@agent-native/core 0.169.1 → 0.171.0

package/dist/jobs/actions/run-automation-now.d.ts

@@ -1,5 +1,6 @@
 declare const _default: import("../../action.js").ActionDefinition<{
-    name: string;
+    name?: string;
+    path?: string;
     scope?: "organization" | "personal";
 }, import("../run-now.js").QueuedAutomationRun>;
 export default _default;

package/dist/jobs/actions/run-automation-now.js

@@ -2,13 +2,18 @@ import { z } from "zod";
 import { defineAction } from "../../action.js";
 import { queueAutomationRunNow } from "../run-now.js";
 export default defineAction({
-    description: "Run one personal or organization automation immediately. This is an explicit send/run action and may perform the automation's real side effects.",
+    description: "Run one personal or organization automation immediately. This is an explicit send/run action and may perform the automation's real side effects. Pass a flat `name` or a nested `path` such as jobs/factories/<id>/factory-slack-feedback.md — not both.",
     agentTool: false,
-    schema: z.object({
-        name: z.string().min(1),
+    schema: z
+        .object({
+        name: z.string().min(1).optional(),
+        path: z.string().min(1).optional(),
         scope: z.enum(["personal", "organization"]).default("personal"),
+    })
+        .refine((value) => Boolean(value.name) !== Boolean(value.path), {
+        message: "Specify either an automation name or a path, not both.",
     }),
-    run: async ({ name, scope }, ctx) => {
+    run: async ({ name, path, scope }, ctx) => {
         if (!ctx?.userEmail)
             throw new Error("Not authenticated.");
         return queueAutomationRunNow({
@@ -16,7 +21,8 @@ export default defineAction({
             orgId: ctx.orgId,
             appId: ctx.appId,
             scope,
-            name,
+            ...(path ? { path } : { name }),
+            requestHeaders: ctx.requestHeaders,
         });
     },
 });

package/dist/jobs/frontmatter.js

@@ -20,6 +20,44 @@ const FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n)?([\s\S]*)$/;
 const DELEGATED_POLICY_ID_RE = /^[a-z0-9][a-z0-9._:-]{0,127}$/i;
 const EXECUTION_ID_RE = /^[a-z0-9][a-z0-9._:-]{0,127}$/i;
 const REMOTE_ID_RE = /^[a-z0-9][a-z0-9@+._:/-]{0,511}$/i;
+const EXTRA_FRONTMATTER_LINES = Symbol("extraFrontmatterLines");
+const KNOWN_FRONTMATTER_FIELDS = new Set([
+    "schedule",
+    "enabled",
+    "timezone",
+    "createdBy",
+    "orgId",
+    "runAs",
+    "lastRun",
+    "lastCheck",
+    "lastStatus",
+    "lastError",
+    "nextRun",
+    "originScopeId",
+    "deliveryPlatform",
+    "deliveryDestination",
+    "deliveryThreadRef",
+    "deliveryTenantId",
+    "model",
+    "maxIterations",
+    "maxRunInputTokens",
+    "mcpTools",
+    "triggerType",
+    "event",
+    "condition",
+    "mode",
+    "domain",
+    "appId",
+    "executionHostId",
+    "executionEngine",
+    "executionCwd",
+    "remoteRequestId",
+    "remoteCommandId",
+    "remoteRunId",
+    "remoteAutomationRunId",
+    "remoteAdvanceSchedule",
+    "delegatedPolicyId",
+]);
 function assertBoundedFrontmatterValue(value, label, pattern) {
     if (value === undefined)
         return;
@@ -216,11 +254,23 @@ export function parseJobResource(content) {
         };
     }
     const meta = { schedule: "", enabled: true };
+    const extraLines = [];
     for (const line of match[1].split(/\r?\n/)) {
         const colonIdx = line.indexOf(":");
-        if (colonIdx === -1)
+        if (colonIdx === -1) {
+            if (line.trim())
+                extraLines.push(line);
             continue;
-        parseKnownField(meta, line.slice(0, colonIdx).trim(), line.slice(colonIdx + 1));
+        }
+        const key = line.slice(0, colonIdx).trim();
+        if (!KNOWN_FRONTMATTER_FIELDS.has(key)) {
+            extraLines.push(line);
+            continue;
+        }
+        parseKnownField(meta, key, line.slice(colonIdx + 1));
+    }
+    if (extraLines.length) {
+        meta[EXTRA_FRONTMATTER_LINES] = extraLines;
     }
     return {
         meta,
@@ -307,6 +357,7 @@ export function buildJobResourceContent(meta, body) {
     if (meta.mcpTools?.length) {
         lines.push(`mcpTools: ${JSON.stringify(meta.mcpTools)}`);
     }
+    lines.push(...(meta[EXTRA_FRONTMATTER_LINES] ?? []));
     lines.push("---", "", body);
     return lines.join("\n");
 }

package/dist/jobs/run-now.d.ts

@@ -4,7 +4,16 @@ export interface RunAutomationNowInput {
     orgId?: string | null;
     appId?: string | null;
     scope: AutomationScope;
-    name: string;
+    /** Inbound request headers used to dispatch back to this exact local host. */
+    requestHeaders?: Headers;
+    /** Flat automation name, resolved as `jobs/<name>.md`. */
+    name?: string;
+    /**
+     * Full resource path for an automation the caller already resolved. Required
+     * for automations nested under `jobs/` (e.g. per-factory jobs), whose names
+     * contain a slash and cannot round-trip through `name`.
+     */
+    path?: string;
 }
 export interface QueuedAutomationRun {
     queued: true;
@@ -19,4 +28,5 @@ export declare function queueAutomationRunNow(input: RunAutomationNowInput): Pro
  */
 export declare function redispatchUnclaimedAutomationRuns(options?: {
     appId?: string | null;
+    requestHeaders?: Headers;
 }): Promise<number>;

package/dist/jobs/run-now.js

@@ -5,11 +5,12 @@ import { organizationResourceOwner, resourceGetByPath, } from "../resources/stor
 import { fireInternalDispatch } from "../server/self-dispatch.js";
 import { parseJobResource } from "./frontmatter.js";
 import { listUnclaimedAutomationRuns, startAutomationRun, } from "./run-history.js";
-async function dispatchAutomationRun(historyId) {
+async function dispatchAutomationRun(historyId, requestHeaders) {
     const dispatchPath = resolveAgentChatProcessRunDispatchPath();
     await fireInternalDispatch({
         path: dispatchPath,
         taskId: historyId,
+        ...(requestHeaders ? { event: { headers: requestHeaders } } : {}),
         body: {
             [AGENT_CHAT_BACKGROUND_RUN_FIELD]: {
                 runId: historyId,
@@ -23,6 +24,9 @@ async function dispatchAutomationRun(historyId) {
                 : {}),
     });
 }
+function automationName(path) {
+    return path.replace(/^jobs\//, "").replace(/\.md$/, "");
+}
 function ownerForScope(input) {
     if (input.scope === "personal")
         return input.userEmail.trim().toLowerCase();
@@ -31,15 +35,43 @@ function ownerForScope(input) {
     }
     return organizationResourceOwner(input.orgId);
 }
-export async function queueAutomationRunNow(input) {
-    const name = input.name.trim();
+/**
+ * One place decides which resource a run-now request means. Callers that
+ * already hold the resource pass `path`; callers that only know a flat slug
+ * pass `name`. Accepting both at once would let two disagreeing identifiers
+ * silently pick a winner.
+ */
+function resolveAutomationTarget(input) {
+    const path = input.path?.trim();
+    const name = input.name?.trim();
+    if (path && name) {
+        throw Object.assign(new Error("Specify either an automation name or a path, not both."), { statusCode: 400 });
+    }
+    if (path) {
+        const segments = path.split("/");
+        const valid = segments[0] === "jobs" &&
+            segments.length > 1 &&
+            path.endsWith(".md") &&
+            !path.includes("\\") &&
+            segments.every((segment) => segment && segment !== "." && segment !== "..");
+        if (!valid) {
+            throw Object.assign(new Error("A valid automation path is required."), {
+                statusCode: 400,
+            });
+        }
+        return { path, name: automationName(path) };
+    }
     if (!name || name.includes("/") || name.endsWith(".md")) {
         throw Object.assign(new Error("A valid automation name is required."), {
             statusCode: 400,
         });
     }
+    return { path: `jobs/${name}.md`, name };
+}
+export async function queueAutomationRunNow(input) {
+    const { path, name } = resolveAutomationTarget(input);
     const owner = ownerForScope(input);
-    const resource = await resourceGetByPath(owner, `jobs/${name}.md`);
+    const resource = await resourceGetByPath(owner, path);
     if (!resource) {
         throw Object.assign(new Error(`Automation "${name}" not found.`), {
             statusCode: 404,
@@ -56,7 +88,10 @@ export async function queueAutomationRunNow(input) {
     }
     // A manual-run request is a guaranteed app request even on hosts without a
     // durable timer. Use it to recover older rows before adding the new one.
-    await redispatchUnclaimedAutomationRuns({ appId: input.appId }).catch((error) => {
+    await redispatchUnclaimedAutomationRuns({
+        appId: input.appId,
+        requestHeaders: input.requestHeaders,
+    }).catch((error) => {
         console.warn("[automations] Could not sweep queued runs before run-now:", error);
     });
     const historyId = await startAutomationRun({
@@ -69,7 +104,7 @@ export async function queueAutomationRunNow(input) {
         dispatchPending: true,
     });
     try {
-        await dispatchAutomationRun(historyId);
+        await dispatchAutomationRun(historyId, input.requestHeaders);
     }
     catch (error) {
         const message = error instanceof Error ? error.message : "Background dispatch failed";
@@ -88,7 +123,7 @@ export async function redispatchUnclaimedAutomationRuns(options) {
     let attempted = 0;
     for (const run of runs) {
         try {
-            await dispatchAutomationRun(run.id);
+            await dispatchAutomationRun(run.id, options?.requestHeaders);
             attempted += 1;
         }
         catch (error) {

package/dist/jobs/scheduler.d.ts

@@ -38,6 +38,7 @@ interface JobExecutionResult {
 /** Execute one stored automation without changing its scheduled next run. */
 export declare function runJobNow(owner: string, name: string, deps: SchedulerDeps, options?: {
     historyId?: string;
+    path?: string;
 }): Promise<JobExecutionResult>;
 /** Process a durable run-now history row exactly once in the background worker. */
 export declare function runQueuedAutomation(historyId: string, deps: SchedulerDeps): Promise<{

package/dist/jobs/scheduler.js

@@ -553,7 +553,7 @@ async function executeJob(resource, meta, body, deps, now, options = {}) {
 }
 /** Execute one stored automation without changing its scheduled next run. */
 export async function runJobNow(owner, name, deps, options = {}) {
-    const path = `jobs/${name}.md`;
+    const path = options.path ?? `jobs/${name}.md`;
     const resource = await resourceGetByPath(owner, path);
     if (!resource)
         throw new Error(`Automation "${name}" not found.`);
@@ -581,6 +581,7 @@ export async function runQueuedAutomation(historyId, deps) {
     }
     const result = await runJobNow(queued.owner, queued.automation, deps, {
         historyId,
+        path: queued.path,
     });
     return {
         skipped: false,

package/dist/localization/core-messages/ar-SA.js

@@ -31,6 +31,8 @@ const messages = {
     "aboutAgentNative.copyDiagnostics": "نسخ بيانات التشخيص",
     "aboutAgentNative.unknown": "غير معروف",
     "common.agent": "الوكيل",
+    "agentPanel.mode": "الوضع",
+    "agentPanel.uiMode": "واجهة المستخدم",
     "common.cancel": "إلغاء",
     "common.collapse": "طي",
     "common.connect": "اتصال",
@@ -463,6 +465,7 @@ const messages = {
     "share.linkCanStillOpen": "لا يزال بإمكان من لديه الرابط فتحه.",
     "share.loading": "جارٍ التحميل...",
     "share.loadMore": "تحميل المزيد",
+    "share.loadFailed": "تعذّر تحميل إعدادات المشاركة.",
     "share.loadPeopleFailed": "تعذّر تحميل الأشخاص.",
     "share.noAccess": "لا أحد لديه صلاحية الوصول حتى الآن.",
     "share.noMatches": "لا توجد نتائج مطابقة.",

package/dist/localization/core-messages/de-DE.js

@@ -31,6 +31,8 @@ const messages = {
     "aboutAgentNative.copyDiagnostics": "Diagnosedaten kopieren",
     "aboutAgentNative.unknown": "Unbekannt",
     "common.agent": "Agent",
+    "agentPanel.mode": "Modus",
+    "agentPanel.uiMode": "Benutzeroberfläche",
     "common.cancel": "Abbrechen",
     "common.collapse": "Einklappen",
     "common.connect": "Verbinden",
@@ -498,6 +500,7 @@ const messages = {
     "share.linkCanStillOpen": "Personen mit dem Link können dies weiterhin öffnen.",
     "share.loading": "Laden...",
     "share.loadMore": "Mehr laden",
+    "share.loadFailed": "Freigabeeinstellungen konnten nicht geladen werden.",
     "share.loadPeopleFailed": "Es konnten keine Personen geladen werden.",
     "share.noAccess": "Noch hat niemand Zugriff.",
     "share.noMatches": "Keine Übereinstimmungen.",

package/dist/localization/core-messages/en-US.d.ts

@@ -31,6 +31,8 @@ declare const messages: {
     readonly "aboutAgentNative.copyDiagnostics": "Copy diagnostics";
     readonly "aboutAgentNative.unknown": "Unknown";
     readonly "common.agent": "Agent";
+    readonly "agentPanel.mode": "Mode";
+    readonly "agentPanel.uiMode": "UI";
     readonly "common.cancel": "Cancel";
     readonly "common.collapse": "Collapse";
     readonly "common.connect": "Connect";
@@ -447,6 +449,7 @@ declare const messages: {
     readonly "share.linkCanStillOpen": "People with the link can still open this.";
     readonly "share.loading": "Loading...";
     readonly "share.loadMore": "Load more";
+    readonly "share.loadFailed": "Couldn't load sharing settings.";
     readonly "share.loadPeopleFailed": "Could not load people.";
     readonly "share.noAccess": "No one has access yet.";
     readonly "share.noMatches": "No matches.";

package/dist/localization/core-messages/en-US.js

@@ -31,6 +31,8 @@ const messages = {
     "aboutAgentNative.copyDiagnostics": "Copy diagnostics",
     "aboutAgentNative.unknown": "Unknown",
     "common.agent": "Agent",
+    "agentPanel.mode": "Mode",
+    "agentPanel.uiMode": "UI",
     "common.cancel": "Cancel",
     "common.collapse": "Collapse",
     "common.connect": "Connect",
@@ -447,6 +449,7 @@ const messages = {
     "share.linkCanStillOpen": "People with the link can still open this.",
     "share.loading": "Loading...",
     "share.loadMore": "Load more",
+    "share.loadFailed": "Couldn't load sharing settings.",
     "share.loadPeopleFailed": "Could not load people.",
     "share.noAccess": "No one has access yet.",
     "share.noMatches": "No matches.",

package/dist/localization/core-messages/es-ES.js

@@ -31,6 +31,8 @@ const messages = {
     "aboutAgentNative.copyDiagnostics": "Copiar diagnóstico",
     "aboutAgentNative.unknown": "Desconocida",
     "common.agent": "Agente",
+    "agentPanel.mode": "Modo",
+    "agentPanel.uiMode": "Interfaz de usuario",
     "common.cancel": "Cancelar",
     "common.collapse": "Contraer",
     "common.connect": "Conectar",
@@ -505,6 +507,7 @@ const messages = {
     "share.linkCanStillOpen": "Las personas con el enlace aún pueden abrirlo.",
     "share.loading": "Cargando...",
     "share.loadMore": "Cargar más",
+    "share.loadFailed": "No se pudo cargar la configuración de uso compartido.",
     "share.loadPeopleFailed": "No se pudieron cargar las personas.",
     "share.noAccess": "Nadie tiene acceso todavía.",
     "share.noMatches": "Sin coincidencias.",

package/dist/localization/core-messages/fr-FR.js

@@ -31,6 +31,8 @@ const messages = {
     "aboutAgentNative.copyDiagnostics": "Copier les diagnostics",
     "aboutAgentNative.unknown": "Inconnue",
     "common.agent": "Agent",
+    "agentPanel.mode": "Mode",
+    "agentPanel.uiMode": "Interface utilisateur",
     "common.cancel": "Annuler",
     "common.collapse": "Réduire",
     "common.connect": "Connecter",
@@ -505,6 +507,7 @@ const messages = {
     "share.linkCanStillOpen": "Les personnes disposant du lien peuvent toujours l'ouvrir.",
     "share.loading": "Chargement...",
     "share.loadMore": "Afficher plus",
+    "share.loadFailed": "Impossible de charger les paramètres de partage.",
     "share.loadPeopleFailed": "Impossible de charger des personnes.",
     "share.noAccess": "Personne n'y a encore accès.",
     "share.noMatches": "Aucun résultat.",

package/dist/localization/core-messages/hi-IN.js

@@ -31,6 +31,8 @@ const messages = {
     "aboutAgentNative.copyDiagnostics": "डायग्नोस्टिक कॉपी करें",
     "aboutAgentNative.unknown": "अज्ञात",
     "common.agent": "एजेंट",
+    "agentPanel.mode": "मोड",
+    "agentPanel.uiMode": "यूआई",
     "common.cancel": "रद्द करें",
     "common.collapse": "समेटें",
     "common.connect": "कनेक्ट करें",
@@ -447,6 +449,7 @@ const messages = {
     "share.linkCanStillOpen": "लिंक वाले लोग इसे फिर भी खोल सकते हैं।",
     "share.loading": "लोड हो रहा है...",
     "share.loadMore": "और लोड करें",
+    "share.loadFailed": "साझाकरण सेटिंग्स लोड नहीं की जा सकीं।",
     "share.loadPeopleFailed": "लोगों को लोड नहीं किया जा सका।",
     "share.noAccess": "अभी किसी के पास एक्सेस नहीं है।",
     "share.noMatches": "कोई मिलान नहीं मिला।",

package/dist/localization/core-messages/ja-JP.js

@@ -31,6 +31,8 @@ const messages = {
     "aboutAgentNative.copyDiagnostics": "診断情報をコピー",
     "aboutAgentNative.unknown": "不明",
     "common.agent": "エージェント",
+    "agentPanel.mode": "モード",
+    "agentPanel.uiMode": "UI",
     "common.cancel": "キャンセル",
     "common.collapse": "折りたたむ",
     "common.connect": "接続",
@@ -442,6 +444,7 @@ const messages = {
     "share.hideInSearch": "検索結果に表示しない",
     "share.linkCanStillOpen": "リンクを知っているユーザーは引き続き開くことができます。",
     "share.loadMore": "さらに読み込む",
+    "share.loadFailed": "共有設定を読み込めませんでした。",
     "share.loadPeopleFailed": "ユーザーを読み込めませんでした。",
     "share.loading": "読み込み中...",
     "share.noAccess": "アクセスできるユーザーはまだいません。",

package/dist/localization/core-messages/ko-KR.js

@@ -31,6 +31,8 @@ const messages = {
     "aboutAgentNative.copyDiagnostics": "진단 정보 복사",
     "aboutAgentNative.unknown": "알 수 없음",
     "common.agent": "에이전트",
+    "agentPanel.mode": "모드",
+    "agentPanel.uiMode": "UI",
     "common.cancel": "취소",
     "common.collapse": "접기",
     "common.connect": "연결",
@@ -442,6 +444,7 @@ const messages = {
     "share.hideInSearch": "검색에서 숨기기",
     "share.linkCanStillOpen": "링크가 있는 사용자는 계속 열 수 있습니다.",
     "share.loadMore": "더 불러오기",
+    "share.loadFailed": "공유 설정을 불러올 수 없습니다.",
     "share.loadPeopleFailed": "사용자를 불러올 수 없습니다.",
     "share.loading": "불러오는 중...",
     "share.noAccess": "아직 접근 권한이 있는 사용자가 없습니다.",

package/dist/localization/core-messages/pt-BR.js

@@ -31,6 +31,8 @@ const messages = {
     "aboutAgentNative.copyDiagnostics": "Copiar diagnósticos",
     "aboutAgentNative.unknown": "Desconhecida",
     "common.agent": "Agente",
+    "agentPanel.mode": "Modo",
+    "agentPanel.uiMode": "Interface",
     "common.cancel": "Cancelar",
     "common.collapse": "Recolher",
     "common.connect": "Conectar",
@@ -505,6 +507,7 @@ const messages = {
     "share.linkCanStillOpen": "Pessoas com o link ainda podem abrir isto.",
     "share.loading": "Carregando...",
     "share.loadMore": "Ver mais",
+    "share.loadFailed": "Não foi possível carregar as configurações de compartilhamento.",
     "share.loadPeopleFailed": "Não foi possível carregar pessoas.",
     "share.noAccess": "Ninguém tem acesso ainda.",
     "share.noMatches": "Nenhuma correspondência.",

package/dist/localization/core-messages/zh-CN.js

@@ -31,6 +31,8 @@ const messages = {
     "aboutAgentNative.copyDiagnostics": "复制诊断信息",
     "aboutAgentNative.unknown": "未知",
     "common.agent": "智能体",
+    "agentPanel.mode": "模式",
+    "agentPanel.uiMode": "界面",
     "common.cancel": "取消",
     "common.collapse": "收起",
     "common.connect": "连接",
@@ -442,6 +444,7 @@ const messages = {
     "share.hideInSearch": "在搜索中隐藏",
     "share.linkCanStillOpen": "拥有链接的人员仍可打开此内容。",
     "share.loadMore": "加载更多",
+    "share.loadFailed": "无法加载共享设置。",
     "share.loadPeopleFailed": "无法加载人员。",
     "share.loading": "正在加载...",
     "share.noAccess": "尚无任何人拥有访问权限。",

package/dist/localization/core-messages/zh-TW.js

@@ -31,6 +31,8 @@ const messages = {
     "aboutAgentNative.copyDiagnostics": "複製診斷資訊",
     "aboutAgentNative.unknown": "未知",
     "common.agent": "代理",
+    "agentPanel.mode": "模式",
+    "agentPanel.uiMode": "介面",
     "common.cancel": "取消",
     "common.collapse": "收合",
     "common.connect": "連線",
@@ -442,6 +444,7 @@ const messages = {
     "share.hideInSearch": "在搜尋中隱藏",
     "share.linkCanStillOpen": "擁有連結的人員仍可開啟這個項目。",
     "share.loadMore": "載入更多",
+    "share.loadFailed": "無法載入分享設定。",
     "share.loadPeopleFailed": "無法載入人員。",
     "share.loading": "載入中...",
     "share.noAccess": "尚無任何人擁有存取權。",

package/dist/localization/core-messages.d.ts

@@ -33,6 +33,8 @@ export declare const englishAgentChatMessages: {
     readonly "aboutAgentNative.copyDiagnostics": "Copy diagnostics";
     readonly "aboutAgentNative.unknown": "Unknown";
     readonly "common.agent": "Agent";
+    readonly "agentPanel.mode": "Mode";
+    readonly "agentPanel.uiMode": "UI";
     readonly "common.cancel": "Cancel";
     readonly "common.collapse": "Collapse";
     readonly "common.connect": "Connect";
@@ -449,6 +451,7 @@ export declare const englishAgentChatMessages: {
     readonly "share.linkCanStillOpen": "People with the link can still open this.";
     readonly "share.loading": "Loading...";
     readonly "share.loadMore": "Load more";
+    readonly "share.loadFailed": "Couldn't load sharing settings.";
     readonly "share.loadPeopleFailed": "Could not load people.";
     readonly "share.noAccess": "No one has access yet.";
     readonly "share.noMatches": "No matches.";

package/dist/localization/default-messages.d.ts

@@ -422,6 +422,8 @@ declare const messages: {
         downloadDesktop: string;
         chatMode: string;
         chat: string;
+        mode: string;
+        uiMode: string;
         cliTerminalMode: string;
         cli: string;
         workspaceMode: string;
@@ -1126,11 +1128,6 @@ declare const messages: {
                 useCase: string;
                 setupNote: string;
             };
-            googleWorkspace: {
-                description: string;
-                useCase: string;
-                setupNote: string;
-            };
             gitlab: {
                 description: string;
                 useCase: string;

package/dist/localization/default-messages.js

@@ -428,6 +428,8 @@ const messages = {
         downloadDesktop: "Download Desktop",
         chatMode: "Chat mode",
         chat: "Chat",
+        mode: "Mode",
+        uiMode: "UI",
         cliTerminalMode: "CLI terminal mode",
         cli: "CLI",
         workspaceMode: "Files, agents, skills, and tasks",
@@ -1132,11 +1134,6 @@ const messages = {
                 useCase: "Observability, metrics, logs, traces, dashboards",
                 setupNote: "Grafana Cloud MCP is in public preview and requires Grafana Cloud Assistant MCP access. It is hosted Grafana Cloud only; self-hosted Grafana needs the local MCP server.",
             },
-            googleWorkspace: {
-                description: "Search Google Workspace data through its remote MCP server.",
-                useCase: "Workspace search across Gmail, Drive, Calendar, Chat, Docs, Sheets, Slides",
-                setupNote: "Google Workspace MCP is in Developer Preview. Enable the relevant Google Workspace and MCP APIs, configure an OAuth consent screen and client, then authorize the products you want to use.",
-            },
             gitlab: {
                 description: "Read and manage GitLab projects, issues, and merge requests.",
                 useCase: "Repositories, issues, merge requests, CI/CD, code analytics",

package/dist/mcp/build-server.d.ts

@@ -189,6 +189,15 @@ export interface MCPRequestMeta {
  * results simply fall back to their deep-link text.
  */
 export declare function isMcpAppsInlineEnabled(identity: MCPCallerIdentity | undefined): boolean;
+/**
+ * Connector-catalog membership declared on the actions themselves.
+ *
+ * This is `mcp.connectorCatalog` with the list inverted into the action files,
+ * so a rename moves the declaration with the action instead of stranding a
+ * dead string in a plugin config. Both forms feed the same set and an app can
+ * run either or both while it migrates.
+ */
+export declare function declaredMcpToolNames(actions: Record<string, ActionEntry>): string[];
 export declare function isAuthenticatedReadAction(entry: ActionEntry): boolean;
 export declare function isAutoReadExcludedActionName(name: string): boolean;
 /**

package/dist/mcp/build-server.js

@@ -18,6 +18,7 @@
  * — it can be bundled into the serverless function alongside `mountMCP`.
  */
 import { MCP_APP_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_URI_META_KEY, } from "../action.js";
+import { isActionExposedToExternalAgents } from "../action.js";
 import { isMcpActionResult } from "../mcp-client/app-result.js";
 import { getConfiguredAppBasePath } from "../server/app-base-path.js";
 import { buildDeepLink, toAbsoluteOpenUrl, toDesktopOpenUrl, toVsCodeOpenUrl, } from "../server/deep-link.js";
@@ -177,6 +178,34 @@ function scopeToolSearchToAdvertised(advertised) {
         },
     };
 }
+/**
+ * Drop every action this request's surface must not reach at all.
+ *
+ * Applied to `actions` — the whole surface this request can reach — and not
+ * just to the advertised listing, because on the `--full-catalog` tier
+ * `actions` IS the callable set (see the `tools/call` handler below). An
+ * external-agent opt-out that only hid the schema would leave the action
+ * callable by name, which is the same "hidden but reachable" bug the
+ * `withoutToolSearch` comment above exists to prevent.
+ *
+ * The in-app agent never comes through here, so its tool list is unaffected.
+ */
+function withoutExternalOptOuts(actions) {
+    return Object.fromEntries(Object.entries(actions).filter(([, entry]) => isActionExposedToExternalAgents(entry)));
+}
+/**
+ * Connector-catalog membership declared on the actions themselves.
+ *
+ * This is `mcp.connectorCatalog` with the list inverted into the action files,
+ * so a rename moves the declaration with the action instead of stranding a
+ * dead string in a plugin config. Both forms feed the same set and an app can
+ * run either or both while it migrates.
+ */
+export function declaredMcpToolNames(actions) {
+    return Object.entries(actions)
+        .filter(([, entry]) => entry.mcpTool === true)
+        .map(([name]) => name);
+}
 const COMPACT_MCP_APP_CATALOG_BUILTINS = new Set([
     "list_apps",
     "open_app",
@@ -1170,9 +1199,7 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
     // Strip from `actions`, not just the advertised set: on the full-catalog tier
     // `actions` IS the callable surface, so filtering only the listing would
     // leave `tool-search` callable but invisible.
-    const actions = flatCatalog
-        ? withoutToolSearch(mergedActions)
-        : mergedActions;
+    const actions = withoutExternalOptOuts(flatCatalog ? withoutToolSearch(mergedActions) : mergedActions);
     const visibleActions = Object.fromEntries(Object.entries(actions).filter(([, entry]) => isActionVisibleForOAuthScope(entry, effectiveIdentity?.oauthScopes)));
     // Compact/connector is the DEFAULT for every caller — hosted connectors,
     // code clients (Claude Code / Cursor / Codex), and the local CLI alike. The
@@ -1187,15 +1214,17 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
     const autoReadNames = autoAuthenticatedReadNames(visibleActions, config);
     const connectorNames = new Set([
         ...(config.connectorCatalog ?? []),
+        ...declaredMcpToolNames(visibleActions),
         ...autoReadNames,
     ]);
     const denyNames = externalAgentDenySet(config);
     const automaticConnectorPolicyActive = config.externalAgents?.authenticatedReads === "auto";
-    // Connector-catalog tier: when a template declares a connector allow-list,
-    // serve exactly that curated surface plus any explicitly annotated
-    // authenticated reads from `externalAgents.authenticatedReads: "auto"`.
-    // This stays compact by default and keeps db-exec / seed-* / extension /
-    // browser-session footguns off the external surface.
+    // Connector-catalog tier: when a template declares a connector allow-list —
+    // as `mcp.connectorCatalog` names or as `mcpTool: true` on the actions
+    // themselves — serve exactly that curated surface plus any explicitly
+    // annotated authenticated reads from `externalAgents.authenticatedReads:
+    // "auto"`. This stays compact by default and keeps db-exec / seed-* /
+    // extension / browser-session footguns off the external surface.
     const connectorCatalogActive = !appCatalog &&
         (connectorNames.size > 0 || automaticConnectorPolicyActive) &&
         !fullCatalogRequested;