@agent-native/core 0.176.1 → 0.176.2-nightly-20260831185956

package/corpus/templates/slides/server/plugins/agent-chat.ts

@@ -2,10 +2,12 @@ import {
   createAgentChatPlugin,
   loadActionsFromStaticRegistry,
 } from "@agent-native/core/server";
+import { assertAccess } from "@agent-native/core/sharing";
 
 import actionsRegistry from "../../.generated/actions-registry.js";
 import { resolveSlidesRequestAuthContext } from "../handlers/request-auth-context.js";
 import { prepareSlidesChatAttachments } from "../lib/chat-attachments.js";
+import { deckVersionChatContextFromRun } from "../lib/deck-versions.js";
 import "../register-secrets.js";
 
 const SLIDES_BACKGROUND_RUN_SOFT_TIMEOUT_MS = 13 * 60_000;
@@ -34,8 +36,98 @@ const INITIAL_TOOL_NAMES = [
   "provider-api-request",
 ];
 
+const DECK_EDIT_TOOLS = new Set([
+  "add-slide",
+  "patch-deck",
+  "restore-deck-version",
+  "save-deck",
+  "update-deck-aspect-ratio",
+  "update-slide",
+]);
+
+function eventRecord(entry: unknown): Record<string, unknown> | undefined {
+  if (!entry || typeof entry !== "object") return undefined;
+  const event = (entry as { event?: unknown }).event;
+  return event && typeof event === "object"
+    ? (event as Record<string, unknown>)
+    : undefined;
+}
+
+function inputForCompletedTool(
+  events: readonly unknown[],
+  index: number,
+  completed: Record<string, unknown>,
+): Record<string, unknown> | undefined {
+  if (completed.input && typeof completed.input === "object") {
+    return completed.input as Record<string, unknown>;
+  }
+  const id = typeof completed.id === "string" ? completed.id : undefined;
+  for (let cursor = index - 1; cursor >= 0; cursor -= 1) {
+    const candidate = eventRecord(events[cursor]);
+    if (
+      candidate?.type !== "tool_start" ||
+      candidate.tool !== completed.tool ||
+      (id && candidate.id !== id)
+    ) {
+      continue;
+    }
+    return candidate.input && typeof candidate.input === "object"
+      ? (candidate.input as Record<string, unknown>)
+      : undefined;
+  }
+  return undefined;
+}
+
+function hasDeckEdit(
+  run: { events: readonly unknown[] },
+  deckId: string,
+): boolean {
+  return run.events.some((entry, index) => {
+    const record = eventRecord(entry);
+    const input = record
+      ? inputForCompletedTool(run.events, index, record)
+      : undefined;
+    if (!entry || typeof entry !== "object") return false;
+    return (
+      record?.type === "tool_done" &&
+      record.completedSideEffect === true &&
+      record.isError !== true &&
+      typeof record.tool === "string" &&
+      DECK_EDIT_TOOLS.has(record.tool) &&
+      input?.deckId === deckId
+    );
+  });
+}
+
+async function autosaveDeckAfterAgentTurn(
+  scope: { type: string; id: string },
+  run: {
+    events: readonly unknown[];
+    threadId?: string;
+    runId?: string;
+    turnId?: string;
+  },
+): Promise<void> {
+  if (scope.type !== "deck" || !hasDeckEdit(run, scope.id)) return;
+
+  const access = await assertAccess("deck", scope.id, "editor");
+  const deck = access.resource as {
+    id: string;
+    title: string;
+    data: string;
+    ownerEmail: string;
+  };
+  const { createDeckVersionSnapshot } = await import("../lib/deck-versions.js");
+  await createDeckVersionSnapshot(deck, {
+    force: true,
+    label: "Chat autosave",
+    chatContext: deckVersionChatContextFromRun(run),
+  });
+}
+
 export default createAgentChatPlugin({
   appId: "slides",
+  onAgentTurnComplete: autosaveDeckAfterAgentTurn,
   actions: loadActionsFromStaticRegistry(actionsRegistry),
   initialToolNames: INITIAL_TOOL_NAMES,
   mcp: {
@@ -70,6 +162,8 @@ export default createAgentChatPlugin({
   prepareRequest: prepareSlidesChatAttachments,
   systemPrompt: `You are an AI deck assistant. You create, edit, import, export, style, share, and navigate decks through actions and shared application state. For a newly created presentation, use create-deck with slides: [] only when you are creating the deck yourself, then add-slide sequentially with full rendered HTML. The legacy generate-slides-ai action returns Markdown drafts and is not part of the persisted presentation workflow. When speaker notes are requested, keep presenter-only text in each slide's notes field rather than the slide HTML, and preserve notes during source-preserving edits.
 
+Explicit source import rule: an attachment is reference context by default and must not write slides just because it was provided. When the user explicitly asks to import or convert an attached PDF or PPTX into the current or visible deck, call view-screen when the deckId is not already known, then call import-file with the persisted filePath, matching format, deckId, and importIntoDeck: true. This is the deterministic Slides conversion path and returns imported: true with a slide count; do not use extraction-only import-file and recreate the pages with add-slide. Use import-pptx with deckId only when the user explicitly asks to replace the current deck, because that action replaces all slides. For a Google Slides URL, call import-google-slides-reference with presentationUrl; it deterministically exports and parses the presentation into a new editable Slides deck. The Import from controls and these explicit requests are the only import triggers.
+
 Attached-source rule: an attached PDF, PPTX, DOCX, or image is user-provided source material, not an implicit request for the Assets app or media generation. For PDF or DOCX references, use import-file with the persisted file path to extract the source before authoring. For a private raster image without an embeddable URL, use import-file with format=image to attach the persisted source to vision before editing. For source-preserving PDF or PPTX work, import the source into the current deck with the appropriate Slides import action, then keep working through Slides. “Use our branding” means get-design-system or get-workspace-defaults. Do not call Assets through call-agent or use generate-image-api unless the user explicitly asks to generate or replace media.
 
 Treat Google Workspace links as authenticated sources, not public web pages. For a Google Slides presentation URL, call import-google-slides-reference with the original presentationUrl before authoring or editing. For a Google Docs URL, call import-google-doc with the original url before using its content. For Google Drive or Sheets links, use the connected Google provider API when the request needs their contents. If the relevant Google connection is unavailable, tell the user to use the Connect Google button in the Slides import step. Do not send Google Workspace URLs to web-request.
@@ -77,7 +171,7 @@ Treat Google Workspace links as authenticated sources, not public web pages. For
 When a request includes a public URL as source material, fetch it with web-request before authoring. Inspect the returned page content, links, and agent-readable metadata, then follow any context, transcript, visual/frame, or asset URLs it exposes. Image responses are visual evidence for the deck and should be inspected when available; do not claim to have reviewed visuals that could not be fetched.
 
 When the user asks to improve, beautify, restyle, or make an uploaded/existing deck on-brand, treat it as an in-place source-preserving edit unless the user explicitly asks to rewrite the story or change slide count. First call view-screen when the active deck is unclear, then get-deck with compact=true for deck orientation. If you need slide markup, call get-deck with compact=false explicitly and only when the edit requires the full HTML. If get-deck.sourceImport exists, preserve its slide count, order, IDs, factual copy, notes, images, charts, tables, diagrams, freeform objects, and source aspect ratio. The ordered source manifest is sourceImport.slideIds. For a deck-wide restyle, use one patch-deck call with requireAllSourceSlides=true and one patch-slide operation with fields.content for every source slide ID; the action rejects partial coverage. Do not split a full-deck restyle into arbitrary batches or use one-by-one update-slide calls - reserve update-slide for targeted one-slide edits. After the patch succeeds, verify with get-deck using compact=true so the verification does not retransmit every slide's HTML. Completion requires sourceCoverage.complete=true with expectedSlideIds and actualSlideIds matching in order. Do not claim a partial or initial pass. Do not use add-slide, delete, reorder, or replace source imagery with generic cards for this workflow. If sourceImport.fidelity is partial or imagesSkipped is nonzero, stop and report the exact fidelity warning instead of claiming a reliable improvement.
-For a targeted one-slide edit, prefer get-deck with the stable slideId from view-screen or compact get-deck. It returns only that slide's full HTML by default, so do not load the full deck when one slide is enough. For code-style edits, request compact=false and format=true, then call update-slide with that slide's contentHash as baseContentHash and an ordered edits list. Use exact replace, insert-before/after, replace-between, or regex-replace edits; include expectedMatches for ambiguous markers. The action applies the whole list atomically under the deck lock, so a failed required match writes nothing. Set format=true on update-slide when readable line breaks should be persisted. Use fullContent only for an intentional full rewrite. Pass compact=true when you only need a lightweight check of that slide. Content writes return immediately after persistence with layoutFit.status=pending, the resulting content hash, and a write-specific layoutFitRevision. Do not wait for or loop on fit checks; continue independent slide edits. Before a same-slide follow-up or a final layout claim, call get-layout-overflows once and use only measurements whose contentHash and layoutFitRevision match the latest write. Unknown means the browser has not reported yet, not that the slide fits.
+For a targeted one-slide edit, prefer get-deck with the stable slideId from view-screen or compact get-deck. It returns only that slide's full HTML by default, so do not load the full deck when one slide is enough. First classify the requested scope. For a styling-only request, set styleOnly=true, change only the requested CSS declarations on the identified elements, and preserve text, element order, padding, margin, gap, font-size, line-height, dimensions, positioning, and other layout properties. The action rejects text or markup changes in this mode. A view-screen or get-deck overflow warning is informational; do not reduce padding or headline size during a border, outline, or color request. Read the exact HTML and use an ordered edits batch that removes or replaces only the matching style declarations. Do not use fullContent, an unrelated layout repair, or unresolved placeholder markers such as __RIGHT_CARD__ as a shortcut or stand-in for content. For code-style or structural edits, request compact=false and format=true, then call update-slide with that slide's contentHash as baseContentHash and an ordered edits list. A request about order, relative position, duplication, or consistency may have multiple representations in the HTML, such as a bullet list and a table; inspect the exact source and update every affected representation in one hash-guarded edits batch. Use exact replace, insert-before/after, replace-between, or regex-replace edits; include expectedMatches for ambiguous markers. Use exactly one update-slide input mode: edits, legacy find/replace, or fullContent. Never combine edits with find, replace, or fullContent. The action applies the whole list atomically under the deck lock, so a failed required match writes nothing. After every targeted write, call get-deck again for the same slide with compact=false and verify the requested text, ordering, relationships, counts, and style scope in every affected representation. If the readback is wrong, rebase against its returned hash and correct it; if any action returns an error, that change is not complete and must not be reported as done. Set format=true on update-slide when readable line breaks should be persisted. Use fullContent only for an intentional full rewrite. Pass compact=true when you only need a lightweight check of that slide. Content writes return immediately after persistence with layoutFit.status=pending, the resulting content hash, and a write-specific layoutFitRevision. Do not wait for or loop on fit checks; continue independent slide edits. Before a same-slide follow-up or a final layout claim, call get-layout-overflows once and use only measurements whose contentHash and layoutFitRevision match the latest write. Unknown means the browser has not reported yet, not that the slide fits.
 
 For click-to-reveal animations, keep the slide HTML as the visual source and store reveals only in the slide's animations metadata. Read the target slide's full HTML, preserve its existing structure, and patch the complete ordered animations list with elementPath values from that final HTML. Leave labels and headings visible by omitting them from the list. Never simulate reveals by adding duplicate elements, visibility:hidden, fmd-layout-spacer, fmd-freeform-object, absolute positioning, transforms, or placeholder markup. If content and reveals both change, send them together in one patch-deck patch-slide operation. If a user asks to remove or revert reveals, send the existing content with animations: [], then re-read the slide; do not use a simplified replacement or rely on update-slide text alone.
 

package/corpus/templates/slides/server/plugins/auth.ts

@@ -1,6 +1,7 @@
 import { createAuthPlugin } from "@agent-native/core/server";
 
 export default createAuthPlugin({
+  workspaceAppPublicPaths: ["/"],
   marketing: {
     appName: "Slides",
     tagline:

package/corpus/templates/slides/server/plugins/core-routes.ts

@@ -3,7 +3,13 @@ import { createCoreRoutesPlugin } from "@agent-native/core/server";
 import { envKeys } from "../lib/env-config.js";
 
 export default createCoreRoutesPlugin({
+  googleOAuthManagedConnection: "not_applicable",
   envKeys,
+  googleOAuthCallbackPaths: [
+    "/_agent-native/google/callback",
+    "/_agent-native/google-docs/callback",
+  ],
+  googleOAuthCredentialMode: "user",
   resolveOpenPath: ({ view, params }) => {
     if (params.deckId) {
       const slideNumber =
@@ -17,7 +23,8 @@ export default createCoreRoutesPlugin({
         : "";
       return `/deck/${params.deckId}${suffix}${query}`;
     }
-    if (view === "editor" || view === "present" || view === "list") return "/";
+    if (view === "editor" || view === "list") return "/home";
+    if (view === "present") return "/";
     return null;
   },
 });

package/corpus/templates/slides/server/plugins/db.ts

@@ -321,6 +321,11 @@ WHERE principal_type = 'user'`,
   );
   ALTER TABLE slide_comments ADD COLUMN IF NOT EXISTS anchor TEXT`,
     },
+    {
+      version: 26,
+      name: "slides-deck-version-chat-context",
+      sql: `ALTER TABLE deck_versions ADD COLUMN IF NOT EXISTS chat_context TEXT`,
+    },
   ],
   { table: "slides_migrations" },
 );

package/corpus/templates/tasks/.agents/skills/frontend-design/SKILL.md

@@ -68,6 +68,10 @@ is the target: a surface full of information and nearly empty of narration. So
 "make it minimal" is never satisfied by removing data or by burying it behind
 extra clicks, and never blocked by deleting a sentence.
 
+Keep on-screen text and badging minimal: show the shortest label needed for the
+next action, remove decorative or duplicate status chips, and put context in a
+tooltip or progressive disclosure when it is not needed to decide.
+
 Do not add, unless asked:
 
 - A page title that repeats the nav item or route the user just clicked, or a

package/corpus/templates/tasks/.agents/skills/secrets/SKILL.md

@@ -31,6 +31,53 @@ standard workspace connections and org/workspace vault scopes; never put them
 in `.env` or deployment environment variables, and never add a provider-specific
 action or startup bootstrap just to write a credential for one organization.
 
+## Google OAuth triage
+
+| Observation | Meaning | Next action |
+| --- | --- | --- |
+| `invalid_grant` from a deliberately fake code | Google accepted the client pair and rejected only the code | Do not rotate credentials; check flow state and callback registration |
+| `invalid_client` | Google rejected the client id/secret pair | Verify the exact pair and deployment source before rotating |
+| `redirect_uri_mismatch` | The client, host, callback path, and Google registration disagree | Compare that exact tuple in Google Cloud Console; publish a new deploy if site-scoped or build-time configuration changes |
+
+Do not reason about this from memory. The probe checks both contracts: the
+unqualified `/health/google` endpoint reports the sign-in contract, while
+`/health/google?client=managed` reports deployment-level managed OAuth. It asks
+Google directly whether each live `(client_id, redirect_uri)` pair is
+registered:
+
+```bash
+pnpm check:google-redirect-uris -- --env all
+```
+
+The sign-in health path calls `checkGoogleSignInCredential()`, which prefers
+the active Better Auth pair and otherwise uses `resolveGoogleSignInCredentials()`
+from `packages/core/src/server/google-oauth-credentials.ts`. Managed health
+calls `checkGoogleManagedCredential()`, which resolves
+`["GOOGLE_CLIENT_ID", "GOOGLE_CLIENT_SECRET"]` through `resolveSecretPair()` in
+`packages/core/src/server/credential-provider.ts`. App provider handlers use
+`resolveGoogleProviderCredentialCandidatesWithReader()` with `resolveSecret`
+under request context. These are separate flows and can intentionally land on
+different Google clients, so a clean result for one says nothing about the
+other. Read both contracts before changing anything:
+
+```bash
+curl -s https://HOST/_agent-native/health/google | jq '{clientId,mismatchedPairs,credentialSource}'
+curl -s "https://HOST/_agent-native/health/google?client=managed" | jq '{clientId,mismatchedPairs,credentialSource}'
+```
+
+Different `clientId` values across those two, or `mismatchedPairs: true`, is a
+divergence to understand, not damage to undo. Never repair it by rotating a
+secret: writing a fresh value into whichever namespace the failing flow does
+not read verifies clean and changes nothing. Do not collapse the namespaces
+without first confirming which flow uses which client; separate sign-in and
+managed clients on one host can be deliberate. For prebuilt Netlify deploys,
+uploaded Functions read site-scoped secrets at runtime, and the health route
+resolves them per request. The build may receive masked placeholder values.
+After changing a site-scoped env var, publish a new deploy before verifying
+live behavior. Call it a rebuild when the changed value is baked into build
+output or static assets; a runtime-only secret does not need to be baked into
+the bundle.
+
 ## Credential Modeling Preflight
 
 Before registering a provider's fields, inspect the workspace/provider connection

package/corpus/templates/tasks/AGENTS.md

@@ -40,7 +40,8 @@ Default navigation shape on `/tasks`:
 - `includeDone` mirrors the task-list filter toggle (incomplete only vs show all).
 - `taskId` highlights a row when opened from a deep link; MVP has no detail page.
 - `fieldId` highlights a custom field when opened from a deep link; the Fields page manages definitions.
-- Chat lives at `/chat`. Root `/` redirects to `/tasks`.
+- Chat lives at `/chat`. The public root `/` is the SSR marketing page, while
+  private app entry `/home` redirects to `/tasks`.
 
 ## Actions
 

package/corpus/templates/tasks/README.md

@@ -1,6 +1,8 @@
 # agent-native-tasks
 
-Task-list-first agent-native app. Default home is `/tasks`; chat handles capture and agent operations.
+Task-list-first agent-native app. The public root is a marketing page; private
+app entry `/home` opens the task list at `/tasks`, while chat handles capture
+and agent operations.
 
 ## TODO
 

package/corpus/templates/tasks/app/components/layout/Sidebar.tsx

@@ -1,8 +1,7 @@
-import { appPath } from "@agent-native/core/client/api-path";
 import { useT } from "@agent-native/core/client/i18n";
 import { openCommandMenu } from "@agent-native/core/client/navigation";
 import { OrgSwitcher } from "@agent-native/core/client/org";
-import { FeedbackButton } from "@agent-native/core/client/ui";
+import { AgentNativeIcon, FeedbackButton } from "@agent-native/core/client/ui";
 import { SidebarFooterActions } from "@agent-native/toolkit/app-shell";
 import {
   IconCheckbox,
@@ -155,21 +154,9 @@ export function Sidebar({
                 : undefined
           }
         >
-          <img
-            src={appPath("/agent-native-icon-light.svg")}
-            alt=""
+          <AgentNativeIcon
             aria-hidden="true"
-            width={28}
-            height={16}
-            className="block h-4 w-7 shrink-0 object-contain object-center dark:hidden"
-          />
-          <img
-            src={appPath("/agent-native-icon-dark.svg")}
-            alt=""
-            aria-hidden="true"
-            width={28}
-            height={16}
-            className="hidden h-4 w-7 shrink-0 object-contain object-center dark:block"
+            className="h-3.5 w-6 shrink-0 text-sidebar-accent-foreground"
           />
           <div className={cn("min-w-0", collapsed && "sr-only")}>
             <p className="truncate text-sm font-semibold text-sidebar-accent-foreground">
@@ -225,8 +212,8 @@ export function Sidebar({
           className={cn(
             "grid gap-1",
             collapsed
-              ? "px-1 py-1"
-              : "border-t border-sidebar-border px-3 py-2",
+              ? "px-1 py-1 empty:hidden"
+              : "border-t border-sidebar-border px-3 py-2 empty:hidden",
           )}
         >
           {BOTTOM_NAV_ITEMS.map((item) => {

package/corpus/templates/tasks/app/root.tsx

@@ -15,7 +15,14 @@ import { IconSun, IconMoon } from "@tabler/icons-react";
 import { useQueryClient } from "@tanstack/react-query";
 import { useTheme } from "next-themes";
 import { useCallback, useState } from "react";
-import { Links, Meta, Outlet, Scripts, ScrollRestoration } from "react-router";
+import {
+  Links,
+  Meta,
+  Outlet,
+  Scripts,
+  ScrollRestoration,
+  useLocation,
+} from "react-router";
 import type { LinksFunction } from "react-router";
 
 import { Layout as AppLayout } from "@/components/layout/Layout";
@@ -159,15 +166,24 @@ function AppContent() {
 
 export default function Root() {
   const [queryClient] = useState(() => createAgentNativeQueryClient());
+  const location = useLocation();
+  const isMarketingPath = location.pathname === "/";
   return (
     <AppProviders
       queryClient={queryClient}
+      isPublicPath={isMarketingPath}
       toaster={<Toaster position="bottom-left" />}
       i18n={{ catalog: i18nCatalog }}
     >
       <AppToolkitProvider>
-        <DbSyncSetup />
-        <AppContent />
+        {isMarketingPath ? (
+          <Outlet />
+        ) : (
+          <>
+            <DbSyncSetup />
+            <AppContent />
+          </>
+        )}
       </AppToolkitProvider>
     </AppProviders>
   );

package/corpus/templates/tasks/app/routes/_index.tsx

@@ -1,23 +1,37 @@
-import { withSsrHtmlContentType } from "@agent-native/core/shared";
-import { redirect } from "react-router";
+import { appPath } from "@agent-native/core/client/api-path";
+import { MarketingHome } from "@agent-native/toolkit/marketing";
 
 import { APP_TITLE } from "@/lib/app-config";
 
+const SEO_TITLE = APP_TITLE + " - Open Source agent-native task workspace";
+const SEO_DESCRIPTION =
+  "Open Source task workspace for inbox triage, ordered lists, custom fields, and agent-assisted follow-through.";
+
 export function meta() {
   return [
-    { title: APP_TITLE },
-    {
-      name: "description",
-      content:
-        "Redirect to the task list home for this agent-native tasks app.",
-    },
+    { title: SEO_TITLE },
+    { name: "description", content: SEO_DESCRIPTION },
+    { property: "og:title", content: SEO_TITLE },
+    { property: "og:description", content: SEO_DESCRIPTION },
+    { name: "twitter:card", content: "summary" },
+    { name: "twitter:title", content: SEO_TITLE },
+    { name: "twitter:description", content: SEO_DESCRIPTION },
   ];
 }
 
-export function loader() {
-  return withSsrHtmlContentType(redirect("/tasks"));
-}
-
-export default function IndexRedirect() {
-  return null;
+export default function MarketingHomeRoute() {
+  return (
+    <MarketingHome
+      appName={APP_TITLE}
+      tagline="Manage personal tasks from inbox to completion, with an agent that can do the work alongside you."
+      description={SEO_DESCRIPTION}
+      valueProps={[
+        "Capture ideas in an inbox and promote them when they are ready",
+        "Create, reorder, and complete tasks in the order you choose",
+        "Track what matters with custom fields and selected values",
+      ]}
+      primaryActionHref={appPath("/home")}
+      secondaryActionHref={appPath("/sign-in")}
+    />
+  );
 }

package/corpus/templates/tasks/app/routes/home.tsx

@@ -0,0 +1,24 @@
+import { withSsrHtmlContentType } from "@agent-native/core/shared";
+import { redirect } from "react-router";
+
+import { APP_TITLE } from "@/lib/app-config";
+
+export function meta() {
+  return [
+    { title: APP_TITLE },
+    {
+      name: "description",
+      content:
+        "Redirect to the task list home for this agent-native tasks app.",
+    },
+  ];
+}
+
+export function loader() {
+  return withSsrHtmlContentType(redirect("/tasks"));
+}
+
+// Private app redirect retained at /home; / serves the public marketing page.
+export default function IndexRedirect() {
+  return null;
+}

package/corpus/templates/tasks/public/manifest.json

@@ -2,7 +2,7 @@
   "name": "Tasks",
   "short_name": "Tasks",
   "description": "Workspace app for Tasks.",
-  "start_url": ".",
+  "start_url": "./home",
   "background_color": "#111111",
   "theme_color": "#18181B",
   "icons": [

package/corpus/templates/tasks/server/plugins/auth.ts

@@ -1,6 +1,7 @@
 import { createAuthPlugin } from "@agent-native/core/server";
 
 export default createAuthPlugin({
+  workspaceAppPublicPaths: ["/"],
   marketing: {
     appName: "Tasks",
     tagline:

package/dist/a2a/client.d.ts

@@ -53,9 +53,11 @@ export declare class A2AClient {
     private endpointCandidates;
     private endpointResolved;
     private requestTimeoutMs?;
+    private transportHeaders?;
     constructor(baseUrl: string, apiKey?: string, options?: {
         requestTimeoutMs?: number;
         fallbackApiKeys?: string[];
+        transportHeaders?: Record<string, string>;
     });
     /**
      * Detect which A2A path the target agent uses.
@@ -174,6 +176,8 @@ export declare function callAgent(url: string, text: string, opts?: {
     apiKeyFallbacks?: string[];
     /** Additional transport metadata. Receivers must not use it as identity. */
     metadata?: Record<string, unknown>;
+    /** Trusted server-side headers to carry across the A2A transport. */
+    transportHeaders?: Record<string, string>;
     contextId?: string;
     userEmail?: string;
     orgDomain?: string;

package/dist/a2a/client.js

@@ -2,7 +2,10 @@ import { randomUUID } from "node:crypto";
 import * as jose from "jose";
 import { getAppConfig } from "../app-config/index.js";
 import { ssrfSafeFetch } from "../extensions/url-safety.js";
+import { getRequestContext } from "../server/request-context.js";
+import { SYNTHETIC_TRAFFIC_BETA_E2E, SYNTHETIC_TRAFFIC_HEADER, } from "../shared/test-traffic.js";
 import { canonicalA2AAudience } from "./audience.js";
+import { sanitizeA2ACorrelationMetadata } from "./correlation.js";
 /**
  * A workspace serves every app from one gateway on loopback, so sibling A2A
  * targets are private addresses by construction and the SSRF guard cannot tell
@@ -46,7 +49,6 @@ function workspacePrivateOrigins() {
     }
     return origins;
 }
-import { sanitizeA2ACorrelationMetadata } from "./correlation.js";
 const DEFAULT_A2A_POLL_REQUEST_TIMEOUT_MS = 15_000;
 const DEFAULT_A2A_DISCOVERY_TIMEOUT_MS = 3_000;
 const MAX_A2A_RPC_ATTEMPTS = 3;
@@ -144,6 +146,7 @@ export class A2AClient {
     endpointCandidates = [];
     endpointResolved = false;
     requestTimeoutMs;
+    transportHeaders;
     constructor(baseUrl, apiKey, options) {
         const normalized = baseUrl.replace(/\/$/, "");
         const explicitEndpoint = splitExplicitA2AEndpoint(normalized);
@@ -158,6 +161,12 @@ export class A2AClient {
             ...(options?.fallbackApiKeys ?? []),
         ]);
         this.requestTimeoutMs = options?.requestTimeoutMs;
+        this.transportHeaders = {
+            ...(options?.transportHeaders ?? {}),
+            ...(getRequestContext()?.isSyntheticTraffic === true
+                ? { [SYNTHETIC_TRAFFIC_HEADER]: SYNTHETIC_TRAFFIC_BETA_E2E }
+                : {}),
+        };
     }
     /**
      * Detect which A2A path the target agent uses.
@@ -198,7 +207,10 @@ export class A2AClient {
         this.apiKeyAttempts = uniqueAuthTokens([apiKey, ...fallbackApiKeys]);
     }
     headers(apiKey = this.apiKey) {
-        const h = { "Content-Type": "application/json" };
+        const h = {
+            "Content-Type": "application/json",
+            ...(this.transportHeaders ?? {}),
+        };
         if (apiKey) {
             h["Authorization"] = `Bearer ${apiKey}`;
         }
@@ -741,6 +753,7 @@ export async function callAgent(url, text, opts) {
                 .filter((token) => token !== undefined);
             const client = new A2AClient(url, apiKeyAttempts[i], {
                 fallbackApiKeys,
+                transportHeaders: opts?.transportHeaders,
             });
             let task;
             if (useAsync) {

package/dist/action.d.ts

@@ -19,8 +19,10 @@ import type { ActionAuditConfig } from "./audit/types.js";
  *   selected actions are attributed as `"tool"`.
  * - `"automation"` — an event-triggered automation dispatched from a stored
  *   workspace trigger with trusted trigger lineage.
+ * - `"webmcp"` — a browser agent invoking an automatically projected action
+ *   through the authenticated page-local WebMCP bridge.
  */
-export type ActionCaller = "tool" | "http" | "frontend" | "cli" | "mcp" | "a2a" | "automation";
+export type ActionCaller = "tool" | "http" | "frontend" | "cli" | "mcp" | "webmcp" | "a2a" | "automation";
 /**
  * Trusted automation lineage added by the trigger dispatcher. Action inputs
  * must never be used to create or override this context.

package/dist/agent/engine/ai-sdk-engine.js

@@ -17,6 +17,8 @@ import { AI_SDK_MODEL_CONFIG } from "../model-config.js";
 import { LLM_MISSING_CREDENTIALS_ERROR_CODE, LLM_MISSING_CREDENTIALS_MESSAGE, } from "./credential-errors.js";
 import { classifyProviderError, describeErrorWithCauses, } from "./error-detail.js";
 import { createFirstEventAbortController } from "./first-event-timeout.js";
+import { limitProviderTools } from "./limit-provider-tools.js";
+import { isCustomOpenAiBaseUrl } from "./openai-compatible-endpoint.js";
 import { clampThinkingBudgetTokens, resolveMaxOutputTokensForEngine, } from "./output-tokens.js";
 import { createProviderToolNameMap } from "./tool-name.js";
 import { engineToolsToAISDK, engineMessagesToAISDK, aiSdkPartToEngineEvents, aiSdkStepToAssistantContent, } from "./translate-ai-sdk.js";
@@ -175,7 +177,8 @@ class AISDKEngine {
         this.supportedModels = PROVIDER_SUPPORTED_MODELS[provider];
         this.preserveCustomModels =
             provider === "ollama" ||
-                (provider === "openai" && Boolean(config.baseUrl));
+                provider === "openrouter" ||
+                (provider === "openai" && isCustomOpenAiBaseUrl(config.baseUrl));
         this.capabilities = PROVIDER_CAPABILITIES[provider];
         this.apiKey =
             config.apiKey ??
@@ -237,8 +240,9 @@ class AISDKEngine {
             return;
         }
         const toolNameMap = createProviderToolNameMap(opts.tools, opts.messages);
-        const aiSdkTools = opts.tools.length > 0
-            ? engineToolsToAISDK(opts.tools, jsonSchema, toolNameMap)
+        const providerTools = limitProviderTools(opts.tools);
+        const aiSdkTools = providerTools.length > 0
+            ? engineToolsToAISDK(providerTools, jsonSchema, toolNameMap)
             : undefined;
         const messages = engineMessagesToAISDK(opts.messages, {
             // Vision-capable provider translators (anthropic/openai/google/
@@ -306,10 +310,10 @@ class AISDKEngine {
                 // <model> in /v1/chat/completions. To use function tools, use
                 // /v1/responses or set reasoning_effort to 'none'.") — a real prod
                 // incident, e.g. Sentry AGENT-NATIVE-BROWSER-94 on gpt-5.6-terra.
-                // `createProviderModel` forces Chat Completions specifically when
-                // `this.baseUrl` is set (many OpenAI-compatible gateways/proxies
-                // don't implement Responses — see that comment). In that exact
-                // combination — forced Chat Completions AND tools present — send
+                // `createProviderModel` forces Chat Completions specifically for a
+                // custom `baseUrl` (many OpenAI-compatible gateways/proxies don't
+                // implement Responses — see that comment). In that exact combination
+                // — forced Chat Completions AND tools present — send
                 // `"none"` rather than our resolved effort; Responses-API calls (no
                 // baseUrl) are unaffected and keep full effort control.
                 //
@@ -317,7 +321,7 @@ class AISDKEngine {
                 // own default effort, which is not "none", and rejects the request
                 // exactly the same way. Only the explicit "none" clears it — the
                 // error text spells this out ("or set reasoning_effort to 'none'").
-                const forcedChatCompletionsWithTools = Boolean(this.baseUrl) && aiSdkTools !== undefined;
+                const forcedChatCompletionsWithTools = isCustomOpenAiBaseUrl(this.baseUrl) && aiSdkTools !== undefined;
                 providerOpts.openai = {
                     ...(providerOpts.openai ?? {}),
                     reasoningEffort: forcedChatCompletionsWithTools
@@ -530,7 +534,7 @@ class AISDKEngine {
         // GPT reasoning models get the API OpenAI recommends. If someone points
         // the OpenAI provider at an OpenAI-compatible gateway, keep using Chat
         // Completions because many gateway base URLs do not implement Responses.
-        return this.provider === "openai" && this.baseUrl
+        return this.provider === "openai" && isCustomOpenAiBaseUrl(this.baseUrl)
             ? provider.chat(model)
             : provider(model);
     }

package/dist/agent/engine/anthropic-engine.js

@@ -13,6 +13,7 @@ import { ANTHROPIC_MODEL_CONFIG } from "../model-config.js";
 import { LLM_MISSING_CREDENTIALS_ERROR_CODE, LLM_MISSING_CREDENTIALS_MESSAGE, } from "./credential-errors.js";
 import { describeErrorWithCauses } from "./error-detail.js";
 import { createFirstEventAbortController } from "./first-event-timeout.js";
+import { limitProviderTools } from "./limit-provider-tools.js";
 import { clampThinkingBudgetTokens, resolveMaxOutputTokensForEngine, } from "./output-tokens.js";
 import { splitSystemPromptForCache, stablePrefixCacheControl, } from "./prompt-cache.js";
 import { createProviderToolNameMap } from "./tool-name.js";
@@ -43,7 +44,7 @@ class AnthropicEngine {
         // multiplies the two layers into ~12 HTTP requests per failed run.
         const client = new Anthropic({ apiKey: this.apiKey, maxRetries: 1 });
         const toolNameMap = createProviderToolNameMap(opts.tools, opts.messages);
-        const tools = engineToolsToAnthropic(opts.tools, toolNameMap);
+        const tools = engineToolsToAnthropic(limitProviderTools(opts.tools), toolNameMap);
         const messages = engineMessagesToAnthropic(opts.messages, toolNameMap);
         const anthropicOpts = opts.providerOptions?.anthropic;
         // Resolved once so both max_tokens and the thinking-budget headroom