@agent-native/core 0.228.2 → 0.229.0-nightly-20261113212325

package/dist/client/auth/builder-signup.d.ts

@@ -13,6 +13,6 @@ export declare function getBuilderSignupAssignment(): Promise<BuilderSignupAssig
 export declare function acceptBuilderSignupAssignment(assignmentId: string, attemptId: string, method: "password" | "magic-link" | "google", email?: string): Promise<void>;
 export declare function getBuilderSignupActivationStatus(): Promise<"eligible" | "disabled">;
 /** Starts only a consented, server-verified assignment; otherwise does nothing. */
-export declare function startBuilderSignupActivation(): Promise<"eligible" | "disabled">;
+export declare function startBuilderSignupActivation(): Promise<"eligible" | "connected" | "disabled">;
 export declare function activateBuilderSignupAssignment(): Promise<"connected" | "fallback" | "disabled">;
 export declare function hasPendingBuilderSignupAssignment(): boolean;

package/dist/client/auth/builder-signup.js

@@ -63,7 +63,10 @@ export async function getBuilderSignupActivationStatus() {
 }
 /** Starts only a consented, server-verified assignment; otherwise does nothing. */
 export async function startBuilderSignupActivation() {
-    return activationEligibility(await request({ operation: "start" }), "start");
+    const result = await request({ operation: "start" });
+    if (result.status === "connected")
+        return "connected";
+    return activationEligibility(result, "start");
 }
 export async function activateBuilderSignupAssignment() {
     const deadline = Date.now() + 30000;

package/dist/framework-package-versions.json

@@ -1,17 +1,17 @@
 {
-  "@agent-native/agentkit": "0.228.2",
+  "@agent-native/agentkit": "0.229.0-nightly-20261113212325",
   "@agent-native/code-agents-ui": "0.1.75",
-  "@agent-native/core": "0.228.2",
-  "@agent-native/core-corpus": "0.228.2",
+  "@agent-native/core": "0.229.0-nightly-20261113212325",
+  "@agent-native/core-corpus": "0.229.0-nightly-20261113212325",
   "@agent-native/creative-context": "0.8.72",
-  "@agent-native/dispatch": "0.42.7",
+  "@agent-native/dispatch": "0.42.8-nightly-20261113212325",
   "@agent-native/embedding": "0.2.0",
   "@agent-native/migrate": "0.0.7",
   "@agent-native/otel": "0.1.39",
   "@agent-native/pinpoint": "0.1.115",
   "@agent-native/recap-cli": "0.5.103",
-  "@agent-native/scheduling": "0.2.59",
+  "@agent-native/scheduling": "0.2.60-nightly-20261113212325",
   "@agent-native/shared-app-config": "0.1.2",
-  "@agent-native/skills": "0.4.7",
-  "@agent-native/toolkit": "0.228.2"
+  "@agent-native/skills": "0.4.8-nightly-20261113212325",
+  "@agent-native/toolkit": "0.229.0-nightly-20261113212325"
 }

package/dist/identity/rekey.d.ts

@@ -85,6 +85,7 @@ export declare function resolveIdentityColumns(rows: readonly Record<string, unk
  */
 export declare function sessionUserColumn(sessionColumns: ReadonlySet<string>): "user_id" | "userId" | null;
 export declare function assertIdentityColumnRows(rows: readonly Record<string, unknown>[]): IdentityColumn[];
+export declare const IDENTITY_SCHEMA_COLUMNS_QUERY: import("../db/sql.js").SqlFragment;
 export declare function assertIdentityColumnsRegistered(db: IdentityRekeyDb): Promise<IdentityColumn[]>;
 export interface IdentityRekeyResult {
     counts: Record<string, number>;

package/dist/identity/rekey.js

@@ -1,6 +1,7 @@
 import { randomUUID } from "node:crypto";
 import { jwtVerify } from "jose";
 import { AGENT_AUDIT_LOG_CREATE_SQL } from "../audit/store.js";
+import { sql } from "../db/sql.js";
 import { decryptSecretValue, encryptSecretValue, isEncryptedSecretValue, } from "../secrets/crypto.js";
 import { createTtlCache } from "../shared/ttl-cache.js";
 import { IDENTITY_RETIRED_EMAILS_CREATE_SQL, identityCredentialLockKey, } from "./retired-emails.js";
@@ -397,10 +398,13 @@ export function sessionUserColumn(sessionColumns) {
 export function assertIdentityColumnRows(rows) {
     return resolveIdentityColumns(rows);
 }
+export const IDENTITY_SCHEMA_COLUMNS_QUERY = sql `
+  SELECT table_name, column_name FROM information_schema.columns
+  WHERE table_schema = 'public'
+  ORDER BY table_name, column_name
+`;
 export async function assertIdentityColumnsRegistered(db) {
-    const rows = await db.unsafe(`SELECT table_name, column_name FROM information_schema.columns
-     WHERE table_schema = 'public'
-     ORDER BY table_name, column_name`);
+    const rows = await db.unsafe(IDENTITY_SCHEMA_COLUMNS_QUERY.sql);
     return resolveIdentityColumns(rows);
 }
 const quote = (value) => {

package/dist/mcp/server.js

@@ -222,7 +222,7 @@ async function handleMcpRequestInternal(event, config, routePath, approvalRoute,
     const ownerEmailHeader = getRequestHeader(event, "x-agent-native-owner-email");
     const requestMeta = deriveRequestMeta(event);
     const requestOrigin = getRequestHeader(event, "origin");
-    const directLocalRequest = isDirectLoopbackRequest(event) &&
+    const directLocalRequest = isDirectLoopbackRequest(event, { behindDevProxy: true }) &&
         (requestOrigin === undefined || requestOrigin === requestMeta.origin);
     const localOwnerHint = directLocalRequest ? ownerEmailHeader : undefined;
     const hasLocalOwnerHint = Boolean(localOwnerHint?.trim());

package/dist/org/index.d.ts

@@ -1,3 +1,4 @@
+import type { DbExec } from "../db/client.js";
 export type { OrgRole, OrgContext, OrgSummary, OrgInvitationSummary, OrgPendingRemoval, OrgInfo, OrgMember, OrgPendingInvitation, RequiredAuthProvider, WorkspaceAppDefaultVisibility, } from "./types.js";
 export { SIGN_IN_METHOD_ENV_VARS, type OrgSignInMethods, type SocialSignInMethod, } from "./sign-in-methods.js";
 export { canInviteOrgMembers, canManageOrg, canManageOrgA2ASecret, canManageOrgDomain, orgRoleAtLeast, orgRoleRank, } from "./permissions.js";
@@ -23,6 +24,8 @@ export { offboardMember } from "../identity/offboard.js";
 export type { OffboardMemberOptions, OffboardMemberResult, } from "../identity/offboard.js";
 export { registerIdentityColumns } from "../identity/rekey.js";
 export type { AppIdentityColumn, IdentityEmailChange, IdentityOffboard, IdentityOrgScope, } from "../identity/rekey.js";
+/** Validate a migrated app database after its identity policies are registered. */
+export declare function assertIdentityColumnsRegistered(db: DbExec): Promise<void>;
 export { checkWorkspaceAppAccess, claimWorkspaceAppForOrganization, isStandaloneDispatchRuntime, isWorkspaceAppAccessAllowed, isWorkspaceAppAccessUnavailable, type WorkspaceAppAccessCheck, type WorkspaceAppAccessOutcome, type WorkspaceAppAccessUnavailable, } from "./workspace-app-access.js";
 export { defineAppRoles, getRegisteredAppRoles, listRegisteredAppRoles, listAppMemberRoles, resolveAppRole, setAppMemberRole, setAppMemberRoles, applyInvitationAppRoles, getAppPermissionOverrides, setAppPermissionRoles, resolveAppAuthorizationContext, } from "./app-roles.js";
 export type { AppRoles, AppRolesDescriptor, AppRoleCaller, AppPermissionPolicy, AppRoleLookup, AppMemberRoleRow, AppAuthorizationContext, } from "./app-roles.js";

package/dist/org/index.js

@@ -1,3 +1,4 @@
+import { assertIdentityColumnRows, IDENTITY_SCHEMA_COLUMNS_QUERY, } from "../identity/rekey.js";
 function lazyFunction(load, name) {
     return ((...args) => load().then((module) => {
         const implementation = module[name];
@@ -33,6 +34,12 @@ export { invalidateMemberOrgCaches } from "./request-org-cache.js";
 export { isMissingOrganizationTableError } from "./membership.js";
 export { offboardMember } from "../identity/offboard.js";
 export { registerIdentityColumns } from "../identity/rekey.js";
+/** Validate a migrated app database after its identity policies are registered. */
+export async function assertIdentityColumnsRegistered(db) {
+    // raw-sql-ok: this imported fragment contains only the fixed schema query shared with rekey.
+    const { rows } = await db.execute(IDENTITY_SCHEMA_COLUMNS_QUERY);
+    assertIdentityColumnRows(rows);
+}
 export { checkWorkspaceAppAccess, claimWorkspaceAppForOrganization, isStandaloneDispatchRuntime, isWorkspaceAppAccessAllowed, isWorkspaceAppAccessUnavailable, } from "./workspace-app-access.js";
 export { defineAppRoles, getRegisteredAppRoles, listRegisteredAppRoles, listAppMemberRoles, resolveAppRole, setAppMemberRole, setAppMemberRoles, applyInvitationAppRoles, getAppPermissionOverrides, setAppPermissionRoles, resolveAppAuthorizationContext, } from "./app-roles.js";
 export { ORG_MIGRATIONS } from "./migrations.js";

package/dist/server/better-auth-instance.d.ts

@@ -31,14 +31,16 @@ export declare function emitSignupEventForCreatedUser(user: {
     id?: string;
     email?: string;
     name?: string | null;
+    emailVerified?: boolean;
 }, context?: BetterAuthUserCreateContext | null): Promise<void>;
 export declare function hasGoogleAuthIdentity(email: string): Promise<boolean | undefined>;
-export declare function trackSignupEvent({ authProvider, origin, signupMethod, authUserId, email, name, attribution, anonymousId, sessionId, }: {
+export declare function trackSignupEvent({ authProvider, origin, signupMethod, authUserId, email, emailVerified, name, attribution, anonymousId, sessionId, }: {
     authProvider: string;
     origin: SignupOrigin;
     signupMethod?: "google" | "magic_link" | "password";
     authUserId?: string;
     email: string;
+    emailVerified?: boolean;
     name?: string | null;
     /**
      * First-touch referral attribution derived from the visitor's `an_ft`

package/dist/server/better-auth-instance.js

@@ -234,6 +234,7 @@ export async function emitSignupEventForCreatedUser(user, context) {
         signupMethod: signupMethodFromRequestUrl(context?.request?.url),
         authUserId: user.id,
         email,
+        emailVerified: user.emailVerified,
         name: user.name,
         attribution: eventAttribution,
         anonymousId: eventAnonymousId,
@@ -250,7 +251,7 @@ export async function hasGoogleAuthIdentity(email) {
     return (existing?.accounts.some((account) => account.providerId === "google") ??
         false);
 }
-export async function trackSignupEvent({ authProvider, origin, signupMethod, authUserId, email, name, attribution, anonymousId, sessionId, }) {
+export async function trackSignupEvent({ authProvider, origin, signupMethod, authUserId, email, emailVerified, name, attribution, anonymousId, sessionId, }) {
     identify(email, {
         email,
         name: name ?? undefined,
@@ -264,6 +265,7 @@ export async function trackSignupEvent({ authProvider, origin, signupMethod, aut
             }
         }
     }
+    delete cleanAttribution.email_verified;
     track("signup", {
         ...resolveSignupTrackingProperties(),
         auth_provider: authProvider,
@@ -271,6 +273,9 @@ export async function trackSignupEvent({ authProvider, origin, signupMethod, aut
         ...(signupMethod ? { signup_method: signupMethod } : {}),
         ...(authUserId ? { auth_user_id: authUserId } : {}),
         ...cleanAttribution,
+        ...(typeof emailVerified === "boolean"
+            ? { email_verified: emailVerified }
+            : {}),
     }, {
         userId: email,
         authUserId,
@@ -1770,10 +1775,12 @@ async function createBetterAuthInstance(config) {
                 const token = new URL(request.url).searchParams.get("token");
                 if (!token)
                     return;
-                const db = getDbExec();
                 const emailChange = await verifiedEmailChangeFromToken(token, secret, user.email);
-                if (!emailChange)
+                if (!emailChange) {
+                    track("email_verified", { ...resolveSignupTrackingProperties(), email_verified: true }, { userId: user.email, authUserId: user.id });
                     return;
+                }
+                const db = getDbExec();
                 try {
                     await executeIdentityRekey(identityRekeyDbFromExec(db), emailChange.oldEmail, emailChange.newEmail, {
                         accountAlreadyUpdated: true,

package/dist/server/builder-signup-experiment.js

@@ -11,6 +11,14 @@ import { readBodyWithSizeLimit } from "./h3-helpers.js";
 export const BUILDER_SIGNUP_EXPERIMENT = "design_builder_signup_v1";
 export const BUILDER_SIGNUP_POLICY = "builder-signup-2026-11-06";
 export const BUILDER_SIGNUP_COOKIE = "an_builder_signup";
+// The first page can probe readiness while the auth callback is provisioning.
+const SIGNUP_READINESS_REFRESH_WINDOW_MS = 60_000;
+function justConnected(record) {
+    if (record.status !== "connected" || typeof record.completedAt !== "number")
+        return false;
+    const elapsed = Date.now() - record.completedAt;
+    return elapsed >= 0 && elapsed < SIGNUP_READINESS_REFRESH_WINDOW_MS;
+}
 const TTL = 7 * 24 * 60 * 60;
 const existingSignupStatusSchema = z.enum([
     "control",
@@ -422,6 +430,8 @@ export function createBuilderSignupExperiment(dependencies) {
                     return ((await reconcile(event, session, `${experimentId()}:${session.userId}`, existing, assignment ?? null)) ?? { status: "pending" });
                 }
                 deleteCookie(event, "an_builder_signup_pending", { path: "/" });
+                if (body.data.operation === "start" && justConnected(existing))
+                    return { status: "connected" };
                 return { status: "disabled", code: "already_completed" };
             }
             return { status: "eligible" };
@@ -528,7 +538,9 @@ export function createBuilderSignupExperiment(dependencies) {
                 deleteCookie(event, "an_builder_signup_pending", { path: "/" });
                 return { status: "disabled", code: "control" };
             }
-            if (status !== "started" && body.data.operation === "start") {
+            if (status !== "started" &&
+                body.data.operation === "start" &&
+                !justConnected(existing)) {
                 deleteCookie(event, "an_builder_signup_pending", { path: "/" });
                 return { status: "disabled", code: "already_completed" };
             }

package/dist/server/google-oauth.js

@@ -624,6 +624,7 @@ export async function createOAuthSession(event, email, opts) {
                 signupMethod: "google",
                 authUserId,
                 email,
+                emailVerified: true,
                 name: opts.trackSignup.name,
                 attribution,
                 anonymousId,

package/dist/server/loopback.d.ts

@@ -1,4 +1,6 @@
 import type { H3Event } from "h3";
 export declare function isLoopbackAddress(ip: string | undefined): boolean;
 export declare function isLoopbackRequest(event: H3Event): boolean;
-export declare function isDirectLoopbackRequest(event: H3Event): boolean;
+export declare function isDirectLoopbackRequest(event: H3Event, options?: {
+    behindDevProxy?: boolean;
+}): boolean;

package/dist/server/loopback.js

@@ -16,7 +16,7 @@ export function isLoopbackRequest(event) {
     }
     return isLoopbackAddress(ip);
 }
-export function isDirectLoopbackRequest(event) {
+export function isDirectLoopbackRequest(event, options = {}) {
     const request = event.node?.req;
     const headers = request?.headers;
     const host = headers?.host;
@@ -41,8 +41,12 @@ export function isDirectLoopbackRequest(event) {
     if (!URL.canParse(originValue))
         return false;
     const origin = new URL(originValue);
+    // `agent-native dev` serves the app from a worker behind the Vite proxy, so
+    // Host carries the proxy's port and the worker's socket never matches it.
+    const hostPortIsListenPort = Number(origin.port) === socket.localPort ||
+        (options.behindDevProxy === true && process.env.NODE_ENV === "development");
     return (origin.hostname === "127.0.0.1" &&
-        Number(origin.port) === socket.localPort &&
+        hostPortIsListenPort &&
         origin.port !== "0" &&
         origin.pathname === "/" &&
         origin.search === "" &&

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.228.2",
+  "version": "0.229.0-nightly-20261113212325",
   "description": "The agentic application framework for building autonomous agents with intuitive UIs",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -771,8 +771,8 @@
     "yaml": "^2.9.0",
     "yjs": "^13.6.33",
     "zod": "^4.3.6",
-    "@agent-native/agentkit": "^0.228.2",
-    "@agent-native/recap-cli": "^0.5.103"
+    "@agent-native/recap-cli": "^0.5.103",
+    "@agent-native/agentkit": "^0.229.0-nightly-20261113212325"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",
@@ -845,7 +845,7 @@
     "xlsx": "^0.18.5"
   },
   "peerDependencies": {
-    "@agent-native/core-corpus": ">=0.196.0",
+    "@agent-native/core-corpus": "0.229.0-nightly-20261113212325",
     "@ai-sdk/anthropic": ">=3",
     "@ai-sdk/cohere": ">=3",
     "@ai-sdk/google": ">=3",