@agent-native/core 0.175.3 → 0.175.4-nightly-20260826190205

package/dist/mcp/screen-memory-stdio.d.ts

@@ -137,13 +137,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -159,6 +159,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -174,7 +175,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -190,6 +190,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             minutes: {
                 type: string;
                 description: string;
@@ -199,7 +200,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -216,6 +216,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -234,7 +235,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             };
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -250,6 +250,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
@@ -263,7 +264,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
                 description: string;
             };
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             includeMicrophone?: undefined;
@@ -314,13 +314,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt: {
                 type: string;
                 description: string;
@@ -349,13 +349,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;

package/dist/notifications/routes.d.ts

@@ -16,18 +16,18 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
     error?: undefined;
     ok?: undefined;
 } | {
+    count?: undefined;
     updated: number;
     error?: undefined;
     ok?: undefined;
-    count?: undefined;
 } | {
+    count?: undefined;
     updated?: undefined;
     error: string;
     ok?: undefined;
-    count?: undefined;
 } | {
+    count?: undefined;
     updated?: undefined;
     error?: undefined;
     ok: boolean;
-    count?: undefined;
 }>>;

package/dist/server/agent-chat/context-tools.js

@@ -144,6 +144,11 @@ Use a natural-language \`message\` by default. The receiving app owns interpreta
 - Call your own app by name
 - Perform tasks you can accomplish with your own registered tools
 
+Written todo lists, checklists, summaries, action-item lists, and prose plans
+belong in the current chat. Do not route those ordinary outputs to Plan. Call
+Plan only when the user explicitly asks for a visual or structured
+Agent-Native Plan, a Plan artifact, or the Plans app.
+
 **ONLY use \`call-agent\` when:**
 - The user explicitly asks you to communicate with a different app
 - You need data that only another deployed app can provide

package/dist/server/credential-provider.js

@@ -841,6 +841,38 @@ export async function resolveBuilderGatewayAuth() {
         ? { authorization: `Bearer ${legacyKey}`, spaceId: null, userId: null }
         : null;
 }
+/**
+ * Both auth-failure markers below are fingerprinted on the credential VALUE, so
+ * a rotated or corrected credential never matches the old marker and is usable
+ * immediately — the TTL is not what unpins it. The TTL covers only the case
+ * where the SAME value starts working again: a plan upgrade, a re-enabled
+ * gateway, a transient upstream 401.
+ *
+ * Re-admitting on a flat timer means a credential that is simply wrong is
+ * retested on that cadence forever, and each retest is paid for by whichever
+ * user's turn happens to land first — they get a 401 while the next lane serves
+ * everyone after them. That is the whole shape of the recurring "the saved
+ * provider key was rejected" report. Back off per consecutive strike so a dead
+ * credential stops costing a turn every quarter hour, while one that genuinely
+ * recovers is still retried within the day.
+ */
+const AUTH_FAILURE_MAX_TTL_MS = 24 * 60 * 60 * 1000;
+const AUTH_FAILURE_MAX_STRIKES = 8;
+function authFailureStrikes(row) {
+    const raw = row?.strikes;
+    return typeof raw === "number" && Number.isFinite(raw) && raw >= 1
+        ? Math.min(Math.floor(raw), AUTH_FAILURE_MAX_STRIKES)
+        : 1;
+}
+function authFailureTtlMs(baseTtlMs, row) {
+    return Math.min(baseTtlMs * 2 ** (authFailureStrikes(row) - 1), AUTH_FAILURE_MAX_TTL_MS);
+}
+/** Next strike count for a marker being (re-)armed on the same fingerprint. */
+async function nextAuthFailureStrikes(settingKey) {
+    const { getSetting } = await import("../settings/store.js");
+    const prior = await getSetting(settingKey, { bypassCache: true });
+    return Math.min(authFailureStrikes(prior) + (prior ? 1 : 0), AUTH_FAILURE_MAX_STRIKES);
+}
 const BUILDER_AUTH_FAILURE_SETTING_PREFIX = "builder-auth-failure:";
 /**
  * Stale markers expire so a rejected model or a transient gateway failure
@@ -873,10 +905,10 @@ export async function getBuilderCredentialAuthFailure(creds = {}) {
         if (!row)
             return null;
         const at = typeof row.at === "number" ? row.at : Date.now();
-        if (Date.now() - at > BUILDER_AUTH_FAILURE_TTL_MS) {
-            if (typeof settings.deleteSetting === "function") {
-                await settings.deleteSetting(settingKey).catch(() => { });
-            }
+        // Expired means "usable again", not "never failed": the row stays so the
+        // strike count survives, and a credential that fails on re-admission backs
+        // off further instead of resetting to the base TTL. A success clears it.
+        if (Date.now() - at > authFailureTtlMs(BUILDER_AUTH_FAILURE_TTL_MS, row)) {
             return null;
         }
         return {
@@ -902,12 +934,15 @@ export async function recordBuilderCredentialAuthFailure(details) {
         if (!fingerprint)
             return;
         const { putSetting } = await import("../settings/store.js");
-        await putSetting(builderAuthFailureSettingKey(fingerprint), {
+        const settingKey = builderAuthFailureSettingKey(fingerprint);
+        const strikes = await nextAuthFailureStrikes(settingKey);
+        await putSetting(settingKey, {
             fingerprint,
             message: details?.message ||
                 "Builder rejected the connected credentials. Reconnect Builder.io (free tier available).",
             ...(typeof details?.status === "number" && { status: details.status }),
             ...(details?.code && { code: details.code }),
+            strikes,
             at: Date.now(),
             ownerEmail: getRequestUserEmail() ?? null,
             orgId: getRequestOrgId() ?? null,
@@ -961,10 +996,9 @@ export async function getProviderCredentialAuthFailure(opts) {
         if (row.fingerprint !== fingerprint)
             return null;
         const at = typeof row.at === "number" ? row.at : Date.now();
-        if (Date.now() - at > PROVIDER_AUTH_FAILURE_TTL_MS) {
-            if (typeof settings.deleteSetting === "function") {
-                await settings.deleteSetting(settingKey).catch(() => { });
-            }
+        // See `getBuilderCredentialAuthFailure`: the row outlives its TTL so the
+        // strike count does, and re-admission backs off instead of resetting.
+        if (Date.now() - at > authFailureTtlMs(PROVIDER_AUTH_FAILURE_TTL_MS, row)) {
             return null;
         }
         return {
@@ -994,12 +1028,15 @@ export async function recordProviderCredentialAuthFailure(opts) {
         if (!fingerprint)
             return;
         const { putSetting } = await import("../settings/store.js");
-        await putSetting(providerAuthFailureSettingKey(fingerprint), {
+        const settingKey = providerAuthFailureSettingKey(fingerprint);
+        const strikes = await nextAuthFailureStrikes(settingKey);
+        await putSetting(settingKey, {
             fingerprint,
             key,
             message: opts.message || "The model provider rejected the saved API key.",
             ...(typeof opts.status === "number" && { status: opts.status }),
             ...(opts.code && { code: opts.code }),
+            strikes,
             at: Date.now(),
             ownerEmail: getRequestUserEmail() ?? null,
             orgId: getRequestOrgId() ?? null,

package/dist/server/realtime-token.d.ts

@@ -26,8 +26,8 @@ export declare function createRealtimeTokenHandler(): import("h3").EventHandlerW
     expiresAt?: undefined;
     ttlSeconds?: undefined;
 } | {
-    error?: undefined;
     token: string;
     expiresAt: string;
     ttlSeconds: number;
+    error?: undefined;
 }>>;

package/docs/content/webmcp.mdx

@@ -13,11 +13,11 @@ discover them, and the browser mediates execution.
 
 The framework supports both directions:
 
-| You want to... | Use |
-| --- | --- |
-| Make selected actions in your app available to a browser agent | `createAgentNativeWebMcpRegistration` |
-| Let Agent-Native chat discover and call WebMCP tools in the current page | `createAgentNativeWebMcpClient` plus `webmcp` on `AgentNativeEmbedded` or `AgentNativeFrame` |
-| Connect a headless or remote agent to an app | [MCP Server](/docs/mcp-protocol), [External Agents](/docs/external-agents), or [A2A](/docs/a2a-protocol) |
+| You want to...                                                           | Use                                                                                                      |
+| ------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------- |
+| Make selected actions in your app available to a browser agent           | `createAgentNativeWebMcpRegistration`                                                                    |
+| Let Agent-Native chat discover and call WebMCP tools in the current page | `createAgentNativeWebMcpClient` plus `webmcp` on `AgentNativeEmbedded` or `AgentNativeFrame`             |
+| Connect a headless or remote agent to an app                             | [MCP Server](/docs/mcp-protocol), [External Agents](/docs/external-agents), or [A2A](/docs/a2a-protocol) |
 
 WebMCP is not a network MCP server and does not make a closed app globally
 discoverable. A consuming agent needs an open, connected browser page and the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.175.3",
+  "version": "0.175.4-nightly-20260826190205",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {