@agent-native/core 0.103.1 → 0.104.0

package/dist/scripts/agent-engines/list-agent-engines.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-agent-engines.d.ts","sourceRoot":"","sources":["../../../src/scripts/agent-engines/list-agent-engines.ts"],"names":[],"mappings":"AAAA;;GAEG;AAcH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAGvD,eAAO,MAAM,IAAI,EAAE,UAQlB,CAAC;AAEF,wBAAsB,GAAG,CAAC,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAmF5E"}
+{"version":3,"file":"list-agent-engines.d.ts","sourceRoot":"","sources":["../../../src/scripts/agent-engines/list-agent-engines.ts"],"names":[],"mappings":"AAAA;;GAEG;AAcH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAKvD,eAAO,MAAM,IAAI,EAAE,UAQlB,CAAC;AAEF,wBAAsB,GAAG,CAAC,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAkG5E"}

package/dist/scripts/agent-engines/list-agent-engines.js

@@ -4,6 +4,8 @@
 import { getAgentAppModelDefaultForCurrentRequest } from "../../agent/app-model-defaults.js";
 import { DEFAULT_MODEL } from "../../agent/default-model.js";
 import { listAgentEngines, registerBuiltinEngines, detectEngineFromEnv, detectEngineFromUserSecrets, getAgentEngineEntry, isAgentEnginePackageInstalled, isStoredEngineUsableForRequest, normalizeModelForEngine, } from "../../agent/engine/index.js";
+import { resolveHostedDefaultModelExperiment } from "../../observability/hosted-model-experiment.js";
+import { getRequestUserEmail } from "../../server/request-context.js";
 import { getSetting } from "../../settings/index.js";
 export const tool = {
     description: 'List all available AI agent engines (Anthropic, OpenAI, Gemini, Groq, etc.) and the currently selected engine. Use this to check what engines are available before calling manage-agent-engine with action="set".',
@@ -62,6 +64,15 @@ export async function run(args = {}) {
     const currentModel = currentEntry && !envUnavailable
         ? normalizeModelForEngine(currentEntry, currentModelCandidate ?? currentEntry.defaultModel)
         : (currentModelCandidate ?? DEFAULT_MODEL);
+    const hostedExperiment = currentEntry
+        ? resolveHostedDefaultModelExperiment({
+            userId: getRequestUserEmail(),
+            engineName: currentEntry.name,
+            isDefaultModelSelection: currentModelCandidate == null,
+            supportedModels: currentEntry.supportedModels,
+        })
+        : null;
+    const effectiveCurrentModel = hostedExperiment?.model ?? currentModel;
     const result = {
         engines: engines.map((e) => ({
             name: e.name,
@@ -78,7 +89,13 @@ export async function run(args = {}) {
             ? null
             : {
                 engine: currentEngineName,
-                model: currentModel,
+                model: effectiveCurrentModel,
+                ...(hostedExperiment
+                    ? {
+                        modelSelectionSource: "experiment",
+                        experimentAssignments: [hostedExperiment.assignment],
+                    }
+                    : {}),
             },
     };
     return JSON.stringify(result, null, 2);

package/dist/scripts/agent-engines/list-agent-engines.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-agent-engines.js","sourceRoot":"","sources":["../../../src/scripts/agent-engines/list-agent-engines.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,wCAAwC,EAAE,MAAM,mCAAmC,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,mBAAmB,EACnB,6BAA6B,EAC7B,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,CAAC,MAAM,IAAI,GAAe;IAC9B,WAAW,EACT,mNAAmN;IACrN,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE,EAAE;KACb;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAI,GAA2B,EAAE;IACzD,sBAAsB,EAAE,CAAC;IAEzB,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,cAAc,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,cAAc;QAC5B,CAAC,CAAE,cAAsD;QACzD,CAAC,CAAC,IAAI,CAAC;IAET,yEAAyE;IACzE,6EAA6E;IAC7E,4EAA4E;IAC5E,6CAA6C;IAC7C,MAAM,WAAW,GACf,OAAO,OAAO,EAAE,MAAM,KAAK,QAAQ;QACjC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,YAAY,GAChB,CAAC,CAAC,WAAW;QACb,CAAC,MAAM,8BAA8B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,MAAM,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9E,MAAM,eAAe,GACnB,OAAO,UAAU,EAAE,MAAM,KAAK,QAAQ;QACpC,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,MAAM,CAAC;QACxC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,gBAAgB,GACpB,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,eAAe;QACjB,CAAC,MAAM,8BAA8B,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,MAAM,2BAA2B,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY;QACvC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,SAAS,GACb,CAAC,CAAC,QAAQ;QACV,CAAC,MAAM,8BAA8B,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9E,MAAM,cAAc,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC;IAChD,MAAM,eAAe,GAAG,mBAAmB,EAAE,CAAC;IAC9C,MAAM,gBAAgB,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1D,MAAM,YAAY,GAAG,cAAc;QACjC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,CAAC,gBAAgB;YACjB,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACxC,gBAAgB;YAChB,eAAe;YACf,SAAS,CAAC,CAAC;IACf,MAAM,qBAAqB,GACzB,gBAAgB,IAAI,YAAY,EAAE,IAAI,KAAK,UAAU,EAAE,MAAM;QAC3D,CAAC,CAAC,UAAU,EAAE,KAAK;QACnB,CAAC,CAAC,YAAY,IAAI,YAAY,EAAE,IAAI,KAAK,OAAO,EAAE,MAAM;YACtD,CAAC,CAAC,OAAO,EAAE,KAAK;YAChB,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,iBAAiB,GAAG,YAAY,EAAE,IAAI,IAAI,WAAW,CAAC;IAC5D,MAAM,YAAY,GAChB,YAAY,IAAI,CAAC,cAAc;QAC7B,CAAC,CAAC,uBAAuB,CACrB,YAAY,EACZ,qBAAqB,IAAI,YAAY,CAAC,YAAY,CACnD;QACH,CAAC,CAAC,CAAC,qBAAqB,IAAI,aAAa,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC,CAAC;SACnD,CAAC,CAAC;QACH,OAAO,EAAE,cAAc;YACrB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC;gBACE,MAAM,EAAE,iBAAiB;gBACzB,KAAK,EAAE,YAAY;aACpB;KACN,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC","sourcesContent":["/**\n * list-agent-engines — returns the registered engine registry and current selection.\n */\n\nimport { getAgentAppModelDefaultForCurrentRequest } from \"../../agent/app-model-defaults.js\";\nimport { DEFAULT_MODEL } from \"../../agent/default-model.js\";\nimport {\n  listAgentEngines,\n  registerBuiltinEngines,\n  detectEngineFromEnv,\n  detectEngineFromUserSecrets,\n  getAgentEngineEntry,\n  isAgentEnginePackageInstalled,\n  isStoredEngineUsableForRequest,\n  normalizeModelForEngine,\n} from \"../../agent/engine/index.js\";\nimport type { ActionTool } from \"../../agent/types.js\";\nimport { getSetting } from \"../../settings/index.js\";\n\nexport const tool: ActionTool = {\n  description:\n    'List all available AI agent engines (Anthropic, OpenAI, Gemini, Groq, etc.) and the currently selected engine. Use this to check what engines are available before calling manage-agent-engine with action=\"set\".',\n  parameters: {\n    type: \"object\",\n    properties: {},\n    required: [],\n  },\n};\n\nexport async function run(args: Record<string, string> = {}): Promise<string> {\n  registerBuiltinEngines();\n\n  const engines = listAgentEngines();\n  const currentSetting = await getSetting(\"agent-engine\");\n  const current = currentSetting\n    ? (currentSetting as { engine?: string; model?: string })\n    : null;\n\n  // Same priority chain resolveEngine uses after explicit request options:\n  // AGENT_ENGINE → app default → stored (if usable) → user/Builder app_secrets\n  // → env → anthropic. Gating stored/app defaults on the request-aware helper\n  // keeps the picker in step with the runtime.\n  const storedEntry =\n    typeof current?.engine === \"string\"\n      ? getAgentEngineEntry(current.engine)\n      : undefined;\n  const storedUsable =\n    !!storedEntry &&\n    (await isStoredEngineUsableForRequest(current, storedEntry));\n  const appDefault = await getAgentAppModelDefaultForCurrentRequest(args.appId);\n  const appDefaultEntry =\n    typeof appDefault?.engine === \"string\"\n      ? getAgentEngineEntry(appDefault.engine)\n      : undefined;\n  const appDefaultUsable =\n    !!appDefault &&\n    !!appDefaultEntry &&\n    (await isStoredEngineUsableForRequest(appDefault, appDefaultEntry));\n  const detectedFromUser = await detectEngineFromUserSecrets();\n  const envEntry = process.env.AGENT_ENGINE\n    ? getAgentEngineEntry(process.env.AGENT_ENGINE)\n    : undefined;\n  const envUsable =\n    !!envEntry &&\n    (await isStoredEngineUsableForRequest({ engine: envEntry.name }, envEntry));\n  const envUnavailable = !!envEntry && !envUsable;\n  const detectedFromEnv = detectEngineFromEnv();\n  const envSelectedEntry = envUsable ? envEntry : undefined;\n\n  const currentEntry = envUnavailable\n    ? undefined\n    : (envSelectedEntry ??\n      (appDefaultUsable ? appDefaultEntry : undefined) ??\n      (storedUsable ? storedEntry : undefined) ??\n      detectedFromUser ??\n      detectedFromEnv ??\n      undefined);\n  const currentModelCandidate =\n    appDefaultUsable && currentEntry?.name === appDefault?.engine\n      ? appDefault?.model\n      : storedUsable && currentEntry?.name === current?.engine\n        ? current?.model\n        : undefined;\n  const currentEngineName = currentEntry?.name ?? \"anthropic\";\n  const currentModel =\n    currentEntry && !envUnavailable\n      ? normalizeModelForEngine(\n          currentEntry,\n          currentModelCandidate ?? currentEntry.defaultModel,\n        )\n      : (currentModelCandidate ?? DEFAULT_MODEL);\n  const result = {\n    engines: engines.map((e) => ({\n      name: e.name,\n      label: e.label,\n      description: e.description,\n      defaultModel: e.defaultModel,\n      supportedModels: e.supportedModels,\n      capabilities: e.capabilities,\n      requiredEnvVars: e.requiredEnvVars,\n      installPackage: e.installPackage,\n      packageInstalled: isAgentEnginePackageInstalled(e),\n    })),\n    current: envUnavailable\n      ? null\n      : {\n          engine: currentEngineName,\n          model: currentModel,\n        },\n  };\n\n  return JSON.stringify(result, null, 2);\n}\n"]}
+{"version":3,"file":"list-agent-engines.js","sourceRoot":"","sources":["../../../src/scripts/agent-engines/list-agent-engines.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,wCAAwC,EAAE,MAAM,mCAAmC,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,mBAAmB,EACnB,6BAA6B,EAC7B,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,CAAC,MAAM,IAAI,GAAe;IAC9B,WAAW,EACT,mNAAmN;IACrN,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE,EAAE;KACb;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAI,GAA2B,EAAE;IACzD,sBAAsB,EAAE,CAAC;IAEzB,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,cAAc,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,cAAc;QAC5B,CAAC,CAAE,cAAsD;QACzD,CAAC,CAAC,IAAI,CAAC;IAET,yEAAyE;IACzE,6EAA6E;IAC7E,4EAA4E;IAC5E,6CAA6C;IAC7C,MAAM,WAAW,GACf,OAAO,OAAO,EAAE,MAAM,KAAK,QAAQ;QACjC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,YAAY,GAChB,CAAC,CAAC,WAAW;QACb,CAAC,MAAM,8BAA8B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,MAAM,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9E,MAAM,eAAe,GACnB,OAAO,UAAU,EAAE,MAAM,KAAK,QAAQ;QACpC,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,MAAM,CAAC;QACxC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,gBAAgB,GACpB,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,eAAe;QACjB,CAAC,MAAM,8BAA8B,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,MAAM,2BAA2B,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY;QACvC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,SAAS,GACb,CAAC,CAAC,QAAQ;QACV,CAAC,MAAM,8BAA8B,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9E,MAAM,cAAc,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC;IAChD,MAAM,eAAe,GAAG,mBAAmB,EAAE,CAAC;IAC9C,MAAM,gBAAgB,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1D,MAAM,YAAY,GAAG,cAAc;QACjC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,CAAC,gBAAgB;YACjB,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACxC,gBAAgB;YAChB,eAAe;YACf,SAAS,CAAC,CAAC;IACf,MAAM,qBAAqB,GACzB,gBAAgB,IAAI,YAAY,EAAE,IAAI,KAAK,UAAU,EAAE,MAAM;QAC3D,CAAC,CAAC,UAAU,EAAE,KAAK;QACnB,CAAC,CAAC,YAAY,IAAI,YAAY,EAAE,IAAI,KAAK,OAAO,EAAE,MAAM;YACtD,CAAC,CAAC,OAAO,EAAE,KAAK;YAChB,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,iBAAiB,GAAG,YAAY,EAAE,IAAI,IAAI,WAAW,CAAC;IAC5D,MAAM,YAAY,GAChB,YAAY,IAAI,CAAC,cAAc;QAC7B,CAAC,CAAC,uBAAuB,CACrB,YAAY,EACZ,qBAAqB,IAAI,YAAY,CAAC,YAAY,CACnD;QACH,CAAC,CAAC,CAAC,qBAAqB,IAAI,aAAa,CAAC,CAAC;IAC/C,MAAM,gBAAgB,GAAG,YAAY;QACnC,CAAC,CAAC,mCAAmC,CAAC;YAClC,MAAM,EAAE,mBAAmB,EAAE;YAC7B,UAAU,EAAE,YAAY,CAAC,IAAI;YAC7B,uBAAuB,EAAE,qBAAqB,IAAI,IAAI;YACtD,eAAe,EAAE,YAAY,CAAC,eAAe;SAC9C,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,qBAAqB,GAAG,gBAAgB,EAAE,KAAK,IAAI,YAAY,CAAC;IACtE,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC,CAAC;SACnD,CAAC,CAAC;QACH,OAAO,EAAE,cAAc;YACrB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC;gBACE,MAAM,EAAE,iBAAiB;gBACzB,KAAK,EAAE,qBAAqB;gBAC5B,GAAG,CAAC,gBAAgB;oBAClB,CAAC,CAAC;wBACE,oBAAoB,EAAE,YAAY;wBAClC,qBAAqB,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC;qBACrD;oBACH,CAAC,CAAC,EAAE,CAAC;aACR;KACN,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC","sourcesContent":["/**\n * list-agent-engines — returns the registered engine registry and current selection.\n */\n\nimport { getAgentAppModelDefaultForCurrentRequest } from \"../../agent/app-model-defaults.js\";\nimport { DEFAULT_MODEL } from \"../../agent/default-model.js\";\nimport {\n  listAgentEngines,\n  registerBuiltinEngines,\n  detectEngineFromEnv,\n  detectEngineFromUserSecrets,\n  getAgentEngineEntry,\n  isAgentEnginePackageInstalled,\n  isStoredEngineUsableForRequest,\n  normalizeModelForEngine,\n} from \"../../agent/engine/index.js\";\nimport type { ActionTool } from \"../../agent/types.js\";\nimport { resolveHostedDefaultModelExperiment } from \"../../observability/hosted-model-experiment.js\";\nimport { getRequestUserEmail } from \"../../server/request-context.js\";\nimport { getSetting } from \"../../settings/index.js\";\n\nexport const tool: ActionTool = {\n  description:\n    'List all available AI agent engines (Anthropic, OpenAI, Gemini, Groq, etc.) and the currently selected engine. Use this to check what engines are available before calling manage-agent-engine with action=\"set\".',\n  parameters: {\n    type: \"object\",\n    properties: {},\n    required: [],\n  },\n};\n\nexport async function run(args: Record<string, string> = {}): Promise<string> {\n  registerBuiltinEngines();\n\n  const engines = listAgentEngines();\n  const currentSetting = await getSetting(\"agent-engine\");\n  const current = currentSetting\n    ? (currentSetting as { engine?: string; model?: string })\n    : null;\n\n  // Same priority chain resolveEngine uses after explicit request options:\n  // AGENT_ENGINE → app default → stored (if usable) → user/Builder app_secrets\n  // → env → anthropic. Gating stored/app defaults on the request-aware helper\n  // keeps the picker in step with the runtime.\n  const storedEntry =\n    typeof current?.engine === \"string\"\n      ? getAgentEngineEntry(current.engine)\n      : undefined;\n  const storedUsable =\n    !!storedEntry &&\n    (await isStoredEngineUsableForRequest(current, storedEntry));\n  const appDefault = await getAgentAppModelDefaultForCurrentRequest(args.appId);\n  const appDefaultEntry =\n    typeof appDefault?.engine === \"string\"\n      ? getAgentEngineEntry(appDefault.engine)\n      : undefined;\n  const appDefaultUsable =\n    !!appDefault &&\n    !!appDefaultEntry &&\n    (await isStoredEngineUsableForRequest(appDefault, appDefaultEntry));\n  const detectedFromUser = await detectEngineFromUserSecrets();\n  const envEntry = process.env.AGENT_ENGINE\n    ? getAgentEngineEntry(process.env.AGENT_ENGINE)\n    : undefined;\n  const envUsable =\n    !!envEntry &&\n    (await isStoredEngineUsableForRequest({ engine: envEntry.name }, envEntry));\n  const envUnavailable = !!envEntry && !envUsable;\n  const detectedFromEnv = detectEngineFromEnv();\n  const envSelectedEntry = envUsable ? envEntry : undefined;\n\n  const currentEntry = envUnavailable\n    ? undefined\n    : (envSelectedEntry ??\n      (appDefaultUsable ? appDefaultEntry : undefined) ??\n      (storedUsable ? storedEntry : undefined) ??\n      detectedFromUser ??\n      detectedFromEnv ??\n      undefined);\n  const currentModelCandidate =\n    appDefaultUsable && currentEntry?.name === appDefault?.engine\n      ? appDefault?.model\n      : storedUsable && currentEntry?.name === current?.engine\n        ? current?.model\n        : undefined;\n  const currentEngineName = currentEntry?.name ?? \"anthropic\";\n  const currentModel =\n    currentEntry && !envUnavailable\n      ? normalizeModelForEngine(\n          currentEntry,\n          currentModelCandidate ?? currentEntry.defaultModel,\n        )\n      : (currentModelCandidate ?? DEFAULT_MODEL);\n  const hostedExperiment = currentEntry\n    ? resolveHostedDefaultModelExperiment({\n        userId: getRequestUserEmail(),\n        engineName: currentEntry.name,\n        isDefaultModelSelection: currentModelCandidate == null,\n        supportedModels: currentEntry.supportedModels,\n      })\n    : null;\n  const effectiveCurrentModel = hostedExperiment?.model ?? currentModel;\n  const result = {\n    engines: engines.map((e) => ({\n      name: e.name,\n      label: e.label,\n      description: e.description,\n      defaultModel: e.defaultModel,\n      supportedModels: e.supportedModels,\n      capabilities: e.capabilities,\n      requiredEnvVars: e.requiredEnvVars,\n      installPackage: e.installPackage,\n      packageInstalled: isAgentEnginePackageInstalled(e),\n    })),\n    current: envUnavailable\n      ? null\n      : {\n          engine: currentEngineName,\n          model: effectiveCurrentModel,\n          ...(hostedExperiment\n            ? {\n                modelSelectionSource: \"experiment\",\n                experimentAssignments: [hostedExperiment.assignment],\n              }\n            : {}),\n        },\n  };\n\n  return JSON.stringify(result, null, 2);\n}\n"]}

package/dist/search-utils/index.d.ts

@@ -0,0 +1,12 @@
+export type SearchMatchMode = "allTerms" | "anyTerm" | "phrase" | "regex";
+export declare function escapeLikeTerm(value: string): string;
+export declare function normalizeSearchTerms(query: string): string[];
+export declare function matchesSearchMode(value: string, query: string, mode: SearchMatchMode): boolean;
+export declare function buildSearchSnippet(value: string, terms: string[], maxLength?: number): string;
+export declare function scoreSearchText(fields: {
+    title?: string | null;
+    summary?: string | null;
+    body?: string | null;
+    metadata?: string | null;
+}, terms: string[]): number;
+//# sourceMappingURL=index.d.ts.map

package/dist/search-utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/search-utils/index.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;AAqB1E,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAa5D;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,eAAe,GACpB,OAAO,CAiBT;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EAAE,EACf,SAAS,SAAM,GACd,MAAM,CAcR;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE;IACN,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,EACD,KAAK,EAAE,MAAM,EAAE,GACd,MAAM,CAcR"}

package/dist/search-utils/index.js

@@ -0,0 +1,95 @@
+import safeRegex from "safe-regex2";
+const STOPWORDS = new Set([
+    "about",
+    "and",
+    "did",
+    "does",
+    "for",
+    "from",
+    "have",
+    "our",
+    "the",
+    "what",
+    "when",
+    "where",
+    "which",
+    "while",
+    "why",
+    "with",
+]);
+export function escapeLikeTerm(value) {
+    return value.replace(/[\\%_]/g, (match) => `\\${match}`);
+}
+export function normalizeSearchTerms(query) {
+    const phrase = query
+        .toLowerCase()
+        .split(/[^\p{L}\p{N}-]+/u)
+        .map((token) => token.trim())
+        .filter(Boolean)
+        .join(" ");
+    if (!phrase)
+        return [];
+    const tokens = phrase
+        .split(/[^\p{L}\p{N}-]+/u)
+        .map((token) => token.trim())
+        .filter((token) => token.length > 2 && !STOPWORDS.has(token));
+    return Array.from(new Set([phrase, ...tokens])).slice(0, 12);
+}
+export function matchesSearchMode(value, query, mode) {
+    const normalizedValue = normalizeText(value).toLowerCase();
+    if (mode === "regex") {
+        if (query.length > 240 || !safeRegex(query))
+            return false;
+        try {
+            return new RegExp(query, "iu").test(value);
+        }
+        catch {
+            return false;
+        }
+    }
+    const terms = normalizeSearchTerms(query);
+    if (!terms.length)
+        return false;
+    if (mode === "phrase")
+        return normalizedValue.includes(terms[0] ?? "");
+    const tokens = terms.slice(1).length ? terms.slice(1) : terms;
+    return mode === "allTerms"
+        ? tokens.every((term) => normalizedValue.includes(term))
+        : tokens.some((term) => normalizedValue.includes(term));
+}
+export function buildSearchSnippet(value, terms, maxLength = 260) {
+    const text = normalizeText(value);
+    if (text.length <= maxLength)
+        return text;
+    const lower = text.toLowerCase();
+    const firstIndex = terms.reduce((best, term) => {
+        const index = lower.indexOf(term.toLowerCase());
+        return index >= 0 && (best < 0 || index < best) ? index : best;
+    }, -1);
+    const start = Math.max(0, (firstIndex < 0 ? 0 : firstIndex) - Math.floor(maxLength / 3));
+    const end = Math.min(text.length, start + maxLength);
+    return `${start > 0 ? "..." : ""}${text.slice(start, end).trim()}${end < text.length ? "..." : ""}`;
+}
+export function scoreSearchText(fields, terms) {
+    const title = normalizeText(fields.title).toLowerCase();
+    const summary = normalizeText(fields.summary).toLowerCase();
+    const body = normalizeText(fields.body).toLowerCase();
+    const metadata = normalizeText(fields.metadata).toLowerCase();
+    let score = 0;
+    terms.forEach((term, index) => {
+        const phraseBoost = index === 0 ? 2 : 1;
+        if (title.includes(term))
+            score += 40 * phraseBoost;
+        if (summary.includes(term))
+            score += 20 * phraseBoost;
+        if (body.includes(term))
+            score += 8 * phraseBoost;
+        if (metadata.includes(term))
+            score += 6 * phraseBoost;
+    });
+    return score;
+}
+function normalizeText(value) {
+    return (value ?? "").replace(/\s+/g, " ").trim();
+}
+//# sourceMappingURL=index.js.map

package/dist/search-utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/search-utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,aAAa,CAAC;AAIpC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,OAAO;IACP,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,KAAK;IACL,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,MAAM,MAAM,GAAG,KAAK;SACjB,WAAW,EAAE;SACb,KAAK,CAAC,kBAAkB,CAAC;SACzB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM;SAClB,KAAK,CAAC,kBAAkB,CAAC;SACzB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,KAAa,EACb,IAAqB;IAErB,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1D,IAAI,CAAC;YACH,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9D,OAAO,IAAI,KAAK,UAAU;QACxB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAa,EACb,KAAe,EACf,SAAS,GAAG,GAAG;IAEf,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAChD,OAAO,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACP,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,CAAC,EACD,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAC9D,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,SAAS,CAAC,CAAC;IACrD,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACtG,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAKC,EACD,KAAe;IAEf,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACxD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,WAAW,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,KAAK,IAAI,EAAE,GAAG,WAAW,CAAC;QACpD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,KAAK,IAAI,EAAE,GAAG,WAAW,CAAC;QACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,KAAK,IAAI,CAAC,GAAG,WAAW,CAAC;QAClD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,KAAK,IAAI,CAAC,GAAG,WAAW,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAgC;IACrD,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACnD,CAAC","sourcesContent":["import safeRegex from \"safe-regex2\";\n\nexport type SearchMatchMode = \"allTerms\" | \"anyTerm\" | \"phrase\" | \"regex\";\n\nconst STOPWORDS = new Set([\n  \"about\",\n  \"and\",\n  \"did\",\n  \"does\",\n  \"for\",\n  \"from\",\n  \"have\",\n  \"our\",\n  \"the\",\n  \"what\",\n  \"when\",\n  \"where\",\n  \"which\",\n  \"while\",\n  \"why\",\n  \"with\",\n]);\n\nexport function escapeLikeTerm(value: string): string {\n  return value.replace(/[\\\\%_]/g, (match) => `\\\\${match}`);\n}\n\nexport function normalizeSearchTerms(query: string): string[] {\n  const phrase = query\n    .toLowerCase()\n    .split(/[^\\p{L}\\p{N}-]+/u)\n    .map((token) => token.trim())\n    .filter(Boolean)\n    .join(\" \");\n  if (!phrase) return [];\n  const tokens = phrase\n    .split(/[^\\p{L}\\p{N}-]+/u)\n    .map((token) => token.trim())\n    .filter((token) => token.length > 2 && !STOPWORDS.has(token));\n  return Array.from(new Set([phrase, ...tokens])).slice(0, 12);\n}\n\nexport function matchesSearchMode(\n  value: string,\n  query: string,\n  mode: SearchMatchMode,\n): boolean {\n  const normalizedValue = normalizeText(value).toLowerCase();\n  if (mode === \"regex\") {\n    if (query.length > 240 || !safeRegex(query)) return false;\n    try {\n      return new RegExp(query, \"iu\").test(value);\n    } catch {\n      return false;\n    }\n  }\n  const terms = normalizeSearchTerms(query);\n  if (!terms.length) return false;\n  if (mode === \"phrase\") return normalizedValue.includes(terms[0] ?? \"\");\n  const tokens = terms.slice(1).length ? terms.slice(1) : terms;\n  return mode === \"allTerms\"\n    ? tokens.every((term) => normalizedValue.includes(term))\n    : tokens.some((term) => normalizedValue.includes(term));\n}\n\nexport function buildSearchSnippet(\n  value: string,\n  terms: string[],\n  maxLength = 260,\n): string {\n  const text = normalizeText(value);\n  if (text.length <= maxLength) return text;\n  const lower = text.toLowerCase();\n  const firstIndex = terms.reduce((best, term) => {\n    const index = lower.indexOf(term.toLowerCase());\n    return index >= 0 && (best < 0 || index < best) ? index : best;\n  }, -1);\n  const start = Math.max(\n    0,\n    (firstIndex < 0 ? 0 : firstIndex) - Math.floor(maxLength / 3),\n  );\n  const end = Math.min(text.length, start + maxLength);\n  return `${start > 0 ? \"...\" : \"\"}${text.slice(start, end).trim()}${end < text.length ? \"...\" : \"\"}`;\n}\n\nexport function scoreSearchText(\n  fields: {\n    title?: string | null;\n    summary?: string | null;\n    body?: string | null;\n    metadata?: string | null;\n  },\n  terms: string[],\n): number {\n  const title = normalizeText(fields.title).toLowerCase();\n  const summary = normalizeText(fields.summary).toLowerCase();\n  const body = normalizeText(fields.body).toLowerCase();\n  const metadata = normalizeText(fields.metadata).toLowerCase();\n  let score = 0;\n  terms.forEach((term, index) => {\n    const phraseBoost = index === 0 ? 2 : 1;\n    if (title.includes(term)) score += 40 * phraseBoost;\n    if (summary.includes(term)) score += 20 * phraseBoost;\n    if (body.includes(term)) score += 8 * phraseBoost;\n    if (metadata.includes(term)) score += 6 * phraseBoost;\n  });\n  return score;\n}\n\nfunction normalizeText(value: string | null | undefined): string {\n  return (value ?? \"\").replace(/\\s+/g, \" \").trim();\n}\n"]}

package/dist/secrets/register-framework-secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register-framework-secrets.d.ts","sourceRoot":"","sources":["../../src/secrets/register-framework-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,wBAAgB,wBAAwB,IAAI,IAAI,CA0F/C"}
+{"version":3,"file":"register-framework-secrets.d.ts","sourceRoot":"","sources":["../../src/secrets/register-framework-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,wBAAgB,wBAAwB,IAAI,IAAI,CAuJ/C"}

package/dist/secrets/register-framework-secrets.js

@@ -15,6 +15,63 @@
  */
 import { getRequiredSecret, registerRequiredSecret } from "./register.js";
 export function registerFrameworkSecrets() {
+    const workspaceOAuthProviders = [
+        {
+            id: "figma",
+            credentialPrefix: "FIGMA",
+            oauthProvider: "figma",
+            label: "Figma",
+            docsUrl: "https://developers.figma.com/docs/rest-api/oauth-apps/",
+        },
+        {
+            id: "google_drive",
+            credentialPrefix: "GOOGLE",
+            oauthProvider: "google",
+            label: "Google Drive",
+            docsUrl: "https://developers.google.com/identity/protocols/oauth2/web-server",
+        },
+        {
+            id: "notion",
+            credentialPrefix: "NOTION",
+            oauthProvider: "notion",
+            label: "Notion",
+            docsUrl: "https://developers.notion.com/docs/authorization",
+        },
+    ];
+    for (const provider of workspaceOAuthProviders) {
+        const prefix = provider.credentialPrefix;
+        for (const credential of [
+            { suffix: "CLIENT_ID", label: "OAuth client ID" },
+            { suffix: "CLIENT_SECRET", label: "OAuth client secret" },
+        ]) {
+            const key = `${prefix}_${credential.suffix}`;
+            if (!getRequiredSecret(key)) {
+                registerRequiredSecret({
+                    key,
+                    label: `${provider.label} ${credential.label}`,
+                    description: `Workspace-owned ${provider.label} OAuth application credential. Tokens granted by users are stored separately and encrypted.`,
+                    docsUrl: provider.docsUrl,
+                    scope: "workspace",
+                    kind: "api-key",
+                    required: false,
+                });
+            }
+        }
+        const connectionKey = `${prefix}_CONNECTED`;
+        if (!getRequiredSecret(connectionKey)) {
+            registerRequiredSecret({
+                key: connectionKey,
+                label: `${provider.label} account`,
+                description: `Connect a ${provider.label} account for scoped workspace imports.`,
+                docsUrl: provider.docsUrl,
+                scope: "user",
+                kind: "oauth",
+                required: false,
+                oauthProvider: provider.oauthProvider,
+                oauthConnectUrl: `/_agent-native/connections/oauth/${provider.id}/start`,
+            });
+        }
+    }
     if (!getRequiredSecret("OPENAI_API_KEY")) {
         registerRequiredSecret({
             key: "OPENAI_API_KEY",

package/dist/secrets/register-framework-secrets.js.map

@@ -1 +1 @@
-{"version":3,"file":"register-framework-secrets.js","sourceRoot":"","sources":["../../src/secrets/register-framework-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAE1E,MAAM,UAAU,wBAAwB;IACtC,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzC,sBAAsB,CAAC;YACrB,GAAG,EAAE,gBAAgB;YACrB,KAAK,EAAE,gBAAgB;YACvB,WAAW,EACT,mGAAmG;YACrG,OAAO,EAAE,sCAAsC;YAC/C,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACzB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kCAAkC,EAAE;oBAC/D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;iBAC9C,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC,EAAE;oBAChB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;oBACd,CAAC,CAAC;wBACE,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,iCAAiC,QAAQ,CAAC,MAAM,IAAI;qBAC5D,CAAC;YACR,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,kEAAkE;IAClE,0EAA0E;IAC1E,MAAM,aAAa,GAKd;QACH;YACE,GAAG,EAAE,sBAAsB;YAC3B,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EACT,mHAAmH;YACrH,OAAO,EAAE,+BAA+B;SACzC;QACD;YACE,GAAG,EAAE,gBAAgB;YACrB,KAAK,EAAE,gBAAgB;YACvB,WAAW,EACT,wIAAwI;YAC1I,OAAO,EAAE,qBAAqB;SAC/B;QACD;YACE,GAAG,EAAE,aAAa;YAClB,KAAK,EAAE,aAAa;YACpB,WAAW,EACT,kIAAkI;YACpI,OAAO,EAAE,iBAAiB;SAC3B;QACD;YACE,GAAG,EAAE,mBAAmB;YACxB,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EACT,8IAA8I;YAChJ,OAAO,EAAE,wBAAwB;SAClC;KACF,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,sBAAsB,CAAC;gBACrB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,WAAW;gBAClB,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,EAAE,CAAC;QACvC,sBAAsB,CAAC;YACrB,GAAG,EAAE,cAAc;YACnB,KAAK,EAAE,cAAc;YACrB,WAAW,EACT,0FAA0F;YAC5F,OAAO,EACL,kHAAkH;YACpH,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;AACH,CAAC","sourcesContent":["/**\n * Framework-level secret registrations.\n *\n * Side-effect module — imported by the core-routes plugin at boot so the\n * sidebar settings UI and the `/_agent-native/secrets` list route surface the\n * relevant keys in every template.\n *\n * Each call uses a `getRequiredSecret` guard so a template that has already\n * registered the same key (often with stricter settings like `required: true`)\n * wins — the framework registration is a fallback, not an override.\n *\n * OPENAI_API_KEY is optional framework-wide because it enables the shared\n * realtime speech-to-speech agent mode. Templates can pre-register the same\n * key with stricter requirements; the guard below preserves their definition.\n */\n\nimport { getRequiredSecret, registerRequiredSecret } from \"./register.js\";\n\nexport function registerFrameworkSecrets(): void {\n  if (!getRequiredSecret(\"OPENAI_API_KEY\")) {\n    registerRequiredSecret({\n      key: \"OPENAI_API_KEY\",\n      label: \"OpenAI API key\",\n      description:\n        \"Optional fallback for realtime voice when Builder is not connected, and for OpenAI transcription.\",\n      docsUrl: \"https://platform.openai.com/api-keys\",\n      scope: \"user\",\n      kind: \"api-key\",\n      required: false,\n      validator: async (value) => {\n        const response = await fetch(\"https://api.openai.com/v1/models\", {\n          headers: { Authorization: `Bearer ${value}` },\n        });\n        return response.ok\n          ? { ok: true }\n          : {\n              ok: false,\n              error: `OpenAI rejected the key (HTTP ${response.status}).`,\n            };\n      },\n    });\n  }\n\n  // Web-search tool backends — optional; the tool selects the first\n  // configured manual key at call time, then falls back to Builder Connect.\n  const webSearchKeys: Array<{\n    key: string;\n    label: string;\n    description: string;\n    docsUrl: string;\n  }> = [\n    {\n      key: \"BRAVE_SEARCH_API_KEY\",\n      label: \"Brave Search API Key\",\n      description:\n        \"Enables the web-search agent tool via Brave Search. Optional when Builder.io is connected for managed web search.\",\n      docsUrl: \"https://brave.com/search/api/\",\n    },\n    {\n      key: \"TAVILY_API_KEY\",\n      label: \"Tavily API Key\",\n      description:\n        \"Enables the web-search agent tool via Tavily. Used as fallback when BRAVE_SEARCH_API_KEY is not set and before Builder-managed search.\",\n      docsUrl: \"https://tavily.com/\",\n    },\n    {\n      key: \"EXA_API_KEY\",\n      label: \"Exa API Key\",\n      description:\n        \"Enables the web-search agent tool via Exa. Used as fallback when Brave and Tavily are not set and before Builder-managed search.\",\n      docsUrl: \"https://exa.ai/\",\n    },\n    {\n      key: \"FIRECRAWL_API_KEY\",\n      label: \"Firecrawl API Key\",\n      description:\n        \"Enables the web-search agent tool via Firecrawl. Used as fallback when Brave, Tavily, and Exa are not set and before Builder-managed search.\",\n      docsUrl: \"https://firecrawl.dev/\",\n    },\n  ];\n\n  for (const entry of webSearchKeys) {\n    if (!getRequiredSecret(entry.key)) {\n      registerRequiredSecret({\n        key: entry.key,\n        label: entry.label,\n        description: entry.description,\n        docsUrl: entry.docsUrl,\n        scope: \"workspace\",\n        kind: \"api-key\",\n        required: false,\n      });\n    }\n  }\n\n  if (!getRequiredSecret(\"GITHUB_TOKEN\")) {\n    registerRequiredSecret({\n      key: \"GITHUB_TOKEN\",\n      label: \"GitHub token\",\n      description:\n        \"Enables connector-scoped repository file reads and writes for headless/cloud agent runs.\",\n      docsUrl:\n        \"https://docs.github.com/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens\",\n      scope: \"workspace\",\n      kind: \"api-key\",\n      required: false,\n    });\n  }\n}\n"]}
+{"version":3,"file":"register-framework-secrets.js","sourceRoot":"","sources":["../../src/secrets/register-framework-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAE1E,MAAM,UAAU,wBAAwB;IACtC,MAAM,uBAAuB,GAAG;QAC9B;YACE,EAAE,EAAE,OAAO;YACX,gBAAgB,EAAE,OAAO;YACzB,aAAa,EAAE,OAAO;YACtB,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,wDAAwD;SAClE;QACD;YACE,EAAE,EAAE,cAAc;YAClB,gBAAgB,EAAE,QAAQ;YAC1B,aAAa,EAAE,QAAQ;YACvB,KAAK,EAAE,cAAc;YACrB,OAAO,EACL,oEAAoE;SACvE;QACD;YACE,EAAE,EAAE,QAAQ;YACZ,gBAAgB,EAAE,QAAQ;YAC1B,aAAa,EAAE,QAAQ;YACvB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,kDAAkD;SAC5D;KACO,CAAC;IAEX,KAAK,MAAM,QAAQ,IAAI,uBAAuB,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC;QACzC,KAAK,MAAM,UAAU,IAAI;YACvB,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE;YACjD,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,qBAAqB,EAAE;SACjD,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YAC7C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,sBAAsB,CAAC;oBACrB,GAAG;oBACH,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,EAAE;oBAC9C,WAAW,EAAE,mBAAmB,QAAQ,CAAC,KAAK,6FAA6F;oBAC3I,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,KAAK,EAAE,WAAW;oBAClB,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,KAAK;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,GAAG,MAAM,YAAY,CAAC;QAC5C,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC;YACtC,sBAAsB,CAAC;gBACrB,GAAG,EAAE,aAAa;gBAClB,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,UAAU;gBAClC,WAAW,EAAE,aAAa,QAAQ,CAAC,KAAK,wCAAwC;gBAChF,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,KAAK,EAAE,MAAM;gBACb,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,KAAK;gBACf,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,eAAe,EAAE,oCAAoC,QAAQ,CAAC,EAAE,QAAQ;aACzE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzC,sBAAsB,CAAC;YACrB,GAAG,EAAE,gBAAgB;YACrB,KAAK,EAAE,gBAAgB;YACvB,WAAW,EACT,mGAAmG;YACrG,OAAO,EAAE,sCAAsC;YAC/C,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACzB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kCAAkC,EAAE;oBAC/D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;iBAC9C,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC,EAAE;oBAChB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;oBACd,CAAC,CAAC;wBACE,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,iCAAiC,QAAQ,CAAC,MAAM,IAAI;qBAC5D,CAAC;YACR,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,kEAAkE;IAClE,0EAA0E;IAC1E,MAAM,aAAa,GAKd;QACH;YACE,GAAG,EAAE,sBAAsB;YAC3B,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EACT,mHAAmH;YACrH,OAAO,EAAE,+BAA+B;SACzC;QACD;YACE,GAAG,EAAE,gBAAgB;YACrB,KAAK,EAAE,gBAAgB;YACvB,WAAW,EACT,wIAAwI;YAC1I,OAAO,EAAE,qBAAqB;SAC/B;QACD;YACE,GAAG,EAAE,aAAa;YAClB,KAAK,EAAE,aAAa;YACpB,WAAW,EACT,kIAAkI;YACpI,OAAO,EAAE,iBAAiB;SAC3B;QACD;YACE,GAAG,EAAE,mBAAmB;YACxB,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EACT,8IAA8I;YAChJ,OAAO,EAAE,wBAAwB;SAClC;KACF,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,sBAAsB,CAAC;gBACrB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,WAAW;gBAClB,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,EAAE,CAAC;QACvC,sBAAsB,CAAC;YACrB,GAAG,EAAE,cAAc;YACnB,KAAK,EAAE,cAAc;YACrB,WAAW,EACT,0FAA0F;YAC5F,OAAO,EACL,kHAAkH;YACpH,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;AACH,CAAC","sourcesContent":["/**\n * Framework-level secret registrations.\n *\n * Side-effect module — imported by the core-routes plugin at boot so the\n * sidebar settings UI and the `/_agent-native/secrets` list route surface the\n * relevant keys in every template.\n *\n * Each call uses a `getRequiredSecret` guard so a template that has already\n * registered the same key (often with stricter settings like `required: true`)\n * wins — the framework registration is a fallback, not an override.\n *\n * OPENAI_API_KEY is optional framework-wide because it enables the shared\n * realtime speech-to-speech agent mode. Templates can pre-register the same\n * key with stricter requirements; the guard below preserves their definition.\n */\n\nimport { getRequiredSecret, registerRequiredSecret } from \"./register.js\";\n\nexport function registerFrameworkSecrets(): void {\n  const workspaceOAuthProviders = [\n    {\n      id: \"figma\",\n      credentialPrefix: \"FIGMA\",\n      oauthProvider: \"figma\",\n      label: \"Figma\",\n      docsUrl: \"https://developers.figma.com/docs/rest-api/oauth-apps/\",\n    },\n    {\n      id: \"google_drive\",\n      credentialPrefix: \"GOOGLE\",\n      oauthProvider: \"google\",\n      label: \"Google Drive\",\n      docsUrl:\n        \"https://developers.google.com/identity/protocols/oauth2/web-server\",\n    },\n    {\n      id: \"notion\",\n      credentialPrefix: \"NOTION\",\n      oauthProvider: \"notion\",\n      label: \"Notion\",\n      docsUrl: \"https://developers.notion.com/docs/authorization\",\n    },\n  ] as const;\n\n  for (const provider of workspaceOAuthProviders) {\n    const prefix = provider.credentialPrefix;\n    for (const credential of [\n      { suffix: \"CLIENT_ID\", label: \"OAuth client ID\" },\n      { suffix: \"CLIENT_SECRET\", label: \"OAuth client secret\" },\n    ] as const) {\n      const key = `${prefix}_${credential.suffix}`;\n      if (!getRequiredSecret(key)) {\n        registerRequiredSecret({\n          key,\n          label: `${provider.label} ${credential.label}`,\n          description: `Workspace-owned ${provider.label} OAuth application credential. Tokens granted by users are stored separately and encrypted.`,\n          docsUrl: provider.docsUrl,\n          scope: \"workspace\",\n          kind: \"api-key\",\n          required: false,\n        });\n      }\n    }\n\n    const connectionKey = `${prefix}_CONNECTED`;\n    if (!getRequiredSecret(connectionKey)) {\n      registerRequiredSecret({\n        key: connectionKey,\n        label: `${provider.label} account`,\n        description: `Connect a ${provider.label} account for scoped workspace imports.`,\n        docsUrl: provider.docsUrl,\n        scope: \"user\",\n        kind: \"oauth\",\n        required: false,\n        oauthProvider: provider.oauthProvider,\n        oauthConnectUrl: `/_agent-native/connections/oauth/${provider.id}/start`,\n      });\n    }\n  }\n\n  if (!getRequiredSecret(\"OPENAI_API_KEY\")) {\n    registerRequiredSecret({\n      key: \"OPENAI_API_KEY\",\n      label: \"OpenAI API key\",\n      description:\n        \"Optional fallback for realtime voice when Builder is not connected, and for OpenAI transcription.\",\n      docsUrl: \"https://platform.openai.com/api-keys\",\n      scope: \"user\",\n      kind: \"api-key\",\n      required: false,\n      validator: async (value) => {\n        const response = await fetch(\"https://api.openai.com/v1/models\", {\n          headers: { Authorization: `Bearer ${value}` },\n        });\n        return response.ok\n          ? { ok: true }\n          : {\n              ok: false,\n              error: `OpenAI rejected the key (HTTP ${response.status}).`,\n            };\n      },\n    });\n  }\n\n  // Web-search tool backends — optional; the tool selects the first\n  // configured manual key at call time, then falls back to Builder Connect.\n  const webSearchKeys: Array<{\n    key: string;\n    label: string;\n    description: string;\n    docsUrl: string;\n  }> = [\n    {\n      key: \"BRAVE_SEARCH_API_KEY\",\n      label: \"Brave Search API Key\",\n      description:\n        \"Enables the web-search agent tool via Brave Search. Optional when Builder.io is connected for managed web search.\",\n      docsUrl: \"https://brave.com/search/api/\",\n    },\n    {\n      key: \"TAVILY_API_KEY\",\n      label: \"Tavily API Key\",\n      description:\n        \"Enables the web-search agent tool via Tavily. Used as fallback when BRAVE_SEARCH_API_KEY is not set and before Builder-managed search.\",\n      docsUrl: \"https://tavily.com/\",\n    },\n    {\n      key: \"EXA_API_KEY\",\n      label: \"Exa API Key\",\n      description:\n        \"Enables the web-search agent tool via Exa. Used as fallback when Brave and Tavily are not set and before Builder-managed search.\",\n      docsUrl: \"https://exa.ai/\",\n    },\n    {\n      key: \"FIRECRAWL_API_KEY\",\n      label: \"Firecrawl API Key\",\n      description:\n        \"Enables the web-search agent tool via Firecrawl. Used as fallback when Brave, Tavily, and Exa are not set and before Builder-managed search.\",\n      docsUrl: \"https://firecrawl.dev/\",\n    },\n  ];\n\n  for (const entry of webSearchKeys) {\n    if (!getRequiredSecret(entry.key)) {\n      registerRequiredSecret({\n        key: entry.key,\n        label: entry.label,\n        description: entry.description,\n        docsUrl: entry.docsUrl,\n        scope: \"workspace\",\n        kind: \"api-key\",\n        required: false,\n      });\n    }\n  }\n\n  if (!getRequiredSecret(\"GITHUB_TOKEN\")) {\n    registerRequiredSecret({\n      key: \"GITHUB_TOKEN\",\n      label: \"GitHub token\",\n      description:\n        \"Enables connector-scoped repository file reads and writes for headless/cloud agent runs.\",\n      docsUrl:\n        \"https://docs.github.com/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens\",\n      scope: \"workspace\",\n      kind: \"api-key\",\n      required: false,\n    });\n  }\n}\n"]}

package/dist/server/action-discovery.d.ts

@@ -41,6 +41,14 @@ import type { ActionEntry } from "../agent/production-agent.js";
  * so HMR / repeated dynamic imports don't double-warn.
  */
 export declare function registerPackageActions(actions: Record<string, ActionEntry>): void;
+/**
+ * Merge package-contributed actions without replacing app-local actions.
+ *
+ * This is intentionally callable even when the app passes an explicit static
+ * action registry. Published packages register through import side effects,
+ * while generated app registries only contain app-local action files.
+ */
+export declare function mergePackageActions(registry: Record<string, ActionEntry>): void;
 /**
  * Normalize a pre-bundled static action registry (name → raw module) into
  * the `Record<string, ActionEntry>` shape the agent-chat plugin expects.

package/dist/server/action-discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action-discovery.d.ts","sourceRoot":"","sources":["../../src/server/action-discovery.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AA2ChE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,IAAI,CAKN;AA+RD;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAqC7B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAgGtC;AAED,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAmLf;AAED,oDAAoD;AACpD,eAAO,MAAM,mBAAmB,4BAAsB,CAAC"}
+{"version":3,"file":"action-discovery.d.ts","sourceRoot":"","sources":["../../src/server/action-discovery.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AA2DhE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,IAAI,CAMN;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACpC,IAAI,CAKN;AA0RD;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAqC7B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CA6FtC;AAED,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAmLf;AAED,oDAAoD;AACpD,eAAO,MAAM,mBAAmB,4BAAsB,CAAC"}

package/dist/server/action-discovery.js

@@ -37,7 +37,17 @@ function isRuntimeSourceFile(filename) {
  * consumers can override a packaged action by dropping a same-named file
  * in their own `actions/` dir.
  */
-const packageActionRegistry = {};
+const PACKAGE_ACTION_REGISTRY_KEY = Symbol.for("@agent-native/core.package-action-registry");
+function getPackageActionRegistry() {
+    const sharedGlobal = globalThis;
+    const existing = sharedGlobal[PACKAGE_ACTION_REGISTRY_KEY];
+    if (existing && typeof existing === "object") {
+        return existing;
+    }
+    const registry = {};
+    sharedGlobal[PACKAGE_ACTION_REGISTRY_KEY] = registry;
+    return registry;
+}
 /**
  * Register a map of actions contributed by a published package.
  *
@@ -53,15 +63,26 @@ const packageActionRegistry = {};
  * so HMR / repeated dynamic imports don't double-warn.
  */
 export function registerPackageActions(actions) {
+    const packageActionRegistry = getPackageActionRegistry();
     for (const [name, entry] of Object.entries(actions)) {
         if (packageActionRegistry[name])
             continue;
         packageActionRegistry[name] = entry;
     }
 }
-/** Internal — used by `autoDiscoverActions`. Returns a shallow copy. */
-function getPackageActions() {
-    return { ...packageActionRegistry };
+/**
+ * Merge package-contributed actions without replacing app-local actions.
+ *
+ * This is intentionally callable even when the app passes an explicit static
+ * action registry. Published packages register through import side effects,
+ * while generated app registries only contain app-local action files.
+ */
+export function mergePackageActions(registry) {
+    for (const [name, entry] of Object.entries(getPackageActionRegistry())) {
+        if (registry[name])
+            continue;
+        registry[name] = entry;
+    }
 }
 /**
  * Split a string into shell-like tokens, handling double and single quotes.
@@ -447,11 +468,7 @@ export async function autoDiscoverActions(from) {
     //     (e.g. @agent-native/dispatch) via `registerPackageActions()` from
     //     import side effects. Merged with skip-existing so the template's
     //     own actions/ files always win on name collision.
-    for (const [name, entry] of Object.entries(getPackageActions())) {
-        if (registry[name])
-            continue;
-        registry[name] = entry;
-    }
+    mergePackageActions(registry);
     // 2. Workspace-core actions — merged in with skipExisting so they can't
     //    overwrite template entries.
     try {