@agent-native/core 0.164.4 → 0.164.12

package/dist/server/release-schema.js

@@ -0,0 +1,307 @@
+/**
+ * Release-time creation of every framework-owned table that a store would
+ * otherwise create on first use.
+ *
+ * `ensureTable()` is the framework's schema definition: the DDL lives next to
+ * the store that owns it, and there is no second copy in a migration list. On a
+ * long-lived server that works, because the first request creates what is
+ * missing. On production serverless it does NOT: `schemaEnsureDisabled()` turns
+ * every probe into "already present" so a cold start never pays for ~390
+ * probes, which means nothing on the request path can create a table.
+ *
+ * So the release step has to run the same paths, and this module is the list
+ * that makes it complete. It is deliberately explicit rather than a
+ * side-effect-import registry: `package.json#sideEffects` is a narrow
+ * allow-list, so an import kept only for its registration is exactly what a
+ * bundler is entitled to drop — and the symptom would be a missing table in
+ * production, months later.
+ *
+ * The imports are dynamic on purpose. `server/index.ts` and `server/edge.ts`
+ * re-export `runFrameworkReleaseMigrations`, so a static list here would pull
+ * all 60 store modules into the graph of every server boot to serve a path
+ * that runs once, at release. Loading them inside the step keeps request cold
+ * starts unchanged.
+ *
+ * `guard:release-schema-complete` fails the build when a module defines schema
+ * and is not listed here.
+ */
+const FRAMEWORK_SCHEMA_ENSURES = [
+    [
+        "A2aContinuations",
+        () => import("../integrations/a2a-continuations-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "A2aTaskStore",
+        () => import("../a2a/task-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "AgentHarnessSessions",
+        () => import("../agent/harness/store.js").then((m) => m.ensureAgentHarnessSessionTables()),
+    ],
+    [
+        "AgentRuns",
+        () => import("../agent/run-store.js").then((m) => m.ensureRunTables()),
+    ],
+    [
+        "AgentTeamRunQueue",
+        () => import("./agent-teams-run-queue.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "AgentToolApprovals",
+        () => import("../agent/tool-approval-store.js").then((m) => m.ensureAgentToolApprovalTable()),
+    ],
+    [
+        "AppSecrets",
+        () => import("../secrets/storage.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "ApplicationState",
+        () => import("../application-state/store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "Audit",
+        () => import("../audit/store.js").then((m) => m.ensureAuditTables()),
+    ],
+    [
+        "AuthSessions",
+        () => import("./auth.js").then((m) => m.ensureSessionTable()),
+    ],
+    [
+        "AutomationRunHistory",
+        () => import("../jobs/run-history.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "AwaitingInputs",
+        () => import("../integrations/awaiting-input-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "BrowserSessions",
+        () => import("../browser-sessions/store.js").then((m) => m.ensureTables()),
+    ],
+    [
+        "ChatThreads",
+        () => import("../chat-threads/store.js").then((m) => m.ensureChatThreadTables()),
+    ],
+    [
+        "Checkpoints",
+        () => import("../checkpoints/store.js").then((m) => m.ensureCheckpointTable()),
+    ],
+    [
+        "CollabAwareness",
+        () => import("../collab/awareness-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "CollabDocs",
+        () => import("../collab/storage.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "ComputerApprovals",
+        () => import("../integrations/computer-supervision-store.js").then((m) => m.ensureComputerApprovalStore()),
+    ],
+    [
+        "ConversationScopes",
+        () => import("../integrations/scope-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "CustomApiProviders",
+        () => import("../provider-api/custom-registry.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "DataPrograms",
+        () => import("../data-programs/store.js").then((m) => m.ensureDataProgramTables()),
+    ],
+    [
+        "EmailLog",
+        () => import("../email-catalog/log.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "EmbedSessions",
+        () => import("./embed-session.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "ExtensionSlots",
+        () => import("../extensions/slots/store.js").then((m) => m.ensureSlotTables()),
+    ],
+    [
+        "Extensions",
+        () => import("../extensions/store.js").then((m) => m.ensureExtensionsTables()),
+    ],
+    [
+        "IdentityLinks",
+        () => import("../integrations/identity-links-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "IdentitySso",
+        () => import("./identity-sso-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "Installations",
+        () => import("../integrations/installations-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "IntegrationCampaigns",
+        () => import("../integrations/integration-campaigns-store.js").then((m) => m.ensureIntegrationCampaignsTable()),
+    ],
+    [
+        "IntegrationConfigs",
+        () => import("../integrations/config-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "IntegrationControls",
+        () => import("../integrations/controls-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "McpApprovals",
+        () => import("../mcp/approval-store.js").then((m) => m.ensureApprovalTable()),
+    ],
+    [
+        "McpConnect",
+        () => import("../mcp/connect-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "McpOauth",
+        () => import("../mcp/oauth-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "Notifications",
+        () => import("../notifications/store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "OauthTokens",
+        () => import("../oauth-tokens/store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "Observability",
+        () => import("../observability/store.js").then((m) => m.ensureObservabilityTables()),
+    ],
+    [
+        "ObservationalMemory",
+        () => import("../agent/observational-memory/store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "PendingTasks",
+        () => import("../integrations/pending-tasks-store.js").then((m) => m.ensurePendingTasksTable()),
+    ],
+    [
+        "Progress",
+        () => import("../progress/store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "ProviderCorpusJobs",
+        () => import("../provider-api/corpus-jobs-store.js").then((m) => m.ensureTables()),
+    ],
+    [
+        "ProviderQuotaCooldowns",
+        () => import("../provider-api/quota-governor.js").then((m) => m.ensureCooldownTable()),
+    ],
+    [
+        "RecapImages",
+        () => import("./recap-image-store.js").then((m) => m.ensureRecapImageTable()),
+    ],
+    [
+        "RemoteCommands",
+        () => import("../integrations/remote-commands-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "RemoteDevices",
+        () => import("../integrations/remote-devices-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "RemotePush",
+        () => import("../integrations/remote-push-store.js").then((m) => m.ensureTables()),
+    ],
+    [
+        "RemoteRunEvents",
+        () => import("../integrations/remote-run-events-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "ResourceVersions",
+        () => import("../history/store.js").then((m) => m.ensureResourceVersionsTable()),
+    ],
+    [
+        "Resources",
+        () => import("../resources/store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "Review",
+        () => import("../review/store.js").then((m) => m.ensureReviewTables()),
+    ],
+    [
+        "SandboxExecutions",
+        () => import("../coding-tools/sandbox/executions-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "SchedulerHealth",
+        () => import("../jobs/scheduler-health.js").then((m) => m.ensureHealthTable()),
+    ],
+    [
+        "Settings",
+        () => import("../settings/store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "StagedDatasets",
+        () => import("../provider-api/staged-datasets-store.js").then((m) => m.ensureTables()),
+    ],
+    [
+        "SyncEvents",
+        () => import("./poll.js").then((m) => m
+            .getDefaultAppSyncState()
+            .ensureSyncEventsTable()
+            .then(() => { })),
+    ],
+    [
+        "ThreadMappings",
+        () => import("../integrations/thread-mapping-store.js").then((m) => m.ensureTable()),
+    ],
+    [
+        "Usage",
+        () => import("../usage/store.js").then((m) => m.ensureUsageTable()),
+    ],
+    [
+        "UsageAlerts",
+        () => import("../usage/alerts-store.js").then((m) => m.ensureTables()),
+    ],
+    [
+        "UsageBudgets",
+        () => import("../integrations/usage-budget-store.js").then((m) => m.ensureTables()),
+    ],
+    [
+        "WorkspaceConnections",
+        () => import("../workspace-connections/store.js").then((m) => m.ensureWorkspaceConnectionsTable()),
+    ],
+    [
+        "WorkspaceUserGroups",
+        () => import("../workspace-connections/groups.js").then((m) => m.ensureWorkspaceUserGroupsTable()),
+    ],
+];
+/** Store names in release order. Exported for the guard and its tests. */
+export function frameworkSchemaEnsureNames() {
+    return FRAMEWORK_SCHEMA_ENSURES.map(([name]) => name);
+}
+/**
+ * Create every framework-owned table, in one pass, before the app serves
+ * traffic. Callers must already hold migration duty via `withMigrationRuntime`;
+ * without it `schemaEnsureDisabled()` reports every table present and this
+ * whole pass silently creates nothing.
+ *
+ * Sequential on purpose: these run against one database at release time, where
+ * total wall clock does not matter and concurrent `CREATE TABLE` on a shared
+ * Neon instance contends for `ACCESS EXCLUSIVE` locks.
+ *
+ * A failure aborts the release rather than being collected and reported at the
+ * end. A half-created schema that reports success is the failure mode this
+ * module exists to remove.
+ */
+export async function runFrameworkSchemaEnsures(
+// Injectable so the ordering and failure contract can be tested without
+// standing up 60 real stores; production callers pass nothing.
+ensures = FRAMEWORK_SCHEMA_ENSURES) {
+    for (const [name, run] of ensures) {
+        try {
+            await run();
+        }
+        catch (err) {
+            throw new Error(`Release schema step failed while creating ${name}: ${err?.message ?? String(err)}`, { cause: err });
+        }
+    }
+}

package/dist/settings/store.d.ts

@@ -1,5 +1,6 @@
 import type { EventEmitter } from "node:events";
 export declare function getSettingsEmitter(): EventEmitter;
+export declare function ensureTable(): Promise<void>;
 export declare function getSetting(key: string): Promise<Record<string, unknown> | null>;
 export interface StoreWriteOptions {
     /** Tag identifying who initiated this write (e.g. a tab ID). */

package/dist/settings/store.js

@@ -58,7 +58,7 @@ export function getSettingsEmitter() {
 function settingsTable() {
     return isPostgres() ? "public.settings" : "settings";
 }
-async function ensureTable() {
+export async function ensureTable() {
     if (!_initPromise) {
         _initPromise = (async () => {
             const client = getDbExec();

package/dist/shared/environment-lanes.d.ts

@@ -0,0 +1,28 @@
+export declare const BETA_OPT_OUT_QUERY_PARAM = "agentNativeBetaOptOut";
+export declare const BETA_OPT_OUT_DURATION_MS: number;
+export declare const ENVIRONMENT_BETA_HOSTS: {
+    readonly "agent-workspace.builder.io": "beta.agent-workspace.builder.io";
+    readonly "analytics.agent-native.com": "beta.analytics.agent-native.com";
+    readonly "assets.agent-native.com": "beta.assets.agent-native.com";
+    readonly "brain.agent-native.com": "beta.brain.agent-native.com";
+    readonly "calendar.agent-native.com": "beta.calendar.agent-native.com";
+    readonly "chat.agent-native.com": "beta.chat.agent-native.com";
+    readonly "clips.agent-native.com": "beta.clips.agent-native.com";
+    readonly "content.agent-native.com": "beta.content.agent-native.com";
+    readonly "crm.agent-native.com": "beta.crm.agent-native.com";
+    readonly "design.agent-native.com": "beta.design.agent-native.com";
+    readonly "dispatch.agent-native.com": "beta.dispatch.agent-native.com";
+    readonly "factory.agent-native.com": "beta.factory.agent-native.com";
+    readonly "forms.agent-native.com": "beta.forms.agent-native.com";
+    readonly "macros.agent-native.com": "beta.macros.agent-native.com";
+    readonly "mail.agent-native.com": "beta.mail.agent-native.com";
+    readonly "plan.agent-native.com": "beta.plan.agent-native.com";
+    readonly "slides.agent-native.com": "beta.slides.agent-native.com";
+};
+export interface EnvironmentBadgeTargets {
+    betaHost: string;
+    productionHost: string;
+}
+export declare function resolveEnvironmentTargets(hostname: string | undefined): EnvironmentBadgeTargets | null;
+export declare function buildEnvironmentUrl(sourceHref: string, targetHost: string): string | null;
+export declare function buildEnvironmentOptOutUrl(sourceHref: string, targetHost: string, now?: number): string | null;

package/dist/shared/environment-lanes.js

@@ -0,0 +1,61 @@
+export const BETA_OPT_OUT_QUERY_PARAM = "agentNativeBetaOptOut";
+export const BETA_OPT_OUT_DURATION_MS = 24 * 60 * 60 * 1000;
+export const ENVIRONMENT_BETA_HOSTS = {
+    "agent-workspace.builder.io": "beta.agent-workspace.builder.io",
+    "analytics.agent-native.com": "beta.analytics.agent-native.com",
+    "assets.agent-native.com": "beta.assets.agent-native.com",
+    "brain.agent-native.com": "beta.brain.agent-native.com",
+    "calendar.agent-native.com": "beta.calendar.agent-native.com",
+    "chat.agent-native.com": "beta.chat.agent-native.com",
+    "clips.agent-native.com": "beta.clips.agent-native.com",
+    "content.agent-native.com": "beta.content.agent-native.com",
+    "crm.agent-native.com": "beta.crm.agent-native.com",
+    "design.agent-native.com": "beta.design.agent-native.com",
+    "dispatch.agent-native.com": "beta.dispatch.agent-native.com",
+    "factory.agent-native.com": "beta.factory.agent-native.com",
+    "forms.agent-native.com": "beta.forms.agent-native.com",
+    "macros.agent-native.com": "beta.macros.agent-native.com",
+    "mail.agent-native.com": "beta.mail.agent-native.com",
+    "plan.agent-native.com": "beta.plan.agent-native.com",
+    "slides.agent-native.com": "beta.slides.agent-native.com",
+};
+export function resolveEnvironmentTargets(hostname) {
+    const normalized = hostname?.trim().toLowerCase().replace(/\.$/, "");
+    if (!normalized)
+        return null;
+    const productionHost = normalized.replace(/^beta\./, "");
+    const betaHost = ENVIRONMENT_BETA_HOSTS[productionHost];
+    if (!betaHost)
+        return null;
+    return {
+        betaHost,
+        productionHost,
+    };
+}
+export function buildEnvironmentUrl(sourceHref, targetHost) {
+    try {
+        const target = new URL(sourceHref);
+        target.protocol = "https:";
+        target.hostname = targetHost;
+        target.port = "";
+        return target.toString();
+    }
+    catch {
+        // coercion-ok: Invalid navigation input is an explicit absent target.
+        return null;
+    }
+}
+export function buildEnvironmentOptOutUrl(sourceHref, targetHost, now = Date.now()) {
+    const targetHref = buildEnvironmentUrl(sourceHref, targetHost);
+    if (!targetHref)
+        return null;
+    try {
+        const target = new URL(targetHref);
+        target.searchParams.set(BETA_OPT_OUT_QUERY_PARAM, String(now + BETA_OPT_OUT_DURATION_MS));
+        return target.toString();
+    }
+    catch {
+        // coercion-ok: buildEnvironmentUrl already validated the URL.
+        return null;
+    }
+}

package/dist/sharing/actions/share-resource.js

@@ -224,7 +224,9 @@ export default defineAction({
             return { id: existing.id, updated: true };
         }
         const id = nanoid();
-        await db.insert(reg.sharesTable).values({
+        const [inserted] = await db
+            .insert(reg.sharesTable)
+            .values({
             id,
             resourceId: args.resourceId,
             principalType: args.principalType,
@@ -232,7 +234,25 @@ export default defineAction({
             role: args.role,
             createdBy: actor,
             createdAt: new Date().toISOString(),
-        });
+        })
+            .onConflictDoNothing()
+            .returning({ id: reg.sharesTable.id });
+        if (!inserted) {
+            const [existingAfterConflict] = await db
+                .select()
+                .from(reg.sharesTable)
+                .where(and(eq(reg.sharesTable.resourceId, args.resourceId), eq(reg.sharesTable.principalType, args.principalType), principalIdMatches(reg.sharesTable, args.principalType, principalId)));
+            if (!existingAfterConflict) {
+                throw new Error("Share conflict could not be resolved.");
+            }
+            await db
+                .update(reg.sharesTable)
+                .set({ role: args.role })
+                .where(eq(reg.sharesTable.id, existingAfterConflict.id));
+            invalidateCollabAccessCache(args.resourceType, args.resourceId);
+            await notifyExtensionShareChanged(args.resourceType, args.resourceId, beforeExtensionTargets);
+            return { id: existingAfterConflict.id, updated: true };
+        }
         invalidateCollabAccessCache(args.resourceType, args.resourceId);
         await notifyExtensionShareChanged(args.resourceType, args.resourceId, beforeExtensionTargets);
         if (args.notify !== false &&

package/dist/styles/agent-native.css

@@ -835,9 +835,16 @@
 /* Connect AI card: use the card width, not the viewport, so narrow embedded
    sidebars stack the copy and actions before the secondary button clips. */
 .agent-builder-setup-card {
+  container-type: inline-size;
+  container-name: agent-builder-setup;
   min-inline-size: min(18rem, 100%);
 }
 
+.agent-builder-setup-content {
+  container-type: inline-size;
+  container-name: agent-builder-setup;
+}
+
 /* Provider setup tucks behind the composer. The extra bottom paint is hidden
    by the higher composer layer, leaving one connected control. */
 .agent-builder-setup-card--attached {
@@ -887,11 +894,6 @@
   box-shadow: none;
 }
 
-.agent-builder-setup-card--sidebar {
-  container-type: inline-size;
-  container-name: agent-builder-setup;
-}
-
 .agent-builder-setup-card--sidebar .agent-builder-setup-card__actions {
   gap: 0.25rem;
 }
@@ -925,16 +927,15 @@
   }
 
   .agent-builder-setup-card__actions {
-    align-items: center;
-    flex-direction: row;
-    flex-wrap: wrap;
+    align-items: stretch;
+    flex-direction: column;
     gap: 0.5rem;
     width: 100%;
   }
 
   .agent-builder-setup-card__builder-cta {
     align-items: stretch;
-    flex: 0 1 auto;
+    width: 100%;
   }
 
   .agent-builder-setup-card__builder-button {
@@ -946,14 +947,15 @@
   .agent-builder-setup-card__key-button {
     flex: 0 0 auto;
     min-width: 0;
-    width: auto;
+    width: 100%;
   }
-}
 
-@container agent-builder-setup (max-width: 360px) {
-  .agent-builder-setup-card__actions {
-    align-items: stretch;
-    flex-direction: column;
+  .agent-builder-setup-card--sidebar .agent-builder-setup-card__builder-button {
+    width: 100%;
+  }
+
+  .agent-builder-setup-card--sidebar .agent-builder-setup-card__key-button {
+    width: 100%;
   }
 }
 

package/dist/triggers/routes.d.ts

@@ -1,4 +1,5 @@
 import { type H3Event } from "h3";
+import { type JobFrontmatter } from "../jobs/frontmatter.js";
 import type { TriggerFrontmatter } from "./types.js";
 export interface AutomationRouteItem {
     id: string;
@@ -6,6 +7,7 @@ export interface AutomationRouteItem {
     path: string;
     owner: string;
     appId?: string;
+    orgId?: string;
     scope: "personal" | "organization";
     canUpdate: boolean;
     triggerType: TriggerFrontmatter["triggerType"];
@@ -24,6 +26,15 @@ export interface AutomationRouteItem {
     nextRun?: string;
     createdBy?: string;
     body: string;
+    model?: string;
+    mcpTools: string[];
+    runAs?: JobFrontmatter["runAs"];
+    executionHostId?: string;
+    executionEngine?: string;
+    executionCwd?: string;
+    deliveryPlatform?: string;
+    deliveryDestination?: string;
+    deliveryThreadRef?: string;
 }
 interface SetAutomationEnabledInput {
     owner?: string;

package/dist/triggers/routes.js

@@ -123,6 +123,7 @@ async function resourceToAutomationItem(event, userEmail, resource) {
         path: resource.path,
         owner: resource.owner,
         appId: meta.appId,
+        orgId: meta.orgId,
         scope: resource.owner === userEmail && !meta.orgId ? "personal" : "organization",
         canUpdate: await currentUserCanUpdateAutomation(event, userEmail, resource, meta),
         triggerType: meta.triggerType,
@@ -141,6 +142,15 @@ async function resourceToAutomationItem(event, userEmail, resource) {
         nextRun: nextRunForMeta(meta),
         createdBy: meta.createdBy,
         body: parsed.body,
+        model: meta.model,
+        mcpTools: meta.mcpTools ?? [],
+        runAs: meta.runAs,
+        executionHostId: meta.executionHostId,
+        executionEngine: meta.executionEngine,
+        executionCwd: meta.executionCwd,
+        deliveryPlatform: meta.deliveryPlatform,
+        deliveryDestination: meta.deliveryDestination,
+        deliveryThreadRef: meta.deliveryThreadRef,
     };
 }
 export async function listAutomationsForOwner(event, userEmail) {

package/dist/usage/alerts-store.d.ts

@@ -58,6 +58,7 @@ export interface UsageAlertMutationResult {
     rules: UsageAlertRule[];
     current: UsageAlertEventSummary | null;
 }
+export declare function ensureTables(): Promise<void>;
 export declare function listUsageAlerts(input: UsageAlertListOptions, access: UsageAlertAccess): Promise<UsageAlertRule[]>;
 export declare function saveUsageAlert(input: SaveUsageAlertInput, access: UsageAlertAccess): Promise<UsageAlertMutationResult>;
 export declare function setUsageAlertEnabled(ruleId: string, scope: UsageAlertScope, enabled: boolean, access: UsageAlertAccess): Promise<UsageAlertMutationResult>;

package/dist/usage/alerts-store.js

@@ -80,7 +80,7 @@ function ruleIdFor(partition, appId, unit, period) {
         : `user:${partition.ownerEmail}`;
     return `usage-alert:${partition.scope}:${principal}:${appId ?? "all"}:${unit}:${period}`;
 }
-async function ensureTables() {
+export async function ensureTables() {
     if (!initPromise) {
         initPromise = (async () => {
             const db = getDbExec();

package/dist/usage/store.d.ts

@@ -47,6 +47,7 @@ export interface UsageRecord {
     sourceId?: string;
 }
 export type UsageCostSource = "reported" | "estimated" | "unavailable";
+export declare function ensureUsageTable(): Promise<void>;
 /**
  * Calculate cost in centicents (1/100th of a cent).
  * Accepts cache tokens so callers that use prompt caching are priced

package/dist/usage/store.js

@@ -139,7 +139,7 @@ function pricingFor(model) {
     return PRICING[PRICING.length - 1].pricing;
 }
 let _initPromise;
-async function ensureUsageTable() {
+export async function ensureUsageTable() {
     if (!_initPromise) {
         _initPromise = (async () => {
             const client = getDbExec();