@agent-native/core 0.177.0 → 0.177.1-nightly-20260908153602

package/corpus/templates/design/e2e/helpers.ts

@@ -555,3 +555,69 @@ export async function cdpScreenshot(
   const { writeFile } = await import("node:fs/promises");
   await writeFile(filePath, Buffer.from(data, "base64"));
 }
+
+/** Inner markup of one node, matched by walking tag depth from its open tag —
+ * a non-greedy regex would stop at the first `</div>` of a nested child. */
+export function elementInner(html: string, nodeId: string): string {
+  const openIndex = html.indexOf(`data-agent-native-node-id="${nodeId}"`);
+  if (openIndex < 0) throw new Error(`node ${nodeId} not found`);
+  const tagStart = html.lastIndexOf("<", openIndex);
+  const tag = /^<([a-zA-Z0-9-]+)/.exec(html.slice(tagStart))?.[1];
+  if (!tag) throw new Error(`no tag for ${nodeId}`);
+  const contentStart = html.indexOf(">", openIndex) + 1;
+  const pattern = new RegExp(`</?${tag}\\b`, "g");
+  pattern.lastIndex = contentStart;
+  let depth = 1;
+  let match: RegExpExecArray | null;
+  while ((match = pattern.exec(html))) {
+    depth += match[0].startsWith("</") ? -1 : 1;
+    if (depth === 0) return html.slice(contentStart, match.index);
+  }
+  throw new Error(`unbalanced ${tag} for ${nodeId}`);
+}
+
+const VOID_TAGS = new Set([
+  "area",
+  "base",
+  "br",
+  "col",
+  "embed",
+  "hr",
+  "img",
+  "input",
+  "link",
+  "meta",
+  "source",
+  "track",
+  "wbr",
+]);
+
+/** Node ids of one node's direct children, in DOM order. A subtree-wide scan
+ * also collects the generated `<span data-an-text>` ids inside painted or
+ * padded text leaves, which are not flow children of this node. */
+export function childNodeIds(html: string, parentId: string): string[] {
+  const ids: string[] = [];
+  let depth = 0;
+  for (const tag of elementInner(html, parentId).matchAll(
+    /<(\/?)([a-zA-Z0-9-]+)([^>]*)>/g,
+  )) {
+    const [, slash, name, attrs] = tag as unknown as [
+      string,
+      string,
+      string,
+      string,
+    ];
+    if (slash === "/") {
+      depth -= 1;
+      continue;
+    }
+    if (depth === 0) {
+      const id = /data-agent-native-node-id="([^"]+)"/.exec(attrs)?.[1];
+      if (id) ids.push(id);
+    }
+    if (!attrs.trimEnd().endsWith("/") && !VOID_TAGS.has(name.toLowerCase())) {
+      depth += 1;
+    }
+  }
+  return ids;
+}

package/dist/client/agent-page/AgentTabsPage.js

@@ -407,7 +407,7 @@ export function AgentTabsPage({ appName, extraTabs = [], extraTabFactories = [],
                                             event.preventDefault();
                                             selectSearchResult(results[0]);
                                         }
-                                    }, placeholder: searchPlaceholder, "aria-label": searchPlaceholder, className: "h-8 w-full rounded-md border border-border bg-background ps-8 pe-7 text-[13px] text-foreground outline-none transition-colors placeholder:text-muted-foreground focus:border-foreground/30 focus:ring-2 focus:ring-accent/40" }), query && (_jsx("button", { type: "button", onClick: () => setQuery(""), "aria-label": "Clear search", className: "absolute end-1.5 top-1/2 flex size-5 -translate-y-1/2 cursor-pointer items-center justify-center rounded text-muted-foreground hover:bg-accent/60 hover:text-foreground", children: _jsx(IconX, { className: "size-3.5" }) }))] })) : null, query.trim() ? (_jsx("div", { role: "listbox", "aria-label": "Agent search results", className: "flex flex-col gap-0.5", children: results.length === 0 ? (_jsx("p", { className: "px-2 py-6 text-center text-xs text-muted-foreground", children: "No matching items" })) : (results.map((entry) => (_jsx("button", { type: "button", role: "option", onClick: () => selectSearchResult(entry), className: "flex cursor-pointer items-start gap-2 rounded-md px-2.5 py-2 text-start text-sm text-foreground hover:bg-accent/60", children: _jsxs("span", { className: "flex min-w-0 flex-col", children: [_jsx("span", { className: "truncate font-medium", children: entry.label }), _jsx("span", { className: "truncate text-[11px] text-muted-foreground", children: entry.description ?? entry.tabId })] }) }, entry.id)))) })) : (_jsx("nav", { "aria-label": "Agent sections", role: "tablist", className: "flex gap-1 overflow-x-auto sm:flex-col sm:overflow-x-visible", children: tabGroups.map((group, groupIndex) => (_jsxs("div", { className: cn("contents sm:block", groupIndex > 0 &&
+                                    }, placeholder: searchPlaceholder, "aria-label": searchPlaceholder, className: "agent-native-search-input h-8 w-full rounded-md border border-border bg-background ps-8 pe-7 text-[13px] text-foreground outline-none transition-colors placeholder:text-muted-foreground focus:border-foreground/30 focus:ring-2 focus:ring-accent/40" }), query && (_jsx("button", { type: "button", onClick: () => setQuery(""), "aria-label": "Clear search", className: "absolute end-1.5 top-1/2 flex size-5 -translate-y-1/2 cursor-pointer items-center justify-center rounded text-muted-foreground hover:bg-accent/60 hover:text-foreground", children: _jsx(IconX, { className: "size-3.5" }) }))] })) : null, query.trim() ? (_jsx("div", { role: "listbox", "aria-label": "Agent search results", className: "flex flex-col gap-0.5", children: results.length === 0 ? (_jsx("p", { className: "px-2 py-6 text-center text-xs text-muted-foreground", children: "No matching items" })) : (results.map((entry) => (_jsx("button", { type: "button", role: "option", onClick: () => selectSearchResult(entry), className: "flex cursor-pointer items-start gap-2 rounded-md px-2.5 py-2 text-start text-sm text-foreground hover:bg-accent/60", children: _jsxs("span", { className: "flex min-w-0 flex-col", children: [_jsx("span", { className: "truncate font-medium", children: entry.label }), _jsx("span", { className: "truncate text-[11px] text-muted-foreground", children: entry.description ?? entry.tabId })] }) }, entry.id)))) })) : (_jsx("nav", { "aria-label": "Agent sections", role: "tablist", className: "flex gap-1 overflow-x-auto sm:flex-col sm:overflow-x-visible", children: tabGroups.map((group, groupIndex) => (_jsxs("div", { className: cn("contents sm:block", groupIndex > 0 &&
                                     "sm:mt-2 sm:border-t sm:border-border/60 sm:pt-2"), children: [group.id === "resources" && (_jsx("div", { className: "hidden px-2.5 pb-1 pt-1 text-[10px] font-semibold uppercase tracking-[0.16em] text-muted-foreground/50 sm:block", children: "Agent resources" })), group.id === "agent" && (_jsx("div", { className: "hidden px-2.5 pb-1 pt-1 text-[10px] font-semibold uppercase tracking-[0.16em] text-muted-foreground/50 sm:block", children: "Agent operations" })), _jsx("div", { className: "contents sm:flex sm:flex-col sm:gap-1", children: group.tabs.map((tab) => {
                                             const Icon = tab.icon;
                                             const selected = tab.id === selectedTab?.id;

package/dist/client/settings/SettingsTabsPage.js

@@ -413,7 +413,7 @@ function SettingsTabsPageContent({ general, account, team, whatsNew, extraTabs =
                                         event.preventDefault();
                                         selectEntry(results[0]);
                                     }
-                                }, placeholder: searchPlaceholder, "aria-label": searchPlaceholder, className: "h-8 w-full rounded-md border border-border bg-background ps-8 pe-7 text-[13px] text-foreground outline-none transition-colors placeholder:text-muted-foreground focus:border-foreground/30 focus:ring-2 focus:ring-accent/40" }), query ? (_jsx("button", { type: "button", onClick: () => setQuery(""), "aria-label": "Clear search", className: "absolute end-1.5 top-1/2 flex size-5 -translate-y-1/2 items-center justify-center rounded text-muted-foreground hover:bg-accent/60 hover:text-foreground", children: _jsx(IconX, { className: "size-3.5" }) })) : null] })) : null, searching ? (_jsx("div", { role: "listbox", "aria-label": "Settings search results", className: "flex flex-col gap-0.5", children: results.length === 0 ? (_jsx("p", { className: "px-2 py-6 text-center text-[12px] text-muted-foreground", children: "No matching settings" })) : (results.map((entry) => {
+                                }, placeholder: searchPlaceholder, "aria-label": searchPlaceholder, className: "agent-native-search-input h-8 w-full rounded-md border border-border bg-background ps-8 pe-7 text-[13px] text-foreground outline-none transition-colors placeholder:text-muted-foreground focus:border-foreground/30 focus:ring-2 focus:ring-accent/40" }), query ? (_jsx("button", { type: "button", onClick: () => setQuery(""), "aria-label": "Clear search", className: "absolute end-1.5 top-1/2 flex size-5 -translate-y-1/2 items-center justify-center rounded text-muted-foreground hover:bg-accent/60 hover:text-foreground", children: _jsx(IconX, { className: "size-3.5" }) })) : null] })) : null, searching ? (_jsx("div", { role: "listbox", "aria-label": "Settings search results", className: "flex flex-col gap-0.5", children: results.length === 0 ? (_jsx("p", { className: "px-2 py-6 text-center text-[12px] text-muted-foreground", children: "No matching settings" })) : (results.map((entry) => {
                             const Icon = entry.icon;
                             const tab = tabs.find((candidate) => candidate.id === entry.tabId);
                             const entryHash = entry.hash?.replace(/^#/, "");

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/email-catalog/actions/list-email-log.d.ts

@@ -1,6 +1,13 @@
 declare const _default: import("../../action.js").ActionDefinition<{
     templateId?: string;
+    to?: string;
+    from?: string;
+    status?: "failed" | "sent";
+    provider?: string;
+    sinceMs?: unknown;
+    untilMs?: unknown;
     limit?: unknown;
+    offset?: unknown;
 }, {
     entries: import("../log.js").EmailLogEntry[];
 }>;

package/dist/email-catalog/actions/list-email-log.js

@@ -5,19 +5,45 @@ import { getRequestOrgId } from "../../server/request-context.js";
 import { authorizeTransactionalEmailRead } from "../authorize.js";
 import { listEmailLog } from "../log.js";
 export default defineAction({
-    description: "List recent transactional email sends from this app, newest first, optionally filtered to one registered email id.",
+    description: "List recent transactional email sends from this app, newest first — the audit trail of every attempted send, including the raw request sent to the mail provider and its raw response. Supports filtering by registered email id, recipient/sender substring, status, provider, and a date range. Use this to answer 'did this email go out' or 'why did this email go to the wrong person'.",
     schema: z.object({
         templateId: z.string().optional(),
+        to: z
+            .string()
+            .optional()
+            .describe("Substring match against the recipient address."),
+        from: z
+            .string()
+            .optional()
+            .describe("Substring match against the resolved sender address."),
+        status: z.enum(["sent", "failed"]).optional(),
+        provider: z.string().optional(),
+        sinceMs: z.coerce
+            .number()
+            .optional()
+            .describe("Only sends at or after this Unix epoch (ms)."),
+        untilMs: z.coerce
+            .number()
+            .optional()
+            .describe("Only sends at or before this Unix epoch (ms)."),
         limit: z.coerce.number().int().min(1).max(500).default(100),
+        offset: z.coerce.number().int().min(0).default(0),
     }),
     http: { method: "GET" },
     authorize: ({ templateId }) => authorizeTransactionalEmailRead(templateId ? [templateId] : []),
-    run: async ({ templateId, limit }) => ({
+    run: async ({ templateId, to, from, status, provider, sinceMs, untilMs, limit, offset, }) => ({
         entries: await listEmailLog({
             orgId: getRequestOrgId() ?? "",
             app: getAppConfig().app.slug ?? "unknown",
             templateId,
+            to,
+            from,
+            status,
+            provider,
+            sinceMs,
+            untilMs,
             limit,
+            offset,
         }),
     }),
 });

package/dist/email-catalog/log.d.ts

@@ -14,8 +14,15 @@ export interface RecordEmailSendArgs {
     sender: string;
     subject: string;
     status: "sent" | "failed";
+    /** Set when the call never reached the provider (threw before/without an HTTP response). */
     error?: string;
     provider: string;
+    /** Exact outbound JSON body sent to the provider, credential- and attachment-body-free. */
+    requestPayload?: string;
+    /** Raw HTTP status code from the provider, when a response was received. */
+    responseStatus?: number;
+    /** Raw HTTP response body text from the provider, when a response was received. */
+    responseBody?: string;
 }
 /**
  * Append one send record.
@@ -48,14 +55,33 @@ export interface EmailLogEntry {
     status: string;
     error: string | null;
     provider: string;
+    requestPayload: string | null;
+    responseStatus: number | null;
+    responseBody: string | null;
     createdAt: number;
 }
-/** Most recent sends for one app, newest first, optionally filtered to one template. */
-export declare function listEmailLog(options: {
+export interface ListEmailLogFilters {
     orgId: string;
     app: string;
     templateId?: string;
+    /** Substring match against the recipient address. */
+    to?: string;
+    /** Substring match against the resolved sender address. */
+    from?: string;
+    status?: "sent" | "failed";
+    provider?: string;
+    /** Only sends at or after this Unix epoch (ms). */
+    sinceMs?: number;
+    /** Only sends at or before this Unix epoch (ms). */
+    untilMs?: number;
     limit?: number;
-}): Promise<EmailLogEntry[]>;
+    offset?: number;
+}
+/**
+ * Most recent sends for one app, newest first, combinably filtered — modeled
+ * on `queryAuditEvents` so this admin-facing query builds the same way every
+ * other filterable log in the framework does.
+ */
+export declare function listEmailLog(options: ListEmailLogFilters): Promise<EmailLogEntry[]>;
 /** Provider category that is safe to query for one organization only. */
 export declare function getScopedEmailProviderCategory(templateId: string, orgId: string): string;

package/dist/email-catalog/log.js

@@ -11,35 +11,25 @@ import { ensureColumnExists, ensureIndexExists, ensureTableExists, } from "../db
 import { widenIntColumnsToBigInt } from "../db/widen-columns.js";
 import { getRequestOrgId } from "../server/request-context.js";
 let _initPromise;
+const ADDITIVE_TEXT_COLUMNS = ["request_payload", "response_body"];
 export async function ensureTable() {
     if (!_initPromise) {
         _initPromise = (async () => {
-            const { EMAIL_LOG_CREATE_SQL, EMAIL_LOG_ORG_APP_INDEX_SQL, EMAIL_LOG_TEMPLATE_INDEX_SQL, } = await import("./schema.js");
-            const client = getDbExec();
+            const { EMAIL_LOG_CREATE_SQL, EMAIL_LOG_ORG_APP_INDEX_SQL, EMAIL_LOG_TEMPLATE_INDEX_SQL, EMAIL_LOG_ORG_STATUS_INDEX_SQL, EMAIL_LOG_ORG_PROVIDER_INDEX_SQL, } = await import("./schema.js");
             // Generic INTEGER maps to BIGINT on Postgres, which millisecond
             // timestamps need.
             const createSql = EMAIL_LOG_CREATE_SQL.replace(/\bINTEGER\b/g, "BIGINT");
-            {
-                await ensureTableExists("email_log", createSql);
-                await widenIntColumnsToBigInt("email_log", ["created_at"]);
-                await ensureColumnExists("email_log", "org_id", "ALTER TABLE email_log ADD COLUMN IF NOT EXISTS org_id TEXT");
-                await ensureIndexExists("email_log_template_created_idx", EMAIL_LOG_TEMPLATE_INDEX_SQL);
-                await ensureIndexExists("email_log_org_app_created_idx", EMAIL_LOG_ORG_APP_INDEX_SQL);
-                return;
+            await ensureTableExists("email_log", createSql);
+            await widenIntColumnsToBigInt("email_log", ["created_at"]);
+            await ensureColumnExists("email_log", "org_id", "ALTER TABLE email_log ADD COLUMN IF NOT EXISTS org_id TEXT");
+            for (const column of ADDITIVE_TEXT_COLUMNS) {
+                await ensureColumnExists("email_log", column, `ALTER TABLE email_log ADD COLUMN IF NOT EXISTS ${column} TEXT`);
             }
-            await client.execute(createSql);
-            try {
-                await client.execute("ALTER TABLE email_log ADD COLUMN org_id TEXT");
-            }
-            catch (error) {
-                const message = String(error?.message ?? error);
-                if (!/already exists|duplicate column name/i.test(message)) {
-                    throw error;
-                }
-                console.info("[agent-native:email] email_log.org_id already exists during local bootstrap");
-            }
-            await client.execute(EMAIL_LOG_TEMPLATE_INDEX_SQL);
-            await client.execute(EMAIL_LOG_ORG_APP_INDEX_SQL);
+            await ensureColumnExists("email_log", "response_status", "ALTER TABLE email_log ADD COLUMN IF NOT EXISTS response_status BIGINT");
+            await ensureIndexExists("email_log_template_created_idx", EMAIL_LOG_TEMPLATE_INDEX_SQL);
+            await ensureIndexExists("email_log_org_app_created_idx", EMAIL_LOG_ORG_APP_INDEX_SQL);
+            await ensureIndexExists("email_log_org_status_created_idx", EMAIL_LOG_ORG_STATUS_INDEX_SQL);
+            await ensureIndexExists("email_log_org_provider_created_idx", EMAIL_LOG_ORG_PROVIDER_INDEX_SQL);
         })().catch((error) => {
             // Don't memoize a failed bootstrap — the next send should retry rather
             // than log nothing forever.
@@ -63,8 +53,8 @@ export async function recordEmailSend(args) {
         const orgId = args.orgId ?? getRequestOrgId() ?? null;
         await getDbExec().execute({
             sql: `INSERT INTO email_log
-        (id, org_id, template_id, app, recipient, sender, subject, status, error, provider, created_at)
-        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+        (id, org_id, template_id, app, recipient, sender, subject, status, error, provider, request_payload, response_status, response_body, created_at)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
             args: [
                 randomUUID(),
                 orgId,
@@ -76,6 +66,9 @@ export async function recordEmailSend(args) {
                 args.status,
                 args.error ?? null,
                 args.provider,
+                args.requestPayload ?? null,
+                args.responseStatus ?? null,
+                args.responseBody ?? null,
                 Date.now(),
             ],
         });
@@ -108,20 +101,49 @@ export async function getEmailSendStats(since, app, orgId) {
         lastSentAt: row.last_sent_at == null ? null : Number(row.last_sent_at),
     }));
 }
-/** Most recent sends for one app, newest first, optionally filtered to one template. */
+const LOG_COLUMNS = "id, template_id, app, recipient, sender, subject, status, error, provider, " +
+    "request_payload, response_status, response_body, created_at";
+/**
+ * Most recent sends for one app, newest first, combinably filtered — modeled
+ * on `queryAuditEvents` so this admin-facing query builds the same way every
+ * other filterable log in the framework does.
+ */
 export async function listEmailLog(options) {
     await ensureTable();
+    const where = ["org_id = ?", "app = ?"];
+    const args = [options.orgId, options.app];
+    const push = (clause, value) => {
+        where.push(clause);
+        args.push(value);
+    };
+    if (options.templateId)
+        push("template_id = ?", options.templateId);
+    if (options.status)
+        push("status = ?", options.status);
+    if (options.provider)
+        push("provider = ?", options.provider);
+    if (options.to)
+        push("recipient LIKE ?", `%${options.to}%`);
+    if (options.from)
+        push("sender LIKE ?", `%${options.from}%`);
+    if (typeof options.sinceMs === "number") {
+        push("created_at >= ?", Math.floor(options.sinceMs));
+    }
+    if (typeof options.untilMs === "number") {
+        push("created_at <= ?", Math.floor(options.untilMs));
+    }
     const limit = Math.min(Math.max(options.limit ?? 100, 1), 500);
-    const where = options.templateId
-        ? `WHERE org_id = ? AND app = ? AND template_id = ?`
-        : `WHERE org_id = ? AND app = ?`;
-    const args = options.templateId
-        ? [options.orgId, options.app, options.templateId, limit]
-        : [options.orgId, options.app, limit];
+    const offset = Math.max(0, Math.floor(options.offset ?? 0));
     const { rows } = await getDbExec().execute({
-        sql: `SELECT id, template_id, app, recipient, sender, subject, status, error, provider, created_at
-      FROM email_log ${where} ORDER BY created_at DESC LIMIT ?`,
-        args,
+        // `id DESC` breaks ties on `created_at` (millisecond resolution, so
+        // concurrent/bulk sends can share a timestamp) — without it, tied rows
+        // can sort differently across page requests and the Send log UI would
+        // skip or duplicate entries when paging.
+        sql: `SELECT ${LOG_COLUMNS} FROM email_log
+      WHERE ${where.join(" AND ")}
+      ORDER BY created_at DESC, id DESC
+      LIMIT ? OFFSET ?`,
+        args: [...args, limit, offset],
     });
     return rows.map((row) => ({
         id: String(row.id),
@@ -133,6 +155,9 @@ export async function listEmailLog(options) {
         status: String(row.status),
         error: row.error == null ? null : String(row.error),
         provider: String(row.provider),
+        requestPayload: row.request_payload == null ? null : String(row.request_payload),
+        responseStatus: row.response_status == null ? null : Number(row.response_status),
+        responseBody: row.response_body == null ? null : String(row.response_body),
         createdAt: Number(row.created_at),
     }));
 }

package/dist/email-catalog/schema.d.ts

@@ -186,6 +186,57 @@ export declare const emailLog: import("drizzle-orm/pg-core").PgTableWithColumns<
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        requestPayload: import("drizzle-orm/pg-core").PgColumn<{
+            name: "request_payload";
+            tableName: "email_log";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        responseStatus: import("drizzle-orm/pg-core").PgColumn<{
+            name: "response_status";
+            tableName: "email_log";
+            dataType: "number";
+            columnType: "PgBigInt53";
+            data: number;
+            driverParam: string | number;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        responseBody: import("drizzle-orm/pg-core").PgColumn<{
+            name: "response_body";
+            tableName: "email_log";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         createdAt: import("drizzle-orm/pg-core").PgColumn<{
             name: "created_at";
             tableName: "email_log";
@@ -206,6 +257,8 @@ export declare const emailLog: import("drizzle-orm/pg-core").PgTableWithColumns<
     };
     dialect: 'pg';
 }>;
-export declare const EMAIL_LOG_CREATE_SQL = "CREATE TABLE IF NOT EXISTS email_log (\n  id TEXT PRIMARY KEY,\n  org_id TEXT,\n  template_id TEXT,\n  app TEXT,\n  recipient TEXT NOT NULL,\n  sender TEXT NOT NULL,\n  subject TEXT NOT NULL,\n  status TEXT NOT NULL,\n  error TEXT,\n  provider TEXT NOT NULL,\n  created_at INTEGER NOT NULL\n)";
+export declare const EMAIL_LOG_CREATE_SQL = "CREATE TABLE IF NOT EXISTS email_log (\n  id TEXT PRIMARY KEY,\n  org_id TEXT,\n  template_id TEXT,\n  app TEXT,\n  recipient TEXT NOT NULL,\n  sender TEXT NOT NULL,\n  subject TEXT NOT NULL,\n  status TEXT NOT NULL,\n  error TEXT,\n  provider TEXT NOT NULL,\n  request_payload TEXT,\n  response_status INTEGER,\n  response_body TEXT,\n  created_at INTEGER NOT NULL\n)";
 export declare const EMAIL_LOG_TEMPLATE_INDEX_SQL = "CREATE INDEX IF NOT EXISTS email_log_template_created_idx\n  ON email_log (template_id, created_at)";
 export declare const EMAIL_LOG_ORG_APP_INDEX_SQL = "CREATE INDEX IF NOT EXISTS email_log_org_app_created_idx\n  ON email_log (org_id, app, created_at)";
+export declare const EMAIL_LOG_ORG_STATUS_INDEX_SQL = "CREATE INDEX IF NOT EXISTS email_log_org_status_created_idx\n  ON email_log (org_id, status, created_at)";
+export declare const EMAIL_LOG_ORG_PROVIDER_INDEX_SQL = "CREATE INDEX IF NOT EXISTS email_log_org_provider_created_idx\n  ON email_log (org_id, provider, created_at)";

package/dist/email-catalog/schema.js

@@ -28,10 +28,26 @@ export const emailLog = table("email_log", {
     subject: text("subject").notNull(),
     /** "sent" once the provider accepted it, or "failed". Never optimistic. */
     status: text("status", { enum: ["sent", "failed"] }).notNull(),
-    /** Provider error text when status is "failed". */
+    /**
+     * Error text when the call never reached the provider or threw before/
+     * outside getting an HTTP response (network error, timeout/abort, credential
+     * resolution failure). Distinct from `responseStatus`/`responseBody`, which
+     * capture a provider response the request DID reach, so "we never reached
+     * the provider" and "the provider rejected it" stay visibly different.
+     */
     error: text("error"),
     /** "resend" | "sendgrid" | "dev". */
     provider: text("provider").notNull(),
+    /**
+     * Exact outbound JSON body sent to the provider, minus the Authorization
+     * header (the only secret in the request) and any attachment `content`
+     * bytes (large, no diagnostic value for "who did this go to").
+     */
+    requestPayload: text("request_payload"),
+    /** Raw HTTP status code from the provider, when a response was received. */
+    responseStatus: bigint("response_status", { mode: "number" }),
+    /** Raw HTTP response body text from the provider, when a response was received. */
+    responseBody: text("response_body"),
     createdAt: bigint("created_at", { mode: "number" }).notNull(),
 });
 export const EMAIL_LOG_CREATE_SQL = `CREATE TABLE IF NOT EXISTS email_log (
@@ -45,9 +61,16 @@ export const EMAIL_LOG_CREATE_SQL = `CREATE TABLE IF NOT EXISTS email_log (
   status TEXT NOT NULL,
   error TEXT,
   provider TEXT NOT NULL,
+  request_payload TEXT,
+  response_status INTEGER,
+  response_body TEXT,
   created_at INTEGER NOT NULL
 )`;
 export const EMAIL_LOG_TEMPLATE_INDEX_SQL = `CREATE INDEX IF NOT EXISTS email_log_template_created_idx
   ON email_log (template_id, created_at)`;
 export const EMAIL_LOG_ORG_APP_INDEX_SQL = `CREATE INDEX IF NOT EXISTS email_log_org_app_created_idx
   ON email_log (org_id, app, created_at)`;
+export const EMAIL_LOG_ORG_STATUS_INDEX_SQL = `CREATE INDEX IF NOT EXISTS email_log_org_status_created_idx
+  ON email_log (org_id, status, created_at)`;
+export const EMAIL_LOG_ORG_PROVIDER_INDEX_SQL = `CREATE INDEX IF NOT EXISTS email_log_org_provider_created_idx
+  ON email_log (org_id, provider, created_at)`;

package/dist/email-catalog/system-emails.d.ts

@@ -10,4 +10,5 @@
 export declare const CORE_INVITE_EMAIL_ID = "core.organization-invite";
 export declare const CORE_VERIFY_SIGNUP_EMAIL_ID = "core.verify-signup";
 export declare const CORE_RESET_PASSWORD_EMAIL_ID = "core.reset-password";
+export declare const CORE_MAGIC_LINK_EMAIL_ID = "core.magic-link";
 export declare function registerCoreSystemEmails(): void;

package/dist/email-catalog/system-emails.js

@@ -7,7 +7,7 @@
  * site so the emails appear in every app's catalog without each template
  * remembering to opt in.
  */
-import { renderInviteEmail, renderResetPasswordEmail, renderVerifySignupEmail, } from "../server/email-templates.js";
+import { renderInviteEmail, renderMagicLinkEmail, renderResetPasswordEmail, renderVerifySignupEmail, } from "../server/email-templates.js";
 import { defineTransactionalEmail } from "./registry.js";
 /** Obviously-fake sample data — these render in a preview pane, never send. */
 const SAMPLE_URL = "https://example.com/accept/sample-token";
@@ -15,6 +15,7 @@ const SAMPLE_EMAIL = "sam.rivera@example.com";
 export const CORE_INVITE_EMAIL_ID = "core.organization-invite";
 export const CORE_VERIFY_SIGNUP_EMAIL_ID = "core.verify-signup";
 export const CORE_RESET_PASSWORD_EMAIL_ID = "core.reset-password";
+export const CORE_MAGIC_LINK_EMAIL_ID = "core.magic-link";
 let registered = false;
 export function registerCoreSystemEmails() {
     if (registered)
@@ -64,4 +65,18 @@ export function registerCoreSystemEmails() {
             resetUrl: SAMPLE_URL,
         }),
     });
+    defineTransactionalEmail({
+        id: CORE_MAGIC_LINK_EMAIL_ID,
+        app: "core",
+        name: "Magic link sign-in",
+        trigger: "A user submits their email on the sign-in screen while magic-link is the active login mode.",
+        recipientLabel: "Sign-in address",
+        recipient: "The address typed into the sign-in form.",
+        senderLabel: "Default, app-branded",
+        sender: "The configured EMAIL_FROM, branded with the app name the sign-in happened in.",
+        preview: () => renderMagicLinkEmail({
+            email: SAMPLE_EMAIL,
+            magicLinkUrl: SAMPLE_URL,
+        }),
+    });
 }

package/dist/file-upload/actions/upload-image.d.ts

@@ -3,25 +3,25 @@ declare const _default: import("../../action.js").ActionDefinition<{
     url?: string;
     filename?: string;
 }, {
-    id?: undefined;
     error: string;
     configured?: undefined;
     connectPath?: undefined;
     url?: undefined;
+    id?: undefined;
     provider?: undefined;
 } | {
-    id?: undefined;
     error: string;
     configured: boolean;
     connectPath: string;
     url?: undefined;
+    id?: undefined;
     provider?: undefined;
 } | {
-    error?: undefined;
     configured?: undefined;
     connectPath?: undefined;
     url: string;
     id: string;
     provider: string;
+    error?: undefined;
 }>;
 export default _default;

package/dist/localization/default-messages.d.ts

@@ -291,6 +291,23 @@ declare const messages: {
             status: string;
             opens: string;
             lastEvent: string;
+            app: string;
+            sendLogTitle: string;
+            sendLogTemplate: string;
+            sendLogProvider: string;
+            sendLogResponseStatus: string;
+            sendLogError: string;
+            sendLogToFilter: string;
+            sendLogFromFilter: string;
+            sendLogAllStatuses: string;
+            sendLogSent: string;
+            sendLogFailed: string;
+            sendLogAllProviders: string;
+            sendLogClearFilters: string;
+            sendLogEmpty: string;
+            sendLogTimestamp: string;
+            sendLogPrevious: string;
+            sendLogNext: string;
         };
         pages: {
             appsDescription: string;

package/dist/localization/default-messages.js

@@ -297,6 +297,23 @@ const messages = {
             status: "Status",
             opens: "Opens",
             lastEvent: "Last event",
+            app: "App",
+            sendLogTitle: "Send log",
+            sendLogTemplate: "Template",
+            sendLogProvider: "Provider",
+            sendLogResponseStatus: "Response status",
+            sendLogError: "Error",
+            sendLogToFilter: "To contains…",
+            sendLogFromFilter: "From contains…",
+            sendLogAllStatuses: "All statuses",
+            sendLogSent: "Sent",
+            sendLogFailed: "Failed",
+            sendLogAllProviders: "All providers",
+            sendLogClearFilters: "Clear filters",
+            sendLogEmpty: "No sends match these filters in this date range.",
+            sendLogTimestamp: "Timestamp",
+            sendLogPrevious: "Previous",
+            sendLogNext: "Next",
         },
         pages: {
             appsDescription: "Open workspace apps and start new app creation from Dispatch.",

package/dist/observability/routes.d.ts

@@ -55,13 +55,13 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
 } | {
     summary?: undefined;
     spans?: undefined;
-    id?: undefined;
     error: any;
+    id?: undefined;
     ok?: undefined;
 } | {
     summary?: undefined;
     spans?: undefined;
+    ok: boolean;
     id?: undefined;
     error?: undefined;
-    ok: boolean;
 }>>;

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/secrets/routes.d.ts

@@ -34,16 +34,16 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    ok?: undefined;
     status?: undefined;
+    ok?: undefined;
 } | {
     ok: boolean;
     status: string;
     error?: undefined;
 } | {
-    ok?: undefined;
     error: string;
     removed?: undefined;
+    ok?: undefined;
 } | {
     ok: boolean;
     removed: boolean;
@@ -54,9 +54,9 @@ export declare function createWriteSecretHandler(): import("h3").EventHandlerWit
  * or the current stored value without changing anything.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
     note?: undefined;
+    ok?: undefined;
 } | {
     ok: boolean;
     note?: undefined;

package/dist/server/better-auth-instance.js

@@ -24,7 +24,7 @@ import { getAppConfig } from "../app-config/index.js";
 import { TEMPLATES } from "../cli/templates-meta.js";
 import { getDbExec } from "../db/client.js";
 import { getRuntimeDatabaseUrl, getPgliteClient, isPgliteUrl, loadPgliteDrizzle, pgPoolOptions, neonPoolOptions, guardNeonPool, sharedDbPool, onSharedDbPoolsClosed, onSharedDbPoolReplaced, } from "../db/client.js";
-import { CORE_RESET_PASSWORD_EMAIL_ID, CORE_VERIFY_SIGNUP_EMAIL_ID, } from "../email-catalog/system-emails.js";
+import { CORE_MAGIC_LINK_EMAIL_ID, CORE_RESET_PASSWORD_EMAIL_ID, CORE_VERIFY_SIGNUP_EMAIL_ID, } from "../email-catalog/system-emails.js";
 import { saveOAuthTokens } from "../oauth-tokens/store.js";
 import { acceptPendingInvitationsForEmail } from "../org/accept-pending.js";
 import { getAuthEmailForUserId, getRequiredAuthProviderForEmail, } from "../org/auth-policy.js";
@@ -1137,6 +1137,7 @@ async function createBetterAuthInstance(config) {
                 text,
                 appSender,
                 disableClickTracking: true,
+                templateId: CORE_MAGIC_LINK_EMAIL_ID,
             });
         },
     });

package/dist/server/email.js

@@ -179,6 +179,75 @@ function resolveAppSender(configuredFrom, appSender) {
         replyTo: appSender.replyTo,
     };
 }
+/**
+ * Thrown when a provider request completed (we got an HTTP response) but the
+ * status was not 2xx. Carries the raw request/response so the audit log can
+ * distinguish "the provider rejected it" from a thrown error that never
+ * reached the provider (network failure, timeout, credential resolution).
+ */
+class EmailProviderError extends Error {
+    provider;
+    from;
+    requestPayload;
+    responseStatus;
+    responseBody;
+    constructor(message, details) {
+        super(message);
+        this.name = "EmailProviderError";
+        this.provider = details.provider;
+        this.from = details.from;
+        this.requestPayload = details.requestPayload;
+        this.responseStatus = details.responseStatus;
+        this.responseBody = details.responseBody;
+    }
+}
+/**
+ * Serialize a provider payload for the audit log, stripping attachment bytes
+ * and message bodies. Attachment `content` is base64 file data with no
+ * diagnostic value for "who did this go to". The HTML/text body is omitted
+ * too: transactional emails routinely embed a one-time magic-link, password-
+ * reset, or verification URL, which is bearer-token-equivalent — logging it
+ * verbatim would let anyone with `email_log` read access sign in as the
+ * recipient. `subject` and `templateId` already identify what was sent.
+ */
+const MAX_LOGGED_TEXT_LENGTH = 8_000;
+function truncateForLog(value) {
+    if (value.length <= MAX_LOGGED_TEXT_LENGTH)
+        return value;
+    const omitted = value.length - MAX_LOGGED_TEXT_LENGTH;
+    return `${value.slice(0, MAX_LOGGED_TEXT_LENGTH)}<truncated, ${omitted} more characters>`;
+}
+function omittedBodyMarker(value) {
+    return typeof value === "string" ? `<omitted, ${value.length} chars>` : value;
+}
+function redactPayloadForLog(payload) {
+    const loggable = { ...payload };
+    // Resend shape: top-level `html` / `text` fields.
+    if ("html" in loggable)
+        loggable.html = omittedBodyMarker(loggable.html);
+    if ("text" in loggable)
+        loggable.text = omittedBodyMarker(loggable.text);
+    // SendGrid shape: `content: [{ type, value }]`.
+    if (Array.isArray(loggable.content)) {
+        loggable.content = loggable.content.map((entry) => ({ ...entry, value: omittedBodyMarker(entry.value) }));
+    }
+    if (Array.isArray(loggable.attachments) && loggable.attachments.length) {
+        loggable.attachments = loggable.attachments.map(({ content: _content, ...rest }) => ({
+            ...rest,
+            contentOmitted: true,
+        }));
+    }
+    return truncateForLog(JSON.stringify(loggable));
+}
+/**
+ * A response body that failed to read is not the same as a genuinely empty
+ * one — collapsing both to "" would make a truncated/aborted read look like a
+ * provider that legitimately returned nothing.
+ */
+function unreadableResponseBody(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return `<response body unreadable: ${message}>`;
+}
 async function deliverEmail(args, signal) {
     const config = await resolveEmailTransport(args.useDeploymentCredentials);
     signal?.throwIfAborted();
@@ -218,6 +287,7 @@ async function deliverEmail(args, signal) {
             headers["References"] = args.references;
         if (Object.keys(headers).length)
             payload.headers = headers;
+        const requestPayload = redactPayloadForLog(payload);
         const res = await fetch("https://api.resend.com/emails", {
             method: "POST",
             headers: {
@@ -227,11 +297,23 @@ async function deliverEmail(args, signal) {
             body: JSON.stringify(payload),
             signal,
         });
+        const responseBody = truncateForLog(await res.text().catch(unreadableResponseBody));
         if (!res.ok) {
-            const body = await res.text().catch(() => "");
-            throw new Error(`Resend error ${res.status}: ${body}`);
+            throw new EmailProviderError(`Resend error ${res.status}: ${responseBody}`, {
+                provider,
+                from,
+                requestPayload,
+                responseStatus: res.status,
+                responseBody,
+            });
         }
-        return { provider, from };
+        return {
+            provider,
+            from,
+            requestPayload,
+            responseStatus: res.status,
+            responseBody,
+        };
     }
     if (provider === "sendgrid") {
         const personalization = {
@@ -288,6 +370,7 @@ async function deliverEmail(args, signal) {
                 content_id: a.contentId,
             }));
         }
+        const requestPayload = redactPayloadForLog(sgPayload);
         const res = await fetch("https://api.sendgrid.com/v3/mail/send", {
             method: "POST",
             headers: {
@@ -297,11 +380,23 @@ async function deliverEmail(args, signal) {
             body: JSON.stringify(sgPayload),
             signal,
         });
+        const responseBody = truncateForLog(await res.text().catch(unreadableResponseBody));
         if (!res.ok) {
-            const body = await res.text().catch(() => "");
-            throw new Error(`SendGrid error ${res.status}: ${body}`);
+            throw new EmailProviderError(`SendGrid error ${res.status}: ${responseBody}`, {
+                provider,
+                from,
+                requestPayload,
+                responseStatus: res.status,
+                responseBody,
+            });
         }
-        return { provider, from };
+        return {
+            provider,
+            from,
+            requestPayload,
+            responseStatus: res.status,
+            responseBody,
+        };
     }
     // Dev fallback — no provider configured. Logging the full body exposes
     // reset tokens, so only do it outside production. In production, refuse
@@ -320,33 +415,43 @@ async function deliverEmail(args, signal) {
  * provider branch so a new transport cannot be added without being logged.
  */
 async function sendEmailWithSignal(args, signal) {
+    const baseRecord = {
+        templateId: args.templateId,
+        app: args.app ?? getAppConfig().app.slug ?? "unknown",
+        orgId: args.orgId ?? getRequestOrgId(),
+        recipient: args.to,
+        subject: args.subject,
+    };
     let outcome;
     try {
         outcome = await deliverEmail(args, signal);
     }
     catch (error) {
+        // A response was received but the provider rejected it: the error carries
+        // the raw request/response so "provider said no" stays distinguishable
+        // from "we never reached the provider" (network failure, timeout,
+        // credential resolution failure), which sets none of these three fields.
+        const providerError = error instanceof EmailProviderError ? error : undefined;
         await recordEmailSend({
-            templateId: args.templateId,
-            app: args.app ?? getAppConfig().app.slug ?? "unknown",
-            orgId: args.orgId ?? getRequestOrgId(),
-            recipient: args.to,
-            sender: outcome?.from ?? args.from ?? "unknown",
-            subject: args.subject,
+            ...baseRecord,
+            sender: providerError?.from ?? args.from ?? "unknown",
             status: "failed",
             error: error instanceof Error ? error.message : String(error),
-            provider: outcome?.provider ?? "unknown",
+            provider: providerError?.provider ?? "unknown",
+            requestPayload: providerError?.requestPayload,
+            responseStatus: providerError?.responseStatus,
+            responseBody: providerError?.responseBody,
         });
         throw error;
     }
     await recordEmailSend({
-        templateId: args.templateId,
-        app: args.app ?? getAppConfig().app.slug ?? "unknown",
-        orgId: args.orgId ?? getRequestOrgId(),
-        recipient: args.to,
+        ...baseRecord,
         sender: outcome.from,
-        subject: args.subject,
         status: "sent",
         provider: outcome.provider,
+        requestPayload: outcome.requestPayload,
+        responseStatus: outcome.responseStatus,
+        responseBody: outcome.responseBody,
     });
 }
 export async function sendEmail(args) {

package/dist/server/transcribe-voice.d.ts

@@ -20,6 +20,6 @@ export declare function createTranscribeVoiceHandler(): import("h3").EventHandle
     error: string;
     text?: undefined;
 } | {
-    error?: undefined;
     text: string;
+    error?: undefined;
 }>>;

package/dist/styles/agent-native.css

@@ -1224,3 +1224,14 @@
     }
   }
 }
+
+/* Search inputs that render their own clear button must hide the
+   browser's native WebKit cancel icon, or two clear controls stack on
+   top of each other. Scoped to inputs that opt in via this class, since
+   other type="search" inputs rely on the native control as their only
+   clear affordance. Not motion-related, so it must not live inside the
+   surrounding `prefers-reduced-motion: no-preference` block above. */
+input.agent-native-search-input::-webkit-search-cancel-button {
+  -webkit-appearance: none;
+  appearance: none;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.177.0",
+  "version": "0.177.1-nightly-20260908153602",
   "description": "The agentic application framework for building autonomous agents with intuitive UIs",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {