@agent-native/core 0.157.5 → 0.157.7

package/dist/server/agent-teams.d.ts

@@ -66,6 +66,10 @@ export interface AgentTask {
     taskId: string;
     threadId: string;
     parentThreadId?: string;
+    /** Request owner used to scope every browser-visible task read and control. */
+    ownerEmail?: string | null;
+    /** Organization scope captured when the task was spawned. */
+    orgId?: string | null;
     name?: string;
     description: string;
     status: "running" | "completed" | "errored";
@@ -85,6 +89,10 @@ export interface AgentTask {
      */
     delegationDepth?: number;
 }
+export interface AgentTeamOwnerScope {
+    ownerEmail: string | null;
+    orgId?: string | null;
+}
 export type AgentTeamBackgroundRun = Omit<BackgroundAgentRun, "kind" | "source" | "sourceRecord" | "status" | "cwd" | "goalId" | "transcriptPath" | "artifactRoot"> & {
     kind: "agent-team";
     source: "hosted-agent-team";
@@ -272,25 +280,25 @@ export declare function processAgentTeamRun(opts: ProcessAgentTeamRunOptions): P
     ok: boolean;
     skipped?: string;
 }>;
-/** Get task by ID */
-export declare function getTask(taskId: string): Promise<AgentTask | undefined>;
-/** Get task by thread ID */
-export declare function getTaskByThread(threadId: string): Promise<AgentTask | undefined>;
-/** List all tasks (most recent first) */
-export declare function listTasks(): Promise<AgentTask[]>;
-export declare function listAgentTeamBackgroundRuns(): Promise<AgentTeamBackgroundRun[]>;
-export declare function getAgentTeamBackgroundRun(runId: string): Promise<AgentTeamBackgroundRun | null>;
-export declare function listAgentTeamBackgroundTranscriptEvents(runId: string): Promise<AgentTeamBackgroundTranscriptEvent[]>;
+/** Get task by ID, optionally constrained to the current request scope. */
+export declare function getTask(taskId: string, scope?: AgentTeamOwnerScope): Promise<AgentTask | undefined>;
+/** Get task by thread ID, optionally constrained to the current request scope. */
+export declare function getTaskByThread(threadId: string, scope?: AgentTeamOwnerScope): Promise<AgentTask | undefined>;
+/** List tasks in the current owner/org scope (most recent first). */
+export declare function listTasks(scope?: AgentTeamOwnerScope): Promise<AgentTask[]>;
+export declare function listAgentTeamBackgroundRuns(scope?: AgentTeamOwnerScope): Promise<AgentTeamBackgroundRun[]>;
+export declare function getAgentTeamBackgroundRun(runId: string, scope?: AgentTeamOwnerScope): Promise<AgentTeamBackgroundRun | null>;
+export declare function listAgentTeamBackgroundTranscriptEvents(runId: string, scope?: AgentTeamOwnerScope): Promise<AgentTeamBackgroundTranscriptEvent[]>;
 export declare function subscribeToAgentTeamBackgroundRun(runId: string, fromSeq?: number): ReadableStream<Uint8Array> | null;
 /** Send a message/update to a running sub-agent via application state */
-export declare function sendToTask(taskId: string, message: string): Promise<{
+export declare function sendToTask(taskId: string, message: string, scope?: AgentTeamOwnerScope): Promise<{
     ok: boolean;
     error?: string;
     messageId?: string;
     queuedCount?: number;
 }>;
-export declare function sendToAgentTeamBackgroundRun(runId: string, message: string): Promise<SendToAgentTeamBackgroundRunResult>;
-export declare function stopAgentTeamBackgroundRun(runId: string, reason?: string): Promise<ControlAgentTeamBackgroundRunResult>;
+export declare function sendToAgentTeamBackgroundRun(runId: string, message: string, scope?: AgentTeamOwnerScope): Promise<SendToAgentTeamBackgroundRunResult>;
+export declare function stopAgentTeamBackgroundRun(runId: string, reason?: string, scope?: AgentTeamOwnerScope): Promise<ControlAgentTeamBackgroundRunResult>;
 /** Mark a task as errored */
 export declare function markTaskErrored(taskId: string, error: string): Promise<void>;
 export declare const _agentTeamsQueueForTests: {

package/dist/server/agent-teams.js

@@ -936,10 +936,24 @@ export async function spawnTask(opts) {
     }
     const runId = taskRunId(taskId);
     const createdAt = Date.now();
+    let orgId;
+    if (hasRequestContext()) {
+        orgId = getRequestOrgId() ?? null;
+    }
+    else {
+        try {
+            orgId = await resolveOrgIdForEmail(opts.ownerEmail);
+        }
+        catch {
+            orgId = null;
+        }
+    }
     const task = {
         taskId,
         threadId: thread.id,
         ...(opts.parentThreadId ? { parentThreadId: opts.parentThreadId } : {}),
+        ownerEmail: opts.ownerEmail,
+        orgId,
         ...(opts.name ? { name: opts.name } : {}),
         description: opts.description,
         status: "running",
@@ -972,18 +986,6 @@ export async function spawnTask(opts) {
     // (integrations/webhook-handler.ts). Execution happens in `processAgentTeamRun`,
     // invoked by the `/_agent-native/agent-teams/_process-run` route mounted
     // inside the agent-chat plugin (where the action/prompt/engine closures live).
-    let orgId;
-    if (hasRequestContext()) {
-        orgId = getRequestOrgId() ?? null;
-    }
-    else {
-        try {
-            orgId = await resolveOrgIdForEmail(opts.ownerEmail);
-        }
-        catch {
-            orgId = null;
-        }
-    }
     const payload = {
         description: opts.description,
         instructions: opts.instructions,
@@ -1505,35 +1507,45 @@ export async function processAgentTeamRun(opts) {
         return { ok: true };
     });
 }
-/** Get task by ID */
-export async function getTask(taskId) {
+/** Get task by ID, optionally constrained to the current request scope. */
+export async function getTask(taskId, scope) {
     const task = await loadTask(taskId);
-    return task ? await reconcileTaskWithRun(task) : undefined;
+    if (!task || !taskMatchesOwnerScope(task, resolveOwnerScope(scope))) {
+        return undefined;
+    }
+    return await reconcileTaskWithRun(task);
 }
-/** Get task by thread ID */
-export async function getTaskByThread(threadId) {
+/** Get task by thread ID, optionally constrained to the current request scope. */
+export async function getTaskByThread(threadId, scope) {
     const task = await loadTaskByThread(threadId);
-    return task ? await reconcileTaskWithRun(task) : undefined;
+    if (!task || !taskMatchesOwnerScope(task, resolveOwnerScope(scope))) {
+        return undefined;
+    }
+    return await reconcileTaskWithRun(task);
 }
-/** List all tasks (most recent first) */
-export async function listTasks() {
+/** List tasks in the current owner/org scope (most recent first). */
+export async function listTasks(scope) {
+    const ownerScope = resolveOwnerScope(scope);
     const entries = await listAppState(TASK_PREFIX);
-    const tasks = entries.map((e) => e.value);
+    const tasks = entries
+        .map((e) => e.value)
+        .filter((task) => taskMatchesOwnerScope(task, ownerScope));
     const reconciled = await Promise.all(tasks.map(reconcileTaskWithRun));
     return reconciled.sort((a, b) => (b.updatedAt ?? b.completedAt ?? b.createdAt) -
         (a.updatedAt ?? a.completedAt ?? a.createdAt));
 }
-export async function listAgentTeamBackgroundRuns() {
-    return (await listTasks()).map(toAgentTaskBackgroundRun);
+export async function listAgentTeamBackgroundRuns(scope) {
+    return (await listTasks(scope)).map(toAgentTaskBackgroundRun);
 }
-export async function getAgentTeamBackgroundRun(runId) {
-    const task = await loadTask(taskIdFromBackgroundRunId(runId));
-    return task
-        ? toAgentTaskBackgroundRun(await reconcileTaskWithRun(task))
-        : null;
+export async function getAgentTeamBackgroundRun(runId, scope) {
+    const task = await getTask(taskIdFromBackgroundRunId(runId), scope);
+    return task ? toAgentTaskBackgroundRun(task) : null;
 }
-export async function listAgentTeamBackgroundTranscriptEvents(runId) {
+export async function listAgentTeamBackgroundTranscriptEvents(runId, scope) {
     const taskId = taskIdFromBackgroundRunId(runId);
+    const ownerScope = resolveOwnerScope(scope);
+    if (ownerScope && !(await getTask(taskId, ownerScope)))
+        return [];
     const normalizedRunId = taskRunId(taskId);
     const runIds = await transcriptRunIdsForTask(taskId);
     const output = [];
@@ -1589,10 +1601,11 @@ async function getPersistedRunEvents(runId) {
         .filter((event) => Boolean(event));
 }
 /** Send a message/update to a running sub-agent via application state */
-export async function sendToTask(taskId, message) {
+export async function sendToTask(taskId, message, scope) {
     const task = await loadTask(taskId);
-    if (!task)
+    if (!task || !taskMatchesOwnerScope(task, resolveOwnerScope(scope))) {
         return { ok: false, error: "Task not found" };
+    }
     if (task.status !== "running")
         return { ok: false, error: "Task is not running" };
     if (message.trim().length === 0)
@@ -1612,8 +1625,8 @@ export async function sendToTask(taskId, message) {
         return { ok: false, error: "Unable to queue message" };
     }
 }
-export async function sendToAgentTeamBackgroundRun(runId, message) {
-    return sendToTask(taskIdFromBackgroundRunId(runId), message);
+export async function sendToAgentTeamBackgroundRun(runId, message, scope) {
+    return sendToTask(taskIdFromBackgroundRunId(runId), message, scope);
 }
 async function sendAgentTeamBackgroundAgentFollowUp(input) {
     const prompt = input.prompt.trim();
@@ -1655,11 +1668,12 @@ async function controlAgentTeamBackgroundAgentRun(input) {
         error: result.error,
     };
 }
-export async function stopAgentTeamBackgroundRun(runId, reason = "user") {
+export async function stopAgentTeamBackgroundRun(runId, reason = "user", scope) {
     const taskId = taskIdFromBackgroundRunId(runId);
     const task = await loadTask(taskId);
-    if (!task)
+    if (!task || !taskMatchesOwnerScope(task, resolveOwnerScope(scope))) {
         return { ok: false, error: "Task not found" };
+    }
     if (task.status !== "running") {
         return { ok: false, error: "Task is not running" };
     }
@@ -1678,6 +1692,26 @@ export async function stopAgentTeamBackgroundRun(runId, reason = "user") {
     await completeAgentTeamRun(task.taskId, "failed");
     return { ok: true };
 }
+function resolveOwnerScope(scope) {
+    if (scope)
+        return scope;
+    const ownerEmail = getRequestUserEmail();
+    if (ownerEmail === undefined)
+        return undefined;
+    return {
+        ownerEmail,
+        // A few non-HTTP test/CLI hosts only provide the user scope. Keep that
+        // owner check active without requiring every lightweight request-context
+        // adapter to implement organization lookup.
+        orgId: typeof getRequestOrgId === "function" ? getRequestOrgId() : undefined,
+    };
+}
+function taskMatchesOwnerScope(task, scope) {
+    if (!scope)
+        return true;
+    return ((task.ownerEmail ?? null) === scope.ownerEmail &&
+        (scope.orgId === undefined || (task.orgId ?? null) === scope.orgId));
+}
 /** Mark a task as errored */
 export async function markTaskErrored(taskId, error) {
     const task = await loadTask(taskId);

package/dist/server/hosted-harness-policy.d.ts

@@ -0,0 +1,17 @@
+import { type HostedHarnessRuntime } from "../agent/harness/hosted.js";
+import type { AgentNativeHarnessSetting } from "../config.js";
+export interface HostedHarnessPolicy {
+    enabled: boolean;
+    configEnabled: boolean;
+    envEnabled: boolean;
+    organizationEnabled: boolean;
+    runtimes: HostedHarnessRuntime[];
+}
+export declare function isHostedHarnessEnvEnabled(env?: Record<string, string | undefined>): boolean;
+export declare function loadHostedHarnessConfig(cwd?: string): Promise<AgentNativeHarnessSetting | undefined>;
+export declare function resolveHostedHarnessPolicy(options: {
+    config?: AgentNativeHarnessSetting;
+    orgId?: string | null;
+    userEmail?: string | null;
+}): Promise<HostedHarnessPolicy>;
+export declare function hostedHarnessStatusForClient(policy: HostedHarnessPolicy): HostedHarnessPolicy;

package/dist/server/hosted-harness-policy.js

@@ -0,0 +1,38 @@
+import { HOSTED_HARNESS_ENV_KEY, HOSTED_HARNESS_ORG_SETTING_KEY, isHostedHarnessConfigured, normalizeHostedHarnessRuntimes, } from "../agent/harness/hosted.js";
+import { getOrgSetting } from "../settings/org-settings.js";
+import { createAgentNativeConfigContext, loadResolvedAgentNativeConfig, } from "../vite/agent-native-config-loader.js";
+export function isHostedHarnessEnvEnabled(env = process.env) {
+    const value = env[HOSTED_HARNESS_ENV_KEY]?.trim().toLowerCase();
+    return value === "1" || value === "true" || value === "yes" || value === "on";
+}
+export async function loadHostedHarnessConfig(cwd = process.cwd()) {
+    const production = process.env.NODE_ENV === "production";
+    const config = await loadResolvedAgentNativeConfig(cwd, createAgentNativeConfigContext(production ? "build" : "serve", production ? "production" : "development"));
+    return config.harness;
+}
+export async function resolveHostedHarnessPolicy(options) {
+    const config = options.config ?? (await loadHostedHarnessConfig());
+    const organizationSetting = options.orgId
+        ? await getOrgSetting(options.orgId, HOSTED_HARNESS_ORG_SETTING_KEY)
+        : null;
+    const envEnabled = isHostedHarnessEnvEnabled();
+    // The deployment flag is the fleet-level default. An org setting is only
+    // needed when a deployment has not enabled the hosted harness globally.
+    const organizationEnabled = envEnabled || organizationSetting?.enabled === true;
+    const configEnabled = isHostedHarnessConfigured(config);
+    return {
+        enabled: configEnabled && (envEnabled || organizationEnabled),
+        configEnabled,
+        envEnabled,
+        organizationEnabled,
+        runtimes: normalizeHostedHarnessRuntimes(typeof config === "object" && config !== null
+            ? config.runtimes
+            : undefined),
+    };
+}
+export function hostedHarnessStatusForClient(policy) {
+    return {
+        ...policy,
+        runtimes: [...policy.runtimes],
+    };
+}

package/dist/server/realtime-token.d.ts

@@ -26,8 +26,8 @@ export declare function createRealtimeTokenHandler(): import("h3").EventHandlerW
     expiresAt?: undefined;
     ttlSeconds?: undefined;
 } | {
-    error?: undefined;
     token: string;
     expiresAt: string;
     ttlSeconds: number;
+    error?: undefined;
 }>>;

package/dist/server/request-context.d.ts

@@ -61,6 +61,8 @@ export interface RequestRunContext {
     model?: string;
     /** Request-authorized action names exposed to this agent run. */
     allowedActionNames?: readonly string[];
+    /** Hosted tools-only harness selected for this agent run. */
+    hostedHarnessRuntime?: "claude-code" | "codex" | "pi" | "opencode";
     /**
      * True when this run is executing inside the durable background-function
      * worker (the `_process-run` self-dispatch), not the synchronous foreground
@@ -82,6 +84,8 @@ export interface RequestRunContext {
     }>;
     /** Per-run fingerprints for large extension bodies already sent to the LLM. */
     extensionContentReads?: Record<string, string>;
+    /** Per-run keys for extension excerpt reads already sent to the LLM. */
+    extensionExcerptReads?: Record<string, true>;
     /** Per-run fingerprints for repeated tool-search calls already sent to the LLM. */
     toolSearchReads?: Record<string, {
         totalTools: number;

package/dist/server/transcribe-voice.d.ts

@@ -20,6 +20,6 @@ export declare function createTranscribeVoiceHandler(): import("h3").EventHandle
     error: string;
     text?: undefined;
 } | {
-    error?: undefined;
     text: string;
+    error?: undefined;
 }>>;

package/dist/styles/agent-native.css

@@ -230,6 +230,23 @@
   container: agent-native-main / inline-size;
 }
 
+/* Dispatch and Electron own the chat drawer when an app is embedded. Keep
+   the standard app's navigation beside its content, on the opposite edge.
+   Custom shells opt out with data-agent-native-shell-variant="custom". */
+@media (min-width: 768px) {
+  .agent-layout-shell:not([data-agent-native-shell-variant="custom"]):has(
+      > .agent-sidebar-shell[data-agent-native-hosted-chat="true"]
+    )
+    > .agent-layout-left-drawer,
+  .agent-sidebar-shell[data-agent-native-hosted-chat="true"]
+    .agent-layout-shell:not([data-agent-native-shell-variant="custom"])
+    > .agent-layout-left-drawer {
+    order: 2;
+    border-inline-end: 0 !important;
+    border-inline-start: 1px solid hsl(var(--sidebar-border)) !important;
+  }
+}
+
 @media (min-width: 768px) {
   .agent-layout-shell
     :where(.agent-layout-main-surface, .agent-sidebar-main-surface)
@@ -727,6 +744,28 @@
   line-height: 1.4rem;
 }
 
+/* Settings rows size themselves from the available content column. The full
+   Settings page can be narrow even on a desktop viewport when its navigation
+   rail and agent sidebar are both open, so viewport breakpoints are not a
+   reliable signal for keeping copy and controls side by side. */
+.agent-native-settings-row {
+  container-type: inline-size;
+  container-name: settings-row;
+}
+
+@container settings-row (min-width: 36rem) {
+  .agent-native-settings-row__layout {
+    align-items: center;
+    flex-direction: row;
+    justify-content: space-between;
+  }
+
+  .agent-native-settings-row__control {
+    margin-inline-start: 1rem;
+    text-align: end;
+  }
+}
+
 /* Composer toolbar: keep the model name + version readable on narrow
    chatfields. The bordered composer box is a size container; below 370px
    wide (e.g. a narrow agent sidebar) we drop the reasoning-level suffix

package/dist/templates/chat/agent-native.config.ts

@@ -0,0 +1,5 @@
+import { defineAgentNativeConfig } from "@agent-native/core/config";
+
+export default defineAgentNativeConfig({
+  harness: true,
+});

package/dist/templates/chat/netlify.toml

@@ -9,3 +9,6 @@ GA_MEASUREMENT_ID = "G-ESF7FYXGN9"
 GTM_CONTAINER_ID = "GTM-N3WSTXZ"
 NITRO_PRESET = "netlify"
 NPM_CONFIG_PRODUCTION = "false"
+
+[context.production.environment]
+AGENT_NATIVE_HOSTED_HARNESS = "true"

package/dist/vite/action-types-plugin.js

@@ -53,6 +53,14 @@ const CORE_SHARING_ACTIONS = [
         name: "set-feature-flag",
         specifier: "@agent-native/core/feature-flags/actions/set-feature-flag",
     },
+    {
+        name: "get-hosted-harness-config",
+        specifier: "@agent-native/core/hosted-harness/actions/get-hosted-harness-config",
+    },
+    {
+        name: "set-hosted-harness-enabled",
+        specifier: "@agent-native/core/hosted-harness/actions/set-hosted-harness-enabled",
+    },
     {
         name: "share-resource",
         specifier: "@agent-native/core/sharing/actions/share-resource",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.157.5",
+  "version": "0.157.7",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -185,6 +185,8 @@
     "./feature-flags/actions/get-feature-flags": "./dist/feature-flags/actions/get-feature-flags.js",
     "./feature-flags/actions/list-feature-flags": "./dist/feature-flags/actions/list-feature-flags.js",
     "./feature-flags/actions/set-feature-flag": "./dist/feature-flags/actions/set-feature-flag.js",
+    "./hosted-harness/actions/get-hosted-harness-config": "./dist/hosted-harness/actions/get-hosted-harness-config.js",
+    "./hosted-harness/actions/set-hosted-harness-enabled": "./dist/hosted-harness/actions/set-hosted-harness-enabled.js",
     "./localization": "./dist/localization/index.js",
     "./localization/actions/get-localization-preference": "./dist/localization/actions/get-localization-preference.js",
     "./localization/actions/set-localization-preference": "./dist/localization/actions/set-localization-preference.js",
@@ -424,7 +426,7 @@
     "yjs": "^13.6.31",
     "zod": "^4.3.6",
     "@agent-native/recap-cli": "0.5.4",
-    "@agent-native/toolkit": "^0.16.0"
+    "@agent-native/toolkit": "^0.16.1"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",

package/src/templates/chat/agent-native.config.ts

@@ -0,0 +1,5 @@
+import { defineAgentNativeConfig } from "@agent-native/core/config";
+
+export default defineAgentNativeConfig({
+  harness: true,
+});

package/src/templates/chat/netlify.toml

@@ -9,3 +9,6 @@ GA_MEASUREMENT_ID = "G-ESF7FYXGN9"
 GTM_CONTAINER_ID = "GTM-N3WSTXZ"
 NITRO_PRESET = "netlify"
 NPM_CONFIG_PRODUCTION = "false"
+
+[context.production.environment]
+AGENT_NATIVE_HOSTED_HARNESS = "true"