@agent-native/core 0.175.3 → 0.175.4-nightly-20260826183934

package/dist/agent/engine/ai-sdk-engine.js

@@ -453,7 +453,14 @@ class AISDKEngine {
                 yield recovered;
             }
             yield { type: "assistant-content", parts: assistantContent };
-            if (!credentialFailureRecorded) {
+            // Clearing the marker asserts "this credential demonstrably works", so
+            // only a turn that actually completed may do it. A turn that ended in
+            // error proves nothing about the credential, and this ran on every one:
+            // a single unrelated 500 re-admitted a credential a 401 had just pinned,
+            // so the next person's first prompt spent itself rediscovering the same
+            // rejection. `credentialFailureRecorded` only covers the 401 path.
+            const stoppedWithError = bufferedStop?.type === "stop" && bufferedStop.reason === "error";
+            if (!credentialFailureRecorded && !stoppedWithError) {
                 await clearProviderCredentialAuthFailure({
                     key: PROVIDER_ENV_VARS[this.provider][0],
                     value: this.apiKey,

package/dist/observability/routes.d.ts

@@ -42,22 +42,22 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     avgEvalScore: number;
 } | {
     error?: undefined;
+    ok?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
-    ok?: undefined;
 } | {
     error?: undefined;
+    ok?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;
-    ok?: undefined;
 } | {
+    ok?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
     error: any;
-    ok?: undefined;
 } | {
     error?: undefined;
     summary?: undefined;

package/dist/secrets/routes.d.ts

@@ -34,37 +34,37 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    status?: undefined;
     ok?: undefined;
+    status?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     status: string;
-    error?: undefined;
 } | {
+    ok?: undefined;
     error: string;
     removed?: undefined;
-    ok?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
  * or the current stored value without changing anything.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+    ok?: undefined;
     error: string;
     note?: undefined;
-    ok?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note?: undefined;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note: string;
-    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,11 +95,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;

package/dist/server/credential-provider.js

@@ -841,6 +841,38 @@ export async function resolveBuilderGatewayAuth() {
         ? { authorization: `Bearer ${legacyKey}`, spaceId: null, userId: null }
         : null;
 }
+/**
+ * Both auth-failure markers below are fingerprinted on the credential VALUE, so
+ * a rotated or corrected credential never matches the old marker and is usable
+ * immediately — the TTL is not what unpins it. The TTL covers only the case
+ * where the SAME value starts working again: a plan upgrade, a re-enabled
+ * gateway, a transient upstream 401.
+ *
+ * Re-admitting on a flat timer means a credential that is simply wrong is
+ * retested on that cadence forever, and each retest is paid for by whichever
+ * user's turn happens to land first — they get a 401 while the next lane serves
+ * everyone after them. That is the whole shape of the recurring "the saved
+ * provider key was rejected" report. Back off per consecutive strike so a dead
+ * credential stops costing a turn every quarter hour, while one that genuinely
+ * recovers is still retried within the day.
+ */
+const AUTH_FAILURE_MAX_TTL_MS = 24 * 60 * 60 * 1000;
+const AUTH_FAILURE_MAX_STRIKES = 8;
+function authFailureStrikes(row) {
+    const raw = row?.strikes;
+    return typeof raw === "number" && Number.isFinite(raw) && raw >= 1
+        ? Math.min(Math.floor(raw), AUTH_FAILURE_MAX_STRIKES)
+        : 1;
+}
+function authFailureTtlMs(baseTtlMs, row) {
+    return Math.min(baseTtlMs * 2 ** (authFailureStrikes(row) - 1), AUTH_FAILURE_MAX_TTL_MS);
+}
+/** Next strike count for a marker being (re-)armed on the same fingerprint. */
+async function nextAuthFailureStrikes(settingKey) {
+    const { getSetting } = await import("../settings/store.js");
+    const prior = await getSetting(settingKey, { bypassCache: true });
+    return Math.min(authFailureStrikes(prior) + (prior ? 1 : 0), AUTH_FAILURE_MAX_STRIKES);
+}
 const BUILDER_AUTH_FAILURE_SETTING_PREFIX = "builder-auth-failure:";
 /**
  * Stale markers expire so a rejected model or a transient gateway failure
@@ -873,10 +905,10 @@ export async function getBuilderCredentialAuthFailure(creds = {}) {
         if (!row)
             return null;
         const at = typeof row.at === "number" ? row.at : Date.now();
-        if (Date.now() - at > BUILDER_AUTH_FAILURE_TTL_MS) {
-            if (typeof settings.deleteSetting === "function") {
-                await settings.deleteSetting(settingKey).catch(() => { });
-            }
+        // Expired means "usable again", not "never failed": the row stays so the
+        // strike count survives, and a credential that fails on re-admission backs
+        // off further instead of resetting to the base TTL. A success clears it.
+        if (Date.now() - at > authFailureTtlMs(BUILDER_AUTH_FAILURE_TTL_MS, row)) {
             return null;
         }
         return {
@@ -902,12 +934,15 @@ export async function recordBuilderCredentialAuthFailure(details) {
         if (!fingerprint)
             return;
         const { putSetting } = await import("../settings/store.js");
-        await putSetting(builderAuthFailureSettingKey(fingerprint), {
+        const settingKey = builderAuthFailureSettingKey(fingerprint);
+        const strikes = await nextAuthFailureStrikes(settingKey);
+        await putSetting(settingKey, {
             fingerprint,
             message: details?.message ||
                 "Builder rejected the connected credentials. Reconnect Builder.io (free tier available).",
             ...(typeof details?.status === "number" && { status: details.status }),
             ...(details?.code && { code: details.code }),
+            strikes,
             at: Date.now(),
             ownerEmail: getRequestUserEmail() ?? null,
             orgId: getRequestOrgId() ?? null,
@@ -961,10 +996,9 @@ export async function getProviderCredentialAuthFailure(opts) {
         if (row.fingerprint !== fingerprint)
             return null;
         const at = typeof row.at === "number" ? row.at : Date.now();
-        if (Date.now() - at > PROVIDER_AUTH_FAILURE_TTL_MS) {
-            if (typeof settings.deleteSetting === "function") {
-                await settings.deleteSetting(settingKey).catch(() => { });
-            }
+        // See `getBuilderCredentialAuthFailure`: the row outlives its TTL so the
+        // strike count does, and re-admission backs off instead of resetting.
+        if (Date.now() - at > authFailureTtlMs(PROVIDER_AUTH_FAILURE_TTL_MS, row)) {
             return null;
         }
         return {
@@ -994,12 +1028,15 @@ export async function recordProviderCredentialAuthFailure(opts) {
         if (!fingerprint)
             return;
         const { putSetting } = await import("../settings/store.js");
-        await putSetting(providerAuthFailureSettingKey(fingerprint), {
+        const settingKey = providerAuthFailureSettingKey(fingerprint);
+        const strikes = await nextAuthFailureStrikes(settingKey);
+        await putSetting(settingKey, {
             fingerprint,
             key,
             message: opts.message || "The model provider rejected the saved API key.",
             ...(typeof opts.status === "number" && { status: opts.status }),
             ...(opts.code && { code: opts.code }),
+            strikes,
             at: Date.now(),
             ownerEmail: getRequestUserEmail() ?? null,
             orgId: getRequestOrgId() ?? null,

package/docs/content/webmcp.mdx

@@ -13,11 +13,11 @@ discover them, and the browser mediates execution.
 
 The framework supports both directions:
 
-| You want to... | Use |
-| --- | --- |
-| Make selected actions in your app available to a browser agent | `createAgentNativeWebMcpRegistration` |
-| Let Agent-Native chat discover and call WebMCP tools in the current page | `createAgentNativeWebMcpClient` plus `webmcp` on `AgentNativeEmbedded` or `AgentNativeFrame` |
-| Connect a headless or remote agent to an app | [MCP Server](/docs/mcp-protocol), [External Agents](/docs/external-agents), or [A2A](/docs/a2a-protocol) |
+| You want to...                                                           | Use                                                                                                      |
+| ------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------- |
+| Make selected actions in your app available to a browser agent           | `createAgentNativeWebMcpRegistration`                                                                    |
+| Let Agent-Native chat discover and call WebMCP tools in the current page | `createAgentNativeWebMcpClient` plus `webmcp` on `AgentNativeEmbedded` or `AgentNativeFrame`             |
+| Connect a headless or remote agent to an app                             | [MCP Server](/docs/mcp-protocol), [External Agents](/docs/external-agents), or [A2A](/docs/a2a-protocol) |
 
 WebMCP is not a network MCP server and does not make a closed app globally
 discoverable. A consuming agent needs an open, connected browser page and the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.175.3",
+  "version": "0.175.4-nightly-20260826183934",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {