@agent-native/core 0.131.7 → 0.132.0

package/dist/server/voice-providers-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"voice-providers-status.js","sourceRoot":"","sources":["../../src/server/voice-providers-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,iBAAiB,GAElB,MAAM,IAAI,CAAC;AAEZ,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EACL,mCAAmC,EACnC,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAyB7D,MAAM,UAAU,iCAAiC;IAC/C,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;QACjD,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;YAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,OAAO,EAAE,KAAK;YAC3B,CAAC,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;YAC9C,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,cAAc,GAAG;YACrB,SAAS,EAAE,OAAO,EAAE,KAAK;YACzB,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,SAAS;SAClC,CAAC;QACF,MAAM,kBAAkB,GAAG,KAAK,EAAK,EAAoB,EAAc,EAAE,CACvE,cAAc,CAAC,SAAS;YACtB,CAAC,CAAC,qBAAqB,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3C,CAAC,CAAC,EAAE,EAAE,CAAC;QAEX,KAAK,UAAU,MAAM,CAAC,GAAW;YAC/B,IAAI,CAAC;gBACH,IAAI,GAAG,KAAK,gCAAgC,EAAE,CAAC;oBAC7C,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CAAC;wBACtD,SAAS,EAAE,OAAO,EAAE,KAAK;wBACzB,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,SAAS;qBAClC,CAAC,CAAC;oBACH,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC7D,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;gBACpE,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,OAAO;gBACL,CAAC,MAAM,kBAAkB,CAAC,GAAG,EAAE,CAC7B,mCAAmC,EAAE,CACtC,CAAC,KAAK,IAAI,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;QAED,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC/D,MAAM,CAAC,gBAAgB,CAAC;YACxB,MAAM,CAAC,gBAAgB,CAAC;YACxB,MAAM,CAAC,cAAc,CAAC;YACtB,MAAM,CAAC,gCAAgC,CAAC;SACzC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAyB;YACnC,OAAO;YACP,MAAM;YACN,MAAM;YACN,IAAI;YACJ,cAAc;YACd,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI;SACb,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * GET /_agent-native/voice-providers/status\n *\n * Reports which voice transcription providers are configured for the\n * current user. The desktop Settings UI uses this to show \"Connect\" vs\n * \"Connected\" status pills next to each provider option.\n *\n * Resolution mirrors `transcribe-voice.ts`: we read request-scoped encrypted\n * secrets (user, org, workspace), with env fallback only outside authenticated\n * request contexts. Each lookup is wrapped in try/catch — one provider's\n * failure must never break the whole response.\n *\n * Returns booleans only — never the actual key material.\n */\nimport {\n  defineEventHandler,\n  getMethod,\n  setResponseStatus,\n  type H3Event,\n} from \"h3\";\n\nimport { getOrgContext } from \"../org/context.js\";\nimport { getSession } from \"./auth.js\";\nimport {\n  resolveHasCompleteBuilderConnection,\n  resolveSecret,\n} from \"./credential-provider.js\";\nimport { resolveGoogleRealtimeCredentials } from \"./google-realtime-session.js\";\nimport { runWithRequestContext } from \"./request-context.js\";\n\nexport interface VoiceProvidersStatus {\n  builder: boolean;\n  gemini: boolean;\n  openai: boolean;\n  groq: boolean;\n  /**\n   * Google Speech-to-Text realtime streaming is BYOK-only for v1. This reports\n   * whether a service-account credential is configured; the actual stream runs\n   * through the dedicated WebSocket -> StreamingRecognize path, not the batch\n   * transcribe route.\n   */\n  googleRealtime: boolean;\n  /** Always true — the Web Speech API is available in WebKit-based clients. */\n  browser: true;\n  /**\n   * Apple's SFSpeechRecognizer + AVAudioEngine, exposed by the Tauri\n   * desktop client. Always reported as `true` from the server — the\n   * desktop client gates this on macOS at the Tauri-command boundary, so\n   * non-macOS hosts return a clear error instead of attempting to use it.\n   */\n  native: true;\n}\n\nexport function createVoiceProvidersStatusHandler() {\n  return defineEventHandler(async (event: H3Event) => {\n    if (getMethod(event) !== \"GET\") {\n      setResponseStatus(event, 405);\n      return { error: \"Method not allowed\" };\n    }\n\n    const session = await getSession(event).catch(() => null);\n    const orgCtx = session?.email\n      ? await getOrgContext(event).catch(() => null)\n      : null;\n    const requestContext = {\n      userEmail: session?.email,\n      orgId: orgCtx?.orgId ?? undefined,\n    };\n    const withRequestContext = async <T>(fn: () => Promise<T>): Promise<T> =>\n      requestContext.userEmail\n        ? runWithRequestContext(requestContext, fn)\n        : fn();\n\n    async function hasKey(key: string): Promise<boolean> {\n      try {\n        if (key === \"GOOGLE_APPLICATION_CREDENTIALS\") {\n          const resolved = await resolveGoogleRealtimeCredentials({\n            userEmail: session?.email,\n            orgId: orgCtx?.orgId ?? undefined,\n          });\n          return typeof resolved === \"string\" && resolved.length > 0;\n        }\n        const resolved = await withRequestContext(() => resolveSecret(key));\n        return typeof resolved === \"string\" && resolved.length > 0;\n      } catch {\n        return false;\n      }\n    }\n\n    let builder = false;\n    try {\n      builder =\n        (await withRequestContext(() =>\n          resolveHasCompleteBuilderConnection(),\n        )) === true;\n    } catch {\n      builder = false;\n    }\n\n    const [gemini, openai, groq, googleRealtime] = await Promise.all([\n      hasKey(\"GEMINI_API_KEY\"),\n      hasKey(\"OPENAI_API_KEY\"),\n      hasKey(\"GROQ_API_KEY\"),\n      hasKey(\"GOOGLE_APPLICATION_CREDENTIALS\"),\n    ]);\n\n    const status: VoiceProvidersStatus = {\n      builder,\n      gemini,\n      openai,\n      groq,\n      googleRealtime,\n      browser: true,\n      native: true,\n    };\n    return status;\n  });\n}\n"]}
+{"version":3,"file":"voice-providers-status.js","sourceRoot":"","sources":["../../src/server/voice-providers-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,iBAAiB,GAElB,MAAM,IAAI,CAAC;AAEZ,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EACL,eAAe,EACf,mCAAmC,EACnC,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAyB7D,MAAM,UAAU,iCAAiC;IAC/C,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;QACjD,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;YAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,OAAO,EAAE,KAAK;YAC3B,CAAC,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;YAC9C,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,cAAc,GAAG;YACrB,SAAS,EAAE,OAAO,EAAE,KAAK;YACzB,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,SAAS;SAClC,CAAC;QACF,MAAM,kBAAkB,GAAG,KAAK,EAAK,EAAoB,EAAc,EAAE,CACvE,cAAc,CAAC,SAAS;YACtB,CAAC,CAAC,qBAAqB,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3C,CAAC,CAAC,EAAE,EAAE,CAAC;QAEX,KAAK,UAAU,MAAM,CAAC,GAAW;YAC/B,IAAI,CAAC;gBACH,IAAI,GAAG,KAAK,gCAAgC,EAAE,CAAC;oBAC7C,sEAAsE;oBACtE,4DAA4D;oBAC5D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,CAC7C,gCAAgC,CAAC;wBAC/B,SAAS,EAAE,OAAO,EAAE,KAAK;wBACzB,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,SAAS;qBAClC,CAAC,CACH,CAAC;oBACF,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC7D,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;gBACpE,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,MAAM,kBAAkB,CAAC,GAAG,EAAE,CAC5B,eAAe,CAAC;YACd,gBAAgB;YAChB,gBAAgB;YAChB,cAAc;YACd,gCAAgC;SACjC,CAAC,CACH,CAAC;QAEF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,OAAO;gBACL,CAAC,MAAM,kBAAkB,CAAC,GAAG,EAAE,CAC7B,mCAAmC,EAAE,CACtC,CAAC,KAAK,IAAI,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;QAED,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC/D,MAAM,CAAC,gBAAgB,CAAC;YACxB,MAAM,CAAC,gBAAgB,CAAC;YACxB,MAAM,CAAC,cAAc,CAAC;YACtB,MAAM,CAAC,gCAAgC,CAAC;SACzC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAyB;YACnC,OAAO;YACP,MAAM;YACN,MAAM;YACN,IAAI;YACJ,cAAc;YACd,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI;SACb,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * GET /_agent-native/voice-providers/status\n *\n * Reports which voice transcription providers are configured for the\n * current user. The desktop Settings UI uses this to show \"Connect\" vs\n * \"Connected\" status pills next to each provider option.\n *\n * Resolution mirrors `transcribe-voice.ts`: we read request-scoped encrypted\n * secrets (user, org, workspace), with env fallback only outside authenticated\n * request contexts. Each lookup is wrapped in try/catch — one provider's\n * failure must never break the whole response.\n *\n * Returns booleans only — never the actual key material.\n */\nimport {\n  defineEventHandler,\n  getMethod,\n  setResponseStatus,\n  type H3Event,\n} from \"h3\";\n\nimport { getOrgContext } from \"../org/context.js\";\nimport { getSession } from \"./auth.js\";\nimport {\n  prefetchSecrets,\n  resolveHasCompleteBuilderConnection,\n  resolveSecret,\n} from \"./credential-provider.js\";\nimport { resolveGoogleRealtimeCredentials } from \"./google-realtime-session.js\";\nimport { runWithRequestContext } from \"./request-context.js\";\n\nexport interface VoiceProvidersStatus {\n  builder: boolean;\n  gemini: boolean;\n  openai: boolean;\n  groq: boolean;\n  /**\n   * Google Speech-to-Text realtime streaming is BYOK-only for v1. This reports\n   * whether a service-account credential is configured; the actual stream runs\n   * through the dedicated WebSocket -> StreamingRecognize path, not the batch\n   * transcribe route.\n   */\n  googleRealtime: boolean;\n  /** Always true — the Web Speech API is available in WebKit-based clients. */\n  browser: true;\n  /**\n   * Apple's SFSpeechRecognizer + AVAudioEngine, exposed by the Tauri\n   * desktop client. Always reported as `true` from the server — the\n   * desktop client gates this on macOS at the Tauri-command boundary, so\n   * non-macOS hosts return a clear error instead of attempting to use it.\n   */\n  native: true;\n}\n\nexport function createVoiceProvidersStatusHandler() {\n  return defineEventHandler(async (event: H3Event) => {\n    if (getMethod(event) !== \"GET\") {\n      setResponseStatus(event, 405);\n      return { error: \"Method not allowed\" };\n    }\n\n    const session = await getSession(event).catch(() => null);\n    const orgCtx = session?.email\n      ? await getOrgContext(event).catch(() => null)\n      : null;\n    const requestContext = {\n      userEmail: session?.email,\n      orgId: orgCtx?.orgId ?? undefined,\n    };\n    const withRequestContext = async <T>(fn: () => Promise<T>): Promise<T> =>\n      requestContext.userEmail\n        ? runWithRequestContext(requestContext, fn)\n        : fn();\n\n    async function hasKey(key: string): Promise<boolean> {\n      try {\n        if (key === \"GOOGLE_APPLICATION_CREDENTIALS\") {\n          // Same identity, passed explicitly — the context is here only so this\n          // scope sweep shares the prefetched per-request memo below.\n          const resolved = await withRequestContext(() =>\n            resolveGoogleRealtimeCredentials({\n              userEmail: session?.email,\n              orgId: orgCtx?.orgId ?? undefined,\n            }),\n          );\n          return typeof resolved === \"string\" && resolved.length > 0;\n        }\n        const resolved = await withRequestContext(() => resolveSecret(key));\n        return typeof resolved === \"string\" && resolved.length > 0;\n      } catch {\n        return false;\n      }\n    }\n\n    // One read per scope for every key below, instead of one per key per scope.\n    await withRequestContext(() =>\n      prefetchSecrets([\n        \"GEMINI_API_KEY\",\n        \"OPENAI_API_KEY\",\n        \"GROQ_API_KEY\",\n        \"GOOGLE_APPLICATION_CREDENTIALS\",\n      ]),\n    );\n\n    let builder = false;\n    try {\n      builder =\n        (await withRequestContext(() =>\n          resolveHasCompleteBuilderConnection(),\n        )) === true;\n    } catch {\n      builder = false;\n    }\n\n    const [gemini, openai, groq, googleRealtime] = await Promise.all([\n      hasKey(\"GEMINI_API_KEY\"),\n      hasKey(\"OPENAI_API_KEY\"),\n      hasKey(\"GROQ_API_KEY\"),\n      hasKey(\"GOOGLE_APPLICATION_CREDENTIALS\"),\n    ]);\n\n    const status: VoiceProvidersStatus = {\n      builder,\n      gemini,\n      openai,\n      groq,\n      googleRealtime,\n      browser: true,\n      native: true,\n    };\n    return status;\n  });\n}\n"]}

package/dist/workspace-files/tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../../src/workspace-files/tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AA2BhE,wBAAgB,wBAAwB,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAsOtE"}
+{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../../src/workspace-files/tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AA2BhE,wBAAgB,wBAAwB,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CA6OtE"}

package/dist/workspace-files/tool.js

@@ -69,12 +69,15 @@ export function createWorkspaceFilesTool() {
                             description: 'MIME type for new files. Default: "text/plain". Use "application/json" for JSON, "text/markdown" for Markdown.',
                         },
                         offset: {
-                            type: "number",
-                            description: "Character offset to start reading from (for paging large files). Default: 0.",
+                            type: "integer",
+                            minimum: 0,
+                            description: "Non-negative character offset to start reading from (for paging large files). Default: 0.",
                         },
                         maxChars: {
-                            type: "number",
-                            description: `Maximum characters to return when reading. Default: ${DEFAULT_READ_CHARS}. Max: ${MAX_READ_CHARS}.`,
+                            type: "integer",
+                            minimum: 1,
+                            maximum: MAX_READ_CHARS,
+                            description: `Positive maximum characters to return when reading. Default: ${DEFAULT_READ_CHARS}. Max: ${MAX_READ_CHARS}.`,
                         },
                         pattern: {
                             type: "string",
@@ -135,14 +138,17 @@ export function createWorkspaceFilesTool() {
                             if (!path)
                                 return "Error: path is required for read.";
                             const rawOffset = Number(args.offset);
-                            const offset = Number.isFinite(rawOffset) && rawOffset > 0 ? rawOffset : 0;
+                            const offset = Number.isFinite(rawOffset) && rawOffset > 0
+                                ? Math.floor(rawOffset)
+                                : 0;
                             const rawMax = Number(args.maxChars);
                             const maxChars = Number.isFinite(rawMax) && rawMax > 0
-                                ? Math.min(rawMax, MAX_READ_CHARS)
+                                ? Math.min(Math.max(1, Math.floor(rawMax)), MAX_READ_CHARS)
                                 : DEFAULT_READ_CHARS;
+                            // The sentinel character distinguishes an exact page from a truncated one.
                             const file = await readWorkspaceFile(scope, path, {
                                 offset,
-                                maxChars,
+                                maxChars: maxChars + 1,
                             });
                             if (!file) {
                                 return JSON.stringify({
@@ -150,19 +156,20 @@ export function createWorkspaceFilesTool() {
                                     error: `File not found: "${path}"`,
                                 });
                             }
-                            const truncated = file.content.length >= maxChars;
+                            const truncated = file.content.length > maxChars;
+                            const content = file.content.slice(0, maxChars);
                             return JSON.stringify({
                                 ok: true,
                                 path: file.path,
                                 contentType: file.contentType,
                                 sizeBytes: file.sizeBytes,
                                 updatedAt: file.updatedAt,
-                                content: file.content,
+                                content,
                                 ...(truncated
                                     ? {
                                         truncated: true,
-                                        nextOffset: offset + file.content.length,
-                                        hint: `File has more content. Call again with offset: ${offset + file.content.length}`,
+                                        nextOffset: offset + content.length,
+                                        hint: `File has more content. Call again with offset: ${offset + content.length}`,
                                     }
                                     : {}),
                             });

package/dist/workspace-files/tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool.js","sourceRoot":"","sources":["../../src/workspace-files/tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EACL,eAAe,EACf,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,GAEnB,MAAM,YAAY,CAAC;AAEpB,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,sEAAsE;AACtE,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACpD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL,iBAAiB,EAAE;YACjB,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE;gBACJ,WAAW,EAAE;oBACX,yIAAyI;oBACzI,0MAA0M;oBAC1M,0LAA0L;oBAC1L,EAAE;oBACF,gCAAgC;oBAChC,2EAA2E;oBAC3E,iGAAiG;oBACjG,2DAA2D;oBAC3D,iDAAiD;oBACjD,EAAE;oBACF,UAAU;oBACV,4DAA4D;oBAC5D,0DAA0D;oBAC1D,mFAAmF;oBACnF,wFAAwF;oBACxF,oCAAoC;oBACpC,mEAAmE;iBACpE,CAAC,IAAI,CAAC,IAAI,CAAC;gBACZ,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;4BAC3D,WAAW,EAAE,uBAAuB;yBACrC;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,wKAAwK;yBAC3K;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,6DAA6D;yBAChE;wBACD,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,gHAAgH;yBACnH;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,8EAA8E;yBACjF;wBACD,QAAQ,EAAE;4BACR,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,uDAAuD,kBAAkB,UAAU,cAAc,GAAG;yBAClH;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,oHAAoH;yBACvH;wBACD,QAAQ,EAAE;4BACR,IAAI,EAAE,SAAS;4BACf,WAAW,EACT,sFAAsF;yBACzF;qBACF;oBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;iBACrB;aACF;YAED,GAAG,EAAE,KAAK,EAAE,IAA6B,EAAmB,EAAE;gBAC5D,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,mEAAmE,CAAC;gBAC7E,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAEhD,IAAI,CAAC;oBACH,QAAQ,MAAM,EAAE,CAAC;wBACf,KAAK,OAAO,EAAE,CAAC;4BACb,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,oCAAoC,CAAC;4BACvD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;4BAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,CAAC;4BAC7D,MAAM,IAAI,GAAG,MAAM,kBAAkB,CACnC,KAAK,EACL,IAAI,EACJ,OAAO,EACP,WAAW,CACZ,CAAC;4BACF,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,MAAM,EAAE,OAAO;gCACf,UAAU,EAAE,IAAI,CAAC,EAAE;gCACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,WAAW,EAAE,IAAI,CAAC,WAAW;gCAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,SAAS,EAAE,IAAI,CAAC,SAAS;6BAC1B,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,QAAQ,EAAE,CAAC;4BACd,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,qCAAqC,CAAC;4BACxD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;4BAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,CAAC;4BAC7D,MAAM,IAAI,GAAG,MAAM,mBAAmB,CACpC,KAAK,EACL,IAAI,EACJ,OAAO,EACP,WAAW,CACZ,CAAC;4BACF,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,MAAM,EAAE,QAAQ;gCAChB,UAAU,EAAE,IAAI,CAAC,EAAE;gCACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,WAAW,EAAE,IAAI,CAAC,WAAW;gCAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,SAAS,EAAE,IAAI,CAAC,SAAS;6BAC1B,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,MAAM,EAAE,CAAC;4BACZ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,mCAAmC,CAAC;4BACtD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;4BACtC,MAAM,MAAM,GACV,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;4BAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;4BACrC,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;gCACnC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC;gCAClC,CAAC,CAAC,kBAAkB,CAAC;4BAEzB,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE;gCAChD,MAAM;gCACN,QAAQ;6BACT,CAAC,CAAC;4BACH,IAAI,CAAC,IAAI,EAAE,CAAC;gCACV,OAAO,IAAI,CAAC,SAAS,CAAC;oCACpB,EAAE,EAAE,KAAK;oCACT,KAAK,EAAE,oBAAoB,IAAI,GAAG;iCACnC,CAAC,CAAC;4BACL,CAAC;4BAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC;4BAClD,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,WAAW,EAAE,IAAI,CAAC,WAAW;gCAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,OAAO,EAAE,IAAI,CAAC,OAAO;gCACrB,GAAG,CAAC,SAAS;oCACX,CAAC,CAAC;wCACE,SAAS,EAAE,IAAI;wCACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;wCACxC,IAAI,EAAE,kDAAkD,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;qCACvF;oCACH,CAAC,CAAC,EAAE,CAAC;6BACR,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,MAAM,EAAE,CAAC;4BACZ,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;4BAChE,MAAM,KAAK,GAAG,MAAM,kBAAkB,CACpC,KAAK,EACL,MAAM,IAAI,SAAS,CACpB,CAAC;4BACF,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,KAAK,EAAE,KAAK,CAAC,MAAM;gCACnB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oCACvB,IAAI,EAAE,CAAC,CAAC,IAAI;oCACZ,SAAS,EAAE,CAAC,CAAC,SAAS;oCACtB,WAAW,EAAE,CAAC,CAAC,WAAW;oCAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;iCACvB,CAAC,CAAC;6BACJ,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,QAAQ,EAAE,CAAC;4BACd,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,qCAAqC,CAAC;4BACxD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;4BACvD,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,OAAO;gCACP,IAAI;6BACL,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,MAAM,EAAE,CAAC;4BACZ,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAClD,IAAI,CAAC,OAAO;gCAAE,OAAO,sCAAsC,CAAC;4BAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;4BAChE,MAAM,QAAQ,GACZ,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC;4BAC7D,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE;gCACvD,UAAU,EAAE,MAAM,IAAI,SAAS;gCAC/B,QAAQ;gCACR,iBAAiB,EAAE,EAAE;gCACrB,QAAQ,EAAE,EAAE;6BACb,CAAC,CAAC;4BACH,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,OAAO;gCACP,UAAU,EAAE,OAAO,CAAC,MAAM;gCAC1B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oCAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;oCACZ,IAAI,EAAE,CAAC,CAAC,UAAU;oCAClB,IAAI,EAAE,CAAC,CAAC,IAAI;iCACb,CAAC,CAAC;6BACJ,CAAC,CAAC;wBACL,CAAC;wBAED;4BACE,OAAO,0BAA0B,MAAM,4DAA4D,CAAC;oBACxG,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC","sourcesContent":["/**\n * `workspace-files` bridge tool.\n *\n * A single tool with an `action` discriminator covering write, append, read,\n * list, delete, and grep. It is kept for `run-code` workspaceRead/workspaceWrite\n * compatibility and delegates storage to the Resources table.\n *\n * Scope is automatically resolved from the active request context:\n *  - org scope when a request orgId is present (shared across users in the org)\n *  - user scope otherwise (personal to the requesting user's email)\n */\n\nimport type { ActionEntry } from \"../agent/production-agent.js\";\nimport {\n  getRequestOrgId,\n  getRequestUserEmail,\n} from \"../server/request-context.js\";\nimport {\n  writeWorkspaceFile,\n  appendWorkspaceFile,\n  readWorkspaceFile,\n  listWorkspaceFiles,\n  deleteWorkspaceFile,\n  grepWorkspaceFiles,\n  type WorkspaceFilesScope,\n} from \"./store.js\";\n\nconst MAX_READ_CHARS = 100_000;\nconst DEFAULT_READ_CHARS = 40_000;\n\n/** Resolve scope from the current request context (org-preferred). */\nfunction resolveScope(): WorkspaceFilesScope | null {\n  const orgId = getRequestOrgId();\n  if (orgId) return { scope: \"org\", scopeId: orgId };\n  const email = getRequestUserEmail();\n  if (email) return { scope: \"user\", scopeId: email };\n  return null;\n}\n\nexport function createWorkspaceFilesTool(): Record<string, ActionEntry> {\n  return {\n    \"workspace-files\": {\n      agentTool: false,\n      readOnly: false,\n      tool: {\n        description: [\n          \"Bridge-only workspace file storage backed by Resources. Files are scoped to the current org/user and appear in the Resources workspace.\",\n          \"Use scratch/... for temporary intermediate results; scratch files are hidden from the Resources view by default and expire. Use durable folder names for files the user explicitly wants to keep/manage.\",\n          \"Use this to stage large intermediate results (fetched pages, per-item analysis memos, API payloads) so they don't consume context window, then read them back selectively for synthesis.\",\n          \"\",\n          \"Typical fusion-style workflow:\",\n          \"  1. Fan out: for each item, fetch data and `write` a per-item memo file.\",\n          \"  2. Synthesize: `list` files, then `read` each memo (with offset/maxChars to page large ones).\",\n          \"  3. Optionally `grep` across all memos to find patterns.\",\n          \"  4. `delete` temp files when no longer needed.\",\n          \"\",\n          \"Actions:\",\n          \"  write   — create or overwrite a file. Max 2 MB per file.\",\n          \"  append  — append text to a file (or create if absent).\",\n          \"  read    — read content, optionally with offset/maxChars for paging large files.\",\n          \"  list    — list files (with optional path prefix filter) showing name, size, updated.\",\n          \"  delete  — delete a file by path.\",\n          \"  grep    — search content across files for a substring or regex.\",\n        ].join(\"\\n\"),\n        parameters: {\n          type: \"object\",\n          properties: {\n            action: {\n              type: \"string\",\n              enum: [\"write\", \"append\", \"read\", \"list\", \"delete\", \"grep\"],\n              description: \"Operation to perform.\",\n            },\n            path: {\n              type: \"string\",\n              description:\n                'File path relative to the scope root, e.g. \"scratch/analysis/q2-memos/acme.md\". Required for write/append/read/delete. Optional for list/grep (acts as prefix filter).',\n            },\n            content: {\n              type: \"string\",\n              description:\n                \"Text content to write or append. Required for write/append.\",\n            },\n            contentType: {\n              type: \"string\",\n              description:\n                'MIME type for new files. Default: \"text/plain\". Use \"application/json\" for JSON, \"text/markdown\" for Markdown.',\n            },\n            offset: {\n              type: \"number\",\n              description:\n                \"Character offset to start reading from (for paging large files). Default: 0.\",\n            },\n            maxChars: {\n              type: \"number\",\n              description: `Maximum characters to return when reading. Default: ${DEFAULT_READ_CHARS}. Max: ${MAX_READ_CHARS}.`,\n            },\n            pattern: {\n              type: \"string\",\n              description:\n                \"Search pattern for grep. Required for grep action. A plain substring by default; set useRegex to true for a regex.\",\n            },\n            useRegex: {\n              type: \"boolean\",\n              description:\n                \"When true, treat `pattern` as a JavaScript regex (case-insensitive). Default: false.\",\n            },\n          },\n          required: [\"action\"],\n        },\n      },\n\n      run: async (args: Record<string, unknown>): Promise<string> => {\n        const scope = resolveScope();\n        if (!scope) {\n          return \"Error: workspace-files requires an authenticated request context.\";\n        }\n\n        const action = String(args.action ?? \"\").trim();\n\n        try {\n          switch (action) {\n            case \"write\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for write.\";\n              const content = String(args.content ?? \"\");\n              const contentType = String(args.contentType ?? \"text/plain\");\n              const meta = await writeWorkspaceFile(\n                scope,\n                path,\n                content,\n                contentType,\n              );\n              return JSON.stringify({\n                ok: true,\n                action: \"write\",\n                resourceId: meta.id,\n                path: meta.path,\n                contentType: meta.contentType,\n                sizeBytes: meta.sizeBytes,\n                updatedAt: meta.updatedAt,\n              });\n            }\n\n            case \"append\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for append.\";\n              const content = String(args.content ?? \"\");\n              const contentType = String(args.contentType ?? \"text/plain\");\n              const meta = await appendWorkspaceFile(\n                scope,\n                path,\n                content,\n                contentType,\n              );\n              return JSON.stringify({\n                ok: true,\n                action: \"append\",\n                resourceId: meta.id,\n                path: meta.path,\n                contentType: meta.contentType,\n                sizeBytes: meta.sizeBytes,\n                updatedAt: meta.updatedAt,\n              });\n            }\n\n            case \"read\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for read.\";\n              const rawOffset = Number(args.offset);\n              const offset =\n                Number.isFinite(rawOffset) && rawOffset > 0 ? rawOffset : 0;\n              const rawMax = Number(args.maxChars);\n              const maxChars =\n                Number.isFinite(rawMax) && rawMax > 0\n                  ? Math.min(rawMax, MAX_READ_CHARS)\n                  : DEFAULT_READ_CHARS;\n\n              const file = await readWorkspaceFile(scope, path, {\n                offset,\n                maxChars,\n              });\n              if (!file) {\n                return JSON.stringify({\n                  ok: false,\n                  error: `File not found: \"${path}\"`,\n                });\n              }\n\n              const truncated = file.content.length >= maxChars;\n              return JSON.stringify({\n                ok: true,\n                path: file.path,\n                contentType: file.contentType,\n                sizeBytes: file.sizeBytes,\n                updatedAt: file.updatedAt,\n                content: file.content,\n                ...(truncated\n                  ? {\n                      truncated: true,\n                      nextOffset: offset + file.content.length,\n                      hint: `File has more content. Call again with offset: ${offset + file.content.length}`,\n                    }\n                  : {}),\n              });\n            }\n\n            case \"list\": {\n              const prefix = args.path ? String(args.path).trim() : undefined;\n              const files = await listWorkspaceFiles(\n                scope,\n                prefix || undefined,\n              );\n              return JSON.stringify({\n                ok: true,\n                count: files.length,\n                files: files.map((f) => ({\n                  path: f.path,\n                  sizeBytes: f.sizeBytes,\n                  contentType: f.contentType,\n                  updatedAt: f.updatedAt,\n                })),\n              });\n            }\n\n            case \"delete\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for delete.\";\n              const deleted = await deleteWorkspaceFile(scope, path);\n              return JSON.stringify({\n                ok: true,\n                deleted,\n                path,\n              });\n            }\n\n            case \"grep\": {\n              const pattern = String(args.pattern ?? \"\").trim();\n              if (!pattern) return \"Error: pattern is required for grep.\";\n              const prefix = args.path ? String(args.path).trim() : undefined;\n              const useRegex =\n                args.useRegex === true || String(args.useRegex) === \"true\";\n              const matches = await grepWorkspaceFiles(scope, pattern, {\n                pathPrefix: prefix || undefined,\n                useRegex,\n                maxMatchesPerFile: 20,\n                maxFiles: 50,\n              });\n              return JSON.stringify({\n                ok: true,\n                pattern,\n                matchCount: matches.length,\n                matches: matches.map((m) => ({\n                  path: m.path,\n                  line: m.lineNumber,\n                  text: m.line,\n                })),\n              });\n            }\n\n            default:\n              return `Error: unknown action \"${action}\". Valid actions: write, append, read, list, delete, grep.`;\n          }\n        } catch (err) {\n          const msg = err instanceof Error ? err.message : String(err);\n          return JSON.stringify({ ok: false, error: msg });\n        }\n      },\n    },\n  };\n}\n"]}
+{"version":3,"file":"tool.js","sourceRoot":"","sources":["../../src/workspace-files/tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EACL,eAAe,EACf,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,GAEnB,MAAM,YAAY,CAAC;AAEpB,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,sEAAsE;AACtE,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACpD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL,iBAAiB,EAAE;YACjB,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE;gBACJ,WAAW,EAAE;oBACX,yIAAyI;oBACzI,0MAA0M;oBAC1M,0LAA0L;oBAC1L,EAAE;oBACF,gCAAgC;oBAChC,2EAA2E;oBAC3E,iGAAiG;oBACjG,2DAA2D;oBAC3D,iDAAiD;oBACjD,EAAE;oBACF,UAAU;oBACV,4DAA4D;oBAC5D,0DAA0D;oBAC1D,mFAAmF;oBACnF,wFAAwF;oBACxF,oCAAoC;oBACpC,mEAAmE;iBACpE,CAAC,IAAI,CAAC,IAAI,CAAC;gBACZ,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;4BAC3D,WAAW,EAAE,uBAAuB;yBACrC;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,wKAAwK;yBAC3K;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,6DAA6D;yBAChE;wBACD,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,gHAAgH;yBACnH;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,SAAS;4BACf,OAAO,EAAE,CAAC;4BACV,WAAW,EACT,2FAA2F;yBAC9F;wBACD,QAAQ,EAAE;4BACR,IAAI,EAAE,SAAS;4BACf,OAAO,EAAE,CAAC;4BACV,OAAO,EAAE,cAAc;4BACvB,WAAW,EAAE,gEAAgE,kBAAkB,UAAU,cAAc,GAAG;yBAC3H;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,oHAAoH;yBACvH;wBACD,QAAQ,EAAE;4BACR,IAAI,EAAE,SAAS;4BACf,WAAW,EACT,sFAAsF;yBACzF;qBACF;oBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;iBACrB;aACF;YAED,GAAG,EAAE,KAAK,EAAE,IAA6B,EAAmB,EAAE;gBAC5D,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,mEAAmE,CAAC;gBAC7E,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAEhD,IAAI,CAAC;oBACH,QAAQ,MAAM,EAAE,CAAC;wBACf,KAAK,OAAO,EAAE,CAAC;4BACb,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,oCAAoC,CAAC;4BACvD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;4BAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,CAAC;4BAC7D,MAAM,IAAI,GAAG,MAAM,kBAAkB,CACnC,KAAK,EACL,IAAI,EACJ,OAAO,EACP,WAAW,CACZ,CAAC;4BACF,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,MAAM,EAAE,OAAO;gCACf,UAAU,EAAE,IAAI,CAAC,EAAE;gCACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,WAAW,EAAE,IAAI,CAAC,WAAW;gCAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,SAAS,EAAE,IAAI,CAAC,SAAS;6BAC1B,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,QAAQ,EAAE,CAAC;4BACd,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,qCAAqC,CAAC;4BACxD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;4BAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,CAAC;4BAC7D,MAAM,IAAI,GAAG,MAAM,mBAAmB,CACpC,KAAK,EACL,IAAI,EACJ,OAAO,EACP,WAAW,CACZ,CAAC;4BACF,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,MAAM,EAAE,QAAQ;gCAChB,UAAU,EAAE,IAAI,CAAC,EAAE;gCACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,WAAW,EAAE,IAAI,CAAC,WAAW;gCAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,SAAS,EAAE,IAAI,CAAC,SAAS;6BAC1B,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,MAAM,EAAE,CAAC;4BACZ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,mCAAmC,CAAC;4BACtD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;4BACtC,MAAM,MAAM,GACV,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;gCACzC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;gCACvB,CAAC,CAAC,CAAC,CAAC;4BACR,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;4BACrC,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;gCACnC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,CAAC;gCAC3D,CAAC,CAAC,kBAAkB,CAAC;4BAEzB,2EAA2E;4BAC3E,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE;gCAChD,MAAM;gCACN,QAAQ,EAAE,QAAQ,GAAG,CAAC;6BACvB,CAAC,CAAC;4BACH,IAAI,CAAC,IAAI,EAAE,CAAC;gCACV,OAAO,IAAI,CAAC,SAAS,CAAC;oCACpB,EAAE,EAAE,KAAK;oCACT,KAAK,EAAE,oBAAoB,IAAI,GAAG;iCACnC,CAAC,CAAC;4BACL,CAAC;4BAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;4BACjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;4BAChD,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,WAAW,EAAE,IAAI,CAAC,WAAW;gCAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,OAAO;gCACP,GAAG,CAAC,SAAS;oCACX,CAAC,CAAC;wCACE,SAAS,EAAE,IAAI;wCACf,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM;wCACnC,IAAI,EAAE,kDAAkD,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE;qCAClF;oCACH,CAAC,CAAC,EAAE,CAAC;6BACR,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,MAAM,EAAE,CAAC;4BACZ,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;4BAChE,MAAM,KAAK,GAAG,MAAM,kBAAkB,CACpC,KAAK,EACL,MAAM,IAAI,SAAS,CACpB,CAAC;4BACF,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,KAAK,EAAE,KAAK,CAAC,MAAM;gCACnB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oCACvB,IAAI,EAAE,CAAC,CAAC,IAAI;oCACZ,SAAS,EAAE,CAAC,CAAC,SAAS;oCACtB,WAAW,EAAE,CAAC,CAAC,WAAW;oCAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;iCACvB,CAAC,CAAC;6BACJ,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,QAAQ,EAAE,CAAC;4BACd,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,qCAAqC,CAAC;4BACxD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;4BACvD,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,OAAO;gCACP,IAAI;6BACL,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,MAAM,EAAE,CAAC;4BACZ,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAClD,IAAI,CAAC,OAAO;gCAAE,OAAO,sCAAsC,CAAC;4BAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;4BAChE,MAAM,QAAQ,GACZ,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC;4BAC7D,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE;gCACvD,UAAU,EAAE,MAAM,IAAI,SAAS;gCAC/B,QAAQ;gCACR,iBAAiB,EAAE,EAAE;gCACrB,QAAQ,EAAE,EAAE;6BACb,CAAC,CAAC;4BACH,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,OAAO;gCACP,UAAU,EAAE,OAAO,CAAC,MAAM;gCAC1B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oCAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;oCACZ,IAAI,EAAE,CAAC,CAAC,UAAU;oCAClB,IAAI,EAAE,CAAC,CAAC,IAAI;iCACb,CAAC,CAAC;6BACJ,CAAC,CAAC;wBACL,CAAC;wBAED;4BACE,OAAO,0BAA0B,MAAM,4DAA4D,CAAC;oBACxG,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC","sourcesContent":["/**\n * `workspace-files` bridge tool.\n *\n * A single tool with an `action` discriminator covering write, append, read,\n * list, delete, and grep. It is kept for `run-code` workspaceRead/workspaceWrite\n * compatibility and delegates storage to the Resources table.\n *\n * Scope is automatically resolved from the active request context:\n *  - org scope when a request orgId is present (shared across users in the org)\n *  - user scope otherwise (personal to the requesting user's email)\n */\n\nimport type { ActionEntry } from \"../agent/production-agent.js\";\nimport {\n  getRequestOrgId,\n  getRequestUserEmail,\n} from \"../server/request-context.js\";\nimport {\n  writeWorkspaceFile,\n  appendWorkspaceFile,\n  readWorkspaceFile,\n  listWorkspaceFiles,\n  deleteWorkspaceFile,\n  grepWorkspaceFiles,\n  type WorkspaceFilesScope,\n} from \"./store.js\";\n\nconst MAX_READ_CHARS = 100_000;\nconst DEFAULT_READ_CHARS = 40_000;\n\n/** Resolve scope from the current request context (org-preferred). */\nfunction resolveScope(): WorkspaceFilesScope | null {\n  const orgId = getRequestOrgId();\n  if (orgId) return { scope: \"org\", scopeId: orgId };\n  const email = getRequestUserEmail();\n  if (email) return { scope: \"user\", scopeId: email };\n  return null;\n}\n\nexport function createWorkspaceFilesTool(): Record<string, ActionEntry> {\n  return {\n    \"workspace-files\": {\n      agentTool: false,\n      readOnly: false,\n      tool: {\n        description: [\n          \"Bridge-only workspace file storage backed by Resources. Files are scoped to the current org/user and appear in the Resources workspace.\",\n          \"Use scratch/... for temporary intermediate results; scratch files are hidden from the Resources view by default and expire. Use durable folder names for files the user explicitly wants to keep/manage.\",\n          \"Use this to stage large intermediate results (fetched pages, per-item analysis memos, API payloads) so they don't consume context window, then read them back selectively for synthesis.\",\n          \"\",\n          \"Typical fusion-style workflow:\",\n          \"  1. Fan out: for each item, fetch data and `write` a per-item memo file.\",\n          \"  2. Synthesize: `list` files, then `read` each memo (with offset/maxChars to page large ones).\",\n          \"  3. Optionally `grep` across all memos to find patterns.\",\n          \"  4. `delete` temp files when no longer needed.\",\n          \"\",\n          \"Actions:\",\n          \"  write   — create or overwrite a file. Max 2 MB per file.\",\n          \"  append  — append text to a file (or create if absent).\",\n          \"  read    — read content, optionally with offset/maxChars for paging large files.\",\n          \"  list    — list files (with optional path prefix filter) showing name, size, updated.\",\n          \"  delete  — delete a file by path.\",\n          \"  grep    — search content across files for a substring or regex.\",\n        ].join(\"\\n\"),\n        parameters: {\n          type: \"object\",\n          properties: {\n            action: {\n              type: \"string\",\n              enum: [\"write\", \"append\", \"read\", \"list\", \"delete\", \"grep\"],\n              description: \"Operation to perform.\",\n            },\n            path: {\n              type: \"string\",\n              description:\n                'File path relative to the scope root, e.g. \"scratch/analysis/q2-memos/acme.md\". Required for write/append/read/delete. Optional for list/grep (acts as prefix filter).',\n            },\n            content: {\n              type: \"string\",\n              description:\n                \"Text content to write or append. Required for write/append.\",\n            },\n            contentType: {\n              type: \"string\",\n              description:\n                'MIME type for new files. Default: \"text/plain\". Use \"application/json\" for JSON, \"text/markdown\" for Markdown.',\n            },\n            offset: {\n              type: \"integer\",\n              minimum: 0,\n              description:\n                \"Non-negative character offset to start reading from (for paging large files). Default: 0.\",\n            },\n            maxChars: {\n              type: \"integer\",\n              minimum: 1,\n              maximum: MAX_READ_CHARS,\n              description: `Positive maximum characters to return when reading. Default: ${DEFAULT_READ_CHARS}. Max: ${MAX_READ_CHARS}.`,\n            },\n            pattern: {\n              type: \"string\",\n              description:\n                \"Search pattern for grep. Required for grep action. A plain substring by default; set useRegex to true for a regex.\",\n            },\n            useRegex: {\n              type: \"boolean\",\n              description:\n                \"When true, treat `pattern` as a JavaScript regex (case-insensitive). Default: false.\",\n            },\n          },\n          required: [\"action\"],\n        },\n      },\n\n      run: async (args: Record<string, unknown>): Promise<string> => {\n        const scope = resolveScope();\n        if (!scope) {\n          return \"Error: workspace-files requires an authenticated request context.\";\n        }\n\n        const action = String(args.action ?? \"\").trim();\n\n        try {\n          switch (action) {\n            case \"write\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for write.\";\n              const content = String(args.content ?? \"\");\n              const contentType = String(args.contentType ?? \"text/plain\");\n              const meta = await writeWorkspaceFile(\n                scope,\n                path,\n                content,\n                contentType,\n              );\n              return JSON.stringify({\n                ok: true,\n                action: \"write\",\n                resourceId: meta.id,\n                path: meta.path,\n                contentType: meta.contentType,\n                sizeBytes: meta.sizeBytes,\n                updatedAt: meta.updatedAt,\n              });\n            }\n\n            case \"append\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for append.\";\n              const content = String(args.content ?? \"\");\n              const contentType = String(args.contentType ?? \"text/plain\");\n              const meta = await appendWorkspaceFile(\n                scope,\n                path,\n                content,\n                contentType,\n              );\n              return JSON.stringify({\n                ok: true,\n                action: \"append\",\n                resourceId: meta.id,\n                path: meta.path,\n                contentType: meta.contentType,\n                sizeBytes: meta.sizeBytes,\n                updatedAt: meta.updatedAt,\n              });\n            }\n\n            case \"read\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for read.\";\n              const rawOffset = Number(args.offset);\n              const offset =\n                Number.isFinite(rawOffset) && rawOffset > 0\n                  ? Math.floor(rawOffset)\n                  : 0;\n              const rawMax = Number(args.maxChars);\n              const maxChars =\n                Number.isFinite(rawMax) && rawMax > 0\n                  ? Math.min(Math.max(1, Math.floor(rawMax)), MAX_READ_CHARS)\n                  : DEFAULT_READ_CHARS;\n\n              // The sentinel character distinguishes an exact page from a truncated one.\n              const file = await readWorkspaceFile(scope, path, {\n                offset,\n                maxChars: maxChars + 1,\n              });\n              if (!file) {\n                return JSON.stringify({\n                  ok: false,\n                  error: `File not found: \"${path}\"`,\n                });\n              }\n\n              const truncated = file.content.length > maxChars;\n              const content = file.content.slice(0, maxChars);\n              return JSON.stringify({\n                ok: true,\n                path: file.path,\n                contentType: file.contentType,\n                sizeBytes: file.sizeBytes,\n                updatedAt: file.updatedAt,\n                content,\n                ...(truncated\n                  ? {\n                      truncated: true,\n                      nextOffset: offset + content.length,\n                      hint: `File has more content. Call again with offset: ${offset + content.length}`,\n                    }\n                  : {}),\n              });\n            }\n\n            case \"list\": {\n              const prefix = args.path ? String(args.path).trim() : undefined;\n              const files = await listWorkspaceFiles(\n                scope,\n                prefix || undefined,\n              );\n              return JSON.stringify({\n                ok: true,\n                count: files.length,\n                files: files.map((f) => ({\n                  path: f.path,\n                  sizeBytes: f.sizeBytes,\n                  contentType: f.contentType,\n                  updatedAt: f.updatedAt,\n                })),\n              });\n            }\n\n            case \"delete\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for delete.\";\n              const deleted = await deleteWorkspaceFile(scope, path);\n              return JSON.stringify({\n                ok: true,\n                deleted,\n                path,\n              });\n            }\n\n            case \"grep\": {\n              const pattern = String(args.pattern ?? \"\").trim();\n              if (!pattern) return \"Error: pattern is required for grep.\";\n              const prefix = args.path ? String(args.path).trim() : undefined;\n              const useRegex =\n                args.useRegex === true || String(args.useRegex) === \"true\";\n              const matches = await grepWorkspaceFiles(scope, pattern, {\n                pathPrefix: prefix || undefined,\n                useRegex,\n                maxMatchesPerFile: 20,\n                maxFiles: 50,\n              });\n              return JSON.stringify({\n                ok: true,\n                pattern,\n                matchCount: matches.length,\n                matches: matches.map((m) => ({\n                  path: m.path,\n                  line: m.lineNumber,\n                  text: m.line,\n                })),\n              });\n            }\n\n            default:\n              return `Error: unknown action \"${action}\". Valid actions: write, append, read, list, delete, grep.`;\n          }\n        } catch (err) {\n          const msg = err instanceof Error ? err.message : String(err);\n          return JSON.stringify({ ok: false, error: msg });\n        }\n      },\n    },\n  };\n}\n"]}

package/docs/content/durable-background-runs.mdx

@@ -1,6 +1,6 @@
 ---
 title: "Durable Background Runs"
-description: "Long agent-chat turns can run on a separate 15-minute Netlify background function instead of the synchronous request, so multi-step work finishes server-side without the client babysitting continuations. Opt-in per app; a foreground circuit-breaker keeps chat working even if the worker never starts."
+description: "Long agent-chat turns can run on a separate 15-minute Netlify background function instead of the synchronous request, so multi-step work finishes server-side without the client babysitting continuations. Enabled by default on deployed Netlify apps with an explicit opt-out; a foreground circuit-breaker keeps chat working even if the worker never starts."
 ---
 
 # Durable Background Runs
@@ -10,7 +10,8 @@ description: "Long agent-chat turns can run on a separate 15-minute Netlify back
 **Who is this for:** anyone deploying an agent-native app who wants long,
 multi-step agent turns to complete server-side, and anyone wondering what the
 `AGENT_CHAT_DURABLE_BACKGROUND` flag and the second Netlify function do. This
-is opt-in and entirely inside the framework — there is no app code to write.
+is enabled by default on deployed Netlify apps and entirely inside the
+framework — there is no app code to write.
 
 </Callout>
 
@@ -108,14 +109,17 @@ normal API calls always run synchronously on `server`.
 The foreground chat POST decides **per turn**. It dispatches to the background
 function only when all three hold:
 
-- `AGENT_CHAT_DURABLE_BACKGROUND` is truthy (`true` / `1` / `yes` / `on`),
+- the app is deployed on Netlify and `AGENT_CHAT_DURABLE_BACKGROUND` is not
+  explicitly falsy (`false` / `0` / `no` / `off`), or a non-Netlify hosted app
+  explicitly opts in with a truthy value (`true` / `1` / `yes` / `on`),
 - the app is running hosted (on the platform, not local dev), and
 - `A2A_SECRET` is set (the dispatch is an HMAC-signed self-call; without the
   secret it cannot be signed, so the turn stays inline).
 
-If any is missing, the turn runs inline exactly as before. The flag is read at
+If the app is local, `A2A_SECRET` is missing, or the flag is explicitly
+disabled, the turn runs inline exactly as before. The setting is read at
 **both build time** (to decide whether to emit the background function) and
-**runtime** (to decide whether to dispatch), so enabling it requires a redeploy.
+**runtime** (to decide whether to dispatch), so changing it requires a redeploy.
 
 ## The lifecycle and the circuit-breaker {#lifecycle}
 
@@ -190,7 +194,12 @@ one long invocation, not purely additive.
 
 <Callout id="doc-block-gjoj2d" tone="info">
 
-Durable runs are opt-in per app and default OFF. Enable with AGENT_CHAT_DURABLE_BACKGROUND=true (plus A2A_SECRET) and redeploy. Verify a turn actually used the worker by checking that its run reaches dispatch_mode=background-processing rather than falling back to inline recovery.
+Durable runs are enabled by default for deployed Netlify apps. Set
+`AGENT_CHAT_DURABLE_BACKGROUND=false` to opt out, or set it to `true` on another
+host. `A2A_SECRET` is still required. Redeploy after changing the setting, and
+verify a turn actually used the worker by checking that its run reaches
+`dispatch_mode=background-processing` rather than falling back to inline
+recovery.
 
 </Callout>
 

package/docs/design/durable-agent-runs.md

@@ -200,7 +200,8 @@ itself checkpoint).
 
 > Status: **Phase 0 shipped. Phase 1 + Phase 2 implemented** (the host-agnostic
 > durable-background worker and the Netlify 15-min `-background` optimization),
-> behind `AGENT_CHAT_DURABLE_BACKGROUND`, off by default. Internal per-step
+> default-on for deployed Netlify apps with an explicit opt-out via
+> `AGENT_CHAT_DURABLE_BACKGROUND=false`. Internal per-step
 > checkpointing (the Option A core of Phase 1) is recommended-not-yet-built; the
 > worker today gets its durability from the long single invocation plus
 > server-chained continuations rather than per-step idempotent checkpoints. See
@@ -251,13 +252,14 @@ checkpointed and durable runs remove the ceiling itself.
 
 # Final layered architecture
 
-Status: implemented (flagged, off by default)
+Status: implemented (default-on for deployed Netlify, explicit opt-out)
 Owner: core / run-manager + deploy
 
-Durable background runs ship as **two layers**. Both are gated behind
-`AGENT_CHAT_DURABLE_BACKGROUND` and default off; when off, the agent-chat run
-path and the deploy output are byte-for-byte the pre-existing synchronous
-behavior.
+Durable background runs ship as **two layers**. Deployed Netlify apps enable the
+path by default and can opt out with an explicit falsy
+`AGENT_CHAT_DURABLE_BACKGROUND` value. Other hosted platforms retain explicit
+opt-in. When off, the agent-chat run path and deploy output are byte-for-byte
+the pre-existing synchronous behavior.
 
 ### Layer 1 (portable baseline) — host-agnostic durable execution
 
@@ -600,8 +602,9 @@ Already strong; make the new claim match:
 
 > Status: \*\*Slices 0–1 implemented and the Slice-3 background-aware stale window
 >
-> - background→background continuation chaining are implemented\*\*, all behind
->   `AGENT_CHAT_DURABLE_BACKGROUND` (off by default). The host-agnostic baseline
+> - background→background continuation chaining are implemented\*\*, default-on
+>   for deployed Netlify apps with `AGENT_CHAT_DURABLE_BACKGROUND=false` as the
+>   opt-out. The host-agnostic baseline
 >   (Layer 1) carries the run on any host; the Netlify `-background` emit (Layer 2)
 >   is the deploy-time optimization. Slice 2's richer reconnect-first client UX and
 >   the internal per-step checkpointing (Option A) remain follow-ups; Slice 4
@@ -618,9 +621,10 @@ just writes a run event. Dispatch to it from a temporary test route via
 stub writes an event to `agent_run_events` from the background function, visible
 via `GET /runs/:id/events`. This de-risks the only genuinely new infra.
 
-**Slice 1 — route the real chat loop through the background function (flagged).**
-Behind `AGENT_CHAT_DURABLE_BACKGROUND` (off by default; hosted + `A2A_SECRET`
-only): foreground handler inserts the run row, dispatches, returns the SSE
+**Slice 1 — route the real chat loop through the background function.** On
+deployed Netlify it is enabled by default; `AGENT_CHAT_DURABLE_BACKGROUND=false`
+opts out. Other hosted platforms require explicit opt-in, and all hosts require
+`A2A_SECRET`: the foreground handler inserts the run row, dispatches, returns the SSE
 stream from `subscribeToRun`. The background `_process-run` claims the run and
 calls the same `startRun` + `runAgentLoop` the inline path uses, with
 `softTimeoutMs ≈ 13min` (new `backgroundFunction` option in

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.131.7",
+  "version": "0.132.0",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -395,8 +395,8 @@
     "y-protocols": "^1.0.7",
     "yjs": "^13.6.31",
     "zod": "^4.3.6",
-    "@agent-native/toolkit": "^0.12.0",
-    "@agent-native/recap-cli": "0.5.1"
+    "@agent-native/recap-cli": "0.5.1",
+    "@agent-native/toolkit": "^0.12.1"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",

package/src/a2a/activity.ts

@@ -1,16 +1,27 @@
 import { sanitizeToolErrorText } from "../agent/tool-error-redaction.js";
 import type { AgentChatEvent } from "../agent/types.js";
+import { redactArgsToJson, redactTextToSummary } from "../audit/redact.js";
 import type { DataPart, Part } from "./types.js";
 
 export const A2A_AGENT_ACTIVITY_KIND = "agent-native/agent-activity";
 export const A2A_AGENT_ACTIVITY_VERSION = 1;
 export const MAX_A2A_ACTIVITY_REASONING_CHARS = 32_768;
 export const MAX_A2A_ACTIVITY_RESPONSE_CHARS = 32_768;
-export const MAX_A2A_ACTIVITY_TOTAL_CHARS = 98_304;
 export const MAX_A2A_ACTIVITY_REASONING_SEGMENTS = 128;
 export const MAX_A2A_ACTIVITY_TOOL_CALLS = 64;
 export const MAX_A2A_ACTIVITY_TOOL_NAME_CHARS = 96;
 export const MAX_A2A_ACTIVITY_TOOL_ID_CHARS = 128;
+export const MAX_A2A_ACTIVITY_TOOL_INPUT_CHARS = 1024;
+export const MAX_A2A_ACTIVITY_TOOL_RESULT_CHARS = 512;
+/**
+ * Shared ceiling for every recorded tool input/result across the snapshot. The
+ * per-call caps alone allow 64 × 1536 chars, which would push a busy run past
+ * `MAX_A2A_ACTIVITY_TOTAL_CHARS` and make `parseA2AAgentActivityPart` reject
+ * the whole snapshot — trading missing arguments for a missing trace.
+ */
+export const MAX_A2A_ACTIVITY_TOOL_PAYLOAD_CHARS = 16_384;
+export const MAX_A2A_ACTIVITY_TOTAL_CHARS =
+  98_304 + MAX_A2A_ACTIVITY_TOOL_PAYLOAD_CHARS;
 
 export type A2AAgentActivityPhase =
   | "reasoning"
@@ -25,6 +36,13 @@ export interface A2AAgentActivityToolCall {
   name: string;
   id?: string;
   status: A2AAgentActivityToolStatus;
+  /**
+   * Redacted, size-capped JSON of the call's arguments. Absent when the call
+   * had none, or when the snapshot's shared payload budget was already spent.
+   */
+  input?: string;
+  /** Redacted, size-capped head of the tool result (`tool_done` only). */
+  result?: string;
 }
 
 export interface A2AAgentActivitySnapshot extends Record<string, unknown> {
@@ -68,9 +86,11 @@ export function createA2AAgentActivityState(
 }
 
 /**
- * Converts internal loop events into a bounded activity snapshot. It carries
- * only reasoning text already emitted to the local chat, never tool inputs or
- * results.
+ * Converts internal loop events into a bounded activity snapshot. Reasoning
+ * text is carried verbatim (it was already emitted to the local chat); tool
+ * arguments and results are carried only in redacted, size-capped form so the
+ * delegated run stays diagnosable without the snapshot becoming a secondary
+ * store of secrets or payloads.
  */
 export function applyA2AAgentActivityEvent(
   state: A2AAgentActivityState,
@@ -91,14 +111,26 @@ export function applyA2AAgentActivityEvent(
       );
       changed = true;
       break;
-    case "tool_start":
+    case "tool_start": {
       next.activePhase = "tool";
-      next.toolCalls = appendToolCall(next.toolCalls, toolFromEvent(event));
+      const input = captureToolInput(
+        event.input,
+        remainingPayloadBudget(next.toolCalls),
+      );
+      next.toolCalls = appendToolCall(next.toolCalls, {
+        ...toolFromEvent(event),
+        ...(input ? { input } : {}),
+      });
       changed = true;
       break;
+    }
     case "tool_done":
       next.activePhase = "tool";
-      next.toolCalls = settleToolCall(next.toolCalls, toolFromEvent(event));
+      next.toolCalls = settleToolCall(
+        next.toolCalls,
+        toolFromEvent(event),
+        event,
+      );
       changed = true;
       break;
     case "text":
@@ -203,6 +235,49 @@ function toolFromEvent(
   };
 }
 
+function payloadChars(tool: A2AAgentActivityToolCall): number {
+  return (tool.input?.length ?? 0) + (tool.result?.length ?? 0);
+}
+
+function remainingPayloadBudget(
+  current: A2AAgentActivityToolCall[],
+  excludeIndex = -1,
+): number {
+  const used = current.reduce(
+    (total, tool, index) =>
+      index === excludeIndex ? total : total + payloadChars(tool),
+    0,
+  );
+  return Math.max(0, MAX_A2A_ACTIVITY_TOOL_PAYLOAD_CHARS - used);
+}
+
+/**
+ * Redacted, capped JSON of the arguments, or `undefined` when there is nothing
+ * to record or the shared budget cannot fit a whole (still-parseable) capture.
+ * A partial JSON string would be worse than none — the reader could not tell a
+ * clipped object from a different one.
+ */
+function captureToolInput(input: unknown, budget: number): string | undefined {
+  const cap = Math.min(MAX_A2A_ACTIVITY_TOOL_INPUT_CHARS, budget);
+  if (cap < MAX_A2A_ACTIVITY_TOOL_INPUT_CHARS / 8) return undefined;
+  const json = redactArgsToJson(input, { maxJson: cap, maxString: 256 });
+  // JSON.stringify escapes control characters, so the result is already safe
+  // for the snapshot without a `sanitizeText` pass — which would rewrite
+  // `"token":"[redacted]"` into unparseable JSON.
+  if (!json || json === "{}" || json.length > cap) return undefined;
+  return json;
+}
+
+function captureToolResult(
+  result: string | undefined,
+  budget: number,
+): string | undefined {
+  const cap = Math.min(MAX_A2A_ACTIVITY_TOOL_RESULT_CHARS, budget);
+  if (!result || cap <= 0) return undefined;
+  const summary = redactTextToSummary(result, cap);
+  return summary ? sanitizeText(summary, cap) || undefined : undefined;
+}
+
 function appendBoundedSegment(
   current: string[],
   addition: string,
@@ -244,6 +319,7 @@ function appendToolCall(
 function settleToolCall(
   current: A2AAgentActivityToolCall[],
   tool: A2AAgentActivityToolCall,
+  event: Extract<AgentChatEvent, { type: "tool_done" }>,
 ): A2AAgentActivityToolCall[] {
   for (let index = current.length - 1; index >= 0; index -= 1) {
     const existing = current[index];
@@ -251,12 +327,32 @@ function settleToolCall(
       (tool.id && tool.id === existing.id) ||
       (!tool.id && tool.name === existing.name)
     ) {
+      // The matching `tool_start` already paid for its input; reuse it rather
+      // than re-capturing (and re-charging) the same arguments.
+      let budget = remainingPayloadBudget(current, index);
+      const input =
+        existing.input ?? captureToolInput(event.input, budget) ?? undefined;
+      budget -= input?.length ?? 0;
+      const result = captureToolResult(event.result, budget);
+      const settled: A2AAgentActivityToolCall = {
+        ...tool,
+        ...(input ? { input } : {}),
+        ...(result ? { result } : {}),
+      };
       return current.map((value, itemIndex) =>
-        itemIndex === index ? tool : value,
+        itemIndex === index ? settled : value,
       );
     }
   }
-  return appendToolCall(current, tool);
+  let budget = remainingPayloadBudget(current);
+  const input = captureToolInput(event.input, budget);
+  budget -= input?.length ?? 0;
+  const result = captureToolResult(event.result, budget);
+  return appendToolCall(current, {
+    ...tool,
+    ...(input ? { input } : {}),
+    ...(result ? { result } : {}),
+  });
 }
 
 function sanitizeText(value: string, maxChars: number): string {
@@ -320,12 +416,31 @@ function isSafeToolCall(value: unknown): value is A2AAgentActivityToolCall {
   if (!isRecord(value) || !isSafeToolName(value.name)) return false;
   return (
     (value.id === undefined || isSafeToolId(value.id)) &&
+    (value.input === undefined ||
+      isSafeCapturedText(value.input, MAX_A2A_ACTIVITY_TOOL_INPUT_CHARS)) &&
+    (value.result === undefined ||
+      isSafeCapturedText(value.result, MAX_A2A_ACTIVITY_TOOL_RESULT_CHARS)) &&
     (value.status === "running" ||
       value.status === "completed" ||
       value.status === "failed")
   );
 }
 
+/**
+ * Captured input/result are producer-side redacted strings. Unlike reasoning
+ * text they are NOT re-sanitized on read: `sanitizeToolErrorText` rewrites
+ * `"token":"…"` into unparseable JSON, so a round-trip equality check would
+ * reject every legitimate capture. Bound the length and reject raw control
+ * characters instead.
+ */
+function isSafeCapturedText(value: unknown, maxChars: number): value is string {
+  return (
+    typeof value === "string" &&
+    value.length <= maxChars &&
+    !/[\u0000-\u0008\u000b-\u001f\u007f]/.test(value)
+  );
+}
+
 function isSafeText(value: unknown, maxChars: number): value is string {
   return (
     typeof value === "string" &&
@@ -365,7 +480,9 @@ function activityCharacterCount(data: Record<string, unknown>): number {
         return (
           total +
           (typeof tool.name === "string" ? tool.name.length : 0) +
-          (typeof tool.id === "string" ? tool.id.length : 0)
+          (typeof tool.id === "string" ? tool.id.length : 0) +
+          (typeof tool.input === "string" ? tool.input.length : 0) +
+          (typeof tool.result === "string" ? tool.result.length : 0)
         );
       }, 0)
     : 0;

package/src/a2a/index.ts

@@ -11,7 +11,10 @@ export {
   MAX_A2A_ACTIVITY_TOOL_CALLS,
   MAX_A2A_ACTIVITY_TOTAL_CHARS,
   MAX_A2A_ACTIVITY_TOOL_ID_CHARS,
+  MAX_A2A_ACTIVITY_TOOL_INPUT_CHARS,
   MAX_A2A_ACTIVITY_TOOL_NAME_CHARS,
+  MAX_A2A_ACTIVITY_TOOL_PAYLOAD_CHARS,
+  MAX_A2A_ACTIVITY_TOOL_RESULT_CHARS,
   applyA2AAgentActivityEvent,
   buildA2AAgentActivityPart,
   buildA2AAgentActivitySnapshot,