@agent-native/core 0.176.1 → 0.176.2-nightly-20260831184159

package/corpus/templates/assets/app/components/layout/Sidebar.tsx

@@ -4,13 +4,12 @@ import {
   useChatThreads,
   type ChatThreadSummary,
 } from "@agent-native/core/client/agent-chat";
-import { appPath } from "@agent-native/core/client/api-path";
 import { DevDatabaseLink } from "@agent-native/core/client/db-admin";
 import { useActionQuery } from "@agent-native/core/client/hooks";
 import { useT } from "@agent-native/core/client/i18n";
 import { openCommandMenu } from "@agent-native/core/client/navigation";
 import { OrgSwitcher } from "@agent-native/core/client/org";
-import { FeedbackButton } from "@agent-native/core/client/ui";
+import { AgentNativeIcon, FeedbackButton } from "@agent-native/core/client/ui";
 import { SidebarFooterActions } from "@agent-native/toolkit/app-shell";
 import {
   ChatHistoryRail,
@@ -40,7 +39,7 @@ import { ASSETS_CHAT_STORAGE_KEY } from "@/lib/chat";
 import { cn } from "@/lib/utils";
 
 const baseNavItems = [
-  { icon: IconPhotoPlus, labelKey: "navigation.create", href: "/" },
+  { icon: IconPhotoPlus, labelKey: "navigation.create", href: "/home" },
   { icon: IconLayoutGrid, labelKey: "navigation.library", href: "/library" },
   { icon: IconTemplate, labelKey: "navigation.templates", href: "/templates" },
 ];
@@ -149,7 +148,7 @@ function AssetsChatsSection({ open }: { open: boolean }) {
   );
   const displayedActiveThreadId =
     threadIdFromPath(location.pathname) ??
-    (location.pathname === "/" ? null : activeThreadId);
+    (location.pathname === "/home" ? null : activeThreadId);
   const chatItems = useMemo<ChatHistoryItem[]>(
     () =>
       visibleThreads.map((thread) => ({
@@ -189,7 +188,7 @@ function AssetsChatsSection({ open }: { open: boolean }) {
     persistActiveThreadId(threadId);
     navigateWithAgentChatViewTransition(
       navigate,
-      options?.isNew ? "/" : chatThreadPath(threadId),
+      options?.isNew ? "/home" : chatThreadPath(threadId),
     );
     window.requestAnimationFrame(() => {
       window.dispatchEvent(
@@ -305,7 +304,7 @@ export function Sidebar() {
   const navigate = useNavigate();
   const t = useT();
   const isCreateRoute =
-    location.pathname === "/" || location.pathname.startsWith("/chat/");
+    location.pathname === "/home" || location.pathname.startsWith("/chat/");
   const { data: auditAdmin } = useActionQuery("is-audit-admin", {}, {
     refetchInterval: 30_000,
   } as any) as { data: { allowed?: boolean } | undefined };
@@ -394,21 +393,9 @@ export function Sidebar() {
       )}
       data-sidebar-brand-toggle
     >
-      <img
-        src={appPath("/agent-native-icon-light.svg")}
-        alt=""
+      <AgentNativeIcon
         aria-hidden="true"
-        width={28}
-        height={16}
-        className="block h-4 w-7 shrink-0 object-contain object-center dark:hidden"
-      />
-      <img
-        src={appPath("/agent-native-icon-dark.svg")}
-        alt=""
-        aria-hidden="true"
-        width={28}
-        height={16}
-        className="hidden h-4 w-7 shrink-0 object-contain object-center dark:block"
+        className="h-3.5 w-6 shrink-0 text-sidebar-foreground"
       />
       {!collapsed && (
         <span className="text-sm font-semibold tracking-tight">
@@ -444,7 +431,7 @@ export function Sidebar() {
           {navItems.map((item) => {
             const Icon = item.icon;
             const isActive =
-              item.href === "/"
+              item.href === "/home"
                 ? isCreateRoute
                 : item.href === "/library"
                   ? location.pathname === "/library" ||
@@ -462,7 +449,7 @@ export function Sidebar() {
                 to={item.href}
                 onClick={(event) => {
                   if (
-                    item.href === "/" &&
+                    item.href === "/home" &&
                     !event.metaKey &&
                     !event.ctrlKey &&
                     !event.shiftKey &&
@@ -470,8 +457,8 @@ export function Sidebar() {
                   ) {
                     event.preventDefault();
                     focusAgentChat();
-                    if (!isCreateRoute || location.pathname !== "/") {
-                      navigateWithAgentChatViewTransition(navigate, "/");
+                    if (!isCreateRoute || location.pathname !== "/home") {
+                      navigateWithAgentChatViewTransition(navigate, "/home");
                     }
                   }
                 }}
@@ -500,7 +487,7 @@ export function Sidebar() {
             return (
               <div key={item.href}>
                 {link}
-                {item.href === "/" ? (
+                {item.href === "/home" ? (
                   <AssetsChatsSection open={isCreateRoute} />
                 ) : null}
               </div>
@@ -548,13 +535,13 @@ export function Sidebar() {
           </nav>
 
           {!collapsed && (
-            <div className="px-3 py-2">
+            <div className="px-3 py-2 empty:hidden">
               <OrgSwitcher />
             </div>
           )}
 
           {!collapsed && (
-            <div className="px-3 py-2">
+            <div className="px-3 py-2 empty:hidden">
               <DevDatabaseLink />
             </div>
           )}

package/corpus/templates/assets/app/hooks/use-navigation-state.ts

@@ -70,7 +70,7 @@ function navigationFromPath(pathname: string, search = "") {
   if (asset) return { view: "asset", assetId: asset[1] };
   const image = pathname.match(/^\/image\/([^/]+)/);
   if (image) return { view: "asset", assetId: image[1] };
-  if (pathname === "/") {
+  if (pathname === "/" || pathname === "/home") {
     return {
       view: "create",
     };
@@ -162,7 +162,7 @@ function pathFromCommand(command: any): string | null {
     if (typeof command.threadId === "string" && command.threadId.trim()) {
       return `/chat/${encodeURIComponent(command.threadId.trim())}`;
     }
-    return "/";
+    return "/home";
   }
   if (command.view === "picker") {
     const params = new URLSearchParams();

package/corpus/templates/assets/app/root.tsx

@@ -16,7 +16,14 @@ import { IconSun, IconMoon } from "@tabler/icons-react";
 import { useQueryClient } from "@tanstack/react-query";
 import { useTheme } from "next-themes";
 import { useCallback, useState } from "react";
-import { Links, Meta, Outlet, Scripts, ScrollRestoration } from "react-router";
+import {
+  Links,
+  Meta,
+  Outlet,
+  Scripts,
+  ScrollRestoration,
+  useLocation,
+} from "react-router";
 import type { LinksFunction } from "react-router";
 
 import { Layout as AppLayout } from "@/components/layout/Layout";
@@ -140,22 +147,35 @@ function AssetsCommandMenu({
   );
 }
 
-export default function Root() {
-  const [queryClient] = useState(() => createAgentNativeQueryClient());
+function AppContent() {
   const [cmdkOpen, setCmdkOpen] = useState(false);
   useCommandMenuShortcut(useCallback(() => setCmdkOpen(true), []));
+  return (
+    <>
+      <DbSyncSetup />
+      <AssetsCommandMenu open={cmdkOpen} onOpenChange={setCmdkOpen} />
+      <AppLayout>
+        <Outlet />
+      </AppLayout>
+    </>
+  );
+}
+
+export default function Root() {
+  const [queryClient] = useState(() => createAgentNativeQueryClient());
+  const location = useLocation();
+  const isMarketingPath = location.pathname === "/";
   return (
     <AppToolkitProvider>
       <AppProviders
         queryClient={queryClient}
-        toaster={<Toaster richColors position="bottom-left" />}
+        isPublicPath={isMarketingPath}
+        toaster={
+          isMarketingPath ? null : <Toaster richColors position="bottom-left" />
+        }
         i18n={{ catalog: i18nCatalog }}
       >
-        <DbSyncSetup />
-        <AssetsCommandMenu open={cmdkOpen} onOpenChange={setCmdkOpen} />
-        <AppLayout>
-          <Outlet />
-        </AppLayout>
+        {isMarketingPath ? <Outlet /> : <AppContent />}
       </AppProviders>
     </AppToolkitProvider>
   );

package/corpus/templates/assets/app/routes/_index.tsx

@@ -1,38 +1,5 @@
-import {
-  AgentChatSurface,
-  markAgentChatHomeHandoff,
-  sendToAgentChat,
-} from "@agent-native/core/client/agent-chat";
-import { getBrowserTabId } from "@agent-native/core/client/hooks";
-import { useT } from "@agent-native/core/client/i18n";
-import { IconPhoto, IconSparkles, IconVideo } from "@tabler/icons-react";
-import { useEffect } from "react";
-import { useNavigate, useParams } from "react-router";
-
-import { RecentDraftsSection } from "@/components/create/RecentDraftsSection";
-import { GenerationResults } from "@/components/generation/GenerationResults";
-import { useImageModelMenu } from "@/hooks/use-image-model-menu";
-import { ASSETS_CHAT_STORAGE_KEY } from "@/lib/chat";
-
-// Empty-state starters. Clicking one prefills the composer (without sending) so
-// the user can finish the thought instead of staring at a chip that does
-// nothing. `submit: false` = prefill only; `openSidebar: false` keeps focus on
-// the page-level Create surface.
-const CHAT_STARTERS = [
-  {
-    key: "image",
-    Icon: IconPhoto,
-    label: "image",
-    prompt: "Create an image of ",
-  },
-  {
-    key: "video",
-    Icon: IconVideo,
-    label: "video",
-    prompt: "Create a video of ",
-  },
-  { key: "refine", Icon: IconSparkles, label: "refine", prompt: "Refine " },
-] as const;
+import { appPath } from "@agent-native/core/client/api-path";
+import { MarketingHome } from "@agent-native/toolkit/marketing";
 
 const SEO_TITLE =
   "Assets - Open Source AI asset library for brand-safe images and video";
@@ -51,87 +18,19 @@ export function meta() {
   ];
 }
 
-function chatThreadPath(threadId: string | null) {
-  return threadId ? `/chat/${encodeURIComponent(threadId)}` : "/";
-}
-
-export default function CreatePage() {
-  const { threadId } = useParams();
-  const navigate = useNavigate();
-  const t = useT();
-  const threadUrlSync = threadId
-    ? {
-        routeThreadId: threadId,
-        getPath: chatThreadPath,
-        navigate,
-      }
-    : undefined;
-  const imageModelMenu = useImageModelMenu();
-
-  useEffect(() => {
-    function handleChatRunning(event: Event) {
-      const detail = (event as CustomEvent).detail;
-      if (detail?.isRunning === true) {
-        markAgentChatHomeHandoff(ASSETS_CHAT_STORAGE_KEY);
-      }
-    }
-
-    window.addEventListener("agentNative.chatRunning", handleChatRunning);
-    return () =>
-      window.removeEventListener("agentNative.chatRunning", handleChatRunning);
-  }, []);
-
+export default function MarketingHomeRoute() {
   return (
-    <div className="flex h-full min-h-0 flex-col bg-background">
-      <AgentChatSurface
-        mode="page"
-        chatViewTransition
-        className="assets-create-chat-panel"
-        defaultMode="chat"
-        storageKey={ASSETS_CHAT_STORAGE_KEY}
-        threadUrlSync={threadUrlSync}
-        browserTabId={getBrowserTabId()}
-        threadFooterSlot={({ threadId }) => (
-          <GenerationResults threadId={threadId} />
-        )}
-        imageModelMenu={imageModelMenu}
-        showHeader={false}
-        showTabBar={false}
-        dynamicSuggestions={false}
-        suggestions={[]}
-        emptyStateText={t("create.emptyState")}
-        emptyStateDisplay="hidden"
-        centerComposerWhenEmpty
-        composerLayoutVariant="hero"
-        composerPlaceholder={t("create.composerPlaceholder")}
-        composerSlot={
-          <div className="assets-create-chat-intro">
-            <h1>{t("create.heroTitle")}</h1>
-            <p>{t("create.heroDescription")}</p>
-            <div className="assets-create-chat-pill-row">
-              {CHAT_STARTERS.map(({ key, Icon, prompt }) => (
-                <button
-                  key={key}
-                  type="button"
-                  onClick={() =>
-                    sendToAgentChat({
-                      message: prompt,
-                      submit: false,
-                      openSidebar: false,
-                    })
-                  }
-                >
-                  <Icon className="size-3.5" />
-                  {t(`create.starters.${key}`)}
-                </button>
-              ))}
-            </div>
-            <div className="mt-8 w-[min(100vw-2rem,64rem)] px-4 text-left sm:px-6">
-              <RecentDraftsSection />
-            </div>
-          </div>
-        }
-      />
-    </div>
+    <MarketingHome
+      appName="Assets"
+      tagline="Your AI agent creates, refines, and organizes on-brand assets alongside you."
+      description={SEO_DESCRIPTION}
+      valueProps={[
+        "Build reusable libraries from logos, product shots, videos, and references",
+        "Generate heroes, diagrams, product visuals, and videos from a prompt",
+        "Audit prompts, references, outputs, and refinements across every run",
+      ]}
+      primaryActionHref={appPath("/home")}
+      secondaryActionHref={appPath("/sign-in")}
+    />
   );
 }

package/corpus/templates/assets/app/routes/chat.$threadId.tsx

@@ -1 +1 @@
-export { default, meta } from "./_index";
+export { default, meta } from "./home";

package/corpus/templates/assets/app/routes/home.tsx

@@ -0,0 +1,137 @@
+import {
+  AgentChatSurface,
+  markAgentChatHomeHandoff,
+  sendToAgentChat,
+} from "@agent-native/core/client/agent-chat";
+import { getBrowserTabId } from "@agent-native/core/client/hooks";
+import { useT } from "@agent-native/core/client/i18n";
+import { IconPhoto, IconSparkles, IconVideo } from "@tabler/icons-react";
+import { useEffect } from "react";
+import { useNavigate, useParams } from "react-router";
+
+import { RecentDraftsSection } from "@/components/create/RecentDraftsSection";
+import { GenerationResults } from "@/components/generation/GenerationResults";
+import { useImageModelMenu } from "@/hooks/use-image-model-menu";
+import { ASSETS_CHAT_STORAGE_KEY } from "@/lib/chat";
+
+// Empty-state starters. Clicking one prefills the composer (without sending) so
+// the user can finish the thought instead of staring at a chip that does
+// nothing. `submit: false` = prefill only; `openSidebar: false` keeps focus on
+// the page-level Create surface.
+const CHAT_STARTERS = [
+  {
+    key: "image",
+    Icon: IconPhoto,
+    label: "image",
+    prompt: "Create an image of ",
+  },
+  {
+    key: "video",
+    Icon: IconVideo,
+    label: "video",
+    prompt: "Create a video of ",
+  },
+  { key: "refine", Icon: IconSparkles, label: "refine", prompt: "Refine " },
+] as const;
+
+const SEO_TITLE =
+  "Assets - Open Source AI asset library for brand-safe images and video";
+const SEO_DESCRIPTION =
+  "Open Source asset manager for AI teams to organize brand libraries, search creative work, and generate on-brand images and videos.";
+
+export function meta() {
+  return [
+    { title: SEO_TITLE },
+    { name: "description", content: SEO_DESCRIPTION },
+    { property: "og:title", content: SEO_TITLE },
+    { property: "og:description", content: SEO_DESCRIPTION },
+    { name: "twitter:card", content: "summary" },
+    { name: "twitter:title", content: SEO_TITLE },
+    { name: "twitter:description", content: SEO_DESCRIPTION },
+  ];
+}
+
+function chatThreadPath(threadId: string | null) {
+  return threadId ? `/chat/${encodeURIComponent(threadId)}` : "/home";
+}
+
+export default function CreatePage() {
+  const { threadId } = useParams();
+  const navigate = useNavigate();
+  const t = useT();
+  const threadUrlSync = threadId
+    ? {
+        routeThreadId: threadId,
+        getPath: chatThreadPath,
+        navigate,
+      }
+    : undefined;
+  const imageModelMenu = useImageModelMenu();
+
+  useEffect(() => {
+    function handleChatRunning(event: Event) {
+      const detail = (event as CustomEvent).detail;
+      if (detail?.isRunning === true) {
+        markAgentChatHomeHandoff(ASSETS_CHAT_STORAGE_KEY);
+      }
+    }
+
+    window.addEventListener("agentNative.chatRunning", handleChatRunning);
+    return () =>
+      window.removeEventListener("agentNative.chatRunning", handleChatRunning);
+  }, []);
+
+  return (
+    <div className="flex h-full min-h-0 flex-col bg-background">
+      <AgentChatSurface
+        mode="page"
+        chatViewTransition
+        className="assets-create-chat-panel"
+        defaultMode="chat"
+        storageKey={ASSETS_CHAT_STORAGE_KEY}
+        threadUrlSync={threadUrlSync}
+        browserTabId={getBrowserTabId()}
+        threadFooterSlot={({ threadId }) => (
+          <GenerationResults threadId={threadId} />
+        )}
+        imageModelMenu={imageModelMenu}
+        showHeader={false}
+        showTabBar={false}
+        dynamicSuggestions={false}
+        suggestions={[]}
+        emptyStateText={t("create.emptyState")}
+        emptyStateDisplay="hidden"
+        centerComposerWhenEmpty
+        composerLayoutVariant="hero"
+        composerPlaceholder={t("create.composerPlaceholder")}
+        composerSlot={
+          <div className="assets-create-chat-intro">
+            <h1>{t("create.heroTitle")}</h1>
+            <p>{t("create.heroDescription")}</p>
+            <div className="assets-create-chat-pill-row">
+              {CHAT_STARTERS.map(({ key, Icon, prompt }) => (
+                <button
+                  key={key}
+                  type="button"
+                  onClick={() =>
+                    sendToAgentChat({
+                      message: prompt,
+                      submit: false,
+                      openSidebar: false,
+                    })
+                  }
+                >
+                  <Icon className="size-3.5" />
+                  {t(`create.starters.${key}`)}
+                </button>
+              ))}
+            </div>
+            <div className="mt-8 w-[min(100vw-2rem,64rem)] px-4 text-left sm:px-6">
+              <RecentDraftsSection />
+            </div>
+          </div>
+        }
+      />
+    </div>
+  );
+}

package/corpus/templates/assets/app/routes/library.tsx

@@ -3193,7 +3193,11 @@ export function AssetPickerSurface() {
                 size="icon"
                 title={t("library.openAssets")}
               >
-                <a href={absoluteAppUrl("/")} target="_blank" rel="noreferrer">
+                <a
+                  href={absoluteAppUrl("/home")}
+                  target="_blank"
+                  rel="noreferrer"
+                >
                   <IconArrowUpRight className="h-4 w-4" />
                 </a>
               </Button>

package/corpus/templates/assets/app/routes/settings.tsx

@@ -10,6 +10,7 @@ import {
 import { TeamPage } from "@agent-native/core/client/org";
 import {
   AccountSettingsCard,
+  BuilderConnectPopover,
   SettingsGroup,
   SettingsRow,
   SettingsTabsPage,
@@ -228,6 +229,7 @@ function AssetsSetupCard({ libraryCount }: { libraryCount: number }) {
   };
 
   const flow = useBuilderConnectFlow({
+    provisionAccount: true,
     trackingSource: "assets_settings_connections",
     trackingFlow: "image_generation",
     onConnected: refreshSetup,
@@ -307,31 +309,32 @@ function AssetsSetupCard({ libraryCount }: { libraryCount: number }) {
           }
           control={
             builderEnabled ? (
-              <Button
-                type="button"
-                variant="outline"
-                size="sm"
-                onClick={() => flow.start()}
-                disabled={flow.connecting}
-                className="shrink-0"
-              >
-                {flow.connecting ? (
-                  <>
-                    <IconLoader2 className="size-3.5 animate-spin" />
-                    {t("settings.connecting")}
-                  </>
-                ) : builderConnected ? (
-                  <>
-                    {t("settings.reconnect")}
-                    <IconExternalLink className="size-3.5" />
-                  </>
-                ) : (
-                  <>
-                    {t("settings.connect")}
-                    <IconExternalLink className="size-3.5" />
-                  </>
-                )}
-              </Button>
+              <BuilderConnectPopover flow={flow}>
+                <Button
+                  type="button"
+                  variant="outline"
+                  size="sm"
+                  disabled={flow.connecting}
+                  className="shrink-0"
+                >
+                  {flow.connecting ? (
+                    <>
+                      <IconLoader2 className="size-3.5 animate-spin" />
+                      {t("settings.connecting")}
+                    </>
+                  ) : builderConnected ? (
+                    <>
+                      {t("settings.reconnect")}
+                      <IconExternalLink className="size-3.5" />
+                    </>
+                  ) : (
+                    <>
+                      {t("settings.connect")}
+                      <IconExternalLink className="size-3.5" />
+                    </>
+                  )}
+                </Button>
+              </BuilderConnectPopover>
             ) : null
           }
         />

package/corpus/templates/assets/changelog/2026-08-26-templates-across-brand-kits.md

@@ -2,4 +2,5 @@
 type: added
 date: 2026-08-26
 ---
+
 Templates are now their own surface and can be used across brand kits.

package/corpus/templates/assets/public/manifest.json

@@ -2,7 +2,7 @@
   "name": "Assets",
   "short_name": "Assets",
   "description": "Digital asset libraries for uploaded and generated images and videos",
-  "start_url": "/",
+  "start_url": "./home",
   "background_color": "#111111",
   "theme_color": "#111111",
   "icons": [

package/corpus/templates/assets/server/plugins/auth.ts

@@ -1,6 +1,7 @@
 import { createAuthPlugin } from "@agent-native/core/server";
 
 export default createAuthPlugin({
+  workspaceAppPublicPaths: ["/"],
   marketing: {
     appName: "Assets",
     tagline:

package/corpus/templates/brain/.agents/skills/frontend-design/SKILL.md

@@ -68,6 +68,10 @@ is the target: a surface full of information and nearly empty of narration. So
 "make it minimal" is never satisfied by removing data or by burying it behind
 extra clicks, and never blocked by deleting a sentence.
 
+Keep on-screen text and badging minimal: show the shortest label needed for the
+next action, remove decorative or duplicate status chips, and put context in a
+tooltip or progressive disclosure when it is not needed to decide.
+
 Do not add, unless asked:
 
 - A page title that repeats the nav item or route the user just clicked, or a

package/corpus/templates/brain/.agents/skills/secrets/SKILL.md

@@ -31,6 +31,53 @@ standard workspace connections and org/workspace vault scopes; never put them
 in `.env` or deployment environment variables, and never add a provider-specific
 action or startup bootstrap just to write a credential for one organization.
 
+## Google OAuth triage
+
+| Observation | Meaning | Next action |
+| --- | --- | --- |
+| `invalid_grant` from a deliberately fake code | Google accepted the client pair and rejected only the code | Do not rotate credentials; check flow state and callback registration |
+| `invalid_client` | Google rejected the client id/secret pair | Verify the exact pair and deployment source before rotating |
+| `redirect_uri_mismatch` | The client, host, callback path, and Google registration disagree | Compare that exact tuple in Google Cloud Console; publish a new deploy if site-scoped or build-time configuration changes |
+
+Do not reason about this from memory. The probe checks both contracts: the
+unqualified `/health/google` endpoint reports the sign-in contract, while
+`/health/google?client=managed` reports deployment-level managed OAuth. It asks
+Google directly whether each live `(client_id, redirect_uri)` pair is
+registered:
+
+```bash
+pnpm check:google-redirect-uris -- --env all
+```
+
+The sign-in health path calls `checkGoogleSignInCredential()`, which prefers
+the active Better Auth pair and otherwise uses `resolveGoogleSignInCredentials()`
+from `packages/core/src/server/google-oauth-credentials.ts`. Managed health
+calls `checkGoogleManagedCredential()`, which resolves
+`["GOOGLE_CLIENT_ID", "GOOGLE_CLIENT_SECRET"]` through `resolveSecretPair()` in
+`packages/core/src/server/credential-provider.ts`. App provider handlers use
+`resolveGoogleProviderCredentialCandidatesWithReader()` with `resolveSecret`
+under request context. These are separate flows and can intentionally land on
+different Google clients, so a clean result for one says nothing about the
+other. Read both contracts before changing anything:
+
+```bash
+curl -s https://HOST/_agent-native/health/google | jq '{clientId,mismatchedPairs,credentialSource}'
+curl -s "https://HOST/_agent-native/health/google?client=managed" | jq '{clientId,mismatchedPairs,credentialSource}'
+```
+
+Different `clientId` values across those two, or `mismatchedPairs: true`, is a
+divergence to understand, not damage to undo. Never repair it by rotating a
+secret: writing a fresh value into whichever namespace the failing flow does
+not read verifies clean and changes nothing. Do not collapse the namespaces
+without first confirming which flow uses which client; separate sign-in and
+managed clients on one host can be deliberate. For prebuilt Netlify deploys,
+uploaded Functions read site-scoped secrets at runtime, and the health route
+resolves them per request. The build may receive masked placeholder values.
+After changing a site-scoped env var, publish a new deploy before verifying
+live behavior. Call it a rebuild when the changed value is baked into build
+output or static assets; a runtime-only secret does not need to be baked into
+the bundle.
+
 ## Credential Modeling Preflight
 
 Before registering a provider's fields, inspect the workspace/provider connection