@agent-native/core 0.164.3 → 0.164.4

package/dist/a2a/artifact-response.js

@@ -1,9 +1,19 @@
 import { createHmac, timingSafeEqual } from "node:crypto";
+import { readDeployCredentialEnv } from "../server/credential-provider.js";
+function a2aSecret() {
+    return readDeployCredentialEnv("A2A_SECRET");
+}
+function a2aSecrets() {
+    const secret = a2aSecret();
+    return secret ? [secret] : [];
+}
 const ARTIFACT_IDENTITY_WRITE_TOOLS = new Set([
     "save-monitor",
     "create-form",
     "submit-content-database-form",
     "add-database-item",
+    "upsert-database-item-by-key",
+    "mutate-content-database-block",
     "create-document",
     "update-document",
     "set-document-property",
@@ -44,50 +54,79 @@ const ARTIFACT_RESOURCE_TYPES = new Set([
     "monitor",
     "form",
 ]);
-function persistedArtifactIdentitiesFromMarker(result, secrets = process.env.A2A_SECRET
-    ? [process.env.A2A_SECRET]
-    : []) {
+function persistedArtifactLedgerFromMarker(result, secrets = a2aSecrets(), expectedDelegatedTaskId) {
     if (secrets.length === 0)
-        return [];
-    const match = result.match(/<!--\s*agent-native:persisted-artifacts=([A-Za-z0-9_-]+)\.([a-f0-9]{64})\s*-->/);
-    if (!match)
-        return [];
-    try {
-        const payload = match[1];
-        const supplied = Buffer.from(match[2], "hex");
-        const verified = secrets.some((secret) => {
-            const expected = createHmac("sha256", secret).update(payload).digest();
-            return (supplied.length === expected.length &&
-                timingSafeEqual(supplied, expected));
-        });
-        if (!verified) {
-            return [];
+        return null;
+    const matches = result.matchAll(/<!--\s*agent-native:persisted-artifacts=([A-Za-z0-9_-]+)\.([a-f0-9]{64})\s*-->/g);
+    for (const match of matches) {
+        try {
+            const payload = match[1];
+            const supplied = Buffer.from(match[2], "hex");
+            const verified = secrets.some((secret) => {
+                const expected = createHmac("sha256", secret).update(payload).digest();
+                return (supplied.length === expected.length &&
+                    timingSafeEqual(supplied, expected));
+            });
+            if (!verified)
+                continue;
+            const parsed = JSON.parse(Buffer.from(payload, "base64url").toString());
+            if (Array.isArray(parsed)) {
+                return { version: 1, identities: parsed, mutationReceipts: [] };
+            }
+            const ledger = asRecord(parsed);
+            if (!ledger || ledger.version !== 1)
+                continue;
+            const parsedLedger = {
+                version: 1,
+                identities: Array.isArray(ledger.identities) ? ledger.identities : [],
+                mutationReceipts: Array.isArray(ledger.mutationReceipts)
+                    ? ledger.mutationReceipts
+                    : [],
+                ...(typeof ledger.delegatedTaskId === "string"
+                    ? { delegatedTaskId: ledger.delegatedTaskId }
+                    : {}),
+            };
+            if (expectedDelegatedTaskId &&
+                parsedLedger.delegatedTaskId !== expectedDelegatedTaskId) {
+                continue;
+            }
+            return parsedLedger;
+        }
+        catch {
+            // coercion-ok: malformed signed-marker payloads are untrusted absence, never a successful receipt ledger
+            continue;
         }
-        const parsed = JSON.parse(Buffer.from(payload, "base64url").toString());
-        if (!Array.isArray(parsed))
-            return [];
-        return parsed
-            .slice(0, 12)
-            .filter((identity) => {
-            const item = asRecord(identity);
-            return (!!item &&
-                ARTIFACT_RESOURCE_TYPES.has(item.resourceType) &&
-                typeof item.id === "string" &&
-                typeof item.sourceAction === "string");
-        });
-    }
-    catch {
-        return [];
     }
+    return null;
 }
-function withPersistedArtifactMarker(text, toolResults, secret = process.env.A2A_SECRET) {
-    const verificationSecrets = [secret, process.env.A2A_SECRET].filter((value, index, values) => !!value && values.indexOf(value) === index);
+function persistedArtifactIdentitiesFromMarker(result, secrets = a2aSecrets()) {
+    return (persistedArtifactLedgerFromMarker(result, secrets)?.identities ?? [])
+        .slice(0, 12)
+        .filter((identity) => {
+        const item = asRecord(identity);
+        return (!!item &&
+            ARTIFACT_RESOURCE_TYPES.has(item.resourceType) &&
+            typeof item.id === "string" &&
+            typeof item.sourceAction === "string");
+    });
+}
+function withPersistedArtifactMarker(text, toolResults, secret = a2aSecret(), delegatedTaskId) {
+    const verificationSecrets = [secret, a2aSecret()].filter((value, index, values) => !!value && values.indexOf(value) === index);
     const identities = extractA2AArtifactIdentities(toolResults, {
         persistedArtifactSecrets: verificationSecrets,
     }).slice(0, 12);
-    if (identities.length === 0 || !secret)
+    const mutationReceipts = extractA2APersistedMutationReceipts(toolResults, {
+        persistedArtifactSecrets: secret ? [secret] : [],
+        expectedDelegatedTaskId: delegatedTaskId,
+    }).slice(0, 12);
+    if ((identities.length === 0 && mutationReceipts.length === 0) || !secret)
         return text;
-    const payload = Buffer.from(JSON.stringify(identities)).toString("base64url");
+    const payload = Buffer.from(JSON.stringify({
+        version: 1,
+        identities,
+        mutationReceipts,
+        ...(delegatedTaskId ? { delegatedTaskId } : {}),
+    })).toString("base64url");
     const signature = createHmac("sha256", secret).update(payload).digest("hex");
     const marker = `<!-- ${PERSISTED_ARTIFACT_MARKER}${payload}.${signature} -->`;
     return text ? `${text}\n\n${marker}` : marker;
@@ -474,6 +513,22 @@ function collectArtifacts(results) {
                 documents.set(artifact.id, artifact);
             continue;
         }
+        if (toolResult.tool === "upsert-database-item-by-key" ||
+            toolResult.tool === "mutate-content-database-block") {
+            const receipt = asRecord(parsed.receipt);
+            const receiptRow = asRecord(receipt?.row);
+            const receiptTarget = asRecord(receipt?.target);
+            const rowLink = asRecord(receipt?.rowLink);
+            const rowDocumentId = stringValue(receiptRow?.documentId) ??
+                stringValue(receiptTarget?.rowDocumentId);
+            if (rowDocumentId) {
+                documents.set(rowDocumentId, {
+                    id: rowDocumentId,
+                    url: stringValue(receiptRow?.urlPath) ?? stringValue(rowLink?.urlPath),
+                });
+            }
+            continue;
+        }
         if (toolResult.tool === "create-document" ||
             toolResult.tool === "update-document") {
             if (parsed.conflict === true)
@@ -772,6 +827,175 @@ export function extractA2AArtifactIdentities(results, options = {}) {
     }
     return [...identities.values()];
 }
+function boundedStrings(value) {
+    if (!Array.isArray(value))
+        return undefined;
+    return value
+        .map(stringValue)
+        .filter((item) => !!item)
+        .slice(0, 50);
+}
+function parsePersistedMutationReceipt(value, sourceAction) {
+    const receipt = asRecord(value);
+    const target = asRecord(receipt?.target);
+    const authorityScope = asRecord(target?.authorityScope);
+    const row = asRecord(receipt?.row);
+    const rowLink = asRecord(receipt?.rowLink);
+    const idempotency = asRecord(receipt?.idempotency);
+    const revisions = asRecord(receipt?.revisions);
+    const rowRevisions = asRecord(revisions?.row);
+    const fieldRevisions = asRecord(revisions?.field);
+    const affected = asRecord(receipt?.affected);
+    const readback = asRecord(receipt?.readback);
+    const authorityScopeKind = stringValue(authorityScope?.kind) ??
+        stringValue(target?.authorityScopeKind);
+    const idempotencyResult = stringValue(idempotency?.result);
+    const rowDocumentId = stringValue(row?.documentId) ?? stringValue(target?.rowDocumentId);
+    const urlPath = stringValue(row?.urlPath) ?? stringValue(rowLink?.urlPath);
+    const receiptId = stringValue(receipt?.receiptId);
+    const operation = stringValue(receipt?.operation);
+    const outcome = stringValue(receipt?.outcome);
+    const authorityScopeId = stringValue(authorityScope?.id) ?? stringValue(target?.authorityScopeId);
+    const spaceId = stringValue(target?.spaceId);
+    const databaseId = stringValue(target?.databaseId);
+    const databaseDocumentId = stringValue(target?.databaseDocumentId);
+    const idempotencyKey = stringValue(idempotency?.key);
+    const payloadDigest = stringValue(idempotency?.payloadDigest);
+    if (!receipt ||
+        !target ||
+        (authorityScopeKind !== "personal" &&
+            authorityScopeKind !== "organization") ||
+        (idempotencyResult !== "applied" && idempotencyResult !== "replayed") ||
+        (readback?.verified !== true && receipt.readbackVerified !== true) ||
+        !receiptId ||
+        !operation ||
+        !outcome ||
+        !authorityScopeId ||
+        !spaceId ||
+        !databaseId ||
+        !databaseDocumentId ||
+        !idempotencyKey ||
+        !payloadDigest ||
+        !rowDocumentId ||
+        !urlPath) {
+        return null;
+    }
+    const propertyIds = boundedStrings(affected?.propertyIds);
+    const blockIds = boundedStrings(affected?.blockIds);
+    const deletedBlockIds = boundedStrings(affected?.deletedBlockIds);
+    const order = boundedStrings(affected?.order);
+    const compactAffected = {
+        ...(typeof affected?.title === "boolean" ? { title: affected.title } : {}),
+        ...(propertyIds ? { propertyIds } : {}),
+        ...(blockIds ? { blockIds } : {}),
+        ...(deletedBlockIds ? { deletedBlockIds } : {}),
+        ...(order ? { order } : {}),
+    };
+    const itemId = stringValue(row?.itemId) ?? stringValue(target.itemId);
+    const targetItemId = stringValue(target.itemId);
+    const targetRowDocumentId = stringValue(target.rowDocumentId);
+    const targetPropertyId = stringValue(target.propertyId);
+    const after = stringValue(revisions?.after);
+    const rowBefore = stringValue(rowRevisions?.before) ?? stringValue(revisions?.rowBefore);
+    const rowAfter = stringValue(rowRevisions?.after) ?? stringValue(revisions?.rowAfter);
+    return {
+        receiptId,
+        sourceAction,
+        operation,
+        outcome,
+        target: {
+            authorityScopeKind,
+            authorityScopeId,
+            spaceId,
+            databaseId,
+            databaseDocumentId,
+            ...(targetItemId ? { itemId: targetItemId } : {}),
+            ...(targetRowDocumentId ? { rowDocumentId: targetRowDocumentId } : {}),
+            ...(targetPropertyId ? { propertyId: targetPropertyId } : {}),
+        },
+        row: {
+            ...(itemId ? { itemId } : {}),
+            documentId: rowDocumentId,
+            urlPath,
+        },
+        idempotency: {
+            key: idempotencyKey,
+            result: idempotencyResult,
+            payloadDigest,
+        },
+        revisions: {
+            ...(revisions?.before === null || typeof revisions?.before === "string"
+                ? { before: revisions.before }
+                : {}),
+            ...(after ? { after } : {}),
+            ...(rowBefore ? { rowBefore } : {}),
+            ...(rowAfter ? { rowAfter } : {}),
+            ...(typeof (fieldRevisions?.before ?? revisions?.fieldBefore) === "number"
+                ? {
+                    fieldBefore: (fieldRevisions?.before ??
+                        revisions?.fieldBefore),
+                }
+                : {}),
+            ...(typeof (fieldRevisions?.after ?? revisions?.fieldAfter) === "number"
+                ? {
+                    fieldAfter: (fieldRevisions?.after ??
+                        revisions?.fieldAfter),
+                }
+                : {}),
+        },
+        ...(Object.keys(compactAffected).length > 0
+            ? { affected: compactAffected }
+            : {}),
+        readbackVerified: true,
+    };
+}
+/**
+ * Extract bounded, read-back-verified mutation receipts. Nested agent results
+ * are accepted only through the signed persisted ledger.
+ */
+export function extractA2APersistedMutationReceipts(results, options = {}) {
+    const receipts = new Map();
+    for (const result of results) {
+        if (result.isError === true || result.completedSideEffect === false)
+            continue;
+        if (result.tool === "call-agent") {
+            const nested = persistedArtifactLedgerFromMarker(result.result, options.persistedArtifactSecrets, options.expectedDelegatedTaskId);
+            for (const receipt of nested?.mutationReceipts ?? []) {
+                const parsed = parsePersistedMutationReceipt(receipt, "call-agent");
+                if (parsed)
+                    receipts.set(parsed.receiptId, parsed);
+            }
+            continue;
+        }
+        if (result.tool !== "upsert-database-item-by-key" &&
+            result.tool !== "mutate-content-database-block") {
+            continue;
+        }
+        const parsedResult = parseToolResultJson(result.result);
+        const receipt = parsePersistedMutationReceipt(parsedResult?.receipt, result.tool);
+        if (receipt)
+            receipts.set(receipt.receiptId, receipt);
+    }
+    return [...receipts.values()].slice(0, 12);
+}
+export function appendA2APersistedMutationReceipts(text, toolResults, options = {}) {
+    const receiptSecret = options.persistedArtifactSecret ?? a2aSecret();
+    const receipts = extractA2APersistedMutationReceipts(toolResults, {
+        persistedArtifactSecrets: receiptSecret ? [receiptSecret] : [],
+        expectedDelegatedTaskId: options.delegatedTaskId,
+    }).filter((receipt) => !text.includes(receipt.receiptId));
+    if (receipts.length === 0)
+        return text;
+    const lines = receipts.map((receipt) => {
+        const url = artifactUrl(options.baseUrl, receipt.row.urlPath);
+        const item = receipt.row.itemId ? `; item ID: ${receipt.row.itemId}` : "";
+        return (`- ${receipt.receiptId}: ${receipt.outcome} via ${receipt.sourceAction}; ` +
+            `row ${url} (document ID: ${receipt.row.documentId}${item}); ` +
+            `idempotency: ${receipt.idempotency.result}`);
+    });
+    const section = ["Mutation receipts:", ...lines].join("\n");
+    return text.trim() ? `${text.trim()}\n\n${section}` : section;
+}
 function parseDownstreamArtifactBlock(result) {
     const artifacts = [];
     for (const line of downstreamArtifactLines(result)) {
@@ -1076,9 +1300,12 @@ function formatUnverifiedArtifactMessage(refs, documents, decks, dashboards, ana
 export function guardA2AArtifactResponse(responseText, toolResults, options = {}) {
     const baseUrl = normalizeBaseUrl(options.baseUrl);
     const includeReferencedArtifacts = options.includeReferencedArtifacts ?? false;
-    const finalize = (value) => options.includePersistedArtifactMarker
-        ? withPersistedArtifactMarker(value, toolResults, options.persistedArtifactSecret ?? process.env.A2A_SECRET)
-        : value;
+    const finalize = (value) => {
+        const withReceipts = appendA2APersistedMutationReceipts(value, toolResults, options);
+        return options.includePersistedArtifactMarker
+            ? withPersistedArtifactMarker(withReceipts, toolResults, options.persistedArtifactSecret ?? a2aSecret(), options.delegatedTaskId)
+            : withReceipts;
+    };
     const { documents, decks, dashboards, analyses, images, designShells, generatedDesigns, monitors, forms, } = collectArtifacts(toolResults);
     const generatedDesignIds = new Set(generatedDesigns.map((design) => design.id));
     const incompleteShells = designShells.filter((shell) => !generatedDesignIds.has(shell.id));

package/dist/a2a/index.d.ts

@@ -9,3 +9,5 @@ export type { A2ACallerAuth } from "./caller-auth.js";
 export { AgentInvocationError, buildAgentInvocationPrompt, invokeAgent, invokeAgentAction, looksLikeAgentUrl, resolveAgentInvocationTarget, } from "./invoke.js";
 export type { A2AConfig, A2AHandler, A2AHandlerContext, A2AHandlerResult, A2ASourceContext, AgentCard, AgentSkill, AgentCapabilities, Task, TaskState, TaskStatus, Message, Part, TextPart, FilePart, DataPart, Artifact, JsonRpcRequest, JsonRpcResponse, A2ACorrelationMetadata, A2AReadOnlyActionInvocation, A2AReadOnlyActionResult, A2AAgentActivityPhase, A2AAgentActivitySnapshot, A2AAgentActivityState, A2AAgentActivityToolCall, A2AAgentActivityToolStatus, } from "./types.js";
 export type { AgentInvocationErrorCode, AgentActionInvocationResult, AgentInvocationResult, AgentInvocationRuntime, InvokeAgentActionOptions, InvokeAgentOptions, ResolveAgentInvocationTargetOptions, ResolvedAgentInvocationTarget, } from "./invoke.js";
+export { extractA2APersistedMutationReceipts, stripA2APersistedArtifactMarkers, } from "./artifact-response.js";
+export type { A2APersistedMutationReceipt } from "./artifact-response.js";

package/dist/a2a/index.js

@@ -7,3 +7,4 @@ export { A2AClient, callAction, callAgent, signA2AToken } from "./client.js";
 export { canonicalA2AAudience } from "./audience.js";
 export { resolveA2ACallerAuth } from "./caller-auth.js";
 export { AgentInvocationError, buildAgentInvocationPrompt, invokeAgent, invokeAgentAction, looksLikeAgentUrl, resolveAgentInvocationTarget, } from "./invoke.js";
+export { extractA2APersistedMutationReceipts, stripA2APersistedArtifactMarkers, } from "./artifact-response.js";

package/dist/collab/awareness.d.ts

@@ -62,11 +62,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
+    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
-    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -77,9 +77,9 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
+    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
-    error?: undefined;
 }>>;

package/dist/integrations/adapters/slack.js

@@ -53,6 +53,25 @@ function claimSlackSystemNoticeSlot(key, ttlMs = SLACK_SYSTEM_NOTICE_DEDUPE_TTL_
     slackSystemNoticeCache.set(key, now + ttlMs);
     return true;
 }
+function slackEventInstallationScope(payload) {
+    const teamId = typeof payload?.team_id === "string" ? payload.team_id : undefined;
+    const authorizations = Array.isArray(payload?.authorizations)
+        ? payload.authorizations.filter((value) => !!value && typeof value === "object" && !Array.isArray(value))
+        : [];
+    const enterpriseAuthorization = authorizations.find((authorization) => authorization.is_enterprise_install === true &&
+        typeof authorization.enterprise_id === "string");
+    const teamAuthorization = authorizations.find((authorization) => authorization.team_id === teamId);
+    const authorization = teamAuthorization ?? enterpriseAuthorization;
+    return {
+        enterpriseId: typeof authorization?.enterprise_id === "string"
+            ? authorization.enterprise_id
+            : typeof payload?.enterprise_id === "string"
+                ? payload.enterprise_id
+                : undefined,
+        isEnterpriseInstall: authorization?.is_enterprise_install === true ||
+            payload?.is_enterprise_install === true,
+    };
+}
 /**
  * Create a Slack platform adapter.
  *
@@ -204,6 +223,7 @@ export function slackAdapter(options = {}) {
                 const apiAppId = typeof payload.api_app_id === "string"
                     ? payload.api_app_id
                     : "unknown";
+                const installationScope = slackEventInstallationScope(payload);
                 const agentContext = normalizeSlackAgentContext(e.app_context, teamId);
                 const isDm = typeof e.channel_type === "string"
                     ? e.channel_type === "im"
@@ -238,9 +258,8 @@ export function slackAdapter(options = {}) {
                         messageTs: e.ts,
                         teamId,
                         apiAppId,
-                        enterpriseId: typeof payload.enterprise_id === "string"
-                            ? payload.enterprise_id
-                            : undefined,
+                        enterpriseId: installationScope.enterpriseId,
+                        isEnterpriseInstall: installationScope.isEnterpriseInstall,
                         eventId: payload.event_id,
                         ...(agentContext
                             ? {
@@ -614,6 +633,7 @@ async function resolveManagedSlackBotToken(incoming) {
     const enterpriseId = typeof incoming.platformContext.enterpriseId === "string"
         ? incoming.platformContext.enterpriseId
         : undefined;
+    const isEnterpriseInstall = incoming.platformContext.isEnterpriseInstall === true;
     const installationKeyHint = typeof incoming.platformContext.installationKey === "string"
         ? incoming.platformContext.installationKey
         : undefined;
@@ -624,7 +644,12 @@ async function resolveManagedSlackBotToken(incoming) {
             ? await getActiveIntegrationInstallationByKey("slack", installationKeyHint)
             : null;
         if (!installation && apiAppId) {
-            installation = await getActiveIntegrationInstallationByKey("slack", slackInstallationKey({ teamId, enterpriseId, apiAppId }));
+            installation = await getActiveIntegrationInstallationByKey("slack", slackInstallationKey({
+                teamId,
+                enterpriseId,
+                apiAppId,
+                isEnterpriseInstall,
+            }));
         }
         if (!installation && !apiAppId) {
             // Without an app id the tenant can match several connected Slack apps.
@@ -641,7 +666,12 @@ async function resolveManagedSlackBotToken(incoming) {
             installation = candidates[0] ?? null;
         }
         const key = installation?.installationKey ??
-            slackInstallationKey({ teamId, enterpriseId, apiAppId });
+            slackInstallationKey({
+                teamId,
+                enterpriseId,
+                apiAppId,
+                isEnterpriseInstall,
+            });
         return (await resolveIntegrationTokenBundle("slack", key))?.accessToken;
     }
     catch {
@@ -721,13 +751,19 @@ let _missingAllowlistWarned = false;
 async function enforceWorkspaceAllowlist(payload) {
     const teamId = typeof payload?.team_id === "string" ? payload.team_id : undefined;
     const apiAppId = typeof payload?.api_app_id === "string" ? payload.api_app_id : undefined;
+    const installationScope = slackEventInstallationScope(payload);
     const allowedTeamIds = parseAllowlistEnv("SLACK_ALLOWED_TEAM_IDS");
     const allowedAppIds = parseAllowlistEnv("SLACK_ALLOWED_API_APP_IDS");
     if (!allowedTeamIds) {
         if (process.env.NODE_ENV === "production") {
             let managed = false;
             try {
-                const key = slackInstallationKey({ teamId, apiAppId });
+                const key = slackInstallationKey({
+                    teamId,
+                    apiAppId,
+                    enterpriseId: installationScope.enterpriseId,
+                    isEnterpriseInstall: installationScope.isEnterpriseInstall,
+                });
                 managed = !!(await getActiveIntegrationInstallationByKey("slack", key));
             }
             catch { }
@@ -745,7 +781,22 @@ async function enforceWorkspaceAllowlist(payload) {
         }
     }
     if (allowedTeamIds) {
-        if (!teamId || !allowedTeamIds.has(teamId)) {
+        let allowedEnterpriseInstall = false;
+        if (installationScope.isEnterpriseInstall) {
+            try {
+                const key = slackInstallationKey({
+                    teamId,
+                    apiAppId,
+                    enterpriseId: installationScope.enterpriseId,
+                    isEnterpriseInstall: true,
+                });
+                allowedEnterpriseInstall =
+                    !!(await getActiveIntegrationInstallationByKey("slack", key));
+                // coercion-ok: lookup failure leaves the enterprise event denied below
+            }
+            catch { }
+        }
+        if ((!teamId || !allowedTeamIds.has(teamId)) && !allowedEnterpriseInstall) {
             throw createError({
                 statusCode: 401,
                 statusMessage: "Unrecognized Slack workspace",

package/dist/notifications/routes.d.ts

@@ -11,14 +11,14 @@
  *   DELETE /_agent-native/notifications/:id         — delete
  */
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
+    error?: undefined;
     count: number;
     updated?: undefined;
-    error?: undefined;
     ok?: undefined;
 } | {
+    error?: undefined;
     count?: undefined;
     updated: number;
-    error?: undefined;
     ok?: undefined;
 } | {
     count?: undefined;
@@ -26,8 +26,8 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
     error: string;
     ok?: undefined;
 } | {
+    error?: undefined;
     count?: undefined;
     updated?: undefined;
-    error?: undefined;
     ok: boolean;
 }>>;

package/dist/progress/routes.d.ts

@@ -15,6 +15,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/server/agent-chat/action-filters-a2a.d.ts

@@ -1,4 +1,4 @@
-import { type A2AArtifactResponseOptions, type A2AToolResultSummary } from "../../a2a/artifact-response.js";
+import { type A2AArtifactResponseOptions, type A2APersistedMutationReceipt, type A2AToolResultSummary } from "../../a2a/artifact-response.js";
 import type { AgentSkill } from "../../a2a/types.js";
 import type { EngineTool } from "../../agent/engine/types.js";
 import { type ActionEntry, type AgentLoopOutcome } from "../../agent/production-agent.js";
@@ -74,6 +74,7 @@ export declare function assembleA2AFinalResponse(events: readonly AgentChatEvent
 }): {
     responseText: string;
     finalText: string;
+    mutationReceipts: A2APersistedMutationReceipt[];
 };
 type A2AAgentLoopRunner = typeof runAgentLoopDirectWithSoftTimeout;
 /**

package/dist/server/agent-chat/action-filters-a2a.js

@@ -1,5 +1,5 @@
 import { getHeader } from "h3";
-import { appendA2AArtifactLinks, } from "../../a2a/artifact-response.js";
+import { appendA2AArtifactLinks, extractA2APersistedMutationReceipts, } from "../../a2a/artifact-response.js";
 import { collectFinalResponseTextFromAgentEvents } from "../../a2a/response-text.js";
 import { resolveMainChatMaxOutputTokens } from "../../agent/engine/output-tokens.js";
 import { filterInitialEngineTools, resolveAgentRequestReasoningEffort, } from "../../agent/production-agent.js";
@@ -200,7 +200,15 @@ export function assembleA2AFinalResponse(events, toolResults, options = {}) {
         baseUrl: options.baseUrl ?? resolveArtifactBaseUrl(options.event),
         includeReferencedArtifacts: true,
         includePersistedArtifactMarker: true,
+        persistedArtifactSecret: options.persistedArtifactSecret,
+        delegatedTaskId: options.delegatedTaskId,
     });
+    const mutationReceipts = extractA2APersistedMutationReceipts([...toolResults], options.persistedArtifactSecret
+        ? {
+            persistedArtifactSecrets: [options.persistedArtifactSecret],
+            expectedDelegatedTaskId: options.delegatedTaskId,
+        }
+        : {});
     if (terminalError) {
         const partialResult = finalText.trim()
             ? `\n\nPartial verified results before the failure:\n${finalText.trim()}`
@@ -210,7 +218,7 @@ export function assembleA2AFinalResponse(events, toolResults, options = {}) {
     if (!finalText.trim()) {
         throw new Error("Agent completed without a response or verified artifact.\ncode: empty_agent_response");
     }
-    return { responseText, finalText };
+    return { responseText, finalText, mutationReceipts };
 }
 function terminalErrorFromOutcome(outcome) {
     if (outcome.state === "completed")