@agent-native/core 0.164.3 → 0.164.11

package/dist/a2a/artifact-response.js

@@ -1,9 +1,19 @@
 import { createHmac, timingSafeEqual } from "node:crypto";
+import { readDeployCredentialEnv } from "../server/credential-provider.js";
+function a2aSecret() {
+    return readDeployCredentialEnv("A2A_SECRET");
+}
+function a2aSecrets() {
+    const secret = a2aSecret();
+    return secret ? [secret] : [];
+}
 const ARTIFACT_IDENTITY_WRITE_TOOLS = new Set([
     "save-monitor",
     "create-form",
     "submit-content-database-form",
     "add-database-item",
+    "upsert-database-item-by-key",
+    "mutate-content-database-block",
     "create-document",
     "update-document",
     "set-document-property",
@@ -44,50 +54,79 @@ const ARTIFACT_RESOURCE_TYPES = new Set([
     "monitor",
     "form",
 ]);
-function persistedArtifactIdentitiesFromMarker(result, secrets = process.env.A2A_SECRET
-    ? [process.env.A2A_SECRET]
-    : []) {
+function persistedArtifactLedgerFromMarker(result, secrets = a2aSecrets(), expectedDelegatedTaskId) {
     if (secrets.length === 0)
-        return [];
-    const match = result.match(/<!--\s*agent-native:persisted-artifacts=([A-Za-z0-9_-]+)\.([a-f0-9]{64})\s*-->/);
-    if (!match)
-        return [];
-    try {
-        const payload = match[1];
-        const supplied = Buffer.from(match[2], "hex");
-        const verified = secrets.some((secret) => {
-            const expected = createHmac("sha256", secret).update(payload).digest();
-            return (supplied.length === expected.length &&
-                timingSafeEqual(supplied, expected));
-        });
-        if (!verified) {
-            return [];
+        return null;
+    const matches = result.matchAll(/<!--\s*agent-native:persisted-artifacts=([A-Za-z0-9_-]+)\.([a-f0-9]{64})\s*-->/g);
+    for (const match of matches) {
+        try {
+            const payload = match[1];
+            const supplied = Buffer.from(match[2], "hex");
+            const verified = secrets.some((secret) => {
+                const expected = createHmac("sha256", secret).update(payload).digest();
+                return (supplied.length === expected.length &&
+                    timingSafeEqual(supplied, expected));
+            });
+            if (!verified)
+                continue;
+            const parsed = JSON.parse(Buffer.from(payload, "base64url").toString());
+            if (Array.isArray(parsed)) {
+                return { version: 1, identities: parsed, mutationReceipts: [] };
+            }
+            const ledger = asRecord(parsed);
+            if (!ledger || ledger.version !== 1)
+                continue;
+            const parsedLedger = {
+                version: 1,
+                identities: Array.isArray(ledger.identities) ? ledger.identities : [],
+                mutationReceipts: Array.isArray(ledger.mutationReceipts)
+                    ? ledger.mutationReceipts
+                    : [],
+                ...(typeof ledger.delegatedTaskId === "string"
+                    ? { delegatedTaskId: ledger.delegatedTaskId }
+                    : {}),
+            };
+            if (expectedDelegatedTaskId &&
+                parsedLedger.delegatedTaskId !== expectedDelegatedTaskId) {
+                continue;
+            }
+            return parsedLedger;
+        }
+        catch {
+            // coercion-ok: malformed signed-marker payloads are untrusted absence, never a successful receipt ledger
+            continue;
         }
-        const parsed = JSON.parse(Buffer.from(payload, "base64url").toString());
-        if (!Array.isArray(parsed))
-            return [];
-        return parsed
-            .slice(0, 12)
-            .filter((identity) => {
-            const item = asRecord(identity);
-            return (!!item &&
-                ARTIFACT_RESOURCE_TYPES.has(item.resourceType) &&
-                typeof item.id === "string" &&
-                typeof item.sourceAction === "string");
-        });
-    }
-    catch {
-        return [];
     }
+    return null;
 }
-function withPersistedArtifactMarker(text, toolResults, secret = process.env.A2A_SECRET) {
-    const verificationSecrets = [secret, process.env.A2A_SECRET].filter((value, index, values) => !!value && values.indexOf(value) === index);
+function persistedArtifactIdentitiesFromMarker(result, secrets = a2aSecrets()) {
+    return (persistedArtifactLedgerFromMarker(result, secrets)?.identities ?? [])
+        .slice(0, 12)
+        .filter((identity) => {
+        const item = asRecord(identity);
+        return (!!item &&
+            ARTIFACT_RESOURCE_TYPES.has(item.resourceType) &&
+            typeof item.id === "string" &&
+            typeof item.sourceAction === "string");
+    });
+}
+function withPersistedArtifactMarker(text, toolResults, secret = a2aSecret(), delegatedTaskId) {
+    const verificationSecrets = [secret, a2aSecret()].filter((value, index, values) => !!value && values.indexOf(value) === index);
     const identities = extractA2AArtifactIdentities(toolResults, {
         persistedArtifactSecrets: verificationSecrets,
     }).slice(0, 12);
-    if (identities.length === 0 || !secret)
+    const mutationReceipts = extractA2APersistedMutationReceipts(toolResults, {
+        persistedArtifactSecrets: secret ? [secret] : [],
+        expectedDelegatedTaskId: delegatedTaskId,
+    }).slice(0, 12);
+    if ((identities.length === 0 && mutationReceipts.length === 0) || !secret)
         return text;
-    const payload = Buffer.from(JSON.stringify(identities)).toString("base64url");
+    const payload = Buffer.from(JSON.stringify({
+        version: 1,
+        identities,
+        mutationReceipts,
+        ...(delegatedTaskId ? { delegatedTaskId } : {}),
+    })).toString("base64url");
     const signature = createHmac("sha256", secret).update(payload).digest("hex");
     const marker = `<!-- ${PERSISTED_ARTIFACT_MARKER}${payload}.${signature} -->`;
     return text ? `${text}\n\n${marker}` : marker;
@@ -474,6 +513,22 @@ function collectArtifacts(results) {
                 documents.set(artifact.id, artifact);
             continue;
         }
+        if (toolResult.tool === "upsert-database-item-by-key" ||
+            toolResult.tool === "mutate-content-database-block") {
+            const receipt = asRecord(parsed.receipt);
+            const receiptRow = asRecord(receipt?.row);
+            const receiptTarget = asRecord(receipt?.target);
+            const rowLink = asRecord(receipt?.rowLink);
+            const rowDocumentId = stringValue(receiptRow?.documentId) ??
+                stringValue(receiptTarget?.rowDocumentId);
+            if (rowDocumentId) {
+                documents.set(rowDocumentId, {
+                    id: rowDocumentId,
+                    url: stringValue(receiptRow?.urlPath) ?? stringValue(rowLink?.urlPath),
+                });
+            }
+            continue;
+        }
         if (toolResult.tool === "create-document" ||
             toolResult.tool === "update-document") {
             if (parsed.conflict === true)
@@ -772,6 +827,175 @@ export function extractA2AArtifactIdentities(results, options = {}) {
     }
     return [...identities.values()];
 }
+function boundedStrings(value) {
+    if (!Array.isArray(value))
+        return undefined;
+    return value
+        .map(stringValue)
+        .filter((item) => !!item)
+        .slice(0, 50);
+}
+function parsePersistedMutationReceipt(value, sourceAction) {
+    const receipt = asRecord(value);
+    const target = asRecord(receipt?.target);
+    const authorityScope = asRecord(target?.authorityScope);
+    const row = asRecord(receipt?.row);
+    const rowLink = asRecord(receipt?.rowLink);
+    const idempotency = asRecord(receipt?.idempotency);
+    const revisions = asRecord(receipt?.revisions);
+    const rowRevisions = asRecord(revisions?.row);
+    const fieldRevisions = asRecord(revisions?.field);
+    const affected = asRecord(receipt?.affected);
+    const readback = asRecord(receipt?.readback);
+    const authorityScopeKind = stringValue(authorityScope?.kind) ??
+        stringValue(target?.authorityScopeKind);
+    const idempotencyResult = stringValue(idempotency?.result);
+    const rowDocumentId = stringValue(row?.documentId) ?? stringValue(target?.rowDocumentId);
+    const urlPath = stringValue(row?.urlPath) ?? stringValue(rowLink?.urlPath);
+    const receiptId = stringValue(receipt?.receiptId);
+    const operation = stringValue(receipt?.operation);
+    const outcome = stringValue(receipt?.outcome);
+    const authorityScopeId = stringValue(authorityScope?.id) ?? stringValue(target?.authorityScopeId);
+    const spaceId = stringValue(target?.spaceId);
+    const databaseId = stringValue(target?.databaseId);
+    const databaseDocumentId = stringValue(target?.databaseDocumentId);
+    const idempotencyKey = stringValue(idempotency?.key);
+    const payloadDigest = stringValue(idempotency?.payloadDigest);
+    if (!receipt ||
+        !target ||
+        (authorityScopeKind !== "personal" &&
+            authorityScopeKind !== "organization") ||
+        (idempotencyResult !== "applied" && idempotencyResult !== "replayed") ||
+        (readback?.verified !== true && receipt.readbackVerified !== true) ||
+        !receiptId ||
+        !operation ||
+        !outcome ||
+        !authorityScopeId ||
+        !spaceId ||
+        !databaseId ||
+        !databaseDocumentId ||
+        !idempotencyKey ||
+        !payloadDigest ||
+        !rowDocumentId ||
+        !urlPath) {
+        return null;
+    }
+    const propertyIds = boundedStrings(affected?.propertyIds);
+    const blockIds = boundedStrings(affected?.blockIds);
+    const deletedBlockIds = boundedStrings(affected?.deletedBlockIds);
+    const order = boundedStrings(affected?.order);
+    const compactAffected = {
+        ...(typeof affected?.title === "boolean" ? { title: affected.title } : {}),
+        ...(propertyIds ? { propertyIds } : {}),
+        ...(blockIds ? { blockIds } : {}),
+        ...(deletedBlockIds ? { deletedBlockIds } : {}),
+        ...(order ? { order } : {}),
+    };
+    const itemId = stringValue(row?.itemId) ?? stringValue(target.itemId);
+    const targetItemId = stringValue(target.itemId);
+    const targetRowDocumentId = stringValue(target.rowDocumentId);
+    const targetPropertyId = stringValue(target.propertyId);
+    const after = stringValue(revisions?.after);
+    const rowBefore = stringValue(rowRevisions?.before) ?? stringValue(revisions?.rowBefore);
+    const rowAfter = stringValue(rowRevisions?.after) ?? stringValue(revisions?.rowAfter);
+    return {
+        receiptId,
+        sourceAction,
+        operation,
+        outcome,
+        target: {
+            authorityScopeKind,
+            authorityScopeId,
+            spaceId,
+            databaseId,
+            databaseDocumentId,
+            ...(targetItemId ? { itemId: targetItemId } : {}),
+            ...(targetRowDocumentId ? { rowDocumentId: targetRowDocumentId } : {}),
+            ...(targetPropertyId ? { propertyId: targetPropertyId } : {}),
+        },
+        row: {
+            ...(itemId ? { itemId } : {}),
+            documentId: rowDocumentId,
+            urlPath,
+        },
+        idempotency: {
+            key: idempotencyKey,
+            result: idempotencyResult,
+            payloadDigest,
+        },
+        revisions: {
+            ...(revisions?.before === null || typeof revisions?.before === "string"
+                ? { before: revisions.before }
+                : {}),
+            ...(after ? { after } : {}),
+            ...(rowBefore ? { rowBefore } : {}),
+            ...(rowAfter ? { rowAfter } : {}),
+            ...(typeof (fieldRevisions?.before ?? revisions?.fieldBefore) === "number"
+                ? {
+                    fieldBefore: (fieldRevisions?.before ??
+                        revisions?.fieldBefore),
+                }
+                : {}),
+            ...(typeof (fieldRevisions?.after ?? revisions?.fieldAfter) === "number"
+                ? {
+                    fieldAfter: (fieldRevisions?.after ??
+                        revisions?.fieldAfter),
+                }
+                : {}),
+        },
+        ...(Object.keys(compactAffected).length > 0
+            ? { affected: compactAffected }
+            : {}),
+        readbackVerified: true,
+    };
+}
+/**
+ * Extract bounded, read-back-verified mutation receipts. Nested agent results
+ * are accepted only through the signed persisted ledger.
+ */
+export function extractA2APersistedMutationReceipts(results, options = {}) {
+    const receipts = new Map();
+    for (const result of results) {
+        if (result.isError === true || result.completedSideEffect === false)
+            continue;
+        if (result.tool === "call-agent") {
+            const nested = persistedArtifactLedgerFromMarker(result.result, options.persistedArtifactSecrets, options.expectedDelegatedTaskId);
+            for (const receipt of nested?.mutationReceipts ?? []) {
+                const parsed = parsePersistedMutationReceipt(receipt, "call-agent");
+                if (parsed)
+                    receipts.set(parsed.receiptId, parsed);
+            }
+            continue;
+        }
+        if (result.tool !== "upsert-database-item-by-key" &&
+            result.tool !== "mutate-content-database-block") {
+            continue;
+        }
+        const parsedResult = parseToolResultJson(result.result);
+        const receipt = parsePersistedMutationReceipt(parsedResult?.receipt, result.tool);
+        if (receipt)
+            receipts.set(receipt.receiptId, receipt);
+    }
+    return [...receipts.values()].slice(0, 12);
+}
+export function appendA2APersistedMutationReceipts(text, toolResults, options = {}) {
+    const receiptSecret = options.persistedArtifactSecret ?? a2aSecret();
+    const receipts = extractA2APersistedMutationReceipts(toolResults, {
+        persistedArtifactSecrets: receiptSecret ? [receiptSecret] : [],
+        expectedDelegatedTaskId: options.delegatedTaskId,
+    }).filter((receipt) => !text.includes(receipt.receiptId));
+    if (receipts.length === 0)
+        return text;
+    const lines = receipts.map((receipt) => {
+        const url = artifactUrl(options.baseUrl, receipt.row.urlPath);
+        const item = receipt.row.itemId ? `; item ID: ${receipt.row.itemId}` : "";
+        return (`- ${receipt.receiptId}: ${receipt.outcome} via ${receipt.sourceAction}; ` +
+            `row ${url} (document ID: ${receipt.row.documentId}${item}); ` +
+            `idempotency: ${receipt.idempotency.result}`);
+    });
+    const section = ["Mutation receipts:", ...lines].join("\n");
+    return text.trim() ? `${text.trim()}\n\n${section}` : section;
+}
 function parseDownstreamArtifactBlock(result) {
     const artifacts = [];
     for (const line of downstreamArtifactLines(result)) {
@@ -1076,9 +1300,12 @@ function formatUnverifiedArtifactMessage(refs, documents, decks, dashboards, ana
 export function guardA2AArtifactResponse(responseText, toolResults, options = {}) {
     const baseUrl = normalizeBaseUrl(options.baseUrl);
     const includeReferencedArtifacts = options.includeReferencedArtifacts ?? false;
-    const finalize = (value) => options.includePersistedArtifactMarker
-        ? withPersistedArtifactMarker(value, toolResults, options.persistedArtifactSecret ?? process.env.A2A_SECRET)
-        : value;
+    const finalize = (value) => {
+        const withReceipts = appendA2APersistedMutationReceipts(value, toolResults, options);
+        return options.includePersistedArtifactMarker
+            ? withPersistedArtifactMarker(withReceipts, toolResults, options.persistedArtifactSecret ?? a2aSecret(), options.delegatedTaskId)
+            : withReceipts;
+    };
     const { documents, decks, dashboards, analyses, images, designShells, generatedDesigns, monitors, forms, } = collectArtifacts(toolResults);
     const generatedDesignIds = new Set(generatedDesigns.map((design) => design.id));
     const incompleteShells = designShells.filter((shell) => !generatedDesignIds.has(shell.id));

package/dist/a2a/index.d.ts

@@ -9,3 +9,5 @@ export type { A2ACallerAuth } from "./caller-auth.js";
 export { AgentInvocationError, buildAgentInvocationPrompt, invokeAgent, invokeAgentAction, looksLikeAgentUrl, resolveAgentInvocationTarget, } from "./invoke.js";
 export type { A2AConfig, A2AHandler, A2AHandlerContext, A2AHandlerResult, A2ASourceContext, AgentCard, AgentSkill, AgentCapabilities, Task, TaskState, TaskStatus, Message, Part, TextPart, FilePart, DataPart, Artifact, JsonRpcRequest, JsonRpcResponse, A2ACorrelationMetadata, A2AReadOnlyActionInvocation, A2AReadOnlyActionResult, A2AAgentActivityPhase, A2AAgentActivitySnapshot, A2AAgentActivityState, A2AAgentActivityToolCall, A2AAgentActivityToolStatus, } from "./types.js";
 export type { AgentInvocationErrorCode, AgentActionInvocationResult, AgentInvocationResult, AgentInvocationRuntime, InvokeAgentActionOptions, InvokeAgentOptions, ResolveAgentInvocationTargetOptions, ResolvedAgentInvocationTarget, } from "./invoke.js";
+export { extractA2APersistedMutationReceipts, stripA2APersistedArtifactMarkers, } from "./artifact-response.js";
+export type { A2APersistedMutationReceipt } from "./artifact-response.js";

package/dist/a2a/index.js

@@ -7,3 +7,4 @@ export { A2AClient, callAction, callAgent, signA2AToken } from "./client.js";
 export { canonicalA2AAudience } from "./audience.js";
 export { resolveA2ACallerAuth } from "./caller-auth.js";
 export { AgentInvocationError, buildAgentInvocationPrompt, invokeAgent, invokeAgentAction, looksLikeAgentUrl, resolveAgentInvocationTarget, } from "./invoke.js";
+export { extractA2APersistedMutationReceipts, stripA2APersistedArtifactMarkers, } from "./artifact-response.js";

package/dist/a2a/task-store.d.ts

@@ -1,6 +1,7 @@
 import type { Task, Message, TaskState, Artifact } from "./types.js";
 export declare const MAX_A2A_IDEMPOTENCY_KEY_CHARS = 128;
 export declare const A2A_PERSONAL_OWNER_SCOPE = "__personal__";
+export declare function ensureTable(): Promise<void>;
 export interface A2AApprovalRecord {
     id: string;
     taskId: string;

package/dist/a2a/task-store.js

@@ -5,7 +5,7 @@ let _initPromise;
 export const MAX_A2A_IDEMPOTENCY_KEY_CHARS = 128;
 const A2A_IDEMPOTENCY_INDEX = "idx_a2a_tasks_owner_scope_idempotency";
 export const A2A_PERSONAL_OWNER_SCOPE = "__personal__";
-async function ensureTable() {
+export async function ensureTable() {
     if (!_initPromise) {
         _initPromise = (async () => {
             const client = getDbExec();

package/dist/agent/observational-memory/store.d.ts

@@ -12,6 +12,7 @@
  * runtime even before the migration plugin is registered.
  */
 import type { ObservationalMemoryEntry, ObservationalMemoryOwner, ObservationalMemoryTier } from "./types.js";
+export declare function ensureTable(): Promise<void>;
 /** Reset the cached ensureTable promise — test-only seam. */
 export declare function __resetObservationalMemoryTableCache(): void;
 export interface InsertObservationalMemoryInput extends ObservationalMemoryOwner {

package/dist/agent/observational-memory/store.js

@@ -14,7 +14,7 @@
 import { getDbExec, isPostgres } from "../../db/client.js";
 import { ensureTableExists, ensureIndexExists } from "../../db/ddl-guard.js";
 let tableReady = null;
-async function ensureTable() {
+export async function ensureTable() {
     if (tableReady)
         return tableReady;
     tableReady = (async () => {

package/dist/agent/run-store.d.ts

@@ -217,6 +217,7 @@ export declare const IN_FLIGHT_RUN_STALE_GRACE_MS: number;
  * is reaped like any other stale run.
  */
 export declare const IN_FLIGHT_GRACE_MAX_LIVENESS_GAP_MS = 120000;
+export declare function ensureRunTables(): Promise<void>;
 /**
  * Persist a zombie tool-call completion to the ledger. Called by the detached
  * promise continuation after `Promise.race` abandons it. Best-effort — never

package/dist/agent/run-store.js

@@ -294,7 +294,7 @@ export const IN_FLIGHT_RUN_STALE_GRACE_MS = 14.5 * 60_000; // 870_000
  * is reaped like any other stale run.
  */
 export const IN_FLIGHT_GRACE_MAX_LIVENESS_GAP_MS = 120_000;
-async function ensureRunTables() {
+export async function ensureRunTables() {
     if (!_initPromise) {
         _initPromise = (async () => {
             const client = getDbExec();

package/dist/agent/tool-approval-store.d.ts

@@ -1,3 +1,4 @@
+export declare function ensureAgentToolApprovalTable(): Promise<void>;
 export interface AgentToolApprovalBinding {
     ownerEmail: string;
     orgId?: string | null;

package/dist/agent/tool-approval-store.js

@@ -11,7 +11,7 @@ import { AGENT_TOOL_APPROVAL_INDEX_SQL, AGENT_TOOL_APPROVAL_LOGICAL_INDEX_SQL, A
 const APPROVAL_TTL_MS = 60 * 60_000;
 const APPROVAL_CLEANUP_AGE_MS = 24 * 60 * 60_000;
 let initPromise;
-async function ensureAgentToolApprovalTable() {
+export async function ensureAgentToolApprovalTable() {
     if (!initPromise) {
         initPromise = (async () => {
             const createSql = AGENT_TOOL_APPROVAL_TABLE_SQL[isPostgres() ? "postgres" : "sqlite"];

package/dist/application-state/store.d.ts

@@ -1,4 +1,5 @@
 import type { StoreWriteOptions } from "../settings/store.js";
+export declare function ensureTable(): Promise<void>;
 export declare function appStateGet(sessionId: string, key: string): Promise<Record<string, unknown> | null>;
 /**
  * Read several application-state keys for one session in a single SQL query,

package/dist/application-state/store.js

@@ -11,7 +11,7 @@ const MAX_HOSTED_APP_STATE_VALUE_BYTES = 1024 * 1024;
 function escapeLike(s) {
     return s.replace(/[!%_]/g, (match) => `!${match}`);
 }
-async function ensureTable() {
+export async function ensureTable() {
     if (!_initPromise) {
         _initPromise = (async () => {
             const client = getDbExec();

package/dist/browser-sessions/store.d.ts

@@ -2,6 +2,7 @@ import type { AgentNativeBrowserSessionRecord, AgentNativeBrowserSessionRequest,
 export declare const DEFAULT_BROWSER_SESSION_TTL_MS = 45000;
 export declare const DEFAULT_BROWSER_SESSION_REQUEST_TIMEOUT_MS = 30000;
 export declare const DEFAULT_BROWSER_SESSION_REQUEST_POLL_MS = 250;
+export declare function ensureTables(): Promise<void>;
 export declare function registerBrowserSession(ownerEmailInput: string, input: RegisterAgentNativeBrowserSessionInput): Promise<AgentNativeBrowserSessionRecord>;
 export declare function listBrowserSessions(ownerEmailInput: string, options?: {
     includeExpired?: boolean;

package/dist/browser-sessions/store.js

@@ -13,7 +13,7 @@ function nowMs() {
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
-async function ensureTables() {
+export async function ensureTables() {
     if (!initPromise) {
         initPromise = (async () => {
             const client = getDbExec();

package/dist/checkpoints/store.d.ts

@@ -1,3 +1,4 @@
+export declare function ensureCheckpointTable(): Promise<void>;
 export declare function insertCheckpoint(id: string, threadId: string, runId: string | null, commitSha: string, message: string): Promise<void>;
 export declare function getCheckpointsByThread(threadId: string): Promise<Array<{
     id: string;

package/dist/checkpoints/store.js

@@ -1,7 +1,7 @@
 import { getDbExec, intType, isPostgres } from "../db/client.js";
 import { ensureIndexExists, ensureTableExists } from "../db/ddl-guard.js";
 let _initPromise;
-async function ensureCheckpointTable() {
+export async function ensureCheckpointTable() {
     if (!_initPromise) {
         _initPromise = (async () => {
             const client = getDbExec();

package/dist/cli/code-agent-schedules.d.ts

@@ -52,3 +52,14 @@ export declare function deleteCodeAgentSchedule(scheduleId: string): boolean;
 export declare function markCodeAgentScheduleRun(scheduleId: string, patch: CodeAgentScheduleRunPatch): CodeAgentScheduleRecord | null;
 export declare function isCodeAgentScheduleDue(schedule: CodeAgentScheduleRecord, now?: Date): boolean;
 export declare function nextCodeAgentScheduleRunAt(schedule: CodeAgentScheduleRecord, now?: Date): string;
+/**
+ * A schedules file that exists but cannot be understood. Every mutation
+ * rewrites the whole file, so treating this as an empty list would delete every
+ * stored schedule; callers must fail instead.
+ */
+export declare class CodeAgentSchedulesUnreadableError extends Error {
+    readonly filePath: string;
+    constructor(filePath: string, detail: string, options?: {
+        cause?: unknown;
+    });
+}

package/dist/cli/code-agent-schedules.js

@@ -136,16 +136,55 @@ export function nextCodeAgentScheduleRunAt(schedule, now = new Date()) {
         next += intervalMs;
     return new Date(next).toISOString();
 }
+/**
+ * A schedules file that exists but cannot be understood. Every mutation
+ * rewrites the whole file, so treating this as an empty list would delete every
+ * stored schedule; callers must fail instead.
+ */
+export class CodeAgentSchedulesUnreadableError extends Error {
+    filePath;
+    constructor(filePath, detail, options) {
+        super(`Code agent schedules at ${filePath} could not be read (${detail}). ` +
+            `Refusing to continue so the existing schedules are not overwritten. ` +
+            `Repair or remove the file, then retry.`, options);
+        this.name = "CodeAgentSchedulesUnreadableError";
+        this.filePath = filePath;
+    }
+}
 function readScheduleFile() {
+    const filePath = codeAgentSchedulesPath();
+    let contents;
     try {
-        const raw = JSON.parse(fs.readFileSync(codeAgentSchedulesPath(), "utf8"));
-        if (!Array.isArray(raw))
+        contents = fs.readFileSync(filePath, "utf8");
+    }
+    catch (error) {
+        // Only a genuinely absent file is an empty schedule list. A permission
+        // error or transient I/O failure is unknown, not empty.
+        if (error?.code === "ENOENT")
             return [];
-        return raw.filter(isScheduleRecord);
+        throw new CodeAgentSchedulesUnreadableError(filePath, "read failed", {
+            cause: error,
+        });
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(contents);
+    }
+    catch (error) {
+        throw new CodeAgentSchedulesUnreadableError(filePath, "invalid JSON", {
+            cause: error,
+        });
+    }
+    if (!Array.isArray(parsed)) {
+        throw new CodeAgentSchedulesUnreadableError(filePath, `expected an array, found ${parsed === null ? "null" : typeof parsed}`);
     }
-    catch {
-        return [];
+    const records = parsed.filter(isScheduleRecord);
+    if (records.length !== parsed.length) {
+        // Dropping the entries we cannot parse and writing the rest back is the
+        // same data loss by a quieter route — a newer schemaVersion included.
+        throw new CodeAgentSchedulesUnreadableError(filePath, `${parsed.length - records.length} of ${parsed.length} entries are not valid schedule records`);
     }
+    return records;
 }
 function writeScheduleFile(records) {
     const filePath = codeAgentSchedulesPath();

package/dist/client/AgentPanel.d.ts

@@ -223,6 +223,10 @@ export interface AgentSidebarProps {
     apiUrl?: string;
     /** Runtime surface identity used for server-side chat capabilities. */
     agentChatSurface?: AgentChatSurfaceKind;
+    /** Whether the desktop host is currently showing its unauthenticated identity gate. */
+    desktopIdentityUnauthenticated?: AssistantChatProps["desktopIdentityUnauthenticated"];
+    /** Whether the desktop host has just established its authenticated identity session. */
+    desktopIdentityAuthenticated?: AssistantChatProps["desktopIdentityAuthenticated"];
     /** Show the chat thread tab row. Default: true. */
     showTabBar?: MultiTabAssistantChatProps["showTabBar"];
     /** Keep inline app-opening results inside the current app chat. */
@@ -250,7 +254,7 @@ export interface AgentSidebarProps {
  * Wraps app content with a toggleable agent sidebar.
  * Use AgentToggleButton in your header to open/close it.
  */
-export declare function AgentSidebar({ children, emptyStateText, suggestions, dynamicSuggestions, composerToolbarSlot, composerSlot, onComposerTextChange, imageModelMenu, availableAgents, availableModels, modelListLoading, selectedAgent, onAgentChange, onConnectLocalRuntime, runtime, adapterReloadKey, threadFooterSlot, defaultSidebarWidth, sidebarWidth, position, defaultOpen, animateMobile, animateDesktop, chatViewTransition, chatViewTransitionHandoff, storageKey, openStorageKey, apiUrl, agentChatSurface, showTabBar, suppressInlineOpenApp, composerPlaceholder, openOnChatRunning, onFullscreenRequest, scope, showScopeBadge, browserTabId, threadUrlSync, agentPageHref, suppressFirstRunOnboarding, }: AgentSidebarProps): React.JSX.Element;
+export declare function AgentSidebar({ children, emptyStateText, suggestions, dynamicSuggestions, composerToolbarSlot, composerSlot, onComposerTextChange, imageModelMenu, availableAgents, availableModels, modelListLoading, selectedAgent, onAgentChange, onConnectLocalRuntime, runtime, adapterReloadKey, threadFooterSlot, defaultSidebarWidth, sidebarWidth, position, defaultOpen, animateMobile, animateDesktop, chatViewTransition, chatViewTransitionHandoff, storageKey, openStorageKey, apiUrl, agentChatSurface, desktopIdentityUnauthenticated, desktopIdentityAuthenticated, showTabBar, suppressInlineOpenApp, composerPlaceholder, openOnChatRunning, onFullscreenRequest, scope, showScopeBadge, browserTabId, threadUrlSync, agentPageHref, suppressFirstRunOnboarding, }: AgentSidebarProps): React.JSX.Element;
 /**
  * Focus the agent chat composer input.
  * Opens the sidebar if closed, then focuses the text input.

package/dist/client/AgentPanel.js

@@ -1418,7 +1418,7 @@ export function AgentChatSurface({ mode = "panel", className, defaultMode = "cha
  * Wraps app content with a toggleable agent sidebar.
  * Use AgentToggleButton in your header to open/close it.
  */
-export function AgentSidebar({ children, emptyStateText = "How can I help you?", suggestions, dynamicSuggestions, composerToolbarSlot, composerSlot, onComposerTextChange, imageModelMenu, availableAgents, availableModels, modelListLoading, selectedAgent, onAgentChange, onConnectLocalRuntime, runtime, adapterReloadKey, threadFooterSlot, defaultSidebarWidth, sidebarWidth, position = "right", defaultOpen = false, animateMobile = true, animateDesktop = true, chatViewTransition = false, chatViewTransitionHandoff = false, storageKey, openStorageKey, apiUrl, agentChatSurface, showTabBar = true, suppressInlineOpenApp, composerPlaceholder, openOnChatRunning = false, onFullscreenRequest, scope, showScopeBadge, browserTabId, threadUrlSync, agentPageHref, suppressFirstRunOnboarding = false, }) {
+export function AgentSidebar({ children, emptyStateText = "How can I help you?", suggestions, dynamicSuggestions, composerToolbarSlot, composerSlot, onComposerTextChange, imageModelMenu, availableAgents, availableModels, modelListLoading, selectedAgent, onAgentChange, onConnectLocalRuntime, runtime, adapterReloadKey, threadFooterSlot, defaultSidebarWidth, sidebarWidth, position = "right", defaultOpen = false, animateMobile = true, animateDesktop = true, chatViewTransition = false, chatViewTransitionHandoff = false, storageKey, openStorageKey, apiUrl, agentChatSurface, desktopIdentityUnauthenticated, desktopIdentityAuthenticated, showTabBar = true, suppressInlineOpenApp, composerPlaceholder, openOnChatRunning = false, onFullscreenRequest, scope, showScopeBadge, browserTabId, threadUrlSync, agentPageHref, suppressFirstRunOnboarding = false, }) {
     const staticHostedHarnessEnabled = isHostedHarnessConfigured(injectedAgentNativeConfig().harness);
     const hostedHarnessQuery = useActionQuery("get-hosted-harness-config", undefined, { enabled: staticHostedHarnessEnabled });
     const hostedHarnessStatus = hostedHarnessQuery.data;
@@ -2059,7 +2059,7 @@ export function AgentSidebar({ children, emptyStateText = "How can I help you?",
                             ? "desktop"
                             : undefined, "data-agent-sidebar-layout": panelLayout, "data-agent-sidebar-position": effectivePosition, "data-agent-native-hosted-harness-ui": hostedHarnessUi ? "desktop" : undefined, "data-agent-sidebar-state": panelOpen ? "open" : "closed", "data-agent-sidebar-per-app-chat": isPerAppChatSidebar ? "true" : undefined, "data-agent-sidebar-resizing": isResizing ? "true" : undefined, "data-agent-sidebar-chat-handoff": chatViewTransitionHandoff ? "true" : undefined, style: chatViewTransition
                     ? getAgentChatViewTransitionStyle(panelStyle)
-                    : panelStyle, inert: sidebarAnimationEnabled && !panelOpen ? true : undefined, "aria-hidden": sidebarAnimationEnabled && !panelOpen ? true : undefined, children: _jsx("div", { className: "agent-sidebar-panel-inner flex min-h-0 flex-1 flex-col", children: _jsx(AgentPanel, { emptyStateText: emptyStateText, suggestions: suggestions, dynamicSuggestions: dynamicSuggestions, composerToolbarSlot: composerToolbarSlot, composerSlot: composerSlot, onComposerTextChange: onComposerTextChange, imageModelMenu: imageModelMenu, availableAgents: effectiveAvailableAgents, availableModels: availableModels, modelListLoading: modelListLoading, selectedAgent: effectiveSelectedAgent, onAgentChange: effectiveOnAgentChange, hostedHarness: hostedHarnessEnabled, onConnectLocalRuntime: onConnectLocalRuntime, runtime: runtime, adapterReloadKey: adapterReloadKey, threadFooterSlot: threadFooterSlot, apiUrl: apiUrl, agentChatSurface: agentChatSurface, showTabBar: effectiveShowTabBar, suppressInlineOpenApp: suppressInlineOpenApp, composerPlaceholder: composerPlaceholder, missingApiKeySetupLayout: "sidebar", onCollapse: () => setOpenPersisted(false), onSnapTo75Percent: isMobile ? undefined : snapTo75Percent, isWideDrawer: isMobile ? false : isWideDrawer, onExitWideDrawer: isMobile ? undefined : exitWideDrawer, onFullViewRequest: onFullscreenRequest, storageKey: storageKey, scope: scope, showScopeBadge: showScopeBadge, browserTabId: browserTabId, threadUrlSync: threadUrlSync, agentPageHref: agentPageHref, allowSettingsMode: false, chatOnly: true }) }) }), showResizeHandle && isLeft && (_jsx(ResizeHandle, { position: effectivePosition, onDrag: handleDrag, onResizeStart: handleResizeStart, onResizeEnd: handleResizeEnd }))] })) : null;
+                    : panelStyle, inert: sidebarAnimationEnabled && !panelOpen ? true : undefined, "aria-hidden": sidebarAnimationEnabled && !panelOpen ? true : undefined, children: _jsx("div", { className: "agent-sidebar-panel-inner flex min-h-0 flex-1 flex-col", children: _jsx(AgentPanel, { emptyStateText: emptyStateText, suggestions: suggestions, dynamicSuggestions: dynamicSuggestions, composerToolbarSlot: composerToolbarSlot, composerSlot: composerSlot, onComposerTextChange: onComposerTextChange, imageModelMenu: imageModelMenu, availableAgents: effectiveAvailableAgents, availableModels: availableModels, modelListLoading: modelListLoading, selectedAgent: effectiveSelectedAgent, onAgentChange: effectiveOnAgentChange, hostedHarness: hostedHarnessEnabled, onConnectLocalRuntime: onConnectLocalRuntime, runtime: runtime, adapterReloadKey: adapterReloadKey, threadFooterSlot: threadFooterSlot, apiUrl: apiUrl, agentChatSurface: agentChatSurface, desktopIdentityUnauthenticated: desktopIdentityUnauthenticated, desktopIdentityAuthenticated: desktopIdentityAuthenticated, showTabBar: effectiveShowTabBar, suppressInlineOpenApp: suppressInlineOpenApp, composerPlaceholder: composerPlaceholder, missingApiKeySetupLayout: "sidebar", onCollapse: () => setOpenPersisted(false), onSnapTo75Percent: isMobile ? undefined : snapTo75Percent, isWideDrawer: isMobile ? false : isWideDrawer, onExitWideDrawer: isMobile ? undefined : exitWideDrawer, onFullViewRequest: onFullscreenRequest, storageKey: storageKey, scope: scope, showScopeBadge: showScopeBadge, browserTabId: browserTabId, threadUrlSync: threadUrlSync, agentPageHref: agentPageHref, allowSettingsMode: false, chatOnly: true }) }) }), showResizeHandle && isLeft && (_jsx(ResizeHandle, { position: effectivePosition, onDrag: handleDrag, onResizeStart: handleResizeStart, onResizeEnd: handleResizeEnd }))] })) : null;
     const drawerPlaceholder = wideDrawerEnabled && !presentationMode && panelOpen ? (_jsx("div", { "aria-hidden": "true", className: "agent-sidebar-drawer-placeholder shrink-0", "data-agent-sidebar-placeholder": "true", style: { width: drawerPlaceholderWidth + 1 } })) : null;
     return (_jsx(AgentSidebarOnboardingContext.Provider, { value: true, children: _jsxs(RealtimeVoiceModeProvider, { browserTabId: browserTabId, children: [showFirstRunOnboarding && (_jsx(Suspense, { fallback: null, children: _jsx(FirstRunOnboarding, {}) })), _jsxs("div", { className: "agent-sidebar-shell flex min-w-0 flex-1 h-screen overflow-hidden", "data-agent-sidebar-position": effectivePosition, "data-agent-native-hosted-harness-ui": hostedHarnessUi ? "desktop" : undefined, "data-agent-native-hosted-chat": isPerAppChatHosted ? "true" : undefined, "data-agent-sidebar-resizing": isResizing ? "true" : undefined, children: [isMobile &&
                             !isPerAppChatHosted &&

package/dist/client/AssistantChat.d.ts

@@ -14,7 +14,7 @@ import { type ContentPart } from "./sse-event-processor.js";
 import type { ChatThreadScope, ChatThreadSnapshot } from "./use-chat-threads.js";
 export { AssistantMessageListErrorBoundary, AssistantUiStaleIndexErrorBoundary, assistantUiRecoverableRenderErrorKind, isAssistantUiRecoverableRenderError, isAssistantUiStaleIndexError, } from "./assistant-ui-recovery.js";
 export { displayableUserMessageText } from "./chat/message-components.js";
-export declare function shouldSuppressUnauthenticatedDesktopThreadRestore(surface: AgentChatSurfaceKind, status: number): boolean;
+export declare function shouldSuppressUnauthenticatedDesktopThreadRestore(surface: AgentChatSurfaceKind, status: number, desktopIdentityUnauthenticated?: boolean): boolean;
 type AssistantUiMessageResourceShape = {
     id: string;
     content: readonly unknown[];
@@ -278,6 +278,10 @@ export interface AssistantChatProps {
      * dev filesystem/bash code-editing tools out of in-product sidebars.
      */
     agentChatSurface?: AgentChatSurfaceKind;
+    /** Whether the desktop host is currently showing its unauthenticated identity gate. */
+    desktopIdentityUnauthenticated?: boolean;
+    /** Whether the desktop host has just established its authenticated identity session. */
+    desktopIdentityAuthenticated?: boolean;
     /** Route completed first-party open_app calls through the host app pane. */
     suppressInlineOpenApp?: boolean;
     /** Placeholder text for empty state */