@agent-native/core 0.208.0-nightly-20261013153438 → 0.208.0

package/dist/client/auth/auth-page-helpers.d.ts

@@ -1,5 +1,11 @@
 export declare function shouldRetryAuthSessionProbe(response: Pick<Response, "status">, readable: boolean): boolean;
 export declare function isAgentNativeDesktop(userAgent?: string): boolean;
+export declare function identityBootstrapCallbackHref(target: string, options: {
+    enabled: boolean;
+    bootstrapPath: string;
+    origin?: string;
+    userAgent?: string;
+}): string;
 export declare function isElectron(userAgent?: string): boolean;
 export declare function isBuilderDesktop(userAgent?: string): boolean;
 export declare function normalizeOAuthReturnPath(target: string, origin?: string): string;

package/dist/client/auth/auth-page-helpers.js

@@ -4,6 +4,23 @@ export function shouldRetryAuthSessionProbe(response, readable) {
 export function isAgentNativeDesktop(userAgent = typeof navigator === "undefined" ? "" : navigator.userAgent) {
     return /AgentNativeDesktop/i.test(userAgent);
 }
+export function identityBootstrapCallbackHref(target, options) {
+    const origin = options.origin ??
+        (typeof window === "undefined"
+            ? "http://agent-native.local"
+            : window.location.origin);
+    const appOrigin = new URL(origin);
+    const targetUrl = new URL(target || "/", appOrigin);
+    if (targetUrl.origin !== appOrigin.origin) {
+        throw new TypeError("Identity callback target must be same-origin");
+    }
+    const safeTarget = `${targetUrl.pathname}${targetUrl.search}${targetUrl.hash}`;
+    if (!options.enabled || isAgentNativeDesktop(options.userAgent))
+        return safeTarget;
+    const url = new URL(options.bootstrapPath, origin);
+    url.searchParams.set("return", safeTarget);
+    return `${url.pathname}${url.search}`;
+}
 export function isElectron(userAgent = typeof navigator === "undefined" ? "" : navigator.userAgent) {
     return userAgent.includes("Electron");
 }

package/dist/client/auth/resend-verification-email.d.ts

@@ -0,0 +1,2 @@
+/** Requests another verification message for the signed-in user's email. */
+export declare function resendVerificationEmail(email: string, callbackURL?: string): Promise<void>;

package/dist/client/auth/resend-verification-email.js

@@ -0,0 +1,32 @@
+import { agentNativePath } from "../api-path.js";
+function isSuccessfulResendResponse(value) {
+    return (value !== null &&
+        typeof value === "object" &&
+        "status" in value &&
+        value.status === true);
+}
+/** Requests another verification message for the signed-in user's email. */
+export async function resendVerificationEmail(email, callbackURL) {
+    const response = await fetch(agentNativePath("/_agent-native/auth/ba/send-verification-email"), {
+        method: "POST",
+        credentials: "include",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+            email,
+            ...(callbackURL ? { callbackURL } : {}),
+        }),
+    });
+    if (!response.ok) {
+        throw new Error("verification email request failed");
+    }
+    let result;
+    try {
+        result = await response.json();
+    }
+    catch {
+        throw new Error("verification email request failed");
+    }
+    if (!isSuccessfulResendResponse(result)) {
+        throw new Error("verification email request failed");
+    }
+}

package/dist/client/use-session.d.ts

@@ -1,5 +1,8 @@
 import type { AuthSession } from "../server/auth.js";
 export type { AuthSession };
+interface ClientAuthSession extends AuthSession {
+    identitySsoEnabled?: boolean;
+}
 export { hasSessionHint, isSessionNavigationPending, } from "../shared/ssr-session-bootstrap.js";
 /**
  * True while the app tree is mounted hidden ahead of the session read (a hinted
@@ -25,7 +28,7 @@ export type SessionNavigationReason = "signed_out" | "signed_in_app" | "sso_prob
 export declare function navigateForSession(href: string, reason?: SessionNavigationReason): boolean;
 export type SessionStatus = "loading" | "authenticated" | "unauthenticated" | "unavailable" | "signing-out";
 interface UseSessionResult {
-    session: AuthSession | null;
+    session: ClientAuthSession | null;
     isLoading: boolean;
     status: SessionStatus;
     error: Error | null;

package/dist/collab/awareness.d.ts

@@ -38,19 +38,19 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
+    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
-    error?: undefined;
 }>>;
 export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
     users?: undefined;
 } | {
+    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
-    error?: undefined;
 }>>;

package/dist/file-upload/actions/upload-image.d.ts

@@ -42,8 +42,8 @@ declare const _default: import("../../action.js").ActionDefinition<{
     url: string;
     id: string;
     provider: string;
-    configured?: undefined;
     error?: undefined;
+    configured?: undefined;
 } | {
     url?: undefined;
     id?: undefined;

package/dist/observability/routes.d.ts

@@ -33,26 +33,26 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     spans?: undefined;
     ok?: undefined;
 } | {
+    error?: undefined;
     message?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
-    error?: undefined;
     ok?: undefined;
 } | {
+    error?: undefined;
     message?: undefined;
     summary?: undefined;
     spans?: undefined;
     traceMissing: true;
     id: string;
-    error?: undefined;
     ok?: undefined;
 } | {
+    error?: undefined;
     message?: undefined;
     summary?: undefined;
     spans?: undefined;
     traceMissing?: undefined;
     id: string;
-    error?: undefined;
     ok?: undefined;
 } | {
     message?: undefined;
@@ -61,9 +61,9 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     error: any;
     ok?: undefined;
 } | {
+    error?: undefined;
     message?: undefined;
     summary?: undefined;
     spans?: undefined;
-    error?: undefined;
     ok: boolean;
 }>>;

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -76,7 +76,9 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     }>>;
 }, z.core.$strip>>, {
     message?: undefined;
-    found?: undefined;
+    id?: undefined;
+    provider?: undefined;
+    deleted?: undefined;
     providers: {
         id: string;
         label: string;
@@ -87,47 +89,45 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         updatedAt: number;
     }[];
     count: number;
-    provider?: undefined;
-    deleted?: undefined;
+    found?: undefined;
     registered?: undefined;
-    id?: undefined;
     label?: undefined;
 } | {
-    count?: undefined;
     message?: undefined;
+    id?: undefined;
+    deleted?: undefined;
     providers?: undefined;
+    count?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
-    deleted?: undefined;
     registered?: undefined;
-    id?: undefined;
     label?: undefined;
 } | {
-    count?: undefined;
     message?: undefined;
-    providers?: undefined;
     provider?: undefined;
+    deleted?: undefined;
+    providers?: undefined;
+    count?: undefined;
     found: boolean;
     id: string;
-    deleted?: undefined;
     registered?: undefined;
     label?: undefined;
 } | {
-    count?: undefined;
     message?: undefined;
-    found?: undefined;
-    providers?: undefined;
     provider?: undefined;
+    providers?: undefined;
+    count?: undefined;
+    found?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
 } | {
-    count?: undefined;
-    found?: undefined;
-    providers?: undefined;
     provider?: undefined;
     deleted?: undefined;
+    providers?: undefined;
+    count?: undefined;
+    found?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -311,9 +311,10 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
+        provider?: undefined;
+        deleted?: undefined;
         id?: undefined;
         message?: undefined;
-        found?: undefined;
         providers: {
             id: string;
             label: string;
@@ -324,46 +325,45 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
-        provider?: undefined;
-        deleted?: undefined;
+        found?: undefined;
         registered?: undefined;
         label?: undefined;
     } | {
+        deleted?: undefined;
         id?: undefined;
+        count?: undefined;
         message?: undefined;
         providers?: undefined;
-        count?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
-        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
     } | {
+        provider?: undefined;
+        deleted?: undefined;
+        count?: undefined;
         message?: undefined;
         providers?: undefined;
-        count?: undefined;
-        provider?: undefined;
         found: boolean;
         id: string;
-        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
     } | {
+        provider?: undefined;
+        count?: undefined;
         message?: undefined;
-        found?: undefined;
         providers?: undefined;
-        count?: undefined;
-        provider?: undefined;
+        found?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
     } | {
-        found?: undefined;
-        providers?: undefined;
-        count?: undefined;
         provider?: undefined;
         deleted?: undefined;
+        count?: undefined;
+        providers?: undefined;
+        found?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/provider-api/corpus-jobs.d.ts

@@ -73,7 +73,6 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     offset?: unknown;
     limit?: unknown;
 }, {
-    deleted?: undefined;
     jobs: {
         id: string;
         name: string;
@@ -84,6 +83,7 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
         updatedAt: string;
     }[];
     total: number;
+    deleted?: undefined;
     jobId?: undefined;
 } | {
     jobs?: undefined;
@@ -91,9 +91,9 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     deleted: boolean;
     jobId: string;
 } | {
-    deleted?: undefined;
     jobs?: undefined;
     total?: undefined;
+    deleted?: undefined;
     jobId?: undefined;
     hits: Record<string, unknown>[];
     offset: number;

package/dist/resources/handlers.d.ts

@@ -39,8 +39,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
     error: string;
 }>;
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/secrets/routes.d.ts

@@ -57,31 +57,31 @@ export declare function createWriteSecretHandler(): import("h3").EventHandlerWit
 } | {
     error: string;
     errorCode?: undefined;
-    ok?: undefined;
     status?: undefined;
+    ok?: undefined;
 } | {
     error: string;
     errorCode: string;
-    ok?: undefined;
     status?: undefined;
+    ok?: undefined;
 } | {
     error?: undefined;
     errorCode?: undefined;
     ok: boolean;
     status: string;
 } | {
-    ok?: undefined;
     error: string;
     removed?: undefined;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;
     removed: boolean;
 }>>;
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
     note?: undefined;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/server/agent-engine-api-key-route.d.ts

@@ -67,12 +67,12 @@ export declare function createAgentEngineApiKeyHandler(): import("h3").EventHand
     code: any;
 } | {
     errorCode?: undefined;
-    error?: undefined;
     code?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
     defaultModel?: import("./agent-engine-default-model-route.js").SavedKeyDefaultModelOutcome;
+    error?: undefined;
 }>>;
 export {};

package/dist/server/agent-engine-ollama-models-route.d.ts

@@ -3,7 +3,7 @@ export declare function createAgentEngineOllamaModelsHandler(): import("h3").Eve
     models?: undefined;
     ok?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     models: string[];
-    error?: undefined;
 }>>;

package/dist/server/auth.d.ts

@@ -26,6 +26,7 @@ export interface AuthSession {
  */
 export interface AuthSessionResponse extends AuthSession {
     testIdentity: boolean;
+    identitySsoEnabled?: boolean;
 }
 export interface AuthOptions {
     maxAge?: number;

package/dist/server/auth.js

@@ -81,7 +81,7 @@ import { getDeploymentEmailReadiness } from "./email.js";
 import { resolveGoogleSignInCredentials } from "./google-oauth-credentials.js";
 import { isElectron as isElectronRequest, getAppBasePath, getAppUrl, getOrigin, encodeOAuthState, decodeOAuthState, logOAuthStateDecodeFailure, createOAuthSession, oauthCallbackResponse, oauthDesktopExchangePage, oauthErrorPage, resolveOAuthRedirectUri, isAllowedOAuthRedirectUri, decodeNetlifyPreviewGoogleOAuthRelayState, isNetlifyPreviewGoogleOAuthCallbackUrl, isNetlifyPreviewGoogleOAuthRelayState, wrapNetlifyPreviewGoogleOAuthState, } from "./google-oauth.js";
 import { clearIdentityGoogleAuthCookie } from "./identity-auth-provider.js";
-import { isCanonicalAgentNativeAppRequest, isCanonicalIdentitySsoClientRequest, isDesktopSsoUserAgent, isIdentitySsoExplicitlyEnabled, isNetlifyDeployPermalinkIdentitySsoClientRequest, } from "./identity-sso-store.js";
+import { isCanonicalAgentNativeAppRequest, isCanonicalIdentitySsoClientRequest, isDesktopSsoUserAgent, isIdentitySsoAvailableForRequest, isIdentitySsoExplicitlyEnabled, isNetlifyDeployPermalinkIdentitySsoClientRequest, } from "./identity-sso-store.js";
 import { healUndecryptableJwks } from "./jwks-secret-rotation.js";
 import { resolveCanonicalUserForLegacySession, } from "./legacy-auth-migration.js";
 import * as loopback from "./loopback.js";
@@ -90,6 +90,7 @@ import { safeOAuthReturnUrl } from "./oauth-return-url.js";
 import { getDeploySettingsRequiredHtml, getOnboardingHtml, getResetPasswordHtml, } from "./onboarding-html.js";
 import { queryEchoSafeRedirect } from "./query-echo-safe-redirect.js";
 import { getRequestContext, markRequestIdentityAuthenticatedAtMs, markVerifiedServiceIdentityForEvent, hasContinuationLocalRequestContext, hasExplicitPersonalOrgScope, markExplicitPersonalOrgScope, runWithRequestContext, } from "./request-context.js";
+import { getForwardedRequestOrigin } from "./request-origin.js";
 import { captureAuthError } from "./sentry.js";
 import { isTestIdentity } from "./test-identity.js";
 import { isWorkspaceOAuthCallbackRelayEnabled } from "./workspace-oauth.js";
@@ -3627,6 +3628,13 @@ function setFrameworkSessionHintCookie(event) {
         maxAge: sessionMaxAge,
     });
 }
+function identitySsoEnabledForRequest(event) {
+    const requestOrigin = new URL(getForwardedRequestOrigin(event));
+    return isIdentitySsoAvailableForRequest({
+        requestHost: requestOrigin.host,
+        requestProtocol: requestOrigin.protocol.slice(0, -1),
+    });
+}
 export const authSessionHandler = defineEventHandler(async (event) => {
     setResponseHeader(event, "Cache-Control", "no-store");
     if (!isReadMethod(event)) {
@@ -3646,6 +3654,7 @@ export const authSessionHandler = defineEventHandler(async (event) => {
     const response = {
         ...session,
         testIdentity: isTestIdentity(session.email),
+        identitySsoEnabled: identitySsoEnabledForRequest(event),
     };
     return response;
 });

package/dist/sharing/actions/list-resource-shares.d.ts

@@ -2,6 +2,7 @@ declare const _default: import("../../action.js").ActionDefinition<{
     resourceType: string;
     resourceId: string;
 }, {
+    role?: undefined;
     ownerEmail: any;
     visibility: any;
     shares: any[];
@@ -11,7 +12,6 @@ declare const _default: import("../../action.js").ActionDefinition<{
         supportsGroupShares?: boolean;
     };
     orgId?: undefined;
-    role?: undefined;
     agentReadable?: undefined;
 } | {
     ownerEmail: string;

package/docs/content/template-clips-features.mdx

@@ -136,29 +136,34 @@ Turn Rewind on under the Rewind tab in Settings. Once it's on, you can ask the a
 
 ### Earlier screen time {#earlier-screen-time}
 
-Earlier screen time adds up to five minutes of your screen from before you started a recording, taken from Rewind on this device. It is attached to the recording as its own context. It is not stitched into the recording's video.
+Earlier screen time attaches up to five minutes of local screen history from before a recording as its own context. It never becomes part of the video's footage.
 
-Earlier screen time is an optional lab that is on by default. You can turn it off under **Settings > Labs**, "Include earlier screen time", in the Clips web app or the desktop app.
+<WireframeBlock id="clips-earlier-screen-time-popover">
+  <Screen
+    surface="popover"
+    frame="show"
+    html={
+      "<div style='display:flex;flex-direction:column;gap:10px;padding:16px;box-sizing:border-box'><div style='display:flex;align-items:center;gap:8px;padding:8px'><span>Include last</span><div style='flex:1'></div><span>Off</span><span data-icon='chevronDown'></span></div><div class='wf-card' style='display:flex;flex-direction:column;gap:8px'><strong>Turn on Rewind</strong><small class='wf-muted'>Off by default. Screen history stays on this device until you add it to a recording or approve a request to share it.</small><button class='primary'>Turn on Rewind</button><button style='width:100%;display:flex;justify-content:center;background:transparent;border:0'>What is this?</button></div></div>"
+    }
+  />
+</WireframeBlock>
 
-With the lab on, the Clips desktop popover has an **Include last** control. Choose **Off** (the default), **30 s**, **5 min**, or **Custom…** for any length up to five minutes. Rewind must be on and running for an amount to take effect. If Rewind is off, choosing an amount opens a short explanation with a **Turn on Rewind** button.
+**Include it with a recording**
 
-When you start a recording, the window you chose under **Include last** is requested and uploads from this device when the recording starts. With **Off**, nothing is requested.
+- **Include earlier screen time** is an optional lab, on by default. Turn it off under **Settings > Labs** in the Clips web or desktop app. In the desktop tray, choose **Off** (default), **30 s**, **5 min**, or **Custom…** up to five minutes. Rewind must be on and running; if it is off, choosing a duration opens the **Turn on Rewind** explanation.
+- When you start a recording, Clips requests the selected window from Rewind on this device and uploads it. **Off** makes no request.
 
-To see exactly what you're sharing, choose **Edit** next to the earlier screen time in the desktop app once it's ready. The editor shows a preview of up to five minutes of local history from before the recording started. The preview is built on your device and is never uploaded. The selection starts on the window you chose. Drag its handles to trim it, and use **Play selection** to play only that part.
+**Review before upload**
 
-The window has three readouts: **From 1:30 before** (how far back it starts), **Length 1 min 30 s**, and **To recording start**, because every window ends where the recording starts. When the window starts at the recording start, its first readout reads **From recording start**.
+- In the Clips desktop app, choose **Edit** when it's ready to review an on-device preview of up to five minutes. It is never uploaded, starts at the selected window, and ends at recording start. Drag the handles to trim it, or use **Play selection** to play that range.
+- **Save** uploads only the selection. Cancel or close the editor to discard the preview. Readouts show the start offset, length, and recording start; when the range starts with the recording, the offset reads **From recording start**.
 
-**Save** uploads only the selected window. Cancel, or closing the editor in any other way, discards the preview and uploads nothing.
+**Privacy and removal**
 
-To remove earlier screen time, choose **Remove earlier screen time** in the desktop edit view or in the Transcript tab's panel on the clip page, then confirm. You can also ask the agent to remove it. The footage recording moves to Trash, where it stays until you delete it there, and the clip no longer includes it. Discarding a recording also removes the earlier screen time it had.
-
-A recording captured on another device shows **Waiting for the device that recorded this clip** until that device saves it. Only that device can export its footage, so your other devices skip it. An item with no recording device on file, such as one requested before device tracking, is still processed by the desktop app that captured the recording.
-
-While a clip has earlier screen time, it stays private. Requesting it makes the clip private, and the request is refused if the clip is still shared directly with other people. Sharing is blocked until you remove the earlier screen time: making the clip public or visible to your organization, or giving someone access, is refused.
-
-On the clip page, the Transcript tab shows earlier screen time above the transcript, with its window and an inline player. Editing happens in the Clips desktop app; the same panel can remove it. The agent can read the window and its status.
-
-Limits: earlier screen time is five minutes at most. The history is only what Rewind still keeps on this device, so older moments may no longer be available.
+- Earlier screen time stays private while attached. Requesting it makes the clip private, and a request is refused while the clip is shared directly with others. Sharing, public or organization visibility, and new access stay blocked until you remove it.
+- The clip's **Transcript** tab shows the attached window above the transcript with an inline player. Remove it from the desktop edit view or that panel, then confirm. Its footage moves to Trash and the clip no longer includes it. Discarding the recording removes it too. The agent can read its window and status, and can remove it.
+- If another device captured the recording, it waits for that device to save the footage; only that device can export it, and other devices skip it. If no recording device is on file, the desktop app that captured the recording processes it.
+- The limit is five minutes, and only history Rewind still keeps on this device is available.
 
 ### Chrome extension browser logs
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.208.0-nightly-20261013153438",
+  "version": "0.208.0",
   "description": "The agentic application framework for building autonomous agents with intuitive UIs",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -499,6 +499,7 @@
     "./client/app-model-default": "./dist/client/app-model-default.js",
     "./client/appearance": "./dist/client/appearance.js",
     "./client/auth/change-email": "./dist/client/auth/change-email.js",
+    "./client/auth/resend-verification-email": "./dist/client/auth/resend-verification-email.js",
     "./client/auth/two-factor": "./dist/client/auth/two-factor.js",
     "./client/browser-tab-id": "./dist/client/browser-tab-id.js",
     "./client/builder-frame": "./dist/client/builder-frame.js",
@@ -702,8 +703,8 @@
     "yaml": "^2.9.0",
     "yjs": "^13.6.33",
     "zod": "^4.3.6",
-    "@agent-native/agentkit": "^0.208.0-nightly-20261013153438",
-    "@agent-native/recap-cli": "^0.5.70"
+    "@agent-native/agentkit": "^0.208.0",
+    "@agent-native/recap-cli": "^0.5.71"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",
@@ -773,7 +774,7 @@
     "xlsx": "^0.18.5"
   },
   "peerDependencies": {
-    "@agent-native/core-corpus": "0.208.0-nightly-20261013153438",
+    "@agent-native/core-corpus": ">=0.196.0",
     "@ai-sdk/anthropic": ">=3",
     "@ai-sdk/cohere": ">=3",
     "@ai-sdk/google": ">=3",