@agent-native/core 0.131.7 → 0.132.0

package/corpus/templates/slides/app/components/deck/SlideRenderer.tsx

@@ -6,6 +6,7 @@ import {
   useRef,
   useLayoutEffect,
   useCallback,
+  useId,
   type ReactNode,
 } from "react";
 import ReactMarkdown from "react-markdown";
@@ -477,6 +478,8 @@ function AutoFitContent({
 
 /** Renders blank slide HTML content and applies white filter to logo images */
 function BlankSlideContent({ content }: { content: string }) {
+  const scopeId = `slide-${useId().replace(/[^a-zA-Z0-9_-]/g, "")}`;
+  const scopeSelector = `[data-slide-content-scope="${scopeId}"]`;
   // Memoize derived strings + the dangerouslySetInnerHTML object on `content` so
   // the prop value has a stable reference across re-renders. React 19 only checks
   // reference equality on `dangerouslySetInnerHTML` and unconditionally re-assigns
@@ -505,6 +508,7 @@ function BlankSlideContent({ content }: { content: string }) {
           return before + ' style="filter:brightness(0) invert(1);"' + close;
         },
       ),
+      { scopeSelector },
     );
 
     return {
@@ -516,7 +520,10 @@ function BlankSlideContent({ content }: { content: string }) {
 
   if (mermaidBlocks.length > 0) {
     return (
-      <div className="slide-content text-white/90 w-full block h-full">
+      <div
+        className="slide-content text-white/90 w-full block h-full"
+        data-slide-content-scope={scopeId}
+      >
         <MermaidHtmlContent
           html={htmlWithPlaceholders}
           mermaidBlocks={mermaidBlocks}
@@ -528,6 +535,7 @@ function BlankSlideContent({ content }: { content: string }) {
   return (
     <div
       className="slide-content text-white/90 w-full block h-full"
+      data-slide-content-scope={scopeId}
       dangerouslySetInnerHTML={dangerousHtml}
     />
   );

package/corpus/templates/slides/app/components/layout/Layout.tsx

@@ -143,7 +143,7 @@ export function Layout({ children }: LayoutProps) {
               }
             />
           </div>
-          <div className="agent-layout-main-surface flex h-full flex-1 flex-col overflow-hidden">
+          <div className="agent-layout-main-surface flex h-full min-w-0 flex-1 flex-col overflow-hidden">
             {/* Mobile-only nav strip with hamburger — only when there's no page toolbar */}
             {!ownToolbar && (
               <div className="flex h-12 items-center border-b border-border px-4 md:hidden shrink-0">

package/corpus/templates/slides/app/context/DeckContext.tsx

@@ -1029,7 +1029,7 @@ export const defaultSlideContent: Record<SlideLayout, string> = {
 };
 
 export function DeckProvider({ children }: { children: ReactNode }) {
-  const { data: org } = useOrg();
+  const { data: org, isLoading: orgLoading } = useOrg();
   const [decks, setDecks] = useState<Deck[]>([]);
   const [loading, setLoading] = useState(true);
   const [loadError, setLoadError] = useState(false);
@@ -1362,6 +1362,7 @@ export function DeckProvider({ children }: { children: ReactNode }) {
       const requestId = ++deckBaselineRequestIdRef.current;
       const createSeqAtRequest = localCreateSeqRef.current;
       const requestedOpenDeckId = currentOpenDeckIdFromWindow();
+      setLoading(true);
       const loaded = await fetchDecksForCurrentRoute();
       if (
         requestId !== deckBaselineRequestIdRef.current ||
@@ -1371,11 +1372,13 @@ export function DeckProvider({ children }: { children: ReactNode }) {
       }
       if (loaded === null) {
         setLoadError(true);
+        setLoading(false);
         return "failed";
       }
       lastExternalUpdateRef.current = Date.now();
       resetDeckBaseline(loaded, createSeqAtRequest);
       setLoadError(false);
+      setLoading(false);
       return "loaded";
     }, [resetDeckBaseline]);
 
@@ -1385,6 +1388,10 @@ export function DeckProvider({ children }: { children: ReactNode }) {
 
   // Load decks from API on mount
   useEffect(() => {
+    // The deck query is scoped by the active organization on the server. Do
+    // not turn the pre-scope empty response into the app's authoritative empty
+    // state while the org query is still hydrating.
+    if (orgLoading) return;
     const requestId = ++deckBaselineRequestIdRef.current;
     const createSeqAtRequest = localCreateSeqRef.current;
     const requestedOpenDeckId = currentOpenDeckIdFromWindow();
@@ -1405,7 +1412,7 @@ export function DeckProvider({ children }: { children: ReactNode }) {
       setLoadError(loaded === null);
       setLoading(false);
     });
-  }, [resetDeckBaseline]);
+  }, [orgLoading, resetDeckBaseline]);
 
   // Switching orgs re-scopes list-decks server-side but leaves this context's
   // in-memory list untouched, so the previous org's decks linger. Reload when
@@ -1413,6 +1420,7 @@ export function DeckProvider({ children }: { children: ReactNode }) {
   // up on the mount fetch above.
   const lastOrgIdRef = useRef<string | null | undefined>(undefined);
   useEffect(() => {
+    if (orgLoading) return;
     const orgId = org?.orgId ?? null;
     if (lastOrgIdRef.current === undefined) {
       lastOrgIdRef.current = orgId;
@@ -1421,7 +1429,7 @@ export function DeckProvider({ children }: { children: ReactNode }) {
     if (lastOrgIdRef.current === orgId) return;
     lastOrgIdRef.current = orgId;
     void reloadDecks();
-  }, [org?.orgId, reloadDecks]);
+  }, [org?.orgId, orgLoading, reloadDecks]);
 
   // Fallback polling for deck list + open-deck changes. SSE is the primary
   // path; this catches agent/db writes that bypass it without hammering idle

package/corpus/templates/slides/app/lib/sanitize-slide-html.ts

@@ -197,16 +197,40 @@ function sanitizeStyle(style: string): string {
     .join("; ");
 }
 
-function sanitizeStyleSheet(css: string): string {
+function scopeCssSelector(selector: string, scopeSelector?: string): string {
+  const trimmed = selector.trim();
+  if (!scopeSelector || !trimmed || trimmed.startsWith("@")) return trimmed;
+
+  return trimmed
+    .split(",")
+    .map((part) => {
+      const item = part.trim();
+      if (!item) return "";
+      if (item === "*") return `${scopeSelector}, ${scopeSelector} *`;
+      if (/^(?:html|body|:root)\b/i.test(item)) {
+        return item.replace(/^(?:html|body|:root)\b/i, scopeSelector);
+      }
+      return `${scopeSelector} ${item}`;
+    })
+    .filter(Boolean)
+    .join(", ");
+}
+
+function sanitizeStyleSheet(css: string, scopeSelector?: string): string {
   return css
     .replace(/@import[^;]+;?/gi, "")
     .replace(/([^{}]+)\{([^{}]*)\}/g, (_match, selector, body) => {
       const safeBody = sanitizeStyle(String(body));
-      return safeBody ? `${String(selector).trim()} { ${safeBody}; }` : "";
+      const safeSelector = scopeCssSelector(String(selector), scopeSelector);
+      return safeBody && safeSelector ? `${safeSelector} { ${safeBody}; }` : "";
     });
 }
 
-function cleanNode(node: Node, doc: Document): Node | null {
+function cleanNode(
+  node: Node,
+  doc: Document,
+  scopeSelector?: string,
+): Node | null {
   if (node.nodeType === Node.TEXT_NODE) {
     return doc.createTextNode(node.textContent ?? "");
   }
@@ -218,7 +242,7 @@ function cleanNode(node: Node, doc: Document): Node | null {
   if (DROP_WITH_CHILDREN.has(tag)) return null;
 
   if (tag === "style") {
-    const safeCss = sanitizeStyleSheet(el.textContent ?? "");
+    const safeCss = sanitizeStyleSheet(el.textContent ?? "", scopeSelector);
     if (!safeCss.trim()) return null;
     const out = doc.createElement("style");
     out.textContent = safeCss;
@@ -268,17 +292,17 @@ function cleanNode(node: Node, doc: Document): Node | null {
   }
 
   for (const child of Array.from(el.childNodes)) {
-    const cleaned = cleanNode(child, doc);
+    const cleaned = cleanNode(child, doc, scopeSelector);
     if (cleaned) out.appendChild(cleaned);
   }
 
   return out;
 }
 
-function sanitizeHtmlString(html: string): string {
+function sanitizeHtmlString(html: string, scopeSelector?: string): string {
   return html
     .replace(/<style\b[^>]*>([\s\S]*?)<\/style>/gi, (_match, css) => {
-      const safeCss = sanitizeStyleSheet(String(css));
+      const safeCss = sanitizeStyleSheet(String(css), scopeSelector);
       return safeCss
         ? `<style>${safeCss.replace(/<\/style/gi, "<\\/style")}</style>`
         : "";
@@ -314,19 +338,23 @@ function sanitizeHtmlString(html: string): string {
     );
 }
 
-export function sanitizeSlideHtml(html: string): string {
+export function sanitizeSlideHtml(
+  html: string,
+  options?: { scopeSelector?: string },
+): string {
+  const scopeSelector = options?.scopeSelector;
   if (typeof DOMParser === "undefined") {
-    return sanitizeHtmlString(html);
+    return sanitizeHtmlString(html, scopeSelector);
   }
 
   const doc = new DOMParser().parseFromString(html, "text/html");
   const fragment = doc.createDocumentFragment();
   for (const style of Array.from(doc.head.querySelectorAll("style"))) {
-    const cleaned = cleanNode(style, doc);
+    const cleaned = cleanNode(style, doc, scopeSelector);
     if (cleaned) fragment.appendChild(cleaned);
   }
   for (const child of Array.from(doc.body.childNodes)) {
-    const cleaned = cleanNode(child, doc);
+    const cleaned = cleanNode(child, doc, scopeSelector);
     if (cleaned) fragment.appendChild(cleaned);
   }
 

package/corpus/templates/slides/app/pages/Index.tsx

@@ -597,7 +597,7 @@ export default function Index() {
       "Start a `manage-progress` run so progress appears in the app header. Add the first slide as soon as it is ready, then continue one slide at a time so the editor visibly fills in.",
       "After reading any requested or imported source material, but before adding the first slide, choose a concise, specific deck title from the user's request and source material. Call `patch-deck` with `deckId: \"" +
         deckId +
-        '"` and `operations: [{ "op": "patch-deck-fields", "fields": { "title": "<generated title>" } }]`. Never leave a generated deck named "Untitled Deck" or another placeholder.',
+        '"` and `operations: [{ "op": "patch-deck-fields", "fields": { "title": "<generated title>" } }]`. Include only `title` in `fields`; omit all other optional fields. Never leave a generated deck named "Untitled Deck" or another placeholder.',
       "If the user asks for a standalone visual, diagram, hero, one-pager, poster, or a couple of visuals, create only the requested one/few polished visual slides. Do not pad the result into a full presentation.",
       "Add slides ONE AT A TIME using the `add-slide` action with --deckId=" +
         deckId +
@@ -746,7 +746,7 @@ export default function Index() {
   );
 
   return (
-    <main className="flex-1 overflow-y-auto px-4 sm:px-6 py-6 sm:py-10">
+    <main className="min-w-0 flex-1 overflow-y-auto px-4 py-6 sm:px-6 sm:py-10">
       {loading ? (
         <>
           <div className="flex items-center justify-end mb-4">

package/corpus/templates/slides/changelog/2026-07-30-slide-previews-keep-their-aspect-ratio-isolate-embedded-styl.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-30
+---
+
+Slide previews keep their aspect ratio, isolate embedded styles, and remain usable at narrow widths

package/corpus/templates/slides/changelog/2026-07-30-slides-no-longer-lose-decks-while-organization-access-is-loa.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-30
+---
+
+Slides no longer lose decks while organization access is loading

package/corpus/toolkit/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @agent-native/toolkit
 
+## 0.12.1
+
+### Patch Changes
+
+- 89e5910: Memoize the composer runtime adapters context value so consumer effects stop
+  re-running on every provider render. The voice input preference was re-read from
+  app state, and the sidebar-state listener re-subscribed, once per render.
+
 ## 0.12.0
 
 ### Minor Changes

package/corpus/toolkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/toolkit",
-  "version": "0.12.0",
+  "version": "0.12.1",
   "description": "Reusable app-building UI and helpers for Agent-Native apps.",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {

package/corpus/toolkit/src/composer/runtime-adapters.tsx

@@ -1,6 +1,7 @@
 import {
   createContext,
   useContext,
+  useMemo,
   type ComponentType,
   type ReactNode,
 } from "react";
@@ -251,18 +252,22 @@ export function ComposerRuntimeAdaptersProvider({
   adapters: ComposerRuntimeAdapters;
   children: ReactNode;
 }) {
+  // Consumers key effects off this value; a fresh identity per render re-runs
+  // every one of them (app-state reads, event subscriptions) on each render.
+  const value = useMemo(
+    () => ({
+      ...fallbackAdapters,
+      ...adapters,
+      models: { ...fallbackModels, ...adapters.models },
+      agentChat: { ...fallbackAdapters.agentChat, ...adapters.agentChat },
+      builder: { ...fallbackAdapters.builder, ...adapters.builder },
+      resources: { ...fallbackAdapters.resources, ...adapters.resources },
+      voice: { ...fallbackAdapters.voice, ...adapters.voice },
+    }),
+    [adapters],
+  );
   return (
-    <ComposerRuntimeAdaptersContext.Provider
-      value={{
-        ...fallbackAdapters,
-        ...adapters,
-        models: { ...fallbackModels, ...adapters.models },
-        agentChat: { ...fallbackAdapters.agentChat, ...adapters.agentChat },
-        builder: { ...fallbackAdapters.builder, ...adapters.builder },
-        resources: { ...fallbackAdapters.resources, ...adapters.resources },
-        voice: { ...fallbackAdapters.voice, ...adapters.voice },
-      }}
-    >
+    <ComposerRuntimeAdaptersContext.Provider value={value}>
       {children}
     </ComposerRuntimeAdaptersContext.Provider>
   );

package/dist/a2a/activity.d.ts

@@ -4,17 +4,33 @@ export declare const A2A_AGENT_ACTIVITY_KIND = "agent-native/agent-activity";
 export declare const A2A_AGENT_ACTIVITY_VERSION = 1;
 export declare const MAX_A2A_ACTIVITY_REASONING_CHARS = 32768;
 export declare const MAX_A2A_ACTIVITY_RESPONSE_CHARS = 32768;
-export declare const MAX_A2A_ACTIVITY_TOTAL_CHARS = 98304;
 export declare const MAX_A2A_ACTIVITY_REASONING_SEGMENTS = 128;
 export declare const MAX_A2A_ACTIVITY_TOOL_CALLS = 64;
 export declare const MAX_A2A_ACTIVITY_TOOL_NAME_CHARS = 96;
 export declare const MAX_A2A_ACTIVITY_TOOL_ID_CHARS = 128;
+export declare const MAX_A2A_ACTIVITY_TOOL_INPUT_CHARS = 1024;
+export declare const MAX_A2A_ACTIVITY_TOOL_RESULT_CHARS = 512;
+/**
+ * Shared ceiling for every recorded tool input/result across the snapshot. The
+ * per-call caps alone allow 64 × 1536 chars, which would push a busy run past
+ * `MAX_A2A_ACTIVITY_TOTAL_CHARS` and make `parseA2AAgentActivityPart` reject
+ * the whole snapshot — trading missing arguments for a missing trace.
+ */
+export declare const MAX_A2A_ACTIVITY_TOOL_PAYLOAD_CHARS = 16384;
+export declare const MAX_A2A_ACTIVITY_TOTAL_CHARS: number;
 export type A2AAgentActivityPhase = "reasoning" | "tool" | "responding" | "complete" | "error";
 export type A2AAgentActivityToolStatus = "running" | "completed" | "failed";
 export interface A2AAgentActivityToolCall {
     name: string;
     id?: string;
     status: A2AAgentActivityToolStatus;
+    /**
+     * Redacted, size-capped JSON of the call's arguments. Absent when the call
+     * had none, or when the snapshot's shared payload budget was already spent.
+     */
+    input?: string;
+    /** Redacted, size-capped head of the tool result (`tool_done` only). */
+    result?: string;
 }
 export interface A2AAgentActivitySnapshot extends Record<string, unknown> {
     kind: typeof A2A_AGENT_ACTIVITY_KIND;
@@ -42,9 +58,11 @@ export interface A2AAgentActivityState {
 }
 export declare function createA2AAgentActivityState(startedAt?: number): A2AAgentActivityState;
 /**
- * Converts internal loop events into a bounded activity snapshot. It carries
- * only reasoning text already emitted to the local chat, never tool inputs or
- * results.
+ * Converts internal loop events into a bounded activity snapshot. Reasoning
+ * text is carried verbatim (it was already emitted to the local chat); tool
+ * arguments and results are carried only in redacted, size-capped form so the
+ * delegated run stays diagnosable without the snapshot becoming a secondary
+ * store of secrets or payloads.
  */
 export declare function applyA2AAgentActivityEvent(state: A2AAgentActivityState, event: AgentChatEvent, updatedAt?: number): A2AAgentActivityState;
 export declare function buildA2AAgentActivitySnapshot(state: A2AAgentActivityState): A2AAgentActivitySnapshot;

package/dist/a2a/activity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"activity.d.ts","sourceRoot":"","sources":["../../src/a2a/activity.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEjD,eAAO,MAAM,uBAAuB,gCAAgC,CAAC;AACrE,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,gCAAgC,QAAS,CAAC;AACvD,eAAO,MAAM,+BAA+B,QAAS,CAAC;AACtD,eAAO,MAAM,4BAA4B,QAAS,CAAC;AACnD,eAAO,MAAM,mCAAmC,MAAM,CAAC;AACvD,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,eAAO,MAAM,gCAAgC,KAAK,CAAC;AACnD,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAElD,MAAM,MAAM,qBAAqB,GAC7B,WAAW,GACX,MAAM,GACN,YAAY,GACZ,UAAU,GACV,OAAO,CAAC;AAEZ,MAAM,MAAM,0BAA0B,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE5E,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,0BAA0B,CAAC;CACpC;AAED,MAAM,WAAW,wBAAyB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACvE,IAAI,EAAE,OAAO,uBAAuB,CAAC;IACrC,OAAO,EAAE,OAAO,0BAA0B,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,qBAAqB,CAAC;IACnC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,EAAE,wBAAwB,EAAE,CAAC;IACtC,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,qBAAqB,CAAC;IACnC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,EAAE,wBAAwB,EAAE,CAAC;IACtC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAgB,2BAA2B,CACzC,SAAS,SAAa,GACrB,qBAAqB,CAUvB;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,qBAAqB,EAC5B,KAAK,EAAE,cAAc,EACrB,SAAS,SAAa,GACrB,qBAAqB,CAkDvB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,qBAAqB,GAC3B,wBAAwB,CAc1B;AAMD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,qBAAqB,GAC3B,QAAQ,CAEV;AAED,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,IAAI,GAAG,OAAO,GACnB,wBAAwB,GAAG,IAAI,CA2BjC"}
+{"version":3,"file":"activity.d.ts","sourceRoot":"","sources":["../../src/a2a/activity.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEjD,eAAO,MAAM,uBAAuB,gCAAgC,CAAC;AACrE,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,gCAAgC,QAAS,CAAC;AACvD,eAAO,MAAM,+BAA+B,QAAS,CAAC;AACtD,eAAO,MAAM,mCAAmC,MAAM,CAAC;AACvD,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,eAAO,MAAM,gCAAgC,KAAK,CAAC;AACnD,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAClD,eAAO,MAAM,iCAAiC,OAAO,CAAC;AACtD,eAAO,MAAM,kCAAkC,MAAM,CAAC;AACtD;;;;;GAKG;AACH,eAAO,MAAM,mCAAmC,QAAS,CAAC;AAC1D,eAAO,MAAM,4BAA4B,QACK,CAAC;AAE/C,MAAM,MAAM,qBAAqB,GAC7B,WAAW,GACX,MAAM,GACN,YAAY,GACZ,UAAU,GACV,OAAO,CAAC;AAEZ,MAAM,MAAM,0BAA0B,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE5E,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,0BAA0B,CAAC;IACnC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,wBAAyB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACvE,IAAI,EAAE,OAAO,uBAAuB,CAAC;IACrC,OAAO,EAAE,OAAO,0BAA0B,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,qBAAqB,CAAC;IACnC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,EAAE,wBAAwB,EAAE,CAAC;IACtC,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,qBAAqB,CAAC;IACnC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,EAAE,wBAAwB,EAAE,CAAC;IACtC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAgB,2BAA2B,CACzC,SAAS,SAAa,GACrB,qBAAqB,CAUvB;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,qBAAqB,EAC5B,KAAK,EAAE,cAAc,EACrB,SAAS,SAAa,GACrB,qBAAqB,CA8DvB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,qBAAqB,GAC3B,wBAAwB,CAc1B;AAMD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,qBAAqB,GAC3B,QAAQ,CAEV;AAED,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,IAAI,GAAG,OAAO,GACnB,wBAAwB,GAAG,IAAI,CA2BjC"}

package/dist/a2a/activity.js

@@ -1,13 +1,23 @@
 import { sanitizeToolErrorText } from "../agent/tool-error-redaction.js";
+import { redactArgsToJson, redactTextToSummary } from "../audit/redact.js";
 export const A2A_AGENT_ACTIVITY_KIND = "agent-native/agent-activity";
 export const A2A_AGENT_ACTIVITY_VERSION = 1;
 export const MAX_A2A_ACTIVITY_REASONING_CHARS = 32_768;
 export const MAX_A2A_ACTIVITY_RESPONSE_CHARS = 32_768;
-export const MAX_A2A_ACTIVITY_TOTAL_CHARS = 98_304;
 export const MAX_A2A_ACTIVITY_REASONING_SEGMENTS = 128;
 export const MAX_A2A_ACTIVITY_TOOL_CALLS = 64;
 export const MAX_A2A_ACTIVITY_TOOL_NAME_CHARS = 96;
 export const MAX_A2A_ACTIVITY_TOOL_ID_CHARS = 128;
+export const MAX_A2A_ACTIVITY_TOOL_INPUT_CHARS = 1024;
+export const MAX_A2A_ACTIVITY_TOOL_RESULT_CHARS = 512;
+/**
+ * Shared ceiling for every recorded tool input/result across the snapshot. The
+ * per-call caps alone allow 64 × 1536 chars, which would push a busy run past
+ * `MAX_A2A_ACTIVITY_TOTAL_CHARS` and make `parseA2AAgentActivityPart` reject
+ * the whole snapshot — trading missing arguments for a missing trace.
+ */
+export const MAX_A2A_ACTIVITY_TOOL_PAYLOAD_CHARS = 16_384;
+export const MAX_A2A_ACTIVITY_TOTAL_CHARS = 98_304 + MAX_A2A_ACTIVITY_TOOL_PAYLOAD_CHARS;
 export function createA2AAgentActivityState(startedAt = Date.now()) {
     return {
         sequence: 0,
@@ -20,9 +30,11 @@ export function createA2AAgentActivityState(startedAt = Date.now()) {
     };
 }
 /**
- * Converts internal loop events into a bounded activity snapshot. It carries
- * only reasoning text already emitted to the local chat, never tool inputs or
- * results.
+ * Converts internal loop events into a bounded activity snapshot. Reasoning
+ * text is carried verbatim (it was already emitted to the local chat); tool
+ * arguments and results are carried only in redacted, size-capped form so the
+ * delegated run stays diagnosable without the snapshot becoming a secondary
+ * store of secrets or payloads.
  */
 export function applyA2AAgentActivityEvent(state, event, updatedAt = Date.now()) {
     const next = { ...state, updatedAt: normalizeTimestamp(updatedAt) };
@@ -33,14 +45,19 @@ export function applyA2AAgentActivityEvent(state, event, updatedAt = Date.now())
             next.reasoning = appendBoundedSegment(next.reasoning, event.text, MAX_A2A_ACTIVITY_REASONING_CHARS, next.toolCalls.length);
             changed = true;
             break;
-        case "tool_start":
+        case "tool_start": {
             next.activePhase = "tool";
-            next.toolCalls = appendToolCall(next.toolCalls, toolFromEvent(event));
+            const input = captureToolInput(event.input, remainingPayloadBudget(next.toolCalls));
+            next.toolCalls = appendToolCall(next.toolCalls, {
+                ...toolFromEvent(event),
+                ...(input ? { input } : {}),
+            });
             changed = true;
             break;
+        }
         case "tool_done":
             next.activePhase = "tool";
-            next.toolCalls = settleToolCall(next.toolCalls, toolFromEvent(event));
+            next.toolCalls = settleToolCall(next.toolCalls, toolFromEvent(event), event);
             changed = true;
             break;
         case "text":
@@ -123,6 +140,38 @@ function toolFromEvent(event) {
                 : "completed",
     };
 }
+function payloadChars(tool) {
+    return (tool.input?.length ?? 0) + (tool.result?.length ?? 0);
+}
+function remainingPayloadBudget(current, excludeIndex = -1) {
+    const used = current.reduce((total, tool, index) => index === excludeIndex ? total : total + payloadChars(tool), 0);
+    return Math.max(0, MAX_A2A_ACTIVITY_TOOL_PAYLOAD_CHARS - used);
+}
+/**
+ * Redacted, capped JSON of the arguments, or `undefined` when there is nothing
+ * to record or the shared budget cannot fit a whole (still-parseable) capture.
+ * A partial JSON string would be worse than none — the reader could not tell a
+ * clipped object from a different one.
+ */
+function captureToolInput(input, budget) {
+    const cap = Math.min(MAX_A2A_ACTIVITY_TOOL_INPUT_CHARS, budget);
+    if (cap < MAX_A2A_ACTIVITY_TOOL_INPUT_CHARS / 8)
+        return undefined;
+    const json = redactArgsToJson(input, { maxJson: cap, maxString: 256 });
+    // JSON.stringify escapes control characters, so the result is already safe
+    // for the snapshot without a `sanitizeText` pass — which would rewrite
+    // `"token":"[redacted]"` into unparseable JSON.
+    if (!json || json === "{}" || json.length > cap)
+        return undefined;
+    return json;
+}
+function captureToolResult(result, budget) {
+    const cap = Math.min(MAX_A2A_ACTIVITY_TOOL_RESULT_CHARS, budget);
+    if (!result || cap <= 0)
+        return undefined;
+    const summary = redactTextToSummary(result, cap);
+    return summary ? sanitizeText(summary, cap) || undefined : undefined;
+}
 function appendBoundedSegment(current, addition, maxChars, precedingToolCount) {
     const used = current.reduce((total, text) => total + text.length, 0);
     if (used >= maxChars ||
@@ -148,15 +197,34 @@ function appendToolCall(current, tool) {
         ? [...current, tool]
         : current;
 }
-function settleToolCall(current, tool) {
+function settleToolCall(current, tool, event) {
     for (let index = current.length - 1; index >= 0; index -= 1) {
         const existing = current[index];
         if ((tool.id && tool.id === existing.id) ||
             (!tool.id && tool.name === existing.name)) {
-            return current.map((value, itemIndex) => itemIndex === index ? tool : value);
+            // The matching `tool_start` already paid for its input; reuse it rather
+            // than re-capturing (and re-charging) the same arguments.
+            let budget = remainingPayloadBudget(current, index);
+            const input = existing.input ?? captureToolInput(event.input, budget) ?? undefined;
+            budget -= input?.length ?? 0;
+            const result = captureToolResult(event.result, budget);
+            const settled = {
+                ...tool,
+                ...(input ? { input } : {}),
+                ...(result ? { result } : {}),
+            };
+            return current.map((value, itemIndex) => itemIndex === index ? settled : value);
         }
     }
-    return appendToolCall(current, tool);
+    let budget = remainingPayloadBudget(current);
+    const input = captureToolInput(event.input, budget);
+    budget -= input?.length ?? 0;
+    const result = captureToolResult(event.result, budget);
+    return appendToolCall(current, {
+        ...tool,
+        ...(input ? { input } : {}),
+        ...(result ? { result } : {}),
+    });
 }
 function sanitizeText(value, maxChars) {
     return sanitizeToolErrorText(value)
@@ -200,10 +268,26 @@ function isSafeToolCall(value) {
     if (!isRecord(value) || !isSafeToolName(value.name))
         return false;
     return ((value.id === undefined || isSafeToolId(value.id)) &&
+        (value.input === undefined ||
+            isSafeCapturedText(value.input, MAX_A2A_ACTIVITY_TOOL_INPUT_CHARS)) &&
+        (value.result === undefined ||
+            isSafeCapturedText(value.result, MAX_A2A_ACTIVITY_TOOL_RESULT_CHARS)) &&
         (value.status === "running" ||
             value.status === "completed" ||
             value.status === "failed"));
 }
+/**
+ * Captured input/result are producer-side redacted strings. Unlike reasoning
+ * text they are NOT re-sanitized on read: `sanitizeToolErrorText` rewrites
+ * `"token":"…"` into unparseable JSON, so a round-trip equality check would
+ * reject every legitimate capture. Bound the length and reject raw control
+ * characters instead.
+ */
+function isSafeCapturedText(value, maxChars) {
+    return (typeof value === "string" &&
+        value.length <= maxChars &&
+        !/[\u0000-\u0008\u000b-\u001f\u007f]/.test(value));
+}
 function isSafeText(value, maxChars) {
     return (typeof value === "string" &&
         value.length <= maxChars &&
@@ -234,7 +318,9 @@ function activityCharacterCount(data) {
                 return total;
             return (total +
                 (typeof tool.name === "string" ? tool.name.length : 0) +
-                (typeof tool.id === "string" ? tool.id.length : 0));
+                (typeof tool.id === "string" ? tool.id.length : 0) +
+                (typeof tool.input === "string" ? tool.input.length : 0) +
+                (typeof tool.result === "string" ? tool.result.length : 0));
         }, 0)
         : 0;
     return reasoning + response + tools;