@agent-native/core 0.170.0 → 0.171.1

package/corpus/templates/analytics/server/lib/workspace-feature-flags.ts

@@ -1,6 +1,10 @@
 import { randomUUID } from "node:crypto";
 
 import { signA2AToken } from "@agent-native/core/a2a";
+import {
+  ActionContractError,
+  AgentActionStopError,
+} from "@agent-native/core/action";
 import { isFeatureFlagEnabled } from "@agent-native/core/feature-flags";
 import { fetchOrgApps, type OrgApp } from "@agent-native/core/mcp";
 import { getOrgDomain } from "@agent-native/core/org";
@@ -9,6 +13,7 @@ import { VERIFIED_FLEET_FLAG_MUTATIONS } from "../../shared/feature-flags.js";
 import type { AnalyticsAdminContext } from "./db-admin-connections.js";
 
 const TARGET_TIMEOUT_MS = 3_000;
+const VERIFICATION_ATTEMPTS = 2;
 const CONCURRENCY = 4;
 
 export type FleetFlagState =
@@ -197,6 +202,8 @@ export type WorkspaceFeatureFlagFailurePhase =
   | "unsupported-target"
   | "target-action"
   | "persistence"
+  | "verification-timeout"
+  | "verification-network"
   | "verification";
 
 const FAILURE_MESSAGES: Record<WorkspaceFeatureFlagFailurePhase, string> = {
@@ -211,16 +218,42 @@ const FAILURE_MESSAGES: Record<WorkspaceFeatureFlagFailurePhase, string> = {
   "target-action": "The target app could not complete the feature flag action.",
   persistence:
     "The target app did not persist the requested feature flag rules.",
+  "verification-timeout":
+    "The feature flag change persisted, but the target app timed out during verification.",
+  "verification-network":
+    "The feature flag change persisted, but Analytics could not reach the target app during verification.",
   verification: "Analytics could not verify the persisted feature flag change.",
 };
 
-export class WorkspaceFeatureFlagFailure extends Error {
+export class WorkspaceFeatureFlagFailure extends AgentActionStopError {
   constructor(readonly phase: WorkspaceFeatureFlagFailurePhase) {
-    super(`[${phase}] ${FAILURE_MESSAGES[phase]}`);
+    const message = `[${phase}] ${FAILURE_MESSAGES[phase]}`;
+    const errorCode = `workspace_feature_flag_${phase.replace("-", "_")}`;
+    super(message, {
+      errorCode,
+      details: { phase },
+      toolResult: JSON.stringify({ error: errorCode, phase, message }),
+    });
     this.name = "WorkspaceFeatureFlagFailure";
   }
 }
 
+class WorkspaceFeatureFlagSetupFailure extends ActionContractError {
+  readonly phase: "directory" | "token-generation";
+
+  constructor(phase: "directory" | "token-generation") {
+    const message = `[${phase}] ${FAILURE_MESSAGES[phase]}`;
+    const errorCode = `workspace_feature_flag_${phase.replace("-", "_")}`;
+    super(message, {
+      errorCode,
+      details: { phase },
+      statusCode: 503,
+    });
+    this.name = "WorkspaceFeatureFlagSetupFailure";
+    this.phase = phase;
+  }
+}
+
 type TargetFailureReason = "token-generation" | "timeout" | "network";
 
 class TargetCallFailure extends Error {
@@ -242,6 +275,16 @@ export function classifyWorkspaceFeatureFlagTargetFailure(
   return "network";
 }
 
+function isSyntaxError(error: unknown): boolean {
+  return (
+    error instanceof SyntaxError ||
+    (!!error &&
+      typeof error === "object" &&
+      "name" in error &&
+      error.name === "SyntaxError")
+  );
+}
+
 function targetFailure(error: unknown): WorkspaceFeatureFlagFailure {
   const reason = classifyWorkspaceFeatureFlagTargetFailure(error);
   return new WorkspaceFeatureFlagFailure(reason);
@@ -259,10 +302,10 @@ async function resolveTargetApp(
       serviceOrgId: admin.orgId,
     });
   } catch {
-    throw new WorkspaceFeatureFlagFailure("directory");
+    throw new WorkspaceFeatureFlagSetupFailure("directory");
   }
   const app = apps.find((candidate) => candidate.id === appId);
-  if (!app) throw new WorkspaceFeatureFlagFailure("directory");
+  if (!app) throw new WorkspaceFeatureFlagSetupFailure("directory");
   return app;
 }
 
@@ -302,12 +345,41 @@ async function callTarget(
   let parsed: unknown = null;
   try {
     parsed = await response.json();
-  } catch {
-    // A legacy/non-action endpoint is classified below without reflecting body.
+  } catch (error) {
+    const successfulResponse = response.status >= 200 && response.status < 300;
+    if (successfulResponse && !isSyntaxError(error))
+      throw new TargetCallFailure(
+        classifyWorkspaceFeatureFlagTargetFailure(error),
+      );
+    // Invalid legacy payloads and non-success statuses are classified below.
   }
   return { status: response.status, body: parsed };
 }
 
+async function readBackTarget(
+  app: OrgApp,
+  admin: AnalyticsAdminContext,
+  orgDomain: string,
+): Promise<{ status: number; body: unknown }> {
+  for (let attempt = 1; attempt <= VERIFICATION_ATTEMPTS; attempt += 1) {
+    try {
+      return await callTarget(app, admin, "list-feature-flags", {}, orgDomain);
+    } catch (error) {
+      const reason = classifyWorkspaceFeatureFlagTargetFailure(error);
+      const retryable = reason === "timeout" || reason === "network";
+      if (retryable && attempt < VERIFICATION_ATTEMPTS) continue;
+      throw new WorkspaceFeatureFlagFailure(
+        reason === "timeout"
+          ? "verification-timeout"
+          : reason === "network"
+            ? "verification-network"
+            : reason,
+      );
+    }
+  }
+  throw new WorkspaceFeatureFlagFailure("verification");
+}
+
 export function classifyWorkspaceFeatureFlagList(
   app: OrgApp,
   result: { status: number; body: unknown },
@@ -404,9 +476,10 @@ export async function setWorkspaceFeatureFlag(
   try {
     orgDomain = (await getOrgDomain(admin.orgId))?.trim().toLowerCase();
   } catch {
-    throw new WorkspaceFeatureFlagFailure("token-generation");
+    throw new WorkspaceFeatureFlagSetupFailure("token-generation");
   }
-  if (!orgDomain) throw new WorkspaceFeatureFlagFailure("token-generation");
+  if (!orgDomain)
+    throw new WorkspaceFeatureFlagSetupFailure("token-generation");
   let result: Awaited<ReturnType<typeof callTarget>>;
   try {
     result = await callTarget(
@@ -417,6 +490,8 @@ export async function setWorkspaceFeatureFlag(
       orgDomain,
     );
   } catch (error) {
+    if (classifyWorkspaceFeatureFlagTargetFailure(error) === "token-generation")
+      throw new WorkspaceFeatureFlagSetupFailure("token-generation");
     throw targetFailure(error);
   }
   if (result.status === 401 || result.status === 403)
@@ -465,18 +540,7 @@ export async function setWorkspaceFeatureFlag(
     return mutation;
   }
 
-  let readBack: Awaited<ReturnType<typeof callTarget>>;
-  try {
-    readBack = await callTarget(
-      app,
-      admin,
-      "list-feature-flags",
-      {},
-      orgDomain,
-    );
-  } catch (error) {
-    throw targetFailure(error);
-  }
+  const readBack = await readBackTarget(app, admin, orgDomain);
   if (readBack.status === 401 || readBack.status === 403)
     throw new WorkspaceFeatureFlagFailure("authorization");
   if (readBack.status === 404 || readBack.status === 405)

package/dist/action.d.ts

@@ -130,8 +130,10 @@ export interface ActionRunContext {
  */
 export type ActionAuthorize<TArgs> = (args: TArgs, ctx?: ActionRunContext) => void | boolean | Promise<void | boolean>;
 export interface AgentActionStopOptions {
-    /** Optional stable code surfaced in run metadata and tests. */
+    /** Optional stable code safe to surface in run metadata and action transports. */
     errorCode?: string;
+    /** Safe structured context for callers. Never include secrets or raw driver errors. */
+    details?: Record<string, unknown>;
     /** Optional short tool-result text. Defaults to the user-facing message. */
     toolResult?: string;
 }
@@ -164,6 +166,7 @@ export declare function isActionContractError(error: unknown): error is ActionCo
 export declare class AgentActionStopError extends Error {
     readonly agentNativeStop = true;
     readonly errorCode?: string;
+    readonly details?: Record<string, unknown>;
     readonly toolResult?: string;
     constructor(message: string, options?: AgentActionStopOptions);
 }

package/dist/action.js

@@ -34,11 +34,13 @@ export function isActionContractError(error) {
 export class AgentActionStopError extends Error {
     agentNativeStop = true;
     errorCode;
+    details;
     toolResult;
     constructor(message, options = {}) {
         super(message);
         this.name = "AgentActionStopError";
         this.errorCode = options.errorCode;
+        this.details = options.details;
         this.toolResult = options.toolResult;
     }
 }

package/dist/app-config/auth.d.ts

@@ -1,4 +1,5 @@
 import { z } from "zod";
 export declare const authConfig: z.ZodObject<{
     disableDesktopSsoFallbackInDevelopment: z.ZodDefault<z.ZodBoolean>;
+    requireEmailVerification: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;

package/dist/app-config/auth.js

@@ -4,4 +4,11 @@ export const authConfig = z.object({
         env: "AGENT_NATIVE_DISABLE_DESKTOP_SSO_FALLBACK",
         doc: "Disable the loopback Desktop SSO fallback in development so isolated acceptance runs can use their configured local identity. Ignored in production.",
     }),
+    // Deliberately optional rather than defaulted: unset means "derive from the
+    // deployment", which is not a boolean. A default here would erase the
+    // difference between an operator who chose a policy and one who never spoke.
+    requireEmailVerification: z.boolean().optional().meta({
+        env: "AUTH_REQUIRE_EMAIL_VERIFICATION",
+        doc: "Whether password signup must verify the email address before it gets a session. Unset derives it: hosted deployments require it, local development skips it. Setting it false accepts an unverified email as a login credential, including in production.",
+    }),
 });

package/dist/app-config/schema.d.ts

@@ -38,6 +38,7 @@ export declare const appConfigSchema: z.ZodObject<{
     }, z.core.$strip>>;
     auth: z.ZodPrefault<z.ZodObject<{
         disableDesktopSsoFallbackInDevelopment: z.ZodDefault<z.ZodBoolean>;
+        requireEmailVerification: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
     integrations: z.ZodPrefault<z.ZodObject<{
         allowUnverifiedWebhooks: z.ZodDefault<z.ZodBoolean>;

package/dist/client/use-action.js

@@ -366,6 +366,14 @@ async function performActionFetch(name, method, params, options) {
         }
         const error = new Error(`Action ${name} failed: ${message}`);
         error.status = res.status;
+        if (typeof data?.errorCode === "string") {
+            error.errorCode = data.errorCode;
+        }
+        if (data?.details &&
+            typeof data.details === "object" &&
+            !Array.isArray(data.details)) {
+            error.details = data.details;
+        }
         throw error;
     }
     // 2xx but the body couldn't even be read (mid-stream abort, decode failure,

package/dist/collab/awareness.d.ts

@@ -62,11 +62,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
+    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
-    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -77,9 +77,9 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
+    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
-    error?: undefined;
 }>>;

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/file-upload/actions/upload-image.d.ts

@@ -17,11 +17,11 @@ declare const _default: import("../../action.js").ActionDefinition<{
     id?: undefined;
     provider?: undefined;
 } | {
+    error?: undefined;
     configured?: undefined;
     connectPath?: undefined;
     url: string;
     id: string;
     provider: string;
-    error?: undefined;
 }>;
 export default _default;

package/dist/progress/routes.d.ts

@@ -15,6 +15,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;

package/dist/server/action-routes.js

@@ -543,19 +543,23 @@ export function mountActionRoutes(nitroApp, actions, options) {
                     setResponseStatus(event, status);
                     // Only echo the raw message for known-safe cases:
                     //  - validation errors (deterministic, parameter-shape only)
+                    //  - action contract errors (explicitly safe on every transport)
                     //  - explicit user-facing errors (AgentActionStopError / fail())
                     //  - errors with an explicit statusCode < 500 (client errors)
                     // For uncategorized 500s, return a generic message and keep the
                     // real detail server-side only — it can contain DB/driver/
                     // upstream text we must not leak to HTTP callers.
                     const isUserFacing = isValidationError ||
+                        isActionContractError(err) ||
                         isAgentActionStopError(err) ||
                         (explicitStatus !== undefined && explicitStatus < 500);
                     if (isUserFacing) {
-                        return isActionContractError(err)
+                        return isActionContractError(err) || isAgentActionStopError(err)
                             ? {
                                 error: msg,
-                                errorCode: err.errorCode,
+                                ...(typeof err.errorCode === "string"
+                                    ? { errorCode: err.errorCode }
+                                    : {}),
                                 ...(err.details === undefined
                                     ? {}
                                     : { details: err.details }),

package/dist/server/better-auth-instance.js

@@ -14,6 +14,7 @@ import { jwt } from "better-auth/plugins/jwt";
 import { magicLink } from "better-auth/plugins/magic-link";
 import { pgTable, text as pgText, timestamp as pgTimestamp, boolean as pgBoolean, } from "drizzle-orm/pg-core";
 import { sqliteTable, text as sqliteText, integer as sqliteInteger, } from "drizzle-orm/sqlite-core";
+import { getAppConfig } from "../app-config/index.js";
 import { TEMPLATES } from "../cli/templates-meta.js";
 import { getDbExec, isPostgres } from "../db/client.js";
 import { getDialect, getCloudflareD1Binding, getDatabaseUrl, getDatabaseAuthToken, closePgliteClients, getPgliteClient, isPgliteUrl, loadPgliteDrizzle, pgPoolOptions, neonPoolOptions, guardNeonPool, sharedDbPool, onSharedDbPoolsClosed, onSharedDbPoolReplaced, prepareLocalSqliteUrl, sqliteFilenameFromUrl, retrySqliteBusy, } from "../db/client.js";
@@ -266,6 +267,19 @@ export function isDeployPreview() {
     return deployContext === "deploy-preview";
 }
 export function resolveEmailPasswordAuthPolicy(emailConfigured) {
+    const declared = getAppConfig().auth.requireEmailVerification;
+    if (declared !== undefined) {
+        // A declared policy is the whole policy — it outranks both the hosted
+        // derivation below and AUTH_SKIP_EMAIL_VERIFICATION. Choosing `false` is
+        // choosing to accept an unverified email as a login credential, so the
+        // signup lock that exists to prevent exactly that comes off with it.
+        return {
+            requireEmailVerification: declared && emailConfigured,
+            // Verification that no provider can deliver would strand every new
+            // account on an unverifiable signup, so refuse the signup instead.
+            disableSignUp: declared && !emailConfigured,
+        };
+    }
     const hosted = process.env.NODE_ENV === "production" || isDeployPreview();
     return {
         requireEmailVerification: emailConfigured && (hosted || !shouldSkipEmailVerification()),

package/dist/server/realtime-token.d.ts

@@ -26,8 +26,8 @@ export declare function createRealtimeTokenHandler(): import("h3").EventHandlerW
     expiresAt?: undefined;
     ttlSeconds?: undefined;
 } | {
+    error?: undefined;
     token: string;
     expiresAt: string;
     ttlSeconds: number;
-    error?: undefined;
 }>>;

package/dist/vite/client.js

@@ -2924,6 +2924,13 @@ function createAgentNativeConfig(options = {}, command, userConfig = {}, mode =
     const forcePollingWatch = process.env.CHOKIDAR_USEPOLLING === "1";
     const pollingWatchInterval = Number(process.env.CHOKIDAR_INTERVAL ?? 1000);
     const userWatch = userConfig.server?.watch ?? {};
+    // Vite 8 defines `rollupOptions` on `build`/`optimizeDeps` as a getter alias
+    // of `rolldownOptions`. Spreading the section copies the alias as a plain own
+    // property, so returning our own `rolldownOptions` alongside it makes the two
+    // diverge and Vite warns that this plugin set both — then ignores the
+    // `rollupOptions` half regardless. Drop the alias from what we spread back.
+    const { rollupOptions: _buildRollupOptionsAlias, ...userBuild } = userConfig.build ?? {};
+    const { rollupOptions: _depsRollupOptionsAlias, ...userOptimizeDeps } = userConfig.optimizeDeps ?? {};
     return {
         logLevel: options.logLevel ??
             userConfig.logLevel ??
@@ -3013,7 +3020,7 @@ function createAgentNativeConfig(options = {}, command, userConfig = {}, mode =
             },
         },
         build: {
-            ...(userConfig.build ?? {}),
+            ...userBuild,
             outDir: options.outDir ?? userConfig.build?.outDir ?? "dist/spa",
             // Vite 8 defaults CSS minification to Lightning CSS, which collapses a
             // `backdrop-filter` + `-webkit-backdrop-filter` pair down to only the
@@ -3096,7 +3103,7 @@ function createAgentNativeConfig(options = {}, command, userConfig = {}, mode =
                 ],
             },
         optimizeDeps: {
-            ...(userConfig.optimizeDeps ?? {}),
+            ...userOptimizeDeps,
             include: [
                 ...getDefaultOptimizeDeps(cwd),
                 ...(hasDep("@agent-native/pinpoint", cwd)

package/docs/content/authentication.mdx

@@ -210,6 +210,24 @@ verification and the signup verification email is not sent. It does not change
 magic-link delivery. Use it only for QA or preview environments, and name test accounts with a `+qa` address
 (`name+qa@example.com`) so they are easy to identify.
 
+## Email Verification Policy {#email-verification-policy}
+
+`AUTH_SKIP_EMAIL_VERIFICATION` is a local and QA convenience — a hosted
+deployment ignores it. To state the policy for any environment, production
+included, declare it in config:
+
+```ts
+defineAppConfig({ auth: { requireEmailVerification: false } });
+```
+
+The deployment alias is `AUTH_REQUIRE_EMAIL_VERIFICATION=0`. A declared value
+outranks both `AUTH_SKIP_EMAIL_VERIFICATION` and the per-environment default.
+
+`false` accepts an unverified address as a login credential — anyone can claim
+any email — so use it only where signup is already restricted another way.
+`true` on a deployment with no email provider disables password signup instead,
+because the verification could never be delivered.
+
 ## Social Providers {#social-providers}
 
 Set environment variables to enable social login. Better Auth auto-detects them:
@@ -477,27 +495,28 @@ The default `/_agent-native/google/auth-url` route does this automatically — o
 
 ## Environment Variables {#environment-variables}
 
-| Variable                                | Purpose                                                                                                                                      |
-| --------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------- |
-| `BETTER_AUTH_SECRET`                    | Signing key for Better Auth (auto-generated if not set)                                                                                      |
-| `AUTH_SKIP_EMAIL_VERIFICATION`          | Set to `1` in QA/preview environments to let password-fallback signups proceed without verification; local dev/test skips by default         |
-| `AUTH_MAGIC_LINK`                       | Set to `0`, `false`, or `off` to force the email/password fallback even when outbound email is ready                                         |
-| `AUTH_DISABLED`                         | Set to `true` or `1` to skip login/signup; all requests run as one shared user (local dev/preview only — not for production with real users) |
-| `AGENT_NATIVE_DISABLE_AUTO_DEV_ACCOUNT` | Set to `1` to disable localhost auto-sign-in on a fresh dev database                                                                         |
-| `AUTH_MODE`                             | `local` resolves CLI/agent identity only (which dev user `pnpm action` runs as); never a browser login bypass                                |
-| `COOKIE_DOMAIN`                         | Opt into shared session cookies across same-database subdomains (see [Cookie Realms](#cookie-realms))                                        |
-| `AGENT_NATIVE_WORKSPACE`                | `1` runs in workspace mode — one shared session realm across workspace apps                                                                  |
-| `AGENT_NATIVE_SHARE_COOKIE_DOMAIN`      | Set with `COOKIE_DOMAIN` to share one auth database across first-party subdomains                                                            |
-| `OAUTH_STATE_SECRET`                    | Dedicated HMAC key for OAuth state envelopes (see [Security — OAuth State Signing](/docs/security#oauth-state))                              |
-| `GOOGLE_SIGN_IN_CLIENT_ID`              | Preferred low-scope Google OAuth client ID for app login                                                                                     |
-| `GOOGLE_SIGN_IN_CLIENT_SECRET`          | Preferred low-scope Google OAuth secret for app login                                                                                        |
-| `GOOGLE_CLIENT_ID`                      | Legacy Google login fallback, and provider OAuth client ID for Google API integrations                                                       |
-| `GOOGLE_CLIENT_SECRET`                  | Legacy Google login fallback, and provider OAuth secret for Google API integrations                                                          |
-| `GITHUB_CLIENT_ID`                      | Enable GitHub OAuth                                                                                                                          |
-| `GITHUB_CLIENT_SECRET`                  | GitHub OAuth secret                                                                                                                          |
-| `ACCESS_TOKEN`                          | Static bearer fallback for MCP/connect clients; not browser auth                                                                             |
-| `ACCESS_TOKENS`                         | Comma-separated static bearer fallbacks for MCP/connect clients; not browser auth                                                            |
-| `A2A_SECRET`                            | Shared secret for JWT-signed A2A cross-app identity verification and, when present, MCP OAuth access-token signing                           |
+| Variable                                | Purpose                                                                                                                                                |
+| --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `BETTER_AUTH_SECRET`                    | Signing key for Better Auth (auto-generated if not set)                                                                                                |
+| `AUTH_SKIP_EMAIL_VERIFICATION`          | Set to `1` in QA/preview environments to let password-fallback signups proceed without verification; local dev/test skips by default                   |
+| `AUTH_REQUIRE_EMAIL_VERIFICATION`       | Set to `0` or `1` to declare the password-signup verification policy for any environment, production included; outranks `AUTH_SKIP_EMAIL_VERIFICATION` |
+| `AUTH_MAGIC_LINK`                       | Set to `0`, `false`, or `off` to force the email/password fallback even when outbound email is ready                                                   |
+| `AUTH_DISABLED`                         | Set to `true` or `1` to skip login/signup; all requests run as one shared user (local dev/preview only — not for production with real users)           |
+| `AGENT_NATIVE_DISABLE_AUTO_DEV_ACCOUNT` | Set to `1` to disable localhost auto-sign-in on a fresh dev database                                                                                   |
+| `AUTH_MODE`                             | `local` resolves CLI/agent identity only (which dev user `pnpm action` runs as); never a browser login bypass                                          |
+| `COOKIE_DOMAIN`                         | Opt into shared session cookies across same-database subdomains (see [Cookie Realms](#cookie-realms))                                                  |
+| `AGENT_NATIVE_WORKSPACE`                | `1` runs in workspace mode — one shared session realm across workspace apps                                                                            |
+| `AGENT_NATIVE_SHARE_COOKIE_DOMAIN`      | Set with `COOKIE_DOMAIN` to share one auth database across first-party subdomains                                                                      |
+| `OAUTH_STATE_SECRET`                    | Dedicated HMAC key for OAuth state envelopes (see [Security — OAuth State Signing](/docs/security#oauth-state))                                        |
+| `GOOGLE_SIGN_IN_CLIENT_ID`              | Preferred low-scope Google OAuth client ID for app login                                                                                               |
+| `GOOGLE_SIGN_IN_CLIENT_SECRET`          | Preferred low-scope Google OAuth secret for app login                                                                                                  |
+| `GOOGLE_CLIENT_ID`                      | Legacy Google login fallback, and provider OAuth client ID for Google API integrations                                                                 |
+| `GOOGLE_CLIENT_SECRET`                  | Legacy Google login fallback, and provider OAuth secret for Google API integrations                                                                    |
+| `GITHUB_CLIENT_ID`                      | Enable GitHub OAuth                                                                                                                                    |
+| `GITHUB_CLIENT_SECRET`                  | GitHub OAuth secret                                                                                                                                    |
+| `ACCESS_TOKEN`                          | Static bearer fallback for MCP/connect clients; not browser auth                                                                                       |
+| `ACCESS_TOKENS`                         | Comma-separated static bearer fallbacks for MCP/connect clients; not browser auth                                                                      |
+| `A2A_SECRET`                            | Shared secret for JWT-signed A2A cross-app identity verification and, when present, MCP OAuth access-token signing                                     |
 
 ## What's next
 

package/docs/content/environment-variables.mdx

@@ -87,6 +87,7 @@ public app behavior, use the config paths above instead.
 | `AUTH_DISABLED`                                | Disables auth for local or preview-only work. Unset already means false.                                                                                                | `true` or `1`; never use on a public production app.                                                                    |
 | `AUTH_MAGIC_LINK`                              | Controls the password-first versus magic-link sign-in path.                                                                                                             | `0` keeps password-first sign-in; otherwise a configured email transport can enable magic links.                        |
 | `AUTH_SKIP_EMAIL_VERIFICATION`                 | Skips signup email verification for local QA or previews.                                                                                                               | `1`; never use it to weaken production auth.                                                                            |
+| `AUTH_REQUIRE_EMAIL_VERIFICATION`              | Declares whether password signup must verify the email address, in any environment.                                                                                     | `0` or `1`; outranks `AUTH_SKIP_EMAIL_VERIFICATION`. `0` accepts an unverified address as a login credential.           |
 | `ACCESS_TOKEN` / `ACCESS_TOKENS`               | Static bearer fallback for MCP and Connect clients.                                                                                                                     | One token or a delimited token list; these are not browser auth.                                                        |
 | `AGENT_PROD_CODE_EXECUTION`                    | Production code-execution policy.                                                                                                                                       | `off`, `sandboxed`, or `trusted`. See [Production Code Execution](/docs/actions-agent-tools#production-code-execution). |
 | `AGENT_NATIVE_SSR_CACHE`                       | Deployment-wide public SSR shell cache policy.                                                                                                                          | Unset/`on`, `off`, or a duration such as `30s` or `5m`. See [SSR Caching](/docs/ssr-caching).                           |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.170.0",
+  "version": "0.171.1",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {