@agent-native/core 0.141.5 → 0.141.7

package/corpus/templates/slides/app/pages/Index.tsx

@@ -40,7 +40,10 @@ import {
 } from "@/components/ui/alert-dialog";
 import { Button } from "@/components/ui/button";
 import { ToggleGroup, ToggleGroupItem } from "@/components/ui/toggle-group";
-import type { Deck } from "@/context/DeckContext";
+import {
+  describeDeckPersistenceFailure,
+  type Deck,
+} from "@/context/DeckContext";
 import { useDecks } from "@/context/DeckContext";
 import { useAgentGenerating } from "@/hooks/use-agent-generating";
 import { useDesignSystems } from "@/hooks/use-design-systems";
@@ -571,14 +574,17 @@ export default function Index() {
     setNewDeckPromptOpen(false);
 
     const persisted = await ensureDeckPersisted(deck.id);
-    if (!persisted) {
+    if (!persisted.persisted) {
       if (!savePromptForRetry(prompt)) {
         setNewDeckInitialPrompt({ text: prompt, key: Date.now() });
       }
       setNewDeckRetryFiles(filesForGeneration);
       deleteDeck(deckId);
       toast.error(t("home.generationStartFailed"), {
-        description: t("home.generationStartFailedDescription"),
+        description: describeDeckPersistenceFailure(
+          persisted,
+          t("home.generationStartFailedDescription"),
+        ),
       });
       setShowNewDeckPrompt(true);
       return;
@@ -747,9 +753,14 @@ export default function Index() {
             noDefaultSlides: true,
           });
           const persisted = await ensureDeckPersisted(referenceDeck.id);
-          if (!persisted) {
+          if (!persisted.persisted) {
             deleteDeck(referenceDeck.id);
-            throw new Error("The PDF reference deck could not be saved.");
+            throw new Error(
+              describeDeckPersistenceFailure(
+                persisted,
+                "The PDF reference deck could not be saved.",
+              ),
+            );
           }
           try {
             const imported = (await callAction("import-file", {

package/corpus/templates/slides/app/routes/extensions._index.tsx

@@ -1,5 +1,5 @@
 import { Navigate } from "react-router";
 
 export default function ExtensionsRoute() {
-  return <Navigate to="/settings#extensions" replace />;
+  return <Navigate to="/settings/extensions" replace />;
 }

package/corpus/templates/slides/app/routes/settings.$.tsx

@@ -0,0 +1 @@
+export { default, meta } from "./settings.js";

package/corpus/templates/slides/app/routes/team.tsx

@@ -7,5 +7,5 @@ export function meta() {
 }
 
 export default function TeamRoute() {
-  return <Navigate to="/settings#organization" replace />;
+  return <Navigate to="/settings/organization" replace />;
 }

package/corpus/templates/slides/changelog/2026-08-05-failed-deck-creation-and-reference-uploads-now-recover-clean.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-05
+---
+
+Failed deck creation and reference uploads now recover cleanly instead of leaving stuck drafts

package/corpus/templates/slides/changelog/2026-08-05-new-presentation-prompts-now-clearly-describe-presentation-g.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-08-05
+---
+
+New presentation prompts now clearly describe presentation generation

package/corpus/templates/slides/changelog/2026-08-05-slides-recover-completed-generation-results-after-a-sync-hic.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-05
+---
+
+Slides recover completed generation results after a sync hiccup, and the agent prompt stays readable.

package/corpus/templates/slides/changelog/2026-08-05-website-url-imports-now-capture-hydrated-browser-computed-st.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-08-05
+---
+
+Website URL imports now capture hydrated browser-computed styles for more faithful deck themes.

package/corpus/templates/tasks/app/components/layout/Header.tsx

@@ -11,7 +11,9 @@ type Translate = ReturnType<typeof useT>;
 
 function resolveTitle(t: Translate, pathname: string): string {
   if (pathname === "/tasks") return t("header.pageTasks");
-  if (pathname === "/settings") return t("header.pageSettings");
+  if (pathname === "/settings" || pathname.startsWith("/settings/")) {
+    return t("header.pageSettings");
+  }
   if (pathname === "/team") return t("header.pageTeam");
   if (pathname.startsWith("/extensions")) return t("header.pageExtensions");
   return APP_TITLE;

package/corpus/templates/tasks/app/routes/extensions._index.tsx

@@ -8,5 +8,5 @@ export function meta() {
 }
 
 export default function ExtensionsRoute() {
-  return <Navigate to="/settings#extensions" replace />;
+  return <Navigate to="/settings/extensions" replace />;
 }

package/corpus/templates/tasks/app/routes/settings.$.tsx

@@ -0,0 +1 @@
+export { default, meta } from "./settings.js";

package/dist/agent/engine/ai-sdk-engine.js

@@ -193,9 +193,14 @@ class AISDKEngine {
         // `builder-engine` and `anthropic-engine` already fail closed here; this
         // engine was the only one that did not.
         //
-        // A configured `baseUrl` is exempt: a self-hosted or local gateway may
-        // legitimately accept unauthenticated requests.
-        if (!this.apiKey && !this.baseUrl && this.requiredEnvVars.length > 0) {
+        // A LOCAL `baseUrl` is exempt: a self-hosted gateway on the same machine or
+        // private network may legitimately accept unauthenticated requests. A public
+        // one may not — every hosted provider requires a key, so exempting any
+        // baseUrl at all reopened the same doomed unauthenticated request this
+        // guard exists to stop, just for anyone pointing at a remote gateway.
+        if (!this.apiKey &&
+            !isLocalBaseUrl(this.baseUrl) &&
+            this.requiredEnvVars.length > 0) {
             yield {
                 type: "stop",
                 reason: "error",
@@ -531,6 +536,47 @@ async function importProviderPackage(provider) {
             return import("ai-sdk-ollama");
     }
 }
+/**
+ * True only for a gateway on this machine or a private network — the case the
+ * keyless exemption was written for. Anything routable on the public internet
+ * (openrouter.ai, an api.* host, a cloud proxy) needs credentials, so treating
+ * it as keyless just sends a request that cannot succeed.
+ *
+ * An unparseable value is NOT local: this gates a security-shaped decision, so
+ * the ambiguous case has to take the safe branch and require a key.
+ */
+function isLocalBaseUrl(baseUrl) {
+    if (!baseUrl)
+        return false;
+    let host;
+    try {
+        host = new URL(baseUrl).hostname.toLowerCase();
+    }
+    catch (error) {
+        // An invalid URL is never a local exemption; fail closed.
+        if (error instanceof TypeError)
+            return false;
+        throw error;
+    }
+    if (host === "localhost" || host.endsWith(".localhost"))
+        return true;
+    if (host === "::1" || host === "[::1]")
+        return true;
+    if (host.endsWith(".local") || host.endsWith(".internal"))
+        return true;
+    // IPv4 loopback and the RFC1918 private ranges.
+    const v4 = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
+    if (!v4)
+        return false;
+    const [a, b] = [Number(v4[1]), Number(v4[2])];
+    if (a === 127 || a === 10)
+        return true;
+    if (a === 192 && b === 168)
+        return true;
+    if (a === 172 && b >= 16 && b <= 31)
+        return true;
+    return false;
+}
 function capitalize(s) {
     return s.charAt(0).toUpperCase() + s.slice(1);
 }

package/dist/agent/production-agent.d.ts

@@ -922,6 +922,7 @@ export interface ChainServerDrivenContinuationDeps {
     updateRunStatusIfRunning?: typeof updateRunStatusIfRunning;
     markRunAborted?: typeof markRunAborted;
     setRunTerminalReason?: typeof setRunTerminalReason;
+    setRunError?: typeof setRunError;
     recordRunDiagnostic?: typeof recordRunDiagnostic;
     markBackgroundContinuationChunkTerminal?: typeof markBackgroundContinuationChunkTerminal;
     generateRunId?: typeof generateRunId;

package/dist/agent/production-agent.js

@@ -5271,6 +5271,7 @@ export async function chainServerDrivenContinuation(opts) {
         updateRunStatusIfRunning: opts.deps?.updateRunStatusIfRunning ?? updateRunStatusIfRunning,
         markRunAborted: opts.deps?.markRunAborted ?? markRunAborted,
         setRunTerminalReason: opts.deps?.setRunTerminalReason ?? setRunTerminalReason,
+        setRunError: opts.deps?.setRunError ?? setRunError,
         recordRunDiagnostic: opts.deps?.recordRunDiagnostic ?? recordRunDiagnostic,
         markBackgroundContinuationChunkTerminal: opts.deps?.markBackgroundContinuationChunkTerminal ??
             markBackgroundContinuationChunkTerminal,
@@ -5545,6 +5546,13 @@ export async function chainServerDrivenContinuation(opts) {
             await d
                 .setRunTerminalReason(runId, "background_continuation_dispatch_failed")
                 .catch(() => { });
+            // Record the cause on the row itself, not only inside diag_stage's JSON.
+            // Without this the run goes terminal with error_code and error_detail
+            // both NULL, so every dashboard and query reads it as a failure with no
+            // known cause and the real message is only findable by parsing a blob.
+            await d
+                .setRunError(runId, "background_continuation_dispatch_failed", chainErr instanceof Error ? chainErr.message : String(chainErr))
+                .catch(() => { });
         }
     }
 }

package/dist/agent/types.d.ts

@@ -275,6 +275,13 @@ export type AgentChatEvent = {
     /** Remote task to resume when status is pending/input-required. */
     taskId?: string;
     durationMs?: number;
+    /**
+     * Why the call ended, on a terminal status. Already computed for
+     * telemetry; without it here the persisted event says only that a
+     * cross-app call failed after N ms and never why, so a failed A2A call
+     * cannot be diagnosed from the database without a repro.
+     */
+    terminalCode?: string;
 } | {
     /**
      * Periodic liveness for an in-flight cross-app A2A call. Emitted by the

package/dist/client/AssistantChat.js

@@ -4007,7 +4007,7 @@ const AssistantChatInner = forwardRef(function AssistantChatInner({ emptyStateTe
                                                                         } }) })), shouldShowRunError && visibleRunError && (_jsx(MessageScrollerItem, { children: _jsx(RunErrorRecoveryCard, { info: visibleRunError, onContinue: () => {
                                                                             setRunErrorInfo(null);
                                                                             addToQueue(RECONNECT_NO_PROGRESS_CONTINUE_MESSAGE, undefined, undefined, undefined, undefined, "queued", "continue");
-                                                                        }, onRetry: retryAfterRunError, onFork: onForkChat, onDismiss: () => {
+                                                                        }, onRetry: retryAfterRunError, onFork: onForkChat, onProviderConnected: handleBuilderConnected, onDismiss: () => {
                                                                             if (visibleRunErrorKey) {
                                                                                 setDismissedRunErrorKey(visibleRunErrorKey);
                                                                             }

package/dist/client/agent-chat-adapter.d.ts

@@ -14,7 +14,7 @@ export type AgentChatSurfaceKind =
 /** Chat hosted by Desktop for a local app with explicit code access. */
  | "desktop";
 export declare const BACKGROUND_FOLLOW_IDLE_TIMEOUT_MS = 210000;
-export declare const MAX_FOLLOWED_BACKGROUND_RUNS = 6;
+export declare const MAX_FOLLOWED_BACKGROUND_RUNS = 24;
 export declare const MAX_BACKGROUND_FOLLOW_WALL_TIME_MS: number;
 /**
  * Server truth for "does this run still look alive?", used to keep the client

package/dist/client/agent-chat-adapter.js

@@ -131,8 +131,30 @@ export const BACKGROUND_FOLLOW_IDLE_TIMEOUT_MS = 210_000;
 // every poll tick and the follow loop never exits (prod: 26 chained runs over
 // 22 minutes, all error:stale_run, user watching a spinner). These bound the
 // whole turn instead, and an identical repeated failure counts as no progress.
-export const MAX_FOLLOWED_BACKGROUND_RUNS = 6;
-export const MAX_BACKGROUND_FOLLOW_WALL_TIME_MS = 10 * 60_000;
+//
+// CLIENT-ABOVE-SERVER INVARIANT (asserted in agent-chat-adapter.spec.ts).
+// These are a backstop for a server that has gone silent in a way the idle
+// timeout misses — NOT the primary limit. They must stay ABOVE the server's
+// own ceilings so the server, which can actually tell progress from looping,
+// always terminates a turn first and writes a truthful terminal reason:
+//   BACKGROUND_SOFT_TIMEOUT_CEILING_MS  (13 min, run-manager.ts)  — one chunk
+//   MAX_TURN_WALL_CLOCK_MS              (90 min, production-agent.ts) — one turn
+//   MAX_BACKGROUND_RUN_CONTINUATIONS    (20,     production-agent.ts)
+//
+// They were originally set to 10 min / 6 runs, which put the whole-turn client
+// budget BELOW the 13-minute ceiling of a single legal chunk. Any turn needing
+// a second full-length chunk was killed by the client while the server was
+// healthy and had 80 minutes left — measured in prod as turns dying at 11-25
+// minutes with `last_progress_at` tracking the abort, i.e. still streaming
+// tokens and completing tools when the client gave up. That is the top
+// non-auth cause of "the chat just stopped" reports.
+//
+// Killing a turn that is NOT progressing is already covered twice over, by
+// mechanisms that read progress rather than a clock: the 210s idle timeout
+// above, and MAX_REPEATED_BACKGROUND_TERMINAL_REASONS below. Do not re-tighten
+// these two to catch a stuck turn — fix the progress signal instead.
+export const MAX_FOLLOWED_BACKGROUND_RUNS = 24;
+export const MAX_BACKGROUND_FOLLOW_WALL_TIME_MS = 95 * 60_000;
 const MAX_REPEATED_BACKGROUND_TERMINAL_REASONS = 3;
 // A re-observed terminal run whose outcome would be an ERROR (never a
 // genuine "done" success) gets a short extra grace window before the follow
@@ -2185,7 +2207,12 @@ export function createAgentChatAdapter(options) {
                         if (Date.now() - followStartedAt >=
                             MAX_BACKGROUND_FOLLOW_WALL_TIME_MS) {
                             yield* stopBackgroundTurnBeforeReporting({
-                                message: `The agent kept restarting this step for ${Math.round(MAX_BACKGROUND_FOLLOW_WALL_TIME_MS / 60_000)} minutes without finishing it. It was stopped so you can retry from the preserved chat context — a smaller request usually gets through.`,
+                                // Says only what this backstop actually knows. It fires on a
+                                // clock, so it cannot tell a looping turn from one that was
+                                // still working — the old copy asserted "kept restarting
+                                // without finishing", which prod runs contradicted: they were
+                                // streaming tokens right up to the abort.
+                                message: `This turn ran for ${Math.round(MAX_BACKGROUND_FOLLOW_WALL_TIME_MS / 60_000)} minutes without finishing, so it was stopped. Your chat context is preserved — retrying, or splitting this into smaller requests, usually gets through.`,
                                 errorCode: "background_follow_time_budget_exhausted",
                                 details: `followed_runs: ${followedRunIds.size}`,
                             });

package/dist/client/agent-page/AgentWorkspaceContent.d.ts

@@ -1,5 +1,5 @@
 import { type ReactNode } from "react";
-export type AgentWorkspaceTab = "overview" | "resources" | "automations" | "agents" | "access";
+export type AgentWorkspaceTab = "overview" | "resources" | "automations" | "agents";
 export declare function AgentWorkspaceContent({ overview, className, activeTab, }: {
     overview: ReactNode;
     activeTab: AgentWorkspaceTab;

package/dist/client/agent-page/AgentWorkspaceContent.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { IconBook2, IconBolt, IconChecklist, IconFolder, IconHierarchy2, IconHistory, IconNotes, IconShieldLock, IconTopologyRing2, } from "@tabler/icons-react";
+import { IconBook2, IconBolt, IconChecklist, IconFolder, IconHierarchy2, IconHistory, IconNotes, IconTopologyRing2, } from "@tabler/icons-react";
 import { lazy, Suspense, useEffect, useState } from "react";
 import { AgentsSection } from "../settings/AgentsSection.js";
 import { cn } from "../utils.js";
@@ -21,7 +21,6 @@ const HUB_TABS = [
     { id: "resources", label: "Resources", icon: IconFolder },
     { id: "automations", label: "Automations", icon: IconBolt },
     { id: "agents", label: "Connected agents", icon: IconTopologyRing2 },
-    { id: "access", label: "Access", icon: IconShieldLock },
 ];
 const RESOURCE_IDS = new Set(RESOURCE_TABS.map((tab) => tab.id));
 function normalizeHash(value) {
@@ -31,9 +30,15 @@ function initialHubState() {
     if (typeof window === "undefined") {
         return { tab: "overview", resource: "files" };
     }
+    const pathParts = window.location.pathname.split("/").filter(Boolean);
+    const settingsIndex = pathParts.indexOf("settings");
+    const settingsPath = settingsIndex === -1 ? [] : pathParts.slice(settingsIndex + 1);
+    const routeParts = settingsPath[0] === "agent" ? settingsPath : ["agent", ...settingsPath];
     const hash = normalizeHash(window.location.hash);
-    const parts = hash.split(":");
-    const scoped = parts[0] === "agent";
+    const hashParts = hash.split(":");
+    const pathScoped = settingsPath[0] === "agent";
+    const scoped = pathScoped || hashParts[0] === "agent";
+    const parts = pathScoped ? routeParts : hashParts;
     const requested = scoped ? parts[1] : hash;
     const resource = scoped && RESOURCE_IDS.has(parts[2])
         ? parts[2]
@@ -54,8 +59,6 @@ function initialHubState() {
         requested === "remote-agents") {
         return { tab: "agents", resource };
     }
-    if (requested === "access")
-        return { tab: "access", resource };
     return { tab: "overview", resource };
 }
 function ResourceContent({ resource }) {
@@ -65,8 +68,8 @@ function ResourceContent({ resource }) {
                     const selected = tab.id === resource;
                     return (_jsxs("button", { type: "button", onClick: () => {
                             if (typeof window !== "undefined") {
-                                window.history.pushState(null, "", `${window.location.pathname}${window.location.search}#agent:resources:${tab.id}`);
-                                window.dispatchEvent(new Event("hashchange"));
+                                window.history.pushState(null, "", `/settings/agent/resources/${tab.id}${window.location.search}`);
+                                window.dispatchEvent(new Event("popstate"));
                             }
                         }, className: cn("inline-flex shrink-0 items-center gap-1.5 rounded-md px-2.5 py-1.5 text-xs font-medium transition-colors", selected
                             ? "bg-accent text-foreground"
@@ -75,9 +78,6 @@ function ResourceContent({ resource }) {
                             ? "Add context the agent can use across conversations."
                             : "Manage the resources that shape how the agent works." })] }), _jsx(Suspense, { fallback: _jsx("div", { className: "h-48 animate-pulse rounded-xl border border-border bg-muted/20" }), children: _jsx(ResourcesPanel, { showMcpServers: false, resourceFilter: resource, resourceTreeVariant: "collection", scope: "personal" }, resource) })] }));
 }
-function AccessContent() {
-    return (_jsx("div", { children: _jsx("div", { className: "rounded-xl border border-border/70 bg-card text-card-foreground", children: _jsx("div", { className: "px-5 py-5 sm:px-6", children: _jsxs("div", { className: "flex items-start gap-3", children: [_jsx("span", { className: "flex size-9 shrink-0 items-center justify-center rounded-lg border border-border bg-background text-muted-foreground", children: _jsx(IconShieldLock, { className: "size-4" }) }), _jsxs("div", { className: "min-w-0", children: [_jsx("p", { className: "text-sm font-medium text-foreground", children: "Agent access" }), _jsx("p", { className: "mt-1 text-sm leading-5 text-muted-foreground", children: "Use the agent card and MCP endpoints from connected clients." })] })] }) }) }) }));
-}
 export function AgentWorkspaceContent({ overview, className, activeTab, }) {
     const [{ resource }, setState] = useState(initialHubState);
     useEffect(() => {
@@ -98,8 +98,8 @@ export function AgentWorkspaceContent({ overview, className, activeTab, }) {
                 ? "Schedule and manage agent tasks."
                 : activeTab === "agents"
                     ? "Connect agents to delegate work from chat."
-                    : "Control how other apps and agents access this agent.";
-    return (_jsxs("div", { className: cn("w-full space-y-6", className), children: [_jsxs("header", { className: "space-y-1", children: [_jsx("h1", { className: "text-2xl font-semibold tracking-tight text-foreground", children: activeTab === "overview" ? "Agent" : page?.label }), _jsx("p", { className: "text-sm leading-5 text-muted-foreground", children: pageDescription })] }), activeTab === "overview" && overview, activeTab === "resources" && _jsx(ResourceContent, { resource: resource }), activeTab === "automations" && (_jsx(Suspense, { fallback: _jsx("div", { className: "h-48 animate-pulse rounded-xl border border-border bg-muted/20" }), children: _jsx(AgentJobsTab, { scope: "user", canManageOrg: true, hideHeader: true }) })), activeTab === "agents" && _jsx(AgentsSection, {}), activeTab === "access" && _jsx(AccessContent, {})] }));
+                    : "Configure how your agent works, what it knows, and what it can do.";
+    return (_jsxs("div", { className: cn("w-full space-y-6", className), children: [_jsxs("header", { className: "space-y-1", children: [_jsx("h1", { className: "text-2xl font-semibold tracking-tight text-foreground", children: activeTab === "overview" ? "Agent" : page?.label }), _jsx("p", { className: "text-sm leading-5 text-muted-foreground", children: pageDescription })] }), activeTab === "overview" && overview, activeTab === "resources" && _jsx(ResourceContent, { resource: resource }), activeTab === "automations" && (_jsx(Suspense, { fallback: _jsx("div", { className: "h-48 animate-pulse rounded-xl border border-border bg-muted/20" }), children: _jsx(AgentJobsTab, { scope: "user", canManageOrg: true, hideHeader: true }) })), activeTab === "agents" && _jsx(AgentsSection, {})] }));
 }
 export function agentWorkspaceTabHash(tab) {
     return `agent:${tab}`;

package/dist/client/chat/run-recovery.d.ts

@@ -35,12 +35,13 @@ export declare function BuilderSetupCard({ onConnected, bouncePulse, fullWidth,
     fullWidth?: boolean;
     layout?: BuilderSetupCardLayout;
 }): import("react").JSX.Element;
-export declare function RunErrorRecoveryCard({ info, onContinue, onRetry, onFork, onDismiss, }: {
+export declare function RunErrorRecoveryCard({ info, onContinue, onRetry, onFork, onDismiss, onProviderConnected, }: {
     info: RunErrorInfo;
     onContinue: () => void;
     onRetry: () => void;
     onFork?: () => void | boolean | Promise<void | boolean>;
     onDismiss: () => void;
+    onProviderConnected?: () => void;
 }): import("react").JSX.Element;
 export declare function LoopLimitContinueCard({ info, onContinue, }: {
     info: LoopLimitInfo;

package/dist/client/chat/run-recovery.js

@@ -8,6 +8,7 @@ import { useState, useEffect, useCallback, useRef } from "react";
 import { saveAgentEngineApiKey, } from "../agent-engine-key.js";
 import { agentNativePath } from "../api-path.js";
 import { writeClipboardText } from "../clipboard.js";
+import { isProviderAuthenticationError } from "../error-format.js";
 import { useT } from "../i18n.js";
 import { useBuilderConnectFlow } from "../settings/useBuilderStatus.js";
 import { cn } from "../utils.js";
@@ -215,7 +216,7 @@ export function BuilderSetupCard({ onConnected, bouncePulse, fullWidth, layout =
                 : "mx-auto w-full max-w-[42rem] px-3 pb-2 sm:w-fit"), children: _jsx("div", { className: cn("agent-builder-setup-card__panel rounded-lg border border-border/80 bg-background/80 shadow-sm backdrop-blur", sidebarLayout ? "p-2.5" : "p-3"), children: _jsx(BuilderSetupContent, { onConnected: onConnected, layout: layout }) }) }));
 }
 // ─── RunErrorRecoveryCard ─────────────────────────────────────────────────────
-export function RunErrorRecoveryCard({ info, onContinue, onRetry, onFork, onDismiss, }) {
+export function RunErrorRecoveryCard({ info, onContinue, onRetry, onFork, onDismiss, onProviderConnected, }) {
     const [detailsOpen, setDetailsOpen] = useState(false);
     const [copyState, setCopyState] = useState("idle");
     const [forking, setForking] = useState(false);
@@ -225,6 +226,12 @@ export function RunErrorRecoveryCard({ info, onContinue, onRetry, onFork, onDism
     });
     const canRecover = info.recoverable === true;
     const shouldShowBuilderReconnect = isBuilderReconnectRunError(info);
+    const isProviderAuthError = isProviderAuthenticationError([info.message, info.details].filter(Boolean).join("\n"), info.errorCode);
+    // Blocked on something the reader goes and fixes elsewhere, then comes back
+    // to. Without a retry the card is a dead end and its own copy ("then retry")
+    // points at a button that isn't there.
+    const isUnblockableExternally = info.errorCode === "email_verification_required";
+    const canRetry = canRecover || isProviderAuthError || isUnblockableExternally;
     const builderReconnectResolved = shouldShowBuilderReconnect &&
         builderReconnect.hasFetchedStatus &&
         builderReconnect.configured;
@@ -254,6 +261,10 @@ export function RunErrorRecoveryCard({ info, onContinue, onRetry, onFork, onDism
         window.dispatchEvent(new CustomEvent("agent-chat:new-chat"));
         onDismiss();
     }, [onDismiss]);
+    const handleProviderConnected = useCallback(() => {
+        onProviderConnected?.();
+        onDismiss();
+    }, [onDismiss, onProviderConnected]);
     const handleFork = useCallback(async () => {
         if (!onFork || forking)
             return;
@@ -277,9 +288,9 @@ export function RunErrorRecoveryCard({ info, onContinue, onRetry, onFork, onDism
             onDismiss();
         }
     }, [builderReconnectResolved, onDismiss]);
-    return (_jsxs("div", { className: "rounded-lg border border-amber-500/25 bg-amber-500/[0.06] p-3 text-sm", children: [_jsxs("div", { className: "flex items-start gap-2", children: [_jsx("span", { className: "mt-0.5 flex h-6 w-6 shrink-0 items-center justify-center rounded-md bg-amber-500/10 text-amber-700 dark:text-amber-300", children: _jsx(IconAlertTriangle, { size: 14 }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("div", { className: "font-medium text-foreground", children: runErrorHeadline(info) }), _jsx("p", { className: "mt-1 text-xs leading-relaxed text-muted-foreground", children: info.message }), shouldShowBuilderReconnect && !builderReconnectResolved && (_jsx("p", { className: "mt-2 text-xs leading-relaxed text-muted-foreground", children: "The current Builder.io or model-provider credential was rejected. Reconnect Builder.io (free tier available), then retry this message." })), isConnectionRecoveryError && (_jsx("p", { className: "mt-2 text-xs leading-relaxed text-muted-foreground", children: "If retry lands on the same error, start a new chat session and continue from what already changed." })), (info.runId || info.errorCode || info.details) && (_jsxs("button", { type: "button", onClick: () => setDetailsOpen((v) => !v), className: "mt-2 inline-flex items-center gap-1 text-[11px] font-medium text-muted-foreground hover:text-foreground", children: [_jsx(IconChevronDown, { size: 12, className: cn("transition-transform", detailsOpen && "rotate-180") }), "Details"] })), detailsOpen && (_jsxs("div", { className: "mt-2 rounded-md border border-border/60 bg-background/70 p-2 font-mono text-[11px] leading-relaxed text-muted-foreground", children: [info.runId && _jsxs("div", { children: ["run: ", info.runId] }), info.errorCode && _jsxs("div", { children: ["code: ", info.errorCode] }), info.details && (_jsx("pre", { className: "mt-2 max-h-28 overflow-auto whitespace-pre-wrap break-words font-mono", children: info.details }))] }))] }), _jsx("button", { type: "button", onClick: onDismiss, "aria-label": "Dismiss", className: "flex h-6 w-6 shrink-0 items-center justify-center rounded-md text-muted-foreground hover:bg-background/80 hover:text-foreground", children: _jsx(IconX, { size: 14 }) })] }), _jsxs("div", { className: "mt-3 flex flex-wrap items-center gap-2", children: [shouldShowBuilderReconnect && !builderReconnectResolved && (_jsxs("button", { type: "button", onClick: () => builderReconnect.start(), disabled: builderReconnect.connecting, className: "inline-flex h-8 items-center gap-1.5 rounded-md bg-foreground px-3 text-xs font-medium text-background hover:opacity-90 disabled:cursor-wait disabled:opacity-70", children: [builderReconnect.connecting ? (_jsx(IconLoader2, { size: 13, className: "animate-spin" })) : null, builderReconnect.connecting
+    return (_jsxs("div", { className: "rounded-lg border border-amber-500/25 bg-amber-500/[0.06] p-3 text-sm", children: [_jsxs("div", { className: "flex items-start gap-2", children: [_jsx("span", { className: "mt-0.5 flex h-6 w-6 shrink-0 items-center justify-center rounded-md bg-amber-500/10 text-amber-700 dark:text-amber-300", children: _jsx(IconAlertTriangle, { size: 14 }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("div", { className: "font-medium text-foreground", children: runErrorHeadline(info) }), _jsx("p", { className: "mt-1 text-xs leading-relaxed text-muted-foreground", children: info.message }), isProviderAuthError && (_jsx("div", { className: "mt-3 rounded-md border border-border/70 bg-background/60 p-2.5", children: _jsx(BuilderSetupContent, { layout: "sidebar", onConnected: handleProviderConnected }) })), shouldShowBuilderReconnect && !builderReconnectResolved && (_jsx("p", { className: "mt-2 text-xs leading-relaxed text-muted-foreground", children: "The current Builder.io or model-provider credential was rejected. Reconnect Builder.io (free tier available), then retry this message." })), isConnectionRecoveryError && (_jsx("p", { className: "mt-2 text-xs leading-relaxed text-muted-foreground", children: "If retry lands on the same error, start a new chat session and continue from what already changed." })), (info.runId || info.errorCode || info.details) && (_jsxs("button", { type: "button", onClick: () => setDetailsOpen((v) => !v), className: "mt-2 inline-flex items-center gap-1 text-[11px] font-medium text-muted-foreground hover:text-foreground", children: [_jsx(IconChevronDown, { size: 12, className: cn("transition-transform", detailsOpen && "rotate-180") }), "Details"] })), detailsOpen && (_jsxs("div", { className: "mt-2 rounded-md border border-border/60 bg-background/70 p-2 font-mono text-[11px] leading-relaxed text-muted-foreground", children: [info.runId && _jsxs("div", { children: ["run: ", info.runId] }), info.errorCode && _jsxs("div", { children: ["code: ", info.errorCode] }), info.details && (_jsx("pre", { className: "mt-2 max-h-28 overflow-auto whitespace-pre-wrap break-words font-mono", children: info.details }))] }))] }), _jsx("button", { type: "button", onClick: onDismiss, "aria-label": "Dismiss", className: "flex h-6 w-6 shrink-0 items-center justify-center rounded-md text-muted-foreground hover:bg-background/80 hover:text-foreground", children: _jsx(IconX, { size: 14 }) })] }), _jsxs("div", { className: "mt-3 flex flex-wrap items-center gap-2", children: [shouldShowBuilderReconnect && !builderReconnectResolved && (_jsxs("button", { type: "button", onClick: () => builderReconnect.start(), disabled: builderReconnect.connecting, className: "inline-flex h-8 items-center gap-1.5 rounded-md bg-foreground px-3 text-xs font-medium text-background hover:opacity-90 disabled:cursor-wait disabled:opacity-70", children: [builderReconnect.connecting ? (_jsx(IconLoader2, { size: 13, className: "animate-spin" })) : null, builderReconnect.connecting
                                 ? "Connecting Builder.io"
-                                : "Reconnect Builder.io"] })), canRecover && (_jsxs(_Fragment, { children: [_jsxs("button", { type: "button", onClick: onContinue, className: "inline-flex h-8 items-center gap-1.5 rounded-md bg-foreground px-3 text-xs font-medium text-background hover:opacity-90", children: [_jsx(IconPlayerPlay, { size: 13 }), "Continue"] }), _jsxs("button", { type: "button", onClick: onRetry, className: "inline-flex h-8 items-center gap-1.5 rounded-md border border-border bg-background px-3 text-xs font-medium text-foreground hover:bg-accent", children: [_jsx(IconRefresh, { size: 13 }), isQueryError ? "Diagnose and retry" : "Retry"] })] })), canRecover && isConnectionRecoveryError && (_jsxs("button", { type: "button", onClick: startNewChat, className: "inline-flex h-8 items-center gap-1.5 rounded-md border border-border bg-background px-3 text-xs font-medium text-foreground hover:bg-accent", children: [_jsx(IconPlus, { size: 13 }), "New chat"] })), canRecover && onFork && !isConnectionRecoveryError && (_jsxs("button", { type: "button", onClick: handleFork, disabled: forking, title: "Fork this conversation into a separate chat thread.", "aria-label": "Fork this conversation into a separate chat thread", className: "inline-flex h-8 items-center gap-1.5 rounded-md border border-border bg-background px-3 text-xs font-medium text-foreground hover:bg-accent disabled:cursor-wait disabled:opacity-70", children: [forking ? (_jsx(IconLoader2, { size: 13, className: "animate-spin" })) : (_jsx(IconGitFork, { size: 13 })), forking ? "Forking..." : "Fork chat"] })), _jsxs("button", { type: "button", onClick: copyDetails, className: "ml-auto inline-flex h-8 items-center gap-1.5 rounded-md px-2.5 text-xs font-medium text-muted-foreground hover:bg-background/80 hover:text-foreground", children: [copyState === "copied" ? (_jsx(IconCheck, { size: 13 })) : copyState === "failed" ? (_jsx(IconX, { size: 13 })) : (_jsx(IconCopy, { size: 13 })), _jsx("span", { "aria-live": "polite", children: copyState === "copied"
+                                : "Reconnect Builder.io"] })), canRecover && (_jsx(_Fragment, { children: _jsxs("button", { type: "button", onClick: onContinue, className: "inline-flex h-8 items-center gap-1.5 rounded-md bg-foreground px-3 text-xs font-medium text-background hover:opacity-90", children: [_jsx(IconPlayerPlay, { size: 13 }), "Continue"] }) })), canRetry && (_jsxs("button", { type: "button", onClick: onRetry, className: "inline-flex h-8 items-center gap-1.5 rounded-md border border-border bg-background px-3 text-xs font-medium text-foreground hover:bg-accent", children: [_jsx(IconRefresh, { size: 13 }), isQueryError ? "Diagnose and retry" : "Retry"] })), canRecover && isConnectionRecoveryError && (_jsxs("button", { type: "button", onClick: startNewChat, className: "inline-flex h-8 items-center gap-1.5 rounded-md border border-border bg-background px-3 text-xs font-medium text-foreground hover:bg-accent", children: [_jsx(IconPlus, { size: 13 }), "New chat"] })), canRecover && onFork && !isConnectionRecoveryError && (_jsxs("button", { type: "button", onClick: handleFork, disabled: forking, title: "Fork this conversation into a separate chat thread.", "aria-label": "Fork this conversation into a separate chat thread", className: "inline-flex h-8 items-center gap-1.5 rounded-md border border-border bg-background px-3 text-xs font-medium text-foreground hover:bg-accent disabled:cursor-wait disabled:opacity-70", children: [forking ? (_jsx(IconLoader2, { size: 13, className: "animate-spin" })) : (_jsx(IconGitFork, { size: 13 })), forking ? "Forking..." : "Fork chat"] })), _jsxs("button", { type: "button", onClick: copyDetails, className: "ml-auto inline-flex h-8 items-center gap-1.5 rounded-md px-2.5 text-xs font-medium text-muted-foreground hover:bg-background/80 hover:text-foreground", children: [copyState === "copied" ? (_jsx(IconCheck, { size: 13 })) : copyState === "failed" ? (_jsx(IconX, { size: 13 })) : (_jsx(IconCopy, { size: 13 })), _jsx("span", { "aria-live": "polite", children: copyState === "copied"
                                     ? "Copied"
                                     : copyState === "failed"
                                         ? "Copy failed"

package/dist/client/embed-auth.js

@@ -1,4 +1,5 @@
 import { EMBED_MODE_QUERY_PARAM, EMBED_START_PATH, EMBED_TARGET_HEADER, EMBED_TARGET_QUERY_PARAM, EMBED_TOKEN_QUERY_PARAM, MCP_APP_CHAT_BRIDGE_QUERY_PARAM, } from "../shared/embed-auth.js";
+import { SIGN_IN_ENTRY_PATH, SIGN_IN_LEGACY_ENTRY_PATH, } from "../shared/sign-in-journey.js";
 let installed = false;
 let memoryToken = null;
 let mcpChatBridgeActive = false;
@@ -322,9 +323,12 @@ function shouldGuardAuthFailure(method, url) {
     if (url.pathname === EMBED_START_PATH)
         return false;
     // Suffix, not equality: an app mounted under a base path serves
-    // `/<app>/_agent-native/sign-in`, which the old exact match never matched.
-    if (url.pathname.endsWith("/_agent-native/sign-in"))
+    // `/<app>/sign-in` (or the legacy framework path), which an exact match
+    // would miss.
+    if (url.pathname.endsWith(SIGN_IN_ENTRY_PATH) ||
+        url.pathname.endsWith(SIGN_IN_LEGACY_ENTRY_PATH)) {
         return false;
+    }
     return true;
 }
 function activeAuthFailure(record) {

package/dist/client/error-format.d.ts

@@ -18,4 +18,5 @@ export interface NormalizedChatError {
     message: string;
     details?: string;
 }
+export declare function isProviderAuthenticationError(text: string, errorCode?: string): boolean;
 export declare function normalizeChatError(errorMessage: string, errorCode?: string): NormalizedChatError;

package/dist/client/error-format.js

@@ -60,7 +60,7 @@ function isProviderRateLimit(text, errorCode) {
         /\b(?:http\s*)?429\b.*\b(?:status|too many requests|rate[-_\s]?limit|no body)\b/i.test(text) ||
         /\b(?:too many requests|rate[-_\s]?limit(?:ed| exceeded)?)\b/i.test(text));
 }
-function isProviderAuthenticationError(text, errorCode) {
+export function isProviderAuthenticationError(text, errorCode) {
     const code = normalizeErrorCode(errorCode);
     const lower = text.toLowerCase();
     return (code === "authentication_error" ||
@@ -72,6 +72,8 @@ function isProviderAuthenticationError(text, errorCode) {
         lower.includes("invalid api key") ||
         lower.includes("incorrect api key") ||
         lower.includes("api key is invalid") ||
+        lower.includes("rejected the saved api key") ||
+        lower.includes("saved provider key was rejected") ||
         (lower.includes("authentication_error") && lower.includes("api")));
 }
 function isConnectionError(text, errorCode) {
@@ -98,6 +100,18 @@ export function normalizeChatError(errorMessage, errorCode) {
             details: text,
         };
     }
+    // Reaches us as a bare gateway 403 with no upgradeUrl, so before this case
+    // it fell all the way through to the raw upstream sentence under a generic
+    // "The agent hit an error" headline, with no retry and no action — a dead
+    // end. It was the single largest cause of turns ending without an answer in
+    // one app, and reads to the user as the chat being broken rather than as
+    // something one person can fix in a minute.
+    if (code === "email_verification_required") {
+        return {
+            message: "AI is paused until an email address in this workspace is verified. Check the inbox for the verification link, then retry.",
+            details: text,
+        };
+    }
     // A model/parameter combination this provider will never accept. Retrying is
     // pointless and the raw sentence names an API surface the reader has no way
     // to act on, so say what they can actually change.
@@ -115,7 +129,7 @@ export function normalizeChatError(errorMessage, errorCode) {
     }
     if (isProviderAuthenticationError(text, errorCode)) {
         return {
-            message: "The model provider rejected the saved API key. Update the key in Settings → Integrations → API keys, then retry.",
+            message: "The saved provider key was rejected. Connect Builder.io for managed AI, or update your provider key, then retry.",
             details: text,
         };
     }