@agent-native/core 0.154.5 → 0.157.0

package/dist/localization/core-messages.js

@@ -0,0 +1,124 @@
+import englishMessages from "./core-messages/en-US.js";
+export const englishAgentChatMessages = englishMessages;
+const legacyAgentChatAliases = [
+    ["agentPanel.addOwnKeys", "composer.addOwnKeys"],
+    ["agentPanel.builderModelCredits", "composer.builderModelCredits"],
+    ["agentPanel.builderOrOwnKeys", "setup.builderOrOwnKeys"],
+    ["agentPanel.chat", "shell.chat"],
+    ["agentPanel.closeTab", "tabs.closeTab"],
+    ["agentPanel.configureProviderKeys", "composer.configureProviderKeys"],
+    ["agentPanel.connectAi", "setup.connectAi"],
+    ["agentPanel.connectBuilderIo", "composer.connectBuilder"],
+    ["agentPanel.connectingBuilder", "composer.connectingBuilder"],
+    ["agentPanel.loadingTerminal", "shell.loadingTerminal"],
+    ["agentPanel.newChat", "tabs.newChat"],
+    ["agentPanel.toggleAgent", "shell.toggleAgent"],
+    ["agentPanel.voiceMode", "voiceMode"],
+    ["contextXray", "contextXray"],
+];
+function getNestedMessage(messages, path) {
+    let value = messages;
+    for (const part of path.split(".")) {
+        if (!value || typeof value !== "object" || Array.isArray(value)) {
+            return undefined;
+        }
+        value = value[part];
+    }
+    return value;
+}
+function setNestedMessage(messages, path, value) {
+    const parts = path.split(".");
+    let cursor = messages;
+    for (const part of parts.slice(0, -1)) {
+        const nested = cursor[part];
+        if (!nested || typeof nested !== "object" || Array.isArray(nested)) {
+            cursor[part] = {};
+        }
+        cursor = cursor[part];
+    }
+    cursor[parts.at(-1)] = value;
+}
+function cloneMessages(messages) {
+    const cloned = {};
+    for (const [key, value] of Object.entries(messages)) {
+        cloned[key] =
+            value && typeof value === "object" && !Array.isArray(value)
+                ? cloneMessages(value)
+                : value;
+    }
+    return cloned;
+}
+function mergeLegacyMessageValue(legacyValue, modernValue) {
+    if (modernValue === undefined)
+        return legacyValue;
+    if (legacyValue &&
+        modernValue &&
+        typeof legacyValue === "object" &&
+        typeof modernValue === "object" &&
+        !Array.isArray(legacyValue) &&
+        !Array.isArray(modernValue)) {
+        const merged = { ...legacyValue };
+        for (const [key, value] of Object.entries(modernValue)) {
+            merged[key] = mergeLegacyMessageValue(merged[key], value);
+        }
+        return merged;
+    }
+    return modernValue;
+}
+export function normalizeCoreMessageOverrides(messages) {
+    const normalized = cloneMessages(messages);
+    for (const [legacyPath, agentChatPath] of legacyAgentChatAliases) {
+        const legacyValue = getNestedMessage(normalized, legacyPath);
+        const modernPath = `agentChat.${agentChatPath}`;
+        if (legacyValue !== undefined) {
+            setNestedMessage(normalized, modernPath, mergeLegacyMessageValue(legacyValue, getNestedMessage(normalized, modernPath)));
+        }
+    }
+    return normalized;
+}
+function nestAgentChatMessages(flatMessages) {
+    const agentChat = {};
+    for (const [flatKey, message] of Object.entries(flatMessages)) {
+        const parts = flatKey.split(".");
+        let cursor = agentChat;
+        for (const part of parts.slice(0, -1)) {
+            const nested = cursor[part];
+            if (!nested || typeof nested !== "object" || Array.isArray(nested)) {
+                cursor[part] = {};
+            }
+            cursor = cursor[part];
+        }
+        cursor[parts.at(-1)] = message;
+    }
+    const messages = { agentChat };
+    for (const [legacyPath, agentChatPath] of legacyAgentChatAliases) {
+        const value = getNestedMessage(agentChat, agentChatPath);
+        if (value !== undefined)
+            setNestedMessage(messages, legacyPath, value);
+    }
+    return messages;
+}
+const coreMessageLoaders = {
+    "en-US": async () => ({ default: englishAgentChatMessages }),
+    "zh-CN": () => import("./core-messages/zh-CN.js"),
+    "zh-TW": () => import("./core-messages/zh-TW.js"),
+    "es-ES": () => import("./core-messages/es-ES.js"),
+    "fr-FR": () => import("./core-messages/fr-FR.js"),
+    "de-DE": () => import("./core-messages/de-DE.js"),
+    "ja-JP": () => import("./core-messages/ja-JP.js"),
+    "ko-KR": () => import("./core-messages/ko-KR.js"),
+    "pt-BR": () => import("./core-messages/pt-BR.js"),
+    "hi-IN": () => import("./core-messages/hi-IN.js"),
+    "ar-SA": () => import("./core-messages/ar-SA.js"),
+};
+export async function loadAgentChatMessagesForLocale(locale) {
+    return (await coreMessageLoaders[locale]()).default;
+}
+export async function loadCoreMessagesForLocale(locale) {
+    return nestAgentChatMessages(await loadAgentChatMessagesForLocale(locale));
+}
+const englishCoreMessages = nestAgentChatMessages(englishAgentChatMessages);
+// Only English is eager. Non-English Core catalogs load with the app catalog.
+export function coreMessagesForLocale(locale) {
+    return locale === "en-US" ? englishCoreMessages : {};
+}

package/dist/localization/default-messages.d.ts

@@ -315,6 +315,7 @@ declare const messages: {
             openApp: string;
             notDispatchOrWorkspaceApp: string;
             agentsDescription: string;
+            simpleAgentsDescription: string;
             mcpAccessUpdated: string;
             selectAppForMcp: string;
             mcpUrlCopied: string;
@@ -426,6 +427,7 @@ declare const messages: {
         workspace: string;
         newChat: string;
         newTerminal: string;
+        loadingTerminal: string;
         panelOptions: string;
         collapseSidebar: string;
         widenChat: string;
@@ -679,6 +681,7 @@ declare const messages: {
         shareLink: string;
         addPeopleByEmail: string;
         notifyPeople: string;
+        message: string;
         addMessage: string;
         hideMessage: string;
         messagePlaceholder: string;

package/dist/localization/default-messages.js

@@ -321,6 +321,7 @@ const messages = {
             openApp: "Open app",
             notDispatchOrWorkspaceApp: " a Dispatch tab or a workspace app in this workspace.",
             agentsDescription: "Dispatch can delegate to the built-in app suite over A2A by default. Add extra agents here only if you want to route work to apps outside that built-in set.",
+            simpleAgentsDescription: "Create reusable agents in minutes, or import a setup you already made in Claude or another agent tool.",
             mcpAccessUpdated: "Agent integration access updated",
             selectAppForMcp: "Select at least one app, or expose all apps.",
             mcpUrlCopied: "Agent integration URL copied",
@@ -432,6 +433,7 @@ const messages = {
         workspace: "Resources",
         newChat: "New chat",
         newTerminal: "New terminal",
+        loadingTerminal: "Loading terminal...",
         panelOptions: "Agent panel options",
         collapseSidebar: "Collapse sidebar",
         widenChat: "Widen chat",
@@ -685,6 +687,7 @@ const messages = {
         shareLink: "Share link",
         addPeopleByEmail: "Add people by email",
         notifyPeople: "Notify people",
+        message: "Message",
         addMessage: "Add a message",
         hideMessage: "Hide message",
         messagePlaceholder: "Add a short note (optional)",

package/dist/notifications/routes.d.ts

@@ -28,6 +28,6 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;

package/dist/observability/routes.d.ts

@@ -41,14 +41,14 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
-    ok?: undefined;
     error?: undefined;
+    ok?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
 } | {
-    ok?: undefined;
     error?: undefined;
+    ok?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;

package/dist/progress/routes.d.ts

@@ -15,6 +15,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,9 +75,11 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    deleted?: undefined;
     id?: undefined;
     provider?: undefined;
+    deleted?: undefined;
+    found?: undefined;
+    message?: undefined;
     providers: {
         id: string;
         label: string;
@@ -88,46 +90,44 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         updatedAt: number;
     }[];
     count: number;
-    found?: undefined;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
-    deleted?: undefined;
     id?: undefined;
+    deleted?: undefined;
+    message?: undefined;
     providers?: undefined;
     count?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
-    deleted?: undefined;
     provider?: undefined;
+    deleted?: undefined;
+    message?: undefined;
     providers?: undefined;
     count?: undefined;
     found: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
     provider?: undefined;
+    found?: undefined;
+    message?: undefined;
     providers?: undefined;
     count?: undefined;
-    found?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
-    deleted?: undefined;
     provider?: undefined;
+    deleted?: undefined;
+    found?: undefined;
     providers?: undefined;
     count?: undefined;
-    found?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -311,9 +311,8 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
-        message?: undefined;
         id?: undefined;
-        deleted?: undefined;
+        found?: undefined;
         providers: {
             id: string;
             label: string;
@@ -325,45 +324,46 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         }[];
         count: number;
         provider?: undefined;
-        found?: undefined;
+        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
-    } | {
         message?: undefined;
-        count?: undefined;
+    } | {
         id?: undefined;
-        deleted?: undefined;
         providers?: undefined;
+        count?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
+        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
-    } | {
         message?: undefined;
-        count?: undefined;
-        deleted?: undefined;
+    } | {
         providers?: undefined;
+        count?: undefined;
         provider?: undefined;
         found: boolean;
         id: string;
+        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
-    } | {
         message?: undefined;
-        count?: undefined;
+    } | {
+        found?: undefined;
         providers?: undefined;
+        count?: undefined;
         provider?: undefined;
-        found?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
+        message?: undefined;
     } | {
-        count?: undefined;
-        deleted?: undefined;
+        found?: undefined;
         providers?: undefined;
+        count?: undefined;
         provider?: undefined;
-        found?: undefined;
+        deleted?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/resources/agents.js

@@ -1,5 +1,35 @@
-import { parseCustomAgentProfile, } from "./metadata.js";
+import { getResourceKind, parseCustomAgentProfile, } from "./metadata.js";
 import { resourceGet, resourceGetByPath, resourceListAccessible, SHARED_OWNER, } from "./store.js";
+function metadataFields(metadata) {
+    if (!metadata)
+        return {};
+    try {
+        const parsed = JSON.parse(metadata);
+        return parsed && typeof parsed === "object" && !Array.isArray(parsed)
+            ? parsed
+            : null;
+        // coercion-ok: malformed resource metadata is absent, not a valid profile field
+    }
+    catch (_error) {
+        return null;
+    }
+}
+async function enrichAgentProfile(owner, profile, accessibleResources) {
+    const root = profile.path.replace(/\.md$/i, "");
+    const resources = accessibleResources ?? (await resourceListAccessible(owner, `${root}/`));
+    const workspace = resources.map((resource) => {
+        const metadata = metadataFields(resource.metadata) ?? {};
+        return {
+            path: resource.path,
+            kind: getResourceKind(resource.path),
+            name: typeof metadata.name === "string" ? metadata.name : undefined,
+            description: typeof metadata.description === "string"
+                ? metadata.description
+                : undefined,
+        };
+    });
+    return { ...profile, workspace: { root, resources: workspace } };
+}
 export async function listAccessibleCustomAgents(owner) {
     const resources = await resourceListAccessible(owner, "agents/");
     const profiles = await Promise.all(resources
@@ -8,9 +38,14 @@ export async function listAccessibleCustomAgents(owner) {
         const full = await resourceGet(resource.id);
         if (!full)
             return null;
-        return parseCustomAgentProfile(full.content, resource.path);
+        const profile = parseCustomAgentProfile(full.content, resource.path);
+        return profile;
+    }));
+    const validProfiles = profiles.filter((profile) => !!profile);
+    return Promise.all(validProfiles.map((profile) => {
+        const root = `${profile.path.replace(/\.md$/i, "")}/`;
+        return enrichAgentProfile(owner, profile, resources.filter((resource) => resource.path.startsWith(root)));
     }));
-    return profiles.filter((profile) => !!profile);
 }
 export async function findAccessibleCustomAgent(owner, identifier) {
     const trimmed = identifier.trim();
@@ -26,13 +61,13 @@ export async function findAccessibleCustomAgent(owner, identifier) {
         if (personal) {
             const profile = parseCustomAgentProfile(personal.content, personal.path);
             if (profile)
-                return profile;
+                return enrichAgentProfile(owner, profile);
         }
         const shared = await resourceGetByPath(SHARED_OWNER, path);
         if (shared) {
             const profile = parseCustomAgentProfile(shared.content, shared.path);
             if (profile)
-                return profile;
+                return enrichAgentProfile(owner, profile);
         }
     }
     const lower = trimmed.toLowerCase();

package/dist/resources/metadata.d.ts

@@ -11,6 +11,12 @@ export interface SkillMetadata {
     name: string;
     description?: string;
 }
+export interface AgentWorkspaceResource {
+    path: string;
+    kind: ResourceKind;
+    name?: string;
+    description?: string;
+}
 export interface CustomAgentProfile {
     id: string;
     path: string;
@@ -21,6 +27,10 @@ export interface CustomAgentProfile {
     color?: string;
     delegateDefault?: boolean;
     instructions: string;
+    workspace?: {
+        root: string;
+        resources: AgentWorkspaceResource[];
+    };
 }
 export interface RemoteAgentManifest {
     id: string;

package/dist/resources/metadata.js

@@ -81,15 +81,19 @@ export function frontmatterFieldsToObject(frontmatter) {
     return Object.fromEntries(frontmatter?.fields.map((f) => [f.key, f.value]) ?? []);
 }
 export function isSkillPath(path) {
-    if (!path.startsWith("skills/") || !path.endsWith(".md"))
+    const prefix = path.startsWith("skills/")
+        ? "skills/"
+        : path.match(/^agents\/[^/]+\/skills\//)?.[0];
+    if (!prefix || !path.endsWith(".md"))
         return false;
-    const relative = path.replace(/^skills\//, "");
+    const relative = path.slice(prefix.length);
     return (relative.endsWith("/SKILL.md") ||
         (relative.endsWith(".md") && !relative.includes("/")));
 }
 export function getSkillNameFromPath(path) {
     const relative = path
         .replace(/^\.agents\/skills\//, "")
+        .replace(/^agents\/[^/]+\/skills\//, "")
         .replace(/^skills\//, "");
     if (relative.endsWith("/SKILL.md")) {
         return (relative
@@ -103,7 +107,7 @@ export function isJobPath(path) {
     return path.startsWith("jobs/") && path.endsWith(".md");
 }
 export function isCustomAgentPath(path) {
-    return path.startsWith("agents/") && path.endsWith(".md");
+    return /^agents\/[^/]+\.md$/.test(path);
 }
 export function isRemoteAgentPath(path) {
     return (path.endsWith(".json") &&

package/dist/review/actions/create-review-comment.js

@@ -32,7 +32,7 @@ const schema = z.object({
     metadata: z.record(z.string(), z.unknown()).optional(),
 });
 export default defineAction({
-    description: "Create an inline comment, annotation, or review thread for a resource.",
+    description: "Create an inline comment, annotation, or review thread for a resource. Body text supports inline Markdown without headings.",
     schema,
     run: async (args, ctx) => {
         const actionCtx = ctx;

package/dist/review/actions/reply-review-comment.js

@@ -21,7 +21,7 @@ const schema = z.object({
     metadata: z.record(z.string(), z.unknown()).optional(),
 });
 export default defineAction({
-    description: "Reply to an existing review comment thread.",
+    description: "Reply to an existing review comment thread with inline Markdown text without headings.",
     schema,
     run: async (args, ctx) => {
         const actionCtx = ctx;

package/dist/review/actions/resolve-review-thread.js

@@ -10,7 +10,7 @@ const schema = z.object({
     resolutionNote: z.string().trim().min(1).max(2_000).optional(),
 });
 export default defineAction({
-    description: "Resolve an inline comment or review thread.",
+    description: "Resolve an inline comment or review thread. An optional resolution note supports inline Markdown without headings.",
     schema,
     run: async (args, ctx) => {
         const actionCtx = ctx;

package/dist/secrets/routes.d.ts

@@ -37,17 +37,17 @@ export declare function createWriteSecretHandler(): import("h3").EventHandlerWit
     ok?: undefined;
     status?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     status: string;
-    error?: undefined;
 } | {
     ok?: undefined;
     error: string;
     removed?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
@@ -58,13 +58,13 @@ export declare function createTestSecretHandler(): import("h3").EventHandlerWith
     error: string;
     note?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note?: undefined;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note: string;
-    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,11 +95,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;

package/dist/server/action-routes.js

@@ -1,6 +1,7 @@
 import { createError, defineEventHandler, setResponseStatus, setResponseHeader, getMethod, getQuery, getHeader, getRequestURL, } from "h3";
 import { verifyA2ATokenWithClaims } from "../a2a-claims.js";
 import { isActionContractError, isAgentActionStopError } from "../action.js";
+import { isTransientDatabaseError } from "../db/client.js";
 import { declaresFeatureFlagDelegation } from "../feature-flags/a2a-action-route.js";
 import { resolveOrgByDomain, resolveOrgIdForEmail } from "../org/context.js";
 import { readBody } from "../server/h3-helpers.js";
@@ -177,6 +178,34 @@ function normalizeOrgId(value) {
         ? value.trim()
         : undefined;
 }
+function isFirstBootMissingOrgTableError(error) {
+    if (!(error instanceof Error))
+        return false;
+    return (/no such table:?\s*["'`]?org_members["'`]?/i.test(error.message) ||
+        /relation\s+["'`]?org_members["'`]?\s+does not exist/i.test(error.message));
+}
+/**
+ * The user's stored active org, for a request whose own org resolution came
+ * back empty. An empty `orgId` is not "this user has no org": it silently
+ * narrows every scoped read to rows with a null `org_id`, so a session minted
+ * before org selection — or one whose membership read failed — stops seeing
+ * the user's own org-scoped dashboards, credentials, and resources. This
+ * honors an explicit Personal selection by returning undefined, so it can
+ * never promote a user into an org they left. A transient database failure is
+ * not an answer and propagates.
+ */
+async function storedActiveOrgId(email) {
+    try {
+        return normalizeOrgId(await resolveOrgIdForEmail(email));
+    }
+    catch (error) {
+        if (isTransientDatabaseError(error) ||
+            !isFirstBootMissingOrgTableError(error)) {
+            throw error;
+        }
+        return undefined;
+    }
+}
 function isAuthResolutionFailure(error) {
     if (!error || typeof error !== "object")
         return false;
@@ -344,18 +373,15 @@ export function mountActionRoutes(nitroApp, actions, options) {
             if (resolvedCaller) {
                 orgId = normalizeOrgId(resolvedCaller.orgId);
                 if (!orgId && resolvedCaller.owner && !resolvedCaller.anonymous) {
-                    try {
-                        orgId = normalizeOrgId(await resolveOrgIdForEmail(resolvedCaller.owner));
-                    }
-                    catch {
-                        // Org tables may not exist yet on first boot.
-                    }
+                    orgId = await storedActiveOrgId(resolvedCaller.owner);
                 }
             }
             else {
                 orgId = options?.resolveOrgId
                     ? ((await options.resolveOrgId(event)) ?? undefined)
                     : undefined;
+                if (!orgId && userEmail)
+                    orgId = await storedActiveOrgId(userEmail);
             }
             const timezone = readTimezoneHeader(event);
             const browserSessionId = readBrowserSessionIdHeader(event);

package/dist/server/agent-chat/plugin-options.d.ts

@@ -1,5 +1,4 @@
-import type { ActionEntry } from "../../agent/production-agent.js";
-import type { AgentLoopFinalResponseGuard } from "../../agent/production-agent.js";
+import type { ActionEntry, AgentLoopFinalResponseGuard, ProductionAgentOptions } from "../../agent/production-agent.js";
 import type { AgentChatAttachment, AgentChatReference, MentionProvider } from "../../agent/types.js";
 import type { FrameworkToolsConfig } from "../../framework-tools.js";
 import type { ExternalAgentPolicy } from "../../mcp/external-agent-policy.js";
@@ -164,6 +163,12 @@ export interface AgentChatPluginOptions {
         displayMessage?: string;
         attachments?: AgentChatAttachment[];
     }>;
+    /**
+     * Resolve the exact native action surface for each interactive chat request.
+     * Omitted names are not sent to the model and are not discoverable through
+     * tool-search. When configured, every allowed action is loaded directly.
+     */
+    resolveActionSurface?: ProductionAgentOptions["resolveActionSurface"];
     /**
      * Use ONLY the template's `systemPrompt` and the actions list — skip the
      * framework prompt wrapper, resource loading (AGENTS.md/LEARNINGS.md/

package/dist/server/agent-chat-plugin.d.ts

@@ -46,6 +46,16 @@ export declare function createSerializedA2ATaskStatusWriter(taskId: string, writ
 };
 export declare function resolveA2ARecoverableArtifactSecret(orgId?: string | null | undefined): Promise<string | undefined>;
 export declare function buildLeanRunPolicyPrompt(codeEditingSurfaceRestriction: string, prodCodeExecPromptNote: string): string;
+export declare function filterPromptActionsToSurface(actions: Record<string, ActionEntry>, allowedActionNames?: readonly string[]): Record<string, ActionEntry>;
+/** Keep late-bound sandbox and data-program bridges on the current request's
+ * authorized registry instead of the plugin's process-wide action catalog. */
+export declare function filterRuntimeActionsToSurface(actions: Record<string, ActionEntry>): Record<string, ActionEntry>;
+/** Remove framework guidance for tools that the request surface does not
+ * expose. The default framework prompt is line-oriented, so dropping the
+ * affected instruction keeps unrelated behavioral guidance intact without
+ * teaching the model names it cannot call. */
+export declare function filterFrameworkPromptToSurface(prompt: string, actions: Record<string, ActionEntry>, allowedActionNames?: readonly string[]): string;
+export declare function resolveProductionCodeExecutionForActionSurface(mode: "off" | "sandboxed" | "trusted", hasRequestScopedSurface: boolean): "off" | "sandboxed" | "trusted";
 /**
  * Abort reasons that mean a human asked to stop, so `/runs/:id/abort` escalates
  * to a turn-wide abort. Watchdog reasons (`no_progress`, `auto_stuck_retry`)