@agent-native/core 0.141.6 → 0.141.7

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,9 +75,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
+    id?: undefined;
     deleted?: undefined;
-    found?: undefined;
-    message?: undefined;
     providers: {
         id: string;
         label: string;
@@ -89,45 +88,46 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     }[];
     count: number;
     provider?: undefined;
+    found?: undefined;
     registered?: undefined;
-    id?: undefined;
     label?: undefined;
+    message?: undefined;
 } | {
+    id?: undefined;
     deleted?: undefined;
-    message?: undefined;
-    providers?: undefined;
     count?: undefined;
+    providers?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
     registered?: undefined;
-    id?: undefined;
     label?: undefined;
+    message?: undefined;
 } | {
     deleted?: undefined;
-    message?: undefined;
-    providers?: undefined;
     count?: undefined;
+    providers?: undefined;
     provider?: undefined;
     found: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
-} | {
-    found?: undefined;
     message?: undefined;
-    providers?: undefined;
+} | {
     count?: undefined;
+    providers?: undefined;
     provider?: undefined;
+    found?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
+    message?: undefined;
 } | {
     deleted?: undefined;
-    found?: undefined;
-    providers?: undefined;
     count?: undefined;
+    providers?: undefined;
     provider?: undefined;
+    found?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -311,10 +311,10 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
+        message?: undefined;
         id?: undefined;
         provider?: undefined;
         deleted?: undefined;
-        found?: undefined;
         providers: {
             id: string;
             label: string;
@@ -325,45 +325,45 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
+        found?: undefined;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
+        message?: undefined;
+        count?: undefined;
         id?: undefined;
         deleted?: undefined;
-        count?: undefined;
         providers?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
+        message?: undefined;
+        count?: undefined;
         provider?: undefined;
         deleted?: undefined;
-        count?: undefined;
         providers?: undefined;
         found: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
-        provider?: undefined;
-        found?: undefined;
+        message?: undefined;
         count?: undefined;
+        provider?: undefined;
         providers?: undefined;
+        found?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
+        count?: undefined;
         provider?: undefined;
         deleted?: undefined;
-        found?: undefined;
-        count?: undefined;
         providers?: undefined;
+        found?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/scripts/call-agent.js

@@ -363,6 +363,7 @@ export async function run(args, context, selfAppId) {
                     status: terminalStatus,
                     agentCallId,
                     durationMs: Date.now() - startedAt,
+                    ...(terminalCode ? { terminalCode } : {}),
                 });
             }
         }
@@ -534,6 +535,13 @@ export async function run(args, context, selfAppId) {
             let lastProgressEmitAt = callStartedAt;
             let lastActivitySequence = -1;
             const onRemotePollUpdate = (task) => {
+                // Capture the remote task id on every poll, not only on the timeout and
+                // error branches that used to set it. Without this a call that SUCCEEDS
+                // slowly carries no task id, so "why did this one take four minutes?"
+                // cannot be traced into the receiving app's own task record — which is
+                // the question worth asking about a slow cross-app call.
+                if (task?.id)
+                    invocationTaskId = task.id;
                 const state = task?.status?.state;
                 const parts = task.status?.message?.parts;
                 const snapshot = Array.isArray(parts)
@@ -686,6 +694,9 @@ export async function run(args, context, selfAppId) {
                 agentCallId,
                 ...(invocationTaskId ? { taskId: invocationTaskId } : {}),
                 durationMs: Date.now() - callStartedAt,
+                ...(invocationTerminalCode
+                    ? { terminalCode: invocationTerminalCode }
+                    : {}),
             });
             return (responseText || `Error: The ${agent.name} agent returned no result.`);
         }

package/dist/secrets/routes.d.ts

@@ -34,16 +34,16 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    ok?: undefined;
     status?: undefined;
+    ok?: undefined;
 } | {
     ok: boolean;
     status: string;
     error?: undefined;
 } | {
-    ok?: undefined;
     error: string;
     removed?: undefined;
+    ok?: undefined;
 } | {
     ok: boolean;
     removed: boolean;
@@ -54,9 +54,9 @@ export declare function createWriteSecretHandler(): import("h3").EventHandlerWit
  * or the current stored value without changing anything.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
     note?: undefined;
+    ok?: undefined;
 } | {
     ok: boolean;
     note?: undefined;

package/dist/server/auth.js

@@ -48,7 +48,7 @@ import { readBody } from "../server/h3-helpers.js";
 import { putSetting } from "../settings/store.js";
 import { resolveSsrCacheHeaders } from "../shared/cache-control.js";
 import { extractOAuthStateAppId } from "../shared/oauth-state.js";
-import { SIGN_IN_CONTINUATION_PARAM, SIGN_IN_LEGACY_RETURN_PARAM, normalizeAppPath, signInJourney, } from "../shared/sign-in-journey.js";
+import { SIGN_IN_CONTINUATION_PARAM, SIGN_IN_ENTRY_PATH, SIGN_IN_LEGACY_ENTRY_PATH, SIGN_IN_LEGACY_RETURN_PARAM, normalizeAppPath, signInJourney, } from "../shared/sign-in-journey.js";
 import { AGENT_NATIVE_SOCIAL_IMAGE_ALT, AGENT_NATIVE_SOCIAL_IMAGE_HEIGHT, AGENT_NATIVE_SOCIAL_IMAGE_PATH, AGENT_NATIVE_SOCIAL_IMAGE_TYPE, AGENT_NATIVE_SOCIAL_IMAGE_WIDTH, withAgentNativeSocialImageCacheBuster, } from "../shared/social-meta.js";
 import { normalizeWorkspaceAppAudience, workspaceAppAudienceFromEnv, workspaceAppRouteAccessFromEnv, } from "../shared/workspace-app-audience.js";
 import { isValidWorkspaceAppIdFormat } from "../shared/workspace-app-id.js";
@@ -1391,11 +1391,12 @@ function createAuthGuardFn() {
             return;
         }
         // Force-sign-in entrypoint. Templates send viewers from public pages
-        // (share links, embeds) here with a `?return=<path>` query. The cached
-        // login document validates that return path in the browser and redirects
-        // there after sign-in or when its client-side session check finds an
-        // existing session.
-        if (p === "/_agent-native/sign-in") {
+        // (share links, embeds) here with a `?return=<path>` query. The clean
+        // `/sign-in` path is canonical; keep the old framework path as a
+        // compatibility alias. The cached login document validates that return
+        // path in the browser and redirects there after sign-in or when its
+        // client-side session check finds an existing session.
+        if (p === SIGN_IN_ENTRY_PATH || p === SIGN_IN_LEGACY_ENTRY_PATH) {
             // Preserve the zero-setup localhost experience without putting a
             // session lookup back on the cacheable app-shell URL. The client gate
             // reaches this explicit entrypoint after discovering there is no
@@ -1403,7 +1404,8 @@ function createAuthGuardFn() {
             if (getMethod(event) === "GET") {
                 const query = new URLSearchParams(queryStart >= 0 ? url.slice(queryStart + 1) : "");
                 // `?return=` is read as a fallback FOREVER. Generated apps in the wild
-                // hand-write `/_agent-native/sign-in?return=…` and cannot be upgraded;
+                // hand-write the legacy `/_agent-native/sign-in?return=…` path and
+                // cannot be upgraded;
                 // dropping the fallback would send them all to "/" — a UX quirk no
                 // test would catch. New producers emit `c`; only NEW `?return=`
                 // producers are forbidden, never this consumer.

package/dist/server/identity-sso.js

@@ -45,6 +45,7 @@ import { createHash } from "node:crypto";
 import { getMethod } from "h3";
 import * as jose from "jose";
 import { GOOGLE_AUTH_REQUIRED_MESSAGE, isGoogleSignInRequiredForEmail, } from "../org/auth-policy.js";
+import { SIGN_IN_ENTRY_PATH } from "../shared/sign-in-journey.js";
 import { getAppName } from "./app-name.js";
 import { getSession, safeReturnPath, isExpectedAuthFailure } from "./auth.js";
 import { getBetterAuth, getBetterAuthInternalAdapter, } from "./better-auth-instance.js";
@@ -310,7 +311,7 @@ export async function handleIdentitySso(event, subpath) {
     const method = getMethod(event);
     const sub = ("/" + subpath.replace(/^\/+/, "").replace(/\/+$/, "")).replace(/^\/$/, "");
     const origin = getOrigin(event);
-    const loginPath = "/_agent-native/sign-in";
+    const loginPath = SIGN_IN_ENTRY_PATH;
     // ---- GET /login → 302 to the hub authorize endpoint ------------------
     if (sub === "/login") {
         if (method !== "GET" && method !== "HEAD") {

package/dist/server/onboarding-html.js

@@ -72,9 +72,9 @@ const EN_AUTH_COPY = {
     passwordMinPlaceholder: "At least 8 characters",
     confirmPasswordPlaceholder: "Confirm password",
     enterPasswordPlaceholder: "Enter password",
-    magicLinkTitle: "Sign in with a link",
-    magicLinkSubtitle: "Enter your email and we'll send you a secure sign-in link",
-    sendMagicLink: "Email me a sign-in link",
+    magicLinkTitle: "Welcome",
+    magicLinkSubtitle: "Create an account or sign in",
+    sendMagicLink: "Continue",
     magicLinkSent: "Check your email",
     magicLinkSentCopy: "We sent a secure sign-in link to",
     magicLinkFailed: "Could not send sign-in link.",
@@ -168,9 +168,9 @@ const AUTH_LOCALE_COPY = {
         passwordMinPlaceholder: "至少 8 个字符",
         confirmPasswordPlaceholder: "确认密码",
         enterPasswordPlaceholder: "输入密码",
-        magicLinkTitle: "使用链接登录",
-        magicLinkSubtitle: "输入邮箱，我们会发送安全登录链接",
-        sendMagicLink: "发送登录链接到邮箱",
+        magicLinkTitle: "欢迎",
+        magicLinkSubtitle: "创建账户或登录",
+        sendMagicLink: "继续",
         magicLinkSent: "检查你的邮箱",
         magicLinkSentCopy: "我们已向以下邮箱发送安全登录链接：",
         magicLinkFailed: "无法发送登录链接。",
@@ -262,9 +262,9 @@ const AUTH_LOCALE_COPY = {
         passwordMinPlaceholder: "至少 8 個字元",
         confirmPasswordPlaceholder: "確認密碼",
         enterPasswordPlaceholder: "輸入密碼",
-        magicLinkTitle: "使用連結登入",
-        magicLinkSubtitle: "輸入電子郵件，我們會寄送安全登入連結",
-        sendMagicLink: "寄送登入連結",
+        magicLinkTitle: "歡迎",
+        magicLinkSubtitle: "建立帳戶或登入",
+        sendMagicLink: "繼續",
         magicLinkSent: "檢查你的電子郵件",
         magicLinkSentCopy: "我們已向以下電子郵件寄送安全登入連結：",
         magicLinkFailed: "無法寄送登入連結。",
@@ -356,9 +356,9 @@ const AUTH_LOCALE_COPY = {
         passwordMinPlaceholder: "Al menos 8 caracteres",
         confirmPasswordPlaceholder: "Confirmar contraseña",
         enterPasswordPlaceholder: "Introduce la contraseña",
-        magicLinkTitle: "Inicia sesión con un enlace",
-        magicLinkSubtitle: "Introduce tu email y te enviaremos un enlace seguro",
-        sendMagicLink: "Enviarme un enlace de inicio de sesión",
+        magicLinkTitle: "Bienvenido",
+        magicLinkSubtitle: "Crea una cuenta o inicia sesión",
+        sendMagicLink: "Continuar",
         magicLinkSent: "Revisa tu email",
         magicLinkSentCopy: "Enviamos un enlace seguro a",
         magicLinkFailed: "No se pudo enviar el enlace de inicio de sesión.",
@@ -450,9 +450,9 @@ const AUTH_LOCALE_COPY = {
         passwordMinPlaceholder: "Au moins 8 caractères",
         confirmPasswordPlaceholder: "Confirmer le mot de passe",
         enterPasswordPlaceholder: "Saisir le mot de passe",
-        magicLinkTitle: "Se connecter avec un lien",
-        magicLinkSubtitle: "Saisissez votre e-mail et nous vous enverrons un lien sécurisé",
-        sendMagicLink: "M'envoyer un lien de connexion",
+        magicLinkTitle: "Bienvenue",
+        magicLinkSubtitle: "Créez un compte ou connectez-vous",
+        sendMagicLink: "Continuer",
         magicLinkSent: "Vérifiez votre e-mail",
         magicLinkSentCopy: "Nous avons envoyé un lien sécurisé à",
         magicLinkFailed: "Impossible d'envoyer le lien de connexion.",
@@ -544,9 +544,9 @@ const AUTH_LOCALE_COPY = {
         passwordMinPlaceholder: "Mindestens 8 Zeichen",
         confirmPasswordPlaceholder: "Passwort bestätigen",
         enterPasswordPlaceholder: "Passwort eingeben",
-        magicLinkTitle: "Mit einem Link anmelden",
-        magicLinkSubtitle: "Gib deine E-Mail ein und wir senden dir einen sicheren Anmeldelink",
-        sendMagicLink: "Anmeldelink per E-Mail senden",
+        magicLinkTitle: "Willkommen",
+        magicLinkSubtitle: "Konto erstellen oder anmelden",
+        sendMagicLink: "Weiter",
         magicLinkSent: "Prüfe deine E-Mail",
         magicLinkSentCopy: "Wir haben einen sicheren Anmeldelink gesendet an",
         magicLinkFailed: "Anmeldelink konnte nicht gesendet werden.",
@@ -638,9 +638,9 @@ const AUTH_LOCALE_COPY = {
         passwordMinPlaceholder: "8 文字以上",
         confirmPasswordPlaceholder: "パスワードを確認",
         enterPasswordPlaceholder: "パスワードを入力",
-        magicLinkTitle: "リンクでサインイン",
-        magicLinkSubtitle: "メールアドレスを入力すると、安全なサインインリンクを送信します",
-        sendMagicLink: "サインインリンクをメールで送信",
+        magicLinkTitle: "ようこそ",
+        magicLinkSubtitle: "アカウントを作成するかサインインしてください",
+        sendMagicLink: "続行",
         magicLinkSent: "メールを確認してください",
         magicLinkSentCopy: "安全なサインインリンクを送信しました：",
         magicLinkFailed: "サインインリンクを送信できませんでした。",
@@ -732,9 +732,9 @@ const AUTH_LOCALE_COPY = {
         passwordMinPlaceholder: "8자 이상",
         confirmPasswordPlaceholder: "비밀번호 확인",
         enterPasswordPlaceholder: "비밀번호 입력",
-        magicLinkTitle: "링크로 로그인",
-        magicLinkSubtitle: "이메일을 입력하면 안전한 로그인 링크를 보내드립니다",
-        sendMagicLink: "로그인 링크 이메일 받기",
+        magicLinkTitle: "환영합니다",
+        magicLinkSubtitle: "계정을 만들거나 로그인하세요",
+        sendMagicLink: "계속",
         magicLinkSent: "이메일을 확인하세요",
         magicLinkSentCopy: "안전한 로그인 링크를 보냈습니다:",
         magicLinkFailed: "로그인 링크를 보낼 수 없습니다.",
@@ -826,9 +826,9 @@ const AUTH_LOCALE_COPY = {
         passwordMinPlaceholder: "Pelo menos 8 caracteres",
         confirmPasswordPlaceholder: "Confirmar senha",
         enterPasswordPlaceholder: "Digite a senha",
-        magicLinkTitle: "Entrar com um link",
-        magicLinkSubtitle: "Digite seu email e enviaremos um link seguro de acesso",
-        sendMagicLink: "Enviar link de acesso por email",
+        magicLinkTitle: "Bem-vindo",
+        magicLinkSubtitle: "Crie uma conta ou entre",
+        sendMagicLink: "Continuar",
         magicLinkSent: "Confira seu email",
         magicLinkSentCopy: "Enviamos um link seguro para",
         magicLinkFailed: "Não foi possível enviar o link de acesso.",
@@ -920,9 +920,9 @@ const AUTH_LOCALE_COPY = {
         passwordMinPlaceholder: "कम से कम 8 अक्षर",
         confirmPasswordPlaceholder: "पासवर्ड की पुष्टि करें",
         enterPasswordPlaceholder: "पासवर्ड दर्ज करें",
-        magicLinkTitle: "लिंक से साइन इन करें",
-        magicLinkSubtitle: "अपना ईमेल दर्ज करें और हम सुरक्षित साइन-इन लिंक भेजेंगे",
-        sendMagicLink: "मुझे साइन-इन लिंक ईमेल करें",
+        magicLinkTitle: "स्वागत है",
+        magicLinkSubtitle: "खाता बनाएं या साइन इन करें",
+        sendMagicLink: "जारी रखें",
         magicLinkSent: "अपना ईमेल देखें",
         magicLinkSentCopy: "हमने सुरक्षित साइन-इन लिंक यहां भेजा है:",
         magicLinkFailed: "साइन-इन लिंक नहीं भेजा जा सका।",
@@ -1014,9 +1014,9 @@ const AUTH_LOCALE_COPY = {
         passwordMinPlaceholder: "8 أحرف على الأقل",
         confirmPasswordPlaceholder: "تأكيد كلمة المرور",
         enterPasswordPlaceholder: "أدخل كلمة المرور",
-        magicLinkTitle: "تسجيل الدخول باستخدام رابط",
-        magicLinkSubtitle: "أدخل بريدك الإلكتروني وسنرسل لك رابط تسجيل دخول آمنًا",
-        sendMagicLink: "إرسال رابط تسجيل الدخول إلى بريدي",
+        magicLinkTitle: "مرحبًا",
+        magicLinkSubtitle: "أنشئ حسابًا أو سجّل الدخول",
+        sendMagicLink: "متابعة",
         magicLinkSent: "تحقق من بريدك الإلكتروني",
         magicLinkSentCopy: "أرسلنا رابط تسجيل دخول آمنًا إلى",
         magicLinkFailed: "تعذر إرسال رابط تسجيل الدخول.",
@@ -1914,6 +1914,7 @@ ${hasMarketing
     background: rgba(255,255,255,0.06);
     border-radius: 8px;
   }
+  .tabs[hidden] { display: none; }
   .tab {
     flex: 1;
     padding: 0.5rem 0.75rem;
@@ -2124,8 +2125,11 @@ ${hasMarketing
     text-decoration: underline;
     text-underline-offset: 2px;
   }
+  .auth-mode-link { text-decoration: none; }
   .link-button:hover { color: #bbb; }
   .link-button:disabled { cursor: wait; opacity: 0.5; }
+  .magic-link-submit { display: none; }
+  .magic-link-submit.is-visible { display: block; }
   .divider {
     display: flex;
     align-items: center;
@@ -2354,7 +2358,7 @@ ${googleOnly ? "" : `\n  <div class="divider" id="auth-divider"${i18nAttr("divid
         : ""}
 ${googleOnly
         ? ""
-        : `${magicLinkMode ? '\n    <form id="magic-link-form" class="form">\n      <label for="m-email"' + i18nAttr("email") + ">" + esc(t("email")) + '</label>\n      <input id="m-email" type="email" autocomplete="email" autofocus placeholder="you@example.com" required />\n      <button type="submit"' + i18nAttr("sendMagicLink") + ">" + esc(t("sendMagicLink")) + '</button>\n      <p class="msg" id="m-msg"></p>\n      <p style="margin-top:0.75rem;font-size:0.75rem;text-align:center">\n        <a href="#" id="use-password-link" class="link-button"' + i18nAttr("usePasswordInstead") + ">" + esc(t("usePasswordInstead")) + "</a>\n      </p>\n    </form>\n" : ""}  <div class="tabs"${magicLinkMode ? " hidden" : ""}>
+        : `${magicLinkMode ? '\n    <form id="magic-link-form" class="form">\n      <label for="m-email"' + i18nAttr("email") + ">" + esc(t("email")) + '</label>\n      <input id="m-email" type="email" autocomplete="email" autofocus placeholder="you@example.com" required />\n      <button type="submit" id="magic-link-submit" class="magic-link-submit"' + i18nAttr("sendMagicLink") + ">" + esc(t("sendMagicLink")) + '</button>\n      <p class="msg" id="m-msg"></p>\n' + signupLegalNoteHtml + '\n      <p style="margin-top:0.75rem;font-size:0.75rem;text-align:center">\n        <a href="#" id="use-password-link" class="link-button auth-mode-link"' + i18nAttr("usePasswordInstead") + ">" + esc(t("usePasswordInstead")) + "</a>\n      </p>\n    </form>\n" : ""}  <div class="tabs" id="auth-tabs"${magicLinkMode ? " hidden" : ""}>
     <button class="tab" data-tab="signup"${i18nAttr("createAccount")}>${esc(t("createAccount"))}</button>
     <button class="tab" data-tab="login"${i18nAttr("signIn")}>${esc(t("signIn"))}</button>
   </div>
@@ -3147,14 +3151,27 @@ ${googleOnly
       if (!form) return;
       forms.forEach(function(x) { x.classList.remove('active'); });
       form.classList.add('active');
+      var authTabs = document.getElementById('auth-tabs');
+      if (authTabs) authTabs.hidden = true;
+      updateMagicLinkSubmitState();
       __anSetAuthView('magicLink');
     }
+    function updateMagicLinkSubmitState() {
+      var emailInput = document.getElementById('m-email');
+      var button = document.getElementById('magic-link-submit');
+      if (!emailInput || !button) return;
+      var isValid = __anIsValidAuthEmail(emailInput.value);
+      button.classList.toggle('is-visible', isValid);
+      button.setAttribute('aria-hidden', isValid ? 'false' : 'true');
+    }
     function setActiveTab(name, opts) {
 	      if (name !== 'signup' && name !== 'login') return;
 	      var form = document.getElementById(name + '-form');
 	      if (!form) return;
       var card = document.querySelector('.card');
       if (card) card.classList.remove('verifying');
+      var authTabs = document.getElementById('auth-tabs');
+      if (authTabs) authTabs.hidden = false;
       tabs.forEach(function(x) { x.classList.remove('active'); });
       forms.forEach(function(x) { x.classList.remove('active'); });
     var btn = document.querySelector('.tab[data-tab="' + name + '"]');
@@ -3457,6 +3474,12 @@ ${googleOnly
   });
 
   var magicLinkForm = document.getElementById('magic-link-form');
+  var magicLinkEmail = document.getElementById('m-email');
+  if (magicLinkEmail) {
+    magicLinkEmail.addEventListener('input', updateMagicLinkSubmitState);
+    magicLinkEmail.addEventListener('change', updateMagicLinkSubmitState);
+    updateMagicLinkSubmitState();
+  }
   if (magicLinkForm) magicLinkForm.addEventListener('submit', async function(e) {
     e.preventDefault();
     var btn = magicLinkForm.querySelector('button[type="submit"]');

package/dist/server/realtime-token.d.ts

@@ -26,8 +26,8 @@ export declare function createRealtimeTokenHandler(): import("h3").EventHandlerW
     expiresAt?: undefined;
     ttlSeconds?: undefined;
 } | {
-    error?: undefined;
     token: string;
     expiresAt: string;
     ttlSeconds: number;
+    error?: undefined;
 }>>;

package/dist/server/transcribe-voice.d.ts

@@ -20,6 +20,6 @@ export declare function createTranscribeVoiceHandler(): import("h3").EventHandle
     error: string;
     text?: undefined;
 } | {
-    error?: undefined;
     text: string;
+    error?: undefined;
 }>>;

package/dist/server/workspace-provider-oauth.js

@@ -249,7 +249,7 @@ export async function handleWorkspaceProviderOAuthCallback(event, providerId) {
             });
         }
         const returnPath = state.returnUrl ??
-            `/settings?connected=${encodeURIComponent(providerId)}#integrations`;
+            `/settings/integrations?connected=${encodeURIComponent(providerId)}`;
         return Response.redirect(getAppUrl(event, returnPath), 302);
     });
 }

package/dist/setup-connections/onboarding.js

@@ -1,5 +1,5 @@
 import { registerOnboardingStep } from "../onboarding/registry.js";
-export function registerWorkspaceConnectionOnboardingStep({ id, providerId, providerLabel, title, description, order = 50, required = false, settingsUrl = "/settings#integrations", isComplete, }) {
+export function registerWorkspaceConnectionOnboardingStep({ id, providerId, providerLabel, title, description, order = 50, required = false, settingsUrl = "/settings/integrations", isComplete, }) {
     const label = providerLabel ?? providerId;
     registerOnboardingStep({
         id: id ?? `${providerId}-connection`,

package/dist/shared/index.d.ts

@@ -1,7 +1,7 @@
 export { agentChat, type AgentChatMessage, type AgentChatCallOptions, type AgentChatResponse, } from "./agent-chat.js";
 export { agentEnv, type EnvVar } from "./agent-env.js";
 export { extractOAuthStateAppId } from "./oauth-state.js";
-export { SIGN_IN_CONTINUATION_MAX_LENGTH, SIGN_IN_CONTINUATION_PARAM, SIGN_IN_ENTRY_PATH, SIGN_IN_LEGACY_RETURN_PARAM, decodeContinuation, encodeContinuation, normalizeAppPath, signInJourney, signInJourneyInlineScript, type SignInJourney, type SignInJourneyInput, } from "./sign-in-journey.js";
+export { SIGN_IN_CONTINUATION_MAX_LENGTH, SIGN_IN_CONTINUATION_PARAM, SIGN_IN_ENTRY_PATH, SIGN_IN_LEGACY_ENTRY_PATH, SIGN_IN_LEGACY_RETURN_PARAM, decodeContinuation, encodeContinuation, normalizeAppPath, signInJourney, signInJourneyInlineScript, type SignInJourney, type SignInJourneyInput, } from "./sign-in-journey.js";
 export { truncate } from "./truncate.js";
 export { injectDocumentMarkup } from "./html-document.js";
 export { withBuilderUtmTrackingParams } from "./builder-link-tracking.js";

package/dist/shared/index.js

@@ -1,7 +1,7 @@
 export { agentChat, } from "./agent-chat.js";
 export { agentEnv } from "./agent-env.js";
 export { extractOAuthStateAppId } from "./oauth-state.js";
-export { SIGN_IN_CONTINUATION_MAX_LENGTH, SIGN_IN_CONTINUATION_PARAM, SIGN_IN_ENTRY_PATH, SIGN_IN_LEGACY_RETURN_PARAM, decodeContinuation, encodeContinuation, normalizeAppPath, signInJourney, signInJourneyInlineScript, } from "./sign-in-journey.js";
+export { SIGN_IN_CONTINUATION_MAX_LENGTH, SIGN_IN_CONTINUATION_PARAM, SIGN_IN_ENTRY_PATH, SIGN_IN_LEGACY_ENTRY_PATH, SIGN_IN_LEGACY_RETURN_PARAM, decodeContinuation, encodeContinuation, normalizeAppPath, signInJourney, signInJourneyInlineScript, } from "./sign-in-journey.js";
 export { truncate } from "./truncate.js";
 export { injectDocumentMarkup } from "./html-document.js";
 export { withBuilderUtmTrackingParams } from "./builder-link-tracking.js";

package/dist/shared/sign-in-journey.d.ts

@@ -18,7 +18,7 @@
  *  - `signInJourney` returns `signInHref: null` — no token at all — when the
  *    browser is already at an auth entry path, so the one function permitted
  *    to mint continuations refuses to mint the dangerous value;
- *  - the sign-in URL is `<base>/_agent-native/sign-in?c=<opaque>`, so
+ *  - the sign-in URL is `<base>/sign-in?c=<opaque>`, so
  *    "capture the current location as the return" has no URL-shaped input to
  *    re-encode;
  *  - `c` does not look like a URL, so Better Auth's `callbackURL`, a proxy, or
@@ -42,7 +42,10 @@ export declare const SIGN_IN_CONTINUATION_PARAM = "c";
  * therefore will not be caught.
  */
 export declare const SIGN_IN_LEGACY_RETURN_PARAM = "return";
-export declare const SIGN_IN_ENTRY_PATH = "/_agent-native/sign-in";
+/** The clean, user-facing sign-in entry point emitted by current clients. */
+export declare const SIGN_IN_ENTRY_PATH = "/sign-in";
+/** The old framework entry point, retained for generated apps and bookmarks. */
+export declare const SIGN_IN_LEGACY_ENTRY_PATH = "/_agent-native/sign-in";
 /** Max length of an encoded continuation token, in characters. */
 export declare const SIGN_IN_CONTINUATION_MAX_LENGTH = 512;
 export interface SignInJourney {

package/dist/shared/sign-in-journey.js

@@ -18,7 +18,7 @@
  *  - `signInJourney` returns `signInHref: null` — no token at all — when the
  *    browser is already at an auth entry path, so the one function permitted
  *    to mint continuations refuses to mint the dangerous value;
- *  - the sign-in URL is `<base>/_agent-native/sign-in?c=<opaque>`, so
+ *  - the sign-in URL is `<base>/sign-in?c=<opaque>`, so
  *    "capture the current location as the return" has no URL-shaped input to
  *    re-encode;
  *  - `c` does not look like a URL, so Better Auth's `callbackURL`, a proxy, or
@@ -42,7 +42,10 @@ export const SIGN_IN_CONTINUATION_PARAM = "c";
  * therefore will not be caught.
  */
 export const SIGN_IN_LEGACY_RETURN_PARAM = "return";
-export const SIGN_IN_ENTRY_PATH = "/_agent-native/sign-in";
+/** The clean, user-facing sign-in entry point emitted by current clients. */
+export const SIGN_IN_ENTRY_PATH = "/sign-in";
+/** The old framework entry point, retained for generated apps and bookmarks. */
+export const SIGN_IN_LEGACY_ENTRY_PATH = "/_agent-native/sign-in";
 /** Max length of an encoded continuation token, in characters. */
 export const SIGN_IN_CONTINUATION_MAX_LENGTH = 512;
 /**
@@ -56,7 +59,8 @@ export const SIGN_IN_CONTINUATION_MAX_LENGTH = 512;
 function createSignInJourneyRuntime(basePath) {
     var PARAM = "c";
     var LEGACY_PARAM = "return";
-    var ENTRY_PATH = "/_agent-native/sign-in";
+    var ENTRY_PATH = "/sign-in";
+    var LEGACY_ENTRY_PATH = "/_agent-native/sign-in";
     var MAX_TOKEN = 512;
     var SENTINEL = "http://an.invalid";
     function normalizeBasePath(raw) {
@@ -79,7 +83,9 @@ function createSignInJourneyRuntime(basePath) {
         // including one this process was not configured with (a workspace host
         // serving a sibling app's URL).
         if (pathname === ENTRY_PATH ||
-            pathname.slice(-ENTRY_PATH.length) === ENTRY_PATH) {
+            pathname.slice(-ENTRY_PATH.length) === ENTRY_PATH ||
+            pathname === LEGACY_ENTRY_PATH ||
+            pathname.slice(-LEGACY_ENTRY_PATH.length) === LEGACY_ENTRY_PATH) {
             return true;
         }
         var rest = pathname;

package/dist/templates/chat/app/components/layout/Layout.tsx

@@ -172,7 +172,7 @@ export function Layout({ children }: LayoutProps) {
             openOnChatRunning={chatHomeHandoffActive}
             onFullscreenRequest={openAskAgentFullscreen}
             emptyStateText={t("chat.inspectEmptyState")}
-            agentPageHref="/settings#agent"
+            agentPageHref="/settings/agent"
             suggestions={[
               t("chat.inspectSuggestionCapabilities"),
               t("chat.inspectSuggestionHello"),

package/dist/templates/chat/app/hooks/use-navigation-state.ts

@@ -64,7 +64,7 @@ function pathForView(view?: string): string {
     case "settings":
       return "/settings";
     case "team":
-      return "/settings#organization";
+      return "/settings/organization";
     default:
       return "/";
   }

package/dist/templates/chat/app/root.tsx

@@ -133,7 +133,7 @@ function AppContent() {
             {t("root.commandSearch")}
           </CommandMenu.Item>
           <CommandMenu.Item
-            onSelect={() => navigate("/settings#agent")}
+            onSelect={() => navigate("/settings/agent")}
             keywords={[
               "agent",
               "context",