@agent-native/core 0.157.6 → 0.157.8

package/dist/server/hosted-harness-policy.js

@@ -0,0 +1,38 @@
+import { HOSTED_HARNESS_ENV_KEY, HOSTED_HARNESS_ORG_SETTING_KEY, isHostedHarnessConfigured, normalizeHostedHarnessRuntimes, } from "../agent/harness/hosted.js";
+import { getOrgSetting } from "../settings/org-settings.js";
+import { createAgentNativeConfigContext, loadResolvedAgentNativeConfig, } from "../vite/agent-native-config-loader.js";
+export function isHostedHarnessEnvEnabled(env = process.env) {
+    const value = env[HOSTED_HARNESS_ENV_KEY]?.trim().toLowerCase();
+    return value === "1" || value === "true" || value === "yes" || value === "on";
+}
+export async function loadHostedHarnessConfig(cwd = process.cwd()) {
+    const production = process.env.NODE_ENV === "production";
+    const config = await loadResolvedAgentNativeConfig(cwd, createAgentNativeConfigContext(production ? "build" : "serve", production ? "production" : "development"));
+    return config.harness;
+}
+export async function resolveHostedHarnessPolicy(options) {
+    const config = options.config ?? (await loadHostedHarnessConfig());
+    const organizationSetting = options.orgId
+        ? await getOrgSetting(options.orgId, HOSTED_HARNESS_ORG_SETTING_KEY)
+        : null;
+    const envEnabled = isHostedHarnessEnvEnabled();
+    // The deployment flag is the fleet-level default. An org setting is only
+    // needed when a deployment has not enabled the hosted harness globally.
+    const organizationEnabled = envEnabled || organizationSetting?.enabled === true;
+    const configEnabled = isHostedHarnessConfigured(config);
+    return {
+        enabled: configEnabled && (envEnabled || organizationEnabled),
+        configEnabled,
+        envEnabled,
+        organizationEnabled,
+        runtimes: normalizeHostedHarnessRuntimes(typeof config === "object" && config !== null
+            ? config.runtimes
+            : undefined),
+    };
+}
+export function hostedHarnessStatusForClient(policy) {
+    return {
+        ...policy,
+        runtimes: [...policy.runtimes],
+    };
+}

package/dist/server/poll.d.ts

@@ -233,10 +233,10 @@ export declare class AppSyncState {
      *     bounded index range scan.
      *
      * The `lastDurablePrune` throttle below is per-process, so every serverless
-     * worker prunes on its first poll. That was survivable only once the work
-     * itself became bounded and indexed; if concurrency is still a problem,
-     * the next step is a `pg_try_advisory_xact_lock` so one worker prunes at a
-     * time. Deliberately not done yet — measure before adding a lock.
+     * worker prunes on its first poll. Postgres workers also take a
+     * transaction-scoped advisory lease for each batch: only one worker deletes
+     * at a time, but each batch still commits independently so a killed worker
+     * cannot hold a long transaction open.
      */
     private pruneDurableEvents;
     persistSyncEvent(event: ChangeEvent, dedupeKey?: string, presetId?: string): Promise<void>;

package/dist/server/poll.js

@@ -42,6 +42,12 @@ const DURABLE_RETENTION_MS = 24 * 60 * 60 * 1000;
  */
 const DURABLE_PRUNE_BATCH = 10_000;
 const DURABLE_PRUNE_MAX_BATCHES = 40;
+/**
+ * Postgres advisory-lock key for the per-database retention worker. The lock
+ * is transaction-scoped so a serverless worker that is killed cannot leave a
+ * lease behind for another worker to clear.
+ */
+const DURABLE_PRUNE_LOCK_KEY = "agent-native:sync-events-prune";
 /**
  * How far back a cold-started process replays durable action markers.
  * Covers the gap between a separate action process writing its marker and this
@@ -455,10 +461,10 @@ export class AppSyncState {
      *     bounded index range scan.
      *
      * The `lastDurablePrune` throttle below is per-process, so every serverless
-     * worker prunes on its first poll. That was survivable only once the work
-     * itself became bounded and indexed; if concurrency is still a problem,
-     * the next step is a `pg_try_advisory_xact_lock` so one worker prunes at a
-     * time. Deliberately not done yet — measure before adding a lock.
+     * worker prunes on its first poll. Postgres workers also take a
+     * transaction-scoped advisory lease for each batch: only one worker deletes
+     * at a time, but each batch still commits independently so a killed worker
+     * cannot hold a long transaction open.
      */
     async pruneDurableEvents(client) {
         const now = Date.now();
@@ -469,17 +475,43 @@ export class AppSyncState {
         let deleted = 0;
         try {
             for (let batch = 0; batch < DURABLE_PRUNE_MAX_BATCHES; batch++) {
-                const result = await client.execute({
+                const runBatch = async (tx) => {
+                    if (this.isPg()) {
+                        const lockResult = await tx.execute({
+                            sql: "SELECT pg_try_advisory_xact_lock(hashtextextended(?, 0::bigint)) AS acquired",
+                            args: [DURABLE_PRUNE_LOCK_KEY],
+                        });
+                        const acquired = lockResult.rows[0]?.acquired;
+                        if (acquired !== true && acquired !== "t")
+                            return null;
+                    }
                     // `id IN (...)` rather than ctid/rowid: both are dialect-specific,
                     // and the primary key is indexed on every dialect we ship.
-                    sql: `DELETE FROM sync_events WHERE id IN (
-                  SELECT id FROM sync_events WHERE created_at < ?
-                  ORDER BY created_at, id LIMIT ?
-                )`,
-                    args: [cutoff, DURABLE_PRUNE_BATCH],
-                });
-                deleted += result.rowsAffected;
-                if (result.rowsAffected < DURABLE_PRUNE_BATCH)
+                    const result = await tx.execute({
+                        sql: `DELETE FROM sync_events WHERE id IN (
+                    SELECT id FROM sync_events WHERE created_at < ?
+                    ORDER BY created_at, id LIMIT ?
+                  )`,
+                        args: [cutoff, DURABLE_PRUNE_BATCH],
+                    });
+                    return result.rowsAffected;
+                };
+                // A Postgres advisory transaction lock is only useful when the lock
+                // and delete share a connection and transaction. Never fall back to
+                // an uncoordinated delete on a transactionless client.
+                const rowsAffected = this.isPg()
+                    ? client.transaction
+                        ? await client.transaction(runBatch)
+                        : null
+                    : await runBatch(client);
+                if (rowsAffected == null) {
+                    if (this.isPg() && !client.transaction) {
+                        throw new Error("Postgres prune requires a database transaction");
+                    }
+                    break;
+                }
+                deleted += rowsAffected;
+                if (rowsAffected < DURABLE_PRUNE_BATCH)
                     break;
             }
             this.durablePruneFailures = 0;

package/dist/server/realtime-token.d.ts

@@ -26,8 +26,8 @@ export declare function createRealtimeTokenHandler(): import("h3").EventHandlerW
     expiresAt?: undefined;
     ttlSeconds?: undefined;
 } | {
-    error?: undefined;
     token: string;
     expiresAt: string;
     ttlSeconds: number;
+    error?: undefined;
 }>>;

package/dist/server/request-context.d.ts

@@ -61,6 +61,8 @@ export interface RequestRunContext {
     model?: string;
     /** Request-authorized action names exposed to this agent run. */
     allowedActionNames?: readonly string[];
+    /** Hosted tools-only harness selected for this agent run. */
+    hostedHarnessRuntime?: "claude-code" | "codex" | "pi" | "opencode";
     /**
      * True when this run is executing inside the durable background-function
      * worker (the `_process-run` self-dispatch), not the synchronous foreground
@@ -82,6 +84,8 @@ export interface RequestRunContext {
     }>;
     /** Per-run fingerprints for large extension bodies already sent to the LLM. */
     extensionContentReads?: Record<string, string>;
+    /** Per-run keys for extension excerpt reads already sent to the LLM. */
+    extensionExcerptReads?: Record<string, true>;
     /** Per-run fingerprints for repeated tool-search calls already sent to the LLM. */
     toolSearchReads?: Record<string, {
         totalTools: number;

package/dist/styles/agent-native.css

@@ -230,6 +230,23 @@
   container: agent-native-main / inline-size;
 }
 
+/* Dispatch and Electron own the chat drawer when an app is embedded. Keep
+   the standard app's navigation beside its content, on the opposite edge.
+   Custom shells opt out with data-agent-native-shell-variant="custom". */
+@media (min-width: 768px) {
+  .agent-layout-shell:not([data-agent-native-shell-variant="custom"]):has(
+      > .agent-sidebar-shell[data-agent-native-hosted-chat="true"]
+    )
+    > .agent-layout-left-drawer,
+  .agent-sidebar-shell[data-agent-native-hosted-chat="true"]
+    .agent-layout-shell:not([data-agent-native-shell-variant="custom"])
+    > .agent-layout-left-drawer {
+    order: 2;
+    border-inline-end: 0 !important;
+    border-inline-start: 1px solid hsl(var(--sidebar-border)) !important;
+  }
+}
+
 @media (min-width: 768px) {
   .agent-layout-shell
     :where(.agent-layout-main-surface, .agent-sidebar-main-surface)
@@ -727,6 +744,28 @@
   line-height: 1.4rem;
 }
 
+/* Settings rows size themselves from the available content column. The full
+   Settings page can be narrow even on a desktop viewport when its navigation
+   rail and agent sidebar are both open, so viewport breakpoints are not a
+   reliable signal for keeping copy and controls side by side. */
+.agent-native-settings-row {
+  container-type: inline-size;
+  container-name: settings-row;
+}
+
+@container settings-row (min-width: 36rem) {
+  .agent-native-settings-row__layout {
+    align-items: center;
+    flex-direction: row;
+    justify-content: space-between;
+  }
+
+  .agent-native-settings-row__control {
+    margin-inline-start: 1rem;
+    text-align: end;
+  }
+}
+
 /* Composer toolbar: keep the model name + version readable on narrow
    chatfields. The bordered composer box is a size container; below 370px
    wide (e.g. a narrow agent sidebar) we drop the reasoning-level suffix

package/dist/templates/chat/agent-native.config.ts

@@ -0,0 +1,5 @@
+import { defineAgentNativeConfig } from "@agent-native/core/config";
+
+export default defineAgentNativeConfig({
+  harness: true,
+});

package/dist/templates/chat/netlify.toml

@@ -9,3 +9,6 @@ GA_MEASUREMENT_ID = "G-ESF7FYXGN9"
 GTM_CONTAINER_ID = "GTM-N3WSTXZ"
 NITRO_PRESET = "netlify"
 NPM_CONFIG_PRODUCTION = "false"
+
+[context.production.environment]
+AGENT_NATIVE_HOSTED_HARNESS = "true"

package/dist/vite/action-types-plugin.js

@@ -53,6 +53,14 @@ const CORE_SHARING_ACTIONS = [
         name: "set-feature-flag",
         specifier: "@agent-native/core/feature-flags/actions/set-feature-flag",
     },
+    {
+        name: "get-hosted-harness-config",
+        specifier: "@agent-native/core/hosted-harness/actions/get-hosted-harness-config",
+    },
+    {
+        name: "set-hosted-harness-enabled",
+        specifier: "@agent-native/core/hosted-harness/actions/set-hosted-harness-enabled",
+    },
     {
         name: "share-resource",
         specifier: "@agent-native/core/sharing/actions/share-resource",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.157.6",
+  "version": "0.157.8",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -185,6 +185,8 @@
     "./feature-flags/actions/get-feature-flags": "./dist/feature-flags/actions/get-feature-flags.js",
     "./feature-flags/actions/list-feature-flags": "./dist/feature-flags/actions/list-feature-flags.js",
     "./feature-flags/actions/set-feature-flag": "./dist/feature-flags/actions/set-feature-flag.js",
+    "./hosted-harness/actions/get-hosted-harness-config": "./dist/hosted-harness/actions/get-hosted-harness-config.js",
+    "./hosted-harness/actions/set-hosted-harness-enabled": "./dist/hosted-harness/actions/set-hosted-harness-enabled.js",
     "./localization": "./dist/localization/index.js",
     "./localization/actions/get-localization-preference": "./dist/localization/actions/get-localization-preference.js",
     "./localization/actions/set-localization-preference": "./dist/localization/actions/set-localization-preference.js",
@@ -423,8 +425,8 @@
     "y-protocols": "^1.0.7",
     "yjs": "^13.6.31",
     "zod": "^4.3.6",
-    "@agent-native/toolkit": "^0.16.0",
-    "@agent-native/recap-cli": "0.5.4"
+    "@agent-native/recap-cli": "0.5.4",
+    "@agent-native/toolkit": "^0.16.1"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",

package/src/templates/chat/agent-native.config.ts

@@ -0,0 +1,5 @@
+import { defineAgentNativeConfig } from "@agent-native/core/config";
+
+export default defineAgentNativeConfig({
+  harness: true,
+});

package/src/templates/chat/netlify.toml

@@ -9,3 +9,6 @@ GA_MEASUREMENT_ID = "G-ESF7FYXGN9"
 GTM_CONTAINER_ID = "GTM-N3WSTXZ"
 NITRO_PRESET = "netlify"
 NPM_CONFIG_PRODUCTION = "false"
+
+[context.production.environment]
+AGENT_NATIVE_HOSTED_HARNESS = "true"