@agent-native/core 0.95.1 → 0.97.0

package/corpus/core/src/server/realtime-voice.ts

@@ -8,6 +8,7 @@ import {
   type H3Event,
 } from "h3";
 
+import { getBuilderGatewayRequestHeaders } from "../agent/engine/builder-gateway-headers.js";
 import {
   actionsToEngineTools,
   type ActionEntry,
@@ -18,9 +19,14 @@ import {
   sanitizeToolErrorValue,
 } from "../agent/tool-error-redaction.js";
 import { getSession } from "./auth.js";
-import { resolveSecret } from "./credential-provider.js";
+import {
+  getBuilderGatewayBaseUrl,
+  resolveBuilderCredentials,
+  resolveSecret,
+} from "./credential-provider.js";
 import { getH3App } from "./framework-request-handler.js";
 import { runWithRequestContext } from "./request-context.js";
+import { isSameOriginRequest } from "./request-origin.js";
 
 export const REALTIME_VOICE_SESSION_PATH =
   "/_agent-native/realtime-voice/session";
@@ -296,6 +302,10 @@ function createSessionHandler(
 ) {
   return defineEventHandler(async (event: H3Event) => {
     if (getMethod(event) !== "POST") return invalidMethod(event);
+    if (!isSameOriginRequest(event)) {
+      setResponseStatus(event, 403);
+      return { error: "Cross-origin request rejected" };
+    }
     setResponseHeader(event, "Cache-Control", "no-store");
 
     const auth = await authenticateVoiceRequest(event, options);
@@ -336,12 +346,20 @@ function createSessionHandler(
           : undefined,
       },
       async () => {
-        const apiKey = (await resolveSecret("OPENAI_API_KEY"))?.trim();
-        if (!apiKey) {
-          setResponseStatus(event, 400);
+        const builderCredentials = await resolveBuilderCredentials();
+        const builderConfigured = Boolean(
+          builderCredentials.privateKey?.trim() &&
+          builderCredentials.publicKey?.trim(),
+        );
+        const apiKey = builderConfigured
+          ? null
+          : (await resolveSecret("OPENAI_API_KEY"))?.trim();
+        if (!builderConfigured && !apiKey) {
+          setResponseStatus(event, 409);
           return {
             error:
-              "Configure OPENAI_API_KEY in Settings to use realtime voice.",
+              "Connect Builder or configure an OpenAI API key to use realtime voice.",
+            code: "realtime_voice_setup_required",
           };
         }
 
@@ -369,39 +387,73 @@ function createSessionHandler(
           tool_choice: "auto",
         };
 
-        const form = new FormData();
-        form.set("sdp", sdp);
-        form.set("session", JSON.stringify(session));
-
         let upstream: Response;
         try {
-          upstream = await fetch(OPENAI_REALTIME_CALLS_URL, {
-            method: "POST",
-            headers: {
-              Authorization: `Bearer ${apiKey}`,
-              "OpenAI-Safety-Identifier": await realtimeVoiceSafetyIdentifier(
-                auth.userEmail,
-              ),
-            },
-            body: form,
-          });
+          if (builderConfigured) {
+            const gatewayUrl = new URL(
+              "realtime/calls",
+              getBuilderGatewayBaseUrl().endsWith("/")
+                ? getBuilderGatewayBaseUrl()
+                : `${getBuilderGatewayBaseUrl()}/`,
+            );
+            gatewayUrl.searchParams.set(
+              "apiKey",
+              builderCredentials.publicKey!.trim(),
+            );
+            upstream = await fetch(gatewayUrl.toString(), {
+              method: "POST",
+              headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${builderCredentials.privateKey!.trim()}`,
+                "x-builder-api-key": builderCredentials.publicKey!.trim(),
+                ...getBuilderGatewayRequestHeaders(),
+                ...(builderCredentials.userId
+                  ? { "x-builder-user-id": builderCredentials.userId }
+                  : {}),
+              },
+              body: JSON.stringify({ sdp, session }),
+            });
+          } else {
+            const form = new FormData();
+            form.set("sdp", sdp);
+            form.set("session", JSON.stringify(session));
+            upstream = await fetch(OPENAI_REALTIME_CALLS_URL, {
+              method: "POST",
+              headers: {
+                Authorization: `Bearer ${apiKey}`,
+                "OpenAI-Safety-Identifier": await realtimeVoiceSafetyIdentifier(
+                  auth.userEmail,
+                ),
+              },
+              body: form,
+            });
+          }
         } catch {
           setResponseStatus(event, 502);
-          return { error: "Could not reach the OpenAI Realtime API" };
+          return {
+            error: builderConfigured
+              ? "Could not reach the Builder realtime voice gateway"
+              : "Could not reach the OpenAI Realtime API",
+          };
         }
 
         if (!upstream.ok) {
-          const detail = await safeOpenAiErrorDetail(upstream, apiKey);
-          setResponseStatus(event, 502);
+          const detail = await safeOpenAiErrorDetail(
+            upstream,
+            builderConfigured ? builderCredentials.privateKey! : apiKey!,
+          );
+          setResponseStatus(event, builderConfigured ? upstream.status : 502);
           return {
-            error: `OpenAI rejected the realtime session (${upstream.status})${detail ? `: ${detail}` : ""}`,
+            error: `${builderConfigured ? "Builder" : "OpenAI"} rejected the realtime session (${upstream.status})${detail ? `: ${detail}` : ""}`,
           };
         }
 
         const answerSdp = await upstream.text().catch(() => "");
         if (!answerSdp.trim()) {
           setResponseStatus(event, 502);
-          return { error: "OpenAI returned an empty realtime session answer" };
+          return {
+            error: `${builderConfigured ? "Builder" : "OpenAI"} returned an empty realtime session answer`,
+          };
         }
 
         setResponseStatus(event, upstream.status);
@@ -482,6 +534,10 @@ function createToolHandler(
 ) {
   return defineEventHandler(async (event: H3Event) => {
     if (getMethod(event) !== "POST") return invalidMethod(event);
+    if (!isSameOriginRequest(event)) {
+      setResponseStatus(event, 403);
+      return { error: "Cross-origin request rejected" };
+    }
     setResponseHeader(event, "Cache-Control", "no-store");
 
     const auth = await authenticateVoiceRequest(event, options);

package/corpus/core/src/server/request-origin.ts

@@ -0,0 +1,63 @@
+import { getRequestHeader, type H3Event } from "h3";
+
+function isLoopbackHost(host: string): boolean {
+  return host.startsWith("localhost:") || host.startsWith("127.0.0.1:");
+}
+
+/**
+ * Reject cross-site POSTs. Cookies are `SameSite=None; Secure` over HTTPS so
+ * the browser would otherwise attach the session to a forged form submission
+ * from evil.com, causing us to spend provider credits on the user's behalf.
+ * Same-origin browsers always send `Origin` on POST; if it's missing we fall
+ * back to `Sec-Fetch-Site` so Safari's fetch-spec behavior still works.
+ */
+export function isSameOriginRequest(event: H3Event): boolean {
+  const host = getRequestHeader(event, "host");
+  const origin = getRequestHeader(event, "origin");
+  if (origin && host) {
+    try {
+      const parsed = new URL(origin);
+      const forwardedProto = getRequestHeader(event, "x-forwarded-proto");
+      const forwardedProtocol =
+        forwardedProto === "https" || forwardedProto === "http"
+          ? `${forwardedProto}:`
+          : null;
+      const matchesScheme = forwardedProtocol
+        ? parsed.protocol === forwardedProtocol
+        : parsed.protocol === "https:" ||
+          (parsed.protocol === "http:" && isLoopbackHost(host));
+      if (parsed.host === host && matchesScheme) return true;
+      // Tauri desktop dev serves the tray WebView from localhost:1420 while
+      // the app server lives on the template dev port. Production Tauri
+      // WebViews can also send a tauri://localhost origin. Trust that custom
+      // scheme, while limiting the web-scheme desktop origins below to a
+      // loopback app server so arbitrary websites still fail the CSRF check.
+      if (parsed.protocol === "tauri:" && parsed.hostname === "localhost") {
+        return true;
+      }
+      if (
+        (parsed.protocol === "http:" || parsed.protocol === "https:") &&
+        parsed.hostname === "tauri.localhost" &&
+        isLoopbackHost(host)
+      ) {
+        return true;
+      }
+      if (
+        parsed.protocol === "http:" &&
+        (parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1") &&
+        parsed.port === "1420" &&
+        isLoopbackHost(host)
+      ) {
+        return true;
+      }
+      return false;
+    } catch {
+      return false;
+    }
+  }
+  const fetchSite = getRequestHeader(event, "sec-fetch-site");
+  if (fetchSite) return fetchSite === "same-origin" || fetchSite === "none";
+  // No Origin and no Sec-Fetch-Site: likely a non-browser client (curl,
+  // server-side) — safe to allow, CSRF requires a browser with ambient cookies.
+  return true;
+}

package/corpus/core/src/server/transcribe-voice.ts

@@ -20,7 +20,6 @@
 import {
   defineEventHandler,
   getMethod,
-  getRequestHeader,
   readMultipartFormData,
   setResponseStatus,
   type H3Event,
@@ -43,6 +42,7 @@ import {
   resolveSecret,
 } from "./credential-provider.js";
 import { runWithRequestContext } from "./request-context.js";
+import { isSameOriginRequest } from "./request-origin.js";
 
 const WHISPER_URL = "https://api.openai.com/v1/audio/transcriptions";
 const GROQ_URL = "https://api.groq.com/openai/v1/audio/transcriptions";
@@ -75,55 +75,6 @@ const BUILDER_GEMINI_TRANSCRIPTION_MODEL = "gemini-3-1-flash-lite";
 const GEMINI_MODEL = "gemini-2.0-flash-lite";
 const GEMINI_URL = `https://generativelanguage.googleapis.com/v1beta/models/${GEMINI_MODEL}:generateContent`;
 
-/**
- * Reject cross-site POSTs. Cookies are `SameSite=None; Secure` over HTTPS so
- * the browser would otherwise attach the session to a forged form submission
- * from evil.com, causing us to spend OpenAI credits on the user's behalf.
- * Same-origin browsers always send `Origin` on POST; if it's missing we fall
- * back to `Sec-Fetch-Site` so Safari's fetch-spec behavior still works.
- */
-function isSameOriginRequest(event: H3Event): boolean {
-  const host = getRequestHeader(event, "host");
-  const origin = getRequestHeader(event, "origin");
-  if (origin && host) {
-    try {
-      const parsed = new URL(origin);
-      if (parsed.host === host) return true;
-      // Tauri desktop dev serves the tray WebView from localhost:1420 while
-      // the app server lives on the template dev port. Production Tauri
-      // WebViews can also send a tauri://localhost origin. Treat only those
-      // desktop origins as trusted cross-origin callers; arbitrary websites
-      // still fail the CSRF check.
-      if (parsed.protocol === "tauri:" && parsed.hostname === "localhost") {
-        return true;
-      }
-      if (
-        (parsed.protocol === "http:" || parsed.protocol === "https:") &&
-        parsed.hostname === "tauri.localhost" &&
-        (host.startsWith("localhost:") || host.startsWith("127.0.0.1:"))
-      ) {
-        return true;
-      }
-      if (
-        parsed.protocol === "http:" &&
-        (parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1") &&
-        parsed.port === "1420" &&
-        (host.startsWith("localhost:") || host.startsWith("127.0.0.1:"))
-      ) {
-        return true;
-      }
-      return false;
-    } catch {
-      return false;
-    }
-  }
-  const fetchSite = getRequestHeader(event, "sec-fetch-site");
-  if (fetchSite) return fetchSite === "same-origin" || fetchSite === "none";
-  // No Origin and no Sec-Fetch-Site: likely a non-browser client (curl,
-  // server-side) — safe to allow, CSRF requires a browser with ambient cookies.
-  return true;
-}
-
 /**
  * Derive an AbortSignal that fires when the client disconnects mid-request
  * (e.g. the desktop client's own 8s ceiling firing before a provider call's

package/corpus/core/src/server/voice-providers-status.ts

@@ -22,7 +22,7 @@ import {
 import { getOrgContext } from "../org/context.js";
 import { getSession } from "./auth.js";
 import {
-  resolveHasBuilderPrivateKey,
+  resolveHasCompleteBuilderConnection,
   resolveSecret,
 } from "./credential-provider.js";
 import { resolveGoogleRealtimeCredentials } from "./google-realtime-session.js";
@@ -90,8 +90,9 @@ export function createVoiceProvidersStatusHandler() {
     let builder = false;
     try {
       builder =
-        (await withRequestContext(() => resolveHasBuilderPrivateKey())) ===
-        true;
+        (await withRequestContext(() =>
+          resolveHasCompleteBuilderConnection(),
+        )) === true;
     } catch {
       builder = false;
     }

package/corpus/core/src/shared/cache-control.ts

@@ -1,21 +1,15 @@
 export const DEFAULT_SSR_CACHE_CONTROL = "public, max-age=0, must-revalidate";
 
 export const DEFAULT_SSR_CDN_CACHE_CONTROL =
-  "public, s-maxage=3600, stale-while-revalidate=604800, stale-if-error=3600";
+  "public, s-maxage=600, stale-while-revalidate=604800, stale-if-error=3600";
 
 export const DEFAULT_SSR_NETLIFY_CDN_CACHE_CONTROL =
-  "public, durable, s-maxage=3600, stale-while-revalidate=604800, stale-if-error=3600";
-
-// React Router data requests can select a subset of route loaders with
-// `?_routes=...`. Ignore every other query parameter (UTM tags, click ids,
-// and similar tracking noise) so they cannot fragment Netlify's SSR cache.
-export const DEFAULT_SSR_NETLIFY_VARY = "query=_routes";
+  "public, durable, s-maxage=600, stale-while-revalidate=604800, stale-if-error=3600";
 
 export const DEFAULT_SSR_CACHE_HEADERS = {
   "cache-control": DEFAULT_SSR_CACHE_CONTROL,
   "cdn-cache-control": DEFAULT_SSR_CDN_CACHE_CONTROL,
   "netlify-cdn-cache-control": DEFAULT_SSR_NETLIFY_CDN_CACHE_CONTROL,
-  "netlify-vary": DEFAULT_SSR_NETLIFY_VARY,
 } as const;
 
 export const DEFAULT_SPECULATION_RULES_PATH =

package/corpus/core/src/styles/agent-native.css

@@ -25,6 +25,7 @@
 @import "./agent-conversation.css";
 @import "./rich-markdown-editor.css";
 @import "./blocks.css";
+@import "./chat-history-list.css";
 
 /* Scan @agent-native/core's compiled client output for Tailwind classes.
    Path is resolved relative to THIS file. After build, this CSS lives at

package/corpus/core/src/styles/chat-history-list.css

@@ -0,0 +1,313 @@
+/*
+ * Shared chat history list — used by core's `HistoryPopover`
+ * (MultiTabAssistantChat.tsx) and by Agent-Native Code's run rail
+ * (code-agents-ui CodeAgentsApp.tsx). Stable, prefixed class names (not
+ * Tailwind utilities) so the same visual language works in both a Tailwind
+ * host (core/templates) and a plain-CSS host (code-agents-ui), matching the
+ * approach used by agent-conversation.css. All colors resolve through the
+ * shared `hsl(var(--token))` variables so light/dark both work in either
+ * host's theme.
+ *
+ * Two density variants:
+ *   .an-chat-history           default — compact popover list (core)
+ *   .an-chat-history--rail     denser rail list with solid active state
+ */
+
+.an-chat-history {
+  display: flex;
+  flex-direction: column;
+  min-height: 0;
+}
+
+.an-chat-history__search {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 8px 12px;
+  border-bottom: 1px solid hsl(var(--border));
+  color: hsl(var(--muted-foreground));
+  flex-shrink: 0;
+}
+
+.an-chat-history__search-icon {
+  flex-shrink: 0;
+}
+
+.an-chat-history__search-input {
+  flex: 1;
+  min-width: 0;
+  background: transparent;
+  border: 0;
+  outline: none;
+  font-size: 12px;
+  color: hsl(var(--foreground));
+}
+
+.an-chat-history__search-input::placeholder {
+  color: hsl(var(--muted-foreground));
+}
+
+.an-chat-history__list {
+  overflow-y: auto;
+  padding: 4px 0;
+  max-height: 16rem;
+}
+
+.an-chat-history--rail .an-chat-history__list {
+  max-height: none;
+  flex: 1;
+  min-height: 0;
+}
+
+.an-chat-history__state {
+  padding: 16px 12px;
+  text-align: center;
+  font-size: 12px;
+  color: hsl(var(--muted-foreground));
+}
+
+.an-chat-history__state--error {
+  /* Matches the amber-500 warning tone historically used for the
+     HistoryPopover load-error state (Tailwind's `text-amber-500`). */
+  color: hsl(38 92% 50%);
+}
+
+.an-chat-history__section-label {
+  padding: 6px 12px 4px;
+  font-size: 10px;
+  text-transform: uppercase;
+  letter-spacing: 0.04em;
+  color: hsl(var(--muted-foreground) / 0.7);
+}
+
+.an-chat-history--rail .an-chat-history__section {
+  display: grid;
+  gap: 1px;
+}
+
+/* ── Row ──────────────────────────────────────────────────────────────── */
+
+.an-chat-history-row {
+  position: relative;
+}
+
+.an-chat-history--rail .an-chat-history-row {
+  border-radius: calc(var(--radius) - 2px);
+  margin: 0 4px;
+}
+
+.an-chat-history-row__button {
+  display: block;
+  width: 100%;
+  padding: 8px 12px;
+  border: 0;
+  background: transparent;
+  color: inherit;
+  text-align: start;
+  cursor: pointer;
+}
+
+.an-chat-history-row--disabled .an-chat-history-row__button {
+  cursor: default;
+  opacity: 0.6;
+}
+
+.an-chat-history-row:hover .an-chat-history-row__button {
+  background: hsl(var(--accent) / 0.5);
+}
+
+.an-chat-history-row--active .an-chat-history-row__button {
+  background: hsl(var(--accent) / 0.3);
+}
+
+.an-chat-history--rail .an-chat-history-row__button {
+  min-height: 32px;
+  padding: 6px 36px 6px 10px;
+  border-radius: inherit;
+  color: hsl(var(--muted-foreground));
+}
+
+.an-chat-history--rail
+  .an-chat-history-row--active
+  .an-chat-history-row__button {
+  background: hsl(var(--accent));
+  color: hsl(var(--accent-foreground));
+}
+
+.an-chat-history-row__topline {
+  display: flex;
+  align-items: baseline;
+  justify-content: space-between;
+  gap: 8px;
+  min-width: 0;
+}
+
+.an-chat-history-row__title {
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  font-size: 12px;
+  font-weight: 500;
+  color: hsl(var(--foreground));
+}
+
+.an-chat-history-row--active .an-chat-history-row__title {
+  color: hsl(var(--foreground));
+}
+
+.an-chat-history--rail
+  .an-chat-history-row--active
+  .an-chat-history-row__title {
+  color: hsl(var(--accent-foreground));
+}
+
+.an-chat-history--rail
+  .an-chat-history-row--pinned:not(.an-chat-history-row--active)
+  .an-chat-history-row__title {
+  color: hsl(var(--foreground));
+}
+
+.an-chat-history-row__timestamp {
+  flex-shrink: 0;
+  font-size: 10px;
+  color: hsl(var(--muted-foreground));
+}
+
+.an-chat-history--rail .an-chat-history-row__timestamp {
+  font-size: 11px;
+  color: hsl(var(--muted-foreground) / 0.62);
+}
+
+.an-chat-history--rail
+  .an-chat-history-row--active
+  .an-chat-history-row__timestamp {
+  color: hsl(var(--accent-foreground));
+}
+
+.an-chat-history-row__subtitle {
+  margin-top: 2px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  font-size: 11px;
+  color: hsl(var(--muted-foreground));
+}
+
+.an-chat-history-row__detail {
+  margin-top: 2px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  font-size: 10px;
+  color: hsl(var(--muted-foreground) / 0.7);
+}
+
+/* ── Inline rename ────────────────────────────────────────────────────── */
+
+.an-chat-history-row__rename {
+  display: flex;
+  align-items: center;
+  padding: 6px 12px;
+}
+
+.an-chat-history-row__rename-input {
+  width: 100%;
+  min-width: 0;
+  padding: 2px 6px;
+  border: 1px solid hsl(var(--ring));
+  border-radius: calc(var(--radius) - 3px);
+  background: hsl(var(--background));
+  color: hsl(var(--foreground));
+  font-size: 12px;
+  font-weight: 500;
+  line-height: 1.4;
+  outline: none;
+  box-shadow: 0 0 0 2px hsl(var(--ring) / 0.25);
+}
+
+.an-chat-history-row__rename-input:focus {
+  box-shadow: 0 0 0 2px hsl(var(--ring) / 0.35);
+}
+
+/* ── Row action menu ──────────────────────────────────────────────────── */
+
+.an-chat-history-row__menu {
+  position: absolute;
+  top: 4px;
+  inset-inline-end: 4px;
+}
+
+.an-chat-history-row__menu-trigger {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 24px;
+  height: 24px;
+  border: 0;
+  border-radius: calc(var(--radius) - 3px);
+  background: transparent;
+  color: hsl(var(--muted-foreground) / 0.72);
+  opacity: 0;
+  cursor: pointer;
+  transition:
+    background 100ms ease,
+    color 100ms ease,
+    opacity 100ms ease;
+}
+
+.an-chat-history-row:hover .an-chat-history-row__menu-trigger,
+.an-chat-history-row:focus-within .an-chat-history-row__menu-trigger,
+.an-chat-history-row__menu-trigger[aria-expanded="true"],
+.an-chat-history-row__menu-trigger--pinned {
+  opacity: 1;
+}
+
+.an-chat-history-row__menu-trigger:hover,
+.an-chat-history-row__menu-trigger[aria-expanded="true"] {
+  background: hsl(var(--accent));
+  color: hsl(var(--foreground));
+}
+
+.an-chat-history-row__menu-content {
+  position: absolute;
+  top: calc(100% + 4px);
+  inset-inline-end: 0;
+  z-index: 30;
+  min-width: 160px;
+  padding: 4px;
+  border: 1px solid hsl(var(--border));
+  border-radius: var(--radius);
+  background: hsl(var(--popover));
+  color: hsl(var(--popover-foreground));
+  box-shadow: 0 10px 30px hsl(var(--background) / 0.28);
+}
+
+.an-chat-history-row__menu-item {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  width: 100%;
+  padding: 6px 8px;
+  border: 0;
+  border-radius: calc(var(--radius) - 4px);
+  background: transparent;
+  color: inherit;
+  font-size: 12px;
+  text-align: start;
+  cursor: pointer;
+}
+
+.an-chat-history-row__menu-item:hover {
+  background: hsl(var(--accent));
+  color: hsl(var(--accent-foreground));
+}
+
+.an-chat-history-row__menu-item--danger {
+  color: hsl(var(--destructive));
+}
+
+.an-chat-history-row__menu-item--danger:hover {
+  background: hsl(var(--destructive) / 0.12);
+  color: hsl(var(--destructive));
+}

package/corpus/core/src/templates/default/package.json

@@ -7,6 +7,7 @@
     "build": "agent-native build",
     "start": "agent-native start",
     "typecheck": "agent-native typecheck",
+    "doctor": "agent-native doctor",
     "action": "agent-native action",
     "script": "agent-native script",
     "skills:update": "agent-native skills update scaffold --project",
@@ -43,8 +44,7 @@
     "tailwind-merge": "^3.5.0",
     "tailwindcss": "^4.1.18",
     "tsx": "^4.20.3",
-    "typescript": "catalog:",
     "typescript-7": "catalog:",
-    "vite": "^8.0.0"
+    "vite": "8.1.0"
   }
 }

package/corpus/core/src/templates/headless/package.json

@@ -19,7 +19,6 @@
     "@types/node": "^24.2.1",
     "oxfmt": "catalog:",
     "tsx": "^4.20.3",
-    "typescript": "catalog:",
     "typescript-7": "catalog:"
   }
 }