@agent-native/core 0.119.1 → 0.119.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.119.1",
+  "version": "0.119.3",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -390,7 +390,7 @@
     "yjs": "^13.6.31",
     "zod": "^4.3.6",
     "@agent-native/recap-cli": "0.5.1",
-    "@agent-native/toolkit": "^0.10.1"
+    "@agent-native/toolkit": "^0.10.2"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",

package/src/a2a/client.ts

@@ -647,6 +647,8 @@ export async function callAgent(
   text: string,
   opts?: {
     apiKey?: string;
+    /** Additional bearer tokens to try in order after apiKey during rotation. */
+    apiKeyFallbacks?: string[];
     /** Additional transport metadata. Receivers must not use it as identity. */
     metadata?: Record<string, unknown>;
     contextId?: string;
@@ -831,6 +833,7 @@ export async function callAction(
 async function buildA2AApiKeyAttempts(
   opts?: {
     apiKey?: string;
+    apiKeyFallbacks?: string[];
     userEmail?: string;
     orgDomain?: string;
     orgSecret?: string;
@@ -844,6 +847,7 @@ async function buildA2AApiKeyAttempts(
   };
 
   add(opts?.apiKey);
+  for (const fallback of opts?.apiKeyFallbacks ?? []) add(fallback);
 
   if (opts?.userEmail && (opts.orgSecret || process.env.A2A_SECRET)) {
     if (process.env.A2A_SECRET?.trim()) {

package/src/agent/production-agent.ts

@@ -1846,6 +1846,7 @@ export async function callConnectedAgentReference(input: {
     const response = await input.callAgent(input.path, input.message, {
       async: true,
       apiKey: callerAuth.apiKey,
+      apiKeyFallbacks: callerAuth.apiKeyFallbacks,
       metadata: callerAuth.metadata,
       userEmail: callerAuth.userEmail,
       orgDomain: callerAuth.orgDomain,

package/src/cli/create.ts

@@ -1384,6 +1384,7 @@ export {
   getCoreDependencyVersion as _getCoreDependencyVersion,
   getDispatchDependencyVersion as _getDispatchDependencyVersion,
   getToolkitDependencyVersion as _getToolkitDependencyVersion,
+  getCorePackageVersion as _getCorePackageVersion,
   getGitHubTemplateRef as _getGitHubTemplateRef,
   getGitHubTemplateRefCandidates as _getGitHubTemplateRefCandidates,
   githubTarballUrl as _githubTarballUrl,
@@ -1753,11 +1754,22 @@ function getCoreDependencyVersion(): string {
     if (localCore) return localPackageTarball(localCore);
   }
 
-  // Generated apps must install before the current package version is
-  // published. The dist-tag resolves to the newest released core today and to
-  // this package version once the release goes live. Local file deps are
-  // intentionally opt-in so scaffolded repos remain portable by default.
-  return "latest";
+  // Pin to the exact core version running this CLI rather than the npm
+  // `latest` dist-tag. `latest` can drift forward after `create` runs (a
+  // stale/cached CLI invocation, or simply time passing before `npm
+  // install`), installing a newer core release whose internal toolkit
+  // dependency no longer matches the toolkit range this CLI just wrote into
+  // the scaffold via getOwnPackageDependencyVersion() — reintroducing the
+  // exact duplicate/mismatched-toolkit class of bug this pinning exists to
+  // prevent. For the common case — `npx @agent-native/core@<version> create`
+  // against the public registry — this exact version is guaranteed
+  // installable, since npx just fetched it. Private/offline mirrors with a
+  // retention window narrower than "every historical version" are a known
+  // gap; `getCorePackageVersion()` returning undefined (e.g. malformed own
+  // package.json) falls back to `latest` rather than failing scaffolding
+  // outright. Local file deps stay opt-in so scaffolded repos remain
+  // portable by default.
+  return getCorePackageVersion() ?? "latest";
 }
 
 function getDispatchDependencyVersion(): string {
@@ -1766,6 +1778,9 @@ function getDispatchDependencyVersion(): string {
     if (localDispatch) return pathToFileURL(localDispatch).href;
   }
 
+  // Unlike toolkit, core's own package.json does not declare
+  // @agent-native/dispatch as a dependency, so there is no published
+  // compatible range to read here — "latest" is the best available signal.
   return "latest";
 }
 
@@ -1775,6 +1790,30 @@ function getToolkitDependencyVersion(): string {
     if (localToolkit) return localPackageTarball(localToolkit);
   }
 
+  return getOwnPackageDependencyVersion("@agent-native/toolkit");
+}
+
+/**
+ * Toolkit is versioned and published independently of core, so its npm
+ * `latest` dist-tag can briefly point to an incompatible release relative to
+ * the core version currently running this CLI. The published core
+ * `package.json` already carries the exact compatible range changesets
+ * resolved at release time — read it from there instead of trusting
+ * `latest`, which is only safe for pinning `core` itself.
+ */
+function getOwnPackageDependencyVersion(depName: string): string {
+  try {
+    const ownPkgPath = path.join(__dirname, "../../package.json");
+    const ownPkg = JSON.parse(fs.readFileSync(ownPkgPath, "utf-8"));
+    const range = ownPkg.dependencies?.[depName];
+    const isPublishedRange =
+      typeof range === "string" &&
+      range.length > 0 &&
+      !range.startsWith("workspace:") &&
+      range !== "catalog:";
+    if (isPublishedRange) return range;
+  } catch {}
+
   return "latest";
 }
 

package/src/client/AssistantChat.tsx

@@ -186,10 +186,7 @@ import {
   readSSEStreamRaw,
   settleInterruptedToolCalls,
 } from "./sse-event-processor.js";
-import {
-  fetchAgentEngineConfiguredState,
-  useAgentEngineConfigured,
-} from "./use-agent-engine-configured.js";
+import { useAgentEngineConfigured } from "./use-agent-engine-configured.js";
 import type {
   ChatThreadScope,
   ChatThreadSnapshot,
@@ -292,8 +289,6 @@ const RECONNECT_NO_PROGRESS_CONTINUE_MESSAGE =
 // through transient labels ("Contacting model", "Preparing X action"); past it
 // the live label appears so a genuinely slow step reads as working, not hung.
 const ACTIVITY_LABEL_REVEAL_DELAY_MS = 6_000;
-const SUBMIT_ENGINE_STATUS_TIMEOUT_MS = 1000;
-
 type ActiveRunLookup = {
   active?: boolean;
   runId?: string;
@@ -2376,8 +2371,6 @@ const AssistantChatInner = forwardRef<
     { tabId, threadId },
   );
   const missingApiKey = agentEngineConfigured.missing;
-  const isProviderStatusChecking =
-    providerStatusChecksEnabled && agentEngineConfigured.state === "unknown";
   const isProviderStatusUnavailable =
     providerStatusChecksEnabled &&
     agentEngineConfigured.state === "unavailable";
@@ -2396,36 +2389,6 @@ const AssistantChatInner = forwardRef<
     if (agentEngineConfigured.state !== "configured") return;
     setMissingKeySetupOpen(false);
   }, [agentEngineConfigured.state]);
-  const ensureAgentEngineReadyForSubmit = useCallback(async () => {
-    const state =
-      agentEngineConfigured.state === "missing"
-        ? "missing"
-        : await fetchAgentEngineConfiguredState(providerStatusChecksEnabled, {
-            timeoutMs: SUBMIT_ENGINE_STATUS_TIMEOUT_MS,
-          });
-    if (state === "configured") return true;
-
-    // Unknown means the readiness endpoint is unavailable or still resolving.
-    // Do not start a run optimistically: that recreates the long failure path
-    // this preflight exists to prevent. The mounted hook retries automatically.
-    if (state === "unknown" || state === "unavailable") return false;
-
-    requestMissingKeySetup();
-    if (typeof window !== "undefined") {
-      window.dispatchEvent(
-        new CustomEvent("agent-chat:missing-api-key", {
-          detail: { tabId, threadId },
-        }),
-      );
-    }
-    return false;
-  }, [
-    agentEngineConfigured.state,
-    providerStatusChecksEnabled,
-    requestMissingKeySetup,
-    tabId,
-    threadId,
-  ]);
   const [authError, setAuthError] = useState<{
     sessionExpired?: boolean;
   } | null>(null);
@@ -4449,7 +4412,7 @@ const AssistantChatInner = forwardRef<
     ) => {
       if (isAgentChatSubmitCancelled(submitMessageId)) return;
       if (agentEngineConfigured.state === "missing") {
-        void ensureAgentEngineReadyForSubmit();
+        requestMissingKeySetup();
         reportAgentChatSubmitResult(submitMessageId, false, "missing-engine");
         return;
       }
@@ -4687,12 +4650,12 @@ const AssistantChatInner = forwardRef<
       applyLocalQueuedMessages,
       agentEngineConfigured.state,
       buildComposerContextSubmission,
-      ensureAgentEngineReadyForSubmit,
       execMode,
       isRunning,
       materializeFrozenReconnectContent,
       markOptimisticRunning,
       appendThreadMessage,
+      requestMissingKeySetup,
       updateComposerContextItems,
     ],
   );
@@ -5654,16 +5617,14 @@ const AssistantChatInner = forwardRef<
                                   ? "Connect AI to start chatting..."
                                   : isProviderStatusUnavailable
                                     ? t("agentPanel.connectionUnavailable")
-                                    : isProviderStatusChecking
-                                      ? t("agentPanel.checkingAiConnection")
-                                      : composerDisabled
-                                        ? (composerDisabledPlaceholder ??
-                                          "Open Desktop to use this chat.")
-                                        : isRunning
-                                          ? queuedMessages.length > 0
-                                            ? `${queuedMessages.length} queued — send a follow-up...`
-                                            : "Send a follow-up..."
-                                          : composerPlaceholder
+                                    : composerDisabled
+                                      ? (composerDisabledPlaceholder ??
+                                        "Open Desktop to use this chat.")
+                                      : isRunning
+                                        ? queuedMessages.length > 0
+                                          ? `${queuedMessages.length} queued — send a follow-up...`
+                                          : "Send a follow-up..."
+                                        : composerPlaceholder
                               }
                               onSubmit={
                                 isRunning || composerContextItems.length > 0

package/src/client/ErrorBoundary.tsx

@@ -304,6 +304,8 @@ function ErrorScreen({ error }: { error: unknown }) {
     console.error("[ErrorBoundary]", error);
   }
 
+  const isNotFound = status === 404;
+
   return (
     <main className="flex items-center justify-center min-h-screen p-4 bg-background text-foreground">
       <div className="flex flex-col items-center text-center max-w-md">
@@ -318,25 +320,29 @@ function ErrorScreen({ error }: { error: unknown }) {
           <a href={appPath("/")} className={primaryActionClassName}>
             {copy.goHome}
           </a>
-          <button
-            type="button"
-            onClick={() => window.location.reload()}
-            className={secondaryActionClassName}
-          >
-            {copy.reload}
-          </button>
-          <ErrorReportActions
-            appName="Agent Native"
-            title={title}
-            details={details}
-            status={status}
-            issueTitle={`Error screen: ${title}`}
-            feedbackLabel={copy.sendFeedback}
-            feedbackPlaceholder={copy.feedbackPlaceholder}
-            githubLabel={copy.openGitHubIssue}
-            feedbackClassName="h-9"
-            githubClassName="h-9"
-          />
+          {!isNotFound && (
+            <>
+              <button
+                type="button"
+                onClick={() => window.location.reload()}
+                className={secondaryActionClassName}
+              >
+                {copy.reload}
+              </button>
+              <ErrorReportActions
+                appName="Agent Native"
+                title={title}
+                details={details}
+                status={status}
+                issueTitle={`Error screen: ${title}`}
+                feedbackLabel={copy.sendFeedback}
+                feedbackPlaceholder={copy.feedbackPlaceholder}
+                githubLabel={copy.openGitHubIssue}
+                feedbackClassName="h-9"
+                githubClassName="h-9"
+              />
+            </>
+          )}
         </div>
         {stack && (
           <pre className="mt-6 w-full text-start text-xs overflow-auto p-4 bg-muted rounded">

package/src/client/agent-page/AgentTabFrame.tsx

@@ -27,7 +27,7 @@ export function AgentTabFrame({
     <div
       className={cn("mx-auto flex w-full max-w-5xl flex-col gap-6", className)}
     >
-      <header className="flex flex-wrap items-start justify-between gap-4 border-b border-border/70 pb-5">
+      <header className="flex flex-wrap items-start justify-between gap-4 pb-5">
         <div className="space-y-1">
           <div className="flex items-center gap-1.5">
             <h2 className="text-xl font-semibold tracking-tight text-foreground">

package/src/client/agent-page/AgentTabsPage.tsx

@@ -10,6 +10,7 @@ import {
   IconPlugConnected,
   IconTopologyRing2,
   IconSearch,
+  IconSettings,
   IconShieldLock,
   IconX,
 } from "@tabler/icons-react";
@@ -49,6 +50,11 @@ import {
   type McpServer,
   type McpServerScope,
 } from "../resources/use-mcp-servers.js";
+import {
+  AGENT_SETTINGS_SECTIONS,
+  buildSectionSearchEntries,
+} from "../settings/agent-settings-search.js";
+import { AgentSettingsContent } from "../settings/SettingsPanel.js";
 import type {
   SettingsSearchEntry,
   SettingsTabItem,
@@ -685,6 +691,7 @@ export function AgentTabsPage({
   value,
   onValueChange,
 }: AgentTabsPageProps) {
+  const t = useT();
   const { data: org } = useOrg();
   const canManageOrg =
     !org?.orgId || org.role === "owner" || org.role === "admin";
@@ -826,6 +833,22 @@ export function AgentTabsPage({
           </Suspense>
         ),
       },
+      {
+        id: "settings",
+        label: t("settings.agentTitle"),
+        icon: IconSettings,
+        group: "agent",
+        keywords: "agent settings model llm api keys limits voice automations",
+        searchEntries: buildSectionSearchEntries(AGENT_SETTINGS_SECTIONS),
+        content: (
+          <AgentTabFrame
+            title={t("settings.agentTitle")}
+            description={t("settings.agentDescription")}
+          >
+            <AgentSettingsContent />
+          </AgentTabFrame>
+        ),
+      },
       {
         id: "access",
         label: "Access",

package/src/client/components/ui/message-scroller.tsx

@@ -57,19 +57,11 @@ function MessageScrollerViewport({
     <ShadcnMessageScroller.Viewport
       className={cn(
         "min-h-0 flex-1 overflow-y-auto overflow-x-hidden",
+        hasContentAbove && "message-scroller-viewport--top-fade",
         className,
       )}
       {...props}
     >
-      {hasContentAbove && (
-        <div
-          aria-hidden="true"
-          className="pointer-events-none sticky top-0 z-10 h-0"
-          data-message-scroller-top-fade
-        >
-          <div className="absolute inset-x-0 top-0 h-12 bg-gradient-to-b from-background via-background/90 to-transparent" />
-        </div>
-      )}
       {children}
     </ShadcnMessageScroller.Viewport>
   );

package/src/client/resources/ResourceTree.tsx

@@ -771,7 +771,7 @@ export function ResourceTree({
 
       {variant === "collection"
         ? leafResources.length > 0 && (
-            <div className="divide-y divide-border/60">
+            <div className="space-y-1">
               {leafResources.map((node) => (
                 <CollectionResourceRow
                   key={node.resource.id}
@@ -849,8 +849,8 @@ export function ResourceTree({
       )}
 
       {isEmpty && !creating && !isLoading && (
-        <div className="flex flex-col items-start border-y border-border/60 px-2 py-5">
-          <p className="ps-5 text-xs text-muted-foreground">
+        <div className="flex flex-col items-start px-2 py-5">
+          <p className="text-xs text-muted-foreground">
             {variant === "collection"
               ? "No resources in this collection yet"
               : "No files yet"}

package/src/client/resources/ResourcesPanel.tsx

@@ -1944,68 +1944,72 @@ export function ResourcesPanel({
               />
             )}
             {showPersonalTree && (
-              <ResourceTree
-                tree={displayedPersonalTree}
-                variant={resourceTreeVariant}
-                isLoading={personalTreeQuery.isLoading}
-                deletingId={
-                  deleteResource.isPending
-                    ? (deleteResource.variables as string)
-                    : deleteMcpServer.isPending
-                      ? `mcp:${(deleteMcpServer.variables as { scope: string }).scope}:${(deleteMcpServer.variables as { id: string }).id}`
-                      : null
-                }
-                selectedId={selectedResourceId}
-                onSelect={handleSelect}
-                onCreateFile={(parentPath, name) =>
-                  handleCreateFile(parentPath, name, "personal")
-                }
-                onCreateFolder={(parentPath, name) =>
-                  handleCreateFolder(parentPath, name, "personal")
-                }
-                onDelete={handleDelete}
-                onRename={handleRename}
-                onDrop={(files) => handleUploadFiles(files, "personal")}
-                title="Personal"
-                titleTooltip="Files visible only to you"
-                sectionAction={renderScopeCreateMenu("personal")}
-                emptyStateAction={renderEmptyStateAction("personal")}
-              />
+              <div className="pt-3">
+                <ResourceTree
+                  tree={displayedPersonalTree}
+                  variant={resourceTreeVariant}
+                  isLoading={personalTreeQuery.isLoading}
+                  deletingId={
+                    deleteResource.isPending
+                      ? (deleteResource.variables as string)
+                      : deleteMcpServer.isPending
+                        ? `mcp:${(deleteMcpServer.variables as { scope: string }).scope}:${(deleteMcpServer.variables as { id: string }).id}`
+                        : null
+                  }
+                  selectedId={selectedResourceId}
+                  onSelect={handleSelect}
+                  onCreateFile={(parentPath, name) =>
+                    handleCreateFile(parentPath, name, "personal")
+                  }
+                  onCreateFolder={(parentPath, name) =>
+                    handleCreateFolder(parentPath, name, "personal")
+                  }
+                  onDelete={handleDelete}
+                  onRename={handleRename}
+                  onDrop={(files) => handleUploadFiles(files, "personal")}
+                  title="Personal"
+                  titleTooltip="Files visible only to you"
+                  sectionAction={renderScopeCreateMenu("personal")}
+                  emptyStateAction={renderEmptyStateAction("personal")}
+                />
+              </div>
             )}
             {showSharedTree && (
-              <ResourceTree
-                tree={displayedSharedTree}
-                variant={resourceTreeVariant}
-                isLoading={sharedTreeQuery.isLoading}
-                deletingId={
-                  deleteResource.isPending
-                    ? (deleteResource.variables as string)
-                    : deleteMcpServer.isPending
-                      ? `mcp:${(deleteMcpServer.variables as { scope: string }).scope}:${(deleteMcpServer.variables as { id: string }).id}`
-                      : null
-                }
-                selectedId={selectedResourceId}
-                onSelect={handleSelect}
-                onCreateFile={(parentPath, name) =>
-                  handleCreateFile(parentPath, name, "shared")
-                }
-                onCreateFolder={(parentPath, name) =>
-                  handleCreateFolder(parentPath, name, "shared")
-                }
-                onDelete={handleDelete}
-                onRename={handleRename}
-                onDrop={(files) => handleUploadFiles(files, "shared")}
-                title="Organization"
-                titleTooltip={
-                  canEditOrg
-                    ? "Files visible to everyone in your organization"
-                    : "Files visible to everyone in your organization. Read-only — only admins can edit."
-                }
-                readOnly={!canEditOrg}
-                headingHint={!canEditOrg ? "Read only" : undefined}
-                sectionAction={renderScopeCreateMenu("shared")}
-                emptyStateAction={renderEmptyStateAction("shared")}
-              />
+              <div className="pt-3">
+                <ResourceTree
+                  tree={displayedSharedTree}
+                  variant={resourceTreeVariant}
+                  isLoading={sharedTreeQuery.isLoading}
+                  deletingId={
+                    deleteResource.isPending
+                      ? (deleteResource.variables as string)
+                      : deleteMcpServer.isPending
+                        ? `mcp:${(deleteMcpServer.variables as { scope: string }).scope}:${(deleteMcpServer.variables as { id: string }).id}`
+                        : null
+                  }
+                  selectedId={selectedResourceId}
+                  onSelect={handleSelect}
+                  onCreateFile={(parentPath, name) =>
+                    handleCreateFile(parentPath, name, "shared")
+                  }
+                  onCreateFolder={(parentPath, name) =>
+                    handleCreateFolder(parentPath, name, "shared")
+                  }
+                  onDelete={handleDelete}
+                  onRename={handleRename}
+                  onDrop={(files) => handleUploadFiles(files, "shared")}
+                  title="Organization"
+                  titleTooltip={
+                    canEditOrg
+                      ? "Files visible to everyone in your organization"
+                      : "Files visible to everyone in your organization. Read-only — only admins can edit."
+                  }
+                  readOnly={!canEditOrg}
+                  headingHint={!canEditOrg ? "Read only" : undefined}
+                  sectionAction={renderScopeCreateMenu("shared")}
+                  emptyStateAction={renderEmptyStateAction("shared")}
+                />
+              </div>
             )}
           </div>
         )}