@agent-native/core 0.195.0 → 0.195.1-nightly-20260927210321

package/dist/provider-api/actions/provider-api.d.ts

@@ -311,6 +311,7 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
+        message?: undefined;
         id?: undefined;
         deleted?: undefined;
         provider?: undefined;
@@ -327,8 +328,8 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         found?: undefined;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
+        message?: undefined;
         id?: undefined;
         deleted?: undefined;
         count?: undefined;
@@ -337,8 +338,8 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         provider: import("../custom-registry.js").CustomProviderConfig;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
+        message?: undefined;
         deleted?: undefined;
         provider?: undefined;
         count?: undefined;
@@ -347,8 +348,8 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
+        message?: undefined;
         provider?: undefined;
         count?: undefined;
         providers?: undefined;
@@ -357,7 +358,6 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
         deleted?: undefined;
         provider?: undefined;

package/dist/secrets/routes.d.ts

@@ -35,30 +35,30 @@ export declare function createWriteSecretHandler(): import("h3").EventHandlerWit
     ok?: undefined;
     status?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     status: string;
+    error?: undefined;
 } | {
     ok?: undefined;
     error: string;
     removed?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     ok?: undefined;
     error: string;
     note?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     note?: undefined;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     note: string;
+    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -78,11 +78,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;

package/dist/server/auth-plugin.js

@@ -1,4 +1,4 @@
-import { getMethod, setResponseStatus } from "h3";
+import { getMethod, setResponseHeader, setResponseStatus } from "h3";
 import { autoMountAuth } from "./auth.js";
 import { getSession } from "./auth.js";
 import { runBetterAuthMigrations } from "./better-auth-migrations.js";
@@ -12,6 +12,7 @@ export function createAuthPlugin(options) {
         if (!isByoa) {
             markFrameworkRoutesReadyBeforeBootstrap(nitroApp, [sessionPath]);
             app.use(sessionPath, async (event) => {
+                setResponseHeader(event, "Cache-Control", "no-store");
                 const method = getMethod(event);
                 if (method !== "GET" && method !== "HEAD") {
                     setResponseStatus(event, 405);

package/dist/server/auth.js

@@ -80,7 +80,6 @@ import { safeOAuthReturnUrl } from "./oauth-return-url.js";
 import { getOnboardingHtml, getResetPasswordHtml, } from "./onboarding-html.js";
 import { getRequestContext, markRequestIdentityAuthenticatedAtMs, hasContinuationLocalRequestContext, hasExplicitPersonalOrgScope, markExplicitPersonalOrgScope, runWithRequestContext, } from "./request-context.js";
 import { captureAuthError } from "./sentry.js";
-import { forgetCachedSessionEmail, getCachedSessionEmail, getSessionEmailCacheGeneration, invalidateSessionEmailCache, setCachedSessionEmail, } from "./session-email-cache.js";
 import { isWorkspaceOAuthCallbackRelayEnabled } from "./workspace-oauth.js";
 function stripAppBasePath(pathname) {
     return stripConfiguredAppBasePath(pathname, getAppBasePath());
@@ -1325,7 +1324,6 @@ export async function addSession(token, email) {
         sql: `INSERT INTO sessions (token, email, created_at) VALUES (?, ?, ?) ON CONFLICT (token) DO UPDATE SET email=EXCLUDED.email, created_at=EXCLUDED.created_at`,
         args: [token, email ?? null, Date.now()],
     }));
-    invalidateSessionEmailCache();
 }
 async function replaceSession(oldToken, newToken, email) {
     await ensureSessionTable();
@@ -1343,7 +1341,6 @@ async function replaceSession(oldToken, newToken, email) {
             args: [oldToken],
         });
     }));
-    invalidateSessionEmailCache();
 }
 export async function hasLegacySessionForEmail(email) {
     await ensureSessionTable();
@@ -1361,7 +1358,6 @@ export async function removeSession(token) {
         sql: `DELETE FROM sessions WHERE token = ?`,
         args: [token],
     }));
-    invalidateSessionEmailCache();
 }
 /**
  * The one logout implementation, shared by every auth mode's route.
@@ -1402,7 +1398,6 @@ async function performLogout(event, getAuth) {
     }
     try {
         const identities = await getPresentedSessionIdentities(event, candidates, Boolean(auth || revocationFailed));
-        invalidateSessionEmailCache();
         await ensureSessionTable();
         await revokeEmbedSessionsForOwners([...identities], async (tx) => {
             const canRevokeBetterAuth = auth
@@ -1423,14 +1418,10 @@ async function performLogout(event, getAuth) {
         });
     }
     catch (error) {
-        invalidateSessionEmailCache();
         captureAuthError(error, { route: "logout" });
         setResponseStatus(event, 503);
         return { error: "Unable to revoke session" };
     }
-    finally {
-        invalidateSessionEmailCache();
-    }
     if (!revocationFailed) {
         clearFrameworkSessionCookies(event);
         clearIdentityGoogleAuthCookie(event);
@@ -1466,10 +1457,6 @@ export async function logout(event) {
     return performLogout(event, () => getBetterAuth());
 }
 export async function getSessionEmail(token) {
-    const cached = getCachedSessionEmail(token);
-    if (cached !== undefined)
-        return cached;
-    const cacheGeneration = getSessionEmailCacheGeneration();
     await ensureSessionTable();
     const client = getDbExec();
     const { rows } = await retryIfSessionsMissing(() => client.execute({
@@ -1484,12 +1471,9 @@ export async function getSessionEmail(token) {
             sql: `DELETE FROM sessions WHERE token = ?`,
             args: [token],
         });
-        forgetCachedSessionEmail(token);
         return null;
     }
     const email = rows[0].email ?? null;
-    if (email)
-        setCachedSessionEmail(token, email, cacheGeneration);
     return email;
 }
 async function resolveLegacySessionEmailVerification(email) {
@@ -1976,7 +1960,6 @@ async function consumeDesktopExchangeFromDB(flowId) {
         });
         if (deleted.rows.length === 0)
             return { status: "missing" };
-        forgetCachedSessionEmail(`dex:${flowId}`);
         return { status: "entry", entry };
     }
     catch {
@@ -4700,7 +4683,6 @@ async function mountBetterAuthRoutes(app, options) {
                                 args: [userEmail],
                             });
                         }
-                        invalidateSessionEmailCache();
                     }
                 }
                 catch {
@@ -4952,35 +4934,29 @@ async function mountBetterAuthRoutes(app, options) {
             const sessionEmail = normalizeAuthEmail(session.email);
             if (sessionEmail)
                 identities.add(sessionEmail);
-            invalidateSessionEmailCache();
             await ensureSessionTable();
-            try {
-                await revokeEmbedSessionsForOwners([...identities], async (tx) => {
-                    const canRevokeBetterAuth = await betterAuthTablesAvailable(tx);
-                    for (const email of identities) {
-                        if (canRevokeBetterAuth) {
-                            const { rows } = await tx.execute({
-                                sql: 'SELECT id FROM "user" WHERE email = ?',
-                                args: [email],
-                            });
-                            const userId = (rows[0]?.id ?? rows[0]?.[0]);
-                            if (userId) {
-                                await tx.execute({
-                                    sql: 'DELETE FROM "session" WHERE user_id = ?',
-                                    args: [userId],
-                                });
-                            }
-                        }
-                        await tx.execute({
-                            sql: "DELETE FROM sessions WHERE email = ?",
+            await revokeEmbedSessionsForOwners([...identities], async (tx) => {
+                const canRevokeBetterAuth = await betterAuthTablesAvailable(tx);
+                for (const email of identities) {
+                    if (canRevokeBetterAuth) {
+                        const { rows } = await tx.execute({
+                            sql: 'SELECT id FROM "user" WHERE email = ?',
                             args: [email],
                         });
+                        const userId = (rows[0]?.id ?? rows[0]?.[0]);
+                        if (userId) {
+                            await tx.execute({
+                                sql: 'DELETE FROM "session" WHERE user_id = ?',
+                                args: [userId],
+                            });
+                        }
                     }
-                });
-            }
-            finally {
-                invalidateSessionEmailCache();
-            }
+                    await tx.execute({
+                        sql: "DELETE FROM sessions WHERE email = ?",
+                        args: [email],
+                    });
+                }
+            });
             clearFrameworkSessionCookies(event);
             clearFirstRunOnboardingCookie(event);
             optOutOfAuthDisabledSession(event);
@@ -5004,6 +4980,7 @@ async function mountBetterAuthRoutes(app, options) {
         }
     }));
     app.use("/_agent-native/auth/session", defineEventHandler(async (event) => {
+        setResponseHeader(event, "Cache-Control", "no-store");
         if (!isReadMethod(event)) {
             setResponseStatus(event, 405);
             return { error: "Method not allowed" };
@@ -5159,6 +5136,7 @@ function mountAuthFallbackRoutes(app) {
         return performLogout(event, () => getBetterAuth());
     }));
     app.use("/_agent-native/auth/session", defineEventHandler(async (event) => {
+        setResponseHeader(event, "Cache-Control", "no-store");
         if (!isReadMethod(event)) {
             setResponseStatus(event, 405);
             return { error: "Method not allowed" };
@@ -5252,6 +5230,7 @@ export async function autoMountAuth(app, options = {}) {
     }
     if (customGetSession) {
         app.use("/_agent-native/auth/session", defineEventHandler(async (event) => {
+            setResponseHeader(event, "Cache-Control", "no-store");
             if (!isReadMethod(event)) {
                 setResponseStatus(event, 405);
                 return { error: "Method not allowed" };

package/dist/triggers/actions/manage-automation.d.ts

@@ -13,6 +13,7 @@ declare const _default: import("../../action.js").ActionDefinition<{
     executionEngine?: string;
     executionCwd?: string;
 }, {
+    deleted?: undefined;
     created: boolean;
     name: string;
     scope: "organization" | "personal";
@@ -23,7 +24,6 @@ declare const _default: import("../../action.js").ActionDefinition<{
     reasoningEffort: "auto" | "high" | "low" | "max" | "medium" | "minimal" | "none" | "xhigh";
     webhookPath: string;
     nextRun: string;
-    deleted?: undefined;
     enabled?: undefined;
     executionHostId?: undefined;
     executionEngine?: undefined;
@@ -45,11 +45,11 @@ declare const _default: import("../../action.js").ActionDefinition<{
     nextRun?: undefined;
     webhookPath?: undefined;
 } | {
+    deleted?: undefined;
     created?: undefined;
     scope?: undefined;
     triggerType?: undefined;
     event?: undefined;
-    deleted?: undefined;
     name: string;
     enabled: boolean;
     schedule: string;

package/dist/vite/agent-native-config-loader.js

@@ -36,7 +36,8 @@ export async function loadAgentNativeConfigFile(cwd) {
     if (!configPath)
         return undefined;
     try {
-        const module = (await import(pathToFileURL(configPath).href));
+        const module = (await import(
+        /* @vite-ignore */ pathToFileURL(configPath).href));
         const config = module.default ?? module.agentNativeConfig;
         if (typeof config !== "object" && typeof config !== "function") {
             throw new Error("the default export must be an object or function");
@@ -55,7 +56,8 @@ export async function loadWorkspaceAgentNativeConfigFile(cwd) {
     if (!configPath)
         return undefined;
     try {
-        const module = (await import(pathToFileURL(configPath).href));
+        const module = (await import(
+        /* @vite-ignore */ pathToFileURL(configPath).href));
         const config = module.default ?? module.agentNativeConfig;
         if (typeof config !== "object" && typeof config !== "function") {
             throw new Error("the default export must be an object or function");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.195.0",
+  "version": "0.195.1-nightly-20260927210321",
   "description": "The agentic application framework for building autonomous agents with intuitive UIs",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -517,9 +517,9 @@
     "yaml": "^2.9.0",
     "yjs": "^13.6.32",
     "zod": "^4.3.6",
-    "@agent-native/recap-cli": "0.5.47",
     "@agent-native/agentkit": "^0.4.1",
-    "@agent-native/toolkit": "^0.22.3"
+    "@agent-native/toolkit": "^0.22.3",
+    "@agent-native/recap-cli": "0.5.47"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",

package/dist/server/session-email-cache.d.ts

@@ -1,14 +0,0 @@
-export declare function getCachedSessionEmail(token: string): string | undefined;
-export declare function getSessionEmailCacheGeneration(): number;
-export declare function setCachedSessionEmail(token: string, email: string, generation: number): void;
-export declare function forgetCachedSessionEmail(token: string): void;
-/**
- * Drop cached session resolutions. Call after ANY write to `sessions`.
- *
- * Clears every token rather than one: the bulk sign-out paths delete by email
- * (`DELETE FROM sessions WHERE email = ?`) and do not know which tokens they
- * removed, so a per-token eviction there would leave a signed-out session
- * resolving for the rest of the TTL.
- */
-export declare function invalidateSessionEmailCache(): void;
-export declare function __resetSessionEmailCacheForTests(): void;

package/dist/server/session-email-cache.js

@@ -1,53 +0,0 @@
-import { createTtlCache } from "../shared/ttl-cache.js";
-/**
- * Cross-request cache for resolved legacy session tokens.
- *
- * A session token is immutable for its (30-day) lifetime, yet every
- * authenticated request re-read it: production showed 494,848 of these for 3
- * users, 1:1 with the request count. The TTL is far shorter than the session
- * lifetime, so expiry is enforced at most `SESSION_EMAIL_TTL_MS` late — a 30-day
- * boundary observed up to 15s late changes nothing.
- *
- * ONLY successful resolutions belong in here. A `null` — no such token, expired,
- * revoked — must stay uncached so a sign-out or a token that has just been
- * written is never answered from a stale negative, and so an auth failure can
- * never be made sticky by a cache.
- *
- * Lives in its own module rather than in `auth.ts` because `auth.ts` imports
- * `org/auth-policy.ts`, which also revokes sessions and so needs to invalidate
- * this. Importing back into `auth.ts` from there would be a cycle.
- */
-const SESSION_EMAIL_TTL_MS = 15_000;
-const sessionEmailCache = createTtlCache({
-    ttlMs: SESSION_EMAIL_TTL_MS,
-    maxEntries: 4_096,
-});
-let cacheGeneration = 0;
-export function getCachedSessionEmail(token) {
-    return sessionEmailCache.get(token);
-}
-export function getSessionEmailCacheGeneration() {
-    return cacheGeneration;
-}
-export function setCachedSessionEmail(token, email, generation) {
-    if (generation === cacheGeneration)
-        sessionEmailCache.set(token, email);
-}
-export function forgetCachedSessionEmail(token) {
-    sessionEmailCache.delete(token);
-}
-/**
- * Drop cached session resolutions. Call after ANY write to `sessions`.
- *
- * Clears every token rather than one: the bulk sign-out paths delete by email
- * (`DELETE FROM sessions WHERE email = ?`) and do not know which tokens they
- * removed, so a per-token eviction there would leave a signed-out session
- * resolving for the rest of the TTL.
- */
-export function invalidateSessionEmailCache() {
-    cacheGeneration++;
-    sessionEmailCache.clear();
-}
-export function __resetSessionEmailCacheForTests() {
-    sessionEmailCache.clear();
-}