@agent-native/core 0.107.1 → 0.108.0

package/corpus/README.md

@@ -27,5 +27,5 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- core files: 2288
-- template files: 6113
+- core files: 2306
+- template files: 6134

package/corpus/core/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @agent-native/core
 
+## 0.108.0
+
+### Minor Changes
+
+- 1db27df: Add shared default-off feature flags with server-side targeting, versioned Analytics fleet-management actions, narrowly delegated A2A access, and reusable controlled editor primitives.
+
+## 0.107.2
+
+### Patch Changes
+
+- 2a4d2db: Retry messaging replies without repeating successful agent mutations, and deliver verified A2A artifact checkpoints as soon as they are durable.
+
 ## 0.107.1
 
 ### Patch Changes

package/corpus/core/docs/content/actions.mdx

@@ -596,6 +596,54 @@ export default defineAction({
 });
 ```
 
+## Guarding staged features {#feature-flags}
+
+Use Core feature flags when an action is safe to deploy but should reach
+production gradually. Declare the default-off flag once, register it from a
+Nitro plugin, and evaluate it inside every guarded action. Hiding the matching
+button is presentation; the action check is enforcement.
+
+```ts
+// shared/feature-flags.ts
+import { defineFeatureFlag } from "@agent-native/core/feature-flags";
+
+export const FULL_APP_BUILDING = defineFeatureFlag({
+  key: "full-app-building",
+  displayName: "Full app building",
+  description: "Create and edit Fusion-backed applications.",
+});
+```
+
+```ts
+// server/plugins/feature-flags.ts
+import { createFeatureFlagsPlugin } from "@agent-native/core/server";
+
+import { FULL_APP_BUILDING } from "../../shared/feature-flags.js";
+
+export default createFeatureFlagsPlugin({ flags: [FULL_APP_BUILDING] });
+```
+
+```ts
+// actions/create-fusion-app.ts
+import { isFeatureFlagEnabled } from "@agent-native/core/feature-flags";
+
+run: async (args, ctx) => {
+  if (!(await isFeatureFlagEnabled(FULL_APP_BUILDING, ctx))) {
+    throw new Error("Full app building is not enabled for this account.");
+  }
+  // Perform the guarded operation.
+};
+```
+
+Use `useFeatureFlag(FULL_APP_BUILDING.key)` from
+`@agent-native/core/client` to hide or reveal the client surface. Core mounts
+`get-feature-flags`, `list-feature-flags`, and `set-feature-flag`. Management
+is permission-checked and audited; fleet operator UIs call the same app-local
+actions through narrowly scoped A2A delegation. Analytics is the sole operator
+UI; apps should not add their own flag settings panels. Never route flag writes
+through generic settings endpoints or raw SQL, and never put authentication,
+authorization, audit, secrets, or SSR cache behavior behind a runtime flag.
+
 ## Legacy CLI-style actions {#legacy-cli-actions}
 
 The framework still supports older `export default async function(args)` actions that aren't wrapped in `defineAction` — useful for one-off dev scripts that don't need agent/HTTP exposure. These are CLI-only; they don't appear as agent tools, don't mount HTTP endpoints, and don't get typesafe frontend hooks.

package/corpus/core/docs/content/locales/ar-SA/actions.mdx

@@ -616,6 +616,44 @@ export default defineAction({
 });
 ```
 
++## حماية الميزات المرحلية {#feature-flags}
+
+استخدم أعلام ميزات Core عندما تكون العملية آمنة للنشر لكن ينبغي طرحها تدريجياً في الإنتاج. عرّف العلم المعطّل افتراضياً مرة واحدة، وسجّله من إضافة Nitro، وقيّمه داخل كل عملية محمية. إخفاء الزر المطابق عرضٌ فقط؛ أما فحص العملية فهو الإنفاذ.
+
+```ts
+// shared/feature-flags.ts
+import { defineFeatureFlag } from "@agent-native/core/feature-flags";
+
+export const FULL_APP_BUILDING = defineFeatureFlag({
+  key: "full-app-building",
+  displayName: "Full app building",
+  description: "Create and edit Fusion-backed applications.",
+});
+```
+
+```ts
+// server/plugins/feature-flags.ts
+import { createFeatureFlagsPlugin } from "@agent-native/core/server";
+
+import { FULL_APP_BUILDING } from "../../shared/feature-flags.js";
+
+export default createFeatureFlagsPlugin({ flags: [FULL_APP_BUILDING] });
+```
+
+```ts
+// actions/create-fusion-app.ts
+import { isFeatureFlagEnabled } from "@agent-native/core/feature-flags";
+
+run: async (args, ctx) => {
+  if (!(await isFeatureFlagEnabled(FULL_APP_BUILDING, ctx))) {
+    throw new Error("Full app building is not enabled for this account.");
+  }
+  // Perform the guarded operation.
+};
+```
+
+استخدم `useFeatureFlag(FULL_APP_BUILDING.key)` من `@agent-native/core/client` لإخفاء واجهة العميل أو إظهارها. يوفّر Core الإجراءات `get-feature-flags` و`list-feature-flags` و`set-feature-flag`. تخضع الإدارة لفحص الأذونات والتدقيق؛ وتستدعي واجهات fleet الإجراءات المحلية للتطبيق نفسها عبر تفويض A2A محدود بدقة. لا تمرّر عمليات كتابة الأعلام عبر نقاط نهاية الإعدادات العامة أو SQL الخام، ولا تضع المصادقة أو التفويض أو التدقيق أو الأسرار أو ذاكرة SSR المؤقتة خلف علم وقت تشغيل.
+
 ## نمط CLI القديم actions {#legacy-cli-actions}
 
 لا يزال إطار العمل يدعم `export default async function(args)` actions الأقدم التي لم يتم تضمينها في `defineAction` - وهي مفيدة لنصوص التطوير الفريدة التي لا تحتاج إلى عرض الوكيل/HTTP. هذه هي CLI فقط؛ فهي لا تظهر كأدوات وكيل، ولا تقم بتثبيت نقاط نهاية HTTP، ولا تحصل على خطافات أمامية آمنة للكتابة.

package/corpus/core/docs/content/locales/de-DE/actions.mdx

@@ -618,6 +618,44 @@ export default defineAction({
 });
 ```
 
++## Staged-Features absichern {#feature-flags}
+
+Verwende Core-Feature-Flags, wenn eine Action sicher ausgerollt werden kann, aber schrittweise in Produktion gelangen soll. Definiere das standardmäßig deaktivierte Flag einmal, registriere es über ein Nitro-Plugin und prüfe es in jeder geschützten Action. Die passende Schaltfläche auszublenden ist Darstellung; die Prüfung in der Action ist die Durchsetzung.
+
+```ts
+// shared/feature-flags.ts
+import { defineFeatureFlag } from "@agent-native/core/feature-flags";
+
+export const FULL_APP_BUILDING = defineFeatureFlag({
+  key: "full-app-building",
+  displayName: "Full app building",
+  description: "Create and edit Fusion-backed applications.",
+});
+```
+
+```ts
+// server/plugins/feature-flags.ts
+import { createFeatureFlagsPlugin } from "@agent-native/core/server";
+
+import { FULL_APP_BUILDING } from "../../shared/feature-flags.js";
+
+export default createFeatureFlagsPlugin({ flags: [FULL_APP_BUILDING] });
+```
+
+```ts
+// actions/create-fusion-app.ts
+import { isFeatureFlagEnabled } from "@agent-native/core/feature-flags";
+
+run: async (args, ctx) => {
+  if (!(await isFeatureFlagEnabled(FULL_APP_BUILDING, ctx))) {
+    throw new Error("Full app building is not enabled for this account.");
+  }
+  // Perform the guarded operation.
+};
+```
+
+Verwende `useFeatureFlag(FULL_APP_BUILDING.key)` aus `@agent-native/core/client`, um die Client-Oberfläche ein- oder auszublenden. Core stellt `get-feature-flags`, `list-feature-flags` und `set-feature-flag` bereit. Die Verwaltung wird geprüft und auditiert; Fleet-Oberflächen rufen dieselben app-lokalen Actions über eng begrenzte A2A-Delegierung auf. Leite Flag-Schreibvorgänge niemals über allgemeine Einstellungs-Endpunkte oder unverarbeitetes SQL und lege Authentifizierung, Autorisierung, Auditierung, Secrets oder SSR-Cache-Verhalten niemals hinter ein Laufzeit-Flag.
+
 ## Legacy CLI-Stil actions {#legacy-cli-actions}
 
 Das Framework unterstützt weiterhin ältere `export default async function(args)` actions, die nicht in `defineAction` verpackt sind – nützlich für einmalige Entwicklungsskripte, die keine Agent/HTTP-Offenlegung benötigen. Dies sind nur CLI; Sie erscheinen nicht als Agent-Tools, mounten keine HTTP-Endpunkte und erhalten keine typsicheren Frontend-Hooks.

package/corpus/core/docs/content/locales/es-ES/actions.mdx

@@ -618,6 +618,44 @@ export default defineAction({
 });
 ```
 
++## Proteger funciones por etapas {#feature-flags}
+
+Usa indicadores de funciones de Core cuando una acción sea segura para desplegar, pero deba llegar gradualmente a producción. Declara una vez el indicador desactivado por defecto, regístralo desde un plugin de Nitro y evalúalo dentro de cada acción protegida. Ocultar el botón correspondiente es presentación; la comprobación de la acción es la aplicación de la regla.
+
+```ts
+// shared/feature-flags.ts
+import { defineFeatureFlag } from "@agent-native/core/feature-flags";
+
+export const FULL_APP_BUILDING = defineFeatureFlag({
+  key: "full-app-building",
+  displayName: "Full app building",
+  description: "Create and edit Fusion-backed applications.",
+});
+```
+
+```ts
+// server/plugins/feature-flags.ts
+import { createFeatureFlagsPlugin } from "@agent-native/core/server";
+
+import { FULL_APP_BUILDING } from "../../shared/feature-flags.js";
+
+export default createFeatureFlagsPlugin({ flags: [FULL_APP_BUILDING] });
+```
+
+```ts
+// actions/create-fusion-app.ts
+import { isFeatureFlagEnabled } from "@agent-native/core/feature-flags";
+
+run: async (args, ctx) => {
+  if (!(await isFeatureFlagEnabled(FULL_APP_BUILDING, ctx))) {
+    throw new Error("Full app building is not enabled for this account.");
+  }
+  // Perform the guarded operation.
+};
+```
+
+Usa `useFeatureFlag(FULL_APP_BUILDING.key)` de `@agent-native/core/client` para ocultar o mostrar la superficie del cliente. Core proporciona `get-feature-flags`, `list-feature-flags` y `set-feature-flag`. La administración comprueba permisos y queda auditada; las interfaces de flota llaman las mismas actions locales de la app mediante delegación A2A restringida. Nunca canalices escrituras de indicadores mediante endpoints genéricos de configuración o SQL sin procesar, ni coloques autenticación, autorización, auditoría, secretos o caché SSR detrás de un indicador de tiempo de ejecución.
+
 ## actions estilo CLI heredado {#legacy-cli-actions}
 
 El marco aún admite `export default async function(args)` actions más antiguos que no están incluidos en `defineAction`, lo que resulta útil para scripts de desarrollo únicos que no necesitan exposición al agente/HTTP. Estos son solo para CLI; no aparecen como herramientas de agente, no montan puntos finales HTTP y no obtienen enlaces de interfaz con seguridad tipográfica.

package/corpus/core/docs/content/locales/fr-FR/actions.mdx

@@ -618,6 +618,44 @@ export default defineAction({
 });
 ```
 
++## Protéger les fonctionnalités progressives {#feature-flags}
+
+Utilisez les indicateurs de fonctionnalités Core lorsqu’une action peut être déployée en toute sécurité, mais doit atteindre progressivement la production. Déclarez une fois l’indicateur désactivé par défaut, enregistrez-le depuis un plugin Nitro et évaluez-le dans chaque action protégée. Masquer le bouton correspondant relève de la présentation ; le contrôle dans l’action assure l’application.
+
+```ts
+// shared/feature-flags.ts
+import { defineFeatureFlag } from "@agent-native/core/feature-flags";
+
+export const FULL_APP_BUILDING = defineFeatureFlag({
+  key: "full-app-building",
+  displayName: "Full app building",
+  description: "Create and edit Fusion-backed applications.",
+});
+```
+
+```ts
+// server/plugins/feature-flags.ts
+import { createFeatureFlagsPlugin } from "@agent-native/core/server";
+
+import { FULL_APP_BUILDING } from "../../shared/feature-flags.js";
+
+export default createFeatureFlagsPlugin({ flags: [FULL_APP_BUILDING] });
+```
+
+```ts
+// actions/create-fusion-app.ts
+import { isFeatureFlagEnabled } from "@agent-native/core/feature-flags";
+
+run: async (args, ctx) => {
+  if (!(await isFeatureFlagEnabled(FULL_APP_BUILDING, ctx))) {
+    throw new Error("Full app building is not enabled for this account.");
+  }
+  // Perform the guarded operation.
+};
+```
+
+Utilisez `useFeatureFlag(FULL_APP_BUILDING.key)` depuis `@agent-native/core/client` pour masquer ou afficher la surface cliente. Core fournit `get-feature-flags`, `list-feature-flags` et `set-feature-flag`. La gestion vérifie les autorisations et est auditée ; les interfaces de flotte appellent les mêmes actions locales à l’app via une délégation A2A étroitement limitée. Ne faites jamais transiter les écritures d’indicateurs par des endpoints de réglages génériques ou du SQL brut, et ne placez jamais l’authentification, l’autorisation, l’audit, les secrets ou le cache SSR derrière un indicateur d’exécution.
+
 ## actions de style CLI hérité {#legacy-cli-actions}
 
 Le framework prend toujours en charge les anciens `export default async function(args)` actions qui ne sont pas encapsulés dans `defineAction` — utile pour les scripts de développement ponctuels qui ne nécessitent pas d'exposition agent/HTTP. Il s'agit uniquement de CLI ; ils n'apparaissent pas en tant qu'outils d'agent, ne montent pas de points de terminaison HTTP et n'obtiennent pas de hooks frontaux de type sécurisé.

package/corpus/core/docs/content/locales/hi-IN/actions.mdx

@@ -614,6 +614,44 @@ export default defineAction({
 });
 ```
 
++## चरणबद्ध सुविधाओं की सुरक्षा {#feature-flags}
+
+Core फीचर फ़्लैग का उपयोग तब करें जब कोई action सुरक्षित रूप से deploy की जा सकती हो, लेकिन production तक धीरे-धीरे पहुँचनी हो। डिफ़ॉल्ट रूप से बंद फ़्लैग को एक बार घोषित करें, Nitro plugin से register करें और हर guarded action में evaluate करें। संबंधित बटन छिपाना केवल प्रस्तुति है; action check ही enforcement है।
+
+```ts
+// shared/feature-flags.ts
+import { defineFeatureFlag } from "@agent-native/core/feature-flags";
+
+export const FULL_APP_BUILDING = defineFeatureFlag({
+  key: "full-app-building",
+  displayName: "Full app building",
+  description: "Create and edit Fusion-backed applications.",
+});
+```
+
+```ts
+// server/plugins/feature-flags.ts
+import { createFeatureFlagsPlugin } from "@agent-native/core/server";
+
+import { FULL_APP_BUILDING } from "../../shared/feature-flags.js";
+
+export default createFeatureFlagsPlugin({ flags: [FULL_APP_BUILDING] });
+```
+
+```ts
+// actions/create-fusion-app.ts
+import { isFeatureFlagEnabled } from "@agent-native/core/feature-flags";
+
+run: async (args, ctx) => {
+  if (!(await isFeatureFlagEnabled(FULL_APP_BUILDING, ctx))) {
+    throw new Error("Full app building is not enabled for this account.");
+  }
+  // Perform the guarded operation.
+};
+```
+
+क्लाइंट सतह को छिपाने या दिखाने के लिए `@agent-native/core/client` से `useFeatureFlag(FULL_APP_BUILDING.key)` का उपयोग करें। Core `get-feature-flags`, `list-feature-flags`, और `set-feature-flag` उपलब्ध कराता है। प्रबंधन में अनुमतियों की जाँच और audit होता है; fleet UI सख्ती से सीमित A2A delegation के जरिए वही app-local actions कॉल करता है। फ़्लैग writes को सामान्य settings endpoints या raw SQL से route न करें, और authentication, authorization, audit, secrets या SSR cache को runtime flag के पीछे न रखें।
+
 ## विरासत CLI-शैली actions {#legacy-cli-actions}
 
 फ्रेमवर्क अभी भी पुराने `export default async function(args)` actions का समर्थन करता है जो `defineAction` में लिपटे नहीं हैं - एक-ऑफ़ देव स्क्रिप्ट के लिए उपयोगी है जिन्हें एजेंट/HTTP एक्सपोज़र की आवश्यकता नहीं है। ये केवल CLI हैं; वे एजेंट टूल के रूप में प्रकट नहीं होते हैं, HTTP एंडपॉइंट को माउंट नहीं करते हैं, और उन्हें टाइपसेफ फ्रंटएंड हुक नहीं मिलते हैं।

package/corpus/core/docs/content/locales/ja-JP/actions.mdx

@@ -618,6 +618,44 @@ export default defineAction({
 });
 ```
 
++## 段階的な機能を保護する {#feature-flags}
+
+安全にデプロイできるものの、本番へ段階的に届けたい action には Core の feature flag を使用します。デフォルトでオフの flag を一度だけ宣言し、Nitro プラグインから登録して、保護するすべての action 内で評価します。対応するボタンを隠すのは表示上の処理であり、action のチェックが強制です。
+
+```ts
+// shared/feature-flags.ts
+import { defineFeatureFlag } from "@agent-native/core/feature-flags";
+
+export const FULL_APP_BUILDING = defineFeatureFlag({
+  key: "full-app-building",
+  displayName: "Full app building",
+  description: "Create and edit Fusion-backed applications.",
+});
+```
+
+```ts
+// server/plugins/feature-flags.ts
+import { createFeatureFlagsPlugin } from "@agent-native/core/server";
+
+import { FULL_APP_BUILDING } from "../../shared/feature-flags.js";
+
+export default createFeatureFlagsPlugin({ flags: [FULL_APP_BUILDING] });
+```
+
+```ts
+// actions/create-fusion-app.ts
+import { isFeatureFlagEnabled } from "@agent-native/core/feature-flags";
+
+run: async (args, ctx) => {
+  if (!(await isFeatureFlagEnabled(FULL_APP_BUILDING, ctx))) {
+    throw new Error("Full app building is not enabled for this account.");
+  }
+  // Perform the guarded operation.
+};
+```
+
+クライアント側の表示を隠したり表示したりするには、`@agent-native/core/client` の `useFeatureFlag(FULL_APP_BUILDING.key)` を使用します。Core は `get-feature-flags`、`list-feature-flags`、`set-feature-flag` を提供します。管理操作では権限が確認され監査され、fleet UI は厳密に限定された A2A 委任で同じアプリローカル actions を呼び出します。flag の書き込みを汎用設定 endpoint や生の SQL 経由にしたり、認証、認可、監査、secret、SSR キャッシュを runtime flag の背後に置いたりしないでください。
+
 ## レガシー CLI スタイル actions {#legacy-cli-actions}
 
 フレームワークは、`defineAction` でラップされていない古い `export default async function(args)` actions を引き続きサポートしています。これは、エージェント/HTTP の公開を必要としない 1 回限りの開発スクリプトに役立ちます。これらは CLI のみです。これらはエージェント ツールとして表示されず、HTTP エンドポイントをマウントせず、タイプセーフなフロントエンド フックを取得しません。

package/corpus/core/docs/content/locales/ko-KR/actions.mdx

@@ -614,6 +614,44 @@ export default defineAction({
 });
 ```
 
++## 단계적 기능 보호하기 {#feature-flags}
+
+배포 자체는 안전하지만 프로덕션에 점진적으로 도입해야 하는 action에는 Core feature flag를 사용하세요. 기본적으로 꺼진 flag를 한 번 선언하고 Nitro 플러그인에서 등록한 뒤 모든 보호된 action 안에서 평가하세요. 해당 버튼을 숨기는 것은 표현일 뿐이며, action 검사가 실제 적용입니다.
+
+```ts
+// shared/feature-flags.ts
+import { defineFeatureFlag } from "@agent-native/core/feature-flags";
+
+export const FULL_APP_BUILDING = defineFeatureFlag({
+  key: "full-app-building",
+  displayName: "Full app building",
+  description: "Create and edit Fusion-backed applications.",
+});
+```
+
+```ts
+// server/plugins/feature-flags.ts
+import { createFeatureFlagsPlugin } from "@agent-native/core/server";
+
+import { FULL_APP_BUILDING } from "../../shared/feature-flags.js";
+
+export default createFeatureFlagsPlugin({ flags: [FULL_APP_BUILDING] });
+```
+
+```ts
+// actions/create-fusion-app.ts
+import { isFeatureFlagEnabled } from "@agent-native/core/feature-flags";
+
+run: async (args, ctx) => {
+  if (!(await isFeatureFlagEnabled(FULL_APP_BUILDING, ctx))) {
+    throw new Error("Full app building is not enabled for this account.");
+  }
+  // Perform the guarded operation.
+};
+```
+
+클라이언트 화면을 숨기거나 표시하려면 `@agent-native/core/client`의 `useFeatureFlag(FULL_APP_BUILDING.key)`를 사용하세요. Core는 `get-feature-flags`, `list-feature-flags`, `set-feature-flag`를 제공합니다. 관리는 권한 검사와 감사를 거치며, fleet UI는 엄격히 제한된 A2A 위임으로 같은 앱 로컬 actions를 호출합니다. flag 쓰기를 일반 설정 endpoint나 원시 SQL로 처리하지 말고, 인증, 권한 부여, 감사, secret 또는 SSR 캐시를 runtime flag 뒤에 두지 마세요.
+
 ## 레거시 CLI 스타일 actions {#legacy-cli-actions}
 
 프레임워크는 `defineAction`에 래핑되지 않은 이전 `export default async function(args)` actions를 계속 지원합니다. 이는 에이전트/HTTP 노출이 필요하지 않은 일회성 개발 스크립트에 유용합니다. 이는 CLI 전용입니다. 에이전트 도구로 표시되지 않고, HTTP 엔드포인트를 마운트하지 않으며, 유형 안전 프런트엔드 후크를 얻지 못합니다.

package/corpus/core/docs/content/locales/pt-BR/actions.mdx

@@ -618,6 +618,44 @@ export default defineAction({
 });
 ```
 
++## Protegendo recursos em etapas {#feature-flags}
+
+Use feature flags do Core quando uma action for segura para implantar, mas precisar chegar gradualmente à produção. Declare a flag desativada por padrão uma vez, registre-a em um plugin Nitro e avalie-a dentro de cada action protegida. Ocultar o botão correspondente é apresentação; a verificação na action é a aplicação da regra.
+
+```ts
+// shared/feature-flags.ts
+import { defineFeatureFlag } from "@agent-native/core/feature-flags";
+
+export const FULL_APP_BUILDING = defineFeatureFlag({
+  key: "full-app-building",
+  displayName: "Full app building",
+  description: "Create and edit Fusion-backed applications.",
+});
+```
+
+```ts
+// server/plugins/feature-flags.ts
+import { createFeatureFlagsPlugin } from "@agent-native/core/server";
+
+import { FULL_APP_BUILDING } from "../../shared/feature-flags.js";
+
+export default createFeatureFlagsPlugin({ flags: [FULL_APP_BUILDING] });
+```
+
+```ts
+// actions/create-fusion-app.ts
+import { isFeatureFlagEnabled } from "@agent-native/core/feature-flags";
+
+run: async (args, ctx) => {
+  if (!(await isFeatureFlagEnabled(FULL_APP_BUILDING, ctx))) {
+    throw new Error("Full app building is not enabled for this account.");
+  }
+  // Perform the guarded operation.
+};
+```
+
+Use `useFeatureFlag(FULL_APP_BUILDING.key)` de `@agent-native/core/client` para ocultar ou revelar a superfície do cliente. O Core disponibiliza `get-feature-flags`, `list-feature-flags` e `set-feature-flag`. O gerenciamento verifica permissões e é auditado; interfaces de frota chamam as mesmas actions locais do app por delegação A2A estritamente limitada. Nunca encaminhe gravações de flags por endpoints genéricos de configurações ou SQL bruto, nem coloque autenticação, autorização, auditoria, segredos ou cache SSR atrás de uma flag de runtime.
+
 ## actions estilo CLI legado {#legacy-cli-actions}
 
 A estrutura ainda oferece suporte a `export default async function(args)` actions mais antigos que não estão agrupados em `defineAction` — útil para scripts de desenvolvimento únicos que não precisam de exposição do agente/HTTP. Estes são apenas CLI; eles não aparecem como ferramentas de agente, não montam endpoints HTTP e não recebem ganchos de front-end seguros.

package/corpus/core/docs/content/locales/zh-CN/actions.mdx

@@ -616,6 +616,44 @@ export default defineAction({
 });
 ```
 
++## 保护分阶段功能 {#feature-flags}
+
+当某个 action 可以安全部署、但需要逐步进入生产环境时，请使用 Core 功能标志。只需声明一次默认关闭的标志，从 Nitro 插件注册它，并在每个受保护的 action 中进行评估。隐藏对应按钮只是界面呈现；action 检查才是强制执行。
+
+```ts
+// shared/feature-flags.ts
+import { defineFeatureFlag } from "@agent-native/core/feature-flags";
+
+export const FULL_APP_BUILDING = defineFeatureFlag({
+  key: "full-app-building",
+  displayName: "Full app building",
+  description: "Create and edit Fusion-backed applications.",
+});
+```
+
+```ts
+// server/plugins/feature-flags.ts
+import { createFeatureFlagsPlugin } from "@agent-native/core/server";
+
+import { FULL_APP_BUILDING } from "../../shared/feature-flags.js";
+
+export default createFeatureFlagsPlugin({ flags: [FULL_APP_BUILDING] });
+```
+
+```ts
+// actions/create-fusion-app.ts
+import { isFeatureFlagEnabled } from "@agent-native/core/feature-flags";
+
+run: async (args, ctx) => {
+  if (!(await isFeatureFlagEnabled(FULL_APP_BUILDING, ctx))) {
+    throw new Error("Full app building is not enabled for this account.");
+  }
+  // Perform the guarded operation.
+};
+```
+
+使用 `@agent-native/core/client` 中的 `useFeatureFlag(FULL_APP_BUILDING.key)` 隐藏或显示客户端界面。Core 提供 `get-feature-flags`、`list-feature-flags` 和 `set-feature-flag`。管理会检查权限并审计；fleet UI 通过严格限定的 A2A 委托调用相同的应用本地 actions。切勿通过通用设置 endpoint 或原始 SQL 写入标志，也不要将身份验证、授权、审计、secret 或 SSR 缓存置于 runtime flag 之后。
+
 ## 旧版 CLI 样式 actions {#legacy-cli-actions}
 
 该框架仍然支持未包含在 `defineAction` 中的较旧的 `export default async function(args)` actions - 对于不需要代理/HTTP 暴露的一次性开发脚本很有用。这些仅限 CLI；它们不会显示为代理工具，不会挂载 HTTP 端点，也不会获得类型安全的前端挂钩。

package/corpus/core/docs/content/locales/zh-TW/actions.mdx

@@ -614,6 +614,44 @@ export default defineAction({
 });
 ```
 
++## 保護分階段功能 {#feature-flags}
+
+當某個 action 可以安全部署、但需要逐步進入生產環境時，請使用 Core 功能旗標。只需宣告一次預設關閉的旗標，從 Nitro 外掛程式註冊它，並在每個受保護的 action 中評估。隱藏對應按鈕只是介面呈現；action 檢查才是強制執行。
+
+```ts
+// shared/feature-flags.ts
+import { defineFeatureFlag } from "@agent-native/core/feature-flags";
+
+export const FULL_APP_BUILDING = defineFeatureFlag({
+  key: "full-app-building",
+  displayName: "Full app building",
+  description: "Create and edit Fusion-backed applications.",
+});
+```
+
+```ts
+// server/plugins/feature-flags.ts
+import { createFeatureFlagsPlugin } from "@agent-native/core/server";
+
+import { FULL_APP_BUILDING } from "../../shared/feature-flags.js";
+
+export default createFeatureFlagsPlugin({ flags: [FULL_APP_BUILDING] });
+```
+
+```ts
+// actions/create-fusion-app.ts
+import { isFeatureFlagEnabled } from "@agent-native/core/feature-flags";
+
+run: async (args, ctx) => {
+  if (!(await isFeatureFlagEnabled(FULL_APP_BUILDING, ctx))) {
+    throw new Error("Full app building is not enabled for this account.");
+  }
+  // Perform the guarded operation.
+};
+```
+
+使用 `@agent-native/core/client` 中的 `useFeatureFlag(FULL_APP_BUILDING.key)` 隱藏或顯示用戶端介面。Core 提供 `get-feature-flags`、`list-feature-flags` 和 `set-feature-flag`。管理會檢查權限並稽核；fleet UI 透過嚴格限定的 A2A 委派呼叫相同的應用程式本機 actions。切勿透過通用設定 endpoint 或原始 SQL 寫入旗標，也不要將驗證、授權、稽核、secret 或 SSR 快取置於 runtime flag 之後。
+
 ## 舊版 CLI 樣式 actions {#legacy-cli-actions}
 
 此框架仍然支援未包含在 `defineAction` 中的較舊的 `export default async function(args)` actions - 對於不需要代理/HTTP 暴露的一次性開發指令碼很有用。這些僅限 CLI；它們不會顯示為代理工具，不會掛載 HTTP 端點，也不會獲得型別安全的前端掛鉤。

package/corpus/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.107.1",
+  "version": "0.108.0",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -110,6 +110,10 @@
     },
     "./application-state": "./dist/application-state/index.js",
     "./settings": "./dist/settings/index.js",
+    "./feature-flags": "./dist/feature-flags/index.js",
+    "./feature-flags/actions/get-feature-flags": "./dist/feature-flags/actions/get-feature-flags.js",
+    "./feature-flags/actions/list-feature-flags": "./dist/feature-flags/actions/list-feature-flags.js",
+    "./feature-flags/actions/set-feature-flag": "./dist/feature-flags/actions/set-feature-flag.js",
     "./localization": "./dist/localization/index.js",
     "./localization/actions/get-localization-preference": "./dist/localization/actions/get-localization-preference.js",
     "./localization/actions/set-localization-preference": "./dist/localization/actions/set-localization-preference.js",

package/corpus/core/src/a2a/artifact-response.ts

@@ -11,6 +11,11 @@ export interface A2AArtifactResponseOptions {
   baseUrl?: string;
   includeReferencedArtifacts?: boolean;
   includePersistedArtifactMarker?: boolean;
+  persistedArtifactSecret?: string;
+}
+
+export interface A2AArtifactIdentityOptions {
+  persistedArtifactSecrets?: readonly string[];
 }
 
 export interface A2AArtifactIdentity {
@@ -74,21 +79,26 @@ const ARTIFACT_RESOURCE_TYPES = new Set<A2AArtifactIdentity["resourceType"]>([
 
 function persistedArtifactIdentitiesFromMarker(
   result: string,
+  secrets: readonly string[] = process.env.A2A_SECRET
+    ? [process.env.A2A_SECRET]
+    : [],
 ): A2AArtifactIdentity[] {
-  const secret = process.env.A2A_SECRET;
-  if (!secret) return [];
+  if (secrets.length === 0) return [];
   const match = result.match(
     /<!--\s*agent-native:persisted-artifacts=([A-Za-z0-9_-]+)\.([a-f0-9]{64})\s*-->/,
   );
   if (!match) return [];
   try {
     const payload = match[1];
-    const expected = createHmac("sha256", secret).update(payload).digest();
     const supplied = Buffer.from(match[2], "hex");
-    if (
-      supplied.length !== expected.length ||
-      !timingSafeEqual(supplied, expected)
-    ) {
+    const verified = secrets.some((secret) => {
+      const expected = createHmac("sha256", secret).update(payload).digest();
+      return (
+        supplied.length === expected.length &&
+        timingSafeEqual(supplied, expected)
+      );
+    });
+    if (!verified) {
       return [];
     }
     const parsed = JSON.parse(Buffer.from(payload, "base64url").toString());
@@ -114,9 +124,15 @@ function persistedArtifactIdentitiesFromMarker(
 function withPersistedArtifactMarker(
   text: string,
   toolResults: A2AToolResultSummary[],
+  secret = process.env.A2A_SECRET,
 ): string {
-  const identities = extractA2AArtifactIdentities(toolResults).slice(0, 12);
-  const secret = process.env.A2A_SECRET;
+  const verificationSecrets = [secret, process.env.A2A_SECRET].filter(
+    (value, index, values): value is string =>
+      !!value && values.indexOf(value) === index,
+  );
+  const identities = extractA2AArtifactIdentities(toolResults, {
+    persistedArtifactSecrets: verificationSecrets,
+  }).slice(0, 12);
   if (identities.length === 0 || !secret) return text;
   const payload = Buffer.from(JSON.stringify(identities)).toString("base64url");
   const signature = createHmac("sha256", secret).update(payload).digest("hex");
@@ -881,6 +897,7 @@ function collectArtifacts(results: A2AToolResultSummary[]): {
  */
 export function extractA2AArtifactIdentities(
   results: A2AToolResultSummary[],
+  options: A2AArtifactIdentityOptions = {},
 ): A2AArtifactIdentity[] {
   const identities = new Map<string, A2AArtifactIdentity>();
 
@@ -894,6 +911,7 @@ export function extractA2AArtifactIdentities(
     if (result.tool === "call-agent") {
       for (const identity of persistedArtifactIdentitiesFromMarker(
         result.result,
+        options.persistedArtifactSecrets,
       )) {
         remember({ ...identity, sourceAction: "call-agent" });
       }
@@ -1387,7 +1405,11 @@ export function appendA2AArtifactLinks(
     options.includeReferencedArtifacts ?? false;
   const finalize = (value: string) =>
     options.includePersistedArtifactMarker
-      ? withPersistedArtifactMarker(value, toolResults)
+      ? withPersistedArtifactMarker(
+          value,
+          toolResults,
+          options.persistedArtifactSecret ?? process.env.A2A_SECRET,
+        )
       : value;
   const {
     documents,