@agent-native/core 0.161.8 → 0.161.10

package/dist/agent/chat-health-alert.js

@@ -0,0 +1,132 @@
+import { getDbExec } from "../db/client.js";
+import { notify } from "../notifications/registry.js";
+import { getSetting, putSetting } from "../settings/store.js";
+/**
+ * Pages the people who can act when an app's chat stops answering.
+ *
+ * The detector for this already existed as `scripts/chat-health.mjs --strict`,
+ * correctly calibrated and exiting 1 on a partial outage — but nothing ever ran
+ * it and nothing ever paged, so an app answering 11% of its turns was found by
+ * a user posting in Slack. This is the missing half: the same measurement, on
+ * the durable sweep that already drives stale reaping, scoped to the one app it
+ * runs in so no cross-app credential has to exist anywhere.
+ */
+/** Turns are scored over this window on every sweep. */
+const WINDOW_MS = 60 * 60_000;
+/**
+ * Below this, a rate is noise: one failed turn out of two is 50% and means
+ * nothing. Chat-health's own fleet view showed apps sitting at 100% on a single
+ * turn all day.
+ */
+const MIN_TURNS = 5;
+/**
+ * Deliberately far above `chat-health`'s 0.1 review budget. That threshold
+ * answers "is this app degraded", which is a question for a dashboard. This one
+ * answers "is chat down", which is the only question worth waking someone for.
+ */
+const BAD_RATE_THRESHOLD = 0.5;
+/** One page per outage, not one per sweep. */
+const COOLDOWN_MS = 60 * 60_000;
+const LAST_ALERT_SETTING_KEY = "chat-health-alert:last-paged-at";
+/**
+ * Scores the LAST run of each turn in the window, matching how
+ * `scripts/chat-health.mjs` reports so a page and the CLI never disagree.
+ * User-stopped turns are excluded: someone hitting Stop is not an outage.
+ */
+async function countRecentTurns(since) {
+    const { rows } = await getDbExec().execute({
+        sql: `WITH ranked AS (
+            SELECT turn_id, status,
+                   ROW_NUMBER() OVER (
+                     PARTITION BY turn_id ORDER BY started_at DESC
+                   ) AS rn
+            FROM agent_runs
+            WHERE started_at >= ?
+              AND turn_id IS NOT NULL
+              AND id NOT LIKE 'job-%'
+          )
+          SELECT COUNT(*) AS turns,
+                 SUM(CASE WHEN status = 'errored' THEN 1 ELSE 0 END) AS bad
+          FROM ranked
+          WHERE rn = 1 AND status <> 'aborted'`,
+        args: [since],
+    });
+    const row = rows[0];
+    return {
+        turns: Number(row?.turns ?? 0),
+        bad: Number(row?.bad ?? 0),
+    };
+}
+/** Owners and admins — the people who can actually change a model or a key. */
+async function alertRecipients() {
+    const { rows } = await getDbExec().execute({
+        sql: `SELECT DISTINCT email FROM org_members
+          WHERE role IN ('owner', 'admin')`,
+        args: [],
+    });
+    return rows
+        .map((r) => String(r.email ?? ""))
+        .filter(Boolean);
+}
+export async function checkChatHealthAndAlert(now = Date.now()) {
+    let counts;
+    try {
+        counts = await countRecentTurns(now - WINDOW_MS);
+    }
+    catch (error) {
+        // A check that could not read the ledger has not found the app healthy.
+        return { status: "check-failed", reason: String(error) };
+    }
+    if (counts.turns < MIN_TURNS) {
+        return { status: "insufficient-data", turns: counts.turns };
+    }
+    const badRate = counts.bad / counts.turns;
+    if (badRate < BAD_RATE_THRESHOLD) {
+        return { status: "healthy", turns: counts.turns, badRate };
+    }
+    const stored = await getSetting(LAST_ALERT_SETTING_KEY).catch(() => null);
+    const lastPagedAt = Number(stored?.at ?? 0);
+    if (Number.isFinite(lastPagedAt) && now - lastPagedAt < COOLDOWN_MS) {
+        return {
+            status: "cooldown",
+            retryAfterMs: COOLDOWN_MS - (now - lastPagedAt),
+        };
+    }
+    let recipients;
+    try {
+        recipients = await alertRecipients();
+    }
+    catch (error) {
+        return { status: "check-failed", reason: String(error) };
+    }
+    const pct = Math.round(badRate * 100);
+    for (const owner of recipients) {
+        await notify({
+            severity: "critical",
+            title: `Chat is failing: ${pct}% of turns ended without an answer`,
+            body: `${counts.bad} of ${counts.turns} turns in the last hour ended without ` +
+                `an answer. Run \`node scripts/chat-health.mjs --hours 1\` for the ` +
+                `per-reason breakdown.`,
+            metadata: {
+                turns: counts.turns,
+                bad: counts.bad,
+                badRate,
+                windowMs: WINDOW_MS,
+            },
+        }, { owner }).catch((error) => {
+            // One undeliverable recipient must not suppress the rest.
+            console.error("[chat-health-alert] notify failed for a recipient:", error);
+        });
+    }
+    // Stamped only after an attempt was actually made, so a failed page retries
+    // on the next sweep instead of being silenced by its own cooldown.
+    await putSetting(LAST_ALERT_SETTING_KEY, { at: now }).catch((error) => {
+        console.error("[chat-health-alert] could not stamp cooldown:", error);
+    });
+    return {
+        status: "alerted",
+        turns: counts.turns,
+        badRate,
+        recipients: recipients.length,
+    };
+}

package/dist/client/RuntimeConfigNotice.js

@@ -3,6 +3,7 @@ import { IconAlertCircle, IconAlertTriangle, IconCheck, IconChevronDown, IconChe
 import { useEffect, useMemo, useState } from "react";
 import { parseRuntimeConfigReport, } from "../shared/runtime-config.js";
 import { agentNativePath } from "./api-path.js";
+import { agentNativeApiDisabledReason } from "./api-surface.js";
 import { writeClipboardText } from "./clipboard.js";
 import { useT } from "./i18n.js";
 function injectedAppConfig() {
@@ -31,6 +32,8 @@ export function RuntimeConfigNotice() {
     useEffect(() => {
         if (typeof window.fetch !== "function")
             return;
+        if (agentNativeApiDisabledReason())
+            return;
         const controller = new AbortController();
         let active = true;
         const timeout = window.setTimeout(() => controller.abort(), 5000);

package/dist/client/api-surface.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Some surfaces are framed by a host and carry no agent-native session at all —
+ * Builder's Design tab frames a canvas that owns no design row and holds no
+ * credential. Every `/_agent-native/*` call from one is unauthenticated by
+ * construction, so the client must not make them: a 401 per poll buries real
+ * failures, and a write can never land.
+ */
+/** Pass `null` to re-enable, so a surface can be entered and left. */
+export declare function setAgentNativeApiDisabled(reason: string | null): void;
+export declare function agentNativeApiDisabledReason(): string | null;
+/**
+ * Thrown rather than resolved: a caller that cannot tell "no backend" from
+ * "empty result" reports success for work that never happened.
+ */
+export declare class AgentNativeApiDisabledError extends Error {
+    readonly reason: string;
+    constructor(detail: string);
+}
+export declare function assertAgentNativeApiEnabled(detail: string): void;

package/dist/client/api-surface.js

@@ -0,0 +1,32 @@
+/**
+ * Some surfaces are framed by a host and carry no agent-native session at all —
+ * Builder's Design tab frames a canvas that owns no design row and holds no
+ * credential. Every `/_agent-native/*` call from one is unauthenticated by
+ * construction, so the client must not make them: a 401 per poll buries real
+ * failures, and a write can never land.
+ */
+let disabledReason = null;
+/** Pass `null` to re-enable, so a surface can be entered and left. */
+export function setAgentNativeApiDisabled(reason) {
+    disabledReason = reason?.trim() ? reason.trim() : null;
+}
+export function agentNativeApiDisabledReason() {
+    return disabledReason;
+}
+/**
+ * Thrown rather than resolved: a caller that cannot tell "no backend" from
+ * "empty result" reports success for work that never happened.
+ */
+export class AgentNativeApiDisabledError extends Error {
+    reason;
+    constructor(detail) {
+        const reason = disabledReason ?? "unknown surface";
+        super(`agent-native API is disabled on this surface (${reason}): ${detail}`);
+        this.name = "AgentNativeApiDisabledError";
+        this.reason = reason;
+    }
+}
+export function assertAgentNativeApiEnabled(detail) {
+    if (disabledReason)
+        throw new AgentNativeApiDisabledError(detail);
+}

package/dist/client/application-state.js

@@ -1,4 +1,5 @@
 import { agentNativePath } from "./api-path.js";
+import { assertAgentNativeApiEnabled } from "./api-surface.js";
 const APP_STATE_KEY_PATTERN = /^[a-zA-Z0-9_:-]+$/;
 function appStateUrl(key) {
     if (!APP_STATE_KEY_PATTERN.test(key)) {
@@ -63,6 +64,7 @@ function jsonBody(value) {
 /** Server caps a batch at 100 keys; stay under it when splitting. */
 const MAX_BATCH_KEYS = 100;
 export async function readClientAppStateMany(keys, options = {}) {
+    assertAgentNativeApiEnabled(`read application state [${keys.join(", ")}]`);
     const unique = [...new Set(keys)];
     for (const key of unique)
         appStateUrl(key); // validates the key shape
@@ -142,6 +144,7 @@ export async function readClientAppState(key, options = {}) {
     return (batch.values[key] ?? null);
 }
 export async function writeClientAppState(key, value, options = {}) {
+    assertAgentNativeApiEnabled(`write application state "${key}"`);
     const response = await fetch(appStateUrl(key), {
         method: "PUT",
         headers: buildHeaders(options.requestSource),
@@ -152,6 +155,7 @@ export async function writeClientAppState(key, value, options = {}) {
     return parseAppStateResponse(response, `Write application state "${key}"`);
 }
 export async function deleteClientAppState(key, options = {}) {
+    assertAgentNativeApiEnabled(`delete application state "${key}"`);
     const response = await fetch(appStateUrl(key), {
         method: "DELETE",
         // DELETE carries no JSON body, so this custom header is the only

package/dist/client/builder-frame.d.ts

@@ -19,6 +19,12 @@ export interface BuilderChatMessage {
     submit?: boolean;
     mode?: "act" | "plan";
     requestMode?: "act" | "plan";
+    /**
+     * Origin an embedder already verified for itself. `getBuilderParentOrigin()`
+     * needs `?builder.*` params to trust a loopback parent, which a handshake-based
+     * embed never carries — without this the message falls back to `"*"`.
+     */
+    targetOrigin?: string;
 }
 export declare function sendToBuilderChat(opts: BuilderChatMessage): boolean;
 /**

package/dist/client/builder-frame.js

@@ -116,7 +116,7 @@ export function sendToBuilderChat(opts) {
     if (typeof window === "undefined" || !opts.message?.trim())
         return false;
     const hasParentFrame = window.parent !== window;
-    const targetOrigin = getBuilderParentOrigin() ?? "*";
+    const targetOrigin = opts.targetOrigin ?? getBuilderParentOrigin() ?? "*";
     const payload = {
         type: "builder.submitChat",
         data: {

package/dist/client/client-status-requests.js

@@ -1,4 +1,5 @@
 import { agentNativePath } from "./api-path.js";
+import { agentNativeApiDisabledReason } from "./api-surface.js";
 const RESULT_TTL_MS = 500;
 const REQUEST_TIMEOUT_MS = 15_000;
 const cache = new Map();
@@ -31,6 +32,10 @@ function installInvalidationListeners() {
     }
 }
 async function fetchClientStatus(path) {
+    // "unavailable" rather than a fabricated payload: callers already treat it as
+    // "could not read", and there is genuinely nothing to read here.
+    if (agentNativeApiDisabledReason())
+        return { state: "unavailable" };
     installInvalidationListeners();
     const url = agentNativePath(path);
     const cached = cache.get(url);

package/dist/client/host/index.d.ts

@@ -1,4 +1,5 @@
 export { initializeAgentNativeClient } from "../client-bootstrap.js";
+export { agentNativeApiDisabledReason, AgentNativeApiDisabledError, setAgentNativeApiDisabled, } from "../api-surface.js";
 export { ensureEmbedAuthFetchInterceptor, getEmbedAuthToken, isEmbedAuthActive, isEmbedMcpChatBridgeActive, } from "../embed-auth.js";
 export { sendToFrame, onFrameMessage, requestUserInfo, getFrameOrigin, getFramePostMessageTargetOrigin, getCallbackOrigin, oauthRedirectUri, isInFrame, enterStyleEditing, enterTextEditing, exitSelectionMode, type UserInfo, } from "../frame.js";
 export { getBuilderParentOrigin, isInBuilderFrame, sendToBuilderChat, type BuilderChatMessage, } from "../builder-frame.js";

package/dist/client/host/index.js

@@ -1,4 +1,5 @@
 export { initializeAgentNativeClient } from "../client-bootstrap.js";
+export { agentNativeApiDisabledReason, AgentNativeApiDisabledError, setAgentNativeApiDisabled, } from "../api-surface.js";
 export { ensureEmbedAuthFetchInterceptor, getEmbedAuthToken, isEmbedAuthActive, isEmbedMcpChatBridgeActive, } from "../embed-auth.js";
 export { sendToFrame, onFrameMessage, requestUserInfo, getFrameOrigin, getFramePostMessageTargetOrigin, getCallbackOrigin, oauthRedirectUri, isInFrame, enterStyleEditing, enterTextEditing, exitSelectionMode, } from "../frame.js";
 export { getBuilderParentOrigin, isInBuilderFrame, sendToBuilderChat, } from "../builder-frame.js";

package/dist/client/use-action.d.ts

@@ -73,7 +73,7 @@ export declare const ACTION_KEEPALIVE_BODY_BUDGET_BYTES = 48000;
  * `/_agent-native/actions/*` in components.
  */
 export declare function callAction<TResult = undefined, TName extends ActionName = ActionName>(actionName: TName, params?: ActionParams<TName>, options?: ClientActionCallOptions): Promise<TResult extends undefined ? ActionResult<TName> : TResult>;
-export type KeepaliveActionCallRejectionReason = "body-too-large" | "budget-exhausted";
+export type KeepaliveActionCallRejectionReason = "body-too-large" | "budget-exhausted" | "api-disabled";
 export type KeepaliveActionCallResult<TResult> = {
     accepted: true;
     bodyBytes: number;

package/dist/client/use-action.js

@@ -27,6 +27,7 @@ import { getAnalyticsClientPlatform } from "./analytics-platform.js";
 import { getOrCreateAnalyticsSessionId } from "./analytics-session.js";
 import { trackEvent } from "./analytics.js";
 import { agentNativePath } from "./api-path.js";
+import { agentNativeApiDisabledReason, assertAgentNativeApiEnabled, } from "./api-surface.js";
 import { getBrowserTabId } from "./browser-tab-id.js";
 import { clientBuildId, clientCompatibilityVersion, reloadForClientCompatibilityMismatch, } from "./build-compatibility.js";
 import { ensureEmbedAuthFetchInterceptor } from "./embed-auth.js";
@@ -398,6 +399,7 @@ function shouldTrackActionResponse(error, durationMs, response) {
     return Math.random() < rate;
 }
 async function actionFetch(name, method, params, options) {
+    assertAgentNativeApiEnabled(`${method} ${name}`);
     const startedAt = actionTelemetryNow();
     let response;
     let responseAt;
@@ -501,6 +503,16 @@ export function callAction(actionName, params, options = {}) {
 export function tryCallActionKeepalive(actionName, params, options = {}) {
     const serializedBody = JSON.stringify(params ?? {});
     const bodyBytes = utf8ByteLength(serializedBody);
+    // Reported as a refusal rather than thrown: callers keep the work queued on
+    // `accepted: false`, which is the honest outcome for a surface with no backend.
+    if (agentNativeApiDisabledReason()) {
+        return {
+            accepted: false,
+            bodyBytes,
+            reason: "api-disabled",
+            completion: null,
+        };
+    }
     if (bodyBytes > ACTION_KEEPALIVE_BODY_BUDGET_BYTES) {
         return {
             accepted: false,
@@ -547,6 +559,10 @@ export function tryCallActionKeepalive(actionName, params, options = {}) {
  * ```
  */
 export function useActionQuery(actionName, params, options) {
+    // Not `enabled: false` via options: a disabled surface must win over whatever
+    // the caller asked for, and an unfired query reads as "no data" rather than
+    // as an error the UI has to special-case.
+    const apiDisabled = Boolean(agentNativeApiDisabledReason());
     return useQuery({
         queryKey: ["action", actionName, params],
         // Thread React Query's per-fetch AbortSignal into the network request so
@@ -556,6 +572,7 @@ export function useActionQuery(actionName, params, options) {
         retry: defaultActionQueryRetry,
         retryDelay: defaultActionQueryRetryDelay,
         ...options,
+        ...(apiDisabled ? { enabled: false } : {}),
     });
 }
 // ---------------------------------------------------------------------------

package/dist/client/use-session.js

@@ -1,5 +1,6 @@
 import { useCallback, useEffect, useState } from "react";
 import { setSentryUser, trackSessionStatus } from "./analytics.js";
+import { agentNativeApiDisabledReason } from "./api-surface.js";
 import { fetchAuthSessionStatus, invalidateClientStatusRequest, } from "./client-status-requests.js";
 import { getFrameOrigin, getFramePostMessageTargetOrigin } from "./frame.js";
 const SESSION_CACHE_TTL_MS = 30_000;
@@ -98,6 +99,10 @@ export function notifySessionInvalidated() {
     }
 }
 function fetchSharedSession() {
+    // A surface with no agent-native backend is genuinely signed out. `undefined`
+    // would read as "unavailable" and retry until it gave up with an error.
+    if (agentNativeApiDisabledReason())
+        return Promise.resolve(null);
     if (hasFreshSessionCache())
         return Promise.resolve(cachedSession ?? null);
     if (sessionRequest)

package/dist/collab/awareness.d.ts

@@ -62,11 +62,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
-    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
+    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -77,9 +77,9 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
-    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
+    error?: undefined;
 }>>;

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/observability/routes.d.ts

@@ -41,27 +41,27 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
+    error?: undefined;
+    ok?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
+} | {
     error?: undefined;
     ok?: undefined;
-} | {
     summary?: undefined;
     spans?: undefined;
     id: string;
-    error?: undefined;
-    ok?: undefined;
 } | {
+    ok?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
     error: any;
-    ok?: undefined;
 } | {
+    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
-    error?: undefined;
     ok: boolean;
 }>>;

package/dist/progress/routes.d.ts

@@ -15,6 +15,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,7 +75,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    found?: undefined;
+    id?: undefined;
+    provider?: undefined;
     deleted?: undefined;
     providers: {
         id: string;
@@ -87,47 +88,46 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         updatedAt: number;
     }[];
     count: number;
-    provider?: undefined;
+    found?: undefined;
     registered?: undefined;
-    id?: undefined;
     label?: undefined;
     message?: undefined;
 } | {
+    id?: undefined;
     deleted?: undefined;
     providers?: undefined;
     count?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
     registered?: undefined;
-    id?: undefined;
     label?: undefined;
     message?: undefined;
 } | {
+    provider?: undefined;
     deleted?: undefined;
     providers?: undefined;
     count?: undefined;
-    provider?: undefined;
     found: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
     message?: undefined;
 } | {
-    found?: undefined;
+    provider?: undefined;
     providers?: undefined;
     count?: undefined;
-    provider?: undefined;
+    found?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
     message?: undefined;
 } | {
-    found?: undefined;
+    provider?: undefined;
     deleted?: undefined;
     providers?: undefined;
     count?: undefined;
-    provider?: undefined;
+    found?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -312,9 +312,6 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         scope?: "org" | "user" | undefined;
     }, {
         id?: undefined;
-        provider?: undefined;
-        deleted?: undefined;
-        found?: undefined;
         message?: undefined;
         providers: {
             id: string;
@@ -326,44 +323,47 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
+        provider?: undefined;
+        found?: undefined;
+        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
     } | {
         id?: undefined;
-        deleted?: undefined;
         message?: undefined;
         providers?: undefined;
         count?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
+        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
     } | {
-        provider?: undefined;
-        deleted?: undefined;
         message?: undefined;
         providers?: undefined;
         count?: undefined;
+        provider?: undefined;
         found: boolean;
         id: string;
+        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
     } | {
-        provider?: undefined;
-        found?: undefined;
         message?: undefined;
         providers?: undefined;
         count?: undefined;
+        provider?: undefined;
+        found?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
     } | {
-        provider?: undefined;
-        deleted?: undefined;
-        found?: undefined;
         providers?: undefined;
         count?: undefined;
+        provider?: undefined;
+        found?: undefined;
+        deleted?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/provider-api/corpus-jobs.d.ts

@@ -73,6 +73,7 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     offset?: unknown;
     limit?: unknown;
 }, {
+    deleted?: undefined;
     jobs: {
         id: string;
         name: string;
@@ -83,7 +84,6 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
         updatedAt: string;
     }[];
     total: number;
-    deleted?: undefined;
     jobId?: undefined;
 } | {
     jobs?: undefined;
@@ -91,9 +91,9 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     deleted: boolean;
     jobId: string;
 } | {
+    deleted?: undefined;
     jobs?: undefined;
     total?: undefined;
-    deleted?: undefined;
     jobId?: undefined;
     hits: Record<string, unknown>[];
     offset: number;

package/dist/secrets/routes.d.ts

@@ -34,37 +34,37 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    status?: undefined;
     ok?: undefined;
+    status?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     status: string;
-    error?: undefined;
 } | {
+    ok?: undefined;
     error: string;
     removed?: undefined;
-    ok?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
  * or the current stored value without changing anything.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+    ok?: undefined;
     error: string;
     note?: undefined;
-    ok?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note?: undefined;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note: string;
-    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,11 +95,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;