@agent-native/core 0.146.5 → 0.146.7

package/dist/mcp-client/routes.d.ts

@@ -22,6 +22,17 @@ import type { McpConfig } from "./config.js";
 import { type McpClientManager } from "./manager.js";
 import { type RemoteMcpScope } from "./remote-store.js";
 export { formatMcpConnectError } from "./errors.js";
+/**
+ * The settings table backing remote/built-in MCP servers could not be read.
+ *
+ * Distinct from `buildMergedConfig()` returning `null`, which means the app is
+ * genuinely configured with zero MCP servers. Coercing an unreachable database
+ * into an empty settings map made every caller report "no MCP servers
+ * configured" while the real answer was "could not read the configuration".
+ */
+export declare class McpConfigUnreadableError extends Error {
+    constructor(cause: unknown);
+}
 export interface ClientServer {
     id: string;
     scope: RemoteMcpScope;

package/dist/mcp-client/routes.js

@@ -24,6 +24,7 @@ import { getSession } from "../server/auth.js";
 import { getH3App } from "../server/framework-request-handler.js";
 import { readBody } from "../server/h3-helpers.js";
 import { runWithRequestContext } from "../server/request-context.js";
+import { shouldDisableInProcessSweeps } from "../server/sweep-runtime.js";
 import { getAllSettings, getSettingsEmitter } from "../settings/store.js";
 import { areBuiltinMcpCapabilitiesSupported, BUILTIN_MCP_CAPABILITIES, getBuiltinMcpCapability, isBuiltinMcpCapabilityAvailable, listSupportedBuiltinMcpCapabilities, normalizeBuiltinMcpCapabilityIds, toBuiltinMcpServerConfig, } from "./builtin-capabilities.js";
 import { builtinMcpCapabilitiesSettingsKey, listEnabledBuiltinMcpCapabilities, setBuiltinMcpCapabilityEnabled, setEnabledBuiltinMcpCapabilities, } from "./builtin-store.js";
@@ -36,6 +37,21 @@ import { addRemoteServer, listRemoteServers, mergedConfigKey, removeRemoteServer
 import { isMcpToolAllowedForRequest } from "./visibility.js";
 import { loadWorkspaceMcpServers } from "./workspace-servers.js";
 export { formatMcpConnectError } from "./errors.js";
+/**
+ * The settings table backing remote/built-in MCP servers could not be read.
+ *
+ * Distinct from `buildMergedConfig()` returning `null`, which means the app is
+ * genuinely configured with zero MCP servers. Coercing an unreachable database
+ * into an empty settings map made every caller report "no MCP servers
+ * configured" while the real answer was "could not read the configuration".
+ */
+export class McpConfigUnreadableError extends Error {
+    constructor(cause) {
+        super(`Could not read MCP configuration from settings: ${cause?.message ?? cause}`);
+        this.name = "McpConfigUnreadableError";
+        this.cause = cause;
+    }
+}
 /** Redact obvious auth header values before sending to the client. */
 function redactHeaders(headers) {
     if (!headers)
@@ -114,7 +130,10 @@ export function builtinMergedConfigKey(scope, capability, ownerId) {
 export async function buildMergedConfig() {
     const base = loadMcpConfig() ?? autoDetectMcpConfig();
     const servers = { ...(base?.servers ?? {}) };
-    const all = await getAllSettings().catch(() => ({}));
+    const all = await getAllSettings().catch((err) => {
+        console.warn(`[mcp-client] settings read failed: ${err?.message ?? err}`);
+        throw new McpConfigUnreadableError(err);
+    });
     for (const [fullKey, value] of Object.entries(all)) {
         const userMatch = /^u:([^:]+):mcp-servers-remote$/.exec(fullKey);
         const orgMatch = /^o:([^:]+):mcp-servers-remote$/.exec(fullKey);
@@ -222,6 +241,12 @@ export function startMcpConfigRefresh(manager) {
     const intervalMs = mcpConfigRefreshIntervalMs();
     if (intervalMs <= 0 || typeof setInterval !== "function")
         return null;
+    // Billed per warm container on serverless, and the first tick always runs a
+    // full settings scan because `settingsDirty` starts true. Request-driven
+    // reconfigures (`waitUntilReady` on the MCP routes, `refreshGlobalMcpManager`)
+    // already cover config changes there, and a fresh container re-reads config.
+    if (shouldDisableInProcessSweeps())
+        return null;
     let currentSignature = sortedConfigSignature(manager.getConfig());
     let refreshing = false;
     // `buildMergedConfig` reads the entire settings table just to diff a

package/dist/notifications/routes.d.ts

@@ -28,6 +28,6 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/observability/routes.d.ts

@@ -41,27 +41,27 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
+    error?: undefined;
+    ok?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
+} | {
     error?: undefined;
     ok?: undefined;
-} | {
     summary?: undefined;
     spans?: undefined;
     id: string;
-    error?: undefined;
-    ok?: undefined;
 } | {
+    ok?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
     error: any;
-    ok?: undefined;
 } | {
+    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
     ok: boolean;
-    error?: undefined;
 }>>;

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,8 +75,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    id?: undefined;
     deleted?: undefined;
+    id?: undefined;
     providers: {
         id: string;
         label: string;
@@ -93,10 +93,10 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     label?: undefined;
     message?: undefined;
 } | {
-    id?: undefined;
     deleted?: undefined;
-    providers?: undefined;
     count?: undefined;
+    id?: undefined;
+    providers?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
     registered?: undefined;
@@ -104,8 +104,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     message?: undefined;
 } | {
     deleted?: undefined;
-    providers?: undefined;
     count?: undefined;
+    providers?: undefined;
     provider?: undefined;
     found: boolean;
     id: string;
@@ -113,8 +113,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     label?: undefined;
     message?: undefined;
 } | {
-    providers?: undefined;
     count?: undefined;
+    providers?: undefined;
     provider?: undefined;
     found?: undefined;
     deleted: boolean;
@@ -124,8 +124,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     message?: undefined;
 } | {
     deleted?: undefined;
-    providers?: undefined;
     count?: undefined;
+    providers?: undefined;
     provider?: undefined;
     found?: undefined;
     registered: boolean;

package/dist/provider-api/actions/provider-api.d.ts

@@ -311,10 +311,10 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
+        message?: undefined;
         id?: undefined;
         provider?: undefined;
         deleted?: undefined;
-        message?: undefined;
         providers: {
             id: string;
             label: string;
@@ -329,29 +329,29 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         registered?: undefined;
         label?: undefined;
     } | {
-        id?: undefined;
+        message?: undefined;
         count?: undefined;
+        id?: undefined;
         deleted?: undefined;
-        message?: undefined;
         providers?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
         registered?: undefined;
         label?: undefined;
     } | {
+        message?: undefined;
         count?: undefined;
         provider?: undefined;
         deleted?: undefined;
-        message?: undefined;
         providers?: undefined;
         found: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
     } | {
+        message?: undefined;
         count?: undefined;
         provider?: undefined;
-        message?: undefined;
         providers?: undefined;
         found?: undefined;
         deleted: boolean;

package/dist/provider-api/corpus-jobs.d.ts

@@ -73,6 +73,7 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     offset?: unknown;
     limit?: unknown;
 }, {
+    deleted?: undefined;
     jobs: {
         id: string;
         name: string;
@@ -83,7 +84,6 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
         updatedAt: string;
     }[];
     total: number;
-    deleted?: undefined;
     jobId?: undefined;
 } | {
     jobs?: undefined;
@@ -91,9 +91,9 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     deleted: boolean;
     jobId: string;
 } | {
+    deleted?: undefined;
     jobs?: undefined;
     total?: undefined;
-    deleted?: undefined;
     jobId?: undefined;
     hits: Record<string, unknown>[];
     offset: number;

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/secrets/routes.d.ts

@@ -34,37 +34,37 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    ok?: undefined;
     status?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     status: string;
+    error?: undefined;
 } | {
-    ok?: undefined;
     error: string;
     removed?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
  * or the current stored value without changing anything.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
     note?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     note?: undefined;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     note: string;
+    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,11 +95,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;

package/dist/server/agent-chat/mcp-glue.js

@@ -1,5 +1,5 @@
 import { defineEventHandler, getMethod, setResponseHeader, setResponseStatus, } from "h3";
-import { buildMergedConfig, getHubStatus, } from "../../mcp-client/index.js";
+import { buildMergedConfig, getHubStatus, McpConfigUnreadableError, } from "../../mcp-client/index.js";
 import { getH3App } from "../framework-request-handler.js";
 // ---------------------------------------------------------------------------
 // MCP client glue — a shared manager reference + a /_agent-native/mcp/status
@@ -18,8 +18,17 @@ export async function refreshGlobalMcpManager() {
     const manager = getGlobalMcpManager();
     if (!manager)
         return false;
-    await manager.reconfigure(await buildMergedConfig());
-    return true;
+    try {
+        await manager.reconfigure(await buildMergedConfig());
+        return true;
+    }
+    catch (err) {
+        if (err instanceof McpConfigUnreadableError) {
+            console.warn(`[mcp-client] global refresh skipped: ${err.message}`);
+            return false;
+        }
+        throw err;
+    }
 }
 export function mountMcpHubStatusRoute(nitroApp) {
     const mountedApps = (globalThis.__agentNativeMcpHubStatusMountedApps ??= new WeakSet());

package/dist/server/agent-chat-plugin.js

@@ -24,11 +24,11 @@ import { runChatThreadDataMigrations } from "../chat-threads/migrations.js";
 import { adoptThreadScopeIfUnscoped, createThread, forkThread, getThread, registerChatThreadsShareable, resolveRunThreadScope, resolveThreadAccess, listThreads, searchThreads, renameThread, createThreadShareLink, getThreadByShareToken, getThreadShareState, revokeThreadShareLink, setThreadArchived, setThreadPinned, setThreadScope, updateThreadData, withThreadDataLock, deleteThread, setThreadQueuedMessages, setThreadSourceIfMissing, } from "../chat-threads/store.js";
 import { isCheckpointRestorePath } from "../checkpoints/route-match.js";
 import { createDbAdminAgentTools } from "../db-admin/agent-tools.js";
-import { isTransientDatabaseError } from "../db/client.js";
+import { isProductionServerlessFunctionRuntime, isTransientDatabaseError, } from "../db/client.js";
 import { filterFrameworkToolGroups, resolveFrameworkTools, } from "../framework-tools.js";
 import { verifyInternalToken, extractBearerToken, } from "../integrations/internal-token.js";
 import { RECURRING_JOBS_SWEEP_PATH, RECURRING_JOBS_SWEEP_TOKEN_SUBJECT, } from "../jobs/scheduler-dispatch.js";
-import { McpClientManager, loadMcpConfig, autoDetectMcpConfig, mcpToolsToActionEntries, syncMcpActionEntries, mountMcpServersRoutes, mountMcpHubRoutes, buildMergedConfig, startMcpConfigRefresh, getHubStatus, isHubServeEnabled, } from "../mcp-client/index.js";
+import { McpClientManager, mcpToolsToActionEntries, syncMcpActionEntries, mountMcpServersRoutes, mountMcpHubRoutes, buildMergedConfig, startMcpConfigRefresh, getHubStatus, isHubServeEnabled, } from "../mcp-client/index.js";
 import { setProgressPreListHook } from "../progress/store.js";
 import { getSkillNameFromPath } from "../resources/metadata.js";
 import { resourceList, resourceListAccessible, resourceGet, ensurePersonalDefaults, SHARED_OWNER, WORKSPACE_OWNER, } from "../resources/store.js";
@@ -309,36 +309,43 @@ export function createAgentChatPlugin(options) {
             const mcpActionEntries = {};
             let mcpInitializationPromise = null;
             const initializeMcpManager = async () => {
-                let mcpConfig = await buildMergedConfig().catch((err) => {
-                    console.warn(`[mcp-client] buildMergedConfig failed: ${err?.message ?? err}`);
-                    return null;
-                });
-                if (!mcpConfig) {
-                    mcpConfig = loadMcpConfig() ?? autoDetectMcpConfig();
-                    if (mcpConfig?.source) {
-                        console.log(`[mcp-client] loaded config from ${mcpConfig.source} (${Object.keys(mcpConfig.servers).length} server(s))`);
-                    }
-                    else if (process.env.DEBUG) {
-                        console.log("[mcp-client] no configured MCP servers — skipping MCP tools");
-                    }
-                }
-                else if (mcpConfig.source) {
+                const mcpConfig = await buildMergedConfig();
+                if (mcpConfig?.source) {
                     console.log(`[mcp-client] merged config (${Object.keys(mcpConfig.servers).length} server(s), source: ${mcpConfig.source})`);
                 }
-                try {
-                    await mcpManager.reconfigure(mcpConfig);
+                else if (process.env.DEBUG) {
+                    console.log("[mcp-client] no configured MCP servers — skipping MCP tools");
                 }
-                catch (err) {
-                    console.warn(`[mcp-client] initialization failed: ${err?.message ?? err}. Continuing without MCP tools.`);
-                }
-                finally {
-                    startMcpConfigRefresh(mcpManager);
+                await mcpManager.reconfigure(mcpConfig);
+                startMcpConfigRefresh(mcpManager);
+            };
+            /**
+             * Start MCP initialization at most once, and return the run in flight.
+             *
+             * On a serverless function nothing kicks this off at boot (see the
+             * `isProductionServerlessFunctionRuntime` gate below), so every surface
+             * that actually consumes MCP tools must await this or the manager stays
+             * empty for the life of the container.
+             */
+            const ensureMcpInitialized = () => {
+                if (!mcpInitializationPromise) {
+                    mcpInitializationPromise = initializeMcpManager().catch((err) => {
+                        // Do not cache a settings outage as a successful empty manager;
+                        // the next MCP-consuming request must retry the configuration read.
+                        mcpInitializationPromise = null;
+                        throw err;
+                    });
                 }
+                return mcpInitializationPromise;
             };
-            const getJobMcpActionEntries = (job) => {
+            const getJobMcpActionEntries = async (job) => {
                 const requested = job?.meta.mcpTools ?? [];
                 if (requested.length === 0)
                     return {};
+                // Background action suppliers may be async so event-triggered and
+                // scheduled runs can await lazy MCP hydration on serverless cold
+                // starts. Runs without requested MCP tools still skip this work.
+                await ensureMcpInitialized();
                 const entries = mcpToolsToActionEntries(mcpManager, {
                     toolNames: requested,
                 });
@@ -354,7 +361,7 @@ export function createAgentChatPlugin(options) {
             mountMcpServersRoutes(nitroApp, mcpManager, {
                 // Serialize an unusually early settings mutation behind the initial
                 // config snapshot so stale startup data cannot overwrite the write.
-                waitUntilReady: () => mcpInitializationPromise ?? Promise.resolve(),
+                waitUntilReady: ensureMcpInitialized,
             });
             // Hub-serve: expose org-scope servers to other agent-native apps in the
             // workspace when `AGENT_NATIVE_MCP_HUB_TOKEN` is set (dispatch, by
@@ -825,25 +832,28 @@ export function createAgentChatPlugin(options) {
             // background surface. Interactive-only tools stay out of it, while
             // shared capabilities such as call-agent and core-send-email cannot
             // drift independently between the two background entry points.
-            const getBackgroundActionEntries = (automation) => ({
-                ...templateScripts,
-                ...resourceScripts,
-                ...docsScripts,
-                ...(lazyContext ? frameworkContextTool : {}),
-                ...urlTools,
-                ...chatScripts,
-                ...callAgentScript,
-                ...jobTools,
-                ...automationTools,
-                ...notificationTools,
-                ...progressTools,
-                ...fetchTool,
-                ...webSearchTool,
-                ...toolActions,
-                ...backgroundCoreEmailTools,
-                ...coreAttachmentTools,
-                ...getJobMcpActionEntries(automation),
-            });
+            const getBackgroundActionEntries = async (automation) => {
+                const mcpActions = await getJobMcpActionEntries(automation);
+                return {
+                    ...templateScripts,
+                    ...resourceScripts,
+                    ...docsScripts,
+                    ...(lazyContext ? frameworkContextTool : {}),
+                    ...urlTools,
+                    ...chatScripts,
+                    ...callAgentScript,
+                    ...jobTools,
+                    ...automationTools,
+                    ...notificationTools,
+                    ...progressTools,
+                    ...fetchTool,
+                    ...webSearchTool,
+                    ...toolActions,
+                    ...backgroundCoreEmailTools,
+                    ...coreAttachmentTools,
+                    ...mcpActions,
+                };
+            };
             // -----------------------------------------------------------------------
             // Production code-execution mode resolution.
             //
@@ -4514,6 +4524,10 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
             // the background worker), so both go through identical context + handler
             // selection.
             const invokeAgentChatHandler = async (event) => {
+                // Chat is the main MCP consumer, and on serverless nothing hydrated the
+                // manager at boot. Awaiting here trades first-chat latency for tools
+                // that are actually present instead of a silently MCP-less run.
+                await ensureMcpInitialized();
                 // Resolve per-request auth context.
                 const ownerContext = await resolveOwnerContext(event);
                 return runWithAgentRunContext({
@@ -4851,6 +4865,10 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                         };
                     }
                     try {
+                        // Jobs may request MCP tools, and `getActions` is synchronous —
+                        // hydrate before the sweep so a serverless container that never
+                        // eagerly initialized still resolves them.
+                        await ensureMcpInitialized();
                         await processRecurringJobs(schedulerDeps);
                         return { ok: true };
                     }
@@ -4913,10 +4931,17 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                     setInterval(() => void sweep(), 30_000);
                 })();
             }
-            mcpInitializationPromise = initializeMcpManager().catch((err) => {
-                console.warn(`[mcp-client] deferred initialization failed: ${err?.message ?? err}`);
-            });
-            void mcpInitializationPromise;
+            // Long-lived runtimes hydrate MCP once at boot. Serverless functions must
+            // not: nothing awaits this, so a settings scan plus third-party MCP
+            // handshakes run on EVERY cold start of every app — including requests
+            // that never touch MCP — and outlive the response on a runtime that
+            // freezes after responding. There, `ensureMcpInitialized()` is driven by
+            // the surfaces that consume MCP tools instead.
+            if (!isProductionServerlessFunctionRuntime()) {
+                void ensureMcpInitialized().catch((err) => {
+                    console.warn(`[mcp-client] eager initialization failed: ${err?.message ?? err}`);
+                });
+            }
             // ─── Agent Teams orphan sweep ─────────────────────────────────────
             // Re-fires stuck/queued dispatches when the browser is closed and the
             // RunsTray's per-user reconciliation never triggers. Runs every 2 minutes

package/dist/server/agent-engine-api-key-route.d.ts

@@ -27,10 +27,10 @@ export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scop
 export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: any;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
+    error?: undefined;
 }>>;
 export {};

package/dist/server/auth.js

@@ -1317,6 +1317,13 @@ function createAuthGuardFn() {
         if (p === "/_agent-native/integrations/process-a2a-continuation") {
             return;
         }
+        // Scheduled recurring-job sweeps are self-fired by the platform scheduler
+        // through the durable background function and authenticate with the same
+        // short-lived HMAC token as the other internal processors. They do not
+        // carry a browser session, so let the route perform its own token check.
+        if (p === "/_agent-native/jobs/_process-sweep") {
+            return;
+        }
         // Agent Teams durable sub-agent processor. Self-fired by `spawnTask` to run
         // a queued sub-agent in a fresh function invocation; authenticity is
         // verified by the same HMAC internal-token scheme plus an atomic SQL claim,