@agent-native/core 0.157.8 → 0.157.10

package/dist/triggers/actions.js

@@ -10,6 +10,7 @@
  */
 import { defineAutomation, deleteAutomation, listAutomationDefinitions, updateAutomation, } from "../automations/service.js";
 import { listEvents } from "../event-bus/index.js";
+import { getRemoteExecutionCapabilities, listRemoteDevicesForOwner, } from "../integrations/remote-devices-store.js";
 import { describeCron, effectiveTimezone } from "../jobs/cron.js";
 import { queueAutomationRunNow } from "../jobs/run-now.js";
 import { getIntegrationRequestContext, getRequestOrgId, } from "../server/request-context.js";
@@ -41,6 +42,27 @@ async function handleListEvents() {
     });
     return lines.join("\n");
 }
+async function handleListHosts(getCurrentUser) {
+    const devices = await listRemoteDevicesForOwner({
+        ownerEmail: getCurrentUser(),
+        orgId: getRequestOrgId(),
+        status: "active",
+        limit: 50,
+    });
+    const now = Date.now();
+    return JSON.stringify(devices.map((device) => ({
+        id: device.id,
+        name: device.label,
+        platform: device.platform,
+        hostName: device.hostName,
+        status: device.status,
+        online: device.lastSeenAt !== null && now - device.lastSeenAt <= 90_000,
+        lastSeenAt: device.lastSeenAt
+            ? new Date(device.lastSeenAt).toISOString()
+            : null,
+        executionCapabilities: getRemoteExecutionCapabilities(device),
+    })), null, 2);
+}
 async function handleList(args, getCurrentUser, appId) {
     const scope = automationScope(args.scope);
     const definitions = await listAutomationDefinitions({ userEmail: getCurrentUser(), orgId: getRequestOrgId(), appId }, scope);
@@ -69,6 +91,9 @@ async function handleList(args, getCurrentUser, appId) {
         createdBy: meta.createdBy ?? null,
         runAs: meta.runAs ?? null,
         model: meta.model ?? null,
+        executionHostId: meta.executionHostId ?? null,
+        executionEngine: meta.executionEngine ?? null,
+        executionCwd: meta.executionCwd ?? null,
         mcpTools: meta.mcpTools ?? [],
         originScopeId: meta.originScopeId ?? null,
         deliveryPlatform: meta.deliveryPlatform ?? null,
@@ -118,6 +143,15 @@ async function handleDefine(args, getCurrentUser, appId) {
                 ? args.delegated_policy_id
                 : undefined,
             model: typeof args.model === "string" ? args.model : undefined,
+            executionHostId: typeof args.execution_host_id === "string"
+                ? args.execution_host_id
+                : undefined,
+            executionEngine: typeof args.execution_engine === "string"
+                ? args.execution_engine
+                : undefined,
+            executionCwd: typeof args.execution_cwd === "string"
+                ? args.execution_cwd
+                : undefined,
             mcpTools: args.mcpTools,
             delivery: integration
                 ? {
@@ -147,6 +181,9 @@ async function handleDefine(args, getCurrentUser, appId) {
             createdBy: definition.meta.createdBy,
             runAs: definition.meta.runAs,
             model: definition.meta.model ?? null,
+            executionHostId: definition.meta.executionHostId ?? null,
+            executionEngine: definition.meta.executionEngine ?? null,
+            executionCwd: definition.meta.executionCwd ?? null,
             mcpTools: definition.meta.mcpTools ?? [],
             originScopeId: definition.meta.originScopeId ?? null,
             deliveryPlatform: definition.meta.deliveryPlatform ?? null,
@@ -185,6 +222,21 @@ async function handleUpdate(args, getCurrentUser, appId) {
                 : typeof args.model === "string"
                     ? args.model
                     : null,
+            executionHostId: args.execution_host_id === undefined
+                ? undefined
+                : typeof args.execution_host_id === "string"
+                    ? args.execution_host_id
+                    : null,
+            executionEngine: args.execution_engine === undefined
+                ? undefined
+                : typeof args.execution_engine === "string"
+                    ? args.execution_engine
+                    : null,
+            executionCwd: args.execution_cwd === undefined
+                ? undefined
+                : typeof args.execution_cwd === "string"
+                    ? args.execution_cwd
+                    : null,
             mcpTools: args.mcpTools,
         });
         await refreshEventSubscriptions();
@@ -200,6 +252,9 @@ async function handleUpdate(args, getCurrentUser, appId) {
             createdBy: definition.meta.createdBy,
             runAs: definition.meta.runAs,
             model: definition.meta.model ?? null,
+            executionHostId: definition.meta.executionHostId ?? null,
+            executionEngine: definition.meta.executionEngine ?? null,
+            executionCwd: definition.meta.executionCwd ?? null,
             mcpTools: definition.meta.mcpTools ?? [],
             originScopeId: definition.meta.originScopeId ?? null,
             deliveryPlatform: definition.meta.deliveryPlatform ?? null,
@@ -264,6 +319,7 @@ async function handleRunNow(args, getCurrentUser, appId, context) {
 /* ------------------------------------------------------------------ */
 const VALID_ACTIONS = [
     "list-events",
+    "list-hosts",
     "list",
     "define",
     "update",
@@ -278,9 +334,10 @@ export function createAutomationToolEntries(getCurrentUser, appId) {
                 description: `Manage automations (event-triggered and scheduled tasks). Use the "action" parameter to choose an operation:
 
 - **list-events**: List all registered event types that automations can subscribe to. Returns event names, descriptions, and payload schemas. Call this BEFORE defining an automation to discover available events.
-- **list**: List all automations (triggers). Shows trigger, status, model, MCP allowlist, and delivery metadata. Optional params: scope, domain, enabled_only.
-- **define**: Create a new automation. IMPORTANT: Always confirm with the user before calling — show them a summary of what will be created. Required params: name, trigger_type, body. Optional: scope, event, schedule, timezone, condition, mode, domain, delegated_policy_id, model, mcpTools. A scheduled automation with no schedule defaults to once per hour; use an event trigger when it should run only when something changes.
-- **update**: Update an existing automation's settings without changing its creator (enabled, schedule, timezone, condition, body, policy, model, MCP allowlist). Required param: name. Use the same scope it was created in.
+- **list-hosts**: List paired execution hosts and their non-secret capabilities. Call this before assigning execution_host_id.
+- **list**: List all automations (triggers). Shows trigger, status, model, execution host, MCP allowlist, and delivery metadata. Optional params: scope, domain, enabled_only.
+- **define**: Create a new automation. IMPORTANT: Always confirm with the user before calling — show them a summary of what will be created. Required params: name, trigger_type, body. Optional: scope, event, schedule, timezone, condition, mode, domain, delegated_policy_id, model, execution_host_id, execution_engine, execution_cwd, mcpTools. A scheduled automation with no schedule defaults to once per hour; use an event trigger when it should run only when something changes. Host-targeted automations queue code-agent work on that host and do not silently fall back to this server.
+- **update**: Update an existing automation's settings without changing its creator (enabled, schedule, timezone, condition, body, policy, model, execution host, MCP allowlist). Required param: name. Use the same scope it was created in.
 - **delete**: Delete an automation. Always confirm with the user first. Required param: name.
 - **fire-test**: Fire a test event to validate automations. Emits a test.event.fired event. Optional param: data (JSON string).
 - **run-now**: Run one automation immediately using its real actions and side effects. This is an explicit user-authorized run and returns a durable run id; it does not change the automation's next scheduled run. Required params: name; optional scope.`,
@@ -289,7 +346,7 @@ export function createAutomationToolEntries(getCurrentUser, appId) {
                     properties: {
                         action: {
                             type: "string",
-                            description: "The operation to perform: list-events, list, define, update, delete, fire-test, or run-now.",
+                            description: "The operation to perform: list-events, list-hosts, list, define, update, delete, fire-test, or run-now.",
                             enum: [...VALID_ACTIONS],
                         },
                         name: {
@@ -335,6 +392,18 @@ export function createAutomationToolEntries(getCurrentUser, appId) {
                             type: "string",
                             description: "Optional model id for this automation. The default model is used when omitted.",
                         },
+                        execution_host_id: {
+                            type: "string",
+                            description: "Optional exact paired host id for scheduled code-agent execution. Call list-hosts first; a selected host is never silently replaced by another host.",
+                        },
+                        execution_engine: {
+                            type: "string",
+                            description: "Optional host engine id, such as codex-cli or claude-cli. It must be advertised by the selected host when host capabilities include an engine list.",
+                        },
+                        execution_cwd: {
+                            type: "string",
+                            description: "Optional workspace path on the execution host. Use the host connector's configured workspace when omitted.",
+                        },
                         mcpTools: {
                             type: "array",
                             items: { type: "string" },
@@ -365,17 +434,23 @@ export function createAutomationToolEntries(getCurrentUser, appId) {
                 },
             },
             planMode: {
-                effect: (args) => args.action === "list" || args.action === "list-events"
+                effect: (args) => args.action === "list" ||
+                    args.action === "list-events" ||
+                    args.action === "list-hosts"
                     ? "read"
                     : "write",
-                allowedValues: { action: ["list-events", "list"] },
-                description: "Plan mode allows listing automations and event types.",
+                allowedValues: {
+                    action: ["list-events", "list-hosts", "list"],
+                },
+                description: "Plan mode allows listing automations, execution hosts, and event types.",
             },
             run: async (args, context) => {
                 const action = args.action;
                 switch (action) {
                     case "list-events":
                         return handleListEvents();
+                    case "list-hosts":
+                        return handleListHosts(getCurrentUser);
                     case "list":
                         return handleList(args, getCurrentUser, appId);
                     case "define":

package/dist/usage/migrations.d.ts

@@ -0,0 +1,4 @@
+import type { MigrationEntry } from "../db/migrations.js";
+export declare const USAGE_ALERT_MIGRATIONS_TABLE = "_usage_alert_migrations";
+/** Authoritative release-time schema for usage alert rules and events. */
+export declare const USAGE_ALERT_MIGRATIONS: MigrationEntry[];

package/dist/usage/migrations.js

@@ -0,0 +1,45 @@
+export const USAGE_ALERT_MIGRATIONS_TABLE = "_usage_alert_migrations";
+/** Authoritative release-time schema for usage alert rules and events. */
+export const USAGE_ALERT_MIGRATIONS = [
+    {
+        version: 1,
+        name: "usage-alert-rules-and-events-tables",
+        sql: `
+      CREATE TABLE IF NOT EXISTS usage_alert_rules (
+        id TEXT PRIMARY KEY,
+        scope TEXT NOT NULL,
+        owner_email TEXT NOT NULL,
+        org_id TEXT,
+        app_id TEXT,
+        unit TEXT NOT NULL,
+        period TEXT NOT NULL,
+        limit_value INTEGER NOT NULL,
+        channels TEXT NOT NULL,
+        enabled INTEGER NOT NULL DEFAULT 1,
+        dismissed_window_start INTEGER,
+        created_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL
+      );
+      CREATE TABLE IF NOT EXISTS usage_alert_events (
+        id TEXT PRIMARY KEY,
+        rule_id TEXT NOT NULL,
+        window_start INTEGER NOT NULL,
+        created_at INTEGER NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS idx_usage_alert_rules_owner
+        ON usage_alert_rules (owner_email, org_id, scope);
+      CREATE UNIQUE INDEX IF NOT EXISTS idx_usage_alert_events_rule_window
+        ON usage_alert_events (rule_id, window_start)
+    `,
+    },
+    {
+        version: 2,
+        name: "usage-alert-default-column",
+        sql: `ALTER TABLE usage_alert_rules ADD COLUMN IF NOT EXISTS is_default INTEGER NOT NULL DEFAULT 0`,
+    },
+    {
+        version: 3,
+        name: "usage-alert-notification-column",
+        sql: "ALTER TABLE usage_alert_events ADD COLUMN IF NOT EXISTS notification_id TEXT",
+    },
+];

package/docs/content/template-content-developers.mdx

@@ -312,6 +312,51 @@ Every operation is a TypeScript file in `templates/content/actions/`, auto-mount
 
 ## Customizing it
 
+### Data grid boundary {#data-grid}
+
+Content's database table view composes the reusable `DataGrid` component from
+`@agent-native/toolkit/data-grid`. The adapter is
+`app/components/editor/database/DatabaseView.tsx`.
+
+Toolkit supplies the shared spreadsheet mechanics: keyboard navigation,
+active-cell behavior, the scroll surface, and the optional selection and column
+width callbacks. Content supplies `ContentDatabaseItem` rows and typed
+columns, then keeps database-specific property rendering, grouping, filters,
+row drag and drop, previews, access checks, and action-backed mutations in the
+app.
+
+The table preserves its existing Content surface through the grid's custom
+slots and scroll-container props:
+
+```tsx filename="app/components/editor/database/DatabaseView.tsx"
+import { DataGrid, type DataGridColumn } from "@agent-native/toolkit/data-grid";
+import type { ContentDatabaseItem } from "@shared/api";
+
+const dataGridColumns: readonly DataGridColumn<ContentDatabaseItem>[] = [
+  // Content maps its name, property, and action columns here.
+];
+
+<DataGrid
+  rows={items}
+  columns={dataGridColumns}
+  getRowId={(item) => item.id}
+  columnWidths={columnWidths}
+  contentClassName="min-w-[720px]"
+  scrollContainerProps={{
+    "data-database-scroll-surface": "table",
+    tabIndex: 0,
+  }}
+/>;
+```
+
+The live implementation also supplies Content's custom `renderHeader` and
+`renderBody` callbacks around this shell.
+
+Do not move Content database models, access checks, grouping, drag and drop,
+or domain actions into Toolkit. If a change is reusable spreadsheet behavior,
+extend the Toolkit contract first. If it describes how Content rows behave,
+keep it in the app adapter and its actions.
+
 <AnnotatedCode
   id="doc-block-content10"
   title="A soft-delete action reusing shared trash logic"
@@ -343,6 +388,9 @@ The places to look when changing behavior:
 
 - **`actions/`** — every operation the agent or UI can perform. Add a new file like `actions/publish-to-wordpress.ts` using `defineAction` and both sides get it for free.
 - **`app/routes/`** — the page surface described above.
+- **`app/components/editor/database/DatabaseView.tsx`** — the Content database
+  table adapter. It composes `@agent-native/toolkit/data-grid` while keeping
+  database-specific rendering and actions local.
 - **`app/components/editor/`** — the Tiptap editor. Add a new node type under `extensions/` and register it in `DocumentEditor.tsx`. The bubble toolbar, slash menu, and hover previews are all component files you can edit.
 - **`.agents/skills/`** — guidance the agent reads before acting: `content`, `document-editing`, `notion-integration`, `creative-context`, plus the framework skills. Add a new skill folder when you add a capability big enough to need its own guidance.
 - **`AGENTS.md`** — the top-level agent guide with the action cheatsheet. Update it whenever you add a feature so the agent discovers it without exploring.

package/docs/content/toolkit-ui.mdx

@@ -121,6 +121,63 @@ open state rather than shadcn variant names. When both APIs provide the button,
 falls back to Toolkit’s default adapter without disabling the rest of the
 registered system.
 
+## Data grid kit {#data-grid}
+
+`@agent-native/toolkit/data-grid` provides a Core-free, spreadsheet-like grid
+surface. The app supplies rows, typed columns, editor slots, selection state,
+and persistence callbacks. The kit provides keyboard navigation, active-cell
+behavior, optional selection, column sizing, and the scroll surface.
+
+The grid does not fetch data, call actions, resolve credentials, or persist
+edits. Use `renderHeader`, `renderBody`, `renderRow`, and `renderFooter` when an
+app needs to keep its own headers, grouping, row actions, or summary rows.
+
+| Export                       | Purpose                                                                |
+| ---------------------------- | ---------------------------------------------------------------------- |
+| `<DataGrid>`                 | Render rows and columns with shared grid mechanics.                    |
+| `DataGridColumn<Row>`        | Describe a typed column, including values, widths, cells, and editors. |
+| `clampDataGridColumnWidth()` | Clamp an app-owned width to a column's configured bounds.              |
+| `dataGridColumnTemplate()`   | Build the shared CSS grid template for custom slots.                   |
+
+The smallest adapter only supplies rows, columns, and stable row IDs:
+
+```tsx
+import { DataGrid, type DataGridColumn } from "@agent-native/toolkit/data-grid";
+
+type Row = { id: string; title: string };
+
+const columns: readonly DataGridColumn<Row>[] = [
+  {
+    id: "title",
+    label: "Title",
+    getValue: (row) => row.title,
+  },
+];
+
+<DataGrid rows={rows} columns={columns} getRowId={(row) => row.id} />;
+```
+
+Make selection and column widths controlled when the app needs to save them in
+its own state or database view preferences:
+
+```tsx
+<DataGrid
+  rows={rows}
+  columns={columns}
+  getRowId={(row) => row.id}
+  selection="multiple"
+  selectedRowIds={selectedRowIds}
+  onSelectedRowIdsChange={setSelectedRowIds}
+  columnWidths={columnWidths}
+  onColumnWidthsChange={setColumnWidths}
+/>
+```
+
+Content uses this surface in its database table view. `DatabaseView.tsx` keeps
+Content-specific property rendering, grouping, row drag and drop, selection
+actions, and row previews in the app while the Toolkit component supplies the
+shared grid mechanics. Use the [Content Developer Guide](/docs/template-content-developers#data-grid) when changing that adapter.
+
 ## Shell hooks {#shell-hooks}
 
 Toolkit includes small shell helpers and hooks that are useful across apps:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.157.8",
+  "version": "0.157.10",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -385,7 +385,7 @@
     "@tanstack/react-table": "^8.21.3",
     "@uiw/react-codemirror": "^4.25.10",
     "ajv": "^8.20.0",
-    "better-auth": "1.6.16",
+    "better-auth": "1.6.28",
     "better-sqlite3": "^12.8.0",
     "botframework-connector": "^4.23.3",
     "clsx": "^2.1.1",
@@ -426,7 +426,7 @@
     "yjs": "^13.6.31",
     "zod": "^4.3.6",
     "@agent-native/recap-cli": "0.5.4",
-    "@agent-native/toolkit": "^0.16.1"
+    "@agent-native/toolkit": "^0.16.3"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",