@agent-native/core 0.98.6 → 0.98.7

package/corpus/templates/analytics/server/handlers/session-replay.ts

@@ -12,8 +12,8 @@ import {
 
 import { runApiHandlerWithContext } from "../lib/credentials";
 import {
+  resolveSessionReplayAgentAccess,
   SESSION_REPLAY_AGENT_ACCESS_PARAM,
-  verifySessionReplayAgentAccess,
 } from "../lib/session-replay-agent-context.js";
 import {
   getSessionReplayManifest,
@@ -236,12 +236,13 @@ function replayChunkSeqsFromQuery(query: Record<string, unknown>): number[] {
 function verifyAgentReplayAccessToken(
   event: any,
   recordingId: string,
-): string | null {
+): { token: string; viewerEmail: string } | null | false {
   const token = readAgentReplayAccessToken(event);
   if (!token) return null;
-  if (verifySessionReplayAgentAccess(recordingId, token)) return token;
+  const access = resolveSessionReplayAgentAccess(recordingId, token);
+  if (access) return { token, viewerEmail: access.viewerEmail };
   setResponseStatus(event, 401);
-  return "";
+  return false;
 }
 
 function listFiltersFromQuery(
@@ -371,13 +372,16 @@ export const handleSessionReplayManifest = defineEventHandler(async (event) => {
   }
 
   const agentAccessToken = verifyAgentReplayAccessToken(event, recordingId);
-  if (agentAccessToken === "") {
+  if (agentAccessToken === false) {
     return { error: "Invalid or expired agent access" };
   }
   if (agentAccessToken) {
     try {
       applyAgentReplayReadHeaders(event);
-      const manifest = await getSessionReplayTokenizedManifest(recordingId);
+      const manifest = await getSessionReplayTokenizedManifest(
+        recordingId,
+        agentAccessToken.viewerEmail,
+      );
       return {
         ...manifest,
         chunks: manifest.chunks.map((chunk) => ({
@@ -385,7 +389,7 @@ export const handleSessionReplayManifest = defineEventHandler(async (event) => {
           bytesPath: appendQueryParam(
             chunk.bytesPath,
             SESSION_REPLAY_AGENT_ACCESS_PARAM,
-            agentAccessToken,
+            agentAccessToken.token,
           ),
         })),
       };
@@ -419,7 +423,7 @@ export const handleSessionReplayChunkBytes = defineEventHandler(
     }
 
     const agentAccessToken = verifyAgentReplayAccessToken(event, recordingId);
-    if (agentAccessToken === "") {
+    if (agentAccessToken === false) {
       return { error: "Invalid or expired agent access" };
     }
     if (agentAccessToken) {
@@ -427,6 +431,7 @@ export const handleSessionReplayChunkBytes = defineEventHandler(
         const result = await readSessionReplayTokenizedChunkBytes(
           recordingId,
           seq,
+          agentAccessToken.viewerEmail,
         );
         applyAgentReplayReadHeaders(event);
         setResponseHeader(event, "Content-Type", "application/json");
@@ -472,7 +477,7 @@ export const handleSessionReplayChunkBatch = defineEventHandler(
     const seqs = replayChunkSeqsFromQuery(getQuery(event));
 
     const agentAccessToken = verifyAgentReplayAccessToken(event, recordingId);
-    if (agentAccessToken === "") {
+    if (agentAccessToken === false) {
       return { error: "Invalid or expired agent access" };
     }
     if (agentAccessToken) {
@@ -480,6 +485,7 @@ export const handleSessionReplayChunkBatch = defineEventHandler(
         const result = await readSessionReplayTokenizedChunkBatch(
           recordingId,
           seqs,
+          agentAccessToken.viewerEmail,
         );
         applyAgentReplayReadHeaders(event);
         setResponseHeader(event, "Content-Type", "application/json");

package/corpus/templates/analytics/server/lib/session-replay-agent-context.ts

@@ -651,10 +651,22 @@ export function verifySessionReplayAgentAccess(
   recordingId: string,
   token: string,
 ): boolean {
-  return verifyScopedAgentAccessToken(token, {
+  return resolveSessionReplayAgentAccess(recordingId, token) !== null;
+}
+
+export function resolveSessionReplayAgentAccess(
+  recordingId: string,
+  token: string,
+): { viewerEmail: string } | null {
+  const result = verifyScopedAgentAccessToken(token, {
     resourceKind: SESSION_REPLAY_AGENT_ACCESS_TOKEN_PREFIX,
     resourceId: recordingId,
-  }).ok;
+  });
+  // Replay grants are always minted by an authenticated viewer. Fail closed
+  // for grants without that signed identity: demo-mode policy is viewer-scoped,
+  // so guessing from the ambient request could expose identities to agents.
+  if (!result.ok || !result.viewerEmail) return null;
+  return { viewerEmail: result.viewerEmail };
 }
 
 export async function createSessionReplayAgentLink({
@@ -707,14 +719,18 @@ export async function buildSessionReplayAgentContext({
   origin?: string;
   includeTimeline?: boolean;
 }) {
-  if (!verifySessionReplayAgentAccess(recordingId, token)) {
+  const access = resolveSessionReplayAgentAccess(recordingId, token);
+  if (!access) {
     const error = Object.assign(new Error("Invalid or expired agent access"), {
       statusCode: 401,
     });
     throw error;
   }
 
-  const recording = await getSessionReplayTokenizedSummary(recordingId);
+  const recording = await getSessionReplayTokenizedSummary(
+    recordingId,
+    access.viewerEmail,
+  );
   const resolvedOrigin = appOrigin(origin);
   const basePath = appBasePath();
   const contextUrl = buildAgentAccessApiUrl({
@@ -747,7 +763,9 @@ export async function buildSessionReplayAgentContext({
   });
 
   const eventsResponse = includeTimeline
-    ? await getSessionReplayTokenizedEvents(recording.id, { limit: 10000 })
+    ? await getSessionReplayTokenizedEvents(recording.id, access.viewerEmail, {
+        limit: 10000,
+      })
     : null;
   const events =
     eventsResponse?.chunks.flatMap((chunk) =>

package/corpus/templates/analytics/server/lib/session-replay.ts

@@ -1786,8 +1786,13 @@ export async function getSessionReplaySummary(
 
 export async function getSessionReplayTokenizedSummary(
   recordingId: string,
+  viewerEmail: string,
 ): Promise<SessionRecordingSummary> {
-  const demoMode = await isSessionDemoModeEnabled(getRequestUserEmail());
+  // Tokenized reads often run without an authenticated request session. Use
+  // the viewer identity embedded in the signed, recording-scoped grant so a
+  // link minted while demo mode is enabled cannot reveal real identities when
+  // it is opened in a signed-out browser or by an external agent.
+  const demoMode = await isSessionDemoModeEnabled(viewerEmail);
   const db = getDb() as any;
   // guard:allow-unscoped -- called only after verifySessionReplayAgentAccess(recordingId, token) verifies a signed, recording-scoped agent_access token.
   const [row] = await db
@@ -1847,6 +1852,7 @@ export async function getSessionReplayManifest(
 
 export async function getSessionReplayTokenizedManifest(
   recordingId: string,
+  viewerEmail: string,
 ): Promise<{
   recording: AgentSessionRecordingSummary;
   chunks: Array<{
@@ -1859,7 +1865,10 @@ export async function getSessionReplayTokenizedManifest(
     bytesPath: string;
   }>;
 }> {
-  const recording = await getSessionReplayTokenizedSummary(recordingId);
+  const recording = await getSessionReplayTokenizedSummary(
+    recordingId,
+    viewerEmail,
+  );
   const manifest = await getSessionReplayManifestForRecording(recording);
   return {
     ...manifest,
@@ -1923,6 +1932,7 @@ export async function readSessionReplayChunkBytes(
 export async function readSessionReplayTokenizedChunkBytes(
   recordingId: string,
   seq: number,
+  viewerEmail: string,
 ): Promise<{
   recording: AgentSessionRecordingSummary;
   seq: number;
@@ -1930,7 +1940,10 @@ export async function readSessionReplayTokenizedChunkBytes(
   /** Decompressed replay-chunk JSON text (a serialized rrweb events array). */
   json: string;
 }> {
-  const recording = await getSessionReplayTokenizedSummary(recordingId);
+  const recording = await getSessionReplayTokenizedSummary(
+    recordingId,
+    viewerEmail,
+  );
   const chunk = await readSessionReplayChunkBytesForRecording(recording, seq);
   return {
     ...chunk,
@@ -2175,8 +2188,12 @@ export async function readSessionReplayChunkBatch(
 export async function readSessionReplayTokenizedChunkBatch(
   recordingId: string,
   seqs: number[],
+  viewerEmail: string,
 ): Promise<SessionReplayChunkBatchResult> {
-  const recording = await getSessionReplayTokenizedSummary(recordingId);
+  const recording = await getSessionReplayTokenizedSummary(
+    recordingId,
+    viewerEmail,
+  );
   return readSessionReplayChunkBatchForRecording(recording, seqs);
 }
 
@@ -2204,6 +2221,7 @@ export async function getSessionReplayEvents(
 
 export async function getSessionReplayTokenizedEvents(
   recordingId: string,
+  viewerEmail: string,
   options: SessionReplayEventReadOptions = {},
 ): Promise<{
   recording: AgentSessionRecordingSummary;
@@ -2219,7 +2237,10 @@ export async function getSessionReplayTokenizedEvents(
   truncated: boolean;
   unavailableChunks: number;
 }> {
-  const recording = await getSessionReplayTokenizedSummary(recordingId);
+  const recording = await getSessionReplayTokenizedSummary(
+    recordingId,
+    viewerEmail,
+  );
   const result = await getSessionReplayEventsForRecording(recording, options);
   return {
     ...result,

package/corpus/templates/analytics/server/plugins/agent-chat.ts

@@ -259,7 +259,10 @@ export default createAgentChatPlugin({
   codeExecution: { production: "sandboxed" },
   connectorCatalog: [...ANALYTICS_CONNECTOR_CATALOG],
   externalAgents: {
-    authenticatedReads: "auto",
+    // Keep the direct MCP surface deliberately curated. External agents
+    // should use ask_app for multi-step investigation; these six actions are
+    // bounded fallback reads for callers that already know what they need.
+    authenticatedReads: "off",
     writes: "ask_app_only",
   },
   resolveOrgId: async (event) => {

package/corpus/templates/analytics/server/routes/api/session-replay/agent-diagnostics.json.get.ts

@@ -8,8 +8,8 @@ import {
 import { type SessionReplayConsoleLevel } from "../../../../shared/session-replay-diagnostics.js";
 import {
   buildSessionReplayDiagnostics,
+  resolveSessionReplayAgentAccess,
   SESSION_REPLAY_AGENT_ACCESS_PARAM,
-  verifySessionReplayAgentAccess,
 } from "../../../lib/session-replay-agent-context.js";
 import { getSessionReplayTokenizedEvents } from "../../../lib/session-replay.js";
 
@@ -48,7 +48,8 @@ export default defineEventHandler(async (event) => {
     setResponseStatus(event, 400);
     return { error: "id and agent access token are required" };
   }
-  if (!verifySessionReplayAgentAccess(id, token)) {
+  const access = resolveSessionReplayAgentAccess(id, token);
+  if (!access) {
     setResponseStatus(event, 401);
     return { error: "Invalid or expired agent access" };
   }
@@ -108,9 +109,11 @@ export default defineEventHandler(async (event) => {
           : (rawOffset ? offset : 0) + limit,
       ),
     );
-    const eventsResponse = await getSessionReplayTokenizedEvents(id, {
-      limit: replayEventReadLimit,
-    });
+    const eventsResponse = await getSessionReplayTokenizedEvents(
+      id,
+      access.viewerEmail,
+      { limit: replayEventReadLimit },
+    );
     const events = eventsResponse.chunks.flatMap((chunk) =>
       chunk.events.filter(
         (item): item is Record<string, any> =>

package/corpus/templates/analytics/server/routes/api/session-replay/agent-events.json.get.ts

@@ -6,8 +6,8 @@ import {
 } from "h3";
 
 import {
+  resolveSessionReplayAgentAccess,
   SESSION_REPLAY_AGENT_ACCESS_PARAM,
-  verifySessionReplayAgentAccess,
 } from "../../../lib/session-replay-agent-context.js";
 import {
   getSessionReplayTokenizedEvents,
@@ -43,7 +43,8 @@ export default defineEventHandler(async (event) => {
     setResponseStatus(event, 400);
     return { error: "id and agent access token are required" };
   }
-  if (!verifySessionReplayAgentAccess(id, token)) {
+  const access = resolveSessionReplayAgentAccess(id, token);
+  if (!access) {
     setResponseStatus(event, 401);
     return { error: "Invalid or expired agent access" };
   }
@@ -55,7 +56,11 @@ export default defineEventHandler(async (event) => {
   };
 
   try {
-    return await getSessionReplayTokenizedEvents(id, options);
+    return await getSessionReplayTokenizedEvents(
+      id,
+      access.viewerEmail,
+      options,
+    );
   } catch (error: any) {
     setResponseStatus(event, error?.statusCode ?? 400);
     return { error: error?.message || String(error) };

package/corpus/templates/calendar/app/components/calendar/DeleteEventDialog.tsx

@@ -37,6 +37,7 @@ export function DeleteEventDialog({
 }: DeleteEventDialogProps) {
   const t = useT();
   const confirmButtonRef = useRef<HTMLButtonElement>(null);
+  const dontNotifyButtonRef = useRef<HTMLButtonElement>(null);
   const [scope, setScope] = useState<DeleteEventScope>("single");
   const [message, setMessage] = useState("");
 
@@ -114,7 +115,12 @@ export function DeleteEventDialog({
         onKeyDown={handleKeyDown}
         onOpenAutoFocus={(event) => {
           event.preventDefault();
-          confirmButtonRef.current?.focus();
+          // For events with guests, Enter should default to the reversible,
+          // no-email path instead of immediately sending a cancellation.
+          (canNotifyGuests
+            ? dontNotifyButtonRef.current
+            : confirmButtonRef.current
+          )?.focus();
         }}
       >
         <AlertDialogHeader>
@@ -177,7 +183,11 @@ export function DeleteEventDialog({
             {t("deleteEvent.cancel")}
           </AlertDialogCancel>
           {canNotifyGuests && (
-            <Button variant="outline" onClick={() => handleConfirm("none")}>
+            <Button
+              ref={dontNotifyButtonRef}
+              variant="outline"
+              onClick={() => handleConfirm("none")}
+            >
               {t("deleteEvent.dontNotify")}
             </Button>
           )}

package/dist/a2a/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/a2a/handlers.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EACV,SAAS,EAIT,eAAe,EAGhB,MAAM,YAAY,CAAC;AA4EpB;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,SAAS,EACjB,KAAK,CAAC,EAAE,GAAG,GACV,OAAO,CAAC,IAAI,CAAC,CAwEf;AAsqBD;;;GAGG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,GAAG,EACT,KAAK,EAAE,GAAG,EACV,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC,eAAe,CAAC,CAyC1B"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/a2a/handlers.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EACV,SAAS,EAIT,eAAe,EAGhB,MAAM,YAAY,CAAC;AA4EpB;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,SAAS,EACjB,KAAK,CAAC,EAAE,GAAG,GACV,OAAO,CAAC,IAAI,CAAC,CAwEf;AAsqBD;;;GAGG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,GAAG,EACT,KAAK,EAAE,GAAG,EACV,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC,eAAe,CAAC,CAyC1B"}

package/dist/a2a/handlers.js

@@ -4,7 +4,7 @@ import { withConfiguredAppBasePath } from "../server/app-base-path.js";
 import { fireInternalDispatch } from "../server/self-dispatch.js";
 import { agentChat } from "../shared/agent-chat.js";
 import { hasConfiguredA2ASecret, isA2AProductionRuntime, } from "./auth-policy.js";
-import { createTask, getTask, getTaskOwner, updateTask, claimA2ATaskForProcessing, getA2ATaskDispatchState, failStuckA2ATask, failStuckQueuedA2ATask, touchQueuedA2ATaskDispatch, touchProcessingA2ATask, } from "./task-store.js";
+import { createTask, getTask, getTaskOwner, updateTask, claimA2ATaskForProcessing, getA2ATaskDispatchState, failStuckA2ATask, failStuckQueuedA2ATask, settleProcessingA2ATask, touchQueuedA2ATaskDispatch, touchProcessingA2ATask, } from "./task-store.js";
 // Inlined to avoid pulling the entire core-routes-plugin (and its h3
 // transitive deps) into the a2a/handlers test boundary. Must stay in sync
 // with FRAMEWORK_ROUTE_PREFIX in `server/core-routes-plugin.ts`.
@@ -87,7 +87,7 @@ export async function processA2ATaskFromQueue(taskId, config, event) {
     }
     const message = claimed.history?.[0];
     if (!message) {
-        await updateTask(taskId, {
+        await settleProcessingA2ATask(taskId, {
             state: "failed",
             message: {
                 role: "agent",
@@ -113,7 +113,7 @@ export async function processA2ATaskFromQueue(taskId, config, event) {
     }
     catch (err) {
         try {
-            await updateTask(taskId, {
+            await settleProcessingA2ATask(taskId, {
                 state: "failed",
                 message: {
                     role: "agent",
@@ -277,7 +277,7 @@ async function runHandlerAndPersist(taskId, message, config, contextId, metadata
             for await (const msg of result) {
                 lastMessage = msg;
             }
-            await updateTask(taskId, {
+            await settleProcessingA2ATask(taskId, {
                 state: "completed",
                 message: lastMessage,
                 artifacts: artifacts.length > 0 ? artifacts : undefined,
@@ -286,14 +286,14 @@ async function runHandlerAndPersist(taskId, message, config, contextId, metadata
         }
         const handlerResult = await result;
         const allArtifacts = [...artifacts, ...(handlerResult.artifacts ?? [])];
-        await updateTask(taskId, {
+        await settleProcessingA2ATask(taskId, {
             state: "completed",
             message: handlerResult.message,
             artifacts: allArtifacts.length > 0 ? allArtifacts : undefined,
         });
     }
     catch (err) {
-        await updateTask(taskId, {
+        await settleProcessingA2ATask(taskId, {
             state: "failed",
             message: {
                 role: "agent",