@agent-native/core 0.202.0 → 0.202.1-nightly-20261007011022

package/dist/server/action-routes.js

@@ -644,6 +644,7 @@ function mountActionRoutesInternal(nitroApp, actions, options) {
                         appId: options?.appId,
                         caller,
                         requestHeaders: event.headers,
+                        ...(event.req?.signal ? { signal: event.req.signal } : {}),
                         actionName: name,
                         ...(resolvedCaller?.delegationJti
                             ? {

package/dist/server/agent-engine-api-key-route.d.ts

@@ -65,6 +65,7 @@ export declare function createAgentEngineApiKeyHandler(): import("h3").EventHand
     error: any;
     code: any;
 } | {
+    error?: undefined;
     errorCode?: undefined;
     code?: undefined;
     ok: boolean;
@@ -72,6 +73,5 @@ export declare function createAgentEngineApiKeyHandler(): import("h3").EventHand
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
     defaultModel?: import("./agent-engine-default-model-route.js").SavedKeyDefaultModelOutcome;
-    error?: undefined;
 }>>;
 export {};

package/dist/server/app-origin-config.d.ts

@@ -1,4 +1,6 @@
 export declare function resolvePublicAppOriginConfig(): {
+    appId?: string;
+    workspaceAppId?: string;
     appHomePath: string;
     appUrl?: string;
     workspaceGatewayUrl?: string;

package/dist/server/app-origin-config.js

@@ -40,6 +40,10 @@ export function resolvePublicAppOriginConfig() {
         typeof config.workspace.appsJson === "string";
     const workspaceAppMountPaths = workspaceAppMountPathsFromJson(config.workspace.appsJson);
     const resolved = {
+        ...(config.app.id ? { appId: config.app.id } : {}),
+        ...(config.app.workspaceId
+            ? { workspaceAppId: config.app.workspaceId }
+            : {}),
         appHomePath: resolveAppHomePath(config.app, config.workspace),
         ...(config.app.url ? { appUrl: config.app.url } : {}),
         ...(config.workspace.gatewayUrl

package/dist/server/auth.js

@@ -10,6 +10,7 @@ import { isGoogleProfileImageUrl } from "../shared/google-profile-image.js";
 import { EMBED_TRANSPLANT_HEADER, isMcpEmbedCorsOrigin, MCP_EMBED_CORS_ALLOW_HEADERS, shouldAllowMcpEmbedCredentials, } from "../shared/mcp-embed-headers.js";
 import { readDevActionDiscoveryFile } from "./dev-action-discovery.js";
 import { devLoopbackAuthHint } from "./dev-origin-hint.js";
+import { EMAIL_AUTH_LINK_LANDING_PATH, emailAuthLinkFields, emailAuthLinkLandingPage, emailAuthVerificationPath, emailAuthVerificationUrl, } from "./email-auth-links.js";
 import { isEmbedCapabilityScope, revokeEmbedSessionsForOwners, requestHasEmbedAuthMarker, resolveEmbedSessionCookieOwners, resolveEmbedSessionFromRequest, verifyEmbedSessionToken, } from "./embed-session.js";
 import { getPublicFrameworkPathname } from "./framework-request-context.js";
 import { canonicalFrameworkPathname, getFrameworkRoutePrefix, publicFrameworkPath, } from "./framework-route-prefix.js";
@@ -48,7 +49,7 @@ import { MCP_DIRECTORY_ROUTE_PREFIX, MCP_LEGACY_ROUTE_PREFIX, MCP_PUBLIC_ROUTE_P
 import { authProviderRequiredMessage, getRequiredAuthProviderForEmail, isGoogleSignInRequiredForEmail, } from "../org/auth-policy.js";
 import { readBody } from "../server/h3-helpers.js";
 import { putSetting } from "../settings/store.js";
-import { AUTH_SIGNUP_INVITE_ONLY_CODE } from "../shared/auth-copy.js";
+import { AUTH_SIGNUP_INVITE_ONLY_CODE, resolveNativeAuthCopy, } from "../shared/auth-copy.js";
 import { DISABLED_SSR_CACHE_HEADERS, resolveSsrCacheHeaders, SSR_QUERY_CACHE_KEY_HEADER, } from "../shared/cache-control.js";
 import { extractOAuthStateAppId, extractOAuthStateProvider, } from "../shared/oauth-state.js";
 import { PASSWORD_MIN_LENGTH, PASSWORD_MAX_LENGTH, PASSWORD_MAX_LENGTH_MESSAGE, PASSWORD_MIN_LENGTH_MESSAGE, } from "../shared/password-policy.js";
@@ -4161,6 +4162,47 @@ async function mountBetterAuthRoutes(app, options) {
         });
         return { token: entry.token, email: entry.email };
     }));
+    app.use(EMAIL_AUTH_LINK_LANDING_PATH, defineEventHandler(async (event) => {
+        const setupRequiredHtml = getDeploySettingsRequiredPage(event, getRequestPathAndSearch(event).rawPath);
+        if (setupRequiredHtml)
+            return setupRequiredResponse(setupRequiredHtml);
+        const method = getMethod(event);
+        if (method !== "GET" && method !== "POST") {
+            setResponseStatus(event, 405);
+            return { error: "Method not allowed" };
+        }
+        const values = method === "POST"
+            ? await readBody(event)
+            : getQuery(event);
+        const verificationPath = emailAuthVerificationPath(values.kind);
+        const fields = emailAuthLinkFields(values);
+        const verificationURL = verificationPath
+            ? emailAuthVerificationUrl(getAppUrl(event, verificationPath), values)
+            : undefined;
+        if (!verificationURL || !fields) {
+            setResponseStatus(event, 400);
+            return { error: "Invalid or expired email link." };
+        }
+        if (method === "POST") {
+            return new Response(null, {
+                status: 303,
+                headers: {
+                    "cache-control": "no-store",
+                    location: verificationURL.toString(),
+                    "referrer-policy": "no-referrer",
+                },
+            });
+        }
+        const { locale, dir } = resolveLocaleFromRequest({
+            acceptLanguage: getHeader(event, "accept-language"),
+        });
+        const copy = resolveNativeAuthCopy(locale);
+        return emailAuthLinkLandingPage(getAppUrl(event, EMAIL_AUTH_LINK_LANDING_PATH), fields, {
+            title: copy.emailLinkContinueTitle,
+            message: copy.emailLinkContinueMessage,
+            action: copy.emailLinkContinueAction,
+        }, locale, dir);
+    }));
     app.use(DESKTOP_MAGIC_LINK_LANDING_PATH, defineEventHandler(async (event) => {
         // Mounted before Better Auth starts, so it outlives an init failure; its
         // form could never sign anyone in on a deploy missing a setting.

package/dist/server/better-auth-instance.js

@@ -40,6 +40,7 @@ import { signupAttributionContextFromCookieHeader, signupAttributionContextFromH
 import { resolveAuthCookieNamespace } from "./cookie-namespace.js";
 import { getMissingAuthSecretKey, MissingAuthSecretError, } from "./deploy-settings.js";
 import { getWorkspaceA2ADerivedSecret } from "./derived-secret.js";
+import { emailAuthLinkLandingUrl } from "./email-auth-links.js";
 import { getDeploymentEmailReadiness, sendEmail, } from "./email.js";
 import { canonicalFrameworkPathname, publicFrameworkPath, } from "./framework-route-prefix.js";
 import { recordActiveGoogleSignInCredentials, resolveGoogleSignInCredentials, } from "./google-oauth-credentials.js";
@@ -1508,7 +1509,7 @@ async function createBetterAuthInstance(config) {
                     urlQueryKeys,
                 });
             }
-            const deliveredMagicLinkUrl = desktopMagicLinkLandingUrl(url) ?? url;
+            const deliveredMagicLinkUrl = desktopMagicLinkLandingUrl(url) ?? emailAuthLinkLandingUrl(url) ?? url;
             const { subject, html, text, appSender } = await renderTransactionalEmail(CORE_MAGIC_LINK_EMAIL_ID, {
                 email,
                 magicLinkUrl: deliveredMagicLinkUrl,
@@ -1566,18 +1567,13 @@ async function createBetterAuthInstance(config) {
             sendOnSignUp: requireEmailVerification,
             autoSignInAfterVerification: true,
             sendVerificationEmail: async ({ user, url, token }) => {
-                const verifyBasePath = (process.env.VITE_APP_BASE_PATH ||
-                    process.env.APP_BASE_PATH ||
-                    "").replace(/\/$/, "");
-                const verifyUrl = verifyBasePath
-                    ? url.replace(/(\/\/[^/]+)(\/)/, `$1${verifyBasePath}$2`)
-                    : url;
+                const deliveredVerifyUrl = emailAuthLinkLandingUrl(url) ?? url;
                 const emailChange = await verifiedEmailChangeFromToken(token, secret, user.email);
                 if (emailChange)
                     await preflightEmailIdentityRekey(emailChange.oldEmail, emailChange.newEmail);
                 const renderedEmail = await renderTransactionalEmail(emailChange
                     ? CORE_CHANGE_EMAIL_VERIFICATION_EMAIL_ID
-                    : CORE_VERIFY_SIGNUP_EMAIL_ID, { email: user.email, verifyUrl });
+                    : CORE_VERIFY_SIGNUP_EMAIL_ID, { email: user.email, verifyUrl: deliveredVerifyUrl });
                 await sendEmail({
                     to: user.email,
                     ...renderedEmail,
@@ -1616,10 +1612,7 @@ async function createBetterAuthInstance(config) {
                 updateEmailWithoutVerification: false,
                 sendChangeEmailConfirmation: async ({ user, newEmail, url }) => {
                     await preflightEmailIdentityRekey(user.email, newEmail);
-                    const confirmationBasePath = getConfiguredAppBasePath();
-                    const confirmationUrl = confirmationBasePath
-                        ? url.replace(/(\/\/[^/]+)(\/)/, `$1${confirmationBasePath}$2`)
-                        : url;
+                    const confirmationUrl = emailAuthLinkLandingUrl(url) ?? url;
                     const renderedEmail = await renderTransactionalEmail(CORE_CHANGE_EMAIL_CONFIRMATION_EMAIL_ID, { email: user.email, newEmail, confirmationUrl });
                     await sendEmail({
                         to: user.email,
@@ -1795,6 +1788,8 @@ async function createBetterAuthInstance(config) {
         },
         advanced: {
             cookiePrefix: cookieNamespace.betterAuthCookiePrefix,
+            // Keep callback URL validation active in test runs as well as production.
+            disableOriginCheck: false,
             ...(appUrl.startsWith("https://") || isBuilderPreviewHttpsEnvironment()
                 ? {
                     defaultCookieAttributes: {

package/dist/server/email-auth-links.d.ts

@@ -0,0 +1,11 @@
+export declare const EMAIL_AUTH_LINK_LANDING_PATH = "/_agent-native/auth/email-link/landing";
+export type EmailAuthLinkKind = "magic-link" | "verify-email";
+export declare function emailAuthVerificationPath(kind: unknown): string | undefined;
+export declare function emailAuthLinkLandingUrl(value: string): string | undefined;
+export declare function emailAuthLinkFields(values: Record<string, unknown>): Record<string, string> | undefined;
+export declare function emailAuthVerificationUrl(baseUrl: string, values: Record<string, unknown>): URL | undefined;
+export declare function emailAuthLinkLandingPage(actionUrl: string, fields: Record<string, string>, copy: {
+    title: string;
+    message: string;
+    action: string;
+}, locale: string, direction: "ltr" | "rtl"): Response;

package/dist/server/email-auth-links.js

@@ -0,0 +1,126 @@
+import { canonicalFrameworkPathname, publicFrameworkPath, } from "./framework-route-prefix.js";
+export const EMAIL_AUTH_LINK_LANDING_PATH = "/_agent-native/auth/email-link/landing";
+const BETTER_AUTH_MAGIC_LINK_VERIFY_PATH = "/_agent-native/auth/ba/magic-link/verify";
+const BETTER_AUTH_VERIFY_EMAIL_PATH = "/_agent-native/auth/ba/verify-email";
+const DESKTOP_MAGIC_LINK_CALLBACK_PATH = "/_agent-native/auth/magic-link/desktop-callback";
+const EMAIL_AUTH_LINK_CALLBACK_KEYS = [
+    "callbackURL",
+    "newUserCallbackURL",
+    "errorCallbackURL",
+];
+export function emailAuthVerificationPath(kind) {
+    if (kind === "magic-link")
+        return BETTER_AUTH_MAGIC_LINK_VERIFY_PATH;
+    if (kind === "verify-email")
+        return BETTER_AUTH_VERIFY_EMAIL_PATH;
+    return undefined;
+}
+export function emailAuthLinkLandingUrl(value) {
+    try {
+        const url = new URL(value);
+        const pathname = canonicalFrameworkPathname(url.pathname);
+        const kind = pathname.endsWith(BETTER_AUTH_MAGIC_LINK_VERIFY_PATH)
+            ? "magic-link"
+            : pathname.endsWith(BETTER_AUTH_VERIFY_EMAIL_PATH)
+                ? "verify-email"
+                : undefined;
+        const marker = kind === "magic-link"
+            ? BETTER_AUTH_MAGIC_LINK_VERIFY_PATH
+            : kind === "verify-email"
+                ? BETTER_AUTH_VERIFY_EMAIL_PATH
+                : undefined;
+        if (!kind || !marker || !url.searchParams.get("token"))
+            return undefined;
+        if (kind === "magic-link") {
+            const callbackURL = url.searchParams.get("callbackURL");
+            if (callbackURL) {
+                const callback = new URL(callbackURL, url.origin);
+                if (callback.origin === url.origin &&
+                    canonicalFrameworkPathname(callback.pathname).endsWith(DESKTOP_MAGIC_LINK_CALLBACK_PATH)) {
+                    return undefined;
+                }
+            }
+        }
+        const markerIndex = pathname.lastIndexOf(marker);
+        if (markerIndex < 0 || markerIndex + marker.length !== pathname.length) {
+            return undefined;
+        }
+        url.pathname = publicFrameworkPath(`${pathname.slice(0, markerIndex)}${EMAIL_AUTH_LINK_LANDING_PATH}`);
+        url.searchParams.set("kind", kind);
+        return url.toString();
+    }
+    catch {
+        // coercion-ok: malformed provider URLs are returned unchanged by the caller.
+        return undefined;
+    }
+}
+export function emailAuthLinkFields(values) {
+    const kind = values.kind;
+    if (kind !== "magic-link" && kind !== "verify-email")
+        return undefined;
+    const token = typeof values.token === "string" ? values.token.trim() : "";
+    if (!token)
+        return undefined;
+    const fields = { kind, token };
+    for (const key of EMAIL_AUTH_LINK_CALLBACK_KEYS) {
+        const value = values[key];
+        if (value === undefined || value === null || value === "")
+            continue;
+        if (typeof value !== "string")
+            return undefined;
+        fields[key] = value;
+    }
+    return fields;
+}
+export function emailAuthVerificationUrl(baseUrl, values) {
+    const fields = emailAuthLinkFields(values);
+    if (!fields)
+        return undefined;
+    try {
+        const verificationURL = new URL(baseUrl);
+        for (const key of EMAIL_AUTH_LINK_CALLBACK_KEYS) {
+            const callback = fields[key];
+            if (!callback)
+                continue;
+            verificationURL.searchParams.set(key, callback);
+        }
+        verificationURL.searchParams.set("token", fields.token);
+        return verificationURL;
+    }
+    catch {
+        // coercion-ok: malformed verification URLs are rejected by the landing route.
+        return undefined;
+    }
+}
+function escapeHtml(value) {
+    return value.replace(/[&<>"']/g, (char) => {
+        switch (char) {
+            case "&":
+                return "&amp;";
+            case "<":
+                return "&lt;";
+            case ">":
+                return "&gt;";
+            case '"':
+                return "&quot;";
+            default:
+                return "&#39;";
+        }
+    });
+}
+export function emailAuthLinkLandingPage(actionUrl, fields, copy, locale, direction) {
+    const hiddenInputs = Object.entries(fields)
+        .map(([name, value]) => `<input type="hidden" name="${escapeHtml(name)}" value="${escapeHtml(value)}">`)
+        .join("");
+    const html = `<!DOCTYPE html><html lang="${escapeHtml(locale)}" dir="${direction}"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${escapeHtml(copy.title)}</title></head><body><main><h1>${escapeHtml(copy.title)}</h1><p>${escapeHtml(copy.message)}</p><form method="post" action="${escapeHtml(actionUrl)}" autocomplete="off">${hiddenInputs}<button type="submit">${escapeHtml(copy.action)}</button></form></main></body></html>`;
+    return new Response(html, {
+        status: 200,
+        headers: {
+            "cache-control": "no-store",
+            "content-security-policy": "default-src 'none'; form-action 'self'; base-uri 'none'; frame-ancestors 'none'",
+            "content-type": "text/html; charset=utf-8",
+            "referrer-policy": "no-referrer",
+            "x-robots-tag": "noindex",
+        },
+    });
+}

package/dist/server/fusion-app.js

@@ -113,7 +113,17 @@ export async function getBuilderCreditUsage() {
     }
     if (!response.ok)
         return builderCreditUsageUnavailable(response.status);
-    return builderCreditUsageSchema.parse(await response.json());
+    let payload;
+    try {
+        payload = await response.json();
+    }
+    catch {
+        return builderCreditUsageUnavailable(response.status);
+    }
+    const parsed = builderCreditUsageSchema.safeParse(payload);
+    if (!parsed.success)
+        return builderCreditUsageUnavailable(response.status);
+    return parsed.data;
 }
 export async function getBuilderReferralInfo() {
     const authorization = await resolveBuilderRequestAuthorization({

package/dist/shared/agent-chat-context.d.ts

@@ -1,4 +1,4 @@
-import { splitAgentKitMessageContext } from "@agent-native/agentkit";
-export { appendAgentChatContextToMessage } from "@agent-native/agentkit";
-export type { AgentKitMessageParts as AgentChatMessageParts } from "@agent-native/agentkit";
+import { splitAgentKitMessageContext } from "@agent-native/agentkit/chat-context";
+export { appendAgentChatContextToMessage } from "@agent-native/agentkit/chat-context";
+export type { AgentKitMessageParts as AgentChatMessageParts } from "@agent-native/agentkit/chat-context";
 export declare const splitAgentChatContextFromMessage: typeof splitAgentKitMessageContext;

package/dist/shared/agent-chat-context.js

@@ -1,3 +1,3 @@
-import { splitAgentKitMessageContext } from "@agent-native/agentkit";
-export { appendAgentChatContextToMessage } from "@agent-native/agentkit";
+import { splitAgentKitMessageContext } from "@agent-native/agentkit/chat-context";
+export { appendAgentChatContextToMessage } from "@agent-native/agentkit/chat-context";
 export const splitAgentChatContextFromMessage = splitAgentKitMessageContext;

package/dist/shared/auth-copy.d.ts

@@ -9,6 +9,9 @@ export interface NativeAuthCopy {
     welcomeTitle: string;
     welcomeToApp: string;
     welcomeSubtitle: string;
+    emailLinkContinueTitle: string;
+    emailLinkContinueMessage: string;
+    emailLinkContinueAction: string;
     email: string;
     emailPlaceholder: string;
     legalPrefix: string;

package/dist/shared/auth-copy.js

@@ -21,6 +21,9 @@ export const NATIVE_AUTH_COPY = {
         welcomeTitle: "Welcome",
         welcomeToApp: "Welcome to {appName}",
         welcomeSubtitle: "Sign in or create your account",
+        emailLinkContinueTitle: "Continue with your email link",
+        emailLinkContinueMessage: "Select Continue to complete this email step.",
+        emailLinkContinueAction: "Continue",
         email: "Email",
         emailPlaceholder: "you@example.com",
         legalPrefix: "By signing up, you accept our",
@@ -60,6 +63,9 @@ export const NATIVE_AUTH_COPY = {
         welcomeTitle: "欢迎",
         welcomeToApp: "欢迎使用 {appName}",
         welcomeSubtitle: "继续以登录或创建账户",
+        emailLinkContinueTitle: "继续使用此电子邮件链接",
+        emailLinkContinueMessage: "选择“继续”以完成此电子邮件步骤。",
+        emailLinkContinueAction: "继续",
         email: "电子邮箱",
         emailPlaceholder: "you@example.com",
         legalPrefix: "注册即表示你接受我们的",
@@ -99,6 +105,9 @@ export const NATIVE_AUTH_COPY = {
         welcomeTitle: "歡迎",
         welcomeToApp: "歡迎使用 {appName}",
         welcomeSubtitle: "繼續以登入或建立帳戶",
+        emailLinkContinueTitle: "繼續使用此電子郵件連結",
+        emailLinkContinueMessage: "選擇「繼續」以完成此電子郵件步驟。",
+        emailLinkContinueAction: "繼續",
         email: "電子郵件",
         emailPlaceholder: "you@example.com",
         legalPrefix: "註冊即表示你接受我們的",
@@ -138,6 +147,9 @@ export const NATIVE_AUTH_COPY = {
         welcomeTitle: "Bienvenido",
         welcomeToApp: "Bienvenido a {appName}",
         welcomeSubtitle: "Continúa para iniciar sesión o crear tu cuenta",
+        emailLinkContinueTitle: "Continúa con el enlace de tu correo",
+        emailLinkContinueMessage: "Selecciona Continuar para completar este paso.",
+        emailLinkContinueAction: "Continuar",
         email: "Email",
         emailPlaceholder: "you@example.com",
         legalPrefix: "Al registrarte, aceptas nuestros",
@@ -177,6 +189,9 @@ export const NATIVE_AUTH_COPY = {
         welcomeTitle: "Bienvenue",
         welcomeToApp: "Bienvenue sur {appName}",
         welcomeSubtitle: "Continuez pour vous connecter ou créer votre compte",
+        emailLinkContinueTitle: "Continuer avec le lien reçu par e-mail",
+        emailLinkContinueMessage: "Sélectionnez Continuer pour terminer cette étape.",
+        emailLinkContinueAction: "Continuer",
         email: "E-mail",
         emailPlaceholder: "you@example.com",
         legalPrefix: "En vous inscrivant, vous acceptez nos",
@@ -216,6 +231,9 @@ export const NATIVE_AUTH_COPY = {
         welcomeTitle: "Willkommen",
         welcomeToApp: "Willkommen bei {appName}",
         welcomeSubtitle: "Fahre fort, um dich anzumelden oder ein Konto zu erstellen",
+        emailLinkContinueTitle: "Mit deinem E-Mail-Link fortfahren",
+        emailLinkContinueMessage: "Wähle Weiter, um diesen Schritt abzuschließen.",
+        emailLinkContinueAction: "Weiter",
         email: "E-Mail",
         emailPlaceholder: "you@example.com",
         legalPrefix: "Mit der Registrierung akzeptierst du unsere",
@@ -255,6 +273,9 @@ export const NATIVE_AUTH_COPY = {
         welcomeTitle: "ようこそ",
         welcomeToApp: "{appName}へようこそ",
         welcomeSubtitle: "続けてサインインするか、アカウントを作成します",
+        emailLinkContinueTitle: "メールリンクで続行",
+        emailLinkContinueMessage: "「続行」を選択してこの手順を完了してください。",
+        emailLinkContinueAction: "続行",
         email: "メール",
         emailPlaceholder: "you@example.com",
         legalPrefix: "登録すると、以下に同意したものとみなされます:",
@@ -294,6 +315,9 @@ export const NATIVE_AUTH_COPY = {
         welcomeTitle: "환영합니다",
         welcomeToApp: "{appName}에 오신 것을 환영합니다",
         welcomeSubtitle: "계속해서 로그인하거나 계정을 만드세요",
+        emailLinkContinueTitle: "이메일 링크로 계속하기",
+        emailLinkContinueMessage: "계속을 선택해 이 단계를 완료하세요.",
+        emailLinkContinueAction: "계속",
         email: "이메일",
         emailPlaceholder: "you@example.com",
         legalPrefix: "가입하면 다음에 동의하게 됩니다:",
@@ -333,6 +357,9 @@ export const NATIVE_AUTH_COPY = {
         welcomeTitle: "Bem-vindo",
         welcomeToApp: "Bem-vindo ao {appName}",
         welcomeSubtitle: "Continue para entrar ou criar sua conta",
+        emailLinkContinueTitle: "Continuar com o link do e-mail",
+        emailLinkContinueMessage: "Selecione Continuar para concluir esta etapa.",
+        emailLinkContinueAction: "Continuar",
         email: "Email",
         emailPlaceholder: "you@example.com",
         legalPrefix: "Ao se cadastrar, você aceita nossos",
@@ -372,6 +399,9 @@ export const NATIVE_AUTH_COPY = {
         welcomeTitle: "स्वागत है",
         welcomeToApp: "{appName} में आपका स्वागत है",
         welcomeSubtitle: "साइन इन करने या अपना खाता बनाने के लिए जारी रखें",
+        emailLinkContinueTitle: "ईमेल लिंक के साथ जारी रखें",
+        emailLinkContinueMessage: "यह चरण पूरा करने के लिए जारी रखें चुनें।",
+        emailLinkContinueAction: "जारी रखें",
         email: "ईमेल",
         emailPlaceholder: "you@example.com",
         legalPrefix: "साइन अप करके, आप हमारी",
@@ -411,6 +441,9 @@ export const NATIVE_AUTH_COPY = {
         welcomeTitle: "مرحبًا",
         welcomeToApp: "مرحبًا بك في {appName}",
         welcomeSubtitle: "تابع لتسجيل الدخول أو إنشاء حسابك",
+        emailLinkContinueTitle: "المتابعة باستخدام رابط البريد الإلكتروني",
+        emailLinkContinueMessage: "اختر متابعة لإكمال هذه الخطوة.",
+        emailLinkContinueAction: "متابعة",
         email: "البريد الإلكتروني",
         emailPlaceholder: "you@example.com",
         legalPrefix: "بالتسجيل، فإنك توافق على",

package/dist/shared/design-system-agent-context.d.ts

@@ -1,5 +1,7 @@
+export type AgentDesignSystemPurpose = "selected" | "reference";
 export interface AgentDesignSystemContextAvailable {
     status: "available";
+    purpose?: AgentDesignSystemPurpose;
     scope: "summary" | "full";
     id: string;
     title: string;
@@ -8,6 +10,7 @@ export interface AgentDesignSystemContextAvailable {
 }
 export interface AgentDesignSystemContextUnavailable {
     status: "unavailable";
+    purpose?: AgentDesignSystemPurpose;
     id: string;
     message: string;
 }
@@ -16,9 +19,11 @@ export interface AgentDesignSystemReader {
     run(args: {
         id: string;
         compact?: "true" | "false";
+        purpose?: AgentDesignSystemPurpose;
     }): unknown;
 }
 export declare function loadAgentDesignSystemContext(designSystemId: string | null | undefined, getDesignSystem: AgentDesignSystemReader, opts?: {
     full?: boolean;
+    purpose?: AgentDesignSystemPurpose;
 }): Promise<AgentDesignSystemContext | null>;
 export declare function formatAgentDesignSystemContext(context: AgentDesignSystemContext | null): string[];

package/dist/shared/design-system-agent-context.js

@@ -1,5 +1,12 @@
 const UNAVAILABLE_MESSAGE = "The linked design system could not be read. Retry get-design-system before authoring; do not invent a replacement style.";
 const NOT_ACCESSIBLE_MESSAGE = "The linked design system no longer exists or is not shared with you. Do not retry get-design-system; ask the user which system to use or unlink it. Do not invent a replacement style.";
+const REFERENCE_NOT_ACCESSIBLE_MESSAGE = "The linked design system no longer exists or is not shared with you. Do not retry it. The reference deck is still readable, so use its measured visual language as a fallback; if its samples are insufficient, ask the user which system to use or unlink it. Do not invent replacement tokens.";
+function unavailableMessage(id, purpose) {
+    if (purpose === "reference") {
+        return `The linked design system ${JSON.stringify(id)} could not be read. Use the accessible reference samples' measured visual language as fallback; if those samples are insufficient, ask the user which system to use. Do not invent replacement tokens.`;
+    }
+    return UNAVAILABLE_MESSAGE;
+}
 function isRecord(value) {
     return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -8,19 +15,27 @@ export async function loadAgentDesignSystemContext(designSystemId, getDesignSyst
     if (!id)
         return null;
     const full = Boolean(opts?.full);
+    const purpose = opts?.purpose ?? "selected";
     try {
-        const value = await getDesignSystem.run({
+        const args = {
             id,
             compact: full ? "false" : "true",
-        });
+        };
+        const value = await getDesignSystem.run(purpose === "reference" ? { ...args, purpose } : args);
         if (!isRecord(value) ||
             typeof value.title !== "string" ||
             typeof value.agentContext !== "string" ||
             !value.agentContext.trim()) {
-            return { status: "unavailable", id, message: UNAVAILABLE_MESSAGE };
+            return {
+                status: "unavailable",
+                purpose,
+                id,
+                message: unavailableMessage(id, purpose),
+            };
         }
         return {
             status: "available",
+            purpose,
             scope: full ? "full" : "summary",
             id,
             title: value.title,
@@ -28,7 +43,9 @@ export async function loadAgentDesignSystemContext(designSystemId, getDesignSyst
             ...(full
                 ? {}
                 : {
-                    next: `Call get-design-system { id: "${id}" } once before the first slide or screen you author for the full tokens, assets, docs, and custom instructions; reuse it for every later write.`,
+                    next: purpose === "reference"
+                        ? `Call get-design-system { id: ${JSON.stringify(id)}, purpose: "reference" } once before the first slide or screen you author for the full tokens, assets, docs, and custom instructions; keep its guidance advisory to a separately selected target system.`
+                        : `Call get-design-system { id: "${id}" } once before the first slide or screen you author for the full tokens, assets, docs, and custom instructions; reuse it for every later write.`,
                 }),
         };
     }
@@ -36,28 +53,40 @@ export async function loadAgentDesignSystemContext(designSystemId, getDesignSyst
         const notFound = error?.statusCode === 404;
         return {
             status: "unavailable",
+            purpose,
             id,
-            message: notFound ? NOT_ACCESSIBLE_MESSAGE : UNAVAILABLE_MESSAGE,
+            message: notFound
+                ? purpose === "reference"
+                    ? REFERENCE_NOT_ACCESSIBLE_MESSAGE
+                    : NOT_ACCESSIBLE_MESSAGE
+                : unavailableMessage(id, purpose),
         };
     }
 }
 export function formatAgentDesignSystemContext(context) {
     if (!context)
         return [];
+    const purpose = context.purpose ?? "selected";
     if (context.status === "unavailable") {
         return [
-            "### Linked design system",
+            purpose === "reference"
+                ? "### Linked design system (reference default)"
+                : "### Linked design system",
             `designSystemId: ${context.id}`,
             "status: unavailable",
             context.message,
         ];
     }
     return [
-        "### Linked design system (authoritative)",
+        purpose === "reference"
+            ? "### Linked design system (reference default)"
+            : "### Linked design system (authoritative)",
         `designSystemId: ${context.id}`,
         `designSystemTitle: ${context.title}`,
         `scope: ${context.scope}`,
-        "Use this design system's tokens, assets, and instructions before authoring or restyling visual content.",
+        purpose === "reference"
+            ? "Use this design system's tokens, assets, and instructions only when no separate system is selected for the new deck; a selected target system takes precedence."
+            : "Use this design system's tokens, assets, and instructions before authoring or restyling visual content.",
         context.agentContext,
         ...(context.next ? [context.next] : []),
     ];

package/dist/shared/index.d.ts

@@ -12,7 +12,7 @@ export { MAX_USER_REGEX_INPUT_LENGTH, MAX_USER_REGEX_LENGTH, analyzeRegexSource,
 export { isHumanReadableDocumentTitle, normalizeDocumentTitle, } from "./document-title.js";
 export { DEFAULT_REASONING_EFFORT, REASONING_EFFORTS, getReasoningEffortOptionsForModel, isReasoningEffort, reasoningEffortLabel, resolveReasoningEffortSelection, type ReasoningEffort, } from "./reasoning-effort.js";
 export { injectDocumentMarkup } from "./html-document.js";
-export { formatAgentDesignSystemContext, loadAgentDesignSystemContext, type AgentDesignSystemContext, type AgentDesignSystemContextAvailable, type AgentDesignSystemContextUnavailable, } from "./design-system-agent-context.js";
+export { formatAgentDesignSystemContext, loadAgentDesignSystemContext, type AgentDesignSystemContext, type AgentDesignSystemContextAvailable, type AgentDesignSystemContextUnavailable, type AgentDesignSystemPurpose, } from "./design-system-agent-context.js";
 export { formatHtmlStyleSummary, summarizeHtmlStyles, type HtmlStyleFragment, type HtmlStyleSummary, type HtmlStyleValue, } from "./html-style-summary.js";
 export { withBuilderUtmTrackingParams } from "./builder-link-tracking.js";
 export { BETA_FORCE_QUERY_PARAM, BETA_FORCE_SESSION_STORAGE_KEY, BETA_LANE_REDIRECT_QUERY_PARAM, BETA_LANE_RETURN_STORAGE_KEY, BETA_LANE_RETURNED_STORAGE_KEY, BETA_REDIRECT_DURATION_MS, BETA_REDIRECT_STORAGE_KEY, BETA_REDIRECT_SIGN_OUT_STORAGE_KEY, BETA_OPT_OUT_DURATION_MS, BETA_OPT_OUT_QUERY_PARAM, BETA_OPT_OUT_STORAGE_KEY, buildAutomaticBetaRedirectUrl, ENVIRONMENT_BETA_HOSTS, resolveEnvironmentTargets, type EnvironmentBadgeTargets, } from "./environment-lanes.js";

package/dist/triggers/actions/manage-automation.d.ts

@@ -13,6 +13,8 @@ declare const _default: import("../../action.js").ActionDefinition<{
     executionEngine?: string;
     executionCwd?: string;
 }, {
+    deleted?: undefined;
+    enabled?: undefined;
     created: boolean;
     name: string;
     scope: "organization" | "personal";
@@ -23,33 +25,31 @@ declare const _default: import("../../action.js").ActionDefinition<{
     reasoningEffort: "auto" | "high" | "low" | "max" | "medium" | "minimal" | "none" | "xhigh";
     webhookPath: string;
     nextRun: string;
-    deleted?: undefined;
-    enabled?: undefined;
     executionHostId?: undefined;
     executionEngine?: undefined;
     executionCwd?: undefined;
 } | {
-    created?: undefined;
     scope?: undefined;
+    enabled?: undefined;
+    nextRun?: undefined;
+    created?: undefined;
     triggerType?: undefined;
     event?: undefined;
     deleted: boolean;
     name: string;
-    enabled?: undefined;
     schedule?: undefined;
     timezone?: undefined;
     reasoningEffort?: undefined;
     executionHostId?: undefined;
     executionEngine?: undefined;
     executionCwd?: undefined;
-    nextRun?: undefined;
     webhookPath?: undefined;
 } | {
-    created?: undefined;
     scope?: undefined;
+    deleted?: undefined;
+    created?: undefined;
     triggerType?: undefined;
     event?: undefined;
-    deleted?: undefined;
     name: string;
     enabled: boolean;
     schedule: string;