@agent-native/core 0.145.0 → 0.145.2

package/dist/mcp/screen-memory-stdio.d.ts

@@ -137,13 +137,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
-            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -159,7 +159,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
-            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -175,6 +174,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -190,7 +190,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
-            count?: undefined;
             minutes: {
                 type: string;
                 description: string;
@@ -200,6 +199,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -216,7 +216,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
-            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -235,6 +234,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             };
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -250,7 +250,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
-            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
@@ -264,6 +263,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
                 description: string;
             };
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             includeMicrophone?: undefined;
@@ -314,13 +314,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
-            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt: {
                 type: string;
                 description: string;
@@ -349,13 +349,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
-            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;

package/dist/notifications/routes.d.ts

@@ -13,13 +13,13 @@
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
     count: number;
     updated?: undefined;
-    error?: undefined;
     ok?: undefined;
+    error?: undefined;
 } | {
     count?: undefined;
     updated: number;
-    error?: undefined;
     ok?: undefined;
+    error?: undefined;
 } | {
     count?: undefined;
     updated?: undefined;
@@ -28,6 +28,6 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/observability/routes.d.ts

@@ -41,27 +41,27 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
-    error?: undefined;
-    ok?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
-} | {
     error?: undefined;
     ok?: undefined;
+} | {
     summary?: undefined;
     spans?: undefined;
     id: string;
-} | {
+    error?: undefined;
     ok?: undefined;
+} | {
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
     error: any;
+    ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
+    error?: undefined;
     ok: boolean;
 }>>;

package/dist/org/accept-pending.js

@@ -1,6 +1,6 @@
 import { getDbExec } from "../db/client.js";
 import { setActiveOrgId } from "./active-org.js";
-import { invalidateRequestMemberOrgIds } from "./request-org-cache.js";
+import { invalidateMemberOrgCaches } from "./request-org-cache.js";
 const nanoid = () => globalThis.crypto?.randomUUID?.().replace(/-/g, "") ??
     Math.random().toString(36).slice(2) + Date.now().toString(36);
 /**
@@ -63,7 +63,7 @@ export async function acceptPendingInvitationsForEmail(rawEmail) {
               ON CONFLICT (org_id, LOWER(email)) DO NOTHING`,
                 args: [nanoid(), inv.orgId, email, role, Date.now()],
             });
-            invalidateRequestMemberOrgIds();
+            invalidateMemberOrgCaches();
         }
         await db.execute({
             sql: `UPDATE org_invitations SET status = 'accepted' WHERE id = ?`,

package/dist/org/auth-policy.js

@@ -1,4 +1,5 @@
 import { getDbExec } from "../db/client.js";
+import { invalidateSessionEmailCache } from "../server/session-email-cache.js";
 export const GOOGLE_AUTH_REQUIRED_MESSAGE = "This organization requires Google sign-in.";
 function normalizeEmail(email) {
     return email.trim().toLowerCase();
@@ -152,6 +153,9 @@ export async function setRequiredAuthProvider(orgId, provider) {
         if (!isMissingLegacySessionTable(error))
             throw error;
     }
+    // Revoking a whole org's sessions must land immediately, not after the
+    // resolution cache's TTL.
+    invalidateSessionEmailCache();
     return {
         revokedBetterAuthSessions: Number(betterAuthResult.rowsAffected ?? 0),
         revokedLegacySessions: Number(legacyResult.rowsAffected ?? 0),

package/dist/org/auto-join-domain.d.ts

@@ -4,6 +4,15 @@ export interface AutoJoinDomainResult {
     }>;
     activeOrgId: string | null;
 }
+/**
+ * Call after any write that could make a domain start matching an org —
+ * `organizations.allowed_domain` updates and org creation. Clears every domain
+ * rather than one: the caller knows which org changed, not which domains a
+ * stale negative was recorded for.
+ */
+export declare function invalidateDomainMatchCache(): void;
+/** Test seam — the cache is module state, so suites must be able to clear it. */
+export declare function __resetDomainMatchCacheForTests(): void;
 export interface AutoJoinDomainOptions {
     /**
      * The signup hook should not clobber an org selected by an invite flow, but

package/dist/org/auto-join-domain.js

@@ -1,9 +1,46 @@
 import { getDbExec } from "../db/client.js";
 import { getUserSetting } from "../settings/user-settings.js";
+import { createTtlCache } from "../shared/ttl-cache.js";
 import { setActiveOrgId } from "./active-org.js";
-import { invalidateRequestMemberOrgIds } from "./request-org-cache.js";
+import { isFreeEmailProvider } from "./free-email-providers.js";
+import { invalidateMemberOrgCaches } from "./request-org-cache.js";
 const nanoid = () => globalThis.crypto?.randomUUID?.().replace(/-/g, "") ??
     Math.random().toString(36).slice(2) + Date.now().toString(36);
+/**
+ * Negative cache for "no org has this email domain as its `allowed_domain`".
+ *
+ * `resolveOrgContext` calls this function on EVERY authenticated request for
+ * any account that holds no membership in a domain-matched org — which is every
+ * solo user and every user in a team org that never configured domain matching.
+ * The probe finds nothing, changes no state, and runs again on the next
+ * request: production showed 318k of these, ~64% of all authenticated requests,
+ * with no fixed point because not-joining an org is not a state the user can
+ * leave.
+ *
+ * Keyed on the DOMAIN, not the email, so one entry covers every account at that
+ * domain. Only a SUCCESSFUL zero-row read is cached — a failed probe stays on
+ * the uncached path so an unreadable `organizations` table never masquerades as
+ * "no matching org". Invalidated whenever `allowed_domain` is written, so
+ * correctness does not rest on the TTL.
+ */
+const NO_DOMAIN_MATCH_TTL_MS = 60_000;
+const noDomainMatchCache = createTtlCache({
+    ttlMs: NO_DOMAIN_MATCH_TTL_MS,
+    maxEntries: 512,
+});
+/**
+ * Call after any write that could make a domain start matching an org —
+ * `organizations.allowed_domain` updates and org creation. Clears every domain
+ * rather than one: the caller knows which org changed, not which domains a
+ * stale negative was recorded for.
+ */
+export function invalidateDomainMatchCache() {
+    noDomainMatchCache.clear();
+}
+/** Test seam — the cache is module state, so suites must be able to clear it. */
+export function __resetDomainMatchCacheForTests() {
+    noDomainMatchCache.clear();
+}
 /**
  * Auto-join a newly-signed-up user into every org whose `allowed_domain`
  * matches their email domain.
@@ -31,6 +68,14 @@ export async function autoJoinDomainMatchingOrgs(rawEmail, options = {}) {
     const domain = email.split("@")[1]?.toLowerCase();
     if (!domain)
         return { joined: [], activeOrgId: null };
+    // `org/handlers.ts` REFUSES to set `allowed_domain` to a free provider, so no
+    // org can ever match `gmail.com` — every consumer-email account was probing
+    // for a row that is structurally impossible to exist.
+    if (isFreeEmailProvider(domain))
+        return { joined: [], activeOrgId: null };
+    if (noDomainMatchCache.get(domain)) {
+        return { joined: [], activeOrgId: null };
+    }
     const db = getDbExec();
     let matches = [];
     try {
@@ -53,11 +98,15 @@ export async function autoJoinDomainMatchingOrgs(rawEmail, options = {}) {
     }
     catch {
         // Template without org tables (or `allowed_domain` column not yet
-        // migrated). Not fatal — return empty.
+        // migrated). Not fatal — return empty. Deliberately NOT cached: this branch
+        // cannot tell "no org matches" from "the table was unreadable", and caching
+        // it would let one blip answer every later request for a minute.
         return { joined: [], activeOrgId: null };
     }
-    if (matches.length === 0)
+    if (matches.length === 0) {
+        noDomainMatchCache.set(domain, true);
         return { joined: [], activeOrgId: null };
+    }
     const joined = [];
     for (const m of matches) {
         try {
@@ -66,7 +115,7 @@ export async function autoJoinDomainMatchingOrgs(rawEmail, options = {}) {
                 args: [nanoid(), m.orgId, email, Date.now()],
             });
             joined.push({ orgId: m.orgId });
-            invalidateRequestMemberOrgIds();
+            invalidateMemberOrgCaches();
         }
         catch {
             // Race with a parallel join (e.g. user accepted an invite to the

package/dist/org/context.js

@@ -5,7 +5,8 @@ import { getSetting } from "../settings/store.js";
 import { getUserSetting } from "../settings/user-settings.js";
 import { setActiveOrgId } from "./active-org.js";
 import { autoJoinDomainMatchingOrgs } from "./auto-join-domain.js";
-import { invalidateRequestMemberOrgIds, requestMemberOrgIds, } from "./request-org-cache.js";
+import { isFreeEmailProvider } from "./free-email-providers.js";
+import { cachedMemberships, invalidateMemberOrgCaches, requestMemberOrgIds, } from "./request-org-cache.js";
 const EMPTY_CONTEXT = {
     email: "",
     orgId: null,
@@ -197,8 +198,13 @@ async function resolveOrgContextUncached(event) {
     // signal. Recognizing the personal workspace by its *name* instead breaks the
     // moment the provider display name or the workspace name changes, which
     // strands an existing user in Personal with no way into their company org.
+    // `isFreeEmailProvider` short-circuits before the round trip rather than
+    // relying on the negative cache inside `autoJoinDomainMatchingOrgs`: a
+    // consumer-email domain can NEVER match (see `org/handlers.ts`, which refuses
+    // to set `allowed_domain` to a free provider), so it needs no TTL at all.
     const shouldTryDomainAutoJoin = !explicitPersonal &&
         emailDomain !== null &&
+        !isFreeEmailProvider(emailDomain) &&
         !memberships.some((m) => m.allowedDomain?.toLowerCase() === emailDomain);
     if (!explicitPersonal &&
         activeOrgSetting?.orgId &&
@@ -307,6 +313,9 @@ async function resolveOrgContextUncached(event) {
  */
 const MEMBERSHIP_FALLBACK_ORDER_BY = `ORDER BY joined_at ASC, org_id ASC`;
 async function loadMemberships(email) {
+    return cachedMemberships(email, () => loadMembershipsUncached(email));
+}
+async function loadMembershipsUncached(email) {
     const rows = await queryOrgMembers({
         sql: `SELECT m.org_id AS "orgId", m.role AS role, o.name AS "orgName",
                  o.allowed_domain AS "allowedDomain"
@@ -403,7 +412,7 @@ export async function createOrganization(name, email, role = "owner") {
         sql: `INSERT INTO org_members (id, org_id, email, role, joined_at) VALUES (?, ?, ?, ?, ?)`,
         args: [nanoid(), id, email, role, createdAt],
     });
-    invalidateRequestMemberOrgIds();
+    invalidateMemberOrgCaches();
     await warnOnAdditionalOrganization(exec, email, id, trimmedName);
     await setActiveOrgId(email, id, `created organization "${trimmedName}"`);
     return { id, name: trimmedName, role, a2aSecret, createdAt };
@@ -558,7 +567,7 @@ async function tryCreateDefaultOrg(exec, email, session) {
             sql: `INSERT INTO org_members (id, org_id, email, role, joined_at) VALUES (?, ?, ?, ?, ?)`,
             args: [nanoid(), orgId, email, "owner", now],
         });
-        invalidateRequestMemberOrgIds();
+        invalidateMemberOrgCaches();
         await setActiveOrgId(email, orgId, "auto-created default organization");
         return { email, orgId, orgName, role: "owner" };
     }

package/dist/org/handlers.js

@@ -37,9 +37,10 @@ import { sendEmail, isEmailConfigured } from "../server/email.js";
 import { readBody } from "../server/h3-helpers.js";
 import { setActiveOrgId } from "./active-org.js";
 import { setRequiredAuthProvider } from "./auth-policy.js";
+import { invalidateDomainMatchCache } from "./auto-join-domain.js";
 import { getOrgContext, createOrganization } from "./context.js";
 import { isFreeEmailProvider } from "./free-email-providers.js";
-import { invalidateRequestMemberOrgIds } from "./request-org-cache.js";
+import { invalidateMemberOrgCaches } from "./request-org-cache.js";
 import { parseWorkspaceUrl } from "./workspace-url.js";
 function getInviteAppUrl(event) {
     return getAppProductionUrl(event);
@@ -426,7 +427,7 @@ export const acceptInvitationHandler = defineEventHandler(async (event) => {
         sql: `INSERT INTO org_members (id, org_id, email, role, joined_at) VALUES (?, ?, ?, ?, ?)`,
         args: [nanoid(), invOrgId, email, inviteRole, Date.now()],
     });
-    invalidateRequestMemberOrgIds();
+    invalidateMemberOrgCaches();
     await e.execute({
         sql: `UPDATE org_invitations SET status = 'accepted' WHERE id = ?`,
         args: [invitationId],
@@ -487,7 +488,7 @@ export const removeMemberHandler = defineEventHandler(async (event) => {
         sql: `DELETE FROM org_members WHERE org_id = ? AND LOWER(email) = ?`,
         args: [ctx.orgId, memberEmailLower],
     });
-    invalidateRequestMemberOrgIds();
+    invalidateMemberOrgCaches();
     return { success: true };
 });
 /**
@@ -555,6 +556,7 @@ export const changeMemberRoleHandler = defineEventHandler(async (event) => {
         sql: `UPDATE org_members SET role = ? WHERE org_id = ? AND LOWER(email) = ?`,
         args: [role, ctx.orgId, memberEmailLower],
     });
+    invalidateMemberOrgCaches();
     return { email: memberEmailLower, role };
 });
 /** PATCH /_agent-native/org — rename the current organization (owner/admin only) */
@@ -582,6 +584,9 @@ export const updateOrgHandler = defineEventHandler(async (event) => {
         sql: `UPDATE organizations SET name = ? WHERE id = ?`,
         args: [name, ctx.orgId],
     });
+    // `orgName` is joined into the cached membership rows, so a rename that skips
+    // this leaves every member's org context showing the old name for the TTL.
+    invalidateMemberOrgCaches();
     return { orgId: ctx.orgId, name };
 });
 /**
@@ -661,7 +666,7 @@ export const deleteOrgHandler = defineEventHandler(async (event) => {
             message: "Organization deletion requires atomic database support",
         });
     }
-    invalidateRequestMemberOrgIds();
+    invalidateMemberOrgCaches();
     const nextRes = await e.execute({
         sql: `SELECT org_id AS "orgId" FROM org_members WHERE LOWER(email) = ? LIMIT 1`,
         args: [ctx.email.toLowerCase()],
@@ -744,7 +749,7 @@ export const joinByDomainHandler = defineEventHandler(async (event) => {
         sql: `INSERT INTO org_members (id, org_id, email, role, joined_at) VALUES (?, ?, ?, 'member', ?)`,
         args: [nanoid(), orgId, email, Date.now()],
     });
-    invalidateRequestMemberOrgIds();
+    invalidateMemberOrgCaches();
     await setActiveOrgId(email, orgId, "joined domain-matched organization");
     return {
         orgId,
@@ -813,6 +818,13 @@ export const setDomainHandler = defineEventHandler(async (event) => {
         sql: `UPDATE organizations SET allowed_domain = ? WHERE id = ?`,
         args: [raw, ctx.orgId],
     });
+    // A domain that previously matched nothing now matches this org. Without this
+    // the negative cache keeps every account at that domain out of it for the
+    // rest of the TTL, right after an owner deliberately turned domain-join on.
+    invalidateDomainMatchCache();
+    // `allowedDomain` is joined into the cached membership rows too, and existing
+    // members read it to decide whether a domain auto-join is still needed.
+    invalidateMemberOrgCaches();
     return { domain: raw };
 });
 /**

package/dist/org/request-org-cache.d.ts

@@ -6,10 +6,32 @@
  */
 export declare function requestMemberOrgIds(email: string, load: () => Promise<string[] | null>): Promise<string[] | null>;
 /**
- * Drop this request's memoized memberships after a write to `org_members`.
+ * Read `email`'s memberships through the process cache, falling back to `load`.
+ *
+ * `load` returning `null`/empty-on-failure is the caller's contract to signal
+ * "unreadable"; pass `cacheable: false` for such a result and it is not stored.
+ */
+export declare function cachedMemberships<T>(email: string, load: () => Promise<T[] | null>): Promise<T[] | null>;
+/**
+ * Drop the memoized memberships after a write to `org_members`, in BOTH the
+ * per-request memo and the cross-request cache.
+ *
  * Clears every email rather than one: deleting an organization or removing a
  * member changes the answer for accounts other than the one being written.
  * Requests already in flight elsewhere keep their own snapshot for the rest of
  * their (short) lifetime, the same tradeoff the settings cache documents.
+ *
+ * Every membership write must route through here. A caller that clears only the
+ * request memo leaves the process cache serving the pre-write answer for the
+ * rest of the TTL — the user joins an org and the app keeps insisting they
+ * haven't.
+ *
+ * "Membership write" is wider than `INSERT`/`DELETE org_members`: the cached
+ * rows are a JOIN, so `org_members.role` and the `organizations.name` /
+ * `organizations.allowed_domain` columns it selects are cached too. Demoting an
+ * admin, renaming an org, or turning domain-join on without calling this keeps
+ * the pre-write answer authorizing and rendering requests until the TTL lapses.
  */
-export declare function invalidateRequestMemberOrgIds(): void;
+export declare function invalidateMemberOrgCaches(): void;
+/** Test seam — the process cache is module state, so suites must clear it. */
+export declare function __resetProcessMemberOrgCacheForTests(): void;

package/dist/org/request-org-cache.js

@@ -1,4 +1,5 @@
 import { getRequestContext } from "../server/request-context.js";
+import { createTtlCache } from "../shared/ttl-cache.js";
 /**
  * Per-request memo of the `org_members` read behind `resolveOrgIdForEmail`,
  * keyed on the active AsyncLocalStorage `RequestContext` (WeakMap → freed with
@@ -50,12 +51,66 @@ export function requestMemberOrgIds(email, load) {
     return pending;
 }
 /**
- * Drop this request's memoized memberships after a write to `org_members`.
+ * Cross-request cache for the full membership rows behind `getOrgContext`.
+ *
+ * The per-request memo above only collapses repeated reads inside ONE request.
+ * Every authenticated request still paid its own `org_members` round trip, and
+ * production showed 494,785 of them — one per request, 1:1 with the session
+ * lookup, for memberships that change on the order of days.
+ *
+ * Only a SUCCESSFUL read is stored. `loadMemberships` returns `null` for an
+ * unreadable `org_members` (no such table on a template that skips the org
+ * module, a role without SELECT); caching that would turn a permissions blip
+ * into a minute of silently org-less requests, which drops org scope and hides
+ * every org-scoped credential behind a permanent-sounding "not configured".
+ */
+const MEMBER_ORGS_TTL_MS = 15_000;
+const processMemberships = createTtlCache({
+    ttlMs: MEMBER_ORGS_TTL_MS,
+    maxEntries: 2_048,
+});
+/**
+ * Read `email`'s memberships through the process cache, falling back to `load`.
+ *
+ * `load` returning `null`/empty-on-failure is the caller's contract to signal
+ * "unreadable"; pass `cacheable: false` for such a result and it is not stored.
+ */
+export async function cachedMemberships(email, load) {
+    const key = email.trim().toLowerCase();
+    const hit = processMemberships.get(key);
+    if (hit)
+        return hit;
+    const rows = await load();
+    // `null` is "unreadable", never "no memberships" — see the doc comment above.
+    if (rows !== null)
+        processMemberships.set(key, rows);
+    return rows;
+}
+/**
+ * Drop the memoized memberships after a write to `org_members`, in BOTH the
+ * per-request memo and the cross-request cache.
+ *
  * Clears every email rather than one: deleting an organization or removing a
  * member changes the answer for accounts other than the one being written.
  * Requests already in flight elsewhere keep their own snapshot for the rest of
  * their (short) lifetime, the same tradeoff the settings cache documents.
+ *
+ * Every membership write must route through here. A caller that clears only the
+ * request memo leaves the process cache serving the pre-write answer for the
+ * rest of the TTL — the user joins an org and the app keeps insisting they
+ * haven't.
+ *
+ * "Membership write" is wider than `INSERT`/`DELETE org_members`: the cached
+ * rows are a JOIN, so `org_members.role` and the `organizations.name` /
+ * `organizations.allowed_domain` columns it selects are cached too. Demoting an
+ * admin, renaming an org, or turning domain-join on without calling this keeps
+ * the pre-write answer authorizing and rendering requests until the TTL lapses.
  */
-export function invalidateRequestMemberOrgIds() {
+export function invalidateMemberOrgCaches() {
     cacheForRequest(false)?.clear();
+    processMemberships.clear();
+}
+/** Test seam — the process cache is module state, so suites must clear it. */
+export function __resetProcessMemberOrgCacheForTests() {
+    processMemberships.clear();
 }

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,6 +75,7 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
+    message?: undefined;
     deleted?: undefined;
     found?: undefined;
     providers: {
@@ -91,8 +92,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     registered?: undefined;
     id?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
+    message?: undefined;
     deleted?: undefined;
     providers?: undefined;
     count?: undefined;
@@ -101,8 +102,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     registered?: undefined;
     id?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
+    message?: undefined;
     deleted?: undefined;
     providers?: undefined;
     count?: undefined;
@@ -111,8 +112,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     id: string;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
+    message?: undefined;
     found?: undefined;
     providers?: undefined;
     count?: undefined;
@@ -121,7 +122,6 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     id: string;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
     deleted?: undefined;
     found?: undefined;

package/dist/provider-api/actions/provider-api.d.ts

@@ -311,9 +311,9 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
+        deleted?: undefined;
         id?: undefined;
         provider?: undefined;
-        deleted?: undefined;
         found?: undefined;
         providers: {
             id: string;
@@ -329,9 +329,9 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         label?: undefined;
         message?: undefined;
     } | {
-        id?: undefined;
         deleted?: undefined;
         count?: undefined;
+        id?: undefined;
         providers?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
@@ -339,9 +339,9 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         label?: undefined;
         message?: undefined;
     } | {
-        provider?: undefined;
         deleted?: undefined;
         count?: undefined;
+        provider?: undefined;
         providers?: undefined;
         found: boolean;
         id: string;
@@ -349,9 +349,9 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         label?: undefined;
         message?: undefined;
     } | {
+        count?: undefined;
         provider?: undefined;
         found?: undefined;
-        count?: undefined;
         providers?: undefined;
         deleted: boolean;
         id: string;
@@ -359,10 +359,10 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         label?: undefined;
         message?: undefined;
     } | {
-        provider?: undefined;
         deleted?: undefined;
-        found?: undefined;
         count?: undefined;
+        provider?: undefined;
+        found?: undefined;
         providers?: undefined;
         registered: boolean;
         id: string;

package/dist/resources/store.d.ts

@@ -1,5 +1,5 @@
 import { isLocalWorkspaceResourceId } from "../local-artifacts/index.js";
-import type { StoreWriteOptions } from "../settings/store.js";
+import { type StoreWriteOptions } from "../settings/store.js";
 export declare const SHARED_OWNER = "__shared__";
 export declare const WORKSPACE_OWNER = "__workspace__";
 /**