@agent-native/core 0.96.0 → 0.97.0

package/corpus/templates/slides/app/components/editor/ImageDropPromptPopover.tsx

@@ -2,10 +2,10 @@ import { appBasePath, sendToAgentChat, useT } from "@agent-native/core/client";
 import { IconLoader2, IconX } from "@tabler/icons-react";
 import { useEffect, useMemo, useRef, useState } from "react";
 import { createPortal } from "react-dom";
+import { toast } from "sonner";
 
 import { Button } from "@/components/ui/button";
 import { Textarea } from "@/components/ui/textarea";
-import { toast } from "@/hooks/use-toast";
 import {
   buildImageDropAgentPayload,
   readFileAsDataUrl,
@@ -169,16 +169,13 @@ export default function ImageDropPromptPopover({
       }
 
       onClose();
-      toast({
-        title: t("raw.sentToAgent"),
+      toast.success(t("raw.sentToAgent"), {
         description: file.name,
       });
     } catch (err) {
-      toast({
-        title: t("raw.imageUploadFailed"),
+      toast.error(t("raw.imageUploadFailed"), {
         description:
           err instanceof Error ? err.message : t("raw.imageUploadGenericError"),
-        variant: "destructive",
       });
     } finally {
       setUploading(false);

package/corpus/templates/slides/app/components/editor/PromptDialog.tsx

@@ -1,8 +1,7 @@
 import { appBasePath, PromptComposer, useT } from "@agent-native/core/client";
 import { useState, useEffect, useCallback, useRef } from "react";
 import { createPortal } from "react-dom";
-
-import { toast } from "@/hooks/use-toast";
+import { toast } from "sonner";
 
 import { GoogleDocImportHint } from "./GoogleDocImportHint";
 
@@ -151,13 +150,11 @@ export default function PromptPopover({
         const uploaded = await uploadFiles(files);
         onSubmit(enrichedText, uploaded);
       } catch (error) {
-        toast({
-          title: t("raw.uploadFailed"),
+        toast.error(t("raw.uploadFailed"), {
           description:
             error instanceof Error
               ? error.message
               : t("raw.uploadAttachedFailed"),
-          variant: "destructive",
         });
       }
     },

package/corpus/templates/slides/app/context/DeckContext.tsx

@@ -708,6 +708,36 @@ async function fetchDecksFromAPI(): Promise<Deck[] | null> {
   }
 }
 
+/**
+ * Fetch a minimal id-only deck listing (`light: "true"`) for cheap add/remove
+ * diffing. Never downloads deck bodies — see `list-decks.ts`. Returns `null`
+ * on any failure so callers can skip the diff instead of wiping local state.
+ */
+async function fetchDeckListLightFromAPI(): Promise<{ id: string }[] | null> {
+  try {
+    const result = await callAction<DeckListActionResult>(
+      "list-decks",
+      { light: "true" },
+      { method: "GET" },
+    );
+    if (!Array.isArray(result?.decks)) {
+      console.warn("Failed to fetch deck list: invalid action response");
+      return null;
+    }
+    return result.decks
+      .filter(
+        (deck): deck is { id: string } =>
+          !!deck &&
+          typeof deck === "object" &&
+          typeof (deck as { id?: unknown }).id === "string",
+      )
+      .map((deck) => ({ id: deck.id }));
+  } catch (err) {
+    console.error("Failed to fetch deck list:", err);
+    return null;
+  }
+}
+
 async function fetchDeckFromAPI(id: string): Promise<Deck | null> {
   try {
     const result = await callAction<unknown>(
@@ -1070,8 +1100,14 @@ export function DeckProvider({ children }: { children: ReactNode }) {
   // Re-fetch the deck list and diff it against local state (added/removed
   // decks). Shared by the fallback poll and the SSE resync-on-reconnect path
   // below so both pull from one implementation of "what changed".
+  //
+  // Uses the `light` (id-only) listing — this runs every 15s and previously
+  // downloaded every deck's full slide JSON just to diff ids, even though
+  // existing decks' content was thrown away unused. Only genuinely NEW decks
+  // (rare — usually zero per poll) get a follow-up full fetch so DeckCard can
+  // still render an immediate preview for them.
   const refetchDeckListIfChanged = useCallback(async () => {
-    const fresh = await fetchDecksFromAPI();
+    const fresh = await fetchDeckListLightFromAPI();
     // A null result means the fetch failed (network error or non-2xx). Skip
     // the diff so we don't wipe local state on a transient failure.
     if (fresh === null) return;
@@ -1081,18 +1117,25 @@ export function DeckProvider({ children }: { children: ReactNode }) {
     const freshIds = new Set(fresh.map((d) => d.id));
     // Check if deck list changed (added or removed). Optimistic decks still
     // in flight are preserved (not treated as removed).
-    const added = fresh.filter((d) => !currentIds.has(d.id));
+    const addedIds = fresh
+      .filter((d) => !currentIds.has(d.id))
+      .map((d) => d.id);
     const removed = currentDecks.filter(
       (d) => !freshIds.has(d.id) && !pending.has(d.id),
     );
-    if (added.length === 0 && removed.length === 0) return;
+    if (addedIds.length === 0 && removed.length === 0) return;
+
+    const addedDecks = (
+      await Promise.all(addedIds.map((id) => fetchDeckFromAPI(id)))
+    ).filter((d): d is Deck => d !== null);
+
     lastExternalUpdateRef.current = Date.now();
     setDecks((prev) => {
       const prevIds = new Set(prev.map((d) => d.id));
       // Only add decks that aren't already in prev (prevents duplicates when
       // the closure's deck snapshot is stale compared to `prev`).
       let next = prev.filter((d) => freshIds.has(d.id) || pending.has(d.id));
-      for (const a of added) {
+      for (const a of addedDecks) {
         if (!prevIds.has(a.id)) next = [...next, a];
       }
       return next;

package/corpus/templates/slides/app/pages/DeckEditor.tsx

@@ -35,6 +35,7 @@ import {
 } from "react";
 import type { ComponentType } from "react";
 import { useParams, useSearchParams, useNavigate } from "react-router";
+import { toast } from "sonner";
 
 import { SlideCommentsPanel } from "@/components/comments/SlideCommentsPanel";
 import { AnimationsPanel } from "@/components/editor/AnimationsPanel";
@@ -51,7 +52,6 @@ import { QuestionFlow } from "@/components/editor/QuestionFlow";
 import SlideEditor from "@/components/editor/SlideEditor";
 import { TweaksPanel } from "@/components/editor/TweaksPanel";
 import { Button } from "@/components/ui/button";
-import { ToastAction } from "@/components/ui/toast";
 import { useDecks } from "@/context/DeckContext";
 import { useAgentGenerating } from "@/hooks/use-agent-generating";
 import { useDeckDesignSystem } from "@/hooks/use-deck-design-system";
@@ -61,7 +61,6 @@ import {
   useSlideComments,
   type CommentThread,
 } from "@/hooks/use-slide-comments";
-import { toast } from "@/hooks/use-toast";
 import type { AspectRatio } from "@/lib/aspect-ratios";
 import { getPreset } from "@/lib/design-systems";
 import { exportDeckAsPdf } from "@/lib/export-pdf-client";
@@ -396,18 +395,15 @@ export default function DeckEditor() {
         if (updatedContent !== targetSlide.content) {
           updateSlide(id, targetSlide.id, { content: updatedContent });
         }
-        toast({
-          title: t("deckEditor.imageAdded"),
+        toast.success(t("deckEditor.imageAdded"), {
           description: file.name,
         });
       } catch (error) {
-        toast({
-          title: t("deckEditor.imageUploadFailed"),
+        toast.error(t("deckEditor.imageUploadFailed"), {
           description:
             error instanceof Error
               ? error.message
               : t("deckEditor.imageUploadError"),
-          variant: "destructive",
         });
       }
     },
@@ -482,25 +478,14 @@ export default function DeckEditor() {
         );
       })();
       deleteSlide(deckId, slideId);
-      const t = toast({
-        title: `${slideTitle} deleted`,
+      toast(`${slideTitle} deleted`, {
         description: `Press ${shortcutLabel("cmd+z")} or click Undo to restore.`,
-        action: (
-          <ToastAction
-            altText="Undo delete"
-            data-undo-button
-            onClick={() => {
-              undo();
-              t.dismiss();
-            }}
-          >
-            Undo
-          </ToastAction>
-        ),
+        duration: 6000,
+        action: {
+          label: "Undo",
+          onClick: () => undo(),
+        },
       });
-      // Auto-dismiss after 6 seconds (shadcn toast's TOAST_REMOVE_DELAY is
-      // intentionally enormous, so we trigger it manually).
-      setTimeout(() => t.dismiss(), 6000);
     },
     [deck, deleteSlide, undo],
   );
@@ -841,23 +826,19 @@ export default function DeckEditor() {
           try {
             const slideIds = deck.slides.map((s) => s.id);
             if (slideIds.length === 0) {
-              toast({
-                title: t("deckEditor.exportFailed"),
+              toast.error(t("deckEditor.exportFailed"), {
                 description: t("deckEditor.deckHasNoSlides"),
-                variant: "destructive",
               });
               return;
             }
             await exportDeckAsPdf(deck.title, slideIds, deck.aspectRatio);
           } catch (err) {
             console.error("[pdf-export] failed:", err);
-            toast({
-              title: t("deckEditor.exportFailed"),
+            toast.error(t("deckEditor.exportFailed"), {
               description:
                 err instanceof Error
                   ? err.message
                   : t("deckEditor.pdfRenderFailed"),
-              variant: "destructive",
             });
           }
         }}

package/corpus/templates/slides/app/pages/Index.tsx

@@ -14,6 +14,7 @@ import { IconPlus, IconStack2, IconUserCircle } from "@tabler/icons-react";
 import { useState, useRef, useCallback, useEffect, useMemo } from "react";
 import { flushSync } from "react-dom";
 import { useNavigate, useSearchParams } from "react-router";
+import { toast } from "sonner";
 
 import DeckCard from "@/components/deck/DeckCard";
 import PromptPopover from "@/components/editor/PromptDialog";
@@ -40,7 +41,6 @@ import { ToggleGroup, ToggleGroupItem } from "@/components/ui/toggle-group";
 import { useDecks } from "@/context/DeckContext";
 import { useAgentGenerating } from "@/hooks/use-agent-generating";
 import { useDesignSystems } from "@/hooks/use-design-systems";
-import { toast } from "@/hooks/use-toast";
 import { savePromptToComposerDraft } from "@/lib/composer-draft";
 
 const MAX_SOURCE_CONTEXT_CHARS = 60_000;
@@ -451,8 +451,7 @@ export default function Index() {
       }
       setNewDeckRetryFiles(filesForGeneration);
       deleteDeck(deck.id);
-      toast({
-        title: t("home.generationStartFailed"),
+      toast.error(t("home.generationStartFailed"), {
         description: t("home.generationStartFailedDescription"),
       });
       setShowNewDeckPrompt(true);

package/corpus/templates/slides/app/root.tsx

@@ -30,7 +30,6 @@ import {
 import type { LinksFunction } from "react-router";
 
 import { Layout as AppLayout } from "@/components/layout/Layout";
-import { Toaster } from "@/components/ui/toaster";
 import { AppToolkitProvider } from "@/components/ui/toolkit-provider";
 import { DeckProvider } from "@/context/DeckContext";
 import { useNavigationState } from "@/hooks/use-navigation-state";
@@ -249,10 +248,6 @@ export default function Root() {
         i18n={{ catalog: i18nCatalog }}
       >
         <AppContent />
-        {/* useToast-based Toaster - separate from AppProviders' sonner Toaster.
-          Components throughout the app call toast() from @agent-native/toolkit,
-          which requires this Toaster to be mounted. */}
-        <Toaster />
       </AppProviders>
     </AppToolkitProvider>
   );

package/corpus/templates/slides/changelog/2026-07-10-deck-lists-load-much-faster-and-no-longer-re-download-slide-.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-10
+---
+
+Deck lists load much faster and no longer re-download slide content in the background

package/corpus/templates/slides/package.json

@@ -43,7 +43,7 @@
     "dotenv": "^17.2.1",
     "drizzle-orm": "^0.45.2",
     "fast-xml-parser": "5.7.2",
-    "h3": "^2.0.1-rc.20",
+    "h3": "catalog:",
     "isbot": "^5",
     "jspdf": "4.2.1",
     "jszip": "3.10.1",
@@ -128,7 +128,6 @@
     "tailwindcss": "catalog:",
     "three": "^0.176.0",
     "tsx": "^4.20.3",
-    "typescript": "catalog:",
     "typescript-7": "catalog:",
     "vaul": "^1.1.2",
     "vite": "catalog:",

package/dist/a2a/auth-policy.d.ts

@@ -7,4 +7,23 @@
 export declare function isA2AProductionRuntime(): boolean;
 export declare function hasConfiguredA2ASecret(): boolean;
 export declare function shouldAdvertiseJwtA2AAuth(): boolean;
+/**
+ * True only when unsigned internal self-dispatch is acceptable: no A2A_SECRET
+ * is configured AND we can positively identify a local/dev runtime. Everything
+ * else — production, or any UNRECOGNIZED deployed/networked host — must fail
+ * closed and require A2A_SECRET. `loopback` should be whether the inbound
+ * request arrived over the loopback interface (127.0.0.1/::1); callers that
+ * cannot determine the peer address pass `false`.
+ *
+ * NODE_ENV alone is deliberately NOT a trust grant: a self-hosted deployment
+ * that doesn't set NODE_ENV=production and isn't recognized by
+ * `isA2AProductionRuntime()` (a bare Docker/VPS/K8s pod) must still fail
+ * closed unless the request actually came from loopback or the explicit
+ * opt-in flag is set.
+ */
+export declare function isTrustedLocalRuntime(opts: {
+    loopback: boolean;
+}): boolean;
+/** True if a socket peer address is a loopback/local address. */
+export declare function isLoopbackAddress(addr: string | undefined | null): boolean;
 //# sourceMappingURL=auth-policy.d.ts.map

package/dist/a2a/auth-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-policy.d.ts","sourceRoot":"","sources":["../../src/a2a/auth-policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAkBhD;AAED,wBAAgB,sBAAsB,IAAI,OAAO,CAEhD;AAED,wBAAgB,yBAAyB,IAAI,OAAO,CAEnD"}
+{"version":3,"file":"auth-policy.d.ts","sourceRoot":"","sources":["../../src/a2a/auth-policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAkBhD;AAED,wBAAgB,sBAAsB,IAAI,OAAO,CAEhD;AAED,wBAAgB,yBAAyB,IAAI,OAAO,CAEnD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAI1E;AAED,iEAAiE;AACjE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAU1E"}

package/dist/a2a/auth-policy.js

@@ -31,4 +31,36 @@ export function hasConfiguredA2ASecret() {
 export function shouldAdvertiseJwtA2AAuth() {
     return hasConfiguredA2ASecret() || isA2AProductionRuntime();
 }
+/**
+ * True only when unsigned internal self-dispatch is acceptable: no A2A_SECRET
+ * is configured AND we can positively identify a local/dev runtime. Everything
+ * else — production, or any UNRECOGNIZED deployed/networked host — must fail
+ * closed and require A2A_SECRET. `loopback` should be whether the inbound
+ * request arrived over the loopback interface (127.0.0.1/::1); callers that
+ * cannot determine the peer address pass `false`.
+ *
+ * NODE_ENV alone is deliberately NOT a trust grant: a self-hosted deployment
+ * that doesn't set NODE_ENV=production and isn't recognized by
+ * `isA2AProductionRuntime()` (a bare Docker/VPS/K8s pod) must still fail
+ * closed unless the request actually came from loopback or the explicit
+ * opt-in flag is set.
+ */
+export function isTrustedLocalRuntime(opts) {
+    if (isA2AProductionRuntime())
+        return false;
+    if (process.env.A2A_ALLOW_UNSIGNED_INTERNAL === "1")
+        return true;
+    return opts.loopback === true;
+}
+/** True if a socket peer address is a loopback/local address. */
+export function isLoopbackAddress(addr) {
+    if (!addr)
+        return false;
+    const a = addr.trim();
+    return (a === "127.0.0.1" ||
+        a === "::1" ||
+        a === "::ffff:127.0.0.1" ||
+        a.startsWith("127.") ||
+        a === "localhost");
+}
 //# sourceMappingURL=auth-policy.js.map

package/dist/a2a/auth-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-policy.js","sourceRoot":"","sources":["../../src/a2a/auth-policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB;IACpC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,OAAO,CAAC,GAAG,CAAC,wBAAwB;QACpC,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,EACpC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,UAAU,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,sBAAsB,EAAE,IAAI,sBAAsB,EAAE,CAAC;AAC9D,CAAC","sourcesContent":["/**\n * A2A auth policy helpers shared by discovery, the JSON-RPC gate, and task\n * handlers. Serverless providers do not always expose `NODE_ENV=production`\n * consistently at runtime, so production-like A2A checks also look at the\n * provider flags those platforms set in deployed functions.\n */\nexport function isA2AProductionRuntime(): boolean {\n  if (process.env.NODE_ENV === \"production\") return true;\n  if (process.env.NETLIFY === \"true\" && process.env.NETLIFY_LOCAL !== \"true\") {\n    return true;\n  }\n  if (\n    process.env.AWS_LAMBDA_FUNCTION_NAME &&\n    process.env.NETLIFY_LOCAL !== \"true\"\n  ) {\n    return true;\n  }\n  if (process.env.CF_PAGES === \"1\") return true;\n  if (\"__cf_env\" in globalThis) return true;\n  if (process.env.VERCEL || process.env.VERCEL_ENV) return true;\n  if (process.env.RENDER || process.env.FLY_APP_NAME || process.env.K_SERVICE) {\n    return true;\n  }\n  return false;\n}\n\nexport function hasConfiguredA2ASecret(): boolean {\n  return !!process.env.A2A_SECRET?.trim();\n}\n\nexport function shouldAdvertiseJwtA2AAuth(): boolean {\n  return hasConfiguredA2ASecret() || isA2AProductionRuntime();\n}\n"]}
+{"version":3,"file":"auth-policy.js","sourceRoot":"","sources":["../../src/a2a/auth-policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB;IACpC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,OAAO,CAAC,GAAG,CAAC,wBAAwB;QACpC,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,EACpC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,UAAU,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,sBAAsB,EAAE,IAAI,sBAAsB,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAA2B;IAC/D,IAAI,sBAAsB,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;AAChC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,iBAAiB,CAAC,IAA+B;IAC/D,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,OAAO,CACL,CAAC,KAAK,WAAW;QACjB,CAAC,KAAK,KAAK;QACX,CAAC,KAAK,kBAAkB;QACxB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACpB,CAAC,KAAK,WAAW,CAClB,CAAC;AACJ,CAAC","sourcesContent":["/**\n * A2A auth policy helpers shared by discovery, the JSON-RPC gate, and task\n * handlers. Serverless providers do not always expose `NODE_ENV=production`\n * consistently at runtime, so production-like A2A checks also look at the\n * provider flags those platforms set in deployed functions.\n */\nexport function isA2AProductionRuntime(): boolean {\n  if (process.env.NODE_ENV === \"production\") return true;\n  if (process.env.NETLIFY === \"true\" && process.env.NETLIFY_LOCAL !== \"true\") {\n    return true;\n  }\n  if (\n    process.env.AWS_LAMBDA_FUNCTION_NAME &&\n    process.env.NETLIFY_LOCAL !== \"true\"\n  ) {\n    return true;\n  }\n  if (process.env.CF_PAGES === \"1\") return true;\n  if (\"__cf_env\" in globalThis) return true;\n  if (process.env.VERCEL || process.env.VERCEL_ENV) return true;\n  if (process.env.RENDER || process.env.FLY_APP_NAME || process.env.K_SERVICE) {\n    return true;\n  }\n  return false;\n}\n\nexport function hasConfiguredA2ASecret(): boolean {\n  return !!process.env.A2A_SECRET?.trim();\n}\n\nexport function shouldAdvertiseJwtA2AAuth(): boolean {\n  return hasConfiguredA2ASecret() || isA2AProductionRuntime();\n}\n\n/**\n * True only when unsigned internal self-dispatch is acceptable: no A2A_SECRET\n * is configured AND we can positively identify a local/dev runtime. Everything\n * else — production, or any UNRECOGNIZED deployed/networked host — must fail\n * closed and require A2A_SECRET. `loopback` should be whether the inbound\n * request arrived over the loopback interface (127.0.0.1/::1); callers that\n * cannot determine the peer address pass `false`.\n *\n * NODE_ENV alone is deliberately NOT a trust grant: a self-hosted deployment\n * that doesn't set NODE_ENV=production and isn't recognized by\n * `isA2AProductionRuntime()` (a bare Docker/VPS/K8s pod) must still fail\n * closed unless the request actually came from loopback or the explicit\n * opt-in flag is set.\n */\nexport function isTrustedLocalRuntime(opts: { loopback: boolean }): boolean {\n  if (isA2AProductionRuntime()) return false;\n  if (process.env.A2A_ALLOW_UNSIGNED_INTERNAL === \"1\") return true;\n  return opts.loopback === true;\n}\n\n/** True if a socket peer address is a loopback/local address. */\nexport function isLoopbackAddress(addr: string | undefined | null): boolean {\n  if (!addr) return false;\n  const a = addr.trim();\n  return (\n    a === \"127.0.0.1\" ||\n    a === \"::1\" ||\n    a === \"::ffff:127.0.0.1\" ||\n    a.startsWith(\"127.\") ||\n    a === \"localhost\"\n  );\n}\n"]}

package/dist/agent/durable-background.d.ts

@@ -192,14 +192,17 @@ export declare function extractProcessRunId(body: unknown): string | null;
  *
  * Auth policy mirrors the agent-teams processor exactly:
  *   - `A2A_SECRET` set → require a valid `verifyInternalToken(runId, token)`.
- *   - no secret but a production runtime → refuse (503) — never run unsigned in
- *     prod.
- *   - no secret + non-prod (local dev) → allow unsigned; the SQL atomic claim
- *     in the worker still prevents double-processing.
+ *   - no secret → require `isTrustedLocalRuntime({ loopback })` (see
+ *     auth-policy.ts): refuse (503) unless `A2A_ALLOW_UNSIGNED_INTERNAL=1` is
+ *     set. This function has no h3 `event` of its own, so callers that CAN
+ *     see the inbound socket peer (the route handler, which has the event)
+ *     should compute `loopback` from it and pass it through; callers that
+ *     can't determine the peer address should omit it (defaults to `false`
+ *     — never trust unsigned dispatch without an explicit opt-in).
  *
  * Extracted from the route handler so the auth + marker-prep decision is unit
  * testable without booting the whole Nitro plugin. The route only adds body
  * reading and the final handler invocation around this.
  */
-export declare function prepareProcessRunRequest(body: unknown, authHeader: string | undefined): ProcessRunPreparation;
+export declare function prepareProcessRunRequest(body: unknown, authHeader: string | undefined, loopback?: boolean): ProcessRunPreparation;
 //# sourceMappingURL=durable-background.d.ts.map

package/dist/agent/durable-background.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"durable-background.d.ts","sourceRoot":"","sources":["../../src/agent/durable-background.ts"],"names":[],"mappings":"AAgDA;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,2CACE,CAAC;AAE3C;;;;;;;;GAQG;AACH,eAAO,MAAM,8BAA8B,4BAA4B,CAAC;AAExE;;;;;;;;;GASG;AACH,eAAO,MAAM,kCAAkC,gDAA0D,CAAC;AAE1G;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,2BAA2B,CAAC;AACzE,eAAO,MAAM,8BAA8B,QAAQ,CAAC;AACpD,eAAO,MAAM,gCAAgC,UAAU,CAAC;AACxD,eAAO,MAAM,sCAAsC,gCACpB,CAAC;AAiChC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,sCAAsC,IAAI,MAAM,CAQ/D;AAED,wBAAgB,oCAAoC,CAClD,YAAY,EAAE,MAAM,GACnB,MAAM,CAQR;AAED,wBAAgB,4CAA4C,CAC1D,YAAY,EAAE,MAAM,GACnB,OAAO,CAET;AAED;;;GAGG;AACH,eAAO,MAAM,iCAAiC,kCACb,CAAC;AAElC;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,oBAAoB,CAAC;AAEjE;;;;GAIG;AACH,wBAAgB,mCAAmC,IAAI,OAAO,CAsB7D;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,6BAA6B,IAAI,OAAO,CAsBvD;AAED,wBAAgB,2CAA2C,CACzD,MAAM,EAAE,OAAO,GACd,OAAO,CAOT;AAED,wBAAgB,2CAA2C,CACzD,OAAO,EAAE,OAAO,GACf,OAAO,CAKT;AAED,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAQzE;AAwCD;;;;;;;GAOG;AACH,wBAAgB,mCAAmC,CAAC,OAAO,CAAC,EAAE;IAC5D,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GAAG,OAAO,CAWV;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oCAAoC,qCACb,CAAC;AAiBrC;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qCAAqC,IAAI,OAAO,CAM/D;AAED,uDAAuD;AACvD,MAAM,MAAM,qBAAqB,GAC7B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,CAAC;AAEN;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAahE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,OAAO,EACb,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,qBAAqB,CAiDvB"}
+{"version":3,"file":"durable-background.d.ts","sourceRoot":"","sources":["../../src/agent/durable-background.ts"],"names":[],"mappings":"AAgDA;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,2CACE,CAAC;AAE3C;;;;;;;;GAQG;AACH,eAAO,MAAM,8BAA8B,4BAA4B,CAAC;AAExE;;;;;;;;;GASG;AACH,eAAO,MAAM,kCAAkC,gDAA0D,CAAC;AAE1G;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,2BAA2B,CAAC;AACzE,eAAO,MAAM,8BAA8B,QAAQ,CAAC;AACpD,eAAO,MAAM,gCAAgC,UAAU,CAAC;AACxD,eAAO,MAAM,sCAAsC,gCACpB,CAAC;AAiChC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,sCAAsC,IAAI,MAAM,CAQ/D;AAED,wBAAgB,oCAAoC,CAClD,YAAY,EAAE,MAAM,GACnB,MAAM,CAQR;AAED,wBAAgB,4CAA4C,CAC1D,YAAY,EAAE,MAAM,GACnB,OAAO,CAET;AAED;;;GAGG;AACH,eAAO,MAAM,iCAAiC,kCACb,CAAC;AAElC;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,oBAAoB,CAAC;AAEjE;;;;GAIG;AACH,wBAAgB,mCAAmC,IAAI,OAAO,CAsB7D;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,6BAA6B,IAAI,OAAO,CAsBvD;AAED,wBAAgB,2CAA2C,CACzD,MAAM,EAAE,OAAO,GACd,OAAO,CAOT;AAED,wBAAgB,2CAA2C,CACzD,OAAO,EAAE,OAAO,GACf,OAAO,CAKT;AAED,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAQzE;AAwCD;;;;;;;GAOG;AACH,wBAAgB,mCAAmC,CAAC,OAAO,CAAC,EAAE;IAC5D,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GAAG,OAAO,CAWV;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oCAAoC,qCACb,CAAC;AAiBrC;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qCAAqC,IAAI,OAAO,CAM/D;AAED,uDAAuD;AACvD,MAAM,MAAM,qBAAqB,GAC7B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,CAAC;AAEN;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAahE;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,OAAO,EACb,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,QAAQ,GAAE,OAAe,GACxB,qBAAqB,CAqDvB"}

package/dist/agent/durable-background.js

@@ -37,7 +37,7 @@
  * durable dispatch happens to fail still gets a working chat, just without the
  * 15-min budget.
  */
-import { hasConfiguredA2ASecret, isA2AProductionRuntime, } from "../a2a/auth-policy.js";
+import { hasConfiguredA2ASecret, isTrustedLocalRuntime, } from "../a2a/auth-policy.js";
 import { extractBearerToken, verifyInternalToken, } from "../integrations/internal-token.js";
 /**
  * Framework route the background function actually runs — sibling to
@@ -380,16 +380,19 @@ export function extractProcessRunId(body) {
  *
  * Auth policy mirrors the agent-teams processor exactly:
  *   - `A2A_SECRET` set → require a valid `verifyInternalToken(runId, token)`.
- *   - no secret but a production runtime → refuse (503) — never run unsigned in
- *     prod.
- *   - no secret + non-prod (local dev) → allow unsigned; the SQL atomic claim
- *     in the worker still prevents double-processing.
+ *   - no secret → require `isTrustedLocalRuntime({ loopback })` (see
+ *     auth-policy.ts): refuse (503) unless `A2A_ALLOW_UNSIGNED_INTERNAL=1` is
+ *     set. This function has no h3 `event` of its own, so callers that CAN
+ *     see the inbound socket peer (the route handler, which has the event)
+ *     should compute `loopback` from it and pass it through; callers that
+ *     can't determine the peer address should omit it (defaults to `false`
+ *     — never trust unsigned dispatch without an explicit opt-in).
  *
  * Extracted from the route handler so the auth + marker-prep decision is unit
  * testable without booting the whole Nitro plugin. The route only adds body
  * reading and the final handler invocation around this.
  */
-export function prepareProcessRunRequest(body, authHeader) {
+export function prepareProcessRunRequest(body, authHeader, loopback = false) {
     if (!body || typeof body !== "object") {
         return {
             ok: false,
@@ -419,11 +422,15 @@ export function prepareProcessRunRequest(body, authHeader) {
             };
         }
     }
-    else if (isA2AProductionRuntime()) {
+    else if (!isTrustedLocalRuntime({ loopback })) {
+        // Callers that can see the h3 `event` (the route handler) pass the real
+        // loopback signal; callers without one default to non-loopback. Unsigned
+        // dispatch is still allowed via A2A_ALLOW_UNSIGNED_INTERNAL=1 for trusted
+        // local/dev setups; see auth-policy.ts `isTrustedLocalRuntime`.
         return {
             ok: false,
             status: 503,
-            error: "Agent chat background processor not configured — set A2A_SECRET on this deployment.",
+            error: "Agent chat background processor not configured — set A2A_SECRET on this deployment (or A2A_ALLOW_UNSIGNED_INTERNAL=1 for trusted local dev).",
             runId,
         };
     }