@agent-native/core 0.198.3-nightly-20260930124743 → 0.198.3

package/dist/cli/create-tui.js

@@ -253,18 +253,37 @@ function fitRows(items, activeIndex, rows) {
     const start = Math.max(0, Math.min(activeIndex - rows + 1, items.length - rows));
     return items.slice(start, start + rows);
 }
+// Ink hands every key in one stdin chunk to the same input handler before
+// React re-renders, so an input handler must read `latest` and update through
+// the setter: the rendered value is stale from the chunk's second key on.
+function useKeypressState(initial) {
+    const [rendered, setRendered] = React.useState(initial);
+    const latest = React.useRef(rendered);
+    const update = (next) => {
+        latest.current = next(latest.current);
+        setRendered(latest.current);
+    };
+    return [rendered, update, latest];
+}
+function wizardChoices(state, installedApps) {
+    const apps = availableTemplates(state.kind, installedApps);
+    const choices = state.step === "start" ? START_CHOICES : apps;
+    return {
+        multiSelect: state.kind === "chat-workspace" ||
+            state.kind === "first-party" ||
+            state.kind === "workspace-add",
+        apps,
+        required: new Set(requiredTemplateNames(state.kind)),
+        choices,
+    };
+}
 export function CreateWizard({ options, onFinish, }) {
     const { exit } = useApp();
     const { stdout } = useStdout();
-    const [state, setState] = React.useState(() => initialWizardState(options));
+    const [state, setState, latest] = useKeypressState(() => initialWizardState(options));
     const terminalColumns = Math.max(16, stdout.columns ?? 80);
     const terminalRows = Math.max(14, stdout.rows ?? 24);
-    const multiSelect = state.kind === "chat-workspace" ||
-        state.kind === "first-party" ||
-        state.kind === "workspace-add";
-    const apps = availableTemplates(state.kind, options.installedApps ?? []);
-    const required = new Set(requiredTemplateNames(state.kind));
-    const choices = state.step === "start" ? START_CHOICES : apps;
+    const { multiSelect, required, choices } = wizardChoices(state, options.installedApps ?? []);
     const listRows = Math.max(3, Math.min(choices.length, Math.floor((terminalRows - 13) / 2)));
     const visibleChoices = fitRows(choices, state.activeIndex, listRows);
     const visibleOffset = Math.max(0, choices.indexOf(visibleChoices[0]));
@@ -280,6 +299,7 @@ export function CreateWizard({ options, onFinish, }) {
         exit();
     };
     const complete = () => {
+        const state = latest.current;
         const answer = {
             kind: state.kind ?? "chat-workspace",
             name: state.name,
@@ -291,6 +311,8 @@ export function CreateWizard({ options, onFinish, }) {
         exit();
     };
     useInput((input, key) => {
+        const state = latest.current;
+        const { multiSelect, apps, required, choices } = wizardChoices(state, options.installedApps ?? []);
         if (state.step === "cancelled")
             return;
         if ((key.ctrl && input.toLowerCase() === "c") || key.escape) {
@@ -569,7 +591,7 @@ export async function runCreateWizard(options) {
 }
 function InkChoicePrompt({ message, choices, onFinish, }) {
     const { exit } = useApp();
-    const [activeIndex, setActiveIndex] = React.useState(0);
+    const [activeIndex, setActiveIndex, latestIndex] = useKeypressState(() => 0);
     useInput((input, key) => {
         if (key.escape || (key.ctrl && input.toLowerCase() === "c")) {
             onFinish(null);
@@ -581,7 +603,7 @@ function InkChoicePrompt({ message, choices, onFinish, }) {
         else if (key.downArrow)
             setActiveIndex((index) => Math.min(choices.length - 1, index + 1));
         else if (key.return) {
-            onFinish(choices[activeIndex]?.value ?? null);
+            onFinish(choices[latestIndex.current]?.value ?? null);
             exit();
         }
     });

package/dist/cli/create.js

@@ -7,6 +7,7 @@ import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
 import { DISPATCH_WORKSPACE_ROOT_REDIRECTS, getWorkspaceAppIdValidationError, } from "../shared/workspace-app-id.js";
 import { setupAgentSymlinks } from "./setup-agents.js";
 import { coreTemplates, getTemplate, allTemplateNames, } from "./templates-meta.js";
+import { addConfiguredMigrationDependencies } from "./upgrade.js";
 import { ensureNodePtyBuildDependency, parseWorkspaceScope, workspacifyApp, } from "./workspacify.js";
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
@@ -553,6 +554,7 @@ async function createWorkspaceInteractive(name, opts, clack) {
                 ...resolution,
                 shape: "workspace",
             });
+            addConfiguredFeatureDependencies(appDir, targetDir);
             ensureGuardedScaffold(appDir);
             fixWebManifestName(appDir, appName, templateName, resolution.sourceIdentity);
             rewriteNetlifyToml(appDir, appName, "workspace");
@@ -795,6 +797,7 @@ async function scaffoldOneAppIntoWorkspace(workspace, appName, templateName, cla
             ...resolution,
             shape: "workspace",
         });
+        addConfiguredFeatureDependencies(appDir, workspace.workspaceRoot);
         ensureScaffoldEmailBrandingConfig(appDir, appName, templateName);
         ensureGuardedScaffold(appDir);
         fixWebManifestName(appDir, appName, templateName, resolution.sourceIdentity);
@@ -1630,6 +1633,7 @@ function postProcessStandalone(name, targetDir, templateName, resolution) {
                 pkg.optionalDependencies,
             ].some((deps) => Boolean(deps?.["node-pty"]));
             fs.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + "\n");
+            addConfiguredFeatureDependencies(targetDir);
         }
         catch (error) {
             const detail = error instanceof Error ? error.message : String(error);
@@ -1686,6 +1690,16 @@ function postProcessStandalone(name, targetDir, templateName, resolution) {
     fixStandaloneTsconfig(targetDir, templateName);
     setupAgentSymlinks(targetDir);
 }
+function addConfiguredFeatureDependencies(appDir, workspaceRoot = appDir) {
+    const packageFile = path.join(appDir, "package.json");
+    if (!fs.existsSync(packageFile))
+        return;
+    addConfiguredMigrationDependencies({
+        root: workspaceRoot,
+        kind: workspaceRoot === appDir ? "standalone" : "workspace",
+        packageFiles: [packageFile],
+    });
+}
 function ensureReactRouterBuildDependencies(pkg) {
     const allDeps = {
         ...pkg.dependencies,

package/dist/cli/design-connect.js

@@ -645,6 +645,13 @@ function isLoopbackOrigin(parsed) {
         hostname === "::1" ||
         /^127(?:\.\d{1,3}){3}$/.test(hostname));
 }
+function sameDevServerOrigin(a, b) {
+    return (a.origin === b.origin ||
+        (a.protocol === b.protocol &&
+            a.port === b.port &&
+            isLoopbackOrigin(a) &&
+            isLoopbackOrigin(b)));
+}
 function isApprovedDesignOrigin(rawOrigin, configuredOrigins, opaquePreviewAuthorized = false) {
     // Sandboxed loopback preview documents have an opaque `null` origin. It is
     // only approved when this request carries the non-cookie preview token;
@@ -976,16 +983,17 @@ class PreviewSessionCookieJar {
 }
 function resolvePreviewSnapshotUrl(devServerUrl, rawUrl) {
     const base = normalizeHttpUrl(devServerUrl);
+    const baseUrl = new URL(base);
     const parsed = new URL(rawUrl?.trim() || "/", `${base}/`);
     parsed.hash = "";
     if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
         throw new Error("Snapshot URL must use http(s).");
     }
-    if (!sameOrigin(parsed.toString(), base)) {
+    if (!sameDevServerOrigin(parsed, baseUrl)) {
         throw new Error("Snapshot URL must stay on the connected dev server.");
     }
     const search = stripQueryPair(parsed.search, FRAME_BRIDGE_KEY_PARAM);
-    return `${parsed.origin}${parsed.pathname}${search}`;
+    return `${baseUrl.origin}${parsed.pathname}${search}`;
 }
 function stripPreviewTokenQueryParam(search) {
     if (!search.includes("previewToken"))

package/dist/cli/migration-codemod.js

@@ -2,7 +2,7 @@ import { spawnSync } from "node:child_process";
 import fs from "node:fs";
 import { createRequire } from "node:module";
 import path from "node:path";
-import { Node, Project, QuoteKind, SyntaxKind, } from "ts-morph";
+import { Node, Project, QuoteKind, StructureKind, SyntaxKind, } from "ts-morph";
 import { bundledCorePackageVersion, isMigrationManifestActive, loadMigrationManifestsForProject, migrationMoveStatus, resolveMigrationSymbolMove, } from "../package-lifecycle/migration-manifest.js";
 const SOURCE_EXTENSIONS = new Set([".ts", ".tsx"]);
 const CSS_EXTENSIONS = new Set([".css"]);
@@ -180,6 +180,7 @@ function recordIntroducedDependency(pending, sourceFile, root, from, to) {
 }
 function importedNameStructure(importedName, localName, nextName, typeOnly) {
     return {
+        kind: StructureKind.ImportSpecifier,
         name: nextName,
         alias: localName !== nextName
             ? localName

package/dist/cli/skills.js

@@ -546,6 +546,9 @@ const SKILL_INSTRUCTION_CLIENT_LABELS = {
     "claude-code-cli": "Claude Code",
     codex: "Shared .agents skills",
     cowork: "MCP only",
+    cursor: "Cursor",
+    opencode: "OpenCode",
+    "github-copilot": "GitHub Copilot",
     pi: "Pi",
 };
 const SKILL_INSTRUCTION_CLIENT_HINTS = {
@@ -553,12 +556,16 @@ const SKILL_INSTRUCTION_CLIENT_HINTS = {
     "claude-code-cli": "Also write Claude Code's native .claude/skills and commands files.",
     codex: "Project scope writes .agents skills/commands for Codex, Pi, Cursor, OpenCode, Copilot, and similar agents; user scope writes Codex's ~/.codex skills/commands.",
     cowork: "MCP only",
+    cursor: "Uses shared project .agents skills and commands.",
+    opencode: "Uses shared project .agents skills and commands.",
+    "github-copilot": "Uses shared project .agents skills and commands.",
     pi: "Project scope writes .agents/skills plus .pi/prompts; user scope writes ~/.agents/skills plus ~/.pi/agent/prompts.",
 };
 function normalizeKnownSkillTarget(value) {
     const key = value?.trim().toLowerCase();
-    if (!key)
+    if (!key || !Object.hasOwn(BUILT_IN_APP_SKILL_ALIASES, key)) {
         return undefined;
+    }
     return BUILT_IN_APP_SKILL_ALIASES[key];
 }
 function isKnownSkill(value) {
@@ -894,10 +901,10 @@ function mergeContentLocalFilesManifest(existing, baseDir) {
     const apps = isJsonRecord(manifest.apps) ? { ...manifest.apps } : {};
     const contentApp = isJsonRecord(apps.content) ? { ...apps.content } : {};
     const defaults = defaultContentLocalFilesAppConfig();
-    if (!Array.isArray(contentApp.roots) || contentApp.roots.length === 0) {
-        contentApp.roots = defaults.roots;
-    }
-    contentApp.roots = contentApp.roots.map((root) => {
+    const roots = Array.isArray(contentApp.roots) && contentApp.roots.length > 0
+        ? contentApp.roots
+        : defaults.roots;
+    contentApp.roots = roots.map((root) => {
         if (!isJsonRecord(root) || typeof root.path !== "string")
             return root;
         const source = isJsonRecord(root.source) ? root.source : {};
@@ -1094,7 +1101,7 @@ function removeEmptyParents(start, boundary) {
     }
 }
 function restoreInstallPaths(snapshots, boundary) {
-    for (const snapshot of snapshots.toReversed()) {
+    for (const snapshot of snapshots.slice().reverse()) {
         fs.rmSync(snapshot.target, { recursive: true, force: true });
         if (snapshot.existed) {
             fs.mkdirSync(path.dirname(snapshot.target), { recursive: true });
@@ -1609,25 +1616,6 @@ function updateSkillInstallStates(states, dryRun) {
     }
     return updated;
 }
-function normalizeClientIds(values) {
-    if (!Array.isArray(values))
-        return [];
-    const seen = new Set();
-    const out = [];
-    for (const value of values) {
-        if (typeof value !== "string")
-            continue;
-        const id = value.toLowerCase();
-        if (!CLIENTS.includes(id))
-            continue;
-        const client = id;
-        if (seen.has(client))
-            continue;
-        seen.add(client);
-        out.push(client);
-    }
-    return out;
-}
 function isMcpClientId(value) {
     return CLIENTS.includes(value);
 }
@@ -1949,7 +1937,7 @@ async function promptForPlanMcpUrl() {
         placeholder: "https://my-plan-app.example.com",
         validate(value) {
             try {
-                resolveMcpUrlOverride(value);
+                resolveMcpUrlOverride(value ?? "");
                 return undefined;
             }
             catch (err) {
@@ -2678,7 +2666,7 @@ async function connectAfterEnsure(installTarget, clients, parsed, options) {
     const clearSpinner = () => {
         if (!spinnerActive)
             return;
-        spinner.clear();
+        spinner?.clear();
         spinnerActive = false;
     };
     const writeAuthMessage = () => {
@@ -3627,11 +3615,6 @@ export async function runSkills(argv, options = {}) {
                 .map((result) => result.connectCommand)
                 .filter((command) => Boolean(command))),
         ];
-        const authLine = authConnected
-            ? "Authentication: completed."
-            : pendingConnectCommands.length
-                ? `Authentication: pending — run ${pendingConnectCommands.join(" && ")}`
-                : "";
         const githubActions = [
             ...new Set(results
                 .map((result) => result.githubActionPath)

package/dist/cli/upgrade.d.ts

@@ -1,5 +1,5 @@
 import { type SpawnSyncReturns } from "node:child_process";
-import { type MigrationManifest, type MigrationDependency } from "../package-lifecycle/migration-manifest.js";
+import { type MigrationDependency } from "../package-lifecycle/migration-manifest.js";
 declare const PINNABLE_SECTIONS: readonly ["dependencies", "devDependencies", "optionalDependencies"];
 export type UpgradeCommand = "run" | "check" | "help";
 export interface UpgradeCliOptions {
@@ -114,8 +114,9 @@ export declare function isPinnedOrLocalVersion(version: string): boolean;
 export declare function shouldBumpAgentNativeVersion(version: string): boolean;
 export declare function selectMigrationDependencies(dependencies: MigrationDependency[], environment: NodeJS.ProcessEnv): MigrationDependency[];
 export declare function readUpgradeEnvironment(projectRoot: string, packageDir: string, shellEnvironment: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
-export declare function loadActiveMigrationDependencies(projectRoot: string, packageVersion: string | null, manifests?: MigrationManifest[]): MigrationDependency[];
+export declare function loadActiveMigrationDependencies(projectRoot: string, packageVersion: string | null, manifests?: import("../package-lifecycle/migration-manifest.js").MigrationManifest[]): MigrationDependency[];
 export declare function planMigrationDependencyAdditions(project: UpgradeProject, shellEnvironment?: NodeJS.ProcessEnv): UpgradeDependencyAddition[];
+export declare function addConfiguredMigrationDependencies(project: UpgradeProject, shellEnvironment?: NodeJS.ProcessEnv): void;
 export declare function pinResolvedAgentNativeVersions(project: UpgradeProject): AgentNativePinResult;
 export declare function detectUpgradeProject(cwd: string): UpgradeProject | null;
 export declare function resolveInstalledPackageVersion(projectRoot: string, packageName: string): string | null;

package/dist/cli/upgrade.js

@@ -384,6 +384,9 @@ function applyMigrationDependencyAdditions(additions) {
         writeJsonFile(file, read.value);
     }
 }
+export function addConfiguredMigrationDependencies(project, shellEnvironment = process.env) {
+    applyMigrationDependencyAdditions(planMigrationDependencyAdditions(project, shellEnvironment));
+}
 export function pinResolvedAgentNativeVersions(project) {
     const pins = [];
     const unresolved = [];

package/dist/cli/workspacify.js

@@ -44,7 +44,7 @@ export function ensureNodePtyBuildDependency(workspaceRoot) {
         "dependencies",
         "node-gyp",
     ], NODE_PTY_BUILD_DEPENDENCY);
-    const updated = document.toString();
+    const updated = document.toString({ lineWidth: 0 });
     if (updated !== current)
         fs.writeFileSync(workspacePath, updated);
 }

package/dist/collab/struct-routes.d.ts

@@ -1,6 +1,6 @@
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/db/client.d.ts

@@ -53,6 +53,8 @@ export declare function retryOnDdlRace<T>(fn: () => Promise<T>): Promise<T>;
 export declare function isUniqueViolation(e: any): boolean;
 export declare function isLocalDatabase(): boolean;
 export declare function toPostgresParams(sql: string): string;
+export declare function hasExplicitDbTimeout(statement: DbExecStatement): boolean;
+export declare function postgresStatementTimeoutMs(clientTimeoutMs: number): number;
 export declare function dbExecQueryBudget(statement: DbExecStatement): {
     timeoutMs: number;
     maxAttempts: number;
@@ -150,5 +152,6 @@ export declare function pgliteDrizzleClient(url: string, client: any): any;
 export declare function createDbExec(config?: DbExecConfig): Promise<DbExec>;
 export declare function annotateMissingTable(err: unknown, sql: unknown): unknown;
 export declare function withDbExec<T>(exec: DbExec, run: () => T): T;
+export declare function getScopedDbExec(): DbExec | undefined;
 export declare function getDbExec(): DbExec;
 export declare function closeDbExec(): Promise<void>;

package/dist/db/client.js

@@ -556,13 +556,13 @@ function sqlAndArgs(sql) {
 const POSTGRES_STATEMENT_TIMEOUT_HEADROOM_MS = 250;
 const POSTGRES_STATEMENT_TIMEOUT_RESET_MS = 5_000;
 const POSTGRES_MAX_INT = 2_147_483_647;
-function hasExplicitDbTimeout(statement) {
+export function hasExplicitDbTimeout(statement) {
     if (typeof statement === "string")
         return false;
     const timeoutMs = Number(statement.timeoutMs);
     return Number.isFinite(timeoutMs) && timeoutMs > 0;
 }
-function postgresStatementTimeoutMs(clientTimeoutMs) {
+export function postgresStatementTimeoutMs(clientTimeoutMs) {
     const safeTimeoutMs = Math.max(1, Math.min(POSTGRES_MAX_INT, Math.floor(clientTimeoutMs)));
     const headroomMs = Math.min(POSTGRES_STATEMENT_TIMEOUT_HEADROOM_MS, Math.max(1, Math.floor(safeTimeoutMs * 0.1)));
     return Math.max(1, safeTimeoutMs - headroomMs);
@@ -1063,7 +1063,7 @@ async function executePglite(client, sql) {
         rowsAffected: result.affectedRows ?? result.rowCount ?? 0,
     };
 }
-function runPgliteTransaction(url, client, fn) {
+async function runPgliteTransaction(url, client, fn) {
     if (getActivePgliteTransactionExec(url)) {
         throw new Error("Nested PGlite transactions are not supported; reuse the active transaction handle.");
     }
@@ -1461,7 +1461,10 @@ export function annotateMissingTable(err, sql) {
 }
 const scopedDbExec = new AsyncLocalStorage();
 export function withDbExec(exec, run) {
-    return scopedDbExec.run(exec, run);
+    return scopedDbExec.run(guardSchemaMutations(exec), run);
+}
+export function getScopedDbExec() {
+    return scopedDbExec.getStore();
 }
 export function getDbExec() {
     const scoped = scopedDbExec.getStore();