@agent-native/core 0.128.3 → 0.129.0

package/dist/server/agent-chat/action-filters-a2a.js.map

@@ -1 +1 @@
-{"version":3,"file":"action-filters-a2a.js","sourceRoot":"","sources":["../../../src/server/agent-chat/action-filters-a2a.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAE/B,OAAO,EACL,sBAAsB,GAGvB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,uCAAuC,EAAE,MAAM,4BAA4B,CAAC;AACrF,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AAErF,OAAO,EACL,wBAAwB,EACxB,kCAAkC,GAEnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AAExF,OAAO,EACL,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAGhE,8EAA8E;AAC9E,4EAA4E;AAC5E,uEAAuE;AACvE,oCAAoC;AACpC,8EAA8E;AAE9E,MAAM,UAAU,qBAAqB,CACnC,OAAoC;IAEpC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CACvE,CAAC;AACJ,CAAC;AAED;;;;2DAI2D;AAC3D,MAAM,UAAU,gBAAgB,CAC9B,OAAoC;IAEpC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAoC;IAEpC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC;QACjC,OAAO,CACL,MAAM,EAAE,MAAM,KAAK,IAAI;YACvB,MAAM,CAAC,QAAQ,KAAK,IAAI;YACxB,MAAM,CAAC,YAAY,KAAK,IAAI;YAC5B,MAAM,CAAC,eAAe,KAAK,IAAI,CAChC,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAoC,EACpC,OAA4E;IAE5E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,EAAE,kBAAkB,KAAK,MAAM,CAAC;IAExE,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC;QACnC,MAAM,QAAQ,GACZ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YACjB,CAAC,SAAS;gBACR,yBAAyB,CAAC,KAAK,CAAC;gBAChC,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,OAAO,CACL,QAAQ;YACR,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YACjB,KAAK,CAAC,SAAS,KAAK,KAAK;YACzB,KAAK,CAAC,QAAQ,KAAK,IAAI;YACvB,QAAQ,EAAE,MAAM,KAAK,IAAI;YACzB,QAAQ,CAAC,QAAQ,KAAK,IAAI;YAC1B,QAAQ,CAAC,YAAY,KAAK,IAAI;YAC9B,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC;YACpE,QAAQ,CAAC,eAAe,KAAK,IAAI,CAClC,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAoC;IAOpC,OAAO,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAC1D,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAClB,EAAE,EAAE,IAAI;QACR,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;QACnC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAsB;IAEtB,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,OAAO;QACnB,OAAO,CAAC,GAAG,CAAC,GAAG;QACf,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC9B,IAAI,OAAO;QAAE,OAAO,yBAAyB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,mBAAmB,CAAC,IAAI,OAAO,CAAC;QAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,IAAI;YAAE,OAAO,yBAAyB,CAAC,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAiC,EACjC,WAA4C,EAC5C,OAAO,GAAiD,EAAE;IAE1D,MAAM,aAAa,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,uCAAuC,CAAC,MAAM,EAAE;QACnE,qBAAqB,EAAE,CAAC,aAAa;KACtC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,sBAAsB,CAAC,YAAY,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE;QACvE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC;QACjE,0BAA0B,EAAE,IAAI;QAChC,8BAA8B,EAAE,IAAI;KACrC,CAAC,CAAC;IACH,IAAI,aAAa,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAiC;IAEjC,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QACrC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACzC,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnC,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,mCAAmC,KAAK,CAAC,MAAM,IAAI;gBAC1D,SAAS,EAAE,KAAK,CAAC,MAAM;gBACvB,WAAW,EAAE,IAAI;aAClB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAiD;IAEjD,MAAM,KAAK,GAAG;QACZ,KAAK,CAAC,KAAK,IAAI,iDAAiD;QAChE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;QACjD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;KACjD,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAsBD,KAAK,UAAU,qBAAqB,CAClC,UAA6C,EAC7C,aAGC,EACD,cAAiD,EACjD,OAAkC;IAElC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,iCAAiC,CAAC;IACnE,MAAM,kBAAkB,GAAG;QACzB,GAAG,UAAU;QACb,qEAAqE;QACrE,iEAAiE;QACjE,qEAAqE;QACrE,oEAAoE;QACpE,wEAAwE;QACxE,eAAe,EACb,UAAU,CAAC,eAAe;YAC1B,8BAA8B,CAAC,UAAU,CAAC,KAAK,CAAC;QAClD,eAAe,EACb,UAAU,CAAC,eAAe;YAC1B,kCAAkC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACjE,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;KACrD,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,WAAW,GAAG,kBAAkB,EAAE,EAAE,CACnD,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAEtE,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,OAAO,EAAE,CAAC;IAEzC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,GACnD,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,sBAAsB,EAAE,CAAC;QAC9C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO,MAAM,mBAAmB,CAAC;gBAC/B,YAAY,EAAE,CAAC,WAAW,EAAE,EAAE,CAC5B,OAAO,CACL,WAC2B,CAC5B;gBACH,QAAQ,EAAE,kBAAkB;gBAC5B,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK;gBAC9B,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ;gBACpC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;gBAChC,MAAM;gBACN,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,UAAU;aACzC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,YAAY;YAAE,MAAM,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,OAAO,EAAE,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,UAA6C,EAC7C,aAGC,EACD,cAAiD,EACjD,OAAO,GAA8B,EAAE;IAEvC,OAAO,qBAAqB,CAC1B,UAAU,EACV,aAAa,EACb,cAAc,EACd,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,UAA6C,EAC7C,aAGC,EACD,cAAiD,EACjD,OAAO,GAA8B,EAAE;IAEvC,OAAO,qBAAqB,CAC1B,UAAU,EACV,aAAa,EACb,cAAc,EACd,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,cAA4B,EAC5B,gBAA2B;IAE3B,OAAO;QACL,KAAK,EAAE,wBAAwB,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACjE,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,eAA4C,EAC5C,UAAqB;IAErB,OAAO,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AACpD,CAAC","sourcesContent":["import { getHeader } from \"h3\";\n\nimport {\n  appendA2AArtifactLinks,\n  type A2AArtifactResponseOptions,\n  type A2AToolResultSummary,\n} from \"../../a2a/artifact-response.js\";\nimport { collectFinalResponseTextFromAgentEvents } from \"../../a2a/response-text.js\";\nimport { resolveMainChatMaxOutputTokens } from \"../../agent/engine/output-tokens.js\";\nimport type { EngineTool } from \"../../agent/engine/types.js\";\nimport {\n  filterInitialEngineTools,\n  resolveAgentRequestReasoningEffort,\n  type ActionEntry,\n} from \"../../agent/production-agent.js\";\nimport { runAgentLoopDirectWithSoftTimeout } from \"../../agent/run-loop-with-resume.js\";\nimport type { AgentChatEvent } from \"../../agent/types.js\";\nimport {\n  isAuthenticatedReadAction,\n  isAutoReadExcludedActionName,\n} from \"../../mcp/build-server.js\";\nimport { withConfiguredAppBasePath } from \"../app-base-path.js\";\nimport type { AgentChatPluginOptions } from \"./plugin-options.js\";\n\n// ---------------------------------------------------------------------------\n// Action-visibility filters (read-only / agent-exposed / public-agent-safe)\n// and the A2A (agent-to-agent) final-response assembly + delegated-run\n// helpers that share those filters.\n// ---------------------------------------------------------------------------\n\nexport function filterReadOnlyActions(\n  actions: Record<string, ActionEntry>,\n): Record<string, ActionEntry> {\n  return Object.fromEntries(\n    Object.entries(actions).filter(([, entry]) => entry.readOnly === true),\n  );\n}\n\n/** Drop actions that opted out of agent exposure via `agentTool: false`. They\n *  remain callable from the frontend / HTTP (mounted separately from this\n *  agent tool surface — see `httpActions`) but never appear in any agent tool\n *  list (in-app assistant, MCP, A2A, job/trigger runners) or actions prompt.\n *  Default-allow: only an explicit `false` is excluded. */\nexport function filterAgentTools(\n  actions: Record<string, ActionEntry>,\n): Record<string, ActionEntry> {\n  return Object.fromEntries(\n    Object.entries(actions).filter(([, entry]) => entry.agentTool !== false),\n  );\n}\n\nexport function filterPublicAgentActions(\n  actions: Record<string, ActionEntry>,\n): Record<string, ActionEntry> {\n  return Object.fromEntries(\n    Object.entries(actions).filter(([, entry]) => {\n      const config = entry.publicAgent;\n      return (\n        config?.expose === true &&\n        config.readOnly === true &&\n        config.requiresAuth !== true &&\n        config.isConsequential !== true\n      );\n    }),\n  );\n}\n\n/**\n * Direct A2A action calls share the authenticated external-agent policy with\n * MCP, but remain stricter: only explicitly exposed, authenticated read-only\n * actions can skip the receiver's model loop.\n */\nexport function filterDirectA2AActions(\n  actions: Record<string, ActionEntry>,\n  options: Pick<AgentChatPluginOptions, \"connectorCatalog\" | \"externalAgents\">,\n): Record<string, ActionEntry> {\n  const catalog = new Set(options.connectorCatalog ?? []);\n  const denied = new Set(options.externalAgents?.denyActions ?? []);\n  const autoReads = options.externalAgents?.authenticatedReads === \"auto\";\n\n  return Object.fromEntries(\n    Object.entries(actions).filter(([name, entry]) => {\n      const exposure = entry.publicAgent;\n      const selected =\n        catalog.has(name) ||\n        (autoReads &&\n          isAuthenticatedReadAction(entry) &&\n          !isAutoReadExcludedActionName(name));\n      return (\n        selected &&\n        !denied.has(name) &&\n        entry.agentTool !== false &&\n        entry.readOnly === true &&\n        exposure?.expose === true &&\n        exposure.readOnly === true &&\n        exposure.requiresAuth === true &&\n        (entry.needsApproval === undefined || entry.needsApproval === false) &&\n        exposure.isConsequential !== true\n      );\n    }),\n  );\n}\n\nexport function buildPublicAgentA2ASkills(\n  actions: Record<string, ActionEntry>,\n): Array<{\n  id: string;\n  name: string;\n  description: string;\n  publicAgent: ActionEntry[\"publicAgent\"];\n}> {\n  return Object.entries(filterPublicAgentActions(actions)).map(\n    ([name, entry]) => ({\n      id: name,\n      name,\n      description: entry.tool.description,\n      publicAgent: entry.publicAgent,\n    }),\n  );\n}\n\nexport function resolveArtifactBaseUrl(\n  event: any | undefined,\n): string | undefined {\n  const fromEnv =\n    process.env.APP_URL ||\n    process.env.URL ||\n    process.env.DEPLOY_URL ||\n    process.env.BETTER_AUTH_URL;\n  if (fromEnv) return withConfiguredAppBasePath(String(fromEnv));\n\n  try {\n    const proto = getHeader(event, \"x-forwarded-proto\") || \"https\";\n    const host = getHeader(event, \"host\");\n    if (host) return withConfiguredAppBasePath(`${proto}://${host}`);\n  } catch {}\n\n  return undefined;\n}\n\nexport function assembleA2AFinalResponse(\n  events: readonly AgentChatEvent[],\n  toolResults: readonly A2AToolResultSummary[],\n  options: A2AArtifactResponseOptions & { event?: any } = {},\n): { responseText: string; finalText: string } {\n  const terminalError = getA2ATerminalErrorEvent(events);\n  const responseText = collectFinalResponseTextFromAgentEvents(events, {\n    fallbackToPreToolText: !terminalError,\n  });\n  const finalText = appendA2AArtifactLinks(responseText, [...toolResults], {\n    baseUrl: options.baseUrl ?? resolveArtifactBaseUrl(options.event),\n    includeReferencedArtifacts: true,\n    includePersistedArtifactMarker: true,\n  });\n  if (terminalError && !finalText.trim()) {\n    throw new Error(formatA2ATerminalError(terminalError));\n  }\n  return { responseText, finalText };\n}\n\nfunction getA2ATerminalErrorEvent(\n  events: readonly AgentChatEvent[],\n): Extract<AgentChatEvent, { type: \"error\" }> | null {\n  for (let i = events.length - 1; i >= 0; i--) {\n    const event = events[i];\n    if (event.type === \"clear\") continue;\n    if (event.type === \"done\") return null;\n    if (event.type === \"error\") return event;\n    if (event.type === \"auto_continue\") {\n      return {\n        type: \"error\",\n        error: `Agent stopped before finishing (${event.reason}).`,\n        errorCode: event.reason,\n        recoverable: true,\n      };\n    }\n  }\n  return null;\n}\n\nfunction formatA2ATerminalError(\n  event: Extract<AgentChatEvent, { type: \"error\" }>,\n): string {\n  const parts = [\n    event.error || \"Agent failed before producing a final response.\",\n    event.errorCode ? `code: ${event.errorCode}` : \"\",\n    event.details ? `details: ${event.details}` : \"\",\n  ].filter(Boolean);\n  return parts.join(\"\\n\");\n}\n\ntype A2AAgentLoopRunner = typeof runAgentLoopDirectWithSoftTimeout;\n\nexport interface DelegatedAgentLoopTelemetry {\n  runId: string;\n  threadId: string | null;\n  userId: string | null;\n  delegation: {\n    protocol: \"a2a\" | \"mcp\";\n    callerApp?: string;\n    taskId?: string;\n    parentRunId?: string;\n    parentTurnId?: string;\n  };\n}\n\ninterface DelegatedAgentLoopOptions {\n  runner?: A2AAgentLoopRunner;\n  telemetry?: DelegatedAgentLoopTelemetry;\n}\n\nasync function runDelegatedAgentLoop(\n  runOptions: Parameters<A2AAgentLoopRunner>[0],\n  pluginOptions: Pick<\n    AgentChatPluginOptions,\n    \"finalResponseGuard\" | \"runSoftTimeoutMs\"\n  >,\n  timeoutOptions: Parameters<A2AAgentLoopRunner>[2],\n  options: DelegatedAgentLoopOptions,\n) {\n  const runner = options.runner ?? runAgentLoopDirectWithSoftTimeout;\n  const resolvedRunOptions = {\n    ...runOptions,\n    // Delegated runs resolve their own model and do not pass through the\n    // interactive request handler's output-token setup. Use the same\n    // model-aware headroom here so reasoning models (notably GPT-5.x) do\n    // not spend the small internal default entirely on reasoning before\n    // emitting a tool call or answer. Preserve explicit test/caller values.\n    maxOutputTokens:\n      runOptions.maxOutputTokens ??\n      resolveMainChatMaxOutputTokens(runOptions.model),\n    reasoningEffort:\n      runOptions.reasoningEffort ??\n      resolveAgentRequestReasoningEffort({ model: runOptions.model }),\n    finalResponseGuard: pluginOptions.finalResponseGuard,\n  };\n  const execute = (loopOptions = resolvedRunOptions) =>\n    runner(loopOptions, pluginOptions.runSoftTimeoutMs, timeoutOptions);\n\n  if (!options.telemetry) return execute();\n\n  let instrumented = false;\n  try {\n    const { getObservabilityConfig, instrumentAgentLoop } =\n      await import(\"../../observability/traces.js\");\n    const config = await getObservabilityConfig();\n    if (config.enabled) {\n      instrumented = true;\n      return await instrumentAgentLoop({\n        runAgentLoop: (loopOptions) =>\n          execute(\n            loopOptions as Parameters<A2AAgentLoopRunner>[0] &\n              typeof resolvedRunOptions,\n          ),\n        loopOpts: resolvedRunOptions,\n        runId: options.telemetry.runId,\n        threadId: options.telemetry.threadId,\n        userId: options.telemetry.userId,\n        config,\n        delegation: options.telemetry.delegation,\n      });\n    }\n  } catch (error) {\n    // Match interactive chat: setup failures fall through, but a failure from\n    // inside an instrumented agent loop is the real run failure and rethrows.\n    if (instrumented) throw error;\n  }\n  return execute();\n}\n\n/**\n * Run an A2A-delegated agent turn with the same final-response guard used by\n * the app's interactive chat surface.\n *\n * Keeping this in one helper prevents delegated calls from silently bypassing\n * template guarantees such as Analytics' requirement to query real data\n * before presenting metrics or exhaustive provider conclusions.\n */\nexport function runA2AAgentLoop(\n  runOptions: Parameters<A2AAgentLoopRunner>[0],\n  pluginOptions: Pick<\n    AgentChatPluginOptions,\n    \"finalResponseGuard\" | \"runSoftTimeoutMs\"\n  >,\n  timeoutOptions: Parameters<A2AAgentLoopRunner>[2],\n  options: DelegatedAgentLoopOptions = {},\n) {\n  return runDelegatedAgentLoop(\n    runOptions,\n    pluginOptions,\n    timeoutOptions,\n    options,\n  );\n}\n\n/**\n * Run the MCP-local ask_app turn with the same app-level response guard as\n * A2A. Keeping this seam shared prevents hosted MCP callers from bypassing\n * template guarantees when the request cannot use the self-A2A route.\n */\nexport function runMCPAgentLoop(\n  runOptions: Parameters<A2AAgentLoopRunner>[0],\n  pluginOptions: Pick<\n    AgentChatPluginOptions,\n    \"finalResponseGuard\" | \"runSoftTimeoutMs\"\n  >,\n  timeoutOptions: Parameters<A2AAgentLoopRunner>[2],\n  options: DelegatedAgentLoopOptions = {},\n) {\n  return runDelegatedAgentLoop(\n    runOptions,\n    pluginOptions,\n    timeoutOptions,\n    options,\n  );\n}\n\n/**\n * Keep delegated A2A turns on the same compact initial tool surface as\n * interactive chat. `tool-search` remains in the initial set, while the\n * complete registry is supplied separately so the run loop can load a matched\n * schema after a tool-search result.\n */\nexport function createA2AEngineToolSurface(\n  availableTools: EngineTool[],\n  initialToolNames?: string[],\n): { tools: EngineTool[]; availableTools: EngineTool[] } {\n  return {\n    tools: filterInitialEngineTools(availableTools, initialToolNames),\n    availableTools,\n  };\n}\n\nexport function resolveInitialToolNames(\n  templateActions: Record<string, ActionEntry>,\n  configured?: string[],\n): string[] {\n  return configured ?? Object.keys(templateActions);\n}\n"]}
+{"version":3,"file":"action-filters-a2a.js","sourceRoot":"","sources":["../../../src/server/agent-chat/action-filters-a2a.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAE/B,OAAO,EACL,sBAAsB,GAGvB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,uCAAuC,EAAE,MAAM,4BAA4B,CAAC;AACrF,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AAErF,OAAO,EACL,wBAAwB,EACxB,kCAAkC,GAEnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AAExF,OAAO,EACL,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAGhE,8EAA8E;AAC9E,4EAA4E;AAC5E,uEAAuE;AACvE,oCAAoC;AACpC,8EAA8E;AAE9E,MAAM,UAAU,qBAAqB,CACnC,OAAoC;IAEpC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CACvE,CAAC;AACJ,CAAC;AAED;;;;2DAI2D;AAC3D,MAAM,UAAU,gBAAgB,CAC9B,OAAoC;IAEpC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAoC;IAEpC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC;QACjC,OAAO,CACL,MAAM,EAAE,MAAM,KAAK,IAAI;YACvB,MAAM,CAAC,QAAQ,KAAK,IAAI;YACxB,MAAM,CAAC,YAAY,KAAK,IAAI;YAC5B,MAAM,CAAC,eAAe,KAAK,IAAI,CAChC,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAoC,EACpC,OAA4E;IAE5E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,EAAE,kBAAkB,KAAK,MAAM,CAAC;IAExE,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC;QACnC,MAAM,QAAQ,GACZ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YACjB,CAAC,SAAS;gBACR,yBAAyB,CAAC,KAAK,CAAC;gBAChC,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,OAAO,CACL,QAAQ;YACR,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YACjB,KAAK,CAAC,SAAS,KAAK,KAAK;YACzB,KAAK,CAAC,QAAQ,KAAK,IAAI;YACvB,QAAQ,EAAE,MAAM,KAAK,IAAI;YACzB,QAAQ,CAAC,QAAQ,KAAK,IAAI;YAC1B,QAAQ,CAAC,YAAY,KAAK,IAAI;YAC9B,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC;YACpE,QAAQ,CAAC,eAAe,KAAK,IAAI,CAClC,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAoC;IAOpC,OAAO,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAC1D,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAClB,EAAE,EAAE,IAAI;QACR,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;QACnC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gCAAgC,CAC9C,OAAoC,EACpC,OAA4E;IAO5E,OAAO,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CACjE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAClB,EAAE,EAAE,IAAI;QACR,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;QACnC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAsB;IAEtB,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,OAAO;QACnB,OAAO,CAAC,GAAG,CAAC,GAAG;QACf,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC9B,IAAI,OAAO;QAAE,OAAO,yBAAyB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,mBAAmB,CAAC,IAAI,OAAO,CAAC;QAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,IAAI;YAAE,OAAO,yBAAyB,CAAC,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAiC,EACjC,WAA4C,EAC5C,OAAO,GAAiD,EAAE;IAE1D,MAAM,aAAa,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,uCAAuC,CAAC,MAAM,EAAE;QACnE,qBAAqB,EAAE,CAAC,aAAa;KACtC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,sBAAsB,CAAC,YAAY,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE;QACvE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC;QACjE,0BAA0B,EAAE,IAAI;QAChC,8BAA8B,EAAE,IAAI;KACrC,CAAC,CAAC;IACH,IAAI,aAAa,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAiC;IAEjC,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QACrC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACzC,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnC,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,mCAAmC,KAAK,CAAC,MAAM,IAAI;gBAC1D,SAAS,EAAE,KAAK,CAAC,MAAM;gBACvB,WAAW,EAAE,IAAI;aAClB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAiD;IAEjD,MAAM,KAAK,GAAG;QACZ,KAAK,CAAC,KAAK,IAAI,iDAAiD;QAChE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;QACjD,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;KACjD,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAsBD,KAAK,UAAU,qBAAqB,CAClC,UAA6C,EAC7C,aAGC,EACD,cAAiD,EACjD,OAAkC;IAElC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,iCAAiC,CAAC;IACnE,MAAM,kBAAkB,GAAG;QACzB,GAAG,UAAU;QACb,qEAAqE;QACrE,iEAAiE;QACjE,qEAAqE;QACrE,oEAAoE;QACpE,wEAAwE;QACxE,eAAe,EACb,UAAU,CAAC,eAAe;YAC1B,8BAA8B,CAAC,UAAU,CAAC,KAAK,CAAC;QAClD,eAAe,EACb,UAAU,CAAC,eAAe;YAC1B,kCAAkC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACjE,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;KACrD,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,WAAW,GAAG,kBAAkB,EAAE,EAAE,CACnD,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAEtE,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,OAAO,EAAE,CAAC;IAEzC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,GACnD,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,sBAAsB,EAAE,CAAC;QAC9C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO,MAAM,mBAAmB,CAAC;gBAC/B,YAAY,EAAE,CAAC,WAAW,EAAE,EAAE,CAC5B,OAAO,CACL,WAC2B,CAC5B;gBACH,QAAQ,EAAE,kBAAkB;gBAC5B,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK;gBAC9B,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ;gBACpC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;gBAChC,MAAM;gBACN,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,UAAU;aACzC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,YAAY;YAAE,MAAM,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,OAAO,EAAE,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,UAA6C,EAC7C,aAGC,EACD,cAAiD,EACjD,OAAO,GAA8B,EAAE;IAEvC,OAAO,qBAAqB,CAC1B,UAAU,EACV,aAAa,EACb,cAAc,EACd,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,UAA6C,EAC7C,aAGC,EACD,cAAiD,EACjD,OAAO,GAA8B,EAAE;IAEvC,OAAO,qBAAqB,CAC1B,UAAU,EACV,aAAa,EACb,cAAc,EACd,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,cAA4B,EAC5B,gBAA2B;IAE3B,OAAO;QACL,KAAK,EAAE,wBAAwB,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACjE,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,eAA4C,EAC5C,UAAqB;IAErB,OAAO,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AACpD,CAAC","sourcesContent":["import { getHeader } from \"h3\";\n\nimport {\n  appendA2AArtifactLinks,\n  type A2AArtifactResponseOptions,\n  type A2AToolResultSummary,\n} from \"../../a2a/artifact-response.js\";\nimport { collectFinalResponseTextFromAgentEvents } from \"../../a2a/response-text.js\";\nimport { resolveMainChatMaxOutputTokens } from \"../../agent/engine/output-tokens.js\";\nimport type { EngineTool } from \"../../agent/engine/types.js\";\nimport {\n  filterInitialEngineTools,\n  resolveAgentRequestReasoningEffort,\n  type ActionEntry,\n} from \"../../agent/production-agent.js\";\nimport { runAgentLoopDirectWithSoftTimeout } from \"../../agent/run-loop-with-resume.js\";\nimport type { AgentChatEvent } from \"../../agent/types.js\";\nimport {\n  isAuthenticatedReadAction,\n  isAutoReadExcludedActionName,\n} from \"../../mcp/build-server.js\";\nimport { withConfiguredAppBasePath } from \"../app-base-path.js\";\nimport type { AgentChatPluginOptions } from \"./plugin-options.js\";\n\n// ---------------------------------------------------------------------------\n// Action-visibility filters (read-only / agent-exposed / public-agent-safe)\n// and the A2A (agent-to-agent) final-response assembly + delegated-run\n// helpers that share those filters.\n// ---------------------------------------------------------------------------\n\nexport function filterReadOnlyActions(\n  actions: Record<string, ActionEntry>,\n): Record<string, ActionEntry> {\n  return Object.fromEntries(\n    Object.entries(actions).filter(([, entry]) => entry.readOnly === true),\n  );\n}\n\n/** Drop actions that opted out of agent exposure via `agentTool: false`. They\n *  remain callable from the frontend / HTTP (mounted separately from this\n *  agent tool surface — see `httpActions`) but never appear in any agent tool\n *  list (in-app assistant, MCP, A2A, job/trigger runners) or actions prompt.\n *  Default-allow: only an explicit `false` is excluded. */\nexport function filterAgentTools(\n  actions: Record<string, ActionEntry>,\n): Record<string, ActionEntry> {\n  return Object.fromEntries(\n    Object.entries(actions).filter(([, entry]) => entry.agentTool !== false),\n  );\n}\n\nexport function filterPublicAgentActions(\n  actions: Record<string, ActionEntry>,\n): Record<string, ActionEntry> {\n  return Object.fromEntries(\n    Object.entries(actions).filter(([, entry]) => {\n      const config = entry.publicAgent;\n      return (\n        config?.expose === true &&\n        config.readOnly === true &&\n        config.requiresAuth !== true &&\n        config.isConsequential !== true\n      );\n    }),\n  );\n}\n\n/**\n * Direct A2A action calls share the authenticated external-agent policy with\n * MCP, but remain stricter: only explicitly exposed, authenticated read-only\n * actions can skip the receiver's model loop.\n */\nexport function filterDirectA2AActions(\n  actions: Record<string, ActionEntry>,\n  options: Pick<AgentChatPluginOptions, \"connectorCatalog\" | \"externalAgents\">,\n): Record<string, ActionEntry> {\n  const catalog = new Set(options.connectorCatalog ?? []);\n  const denied = new Set(options.externalAgents?.denyActions ?? []);\n  const autoReads = options.externalAgents?.authenticatedReads === \"auto\";\n\n  return Object.fromEntries(\n    Object.entries(actions).filter(([name, entry]) => {\n      const exposure = entry.publicAgent;\n      const selected =\n        catalog.has(name) ||\n        (autoReads &&\n          isAuthenticatedReadAction(entry) &&\n          !isAutoReadExcludedActionName(name));\n      return (\n        selected &&\n        !denied.has(name) &&\n        entry.agentTool !== false &&\n        entry.readOnly === true &&\n        exposure?.expose === true &&\n        exposure.readOnly === true &&\n        exposure.requiresAuth === true &&\n        (entry.needsApproval === undefined || entry.needsApproval === false) &&\n        exposure.isConsequential !== true\n      );\n    }),\n  );\n}\n\nexport function buildPublicAgentA2ASkills(\n  actions: Record<string, ActionEntry>,\n): Array<{\n  id: string;\n  name: string;\n  description: string;\n  publicAgent: ActionEntry[\"publicAgent\"];\n}> {\n  return Object.entries(filterPublicAgentActions(actions)).map(\n    ([name, entry]) => ({\n      id: name,\n      name,\n      description: entry.tool.description,\n      publicAgent: entry.publicAgent,\n    }),\n  );\n}\n\n/**\n * Skills for a caller with a verified A2A identity: exactly what\n * `filterDirectA2AActions` will execute. Kept separate from\n * `buildPublicAgentA2ASkills` because the public card may only name actions\n * with `requiresAuth !== true` while direct invocation requires\n * `requiresAuth === true` — advertising the public set alone tells siblings\n * an app has nothing callable when it does.\n */\nexport function buildAuthenticatedAgentA2ASkills(\n  actions: Record<string, ActionEntry>,\n  options: Pick<AgentChatPluginOptions, \"connectorCatalog\" | \"externalAgents\">,\n): Array<{\n  id: string;\n  name: string;\n  description: string;\n  publicAgent: ActionEntry[\"publicAgent\"];\n}> {\n  return Object.entries(filterDirectA2AActions(actions, options)).map(\n    ([name, entry]) => ({\n      id: name,\n      name,\n      description: entry.tool.description,\n      publicAgent: entry.publicAgent,\n    }),\n  );\n}\n\nexport function resolveArtifactBaseUrl(\n  event: any | undefined,\n): string | undefined {\n  const fromEnv =\n    process.env.APP_URL ||\n    process.env.URL ||\n    process.env.DEPLOY_URL ||\n    process.env.BETTER_AUTH_URL;\n  if (fromEnv) return withConfiguredAppBasePath(String(fromEnv));\n\n  try {\n    const proto = getHeader(event, \"x-forwarded-proto\") || \"https\";\n    const host = getHeader(event, \"host\");\n    if (host) return withConfiguredAppBasePath(`${proto}://${host}`);\n  } catch {}\n\n  return undefined;\n}\n\nexport function assembleA2AFinalResponse(\n  events: readonly AgentChatEvent[],\n  toolResults: readonly A2AToolResultSummary[],\n  options: A2AArtifactResponseOptions & { event?: any } = {},\n): { responseText: string; finalText: string } {\n  const terminalError = getA2ATerminalErrorEvent(events);\n  const responseText = collectFinalResponseTextFromAgentEvents(events, {\n    fallbackToPreToolText: !terminalError,\n  });\n  const finalText = appendA2AArtifactLinks(responseText, [...toolResults], {\n    baseUrl: options.baseUrl ?? resolveArtifactBaseUrl(options.event),\n    includeReferencedArtifacts: true,\n    includePersistedArtifactMarker: true,\n  });\n  if (terminalError && !finalText.trim()) {\n    throw new Error(formatA2ATerminalError(terminalError));\n  }\n  return { responseText, finalText };\n}\n\nfunction getA2ATerminalErrorEvent(\n  events: readonly AgentChatEvent[],\n): Extract<AgentChatEvent, { type: \"error\" }> | null {\n  for (let i = events.length - 1; i >= 0; i--) {\n    const event = events[i];\n    if (event.type === \"clear\") continue;\n    if (event.type === \"done\") return null;\n    if (event.type === \"error\") return event;\n    if (event.type === \"auto_continue\") {\n      return {\n        type: \"error\",\n        error: `Agent stopped before finishing (${event.reason}).`,\n        errorCode: event.reason,\n        recoverable: true,\n      };\n    }\n  }\n  return null;\n}\n\nfunction formatA2ATerminalError(\n  event: Extract<AgentChatEvent, { type: \"error\" }>,\n): string {\n  const parts = [\n    event.error || \"Agent failed before producing a final response.\",\n    event.errorCode ? `code: ${event.errorCode}` : \"\",\n    event.details ? `details: ${event.details}` : \"\",\n  ].filter(Boolean);\n  return parts.join(\"\\n\");\n}\n\ntype A2AAgentLoopRunner = typeof runAgentLoopDirectWithSoftTimeout;\n\nexport interface DelegatedAgentLoopTelemetry {\n  runId: string;\n  threadId: string | null;\n  userId: string | null;\n  delegation: {\n    protocol: \"a2a\" | \"mcp\";\n    callerApp?: string;\n    taskId?: string;\n    parentRunId?: string;\n    parentTurnId?: string;\n  };\n}\n\ninterface DelegatedAgentLoopOptions {\n  runner?: A2AAgentLoopRunner;\n  telemetry?: DelegatedAgentLoopTelemetry;\n}\n\nasync function runDelegatedAgentLoop(\n  runOptions: Parameters<A2AAgentLoopRunner>[0],\n  pluginOptions: Pick<\n    AgentChatPluginOptions,\n    \"finalResponseGuard\" | \"runSoftTimeoutMs\"\n  >,\n  timeoutOptions: Parameters<A2AAgentLoopRunner>[2],\n  options: DelegatedAgentLoopOptions,\n) {\n  const runner = options.runner ?? runAgentLoopDirectWithSoftTimeout;\n  const resolvedRunOptions = {\n    ...runOptions,\n    // Delegated runs resolve their own model and do not pass through the\n    // interactive request handler's output-token setup. Use the same\n    // model-aware headroom here so reasoning models (notably GPT-5.x) do\n    // not spend the small internal default entirely on reasoning before\n    // emitting a tool call or answer. Preserve explicit test/caller values.\n    maxOutputTokens:\n      runOptions.maxOutputTokens ??\n      resolveMainChatMaxOutputTokens(runOptions.model),\n    reasoningEffort:\n      runOptions.reasoningEffort ??\n      resolveAgentRequestReasoningEffort({ model: runOptions.model }),\n    finalResponseGuard: pluginOptions.finalResponseGuard,\n  };\n  const execute = (loopOptions = resolvedRunOptions) =>\n    runner(loopOptions, pluginOptions.runSoftTimeoutMs, timeoutOptions);\n\n  if (!options.telemetry) return execute();\n\n  let instrumented = false;\n  try {\n    const { getObservabilityConfig, instrumentAgentLoop } =\n      await import(\"../../observability/traces.js\");\n    const config = await getObservabilityConfig();\n    if (config.enabled) {\n      instrumented = true;\n      return await instrumentAgentLoop({\n        runAgentLoop: (loopOptions) =>\n          execute(\n            loopOptions as Parameters<A2AAgentLoopRunner>[0] &\n              typeof resolvedRunOptions,\n          ),\n        loopOpts: resolvedRunOptions,\n        runId: options.telemetry.runId,\n        threadId: options.telemetry.threadId,\n        userId: options.telemetry.userId,\n        config,\n        delegation: options.telemetry.delegation,\n      });\n    }\n  } catch (error) {\n    // Match interactive chat: setup failures fall through, but a failure from\n    // inside an instrumented agent loop is the real run failure and rethrows.\n    if (instrumented) throw error;\n  }\n  return execute();\n}\n\n/**\n * Run an A2A-delegated agent turn with the same final-response guard used by\n * the app's interactive chat surface.\n *\n * Keeping this in one helper prevents delegated calls from silently bypassing\n * template guarantees such as Analytics' requirement to query real data\n * before presenting metrics or exhaustive provider conclusions.\n */\nexport function runA2AAgentLoop(\n  runOptions: Parameters<A2AAgentLoopRunner>[0],\n  pluginOptions: Pick<\n    AgentChatPluginOptions,\n    \"finalResponseGuard\" | \"runSoftTimeoutMs\"\n  >,\n  timeoutOptions: Parameters<A2AAgentLoopRunner>[2],\n  options: DelegatedAgentLoopOptions = {},\n) {\n  return runDelegatedAgentLoop(\n    runOptions,\n    pluginOptions,\n    timeoutOptions,\n    options,\n  );\n}\n\n/**\n * Run the MCP-local ask_app turn with the same app-level response guard as\n * A2A. Keeping this seam shared prevents hosted MCP callers from bypassing\n * template guarantees when the request cannot use the self-A2A route.\n */\nexport function runMCPAgentLoop(\n  runOptions: Parameters<A2AAgentLoopRunner>[0],\n  pluginOptions: Pick<\n    AgentChatPluginOptions,\n    \"finalResponseGuard\" | \"runSoftTimeoutMs\"\n  >,\n  timeoutOptions: Parameters<A2AAgentLoopRunner>[2],\n  options: DelegatedAgentLoopOptions = {},\n) {\n  return runDelegatedAgentLoop(\n    runOptions,\n    pluginOptions,\n    timeoutOptions,\n    options,\n  );\n}\n\n/**\n * Keep delegated A2A turns on the same compact initial tool surface as\n * interactive chat. `tool-search` remains in the initial set, while the\n * complete registry is supplied separately so the run loop can load a matched\n * schema after a tool-search result.\n */\nexport function createA2AEngineToolSurface(\n  availableTools: EngineTool[],\n  initialToolNames?: string[],\n): { tools: EngineTool[]; availableTools: EngineTool[] } {\n  return {\n    tools: filterInitialEngineTools(availableTools, initialToolNames),\n    availableTools,\n  };\n}\n\nexport function resolveInitialToolNames(\n  templateActions: Record<string, ActionEntry>,\n  configured?: string[],\n): string[] {\n  return configured ?? Object.keys(templateActions);\n}\n"]}

package/dist/server/agent-chat-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-chat-plugin.d.ts","sourceRoot":"","sources":["../../src/server/agent-chat-plugin.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAwH7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAEvE,OAAO,EACL,yBAAyB,EACzB,KAAK,6BAA6B,EACnC,MAAM,+BAA+B,CAAC;AAkCvC,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,YAAY,EAAE,6BAA6B,EAAE,CAAC;AAwE9C,OAAO,EACL,0BAA0B,EAM1B,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,yBAAyB,EAE1B,MAAM,oCAAoC,CAAC;AAW5C,OAAO,EACL,gCAAgC,EAOjC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,yCAAyC,EAAE,MAAM,qCAAqC,CAAC;AAChG,OAAO,EACL,sBAAsB,EAGvB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iCAAiC,EAAE,MAAM,wCAAwC,CAAC;AAC3F,OAAO,EAEL,sCAAsC,EACvC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAYxE,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,gCAAgC,EAAE,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,CAAC;AACpC,YAAY,EAAE,sBAAsB,EAAE,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,CAAC;AACtC,OAAO,EAAE,sCAAsC,EAAE,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,iCAAiC,EAAE,CAAC;AAC7C,OAAO,EAAE,yCAAyC,EAAE,CAAC;AAErD,wBAAgB,iCAAiC,CAC/C,OAAO,CAAC,EAAE,IAAI,CACZ,sBAAsB,EACtB,kBAAkB,GAAG,wBAAwB,GAAG,uBAAuB,CACxE;IAGC,gBAAgB;IAChB,sBAAsB;IACtB,qBAAqB;EAExB;AAED,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,MAAM,EACd,WAAW,GAAE,CACX,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,UAAU,KAChB,OAAO,CAAC,IAAI,CAA2B,EAC5C,OAAO,GAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAK5B,GACA;IACD,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,CAAC;IACvC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B,CAqCA;AAID,wBAAsB,mCAAmC,CACvD,KAAK,GAAE,MAAM,GAAG,IAAI,GAAG,SAA6B,GACnD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAU7B;AAED,wBAAgB,wBAAwB,CACtC,6BAA6B,EAAE,MAAM,EACrC,sBAAsB,EAAE,MAAM,GAC7B,MAAM,CAER;AAaD;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,aAKlC,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,oBAAoB,EAAE,GAAG,SAAS,EAChD,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IACJ,eAAe,EAAE,CACf,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9B,uBAAuB,EAAE,CACvB,GAAG,EAAE,oBAAoB,KACtB,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;CAC/B,GACA,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAI1B;AAED,wBAAgB,qBAAqB,CACnC,OAAO,CAAC,EAAE,sBAAsB,GAC/B,cAAc,CAy6KhB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAwC,CAAC;AAE9E,OAAO,EAEL,mBAAmB,EACnB,uBAAuB,EAGxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,CAAC"}
+{"version":3,"file":"agent-chat-plugin.d.ts","sourceRoot":"","sources":["../../src/server/agent-chat-plugin.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAyH7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAEvE,OAAO,EACL,yBAAyB,EACzB,KAAK,6BAA6B,EACnC,MAAM,+BAA+B,CAAC;AAkCvC,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,YAAY,EAAE,6BAA6B,EAAE,CAAC;AAwE9C,OAAO,EACL,0BAA0B,EAM1B,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,yBAAyB,EAG1B,MAAM,oCAAoC,CAAC;AAW5C,OAAO,EACL,gCAAgC,EAOjC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,yCAAyC,EAAE,MAAM,qCAAqC,CAAC;AAChG,OAAO,EACL,sBAAsB,EAGvB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iCAAiC,EAAE,MAAM,wCAAwC,CAAC;AAC3F,OAAO,EAEL,sCAAsC,EACvC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAYxE,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,gCAAgC,EAAE,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,CAAC;AACpC,YAAY,EAAE,sBAAsB,EAAE,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,CAAC;AACtC,OAAO,EAAE,sCAAsC,EAAE,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,iCAAiC,EAAE,CAAC;AAC7C,OAAO,EAAE,yCAAyC,EAAE,CAAC;AAErD,wBAAgB,iCAAiC,CAC/C,OAAO,CAAC,EAAE,IAAI,CACZ,sBAAsB,EACtB,kBAAkB,GAAG,wBAAwB,GAAG,uBAAuB,CACxE;IAGC,gBAAgB;IAChB,sBAAsB;IACtB,qBAAqB;EAExB;AAED,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,MAAM,EACd,WAAW,GAAE,CACX,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,UAAU,KAChB,OAAO,CAAC,IAAI,CAA2B,EAC5C,OAAO,GAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAK5B,GACA;IACD,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,CAAC;IACvC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B,CAqCA;AAID,wBAAsB,mCAAmC,CACvD,KAAK,GAAE,MAAM,GAAG,IAAI,GAAG,SAA6B,GACnD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAU7B;AAED,wBAAgB,wBAAwB,CACtC,6BAA6B,EAAE,MAAM,EACrC,sBAAsB,EAAE,MAAM,GAC7B,MAAM,CAER;AAaD;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,aAKlC,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,oBAAoB,EAAE,GAAG,SAAS,EAChD,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IACJ,eAAe,EAAE,CACf,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9B,uBAAuB,EAAE,CACvB,GAAG,EAAE,oBAAoB,KACtB,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;CAC/B,GACA,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAI1B;AAED,wBAAgB,qBAAqB,CACnC,OAAO,CAAC,EAAE,sBAAsB,GAC/B,cAAc,CAy7KhB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAwC,CAAC;AAE9E,OAAO,EAEL,mBAAmB,EACnB,uBAAuB,EAGxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/server/agent-chat-plugin.js

@@ -19,6 +19,7 @@ import { buildCurrentTimeUserContext, buildRuntimeContextPrompt, } from "../agen
 import { buildAssistantMessage, buildUserMessage, extractThreadMeta, foldAssistantTurn, mergeThreadDataForClientSave, upsertUserMessage, } from "../agent/thread-data-builder.js";
 import { attachToolSearch } from "../agent/tool-search.js";
 import { readAppStateForCurrentTab } from "../application-state/script-helpers.js";
+import { runChatThreadDataMigrations } from "../chat-threads/migrations.js";
 import { createThread, forkThread, getThread, registerChatThreadsShareable, resolveThreadAccess, listThreads, searchThreads, renameThread, createThreadShareLink, getThreadByShareToken, getThreadShareState, revokeThreadShareLink, setThreadArchived, setThreadPinned, setThreadScope, updateThreadData, withThreadDataLock, deleteThread, setThreadQueuedMessages, } from "../chat-threads/store.js";
 import { isCheckpointRestorePath } from "../checkpoints/route-match.js";
 import { createDbAdminAgentTools } from "../db-admin/agent-tools.js";
@@ -101,7 +102,7 @@ import { buildSystemManifestSections, setContextXraySystemSections, } from "../a
 // the ones that were already part of the public surface) so
 // `createAgentChatPlugin` below stays a thinner orchestrator.
 // ---------------------------------------------------------------------------
-import { createA2AEngineToolSurface, filterAgentTools, filterPublicAgentActions, filterDirectA2AActions, filterReadOnlyActions, resolveInitialToolNames, runA2AAgentLoop, runMCPAgentLoop, assembleA2AFinalResponse, buildPublicAgentA2ASkills, resolveArtifactBaseUrl, } from "./agent-chat/action-filters-a2a.js";
+import { createA2AEngineToolSurface, filterAgentTools, filterPublicAgentActions, filterDirectA2AActions, filterReadOnlyActions, resolveInitialToolNames, runA2AAgentLoop, runMCPAgentLoop, assembleA2AFinalResponse, buildPublicAgentA2ASkills, buildAuthenticatedAgentA2ASkills, resolveArtifactBaseUrl, } from "./agent-chat/action-filters-a2a.js";
 import { createBuilderBrowserTool, createTeamTools, } from "./agent-chat/browser-team-tools.js";
 import { createDataWidgetActionEntries, createFrameworkContextEntry, createRefreshScreenEntry, createUrlTools, } from "./agent-chat/context-tools.js";
 import { _agentChatPromptSectionsForTests, buildFrameworkPrompts, buildSchemaBlock, collectFiles, corpusToolNamesTaughtByPrompt, generateActionsPrompt, generateCorpusToolsPrompt, } from "./agent-chat/framework-prompts.js";
@@ -951,6 +952,7 @@ export function createAgentChatPlugin(options) {
                     : "Agent",
                 description: `Agent-native ${options?.appId ?? "app"} agent`,
                 skills: buildPublicAgentA2ASkills(allScripts),
+                authenticatedSkills: buildAuthenticatedAgentA2ASkills(mcpFullActions ?? allScripts, options ?? {}),
                 publicSkillsOnly: true,
                 streaming: true,
                 durableBackgroundRuns: options?.durableBackgroundRuns,
@@ -4791,6 +4793,14 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                     }, 30_000); // Check every 30s but only sweep once per 2min
                 }, 20_000); // Start 20s after init (after the agent-teams sweep)
             })();
+            // ─── Legacy chat-thread message_count repair ──────────────────────
+            // Long-lived processes apply this name-tracked data migration once.
+            // Serverless isolates skip it: launching a full thread_data scan from
+            // every cold start would recreate the connection stampede this repair
+            // was extracted from table bootstrap to prevent.
+            void runChatThreadDataMigrations(nitroApp).catch((err) => {
+                console.error("[chat-threads] legacy message_count repair failed — retrying on the next long-lived boot:", err);
+            });
             // ─── Trigger Dispatcher (event-based automations) ─────────────────
             if (disableRecurringJobsRuntime) {
                 if (process.env.DEBUG) {