@agent-native/core 0.137.4 → 0.137.6

package/dist/agent/run-store.js

@@ -1168,6 +1168,24 @@ export async function reconcileTerminalRunFromEvents(runId) {
     const client = getDbExec();
     const errorCode = errorCodeForTerminalEvent(latest.event);
     const errorDetail = errorDetailForTerminalEvent(latest.event);
+    // A row already holding the reconciled values is converged, and saying
+    // otherwise is not cosmetic: the UPDATE below still matches such a row and
+    // SQL counts an unchanged rewrite as affected, so `rowsAffected` reports
+    // "repaired" on every call. `getRunByThread` re-reads and re-reconciles on
+    // that answer, so a settled errored/stale_run row recurses forever and pins
+    // the event loop instead of returning. Converged must read as no work done.
+    const { rows: currentRows } = await client.execute({
+        sql: `SELECT status, error_code, terminal_reason, completed_at FROM agent_runs WHERE id = ?`,
+        args: [runId],
+    });
+    const current = currentRows[0];
+    if (current &&
+        current.status === status &&
+        (current.error_code ?? null) === (errorCode ?? null) &&
+        (current.terminal_reason ?? null) === terminalReason &&
+        current.completed_at != null) {
+        return false;
+    }
     const { rowsAffected } = await client.execute({
         sql: `UPDATE agent_runs
           SET status = ?,

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/notifications/routes.d.ts

@@ -13,13 +13,13 @@
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
     count: number;
     updated?: undefined;
-    error?: undefined;
     ok?: undefined;
+    error?: undefined;
 } | {
     count?: undefined;
     updated: number;
-    error?: undefined;
     ok?: undefined;
+    error?: undefined;
 } | {
     count?: undefined;
     updated?: undefined;
@@ -28,7 +28,7 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/progress/routes.d.ts

@@ -15,7 +15,7 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/secrets/routes.d.ts

@@ -34,37 +34,37 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    status?: undefined;
     ok?: undefined;
+    status?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     status: string;
-    error?: undefined;
 } | {
+    ok?: undefined;
     error: string;
     removed?: undefined;
-    ok?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
  * or the current stored value without changing anything.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+    ok?: undefined;
     error: string;
     note?: undefined;
-    ok?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note?: undefined;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note: string;
-    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,12 +95,12 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/server/agent-engine-api-key-route.d.ts

@@ -27,11 +27,11 @@ export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scop
 export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: any;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
+    error?: undefined;
 }>>;
 export {};
 //# sourceMappingURL=agent-engine-api-key-route.d.ts.map

package/dist/server/auth.js

@@ -389,18 +389,18 @@ async function readDesktopSsoSafely(event) {
  * user. Returns undefined if no session cookie was minted (the common
  * case — Better Auth's reset doesn't auto-sign-in by default).
  */
+function getSetCookieHeaders(headers) {
+    const responseHeaders = headers;
+    return typeof responseHeaders.getSetCookie === "function"
+        ? responseHeaders.getSetCookie()
+        : (responseHeaders.get("set-cookie") ?? "")
+            .split(/,(?=[^;]+=)/)
+            .map((value) => value.trim())
+            .filter(Boolean);
+}
 function extractSessionTokenFromSetCookies(response) {
     try {
-        // Headers may have multiple Set-Cookie entries; iterate via getSetCookie
-        // when available (Node 20+ / undici), else fall back to comma split.
-        const headers = response.headers;
-        const setCookies = typeof headers.getSetCookie === "function"
-            ? headers.getSetCookie()
-            : (headers.get("set-cookie") ?? "")
-                .split(/,(?=[^;]+=)/)
-                .map((s) => s.trim())
-                .filter(Boolean);
-        for (const sc of setCookies) {
+        for (const sc of getSetCookieHeaders(response.headers)) {
             // Better Auth's session cookie name is configurable but defaults to
             // `<prefix>.session_token`. Match either the Better Auth default or
             // our COOKIE_NAME (`an_session`) on the same line.
@@ -414,6 +414,16 @@ function extractSessionTokenFromSetCookies(response) {
     }
     return undefined;
 }
+function forwardBetterAuthSetCookies(event, result) {
+    if (!result || typeof result !== "object")
+        return;
+    const headers = result.headers;
+    if (!headers || typeof headers.get !== "function")
+        return;
+    for (const cookie of getSetCookieHeaders(headers)) {
+        event.res?.headers?.append("set-cookie", cookie);
+    }
+}
 // ---------------------------------------------------------------------------
 // ACCESS_TOKEN resolution
 // ---------------------------------------------------------------------------
@@ -2762,7 +2772,11 @@ async function mountBetterAuthRoutes(app, options) {
         clearFrameworkSessionCookies(event);
         optOutOfAuthDisabledSession(event);
         try {
-            await auth.api.signOut({ headers: event.headers });
+            const result = await auth.api.signOut({
+                headers: event.headers,
+                returnHeaders: true,
+            });
+            forwardBetterAuthSetCookies(event, result);
         }
         catch {
             // Ignore if no Better Auth session
@@ -2826,7 +2840,11 @@ async function mountBetterAuthRoutes(app, options) {
             clearFrameworkSessionCookies(event);
             optOutOfAuthDisabledSession(event);
             try {
-                await auth.api.signOut({ headers: event.headers });
+                const result = await auth.api.signOut({
+                    headers: event.headers,
+                    returnHeaders: true,
+                });
+                forwardBetterAuthSetCookies(event, result);
             }
             catch {
                 // Ignore — sessions are already gone in DB.
@@ -2981,7 +2999,11 @@ function mountAuthFallbackRoutes(app) {
         optOutOfAuthDisabledSession(event);
         try {
             const auth = await getBetterAuth();
-            await auth.api.signOut({ headers: event.headers });
+            const result = await auth.api.signOut({
+                headers: event.headers,
+                returnHeaders: true,
+            });
+            forwardBetterAuthSetCookies(event, result);
         }
         catch {
             // Ignore if Better Auth is still unavailable

package/dist/server/better-auth-instance.d.ts

@@ -75,6 +75,7 @@ export interface BetterAuthInstance {
         }) => Promise<any>;
         signOut: (opts: {
             headers: Headers;
+            returnHeaders?: boolean;
         }) => Promise<any>;
     };
 }

package/dist/server/realtime-token.d.ts

@@ -26,9 +26,9 @@ export declare function createRealtimeTokenHandler(): import("h3").EventHandlerW
     expiresAt?: undefined;
     ttlSeconds?: undefined;
 } | {
-    error?: undefined;
     token: string;
     expiresAt: string;
     ttlSeconds: number;
+    error?: undefined;
 }>>;
 //# sourceMappingURL=realtime-token.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.137.4",
+  "version": "0.137.6",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {