@agent-native/core 0.79.16 → 0.79.18

package/corpus/templates/mail/server/handlers/google-auth.ts

@@ -35,6 +35,7 @@ import {
   getAuthStatus,
   disconnect,
   getClient,
+  getOAuth2Credentials,
   setAccountDisplayName,
 } from "../lib/google-auth.js";
 
@@ -103,14 +104,6 @@ function googleOAuthErrorResponse(
 }
 
 export const getGoogleAuthUrl = defineEventHandler(async (event: H3Event) => {
-  if (!process.env.GOOGLE_CLIENT_ID || !process.env.GOOGLE_CLIENT_SECRET) {
-    setResponseStatus(event, 422);
-    return {
-      error: "missing_credentials",
-      message:
-        "Google OAuth credentials are not configured. Set GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET.",
-    };
-  }
   try {
     const q = getQuery(event);
     const redirectUri = resolveOAuthRedirectUri(event);
@@ -123,6 +116,7 @@ export const getGoogleAuthUrl = defineEventHandler(async (event: H3Event) => {
     }
     const session = await getSession(event);
     const owner = session?.email;
+    await getOAuth2Credentials(owner);
     const desktop =
       isElectron(event) || q.desktop === "1" || q.desktop === "true";
     const flowId = desktop ? (q.flow_id as string) || undefined : undefined;
@@ -141,12 +135,20 @@ export const getGoogleAuthUrl = defineEventHandler(async (event: H3Event) => {
       returnUrl,
       flowId,
     });
-    const url = getAuthUrl(undefined, redirectUri, state);
+    const url = await getAuthUrl(undefined, redirectUri, state, owner);
     if (q.redirect === "1") {
       return oauthRedirectResponse(url);
     }
     return { url };
   } catch (error: any) {
+    if (/GOOGLE_CLIENT_ID|GOOGLE_CLIENT_SECRET/.test(error?.message || "")) {
+      setResponseStatus(event, 422);
+      return {
+        error: "missing_credentials",
+        message:
+          "Google OAuth credentials are not configured. Save GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET in settings.",
+      };
+    }
     setResponseStatus(event, 500);
     return { error: error.message };
   }
@@ -279,12 +281,12 @@ export const getGoogleAddAccountUrl = defineEventHandler(
       setResponseStatus(event, 401);
       return { error: "Must be logged in to add an account" };
     }
-    if (!process.env.GOOGLE_CLIENT_ID || !process.env.GOOGLE_CLIENT_SECRET) {
+    if (!(await getOAuth2Credentials(session.email).catch(() => null))) {
       setResponseStatus(event, 422);
       return {
         error: "missing_credentials",
         message:
-          "Google OAuth credentials are not configured. Set GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET.",
+          "Google OAuth credentials are not configured. Save GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET in settings.",
       };
     }
     try {
@@ -308,7 +310,12 @@ export const getGoogleAddAccountUrl = defineEventHandler(
         app: OAUTH_STATE_APP_ID,
         flowId,
       });
-      const url = getAuthUrl(undefined, redirectUri, state);
+      const url = await getAuthUrl(
+        undefined,
+        redirectUri,
+        state,
+        session.email,
+      );
       if (q.redirect === "1") {
         return oauthRedirectResponse(url);
       }

package/corpus/templates/mail/server/lib/automation-engine.ts

@@ -27,6 +27,7 @@ import {
   gmailListHistory,
   gmailGetProfile,
 } from "./google-api.js";
+import { getOAuth2Credentials } from "./google-auth.js";
 
 const DEFAULT_MODEL = "claude-haiku-4-5-20251001";
 const MAX_EMAILS_PER_RUN = 50;
@@ -91,8 +92,8 @@ async function getAccessToken(accountEmail: string): Promise<string | null> {
     tokens.expiry_date < Date.now() + 5 * 60 * 1000
   ) {
     try {
-      const clientId = process.env.GOOGLE_CLIENT_ID!;
-      const clientSecret = process.env.GOOGLE_CLIENT_SECRET!;
+      const { clientId, clientSecret } =
+        await getOAuth2Credentials(accountEmail);
       const oauth = createOAuth2Client(
         clientId,
         clientSecret,

package/corpus/templates/mail/server/lib/email-state.ts

@@ -22,7 +22,7 @@ import {
   gmailTrashThread,
   gmailUntrashThread,
 } from "./google-api.js";
-import { isConnected } from "./google-auth.js";
+import { getOAuth2Credentials, isConnected } from "./google-auth.js";
 import { invalidateThreadCache } from "./thread-cache.js";
 
 // ---------------------------------------------------------------------------
@@ -45,8 +45,7 @@ async function refreshIfNeeded(
     tokens.expiry_date &&
     tokens.expiry_date < Date.now() + 5 * 60 * 1000
   ) {
-    const clientId = process.env.GOOGLE_CLIENT_ID!;
-    const clientSecret = process.env.GOOGLE_CLIENT_SECRET!;
+    const { clientId, clientSecret } = await getOAuth2Credentials(accountId);
     const oauth = createOAuth2Client(clientId, clientSecret, "");
     const refreshed = await oauth.refreshToken(tokens.refresh_token);
     const updated = {

package/corpus/templates/mail/server/lib/google-auth.ts

@@ -5,7 +5,12 @@ import {
   listOAuthAccountsByOwner,
   setOAuthDisplayName,
 } from "@agent-native/core/oauth-tokens";
-import { isOAuthConnected, getOAuthAccounts } from "@agent-native/core/server";
+import {
+  isOAuthConnected,
+  getOAuthAccounts,
+  resolveSecret,
+  runWithRequestContext,
+} from "@agent-native/core/server";
 import { getUserSetting, putUserSetting } from "@agent-native/core/settings";
 import { decodeCommonHtmlEntities } from "@shared/markdown.js";
 
@@ -46,15 +51,26 @@ interface GoogleTokens {
   scope?: string;
 }
 
-function getOAuth2Credentials(): {
+export async function getOAuth2Credentials(owner?: string): Promise<{
   clientId: string;
   clientSecret: string;
-} {
-  const clientId = process.env.GOOGLE_CLIENT_ID;
-  const clientSecret = process.env.GOOGLE_CLIENT_SECRET;
+}> {
+  const resolve = async () => {
+    const [clientId, clientSecret] = await Promise.all([
+      resolveSecret("GOOGLE_CLIENT_ID"),
+      resolveSecret("GOOGLE_CLIENT_SECRET"),
+    ]);
+    if (!clientId || !clientSecret) return null;
+    return { clientId, clientSecret };
+  };
+  const credentials = owner
+    ? await runWithRequestContext({ userEmail: owner }, resolve)
+    : await resolve();
+  const clientId = credentials?.clientId;
+  const clientSecret = credentials?.clientSecret;
   if (!clientId || !clientSecret) {
     throw new Error(
-      "GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET must be set in environment",
+      "GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET must be saved in settings",
     );
   }
   return { clientId, clientSecret };
@@ -112,7 +128,7 @@ async function getValidAccessToken(
     );
   }
 
-  const { clientId, clientSecret } = getOAuth2Credentials();
+  const { clientId, clientSecret } = await getOAuth2Credentials(owner);
   const redirectUri = "http://localhost:8080/_agent-native/google/callback";
   const oauth2 = createOAuth2Client(clientId, clientSecret, redirectUri);
   let refreshed;
@@ -157,12 +173,13 @@ async function getValidAccessToken(
   return refreshed.access_token;
 }
 
-export function getAuthUrl(
+export async function getAuthUrl(
   origin?: string,
   redirectUri?: string,
   state?: string,
-): string {
-  const { clientId, clientSecret } = getOAuth2Credentials();
+  owner?: string,
+): Promise<string> {
+  const { clientId, clientSecret } = await getOAuth2Credentials(owner);
   const uri =
     redirectUri ||
     (origin
@@ -215,7 +232,7 @@ export async function exchangeCode(
   redirectUri?: string,
   owner?: string,
 ): Promise<string> {
-  const { clientId, clientSecret } = getOAuth2Credentials();
+  const { clientId, clientSecret } = await getOAuth2Credentials(owner);
   const uri =
     redirectUri ||
     (origin

package/corpus/templates/mail/server/lib/jobs.ts

@@ -25,6 +25,7 @@ import {
   getAccountDisplayName,
   isConnected,
   gmailToEmailMessage,
+  getOAuth2Credentials,
   setAccountDisplayName,
 } from "./google-auth.js";
 import {
@@ -83,8 +84,8 @@ async function getAccessToken(accountEmail: string): Promise<string | null> {
     tokens.expiry_date < Date.now() + 5 * 60 * 1000
   ) {
     try {
-      const clientId = process.env.GOOGLE_CLIENT_ID!;
-      const clientSecret = process.env.GOOGLE_CLIENT_SECRET!;
+      const { clientId, clientSecret } =
+        await getOAuth2Credentials(accountEmail);
       const oauth = createOAuth2Client(
         clientId,
         clientSecret,

package/corpus/templates/mail/server/onboarding.ts

@@ -8,12 +8,12 @@
  *      `GoogleConnectBanner` auto-detects missing credentials and guides the
  *      user through the Google Cloud Console setup.
  *   2. Agent task — hands the task to the agent, which drives the user's
- *      browser (or falls back to verbal step-by-step instructions) and writes
- *      the resulting credentials into the workspace `.env` via
- *      `POST /_agent-native/env-vars`.
+ *      browser (or falls back to verbal step-by-step instructions) and saves
+ *      the resulting credentials as workspace-scoped DB keys.
  */
 
 import { registerOnboardingStep } from "@agent-native/core/onboarding";
+import { readDeployCredentialEnv } from "@agent-native/core/server";
 
 registerOnboardingStep({
   id: "gmail",
@@ -37,10 +37,13 @@ registerOnboardingStep({
       label: "Have the agent set it up for me",
       payload: {
         prompt:
-          'Help me connect Gmail. Walk me through creating Google OAuth credentials by driving my browser (use any mcp__*browser* tools available, or fall back to giving me step-by-step instructions with exact URLs and values). When client_id and client_secret are ready, save them to my workspace .env via POST /_agent-native/env-vars with scope "workspace". Then tell me to click "Sign in with Google" in the mail onboarding banner to finish the OAuth sign-in.',
+          "Help me connect Gmail. Walk me through creating Google OAuth credentials by driving my browser (use any mcp__*browser* tools available, or fall back to giving me step-by-step instructions with exact URLs and values). When client_id and client_secret are ready, help me configure GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET as deployment or local environment variables for Mail, then restart or redeploy before clicking Sign in with Google.",
       },
     },
   ],
-  isComplete: () =>
-    !!process.env.GOOGLE_CLIENT_ID && !!process.env.GOOGLE_CLIENT_SECRET,
+  isComplete: async () =>
+    Boolean(
+      readDeployCredentialEnv("GOOGLE_CLIENT_ID") &&
+      readDeployCredentialEnv("GOOGLE_CLIENT_SECRET"),
+    ),
 });

package/corpus/templates/mail/server/routes/api/attachments.get.ts

@@ -15,7 +15,7 @@ import {
   createOAuth2Client,
   gmailGetAttachment,
 } from "../../lib/google-api.js";
-import { isConnected } from "../../lib/google-auth.js";
+import { getOAuth2Credentials, isConnected } from "../../lib/google-auth.js";
 
 interface StoredTokens {
   access_token: string;
@@ -35,8 +35,8 @@ async function getAccessToken(accountEmail: string): Promise<string | null> {
     tokens.expiry_date < Date.now() + 5 * 60 * 1000
   ) {
     try {
-      const clientId = process.env.GOOGLE_CLIENT_ID!;
-      const clientSecret = process.env.GOOGLE_CLIENT_SECRET!;
+      const { clientId, clientSecret } =
+        await getOAuth2Credentials(accountEmail);
       const oauth = createOAuth2Client(
         clientId,
         clientSecret,

package/corpus/templates/plan/actions/request-plan-access.ts

@@ -57,7 +57,7 @@ async function notifyOwner(input: {
   requesterEmail: string;
   requesterName: string;
 }): Promise<boolean> {
-  if (!isEmailConfigured()) return false;
+  if (!(await isEmailConfigured())) return false;
   if (!input.ownerEmail || input.ownerEmail === input.requesterEmail) {
     return false;
   }

package/corpus/templates/plan/app/components/layout/Header.tsx

@@ -10,7 +10,6 @@ const pageTitleKeys: Record<string, string> = {
   "/": "header.plan",
   "/plans": "header.plan",
   "/settings": "header.settings",
-  "/team": "header.team",
 };
 
 function resolveTitle(pathname: string): string {

package/corpus/templates/plan/app/hooks/use-navigation-state.ts

@@ -132,7 +132,7 @@ function viewForPath(pathname: string): string {
     return "plans";
   }
   if (pathname.startsWith("/extensions")) return "extensions";
-  if (pathname.startsWith("/team")) return "team";
+  if (pathname.startsWith("/team")) return "settings";
   return "plans";
 }
 
@@ -183,8 +183,10 @@ function pathForView(view?: string): string {
       return "/plans";
     case "extensions":
       return "/extensions";
+    case "settings":
+      return "/settings";
     case "team":
-      return "/team";
+      return "/settings#team";
     default:
       return "/";
   }

package/corpus/templates/plan/app/lib/route-prewarm.ts

@@ -48,10 +48,6 @@ export function prewarmPlanRoutePath(path: string) {
     );
   }
 
-  if (pathname === "/team") {
-    jobs.push(prewarm("team", () => import("@/routes/team")));
-  }
-
   return Promise.all(jobs);
 }
 

package/corpus/templates/plan/app/routes/settings.tsx

@@ -1,10 +1,11 @@
 import {
   ChangelogSettingsCard,
   LanguagePicker,
+  SettingsTabsPage,
   openAgentSettings,
   useT,
 } from "@agent-native/core/client";
-import { Link } from "react-router";
+import { TeamPage } from "@agent-native/core/client/org";
 
 import { useSetPageTitle } from "@/components/layout/HeaderActions";
 import { Button } from "@/components/ui/button";
@@ -29,80 +30,81 @@ export default function SettingsRoute() {
   useSetPageTitle(t("settings.title"));
 
   return (
-    <main className="mx-auto w-full max-w-3xl space-y-6 px-4 py-6 sm:px-6 sm:py-10">
-      <div className="space-y-1">
-        <h1 className="text-2xl font-semibold tracking-tight">
-          {t("settings.title")}
-        </h1>
-        <p className="text-sm leading-6 text-muted-foreground">
-          {t("settings.description")}
-        </p>
-      </div>
+    <SettingsTabsPage
+      teamLabel={t("header.team")}
+      general={
+        <div className="mx-auto w-full max-w-3xl space-y-6">
+          <p className="text-sm leading-6 text-muted-foreground">
+            {t("settings.description")}
+          </p>
 
-      <Card>
-        <CardHeader>
-          <CardTitle className="text-base">
-            {t("settings.languageTitle")}
-          </CardTitle>
-          <CardDescription>{t("settings.languageDescription")}</CardDescription>
-        </CardHeader>
-        <CardContent className="max-w-xs space-y-1.5">
-          <Label>{t("settings.languageLabel")}</Label>
-          <LanguagePicker label={t("settings.languageLabel")} />
-        </CardContent>
-      </Card>
+          <Card>
+            <CardHeader>
+              <CardTitle className="text-base">
+                {t("settings.languageTitle")}
+              </CardTitle>
+              <CardDescription>
+                {t("settings.languageDescription")}
+              </CardDescription>
+            </CardHeader>
+            <CardContent className="max-w-xs space-y-1.5">
+              <Label>{t("settings.languageLabel")}</Label>
+              <LanguagePicker label={t("settings.languageLabel")} />
+            </CardContent>
+          </Card>
 
-      <Card>
-        <CardHeader>
-          <CardTitle className="text-base">
-            {t("settings.workspaceTitle")}
-          </CardTitle>
-          <CardDescription>
-            {t("settings.workspaceDescription")}
-          </CardDescription>
-        </CardHeader>
-        <CardContent>
-          <Button variant="outline" asChild>
-            <Link to="/team">{t("settings.openTeamSettings")}</Link>
-          </Button>
-        </CardContent>
-      </Card>
+          <Card>
+            <CardHeader>
+              <CardTitle className="text-base">
+                {t("settings.agentTitle")}
+              </CardTitle>
+              <CardDescription>
+                {t("settings.agentDescription")}
+              </CardDescription>
+            </CardHeader>
+            <CardContent>
+              <Button variant="outline" onClick={() => openAgentSettings()}>
+                {t("settings.openAgentSettings")}
+              </Button>
+            </CardContent>
+          </Card>
 
-      <Card>
-        <CardHeader>
-          <CardTitle className="text-base">
-            {t("settings.agentTitle")}
-          </CardTitle>
-          <CardDescription>{t("settings.agentDescription")}</CardDescription>
-        </CardHeader>
-        <CardContent>
-          <Button variant="outline" onClick={() => openAgentSettings()}>
-            {t("settings.openAgentSettings")}
-          </Button>
-        </CardContent>
-      </Card>
-
-      <Card>
-        <CardHeader>
-          <CardTitle className="text-base">
-            {t("settings.editorTitle")}
-          </CardTitle>
-          <CardDescription>{t("settings.editorDescription")}</CardDescription>
-        </CardHeader>
-        <CardContent>
-          <Button variant="outline" asChild>
-            <a
-              href="https://marketplace.visualstudio.com/items?itemName=Builder.agent-native"
-              target="_blank"
-              rel="noreferrer noopener"
-            >
-              {t("settings.openEditorExtension")}
-            </a>
-          </Button>
-        </CardContent>
-      </Card>
-
-      <ChangelogSettingsCard markdown={changelog} />
-    </main>
+          <Card>
+            <CardHeader>
+              <CardTitle className="text-base">
+                {t("settings.editorTitle")}
+              </CardTitle>
+              <CardDescription>
+                {t("settings.editorDescription")}
+              </CardDescription>
+            </CardHeader>
+            <CardContent>
+              <Button variant="outline" asChild>
+                <a
+                  href="https://marketplace.visualstudio.com/items?itemName=Builder.agent-native"
+                  target="_blank"
+                  rel="noreferrer noopener"
+                >
+                  {t("settings.openEditorExtension")}
+                </a>
+              </Button>
+            </CardContent>
+          </Card>
+        </div>
+      }
+      team={
+        <div className="mx-auto w-full max-w-3xl">
+          <TeamPage
+            showTitle={false}
+            createOrgDescription="Set up a team to share this app with your colleagues."
+          />
+        </div>
+      }
+      whatsNew={
+        <div className="mx-auto w-full max-w-3xl">
+          <ChangelogSettingsCard markdown={changelog} />
+        </div>
+      }
+    />
   );
 }

package/corpus/templates/plan/app/routes/team.tsx

@@ -1,6 +1,5 @@
-import { TeamPage } from "@agent-native/core/client/org";
+import { Navigate } from "react-router";
 
-import { useSetPageTitle } from "@/components/layout/HeaderActions";
 import { APP_TITLE } from "@/lib/app-config";
 
 export function meta() {
@@ -8,10 +7,5 @@ export function meta() {
 }
 
 export default function TeamRoute() {
-  useSetPageTitle("Team");
-  return (
-    <main className="mx-auto w-full max-w-3xl px-4 py-6 sm:px-6 sm:py-10">
-      <TeamPage createOrgDescription="Set up a team to share this app with your colleagues." />
-    </main>
-  );
+  return <Navigate to="/settings#team" replace />;
 }

package/corpus/templates/plan/server/lib/comment-notifications.ts

@@ -230,7 +230,7 @@ export async function notifyPlanCommentRecipients({
   insertedCommentIds,
   priorComments,
 }: CommentNotificationInput): Promise<void> {
-  if (insertedCommentIds.length === 0 || !isEmailConfigured()) return;
+  if (insertedCommentIds.length === 0 || !(await isEmailConfigured())) return;
 
   const db = getDb();
   const [planRow] = await db

package/corpus/templates/slides/actions/check-image-gen.ts

@@ -1,4 +1,5 @@
 import { defineAction } from "@agent-native/core";
+import { resolveSecret } from "@agent-native/core/server";
 import { z } from "zod";
 
 export default defineAction({
@@ -8,7 +9,7 @@ export default defineAction({
   http: { method: "GET" },
   run: async () => {
     return {
-      gemini: !!process.env.GEMINI_API_KEY,
+      gemini: !!(await resolveSecret("GEMINI_API_KEY")),
     };
   },
 });

package/corpus/templates/slides/actions/db-connect.ts

@@ -1,6 +1,3 @@
-import fs from "fs";
-import path from "path";
-
 function parseArgs(args: string[]): Record<string, string> {
   const result: Record<string, string> = {};
   for (let i = 0; i < args.length; i++) {
@@ -19,24 +16,6 @@ function parseArgs(args: string[]): Record<string, string> {
   return result;
 }
 
-function upsertEnvLine(lines: string[], key: string, value: string): string[] {
-  // Reject values with newlines, carriage returns, or null bytes
-  if (/[\r\n\0]/.test(value)) {
-    throw new Error(
-      `Invalid value for ${key}: must not contain newlines or null bytes`,
-    );
-  }
-
-  const idx = lines.findIndex((l) => l.startsWith(`${key}=`));
-  const line = `${key}=${value}`;
-  if (idx >= 0) {
-    lines[idx] = line;
-  } else {
-    lines.push(line);
-  }
-  return lines;
-}
-
 export default async function main(args: string[]) {
   const { url, token, help } = parseArgs(args);
 
@@ -44,7 +23,9 @@ export default async function main(args: string[]) {
     console.log(
       "Usage: pnpm action db-connect --url <DATABASE_URL> [--token <DATABASE_AUTH_TOKEN>]",
     );
-    console.log("\nWrites DATABASE_URL and DATABASE_AUTH_TOKEN to .env");
+    console.log(
+      "\nDATABASE_URL and DATABASE_AUTH_TOKEN are deployment-level settings.",
+    );
     return;
   }
 
@@ -53,31 +34,12 @@ export default async function main(args: string[]) {
     throw new Error("Script failed");
   }
 
-  const envPath = path.join(process.cwd(), ".env");
-  let lines: string[] = [];
-
-  if (fs.existsSync(envPath)) {
-    lines = fs.readFileSync(envPath, "utf8").split("\n");
-  }
-
-  try {
-    upsertEnvLine(lines, "DATABASE_URL", url);
-    if (token) {
-      upsertEnvLine(lines, "DATABASE_AUTH_TOKEN", token);
-    }
-  } catch (err) {
-    console.error(
-      `Error: ${err instanceof Error ? err.message : "Invalid value"}`,
-    );
-    throw new Error("Script failed");
-  }
-
-  fs.writeFileSync(envPath, lines.join("\n"));
-
-  console.log(`\nDatabase connection saved to .env`);
+  console.log(`\nDatabase connection not written locally`);
   console.log(
     `  DATABASE_URL=${url.startsWith("file:") ? url : url.replace(/\/\/.*@/, "//***@")}`,
   );
   if (token) console.log(`  DATABASE_AUTH_TOKEN=***`);
-  console.log(`\nRestart the dev server for changes to take effect.`);
+  console.log(
+    `\nConfigure these as deployment environment variables with your host, then redeploy.`,
+  );
 }

package/corpus/templates/slides/actions/edit-image.ts

@@ -6,6 +6,8 @@
  *   pnpm action edit-image --input public/generated/slide5-v3.png --prompt "Remove the background and make it transparent. Remove any logos." --output public/assets/generated/slide5-edited
  */
 
+import { resolveSecret } from "@agent-native/core/server";
+
 const config = async () => {
   try {
     const m = await import("dotenv");
@@ -49,13 +51,14 @@ export default async function main(args: string[]) {
     throw new Error("Script failed");
   }
 
-  if (!process.env.GEMINI_API_KEY) {
-    console.error("Error: GEMINI_API_KEY not set");
+  const apiKey = await resolveSecret("GEMINI_API_KEY");
+  if (!apiKey) {
+    console.error("Error: GEMINI_API_KEY not configured");
     throw new Error("Script failed");
   }
 
   const { GoogleGenAI } = await import("@google/genai");
-  const client = new GoogleGenAI({ apiKey: process.env.GEMINI_API_KEY });
+  const client = new GoogleGenAI({ apiKey });
 
   // Read the input image
   const imgBuffer = readFileSync(inputPath);

package/corpus/templates/slides/actions/generate-image-api.ts

@@ -43,7 +43,7 @@ export default defineAction({
     // Get the appropriate provider
     const { getProvider } =
       await import("../server/handlers/image-providers/index.js");
-    const provider = getProvider(args.model || "auto");
+    const provider = await getProvider(args.model || "auto");
 
     const refImages: ReferenceImage[] = [];