@agent-native/core 0.174.1 → 0.174.2-nightly-20260825214843

package/corpus/README.md

@@ -31,4 +31,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- template files: 8614
+- template files: 8615

package/corpus/templates/forms/.agents/skills/form-building/SKILL.md

@@ -68,6 +68,10 @@ Each field is a JSON object:
 - `label` — display label
 - `required` — boolean
 
+Always pass fields as these complete objects. Never encode a field as shorthand
+text such as `text: Enter a name`; `patch-form-fields` upserts also require the
+field `id` so they cannot be ambiguous.
+
 ### Optional properties
 - `placeholder` — input placeholder text
 - `description` — help text below the field

package/corpus/templates/forms/actions/create-form.ts

@@ -49,7 +49,9 @@ export default defineAction({
     fields: z
       .union([z.string(), z.array(z.any())])
       .optional()
-      .describe("Array of form fields (or JSON string of the same)"),
+      .describe(
+        "Array of complete field objects with id, type, label, and required (or JSON string of the same); never use shorthand strings such as 'text: Enter a name'.",
+      ),
     settings: z
       .union([z.string(), z.record(z.string(), z.any())])
       .optional()

package/corpus/templates/forms/actions/patch-form-fields.ts

@@ -24,7 +24,10 @@ import { z } from "zod";
 import { getDb, schema } from "../server/db/index.js";
 import { applyFieldOps } from "../server/lib/merge-fields.js";
 import { invalidatePublicFormCache } from "../server/lib/public-form-ssr.js";
-import { assertValidFields } from "../server/lib/validate-fields.js";
+import {
+  assertValidFields,
+  normalizePersistedFields,
+} from "../server/lib/validate-fields.js";
 import type { FormField } from "../shared/types.js";
 import { assertPublishableForm } from "./lib/assert-publishable-form.js";
 
@@ -61,7 +64,11 @@ export function withFormLock<T>(
 const fieldOpSchema = z.union([
   z.object({
     op: z.literal("upsert"),
-    field: z.record(z.string(), z.any()),
+    field: z
+      .record(z.string(), z.any())
+      .describe(
+        "Complete field object with id, type, label, and required; never use shorthand strings.",
+      ),
   }),
   z.object({
     op: z.literal("remove"),
@@ -117,7 +124,9 @@ export default defineAction({
       // Parse current fields from the DB row.
       let currentFields: FormField[] = [];
       try {
-        currentFields = JSON.parse(existing.fields) as FormField[];
+        currentFields = normalizePersistedFields(
+          JSON.parse(existing.fields),
+        ) as FormField[];
       } catch {
         currentFields = [];
       }

package/corpus/templates/forms/actions/update-form.ts

@@ -35,7 +35,9 @@ export default defineAction({
     fields: z
       .union([z.string(), z.array(z.any())])
       .optional()
-      .describe("Array of form fields (or JSON string of the same)"),
+      .describe(
+        "Array of complete field objects with id, type, label, and required (or JSON string of the same); never use shorthand strings such as 'text: Enter a name'.",
+      ),
     settings: z
       .union([z.string(), z.record(z.string(), z.any())])
       .optional()

package/corpus/templates/forms/changelog/2026-08-25-forms-agents-retry-invalid-field-edits.md

@@ -0,0 +1,5 @@
+---
+type: fixed
+date: 2026-08-25
+---
+Forms agents now retry rejected field edits with valid field objects.

package/corpus/templates/forms/server/lib/validate-fields.ts

@@ -4,6 +4,19 @@
 // runtime — an unrestricted id like `x" onfocus="alert(1)` would otherwise
 // stored-XSS every anonymous submitter of a published form.
 export const FIELD_ID_PATTERN = /^[A-Za-z0-9_-]+$/;
+const FIELD_TYPES = new Set([
+  "text",
+  "email",
+  "number",
+  "textarea",
+  "select",
+  "multiselect",
+  "checkbox",
+  "radio",
+  "date",
+  "rating",
+  "scale",
+]);
 const CONDITIONAL_OPERATORS = new Set(["equals", "not_equals", "contains"]);
 
 /**
@@ -49,6 +62,28 @@ export function normalizeFieldIds(fields: unknown): unknown {
   });
 }
 
+/**
+ * Keeps granular edits compatible with fields written before the current
+ * schema. The UI already renders unknown types as text and treats a missing
+ * required flag as false, so patch reads must make the same repair before the
+ * strict persistence check runs.
+ */
+export function normalizePersistedFields(fields: unknown): unknown {
+  if (!Array.isArray(fields)) return fields;
+  return fields.map((field) => {
+    if (field == null || typeof field !== "object" || Array.isArray(field)) {
+      return field;
+    }
+    const f = field as Record<string, unknown>;
+    return {
+      ...f,
+      type:
+        typeof f.type === "string" && FIELD_TYPES.has(f.type) ? f.type : "text",
+      required: f.required === undefined ? false : f.required,
+    };
+  });
+}
+
 export function assertValidFields(fields: unknown): void {
   if (!Array.isArray(fields)) {
     throw new Error("fields must be an array");
@@ -71,6 +106,18 @@ export function assertValidFields(fields: unknown): void {
     }
     seenIds.add(id);
 
+    if (typeof f.type !== "string" || !FIELD_TYPES.has(f.type)) {
+      throw new Error(
+        `field #${idx + 1} has an invalid type ${JSON.stringify(f.type)}`,
+      );
+    }
+    if (typeof f.label !== "string") {
+      throw new Error(`field #${idx + 1} label must be a string`);
+    }
+    if (typeof f.required !== "boolean") {
+      throw new Error(`field #${idx + 1} required must be a boolean`);
+    }
+
     const cond = f.conditional;
     if (cond !== undefined) {
       if (cond == null || typeof cond !== "object") {

package/corpus/templates/forms/server/plugins/agent-chat.ts

@@ -11,6 +11,7 @@ export const FORMS_SYSTEM_PROMPT = `## Agent-Native Forms
 You are the in-app agent for Agent-Native Forms, a chat-first form builder and response workspace. Help users create, edit, publish, share, and analyze forms through the registered actions. The actions are the source of truth for database access, validation, permissions, UI sync, and business logic.
 
 Core rules:
+- Build every field as a complete object with id, type, label, and required; never send shorthand strings such as "text: Enter a name". If a form or field action rejects its payload, correct the arguments and retry in the same turn, then verify the saved fields. If a draft was created before the failure, repair that draft instead of explaining the fix and stopping.
 - Use Forms actions instead of raw database access. Raw database tools are not available in this app.
 - Never hardcode API keys, tokens, webhook URLs, signing secrets, customer data, or credential-looking literals. Use placeholders or configured integrations.
 - Inspect the current state when it matters. Use \`view-screen\` when the active form, selected field, publish state, response table, or current route is unclear.

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/file-upload/actions/upload-image.d.ts

@@ -17,11 +17,11 @@ declare const _default: import("../../action.js").ActionDefinition<{
     id?: undefined;
     provider?: undefined;
 } | {
+    error?: undefined;
     configured?: undefined;
     connectPath?: undefined;
     url: string;
     id: string;
     provider: string;
-    error?: undefined;
 }>;
 export default _default;

package/dist/observability/routes.d.ts

@@ -41,27 +41,27 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
+    error?: undefined;
+    ok?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
+} | {
     error?: undefined;
     ok?: undefined;
-} | {
     summary?: undefined;
     spans?: undefined;
     id: string;
-    error?: undefined;
-    ok?: undefined;
 } | {
+    ok?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
     error: any;
-    ok?: undefined;
 } | {
+    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
     ok: boolean;
-    error?: undefined;
 }>>;

package/dist/secrets/routes.d.ts

@@ -34,37 +34,37 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    status?: undefined;
     ok?: undefined;
+    status?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     status: string;
-    error?: undefined;
 } | {
+    ok?: undefined;
     error: string;
     removed?: undefined;
-    ok?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
  * or the current stored value without changing anything.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+    ok?: undefined;
     error: string;
     note?: undefined;
-    ok?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note?: undefined;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note: string;
-    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,11 +95,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;

package/dist/server/agent-engine-api-key-route.d.ts

@@ -34,10 +34,10 @@ export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scop
 export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: any;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
-    error?: undefined;
 }>>;
 export {};

package/dist/server/onboarding-html.js

@@ -2593,7 +2593,10 @@ ${signInJourneyInlineScript()}
       }
     }
     function __anFinishOAuthExchange(ret, flowId, sessionToken) {
+      __anStopOAuthPopupWatch();
+      __anStopNativeOAuthAbandonment();
       __anGoogleSignInInFlight = false;
+      __anClearGoogleSignInFlow();
       __anMagicLinkInFlight = false;
       if (__anIsBuilderPreview()) {
         if (sessionToken) {
@@ -2863,8 +2866,18 @@ ${identitySsoScript}
       return __anIsAgentNativeDesktop() ? 'redirect' : 'popup';
     }
     var __anOAuthPollTimer = null;
+    var __anOAuthPopupWatchTimer = null;
+    var __anOAuthPopupCloseGraceTimer = null;
+    var __anOAuthPopupCloseGraceMs = 5000;
+    var __anNativeOAuthFlowId = null;
+    var __anNativeOAuthRequestPending = false;
+    var __anNativeOAuthReturnObserved = false;
+    var __anNativeOAuthAbandonGraceTimer = null;
+    var __anNativeOAuthAbandonGraceMs = 5000;
     var __anOAuthPollCount = 0;
     var __anGoogleSignInInFlight = false;
+    var __anGoogleSignInFlowId = null;
+    var __anGoogleSignInRecoveryFlowId = null;
     var __anMagicLinkInFlight = false;
     var __anGoogleRecoverBound = false;
     function __anNewOAuthFlowId() {
@@ -2921,8 +2934,139 @@ ${identitySsoScript}
         __anOAuthPollTimer = null;
       }
     }
+    function __anStopOAuthPopupWatch() {
+      if (__anOAuthPopupWatchTimer) {
+        clearInterval(__anOAuthPopupWatchTimer);
+        __anOAuthPopupWatchTimer = null;
+      }
+      if (__anOAuthPopupCloseGraceTimer) {
+        clearTimeout(__anOAuthPopupCloseGraceTimer);
+        __anOAuthPopupCloseGraceTimer = null;
+      }
+    }
+    function __anStopNativeOAuthAbandonment() {
+      __anCancelNativeOAuthAbandonment();
+      __anNativeOAuthFlowId = null;
+      __anNativeOAuthRequestPending = false;
+    }
+    function __anCancelNativeOAuthAbandonment() {
+      if (__anNativeOAuthAbandonGraceTimer) {
+        clearTimeout(__anNativeOAuthAbandonGraceTimer);
+        __anNativeOAuthAbandonGraceTimer = null;
+      }
+      __anNativeOAuthReturnObserved = false;
+    }
+    function __anBeginNativeOAuth(flowId) {
+      __anStopNativeOAuthAbandonment();
+      __anNativeOAuthFlowId = flowId;
+      __anNativeOAuthRequestPending = true;
+      __anNativeOAuthReturnObserved = false;
+    }
+    function __anMarkNativeOAuthPolling(flowId) {
+      if (__anNativeOAuthFlowId !== flowId) return;
+      __anNativeOAuthRequestPending = false;
+    }
+    function __anIsCurrentNativeOAuth(flowId) {
+      return __anNativeOAuthFlowId === flowId && __anIsCurrentGoogleSignInFlow(flowId);
+    }
+    function __anFinalizeNativeOAuthAbandonment(flowId) {
+      if (!__anIsCurrentNativeOAuth(flowId) || !__anOAuthPollTimer) return;
+      if (document.visibilityState === 'hidden') {
+        __anCancelNativeOAuthAbandonment();
+        return;
+      }
+      __anStopNativeOAuthAbandonment();
+      if (__anInvalidateGoogleSignInFlow(flowId)) {
+        __anStopOAuthExchangePolling();
+        __anRecoverGoogleSignInAfterReturn(flowId);
+      }
+    }
+    function __anScheduleNativeOAuthAbandonment(flowId) {
+      // Returning focus is the only signal that the system-browser ceremony was
+      // abandoned. Preserve the exchange poll briefly for a late deep-link.
+      if (
+        !__anIsCurrentNativeOAuth(flowId) ||
+        __anNativeOAuthRequestPending ||
+        !__anNativeOAuthReturnObserved ||
+        !__anOAuthPollTimer ||
+        __anNativeOAuthAbandonGraceTimer
+      ) return;
+      __anNativeOAuthAbandonGraceTimer = setTimeout(function() {
+        __anNativeOAuthAbandonGraceTimer = null;
+        __anFinalizeNativeOAuthAbandonment(flowId);
+      }, __anNativeOAuthAbandonGraceMs);
+    }
+    function __anBeginGoogleSignInFlow(flowId) {
+      __anGoogleSignInFlowId = flowId;
+      __anGoogleSignInRecoveryFlowId = null;
+      __anGoogleSignInInFlight = true;
+    }
+    function __anIsCurrentGoogleSignInFlow(flowId) {
+      return __anGoogleSignInInFlight && __anGoogleSignInFlowId === flowId;
+    }
+    function __anClearGoogleSignInFlow() {
+      __anGoogleSignInFlowId = null;
+      __anGoogleSignInRecoveryFlowId = null;
+    }
+    function __anInvalidateGoogleSignInFlow(flowId) {
+      if (!__anIsCurrentGoogleSignInFlow(flowId)) return false;
+      __anGoogleSignInFlowId = null;
+      __anGoogleSignInRecoveryFlowId = flowId;
+      return true;
+    }
+    function __anCanRecoverGoogleSignInFlow(flowId, expectedFlowId) {
+      // Focus can return while either the system-browser exchange or the popup
+      // exchange is still active. Let that exchange finish before recovering.
+      if (!flowId && (__anNativeOAuthFlowId || __anOAuthPollTimer || __anOAuthPopupWatchTimer)) return false;
+      if (flowId) {
+        return __anGoogleSignInInFlight &&
+          !__anGoogleSignInFlowId &&
+          __anGoogleSignInRecoveryFlowId === flowId;
+      }
+      return __anGoogleSignInInFlight && __anGoogleSignInFlowId === expectedFlowId;
+    }
+    function __anFinalizeOAuthPopupClose(flowId) {
+      if (!__anIsCurrentGoogleSignInFlow(flowId)) return;
+      __anOAuthPopupCloseGraceTimer = null;
+      if (__anInvalidateGoogleSignInFlow(flowId)) {
+        __anStopOAuthExchangePolling();
+        __anRecoverGoogleSignInAfterReturn(flowId);
+      }
+    }
+    function __anHandleOAuthPopupClosed(flowId) {
+      __anStopOAuthPopupWatch();
+      // The success callback closes its tab 250ms after staging the token, but
+      // the opener polls once per second. Let an active exchange win that race.
+      if (__anOAuthPollTimer) {
+        __anOAuthPopupCloseGraceTimer = setTimeout(function() {
+          __anFinalizeOAuthPopupClose(flowId);
+        }, __anOAuthPopupCloseGraceMs);
+        return;
+      }
+      __anFinalizeOAuthPopupClose(flowId);
+    }
+    function __anWatchOAuthPopupClose(popup, flowId) {
+      __anStopOAuthPopupWatch();
+      __anOAuthPopupWatchTimer = setInterval(function() {
+        if (!__anIsCurrentGoogleSignInFlow(flowId)) {
+          __anStopOAuthPopupWatch();
+          return;
+        }
+        var closed = false;
+        try {
+          closed = popup.closed === true;
+        } catch(e) {
+          __anHandleOAuthPopupClosed(flowId);
+          return;
+        }
+        if (!closed) return;
+        __anHandleOAuthPopupClosed(flowId);
+      }, 500);
+    }
     function __anShowAuthExchangeError(err, btn, message, kind) {
       __anStopOAuthExchangePolling();
+      __anStopOAuthPopupWatch();
+      __anStopNativeOAuthAbandonment();
       err.textContent = message;
       err.classList.add('show', 'error');
       btn.disabled = false;
@@ -2931,22 +3075,30 @@ ${identitySsoScript}
         showMagicLinkForm();
       } else {
         __anGoogleSignInInFlight = false;
+        __anClearGoogleSignInFlow();
       }
     }
     function __anShowOAuthError(err, btn, message) {
       __anShowAuthExchangeError(err, btn, message, 'google');
     }
-    function __anRecoverGoogleSignInAfterReturn() {
+    function __anRecoverGoogleSignInAfterReturn(flowId) {
       // The user left for the Google sign-in window and came back. If the flow
       // never completed (e.g. they closed the window to switch profiles), the
       // button is stuck disabled with no error path firing for up to 5 minutes.
       // Re-enable it so they can retry. Wait briefly first so a genuinely
       // in-flight exchange can still finish and navigate without a flicker.
-      if (!__anGoogleSignInInFlight) return;
+      if (!flowId && __anNativeOAuthFlowId) {
+        __anNativeOAuthReturnObserved = true;
+        __anScheduleNativeOAuthAbandonment(__anNativeOAuthFlowId);
+        return;
+      }
+      var expectedFlowId = flowId || __anGoogleSignInFlowId;
+      if (!__anCanRecoverGoogleSignInFlow(flowId, expectedFlowId)) return;
       setTimeout(function() {
+        if (!__anCanRecoverGoogleSignInFlow(flowId, expectedFlowId)) return;
         __anMaybeRedirectSignedIn(__anResumeHref()).then(function(redirected) {
+          if (!__anCanRecoverGoogleSignInFlow(flowId, expectedFlowId)) return;
           if (redirected) return;
-          if (!__anGoogleSignInInFlight) return;
           var btn = document.getElementById('google-btn');
           if (!btn || !btn.disabled) return;
           // Keep the desktop-exchange poll alive. Agent Native Desktop opens
@@ -2954,15 +3106,25 @@ ${identitySsoScript}
           // callback has stored the session token.
           btn.disabled = false;
           __anGoogleSignInInFlight = false;
+          __anClearGoogleSignInFlow();
         });
       }, 1200);
     }
     function __anBindGoogleRecover() {
       if (__anGoogleRecoverBound) return;
       __anGoogleRecoverBound = true;
-      window.addEventListener('focus', __anRecoverGoogleSignInAfterReturn);
+      window.addEventListener('focus', function() {
+        __anRecoverGoogleSignInAfterReturn();
+      });
+      window.addEventListener('blur', function() {
+        __anCancelNativeOAuthAbandonment();
+      });
       document.addEventListener('visibilitychange', function() {
-        if (document.visibilityState === 'visible') __anRecoverGoogleSignInAfterReturn();
+        if (document.visibilityState === 'visible') {
+          __anRecoverGoogleSignInAfterReturn();
+        } else {
+          __anCancelNativeOAuthAbandonment();
+        }
       });
     }
     function __anHandlePopupOAuthFailure(ret, btn, err, flowId, redirectReason, builderFrameMessage) {
@@ -2990,6 +3152,7 @@ ${identitySsoScript}
       var isMagicLink = kind === 'magic-link';
       __anOAuthPollCount = 0;
       async function check() {
+        if (!isMagicLink && !__anIsCurrentGoogleSignInFlow(flowId)) return;
         __anOAuthPollCount++;
         try {
           var exchangeParams = '?flow_id=' + encodeURIComponent(flowId);
@@ -2999,6 +3162,7 @@ ${identitySsoScript}
           }
           var res = await fetch(__anPath('/_agent-native/auth/desktop-exchange') + exchangeParams, exchangeOptions);
           var data = await res.json().catch(function() { return {}; });
+          if (!isMagicLink && !__anIsCurrentGoogleSignInFlow(flowId)) return;
           if (data && (data.email || data.token)) {
             if (__anOAuthPollTimer) clearInterval(__anOAuthPollTimer);
             __anOAuthPollTimer = null;
@@ -3062,8 +3226,7 @@ ${identitySsoScript}
       }
       return data.url;
     }
-    function __anStartPopupOAuth(ret, btn, err) {
-      var flowId = __anNewOAuthFlowId();
+    function __anStartPopupOAuth(ret, btn, err, flowId) {
       var verifier = __anNewOAuthVerifier();
       if (!verifier) {
         __anShowOAuthError(err, btn, __anT('failedToConnect'));
@@ -3080,11 +3243,13 @@ ${identitySsoScript}
           return;
         }
         try { popup.opener = null; } catch(e) {}
+        __anWatchOAuthPopupClose(popup, flowId);
       } catch(e) {
         __anHandlePopupOAuthFailure(ret, btn, err, flowId, 'Could not open Google popup; falling back to redirect', 'Could not open Google popup.');
         return;
       }
       __anRequestDesktopOAuthUrl(flowId, verifier, oauthReturn).then(function(url) {
+        if (!__anIsCurrentGoogleSignInFlow(flowId)) return;
         try {
           popup.location.href = url;
           __anSetOAuthDebug('Google popup opened; waiting for callback', flowId);
@@ -3093,24 +3258,29 @@ ${identitySsoScript}
           throw e;
         }
       }).catch(function(e) {
+        if (!__anIsCurrentGoogleSignInFlow(flowId)) return;
         try { popup.close(); } catch(closeErr) {}
         __anShowOAuthError(err, btn, e && e.message ? e.message : __anT('failedToConnect'));
       });
     }
-    function __anStartNativeDesktopOAuth(ret, btn, err) {
-      var flowId = __anNewOAuthFlowId();
+    function __anStartNativeDesktopOAuth(ret, btn, err, flowId) {
       var verifier = __anNewOAuthVerifier();
       if (!verifier) {
         __anShowOAuthError(err, btn, __anT('failedToConnect'));
         return;
       }
       var oauthReturn = ret;
+      __anBeginNativeOAuth(flowId);
       __anSetOAuthDebug('Preparing Google sign-in in system browser', flowId);
       __anRequestDesktopOAuthUrl(flowId, verifier, oauthReturn).then(function(url) {
+        if (!__anIsCurrentGoogleSignInFlow(flowId)) return;
+        __anMarkNativeOAuthPolling(flowId);
         __anSetOAuthDebug('Opening Google sign-in in system browser', flowId);
         __anOpenOAuthUrl(url);
         __anWaitForOAuthExchange(flowId, ret, btn, err, 'google', verifier);
+        __anScheduleNativeOAuthAbandonment(flowId);
       }).catch(function(e) {
+        if (!__anIsCurrentGoogleSignInFlow(flowId)) return;
         __anShowOAuthError(err, btn, e && e.message ? e.message : __anT('failedToConnect'));
       });
     }
@@ -3831,20 +4001,20 @@ ${renderGoogleButton
     var btn = document.getElementById('google-btn');
     var err = document.getElementById('google-err');
     var ret = __anResumeHref();
+    var flowId = __anNewOAuthFlowId();
     btn.disabled = true;
-    __anGoogleSignInInFlight = true;
+    __anBeginGoogleSignInFlow(flowId);
     __anBindGoogleRecover();
     err.classList.remove('show');
     if (__anResolveAuthFlow() === 'popup') {
-      __anStartPopupOAuth(ret, btn, err);
+      __anStartPopupOAuth(ret, btn, err, flowId);
       return;
     }
     if (__anIsAgentNativeDesktop()) {
-      __anStartNativeDesktopOAuth(ret, btn, err);
+      __anStartNativeDesktopOAuth(ret, btn, err, flowId);
       return;
     }
     if (__anIsBuilderPreview()) {
-      var flowId = __anNewOAuthFlowId();
       __anStartRedirectOAuth(ret, btn, err, flowId, 'Opening Google sign-in redirect from Builder preview');
       return;
     }
@@ -3852,6 +4022,7 @@ ${renderGoogleButton
       var authUrl = __anGoogleAuthUrlPath() + '?return=' + encodeURIComponent(ret);
       var res = await fetch(authUrl);
       var data = await res.json();
+      if (!__anIsCurrentGoogleSignInFlow(flowId)) return;
       if (data.url) {
         __anOpenOAuthUrl(data.url);
       } else {
@@ -3859,12 +4030,14 @@ ${renderGoogleButton
         err.classList.add('show');
         btn.disabled = false;
         __anGoogleSignInInFlight = false;
+        __anClearGoogleSignInFlow();
       }
     } catch (e) {
       err.textContent = __anT('failedToConnect');
       err.classList.add('show');
       btn.disabled = false;
       __anGoogleSignInInFlight = false;
+      __anClearGoogleSignInFlow();
     }
   }`
         : ""}

package/dist/server/transcribe-voice.d.ts

@@ -20,6 +20,6 @@ export declare function createTranscribeVoiceHandler(): import("h3").EventHandle
     error: string;
     text?: undefined;
 } | {
-    text: string;
     error?: undefined;
+    text: string;
 }>>;

package/dist/vite/client.js

@@ -2254,7 +2254,11 @@ function isNitroEnvironmentUnavailable(error) {
         typeof candidate.message === "string" &&
         /Vite environment .+ is unavailable/.test(candidate.message));
 }
-const NITRO_STARTUP_SETTLE_MS = 1_000;
+// Nitro's worker can expose a transformed module graph before its entry
+// module has finished importing. Keep the recovery page up for the same
+// cold-start window instead of letting the first poll render a 500 error.
+const NITRO_STARTUP_SETTLE_MS = 3_000;
+const NITRO_STARTUP_POLL_INTERVAL_MS = 100;
 const NITRO_STARTUP_TIMEOUT_MS = 30_000;
 const NITRO_STARTUP_RETRY_DELAY_MS = 1_000;
 const NITRO_STARTUP_RETRY_MAX_DELAY_MS = 3_000;
@@ -2366,15 +2370,24 @@ function nitroStartupGate(options = {}) {
             let graphSignature = null;
             let graphStableAt;
             let startupComplete = false;
-            server.middlewares.use((req, res, next) => {
-                if (startupComplete || !isHtmlDocumentRequest(req)) {
-                    next();
-                    return;
+            let readinessTimer;
+            const completeStartup = () => {
+                startupComplete = true;
+                if (readinessTimer) {
+                    clearInterval(readinessTimer);
+                    readinessTimer = undefined;
                 }
+            };
+            // Observe the graph independently of the first document request. A
+            // server can finish compiling while the shell is still on its loading
+            // screen; measuring stability only from the first request adds the full
+            // settle window to an otherwise-ready server.
+            const observeStartup = () => {
+                if (startupComplete)
+                    return;
                 const timestamp = now();
                 if (timestamp - startedAt >= timeoutMs) {
-                    startupComplete = true;
-                    next();
+                    completeStartup();
                     return;
                 }
                 const nextGraphSignature = nitroModuleGraphSignature(server.environments?.nitro);
@@ -2385,15 +2398,43 @@ function nitroStartupGate(options = {}) {
                     }
                     else if (graphStableAt !== undefined &&
                         timestamp - graphStableAt >= settleMs) {
-                        startupComplete = true;
-                        next();
-                        return;
+                        completeStartup();
                     }
                 }
                 else {
                     graphSignature = null;
                     graphStableAt = undefined;
                 }
+            };
+            // Start watching before any HTML request arrives so readiness time is
+            // measured from server startup, not from the user's first navigation.
+            observeStartup();
+            if (!startupComplete) {
+                readinessTimer = setInterval(observeStartup, NITRO_STARTUP_POLL_INTERVAL_MS);
+                readinessTimer.unref?.();
+                server.httpServer?.once("close", () => {
+                    if (readinessTimer) {
+                        clearInterval(readinessTimer);
+                        readinessTimer = undefined;
+                    }
+                });
+            }
+            server.middlewares.use((req, res, next) => {
+                if (startupComplete || !isHtmlDocumentRequest(req)) {
+                    next();
+                    return;
+                }
+                const timestamp = now();
+                if (timestamp - startedAt >= timeoutMs) {
+                    completeStartup();
+                    next();
+                    return;
+                }
+                observeStartup();
+                if (startupComplete) {
+                    next();
+                    return;
+                }
                 sendNitroStartingResponse(req, res);
             });
         },

package/docs/content/cloneable-saas.mdx

@@ -214,7 +214,7 @@ Four steps take you from template to deployed app:
 
 1. **Pick an app.** Use the CLI picker, or browse the docs.
 2. **Brand it.** Change the name, colors, logo, and copy. Most example apps expose this in a single config file.
-3. **Customize it.** Make source changes in your own repository and development workflow. An agent can help when its frame is intentionally granted workspace and write tooling; otherwise the embedded agent operates the resulting app through its actions, data, and configured integrations.
+3. **Customize it.** Make source changes in your own repository and development workflow: "add a priority field to forms," "connect to our Salesforce instance," "change the color scheme to match our brand." An agent can help when its frame is intentionally granted workspace and write tooling; otherwise the embedded agent operates the resulting app through its actions, data, and configured integrations.
 4. **Ship it.** Run the deploy command. You now have a production app at your own domain.
 
 Steps 2–4 typically take a few days. Step 3 has no fixed end point — the app is yours to evolve, while the embedded agent remains available to operate the deployed product and can assist with source changes when code access is explicitly enabled.

package/docs/content/environment-variables.mdx

@@ -168,6 +168,13 @@ multi-user apps should prefer the scoped credential and connection store.
 Every provider key below selects its engine on its own: dropping one in is
 enough, and `AGENT_ENGINE` is only needed to pick between several.
 
+Supported models span Anthropic Claude, OpenAI (GPT-5 family), Google Gemini,
+and any provider that speaks the OpenAI API shape via `OPENAI_BASE_URL`,
+including OpenAI-compatible gateways like LiteLLM. The model is chosen in
+Settings, so switching providers is a configuration change, not a code
+rewrite. Claude is the framework's most heavily tested path and the default
+recommendation.
+
 | Variable                       | What it controls                                         | Supported values or format                              |
 | ------------------------------ | -------------------------------------------------------- | ------------------------------------------------------- |
 | `ANTHROPIC_API_KEY`            | Claude model fallback for the built-in AI engine.        | An Anthropic API key.                                   |

package/docs/content/key-concepts.mdx

@@ -370,6 +370,8 @@ Every consumer calls the same underlying function, so there is only one implemen
 
 When the agent changes data, the UI needs to reflect that without a manual refresh. `useDbSync()` is what makes that automatic. Same-process writes stream over `/_agent-native/events`; `/_agent-native/poll` remains the cross-process and serverless fallback. When the agent writes to the database (application state, settings, or domain data), a version counter increments and the client invalidates the relevant React Query caches.
 
+SSE covers the common case instead of WebSockets because it gives same-process writes an immediate path to the browser with plain HTTP, while the version-counter poll stays as a fallback that works in every deployment environment, including serverless and edge, where persistent sockets may not be available.
+
 ```ts
 // Client: subscribe to agent/UI data changes once near the app shell
 import { useDbSync } from "@agent-native/core/client/hooks";

package/docs/content/syncing-template-changes.mdx

@@ -25,7 +25,9 @@ agent-native upgrade
 agent-native template sync
 ```
 
-`sync` defaults to the template version matching your installed `@agent-native/core`, so running it after `upgrade` keeps code and packages on the same version.
+`sync` defaults to the template version matching your installed `@agent-native/core`, so running it after `upgrade` keeps code and packages on the same version. Running the bare `agent-native upgrade` bumps `@agent-native/*` dependencies to `latest`, installs, refreshes scaffold skills (`skills update scaffold --project`), and runs typecheck when available. Use `agent-native upgrade check` first for a doctor-only report of framework overrides/patches and pending bumps.
+
+Do **not** fix a broken upgrade with `pnpm.overrides`, `patchedDependencies`, or edits under `node_modules/@agent-native/*` (especially core/dispatch); those mask the real incompatibility instead of resolving it. If upgrade or typecheck fails, fix app-level code or ask, then re-run upgrade.
 
 Look before you merge:
 

package/docs/content/what-is-agent-native.mdx

@@ -108,4 +108,8 @@ together.
 See how the same model supports apps led by a UI, chat, automation, or another
 agent.
 
+### [Templates](/docs/cloneable-saas)
+
+Start from a complete SaaS product instead of building up from Chat.
+
 </Cards>

package/docs/content/writing-agent-instructions.mdx

@@ -102,6 +102,14 @@ data and the same actions.
 
 Keep one canonical instructions file: `AGENTS.md`. If a client expects `CLAUDE.md`, make it a symlink to `AGENTS.md` rather than a second copy. Two hand-maintained files drift, and the agent ends up with contradictory rules. One source of truth, linked where needed.
 
+`AGENTS.md` is the universal standard the framework builds on, so any AI coding tool that reads project instructions works out of the box:
+
+- **Claude Code**: reads `CLAUDE.md` (symlinked from `AGENTS.md` by the CLI setup)
+- **Cursor**: reads `AGENTS.md` directly, or `.cursorrules` (Cursor's legacy location) if present
+- **Windsurf**: reads `AGENTS.md` directly, or `.windsurfrules` (Windsurf's legacy location) if present
+- **Codex, Gemini, and others**: work via the embedded agent panel
+- **Builder.io**: cloud-hosted agent with visual editing and collaboration
+
 ## SKILL.md frontmatter must say what AND when {#skill-frontmatter}
 
 The `description` is the only thing the agent sees when deciding whether to read a skill. It must answer two questions: what the skill covers, and when to trigger it. A description that only describes the topic will not fire.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.174.1",
+  "version": "0.174.2-nightly-20260825214843",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {

package/docs/content/faq.mdx

@@ -1,257 +0,0 @@
----
-title: "FAQ"
-description: "Common questions about Agent-Native — what it is, who it's for, what you can build, and how it works."
----
-
-# FAQ
-
-Common questions about Agent-Native, organized from "I'm just looking" to "I'm wiring up auth right now."
-
-## The basics {#general}
-
-### What is Agent-Native? {#what-is-agent-native}
-
-Agent-Native is a framework for building apps where the AI agent and the product surface around it are equal partners. The usual path starts with chat, adds typed actions, renders structured results inline, and grows into durable pages around the same SQL state. The invariant is that agents and humans share the same actions, database, and state. See [What is Agent-Native?](/docs/what-is-agent-native) for the full explanation.
-
-### Who is this for? {#who-is-this-for}
-
-Agent-Native is for people who want a real app and an AI agent to work from the same data and actions. The common paths are:
-
-- **Use a hosted app** if you want Mail, Calendar, Forms, Plan, or another finished template with no setup — start at the [template gallery](/templates).
-- **Start with Chat** if you want the default from-scratch path: users can talk to the agent immediately, then you extend with actions, native results, and screens — start with [Getting Started](/docs/getting-started) or [Chat](/docs/template-chat).
-- **Start automation-first** if you are building scheduled jobs, queues, scripts, integration workers, or external-agent workflows with no browser UI yet — start with [Automation-First Apps](/docs/pure-agent-apps).
-- **Start from a template and customize it** if you want your own SaaS product with auth, database, UI, and agent actions already wired — see [Templates](/docs/cloneable-saas).
-- **Build from scratch** if you want the framework primitives for a new agent-driven product — start with [Getting Started](/docs/getting-started).
-- **Connect another agent or code tool** if you want Claude, ChatGPT, Codex, Cursor, or GitHub Copilot / VS Code to use an Agent-Native app — see [External Agents](/docs/external-agents) and [Skills Guide](/docs/skills-guide).
-
-### How is this different from adding AI to an existing app? {#how-is-this-different}
-
-Most apps bolt AI on as an afterthought that can't actually _do_ things in the app. In an Agent-Native app the agent is a first-class citizen that shares the same actions, database, and state as the UI, so it can do anything the buttons can. See [Why build apps this way](/docs/what-is-agent-native#why-build-apps-this-way).
-
-<Diagram id="doc-block-1s6b04" title="Bolted-on AI vs. Agent-Native" summary="A bolted-on chat sidebar lives in its own world. An Agent-Native agent shares the same actions, database, and state as the UI.">
-
-```html
-<div class="diagram-vs">
-  <div class="diagram-col">
-    <span class="diagram-pill warn">Bolted-on AI</span>
-    <div class="diagram-node">Chat sidebar</div>
-    <div class="diagram-arrow diagram-muted" aria-hidden="true">&darr;</div>
-    <div class="diagram-box" data-rough>
-      separate AI world<br /><small class="diagram-muted"
-        >can't touch the app</small
-      >
-    </div>
-    <div class="diagram-box diagram-muted">App UI &amp; data</div>
-  </div>
-  <div class="diagram-divider" aria-hidden="true"></div>
-  <div class="diagram-col">
-    <span class="diagram-pill ok">Agent-Native</span>
-    <div class="diagram-row2">
-      <div class="diagram-node">UI</div>
-      <div class="diagram-node">Agent</div>
-    </div>
-    <div class="diagram-arrow diagram-muted" aria-hidden="true">&darr;</div>
-    <div class="diagram-box" data-rough>shared actions, DB &amp; state</div>
-  </div>
-</div>
-```
-
-```css
-.diagram-vs {
-  display: flex;
-  align-items: stretch;
-  gap: 18px;
-  flex-wrap: wrap;
-}
-.diagram-vs .diagram-col {
-  display: flex;
-  flex-direction: column;
-  gap: 8px;
-  align-items: center;
-  flex: 1;
-  min-width: 200px;
-}
-.diagram-vs .diagram-row2 {
-  display: flex;
-  gap: 8px;
-}
-.diagram-vs .diagram-arrow {
-  font-size: 20px;
-  line-height: 1;
-}
-.diagram-vs .diagram-divider {
-  width: 1px;
-  align-self: stretch;
-  background: currentColor;
-  opacity: 0.15;
-}
-```
-
-</Diagram>
-
-### Is it open source? {#is-this-open-source}
-
-Yes. The framework and all templates are open source. You can run everything locally, self-host, or use Builder.io's cloud for managed hosting, collaboration, and team features.
-
-### How much does it cost? {#how-much}
-
-The framework itself is free. The two costs you'll see in practice:
-
-- **AI usage.** You bring your own API key (Anthropic, OpenAI, etc.) and pay the model provider directly. There's no markup from us.
-- **Hosting.** Whatever your host charges. Most templates run fine on free tiers (Netlify, Vercel, Cloudflare) for small workloads.
-
-If you'd rather not manage any of this, the hosted version on `agent-native.com` (operated by Builder.io) bundles inference and hosting into a per-seat plan.
-
-### Can I host this myself? {#can-i-self-host}
-
-Yes. Pick any host that runs Node — Netlify, Vercel, Cloudflare, AWS, Deno Deploy, your own server — and any SQL database (Postgres, SQLite, Turso, D1). The framework is built to be portable. Start with the [local Docker quickstart](/docs/deployment#self-host-quickstart), then use [Deployment](/docs/deployment) for production.
-
-### What AI models does it support? {#what-models}
-
-Anthropic Claude, OpenAI (GPT-5 family), Google Gemini, and any provider that speaks the OpenAI API shape. For OpenAI-compatible gateways like LiteLLM, choose OpenAI in Settings and add the gateway URL under Advanced. You configure the model in settings; switching is a config change, not a code rewrite. The framework's heaviest tested path is Claude, so that's the default recommendation.
-
-### Do I need to know AI/ML? {#do-i-need-to-know-ai}
-
-No. You don't train models, fine-tune, or deal with embeddings. You build a regular web app — and on the hosted version, you barely build anything at all. The framework handles the agent integration: routing messages, running actions, syncing state.
-
-### Can I migrate an existing app to Agent-Native? {#can-i-use-existing-code}
-
-You can, but Agent-Native works best when built from the ground up. The architecture — shared database, polling sync, actions, application state — needs to be integrated throughout. Starting from an app and customizing it is the recommended path. Think of it like the shift from desktop-first to mobile-first: you _can_ retrofit, but building native is better.
-
-## Templates and what you can build {#templates}
-
-### What templates are available? {#what-templates-are-available}
-
-The framework ships with production-ready templates including [Chat](/docs/template-chat), [Mail](/docs/template-mail), [Calendar](/docs/template-calendar), [Forms](/docs/template-forms), [Plan](/docs/template-plan) (visual plans and PR recaps), [Analytics](/docs/template-analytics), [Dispatch](/docs/template-dispatch), and more. Each is a complete app with UI, agent actions, database schema, and AI instructions ready to go. See [Templates](/docs/cloneable-saas) for the full catalog.
-
-### Can I customize templates? {#can-i-customize-templates}
-
-That's the whole point. Start from a template and customize it in your own repository and development workflow. "Add a priority field to forms." "Connect to our Salesforce instance." "Change the color scheme to match our brand." An agent can edit the source when its frame is intentionally granted workspace and write tooling; otherwise the embedded agent operates the resulting app through its actions and data surface.
-
-### Can I build something the templates don't cover? {#build-from-scratch}
-
-Yes. If you want a basic agentic app, run `npx @agent-native/core@latest create my-chat-app --template chat`; you get durable chat threads, actions, auth, SQL-backed runtime state, native inline result rendering, and room to add your own screens. If you are building a no-browser automation, run `npx @agent-native/core@latest create my-agent --headless`. See [Getting Started](/docs/getting-started), [Automation-First Apps](/docs/pure-agent-apps), and [Chat](/docs/template-chat).
-
-### Can I try it without starting from a template? {#try-with-a-skill}
-
-Yes — install a skill into a coding agent you already use with one command and no scaffold required. See the [Skills Guide](/docs/skills-guide#app-backed-skills) for the walkthrough.
-
-## Agent capabilities {#agent-capabilities}
-
-### Does the embedded agent edit the app's source code? {#can-the-agent-modify-code}
-
-Not by default. The embedded agent normally works through actions, SQL-backed state, and configured integrations. It can edit components, routes, styles, or actions only when its frame is intentionally granted repository workspace and write tooling. Otherwise use your normal development workflow or a separate code-capable development/Builder frame. For runtime customization without source changes, use [Extensions](/docs/extensions).
-
-### Can users talk to the agent from outside the app? {#external-channels}
-
-Yes. The same agent runs in your web UI, in Slack, in Telegram, over email, and from other agents (via [A2A](/docs/a2a-protocol)). It's the same agent with the same memory and the same actions, just reached through different channels. See [Messaging the agent](/docs/messaging).
-
-### Can agents talk to each other? {#can-agents-talk-to-each-other}
-
-Yes, via the [A2A (Agent-to-Agent) protocol](/docs/a2a-protocol). Every Agent-Native app automatically gets an A2A endpoint. From the mail app, you can tag the analytics agent to query data. An agent discovers what other agents are available, calls them over the protocol, and shows results in the UI. No configuration needed — the agent card is auto-generated from your template's actions.
-
-### What can the agent see in the app? {#what-can-the-agent-see}
-
-The agent always knows what the user is currently viewing. The UI writes navigation state to the database on every route change — which view is open, which item is selected. The agent reads this before taking action. If an email is open, the agent knows which email. If a slide is selected, the agent knows which slide. See [Context Awareness](/docs/context-awareness).
-
-## Development questions {#development}
-
-### Which AI coding tools work with Agent-Native? {#which-ai-tools-work}
-
-Any AI coding tool that reads project instructions. The framework uses AGENTS.md as the universal standard:
-
-- **Claude Code** — reads CLAUDE.md (symlinked from AGENTS.md by the CLI setup)
-- **Cursor** — reads AGENTS.md directly, or `.cursorrules` (Cursor's legacy location) if present in your project
-- **Windsurf** — reads AGENTS.md directly, or `.windsurfrules` (Windsurf's legacy location) if present in your project
-- **Codex, Gemini, and others** — work via the embedded agent panel
-- **Builder.io** — cloud-hosted agent with visual editing and collaboration
-
-### Can I use my own database? {#can-i-use-my-own-database}
-
-Yes. Set `DATABASE_URL` and the framework auto-detects it. Supported databases include SQLite, Postgres (Neon, Supabase, plain), Turso (libSQL), and Cloudflare D1. All SQL is dialect-agnostic via Drizzle ORM — the same code works everywhere.
-
-### Where can I deploy? {#where-can-i-deploy}
-
-Anywhere. The server runs on Nitro, which compiles to any deployment target: Node.js, Cloudflare Workers/Pages, Netlify, Vercel, Deno Deploy, AWS Lambda, and Bun. You can also use Builder.io's hosting for managed deployments. See the [Deployment guide](/docs/deployment).
-
-## Architecture {#architecture}
-
-### Why SSE plus polling instead of WebSockets? {#why-polling-not-websockets}
-
-SSE gives same-process writes an immediate path to the browser, and a lightweight version-counter poll remains the fallback because it works in every deployment environment — including serverless and edge, where persistent sockets may not be available. See [Key Concepts — Live sync](/docs/key-concepts#polling-sync).
-
-<Diagram id="doc-block-1et8179" title="SSE first, polling fallback" summary={"Same-process writes stream instantly; a version-counter poll keeps serverless, edge, and cross-process writes convergent."}>
-
-```html
-<div class="diagram-transport">
-  <div class="diagram-box" data-rough>DB write</div>
-  <div class="diagram-arrow diagram-muted" aria-hidden="true">&rarr;</div>
-  <div class="diagram-col">
-    <div class="diagram-node">
-      SSE<br /><small class="diagram-muted"
-        >/_agent-native/events &middot; instant</small
-      >
-    </div>
-    <div class="diagram-node">
-      Poll<br /><small class="diagram-muted"
-        >/_agent-native/poll &middot; universal fallback</small
-      >
-    </div>
-  </div>
-  <div class="diagram-arrow diagram-muted" aria-hidden="true">&rarr;</div>
-  <div class="diagram-box" data-rough>Browser refetch</div>
-</div>
-```
-
-```css
-.diagram-transport {
-  display: flex;
-  align-items: center;
-  gap: 12px;
-  flex-wrap: wrap;
-}
-.diagram-transport .diagram-col {
-  display: flex;
-  flex-direction: column;
-  gap: 8px;
-}
-.diagram-transport .diagram-arrow {
-  font-size: 22px;
-  line-height: 1;
-}
-```
-
-</Diagram>
-
-### Why can't the UI call an LLM directly? {#why-no-inline-llm-calls}
-
-AI is non-deterministic, so you need conversation flow to give feedback and iterate — not one-shot buttons — and the agent already has your codebase, instructions, skills, and history that an inline call lacks. Routing everything through the agent is also what lets the app be driven from Slack, Telegram, or another agent. See [Key Concepts — Agent chat bridge](/docs/key-concepts#agent-chat-bridge).
-
-### How do I upgrade an older Agent-Native app? {#upgrade-older-app}
-
-Run the supported upgrade path from the app or workspace root:
-
-```bash
-npx @agent-native/core@latest upgrade
-```
-
-That bumps `@agent-native/*` dependencies to `latest`, installs, refreshes
-scaffold skills (`skills update scaffold --project`), and runs typecheck when
-available. Use `upgrade check` first if you want a doctor-only report of
-framework overrides/patches and pending bumps.
-
-Do **not** fix a broken upgrade with `pnpm.overrides`, `patchedDependencies`,
-or edits under `node_modules/@agent-native/*` (especially core/dispatch). If
-upgrade or typecheck fails, fix app-level code or ask — then re-run upgrade.
-
-### Why is this a framework and not a library? {#why-framework-not-library}
-
-The shared database, live sync, actions system, and application state only work because they're wired together from the ground up — the UI reacts to agent changes instantly, agents communicate, and the agent understands what the user is looking at. A library gives you pieces; this is an architecture. See [Key Concepts](/docs/key-concepts).
-
-## What's next
-
-- [**Getting Started**](/docs/getting-started) — build your first action and render it inline in chat
-- [**What is Agent-Native?**](/docs/what-is-agent-native) — the full explanation behind the answers above
-- [**Templates**](/docs/cloneable-saas) — start from a complete SaaS product instead of starting from scratch
-- [**Key Concepts**](/docs/key-concepts) — the architecture: SQL, actions, polling sync, and portability
-- [**Deployment**](/docs/deployment) — host on your own domain or any Nitro-compatible provider