@agent-native/core 0.112.0 → 0.113.0

package/corpus/templates/slides/.agents/skills/self-modifying-code/SKILL.md

@@ -35,8 +35,14 @@ Tier 4 includes **all** of the following — not only editing package source:
 - Files under `node_modules/@agent-native/*` (core, dispatch, scheduling, …)
 - `pnpm.overrides`, `overrides`, `resolutions`, or `patchedDependencies` that
   target any `@agent-native/*` package
-- Local patches, vendored copies, or invented "dispatch/core behavior"
-  shims meant to paper over a version skew or failed upgrade
+- Local package patches or invented "dispatch/core behavior" shims meant to
+  paper over a version skew or failed upgrade
+
+This does not prohibit intentional app-owned UI customization. When public
+props and composition are insufficient, the `customizing-agent-native` skill
+allows copying the smallest reference UI component from the installed source
+into the app. The copy must use public runtime contracts and must not replace
+Core auth, DB, actions, agent execution, or transport behavior.
 
 When an older branch needs current packages, use **`agent-native upgrade`**
 (see the `upgrade-agent-native` skill). If upgrade or typecheck fails, fix
@@ -88,6 +94,8 @@ inline strings in components.
 - Don't modify `.env` files or files containing secrets
 - Don't modify `@agent-native/core`, `@agent-native/dispatch`, or other
   `@agent-native/*` package internals (including under `node_modules`)
+- Don't confuse a read-only reference copy with editing package internals: use
+  `customizing-agent-native` for selective app-owned UI adoption
 - Don't add `pnpm.overrides` / `patchedDependencies` / `resolutions` for
   `@agent-native/*` to "make the app run" after a version bump
 - Don't invent local dispatch/core behavior overrides when upgrade fails —
@@ -99,6 +107,7 @@ inline strings in components.
 ## Related Skills
 
 - **upgrade-agent-native** — supported path to bring an older app/workspace current
+- **customizing-agent-native** — safe selective adoption of installed reference UI
 - **storing-data** — Tier 1 modifications (data files) are the safest and most common
 - **actions** — The agent can create or modify actions to add new capabilities
 - **delegate-to-agent** — Self-modification requests come through the agent chat

package/corpus/templates/slides/.agents/skills/upgrade-agent-native/SKILL.md

@@ -63,6 +63,11 @@ install → refresh scaffold skills → verify, then fix **app** code only.
    - Re-run `agent-native upgrade` or `pnpm typecheck`
    - Stop and ask the user if you cannot fix the app-level error
 
+   Intentional app-level UI customization is a separate workflow. Read
+   `customizing-agent-native` when the product needs to own a selectively
+   copied component; do not use that path to reproduce framework runtime
+   behavior or hide version skew.
+
 4. **Dry-run / partial runs**
 
    ```bash
@@ -91,4 +96,5 @@ install → refresh scaffold skills → verify, then fix **app** code only.
 
 - **self-modifying-code** — Tier 4: framework packages are off limits
 - **agent-native-docs** — version-matched docs after the bump
+- **customizing-agent-native** — intentional app-owned UI copies, not upgrade patches
 - **portability** — keep app code provider-agnostic across upgrades

package/corpus/templates/slides/actions/delete-staged-dataset.ts

@@ -1,14 +1,13 @@
 /**
  * Thin slides re-export of staged dataset deletion, pre-bound to appId="slides".
  */
-import { defineAction } from "@agent-native/core";
-import { deleteStagedDataset } from "@agent-native/core/provider-api/staged-datasets-store";
+import { createDeleteStagedDatasetAction } from "@agent-native/core/provider-api/actions/staged-datasets";
 import { getCredentialContext } from "@agent-native/core/server/request-context";
 import { z } from "zod";
 
 import { SLIDES_APP_ID } from "../server/lib/provider-api.js";
 
-export default defineAction({
+export default createDeleteStagedDatasetAction({
   description:
     "Delete a staged dataset by id, freeing its scratch storage. Use after analysis is complete or before re-staging under the same name. Only the owner who staged the dataset can delete it.",
   schema: z.object({
@@ -19,25 +18,7 @@ export default defineAction({
         "Dataset id to delete (from list-staged-datasets or provider-api-request stageAs result).",
       ),
   }),
+  appId: SLIDES_APP_ID,
+  getOwnerEmail: () => getCredentialContext()?.userEmail ?? null,
   http: false,
-  run: async (args) => {
-    const ctx = getCredentialContext();
-    if (!ctx) {
-      throw new Error("No authenticated context for delete-staged-dataset.");
-    }
-
-    const deleted = await deleteStagedDataset({
-      id: args.datasetId,
-      appId: SLIDES_APP_ID,
-      ownerEmail: ctx.userEmail,
-    });
-
-    if (!deleted) {
-      throw new Error(
-        `Dataset ${args.datasetId} not found (or belongs to a different owner/app).`,
-      );
-    }
-
-    return { deleted: true, datasetId: args.datasetId };
-  },
 });

package/corpus/templates/slides/actions/list-staged-datasets.ts

@@ -1,40 +1,17 @@
 /**
  * Thin slides re-export of staged dataset listing, pre-bound to appId="slides".
  */
-import { defineAction } from "@agent-native/core";
-import { listStagedDatasets } from "@agent-native/core/provider-api/staged-datasets-store";
+import { createListStagedDatasetsAction } from "@agent-native/core/provider-api/actions/staged-datasets";
 import { getCredentialContext } from "@agent-native/core/server/request-context";
 import { z } from "zod";
 
 import { SLIDES_APP_ID } from "../server/lib/provider-api.js";
 
-export default defineAction({
+export default createListStagedDatasetsAction({
   description:
     "List staged datasets stored by provider-api-request (stageAs) for the current user. Returns dataset ids, names, row counts, columns, and sizes. Use dataset ids with query-staged-dataset to aggregate, or with delete-staged-dataset to free scratch storage.",
   schema: z.object({}),
+  appId: SLIDES_APP_ID,
+  getOwnerEmail: () => getCredentialContext()?.userEmail ?? null,
   http: { method: "GET" },
-  readOnly: true,
-  run: async () => {
-    const ctx = getCredentialContext();
-    if (!ctx) {
-      throw new Error("No authenticated context for list-staged-datasets.");
-    }
-
-    const datasets = await listStagedDatasets({
-      appId: SLIDES_APP_ID,
-      ownerEmail: ctx.userEmail,
-    });
-
-    return {
-      datasets: datasets.map((d) => ({
-        id: d.id,
-        name: d.name,
-        rowCount: d.rowCount,
-        columns: d.columns,
-        byteSize: d.byteSize,
-        updatedAt: new Date(d.updatedAt).toISOString(),
-      })),
-      total: datasets.length,
-    };
-  },
 });

package/corpus/templates/slides/actions/provider-api-catalog.ts

@@ -1,4 +1,4 @@
-import { defineAction } from "@agent-native/core";
+import { createProviderApiCatalogAction } from "@agent-native/core/provider-api/actions/provider-api";
 import { z } from "zod";
 
 import {
@@ -8,21 +8,18 @@ import {
 
 const ProviderSchema = z.enum(SLIDES_PROVIDER_API_IDS);
 
-export default defineAction({
-  description:
-    "List raw HTTP API capabilities for Slides-connected providers. Use before provider-api-request when deck/import convenience actions are too narrow. Returns provider base URLs, auth style, credential key names, docs/spec URLs, placeholders, and examples; never returns secret values.",
-  schema: z.object({
-    provider: ProviderSchema.optional().describe(
-      "Optional provider id to inspect. Omit to list every Slides provider API escape hatch.",
-    ),
-  }),
-  http: { method: "GET" },
-  readOnly: true,
-  run: async ({ provider }) => {
-    return {
-      providers: await listProviderApiCatalog(provider),
-      guidance:
-        "Slides actions like import-google-doc and export-google-slides are workflow shortcuts, not capability limits. When the provider API can answer the question with a better endpoint, query, body, pagination mode, metadata field, export format, or API version, inspect docs/spec URLs and call provider-api-request directly.",
-    };
+export default createProviderApiCatalogAction(
+  { listCatalog: listProviderApiCatalog },
+  {
+    description:
+      "List raw HTTP API capabilities for Slides-connected providers. Use before provider-api-request when deck/import convenience actions are too narrow. Returns provider base URLs, auth style, credential key names, docs/spec URLs, placeholders, and examples; never returns secret values.",
+    schema: z.object({
+      provider: ProviderSchema.optional().describe(
+        "Optional provider id to inspect. Omit to list every Slides provider API escape hatch.",
+      ),
+    }),
+    http: { method: "GET" },
+    guidance:
+      "Slides actions like import-google-doc and export-google-slides are workflow shortcuts, not capability limits. When the provider API can answer the question with a better endpoint, query, body, pagination mode, metadata field, export format, or API version, inspect docs/spec URLs and call provider-api-request directly.",
   },
-});
+);

package/corpus/templates/slides/actions/provider-api-docs.ts

@@ -1,4 +1,4 @@
-import { defineAction } from "@agent-native/core";
+import { createProviderApiDocsAction } from "@agent-native/core/provider-api/actions/provider-api";
 import { z } from "zod";
 
 import {
@@ -23,52 +23,61 @@ const WebContentSearchSchema = z.object({
   caseSensitive: BooleanFromQuerySchema.optional(),
 });
 
-export default defineAction({
-  description:
-    "Inspect provider API docs/spec metadata, or fetch any public API documentation page, OpenAPI spec, changelog, or web page. Use this before provider-api-request when the exact Google Drive endpoint, export format, payload shape, pagination, or API version is uncertain.",
-  schema: z.object({
-    provider: ProviderSchema.describe(
-      "Provider whose API docs/spec to inspect.",
-    ),
-    url: z
-      .string()
-      .url()
-      .optional()
-      .describe(
-        "Optional public docs/spec URL to fetch. Registered docs/spec URLs from provider-api-catalog are curated starting points, but any public http(s) API documentation URL is allowed.",
+export default createProviderApiDocsAction(
+  { fetchDocs: fetchProviderApiDocs },
+  {
+    description:
+      "Inspect provider API docs/spec metadata, or fetch any public API documentation page, OpenAPI spec, changelog, or web page. Use this before provider-api-request when the exact Google Drive endpoint, export format, payload shape, pagination, or API version is uncertain.",
+    schema: z.object({
+      provider: ProviderSchema.describe(
+        "Provider whose API docs/spec to inspect.",
       ),
-    maxBytes: z.coerce
-      .number()
-      .int()
-      .min(1_000)
-      .max(4 * 1024 * 1024)
-      .optional()
-      .describe("Maximum response bytes to read. Default 1MB, max 4MB."),
-    maxChars: z.coerce
-      .number()
-      .int()
-      .min(1)
-      .max(200_000)
-      .optional()
-      .describe("Maximum extracted content characters to return."),
-    responseMode: z
-      .enum(["auto", "raw", "text", "markdown", "links", "metadata", "matches"])
-      .optional()
-      .describe(
-        "How to return fetched docs. Default auto extracts HTML to markdown; use matches with search for compact snippets.",
+      url: z
+        .string()
+        .url()
+        .optional()
+        .describe(
+          "Optional public docs/spec URL to fetch. Registered docs/spec URLs from provider-api-catalog are curated starting points, but any public http(s) API documentation URL is allowed.",
+        ),
+      maxBytes: z.coerce
+        .number()
+        .int()
+        .min(1_000)
+        .max(4 * 1024 * 1024)
+        .optional()
+        .describe("Maximum response bytes to read. Default 1MB, max 4MB."),
+      maxChars: z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(200_000)
+        .optional()
+        .describe("Maximum extracted content characters to return."),
+      responseMode: z
+        .enum([
+          "auto",
+          "raw",
+          "text",
+          "markdown",
+          "links",
+          "metadata",
+          "matches",
+        ])
+        .optional()
+        .describe(
+          "How to return fetched docs. Default auto extracts HTML to markdown; use matches with search for compact snippets.",
+        ),
+      extract: z
+        .enum(["readability", "all-visible", "none"])
+        .optional()
+        .describe("HTML extraction strategy. Default readability."),
+      includeLinks: BooleanFromQuerySchema.optional().describe(
+        "Include compact links from extracted HTML. Default true.",
       ),
-    extract: z
-      .enum(["readability", "all-visible", "none"])
-      .optional()
-      .describe("HTML extraction strategy. Default readability."),
-    includeLinks: BooleanFromQuerySchema.optional().describe(
-      "Include compact links from extracted HTML. Default true.",
-    ),
-    search: WebContentSearchSchema.optional().describe(
-      "Optional post-fetch search over extracted content by default. Supports query, queries, terms, regex, source, maxMatches, and contextChars.",
-    ),
-  }),
-  http: { method: "GET" },
-  readOnly: true,
-  run: async (args) => fetchProviderApiDocs(args),
-});
+      search: WebContentSearchSchema.optional().describe(
+        "Optional post-fetch search over extracted content by default. Supports query, queries, terms, regex, source, maxMatches, and contextChars.",
+      ),
+    }),
+    http: { method: "GET" },
+  },
+);

package/corpus/templates/slides/actions/provider-api-request.ts

@@ -1,5 +1,4 @@
-import { defineAction } from "@agent-native/core";
-import { stagingExecuteRequest } from "@agent-native/core/provider-api/staging";
+import { createProviderApiRequestAction } from "@agent-native/core/provider-api/actions/provider-api";
 import { getCredentialContext } from "@agent-native/core/server/request-context";
 import { z } from "zod";
 
@@ -7,7 +6,6 @@ import {
   SLIDES_APP_ID,
   SLIDES_PROVIDER_API_IDS,
   executeProviderApiRequest,
-  getSlidesProviderApiRuntime,
 } from "../server/lib/provider-api.js";
 
 const ProviderSchema = z.enum(SLIDES_PROVIDER_API_IDS);
@@ -68,173 +66,148 @@ const PaginationSchema = z
   })
   .optional();
 
-export default defineAction({
-  description:
-    "Make an arbitrary authenticated HTTP request to a Slides-connected provider API. " +
-    "Use this as the flexible escape hatch when a convenience action cannot express the needed Google Drive endpoint, file metadata field, export format, query, request body, pagination mode, payload shape, or API version. " +
-    "The request is constrained to the provider host, uses the user's configured Google Docs/Drive OAuth connection automatically, blocks private/internal URLs, and redacts secrets from responses. " +
-    "\n\nSTAGING MODE (preferred for large responses): Pass stageAs to write response items into a scratch dataset instead of returning the raw body. " +
-    "Returns { dataset, rowCount, columns, sampleRows } so only a compact summary enters context. Use query-staged-dataset to aggregate, filter, and project the data without re-fetching. " +
-    "\n\nPAGINATION: When stageAs is set, pass pagination config to fetch all pages server-side into the same dataset. For Google Drive files.list, use nextCursorPath='nextPageToken', cursorParam='pageToken', and itemsPath='files'.",
-  schema: z.object({
-    provider: ProviderSchema.describe(
-      "Configured provider API to call, e.g. google_drive.",
-    ),
-    method: MethodSchema.default("GET").describe("HTTP method to use."),
-    path: z
-      .string()
-      .min(1)
-      .describe(
-        "Provider API path such as /files, /files/{fileId}, /files/{fileId}/export, or a full URL on an allowed provider host. Use placeholders from provider-api-catalog when provided.",
-      ),
-    query: z
-      .unknown()
-      .optional()
-      .describe(
-        "Optional query params as a JSON object/string. Array values produce repeated query params.",
-      ),
-    headers: z
-      .record(z.string(), z.unknown())
-      .optional()
-      .describe(
-        "Optional extra headers. Unsafe hop-by-hop headers are ignored. Auth headers are injected from stored credentials.",
-      ),
-    body: z
-      .unknown()
-      .optional()
-      .describe(
-        "Optional request body. Objects/arrays are JSON encoded; strings are sent as-is.",
-      ),
-    auth: z
-      .enum(["default", "none"])
-      .default("default")
-      .describe(
-        "Use default to inject configured provider auth. Use none only for public provider endpoints that intentionally require no auth.",
-      ),
-    connectionId: z
-      .string()
-      .trim()
-      .min(1)
-      .optional()
-      .describe(
-        "Unused for Slides Google Docs OAuth; reserved for shared grants.",
-      ),
-    accountId: z
-      .string()
-      .optional()
-      .describe(
-        "Optional Google Docs OAuth account email when multiple accounts are connected.",
-      ),
-    timeoutMs: z.coerce
-      .number()
-      .int()
-      .min(1_000)
-      .max(120_000)
-      .optional()
-      .describe("Request timeout in milliseconds. Default 30000, max 120000."),
-    maxBytes: z.coerce
-      .number()
-      .int()
-      .min(1_000)
-      .max(4 * 1024 * 1024)
-      .optional()
-      .describe(
-        "Maximum response bytes to read. Default 1MB, max 4MB. Ignored when saveToFile is set (allows up to 20MB).",
-      ),
-    stageAs: z
-      .string()
-      .min(1)
-      .optional()
-      .describe(
-        "When set, parse the response as an array of records and write them into a staged dataset with this name. Returns a compact summary instead of the raw body. Re-staging the same name replaces the previous dataset.",
-      ),
-    itemsPath: z
-      .string()
-      .optional()
-      .describe(
-        "Dot-path to the items array in the response JSON, e.g. 'files' for Google Drive files.list. Omit for auto-detection.",
-      ),
-    pagination: PaginationSchema.describe(
-      "Pagination config for server-side fetchAll when stageAs is set. Supports cursor (nextCursorPath + cursorParam or cursorBodyPath), page, and offset modes.",
-    ),
-    saveToFile: z
-      .string()
-      .optional()
-      .describe(
-        "Workspace file path to save the full response body to instead of returning it in context, e.g. 'slides/google-drive-files.json'. When set, returns only a compact summary and allows up to 20MB response.",
-      ),
-    fetchAllPages: z
-      .object({
-        cursorPath: z
-          .string()
-          .describe(
-            "Dot-path in the JSON response body where the next-page cursor lives, e.g. 'nextPageToken'.",
-          ),
-        cursorParam: z
-          .string()
-          .optional()
-          .describe(
-            "Query parameter name to pass the cursor on subsequent pages, e.g. 'pageToken'. Use cursorBodyPath instead for APIs that put cursors in POST bodies.",
-          ),
-        cursorBodyPath: z
-          .string()
-          .optional()
-          .describe(
-            "Dot-path in the JSON request body to set to the next cursor. Use for POST-body pagination.",
-          ),
-        itemsPath: z
-          .string()
-          .optional()
-          .describe(
-            "Dot-path to the items array in each response, e.g. 'files'. When omitted, the whole response body is appended per page.",
-          ),
-        maxPages: z.coerce
-          .number()
-          .int()
-          .min(1)
-          .max(50)
-          .optional()
-          .describe(
-            "Maximum pages to fetch. Default 10, max 50. Stops early when cursor is empty.",
-          ),
-      })
-      .optional()
-      .describe(
-        "Enable cursor-based pagination. For Google Drive files.list use { cursorPath: 'nextPageToken', cursorParam: 'pageToken', itemsPath: 'files' }. For APIs that page through POST bodies, use cursorBodyPath instead of cursorParam.",
-      ),
-  }),
-  http: false,
-  toolCallable: false,
-  run: async (args) => {
-    if (args.stageAs) {
-      const ctx = getCredentialContext();
-      if (!ctx) {
-        throw new Error("No authenticated context for provider API staging.");
-      }
-      const providerRuntime = getSlidesProviderApiRuntime();
-      return stagingExecuteRequest(
-        {
-          provider: args.provider,
-          method: args.method,
-          path: args.path,
-          query: args.query,
-          headers: args.headers,
-          body: args.body,
-          auth: args.auth,
-          connectionId: args.connectionId,
-          accountId: args.accountId,
-          timeoutMs: args.timeoutMs,
-          maxBytes: args.maxBytes,
-          stageAs: args.stageAs,
-          itemsPath: args.itemsPath,
-          pagination: args.pagination,
-        },
-        (reqArgs) => providerRuntime.executeRequest(reqArgs),
-        { appId: SLIDES_APP_ID, ownerEmail: ctx.userEmail },
-      );
-    }
-    return executeProviderApiRequest(
-      args as unknown as Parameters<typeof executeProviderApiRequest>[0],
-    );
+export default createProviderApiRequestAction(
+  { executeRequest: executeProviderApiRequest },
+  {
+    description:
+      "Make an arbitrary authenticated HTTP request to a Slides-connected provider API. " +
+      "Use this as the flexible escape hatch when a convenience action cannot express the needed Google Drive endpoint, file metadata field, export format, query, request body, pagination mode, payload shape, or API version. " +
+      "The request is constrained to the provider host, uses the user's configured Google Docs/Drive OAuth connection automatically, blocks private/internal URLs, and redacts secrets from responses. " +
+      "\n\nSTAGING MODE (preferred for large responses): Pass stageAs to write response items into a scratch dataset instead of returning the raw body. " +
+      "Returns { dataset, rowCount, columns, sampleRows } so only a compact summary enters context. Use query-staged-dataset to aggregate, filter, and project the data without re-fetching. " +
+      "\n\nPAGINATION: When stageAs is set, pass pagination config to fetch all pages server-side into the same dataset. For Google Drive files.list, use nextCursorPath='nextPageToken', cursorParam='pageToken', and itemsPath='files'.",
+    schema: z.object({
+      provider: ProviderSchema.describe(
+        "Configured provider API to call, e.g. google_drive.",
+      ),
+      method: MethodSchema.default("GET").describe("HTTP method to use."),
+      path: z
+        .string()
+        .min(1)
+        .describe(
+          "Provider API path such as /files, /files/{fileId}, /files/{fileId}/export, or a full URL on an allowed provider host. Use placeholders from provider-api-catalog when provided.",
+        ),
+      query: z
+        .unknown()
+        .optional()
+        .describe(
+          "Optional query params as a JSON object/string. Array values produce repeated query params.",
+        ),
+      headers: z
+        .record(z.string(), z.unknown())
+        .optional()
+        .describe(
+          "Optional extra headers. Unsafe hop-by-hop headers are ignored. Auth headers are injected from stored credentials.",
+        ),
+      body: z
+        .unknown()
+        .optional()
+        .describe(
+          "Optional request body. Objects/arrays are JSON encoded; strings are sent as-is.",
+        ),
+      auth: z
+        .enum(["default", "none"])
+        .default("default")
+        .describe(
+          "Use default to inject configured provider auth. Use none only for public provider endpoints that intentionally require no auth.",
+        ),
+      connectionId: z
+        .string()
+        .trim()
+        .min(1)
+        .optional()
+        .describe(
+          "Unused for Slides Google Docs OAuth; reserved for shared grants.",
+        ),
+      accountId: z
+        .string()
+        .optional()
+        .describe(
+          "Optional Google Docs OAuth account email when multiple accounts are connected.",
+        ),
+      timeoutMs: z.coerce
+        .number()
+        .int()
+        .min(1_000)
+        .max(120_000)
+        .optional()
+        .describe(
+          "Request timeout in milliseconds. Default 30000, max 120000.",
+        ),
+      maxBytes: z.coerce
+        .number()
+        .int()
+        .min(1_000)
+        .max(4 * 1024 * 1024)
+        .optional()
+        .describe(
+          "Maximum response bytes to read. Default 1MB, max 4MB. Ignored when saveToFile is set (allows up to 20MB).",
+        ),
+      stageAs: z
+        .string()
+        .min(1)
+        .optional()
+        .describe(
+          "When set, parse the response as an array of records and write them into a staged dataset with this name. Returns a compact summary instead of the raw body. Re-staging the same name replaces the previous dataset.",
+        ),
+      itemsPath: z
+        .string()
+        .optional()
+        .describe(
+          "Dot-path to the items array in the response JSON, e.g. 'files' for Google Drive files.list. Omit for auto-detection.",
+        ),
+      pagination: PaginationSchema.describe(
+        "Pagination config for server-side fetchAll when stageAs is set. Supports cursor (nextCursorPath + cursorParam or cursorBodyPath), page, and offset modes.",
+      ),
+      saveToFile: z
+        .string()
+        .optional()
+        .describe(
+          "Workspace file path to save the full response body to instead of returning it in context, e.g. 'slides/google-drive-files.json'. When set, returns only a compact summary and allows up to 20MB response.",
+        ),
+      fetchAllPages: z
+        .object({
+          cursorPath: z
+            .string()
+            .describe(
+              "Dot-path in the JSON response body where the next-page cursor lives, e.g. 'nextPageToken'.",
+            ),
+          cursorParam: z
+            .string()
+            .optional()
+            .describe(
+              "Query parameter name to pass the cursor on subsequent pages, e.g. 'pageToken'. Use cursorBodyPath instead for APIs that put cursors in POST bodies.",
+            ),
+          cursorBodyPath: z
+            .string()
+            .optional()
+            .describe(
+              "Dot-path in the JSON request body to set to the next cursor. Use for POST-body pagination.",
+            ),
+          itemsPath: z
+            .string()
+            .optional()
+            .describe(
+              "Dot-path to the items array in each response, e.g. 'files'. When omitted, the whole response body is appended per page.",
+            ),
+          maxPages: z.coerce
+            .number()
+            .int()
+            .min(1)
+            .max(50)
+            .optional()
+            .describe(
+              "Maximum pages to fetch. Default 10, max 50. Stops early when cursor is empty.",
+            ),
+        })
+        .optional()
+        .describe(
+          "Enable cursor-based pagination. For Google Drive files.list use { cursorPath: 'nextPageToken', cursorParam: 'pageToken', itemsPath: 'files' }. For APIs that page through POST bodies, use cursorBodyPath instead of cursorParam.",
+        ),
+    }),
+    appId: SLIDES_APP_ID,
+    getOwnerEmail: () => getCredentialContext()?.userEmail ?? null,
+    http: false,
+    toolCallable: false,
   },
-});
+);