ width: "100%", border: 0, height, display: "block" }}
         onLoad={() => {
           iframeRef.current?.contentWindow?.postMessage(

package/corpus/core/src/client/extensions/ExtensionViewer.tsx

@@ -51,6 +51,7 @@ import {
   type BridgePolicyContext,
   type ExtensionBridgeRole,
 } from "./iframe-bridge.js";
+import { normalizeAgentNativeExtensionSandbox } from "./portable-extension.js";
 
 const THEME_CSS_VARS = [
   "--background",
@@ -83,6 +84,9 @@ const THEME_CSS_VARS = [
   "--sidebar-ring",
 ];
 
+const EXTENSION_IFRAME_SANDBOX =
+  normalizeAgentNativeExtensionSandbox(undefined);
+
 function getParentThemeVars(): Record<string, string> {
   const computed = getComputedStyle(document.documentElement);
   const vars: Record<string, string> = {};
@@ -261,6 +265,40 @@ function compactDiffLines(
   return result;
 }
 
+function ExtensionUnavailableState({ status }: { status?: number }) {
+  const sessionExpired = status === 401;
+  const accessDenied = status === 403;
+  const unavailable = status === 404;
+  const title = sessionExpired
+    ? "Session expired"
+    : accessDenied
+      ? "Extension is not shared"
+      : unavailable
+        ? "Extension is unavailable"
+        : "Extension not found";
+  const message = sessionExpired
+    ? "Sign in again to view this extension."
+    : accessDenied
+      ? "You do not have access to this extension. Ask the owner to share it with your organization or open a different extension."
+      : "This extension may not be shared with you, may have been deleted, or is not available to your account.";
+  return (
+    <div className="flex h-full min-h-[20rem] items-center justify-center bg-muted/20 p-6">
+      <div className="w-full max-w-md rounded-lg border border-border bg-background p-6 text-center shadow-sm">
+        <p className="text-sm font-semibold text-foreground">{title}</p>
+        <p className="mt-2 text-sm leading-6 text-muted-foreground">
+          {message}
+        </p>
+        <Link
+          to="/extensions"
+          className="mt-4 inline-flex h-9 items-center justify-center rounded-md border border-input px-3 text-sm font-medium text-foreground hover:bg-accent hover:text-accent-foreground"
+        >
+          Back to extensions
+        </Link>
+      </div>
+    </div>
+  );
+}
+
 function diffLineClass(line: CompactDiffLine): string {
   switch (line.type) {
     case "insert":
@@ -1071,6 +1109,7 @@ export function ExtensionViewer({ extensionId }: ExtensionViewerProps) {
   const {
     data: extension,
     error: extensionError,
+    failureReason: extensionFailureReason,
     isFetching,
     isLoading,
   } = useQuery<Extension>({
@@ -1079,6 +1118,9 @@ export function ExtensionViewer({ extensionId }: ExtensionViewerProps) {
       const res = await fetch(
         agentNativePath(`/_agent-native/extensions/${extensionId}`),
       );
+      if (res.status === 401) {
+        throw extensionLoadError(401, "Session expired");
+      }
       if (res.status === 404) {
         throw extensionLoadError(404, "Extension not found");
       }
@@ -1092,6 +1134,7 @@ export function ExtensionViewer({ extensionId }: ExtensionViewerProps) {
     },
     retry: shouldRetryExtensionLoad,
     retryDelay: (attempt) => Math.min(1000 * 2 ** attempt, 4000),
+    refetchOnMount: "always",
   });
 
   toolRef.current = extension ?? null;
@@ -1130,6 +1173,13 @@ export function ExtensionViewer({ extensionId }: ExtensionViewerProps) {
     if (!extension?.content || !isEmbedMcpChatBridgeActive()) return undefined;
     return buildExtensionViewerSrcDoc(extension, isDark);
   }, [extension, isDark]);
+  const unavailableStatus = extensionLoadErrorStatus(
+    extensionError ?? extensionFailureReason,
+  );
+  const latestFetchDenied =
+    unavailableStatus === 401 ||
+    unavailableStatus === 403 ||
+    unavailableStatus === 404;
 
   useEffect(() => {
     setIframeReady(false);
@@ -1187,13 +1237,8 @@ export function ExtensionViewer({ extensionId }: ExtensionViewerProps) {
     );
   }
 
-  if (!extension) {
-    const status = extensionLoadErrorStatus(extensionError);
-    return (
-      <div className="flex h-full items-center justify-center text-sm text-muted-foreground">
-        {status === 403 ? "Extension access denied" : "Extension not found"}
-      </div>
-    );
+  if (latestFetchDenied || !extension) {
+    return <ExtensionUnavailableState status={unavailableStatus} />;
   }
 
   const isLocalExtension = extension.source?.mode === "local-files";
@@ -1334,7 +1379,7 @@ export function ExtensionViewer({ extensionId }: ExtensionViewerProps) {
             src={iframeSrcDoc ? undefined : iframeSrc}
             srcDoc={iframeSrcDoc}
             className="h-full w-full border-0"
-            sandbox="allow-scripts allow-forms"
+            sandbox={EXTENSION_IFRAME_SANDBOX}
             title={extension.name}
             style={{
               pointerEvents: openPopoverCount > 0 ? "none" : "auto",

package/corpus/core/src/client/extensions/InlineExtensionFrame.tsx

@@ -11,6 +11,7 @@ import {
   type BridgePolicyContext,
   type ExtensionBridgeRole,
 } from "./iframe-bridge.js";
+import { normalizeAgentNativeExtensionSandbox } from "./portable-extension.js";
 
 const THEME_CSS_VARS = [
   "--background",
@@ -43,6 +44,9 @@ const THEME_CSS_VARS = [
   "--sidebar-ring",
 ];
 
+const EXTENSION_IFRAME_SANDBOX =
+  normalizeAgentNativeExtensionSandbox(undefined);
+
 interface InlineExtensionSource {
   mode?: "database" | "local-files";
   permissions?: BridgePolicyContext["permissions"];
@@ -642,7 +646,7 @@ export function InlineExtensionFrame({
         src={iframeSrc}
         srcDoc={srcDoc}
         title={extension.name}
-        sandbox="allow-scripts allow-forms"
+        sandbox={EXTENSION_IFRAME_SANDBOX}
         style={{ width: "100%", border: 0, height, display: "block" }}
         onLoad={() => {
           sendThemeToIframe();

package/corpus/core/src/client/extensions/portable-extension.ts

@@ -447,6 +447,7 @@ export function normalizeAgentNativeExtensionSandbox(
   );
   tokens.delete("allow-same-origin");
   tokens.add("allow-scripts");
+  tokens.add("allow-downloads");
   return Array.from(tokens).join(" ");
 }
 

package/corpus/core/src/client/org/OrgSwitcher.tsx

@@ -62,7 +62,7 @@ export interface OrgSwitcherProps {
   reserveSpace?: boolean;
   /**
    * Path to navigate to when the user clicks "Organization settings".
-   * Defaults to the standard Team tab inside Settings. Templates with an
+   * Defaults to the Organization tab inside Settings. Templates with an
    * established org surface can pass their own path; pass `null` to only open
    * the in-sidebar settings panel.
    */
@@ -98,7 +98,7 @@ const APP_SUBMENU_CONTENT_CLASS =
 const SWITCHER_BUTTON_CLASS =
   "flex w-full items-center gap-2 rounded-md border border-border/70 px-2.5 py-1.5 text-xs font-medium text-muted-foreground hover:bg-accent/50 hover:text-foreground focus:outline-none focus-visible:ring-2 focus-visible:ring-ring disabled:pointer-events-none disabled:opacity-60 cursor-pointer";
 
-const DEFAULT_ORGANIZATION_SETTINGS_PATH = "/settings#team";
+const DEFAULT_ORGANIZATION_SETTINGS_PATH = "/settings#organization";
 
 const APP_ICON_MAP: Record<string, typeof IconApps> = {
   Mail: IconMail,
@@ -130,7 +130,9 @@ function appMenuIcon(app: OrgSwitcherAppLink): typeof IconApps {
 }
 
 function organizationSettingsPath(path: string): string {
-  return path.includes("#") ? path : `${path}#team`;
+  if (path.includes("#")) return path;
+  const pathname = path.split("?")[0]?.replace(/\/+$/, "");
+  return pathname === "/settings" ? `${path}#organization` : path;
 }
 
 function AppMenuLink({
@@ -547,14 +549,15 @@ export function OrgSwitcher({
                   type="button"
                   onClick={() => {
                     setOpen(false);
-                    window.dispatchEvent(new CustomEvent("agent-panel:open"));
-                    window.dispatchEvent(
-                      new CustomEvent("agent-panel:open-settings", {
-                        detail: { section: "workspace-settings" },
-                      }),
-                    );
                     if (organizationSettingsHref) {
                       navigate(organizationSettingsHref);
+                    } else {
+                      window.dispatchEvent(new CustomEvent("agent-panel:open"));
+                      window.dispatchEvent(
+                        new CustomEvent("agent-panel:open-settings", {
+                          detail: { section: "workspace-settings" },
+                        }),
+                      );
                     }
                   }}
                   className={`${ITEM_CLASS} cursor-pointer`}

package/corpus/core/src/client/org/TeamPage.tsx

@@ -350,81 +350,87 @@ function MembersCard() {
         )}
       </div>
 
-      <div className="border-t border-border pt-3 space-y-1">
-        <div className="text-xs font-medium text-muted-foreground uppercase tracking-wide mb-2">
-          {t("org.members")}
-        </div>
-        {isLoadingMembers && members.length === 0 && (
-          <>
-            {[0, 1, 2].map((i) => (
+      <div className="grid gap-5 border-t border-border pt-3 lg:grid-cols-[minmax(0,1fr)_minmax(18rem,22rem)]">
+        <div className="min-w-0 space-y-4">
+          <div className="space-y-1">
+            <div className="text-xs font-medium text-muted-foreground uppercase tracking-wide mb-2">
+              {t("org.members")}
+            </div>
+            {isLoadingMembers && members.length === 0 && (
+              <>
+                {[0, 1, 2].map((i) => (
+                  <div
+                    key={i}
+                    className="flex items-center justify-between py-1.5 px-2"
+                  >
+                    <div className="flex items-center gap-2">
+                      <div
+                        className="h-3.5 rounded bg-muted animate-pulse"
+                        style={{ width: `${140 + i * 30}px` }}
+                      />
+                      <div className="h-3.5 w-3.5 rounded bg-muted animate-pulse" />
+                    </div>
+                  </div>
+                ))}
+              </>
+            )}
+            {members.map((m) => (
+              <MemberRow
+                key={m.email}
+                email={m.email}
+                role={m.role}
+                isCurrentUser={m.email === org.email}
+                currentUserRole={org.role ?? null}
+              />
+            ))}
+            {pendingInvites.map((inv) => (
               <div
-                key={i}
-                className="flex items-center justify-between py-1.5 px-2"
+                key={inv.id}
+                className="flex items-center justify-between gap-2 py-1.5 px-2 opacity-60"
               >
-                <div className="flex items-center gap-2">
-                  <div
-                    className="h-3.5 rounded bg-muted animate-pulse"
-                    style={{ width: `${140 + i * 30}px` }}
-                  />
-                  <div className="h-3.5 w-3.5 rounded bg-muted animate-pulse" />
+                <div className="flex min-w-0 items-center gap-2">
+                  <span className="truncate text-sm">{inv.email}</span>
+                  <RoleIcon role={inv.role} />
+                  <span className="rounded border border-border px-1.5 py-0.5 text-[10px] text-muted-foreground">
+                    Invited{inv.role === "admin" ? " · admin" : ""}
+                  </span>
                 </div>
               </div>
             ))}
-          </>
-        )}
-        {members.map((m) => (
-          <MemberRow
-            key={m.email}
-            email={m.email}
-            role={m.role}
-            isCurrentUser={m.email === org.email}
-            currentUserRole={org.role ?? null}
-          />
-        ))}
-        {pendingInvites.map((inv) => (
-          <div
-            key={inv.id}
-            className="flex items-center justify-between py-1.5 px-2 opacity-60"
-          >
-            <div className="flex items-center gap-2">
-              <span className="text-sm">{inv.email}</span>
-              <RoleIcon role={inv.role} />
-              <span className="rounded border border-border px-1.5 py-0.5 text-[10px] text-muted-foreground">
-                Invited{inv.role === "admin" ? " · admin" : ""}
-              </span>
-            </div>
           </div>
-        ))}
-      </div>
 
-      {isOwnerOrAdmin && (
-        <div className="border-t border-border pt-3">
-          {!showInviteForm ? (
-            <button
-              type="button"
-              onClick={() => setShowInviteForm(true)}
-              className="flex items-center gap-1.5 rounded-md border border-border px-2.5 py-1.5 text-xs font-medium hover:bg-accent/50"
-            >
-              <IconUserPlus className="h-3.5 w-3.5" />
-              Invite members
-            </button>
-          ) : (
-            <BulkInviteForm
-              currentUserRole={org.role}
-              onClose={() => setShowInviteForm(false)}
-            />
+          {isOwnerOrAdmin && (
+            <div className="border-t border-border pt-3">
+              {!showInviteForm ? (
+                <button
+                  type="button"
+                  onClick={() => setShowInviteForm(true)}
+                  className="flex items-center gap-1.5 rounded-md border border-border px-2.5 py-1.5 text-xs font-medium hover:bg-accent/50"
+                >
+                  <IconUserPlus className="h-3.5 w-3.5" />
+                  Invite members
+                </button>
+              ) : (
+                <BulkInviteForm
+                  currentUserRole={org.role}
+                  onClose={() => setShowInviteForm(false)}
+                />
+              )}
+            </div>
           )}
         </div>
-      )}
 
-      {isOwnerOrAdmin && (
-        <DomainSettingsSection
-          domain={org.allowedDomain}
-          ownerEmail={org.email}
-        />
-      )}
+        {isOwnerOrAdmin && (
+          <div className="min-w-0 space-y-3 border-t border-border pt-3 lg:border-s lg:border-t-0 lg:ps-5 lg:pt-0">
+            <DomainSettingsSection
+              domain={org.allowedDomain}
+              ownerEmail={org.email}
+            />
 
-      {isOwner && <A2ASecretSection secret={org.a2aSecret} />}
+            {isOwner && <A2ASecretSection secret={org.a2aSecret} />}
+          </div>
+        )}
+      </div>
 
       <ErrorText error={removeMember.error} />
       <ErrorText error={switchOrg.error} />
@@ -459,9 +465,9 @@ function MemberRow({
       (currentUserRole === "admin" && role === "member"));
 
   return (
-    <div className="flex items-center justify-between py-1.5 px-2 rounded hover:bg-accent/30">
-      <div className="flex items-center gap-2">
-        <span className="text-sm">{email}</span>
+    <div className="flex items-center justify-between gap-2 py-1.5 px-2 rounded hover:bg-accent/30">
+      <div className="flex min-w-0 items-center gap-2">
+        <span className="truncate text-sm">{email}</span>
         <RoleIcon role={role} />
         {isCurrentUser && (
           <span className="rounded border border-border px-1.5 py-0.5 text-[10px] text-muted-foreground">
@@ -475,7 +481,7 @@ function MemberRow({
         )}
       </div>
       {canManage && (
-        <div className="flex items-center gap-1">
+        <div className="flex shrink-0 items-center gap-1">
           {editing ? (
             <select
               autoFocus
@@ -917,7 +923,7 @@ function DomainSettingsSection({
   }
 
   return (
-    <div className="border-t border-border pt-3 space-y-2">
+    <div className="space-y-2 border-t border-border pt-3 first:border-t-0 first:pt-0">
       <div className="text-xs font-medium text-muted-foreground uppercase tracking-wide">
         Email domain auto-join
       </div>
@@ -1078,7 +1084,7 @@ function A2ASecretSection({ secret }: { secret: string | null | undefined }) {
   const masked = secret ? "****" + secret.slice(-8) : "Not set";
 
   return (
-    <div className="border-t border-border pt-3 space-y-2">
+    <div className="space-y-2 border-t border-border pt-3 first:border-t-0 first:pt-0">
       <div className="text-xs font-medium text-muted-foreground uppercase tracking-wide">
         Cross-app authentication
       </div>
@@ -1273,7 +1279,7 @@ export function TeamPage({
   const { data: org, isLoading } = useOrg();
 
   const content = (
-    <div className={`space-y-6 max-w-2xl ${className ?? ""}`}>
+    <div className={`space-y-6 ${className ?? "max-w-2xl"}`}>
       {showTitle ? (
         <h2 className="text-2xl font-bold tracking-tight">
           {title ?? t("org.team")}