@agent-native/core 0.227.0-nightly-20261110182415 → 0.227.0

package/dist/client/chat/run-outcome.d.ts

@@ -15,6 +15,54 @@ import { type AutoContinueRefusalCode } from "../../agent/auto-continue.js";
  */
 export declare const RUN_OUTCOMES: readonly ["running", "succeeded", "stopped", "interrupted", "failed", "unverified"];
 export type RunOutcome = (typeof RUN_OUTCOMES)[number];
+export type ActiveRunPhase = {
+    readonly type: "streaming";
+} | {
+    readonly type: "holdingInterruption";
+    readonly error: AgentError;
+} | {
+    readonly type: "followingSuccessor";
+} | {
+    readonly type: "awaitingContinuation";
+    readonly streamClosed: boolean;
+};
+export type RunPhase = ActiveRunPhase | {
+    readonly type: "cancelling";
+    readonly previous: ActiveRunPhase;
+} | {
+    readonly type: "terminal";
+} | {
+    readonly type: "disposed";
+};
+export type RunPhaseEvent = {
+    readonly type: "streamEnded";
+} | {
+    readonly type: "streamFailed";
+} | {
+    readonly type: "interrupted";
+    readonly error: AgentError;
+} | {
+    readonly type: "followSuccessor";
+} | {
+    readonly type: "streamOpened";
+} | {
+    readonly type: "continuationResumed";
+} | {
+    readonly type: "awaitContinuation";
+    readonly streamClosed: boolean;
+} | {
+    readonly type: "terminal";
+} | {
+    readonly type: "cancelStarted";
+} | {
+    readonly type: "cancelSucceeded";
+} | {
+    readonly type: "cancelFailed";
+} | {
+    readonly type: "dispose";
+};
+/** Late stream and authority results cannot revive a terminal or disposed run. */
+export declare function transition(phase: RunPhase, event: RunPhaseEvent): RunPhase;
 /**
  * Codes that described "the agent stopped / is stuck" one incident at a time.
  * They survive only as telemetry detail; the user sees their outcome. A new

package/dist/client/chat/run-outcome.js

@@ -24,6 +24,56 @@ export const RUN_OUTCOMES = [
     "failed",
     "unverified",
 ];
+/** Late stream and authority results cannot revive a terminal or disposed run. */
+export function transition(phase, event) {
+    if (event.type === "dispose")
+        return { type: "disposed" };
+    if (phase.type === "disposed")
+        return phase;
+    if (phase.type === "terminal")
+        return phase;
+    if (phase.type === "cancelling") {
+        if (event.type === "cancelFailed")
+            return phase.previous;
+        if (event.type === "cancelSucceeded")
+            return { type: "terminal" };
+        return phase;
+    }
+    switch (event.type) {
+        case "streamEnded":
+        case "streamFailed":
+            return phase.type === "streaming"
+                ? { type: "followingSuccessor" }
+                : phase;
+        case "interrupted":
+            return phase.type === "streaming"
+                ? { type: "holdingInterruption", error: event.error }
+                : phase;
+        case "followSuccessor":
+            return phase.type === "holdingInterruption"
+                ? { type: "followingSuccessor" }
+                : phase;
+        case "streamOpened":
+            return phase.type === "followingSuccessor"
+                ? { type: "streaming" }
+                : phase;
+        case "continuationResumed":
+            return phase.type === "awaitingContinuation"
+                ? { type: "streaming" }
+                : phase;
+        case "awaitContinuation":
+            return phase.type === "streaming"
+                ? { type: "awaitingContinuation", streamClosed: event.streamClosed }
+                : phase;
+        case "terminal":
+            return { type: "terminal" };
+        case "cancelStarted":
+            return { type: "cancelling", previous: phase };
+        case "cancelSucceeded":
+        case "cancelFailed":
+            return phase;
+    }
+}
 /**
  * Codes that described "the agent stopped / is stuck" one incident at a time.
  * They survive only as telemetry detail; the user sees their outcome. A new

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import
     ok: boolean;
 }>>;
 export declare const postCollabText: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     text?: undefined;
+    ok?: undefined;
     error: string;
 } | {
     error?: undefined;

package/dist/collab/struct-routes.d.ts

@@ -13,9 +13,9 @@ export declare const postCollabPatch: import("h3").EventHandlerWithFetch<import(
     ok: boolean;
 }>>;
 export declare const getCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    data?: undefined;
     error: string;
     docId?: undefined;
+    data?: undefined;
 } | {
     error?: undefined;
     docId: string;

package/dist/framework-package-versions.json

@@ -1,17 +1,17 @@
 {
-  "@agent-native/agentkit": "0.227.0-nightly-20261110182415",
+  "@agent-native/agentkit": "0.227.0",
   "@agent-native/code-agents-ui": "0.1.75",
-  "@agent-native/core": "0.227.0-nightly-20261110182415",
-  "@agent-native/core-corpus": "0.227.0-nightly-20261110182415",
-  "@agent-native/creative-context": "0.8.69-nightly-20261110182415",
-  "@agent-native/dispatch": "0.42.4-nightly-20261110182415",
+  "@agent-native/core": "0.227.0",
+  "@agent-native/core-corpus": "0.227.0",
+  "@agent-native/creative-context": "0.8.69",
+  "@agent-native/dispatch": "0.42.4",
   "@agent-native/embedding": "0.2.0",
   "@agent-native/migrate": "0.0.7",
-  "@agent-native/otel": "0.1.35",
-  "@agent-native/pinpoint": "0.1.111",
-  "@agent-native/recap-cli": "0.5.99",
-  "@agent-native/scheduling": "0.2.56-nightly-20261110182415",
+  "@agent-native/otel": "0.1.36",
+  "@agent-native/pinpoint": "0.1.112",
+  "@agent-native/recap-cli": "0.5.100",
+  "@agent-native/scheduling": "0.2.56",
   "@agent-native/shared-app-config": "0.1.2",
-  "@agent-native/skills": "0.4.4-nightly-20261110182415",
-  "@agent-native/toolkit": "0.227.0-nightly-20261110182415"
+  "@agent-native/skills": "0.4.4",
+  "@agent-native/toolkit": "0.227.0"
 }

package/dist/jobs/run-now.js

@@ -4,7 +4,7 @@ import { canQueueAutomationRunNow, } from "../automations/service.js";
 import { isLocalDatabase } from "../db/client.js";
 import { organizationResourceOwner, resourceGetByPath, } from "../resources/store.js";
 import { fireInternalDispatch } from "../server/self-dispatch.js";
-import { parseJobResource } from "./frontmatter.js";
+import { isRecoveredFactoryJob, jobBelongsToApp, parseJobResource, } from "./frontmatter.js";
 import { automationRunOwnership } from "./run-history-ownership.js";
 import { listUnclaimedAutomationRuns, startAutomationRun, } from "./run-history.js";
 async function dispatchAutomationRun(historyId, requestHeaders) {
@@ -113,6 +113,14 @@ export async function authorizeAutomationRunNow(input) {
         });
     }
     if (!(await canQueueAutomationRunNow(input, access.resource, access.scope, input.additionalJobAppIds))) {
+        const { meta } = parseJobResource(access.resource.content);
+        if (!jobBelongsToApp(meta, input.appId, input.additionalJobAppIds) &&
+            !isRecoveredFactoryJob(meta, access.resource.path, input.appId, access.resource.owner)) {
+            const ownerAppId = meta.appId?.trim();
+            throw Object.assign(new Error(ownerAppId
+                ? `This automation belongs to the "${ownerAppId}" app. Run it from that app.`
+                : "This automation has no app owner and cannot be run."), { statusCode: 403 });
+        }
         throw Object.assign(new Error("Collaborate access is required to run this automation."), { statusCode: 403 });
     }
     return access;

package/dist/notifications/routes.d.ts

@@ -1,12 +1,12 @@
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
-    error?: undefined;
     count: number;
     updated?: undefined;
+    error?: undefined;
     ok?: undefined;
 } | {
-    error?: undefined;
     count?: undefined;
     updated: number;
+    error?: undefined;
     ok?: undefined;
 } | {
     count?: undefined;
@@ -14,8 +14,8 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     count?: undefined;
     updated?: undefined;
+    error?: undefined;
     ok: boolean;
 }>>;

package/dist/org/index.d.ts

@@ -180,9 +180,9 @@ export declare const getMyOrgHandler: import("h3").EventHandlerWithFetch<import(
     soloDeploymentAdmin: boolean | undefined;
 }>>;
 export declare const createOrgHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    id?: undefined;
     name?: undefined;
     success: boolean;
+    id?: undefined;
     role?: undefined;
 } | {
     success?: undefined;

package/dist/org/migrations.d.ts

@@ -1,7 +1,7 @@
 export declare const ORG_MIGRATIONS: ({
-    name?: undefined;
     version: number;
     sql: string;
+    name?: undefined;
 } | {
     version: number;
     name: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -316,8 +316,8 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
-        provider?: undefined;
         id?: undefined;
+        provider?: undefined;
         message?: undefined;
         providers: {
             id: string;

package/dist/resources/handlers.d.ts

@@ -49,7 +49,6 @@ export declare function handleUploadResource(event: any): Promise<import("./stor
     error: string;
     storageSetupRequired?: undefined;
 } | {
-    error?: undefined;
     id: string;
     path: string;
     owner: string;
@@ -64,6 +63,7 @@ export declare function handleUploadResource(event: any): Promise<import("./stor
     runId: string | null;
     expiresAt: number | null;
     metadata: string | null;
+    error?: undefined;
     url: string;
     provider: string;
     storageSetupRequired?: undefined;

package/dist/scripts/agent-engines/list-agent-engines.js

@@ -1,6 +1,6 @@
 import { getAgentAppModelDefaultForCurrentRequest } from "../../agent/app-model-defaults.js";
 import { CHATGPT_SUBSCRIPTION_ENGINE_NAME } from "../../agent/chatgpt-subscription-contract.js";
-import { readDefaultAgentEngineSettingDetailed, resolveDefaultAgentEngineAuthority, } from "../../agent/default-agent-engine.js";
+import { isDefaultAgentEngineScopeResolved, readDefaultAgentEngineSettingDetailed, resolveDefaultAgentEngineAuthority, } from "../../agent/default-agent-engine.js";
 import { listChatGPTSubscriptionModels } from "../../agent/engine/chatgpt-subscription-engine.js";
 import { listAgentEngines, registerBuiltinEngines, detectEngineFromEnv, detectEngineFromUserSecrets, getAgentEngineEntry, isAgentEnginePackageInstalled, isStoredEngineUsableForRequest, normalizeModelForEngine, resolveEngineAcceptsCustomModels, resolveEnginePreservesCustomModels, } from "../../agent/engine/index.js";
 import { applyProviderModelSelection, providerForEngineName, resolveEffectiveProviderModelSelection, } from "../../agent/provider-model-selection.js";
@@ -101,10 +101,14 @@ export async function run(args = {}) {
         }
         return pending;
     };
-    const [defaultSetting, defaultAuthority] = await Promise.all([
-        readDefaultAgentEngineSettingDetailed(),
-        resolveDefaultAgentEngineAuthority(),
-    ]);
+    // An unresolved scope cannot say which default applies. Listing engines
+    // must still work, so the read is skipped and reported as "unresolved"
+    // instead of "none", which would claim no default is saved.
+    const defaultAuthority = await resolveDefaultAgentEngineAuthority();
+    const scopeUnresolved = !isDefaultAgentEngineScopeResolved();
+    const defaultSetting = scopeUnresolved
+        ? { value: null, source: "unresolved" }
+        : await readDefaultAgentEngineSettingDetailed();
     const current = defaultSetting.value
         ? defaultSetting.value
         : null;

package/dist/server/index.d.ts

@@ -41,6 +41,7 @@ export { callerHasThreadAccess } from "../agent/run-ownership.js";
 export { abortTurnByRefDurably, getActiveRunForThreadAsync, } from "../agent/run-manager.js";
 export { mountRealtimeVoiceRoutes, realtimeVoiceSafetyIdentifier, REALTIME_VOICE_MAX_SDP_BYTES, REALTIME_VOICE_MAX_TOOL_BODY_BYTES, REALTIME_VOICE_MAX_TOOL_OUTPUT_CHARS, REALTIME_VOICE_SESSION_PATH, REALTIME_VOICE_TOOL_PATH, type MountRealtimeVoiceRoutesOptions, type RealtimeVoiceIntelligence, type RealtimeVoiceRequestContext, type RealtimeVoiceToolExecutionRequest, type RealtimeVoiceToolExecutionResult, } from "./realtime-voice.js";
 export { getStoredModelForEngine, resolveEngine, } from "../agent/engine/index.js";
+export { resolveChatModelAvailability, type ChatModelAvailability, } from "../agent/engine/chat-model-availability.js";
 export { completeText, type CompleteTextMessage, type CompleteTextOptions, type CompleteTextResult, type CompleteTextUsage, } from "./complete-text.js";
 export { createDevScriptRegistry } from "../scripts/dev/index.js";
 export { createPollHandler, recordChange, prepareTransactionalChange, getVersion, getChangesSince, getCurrentPollBaseline, getPollEmitter, canSeeChangeForUser, POLL_CHANGE_EVENT, type TransactionalChange, } from "./poll.js";

package/dist/server/index.js

@@ -39,6 +39,7 @@ export { callerHasThreadAccess } from "../agent/run-ownership.js";
 export { abortTurnByRefDurably, getActiveRunForThreadAsync, } from "../agent/run-manager.js";
 export { mountRealtimeVoiceRoutes, realtimeVoiceSafetyIdentifier, REALTIME_VOICE_MAX_SDP_BYTES, REALTIME_VOICE_MAX_TOOL_BODY_BYTES, REALTIME_VOICE_MAX_TOOL_OUTPUT_CHARS, REALTIME_VOICE_SESSION_PATH, REALTIME_VOICE_TOOL_PATH, } from "./realtime-voice.js";
 export { getStoredModelForEngine, resolveEngine, } from "../agent/engine/index.js";
+export { resolveChatModelAvailability, } from "../agent/engine/chat-model-availability.js";
 export { completeText, } from "./complete-text.js";
 export { createDevScriptRegistry } from "../scripts/dev/index.js";
 export { createPollHandler, recordChange, prepareTransactionalChange, getVersion, getChangesSince, getCurrentPollBaseline, getPollEmitter, canSeeChangeForUser, POLL_CHANGE_EVENT, } from "./poll.js";

package/dist/templates/builder-code-starter/AGENTS.md.patch

@@ -41,7 +41,7 @@
 -Choose the primary workflow and route before editing. Add a domain route under `app/routes/` and set `app.homePath` in `server/plugins/agent-native-email-branding.ts` with `defineAppConfig`. The default Get started page lives at `/home`, and Chat stays at `/chat`; edit `app/routes/home.tsx` when replacing that page with a domain-specific home. Add a static link in `app/components/layout/Sidebar.tsx` before `ChatThreadsSection`; `Header.tsx` uses `APP_TITLE` elsewhere. Shared sidebar and AgentInspector remain.
 +Choose the primary workflow and route before editing. Build on the blank canvas in `app/routes/_index.tsx` or add domain routes under `app/routes/`. This starter has no Chat route, sidebar, header, or agent rail; add only the navigation the product needs. Set `app.homePath` in the existing `defineAppConfig` in `server/plugins/config.ts` as `DEVELOPING.md` describes.
  
--Use `adding-a-feature` for functional parity and `frontend-design` for a user-facing screen. Keep feature guidance here; do not rewrite `README.md` or `DESIGN.md`. After all edits, run one typecheck, one doctor check, and one browser smoke of the primary workflow, including overlap rejection, cancellation freeing the slot, and authenticated landing. Skip production build and extra test suites.
+-Use `adding-a-feature` for functional parity and `frontend-design` for a user-facing screen. Keep feature guidance here; do not rewrite `README.md` or `DESIGN.md`. After all edits, run one typecheck, one doctor check, and one browser smoke of the primary workflow and its authenticated landing. Skip production build and extra test suites.
 +Use `adding-a-feature` for functional parity and `frontend-design` for a user-facing screen. Keep feature guidance here and update `README.md` as `DEVELOPING.md` describes. After all edits, run one typecheck, one doctor check, and one browser smoke of the primary workflow and its authenticated landing. Skip production build and extra test suites.
  
  Before building common workspace or agent UI, read `agent-native-toolkit`; for supported customization, read `customizing-agent-native`.

package/dist/templates/chat/AGENTS.md

@@ -26,6 +26,6 @@ For custom branding, keep `server/plugins/agent-native-email-branding.ts` aligne
 
 Choose the primary workflow and route before editing. Add a domain route under `app/routes/` and set `app.homePath` in `server/plugins/agent-native-email-branding.ts` with `defineAppConfig`. The default Get started page lives at `/home`, and Chat stays at `/chat`; edit `app/routes/home.tsx` when replacing that page with a domain-specific home. Add a static link in `app/components/layout/Sidebar.tsx` before `ChatThreadsSection`; `Header.tsx` uses `APP_TITLE` elsewhere. Shared sidebar and AgentInspector remain.
 
-Use `adding-a-feature` for functional parity and `frontend-design` for a user-facing screen. Keep feature guidance here; do not rewrite `README.md` or `DESIGN.md`. After all edits, run one typecheck, one doctor check, and one browser smoke of the primary workflow, including overlap rejection, cancellation freeing the slot, and authenticated landing. Skip production build and extra test suites.
+Use `adding-a-feature` for functional parity and `frontend-design` for a user-facing screen. Keep feature guidance here; do not rewrite `README.md` or `DESIGN.md`. After all edits, run one typecheck, one doctor check, and one browser smoke of the primary workflow and its authenticated landing. Skip production build and extra test suites.
 
 Before building common workspace or agent UI, read `agent-native-toolkit`; for supported customization, read `customizing-agent-native`.

package/dist/triggers/actions/list-automations.js

@@ -3,6 +3,7 @@ import { defineAction } from "../../action.js";
 import { listAccessibleAutomationDefinitions, } from "../../automations/service.js";
 import { hasStalePause, isPausedByFramework, } from "../../jobs/automation-outcome.js";
 import { describeCron, effectiveTimezone, isValidCron, nextOccurrence, } from "../../jobs/cron.js";
+import { isRecoveredFactoryJob, jobBelongsToApp, } from "../../jobs/frontmatter.js";
 import { listLatestAutomationRuns } from "../../jobs/run-history.js";
 function nextRun(meta) {
     if (!meta.enabled)
@@ -111,7 +112,12 @@ export default defineAction({
                 deliveryTenantId: meta.deliveryTenantId ?? null,
                 canUpdate,
                 effectiveRole,
-                capabilities,
+                capabilities: {
+                    ...capabilities,
+                    canOperate: capabilities.canOperate &&
+                        (jobBelongsToApp(meta, ctx.appId) ||
+                            isRecoveredFactoryJob(meta, resource.path, ctx.appId, resource.owner)),
+                },
                 sharing,
                 creator,
             };

package/docs/content/agent-web-surfaces.mdx

@@ -17,7 +17,7 @@ The docs site is the reference implementation. Today it ships:
 - JSON-LD for base organization, website, and page metadata.
 - An audit CLI (`npx @agent-native/core@latest audit-agent-web`) that checks all of the above.
 
-Setting `publicMcp: true` additionally exposes opted-in actions as a public MCP endpoint, allowing external agents to call them directly (see [MCP Protocol](/docs/mcp-protocol)).
+Publishing these files never exposes an action. An action reaches external agents only through its own `publicAgent` opt-in; see [Expose to public agents](/docs/actions-access-control#public-agent).
 
 <Diagram id="doc-block-1guzidr" title="What a public route publishes" summary={"A public route fans out into agent-friendly representations. Reading the route is separate from calling tools — tool access stays opt-in."}>
 
@@ -25,7 +25,7 @@ Setting `publicMcp: true` additionally exposes opted-in actions as a public MCP
 <div class="diagram-web">
   <div class="diagram-box" data-rough>
     Public route<br /><small class="diagram-muted"
-      >derived from route access settings</small
+      >from the page list you pass</small
     >
   </div>
   <div class="diagram-arrow diagram-muted" aria-hidden="true">&rarr;</div>
@@ -40,9 +40,7 @@ Setting `publicMcp: true` additionally exposes opted-in actions as a public MCP
   <div class="diagram-arrow diagram-muted" aria-hidden="true">&rarr;</div>
   <div class="diagram-col gate">
     <span class="diagram-pill warn">Tools stay private</span
-    ><small class="diagram-muted"
-      >publicMcp + publicAgent.expose required</small
-    >
+    ><small class="diagram-muted">publicAgent.expose required</small>
   </div>
 </div>
 ```
@@ -75,45 +73,57 @@ Setting `publicMcp: true` additionally exposes opted-in actions as a public MCP
 
 ## Configuration {#config}
 
-Add `agentWeb` under the existing workspace app config (in your app's `package.json` under the `agent-native` key — or equivalently `workspace.agentWeb`, `agentWeb`, or `root.agentWeb`). The public route list is still derived from the app's route access settings; `agentWeb` controls how that public surface is represented to agents.
-
-```json
-{
-  "agent-native": {
-    "workspaceApp": {
-      "audience": "public",
-      "protectedPaths": ["/admin/*"],
-      "agentWeb": {
-        "discoverable": true,
-        "markdownTwins": true,
-        "llmsTxt": true,
-        "jsonLd": true,
-        "publicAgentCard": true,
-        "publicMcp": false,
-        "crawlerPolicy": "discoverable-no-training",
-        "crawlers": {
-          "training": "disallow",
-          "search": "allow",
-          "userTriggered": "allow",
-          "codingAgents": "allow",
-          "autonomousAgents": "allow"
-        }
-      }
-    }
-  }
-}
+`createAgentWebVitePlugin` from `@agent-native/core/vite` writes these files during a production build. Add it to your Vite config with the pages agents should read:
+
+```ts
+// vite.config.ts
+import { defineConfig } from "vite";
+import { createAgentWebVitePlugin } from "@agent-native/core/vite";
+
+export default defineConfig({
+  plugins: [
+    // ...your existing plugins
+    createAgentWebVitePlugin({
+      siteName: "My Agent-Native App",
+      siteUrl: "https://example.com",
+      pages: [
+        {
+          path: "/pricing",
+          title: "Pricing",
+          description: "Plans and limits.",
+          markdown: "Plans and limits.\n",
+        },
+      ],
+      agentWeb: { crawlerPolicy: "discoverable-no-training" },
+    }),
+  ],
+});
 ```
 
-For most apps, leave the defaults alone. If an app has any public route, `discoverable` defaults on. The default crawler policy is "discoverable, not trainable": search, user-triggered retrieval, coding agents, and autonomous browsing agents are allowed; training crawlers are disallowed.
+The plugin publishes the pages you list and nothing else. It doesn't read your route access settings, and it doesn't read `agentWeb` from `package.json` unless you pass it in. To keep the settings in `package.json` under `agent-native.workspaceApp.agentWeb`, pass `agentWeb: agentWebConfigFromPackageJson(pkg)`, imported from `@agent-native/core/agent-web`.
+
+| Option          | Default                      | What it does                                                                                                                                           |
+| --------------- | ---------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `discoverable`  | On when `pages` isn't empty  | `false` writes no files.                                                                                                                               |
+| `llmsTxt`       | `true`                       | Writes `/llms.txt` and `/llms-full.txt`.                                                                                                               |
+| `markdownTwins` | `true`                       | Writes a `.md` copy of each page that has `markdown`.                                                                                                  |
+| `crawlerPolicy` | `"discoverable-no-training"` | Sets the `robots.txt` rules: `"discoverable-no-training"`, `"allow-all"`, or `"disallow-all"`.                                                         |
+| `crawlers`      | None                         | Overrides individual crawler categories: `training`, `search`, `userTriggered`, `codingAgents`, or `autonomousAgents`, each `"allow"` or `"disallow"`. |
+
+The default crawler policy is "discoverable, not trainable": search, user-triggered retrieval, coding agents, and autonomous browsing agents are allowed; training crawlers are disallowed.
+
+`jsonLd`, `publicAgentCard`, and `publicMcp` are accepted, but nothing reads them yet. For JSON-LD, render `buildBaseJsonLd` and `buildPageJsonLd` from `@agent-native/core/agent-web` into your pages yourself.
 
 ## Route source of truth {#route-source}
 
-Agent Web discovery follows the route access model:
+The page list is the source of truth: agents get the pages you pass, and only those. Build it from pages that are already public:
+
+- In a public app, every route except `protectedPaths`.
+- In an internal app, only `publicPaths`.
+- Public share and form pages that agents should be able to read.
+- Never submitted private data, authenticated dashboards, or user or org state, even when a nearby page is public.
 
-- Public apps expose every route except `protectedPaths`.
-- Internal apps expose only `publicPaths`.
-- Public share and form pages can be readable by agents.
-- Submitted private data, authenticated dashboards, and user/org state are never included just because a nearby page is public.
+To start from your access settings, `deriveAgentWebPublicRoutes` from `@agent-native/core/agent-web` takes your app's `audience`, `publicPaths`, `protectedPaths`, and `routes`, and returns the routes those settings make public. Each page still needs its own title and Markdown.
 
 This keeps mixed apps natural. A forms app can expose a public form page and keep submissions private. A content app can expose published posts and keep the editor private. A docs site can expose everything except admin tools.
 
@@ -123,7 +133,7 @@ Public page access and public tool access are separate. A route being public onl
 
 <Callout id="doc-block-s50w8y" tone="warning">
 
-**A public page is not a public tool.** Making a route crawlable never exposes an action. Tool access requires an explicit `publicAgent.expose` opt-in on the action _and_ `publicMcp: true` on the app.
+**A public page is not a public tool.** Making a route crawlable never exposes an action. Tool access requires an explicit `publicAgent.expose` opt-in on the action.
 
 </Callout>
 
@@ -151,7 +161,7 @@ To expose an action through a public agent protocol, the action must opt in:
   ]}
 />
 
-`agentWeb.publicMcp` stays `false` by default. When public MCP is enabled, the server should expose only actions with `publicAgent.expose === true`, and should still exclude consequential or write actions unless the action and auth policy explicitly allow them.
+No `agentWeb` setting exposes an action, and `publicMcp` has no effect today. See [Expose to public agents](/docs/actions-access-control#public-agent) for what `publicAgent` opts an action into and the checks that still apply.
 
 ## Build-time files {#build-time}
 
@@ -186,7 +196,9 @@ const files = buildAgentWebStaticFiles({
 });
 ```
 
-Vite apps can use `createAgentWebVitePlugin` from `@agent-native/core/vite` to write those files into `public`, `dist`, `dist/client`, `dist/server/public`, or `build/client` during production builds.
+`createAgentWebVitePlugin` calls `buildAgentWebStaticFiles` for you and writes the files into whichever of `public`, `dist`, `dist/client`, `dist/server/public`, and `build/client` exist. With another build tool, call the utilities directly.
+
+Neither one answers `Accept: text/markdown` on a page's own URL: the Markdown copy is only at its `.md` URL. To answer that header, add a server route that returns the page's Markdown with the headers from `buildMarkdownResponseHeaders`, as the docs site does. Without that route, the audit below fails its `Accept: text/markdown` check.
 
 Pass `sitemapGroup` to `buildAgentWebStaticFiles` or `createAgentWebVitePlugin` to split a large sitemap. It maps each page to a group key, such as its locale, and `sitemap.xml` becomes a sitemap index with one `sitemap-<group>.xml` per group.
 
@@ -215,5 +227,5 @@ The audit exits non-zero if a required public surface is missing.
 ## What's next
 
 - [**Actions**](/docs/actions-overview) — how to opt actions into the public agent protocol
-- [**MCP Protocol**](/docs/mcp-protocol) — the MCP surface that `publicMcp: true` enables
+- [**MCP Protocol**](/docs/mcp-protocol) — the MCP server external agents connect to
 - [**Deployment**](/docs/deployment) — where these static files are written during builds

package/docs/content/create-with-an-agent.mdx

@@ -34,7 +34,7 @@ it. Use that name wherever a step below says APP_NAME.
     --standalone --template chat
 3. In the new APP_NAME folder, run `pnpm install`.
 4. Read APP_NAME/AGENTS.md so you know how the app is laid out.
-5. Start the app with `pnpm dev` and keep it running in the background.
+5. Start the app with `pnpm dev --no-open` and keep it running in the background.
 6. Read the local URL that `pnpm dev` prints. Check that it responds,
    for example with `curl -I <url>`. Do not open a browser and do not
    use headless browser tools. I will open the app myself.

package/docs/content/external-agents.mdx

@@ -166,6 +166,14 @@ invalid document ID. Verify the link and connected account's access before
 changing permissions. Reinstalling the connector or changing the public share
 link does not resolve a confirmed account permission denial.
 
+Images uploaded into a private document are stored in its body as
+`/api/private-media/<id>` links, which load only with a Content sign-in.
+When an agent reads the document over MCP, `get-document`, and `pull-document`
+in Markdown, also return `privateMediaLinks`: each stored link paired with a
+URL that opens that one image without signing in, for one hour. One read links
+at most 200 images; `omitted` counts the rest. Read the document again for
+fresh links. Keep the stored links when editing the body.
+
 <a id="access-tab"></a>
 
 ### The in-app MCP setting {#mcp-settings}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.227.0-nightly-20261110182415",
+  "version": "0.227.0",
   "description": "The agentic application framework for building autonomous agents with intuitive UIs",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -769,8 +769,8 @@
     "yaml": "^2.9.0",
     "yjs": "^13.6.33",
     "zod": "^4.3.6",
-    "@agent-native/agentkit": "^0.227.0-nightly-20261110182415",
-    "@agent-native/recap-cli": "^0.5.99"
+    "@agent-native/agentkit": "^0.227.0",
+    "@agent-native/recap-cli": "^0.5.100"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",
@@ -843,7 +843,7 @@
     "xlsx": "^0.18.5"
   },
   "peerDependencies": {
-    "@agent-native/core-corpus": "0.227.0-nightly-20261110182415",
+    "@agent-native/core-corpus": ">=0.196.0",
     "@ai-sdk/anthropic": ">=3",
     "@ai-sdk/cohere": ">=3",
     "@ai-sdk/google": ">=3",

package/src/templates/builder-code-starter/AGENTS.md.patch

@@ -41,7 +41,7 @@
 -Choose the primary workflow and route before editing. Add a domain route under `app/routes/` and set `app.homePath` in `server/plugins/agent-native-email-branding.ts` with `defineAppConfig`. The default Get started page lives at `/home`, and Chat stays at `/chat`; edit `app/routes/home.tsx` when replacing that page with a domain-specific home. Add a static link in `app/components/layout/Sidebar.tsx` before `ChatThreadsSection`; `Header.tsx` uses `APP_TITLE` elsewhere. Shared sidebar and AgentInspector remain.
 +Choose the primary workflow and route before editing. Build on the blank canvas in `app/routes/_index.tsx` or add domain routes under `app/routes/`. This starter has no Chat route, sidebar, header, or agent rail; add only the navigation the product needs. Set `app.homePath` in the existing `defineAppConfig` in `server/plugins/config.ts` as `DEVELOPING.md` describes.
  
--Use `adding-a-feature` for functional parity and `frontend-design` for a user-facing screen. Keep feature guidance here; do not rewrite `README.md` or `DESIGN.md`. After all edits, run one typecheck, one doctor check, and one browser smoke of the primary workflow, including overlap rejection, cancellation freeing the slot, and authenticated landing. Skip production build and extra test suites.
+-Use `adding-a-feature` for functional parity and `frontend-design` for a user-facing screen. Keep feature guidance here; do not rewrite `README.md` or `DESIGN.md`. After all edits, run one typecheck, one doctor check, and one browser smoke of the primary workflow and its authenticated landing. Skip production build and extra test suites.
 +Use `adding-a-feature` for functional parity and `frontend-design` for a user-facing screen. Keep feature guidance here and update `README.md` as `DEVELOPING.md` describes. After all edits, run one typecheck, one doctor check, and one browser smoke of the primary workflow and its authenticated landing. Skip production build and extra test suites.
  
  Before building common workspace or agent UI, read `agent-native-toolkit`; for supported customization, read `customizing-agent-native`.

package/src/templates/chat/AGENTS.md

@@ -26,6 +26,6 @@ For custom branding, keep `server/plugins/agent-native-email-branding.ts` aligne
 
 Choose the primary workflow and route before editing. Add a domain route under `app/routes/` and set `app.homePath` in `server/plugins/agent-native-email-branding.ts` with `defineAppConfig`. The default Get started page lives at `/home`, and Chat stays at `/chat`; edit `app/routes/home.tsx` when replacing that page with a domain-specific home. Add a static link in `app/components/layout/Sidebar.tsx` before `ChatThreadsSection`; `Header.tsx` uses `APP_TITLE` elsewhere. Shared sidebar and AgentInspector remain.
 
-Use `adding-a-feature` for functional parity and `frontend-design` for a user-facing screen. Keep feature guidance here; do not rewrite `README.md` or `DESIGN.md`. After all edits, run one typecheck, one doctor check, and one browser smoke of the primary workflow, including overlap rejection, cancellation freeing the slot, and authenticated landing. Skip production build and extra test suites.
+Use `adding-a-feature` for functional parity and `frontend-design` for a user-facing screen. Keep feature guidance here; do not rewrite `README.md` or `DESIGN.md`. After all edits, run one typecheck, one doctor check, and one browser smoke of the primary workflow and its authenticated landing. Skip production build and extra test suites.
 
 Before building common workspace or agent UI, read `agent-native-toolkit`; for supported customization, read `customizing-agent-native`.