@agent-native/core 0.155.0 → 0.157.1

package/dist/coding-tools/sandbox/executions-store.js

@@ -79,6 +79,7 @@ async function _doEnsureTable() {
       timed_out ${intType()} NOT NULL DEFAULT 0,
       error TEXT,
       bridge_tools_used TEXT,
+      allowed_action_names TEXT,
       created_at ${intType()} NOT NULL,
       started_at ${intType()},
       finished_at ${intType()},
@@ -94,7 +95,10 @@ async function _doEnsureTable() {
         await ensureTableExists(TABLE, createSql);
         // Additive-column guard: keeps older deployments (created before a column
         // was added) self-healing without destructive migrations.
-        const pgColumns = [["bridge_tools_used", "TEXT"]];
+        const pgColumns = [
+            ["bridge_tools_used", "TEXT"],
+            ["allowed_action_names", "TEXT"],
+        ];
         for (const [col, def] of pgColumns) {
             await ensureColumnExists(TABLE, col, `ALTER TABLE ${TABLE} ADD COLUMN IF NOT EXISTS ${col} ${def}`);
         }
@@ -103,6 +107,15 @@ async function _doEnsureTable() {
     }
     else {
         await retryOnDdlRace(() => client.execute(createSql));
+        try {
+            await retryOnDdlRace(() => client.execute(`ALTER TABLE ${TABLE} ADD COLUMN allowed_action_names TEXT`));
+        }
+        catch (error) {
+            const message = String(error?.message ?? error);
+            if (!/duplicate column name|column .* already exists/i.test(message)) {
+                throw error;
+            }
+        }
         await retryOnDdlRace(() => client.execute(ownerIdxSql));
         await retryOnDdlRace(() => client.execute(dueIdxSql));
     }
@@ -136,6 +149,27 @@ function rowFromDb(raw) {
             bridgeToolsUsed = [];
         }
     }
+    let allowedActionNames;
+    if (raw.allowed_action_names !== null &&
+        raw.allowed_action_names !== undefined) {
+        if (typeof raw.allowed_action_names !== "string") {
+            allowedActionNames = [];
+        }
+        else {
+            try {
+                const parsed = JSON.parse(raw.allowed_action_names);
+                allowedActionNames =
+                    Array.isArray(parsed) &&
+                        parsed.every((item) => typeof item === "string")
+                        ? [...new Set(parsed)]
+                        : [];
+            }
+            catch {
+                // A malformed persisted surface must never restore the full registry.
+                allowedActionNames = [];
+            }
+        }
+    }
     return {
         id: String(raw.id),
         owner: String(raw.owner),
@@ -165,6 +199,7 @@ function rowFromDb(raw) {
         timedOut: toBool(raw.timed_out),
         error: raw.error === null || raw.error === undefined ? null : String(raw.error),
         bridgeToolsUsed,
+        allowedActionNames,
         createdAt: toNumberOrNull(raw.created_at) ?? 0,
         startedAt: toNumberOrNull(raw.started_at),
         finishedAt: toNumberOrNull(raw.finished_at),
@@ -180,8 +215,8 @@ export async function createSandboxExecution(input) {
     const maxAttempts = Math.max(1, Math.min(input.maxAttempts ?? SANDBOX_EXECUTION_DEFAULT_MAX_ATTEMPTS, 5));
     await client.execute({
         sql: `INSERT INTO ${TABLE}
-      (id, owner, org_id, thread_id, runtime, code, status, timeout_ms, max_output_chars, attempt_count, max_attempts, created_at, updated_at)
-      VALUES (?, ?, ?, ?, ?, ?, 'queued', ?, ?, 0, ?, ?, ?)`,
+      (id, owner, org_id, thread_id, runtime, code, status, timeout_ms, max_output_chars, attempt_count, max_attempts, allowed_action_names, created_at, updated_at)
+      VALUES (?, ?, ?, ?, ?, ?, 'queued', ?, ?, 0, ?, ?, ?, ?)`,
         args: [
             id,
             input.owner,
@@ -192,6 +227,9 @@ export async function createSandboxExecution(input) {
             input.timeoutMs,
             input.maxOutputChars,
             maxAttempts,
+            input.allowedActionNames === undefined
+                ? null
+                : JSON.stringify([...new Set(input.allowedActionNames)]),
             now,
             now,
         ],

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export * from "./config.js";
-export { createProductionAgentHandler, type ActionEntry, type ScriptEntry, type ProductionAgentOptions, type ActionTool, type ScriptTool, type AgentMessage, type AgentChatRequest, type AgentChatEvent, type AgentChatAttachment, DEFAULT_MODEL, TripWire, type Processor, type ProcessorState, type ProcessorAbort, } from "./agent/index.js";
+export { createProductionAgentHandler, type ActionEntry, type ScriptEntry, type ProductionAgentOptions, type AgentActionSurface, type AgentActionSurfaceDetails, type ActionTool, type ScriptTool, type AgentMessage, type AgentChatRequest, type AgentChatEvent, type AgentChatAttachment, DEFAULT_MODEL, TripWire, type Processor, type ProcessorState, type ProcessorAbort, } from "./agent/index.js";
 export { defineAction, ActionContractError, isActionContractError, type ActionContractErrorOptions, AgentActionStopError, isAgentActionStopError, type ActionDefinition, type ActionHttpConfig, type AgentActionStopOptions, type PublicAgentActionConfig, type ActionDeepLink, type ActionLinkBuilder, MCP_APP_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_URI_META_KEY, type ActionMcpAppConfig, type ActionMcpAppCsp, type ActionMcpAppCspBuilder, type ActionMcpAppHtmlBuilder, type ActionMcpAppPermissions, type ActionMcpAppResourceConfig, type ActionMcpAppResourceMeta, } from "./action.js";
 export * from "./user-profile/index.js";
 export { embedApp, MCP_APP_REQUEST_ORIGIN_CSP_SOURCE, type EmbedAppOptions, } from "./mcp/embed-app.js";

package/dist/localization/core-messages/ar-SA.d.ts

@@ -0,0 +1,3 @@
+import type { AgentChatTranslation } from "../core-messages.js";
+declare const messages: AgentChatTranslation;
+export default messages;