@agent-native/core 0.109.3 → 0.110.0

package/corpus/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.109.3",
+  "version": "0.110.0",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -21,6 +21,7 @@
     "corpus",
     "dist",
     "docs",
+    "migration-manifest.json",
     "tsconfig.base.json",
     "src/templates/default",
     "src/templates/headless",
@@ -31,7 +32,6 @@
   "type": "module",
   "sideEffects": [
     "*.css",
-    "dist/client/chat/widgets/builtin-tool-renderers.js",
     "dist/client/dev-overlay/builtins.js"
   ],
   "exports": {
@@ -72,12 +72,28 @@
     "./db/schema": "./dist/db/schema.js",
     "./db/drizzle-config": "./dist/db/drizzle-config.js",
     "./client": "./dist/client/index.js",
+    "./client/agent-chat": "./dist/client/agent-chat/index.js",
+    "./client/analytics": "./dist/client/analytics/index.js",
+    "./client/automation": "./dist/client/automation/index.js",
     "./client/chat": "./dist/client/chat/index.js",
+    "./client/changelog": "./dist/client/changelog/index.js",
     "./client/collab": "./dist/client/collab/index.js",
     "./client/composer": "./dist/client/composer/index.js",
     "./client/conversation": "./dist/client/conversation/index.js",
+    "./client/dev-overlay": "./dist/client/dev-overlay/index.js",
     "./client/editor": "./dist/client/editor/index.js",
+    "./client/rich-markdown-editor": "./dist/client/rich-markdown-editor/index.js",
+    "./client/feature-flags": "./dist/client/feature-flags/index.js",
+    "./client/hooks": "./dist/client/hooks/index.js",
+    "./client/host": "./dist/client/host/index.js",
+    "./client/integrations": "./dist/client/integrations/index.js",
+    "./client/navigation": "./dist/client/navigation/index.js",
     "./client/resources": "./dist/client/resources/index.js",
+    "./client/route-chunk-recovery": "./dist/client/route-chunk-recovery/index.js",
+    "./client/settings": "./dist/client/settings/index.js",
+    "./client/ui": "./dist/client/ui/index.js",
+    "./client/uploads": "./dist/client/uploads/index.js",
+    "./client/widgets": "./dist/client/widgets/index.js",
     "./client/components/ui/dialog": "./dist/client/components/ui/dialog.js",
     "./client/components/ui/dropdown-menu": "./dist/client/components/ui/dropdown-menu.js",
     "./client/components/ui/hover-card": "./dist/client/components/ui/hover-card.js",
@@ -228,6 +244,7 @@
       "types": "./dist/package-lifecycle/index.d.ts",
       "default": "./dist/package-lifecycle/index.js"
     },
+    "./migration-manifest.json": "./migration-manifest.json",
     "./code-agents": "./dist/code-agents/index.js",
     "./code-agents/transcript-normalizer": "./dist/code-agents/transcript-normalizer.js",
     "./workspace-connections": "./dist/workspace-connections/index.js",
@@ -280,12 +297,12 @@
     "@mozilla/readability": "0.6.0",
     "@neondatabase/serverless": "^1.1.0",
     "@opentelemetry/sdk-trace-base": "^2.8.0",
-    "@radix-ui/react-dialog": "1.1.15",
-    "@radix-ui/react-dropdown-menu": "^2.1.16",
-    "@radix-ui/react-hover-card": "^1.1.15",
-    "@radix-ui/react-popover": "^1.1.15",
-    "@radix-ui/react-select": "^2.2.6",
-    "@radix-ui/react-tooltip": "^1.2.8",
+    "@radix-ui/react-dialog": "catalog:",
+    "@radix-ui/react-dropdown-menu": "catalog:",
+    "@radix-ui/react-hover-card": "catalog:",
+    "@radix-ui/react-popover": "catalog:",
+    "@radix-ui/react-select": "catalog:",
+    "@radix-ui/react-tooltip": "catalog:",
     "@react-router/dev": "^8.1.0",
     "@react-router/fs-routes": "^8.1.0",
     "@resvg/resvg-js": "^2.6.2",
@@ -295,63 +312,64 @@
     "@shadcn/react": "^0.2.0",
     "@standard-schema/spec": "^1.1.0",
     "@tanstack/react-table": "^8.21.3",
-    "@tiptap/core": "3.27.1",
-    "@tiptap/extension-code-block-lowlight": "3.27.1",
-    "@tiptap/extension-collaboration": "3.27.1",
-    "@tiptap/extension-collaboration-caret": "3.27.1",
-    "@tiptap/extension-image": "3.27.1",
-    "@tiptap/extension-link": "3.27.1",
-    "@tiptap/extension-placeholder": "3.27.1",
-    "@tiptap/extension-table": "3.27.1",
-    "@tiptap/extension-table-cell": "3.27.1",
-    "@tiptap/extension-table-header": "3.27.1",
-    "@tiptap/extension-table-row": "3.27.1",
-    "@tiptap/extension-task-item": "3.27.1",
-    "@tiptap/extension-task-list": "3.27.1",
-    "@tiptap/pm": "3.27.1",
-    "@tiptap/react": "3.27.1",
-    "@tiptap/starter-kit": "3.27.1",
-    "@tiptap/y-tiptap": "^3.0.5",
+    "@tiptap/core": "catalog:",
+    "@tiptap/extension-code-block-lowlight": "catalog:",
+    "@tiptap/extension-collaboration": "catalog:",
+    "@tiptap/extension-collaboration-caret": "catalog:",
+    "@tiptap/extension-image": "catalog:",
+    "@tiptap/extension-link": "catalog:",
+    "@tiptap/extension-placeholder": "catalog:",
+    "@tiptap/extension-table": "catalog:",
+    "@tiptap/extension-table-cell": "catalog:",
+    "@tiptap/extension-table-header": "catalog:",
+    "@tiptap/extension-table-row": "catalog:",
+    "@tiptap/extension-task-item": "catalog:",
+    "@tiptap/extension-task-list": "catalog:",
+    "@tiptap/pm": "catalog:",
+    "@tiptap/react": "catalog:",
+    "@tiptap/starter-kit": "catalog:",
+    "@tiptap/y-tiptap": "catalog:",
     "@uiw/react-codemirror": "^4.25.10",
     "ajv": "^8.20.0",
     "better-auth": "1.6.16",
     "better-sqlite3": "^12.8.0",
     "botframework-connector": "^4.23.3",
-    "clsx": "^2.1.1",
+    "clsx": "catalog:",
     "cron-parser": "^5.5.0",
     "diff-match-patch": "^1.0.5",
     "dotenv": "^17.2.1",
     "drizzle-orm": "^0.45.2",
     "h3": "^2.0.1-rc.20",
-    "highlight.js": "^11.11.1",
+    "highlight.js": "catalog:",
     "i18next": "26.3.1",
     "isbot": "^5",
     "jiti": "^2.6.1",
     "jose": "^6.2.2",
     "linkedom": "0.18.12",
-    "lowlight": "^3.3.0",
+    "lowlight": "catalog:",
     "minimatch": "^10.0.0",
     "nanoid": "^5.1.9",
-    "next-themes": "^0.4.6",
+    "next-themes": "catalog:",
     "nf3": "0.3.17",
     "nitro": "3.0.260415-beta",
     "p-limit": "^7.3.0",
     "prettier": "^3.8.3",
     "react-i18next": "17.0.8",
     "react-markdown": "^10.1.0",
-    "recharts": "^3.8.1",
+    "recharts": "catalog:",
     "remark-gfm": "^4.0.1",
     "roughjs": "4.6.6",
     "safe-regex2": "5.1.1",
     "shiki": "^4.0.2",
-    "sonner": "^2.0.7",
-    "tailwind-merge": "^3.5.0",
-    "tiptap-markdown": "^0.9.0",
+    "sonner": "catalog:",
+    "tailwind-merge": "catalog:",
+    "tiptap-markdown": "catalog:",
+    "ts-morph": "^28.0.0",
     "turndown": "7.2.4",
     "tw-animate-css": "1.4.0",
     "tweetnacl": "^1.0.3",
-    "y-protocols": "^1.0.7",
-    "yjs": "^13.6.31",
+    "y-protocols": "catalog:",
+    "yjs": "catalog:",
     "zod": "^4.3.6"
   },
   "devDependencies": {
@@ -388,6 +406,7 @@
     "ai": "^6.0.168",
     "autoprefixer": "^10.4.21",
     "drizzle-kit": "^0.31.10",
+    "esbuild": "^0.28.1",
     "express": "^5.2.1",
     "mermaid": "11.15.0",
     "node-pty": "^1.1.0",

package/corpus/core/src/cli/create.ts

@@ -1,5 +1,6 @@
 import { execFile, execFileSync } from "child_process";
 import fs from "fs";
+import os from "os";
 import path from "path";
 import { fileURLToPath, pathToFileURL } from "url";
 
@@ -44,6 +45,7 @@ const FIRST_PARTY_TARBALL_SYMLINK_EXCLUDES = [
   "*/CLAUDE.md",
   "*/.claude/skills",
 ];
+const localPackageTarballs = new Map<string, string>();
 
 /**
  * Tagged error for input that fails CLI-level validation (repo names, app
@@ -903,6 +905,40 @@ function findLocalPackage(name: string): string | undefined {
   return undefined;
 }
 
+/**
+ * Pack a local framework package before linking it into a generated app.
+ * Raw file: dependencies retain workspace-only catalog references, while a
+ * packed artifact has the publish-ready manifest that consumers receive.
+ */
+function localPackageTarball(packageDir: string): string {
+  const cached = localPackageTarballs.get(packageDir);
+  if (cached) return cached;
+
+  const packDir = fs.mkdtempSync(
+    path.join(os.tmpdir(), "agent-native-local-package-"),
+  );
+  const pnpm = process.platform === "win32" ? "pnpm.cmd" : "pnpm";
+  execFileSync(pnpm, ["pack", "--pack-destination", packDir], {
+    cwd: packageDir,
+    encoding: "utf-8",
+    env: { ...process.env, npm_config_ignore_scripts: "true" },
+    stdio: "pipe",
+  });
+
+  const tarballs = fs
+    .readdirSync(packDir)
+    .filter((entry) => entry.endsWith(".tgz"));
+  if (tarballs.length !== 1) {
+    throw new Error(
+      `Expected one packed local package artifact in ${packDir}, found ${tarballs.length}.`,
+    );
+  }
+
+  const tarball = pathToFileURL(path.join(packDir, tarballs[0]!)).href;
+  localPackageTarballs.set(packageDir, tarball);
+  return tarball;
+}
+
 /**
  * Scaffold internal workspace packages required by the selected templates.
  * Deduplicates so each package is only copied once even if multiple
@@ -1691,7 +1727,7 @@ function fixWebManifestName(
 function getCoreDependencyVersion(): string {
   if (process.env.AGENT_NATIVE_CREATE_USE_LOCAL_CORE === "1") {
     const localCore = findLocalPackage("core");
-    if (localCore) return pathToFileURL(localCore).href;
+    if (localCore) return localPackageTarball(localCore);
   }
 
   // Generated apps must install before the current package version is
@@ -1713,7 +1749,7 @@ function getDispatchDependencyVersion(): string {
 function getToolkitDependencyVersion(): string {
   if (process.env.AGENT_NATIVE_CREATE_USE_LOCAL_CORE === "1") {
     const localToolkit = findLocalPackage("toolkit");
-    if (localToolkit) return pathToFileURL(localToolkit).href;
+    if (localToolkit) return localPackageTarball(localToolkit);
   }
 
   return "latest";
@@ -1722,7 +1758,7 @@ function getToolkitDependencyVersion(): string {
 function localToolkitOverride(): string | null {
   if (process.env.AGENT_NATIVE_CREATE_USE_LOCAL_CORE !== "1") return null;
   const localToolkit = findLocalPackage("toolkit");
-  return localToolkit ? pathToFileURL(localToolkit).href : null;
+  return localToolkit ? localPackageTarball(localToolkit) : null;
 }
 
 function localRecapCliOverride(): string | null {

package/corpus/core/src/cli/doctor.ts

@@ -4,7 +4,7 @@
  * itself via `scripts/guard-*.mjs` (see
  * `advisor-plans/reports/005-doctor-design.md` for the full design and
  * `advisor-plans/015-doctor-v1-implementation.md` for the implementation
- * plan). v1 ships 7 of those guards, ported to work against a single
+ * plan). v1 ships 8 of those guards, ported to work against a single
  * generated app root instead of this monorepo's multi-template layout —
  * see `../guards/index.ts`.
  *
@@ -32,7 +32,12 @@ import {
   scanUnscopedCredentials,
   scanUnscopedQueries,
 } from "../guards/index.js";
-import type { GuardResult } from "../guards/index.js";
+import type { GuardFinding, GuardResult } from "../guards/index.js";
+import {
+  AGENT_NATIVE_UPGRADE_CODEMOD_COMMAND,
+  scanDeprecatedImports,
+  type MigrationManifest,
+} from "../package-lifecycle/index.js";
 
 export type GuardName =
   | "no-drizzle-push"
@@ -41,7 +46,8 @@ export type GuardName =
   | "no-env-credentials"
   | "db-tool-scoping"
   | "no-env-mutation"
-  | "no-localhost-fallback";
+  | "no-localhost-fallback"
+  | "migration-manifest";
 
 export const ALL_GUARD_NAMES: GuardName[] = [
   "no-drizzle-push",
@@ -51,6 +57,7 @@ export const ALL_GUARD_NAMES: GuardName[] = [
   "db-tool-scoping",
   "no-env-mutation",
   "no-localhost-fallback",
+  "migration-manifest",
 ];
 
 export interface DoctorConfig {
@@ -75,9 +82,14 @@ export interface DoctorFinding {
 export interface DoctorReport {
   ok: boolean;
   findings: DoctorFinding[];
+  warnings: DoctorFinding[];
   guardsRun: string[];
 }
 
+interface DoctorGuardResult extends GuardResult {
+  warnings?: GuardFinding[];
+}
+
 /**
  * Reads the optional `"doctor"` key from `<root>/agent-native.json`. All
  * fields are optional with sane empty defaults — an app needs zero config
@@ -118,7 +130,8 @@ function runGuard(
   name: GuardName,
   root: string,
   config: DoctorConfig,
-): GuardResult {
+  migrationManifests?: MigrationManifest[],
+): DoctorGuardResult {
   switch (name) {
     case "no-drizzle-push":
       return scanDrizzlePush({ root });
@@ -137,6 +150,29 @@ function runGuard(
       return scanEnvMutation({ root });
     case "no-localhost-fallback":
       return scanLocalhostFallback({ root, extraExemptPaths: [] });
+    case "migration-manifest": {
+      const imports = scanDeprecatedImports({
+        root,
+        manifests: migrationManifests,
+      });
+      return {
+        name,
+        findings: imports
+          .filter((finding) => finding.status === "active")
+          .map((finding) => ({
+            file: path.relative(root, finding.file),
+            line: finding.line,
+            message: `${finding.from} moves to ${finding.to.join(", ")}. Run: ${AGENT_NATIVE_UPGRADE_CODEMOD_COMMAND}`,
+          })),
+        warnings: imports
+          .filter((finding) => finding.status === "planned")
+          .map((finding) => ({
+            file: path.relative(root, finding.file),
+            line: finding.line,
+            message: `${finding.from} is planned to move to ${finding.to.join(", ")} in a future release. No rewrite is available yet.`,
+          })),
+      };
+    }
   }
 }
 
@@ -147,6 +183,7 @@ export interface RunDoctorScanOptions {
    * are silently ignored here — the CLI layer (`runDoctor`) validates
    * `--only` and reports a usage error before calling this. */
   only?: string[];
+  migrationManifests?: MigrationManifest[];
 }
 
 /** Pure scan orchestrator: runs the selected guards against `root` and
@@ -167,8 +204,9 @@ export function runDoctorScan(options: RunDoctorScanOptions): DoctorReport {
   }
 
   const findings: DoctorFinding[] = [];
+  const warnings: DoctorFinding[] = [];
   for (const name of names) {
-    const result = runGuard(name, root, config);
+    const result = runGuard(name, root, config, options.migrationManifests);
     for (const f of result.findings) {
       findings.push({
         guard: name,
@@ -177,9 +215,22 @@ export function runDoctorScan(options: RunDoctorScanOptions): DoctorReport {
         message: f.message,
       });
     }
+    for (const warning of result.warnings ?? []) {
+      warnings.push({
+        guard: name,
+        file: warning.file,
+        line: warning.line,
+        message: warning.message,
+      });
+    }
   }
 
-  return { ok: findings.length === 0, findings, guardsRun: names };
+  return {
+    ok: findings.length === 0,
+    findings,
+    warnings,
+    guardsRun: names,
+  };
 }
 
 /** Pure escalation rule shared by the CLI (`--strict`) and the `build`
@@ -215,6 +266,14 @@ function formatDoctorHuman(report: DoctorReport, root: string): string {
       lines.push(`  [${f.guard}] ${f.file}:${f.line} — ${f.message}`);
     }
   }
+  if (report.warnings.length > 0) {
+    lines.push(`${report.warnings.length} warning(s):`);
+    for (const warning of report.warnings) {
+      lines.push(
+        `  [${warning.guard}] ${warning.file}:${warning.line} — ${warning.message}`,
+      );
+    }
+  }
   return lines.join("\n");
 }
 
@@ -264,7 +323,7 @@ export function printDoctorHelp(io: Pick<DoctorIo, "log"> = defaultIo): void {
     [
       "Usage:",
       "  agent-native doctor                        Scan app source for security-critical guard violations",
-      "  agent-native doctor --json                 Machine-readable report: { ok, findings, guardsRun, strict }",
+      "  agent-native doctor --json                 Machine-readable report: { ok, findings, warnings, guardsRun, strict }",
       "  agent-native doctor --only <guard,guard>   Run only the named guard(s)",
       "  agent-native doctor --strict                Escalate findings to a hard failure when used by `agent-native build --strict`",
       "  agent-native doctor --cwd <dir>             Run against a project root other than the current directory",
@@ -281,6 +340,7 @@ export function printDoctorHelp(io: Pick<DoctorIo, "log"> = defaultIo): void {
       "",
       "For dependency-pin health (framework overrides/patches, stale",
       "@agent-native/* pins), run `agent-native upgrade check` instead.",
+      `For import migrations, run \`${AGENT_NATIVE_UPGRADE_CODEMOD_COMMAND}\`.`,
     ].join("\n"),
   );
 }
@@ -387,6 +447,16 @@ export async function runDoctorBuildHook(
       io.err(`  [${f.guard}] ${f.file}:${f.line} — ${f.message}`);
     }
   }
+  if (report.warnings.length > 0) {
+    io.err(
+      `\n[doctor] ${report.warnings.length} planned migration warning(s) — no rewrite is available yet.`,
+    );
+    for (const warning of report.warnings) {
+      io.err(
+        `  [${warning.guard}] ${warning.file}:${warning.line} — ${warning.message}`,
+      );
+    }
+  }
 
   const fail = shouldFailBuild(report.findings.length > 0, {
     strict: options.strict,