@agent-native/core 0.130.1 → 0.131.2

package/dist/server/agent-chat/plugin-options.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-options.js","sourceRoot":"","sources":["../../../src/server/agent-chat/plugin-options.ts"],"names":[],"mappings":"","sourcesContent":["import type { ActionEntry } from \"../../agent/production-agent.js\";\nimport type { AgentLoopFinalResponseGuard } from \"../../agent/production-agent.js\";\nimport type {\n  AgentChatAttachment,\n  AgentChatReference,\n  MentionProvider,\n} from \"../../agent/types.js\";\nimport type { ExternalAgentPolicy } from \"../../mcp/external-agent-policy.js\";\nimport type { DatabaseToolsOption } from \"../../scripts/db/tool-mode.js\";\nimport type { PromptExamples } from \"../prompts/index.js\";\n\n/** Shape of a Nitro plugin function: receives the Nitro app instance at\n * startup and may register routes/hooks synchronously or asynchronously. */\nexport type NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\nexport interface AgentChatPluginOptions {\n  /** Template-specific actions (email ops, booking ops, etc.) */\n  actions?:\n    | Record<string, ActionEntry>\n    | (() =>\n        | Record<string, ActionEntry>\n        | Promise<Record<string, ActionEntry>>);\n  /** @deprecated Use `actions` instead */\n  scripts?:\n    | Record<string, ActionEntry>\n    | (() =>\n        | Record<string, ActionEntry>\n        | Promise<Record<string, ActionEntry>>);\n  /** System prompt for the agent. A sensible default is provided. */\n  systemPrompt?: string;\n  /** Additional system prompt prepended in dev mode */\n  devSystemPrompt?: string;\n  /** Model to use. Defaults to the resolved engine's default model. */\n  model?: string;\n  /** Optional per-app agent run chunk budget in milliseconds. Defaults to\n   * AGENT_RUN_SOFT_TIMEOUT_MS when set, otherwise no framework-imposed\n   * timeout. When reached, long runs continue through the hidden continuation\n   * path instead of surfacing a timeout warning. */\n  runSoftTimeoutMs?: number;\n  /** Optional per-app run-manager no-progress watchdog in milliseconds. */\n  runNoProgressTimeoutMs?: number;\n  /**\n   * Opt this app into Netlify durable background-function agent-chat runs. This\n   * gives hosted agent turns the 15-minute async-function budget when the app's\n   * Netlify build also emits the background function. Set this to `false` to\n   * explicitly disable a stale deploy-wide `AGENT_CHAT_DURABLE_BACKGROUND`\n   * flag for this app.\n   */\n  durableBackgroundRuns?: boolean;\n  /** Anthropic API key. Falls back to ANTHROPIC_API_KEY env var */\n  apiKey?: string;\n  /**\n   * Agent engine to use. Can be a pre-constructed AgentEngine, a registered\n   * engine name (e.g. \"anthropic\", \"ai-sdk:openai\"), or an object with name\n   * and config. Defaults to the \"anthropic\" engine using ANTHROPIC_API_KEY.\n   */\n  engine?:\n    | import(\"../../agent/engine/types.js\").AgentEngine\n    | string\n    | { name: string; config: Record<string, unknown> };\n  /** Route path. Default: /_agent-native/agent-chat */\n  path?: string;\n  /** Custom mention providers for @-tagging template entities */\n  mentionProviders?:\n    | Record<string, MentionProvider>\n    | (() =>\n        | Record<string, MentionProvider>\n        | Promise<Record<string, MentionProvider>>);\n  /** App ID used to exclude self from agent discovery (e.g., \"mail\", \"calendar\") */\n  appId?: string;\n  /** Optional MCP server branding surfaced during the initialize handshake. */\n  mcpServerInfo?: {\n    /** Human-facing title. Defaults to the capitalized app id/name. */\n    title?: string;\n    /** Host-facing description. Defaults to \"Agent-native <app> agent\". */\n    description?: string;\n    /** Canonical app URL. Relative URLs are resolved against the request origin. */\n    websiteUrl?: string;\n    /** App icons. Relative `src` values are resolved against the request origin. */\n    icons?: Array<{\n      src: string;\n      mimeType?: string;\n      sizes?: string[];\n      theme?: \"light\" | \"dark\";\n    }>;\n  };\n  /**\n   * Optional callback to resolve the org ID for the current request.\n   * When provided, the resolved value is set as AGENT_ORG_ID env var so\n   * that db-query/db-exec automatically scope by org_id in addition to\n   * owner_email.\n   *\n   * If not provided, the framework automatically uses `session.orgId` from\n   * Better Auth's active organization. Only provide this callback when you\n   * need custom org resolution logic (e.g., Atlassian org mapping).\n   */\n  resolveOrgId?: (event: any) => string | null | Promise<string | null>;\n  /**\n   * Optional owner resolver for public/anonymous chat surfaces. When the\n   * normal app session is missing, this callback may return a synthetic\n   * owner id for a narrowly-scoped public request (for example, a public\n   * shared document page). Anonymous requests use a read-only tool set by\n   * default so public viewers cannot mutate app data through the agent.\n   */\n  anonymousOwner?: (event: any) => string | null | Promise<string | null>;\n  /**\n   * Keep anonymous-owner requests on read-only template actions. Defaults to\n   * true. Only disable for single-tenant apps that intentionally allow public\n   * agent mutations.\n   */\n  anonymousReadOnly?: boolean;\n  /**\n   * Optional auth adapter for the HTTP action route\n   * (`/_agent-native/actions/*`). Its `resolveCaller` runs before the\n   * cookie/bearer `getSession` chain, letting an app accept caller identities\n   * `getSession` doesn't understand (e.g. an A2A JWT verified with\n   * `verifyA2AToken`) declaratively, instead of pre-seeding request context\n   * from a Nitro `request` hook.\n   *\n   * Returning `null` defers to the normal chain; THROWING hard-rejects with a\n   * 401 (an invalid/forged credential must not fall through to a same-origin\n   * session cookie). A resolved caller's org comes exclusively from the\n   * verified credential — the returned `orgId` or the owner-email membership\n   * lookup — never from the request's session cookie.\n   * See {@link import(\"../action-routes.js\").ActionRouteAuthAdapter}.\n   */\n  actionRouteAuth?: import(\"../action-routes.js\").ActionRouteAuthAdapter;\n  /**\n   * Optional callback to append template-specific context to the system\n   * prompt on each request. Runs after AGENTS.md / skills / memory are\n   * loaded and before the schema block — use it to inject dynamic SQL\n   * context like a data dictionary, active feature flags, or whatever\n   * the agent should know about *right now* for this user/org.\n   *\n   * Return `null` or an empty string to skip. The string you return is\n   * appended verbatim, so wrap it in your own XML tags (e.g.\n   * `<data-dictionary>…</data-dictionary>`) to keep the prompt scannable.\n   *\n   * Called on every request in every prompt variant (lean, lazy, full).\n   * Templates that want to suppress it in a particular mode should return\n   * `null` from the callback based on their own logic.\n   */\n  extraContext?: (\n    event: any,\n    owner: string,\n  ) => string | null | Promise<string | null>;\n  /**\n   * Optional final-answer guard. Templates can use this to require a\n   * corrective retry before accepting a text-only final answer, e.g. forcing\n   * real data-source tool calls for analytics requests.\n   */\n  finalResponseGuard?: AgentLoopFinalResponseGuard;\n  /**\n   * Optional per-template request normalizer. Runs after authentication and\n   * before the model sees the message, so apps can translate chat attachments\n   * into template-native file handles while preserving the user's visible text.\n   */\n  prepareRequest?: (details: {\n    event: any;\n    ownerEmail: string | null;\n    message: string;\n    displayMessage?: string;\n    attachments: AgentChatAttachment[];\n    references: AgentChatReference[];\n    threadId?: string;\n    internalContinuation?: boolean;\n    mode: \"act\" | \"plan\";\n  }) =>\n    | void\n    | {\n        message?: string;\n        displayMessage?: string;\n        attachments?: AgentChatAttachment[];\n      }\n    | Promise<void | {\n        message?: string;\n        displayMessage?: string;\n        attachments?: AgentChatAttachment[];\n      }>;\n  /**\n   * Use ONLY the template's `systemPrompt` and the actions list — skip the\n   * framework prompt wrapper, resource loading (AGENTS.md/LEARNINGS.md/\n   * memory), the SQL schema block, and the workspace files/skills/agents\n   * inventory. Intended for minimal or voice-first apps where a long,\n   * generic preamble adds latency and iteration noise without adding value.\n   *\n   * When set, the same lean prompt is used in both dev and prod modes. In\n   * dev mode the tool registry is ALSO swapped to the template's actions\n   * (same set as prod) — the dev-only bash/db-exec/file-system tools\n   * and the resource/docs/chat/team/job/browser scripts are dropped. The\n   * lean system prompt has no bash-usage guidance, so routing actions\n   * through bash would break. If you need the full dev tool surface,\n   * leave this off.\n   */\n  leanPrompt?: boolean;\n  /**\n   * Skip auto-injecting the workspace files/skills/agents inventory on the\n   * first message of a conversation while keeping the normal prompt, resources,\n   * and tool surface. Use this for domain-focused apps where broad workspace\n   * inventory is mostly latency/noise unless the user explicitly references it.\n   *\n   * `leanPrompt: true` and the default `lazyContext` mode imply this because\n   * those catalogs are already discoverable through resources, docs-search,\n   * tool-search, and the compact resource indexes. Set `false` explicitly only\n   * when a workspace-wide inventory is central to the app's first-turn job.\n   */\n  skipFilesContext?: boolean;\n  /**\n   * Initial native tool schemas to send to the LLM provider. When set, the\n   * agent starts with only these tools plus `tool-search`; the live registry\n   * remains searchable, and matching schemas from `tool-search` results are\n   * loaded into the next model request. Use this for domain-focused apps that\n   * have a few common actions and many rare framework utilities. Common\n   * discovery and resource-reading tools are promoted automatically when\n   * present. Provider, MCP, extension, and code-execution schemas stay behind\n   * tool-search unless the app explicitly includes them in this list.\n   */\n  initialToolNames?: string[];\n  /**\n   * Controls whether broad provider/corpus tools and their workflow prompt are\n   * loaded into the first model request. Use `\"lazy\"` for apps that can answer\n   * ordinary lookups from a compact curated tool set; corpus tools remain\n   * discoverable through tool-search and the full retry surface.\n   *\n   * @default \"initial\"\n   */\n  corpusTools?: \"initial\" | \"lazy\";\n  /**\n   * Use a compact system prompt with on-demand context loading. The system\n   * prompt includes essential behavioral rules and action signatures, but\n   * defers verbose framework details, SQL schema, skills, learnings, and\n   * memory behind tools (`get-framework-context`, `db-schema`,\n   * `resources` (action: read)). The agent fetches these on-demand when needed.\n   *\n   * This reduces the system prompt by ~60-70%, significantly improving\n   * time-to-first-token and reducing \"thinking\" time. The agent retains\n   * all capabilities — it just loads context lazily instead of upfront.\n   *\n   * Defaults to `true`. Set to `false` to use the original full prompt.\n   * Ignored when `leanPrompt` is set (lean mode is even more minimal).\n   */\n  lazyContext?: boolean;\n  /**\n   * In dev mode, register the template's actions as native tools the agent\n   * can call directly with structured JSON args — skipping the default\n   * `bash(command=\"pnpm action <name> ...\")` indirection.\n   *\n   * The default dev behavior shells out because it \"mirrors how Claude Code\n   * works locally\" and reduces empty-object tool calls for templates with\n   * simple string args. But templates whose actions take structured data\n   * (objects, arrays, nested JSON) can't round-trip those cleanly through\n   * the CLI parser — stringified JSON on the way in, loss of type fidelity\n   * on the way out.\n   *\n   * Set to `true` to get the same tool surface in dev that production uses.\n   * `leanPrompt: true` implies this already (lean mode has no bash-usage\n   * guidance, so actions must be native). Set this flag without\n   * `leanPrompt` when you want native actions AND the full system prompt.\n   *\n   * Defaults to `false`.\n   */\n  nativeActionsInDev?: boolean;\n  /**\n   * Expose raw SQL/native database tools to the app agent.\n   *\n   * Defaults to `\"read\"`: `db-schema`/`db-query` are available for inspection,\n   * while writes route through typed app actions. Set to `\"write\"` (also\n   * `true`) to expose `db-exec`/`db-patch` for scoped raw SQL maintenance.\n   * Set to `\"off\"` (also `false`) for chat-first apps that want agents to use\n   * typed actions only.\n   */\n  databaseTools?: DatabaseToolsOption;\n  /**\n   * Expose framework extension management actions (`create-extension`,\n   * `update-extension`, `list-extensions`, etc.) to the app agent. Defaults to\n   * true. Set to false for apps that do not want the LLM to create or manage\n   * sandboxed extension mini-apps, even though the core extension routes may\n   * still be mounted for other surfaces.\n   */\n  extensionTools?: boolean;\n  /**\n   * Optional A2A-only deterministic response path. Runs after inbound A2A text\n   * and user context are resolved, but before an agent engine/model is loaded.\n   * Return a message to complete the A2A task without invoking the LLM, or\n   * null/undefined to continue through the normal agent loop.\n   */\n  a2aMessageFallback?: (details: {\n    message: import(\"../../a2a/types.js\").Message;\n    text: string;\n    context: import(\"../../a2a/types.js\").A2AHandlerContext;\n    userEmail: string | undefined;\n  }) =>\n    | import(\"../../a2a/types.js\").Message\n    | string\n    | null\n    | undefined\n    | Promise<import(\"../../a2a/types.js\").Message | string | null | undefined>;\n  /**\n   * Optional injectable prompt examples for core rules (rule 5 auto-refresh\n   * examples and rule 8 external provider names). When absent, generic\n   * placeholders are used so no template-specific names appear in the core\n   * prompt by default.\n   *\n   * - `providerActions`: external provider action names this template exposes\n   *   (e.g. `[\"warehouse-query\", \"crm-records\"]` for a template).\n   * - `appActions`: representative template action names for rule 5's refresh\n   *   examples (e.g. `[\"log-meal\", \"update-form\"]` for a forms template).\n   */\n  promptExamples?: PromptExamples;\n  /**\n   * Curated allow-list of action names to serve external **connector** clients\n   * on a hosted multi-tenant deployment.\n   *\n   * Whenever this list is non-empty it is active by default for **every**\n   * caller (hosted connectors, code/stdio clients, and the local CLI): external\n   * MCP clients see (and can call) only these actions plus the builtin\n   * cross-app tools (`list_apps`, `open_app`, `ask_app`, `create_embed_session`).\n   * Calls to any tool outside the list are rejected with \"Unknown tool\".\n   * This prevents the full ~105-tool catalog from bloating external-agent\n   * context windows and removes footguns (db-exec, seed-*, extension suite,\n   * browser-session tools) from connectors. It is no longer gated behind an\n   * environment variable, and the catalog is never inferred from the client.\n   *\n   * `tool-search` stays available for discovery; a trimmed action still needs\n   * the connector catalog, authenticated-read policy, or full-catalog opt-in\n   * before an external caller can execute it.\n   * Callers who need the full surface up front opt in explicitly with\n   * `agent-native connect --full-catalog` (embeds a `catalog_scope: \"full\"`\n   * claim in their connect-minted JWT) or the deployment-wide\n   * `AGENT_NATIVE_MCP_FULL_CATALOG=1` env override.\n   *\n   * Declare here rather than in MCPConfig directly; the plugin copies it through.\n   */\n  connectorCatalog?: string[];\n\n  /**\n   * Default authenticated external-agent policy. In `auto` read mode, every\n   * action explicitly marked as GET + readOnly + publicAgent.requiresAuth is\n   * added to the connector surface automatically. Writes remain ask_app-only\n   * unless `writes: \"allowlisted\"` is explicitly selected.\n   */\n  externalAgents?: ExternalAgentPolicy;\n\n  /**\n   * Skip mounting the remote MCP protocol route.\n   *\n   * Most apps should leave this off so agent chat, A2A, and MCP share one\n   * runtime. Hosted apps with a dedicated early MCP plugin can set this to\n   * true so their external connector does not depend on the heavier chat\n   * plugin initialization path.\n   */\n  disableMcp?: boolean;\n\n  /**\n   * Code-execution capability for the production agent.\n   *\n   * - `\"off\"` (default) — no code-execution tools in production.\n   * - `\"sandboxed\"` — registers the `run-code` tool (isolated Node.js sandbox\n   *   with a bridge to allowlisted registered tools). Safe for shared or\n   *   hosted deployments.\n   * - `\"trusted\"` — registers both the full coding tool registry\n   *   (bash / read / edit / write) and the `run-code` sandbox. Only use in\n   *   single-tenant or operator-controlled deployments where full shell access\n   *   to the host machine is intentional.\n   *\n   * The `AGENT_PROD_CODE_EXECUTION` environment variable (`\"trusted\"`,\n   * `\"sandboxed\"`, or `\"off\"`) takes precedence over this option, allowing\n   * per-deployment overrides without code changes.\n   *\n   * Dev-mode behavior is unchanged — both the coding tools and `run-code` are\n   * always available when the environment allows toggling.\n   */\n  codeExecution?: {\n    production?: \"off\" | \"sandboxed\" | \"trusted\";\n    /**\n     * Extra registered-tool names the sandbox bridge may forward (beyond the\n     * default allowlist: provider-api-request, provider-api-docs,\n     * provider-api-catalog, web-request).\n     */\n    bridgeTools?: string[];\n  };\n\n  /**\n   * App-level default tool-call limits. Individual actions override these with\n   * their own `timeoutMs` / `maxResultChars` declarations.\n   */\n  toolLimits?: { timeoutMs?: number; maxResultChars?: number };\n}\n"]}
+{"version":3,"file":"plugin-options.js","sourceRoot":"","sources":["../../../src/server/agent-chat/plugin-options.ts"],"names":[],"mappings":"","sourcesContent":["import type { ActionEntry } from \"../../agent/production-agent.js\";\nimport type { AgentLoopFinalResponseGuard } from \"../../agent/production-agent.js\";\nimport type {\n  AgentChatAttachment,\n  AgentChatReference,\n  MentionProvider,\n} from \"../../agent/types.js\";\nimport type { ExternalAgentPolicy } from \"../../mcp/external-agent-policy.js\";\nimport type { DatabaseToolsOption } from \"../../scripts/db/tool-mode.js\";\nimport type { PromptExamples } from \"../prompts/index.js\";\n\n/** Shape of a Nitro plugin function: receives the Nitro app instance at\n * startup and may register routes/hooks synchronously or asynchronously. */\nexport type NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\nexport interface AgentChatPluginOptions {\n  /** Template-specific actions (email ops, booking ops, etc.) */\n  actions?:\n    | Record<string, ActionEntry>\n    | (() =>\n        | Record<string, ActionEntry>\n        | Promise<Record<string, ActionEntry>>);\n  /** @deprecated Use `actions` instead */\n  scripts?:\n    | Record<string, ActionEntry>\n    | (() =>\n        | Record<string, ActionEntry>\n        | Promise<Record<string, ActionEntry>>);\n  /** System prompt for the agent. A sensible default is provided. */\n  systemPrompt?: string;\n  /** Additional system prompt prepended in dev mode */\n  devSystemPrompt?: string;\n  /** Model to use. Defaults to the resolved engine's default model. */\n  model?: string;\n  /** Optional per-app agent run chunk budget in milliseconds. Defaults to\n   * AGENT_RUN_SOFT_TIMEOUT_MS when set, otherwise no framework-imposed\n   * timeout. When reached, long runs continue through the hidden continuation\n   * path instead of surfacing a timeout warning. */\n  runSoftTimeoutMs?: number;\n  /** Optional per-app run-manager no-progress watchdog in milliseconds. */\n  runNoProgressTimeoutMs?: number;\n  /**\n   * Opt this app into Netlify durable background-function agent-chat runs. This\n   * gives hosted agent turns the 15-minute async-function budget when the app's\n   * Netlify build also emits the background function. Set this to `false` to\n   * explicitly disable a stale deploy-wide `AGENT_CHAT_DURABLE_BACKGROUND`\n   * flag for this app.\n   */\n  durableBackgroundRuns?: boolean;\n  /** Anthropic API key. Falls back to ANTHROPIC_API_KEY env var */\n  apiKey?: string;\n  /**\n   * Agent engine to use. Can be a pre-constructed AgentEngine, a registered\n   * engine name (e.g. \"anthropic\", \"ai-sdk:openai\"), or an object with name\n   * and config. Defaults to the \"anthropic\" engine using ANTHROPIC_API_KEY.\n   */\n  engine?:\n    | import(\"../../agent/engine/types.js\").AgentEngine\n    | string\n    | { name: string; config: Record<string, unknown> };\n  /** Route path. Default: /_agent-native/agent-chat */\n  path?: string;\n  /** Custom mention providers for @-tagging template entities */\n  mentionProviders?:\n    | Record<string, MentionProvider>\n    | (() =>\n        | Record<string, MentionProvider>\n        | Promise<Record<string, MentionProvider>>);\n  /** App ID used to exclude self from agent discovery (e.g., \"mail\", \"calendar\") */\n  appId?: string;\n  /** Optional MCP server branding surfaced during the initialize handshake. */\n  mcpServerInfo?: {\n    /** Human-facing title. Defaults to the capitalized app id/name. */\n    title?: string;\n    /** Host-facing description. Defaults to \"Agent-native <app> agent\". */\n    description?: string;\n    /** Canonical app URL. Relative URLs are resolved against the request origin. */\n    websiteUrl?: string;\n    /** App icons. Relative `src` values are resolved against the request origin. */\n    icons?: Array<{\n      src: string;\n      mimeType?: string;\n      sizes?: string[];\n      theme?: \"light\" | \"dark\";\n    }>;\n  };\n  /**\n   * Optional callback to resolve the org ID for the current request.\n   * When provided, the resolved value is set as AGENT_ORG_ID env var so\n   * that db-query/db-exec automatically scope by org_id in addition to\n   * owner_email.\n   *\n   * If not provided, the framework automatically uses `session.orgId` from\n   * Better Auth's active organization. Only provide this callback when you\n   * need custom org resolution logic (e.g., Atlassian org mapping).\n   */\n  resolveOrgId?: (event: any) => string | null | Promise<string | null>;\n  /**\n   * Optional owner resolver for public/anonymous chat surfaces. When the\n   * normal app session is missing, this callback may return a synthetic\n   * owner id for a narrowly-scoped public request (for example, a public\n   * shared document page). Anonymous requests use a read-only tool set by\n   * default so public viewers cannot mutate app data through the agent.\n   */\n  anonymousOwner?: (event: any) => string | null | Promise<string | null>;\n  /**\n   * Keep anonymous-owner requests on read-only template actions. Defaults to\n   * true. Only disable for single-tenant apps that intentionally allow public\n   * agent mutations.\n   */\n  anonymousReadOnly?: boolean;\n  /**\n   * Optional auth adapter for the HTTP action route\n   * (`/_agent-native/actions/*`). Its `resolveCaller` runs before the\n   * cookie/bearer `getSession` chain, letting an app accept caller identities\n   * `getSession` doesn't understand (e.g. an A2A JWT verified with\n   * `verifyA2AToken`) declaratively, instead of pre-seeding request context\n   * from a Nitro `request` hook.\n   *\n   * Returning `null` defers to the normal chain; THROWING hard-rejects with a\n   * 401 (an invalid/forged credential must not fall through to a same-origin\n   * session cookie). A resolved caller's org comes exclusively from the\n   * verified credential — the returned `orgId` or the owner-email membership\n   * lookup — never from the request's session cookie.\n   * See {@link import(\"../action-routes.js\").ActionRouteAuthAdapter}.\n   */\n  actionRouteAuth?: import(\"../action-routes.js\").ActionRouteAuthAdapter;\n  /**\n   * Optional callback to append template-specific context to the system\n   * prompt on each request. Runs after AGENTS.md / skills / memory are\n   * loaded and before the schema block — use it to inject dynamic SQL\n   * context like a data dictionary, active feature flags, or whatever\n   * the agent should know about *right now* for this user/org.\n   *\n   * Return `null` or an empty string to skip. The string you return is\n   * appended verbatim, so wrap it in your own XML tags (e.g.\n   * `<data-dictionary>…</data-dictionary>`) to keep the prompt scannable.\n   *\n   * Called on every request in every prompt variant (lean, lazy, full).\n   * Templates that want to suppress it in a particular mode should return\n   * `null` from the callback based on their own logic.\n   */\n  extraContext?: (\n    event: any,\n    owner: string,\n  ) => string | null | Promise<string | null>;\n  /**\n   * Optional final-answer guard. Templates can use this to require a\n   * corrective retry before accepting a text-only final answer, e.g. forcing\n   * real data-source tool calls for analytics requests.\n   */\n  finalResponseGuard?: AgentLoopFinalResponseGuard;\n  /**\n   * Optional per-template request normalizer. Runs after authentication and\n   * before the model sees the message, so apps can translate chat attachments\n   * into template-native file handles while preserving the user's visible text.\n   */\n  prepareRequest?: (details: {\n    event: any;\n    ownerEmail: string | null;\n    message: string;\n    displayMessage?: string;\n    attachments: AgentChatAttachment[];\n    references: AgentChatReference[];\n    threadId?: string;\n    internalContinuation?: boolean;\n    mode: \"act\" | \"plan\";\n  }) =>\n    | void\n    | {\n        message?: string;\n        displayMessage?: string;\n        attachments?: AgentChatAttachment[];\n      }\n    | Promise<void | {\n        message?: string;\n        displayMessage?: string;\n        attachments?: AgentChatAttachment[];\n      }>;\n  /**\n   * Use ONLY the template's `systemPrompt` and the actions list — skip the\n   * framework prompt wrapper, resource loading (AGENTS.md/LEARNINGS.md/\n   * memory), the SQL schema block, and the workspace files/skills/agents\n   * inventory. Intended for minimal or voice-first apps where a long,\n   * generic preamble adds latency and iteration noise without adding value.\n   *\n   * When set, the same lean prompt is used in both dev and prod modes. In\n   * dev mode the tool registry is ALSO swapped to the template's actions\n   * (same set as prod) — the dev-only bash/db-exec/file-system tools\n   * and the resource/docs/chat/team/job/browser scripts are dropped. The\n   * lean system prompt has no bash-usage guidance, so routing actions\n   * through bash would break. If you need the full dev tool surface,\n   * leave this off.\n   */\n  leanPrompt?: boolean;\n  /**\n   * Skip auto-injecting the workspace files/skills/agents inventory on the\n   * first message of a conversation while keeping the normal prompt, resources,\n   * and tool surface. Use this for domain-focused apps where broad workspace\n   * inventory is mostly latency/noise unless the user explicitly references it.\n   *\n   * `leanPrompt: true` and the default `lazyContext` mode imply this because\n   * those catalogs are already discoverable through resources, docs-search,\n   * tool-search, and the compact resource indexes. Set `false` explicitly only\n   * when a workspace-wide inventory is central to the app's first-turn job.\n   */\n  skipFilesContext?: boolean;\n  /**\n   * Initial native tool schemas to send to the LLM provider. When set, the\n   * agent starts with only these tools plus `tool-search`; the live registry\n   * remains searchable, and matching schemas from `tool-search` results are\n   * loaded into the next model request. Use this for domain-focused apps that\n   * have a few common actions and many rare framework utilities. Common\n   * discovery and resource-reading tools are promoted automatically when\n   * present. Provider, MCP, extension, and code-execution schemas stay behind\n   * tool-search unless the app explicitly includes them in this list.\n   */\n  initialToolNames?: string[];\n  /**\n   * Controls whether broad provider/corpus tools and their workflow prompt are\n   * loaded into the first model request. Use `\"lazy\"` for apps that can answer\n   * ordinary lookups from a compact curated tool set; corpus tools remain\n   * discoverable through tool-search and the full retry surface.\n   *\n   * @default \"initial\"\n   */\n  corpusTools?: \"initial\" | \"lazy\";\n  /**\n   * Use a compact system prompt with on-demand context loading. The system\n   * prompt includes essential behavioral rules and action signatures, but\n   * defers verbose framework details, SQL schema, skills, learnings, and\n   * memory behind tools (`get-framework-context`, `db-schema`,\n   * `resources` (action: read)). The agent fetches these on-demand when needed.\n   *\n   * This reduces the system prompt by ~60-70%, significantly improving\n   * time-to-first-token and reducing \"thinking\" time. The agent retains\n   * all capabilities — it just loads context lazily instead of upfront.\n   *\n   * Defaults to `true`. Set to `false` to use the original full prompt.\n   * Ignored when `leanPrompt` is set (lean mode is even more minimal).\n   */\n  lazyContext?: boolean;\n  /**\n   * In dev mode, register the template's actions as native tools the agent\n   * can call directly with structured JSON args — skipping the default\n   * `bash(command=\"pnpm action <name> ...\")` indirection.\n   *\n   * The default dev behavior shells out because it \"mirrors how Claude Code\n   * works locally\" and reduces empty-object tool calls for templates with\n   * simple string args. But templates whose actions take structured data\n   * (objects, arrays, nested JSON) can't round-trip those cleanly through\n   * the CLI parser — stringified JSON on the way in, loss of type fidelity\n   * on the way out.\n   *\n   * Set to `true` to get the same tool surface in dev that production uses.\n   * `leanPrompt: true` implies this already (lean mode has no bash-usage\n   * guidance, so actions must be native). Set this flag without\n   * `leanPrompt` when you want native actions AND the full system prompt.\n   *\n   * Defaults to `false`.\n   */\n  nativeActionsInDev?: boolean;\n  /**\n   * Expose raw SQL/native database tools to the app agent.\n   *\n   * Defaults to `\"read\"`: `db-schema`/`db-query` are available for inspection,\n   * while writes route through typed app actions. Set to `\"write\"` (also\n   * `true`) to expose `db-exec`/`db-patch` for scoped raw SQL maintenance.\n   * Set to `\"off\"` (also `false`) for chat-first apps that want agents to use\n   * typed actions only.\n   */\n  databaseTools?: DatabaseToolsOption;\n  /**\n   * Expose framework extension management actions (`create-extension`,\n   * `update-extension`, `list-extensions`, etc.) to the app agent. Defaults to\n   * false. Set to true for apps that intentionally let the LLM create or\n   * manage sandboxed extension mini-apps. Core extension routes may still be\n   * mounted for compatibility and app-owned surfaces.\n   */\n  extensionTools?: boolean;\n  /**\n   * Optional A2A-only deterministic response path. Runs after inbound A2A text\n   * and user context are resolved, but before an agent engine/model is loaded.\n   * Return a message to complete the A2A task without invoking the LLM, or\n   * null/undefined to continue through the normal agent loop.\n   */\n  a2aMessageFallback?: (details: {\n    message: import(\"../../a2a/types.js\").Message;\n    text: string;\n    context: import(\"../../a2a/types.js\").A2AHandlerContext;\n    userEmail: string | undefined;\n  }) =>\n    | import(\"../../a2a/types.js\").Message\n    | string\n    | null\n    | undefined\n    | Promise<import(\"../../a2a/types.js\").Message | string | null | undefined>;\n  /**\n   * Optional injectable prompt examples for core rules (rule 5 auto-refresh\n   * examples and rule 8 external provider names). When absent, generic\n   * placeholders are used so no template-specific names appear in the core\n   * prompt by default.\n   *\n   * - `providerActions`: external provider action names this template exposes\n   *   (e.g. `[\"warehouse-query\", \"crm-records\"]` for a template).\n   * - `appActions`: representative template action names for rule 5's refresh\n   *   examples (e.g. `[\"log-meal\", \"update-form\"]` for a forms template).\n   */\n  promptExamples?: PromptExamples;\n  /**\n   * Curated allow-list of action names to serve external **connector** clients\n   * on a hosted multi-tenant deployment.\n   *\n   * Whenever this list is non-empty it is active by default for **every**\n   * caller (hosted connectors, code/stdio clients, and the local CLI): external\n   * MCP clients see (and can call) only these actions plus the builtin\n   * cross-app tools (`list_apps`, `open_app`, `ask_app`, `create_embed_session`).\n   * Calls to any tool outside the list are rejected with \"Unknown tool\".\n   * This prevents the full ~105-tool catalog from bloating external-agent\n   * context windows and removes footguns (db-exec, seed-*, extension suite,\n   * browser-session tools) from connectors. It is no longer gated behind an\n   * environment variable, and the catalog is never inferred from the client.\n   *\n   * `tool-search` stays available for discovery; a trimmed action still needs\n   * the connector catalog, authenticated-read policy, or full-catalog opt-in\n   * before an external caller can execute it.\n   * Callers who need the full surface up front opt in explicitly with\n   * `agent-native connect --full-catalog` (embeds a `catalog_scope: \"full\"`\n   * claim in their connect-minted JWT) or the deployment-wide\n   * `AGENT_NATIVE_MCP_FULL_CATALOG=1` env override.\n   *\n   * Declare here rather than in MCPConfig directly; the plugin copies it through.\n   */\n  connectorCatalog?: string[];\n\n  /**\n   * Default authenticated external-agent policy. In `auto` read mode, every\n   * action explicitly marked as GET + readOnly + publicAgent.requiresAuth is\n   * added to the connector surface automatically. Writes remain ask_app-only\n   * unless `writes: \"allowlisted\"` is explicitly selected.\n   */\n  externalAgents?: ExternalAgentPolicy;\n\n  /**\n   * Skip mounting the remote MCP protocol route.\n   *\n   * Most apps should leave this off so agent chat, A2A, and MCP share one\n   * runtime. Hosted apps with a dedicated early MCP plugin can set this to\n   * true so their external connector does not depend on the heavier chat\n   * plugin initialization path.\n   */\n  disableMcp?: boolean;\n\n  /**\n   * Code-execution capability for the production agent.\n   *\n   * - `\"off\"` (default) — no code-execution tools in production.\n   * - `\"sandboxed\"` — registers the `run-code` tool (isolated Node.js sandbox\n   *   with a bridge to allowlisted registered tools). Safe for shared or\n   *   hosted deployments.\n   * - `\"trusted\"` — registers both the full coding tool registry\n   *   (bash / read / edit / write) and the `run-code` sandbox. Only use in\n   *   single-tenant or operator-controlled deployments where full shell access\n   *   to the host machine is intentional.\n   *\n   * The `AGENT_PROD_CODE_EXECUTION` environment variable (`\"trusted\"`,\n   * `\"sandboxed\"`, or `\"off\"`) takes precedence over this option, allowing\n   * per-deployment overrides without code changes.\n   *\n   * Dev-mode behavior is unchanged — both the coding tools and `run-code` are\n   * always available when the environment allows toggling.\n   */\n  codeExecution?: {\n    production?: \"off\" | \"sandboxed\" | \"trusted\";\n    /**\n     * Extra registered-tool names the sandbox bridge may forward (beyond the\n     * default allowlist: provider-api-request, provider-api-docs,\n     * provider-api-catalog, web-request).\n     */\n    bridgeTools?: string[];\n  };\n\n  /**\n   * App-level default tool-call limits. Individual actions override these with\n   * their own `timeoutMs` / `maxResultChars` declarations.\n   */\n  toolLimits?: { timeoutMs?: number; maxResultChars?: number };\n}\n"]}

package/dist/server/agent-chat/script-entries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"script-entries.d.ts","sourceRoot":"","sources":["../../../src/server/agent-chat/script-entries.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAQnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAyDvE;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,GAAE,iBAA0B,EAChC,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,GACzC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAkJtC;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CACtD,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CA2EA;AAED;;GAEG;AACH,wBAAgB,qCAAqC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAW3E;AAED,wBAAsB,2BAA2B,IAAI,OAAO,CAC1D,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CAuPA;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CACtD,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CAqJA;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAqBtC;AAED;;;GAGG;AACH,wBAAsB,oCAAoC,IAAI,OAAO,CACnE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CAUA;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAwBtC"}
+{"version":3,"file":"script-entries.d.ts","sourceRoot":"","sources":["../../../src/server/agent-chat/script-entries.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAQnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAyDvE;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,GAAE,iBAA0B,EAChC,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,GACzC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAkJtC;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CACtD,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CA2EA;AAED;;GAEG;AACH,wBAAgB,qCAAqC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAW3E;AAED,wBAAsB,2BAA2B,IAAI,OAAO,CAC1D,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CAkQA;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CACtD,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CA0JA;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CA0BtC;AAED;;;GAGG;AACH,wBAAsB,oCAAoC,IAAI,OAAO,CACnE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CAUA;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAsDtC"}

package/dist/server/agent-chat/script-entries.js

@@ -54,7 +54,7 @@ export async function createDbScriptEntries(mode = "read", options = {}) {
     try {
         if (mode === "off")
             return {};
-        const extensionQueryGuidance = options.extensionTools === false
+        const extensionQueryGuidance = options.extensionTools !== true
             ? "Extension management tools are disabled for this app; do not query or mutate the legacy tools table as a workaround."
             : "For extension management, use list-extensions, update-extension, hide-extension, or delete-extension instead of querying the legacy tools table.";
         const [schemaMod, queryMod] = await Promise.all([
@@ -337,6 +337,15 @@ export async function createResourceScriptEntries() {
                         required: ["action"],
                     },
                 },
+                planMode: {
+                    effect: (args) => args.action === "list" ||
+                        args.action === "read" ||
+                        args.action === "effective"
+                        ? "read"
+                        : "write",
+                    allowedValues: { action: ["list", "read", "effective"] },
+                    description: "Plan mode allows listing and reading workspace resources.",
+                },
                 run: async (args) => {
                     const { action: a, ...rest } = args;
                     if (a === "list")
@@ -539,6 +548,11 @@ export async function createChatScriptEntries() {
                         required: ["action"],
                     },
                 },
+                planMode: {
+                    effect: (args) => (args.action === "search" ? "read" : "write"),
+                    allowedValues: { action: ["search"] },
+                    description: "Plan mode allows searching chat history.",
+                },
                 run: async (args) => {
                     if (args?.action === "open") {
                         return openEntry.run(args);
@@ -601,6 +615,11 @@ export async function createAgentEngineScriptEntries(appId) {
         return {
             "manage-agent-engine": {
                 tool: mod.tool,
+                planMode: {
+                    effect: (args) => (args.action === "list" ? "read" : "write"),
+                    allowedValues: { action: ["list"] },
+                    description: "Plan mode allows listing available agent engines.",
+                },
                 run: (args) => mod.run({
                     ...args,
                     appId: typeof args.appId === "string" && args.appId.trim()
@@ -639,6 +658,28 @@ export async function createCallAgentScriptEntry(selfAppId) {
         const mod = await import("../../scripts/call-agent.js");
         entries["call-agent"] = {
             tool: mod.tool,
+            planMode: {
+                effect: (args) => {
+                    const keys = Object.keys(args);
+                    if (keys.some((key) => key !== "agent" && key !== "action" && key !== "input")) {
+                        return "write";
+                    }
+                    if (typeof args.agent !== "string" ||
+                        !args.agent.trim() ||
+                        typeof args.action !== "string" ||
+                        !args.action.trim() ||
+                        !Object.hasOwn(args, "input") ||
+                        args.input === null ||
+                        typeof args.input !== "object" ||
+                        Array.isArray(args.input)) {
+                        return "unknown";
+                    }
+                    return "read";
+                },
+                allowedProperties: ["agent", "action", "input"],
+                requiredProperties: ["agent", "action"],
+                description: "Plan mode allows only exact read-only cross-app action calls with agent, action, and input.",
+            },
             run: (args, context) => mod.run(args, context, selfAppId),
         };
     }
@@ -650,6 +691,7 @@ export async function createCallAgentScriptEntry(selfAppId) {
         entries["describe-workspace-apps"] = {
             tool: mod.tool,
             run: (args, context) => mod.run(args, context, selfAppId),
+            readOnly: true,
         };
     }
     catch {

package/dist/server/agent-chat/script-entries.js.map

@@ -1 +1 @@
-{"version":3,"file":"script-entries.js","sourceRoot":"","sources":["../../../src/server/agent-chat/script-entries.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,GAChB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,8EAA8E;AAC9E,qEAAqE;AACrE,0EAA0E;AAC1E,2EAA2E;AAC3E,sEAAsE;AACtE,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,aAAa,CACpB,IAAgB,EAChB,UAA6C,EAC7C,IAGC;IAED,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,EAAE,KAAK,EAAE,IAA4B,EAAmB,EAAE;YAC3D,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,kEAAkE;gBAClE,uEAAuE;gBACvE,uEAAuE;gBACvE,sEAAsE;gBACtE,wDAAwD;gBACxD,IAAI,IAAI,EAAE,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;gBAC5C,CAAC;gBACD,MAAM,GAAG,GAAG,CAAY,CAAC;gBACzB,MAAM,KAAK,GACT,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;oBACpC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;oBACrB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,gBAAgB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAI,GAAsB,MAAM,EAChC,OAAO,GAAiC,EAAE;IAE1C,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,sBAAsB,GAC1B,OAAO,CAAC,cAAc,KAAK,KAAK;YAC9B,CAAC,CAAC,sHAAsH;YACxH,CAAC,CAAC,kJAAkJ,CAAC;QACzJ,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,MAAM,CAAC,4BAA4B,CAAC;YACpC,MAAM,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GACvB,IAAI,KAAK,OAAO;YACd,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,MAAM,CAAC,0BAA0B,CAAC;gBAClC,MAAM,CAAC,2BAA2B,CAAC;aACpC,CAAC;YACJ,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEnB,MAAM,OAAO,GAAgC;YAC3C,WAAW,EAAE,aAAa,CACxB;gBACE,WAAW,EACT,2IAA2I;gBAC7I,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iDAAiD;4BAC9D,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;yBACvB;qBACF;iBACF;aACF,EACD,SAAS,CAAC,OAAO,EACjB;gBACE,WAAW,EAAE,CAAC,QAAQ,CAAC;gBACvB,QAAQ,EAAE,IAAI;aACf,CACF;YACD,UAAU,EAAE,aAAa,CACvB;gBACE,WAAW,EAAE,+uBAA+uB,sBAAsB,EAAE;gBACpxB,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,GAAG,EAAE;4BACH,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,gGAAgG;yBACnG;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,+GAA+G;yBAClH;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iDAAiD;4BAC9D,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;yBACvB;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,sDAAsD;yBACzD;qBACF;oBACD,QAAQ,EAAE,CAAC,KAAK,CAAC;iBAClB;aACF,EACD,QAAQ,CAAC,OAAO,EAChB;gBACE,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;gBAC/C,QAAQ,EAAE,IAAI;aACf,CACF;SACF,CAAC;QAEF,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;YACxB,OAAO,CAAC,SAAS,CAAC,GAAG,aAAa,CAChC;gBACE,WAAW,EACT,6uBAA6uB;gBAC/uB,UAAU,EAAE,oBAAoB,EAAE;aACnC,EACD,OAAO,CAAC,OAAO,CAChB,CAAC;YACF,OAAO,CAAC,UAAU,CAAC,GAAG,aAAa,CACjC;gBACE,WAAW,EACT,2oBAA2oB;gBAC7oB,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,8BAA8B;yBAC5C;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uDAAuD;yBAC1D;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uFAAuF;yBAC1F;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,wSAAwS;yBAC3S;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,kCAAkC;yBAChD;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,8IAA8I;yBACjJ;wBACD,UAAU,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,iiBAAiiB;yBACpiB;wBACD,GAAG,EAAE;4BACH,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,0GAA0G;4BAC5G,IAAI,EAAE,CAAC,MAAM,CAAC;yBACf;qBACF;oBACD,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC;iBACvC;aACF,EACD,QAAQ,CAAC,OAAO,CACjB,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAG3C,MAAM,OAAO,GAAgC,EAAE,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;QACzD,OAAO,CAAC,aAAa,CAAC,GAAG,aAAa,CACpC;YACE,WAAW,EACT,iOAAiO;YACnO,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,kFAAkF;qBACrF;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,iFAAiF;qBACpF;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,+CAA+C;wBAC5D,IAAI,EAAE,CAAC,MAAM,CAAC;qBACf;iBACF;aACF;SACF,EACD,GAAG,CAAC,OAAO,EACX,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;IAC9E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,CAAC,eAAe,CAAC,GAAG,aAAa,CACtC;YACE,WAAW,EACT,mMAAmM;YACrM,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,8GAA8G;qBACjH;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,4GAA4G;qBAC/G;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,uCAAuC;wBACpD,IAAI,EAAE,CAAC,MAAM,CAAC;qBACf;iBACF;aACF;SACF,EACD,GAAG,CAAC,OAAO,EACX,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qCAAqC,CAAC,IAAY;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,CACL,UAAU,KAAK,WAAW;QAC1B,UAAU,KAAK,cAAc;QAC7B,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAChC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAChC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;QAC9B,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAChC,UAAU,CAAC,UAAU,CAAC,gBAAgB,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAG/C,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,GAC/D,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,MAAM,CAAC,iCAAiC,CAAC;YACzC,MAAM,CAAC,iCAAiC,CAAC;YACzC,MAAM,CAAC,sCAAsC,CAAC;YAC9C,MAAM,CAAC,kCAAkC,CAAC;YAC1C,MAAM,CAAC,mCAAmC,CAAC;YAC3C,MAAM,CAAC,wCAAwC,CAAC;YAChD,MAAM,CAAC,0CAA0C,CAAC;YAClD,MAAM,CAAC,0BAA0B,CAAC;SACnC,CAAC,CAAC;QAEL,wEAAwE;QACxE,MAAM,SAAS,GAAG,aAAa,CAC7B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,IAAI,CAAC,OAAO,EACZ,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;QACF,MAAM,SAAS,GAAG,aAAa,CAC7B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,IAAI,CAAC,OAAO,EACZ,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;QACF,MAAM,UAAU,GAAG,aAAa,CAC9B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,KAAK,CAAC,OAAO,CACd,CAAC;QACF,MAAM,cAAc,GAAG,aAAa,CAClC;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,SAAS,CAAC,OAAO,EACjB,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;QACF,MAAM,WAAW,GAAG,aAAa,CAC/B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,GAAG,CAAC,OAAO,CACZ,CAAC;QAEF,OAAO;YACL,SAAS,EAAE;gBACT,IAAI,EAAE;oBACJ,WAAW,EACT,uiBAAuiB;oBACziB,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,0BAA0B;gCACvC,IAAI,EAAE;oCACJ,MAAM;oCACN,MAAM;oCACN,WAAW;oCACX,OAAO;oCACP,SAAS;oCACT,QAAQ;iCACT;6BACF;4BACD,IAAI,EAAE;gCACJ,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,wFAAwF;6BAC3F;4BACD,OAAO,EAAE;gCACP,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,uCAAuC;6BACrD;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,6NAA6N;gCAC/N,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC;6BACjD;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,oDAAoD;6BACvD;4BACD,IAAI,EAAE;gCACJ,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,wDAAwD;6BAC3D;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,0DAA0D;gCAC5D,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;6BACvB;4BACD,UAAU,EAAE;gCACV,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,sLAAsL;gCACxL,IAAI,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;6BACrC;4BACD,mBAAmB,EAAE;gCACnB,IAAI,EAAE,SAAS;gCACf,WAAW,EAAE,kDAAkD;6BAChE;yBACF;wBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;qBACrB;iBACF;gBACD,GAAG,EAAE,KAAK,EAAE,IAA4B,EAAE,EAAE;oBAC1C,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;oBACpC,IAAI,CAAC,KAAK,MAAM;wBAAE,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC7C,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;wBACjB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,kCAAkC,CAAC;wBAC1D,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC;oBACD,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;wBACtB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,uCAAuC,CAAC;wBAC/D,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAClC,CAAC;oBACD,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;wBAClB,IACE,CAAC,IAAI,CAAC,IAAI;4BACV,IAAI,CAAC,OAAO,KAAK,SAAS;4BAC1B,IAAI,CAAC,OAAO,KAAK,IAAI;4BAErB,OAAO,gDAAgD,CAAC;wBAC1D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;wBACzB,IAAI,CAAC,UAAU;4BACb,IAAI,CAAC,UAAU;gCACf,CAAC,qCAAqC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oCACvD,CAAC,CAAC,WAAW;oCACb,CAAC,CAAC,eAAe,CAAC,CAAC;wBACvB,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;wBACtC,IAAI,MAAM,EAAE,QAAQ;4BAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;wBACtD,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC9B,CAAC;oBACD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;wBACpB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,qCAAqC,CAAC;wBAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC;wBACvC,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;4BAC7C,OAAO,uDAAuD,CAAC;wBACjE,CAAC;wBACD,MAAM,KAAK,GACT,KAAK,KAAK,QAAQ;4BAChB,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,eAAe,EAAE,CAAC;4BAC9C,CAAC,CAAC,CAAC,oBAAoB,EAAE,EAAE,KAAK;gCAC9B,mBAAmB,EAAE;gCACrB,mBAAmB,EAAE,CAAC,CAAC;wBAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,OAAO,+CAA+C,CAAC;wBACzD,CAAC;wBACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAC5C,KAAK,EACL,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAClB,CAAC;wBACF,IAAI,CAAC,QAAQ,EAAE,CAAC;4BACd,OAAO,uBAAuB,IAAI,CAAC,IAAI,EAAE,CAAC;wBAC5C,CAAC;wBACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CACtC,KAAK,EACL,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,QAAQ,EACjB;4BACE,SAAS,EAAE,QAAQ,CAAC,SAAS;4BAC7B,UAAU,EAAE,WAAW;4BACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;4BAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;4BACrB,SAAS,EAAE,IAAI;4BACf,QAAQ,EAAE,QAAQ,CAAC,QAAQ;yBAC5B,CACF,CAAC;wBACF,OAAO,sBAAsB,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAC/C,CAAC;oBACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;wBACnB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,oCAAoC,CAAC;wBAC5D,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC/B,CAAC;oBACD,OAAO,0BAA0B,CAAC,4CAA4C,CAAC;gBACjF,CAAC;aACF;YACD,aAAa,EAAE,aAAa,CAC1B;gBACE,WAAW,EACT,wLAAwL;gBAC1L,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,4FAA4F;yBAC/F;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iBAAiB;4BAC9B,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC;yBACnD;wBACD,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,kEAAkE;yBACrE;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,2FAA2F;yBAC9F;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC;iBACrD;aACF,EACD,OAAO,CAAC,OAAO,CAChB;YACD,eAAe,EAAE,aAAa,CAC5B;gBACE,WAAW,EACT,4DAA4D;gBAC9D,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iDAAiD;yBAC/D;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;iBACnB;aACF,EACD,MAAM,CAAC,OAAO,CACf;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAG3C,IAAI,CAAC;QACH,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7C,MAAM,CAAC,oCAAoC,CAAC;YAC5C,MAAM,CAAC,iCAAiC,CAAC;SAC1C,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,aAAa,CAC/B;YACE,WAAW,EAAE,yCAAyC;YACtD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,yDAAyD;qBAC5D;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,qCAAqC;qBACnD;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,eAAe;wBAC5B,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;qBACvB;oBACD,eAAe,EAAE;wBACf,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,qFAAqF;qBACxF;iBACF;aACF;SACF,EACD,SAAS,CAAC,OAAO,CAClB,CAAC;QAEF,MAAM,SAAS,GAAG,aAAa,CAC7B;YACE,WAAW,EAAE,+BAA+B;YAC5C,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,EAAE,EAAE;wBACF,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,4BAA4B;qBAC1C;iBACF;gBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;aACjB;SACF,EACD,OAAO,CAAC,OAAO,CAChB,CAAC;QAEF,OAAO;YACL,cAAc,EAAE;gBACd,IAAI,EAAE;oBACJ,WAAW,EACT,4LAA4L;oBAC9L,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,0BAA0B;gCACvC,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC;6BAC9D;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,kEAAkE;6BACrE;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,8CAA8C;6BAC5D;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,wBAAwB;gCACrC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;6BACvB;4BACD,eAAe,EAAE;gCACf,IAAI,EAAE,SAAS;gCACf,WAAW,EACT,uJAAuJ;6BAC1J;4BACD,EAAE,EAAE;gCACF,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,kEAAkE;6BACrE;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,yBAAyB;6BACvC;yBACF;wBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;qBACrB;iBACF;gBACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;oBAClB,IAAI,IAAI,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;wBAC5B,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC;oBACD,IACE,IAAI,EAAE,MAAM,KAAK,QAAQ;wBACzB,IAAI,EAAE,MAAM,KAAK,KAAK;wBACtB,IAAI,EAAE,MAAM,KAAK,OAAO;wBACxB,IAAI,EAAE,MAAM,KAAK,SAAS,EAC1B,CAAC;wBACD,MAAM,EAAE,GAAG,OAAO,IAAI,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvD,IAAI,CAAC,EAAE;4BAAE,OAAO,sBAAsB,CAAC;wBACvC,MAAM,KAAK,GACT,oBAAoB,EAAE,EAAE,KAAK,IAAI,mBAAmB,EAAE,IAAI,EAAE,CAAC;wBAC/D,IAAI,CAAC,KAAK;4BAAE,OAAO,qCAAqC,CAAC;wBACzD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE;4BAC5D,KAAK,EAAE,eAAe,EAAE;yBACzB,CAAC,CAAC;wBACH,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,OAAO,gBAAgB,EAAE,cAAc,CAAC;wBAC1C,CAAC;wBACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,IAAI,YAAY,CAAC;wBAC7D,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;4BAC7B,MAAM,SAAS,GACb,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;gCAC7B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gCACtD,CAAC,CAAC,EAAE,CAAC;4BACT,IAAI,CAAC,SAAS;gCAAE,OAAO,yBAAyB,CAAC;4BACjD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;4BAClD,IAAI,CAAC,OAAO;gCAAE,OAAO,gBAAgB,EAAE,yBAAyB,CAAC;4BACjE,OAAO,iBAAiB,KAAK,SAAS,SAAS,IAAI,CAAC;wBACtD,CAAC;wBACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;4BAC9B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;4BACnD,IAAI,CAAC,QAAQ;gCACX,OAAO,gBAAgB,EAAE,0BAA0B,CAAC;4BACtD,OAAO,kBAAkB,KAAK,EAAE,CAAC;wBACnC,CAAC;wBACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;wBAChE,IAAI,CAAC,MAAM;4BAAE,OAAO,gBAAgB,EAAE,yBAAyB,CAAC;wBAChE,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,UAAU,KAAK,EAAE,CAAC;oBAC3E,CAAC;oBACD,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC/B,CAAC;aACF;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAAc;IAEd,IAAI,CAAC;QACH,MAAM,GAAG,GACP,MAAM,MAAM,CAAC,oDAAoD,CAAC,CAAC;QAErE,OAAO;YACL,qBAAqB,EAAE;gBACrB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CACZ,GAAG,CAAC,GAAG,CAAC;oBACN,GAAG,IAAI;oBACP,KAAK,EACH,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;wBACjD,CAAC,CAAC,IAAI,CAAC,KAAK;wBACZ,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;iBACpB,CAAC;aACL;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oCAAoC;IAGxD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,6CAA6C,CAAC,CAAC;QAExE,OAAO;YACL,4BAA4B,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;SAC/D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,SAAkB;IAElB,MAAM,OAAO,GAAgC,EAAE,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACxD,OAAO,CAAC,YAAY,CAAC,GAAG;YACtB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC;SAC1D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,0CAA0C,CAAC,CAAC;QACrE,OAAO,CAAC,yBAAyB,CAAC,GAAG;YACnC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC;SAC1D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["import type { ActionEntry } from \"../../agent/production-agent.js\";\nimport type { ActionTool } from \"../../agent/types.js\";\nimport {\n  renameThread,\n  resolveThreadAccess,\n  setThreadArchived,\n  setThreadPinned,\n} from \"../../chat-threads/store.js\";\nimport type { DatabaseToolsMode } from \"../../scripts/db/tool-mode.js\";\nimport { dbExecToolParameters } from \"../../scripts/db/tool-schemas.js\";\nimport { captureCliOutput } from \"../cli-capture.js\";\nimport {\n  getAmbientUserEmail,\n  getRequestOrgId,\n  getRequestRunContext,\n  getRequestUserEmail,\n} from \"../request-context.js\";\n\n// ---------------------------------------------------------------------------\n// CLI-script-backed action entries: db-*, docs-search/source-search,\n// resources/save-memory/delete-memory, chat-history, manage-agent-engine,\n// manage-agent-loop-settings, and call-agent. Each wraps a core CLI script\n// (that writes to console.log) as an ActionEntry via `wrapCliScript`.\n// ---------------------------------------------------------------------------\n\n/**\n * Wraps a core CLI script (that writes to console.log) as a ActionEntry\n * by capturing stdout. Uses an AsyncLocalStorage-backed capture so\n * concurrent tool calls do not corrupt the global console/stdout pointers\n * (see `cli-capture.ts`).\n */\nfunction wrapCliScript(\n  tool: ActionTool,\n  cliDefault: (args: string[]) => Promise<void>,\n  opts?: {\n    allowedArgs?: readonly string[];\n    readOnly?: boolean;\n  },\n): ActionEntry {\n  return {\n    tool,\n    ...(opts?.readOnly ? { readOnly: true as const } : {}),\n    run: async (args: Record<string, string>): Promise<string> => {\n      const cliArgs: string[] = [];\n      for (const [k, v] of Object.entries(args)) {\n        // MCP input schemas are descriptive and some hosts can still send\n        // undeclared keys. The externally exposed DB readers must never accept\n        // the CLI-only `--db` escape hatch, which could point at another local\n        // SQLite file. Keep their runtime surface identical to the advertised\n        // schema instead of trusting the client to validate it.\n        if (opts?.allowedArgs && !opts.allowedArgs.includes(k)) {\n          throw new Error(`Unknown argument: ${k}`);\n        }\n        const raw = v as unknown;\n        const value =\n          raw != null && typeof raw === \"object\"\n            ? JSON.stringify(raw)\n            : String(raw);\n        cliArgs.push(`--${k}`, value);\n      }\n      return captureCliOutput(() => cliDefault(cliArgs));\n    },\n  };\n}\n\n/**\n * Creates db-* tools (db-query, db-exec, db-patch, db-schema) as native tools.\n * By default these let the agent inspect the app's own SQL database; raw SQL\n * writes are only exposed when the app explicitly opts into write mode.\n * Scoping to the current user/org is enforced automatically in production via\n * temp views.\n *\n * In dev mode template actions are invoked via bash and the agent can call\n * `pnpm action db-query ...` — but in production there is no bash, so these\n * must be registered as native tools for the agent to reach the app DB at all.\n */\nexport async function createDbScriptEntries(\n  mode: DatabaseToolsMode = \"read\",\n  options: { extensionTools?: boolean } = {},\n): Promise<Record<string, ActionEntry>> {\n  try {\n    if (mode === \"off\") return {};\n    const extensionQueryGuidance =\n      options.extensionTools === false\n        ? \"Extension management tools are disabled for this app; do not query or mutate the legacy tools table as a workaround.\"\n        : \"For extension management, use list-extensions, update-extension, hide-extension, or delete-extension instead of querying the legacy tools table.\";\n    const [schemaMod, queryMod] = await Promise.all([\n      import(\"../../scripts/db/schema.js\"),\n      import(\"../../scripts/db/query.js\"),\n    ]);\n    const [execMod, patchMod] =\n      mode === \"write\"\n        ? await Promise.all([\n            import(\"../../scripts/db/exec.js\"),\n            import(\"../../scripts/db/patch.js\"),\n          ])\n        : [null, null];\n\n    const entries: Record<string, ActionEntry> = {\n      \"db-schema\": wrapCliScript(\n        {\n          description:\n            \"Show the app's SQL schema — all tables, columns, types, indexes, and foreign keys. Use this to understand the data model before querying.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              format: {\n                type: \"string\",\n                description: 'Output format: \"json\" or \"text\" (default: text)',\n                enum: [\"json\", \"text\"],\n              },\n            },\n          },\n        },\n        schemaMod.default,\n        {\n          allowedArgs: [\"format\"],\n          readOnly: true,\n        },\n      ),\n      \"db-query\": wrapCliScript(\n        {\n          description: `Read from the app's own SQL database ONLY. Runs a SELECT against the app's internal tables (settings, application_state, template tables). Results are auto-scoped to the current user/org. IMPORTANT: This tool CANNOT access external data sources like data warehouses, CRMs, issue trackers, analytics platforms, calendars, mail, docs, or other third-party services. For those, use the relevant template/provider action, MCP connector, or provider-api-catalog/provider-api-docs/provider-api-request when available. If the user names a provider, that named provider wins; do not substitute a warehouse or app database copy unless they explicitly ask for it. If a table isn't in the app schema, don't try db-query — use the data-source-specific action. ${extensionQueryGuidance}`,\n          parameters: {\n            type: \"object\",\n            properties: {\n              sql: {\n                type: \"string\",\n                description:\n                  \"SELECT query to run, e.g. \\\"SELECT key, value FROM settings WHERE key LIKE 'sql-dashboard-%'\\\"\",\n              },\n              args: {\n                type: \"string\",\n                description:\n                  'Optional JSON array of positional bind args for parameterized placeholders. Example: \\'[\"draft\",\"form-123\"]\\'',\n              },\n              format: {\n                type: \"string\",\n                description: 'Output format: \"json\" or \"text\" (default: text)',\n                enum: [\"json\", \"text\"],\n              },\n              limit: {\n                type: \"string\",\n                description:\n                  \"Append LIMIT N if the query doesn't already have one\",\n              },\n            },\n            required: [\"sql\"],\n          },\n        },\n        queryMod.default,\n        {\n          allowedArgs: [\"sql\", \"args\", \"format\", \"limit\"],\n          readOnly: true,\n        },\n      ),\n    };\n\n    if (execMod && patchMod) {\n      entries[\"db-exec\"] = wrapCliScript(\n        {\n          description:\n            \"Write to the app's own SQL database ONLY. Runs INSERT / UPDATE / DELETE / REPLACE against the app's internal tables. For multiple related writes, pass `statements` so they run sequentially in one transaction instead of issuing several db-exec calls. Writes are auto-scoped to the current user/org, and `owner_email` / `org_id` are auto-injected on INSERT. Schema changes (CREATE/ALTER/DROP) are blocked. Never use this to backfill missing data for a read/analysis request or to create/modify users, members, roles, permissions, admin flags, or ownership; use a dedicated app action or reviewed code. IMPORTANT: This tool CANNOT write to external data sources like BigQuery, HubSpot, etc. For external services, use the appropriate template action.\",\n          parameters: dbExecToolParameters(),\n        },\n        execMod.default,\n      );\n      entries[\"db-patch\"] = wrapCliScript(\n        {\n          description:\n            \"Surgical patch on a large text/JSON column in the app's SQL database. Two modes: (1) text find/replace via `find`/`replace`/`edits` — best for small edits to documents, slide HTML, etc. (2) structural JSON ops via `json-ops` — STRONGLY PREFERRED when the column is JSON (dashboard configs, form schemas, slide decks) because it avoids all the brace/quote/comma surgery that text find/replace requires. Use `json-ops` to set/remove values at a JSON Pointer path, or to move/insert array items — e.g. reorder dashboard panels, add a filter, rename a field. Targets exactly one row (narrow `where` by primary key). Same per-user/org scoping as db-exec.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              table: {\n                type: \"string\",\n                description: \"Table name (e.g. 'settings')\",\n              },\n              column: {\n                type: \"string\",\n                description:\n                  \"Text/JSON column to patch (e.g. 'value' for settings)\",\n              },\n              where: {\n                type: \"string\",\n                description:\n                  \"WHERE clause that matches exactly one row (e.g. \\\"key = 'o:org1:sql-dashboard-foo'\\\")\",\n              },\n              find: {\n                type: \"string\",\n                description:\n                  \"Text mode: substring to find. Must match EXACTLY ONE occurrence by default (like Claude Code's Edit tool). If 0 matches, you get 'NOT FOUND'. If >1 matches, you get surrounding context for each match — widen `find` with unique context and retry. Use `all: \\\"true\\\"` to replace every occurrence.\",\n              },\n              replace: {\n                type: \"string\",\n                description: \"Text mode: replacement substring\",\n              },\n              edits: {\n                type: \"string\",\n                description:\n                  'Text mode batch: JSON array of {find, replace} pairs. Same uniqueness rule applies to each `find`. Example: \\'[{\"find\":\"a\",\"replace\":\"b\"}]\\'',\n              },\n              \"json-ops\": {\n                type: \"string\",\n                description:\n                  'JSON mode: JSON array of structural ops. Each op is {op, path, value?, from?}. `op` is one of \"set\", \"remove\", \"insert\", \"move\", \"move-before\". `path` / `from` use JSON Pointer (\"/panels/3/title\"). Examples — reorder: \\'[{\"op\":\"move\",\"from\":\"/panels/7\",\"path\":\"/panels/1\"}]\\'; edit field: \\'[{\"op\":\"set\",\"path\":\"/panels/0/title\",\"value\":\"New\"}]\\'; delete filter: \\'[{\"op\":\"remove\",\"path\":\"/filters/2\"}]\\'; add panel: \\'[{\"op\":\"insert\",\"path\":\"/panels/0\",\"value\":{\"id\":\"p\",\"title\":\"...\"}}]\\'. Much safer than text find/replace for JSON columns.',\n              },\n              all: {\n                type: \"string\",\n                description:\n                  'Text mode: set to \"true\" to replace every occurrence of each `find` (default requires exactly one match)',\n                enum: [\"true\"],\n              },\n            },\n            required: [\"table\", \"column\", \"where\"],\n          },\n        },\n        patchMod.default,\n      );\n    }\n\n    return entries;\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates read-only package lookup tools so agents can inspect version-matched\n * framework docs and source bundled in @agent-native/core at runtime.\n */\nexport async function createDocsScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  const entries: Record<string, ActionEntry> = {};\n\n  try {\n    const mod = await import(\"../../scripts/docs/search.js\");\n    entries[\"docs-search\"] = wrapCliScript(\n      {\n        description:\n          \"Search and read agent-native framework documentation, bundled AGENTS.md, and codebase skills. Use --list to see all pages, --query to search, --slug to read a specific page. Codebase skill pages use slugs like skill-<name>.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            query: {\n              type: \"string\",\n              description:\n                \"Search term to find relevant docs (e.g. 'actions', 'authentication', 'database')\",\n            },\n            slug: {\n              type: \"string\",\n              description:\n                \"Read a specific doc page by slug (e.g. 'actions', 'authentication', 'database')\",\n            },\n            list: {\n              type: \"string\",\n              description: 'Set to \"true\" to list all available doc pages',\n              enum: [\"true\"],\n            },\n          },\n        },\n      },\n      mod.default,\n      { readOnly: true },\n    );\n  } catch {\n    // Keep source-search available if docs-search fails during a partial build.\n  }\n\n  try {\n    const mod = await import(\"../../scripts/docs/source-search.js\");\n    if (!mod.hasSourceCorpus()) {\n      return entries;\n    }\n    entries[\"source-search\"] = wrapCliScript(\n      {\n        description:\n          \"Search and read the packaged Agent Native source corpus under node_modules/@agent-native/core/corpus. Use --list for sections, --query to search core/template source, and --path to read a file.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            query: {\n              type: \"string\",\n              description:\n                \"Search term to find relevant core or template source (e.g. 'defineAction', 'useActionQuery', 'view-screen').\",\n            },\n            path: {\n              type: \"string\",\n              description:\n                \"Read a specific corpus file or list a directory (e.g. 'templates/plan/AGENTS.md' or 'core/src/action.ts').\",\n            },\n            list: {\n              type: \"string\",\n              description: 'Set to \"true\" to list corpus sections',\n              enum: [\"true\"],\n            },\n          },\n        },\n      },\n      mod.default,\n      { readOnly: true },\n    );\n  } catch {\n    // Older package installs may not have the corpus/search script yet.\n  }\n\n  return entries;\n}\n\n/**\n * Creates resource ScriptEntries available in both prod and dev modes.\n */\nexport function shouldDefaultResourceWriteToWorkspace(path: string): boolean {\n  const normalized = path.replace(/^\\/+/, \"\");\n  return (\n    normalized === \"AGENTS.md\" ||\n    normalized === \"LEARNINGS.md\" ||\n    normalized.startsWith(\"memory/\") ||\n    normalized.startsWith(\"skills/\") ||\n    normalized.startsWith(\"jobs/\") ||\n    normalized.startsWith(\"agents/\") ||\n    normalized.startsWith(\"remote-agents/\")\n  );\n}\n\nexport async function createResourceScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  try {\n    const [list, read, effective, write, del, saveMem, delMem, store] =\n      await Promise.all([\n        import(\"../../scripts/resources/list.js\"),\n        import(\"../../scripts/resources/read.js\"),\n        import(\"../../scripts/resources/effective.js\"),\n        import(\"../../scripts/resources/write.js\"),\n        import(\"../../scripts/resources/delete.js\"),\n        import(\"../../scripts/resources/save-memory.js\"),\n        import(\"../../scripts/resources/delete-memory.js\"),\n        import(\"../../resources/store.js\"),\n      ]);\n\n    // Wrap each CLI runner so it captures stdout and converts args properly\n    const listEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      list.default,\n      { readOnly: true },\n    );\n    const readEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      read.default,\n      { readOnly: true },\n    );\n    const writeEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      write.default,\n    );\n    const effectiveEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      effective.default,\n      { readOnly: true },\n    );\n    const deleteEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      del.default,\n    );\n\n    return {\n      resources: {\n        tool: {\n          description:\n            'Manage workspace resources. Actions: \"list\" (browse visible files), \"read\" (get contents), \"effective\" (show workspace -> organization/app -> personal inheritance for a path), \"write\" (create/update personal or shared; workspace only for local file mode control files), \"promote\" (make agent scratch visible), \"delete\" (remove personal or shared; workspace only for local file mode control files). Agent scratch writes are hidden from the Workspace view by default; use visibility=\"workspace\" only for files the user explicitly wants to keep/manage.',\n          parameters: {\n            type: \"object\",\n            properties: {\n              action: {\n                type: \"string\",\n                description: \"The operation to perform\",\n                enum: [\n                  \"list\",\n                  \"read\",\n                  \"effective\",\n                  \"write\",\n                  \"promote\",\n                  \"delete\",\n                ],\n              },\n              path: {\n                type: \"string\",\n                description:\n                  \"Resource path (e.g. 'LEARNINGS.md', 'notes/ideas.md'). Required for read/write/delete.\",\n              },\n              content: {\n                type: \"string\",\n                description: \"Content to write. Required for write.\",\n              },\n              scope: {\n                type: \"string\",\n                description:\n                  \"personal, shared, workspace, or all (default varies by action). Workspace is read-only when inherited from Dispatch; in local file mode AGENTS.md, agent-native.json, mcp.config.json, .mcp.json, and skills/ are writable.\",\n                enum: [\"personal\", \"shared\", \"workspace\", \"all\"],\n              },\n              prefix: {\n                type: \"string\",\n                description:\n                  \"Filter by path prefix when listing (e.g. 'notes/')\",\n              },\n              mime: {\n                type: \"string\",\n                description:\n                  \"MIME type for write (default: inferred from extension)\",\n              },\n              format: {\n                type: \"string\",\n                description:\n                  'Output format for list: \"json\" or \"text\" (default: text)',\n                enum: [\"json\", \"text\"],\n              },\n              visibility: {\n                type: \"string\",\n                description:\n                  'Visibility for write: \"agent_scratch\" for internal working files, \"workspace\" for user-requested files. Defaults to agent_scratch except durable instruction/skill/job/memory paths.',\n                enum: [\"workspace\", \"agent_scratch\"],\n              },\n              includeAgentScratch: {\n                type: \"boolean\",\n                description: \"Include hidden agent scratch files when listing.\",\n              },\n            },\n            required: [\"action\"],\n          },\n        },\n        run: async (args: Record<string, string>) => {\n          const { action: a, ...rest } = args;\n          if (a === \"list\") return listEntry.run(rest);\n          if (a === \"read\") {\n            if (!rest.path) return \"Error: path is required for read\";\n            return readEntry.run(rest);\n          }\n          if (a === \"effective\") {\n            if (!rest.path) return \"Error: path is required for effective\";\n            return effectiveEntry.run(rest);\n          }\n          if (a === \"write\") {\n            if (\n              !rest.path ||\n              rest.content === undefined ||\n              rest.content === null\n            )\n              return \"Error: path and content are required for write\";\n            rest.createdBy = \"agent\";\n            rest.visibility =\n              rest.visibility ??\n              (shouldDefaultResourceWriteToWorkspace(String(rest.path))\n                ? \"workspace\"\n                : \"agent_scratch\");\n            const runCtx = getRequestRunContext();\n            if (runCtx?.threadId) rest.threadId = runCtx.threadId;\n            return writeEntry.run(rest);\n          }\n          if (a === \"promote\") {\n            if (!rest.path) return \"Error: path is required for promote\";\n            const scope = rest.scope ?? \"personal\";\n            if (scope === \"workspace\" || scope === \"all\") {\n              return \"Error: promote supports personal or shared scope only\";\n            }\n            const owner =\n              scope === \"shared\"\n                ? store.sharedResourceOwner(getRequestOrgId())\n                : (getRequestRunContext()?.owner ??\n                  getRequestUserEmail() ??\n                  getAmbientUserEmail());\n            if (!owner) {\n              return \"Error: promote requires an authenticated user\";\n            }\n            const resource = await store.resourceGetByPath(\n              owner,\n              String(rest.path),\n            );\n            if (!resource) {\n              return `Resource not found: ${rest.path}`;\n            }\n            const promoted = await store.resourcePut(\n              owner,\n              resource.path,\n              resource.content,\n              resource.mimeType,\n              {\n                createdBy: resource.createdBy,\n                visibility: \"workspace\",\n                threadId: resource.threadId,\n                runId: resource.runId,\n                expiresAt: null,\n                metadata: resource.metadata,\n              },\n            );\n            return `Promoted resource: ${promoted.path}`;\n          }\n          if (a === \"delete\") {\n            if (!rest.path) return \"Error: path is required for delete\";\n            return deleteEntry.run(rest);\n          }\n          return `Error: unknown action \"${a}\". Use: list, read, write, promote, delete`;\n        },\n      },\n      \"save-memory\": wrapCliScript(\n        {\n          description:\n            \"Save a memory for future conversations. Creates or updates a memory file and its index entry. Use proactively when you learn preferences, corrections, project context, or references.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              name: {\n                type: \"string\",\n                description:\n                  \"Short kebab-case identifier (e.g. 'coding-style', 'deploy-process'). Used as the filename.\",\n              },\n              type: {\n                type: \"string\",\n                description: \"Memory category\",\n                enum: [\"user\", \"feedback\", \"project\", \"reference\"],\n              },\n              description: {\n                type: \"string\",\n                description:\n                  \"One-line summary shown in the memory index (keep under 80 chars)\",\n              },\n              content: {\n                type: \"string\",\n                description:\n                  \"The memory content in markdown. For updates, read first and provide full updated content.\",\n              },\n            },\n            required: [\"name\", \"type\", \"description\", \"content\"],\n          },\n        },\n        saveMem.default,\n      ),\n      \"delete-memory\": wrapCliScript(\n        {\n          description:\n            \"Delete a memory entry and remove it from the memory index.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              name: {\n                type: \"string\",\n                description: \"The memory name to delete (e.g. 'coding-style')\",\n              },\n            },\n            required: [\"name\"],\n          },\n        },\n        delMem.default,\n      ),\n    };\n  } catch {\n    // Resources not available — skip silently\n    return {};\n  }\n}\n\n/**\n * Creates a unified chat-history ActionEntry that dispatches to search, open,\n * rename, or lightweight organization actions.\n */\nexport async function createChatScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  try {\n    const [searchMod, openMod] = await Promise.all([\n      import(\"../../scripts/chat/search-chats.js\"),\n      import(\"../../scripts/chat/open-chat.js\"),\n    ]);\n\n    const searchEntry = wrapCliScript(\n      {\n        description: \"Search or list past agent chat threads.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            query: {\n              type: \"string\",\n              description:\n                \"Search term to find chats by title, preview, or content\",\n            },\n            limit: {\n              type: \"string\",\n              description: \"Max number of results (default: 20)\",\n            },\n            format: {\n              type: \"string\",\n              description: \"Output format\",\n              enum: [\"json\", \"text\"],\n            },\n            includeArchived: {\n              type: \"boolean\",\n              description:\n                \"Also include archived chats in the results. Archived chats are excluded by default.\",\n            },\n          },\n        },\n      },\n      searchMod.default,\n    );\n\n    const openEntry = wrapCliScript(\n      {\n        description: \"Open a chat thread in the UI.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            id: {\n              type: \"string\",\n              description: \"The chat thread ID to open\",\n            },\n          },\n          required: [\"id\"],\n        },\n      },\n      openMod.default,\n    );\n\n    return {\n      \"chat-history\": {\n        tool: {\n          description:\n            \"Manage past agent chat threads. Use action 'search' to find previous conversations by keyword, 'open' to open a thread in the UI, or 'rename'/'pin'/'unpin'/'archive' to organize history.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              action: {\n                type: \"string\",\n                description: \"The operation to perform\",\n                enum: [\"search\", \"open\", \"rename\", \"pin\", \"unpin\", \"archive\"],\n              },\n              query: {\n                type: \"string\",\n                description:\n                  \"(search) Search term to find chats by title, preview, or content\",\n              },\n              limit: {\n                type: \"string\",\n                description: \"(search) Max number of results (default: 20)\",\n              },\n              format: {\n                type: \"string\",\n                description: \"(search) Output format\",\n                enum: [\"json\", \"text\"],\n              },\n              includeArchived: {\n                type: \"boolean\",\n                description:\n                  \"(search) Also include archived chats in the results. Archived chats are excluded by default, matching the 'archive' action's effect on the chat list.\",\n              },\n              id: {\n                type: \"string\",\n                description:\n                  \"(open, rename, pin, unpin, archive) The chat thread ID to manage\",\n              },\n              title: {\n                type: \"string\",\n                description: \"(rename) New chat title\",\n              },\n            },\n            required: [\"action\"],\n          },\n        },\n        run: async (args) => {\n          if (args?.action === \"open\") {\n            return openEntry.run(args);\n          }\n          if (\n            args?.action === \"rename\" ||\n            args?.action === \"pin\" ||\n            args?.action === \"unpin\" ||\n            args?.action === \"archive\"\n          ) {\n            const id = typeof args?.id === \"string\" ? args.id : \"\";\n            if (!id) return \"Missing required id.\";\n            const owner =\n              getRequestRunContext()?.owner ?? getRequestUserEmail() ?? \"\";\n            if (!owner) return \"No authenticated user is available.\";\n            const thread = await resolveThreadAccess(owner, id, \"editor\", {\n              orgId: getRequestOrgId(),\n            });\n            if (!thread) {\n              return `Chat thread \"${id}\" not found.`;\n            }\n            const title = thread.title || thread.preview || \"(untitled)\";\n            if (args.action === \"rename\") {\n              const nextTitle =\n                typeof args?.title === \"string\"\n                  ? args.title.replace(/\\s+/g, \" \").trim().slice(0, 160)\n                  : \"\";\n              if (!nextTitle) return \"Missing required title.\";\n              const renamed = await renameThread(id, nextTitle);\n              if (!renamed) return `Chat thread \"${id}\" could not be renamed.`;\n              return `Renamed chat \"${title}\" to \"${nextTitle}\".`;\n            }\n            if (args.action === \"archive\") {\n              const archived = await setThreadArchived(id, true);\n              if (!archived)\n                return `Chat thread \"${id}\" could not be archived.`;\n              return `Archived chat: ${title}`;\n            }\n            const pinned = await setThreadPinned(id, args.action === \"pin\");\n            if (!pinned) return `Chat thread \"${id}\" could not be updated.`;\n            return `${args.action === \"pin\" ? \"Pinned\" : \"Unpinned\"} chat: ${title}`;\n          }\n          return searchEntry.run(args);\n        },\n      },\n    };\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates the consolidated manage-agent-engine tool (list / set / test).\n * Let the agent inspect and configure the active LLM engine.\n */\nexport async function createAgentEngineScriptEntries(\n  appId?: string,\n): Promise<Record<string, ActionEntry>> {\n  try {\n    const mod =\n      await import(\"../../scripts/agent-engines/manage-agent-engine.js\");\n\n    return {\n      \"manage-agent-engine\": {\n        tool: mod.tool,\n        run: (args) =>\n          mod.run({\n            ...args,\n            appId:\n              typeof args.appId === \"string\" && args.appId.trim()\n                ? args.appId\n                : (appId ?? \"\"),\n          }),\n      },\n    };\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates the manage-agent-loop-settings tool. Lets the agent inspect and\n * configure the loop step limit it may hit on long-running work.\n */\nexport async function createAgentLoopSettingsScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  try {\n    const mod = await import(\"../../scripts/manage-agent-loop-settings.js\");\n\n    return {\n      \"manage-agent-loop-settings\": { tool: mod.tool, run: mod.run },\n    };\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates the call-agent ActionEntry for cross-agent A2A communication.\n * Binds selfAppId so the agent cannot call itself via call-agent.\n */\nexport async function createCallAgentScriptEntry(\n  selfAppId?: string,\n): Promise<Record<string, ActionEntry>> {\n  const entries: Record<string, ActionEntry> = {};\n\n  try {\n    const mod = await import(\"../../scripts/call-agent.js\");\n    entries[\"call-agent\"] = {\n      tool: mod.tool,\n      run: (args, context) => mod.run(args, context, selfAppId),\n    };\n  } catch {\n    // A missing built-in leaves the rest of the toolset usable.\n  }\n\n  try {\n    const mod = await import(\"../../scripts/describe-workspace-apps.js\");\n    entries[\"describe-workspace-apps\"] = {\n      tool: mod.tool,\n      run: (args, context) => mod.run(args, context, selfAppId),\n    };\n  } catch {\n    // A missing built-in leaves the rest of the toolset usable.\n  }\n\n  return entries;\n}\n"]}
+{"version":3,"file":"script-entries.js","sourceRoot":"","sources":["../../../src/server/agent-chat/script-entries.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,GAChB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,8EAA8E;AAC9E,qEAAqE;AACrE,0EAA0E;AAC1E,2EAA2E;AAC3E,sEAAsE;AACtE,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,aAAa,CACpB,IAAgB,EAChB,UAA6C,EAC7C,IAGC;IAED,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,EAAE,KAAK,EAAE,IAA4B,EAAmB,EAAE;YAC3D,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,kEAAkE;gBAClE,uEAAuE;gBACvE,uEAAuE;gBACvE,sEAAsE;gBACtE,wDAAwD;gBACxD,IAAI,IAAI,EAAE,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;gBAC5C,CAAC;gBACD,MAAM,GAAG,GAAG,CAAY,CAAC;gBACzB,MAAM,KAAK,GACT,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;oBACpC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;oBACrB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,gBAAgB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAI,GAAsB,MAAM,EAChC,OAAO,GAAiC,EAAE;IAE1C,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,sBAAsB,GAC1B,OAAO,CAAC,cAAc,KAAK,IAAI;YAC7B,CAAC,CAAC,sHAAsH;YACxH,CAAC,CAAC,kJAAkJ,CAAC;QACzJ,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,MAAM,CAAC,4BAA4B,CAAC;YACpC,MAAM,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GACvB,IAAI,KAAK,OAAO;YACd,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,MAAM,CAAC,0BAA0B,CAAC;gBAClC,MAAM,CAAC,2BAA2B,CAAC;aACpC,CAAC;YACJ,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEnB,MAAM,OAAO,GAAgC;YAC3C,WAAW,EAAE,aAAa,CACxB;gBACE,WAAW,EACT,2IAA2I;gBAC7I,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iDAAiD;4BAC9D,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;yBACvB;qBACF;iBACF;aACF,EACD,SAAS,CAAC,OAAO,EACjB;gBACE,WAAW,EAAE,CAAC,QAAQ,CAAC;gBACvB,QAAQ,EAAE,IAAI;aACf,CACF;YACD,UAAU,EAAE,aAAa,CACvB;gBACE,WAAW,EAAE,+uBAA+uB,sBAAsB,EAAE;gBACpxB,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,GAAG,EAAE;4BACH,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,gGAAgG;yBACnG;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,+GAA+G;yBAClH;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iDAAiD;4BAC9D,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;yBACvB;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,sDAAsD;yBACzD;qBACF;oBACD,QAAQ,EAAE,CAAC,KAAK,CAAC;iBAClB;aACF,EACD,QAAQ,CAAC,OAAO,EAChB;gBACE,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;gBAC/C,QAAQ,EAAE,IAAI;aACf,CACF;SACF,CAAC;QAEF,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;YACxB,OAAO,CAAC,SAAS,CAAC,GAAG,aAAa,CAChC;gBACE,WAAW,EACT,6uBAA6uB;gBAC/uB,UAAU,EAAE,oBAAoB,EAAE;aACnC,EACD,OAAO,CAAC,OAAO,CAChB,CAAC;YACF,OAAO,CAAC,UAAU,CAAC,GAAG,aAAa,CACjC;gBACE,WAAW,EACT,2oBAA2oB;gBAC7oB,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,8BAA8B;yBAC5C;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uDAAuD;yBAC1D;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uFAAuF;yBAC1F;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,wSAAwS;yBAC3S;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,kCAAkC;yBAChD;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,8IAA8I;yBACjJ;wBACD,UAAU,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,iiBAAiiB;yBACpiB;wBACD,GAAG,EAAE;4BACH,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,0GAA0G;4BAC5G,IAAI,EAAE,CAAC,MAAM,CAAC;yBACf;qBACF;oBACD,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC;iBACvC;aACF,EACD,QAAQ,CAAC,OAAO,CACjB,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAG3C,MAAM,OAAO,GAAgC,EAAE,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;QACzD,OAAO,CAAC,aAAa,CAAC,GAAG,aAAa,CACpC;YACE,WAAW,EACT,iOAAiO;YACnO,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,kFAAkF;qBACrF;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,iFAAiF;qBACpF;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,+CAA+C;wBAC5D,IAAI,EAAE,CAAC,MAAM,CAAC;qBACf;iBACF;aACF;SACF,EACD,GAAG,CAAC,OAAO,EACX,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;IAC9E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,CAAC,eAAe,CAAC,GAAG,aAAa,CACtC;YACE,WAAW,EACT,mMAAmM;YACrM,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,8GAA8G;qBACjH;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,4GAA4G;qBAC/G;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,uCAAuC;wBACpD,IAAI,EAAE,CAAC,MAAM,CAAC;qBACf;iBACF;aACF;SACF,EACD,GAAG,CAAC,OAAO,EACX,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qCAAqC,CAAC,IAAY;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,CACL,UAAU,KAAK,WAAW;QAC1B,UAAU,KAAK,cAAc;QAC7B,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAChC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAChC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;QAC9B,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAChC,UAAU,CAAC,UAAU,CAAC,gBAAgB,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAG/C,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,GAC/D,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,MAAM,CAAC,iCAAiC,CAAC;YACzC,MAAM,CAAC,iCAAiC,CAAC;YACzC,MAAM,CAAC,sCAAsC,CAAC;YAC9C,MAAM,CAAC,kCAAkC,CAAC;YAC1C,MAAM,CAAC,mCAAmC,CAAC;YAC3C,MAAM,CAAC,wCAAwC,CAAC;YAChD,MAAM,CAAC,0CAA0C,CAAC;YAClD,MAAM,CAAC,0BAA0B,CAAC;SACnC,CAAC,CAAC;QAEL,wEAAwE;QACxE,MAAM,SAAS,GAAG,aAAa,CAC7B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,IAAI,CAAC,OAAO,EACZ,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;QACF,MAAM,SAAS,GAAG,aAAa,CAC7B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,IAAI,CAAC,OAAO,EACZ,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;QACF,MAAM,UAAU,GAAG,aAAa,CAC9B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,KAAK,CAAC,OAAO,CACd,CAAC;QACF,MAAM,cAAc,GAAG,aAAa,CAClC;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,SAAS,CAAC,OAAO,EACjB,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;QACF,MAAM,WAAW,GAAG,aAAa,CAC/B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,GAAG,CAAC,OAAO,CACZ,CAAC;QAEF,OAAO;YACL,SAAS,EAAE;gBACT,IAAI,EAAE;oBACJ,WAAW,EACT,uiBAAuiB;oBACziB,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,0BAA0B;gCACvC,IAAI,EAAE;oCACJ,MAAM;oCACN,MAAM;oCACN,WAAW;oCACX,OAAO;oCACP,SAAS;oCACT,QAAQ;iCACT;6BACF;4BACD,IAAI,EAAE;gCACJ,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,wFAAwF;6BAC3F;4BACD,OAAO,EAAE;gCACP,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,uCAAuC;6BACrD;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,6NAA6N;gCAC/N,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC;6BACjD;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,oDAAoD;6BACvD;4BACD,IAAI,EAAE;gCACJ,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,wDAAwD;6BAC3D;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,0DAA0D;gCAC5D,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;6BACvB;4BACD,UAAU,EAAE;gCACV,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,sLAAsL;gCACxL,IAAI,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;6BACrC;4BACD,mBAAmB,EAAE;gCACnB,IAAI,EAAE,SAAS;gCACf,WAAW,EAAE,kDAAkD;6BAChE;yBACF;wBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;qBACrB;iBACF;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,IAAI,CAAC,MAAM,KAAK,MAAM;wBACtB,IAAI,CAAC,MAAM,KAAK,MAAM;wBACtB,IAAI,CAAC,MAAM,KAAK,WAAW;wBACzB,CAAC,CAAC,MAAM;wBACR,CAAC,CAAC,OAAO;oBACb,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE;oBACxD,WAAW,EACT,2DAA2D;iBAC9D;gBACD,GAAG,EAAE,KAAK,EAAE,IAA4B,EAAE,EAAE;oBAC1C,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;oBACpC,IAAI,CAAC,KAAK,MAAM;wBAAE,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC7C,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;wBACjB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,kCAAkC,CAAC;wBAC1D,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC;oBACD,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;wBACtB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,uCAAuC,CAAC;wBAC/D,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAClC,CAAC;oBACD,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;wBAClB,IACE,CAAC,IAAI,CAAC,IAAI;4BACV,IAAI,CAAC,OAAO,KAAK,SAAS;4BAC1B,IAAI,CAAC,OAAO,KAAK,IAAI;4BAErB,OAAO,gDAAgD,CAAC;wBAC1D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;wBACzB,IAAI,CAAC,UAAU;4BACb,IAAI,CAAC,UAAU;gCACf,CAAC,qCAAqC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oCACvD,CAAC,CAAC,WAAW;oCACb,CAAC,CAAC,eAAe,CAAC,CAAC;wBACvB,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;wBACtC,IAAI,MAAM,EAAE,QAAQ;4BAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;wBACtD,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC9B,CAAC;oBACD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;wBACpB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,qCAAqC,CAAC;wBAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC;wBACvC,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;4BAC7C,OAAO,uDAAuD,CAAC;wBACjE,CAAC;wBACD,MAAM,KAAK,GACT,KAAK,KAAK,QAAQ;4BAChB,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,eAAe,EAAE,CAAC;4BAC9C,CAAC,CAAC,CAAC,oBAAoB,EAAE,EAAE,KAAK;gCAC9B,mBAAmB,EAAE;gCACrB,mBAAmB,EAAE,CAAC,CAAC;wBAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,OAAO,+CAA+C,CAAC;wBACzD,CAAC;wBACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAC5C,KAAK,EACL,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAClB,CAAC;wBACF,IAAI,CAAC,QAAQ,EAAE,CAAC;4BACd,OAAO,uBAAuB,IAAI,CAAC,IAAI,EAAE,CAAC;wBAC5C,CAAC;wBACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CACtC,KAAK,EACL,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,QAAQ,EACjB;4BACE,SAAS,EAAE,QAAQ,CAAC,SAAS;4BAC7B,UAAU,EAAE,WAAW;4BACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;4BAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;4BACrB,SAAS,EAAE,IAAI;4BACf,QAAQ,EAAE,QAAQ,CAAC,QAAQ;yBAC5B,CACF,CAAC;wBACF,OAAO,sBAAsB,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAC/C,CAAC;oBACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;wBACnB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,oCAAoC,CAAC;wBAC5D,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC/B,CAAC;oBACD,OAAO,0BAA0B,CAAC,4CAA4C,CAAC;gBACjF,CAAC;aACF;YACD,aAAa,EAAE,aAAa,CAC1B;gBACE,WAAW,EACT,wLAAwL;gBAC1L,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,4FAA4F;yBAC/F;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iBAAiB;4BAC9B,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC;yBACnD;wBACD,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,kEAAkE;yBACrE;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,2FAA2F;yBAC9F;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC;iBACrD;aACF,EACD,OAAO,CAAC,OAAO,CAChB;YACD,eAAe,EAAE,aAAa,CAC5B;gBACE,WAAW,EACT,4DAA4D;gBAC9D,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iDAAiD;yBAC/D;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;iBACnB;aACF,EACD,MAAM,CAAC,OAAO,CACf;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAG3C,IAAI,CAAC;QACH,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7C,MAAM,CAAC,oCAAoC,CAAC;YAC5C,MAAM,CAAC,iCAAiC,CAAC;SAC1C,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,aAAa,CAC/B;YACE,WAAW,EAAE,yCAAyC;YACtD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,yDAAyD;qBAC5D;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,qCAAqC;qBACnD;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,eAAe;wBAC5B,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;qBACvB;oBACD,eAAe,EAAE;wBACf,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,qFAAqF;qBACxF;iBACF;aACF;SACF,EACD,SAAS,CAAC,OAAO,CAClB,CAAC;QAEF,MAAM,SAAS,GAAG,aAAa,CAC7B;YACE,WAAW,EAAE,+BAA+B;YAC5C,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,EAAE,EAAE;wBACF,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,4BAA4B;qBAC1C;iBACF;gBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;aACjB;SACF,EACD,OAAO,CAAC,OAAO,CAChB,CAAC;QAEF,OAAO;YACL,cAAc,EAAE;gBACd,IAAI,EAAE;oBACJ,WAAW,EACT,4LAA4L;oBAC9L,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,0BAA0B;gCACvC,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC;6BAC9D;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,kEAAkE;6BACrE;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,8CAA8C;6BAC5D;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,wBAAwB;gCACrC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;6BACvB;4BACD,eAAe,EAAE;gCACf,IAAI,EAAE,SAAS;gCACf,WAAW,EACT,uJAAuJ;6BAC1J;4BACD,EAAE,EAAE;gCACF,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,kEAAkE;6BACrE;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,yBAAyB;6BACvC;yBACF;wBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;qBACrB;iBACF;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;oBAC/D,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE;oBACrC,WAAW,EAAE,0CAA0C;iBACxD;gBACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;oBAClB,IAAI,IAAI,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;wBAC5B,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC;oBACD,IACE,IAAI,EAAE,MAAM,KAAK,QAAQ;wBACzB,IAAI,EAAE,MAAM,KAAK,KAAK;wBACtB,IAAI,EAAE,MAAM,KAAK,OAAO;wBACxB,IAAI,EAAE,MAAM,KAAK,SAAS,EAC1B,CAAC;wBACD,MAAM,EAAE,GAAG,OAAO,IAAI,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvD,IAAI,CAAC,EAAE;4BAAE,OAAO,sBAAsB,CAAC;wBACvC,MAAM,KAAK,GACT,oBAAoB,EAAE,EAAE,KAAK,IAAI,mBAAmB,EAAE,IAAI,EAAE,CAAC;wBAC/D,IAAI,CAAC,KAAK;4BAAE,OAAO,qCAAqC,CAAC;wBACzD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE;4BAC5D,KAAK,EAAE,eAAe,EAAE;yBACzB,CAAC,CAAC;wBACH,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,OAAO,gBAAgB,EAAE,cAAc,CAAC;wBAC1C,CAAC;wBACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,IAAI,YAAY,CAAC;wBAC7D,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;4BAC7B,MAAM,SAAS,GACb,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;gCAC7B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gCACtD,CAAC,CAAC,EAAE,CAAC;4BACT,IAAI,CAAC,SAAS;gCAAE,OAAO,yBAAyB,CAAC;4BACjD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;4BAClD,IAAI,CAAC,OAAO;gCAAE,OAAO,gBAAgB,EAAE,yBAAyB,CAAC;4BACjE,OAAO,iBAAiB,KAAK,SAAS,SAAS,IAAI,CAAC;wBACtD,CAAC;wBACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;4BAC9B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;4BACnD,IAAI,CAAC,QAAQ;gCACX,OAAO,gBAAgB,EAAE,0BAA0B,CAAC;4BACtD,OAAO,kBAAkB,KAAK,EAAE,CAAC;wBACnC,CAAC;wBACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;wBAChE,IAAI,CAAC,MAAM;4BAAE,OAAO,gBAAgB,EAAE,yBAAyB,CAAC;wBAChE,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,UAAU,KAAK,EAAE,CAAC;oBAC3E,CAAC;oBACD,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC/B,CAAC;aACF;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAAc;IAEd,IAAI,CAAC;QACH,MAAM,GAAG,GACP,MAAM,MAAM,CAAC,oDAAoD,CAAC,CAAC;QAErE,OAAO;YACL,qBAAqB,EAAE;gBACrB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ,EAAE;oBACR,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;oBAC7D,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;oBACnC,WAAW,EAAE,mDAAmD;iBACjE;gBACD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CACZ,GAAG,CAAC,GAAG,CAAC;oBACN,GAAG,IAAI;oBACP,KAAK,EACH,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;wBACjD,CAAC,CAAC,IAAI,CAAC,KAAK;wBACZ,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;iBACpB,CAAC;aACL;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oCAAoC;IAGxD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,6CAA6C,CAAC,CAAC;QAExE,OAAO;YACL,4BAA4B,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;SAC/D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,SAAkB;IAElB,MAAM,OAAO,GAAgC,EAAE,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACxD,OAAO,CAAC,YAAY,CAAC,GAAG;YACtB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE;gBACR,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBACf,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC/B,IACE,IAAI,CAAC,IAAI,CACP,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,OAAO,CAChE,EACD,CAAC;wBACD,OAAO,OAAO,CAAC;oBACjB,CAAC;oBACD,IACE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;wBAC9B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;wBAClB,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;wBAC/B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;wBACnB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;wBAC7B,IAAI,CAAC,KAAK,KAAK,IAAI;wBACnB,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;wBAC9B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EACzB,CAAC;wBACD,OAAO,SAAS,CAAC;oBACnB,CAAC;oBACD,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,iBAAiB,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC;gBAC/C,kBAAkB,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;gBACvC,WAAW,EACT,6FAA6F;aAChG;YACD,GAAG,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC;SAC1D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,0CAA0C,CAAC,CAAC;QACrE,OAAO,CAAC,yBAAyB,CAAC,GAAG;YACnC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC;YACzD,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["import type { ActionEntry } from \"../../agent/production-agent.js\";\nimport type { ActionTool } from \"../../agent/types.js\";\nimport {\n  renameThread,\n  resolveThreadAccess,\n  setThreadArchived,\n  setThreadPinned,\n} from \"../../chat-threads/store.js\";\nimport type { DatabaseToolsMode } from \"../../scripts/db/tool-mode.js\";\nimport { dbExecToolParameters } from \"../../scripts/db/tool-schemas.js\";\nimport { captureCliOutput } from \"../cli-capture.js\";\nimport {\n  getAmbientUserEmail,\n  getRequestOrgId,\n  getRequestRunContext,\n  getRequestUserEmail,\n} from \"../request-context.js\";\n\n// ---------------------------------------------------------------------------\n// CLI-script-backed action entries: db-*, docs-search/source-search,\n// resources/save-memory/delete-memory, chat-history, manage-agent-engine,\n// manage-agent-loop-settings, and call-agent. Each wraps a core CLI script\n// (that writes to console.log) as an ActionEntry via `wrapCliScript`.\n// ---------------------------------------------------------------------------\n\n/**\n * Wraps a core CLI script (that writes to console.log) as a ActionEntry\n * by capturing stdout. Uses an AsyncLocalStorage-backed capture so\n * concurrent tool calls do not corrupt the global console/stdout pointers\n * (see `cli-capture.ts`).\n */\nfunction wrapCliScript(\n  tool: ActionTool,\n  cliDefault: (args: string[]) => Promise<void>,\n  opts?: {\n    allowedArgs?: readonly string[];\n    readOnly?: boolean;\n  },\n): ActionEntry {\n  return {\n    tool,\n    ...(opts?.readOnly ? { readOnly: true as const } : {}),\n    run: async (args: Record<string, string>): Promise<string> => {\n      const cliArgs: string[] = [];\n      for (const [k, v] of Object.entries(args)) {\n        // MCP input schemas are descriptive and some hosts can still send\n        // undeclared keys. The externally exposed DB readers must never accept\n        // the CLI-only `--db` escape hatch, which could point at another local\n        // SQLite file. Keep their runtime surface identical to the advertised\n        // schema instead of trusting the client to validate it.\n        if (opts?.allowedArgs && !opts.allowedArgs.includes(k)) {\n          throw new Error(`Unknown argument: ${k}`);\n        }\n        const raw = v as unknown;\n        const value =\n          raw != null && typeof raw === \"object\"\n            ? JSON.stringify(raw)\n            : String(raw);\n        cliArgs.push(`--${k}`, value);\n      }\n      return captureCliOutput(() => cliDefault(cliArgs));\n    },\n  };\n}\n\n/**\n * Creates db-* tools (db-query, db-exec, db-patch, db-schema) as native tools.\n * By default these let the agent inspect the app's own SQL database; raw SQL\n * writes are only exposed when the app explicitly opts into write mode.\n * Scoping to the current user/org is enforced automatically in production via\n * temp views.\n *\n * In dev mode template actions are invoked via bash and the agent can call\n * `pnpm action db-query ...` — but in production there is no bash, so these\n * must be registered as native tools for the agent to reach the app DB at all.\n */\nexport async function createDbScriptEntries(\n  mode: DatabaseToolsMode = \"read\",\n  options: { extensionTools?: boolean } = {},\n): Promise<Record<string, ActionEntry>> {\n  try {\n    if (mode === \"off\") return {};\n    const extensionQueryGuidance =\n      options.extensionTools !== true\n        ? \"Extension management tools are disabled for this app; do not query or mutate the legacy tools table as a workaround.\"\n        : \"For extension management, use list-extensions, update-extension, hide-extension, or delete-extension instead of querying the legacy tools table.\";\n    const [schemaMod, queryMod] = await Promise.all([\n      import(\"../../scripts/db/schema.js\"),\n      import(\"../../scripts/db/query.js\"),\n    ]);\n    const [execMod, patchMod] =\n      mode === \"write\"\n        ? await Promise.all([\n            import(\"../../scripts/db/exec.js\"),\n            import(\"../../scripts/db/patch.js\"),\n          ])\n        : [null, null];\n\n    const entries: Record<string, ActionEntry> = {\n      \"db-schema\": wrapCliScript(\n        {\n          description:\n            \"Show the app's SQL schema — all tables, columns, types, indexes, and foreign keys. Use this to understand the data model before querying.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              format: {\n                type: \"string\",\n                description: 'Output format: \"json\" or \"text\" (default: text)',\n                enum: [\"json\", \"text\"],\n              },\n            },\n          },\n        },\n        schemaMod.default,\n        {\n          allowedArgs: [\"format\"],\n          readOnly: true,\n        },\n      ),\n      \"db-query\": wrapCliScript(\n        {\n          description: `Read from the app's own SQL database ONLY. Runs a SELECT against the app's internal tables (settings, application_state, template tables). Results are auto-scoped to the current user/org. IMPORTANT: This tool CANNOT access external data sources like data warehouses, CRMs, issue trackers, analytics platforms, calendars, mail, docs, or other third-party services. For those, use the relevant template/provider action, MCP connector, or provider-api-catalog/provider-api-docs/provider-api-request when available. If the user names a provider, that named provider wins; do not substitute a warehouse or app database copy unless they explicitly ask for it. If a table isn't in the app schema, don't try db-query — use the data-source-specific action. ${extensionQueryGuidance}`,\n          parameters: {\n            type: \"object\",\n            properties: {\n              sql: {\n                type: \"string\",\n                description:\n                  \"SELECT query to run, e.g. \\\"SELECT key, value FROM settings WHERE key LIKE 'sql-dashboard-%'\\\"\",\n              },\n              args: {\n                type: \"string\",\n                description:\n                  'Optional JSON array of positional bind args for parameterized placeholders. Example: \\'[\"draft\",\"form-123\"]\\'',\n              },\n              format: {\n                type: \"string\",\n                description: 'Output format: \"json\" or \"text\" (default: text)',\n                enum: [\"json\", \"text\"],\n              },\n              limit: {\n                type: \"string\",\n                description:\n                  \"Append LIMIT N if the query doesn't already have one\",\n              },\n            },\n            required: [\"sql\"],\n          },\n        },\n        queryMod.default,\n        {\n          allowedArgs: [\"sql\", \"args\", \"format\", \"limit\"],\n          readOnly: true,\n        },\n      ),\n    };\n\n    if (execMod && patchMod) {\n      entries[\"db-exec\"] = wrapCliScript(\n        {\n          description:\n            \"Write to the app's own SQL database ONLY. Runs INSERT / UPDATE / DELETE / REPLACE against the app's internal tables. For multiple related writes, pass `statements` so they run sequentially in one transaction instead of issuing several db-exec calls. Writes are auto-scoped to the current user/org, and `owner_email` / `org_id` are auto-injected on INSERT. Schema changes (CREATE/ALTER/DROP) are blocked. Never use this to backfill missing data for a read/analysis request or to create/modify users, members, roles, permissions, admin flags, or ownership; use a dedicated app action or reviewed code. IMPORTANT: This tool CANNOT write to external data sources like BigQuery, HubSpot, etc. For external services, use the appropriate template action.\",\n          parameters: dbExecToolParameters(),\n        },\n        execMod.default,\n      );\n      entries[\"db-patch\"] = wrapCliScript(\n        {\n          description:\n            \"Surgical patch on a large text/JSON column in the app's SQL database. Two modes: (1) text find/replace via `find`/`replace`/`edits` — best for small edits to documents, slide HTML, etc. (2) structural JSON ops via `json-ops` — STRONGLY PREFERRED when the column is JSON (dashboard configs, form schemas, slide decks) because it avoids all the brace/quote/comma surgery that text find/replace requires. Use `json-ops` to set/remove values at a JSON Pointer path, or to move/insert array items — e.g. reorder dashboard panels, add a filter, rename a field. Targets exactly one row (narrow `where` by primary key). Same per-user/org scoping as db-exec.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              table: {\n                type: \"string\",\n                description: \"Table name (e.g. 'settings')\",\n              },\n              column: {\n                type: \"string\",\n                description:\n                  \"Text/JSON column to patch (e.g. 'value' for settings)\",\n              },\n              where: {\n                type: \"string\",\n                description:\n                  \"WHERE clause that matches exactly one row (e.g. \\\"key = 'o:org1:sql-dashboard-foo'\\\")\",\n              },\n              find: {\n                type: \"string\",\n                description:\n                  \"Text mode: substring to find. Must match EXACTLY ONE occurrence by default (like Claude Code's Edit tool). If 0 matches, you get 'NOT FOUND'. If >1 matches, you get surrounding context for each match — widen `find` with unique context and retry. Use `all: \\\"true\\\"` to replace every occurrence.\",\n              },\n              replace: {\n                type: \"string\",\n                description: \"Text mode: replacement substring\",\n              },\n              edits: {\n                type: \"string\",\n                description:\n                  'Text mode batch: JSON array of {find, replace} pairs. Same uniqueness rule applies to each `find`. Example: \\'[{\"find\":\"a\",\"replace\":\"b\"}]\\'',\n              },\n              \"json-ops\": {\n                type: \"string\",\n                description:\n                  'JSON mode: JSON array of structural ops. Each op is {op, path, value?, from?}. `op` is one of \"set\", \"remove\", \"insert\", \"move\", \"move-before\". `path` / `from` use JSON Pointer (\"/panels/3/title\"). Examples — reorder: \\'[{\"op\":\"move\",\"from\":\"/panels/7\",\"path\":\"/panels/1\"}]\\'; edit field: \\'[{\"op\":\"set\",\"path\":\"/panels/0/title\",\"value\":\"New\"}]\\'; delete filter: \\'[{\"op\":\"remove\",\"path\":\"/filters/2\"}]\\'; add panel: \\'[{\"op\":\"insert\",\"path\":\"/panels/0\",\"value\":{\"id\":\"p\",\"title\":\"...\"}}]\\'. Much safer than text find/replace for JSON columns.',\n              },\n              all: {\n                type: \"string\",\n                description:\n                  'Text mode: set to \"true\" to replace every occurrence of each `find` (default requires exactly one match)',\n                enum: [\"true\"],\n              },\n            },\n            required: [\"table\", \"column\", \"where\"],\n          },\n        },\n        patchMod.default,\n      );\n    }\n\n    return entries;\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates read-only package lookup tools so agents can inspect version-matched\n * framework docs and source bundled in @agent-native/core at runtime.\n */\nexport async function createDocsScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  const entries: Record<string, ActionEntry> = {};\n\n  try {\n    const mod = await import(\"../../scripts/docs/search.js\");\n    entries[\"docs-search\"] = wrapCliScript(\n      {\n        description:\n          \"Search and read agent-native framework documentation, bundled AGENTS.md, and codebase skills. Use --list to see all pages, --query to search, --slug to read a specific page. Codebase skill pages use slugs like skill-<name>.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            query: {\n              type: \"string\",\n              description:\n                \"Search term to find relevant docs (e.g. 'actions', 'authentication', 'database')\",\n            },\n            slug: {\n              type: \"string\",\n              description:\n                \"Read a specific doc page by slug (e.g. 'actions', 'authentication', 'database')\",\n            },\n            list: {\n              type: \"string\",\n              description: 'Set to \"true\" to list all available doc pages',\n              enum: [\"true\"],\n            },\n          },\n        },\n      },\n      mod.default,\n      { readOnly: true },\n    );\n  } catch {\n    // Keep source-search available if docs-search fails during a partial build.\n  }\n\n  try {\n    const mod = await import(\"../../scripts/docs/source-search.js\");\n    if (!mod.hasSourceCorpus()) {\n      return entries;\n    }\n    entries[\"source-search\"] = wrapCliScript(\n      {\n        description:\n          \"Search and read the packaged Agent Native source corpus under node_modules/@agent-native/core/corpus. Use --list for sections, --query to search core/template source, and --path to read a file.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            query: {\n              type: \"string\",\n              description:\n                \"Search term to find relevant core or template source (e.g. 'defineAction', 'useActionQuery', 'view-screen').\",\n            },\n            path: {\n              type: \"string\",\n              description:\n                \"Read a specific corpus file or list a directory (e.g. 'templates/plan/AGENTS.md' or 'core/src/action.ts').\",\n            },\n            list: {\n              type: \"string\",\n              description: 'Set to \"true\" to list corpus sections',\n              enum: [\"true\"],\n            },\n          },\n        },\n      },\n      mod.default,\n      { readOnly: true },\n    );\n  } catch {\n    // Older package installs may not have the corpus/search script yet.\n  }\n\n  return entries;\n}\n\n/**\n * Creates resource ScriptEntries available in both prod and dev modes.\n */\nexport function shouldDefaultResourceWriteToWorkspace(path: string): boolean {\n  const normalized = path.replace(/^\\/+/, \"\");\n  return (\n    normalized === \"AGENTS.md\" ||\n    normalized === \"LEARNINGS.md\" ||\n    normalized.startsWith(\"memory/\") ||\n    normalized.startsWith(\"skills/\") ||\n    normalized.startsWith(\"jobs/\") ||\n    normalized.startsWith(\"agents/\") ||\n    normalized.startsWith(\"remote-agents/\")\n  );\n}\n\nexport async function createResourceScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  try {\n    const [list, read, effective, write, del, saveMem, delMem, store] =\n      await Promise.all([\n        import(\"../../scripts/resources/list.js\"),\n        import(\"../../scripts/resources/read.js\"),\n        import(\"../../scripts/resources/effective.js\"),\n        import(\"../../scripts/resources/write.js\"),\n        import(\"../../scripts/resources/delete.js\"),\n        import(\"../../scripts/resources/save-memory.js\"),\n        import(\"../../scripts/resources/delete-memory.js\"),\n        import(\"../../resources/store.js\"),\n      ]);\n\n    // Wrap each CLI runner so it captures stdout and converts args properly\n    const listEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      list.default,\n      { readOnly: true },\n    );\n    const readEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      read.default,\n      { readOnly: true },\n    );\n    const writeEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      write.default,\n    );\n    const effectiveEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      effective.default,\n      { readOnly: true },\n    );\n    const deleteEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      del.default,\n    );\n\n    return {\n      resources: {\n        tool: {\n          description:\n            'Manage workspace resources. Actions: \"list\" (browse visible files), \"read\" (get contents), \"effective\" (show workspace -> organization/app -> personal inheritance for a path), \"write\" (create/update personal or shared; workspace only for local file mode control files), \"promote\" (make agent scratch visible), \"delete\" (remove personal or shared; workspace only for local file mode control files). Agent scratch writes are hidden from the Workspace view by default; use visibility=\"workspace\" only for files the user explicitly wants to keep/manage.',\n          parameters: {\n            type: \"object\",\n            properties: {\n              action: {\n                type: \"string\",\n                description: \"The operation to perform\",\n                enum: [\n                  \"list\",\n                  \"read\",\n                  \"effective\",\n                  \"write\",\n                  \"promote\",\n                  \"delete\",\n                ],\n              },\n              path: {\n                type: \"string\",\n                description:\n                  \"Resource path (e.g. 'LEARNINGS.md', 'notes/ideas.md'). Required for read/write/delete.\",\n              },\n              content: {\n                type: \"string\",\n                description: \"Content to write. Required for write.\",\n              },\n              scope: {\n                type: \"string\",\n                description:\n                  \"personal, shared, workspace, or all (default varies by action). Workspace is read-only when inherited from Dispatch; in local file mode AGENTS.md, agent-native.json, mcp.config.json, .mcp.json, and skills/ are writable.\",\n                enum: [\"personal\", \"shared\", \"workspace\", \"all\"],\n              },\n              prefix: {\n                type: \"string\",\n                description:\n                  \"Filter by path prefix when listing (e.g. 'notes/')\",\n              },\n              mime: {\n                type: \"string\",\n                description:\n                  \"MIME type for write (default: inferred from extension)\",\n              },\n              format: {\n                type: \"string\",\n                description:\n                  'Output format for list: \"json\" or \"text\" (default: text)',\n                enum: [\"json\", \"text\"],\n              },\n              visibility: {\n                type: \"string\",\n                description:\n                  'Visibility for write: \"agent_scratch\" for internal working files, \"workspace\" for user-requested files. Defaults to agent_scratch except durable instruction/skill/job/memory paths.',\n                enum: [\"workspace\", \"agent_scratch\"],\n              },\n              includeAgentScratch: {\n                type: \"boolean\",\n                description: \"Include hidden agent scratch files when listing.\",\n              },\n            },\n            required: [\"action\"],\n          },\n        },\n        planMode: {\n          effect: (args) =>\n            args.action === \"list\" ||\n            args.action === \"read\" ||\n            args.action === \"effective\"\n              ? \"read\"\n              : \"write\",\n          allowedValues: { action: [\"list\", \"read\", \"effective\"] },\n          description:\n            \"Plan mode allows listing and reading workspace resources.\",\n        },\n        run: async (args: Record<string, string>) => {\n          const { action: a, ...rest } = args;\n          if (a === \"list\") return listEntry.run(rest);\n          if (a === \"read\") {\n            if (!rest.path) return \"Error: path is required for read\";\n            return readEntry.run(rest);\n          }\n          if (a === \"effective\") {\n            if (!rest.path) return \"Error: path is required for effective\";\n            return effectiveEntry.run(rest);\n          }\n          if (a === \"write\") {\n            if (\n              !rest.path ||\n              rest.content === undefined ||\n              rest.content === null\n            )\n              return \"Error: path and content are required for write\";\n            rest.createdBy = \"agent\";\n            rest.visibility =\n              rest.visibility ??\n              (shouldDefaultResourceWriteToWorkspace(String(rest.path))\n                ? \"workspace\"\n                : \"agent_scratch\");\n            const runCtx = getRequestRunContext();\n            if (runCtx?.threadId) rest.threadId = runCtx.threadId;\n            return writeEntry.run(rest);\n          }\n          if (a === \"promote\") {\n            if (!rest.path) return \"Error: path is required for promote\";\n            const scope = rest.scope ?? \"personal\";\n            if (scope === \"workspace\" || scope === \"all\") {\n              return \"Error: promote supports personal or shared scope only\";\n            }\n            const owner =\n              scope === \"shared\"\n                ? store.sharedResourceOwner(getRequestOrgId())\n                : (getRequestRunContext()?.owner ??\n                  getRequestUserEmail() ??\n                  getAmbientUserEmail());\n            if (!owner) {\n              return \"Error: promote requires an authenticated user\";\n            }\n            const resource = await store.resourceGetByPath(\n              owner,\n              String(rest.path),\n            );\n            if (!resource) {\n              return `Resource not found: ${rest.path}`;\n            }\n            const promoted = await store.resourcePut(\n              owner,\n              resource.path,\n              resource.content,\n              resource.mimeType,\n              {\n                createdBy: resource.createdBy,\n                visibility: \"workspace\",\n                threadId: resource.threadId,\n                runId: resource.runId,\n                expiresAt: null,\n                metadata: resource.metadata,\n              },\n            );\n            return `Promoted resource: ${promoted.path}`;\n          }\n          if (a === \"delete\") {\n            if (!rest.path) return \"Error: path is required for delete\";\n            return deleteEntry.run(rest);\n          }\n          return `Error: unknown action \"${a}\". Use: list, read, write, promote, delete`;\n        },\n      },\n      \"save-memory\": wrapCliScript(\n        {\n          description:\n            \"Save a memory for future conversations. Creates or updates a memory file and its index entry. Use proactively when you learn preferences, corrections, project context, or references.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              name: {\n                type: \"string\",\n                description:\n                  \"Short kebab-case identifier (e.g. 'coding-style', 'deploy-process'). Used as the filename.\",\n              },\n              type: {\n                type: \"string\",\n                description: \"Memory category\",\n                enum: [\"user\", \"feedback\", \"project\", \"reference\"],\n              },\n              description: {\n                type: \"string\",\n                description:\n                  \"One-line summary shown in the memory index (keep under 80 chars)\",\n              },\n              content: {\n                type: \"string\",\n                description:\n                  \"The memory content in markdown. For updates, read first and provide full updated content.\",\n              },\n            },\n            required: [\"name\", \"type\", \"description\", \"content\"],\n          },\n        },\n        saveMem.default,\n      ),\n      \"delete-memory\": wrapCliScript(\n        {\n          description:\n            \"Delete a memory entry and remove it from the memory index.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              name: {\n                type: \"string\",\n                description: \"The memory name to delete (e.g. 'coding-style')\",\n              },\n            },\n            required: [\"name\"],\n          },\n        },\n        delMem.default,\n      ),\n    };\n  } catch {\n    // Resources not available — skip silently\n    return {};\n  }\n}\n\n/**\n * Creates a unified chat-history ActionEntry that dispatches to search, open,\n * rename, or lightweight organization actions.\n */\nexport async function createChatScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  try {\n    const [searchMod, openMod] = await Promise.all([\n      import(\"../../scripts/chat/search-chats.js\"),\n      import(\"../../scripts/chat/open-chat.js\"),\n    ]);\n\n    const searchEntry = wrapCliScript(\n      {\n        description: \"Search or list past agent chat threads.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            query: {\n              type: \"string\",\n              description:\n                \"Search term to find chats by title, preview, or content\",\n            },\n            limit: {\n              type: \"string\",\n              description: \"Max number of results (default: 20)\",\n            },\n            format: {\n              type: \"string\",\n              description: \"Output format\",\n              enum: [\"json\", \"text\"],\n            },\n            includeArchived: {\n              type: \"boolean\",\n              description:\n                \"Also include archived chats in the results. Archived chats are excluded by default.\",\n            },\n          },\n        },\n      },\n      searchMod.default,\n    );\n\n    const openEntry = wrapCliScript(\n      {\n        description: \"Open a chat thread in the UI.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            id: {\n              type: \"string\",\n              description: \"The chat thread ID to open\",\n            },\n          },\n          required: [\"id\"],\n        },\n      },\n      openMod.default,\n    );\n\n    return {\n      \"chat-history\": {\n        tool: {\n          description:\n            \"Manage past agent chat threads. Use action 'search' to find previous conversations by keyword, 'open' to open a thread in the UI, or 'rename'/'pin'/'unpin'/'archive' to organize history.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              action: {\n                type: \"string\",\n                description: \"The operation to perform\",\n                enum: [\"search\", \"open\", \"rename\", \"pin\", \"unpin\", \"archive\"],\n              },\n              query: {\n                type: \"string\",\n                description:\n                  \"(search) Search term to find chats by title, preview, or content\",\n              },\n              limit: {\n                type: \"string\",\n                description: \"(search) Max number of results (default: 20)\",\n              },\n              format: {\n                type: \"string\",\n                description: \"(search) Output format\",\n                enum: [\"json\", \"text\"],\n              },\n              includeArchived: {\n                type: \"boolean\",\n                description:\n                  \"(search) Also include archived chats in the results. Archived chats are excluded by default, matching the 'archive' action's effect on the chat list.\",\n              },\n              id: {\n                type: \"string\",\n                description:\n                  \"(open, rename, pin, unpin, archive) The chat thread ID to manage\",\n              },\n              title: {\n                type: \"string\",\n                description: \"(rename) New chat title\",\n              },\n            },\n            required: [\"action\"],\n          },\n        },\n        planMode: {\n          effect: (args) => (args.action === \"search\" ? \"read\" : \"write\"),\n          allowedValues: { action: [\"search\"] },\n          description: \"Plan mode allows searching chat history.\",\n        },\n        run: async (args) => {\n          if (args?.action === \"open\") {\n            return openEntry.run(args);\n          }\n          if (\n            args?.action === \"rename\" ||\n            args?.action === \"pin\" ||\n            args?.action === \"unpin\" ||\n            args?.action === \"archive\"\n          ) {\n            const id = typeof args?.id === \"string\" ? args.id : \"\";\n            if (!id) return \"Missing required id.\";\n            const owner =\n              getRequestRunContext()?.owner ?? getRequestUserEmail() ?? \"\";\n            if (!owner) return \"No authenticated user is available.\";\n            const thread = await resolveThreadAccess(owner, id, \"editor\", {\n              orgId: getRequestOrgId(),\n            });\n            if (!thread) {\n              return `Chat thread \"${id}\" not found.`;\n            }\n            const title = thread.title || thread.preview || \"(untitled)\";\n            if (args.action === \"rename\") {\n              const nextTitle =\n                typeof args?.title === \"string\"\n                  ? args.title.replace(/\\s+/g, \" \").trim().slice(0, 160)\n                  : \"\";\n              if (!nextTitle) return \"Missing required title.\";\n              const renamed = await renameThread(id, nextTitle);\n              if (!renamed) return `Chat thread \"${id}\" could not be renamed.`;\n              return `Renamed chat \"${title}\" to \"${nextTitle}\".`;\n            }\n            if (args.action === \"archive\") {\n              const archived = await setThreadArchived(id, true);\n              if (!archived)\n                return `Chat thread \"${id}\" could not be archived.`;\n              return `Archived chat: ${title}`;\n            }\n            const pinned = await setThreadPinned(id, args.action === \"pin\");\n            if (!pinned) return `Chat thread \"${id}\" could not be updated.`;\n            return `${args.action === \"pin\" ? \"Pinned\" : \"Unpinned\"} chat: ${title}`;\n          }\n          return searchEntry.run(args);\n        },\n      },\n    };\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates the consolidated manage-agent-engine tool (list / set / test).\n * Let the agent inspect and configure the active LLM engine.\n */\nexport async function createAgentEngineScriptEntries(\n  appId?: string,\n): Promise<Record<string, ActionEntry>> {\n  try {\n    const mod =\n      await import(\"../../scripts/agent-engines/manage-agent-engine.js\");\n\n    return {\n      \"manage-agent-engine\": {\n        tool: mod.tool,\n        planMode: {\n          effect: (args) => (args.action === \"list\" ? \"read\" : \"write\"),\n          allowedValues: { action: [\"list\"] },\n          description: \"Plan mode allows listing available agent engines.\",\n        },\n        run: (args) =>\n          mod.run({\n            ...args,\n            appId:\n              typeof args.appId === \"string\" && args.appId.trim()\n                ? args.appId\n                : (appId ?? \"\"),\n          }),\n      },\n    };\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates the manage-agent-loop-settings tool. Lets the agent inspect and\n * configure the loop step limit it may hit on long-running work.\n */\nexport async function createAgentLoopSettingsScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  try {\n    const mod = await import(\"../../scripts/manage-agent-loop-settings.js\");\n\n    return {\n      \"manage-agent-loop-settings\": { tool: mod.tool, run: mod.run },\n    };\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates the call-agent ActionEntry for cross-agent A2A communication.\n * Binds selfAppId so the agent cannot call itself via call-agent.\n */\nexport async function createCallAgentScriptEntry(\n  selfAppId?: string,\n): Promise<Record<string, ActionEntry>> {\n  const entries: Record<string, ActionEntry> = {};\n\n  try {\n    const mod = await import(\"../../scripts/call-agent.js\");\n    entries[\"call-agent\"] = {\n      tool: mod.tool,\n      planMode: {\n        effect: (args) => {\n          const keys = Object.keys(args);\n          if (\n            keys.some(\n              (key) => key !== \"agent\" && key !== \"action\" && key !== \"input\",\n            )\n          ) {\n            return \"write\";\n          }\n          if (\n            typeof args.agent !== \"string\" ||\n            !args.agent.trim() ||\n            typeof args.action !== \"string\" ||\n            !args.action.trim() ||\n            !Object.hasOwn(args, \"input\") ||\n            args.input === null ||\n            typeof args.input !== \"object\" ||\n            Array.isArray(args.input)\n          ) {\n            return \"unknown\";\n          }\n          return \"read\";\n        },\n        allowedProperties: [\"agent\", \"action\", \"input\"],\n        requiredProperties: [\"agent\", \"action\"],\n        description:\n          \"Plan mode allows only exact read-only cross-app action calls with agent, action, and input.\",\n      },\n      run: (args, context) => mod.run(args, context, selfAppId),\n    };\n  } catch {\n    // A missing built-in leaves the rest of the toolset usable.\n  }\n\n  try {\n    const mod = await import(\"../../scripts/describe-workspace-apps.js\");\n    entries[\"describe-workspace-apps\"] = {\n      tool: mod.tool,\n      run: (args, context) => mod.run(args, context, selfAppId),\n      readOnly: true,\n    };\n  } catch {\n    // A missing built-in leaves the rest of the toolset usable.\n  }\n\n  return entries;\n}\n"]}

package/dist/server/agent-chat-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-chat-plugin.d.ts","sourceRoot":"","sources":["../../src/server/agent-chat-plugin.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,iBAAiB,CAAC;AA2H7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAEvE,OAAO,EACL,yBAAyB,EACzB,KAAK,6BAA6B,EACnC,MAAM,+BAA+B,CAAC;AAkCvC,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,YAAY,EAAE,6BAA6B,EAAE,CAAC;AAwE9C,OAAO,EACL,0BAA0B,EAM1B,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,yBAAyB,EAG1B,MAAM,oCAAoC,CAAC;AAW5C,OAAO,EACL,gCAAgC,EAOjC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,yCAAyC,EAAE,MAAM,qCAAqC,CAAC;AAChG,OAAO,EACL,sBAAsB,EAGvB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iCAAiC,EAAE,MAAM,wCAAwC,CAAC;AAC3F,OAAO,EAEL,sCAAsC,EACvC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAYxE,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,gCAAgC,EAAE,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,CAAC;AACpC,YAAY,EAAE,sBAAsB,EAAE,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,CAAC;AACtC,OAAO,EAAE,sCAAsC,EAAE,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,iCAAiC,EAAE,CAAC;AAC7C,OAAO,EAAE,yCAAyC,EAAE,CAAC;AAErD,wBAAgB,iCAAiC,CAC/C,OAAO,CAAC,EAAE,IAAI,CACZ,sBAAsB,EACtB,kBAAkB,GAAG,wBAAwB,GAAG,uBAAuB,CACxE;IAGC,gBAAgB;IAChB,sBAAsB;IACtB,qBAAqB;EAExB;AAED,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,MAAM,EACd,WAAW,GAAE,CACX,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,UAAU,KAChB,OAAO,CAAC,IAAI,CAA2B,EAC5C,OAAO,GAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAK5B,GACA;IACD,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,CAAC;IACvC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B,CAqCA;AAID,wBAAsB,mCAAmC,CACvD,KAAK,GAAE,MAAM,GAAG,IAAI,GAAG,SAA6B,GACnD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAU7B;AAED,wBAAgB,wBAAwB,CACtC,6BAA6B,EAAE,MAAM,EACrC,sBAAsB,EAAE,MAAM,GAC7B,MAAM,CAER;AAaD;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,aAKlC,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,oBAAoB,EAAE,GAAG,SAAS,EAChD,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IACJ,eAAe,EAAE,CACf,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9B,uBAAuB,EAAE,CACvB,GAAG,EAAE,oBAAoB,KACtB,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;CAC/B,GACA,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAI1B;AAED,wBAAgB,qBAAqB,CACnC,OAAO,CAAC,EAAE,sBAAsB,GAC/B,cAAc,CAo9KhB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAwC,CAAC;AAE9E,OAAO,EAEL,mBAAmB,EACnB,uBAAuB,EAGxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,CAAC"}
+{"version":3,"file":"agent-chat-plugin.d.ts","sourceRoot":"","sources":["../../src/server/agent-chat-plugin.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,iBAAiB,CAAC;AA2H7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAEvE,OAAO,EACL,yBAAyB,EACzB,KAAK,6BAA6B,EACnC,MAAM,+BAA+B,CAAC;AAkCvC,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,YAAY,EAAE,6BAA6B,EAAE,CAAC;AAwE9C,OAAO,EACL,0BAA0B,EAM1B,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,yBAAyB,EAG1B,MAAM,oCAAoC,CAAC;AAW5C,OAAO,EACL,gCAAgC,EAOjC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,yCAAyC,EAAE,MAAM,qCAAqC,CAAC;AAChG,OAAO,EACL,sBAAsB,EAGvB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iCAAiC,EAAE,MAAM,wCAAwC,CAAC;AAC3F,OAAO,EAEL,sCAAsC,EACvC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAYxE,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,gCAAgC,EAAE,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,CAAC;AACpC,YAAY,EAAE,sBAAsB,EAAE,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,CAAC;AACtC,OAAO,EAAE,sCAAsC,EAAE,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,iCAAiC,EAAE,CAAC;AAC7C,OAAO,EAAE,yCAAyC,EAAE,CAAC;AAErD,wBAAgB,iCAAiC,CAC/C,OAAO,CAAC,EAAE,IAAI,CACZ,sBAAsB,EACtB,kBAAkB,GAAG,wBAAwB,GAAG,uBAAuB,CACxE;IAGC,gBAAgB;IAChB,sBAAsB;IACtB,qBAAqB;EAExB;AAED,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,MAAM,EACd,WAAW,GAAE,CACX,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,UAAU,KAChB,OAAO,CAAC,IAAI,CAA2B,EAC5C,OAAO,GAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAK5B,GACA;IACD,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,CAAC;IACvC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B,CAqCA;AAID,wBAAsB,mCAAmC,CACvD,KAAK,GAAE,MAAM,GAAG,IAAI,GAAG,SAA6B,GACnD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAU7B;AAED,wBAAgB,wBAAwB,CACtC,6BAA6B,EAAE,MAAM,EACrC,sBAAsB,EAAE,MAAM,GAC7B,MAAM,CAER;AAaD;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,aAKlC,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,oBAAoB,EAAE,GAAG,SAAS,EAChD,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IACJ,eAAe,EAAE,CACf,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9B,uBAAuB,EAAE,CACvB,GAAG,EAAE,oBAAoB,KACtB,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;CAC/B,GACA,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAI1B;AAED,wBAAgB,qBAAqB,CACnC,OAAO,CAAC,EAAE,sBAAsB,GAC/B,cAAc,CAw+KhB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAwC,CAAC;AAE9E,OAAO,EAEL,mBAAmB,EACnB,uBAAuB,EAGxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/server/agent-chat-plugin.js

@@ -322,7 +322,7 @@ export function createAgentChatPlugin(options) {
                 });
                 const missing = requested.filter((toolName) => !entries[toolName]);
                 if (missing.length > 0) {
-                    throw new Error(`Configured MCP tools are unavailable in this run: ${missing.join(", ")}. Reconnect the MCP server or update the job's capability list.`);
+                    throw new Error(`Configured MCP tools are unavailable in this run: ${missing.join(", ")}. Reconnect the MCP server or update the automation's capability list.`);
                 }
                 return entries;
             };
@@ -397,7 +397,7 @@ export function createAgentChatPlugin(options) {
             const databaseToolsMode = normalizeDatabaseToolsMode(options?.databaseTools);
             const databaseToolsEnabled = databaseToolsMode !== "off";
             const databaseWriteToolsEnabled = databaseToolsMode === "write";
-            const extensionToolsEnabled = options?.extensionTools !== false;
+            const extensionToolsEnabled = options?.extensionTools === true;
             const dbScripts = databaseToolsEnabled
                 ? await createDbScriptEntries(databaseToolsMode, {
                     extensionTools: extensionToolsEnabled,
@@ -420,7 +420,7 @@ export function createAgentChatPlugin(options) {
             const browserTools = createBuilderBrowserTool({
                 getOrigin: () => getRequestRunContext()?.requestOrigin ?? "http://localhost:3000",
                 getOwner: () => getRequestRunContext()?.owner ?? getRequestUserEmail(),
-                extensionTools: options?.extensionTools,
+                extensionTools: extensionToolsEnabled,
             });
             // Auto-mount A2A protocol endpoints so every app is discoverable
             // and callable by other agents via the standard protocol.
@@ -459,6 +459,7 @@ export function createAgentChatPlugin(options) {
                             .readdirSync(actionsDir)
                             .filter((f) => f.endsWith(".ts") &&
                             !f.startsWith("_") &&
+                            !/\.(test|spec)\.ts$/.test(f) &&
                             !skipFiles.has(f.replace(/\.ts$/, "")));
                         for (const file of files) {
                             const name = file.replace(/\.ts$/, "");
@@ -728,6 +729,15 @@ export function createAgentChatPlugin(options) {
                 });
             }
             catch { }
+            let remoteBrowserTools = {};
+            try {
+                const { createRemoteBrowserActionEntries } = await import("../integrations/remote-browser-actions.js");
+                remoteBrowserTools = createRemoteBrowserActionEntries({
+                    getOwnerEmail: () => requireCurrentRunOwner("use a remote browser session"),
+                    getOrgId: () => getRequestOrgId() ?? null,
+                });
+            }
+            catch { }
             // Core send-email tool — only registered when RESEND_API_KEY or
             // SENDGRID_API_KEY is set. Keyed "core-send-email" to avoid colliding
             // with the mail template's richer "send-email" action (template wins
@@ -882,6 +892,7 @@ export function createAgentChatPlugin(options) {
                     ...workspaceFileActions,
                     ...toolActions,
                     ...browserSessionTools,
+                    ...remoteBrowserTools,
                     ...coreEmailTools,
                     ...coreAttachmentTools,
                     ...browserTools,
@@ -908,6 +919,7 @@ export function createAgentChatPlugin(options) {
                     ...workspaceFileActions,
                     ...toolActions,
                     ...browserSessionTools,
+                    ...remoteBrowserTools,
                     ...coreEmailTools,
                     ...coreAttachmentTools,
                     ...browserTools,
@@ -946,6 +958,7 @@ export function createAgentChatPlugin(options) {
                     ...workspaceFileActions,
                     ...toolActions,
                     ...browserSessionTools,
+                    ...remoteBrowserTools,
                     ...coreEmailTools,
                     ...coreAttachmentTools,
                     ...browserTools,
@@ -1245,6 +1258,7 @@ export function createAgentChatPlugin(options) {
                             ...workspaceFileActions,
                             ...toolActions,
                             ...browserSessionTools,
+                            ...remoteBrowserTools,
                             ...coreEmailTools,
                             ...coreAttachmentTools,
                             ...browserTools,
@@ -1267,6 +1281,7 @@ export function createAgentChatPlugin(options) {
                             ...workspaceFileActions,
                             ...toolActions,
                             ...browserSessionTools,
+                            ...remoteBrowserTools,
                             ...coreEmailTools,
                             ...coreAttachmentTools,
                             ...browserTools,
@@ -2097,6 +2112,7 @@ export function createAgentChatPlugin(options) {
                 ...workspaceFileActions,
                 ...toolActions,
                 ...browserSessionTools,
+                ...remoteBrowserTools,
                 ...coreEmailTools,
                 ...coreAttachmentTools,
                 ...browserTools,
@@ -2561,6 +2577,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             ...workspaceFileActions,
                             ...toolActions,
                             ...browserSessionTools,
+                            ...remoteBrowserTools,
                             ...coreEmailTools,
                             ...coreAttachmentTools,
                             ...browserTools,
@@ -4836,7 +4853,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                 try {
                     const { initTriggerDispatcher } = await import("../triggers/dispatcher.js");
                     await initTriggerDispatcher({
-                        getActions: () => ({
+                        getActions: (automation) => ({
                             ...templateScripts,
                             ...resourceScripts,
                             ...docsScripts,
@@ -4849,6 +4866,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             ...fetchTool,
                             ...webSearchTool,
                             ...toolActions,
+                            ...getJobMcpActionEntries(automation),
                         }),
                         getSystemPrompt: async (owner) => {
                             const resources = await loadResourcesForPrompt(owner, lazyContext, options?.appId);
@@ -4859,10 +4877,11 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                         },
                         // See the matching comment on schedulerDeps.getInitialToolNames
                         // above — same shared `basePrompt`, same reasoning.
-                        getInitialToolNames: () => [
+                        getInitialToolNames: (automation) => [
                             ...effectiveInitialToolNames,
                             "manage-jobs",
                             "manage-progress",
+                            ...(automation?.meta.mcpTools ?? []),
                         ],
                         apiKey: options?.apiKey,
                         model: options?.model,