@agent-native/core 0.161.0 → 0.161.2

package/dist/client/error-format.js

@@ -1,4 +1,5 @@
 import { GATEWAY_UNAVAILABLE_VISITOR_MESSAGE } from "../agent/engine/credential-errors.js";
+import { BUILDER_GATEWAY_INTERNAL_ERROR_CODE } from "../agent/engine/error-detail.js";
 /**
  * Append a Builder CTA markdown link to gateway errors that users can fix
  * outside the app. Used by both
@@ -21,6 +22,13 @@ const OPEN_BUILDER_SPACE_SETTINGS_LABEL = "Open Builder space settings";
 const START_NEW_CHAT_LABEL = "Start new chat";
 const UPGRADE_AT_BUILDER_LABEL = "Upgrade at builder.io";
 const BUILDER_AUTHENTICATION_ERROR = "Builder rejected the connected credentials. Reconnect Builder.io (free tier available) in Settings, then retry.";
+/**
+ * The gateway's unhandled-500 envelope is an internal correlation id and an
+ * apology: nothing the reader can act on, and nothing that says whether the
+ * failure was theirs. Say where it broke and keep the raw sentence in
+ * `details`, which is the only place the error id is useful.
+ */
+const GATEWAY_INTERNAL_ERROR_MESSAGE = "The model gateway hit an internal error before the agent could answer. Retry in a moment, and quote the error id below if it keeps happening.";
 function isSafeUpgradeUrl(url) {
     try {
         const parsed = new URL(url);
@@ -104,6 +112,10 @@ const KNOWN_CHAT_ERROR_KEYS = new Map([
         "The model gateway returned no error details and the chat couldn't recover. Wait a moment and retry, or start a new chat if it keeps happening.",
         "agentChat.errorMessages.gatewayNoDetails",
     ],
+    [
+        GATEWAY_INTERNAL_ERROR_MESSAGE,
+        "agentChat.errorMessages.gatewayInternalError",
+    ],
     [
         "The agent connection timed out before it could finish. You can continue from the partial work or retry.",
         "agentChat.errorMessages.inactivityTimeout",
@@ -233,6 +245,9 @@ export function normalizeChatError(errorMessage, errorCode) {
             details: text,
         };
     }
+    if (code === BUILDER_GATEWAY_INTERNAL_ERROR_CODE) {
+        return { message: GATEWAY_INTERNAL_ERROR_MESSAGE, details: text };
+    }
     if (code === "builder_auth_error") {
         return {
             message: BUILDER_AUTHENTICATION_ERROR,

package/dist/client/sse-event-processor.js

@@ -1,4 +1,5 @@
 import { LLM_MISSING_CREDENTIALS_ERROR_CODE, LLM_MISSING_CREDENTIALS_MESSAGE, } from "../agent/engine/credential-errors.js";
+import { BUILDER_GATEWAY_INTERNAL_ERROR_CODE } from "../agent/engine/error-detail.js";
 import { emitChatFirstOpenApp } from "./chat-first.js";
 import { formatChatErrorText, normalizeChatError } from "./error-format.js";
 import { humanizeToolLabelText, humanizeToolName, isToolCallActive, runningToolLabel, } from "./tool-display.js";
@@ -529,6 +530,9 @@ function isAutoRecoverableError(ev, errMsg) {
         code === "http_408" ||
         code === "http_429" ||
         code === "http_500" ||
+        // The gateway's unhandled-500 envelope delivered in-stream instead of as a
+        // status. Recoverable for the same reason `http_500` is.
+        code === BUILDER_GATEWAY_INTERNAL_ERROR_CODE ||
         code === "http_502" ||
         code === "http_503" ||
         code === "http_504" ||

package/dist/file-upload/actions/upload-image.d.ts

@@ -17,11 +17,11 @@ declare const _default: import("../../action.js").ActionDefinition<{
     id?: undefined;
     provider?: undefined;
 } | {
+    error?: undefined;
     configured?: undefined;
     connectPath?: undefined;
     url: string;
     id: string;
     provider: string;
-    error?: undefined;
 }>;
 export default _default;

package/dist/localization/core-messages/ar-SA.js

@@ -260,6 +260,7 @@ const messages = {
     "errorMessages.builderAuthentication": "رفض Builder بيانات الاعتماد المتصلة. أعد الاتصال بـ Builder.io من الإعدادات، ثم أعد المحاولة.",
     "errorMessages.builderModelUnauthorized": "رفض المزوّد الذي يشغّل هذا النموذج الطلب. اختر نموذجًا آخر، ثم أعد المحاولة.",
     "errorMessages.errorPrefix": "خطأ: {{message}}",
+    "errorMessages.gatewayInternalError": "حدث خطأ داخلي في بوابة النموذج قبل أن يتمكن الوكيل من الإجابة. أعد المحاولة بعد قليل، وإذا تكرر الأمر فأرفق معرّف الخطأ الظاهر أدناه.",
     "errorMessages.gatewayNoDetails": "لم تُرجع بوابة النموذج أي تفاصيل عن الخطأ وتعذّر على المحادثة الاسترداد. انتظر قليلًا ثم أعد المحاولة، أو ابدأ محادثة جديدة إذا استمرت المشكلة.",
     "errorMessages.inactivityTimeout": "انتهت مهلة اتصال الوكيل قبل أن يتمكن من الإكمال. يمكنك المتابعة من العمل الجزئي أو إعادة المحاولة.",
     "errorMessages.invalidToolSchema": "كان مخطط إحدى الأدوات غير صالح، لذلك رفض النموذج الطلب قبل بدئه. يمكن تخطي الأداة غير الصالحة وإعادة محاولة الطلب.",

package/dist/localization/core-messages/de-DE.js

@@ -389,6 +389,7 @@ const messages = {
     "errorMessages.builderAuthentication": "Builder hat die verbundenen Anmeldedaten abgelehnt. Verbinde Builder.io in den Einstellungen erneut und versuche es dann noch einmal.",
     "errorMessages.builderModelUnauthorized": "Der Anbieter hinter diesem Modell hat die Anfrage abgelehnt. Wähle ein anderes Modell und versuche es erneut.",
     "errorMessages.errorPrefix": "Fehler: {{message}}",
+    "errorMessages.gatewayInternalError": "Das Modell-Gateway hat einen internen Fehler ausgelöst, bevor der Agent antworten konnte. Versuchen Sie es in einem Moment erneut und geben Sie die untenstehende Fehler-ID an, wenn es weiterhin auftritt.",
     "errorMessages.gatewayNoDetails": "Das Modell-Gateway hat keine Fehlerdetails zurückgegeben und der Chat konnte nicht fortgesetzt werden. Warte einen Moment und versuche es erneut. Falls das Problem bestehen bleibt, starte einen neuen Chat.",
     "errorMessages.inactivityTimeout": "Die Verbindung zum Agenten wurde wegen Zeitüberschreitung beendet, bevor er fertig war. Du kannst mit dem Teilergebnis fortfahren oder es erneut versuchen.",
     "errorMessages.invalidToolSchema": "Ein Tool-Schema war ungültig. Deshalb hat das Modell die Anfrage abgelehnt, bevor sie gestartet wurde. Das ungültige Tool kann übersprungen und die Anfrage erneut gesendet werden.",

package/dist/localization/core-messages/en-US.d.ts

@@ -252,6 +252,7 @@ declare const messages: {
     readonly "errorMessages.builderAuthentication": "Builder rejected the connected credentials. Reconnect Builder.io in Settings, then retry.";
     readonly "errorMessages.builderModelUnauthorized": "The provider behind this model rejected the request. Pick a different model, then retry.";
     readonly "errorMessages.errorPrefix": "Error: {{message}}";
+    readonly "errorMessages.gatewayInternalError": "The model gateway hit an internal error before the agent could answer. Retry in a moment, and quote the error id below if it keeps happening.";
     readonly "errorMessages.gatewayNoDetails": "The model gateway returned no error details and the chat couldn't recover. Wait a moment and retry, or start a new chat if it keeps happening.";
     readonly "errorMessages.inactivityTimeout": "The agent connection timed out before it could finish. You can continue from the partial work or retry.";
     readonly "errorMessages.invalidToolSchema": "A tool schema was invalid, so the model rejected the request before it started. The invalid tool can be skipped and the request retried.";

package/dist/localization/core-messages/en-US.js

@@ -252,6 +252,7 @@ const messages = {
     "errorMessages.builderAuthentication": "Builder rejected the connected credentials. Reconnect Builder.io in Settings, then retry.",
     "errorMessages.builderModelUnauthorized": "The provider behind this model rejected the request. Pick a different model, then retry.",
     "errorMessages.errorPrefix": "Error: {{message}}",
+    "errorMessages.gatewayInternalError": "The model gateway hit an internal error before the agent could answer. Retry in a moment, and quote the error id below if it keeps happening.",
     "errorMessages.gatewayNoDetails": "The model gateway returned no error details and the chat couldn't recover. Wait a moment and retry, or start a new chat if it keeps happening.",
     "errorMessages.inactivityTimeout": "The agent connection timed out before it could finish. You can continue from the partial work or retry.",
     "errorMessages.invalidToolSchema": "A tool schema was invalid, so the model rejected the request before it started. The invalid tool can be skipped and the request retried.",

package/dist/localization/core-messages/es-ES.js

@@ -396,6 +396,7 @@ const messages = {
     "errorMessages.builderAuthentication": "Builder rechazó las credenciales conectadas. Vuelve a conectar Builder.io en Ajustes e inténtalo de nuevo.",
     "errorMessages.builderModelUnauthorized": "El proveedor de este modelo rechazó la solicitud. Elige otro modelo y vuelve a intentarlo.",
     "errorMessages.errorPrefix": "Error: {{message}}",
+    "errorMessages.gatewayInternalError": "La pasarela del modelo tuvo un error interno antes de que el agente pudiera responder. Vuelve a intentarlo en un momento e indica el id de error de abajo si sigue ocurriendo.",
     "errorMessages.gatewayNoDetails": "La pasarela del modelo no devolvió detalles del error y el chat no pudo recuperarse. Espera un momento y vuelve a intentarlo. Si el problema continúa, inicia un chat nuevo.",
     "errorMessages.inactivityTimeout": "La conexión del agente expiró antes de que pudiera finalizar. Puedes continuar desde el trabajo parcial o volver a intentarlo.",
     "errorMessages.invalidToolSchema": "El esquema de una herramienta no era válido, así que el modelo rechazó la solicitud antes de iniciarla. Puedes omitir la herramienta no válida y volver a intentarlo.",

package/dist/localization/core-messages/fr-FR.js

@@ -396,6 +396,7 @@ const messages = {
     "errorMessages.builderAuthentication": "Builder a rejeté les identifiants connectés. Reconnectez Builder.io dans les paramètres, puis réessayez.",
     "errorMessages.builderModelUnauthorized": "Le fournisseur de ce modèle a rejeté la demande. Choisissez un autre modèle, puis réessayez.",
     "errorMessages.errorPrefix": "Erreur : {{message}}",
+    "errorMessages.gatewayInternalError": "La passerelle du modèle a rencontré une erreur interne avant que l'agent puisse répondre. Réessayez dans un instant et indiquez l'identifiant d'erreur ci-dessous si cela persiste.",
     "errorMessages.gatewayNoDetails": "La passerelle du modèle n’a fourni aucun détail sur l’erreur et la discussion n’a pas pu reprendre. Patientez un instant et réessayez. Si le problème persiste, démarrez une nouvelle discussion.",
     "errorMessages.inactivityTimeout": "La connexion à l’agent a expiré avant la fin. Vous pouvez poursuivre à partir du travail partiel ou réessayer.",
     "errorMessages.invalidToolSchema": "Le schéma d’un outil n’était pas valide. Le modèle a donc rejeté la demande avant son démarrage. Vous pouvez ignorer cet outil et réessayer.",

package/dist/localization/core-messages/hi-IN.js

@@ -252,6 +252,7 @@ const messages = {
     "errorMessages.builderAuthentication": "Builder ने कनेक्ट किए गए क्रेडेंशियल अस्वीकार कर दिए। सेटिंग्स में Builder.io को दोबारा कनेक्ट करें, फिर से प्रयास करें।",
     "errorMessages.builderModelUnauthorized": "इस मॉडल के पीछे मौजूद प्रदाता ने अनुरोध अस्वीकार कर दिया। कोई दूसरा मॉडल चुनें, फिर से प्रयास करें।",
     "errorMessages.errorPrefix": "त्रुटि: {{message}}",
+    "errorMessages.gatewayInternalError": "एजेंट के उत्तर देने से पहले मॉडल गेटवे में एक आंतरिक त्रुटि आई। कुछ देर में फिर कोशिश करें, और बार-बार होने पर नीचे दिया गया error id बताएं।",
     "errorMessages.gatewayNoDetails": "मॉडल गेटवे ने त्रुटि का कोई विवरण नहीं दिया और चैट रिकवर नहीं हो सकी। कुछ देर रुककर फिर से प्रयास करें या समस्या बनी रहने पर नई चैट शुरू करें।",
     "errorMessages.inactivityTimeout": "एजेंट का कनेक्शन काम पूरा होने से पहले समय सीमा पर पहुँच गया। आप आंशिक काम से जारी रख सकते हैं या फिर से प्रयास कर सकते हैं।",
     "errorMessages.invalidToolSchema": "एक टूल स्कीमा अमान्य था, इसलिए मॉडल ने अनुरोध शुरू होने से पहले ही अस्वीकार कर दिया। अमान्य टूल को छोड़कर अनुरोध दोबारा किया जा सकता है।",

package/dist/localization/core-messages/ja-JP.js

@@ -250,6 +250,7 @@ const messages = {
     "errorMessages.builderAuthentication": "Builder が接続済みの認証情報を拒否しました。設定で Builder.io に再接続してから再試行してください。",
     "errorMessages.builderModelUnauthorized": "このモデルのプロバイダーがリクエストを拒否しました。別のモデルを選択して再試行してください。",
     "errorMessages.errorPrefix": "エラー：{{message}}",
+    "errorMessages.gatewayInternalError": "エージェントが応答する前にモデルゲートウェイで内部エラーが発生しました。少し待ってから再試行し、繰り返す場合は下のエラー ID を伝えてください。",
     "errorMessages.gatewayNoDetails": "モデルゲートウェイからエラーの詳細が返されず、チャットを復旧できませんでした。少し待ってから再試行し、繰り返し発生する場合は新しいチャットを開始してください。",
     "errorMessages.inactivityTimeout": "エージェントとの接続が完了前にタイムアウトしました。途中までの作業から続行するか、再試行できます。",
     "errorMessages.invalidToolSchema": "ツールのスキーマが無効だったため、モデルは開始前にリクエストを拒否しました。無効なツールをスキップして再試行できます。",

package/dist/localization/core-messages/ko-KR.js

@@ -250,6 +250,7 @@ const messages = {
     "errorMessages.builderAuthentication": "Builder가 연결된 자격 증명을 거부했습니다. 설정에서 Builder.io를 다시 연결한 후 다시 시도하세요.",
     "errorMessages.builderModelUnauthorized": "이 모델의 제공업체가 요청을 거부했습니다. 다른 모델을 선택한 후 다시 시도하세요.",
     "errorMessages.errorPrefix": "오류: {{message}}",
+    "errorMessages.gatewayInternalError": "에이전트가 답변하기 전에 모델 게이트웨이에서 내부 오류가 발생했습니다. 잠시 후 다시 시도하고, 계속 발생하면 아래 오류 ID를 알려 주세요.",
     "errorMessages.gatewayNoDetails": "모델 게이트웨이가 오류 세부 정보를 반환하지 않아 채팅을 복구할 수 없습니다. 잠시 후 다시 시도하고, 문제가 계속되면 새 채팅을 시작하세요.",
     "errorMessages.inactivityTimeout": "에이전트 연결이 완료 전에 시간 초과되었습니다. 부분적으로 완료된 작업에서 계속하거나 다시 시도할 수 있습니다.",
     "errorMessages.invalidToolSchema": "도구 스키마가 올바르지 않아 모델이 요청 시작 전에 거부했습니다. 올바르지 않은 도구를 건너뛰고 요청을 다시 시도할 수 있습니다.",

package/dist/localization/core-messages/pt-BR.js

@@ -396,6 +396,7 @@ const messages = {
     "errorMessages.builderAuthentication": "O Builder rejeitou as credenciais conectadas. Reconecte Builder.io em Configurações e tente novamente.",
     "errorMessages.builderModelUnauthorized": "O provedor por trás deste modelo rejeitou a solicitação. Escolha um modelo diferente e tente novamente.",
     "errorMessages.errorPrefix": "Erro: {{message}}",
+    "errorMessages.gatewayInternalError": "O gateway do modelo teve um erro interno antes de o agente poder responder. Tente novamente em instantes e informe o id de erro abaixo se continuar acontecendo.",
     "errorMessages.gatewayNoDetails": "O gateway do modelo não retornou detalhes do erro, e o chat não pôde ser recuperado. Aguarde um momento e tente novamente. Se o problema persistir, inicie um novo chat.",
     "errorMessages.inactivityTimeout": "A conexão com o agente expirou antes da conclusão. Você pode continuar a partir do trabalho parcial ou tentar novamente.",
     "errorMessages.invalidToolSchema": "O esquema de uma ferramenta era inválido, então o modelo rejeitou a solicitação antes de iniciá-la. Você pode ignorar a ferramenta inválida e tentar novamente.",

package/dist/localization/core-messages/zh-CN.js

@@ -250,6 +250,7 @@ const messages = {
     "errorMessages.builderAuthentication": "Builder 拒绝了已连接的凭据。请在设置中重新连接 Builder.io，然后重试。",
     "errorMessages.builderModelUnauthorized": "此模型背后的提供商拒绝了请求。请选择其他模型后重试。",
     "errorMessages.errorPrefix": "错误：{{message}}",
+    "errorMessages.gatewayInternalError": "模型网关在智能体作答前发生内部错误。请稍后重试；如果持续出现，请提供下方的错误 ID。",
     "errorMessages.gatewayNoDetails": "模型网关未返回错误详情，聊天无法恢复。请稍等片刻后重试；如果问题持续出现，请开始新聊天。",
     "errorMessages.inactivityTimeout": "智能体连接在完成前超时。您可以从已完成的部分继续，也可以重试。",
     "errorMessages.invalidToolSchema": "工具架构无效，因此模型在请求开始前拒绝了该请求。可以跳过无效工具并重试请求。",

package/dist/localization/core-messages/zh-TW.js

@@ -250,6 +250,7 @@ const messages = {
     "errorMessages.builderAuthentication": "Builder 拒絕了已連線的憑證。請在設定中重新連線至 Builder.io，然後重試。",
     "errorMessages.builderModelUnauthorized": "這個模型背後的供應商拒絕了要求。請選擇其他模型後重試。",
     "errorMessages.errorPrefix": "錯誤：{{message}}",
+    "errorMessages.gatewayInternalError": "模型閘道在代理回答前發生內部錯誤。請稍後重試；若持續發生，請提供下方的錯誤 ID。",
     "errorMessages.gatewayNoDetails": "模型閘道未傳回錯誤詳細資訊，聊天無法復原。請稍候再試；如果問題持續發生，請開始新聊天。",
     "errorMessages.inactivityTimeout": "代理連線在完成前逾時。您可以從已完成的部分繼續，也可以重試。",
     "errorMessages.invalidToolSchema": "工具結構描述無效，因此模型在要求開始前便拒絕了要求。您可以略過無效工具並重試要求。",

package/dist/localization/core-messages.d.ts

@@ -254,6 +254,7 @@ export declare const englishAgentChatMessages: {
     readonly "errorMessages.builderAuthentication": "Builder rejected the connected credentials. Reconnect Builder.io in Settings, then retry.";
     readonly "errorMessages.builderModelUnauthorized": "The provider behind this model rejected the request. Pick a different model, then retry.";
     readonly "errorMessages.errorPrefix": "Error: {{message}}";
+    readonly "errorMessages.gatewayInternalError": "The model gateway hit an internal error before the agent could answer. Retry in a moment, and quote the error id below if it keeps happening.";
     readonly "errorMessages.gatewayNoDetails": "The model gateway returned no error details and the chat couldn't recover. Wait a moment and retry, or start a new chat if it keeps happening.";
     readonly "errorMessages.inactivityTimeout": "The agent connection timed out before it could finish. You can continue from the partial work or retry.";
     readonly "errorMessages.invalidToolSchema": "A tool schema was invalid, so the model rejected the request before it started. The invalid tool can be skipped and the request retried.";

package/dist/observability/routes.d.ts

@@ -42,22 +42,22 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     avgEvalScore: number;
 } | {
     error?: undefined;
-    ok?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
+    ok?: undefined;
 } | {
     error?: undefined;
-    ok?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;
-} | {
     ok?: undefined;
+} | {
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
     error: any;
+    ok?: undefined;
 } | {
     error?: undefined;
     summary?: undefined;

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,8 +75,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    id?: undefined;
     message?: undefined;
+    id?: undefined;
     deleted?: undefined;
     providers: {
         id: string;
@@ -93,9 +93,9 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     registered?: undefined;
     label?: undefined;
 } | {
-    id?: undefined;
     message?: undefined;
     count?: undefined;
+    id?: undefined;
     deleted?: undefined;
     providers?: undefined;
     found: boolean;

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/secrets/routes.d.ts

@@ -34,37 +34,37 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    ok?: undefined;
     status?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     status: string;
+    error?: undefined;
 } | {
-    ok?: undefined;
     error: string;
     removed?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
  * or the current stored value without changing anything.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
     note?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     note?: undefined;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     note: string;
+    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,11 +95,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;

package/dist/server/realtime-token.d.ts

@@ -26,8 +26,8 @@ export declare function createRealtimeTokenHandler(): import("h3").EventHandlerW
     expiresAt?: undefined;
     ttlSeconds?: undefined;
 } | {
-    error?: undefined;
     token: string;
     expiresAt: string;
     ttlSeconds: number;
+    error?: undefined;
 }>>;

package/dist/server/release-migrations.js

@@ -11,6 +11,7 @@ import { runAutomationSchedulerHealthMigrations } from "../jobs/scheduler-health
 import { OAUTH_TOKEN_MIGRATIONS, OAUTH_TOKEN_MIGRATIONS_TABLE, } from "../oauth-tokens/migrations.js";
 import { ORG_MIGRATIONS } from "../org/migrations.js";
 import { USAGE_ALERT_MIGRATIONS, USAGE_ALERT_MIGRATIONS_TABLE, } from "../usage/migrations.js";
+import { WORKSPACE_CONNECTIONS_MIGRATIONS, WORKSPACE_CONNECTIONS_MIGRATIONS_TABLE, } from "../workspace-connections/migrations.js";
 import { runBetterAuthMigrations } from "./better-auth-migrations.js";
 import { IDENTITY_SSO_MIGRATIONS } from "./identity-sso-migrations.js";
 /**
@@ -53,6 +54,9 @@ export async function runFrameworkReleaseMigrations(nitroApp) {
     await runMigrations(OBSERVATIONAL_MEMORY_MIGRATIONS, {
         table: "_observational_memory_migrations",
     })(nitroApp);
+    await runMigrations(WORKSPACE_CONNECTIONS_MIGRATIONS, {
+        table: WORKSPACE_CONNECTIONS_MIGRATIONS_TABLE,
+    })(nitroApp);
     await runAutomationRunMigrations(nitroApp);
     await runAutomationSchedulerHealthMigrations(nitroApp);
 }

package/dist/server/transcribe-voice.d.ts

@@ -20,6 +20,6 @@ export declare function createTranscribeVoiceHandler(): import("h3").EventHandle
     error: string;
     text?: undefined;
 } | {
-    error?: undefined;
     text: string;
+    error?: undefined;
 }>>;

package/dist/workspace-connections/migrations.d.ts

@@ -0,0 +1,18 @@
+import type { MigrationEntry } from "../db/migrations.js";
+export declare const WORKSPACE_CONNECTIONS_MIGRATIONS_TABLE = "_workspace_connections_migrations";
+/**
+ * Deploy-time schema for workspace connections, grants, and user groups.
+ *
+ * These three tables were shipped with only their runtime `ensureTable`
+ * helpers in `store.ts` / `groups.ts`. That is enough locally and on a
+ * long-lived server, but `schemaEnsureDisabled()` makes every probe report
+ * "present" on a production serverless runtime, so the ensure path issues no
+ * DDL there at all. A table with no entry here therefore never gets created in
+ * production, and the first read fails with `relation ... does not exist` —
+ * which is exactly what `workspace_user_groups` did from the day after it
+ * shipped. Runtime ensure covers dev; this list is the production contract.
+ *
+ * `created_at` / `updated_at` must be BIGINT on Postgres: they store epoch
+ * milliseconds, which overflow int4.
+ */
+export declare const WORKSPACE_CONNECTIONS_MIGRATIONS: MigrationEntry[];

package/dist/workspace-connections/migrations.js

@@ -0,0 +1,153 @@
+export const WORKSPACE_CONNECTIONS_MIGRATIONS_TABLE = "_workspace_connections_migrations";
+/**
+ * Deploy-time schema for workspace connections, grants, and user groups.
+ *
+ * These three tables were shipped with only their runtime `ensureTable`
+ * helpers in `store.ts` / `groups.ts`. That is enough locally and on a
+ * long-lived server, but `schemaEnsureDisabled()` makes every probe report
+ * "present" on a production serverless runtime, so the ensure path issues no
+ * DDL there at all. A table with no entry here therefore never gets created in
+ * production, and the first read fails with `relation ... does not exist` —
+ * which is exactly what `workspace_user_groups` did from the day after it
+ * shipped. Runtime ensure covers dev; this list is the production contract.
+ *
+ * `created_at` / `updated_at` must be BIGINT on Postgres: they store epoch
+ * milliseconds, which overflow int4.
+ */
+export const WORKSPACE_CONNECTIONS_MIGRATIONS = [
+    {
+        version: 1,
+        sql: {
+            postgres: `CREATE TABLE IF NOT EXISTS workspace_connections (
+        id TEXT PRIMARY KEY,
+        provider TEXT NOT NULL DEFAULT '',
+        label TEXT NOT NULL DEFAULT '',
+        account_id TEXT,
+        account_label TEXT,
+        status TEXT NOT NULL DEFAULT 'connected',
+        scopes_json TEXT NOT NULL DEFAULT '[]',
+        config_json TEXT NOT NULL DEFAULT '{}',
+        allowed_apps_json TEXT NOT NULL DEFAULT '[]',
+        allowed_users_json TEXT NOT NULL DEFAULT '[]',
+        allowed_user_groups_json TEXT NOT NULL DEFAULT '[]',
+        credential_refs_json TEXT NOT NULL DEFAULT '[]',
+        owner_email TEXT NOT NULL DEFAULT '',
+        org_id TEXT,
+        created_at BIGINT NOT NULL DEFAULT 0,
+        updated_at BIGINT NOT NULL DEFAULT 0,
+        last_used_at BIGINT,
+        last_checked_at BIGINT,
+        last_error TEXT
+      )`,
+            sqlite: `CREATE TABLE IF NOT EXISTS workspace_connections (
+        id TEXT PRIMARY KEY,
+        provider TEXT NOT NULL DEFAULT '',
+        label TEXT NOT NULL DEFAULT '',
+        account_id TEXT,
+        account_label TEXT,
+        status TEXT NOT NULL DEFAULT 'connected',
+        scopes_json TEXT NOT NULL DEFAULT '[]',
+        config_json TEXT NOT NULL DEFAULT '{}',
+        allowed_apps_json TEXT NOT NULL DEFAULT '[]',
+        allowed_users_json TEXT NOT NULL DEFAULT '[]',
+        allowed_user_groups_json TEXT NOT NULL DEFAULT '[]',
+        credential_refs_json TEXT NOT NULL DEFAULT '[]',
+        owner_email TEXT NOT NULL DEFAULT '',
+        org_id TEXT,
+        created_at INTEGER NOT NULL DEFAULT 0,
+        updated_at INTEGER NOT NULL DEFAULT 0,
+        last_used_at INTEGER,
+        last_checked_at INTEGER,
+        last_error TEXT
+      )`,
+        },
+    },
+    {
+        version: 2,
+        sql: `CREATE INDEX IF NOT EXISTS idx_workspace_connections_scope_provider
+      ON workspace_connections (org_id, owner_email, provider)`,
+    },
+    {
+        version: 3,
+        sql: `CREATE INDEX IF NOT EXISTS idx_workspace_connections_updated_at
+      ON workspace_connections (updated_at)`,
+    },
+    {
+        version: 4,
+        sql: {
+            postgres: `CREATE TABLE IF NOT EXISTS workspace_connection_grants (
+        id TEXT PRIMARY KEY,
+        connection_id TEXT NOT NULL DEFAULT '',
+        provider TEXT NOT NULL DEFAULT '',
+        app_id TEXT NOT NULL DEFAULT '',
+        scopes_json TEXT NOT NULL DEFAULT '[]',
+        config_json TEXT NOT NULL DEFAULT '{}',
+        credential_refs_json TEXT NOT NULL DEFAULT '[]',
+        granted_by_email TEXT NOT NULL DEFAULT '',
+        owner_email TEXT NOT NULL DEFAULT '',
+        org_id TEXT,
+        created_at BIGINT NOT NULL DEFAULT 0,
+        updated_at BIGINT NOT NULL DEFAULT 0,
+        last_used_at BIGINT
+      )`,
+            sqlite: `CREATE TABLE IF NOT EXISTS workspace_connection_grants (
+        id TEXT PRIMARY KEY,
+        connection_id TEXT NOT NULL DEFAULT '',
+        provider TEXT NOT NULL DEFAULT '',
+        app_id TEXT NOT NULL DEFAULT '',
+        scopes_json TEXT NOT NULL DEFAULT '[]',
+        config_json TEXT NOT NULL DEFAULT '{}',
+        credential_refs_json TEXT NOT NULL DEFAULT '[]',
+        granted_by_email TEXT NOT NULL DEFAULT '',
+        owner_email TEXT NOT NULL DEFAULT '',
+        org_id TEXT,
+        created_at INTEGER NOT NULL DEFAULT 0,
+        updated_at INTEGER NOT NULL DEFAULT 0,
+        last_used_at INTEGER
+      )`,
+        },
+    },
+    {
+        version: 5,
+        sql: `CREATE UNIQUE INDEX IF NOT EXISTS idx_workspace_connection_grants_connection_app
+      ON workspace_connection_grants (connection_id, app_id)`,
+    },
+    {
+        version: 6,
+        sql: `CREATE INDEX IF NOT EXISTS idx_workspace_connection_grants_scope_app
+      ON workspace_connection_grants (org_id, owner_email, app_id)`,
+    },
+    {
+        version: 7,
+        sql: `CREATE INDEX IF NOT EXISTS idx_workspace_connection_grants_updated_at
+      ON workspace_connection_grants (updated_at)`,
+    },
+    {
+        version: 8,
+        sql: {
+            postgres: `CREATE TABLE IF NOT EXISTS workspace_user_groups (
+        id TEXT PRIMARY KEY,
+        org_id TEXT NOT NULL DEFAULT '',
+        name TEXT NOT NULL DEFAULT '',
+        member_emails_json TEXT NOT NULL DEFAULT '[]',
+        created_by_email TEXT NOT NULL DEFAULT '',
+        created_at BIGINT NOT NULL DEFAULT 0,
+        updated_at BIGINT NOT NULL DEFAULT 0
+      )`,
+            sqlite: `CREATE TABLE IF NOT EXISTS workspace_user_groups (
+        id TEXT PRIMARY KEY,
+        org_id TEXT NOT NULL DEFAULT '',
+        name TEXT NOT NULL DEFAULT '',
+        member_emails_json TEXT NOT NULL DEFAULT '[]',
+        created_by_email TEXT NOT NULL DEFAULT '',
+        created_at INTEGER NOT NULL DEFAULT 0,
+        updated_at INTEGER NOT NULL DEFAULT 0
+      )`,
+        },
+    },
+    {
+        version: 9,
+        sql: `CREATE INDEX IF NOT EXISTS idx_workspace_user_groups_org_updated
+      ON workspace_user_groups (org_id, updated_at)`,
+    },
+];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.161.0",
+  "version": "0.161.2",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -427,8 +427,8 @@
     "y-protocols": "^1.0.7",
     "yjs": "^13.6.31",
     "zod": "^4.3.6",
-    "@agent-native/recap-cli": "0.5.4",
-    "@agent-native/toolkit": "^0.16.4"
+    "@agent-native/toolkit": "^0.16.4",
+    "@agent-native/recap-cli": "0.5.4"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",