@agent-native/core 0.144.2 → 0.145.0

package/dist/server/agent-chat/prompt-resources.d.ts

@@ -1,3 +1,4 @@
+import { type FrameworkToolGroup } from "../../framework-tools.js";
 import type { ContextGovernanceTier, ContextManifestSourceRef, ContextSystemProvenance } from "../../shared/context-xray.js";
 export declare const COMPACT_PROMPT_RESOURCE_MAX_CHARS = 6000;
 export interface PromptContextProviderContext {
@@ -89,4 +90,6 @@ export declare function resourceScopeForOwner(owner: string, currentOwner?: stri
  * AGENTS.md and restarting the server is all it takes; Vite HMR invalidates
  * the bundle in dev so changes land instantly.
  */
-export declare function loadResourcesForPrompt(owner: string, compact?: boolean, selfAppId?: string, orgId?: string | null): Promise<string>;
+export declare function loadResourcesForPrompt(owner: string, compact?: boolean, selfAppId?: string, orgId?: string | null, opts?: {
+    disabledFrameworkGroups?: ReadonlySet<FrameworkToolGroup>;
+}): Promise<string>;

package/dist/server/agent-chat/prompt-resources.js

@@ -1,3 +1,4 @@
+import { frameworkGroupEnabled, } from "../../framework-tools.js";
 import { getFrontmatterValue, getSkillNameFromPath, parseFrontmatter, } from "../../resources/metadata.js";
 import { ensurePersonalDefaults, organizationIdFromResourceOwner, resourceGet, resourceGetByPath, resourceList, resourceListAccessible, SHARED_OWNER, sharedResourceOwner, WORKSPACE_OWNER, } from "../../resources/store.js";
 import { discoverAgents } from "../agent-discovery.js";
@@ -600,7 +601,7 @@ async function loadResourceIndexForPrompt(owner, scope) {
  * AGENTS.md and restarting the server is all it takes; Vite HMR invalidates
  * the bundle in dev so changes land instantly.
  */
-export async function loadResourcesForPrompt(owner, compact = false, selfAppId, orgId = getRequestOrgId() ?? null) {
+export async function loadResourcesForPrompt(owner, compact = false, selfAppId, orgId = getRequestOrgId() ?? null, opts) {
     await ensurePersonalDefaults(owner);
     const sections = [];
     const addSection = (content, governance = "inherited") => {
@@ -774,7 +775,12 @@ export async function loadResourcesForPrompt(owner, compact = false, selfAppId,
         orgId,
     }));
     try {
-        const agents = (await discoverAgents(selfAppId)).slice(0, 30);
+        // Both tools this block names by name come from the `workspaceApps` group.
+        // With that group off there is no `call-agent` to delegate through, so the
+        // block would only teach a capability the request cannot carry.
+        const agents = frameworkGroupEnabled(opts?.disabledFrameworkGroups, "workspaceApps")
+            ? (await discoverAgents(selfAppId)).slice(0, 30)
+            : [];
         if (agents.length > 0) {
             const lines = agents.map((agent) => `- ${agent.name} (${agent.id}) — ${agent.description || "Connected A2A app"}`);
             // Nothing else in the prompt or the initial tool surface tells the agent

package/dist/server/agent-chat-plugin.js

@@ -24,6 +24,7 @@ import { adoptThreadScopeIfUnscoped, createThread, forkThread, getThread, regist
 import { isCheckpointRestorePath } from "../checkpoints/route-match.js";
 import { createDbAdminAgentTools } from "../db-admin/agent-tools.js";
 import { isTransientDatabaseError } from "../db/client.js";
+import { filterFrameworkToolGroups, resolveFrameworkTools, } from "../framework-tools.js";
 import { verifyInternalToken, extractBearerToken, } from "../integrations/internal-token.js";
 import { RECURRING_JOBS_SWEEP_PATH, RECURRING_JOBS_SWEEP_TOKEN_SUBJECT, } from "../jobs/scheduler-dispatch.js";
 import { McpClientManager, loadMcpConfig, autoDetectMcpConfig, mcpToolsToActionEntries, syncMcpActionEntries, mountMcpServersRoutes, mountMcpHubRoutes, buildMergedConfig, startMcpConfigRefresh, getHubStatus, isHubServeEnabled, } from "../mcp-client/index.js";
@@ -41,6 +42,7 @@ import { captureError } from "./capture-error.js";
 import { getH3App, markDefaultPluginProvided, trackPluginInit, } from "./framework-request-handler.js";
 import { getOrigin } from "./google-oauth.js";
 import { readBody } from "./h3-helpers.js";
+import { startIntervalJob } from "./interval-job.js";
 import { getModelFamilyOverlay } from "./prompts/index.js";
 import { mountRealtimeVoiceRoutes } from "./realtime-voice.js";
 import { runWithRequestContext, getRequestContext, getRequestOrgId, getRequestUserEmail, getRequestRunContext, ensureRequestRunContext, } from "./request-context.js";
@@ -276,12 +278,19 @@ export function createAgentChatPlugin(options) {
             // `canToggle` means "this environment allows toggling" (static); this
             // function means "the user currently has dev mode ON" (live).
             const isDevMode = () => currentDevMode;
+            // Resolve the framework's own tool surface once, folding the deprecated
+            // `databaseTools` / `extensionTools` into `frameworkTools` so every
+            // consumer below reads a single shape. Conflicting old/new values throw
+            // here rather than booting with a surface nobody chose.
+            const frameworkTools = resolveFrameworkTools(options);
+            const disabledFrameworkGroups = frameworkTools.disabledGroups;
             // Build the four assembled system prompt strings. These are static for the
             // lifetime of this plugin instance — examples come from options once at
             // startup, not per-request.
             const { PROD_FRAMEWORK_PROMPT, DEV_FRAMEWORK_PROMPT, PROD_FRAMEWORK_PROMPT_COMPACT, DEV_FRAMEWORK_PROMPT_COMPACT, } = buildFrameworkPrompts(options?.promptExamples, {
-                databaseTools: options?.databaseTools,
-                extensionTools: options?.extensionTools,
+                databaseTools: frameworkTools.database,
+                extensionTools: frameworkTools.extensions,
+                disabledFrameworkGroups,
             });
             // Route readiness must not wait on settings scans, remote hub fetches, or
             // third-party MCP handshakes. Build the action surface against an empty
@@ -396,13 +405,23 @@ export function createAgentChatPlugin(options) {
             catch {
                 // Package action registration is optional.
             }
-            // Resource, chat, docs, db, and cross-agent scripts are available in both prod and dev modes
-            const resourceScripts = await createResourceScriptEntries();
-            const docsScripts = await createDocsScriptEntries();
-            const databaseToolsMode = normalizeDatabaseToolsMode(options?.databaseTools);
+            // Resource, chat, docs, db, and cross-agent scripts are available in both
+            // prod and dev modes, unless the app switched the group off through
+            // `frameworkTools`. Gating at construction is deliberate: an empty map
+            // flows through all thirteen registry composition sites below, whereas a
+            // condition at each spread site is the same omission waiting to happen
+            // thirteen times. Matching HTTP routes are mounted from `httpActions`,
+            // which is built from the ungated sets so the UI keeps working.
+            const resourceScripts = frameworkTools.isEnabled("resources")
+                ? await createResourceScriptEntries()
+                : {};
+            const docsScripts = frameworkTools.isEnabled("docs")
+                ? await createDocsScriptEntries()
+                : {};
+            const databaseToolsMode = normalizeDatabaseToolsMode(frameworkTools.database);
             const databaseToolsEnabled = databaseToolsMode !== "off";
             const databaseWriteToolsEnabled = databaseToolsMode === "write";
-            const extensionToolsEnabled = options?.extensionTools === true;
+            const extensionToolsEnabled = frameworkTools.extensions;
             const dbScripts = databaseToolsEnabled
                 ? await createDbScriptEntries(databaseToolsMode, {
                     extensionTools: extensionToolsEnabled,
@@ -416,12 +435,20 @@ export function createAgentChatPlugin(options) {
             const urlTools = createUrlTools();
             const engineScripts = await createAgentEngineScriptEntries(options?.appId);
             const loopSettingsScripts = await createAgentLoopSettingsScriptEntries();
-            const chatScripts = {
-                ...(await createChatScriptEntries()),
-                ...engineScripts,
-                ...loopSettingsScripts,
-            };
-            const callAgentScript = await createCallAgentScriptEntry(options?.appId);
+            // `httpActions` spreads engineScripts/loopSettingsScripts directly, so
+            // gating here removes them from the agent's tools without unmounting the
+            // routes the settings UI calls.
+            const chatScripts = frameworkTools.isEnabled("chat")
+                ? {
+                    ...(await createChatScriptEntries()),
+                    ...engineScripts,
+                    ...loopSettingsScripts,
+                }
+                : {};
+            // Both `call-agent` and `describe-workspace-apps` come from this factory.
+            const callAgentScript = frameworkTools.isEnabled("workspaceApps")
+                ? await createCallAgentScriptEntry(options?.appId)
+                : {};
             let runNowSchedulerDeps = null;
             const browserTools = createBuilderBrowserTool({
                 getOrigin: () => getRequestRunContext()?.requestOrigin ?? "http://localhost:3000",
@@ -581,7 +608,13 @@ export function createAgentChatPlugin(options) {
             // surface, prompt, MCP/A2A list, and job/trigger runner below. The full
             // `*All` sets are reserved for `httpActions`, which keeps agent-hidden
             // actions reachable from the frontend / HTTP.
-            const templateScripts = filterAgentTools(templateScriptsAll);
+            //
+            // The framework's own action kits (sharing, review, history, flags, …)
+            // arrive in this same registry through `autoDiscoverActions`, tagged with
+            // `frameworkGroup`. Subtracting disabled groups HERE is what removes them
+            // from every downstream agent surface at once; `httpActions` re-merges
+            // them ungated, so the share dialog and review threads keep their routes.
+            const templateScripts = filterFrameworkToolGroups(filterAgentTools(templateScriptsAll), disabledFrameworkGroups);
             // Compact is the safe default for every app, including generated and
             // third-party apps that have not curated a starter list yet. Keep the
             // app's own action surface immediately callable; framework, provider,
@@ -591,7 +624,7 @@ export function createAgentChatPlugin(options) {
             // (below, after the run-code tools are built) additionally folds in
             // whatever `generateCorpusToolsPrompt` teaches by name for this request.
             const templateInitialToolNames = resolveInitialToolNames(templateScripts, options?.initialToolNames);
-            const discoveredActions = filterAgentTools(discoveredActionsAll);
+            const discoveredActions = filterFrameworkToolGroups(filterAgentTools(discoveredActionsAll), disabledFrameworkGroups);
             // Per-request owner is read from the AsyncLocalStorage run context
             // (populated by prepareRun). Module-scope `let` would race across
             // concurrent requests on a long-lived Node process — overlapping
@@ -627,22 +660,29 @@ export function createAgentChatPlugin(options) {
             // Automation tools + fetch tool — depend on owner via callback.
             // Each callback short-circuits with a clear error when the run context
             // has no authenticated owner (see SECURITY note on getCurrentRunOwner).
+            const automationGroupEnabled = frameworkTools.isEnabled("automation");
             let automationTools = {};
             try {
-                const { createAutomationToolEntries } = await import("../triggers/actions.js");
-                automationTools = createAutomationToolEntries(() => requireCurrentRunOwner("manage automations"));
+                if (automationGroupEnabled) {
+                    const { createAutomationToolEntries } = await import("../triggers/actions.js");
+                    automationTools = createAutomationToolEntries(() => requireCurrentRunOwner("manage automations"));
+                }
             }
             catch { }
             let notificationTools = {};
             try {
-                const { createNotificationToolEntries } = await import("../notifications/actions.js");
-                notificationTools = createNotificationToolEntries(() => requireCurrentRunOwner("manage notifications"));
+                if (automationGroupEnabled) {
+                    const { createNotificationToolEntries } = await import("../notifications/actions.js");
+                    notificationTools = createNotificationToolEntries(() => requireCurrentRunOwner("manage notifications"));
+                }
             }
             catch { }
             let progressTools = {};
             try {
-                const { createProgressToolEntries } = await import("../progress/actions.js");
-                progressTools = createProgressToolEntries(() => requireCurrentRunOwner("manage progress"));
+                if (automationGroupEnabled) {
+                    const { createProgressToolEntries } = await import("../progress/actions.js");
+                    progressTools = createProgressToolEntries(() => requireCurrentRunOwner("manage progress"));
+                }
             }
             catch { }
             let githubRepoTools = {};
@@ -660,48 +700,53 @@ export function createAgentChatPlugin(options) {
                 });
             }
             catch { }
+            const webGroupEnabled = frameworkTools.isEnabled("web");
             let fetchTool = {};
             try {
-                const { createFetchToolEntry } = await import("../extensions/fetch-tool.js");
-                // Resolve `${keys.NAME}` through the same request-scope cascade
-                // already used by extension fetches (extensions/routes.ts) and
-                // automation connector headers (automation/index.ts): user scope
-                // first (personal overrides win), then the active org scope (the
-                // Dispatch vault syncs workspace secrets here), then workspace
-                // scope. Org/workspace vault rows are write-gated (org-admin +
-                // Dispatch vault UI), so this is safe to read by default — unlike
-                // the opt-in-only user→workspace fallback in resolveKeyReferences
-                // (see audit 05 H2 in secrets/substitution.ts), which stays off.
-                // Previously this tool only looked at scope "user", so a
-                // ${keys.NAME} reference to a key synced into the org/workspace
-                // vault could never resolve here even though the same key already
-                // worked for extension fetches and automations.
-                const { resolveKeyReferencesWithRequestScopes, validateUrlAllowlist, getKeyAllowlist, getResolvedKeyAllowlist, } = await import("../secrets/substitution.js");
-                fetchTool = createFetchToolEntry({
-                    resolveKeys: async (text) => resolveKeyReferencesWithRequestScopes(text, requireCurrentRunOwner("resolve key references")),
-                    validateUrl: async (url, usedKeys, resolvedKeys) => {
-                        for (const keyName of usedKeys) {
-                            const allowlist = await resolveFetchToolKeyAllowlist(keyName, resolvedKeys, requireCurrentRunOwner("validate URL allowlist"), { getKeyAllowlist, getResolvedKeyAllowlist });
-                            if (allowlist && !validateUrlAllowlist(url, allowlist)) {
-                                return false;
+                if (webGroupEnabled) {
+                    const { createFetchToolEntry } = await import("../extensions/fetch-tool.js");
+                    // Resolve `${keys.NAME}` through the same request-scope cascade
+                    // already used by extension fetches (extensions/routes.ts) and
+                    // automation connector headers (automation/index.ts): user scope
+                    // first (personal overrides win), then the active org scope (the
+                    // Dispatch vault syncs workspace secrets here), then workspace
+                    // scope. Org/workspace vault rows are write-gated (org-admin +
+                    // Dispatch vault UI), so this is safe to read by default — unlike
+                    // the opt-in-only user→workspace fallback in resolveKeyReferences
+                    // (see audit 05 H2 in secrets/substitution.ts), which stays off.
+                    // Previously this tool only looked at scope "user", so a
+                    // ${keys.NAME} reference to a key synced into the org/workspace
+                    // vault could never resolve here even though the same key already
+                    // worked for extension fetches and automations.
+                    const { resolveKeyReferencesWithRequestScopes, validateUrlAllowlist, getKeyAllowlist, getResolvedKeyAllowlist, } = await import("../secrets/substitution.js");
+                    fetchTool = createFetchToolEntry({
+                        resolveKeys: async (text) => resolveKeyReferencesWithRequestScopes(text, requireCurrentRunOwner("resolve key references")),
+                        validateUrl: async (url, usedKeys, resolvedKeys) => {
+                            for (const keyName of usedKeys) {
+                                const allowlist = await resolveFetchToolKeyAllowlist(keyName, resolvedKeys, requireCurrentRunOwner("validate URL allowlist"), { getKeyAllowlist, getResolvedKeyAllowlist });
+                                if (allowlist && !validateUrlAllowlist(url, allowlist)) {
+                                    return false;
+                                }
                             }
-                        }
-                        return true;
-                    },
-                });
+                            return true;
+                        },
+                    });
+                }
             }
             catch { }
             let webSearchTool = {};
             try {
-                const { createWebSearchToolEntry } = await import("../extensions/web-search-tool.js");
-                const { getBuilderWebSearchBaseUrl, resolveBuilderCredentials, resolveSecret, } = await import("./credential-provider.js");
-                const { getBuilderGatewayRequestHeaders } = await import("../agent/engine/builder-gateway-headers.js");
-                webSearchTool = createWebSearchToolEntry({
-                    resolveSecret,
-                    resolveBuilderCredentials,
-                    getBuilderWebSearchBaseUrl,
-                    getBuilderRequestHeaders: getBuilderGatewayRequestHeaders,
-                });
+                if (webGroupEnabled) {
+                    const { createWebSearchToolEntry } = await import("../extensions/web-search-tool.js");
+                    const { getBuilderWebSearchBaseUrl, resolveBuilderCredentials, resolveSecret, } = await import("./credential-provider.js");
+                    const { getBuilderGatewayRequestHeaders } = await import("../agent/engine/builder-gateway-headers.js");
+                    webSearchTool = createWebSearchToolEntry({
+                        resolveSecret,
+                        resolveBuilderCredentials,
+                        getBuilderWebSearchBaseUrl,
+                        getBuilderRequestHeaders: getBuilderGatewayRequestHeaders,
+                    });
+                }
             }
             catch { }
             let workspaceFilesTool = {};
@@ -751,11 +796,13 @@ export function createAgentChatPlugin(options) {
             let coreEmailTools = {};
             let backgroundCoreEmailTools = {};
             try {
-                const { createCoreEmailActionEntries } = await import("./email-actions.js");
-                coreEmailTools = createCoreEmailActionEntries();
-                backgroundCoreEmailTools = createCoreEmailActionEntries({
-                    unattended: true,
-                });
+                if (frameworkTools.isEnabled("email")) {
+                    const { createCoreEmailActionEntries } = await import("./email-actions.js");
+                    coreEmailTools = createCoreEmailActionEntries();
+                    backgroundCoreEmailTools = createCoreEmailActionEntries({
+                        unattended: true,
+                    });
+                }
             }
             catch { }
             // Core read-attachment tool — always registered so the agent can page
@@ -1232,7 +1279,7 @@ export function createAgentChatPlugin(options) {
                     const devActive = isDevMode();
                     // Build the same system prompt the interactive agent uses
                     const owner = userEmail;
-                    const resources = await loadResourcesForPrompt(owner, lazyContext, options?.appId);
+                    const resources = await loadResourcesForPrompt(owner, lazyContext, options?.appId, undefined, { disabledFrameworkGroups });
                     const schemaBlock = lazyContext
                         ? ""
                         : await buildSchemaBlock(owner, databaseToolsMode);
@@ -1700,7 +1747,7 @@ export function createAgentChatPlugin(options) {
                         // catalog on its very first request, undermining the compact MCP
                         // catalog this surface is supposed to keep external callers on.
                         const mcpToolSurface = createA2AEngineToolSurface(actionsToEngineTools(mcpActions), effectiveInitialToolNames);
-                        const resources = await loadResourcesForPrompt(SHARED_OWNER, lazyContext, options?.appId);
+                        const resources = await loadResourcesForPrompt(SHARED_OWNER, lazyContext, options?.appId, undefined, { disabledFrameworkGroups });
                         const schemaBlock = lazyContext
                             ? ""
                             : await buildSchemaBlock(SHARED_OWNER, databaseToolsMode);
@@ -2155,8 +2202,10 @@ export function createAgentChatPlugin(options) {
             // Job management tool (manage-jobs)
             let jobTools = {};
             try {
-                const { createJobTools } = await import("../jobs/tools.js");
-                jobTools = createJobTools();
+                if (automationGroupEnabled) {
+                    const { createJobTools } = await import("../jobs/tools.js");
+                    jobTools = createJobTools();
+                }
             }
             catch { }
             // Lean mode: only template actions + essential framework tools. Drop
@@ -2486,7 +2535,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             modelOverlay +
                             runtimeContext);
                     }
-                    const resources = await loadResourcesForPrompt(owner, lazyContext, options?.appId);
+                    const resources = await loadResourcesForPrompt(owner, lazyContext, options?.appId, undefined, { disabledFrameworkGroups });
                     // In lazy context mode, skip embedding the full schema. When database
                     // tools are enabled the agent can call `db-schema` on demand.
                     const schemaBlock = lazyContext
@@ -2719,7 +2768,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             });
                             return setSystemPromptOnContext(leanBasePrompt + extra + modelOverlay + runtimeContext);
                         }
-                        const resources = await loadResourcesForPrompt(owner, lazyContext, options?.appId);
+                        const resources = await loadResourcesForPrompt(owner, lazyContext, options?.appId, undefined, { disabledFrameworkGroups });
                         const schemaBlock = lazyContext || !databaseToolsEnabled
                             ? ""
                             : await buildSchemaBlock(owner, databaseToolsMode);
@@ -4695,7 +4744,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                 const schedulerDeps = {
                     getActions: getBackgroundActionEntries,
                     getSystemPrompt: async (owner) => {
-                        const resources = await loadResourcesForPrompt(owner, lazyContext, options?.appId);
+                        const resources = await loadResourcesForPrompt(owner, lazyContext, options?.appId, undefined, { disabledFrameworkGroups });
                         const schemaBlock = lazyContext
                             ? ""
                             : await buildSchemaBlock(owner, databaseToolsMode);
@@ -4711,8 +4760,11 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                     // fetchTool/webSearchTool/toolActions catalog every tick.
                     getInitialToolNames: (job) => [
                         ...effectiveInitialToolNames,
-                        "manage-jobs",
-                        "manage-progress",
+                        // Only promotable while the group that supplies them is on; with
+                        // `automation` off the prompt no longer names them either.
+                        ...(automationGroupEnabled
+                            ? ["manage-jobs", "manage-progress"]
+                            : []),
                         ...(job?.meta.mcpTools ?? []),
                     ],
                     apiKey: options?.apiKey,
@@ -4966,35 +5018,31 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                 setTimeout(() => {
                     (async () => {
                         const { UNCLAIMED_BACKGROUND_RUN_FAST_SWEEP_MS } = await import("../agent/run-store.js");
-                        setInterval(() => {
-                            (async () => {
-                                const { listUnclaimedBackgroundRunRows, shouldRedispatchUnclaimedBackgroundRun, reapAllStaleRuns, } = await import("../agent/run-store.js");
-                                // The unclaimed-background sweep below only matches
-                                // dispatch_mode='background' — handoffs a worker never
-                                // claimed. Once a worker CLAIMS a row nothing periodic looked
-                                // at it again, so a dead producer was only reaped when some
-                                // client request path or an unrelated run's cleanup happened
-                                // to notice (prod: 24 minutes after the last heartbeat,
-                                // against a 45s window). `reapAllStaleRuns` is per-row,
-                                // idempotent, re-checks staleness at UPDATE time and honours
-                                // the in-flight grace, so it is safe on this cadence.
-                                await reapAllStaleRuns().catch(() => { });
-                                let rows;
-                                try {
-                                    rows = await listUnclaimedBackgroundRunRows();
-                                }
-                                catch {
-                                    return; // Table may not exist yet on first boot
-                                }
-                                for (const row of rows) {
-                                    if (!shouldRedispatchUnclaimedBackgroundRun(row))
-                                        continue;
-                                    await attemptUnclaimedBackgroundRunRedispatch(row).catch(() => { });
-                                }
-                            })().catch(() => {
-                                // best-effort — never break the server
-                            });
-                        }, UNCLAIMED_BACKGROUND_RUN_FAST_SWEEP_MS);
+                        startIntervalJob(async () => {
+                            const { listUnclaimedBackgroundRunRows, shouldRedispatchUnclaimedBackgroundRun, reapAllStaleRuns, } = await import("../agent/run-store.js");
+                            // The unclaimed-background sweep below only matches
+                            // dispatch_mode='background' — handoffs a worker never
+                            // claimed. Once a worker CLAIMS a row nothing periodic looked
+                            // at it again, so a dead producer was only reaped when some
+                            // client request path or an unrelated run's cleanup happened
+                            // to notice (prod: 24 minutes after the last heartbeat,
+                            // against a 45s window). `reapAllStaleRuns` is per-row,
+                            // idempotent, re-checks staleness at UPDATE time and honours
+                            // the in-flight grace, so it is safe on this cadence.
+                            await reapAllStaleRuns().catch(() => { });
+                            let rows;
+                            try {
+                                rows = await listUnclaimedBackgroundRunRows();
+                            }
+                            catch {
+                                return; // Table may not exist yet on first boot
+                            }
+                            for (const row of rows) {
+                                if (!shouldRedispatchUnclaimedBackgroundRun(row))
+                                    continue;
+                                await attemptUnclaimedBackgroundRunRedispatch(row).catch(() => { });
+                            }
+                        }, { intervalMs: UNCLAIMED_BACKGROUND_RUN_FAST_SWEEP_MS });
                     })().catch(() => {
                         // best-effort — if run-store fails to load, the slow sweep below
                         // still provides eventual (loud) recovery.
@@ -5076,7 +5124,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                     await initTriggerDispatcher({
                         getActions: getBackgroundActionEntries,
                         getSystemPrompt: async (owner) => {
-                            const resources = await loadResourcesForPrompt(owner, lazyContext, options?.appId);
+                            const resources = await loadResourcesForPrompt(owner, lazyContext, options?.appId, undefined, { disabledFrameworkGroups });
                             const schemaBlock = lazyContext
                                 ? ""
                                 : await buildSchemaBlock(owner, databaseToolsMode);

package/dist/server/index.d.ts

@@ -1,4 +1,5 @@
 export { createServer, type CreateServerOptions, type EnvKeyConfig, } from "./create-server.js";
+export { startIntervalJob, type IntervalJobOptions, type IntervalJobHandle, } from "./interval-job.js";
 export { AGENT_BACKGROUND_PROCESSOR_FIELD, AGENT_BACKGROUND_PROCESSOR_ROUTE, AGENT_BACKGROUND_PROCESSOR_ROUTE_FIELD, dispatchPathTargetsNetlifyBackgroundFunction, isInBackgroundFunctionRuntime, resolveDurableBackgroundDispatchPath, } from "../agent/durable-background.js";
 export { readBody, readBodyWithSizeLimit, streamFile, DEFAULT_CHAT_MAX_BODY_BYTES, DEFAULT_UPLOAD_MAX_FILE_BYTES, MAX_CHAT_ATTACHMENTS_PER_MESSAGE, isAllowedUploadMimeType, } from "./h3-helpers.js";
 export { buildDeepLink, toAbsoluteOpenUrl, toDesktopOpenUrl, toVsCodeOpenUrl, OPEN_ROUTE_SUBPATH, DESKTOP_OPEN_URL, VSCODE_OPEN_URL, type DeepLinkInput, } from "./deep-link.js";

package/dist/server/index.js

@@ -1,4 +1,5 @@
 export { createServer, } from "./create-server.js";
+export { startIntervalJob, } from "./interval-job.js";
 export { AGENT_BACKGROUND_PROCESSOR_FIELD, AGENT_BACKGROUND_PROCESSOR_ROUTE, AGENT_BACKGROUND_PROCESSOR_ROUTE_FIELD, dispatchPathTargetsNetlifyBackgroundFunction, isInBackgroundFunctionRuntime, resolveDurableBackgroundDispatchPath, } from "../agent/durable-background.js";
 export { readBody, readBodyWithSizeLimit, streamFile, DEFAULT_CHAT_MAX_BODY_BYTES, DEFAULT_UPLOAD_MAX_FILE_BYTES, MAX_CHAT_ATTACHMENTS_PER_MESSAGE, isAllowedUploadMimeType, } from "./h3-helpers.js";
 export { buildDeepLink, toAbsoluteOpenUrl, toDesktopOpenUrl, toVsCodeOpenUrl, OPEN_ROUTE_SUBPATH, DESKTOP_OPEN_URL, VSCODE_OPEN_URL, } from "./deep-link.js";

package/dist/server/interval-job.d.ts

@@ -0,0 +1,25 @@
+export interface IntervalJobOptions {
+    /** Delay in ms between runs. */
+    intervalMs: number;
+    /** Per-run timeout. Default: `Math.max(timeoutFloorMs, intervalMs * 4)`. */
+    timeoutMs?: number;
+    /** Floor used by the default `timeoutMs`. Default: 10_000. */
+    timeoutFloorMs?: number;
+    /** Called when a run throws or times out. Default: swallow (a background job shouldn't crash the host process). */
+    onError?: (err: unknown) => void;
+    /** Run immediately on start. Default: true. */
+    leading?: boolean;
+}
+export interface IntervalJobHandle {
+    stop(): void;
+}
+/**
+ * Run a background job on a recurring interval without hand-rolling a
+ * `running` overlap guard or a request timeout — see `createPollEngine` for
+ * the underlying guarantees. `runOnce` keeps its normal exported signature
+ * (serverless schedulers can still call it directly, bypassing the loop);
+ * this only replaces the `setInterval` + module-level flag wiring around it.
+ * The internal timer is `.unref()`'d so it never keeps the process alive on
+ * its own.
+ */
+export declare function startIntervalJob(runOnce: (signal: AbortSignal) => Promise<void>, options: IntervalJobOptions): IntervalJobHandle;

package/dist/server/interval-job.js

@@ -0,0 +1,19 @@
+import { createPollEngine } from "../shared/poll-engine.js";
+/**
+ * Run a background job on a recurring interval without hand-rolling a
+ * `running` overlap guard or a request timeout — see `createPollEngine` for
+ * the underlying guarantees. `runOnce` keeps its normal exported signature
+ * (serverless schedulers can still call it directly, bypassing the loop);
+ * this only replaces the `setInterval` + module-level flag wiring around it.
+ * The internal timer is `.unref()`'d so it never keeps the process alive on
+ * its own.
+ */
+export function startIntervalJob(runOnce, options) {
+    const engine = createPollEngine(runOnce, options);
+    engine.start();
+    return {
+        stop() {
+            engine.stop();
+        },
+    };
+}

package/dist/server/prompts/framework-core-compact.d.ts

@@ -8,11 +8,16 @@
  *   - Detailed "Parallel Tool Calls" prose (replaced with one-liner)
  *   - Detailed "Resources" section (agent uses resources tool)
  */
+import { type FrameworkToolGroup } from "../../framework-tools.js";
 import { type DatabaseToolsOption } from "../../scripts/db/tool-mode.js";
 import { type PromptExamples } from "./shared-rules.js";
 export interface FrameworkCoreCompactPromptOptions {
     databaseTools?: DatabaseToolsOption;
     extensionTools?: boolean;
+    /** Framework tool groups this app switched off. Every block below that names
+     *  a group's tool by name is gated on this — a prompt naming an absent tool
+     *  makes the model call it, fail, and often report the capability as missing. */
+    disabledFrameworkGroups?: ReadonlySet<FrameworkToolGroup>;
 }
 /**
  * Build the compact FRAMEWORK_CORE prompt string.

package/dist/server/prompts/framework-core-compact.js

@@ -8,14 +8,37 @@
  *   - Detailed "Parallel Tool Calls" prose (replaced with one-liner)
  *   - Detailed "Resources" section (agent uses resources tool)
  */
+import { frameworkGroupEnabled, } from "../../framework-tools.js";
 import { hasDatabaseReadTools, hasDatabaseWriteTools, } from "../../scripts/db/tool-mode.js";
-import { sharedRule8, SHARED_RULE_9, SHARED_RULE_14, SHARED_RULE_15, SHARED_RULE_AGENT_WARNINGS, } from "./shared-rules.js";
+import { sharedRule8, SHARED_RULE_9, sharedRule14, SHARED_RULE_15, SHARED_RULE_AGENT_WARNINGS, } from "./shared-rules.js";
 /**
  * Build the compact FRAMEWORK_CORE prompt string.
  *
  * @param examples Optional injectable provider/action examples for rule 8.
  */
 export function buildFrameworkCoreCompact(examples, options) {
+    const groupOn = (group) => frameworkGroupEnabled(options?.disabledFrameworkGroups, group);
+    const resourcesSection = groupOn("resources")
+        ? `### Resources
+
+Use the \`resources\` tool for persistent notes and context files: \`action: "list"\`, \`"read"\`, \`"effective"\`, \`"write"\`, \`"promote"\`, or \`"delete"\`.
+Resources have three levels: workspace defaults inherited from Dispatch, shared organization/app overrides, and personal overrides. Use \`resources\` with \`action: "effective"\` before editing when you need to explain or inspect which level is active for a path.
+Workspace resources are user-facing by default. If you need temporary working files, write them as agent scratch (\`visibility: "agent_scratch"\`); scratch is hidden from the Workspace view by default and expires. Use \`visibility: "workspace"\` only when the user explicitly asked to save/manage that file, or for durable AGENTS.md, LEARNINGS.md, memory, skills, jobs, or custom agents.
+`
+        : "";
+    const extendedCapabilityClauses = [
+        "inline embeds",
+        groupOn("chat") ? "chat history search (`chat-history`)" : "",
+        groupOn("automation") ? "recurring jobs (`manage-jobs`)" : "",
+        "structured memory (`save-memory`/`delete-memory`)",
+        "browser automation (`activate-browser` in production, `set-browser-control` locally)",
+    ].filter(Boolean);
+    const extendedCapabilitiesList = `${extendedCapabilityClauses.slice(0, -1).join(", ")}, and ${extendedCapabilityClauses.at(-1)}`;
+    const callAgentSection = groupOn("workspaceApps")
+        ? `
+For generated media, prefer this app's native generation action; otherwise use \`call-agent\` with agent "assets".
+`
+        : "";
     const hasDatabaseTools = hasDatabaseReadTools(options?.databaseTools);
     const hasDatabaseWrites = hasDatabaseWriteTools(options?.databaseTools);
     const dataRule = hasDatabaseWrites
@@ -56,22 +79,15 @@ ${SHARED_RULE_9}
 **Native widgets** — For table/chart/graph/report requests, prefer actions labeled \`Native chat widget\`; use \`render-data-widget\` for already-summarized data (≤50 rows) instead of markdown tables. Above that, give the total plus the top rows — never retype a full result set as widget arguments. Deliver files in chat, never just a path.
 10. **Your tool list is not the whole surface** — Most app actions and connected MCP tools load on demand, so search the live registry with \`tool-search\` before concluding a capability doesn't exist.
 11. **Relative dates use runtime context** — The \`<runtime-context>\` block gives the authoritative current date/time. Resolve "today", "yesterday", "last week", and similar phrases to explicit calendar dates before querying data or creating artifacts.
-${SHARED_RULE_14}
+${sharedRule14(options)}
 ${SHARED_RULE_15}
 ${SHARED_RULE_AGENT_WARNINGS}
 
-### Resources
-
-Use the \`resources\` tool for persistent notes and context files: \`action: "list"\`, \`"read"\`, \`"effective"\`, \`"write"\`, \`"promote"\`, or \`"delete"\`.
-Resources have three levels: workspace defaults inherited from Dispatch, shared organization/app overrides, and personal overrides. Use \`resources\` with \`action: "effective"\` before editing when you need to explain or inspect which level is active for a path.
-Workspace resources are user-facing by default. If you need temporary working files, write them as agent scratch (\`visibility: "agent_scratch"\`); scratch is hidden from the Workspace view by default and expires. Use \`visibility: "workspace"\` only when the user explicitly asked to save/manage that file, or for durable AGENTS.md, LEARNINGS.md, memory, skills, jobs, or custom agents.
-
+${resourcesSection}
 ### Extended Capabilities
 
-You also have tools for inline embeds, chat history search (\`chat-history\`), recurring jobs (\`manage-jobs\`), structured memory (\`save-memory\`/\`delete-memory\`), and browser automation (\`activate-browser\` in production, \`set-browser-control\` locally). Call \`get-framework-context\` with the matching key — it lists its own topics — for full instructions when needed.
+You also have tools for ${extendedCapabilitiesList}. Call \`get-framework-context\` with the matching key — it lists its own topics — for full instructions when needed.
 
 **Agent teams:** default to doing the work yourself. Delegate ONE sub-agent (\`agent-teams\` action "spawn") for self-contained heavy work; fan out to several only for genuinely independent units; never parallelize tightly-coupled work; cap fan-out around 3. Treat "background agent", "sub-agent", "parallel", "batch", "kick off", "run the rest", and "queued items" as delegation intent when the user is asking you to start or continue independent work items. After \`spawn\`, say the task started/running, not completed; use \`status\`/\`read-result\` before claiming the delegated work is done. Give each sub-agent a self-contained brief (objective, the specific context/IDs it needs, output format, boundaries) — it can't see this thread — then read all results and synthesize one integrated answer. Full details: \`get-framework-context\` key \`agent-teams\`.
-
-For generated media, prefer this app's native generation action; otherwise use \`call-agent\` with agent "assets".
-`;
+${callAgentSection}`;
 }

package/dist/server/prompts/framework-core.d.ts

@@ -5,11 +5,16 @@
  * Shared rules (8-9, 12-13) are imported from shared-rules.ts so the
  * compact variant uses the same text and the two can never drift.
  */
+import { type FrameworkToolGroup } from "../../framework-tools.js";
 import { type DatabaseToolsOption } from "../../scripts/db/tool-mode.js";
 import { type PromptExamples } from "./shared-rules.js";
 export interface FrameworkCorePromptOptions {
     databaseTools?: DatabaseToolsOption;
     extensionTools?: boolean;
+    /** Framework tool groups this app switched off. Every block below that names
+     *  a group's tool by name is gated on this — a prompt naming an absent tool
+     *  makes the model call it, fail, and often report the capability as missing. */
+    disabledFrameworkGroups?: ReadonlySet<FrameworkToolGroup>;
 }
 /**
  * Build the full FRAMEWORK_CORE prompt string.