@agent-native/core 0.90.2 → 0.90.4

package/corpus/core/docs/content/toolkit-settings.mdx

@@ -0,0 +1,65 @@
+---
+title: "Settings Kit"
+description: "A standard settings-page contract for app, agent, provider, team, and language settings."
+---
+
+# Settings Kit
+
+The Settings Kit gives every app one predictable settings surface. Users should
+not have to wonder whether model keys live in an app settings page, a giant
+agent sidebar panel, or a provider-specific setup card. The app route owns the
+page; framework tabs can be mounted inside it.
+
+<WireframeBlock id="doc-block-toolkit-settings">
+  <Screen
+    surface="desktop"
+    html={
+      "<div style='min-height:540px;box-sizing:border-box;padding:28px;display:grid;grid-template-columns:220px 1fr;gap:18px'><aside class='wf-card' style='display:flex;flex-direction:column;gap:10px'><strong>Settings</strong><div class='wf-pill'>General</div><div class='wf-pill'>AI and models</div><div class='wf-pill'>Connections</div><div class='wf-pill'>Team</div><div class='wf-pill'>Developer</div></aside><main class='wf-card' style='display:flex;flex-direction:column;gap:14px'><h2 style='margin:0'>AI and models</h2><div class='wf-box'>Default model: GPT-5</div><div class='wf-box'>LLM keys: OpenAI configured, Anthropic missing</div><div class='wf-box'>Provider readiness: Builder connected</div><div style='display:flex;gap:10px'><button>Open agent settings</button><button class='primary'>Save changes</button></div></main></div>"
+    }
+  />
+</WireframeBlock>
+
+## Pieces {#pieces}
+
+| Piece                    | Purpose                                                                               |
+| ------------------------ | ------------------------------------------------------------------------------------- |
+| `<SettingsTabsPage>`     | Standard tabbed settings route surface.                                               |
+| `useAgentSettingsTabs()` | Framework-provided agent, model, key, automation, and voice tabs that apps can mount. |
+| `<LanguagePicker>`       | Standard language selector for app settings.                                          |
+| `openAgentSettings()`    | Compatibility escape hatch for opening the sidebar settings tab when needed.          |
+| Hash deep links          | Stable links such as `/settings#secrets:OPENAI_API_KEY` and `/settings#connections`.  |
+
+## Page Contract {#page-contract}
+
+Every app should expose `/settings`. App-specific tabs can sit beside framework
+tabs; framework tabs should not be hidden in a second settings universe.
+
+```tsx
+import {
+  LanguagePicker,
+  SettingsTabsPage,
+  useAgentSettingsTabs,
+} from "@agent-native/core/client";
+
+export default function SettingsRoute() {
+  const agentSettingsTabs = useAgentSettingsTabs();
+  return (
+    <SettingsTabsPage
+      extraTabs={agentSettingsTabs}
+      general={<LanguagePicker label="Interface language" />}
+    />
+  );
+}
+```
+
+## UX Standard {#ux-standard}
+
+- Keep model keys, OAuth connections, Builder connect, language, team, and app
+  preferences in one route.
+- Link to tabs by hash so setup prompts can send users to the exact missing
+  credential.
+- Use the agent sidebar settings only as a compact access point, not as the
+  primary home for every setting.
+
+Related docs: [Internationalization](/docs/internationalization),
+[Onboarding](/docs/onboarding), [Workspace Connections](/docs/workspace-connections).

package/corpus/core/docs/content/toolkit-setup-connections.mdx

@@ -0,0 +1,109 @@
+---
+title: "Setup & Connections Kit"
+description: "Onboarding, secrets, workspace connections, OAuth/provider readiness, and Builder connect."
+---
+
+# Setup & Connections Kit
+
+The Setup & Connections Kit turns missing credentials into a guided product
+flow. It covers onboarding steps, encrypted secrets, workspace-scoped
+connections, OAuth/provider readiness, and Builder connect so apps can explain
+what is missing and link users to the exact fix.
+
+<WireframeBlock id="doc-block-toolkit-setup-connections">
+  <Screen
+    surface="desktop"
+    html={
+      "<div style='min-height:540px;box-sizing:border-box;padding:28px;display:grid;grid-template-columns:1fr 330px;gap:18px'><main class='wf-card' style='display:flex;flex-direction:column;gap:14px'><h2 style='margin:0'>Setup checklist</h2><div class='wf-box'>1. Connect Builder - complete</div><div class='wf-box'>2. Add OpenAI key - needs attention</div><div class='wf-box'>3. Connect Slack workspace - optional</div><div class='wf-box'>4. Enable GitHub OAuth - ready</div></main><aside class='wf-card' style='display:flex;flex-direction:column;gap:12px'><strong>Provider readiness</strong><div class='wf-box'>Builder: connected</div><div class='wf-box'>LLM: missing key</div><div class='wf-box'>GitHub: OAuth ready</div><button class='primary'>Open Settings</button></aside></div>"
+    }
+  />
+</WireframeBlock>
+
+## Pieces {#pieces}
+
+| Piece                 | Purpose                                                                 |
+| --------------------- | ----------------------------------------------------------------------- |
+| Onboarding registry   | Declares setup steps and completion checks.                             |
+| Secrets UI            | Writes encrypted user, org, or workspace secrets.                       |
+| Workspace connections | Shared provider connections with scoped grants.                         |
+| OAuth flows           | Provider authorization, callback handling, and token storage.           |
+| Provider readiness    | App-visible status for missing keys, expired auth, or incomplete setup. |
+| Builder connect       | First-party Builder identity and managed gateway setup.                 |
+
+## API {#api}
+
+Use the integrated core kit for the server-side registry/store and the client
+page/components for the standard settings surface.
+
+```tsx
+import {
+  ProviderReadinessBadge,
+  SetupConnectionsPage,
+} from "@agent-native/core/client/setup-connections";
+
+export function SettingsConnectionsTab() {
+  return (
+    <SetupConnectionsPage
+      providerReadiness={
+        <div className="flex items-center gap-2">
+          <span>GitHub</span>
+          <ProviderReadinessBadge status="ready" />
+        </div>
+      }
+    />
+  );
+}
+```
+
+Register setup steps close to the feature that needs them. Link users to the
+standard settings tab instead of building bespoke credential forms.
+
+```ts
+import { registerOnboardingStep } from "@agent-native/core/onboarding";
+
+registerOnboardingStep({
+  id: "openai-key",
+  title: "Add an OpenAI key",
+  description: "Store an OpenAI key so the agent can use OpenAI models.",
+  order: 10,
+  required: true,
+  methods: [
+    {
+      id: "settings",
+      kind: "link",
+      label: "Open settings",
+      primary: true,
+      payload: { url: "/settings#secrets" },
+    },
+  ],
+  isComplete: async () => hasOpenAIKey(),
+});
+```
+
+Workspace/provider setup can use the kit helper:
+
+```ts
+import { registerWorkspaceConnectionOnboardingStep } from "@agent-native/core/setup-connections";
+
+registerWorkspaceConnectionOnboardingStep({
+  providerId: "github",
+  providerLabel: "GitHub",
+  required: true,
+  isComplete: async () => hasGitHubWorkspaceConnection(),
+});
+```
+
+For app settings, compose `SettingsTabsPage` with `SetupConnectionsPage` and the
+standard Settings Kit tabs so keys, connections, Builder connect, and team
+settings live in one predictable place.
+
+## UX Standard {#ux-standard}
+
+- Errors explain the missing connection and offer the direct settings link.
+- Secrets are never stored in app tables or pasted into docs/examples.
+- App setup pages and settings tabs use the same readiness source.
+- Builder connect is offered as a first-class path, not buried as an env-var
+  fallback.
+
+Related docs: [Onboarding](/docs/onboarding),
+[Workspace Connections](/docs/workspace-connections), [Security](/docs/security).

package/corpus/core/docs/content/toolkit-sharing-ui.mdx

@@ -5,8 +5,20 @@ description: "Reusable sharing display components with core-owned sharing runtim
 
 # Toolkit Sharing UI
 
-`@agent-native/toolkit/sharing` contains sharing UI that does not perform access
-checks or mutations. Today it exports `VisibilityBadge`:
+`@agent-native/toolkit/sharing` contains presentational sharing UI for badges,
+share rows, role pickers, and base dialogs. It does not perform access checks or
+mutations; core and app wrappers inject data and callbacks.
+
+<WireframeBlock id="doc-block-toolkit-sharing-ui">
+  <Screen
+    surface="desktop"
+    html={
+      "<div style='min-height:480px;box-sizing:border-box;padding:28px;display:grid;grid-template-columns:1fr 300px;gap:16px'><main class='wf-card' style='display:flex;flex-direction:column;gap:12px'><div style='display:flex;align-items:center;gap:10px'><h2 style='margin:0'>Resource header</h2><span class='wf-pill'>Org visible</span><div style='flex:1'></div><button>Share</button></div><div class='wf-box' style='height:120px'>Share list row</div><div class='wf-box' style='height:180px'>Shared resource preview</div></main><aside class='wf-card' style='display:flex;flex-direction:column;gap:10px'><strong>Presentational pieces</strong><div class='wf-box'>VisibilityBadge</div><div class='wf-box'>Grant row</div><div class='wf-box'>Role selector</div><div class='wf-box'>Policy hint</div></aside></div>"
+    }
+  />
+</WireframeBlock>
+
+The most common low-level import is:
 
 ```tsx
 import { VisibilityBadge } from "@agent-native/toolkit/sharing";
@@ -14,7 +26,8 @@ import { VisibilityBadge } from "@agent-native/toolkit/sharing";
 
 Core still owns the sharing runtime: share tables, resource registration, access
 filters, visibility changes, invites, roles, and private access tokens for
-agent-readable public surfaces.
+agent-readable public surfaces. See the [Sharing Kit](/docs/toolkit-sharing) for
+the full behaviorful contract.
 
 Use core wrappers when a component needs to call sharing actions:
 
@@ -22,9 +35,8 @@ Use core wrappers when a component needs to call sharing actions:
 import { ShareButton, ShareDialog } from "@agent-native/core/client";
 ```
 
-Those imports remain compatible. As more sharing UI is split into presentational
-base components, core wrappers should keep doing the runtime work and pass data
-and callbacks into Toolkit-owned UI.
+Those imports remain compatible. Core wrappers keep doing the runtime work and
+pass data and callbacks into Toolkit-owned UI.
 
 ## Boundary {#boundary}
 

package/corpus/core/docs/content/toolkit-sharing.mdx

@@ -0,0 +1,81 @@
+---
+title: "Sharing Kit"
+description: "Ownable resources, share dialogs, visibility badges, and standard share actions for agent-native apps."
+---
+
+# Sharing Kit
+
+The Sharing Kit makes user-authored resources private by default, then gives
+users and agents the same controlled ways to share them: specific people, the
+active organization, public links when allowed, and agent-readable resource
+links.
+
+<WireframeBlock id="doc-block-toolkit-sharing">
+  <Screen
+    surface="desktop"
+    html={
+      "<div style='min-height:540px;box-sizing:border-box;padding:28px;display:grid;grid-template-columns:1fr 320px;gap:18px'><main class='wf-card' style='display:flex;flex-direction:column;gap:14px'><div style='display:flex;align-items:center;gap:10px'><h2 style='margin:0'>Q3 Forecast</h2><span class='wf-pill'>Org visible</span><div style='flex:1'></div><button>Share</button></div><div class='wf-box' style='height:92px'>Dashboard preview</div><div class='wf-box' style='height:260px'>Resource content</div></main><aside class='wf-card' style='display:flex;flex-direction:column;gap:12px'><strong>Share resource</strong><div class='wf-box'>Visibility: Organization</div><div class='wf-box'>Invite teammate@example.com</div><div class='wf-box'>Role: Editor</div><button class='primary'>Send invite</button><div class='wf-box'>Public link disabled by policy</div></aside></div>"
+    }
+  />
+</WireframeBlock>
+
+## Pieces {#pieces}
+
+| Piece                             | Purpose                                                                                |
+| --------------------------------- | -------------------------------------------------------------------------------------- |
+| `ownableColumns()`                | Adds owner, organization, visibility, and timestamps to the resource table.            |
+| `createSharesTable()`             | Creates the per-resource grants table.                                                 |
+| `registerShareableResource()`     | Registers the resource type so framework share actions know how to read and mutate it. |
+| `<ShareButton>` / `<ShareDialog>` | Renders the standard share control and calls the share actions.                        |
+| `<VisibilityBadge>`               | Shows private, shared, org, or public state in lists and headers.                      |
+| `share-resource`                  | Grants a user or organization role.                                                    |
+| `unshare-resource`                | Removes a grant.                                                                       |
+| `list-resource-shares`            | Reads current visibility, grants, and policy.                                          |
+| `set-resource-visibility`         | Changes private, org, or public visibility when policy allows it.                      |
+
+## API {#api}
+
+Make every shareable table ownable, register it at server startup, and guard
+reads and writes with the same access helpers the UI and agent actions use.
+
+```ts
+import { ownableColumns, createSharesTable } from "@agent-native/core/sharing";
+import { registerShareableResource } from "@agent-native/core/sharing";
+
+export const dashboards = table("dashboards", {
+  id: text("id").primaryKey(),
+  title: text("title").notNull(),
+  ...ownableColumns(),
+});
+
+export const dashboardShares = createSharesTable(
+  "dashboard_shares",
+  dashboards,
+);
+
+registerShareableResource({
+  type: "dashboard",
+  displayName: "Dashboard",
+  table: dashboards,
+  sharesTable: dashboardShares,
+});
+```
+
+Render the standard controls where users decide access:
+
+```tsx
+import { ShareButton, VisibilityBadge } from "@agent-native/core/client";
+
+<VisibilityBadge visibility={dashboard.visibility} />
+<ShareButton resourceType="dashboard" resourceId={dashboard.id} />
+```
+
+## UX Standard {#ux-standard}
+
+- Every resource header should show a visibility badge and a share button.
+- Lists should make private vs shared state scannable.
+- Public access must be an explicit policy choice, not an accidental URL leak.
+- Agents use the same share actions as the UI and cannot bypass resource policy.
+
+Related docs: [Sharing & Privacy](/docs/sharing), [Security](/docs/security),
+[Audit Log](/docs/audit-log).

package/corpus/core/docs/content/toolkit-shell-hooks.mdx

@@ -7,6 +7,15 @@ description: "Shared shell helpers and hooks that templates can compose through
 
 Toolkit includes small shell helpers and hooks that are useful across apps:
 
+<WireframeBlock id="doc-block-toolkit-shell-hooks">
+  <Screen
+    surface="desktop"
+    html={
+      "<div style='min-height:480px;box-sizing:border-box;padding:28px;display:grid;grid-template-columns:230px 1fr;gap:16px'><aside class='wf-card' style='display:flex;flex-direction:column;gap:10px'><strong>Shell</strong><div class='wf-pill'>Header actions</div><div class='wf-pill'>Mobile state</div><div class='wf-pill'>Toasts</div></aside><main class='wf-card' style='display:flex;flex-direction:column;gap:14px'><div style='display:flex;align-items:center;gap:10px'><h2 style='margin:0'>Page title</h2><div style='flex:1'></div><button>Export</button><button class='primary'>Create</button></div><div class='wf-box' style='height:250px'>App content using shared shell hooks</div><div class='wf-box'>Toast: Saved changes</div></main></div>"
+    }
+  />
+</WireframeBlock>
+
 ```tsx
 import { useSetHeaderActions } from "@agent-native/toolkit/app-shell";
 import { useIsMobile } from "@agent-native/toolkit/hooks/use-mobile";

package/corpus/core/docs/content/toolkit-ui.mdx

@@ -8,6 +8,15 @@ description: "How to use @agent-native/toolkit UI primitives without locking app
 Toolkit UI primitives live under `@agent-native/toolkit/ui/*`. They are the
 shared shadcn-style building blocks used by templates and reusable kits.
 
+<WireframeBlock id="doc-block-toolkit-ui-primitives">
+  <Screen
+    surface="desktop"
+    html={
+      "<div style='min-height:480px;box-sizing:border-box;padding:28px;display:grid;grid-template-columns:220px 1fr;gap:16px'><aside class='wf-card' style='display:flex;flex-direction:column;gap:10px'><strong>Primitives</strong><div class='wf-pill'>Button</div><div class='wf-pill'>Dialog</div><div class='wf-pill'>Popover</div><div class='wf-pill'>Tooltip</div></aside><main class='wf-card' style='display:flex;flex-direction:column;gap:14px'><h2 style='margin:0'>Reusable kit surface</h2><div style='display:flex;gap:10px'><button>Cancel</button><button class='primary'>Save</button></div><div class='wf-box' style='height:96px'>Dialog content</div><div class='wf-box' style='height:150px'>Popover or menu content</div></main></div>"
+    }
+  />
+</WireframeBlock>
+
 Reusable package code can import them directly:
 
 ```tsx

package/corpus/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.90.2",
+  "version": "0.90.4",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -87,6 +87,7 @@
     "./client/route-state": "./dist/client/route-state.js",
     "./client/observability": "./dist/client/observability/index.js",
     "./client/onboarding": "./dist/client/onboarding/index.js",
+    "./client/setup-connections": "./dist/client/setup-connections/index.js",
     "./client/i18n": "./dist/client/i18n.js",
     "./client/settings/useBuilderStatus": "./dist/client/settings/useBuilderStatus.js",
     "./embedding": "./dist/embedding/index.js",
@@ -124,9 +125,39 @@
     "./secrets": "./dist/secrets/index.js",
     "./secrets/crypto": "./dist/secrets/crypto.js",
     "./org": "./dist/org/index.js",
+    "./org-team": "./dist/org-team/index.js",
     "./client/org": "./dist/client/org/index.js",
+    "./client/org-team": "./dist/client/org-team/index.js",
+    "./navigation": "./dist/navigation/index.js",
+    "./command-navigation": "./dist/command-navigation/index.js",
+    "./client/command-navigation": "./dist/client/command-navigation/index.js",
+    "./setup-connections": "./dist/setup-connections/index.js",
     "./client/db-admin": "./dist/client/db-admin/index.js",
     "./audit": "./dist/audit/index.js",
+    "./history": "./dist/history/index.js",
+    "./history/actions/create-resource-version": "./dist/history/actions/create-resource-version.js",
+    "./history/actions/list-resource-versions": "./dist/history/actions/list-resource-versions.js",
+    "./history/actions/get-resource-version": "./dist/history/actions/get-resource-version.js",
+    "./history/actions/restore-resource-version": "./dist/history/actions/restore-resource-version.js",
+    "./history/actions/list-resource-history": "./dist/history/actions/list-resource-history.js",
+    "./review": "./dist/review/index.js",
+    "./comments-review": "./dist/comments-review/index.js",
+    "./review/actions/list-review-comments": "./dist/review/actions/list-review-comments.js",
+    "./review/actions/create-review-comment": "./dist/review/actions/create-review-comment.js",
+    "./review/actions/reply-review-comment": "./dist/review/actions/reply-review-comment.js",
+    "./review/actions/resolve-review-thread": "./dist/review/actions/resolve-review-thread.js",
+    "./review/actions/delete-review-comment": "./dist/review/actions/delete-review-comment.js",
+    "./review/actions/consume-review-feedback": "./dist/review/actions/consume-review-feedback.js",
+    "./review/actions/get-review-feedback": "./dist/review/actions/get-review-feedback.js",
+    "./review/actions/set-review-status": "./dist/review/actions/set-review-status.js",
+    "./comments-review/actions/list-review-comments": "./dist/review/actions/list-review-comments.js",
+    "./comments-review/actions/create-review-comment": "./dist/review/actions/create-review-comment.js",
+    "./comments-review/actions/reply-review-comment": "./dist/review/actions/reply-review-comment.js",
+    "./comments-review/actions/resolve-review-thread": "./dist/review/actions/resolve-review-thread.js",
+    "./comments-review/actions/delete-review-comment": "./dist/review/actions/delete-review-comment.js",
+    "./comments-review/actions/consume-review-feedback": "./dist/review/actions/consume-review-feedback.js",
+    "./comments-review/actions/get-review-feedback": "./dist/review/actions/get-review-feedback.js",
+    "./comments-review/actions/set-review-status": "./dist/review/actions/set-review-status.js",
     "./sharing": "./dist/sharing/index.js",
     "./sharing/actions/share-resource": "./dist/sharing/actions/share-resource.js",
     "./sharing/actions/unshare-resource": "./dist/sharing/actions/unshare-resource.js",
@@ -134,6 +165,9 @@
     "./sharing/actions/set-resource-visibility": "./dist/sharing/actions/set-resource-visibility.js",
     "./sharing/actions/create-agent-resource-link": "./dist/sharing/actions/create-agent-resource-link.js",
     "./client/sharing": "./dist/client/sharing/index.js",
+    "./client/history": "./dist/client/history/index.js",
+    "./client/review": "./dist/client/review/index.js",
+    "./client/comments-review": "./dist/client/comments-review/index.js",
     "./client/extensions": "./dist/client/extensions/index.js",
     "./client/tools": "./dist/client/extensions/index.js",
     "./client/transcription/use-live-transcription": "./dist/client/transcription/use-live-transcription.js",

package/corpus/core/src/agent/engine/ai-sdk-engine.ts

@@ -12,7 +12,11 @@
  * so the core package remains installable without the AI SDK.
  */
 
-import { readDeployCredentialEnv } from "../../server/credential-provider.js";
+import {
+  clearProviderCredentialAuthFailure,
+  readDeployCredentialEnv,
+  recordProviderCredentialAuthFailure,
+} from "../../server/credential-provider.js";
 import { normalizeReasoningEffortForModel } from "../../shared/reasoning-effort.js";
 import { AI_SDK_MODEL_CONFIG, type AISDKProvider } from "../model-config.js";
 import { resolveMaxOutputTokensForEngine } from "./output-tokens.js";
@@ -354,6 +358,10 @@ class AISDKEngine implements AgentEngine {
       }
 
       yield { type: "assistant-content", parts: assistantContent };
+      await clearProviderCredentialAuthFailure({
+        key: PROVIDER_ENV_VARS[this.provider][0],
+        value: this.apiKey,
+      });
       yield bufferedStop ?? { type: "stop", reason: "end_turn" };
     } catch (err: any) {
       // Surface structured fields from AI SDK's APICallError so
@@ -363,10 +371,20 @@ class AISDKEngine implements AgentEngine {
         typeof err?.statusCode === "number" ? err.statusCode : undefined;
       const providerRetryable: boolean | undefined =
         typeof err?.isRetryable === "boolean" ? err.isRetryable : undefined;
+      if (statusCode === 401) {
+        await recordProviderCredentialAuthFailure({
+          key: PROVIDER_ENV_VARS[this.provider][0],
+          value: this.apiKey,
+          status: statusCode,
+          code: "http_401",
+          message: err?.message ?? String(err),
+        });
+      }
       yield {
         type: "stop",
         reason: "error",
         error: err?.message ?? String(err),
+        ...(statusCode === 401 ? { errorCode: "http_401" } : {}),
         ...(statusCode !== undefined ? { statusCode } : {}),
         ...(providerRetryable !== undefined ? { providerRetryable } : {}),
       };

package/corpus/core/src/agent/engine/anthropic-engine.ts

@@ -8,7 +8,11 @@
  * All providerOptions.anthropic fields are forwarded directly to the SDK.
  */
 
-import { readDeployCredentialEnv } from "../../server/credential-provider.js";
+import {
+  clearProviderCredentialAuthFailure,
+  readDeployCredentialEnv,
+  recordProviderCredentialAuthFailure,
+} from "../../server/credential-provider.js";
 import { normalizeReasoningEffortForModel } from "../../shared/reasoning-effort.js";
 import { ANTHROPIC_MODEL_CONFIG } from "../model-config.js";
 import {
@@ -187,6 +191,10 @@ class AnthropicEngine implements AgentEngine {
       }
 
       yield { type: "assistant-content", parts: assistantContent };
+      await clearProviderCredentialAuthFailure({
+        key: "ANTHROPIC_API_KEY",
+        value: this.apiKey,
+      });
 
       // Emit stop reason
       const stopReason = finalMessage.stop_reason ?? "end_turn";
@@ -200,10 +208,26 @@ class AnthropicEngine implements AgentEngine {
               : "end_turn",
       };
     } catch (err: any) {
+      const statusCode: number | undefined =
+        typeof err?.status === "number"
+          ? err.status
+          : typeof err?.statusCode === "number"
+            ? err.statusCode
+            : undefined;
+      if (statusCode === 401) {
+        await recordProviderCredentialAuthFailure({
+          key: "ANTHROPIC_API_KEY",
+          value: this.apiKey,
+          status: statusCode,
+          code: "http_401",
+          message: err?.message ?? String(err),
+        });
+      }
       yield {
         type: "stop",
         reason: "error",
         error: err?.message ?? String(err),
+        ...(statusCode === 401 ? { errorCode: "http_401", statusCode } : {}),
       };
       throw err;
     }

package/corpus/core/src/agent/engine/index.ts

@@ -25,6 +25,7 @@ export {
   getStoredModelForEngine,
   normalizeModelForEngine,
   detectEngineFromEnv,
+  detectEngineFromEnvForRequest,
   detectEngineFromUserSecrets,
   isAgentEngineSettingConfigured,
   isAgentEnginePackageInstalled,