@agent-native/core 0.157.8 → 0.157.10

package/dist/localization/core-messages/ko-KR.js

@@ -263,10 +263,14 @@ const messages = {
     "errorMessages.startNewChat": "새 채팅 시작",
     "errorMessages.upgradeAtBuilder": "Builder.io에서 업그레이드",
     "feedback.inaccurate": "부정확함",
+    "feedback.keyboardHint": "보내려면 {{shortcut}} Enter",
     "feedback.notHelpful": "도움이 되지 않음",
+    "feedback.placeholder": "무엇이 문제였는지 알려주세요…",
+    "feedback.submit": "제출",
     "feedback.thumbsDown": "싫어요",
     "feedback.thumbsUp": "좋아요",
     "feedback.tooSlow": "너무 느림",
+    "feedback.whatWentWrong": "무엇이 잘못되었나요?",
     "feedback.wrongTool": "잘못된 도구",
     "header.switchToCli": "CLI로 전환",
     "history.active": "활성",

package/dist/localization/core-messages/pt-BR.js

@@ -408,10 +408,14 @@ const messages = {
     "errorMessages.startNewChat": "Iniciar novo chat",
     "errorMessages.upgradeAtBuilder": "Fazer upgrade no Builder.io",
     "feedback.inaccurate": "Impreciso",
+    "feedback.keyboardHint": "{{shortcut}} Enter para enviar",
     "feedback.notHelpful": "Pouco útil",
+    "feedback.placeholder": "Conte-nos o que deu errado...",
+    "feedback.submit": "Enviar",
     "feedback.thumbsDown": "Não gostei",
     "feedback.thumbsUp": "Gostei",
     "feedback.tooSlow": "Muito lento",
+    "feedback.whatWentWrong": "O que deu errado?",
     "feedback.wrongTool": "Ferramenta errada",
     "contextMeter.ariaLabel": "Contexto {{percent}}%, {{totalTokens}}{{breakdown}}. Abrir a análise de contexto.",
     "contextMeter.breakdown": " no total: {{systemTokens}} do sistema + {{conversationTokens}} da conversa",

package/dist/localization/core-messages/zh-CN.js

@@ -263,10 +263,14 @@ const messages = {
     "errorMessages.startNewChat": "开始新聊天",
     "errorMessages.upgradeAtBuilder": "在 Builder.io 升级",
     "feedback.inaccurate": "不准确",
+    "feedback.keyboardHint": "{{shortcut}} Enter 发送",
     "feedback.notHelpful": "没有帮助",
+    "feedback.placeholder": "告诉我们哪里出了问题……",
+    "feedback.submit": "提交",
     "feedback.thumbsDown": "不喜欢",
     "feedback.thumbsUp": "喜欢",
     "feedback.tooSlow": "太慢",
+    "feedback.whatWentWrong": "哪里出了问题？",
     "feedback.wrongTool": "工具错误",
     "header.switchToCli": "切换到 CLI",
     "history.active": "活跃",

package/dist/localization/core-messages/zh-TW.js

@@ -263,10 +263,14 @@ const messages = {
     "errorMessages.startNewChat": "開始新聊天",
     "errorMessages.upgradeAtBuilder": "在 Builder.io 升級",
     "feedback.inaccurate": "不準確",
+    "feedback.keyboardHint": "{{shortcut}} Enter 送出",
     "feedback.notHelpful": "沒有幫助",
+    "feedback.placeholder": "告訴我們哪裡出了問題……",
+    "feedback.submit": "送出",
     "feedback.thumbsDown": "不喜歡",
     "feedback.thumbsUp": "喜歡",
     "feedback.tooSlow": "太慢",
+    "feedback.whatWentWrong": "哪裡出了問題？",
     "feedback.wrongTool": "工具錯誤",
     "header.switchToCli": "切換到 CLI",
     "history.active": "使用中",

package/dist/localization/core-messages.d.ts

@@ -267,10 +267,14 @@ export declare const englishAgentChatMessages: {
     readonly "errorMessages.startNewChat": "Start new chat";
     readonly "errorMessages.upgradeAtBuilder": "Upgrade at Builder.io";
     readonly "feedback.inaccurate": "Inaccurate";
+    readonly "feedback.keyboardHint": "{{shortcut}} Enter to send";
     readonly "feedback.notHelpful": "Not helpful";
+    readonly "feedback.placeholder": "Tell us what went wrong...";
+    readonly "feedback.submit": "Submit";
     readonly "feedback.thumbsDown": "Thumbs down";
     readonly "feedback.thumbsUp": "Thumbs up";
     readonly "feedback.tooSlow": "Too slow";
+    readonly "feedback.whatWentWrong": "What went wrong?";
     readonly "feedback.wrongTool": "Wrong tool";
     readonly "header.switchToCli": "Switch to CLI";
     readonly "history.active": "Active";

package/dist/notifications/routes.d.ts

@@ -16,18 +16,18 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
     error?: undefined;
     ok?: undefined;
 } | {
-    count?: undefined;
     updated: number;
     error?: undefined;
     ok?: undefined;
-} | {
     count?: undefined;
+} | {
     updated?: undefined;
     error: string;
     ok?: undefined;
-} | {
     count?: undefined;
+} | {
     updated?: undefined;
     error?: undefined;
     ok: boolean;
+    count?: undefined;
 }>>;

package/dist/observability/feedback.js

@@ -30,6 +30,16 @@ export async function submitFeedback(opts) {
     await insertFeedback(entry);
     return entry;
 }
+function unwrapPersistedThreadMessage(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return null;
+    }
+    const record = value;
+    const nested = record.message;
+    return nested && typeof nested === "object" && !Array.isArray(nested)
+        ? nested
+        : record;
+}
 async function getThreadMessages(threadId) {
     await ensureObservabilityTables();
     const client = getDbExec();
@@ -47,22 +57,36 @@ async function getThreadMessages(threadId) {
         const messages = data.messages ?? data;
         if (!Array.isArray(messages))
             return [];
-        return messages
-            .filter((m) => m &&
-            typeof m.role === "string" &&
-            (typeof m.content === "string" ||
-                (Array.isArray(m.content) &&
-                    m.content.some((p) => p.type === "text"))))
-            .map((m) => ({
-            role: m.role,
-            content: typeof m.content === "string"
-                ? m.content
-                : m.content
-                    .filter((p) => p.type === "text")
-                    .map((p) => p.text ?? "")
-                    .join(""),
-            createdAt: m.createdAt ? Number(m.createdAt) : undefined,
-        }));
+        return messages.flatMap((value) => {
+            const message = unwrapPersistedThreadMessage(value);
+            if (!message)
+                return [];
+            const content = message.content;
+            if ((message.role !== "user" && message.role !== "assistant") ||
+                (typeof content !== "string" && !Array.isArray(content))) {
+                return [];
+            }
+            const text = typeof content === "string"
+                ? content
+                : content
+                    .filter((part) => Boolean(part) &&
+                    typeof part === "object" &&
+                    !Array.isArray(part) &&
+                    part.type === "text")
+                    .map((part) => (typeof part.text === "string" ? part.text : ""))
+                    .join("");
+            if (!text)
+                return [];
+            return [
+                {
+                    role: message.role,
+                    content: text,
+                    createdAt: typeof message.createdAt === "number"
+                        ? message.createdAt
+                        : undefined,
+                },
+            ];
+        });
     }
     catch {
         return [];

package/dist/observability/routes.d.ts

@@ -8,7 +8,7 @@
  *   GET    /traces/:runId              — get trace detail (spans + summary)
  *   GET    /traces/:runId/evals        — get evals for a run
  *   POST   /feedback                   — submit feedback
- *   GET    /feedback?since=N&limit=N   — list feedback entries
+ *   GET    /feedback?since=N&limit=N&feedbackType=text — list feedback entries
  *   GET    /feedback/stats?since=N     — feedback aggregation stats
  *   GET    /satisfaction?since=N       — satisfaction scores
  *   GET    /evals/stats?since=N        — eval stats
@@ -41,27 +41,27 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
+    error?: undefined;
+    ok?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
+} | {
     error?: undefined;
     ok?: undefined;
-} | {
     summary?: undefined;
     spans?: undefined;
     id: string;
-    error?: undefined;
-    ok?: undefined;
 } | {
+    ok?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
     error: any;
-    ok?: undefined;
 } | {
+    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
-    error?: undefined;
     ok: boolean;
 }>>;

package/dist/observability/routes.js

@@ -8,7 +8,7 @@
  *   GET    /traces/:runId              — get trace detail (spans + summary)
  *   GET    /traces/:runId/evals        — get evals for a run
  *   POST   /feedback                   — submit feedback
- *   GET    /feedback?since=N&limit=N   — list feedback entries
+ *   GET    /feedback?since=N&limit=N&feedbackType=text — list feedback entries
  *   GET    /feedback/stats?since=N     — feedback aggregation stats
  *   GET    /satisfaction?since=N       — satisfaction scores
  *   GET    /evals/stats?since=N        — eval stats
@@ -27,6 +27,16 @@ import { track } from "../tracking/registry.js";
 import { emitAiFeedbackSurveyEvent } from "./posthog-ai.js";
 import { getObservabilityOverview, getTraceSummaries, getTraceSummary, getTraceSpansForRun, getEvalsForRun, insertFeedback, getFeedback, getFeedbackStats, getSatisfactionScores, getEvalStats, listExperiments, insertExperiment, getExperiment, updateExperiment, getExperimentResults, } from "./store.js";
 import { trackingIdentityProperties } from "./tracking-identity.js";
+const FEEDBACK_TYPES = [
+    "thumbs_up",
+    "thumbs_down",
+    "category",
+    "text",
+];
+function isFeedbackType(value) {
+    return (typeof value === "string" &&
+        FEEDBACK_TYPES.includes(value));
+}
 function nanoid(size = 21) {
     const alphabet = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
     let id = "";
@@ -143,8 +153,7 @@ export function createObservabilityHandler() {
                 return { error: "Invalid JSON body" };
             }
             const feedbackType = body?.feedbackType;
-            if (!feedbackType ||
-                !["thumbs_up", "thumbs_down", "category", "text"].includes(feedbackType)) {
+            if (!isFeedbackType(feedbackType)) {
                 setResponseStatus(event, 400);
                 return { error: "feedbackType is required" };
             }
@@ -229,6 +238,9 @@ export function createObservabilityHandler() {
             return getFeedback({
                 sinceMs: parseSince(q),
                 limit: parseLimit(q),
+                feedbackType: isFeedbackType(q.feedbackType)
+                    ? q.feedbackType
+                    : undefined,
                 userId: owner,
             });
         }

package/dist/observability/store.js

@@ -197,6 +197,7 @@ export async function ensureObservabilityTables() {
                 await ensureIndexExists("idx_feedback_thread", `CREATE INDEX IF NOT EXISTS idx_feedback_thread ON agent_feedback (thread_id)`);
                 await ensureIndexExists("idx_feedback_created", `CREATE INDEX IF NOT EXISTS idx_feedback_created ON agent_feedback (created_at)`);
                 await ensureIndexExists("idx_feedback_user", `CREATE INDEX IF NOT EXISTS idx_feedback_user ON agent_feedback (user_id, created_at)`);
+                await ensureIndexExists("idx_feedback_type_created", `CREATE INDEX IF NOT EXISTS idx_feedback_type_created ON agent_feedback (feedback_type, created_at)`);
                 await ensureIndexExists("idx_satisfaction_thread", `CREATE INDEX IF NOT EXISTS idx_satisfaction_thread ON agent_satisfaction_scores (thread_id)`);
                 await ensureIndexExists("idx_satisfaction_user", `CREATE INDEX IF NOT EXISTS idx_satisfaction_user ON agent_satisfaction_scores (user_id, computed_at)`);
                 await ensureIndexExists("idx_evals_run", `CREATE INDEX IF NOT EXISTS idx_evals_run ON agent_evals (run_id)`);
@@ -252,6 +253,7 @@ export async function ensureObservabilityTables() {
                 `CREATE INDEX IF NOT EXISTS idx_feedback_thread ON agent_feedback (thread_id)`,
                 `CREATE INDEX IF NOT EXISTS idx_feedback_created ON agent_feedback (created_at)`,
                 `CREATE INDEX IF NOT EXISTS idx_feedback_user ON agent_feedback (user_id, created_at)`,
+                `CREATE INDEX IF NOT EXISTS idx_feedback_type_created ON agent_feedback (feedback_type, created_at)`,
                 `CREATE INDEX IF NOT EXISTS idx_satisfaction_thread ON agent_satisfaction_scores (thread_id)`,
                 `CREATE INDEX IF NOT EXISTS idx_satisfaction_user ON agent_satisfaction_scores (user_id, computed_at)`,
                 `CREATE INDEX IF NOT EXISTS idx_evals_run ON agent_evals (run_id)`,

package/dist/observability/traces.js

@@ -637,7 +637,11 @@ export async function instrumentAgentLoop(opts) {
         catch { }
         let llmCallCount = 0;
         if (usage || runStatus === "error") {
-            llmCallCount = 1;
+            llmCallCount =
+                usage?.llmCalls ??
+                    // Compatibility for custom loop implementations that predate the
+                    // attempt counter: a measured run still counts as one call.
+                    1;
             const generationUsage = usage ?? {
                 inputTokens: 0,
                 outputTokens: 0,

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,9 +75,7 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    message?: undefined;
-    id?: undefined;
-    provider?: undefined;
+    found?: undefined;
     deleted?: undefined;
     providers: {
         id: string;
@@ -89,45 +87,47 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         updatedAt: number;
     }[];
     count: number;
-    found?: undefined;
+    provider?: undefined;
     registered?: undefined;
+    id?: undefined;
     label?: undefined;
-} | {
     message?: undefined;
-    count?: undefined;
-    id?: undefined;
+} | {
     deleted?: undefined;
     providers?: undefined;
+    count?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
     registered?: undefined;
+    id?: undefined;
     label?: undefined;
-} | {
     message?: undefined;
-    count?: undefined;
-    provider?: undefined;
+} | {
     deleted?: undefined;
     providers?: undefined;
+    count?: undefined;
+    provider?: undefined;
     found: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
-} | {
     message?: undefined;
+} | {
+    found?: undefined;
+    providers?: undefined;
     count?: undefined;
     provider?: undefined;
-    providers?: undefined;
-    found?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
+    message?: undefined;
 } | {
-    count?: undefined;
-    provider?: undefined;
+    found?: undefined;
     deleted?: undefined;
     providers?: undefined;
-    found?: undefined;
+    count?: undefined;
+    provider?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -311,8 +311,11 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
-        deleted?: undefined;
         id?: undefined;
+        provider?: undefined;
+        deleted?: undefined;
+        found?: undefined;
+        message?: undefined;
         providers: {
             id: string;
             label: string;
@@ -323,47 +326,44 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
-        provider?: undefined;
-        found?: undefined;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
-        deleted?: undefined;
         id?: undefined;
+        deleted?: undefined;
+        message?: undefined;
         providers?: undefined;
         count?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
+        provider?: undefined;
         deleted?: undefined;
+        message?: undefined;
         providers?: undefined;
         count?: undefined;
-        provider?: undefined;
         found: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
-        providers?: undefined;
-        count?: undefined;
         provider?: undefined;
         found?: undefined;
+        message?: undefined;
+        providers?: undefined;
+        count?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
+        provider?: undefined;
         deleted?: undefined;
+        found?: undefined;
         providers?: undefined;
         count?: undefined;
-        provider?: undefined;
-        found?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/provider-api/corpus-jobs.d.ts

@@ -73,7 +73,6 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     offset?: unknown;
     limit?: unknown;
 }, {
-    deleted?: undefined;
     jobs: {
         id: string;
         name: string;
@@ -84,6 +83,7 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
         updatedAt: string;
     }[];
     total: number;
+    deleted?: undefined;
     jobId?: undefined;
 } | {
     jobs?: undefined;
@@ -91,9 +91,9 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     deleted: boolean;
     jobId: string;
 } | {
-    deleted?: undefined;
     jobs?: undefined;
     total?: undefined;
+    deleted?: undefined;
     jobId?: undefined;
     hits: Record<string, unknown>[];
     offset: number;

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/secrets/routes.d.ts

@@ -34,37 +34,37 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    status?: undefined;
     ok?: undefined;
+    status?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     status: string;
-    error?: undefined;
 } | {
+    ok?: undefined;
     error: string;
     removed?: undefined;
-    ok?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
  * or the current stored value without changing anything.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+    ok?: undefined;
     error: string;
     note?: undefined;
-    ok?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note?: undefined;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note: string;
-    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,11 +95,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;

package/dist/server/action-routes.d.ts

@@ -14,12 +14,14 @@ export type ActionRouteResolvedCaller = AgentRunOwnerContext & {
      * Org to scope the request to, verified from the same credential as the
      * caller identity (e.g. the A2A token's org claim). When omitted, the org
      * is derived from the verified owner email via the framework's owner→org
-     * membership lookup. The ambient session/org state on the request is never
-     * consulted for adapter-resolved callers: a request can carry both a valid
-     * A2A bearer and an unrelated browser cookie, and the cookie user's org
-     * must not leak into the token caller's request context.
+     * membership lookup. An explicit `null` means the verified caller has no
+     * org and must not fall back to another membership. The ambient session/org
+     * state on the request is never consulted for adapter-resolved callers: a
+     * request can carry both a valid A2A bearer and an unrelated browser cookie,
+     * and the cookie user's org must not leak into the token caller's request
+     * context.
      */
-    orgId?: string;
+    orgId?: string | null;
     /** Verified A2A correlation and issuer metadata for the audit row. */
     delegationJti?: string;
     delegationIssuer?: string;

package/dist/server/action-routes.js

@@ -3,12 +3,13 @@ import { verifyA2ATokenWithClaims } from "../a2a-claims.js";
 import { isActionContractError, isAgentActionStopError } from "../action.js";
 import { isTransientDatabaseError } from "../db/client.js";
 import { declaresFeatureFlagDelegation } from "../feature-flags/a2a-action-route.js";
+import { isFeatureFlagAdminEmail } from "../feature-flags/permissions.js";
 import { resolveOrgByDomain, resolveOrgIdForEmail } from "../org/context.js";
 import { readBody } from "../server/h3-helpers.js";
 import { EMBED_TARGET_HEADER } from "../shared/embed-auth.js";
 import { isMcpEmbedCorsOrigin, MCP_EMBED_CORS_ALLOW_HEADERS, shouldAllowMcpEmbedCredentials, } from "../shared/mcp-embed-headers.js";
 import { actionCallIsReadOnly, notifyActionChange } from "./action-change.js";
-import { readBrowserSessionIdHeader, seedAgentRunOwnerContext, } from "./agent-run-context.js";
+import { readBrowserSessionIdHeader, readAnalyticsClientPlatformHeader, seedAgentRunOwnerContext, } from "./agent-run-context.js";
 import { captureError } from "./capture-error.js";
 import { getAllowedCorsOrigin as resolveAllowedCorsOrigin, readCorsAllowedOrigins, } from "./cors-origins.js";
 import { resolveEmbedSessionFromRequest, resolvedEmbedCapabilityScope, } from "./embed-session.js";
@@ -55,7 +56,7 @@ async function resolveFeatureFlagA2ACaller(event, actionName) {
     if (!claims || !claims.scope.includes(required))
         throw new Error("Invalid feature flag delegation");
     const localOrg = await resolveOrgByDomain(claims.orgDomain);
-    if (!localOrg)
+    if (!localOrg && !isFeatureFlagAdminEmail(claims.email))
         throw new Error("Invalid feature flag delegation");
     if (actionName === "set-feature-flag" &&
         (await consumeOneTimeJti(claims.jti))) {
@@ -63,7 +64,7 @@ async function resolveFeatureFlagA2ACaller(event, actionName) {
     }
     return {
         owner: claims.email,
-        orgId: localOrg.orgId,
+        orgId: localOrg?.orgId ?? null,
         anonymous: false,
         delegationJti: claims.jti,
         delegationIssuer: claims.issuer,
@@ -167,7 +168,7 @@ function handleOptionsRequest(event) {
         }
         setResponseHeader(event, "Access-Control-Allow-Methods", "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS");
         setResponseHeader(event, "Access-Control-Allow-Headers", cors.credentials
-            ? `Content-Type,Authorization,X-Requested-With,X-Request-Source,X-Agent-Native-CSRF,X-User-Timezone,X-Agent-Native-Session-Id,X-Agent-Native-Tool-Bridge,X-Agent-Native-Tool-Id,X-Agent-Native-Frontend,X-Agent-Native-Client-Compatibility,X-Agent-Native-Build-Id,${EMBED_TARGET_HEADER}`
+            ? `Content-Type,Authorization,X-Requested-With,X-Request-Source,X-Agent-Native-CSRF,X-User-Timezone,X-Agent-Native-Session-Id,X-Agent-Native-Client-Platform,X-Agent-Native-Tool-Bridge,X-Agent-Native-Tool-Id,X-Agent-Native-Frontend,X-Agent-Native-Client-Compatibility,X-Agent-Native-Build-Id,${EMBED_TARGET_HEADER}`
             : `${MCP_EMBED_CORS_ALLOW_HEADERS},X-Agent-Native-Tool-Bridge,X-Agent-Native-Tool-Id,X-Agent-Native-Frontend,X-Agent-Native-Client-Compatibility,X-Agent-Native-Build-Id`);
     }
     setResponseStatus(event, 204);
@@ -362,7 +363,8 @@ export function mountActionRoutes(nitroApp, actions, options) {
             }
             // Org scoping. For adapter-resolved callers the org must come
             // exclusively from the verified credential: the adapter-asserted
-            // orgId when present, otherwise the owner-email membership lookup.
+            // orgId when present, explicit null when the caller has no org,
+            // otherwise the owner-email membership lookup.
             // The request's ambient session/org state (`resolveOrgId`, usually
             // getSession-backed) is deliberately NOT consulted — a request can
             // carry both a valid A2A bearer and an unrelated same-origin browser
@@ -372,7 +374,10 @@ export function mountActionRoutes(nitroApp, actions, options) {
             let orgId;
             if (resolvedCaller) {
                 orgId = normalizeOrgId(resolvedCaller.orgId);
-                if (!orgId && resolvedCaller.owner && !resolvedCaller.anonymous) {
+                if (resolvedCaller.orgId !== null &&
+                    !orgId &&
+                    resolvedCaller.owner &&
+                    !resolvedCaller.anonymous) {
                     orgId = await storedActiveOrgId(resolvedCaller.owner);
                 }
             }
@@ -385,6 +390,7 @@ export function mountActionRoutes(nitroApp, actions, options) {
             }
             const timezone = readTimezoneHeader(event);
             const browserSessionId = readBrowserSessionIdHeader(event);
+            const clientPlatform = readAnalyticsClientPlatformHeader(event);
             return runWithRequestContext({
                 userEmail,
                 userName,
@@ -392,6 +398,7 @@ export function mountActionRoutes(nitroApp, actions, options) {
                 authCapability,
                 timezone,
                 browserSessionId,
+                clientPlatform,
                 requestOrigin: getRequestURL(event).origin,
                 // Captured here because this is the last layer that still holds
                 // the h3 event; everything below reads it off the request store.

package/dist/server/agent-chat-plugin.js

@@ -35,6 +35,7 @@ import { getSkillNameFromPath } from "../resources/metadata.js";
 import { resourceList, resourceListAccessible, resourceGet, ensurePersonalDefaults, SHARED_OWNER, WORKSPACE_OWNER, } from "../resources/store.js";
 import { normalizeDatabaseToolsMode } from "../scripts/db/tool-mode.js";
 import { getSetting, putSetting } from "../settings/store.js";
+import { ANALYTICS_CLIENT_PLATFORM_BODY_FIELD, normalizeAnalyticsClientPlatform, } from "../shared/analytics-platform.js";
 import { docsUrl } from "../shared/docs-url.js";
 import { handleSharedThreadRequest, } from "./agent-chat/shared-thread.js";
 import { discoverAgents } from "./agent-discovery.js";
@@ -4909,6 +4910,11 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                     // is already consumed, so the handler reads this instead.
                     event.context = event.context ?? {};
                     event.context.__agentChatBackgroundBody = workerBody;
+                    const persistedClientPlatform = normalizeAnalyticsClientPlatform(workerBody[ANALYTICS_CLIENT_PLATFORM_BODY_FIELD]);
+                    if (persistedClientPlatform) {
+                        event.context[ANALYTICS_CLIENT_PLATFORM_BODY_FIELD] =
+                            persistedClientPlatform;
+                    }
                     // Durable owner context: this self-dispatch is cookieless (HMAC-only).
                     // Resolve the owner from the persisted run row, never the request
                     // body, then invoke the normal handler. The shared agent-run context