@agent-native/core 0.201.1 → 0.202.0-nightly-20261006033736

package/dist/client/sharing/useAccessRequestReview.d.ts

@@ -0,0 +1,80 @@
+import type { ResourceAccessRequestFailure } from "./useResourceAccessGate.js";
+export type AccessRequestRole = "viewer" | "commenter" | "editor" | "admin";
+/** One access request, as someone who manages access reviews it. */
+export interface AccessRequestReview {
+    id: string;
+    generation: number;
+    state: "pending" | "approved" | "declined";
+    requester: {
+        email: string;
+        name: string | null;
+    };
+    note: string | null;
+    requestedAt: string;
+    decidedAt: string | null;
+    grantedRole: AccessRequestRole | null;
+    resource: {
+        type: string;
+        id: string;
+        label: string;
+        title: string;
+        path: string | null;
+    };
+}
+export interface AccessRequestDecisionFailure extends ResourceAccessRequestFailure {
+    /**
+     * Why the server refused, such as a sharing rule. Absent for unexpected
+     * failures, whose server message isn't meant for people.
+     */
+    message: string | null;
+}
+type DecidedRequest = Pick<AccessRequestReview, "id" | "generation" | "requester">;
+export interface AccessRequestDecisions {
+    approve: (request: DecidedRequest, role: AccessRequestRole) => Promise<void>;
+    decline: (request: DecidedRequest) => Promise<void>;
+    /** The request a decision is in flight for. */
+    pendingId: string | null;
+    error: AccessRequestDecisionFailure | null;
+    /** An allowed request whose requester couldn't be emailed. */
+    unemailed: Pick<AccessRequestReview, "id" | "requester"> | null;
+}
+/**
+ * Allow and Decline, shared by the approval page and the Share panels. A
+ * decision someone else already made calls `onStale`, so the caller reloads
+ * instead of offering the same outdated request again.
+ */
+export declare function useAccessRequestDecisions(onStale: () => unknown): AccessRequestDecisions;
+export interface AccessRequestReviewController {
+    review: AccessRequestReview | undefined;
+    isLoading: boolean;
+    /** The viewer isn't signed in. */
+    isSignedOut: boolean;
+    /** The request doesn't exist, or the viewer can't manage its resource. */
+    isUnavailable: boolean;
+    /** Reading the request failed for another reason; retry with `refetch`. */
+    isError: boolean;
+    refetch: () => Promise<unknown>;
+    decisions: AccessRequestDecisions;
+}
+/**
+ * Loads one access request for its approval page. Opening the page only
+ * reads; Allow and Decline are explicit calls on `decisions`.
+ */
+export declare function useAccessRequestReview(requestId: string): AccessRequestReviewController;
+export interface ResourceAccessRequestsController {
+    /** The newest pending requests. */
+    requests: AccessRequestReview[];
+    /** Older pending requests exist beyond `requests`. */
+    hasMore: boolean;
+    isLoading: boolean;
+    isError: boolean;
+    refetch: () => Promise<unknown>;
+    decisions: AccessRequestDecisions;
+}
+/** Pending access requests for one resource, for its Share panel. */
+export declare function useResourceAccessRequests({ resourceType, resourceId, enabled, }: {
+    resourceType: string;
+    resourceId: string;
+    enabled?: boolean;
+}): ResourceAccessRequestsController;
+export {};

package/dist/client/sharing/useAccessRequestReview.js

@@ -0,0 +1,100 @@
+import { useCallback, useMemo, useState } from "react";
+import { useActionMutation, useActionQuery } from "../use-action.js";
+function decisionFailure(error) {
+    if (!error)
+        return null;
+    const failure = error;
+    const refused = failure.status === 400 || failure.status === 403;
+    return {
+        errorCode: typeof failure.errorCode === "string" ? failure.errorCode : null,
+        message: refused && typeof failure.actionMessage === "string"
+            ? failure.actionMessage
+            : null,
+        retryAt: typeof failure.details?.retryAt === "string"
+            ? failure.details.retryAt
+            : null,
+    };
+}
+/**
+ * Allow and Decline, shared by the approval page and the Share panels. A
+ * decision someone else already made calls `onStale`, so the caller reloads
+ * instead of offering the same outdated request again.
+ */
+export function useAccessRequestDecisions(onStale) {
+    const { mutateAsync: approveAsync } = useActionMutation("approve-resource-access-request");
+    const { mutateAsync: declineAsync } = useActionMutation("decline-resource-access-request");
+    const [pendingId, setPendingId] = useState(null);
+    const [error, setError] = useState(null);
+    const [unemailed, setUnemailed] = useState(null);
+    const decide = useCallback(async (requestId, run) => {
+        setPendingId(requestId);
+        setError(null);
+        setUnemailed(null);
+        try {
+            await run();
+        }
+        catch (err) {
+            setError(err);
+            if (err.errorCode === "access_request_stale") {
+                void onStale();
+            }
+            throw err;
+        }
+        finally {
+            setPendingId((current) => (current === requestId ? null : current));
+        }
+    }, [onStale]);
+    const approve = useCallback((request, role) => decide(request.id, async () => {
+        const result = await approveAsync({
+            requestId: request.id,
+            generation: request.generation,
+            role,
+        });
+        if (result?.email === "failed") {
+            setUnemailed({ id: request.id, requester: request.requester });
+        }
+    }), [approveAsync, decide]);
+    const decline = useCallback((request) => decide(request.id, () => declineAsync({ requestId: request.id, generation: request.generation })), [declineAsync, decide]);
+    return {
+        approve,
+        decline,
+        pendingId,
+        error: decisionFailure(error),
+        unemailed,
+    };
+}
+/**
+ * Loads one access request for its approval page. Opening the page only
+ * reads; Allow and Decline are explicit calls on `decisions`.
+ */
+export function useAccessRequestReview(requestId) {
+    const params = useMemo(() => ({ requestId }), [requestId]);
+    const query = useActionQuery("get-resource-access-request", params, { enabled: Boolean(requestId), retry: false });
+    const decisions = useAccessRequestDecisions(query.refetch);
+    const status = query.error?.status;
+    const isSignedOut = query.isError && status === 401;
+    const isUnavailable = query.isError && status === 404;
+    return {
+        review: query.data,
+        isLoading: query.isLoading,
+        isSignedOut,
+        isUnavailable,
+        isError: query.isError && !isSignedOut && !isUnavailable,
+        refetch: query.refetch,
+        decisions,
+    };
+}
+/** Pending access requests for one resource, for its Share panel. */
+export function useResourceAccessRequests({ resourceType, resourceId, enabled = true, }) {
+    const params = useMemo(() => ({ resourceType, resourceId }), [resourceId, resourceType]);
+    const query = useActionQuery("list-resource-access-requests", params, { enabled, retry: false });
+    const decisions = useAccessRequestDecisions(query.refetch);
+    return {
+        requests: query.data?.requests ?? [],
+        hasMore: query.data?.hasMore ?? false,
+        isLoading: query.isLoading,
+        isError: query.isError,
+        refetch: query.refetch,
+        decisions,
+    };
+}

package/dist/client/sharing/useResourceAccessGate.d.ts

@@ -0,0 +1,57 @@
+/** Mirrors the server's `ResourceAccessState`. */
+export type ResourceAccessGateState = "allowed" | "trashed" | "denied" | "missing" | "signed-out";
+export type ResourceAccessGateRole = "owner" | "admin" | "editor" | "commenter" | "viewer";
+/** The viewer's own open request for access. */
+export interface ResourceAccessGateRequest {
+    state: "pending";
+    requestedAt: string;
+}
+export interface ResourceAccessGateStatus {
+    state: ResourceAccessGateState;
+    /** The viewer's role, only when they can open the resource. */
+    role?: ResourceAccessGateRole;
+    /** Whether the viewer can ask for access now. Only for `denied`. */
+    canRequest?: boolean;
+    /** The viewer's open request. Only for `denied`. */
+    request?: ResourceAccessGateRequest;
+}
+/** Why asking for access failed, for the screen to explain. */
+export interface ResourceAccessRequestFailure {
+    /** The server's error code, such as `access_request_rate_limited`. */
+    errorCode: string | null;
+    /** When the viewer can try again, if the server said. */
+    retryAt: string | null;
+}
+export interface ResourceAccessGateOptions {
+    resourceType: string;
+    resourceId: string;
+    enabled?: boolean;
+    /**
+     * Called once when the status says the viewer can open the resource: either
+     * the read that failed should be tried again, or the owner shared it while
+     * this screen was open. The status is checked again whenever the window
+     * regains focus, including switching back from another browser window, and
+     * every half minute while the viewer's request is open.
+     */
+    onAccessGranted?: () => void;
+}
+export interface ResourceAccessGateController {
+    status: ResourceAccessGateStatus | undefined;
+    isLoading: boolean;
+    isError: boolean;
+    refetch: () => Promise<unknown>;
+    /**
+     * Asks the owner for access, with an optional note. Resolves once the
+     * request is stored and the status shows it; rejects when it fails, with
+     * the reason in `requestError`.
+     */
+    requestAccess: (note?: string) => Promise<void>;
+    isRequesting: boolean;
+    requestError: ResourceAccessRequestFailure | null;
+}
+/**
+ * Asks the server what a link the viewer couldn't open should say. Use it
+ * after a resource read fails with 403 or 404, then render the matching
+ * access screen.
+ */
+export declare function useResourceAccessGate({ resourceType, resourceId, enabled, onAccessGranted, }: ResourceAccessGateOptions): ResourceAccessGateController;

package/dist/client/sharing/useResourceAccessGate.js

@@ -0,0 +1,76 @@
+import { useCallback, useEffect, useMemo, useRef } from "react";
+import { forgetAuthFailures } from "../embed-auth.js";
+import { useActionMutation, useActionQuery } from "../use-action.js";
+// While a request is open, approving it should open the resource without a
+// manual reload, even when the window never loses focus.
+const PENDING_REQUEST_POLL_MS = 30_000;
+function requestFailure(error) {
+    const failure = error;
+    return {
+        errorCode: typeof failure.errorCode === "string" ? failure.errorCode : null,
+        retryAt: typeof failure.details?.retryAt === "string"
+            ? failure.details.retryAt
+            : null,
+    };
+}
+/**
+ * Asks the server what a link the viewer couldn't open should say. Use it
+ * after a resource read fails with 403 or 404, then render the matching
+ * access screen.
+ */
+export function useResourceAccessGate({ resourceType, resourceId, enabled = true, onAccessGranted, }) {
+    const params = useMemo(() => ({ resourceType, resourceId }), [resourceId, resourceType]);
+    const query = useActionQuery("get-resource-access-status", params, {
+        enabled,
+        refetchOnWindowFocus: "always",
+        staleTime: 0,
+        refetchInterval: (current) => current.state.data?.request ? PENDING_REQUEST_POLL_MS : false,
+    });
+    const request = useActionMutation("request-resource-access");
+    const state = query.data?.state;
+    const onAccessGrantedRef = useRef(onAccessGranted);
+    onAccessGrantedRef.current = onAccessGranted;
+    const refetchRef = useRef(query.refetch);
+    refetchRef.current = query.refetch;
+    const target = `${resourceType}:${resourceId}`;
+    const lastSeenRef = useRef(null);
+    useEffect(() => {
+        if (!state)
+            return;
+        const previous = lastSeenRef.current?.target === target ? lastSeenRef.current.state : null;
+        lastSeenRef.current = { target, state };
+        if (state === "allowed" && previous !== "allowed") {
+            forgetAuthFailures();
+            onAccessGrantedRef.current?.();
+        }
+    }, [target, state]);
+    // React Query refetches when the tab becomes visible, but not when focus
+    // returns from another window that left this tab visible, such as the
+    // owner's window beside it.
+    useEffect(() => {
+        if (!enabled)
+            return;
+        const refetch = () => void refetchRef.current({ cancelRefetch: false });
+        window.addEventListener("focus", refetch);
+        return () => window.removeEventListener("focus", refetch);
+    }, [enabled]);
+    const { mutateAsync: requestAsync } = request;
+    const requestAccess = useCallback(async (note) => {
+        const trimmed = note?.trim();
+        await requestAsync({
+            resourceType,
+            resourceId,
+            ...(trimmed ? { note: trimmed } : {}),
+        });
+        await refetchRef.current({ cancelRefetch: false });
+    }, [requestAsync, resourceId, resourceType]);
+    return {
+        status: query.data,
+        isLoading: query.isLoading,
+        isError: query.isError,
+        refetch: query.refetch,
+        requestAccess,
+        isRequesting: request.isPending,
+        requestError: request.error ? requestFailure(request.error) : null,
+    };
+}

package/dist/client/use-agent-engine-configured.d.ts

@@ -16,6 +16,8 @@ export interface UseAgentEngineConfiguredResult {
 export interface FetchAgentEngineConfiguredStateOptions {
     /** Kept for API compatibility; readiness always comes from chatEligible. */
     missingFallback?: boolean;
+    /** Starts a new status read instead of joining an older in-flight probe. */
+    fresh?: boolean;
     timeoutMs?: number;
 }
 export interface UseAgentEngineConfiguredOptions {

package/dist/client/use-agent-engine-configured.js

@@ -49,7 +49,10 @@ export async function fetchAgentEngineConfiguredState(enabled = true, options) {
     const timeoutMs = typeof options?.timeoutMs === "number" && options.timeoutMs > 0
         ? options.timeoutMs
         : undefined;
-    const engineResult = await waitForStatus(fetchAgentEngineStatus(), "/_agent-native/agent-engine/status", timeoutMs);
+    let engineResult = await waitForStatus(fetchAgentEngineStatus({ fresh: options?.fresh }), "/_agent-native/agent-engine/status", timeoutMs);
+    while (engineResult.state === "unavailable" && engineResult.stale) {
+        engineResult = await waitForStatus(fetchAgentEngineStatus(), "/_agent-native/agent-engine/status", timeoutMs);
+    }
     if (engineResult.state !== "available" ||
         !hasChatEligibleFlag(engineResult.value)) {
         // A reachable legacy server may expose only the broad `configured` flag.

package/dist/email-catalog/registry.d.ts

@@ -26,6 +26,6 @@ export declare function renderTransactionalEmailPreview(id: string): RenderedEma
  * synchronous `renderTransactionalEmailPreview` cannot.
  */
 export declare function renderTransactionalEmailPreviewAsync(id: string): Promise<RenderedEmailMessage>;
-export { CORE_RESOURCE_SHARED_EMAIL_ID, overrideTransactionalEmail, removeTransactionalEmailOverride, type CoreTransactionalEmailArgs, type CoreTransactionalEmailId, type CoreTransactionalEmailProps, type TransactionalEmailOverride, type TransactionalEmailOverrideResult, } from "./templates.js";
+export { CORE_ACCESS_GRANTED_EMAIL_ID, CORE_ACCESS_REQUESTED_EMAIL_ID, CORE_RESOURCE_SHARED_EMAIL_ID, overrideTransactionalEmail, removeTransactionalEmailOverride, type CoreTransactionalEmailArgs, type CoreTransactionalEmailId, type CoreTransactionalEmailProps, type TransactionalEmailOverride, type TransactionalEmailOverrideResult, } from "./templates.js";
 export { escapeEmailHtml } from "../server/email-template.js";
 export declare function resetTransactionalEmailRegistry(): void;

package/dist/email-catalog/registry.js

@@ -104,7 +104,7 @@ export async function renderTransactionalEmailPreviewAsync(id) {
         ? definition.previewAsync()
         : definition.preview();
 }
-export { CORE_RESOURCE_SHARED_EMAIL_ID, overrideTransactionalEmail, removeTransactionalEmailOverride, } from "./templates.js";
+export { CORE_ACCESS_GRANTED_EMAIL_ID, CORE_ACCESS_REQUESTED_EMAIL_ID, CORE_RESOURCE_SHARED_EMAIL_ID, overrideTransactionalEmail, removeTransactionalEmailOverride, } from "./templates.js";
 export { escapeEmailHtml } from "../server/email-template.js";
 export function resetTransactionalEmailRegistry() {
     registry.clear();

package/dist/email-catalog/system-emails.d.ts

@@ -1,3 +1,3 @@
-import { CORE_BUILDER_CREDIT_LIMIT_EMAIL_ID, CORE_CHANGE_EMAIL_CONFIRMATION_EMAIL_ID, CORE_CHANGE_EMAIL_VERIFICATION_EMAIL_ID, CORE_INVITE_EMAIL_ID, CORE_MAGIC_LINK_EMAIL_ID, CORE_RESET_PASSWORD_EMAIL_ID, CORE_RESOURCE_SHARED_EMAIL_ID, CORE_VERIFY_SIGNUP_EMAIL_ID } from "./templates.js";
-export { CORE_BUILDER_CREDIT_LIMIT_EMAIL_ID, CORE_CHANGE_EMAIL_CONFIRMATION_EMAIL_ID, CORE_CHANGE_EMAIL_VERIFICATION_EMAIL_ID, CORE_INVITE_EMAIL_ID, CORE_MAGIC_LINK_EMAIL_ID, CORE_RESET_PASSWORD_EMAIL_ID, CORE_RESOURCE_SHARED_EMAIL_ID, CORE_VERIFY_SIGNUP_EMAIL_ID, };
+import { CORE_ACCESS_GRANTED_EMAIL_ID, CORE_ACCESS_REQUESTED_EMAIL_ID, CORE_BUILDER_CREDIT_LIMIT_EMAIL_ID, CORE_CHANGE_EMAIL_CONFIRMATION_EMAIL_ID, CORE_CHANGE_EMAIL_VERIFICATION_EMAIL_ID, CORE_INVITE_EMAIL_ID, CORE_MAGIC_LINK_EMAIL_ID, CORE_RESET_PASSWORD_EMAIL_ID, CORE_RESOURCE_SHARED_EMAIL_ID, CORE_VERIFY_SIGNUP_EMAIL_ID } from "./templates.js";
+export { CORE_ACCESS_GRANTED_EMAIL_ID, CORE_ACCESS_REQUESTED_EMAIL_ID, CORE_BUILDER_CREDIT_LIMIT_EMAIL_ID, CORE_CHANGE_EMAIL_CONFIRMATION_EMAIL_ID, CORE_CHANGE_EMAIL_VERIFICATION_EMAIL_ID, CORE_INVITE_EMAIL_ID, CORE_MAGIC_LINK_EMAIL_ID, CORE_RESET_PASSWORD_EMAIL_ID, CORE_RESOURCE_SHARED_EMAIL_ID, CORE_VERIFY_SIGNUP_EMAIL_ID, };
 export declare function registerCoreSystemEmails(): void;

package/dist/email-catalog/system-emails.js

@@ -2,10 +2,10 @@ import { BILLING_NOTICE_MESSAGES } from "../localization/billing-notice-messages
 import { resolveEmailBrandApp } from "../server/email-templates.js";
 import { builderSubscriptionUpgradeUrl } from "../shared/builder-link-tracking.js";
 import { defineTransactionalEmail } from "./registry.js";
-import { CORE_BUILDER_CREDIT_LIMIT_EMAIL_ID, CORE_CHANGE_EMAIL_CONFIRMATION_EMAIL_ID, CORE_CHANGE_EMAIL_VERIFICATION_EMAIL_ID, CORE_INVITE_EMAIL_ID, CORE_MAGIC_LINK_EMAIL_ID, CORE_RESET_PASSWORD_EMAIL_ID, CORE_RESOURCE_SHARED_EMAIL_ID, CORE_VERIFY_SIGNUP_EMAIL_ID, renderDefaultTransactionalEmail, renderTransactionalEmail, } from "./templates.js";
+import { CORE_ACCESS_GRANTED_EMAIL_ID, CORE_ACCESS_REQUESTED_EMAIL_ID, CORE_BUILDER_CREDIT_LIMIT_EMAIL_ID, CORE_CHANGE_EMAIL_CONFIRMATION_EMAIL_ID, CORE_CHANGE_EMAIL_VERIFICATION_EMAIL_ID, CORE_INVITE_EMAIL_ID, CORE_MAGIC_LINK_EMAIL_ID, CORE_RESET_PASSWORD_EMAIL_ID, CORE_RESOURCE_SHARED_EMAIL_ID, CORE_VERIFY_SIGNUP_EMAIL_ID, renderDefaultTransactionalEmail, renderTransactionalEmail, } from "./templates.js";
 const SAMPLE_URL = "https://example.com/accept/sample-token";
 const SAMPLE_EMAIL = "sam.rivera@example.com";
-export { CORE_BUILDER_CREDIT_LIMIT_EMAIL_ID, CORE_CHANGE_EMAIL_CONFIRMATION_EMAIL_ID, CORE_CHANGE_EMAIL_VERIFICATION_EMAIL_ID, CORE_INVITE_EMAIL_ID, CORE_MAGIC_LINK_EMAIL_ID, CORE_RESET_PASSWORD_EMAIL_ID, CORE_RESOURCE_SHARED_EMAIL_ID, CORE_VERIFY_SIGNUP_EMAIL_ID, };
+export { CORE_ACCESS_GRANTED_EMAIL_ID, CORE_ACCESS_REQUESTED_EMAIL_ID, CORE_BUILDER_CREDIT_LIMIT_EMAIL_ID, CORE_CHANGE_EMAIL_CONFIRMATION_EMAIL_ID, CORE_CHANGE_EMAIL_VERIFICATION_EMAIL_ID, CORE_INVITE_EMAIL_ID, CORE_MAGIC_LINK_EMAIL_ID, CORE_RESET_PASSWORD_EMAIL_ID, CORE_RESOURCE_SHARED_EMAIL_ID, CORE_VERIFY_SIGNUP_EMAIL_ID, };
 function corePreview(id, sample) {
     return {
         preview: () => renderDefaultTransactionalEmail(id, sample()),
@@ -130,6 +130,51 @@ export function registerCoreSystemEmails() {
             app: resolveEmailBrandApp(),
         })),
     });
+    defineTransactionalEmail({
+        id: CORE_ACCESS_REQUESTED_EMAIL_ID,
+        app: "core",
+        name: "Access requested",
+        trigger: "A signed-in person who can't open a resource asks for access, in an app whose resource type takes requests. Asking again while the request is pending sends nothing.",
+        recipientLabel: "Owner and admins",
+        recipient: "The resource owner and each person with admin on it. Synthetic QA addresses are skipped.",
+        senderLabel: "Default, resource-branded",
+        sender: "The configured EMAIL_FROM, with reply-to set to the requester's signed-in address. A resource registration can set the brand name and logo.",
+        ...corePreview(CORE_ACCESS_REQUESTED_EMAIL_ID, () => ({
+            recipientEmail: SAMPLE_EMAIL,
+            requester: { name: "Alex Chen", email: "alex.chen@example.com" },
+            resource: {
+                type: "document",
+                label: "Document",
+                title: "Launch plan",
+                url: SAMPLE_URL,
+            },
+            reviewUrl: SAMPLE_URL,
+            note: "I'm presenting the rollout on Friday.",
+            app: resolveEmailBrandApp(),
+        })),
+    });
+    defineTransactionalEmail({
+        id: CORE_ACCESS_GRANTED_EMAIL_ID,
+        app: "core",
+        name: "Access granted",
+        trigger: "Someone who manages access to a resource allows a pending access request.",
+        recipientLabel: "Requester",
+        recipient: "The signed-in address that asked for access. Synthetic QA addresses are skipped.",
+        senderLabel: "Default, resource-branded",
+        sender: "The configured EMAIL_FROM. A resource registration can set the brand name and logo.",
+        ...corePreview(CORE_ACCESS_GRANTED_EMAIL_ID, () => ({
+            recipientEmail: SAMPLE_EMAIL,
+            approver: { name: "Alex Chen", email: "alex.chen@example.com" },
+            resource: {
+                type: "document",
+                label: "Document",
+                title: "Launch plan",
+                url: SAMPLE_URL,
+            },
+            role: "viewer",
+            app: resolveEmailBrandApp(),
+        })),
+    });
     defineTransactionalEmail({
         id: CORE_MAGIC_LINK_EMAIL_ID,
         app: "core",

package/dist/email-catalog/templates.d.ts

@@ -1,6 +1,6 @@
 import type { ReactElement } from "react";
 import { type EmailTemplateApp } from "../server/email-template.js";
-import { type RenderBuilderCreditLimitEmailArgs, type RenderChangeEmailConfirmationArgs, type RenderChangeEmailVerificationArgs, type RenderedEmailMessage, type RenderInviteEmailArgs, type RenderMagicLinkEmailArgs, type RenderResetPasswordEmailArgs, type RenderResourceSharedEmailArgs, type RenderVerifySignupEmailArgs } from "../server/email-templates.js";
+import { type RenderAccessGrantedEmailArgs, type RenderAccessRequestedEmailArgs, type RenderBuilderCreditLimitEmailArgs, type RenderChangeEmailConfirmationArgs, type RenderChangeEmailVerificationArgs, type RenderedEmailMessage, type RenderInviteEmailArgs, type RenderMagicLinkEmailArgs, type RenderResetPasswordEmailArgs, type RenderResourceSharedEmailArgs, type RenderVerifySignupEmailArgs } from "../server/email-templates.js";
 export declare const CORE_INVITE_EMAIL_ID = "core.organization-invite";
 export declare const CORE_VERIFY_SIGNUP_EMAIL_ID = "core.verify-signup";
 export declare const CORE_RESET_PASSWORD_EMAIL_ID = "core.reset-password";
@@ -9,6 +9,8 @@ export declare const CORE_CHANGE_EMAIL_CONFIRMATION_EMAIL_ID = "core.change-emai
 export declare const CORE_CHANGE_EMAIL_VERIFICATION_EMAIL_ID = "core.change-email-verification";
 export declare const CORE_BUILDER_CREDIT_LIMIT_EMAIL_ID = "core.builder-credit-limit";
 export declare const CORE_RESOURCE_SHARED_EMAIL_ID = "core.resource-shared";
+export declare const CORE_ACCESS_REQUESTED_EMAIL_ID = "core.access-requested";
+export declare const CORE_ACCESS_GRANTED_EMAIL_ID = "core.access-granted";
 /**
  * Data each framework email is rendered from, keyed by catalog id. An
  * override receives these values raw — escape them before interpolating into
@@ -23,6 +25,8 @@ export interface CoreTransactionalEmailArgs {
     [CORE_INVITE_EMAIL_ID]: RenderInviteEmailArgs;
     [CORE_BUILDER_CREDIT_LIMIT_EMAIL_ID]: RenderBuilderCreditLimitEmailArgs;
     [CORE_RESOURCE_SHARED_EMAIL_ID]: RenderResourceSharedEmailArgs;
+    [CORE_ACCESS_REQUESTED_EMAIL_ID]: RenderAccessRequestedEmailArgs;
+    [CORE_ACCESS_GRANTED_EMAIL_ID]: RenderAccessGrantedEmailArgs;
 }
 export type CoreTransactionalEmailId = keyof CoreTransactionalEmailArgs;
 export type CoreTransactionalEmailProps<Id extends CoreTransactionalEmailId> = CoreTransactionalEmailArgs[Id] & {

package/dist/email-catalog/templates.js

@@ -1,5 +1,5 @@
 import { emailHtmlToText, } from "../server/email-template.js";
-import { renderBuilderCreditLimitEmail, renderChangeEmailConfirmationEmail, renderChangeEmailVerificationEmail, renderInviteEmail, renderMagicLinkEmail, renderResetPasswordEmail, renderResourceSharedEmail, renderVerifySignupEmail, resolveEmailApp, resolveEmailBrandApp, } from "../server/email-templates.js";
+import { renderAccessGrantedEmail, renderAccessRequestedEmail, renderBuilderCreditLimitEmail, renderChangeEmailConfirmationEmail, renderChangeEmailVerificationEmail, renderInviteEmail, renderMagicLinkEmail, renderResetPasswordEmail, renderResourceSharedEmail, renderVerifySignupEmail, resolveEmailApp, resolveEmailBrandApp, } from "../server/email-templates.js";
 export const CORE_INVITE_EMAIL_ID = "core.organization-invite";
 export const CORE_VERIFY_SIGNUP_EMAIL_ID = "core.verify-signup";
 export const CORE_RESET_PASSWORD_EMAIL_ID = "core.reset-password";
@@ -8,6 +8,8 @@ export const CORE_CHANGE_EMAIL_CONFIRMATION_EMAIL_ID = "core.change-email-confir
 export const CORE_CHANGE_EMAIL_VERIFICATION_EMAIL_ID = "core.change-email-verification";
 export const CORE_BUILDER_CREDIT_LIMIT_EMAIL_ID = "core.builder-credit-limit";
 export const CORE_RESOURCE_SHARED_EMAIL_ID = "core.resource-shared";
+export const CORE_ACCESS_REQUESTED_EMAIL_ID = "core.access-requested";
+export const CORE_ACCESS_GRANTED_EMAIL_ID = "core.access-granted";
 const CORE_EMAIL_DEFAULTS = {
     [CORE_VERIFY_SIGNUP_EMAIL_ID]: {
         render: (args) => renderVerifySignupEmail(args),
@@ -41,6 +43,14 @@ const CORE_EMAIL_DEFAULTS = {
         render: (args) => renderResourceSharedEmail(args),
         app: (args) => args.app,
     },
+    [CORE_ACCESS_REQUESTED_EMAIL_ID]: {
+        render: (args) => renderAccessRequestedEmail(args),
+        app: (args) => args.app,
+    },
+    [CORE_ACCESS_GRANTED_EMAIL_ID]: {
+        render: (args) => renderAccessGrantedEmail(args),
+        app: (args) => args.app,
+    },
 };
 // Overrides are registered through the public `@agent-native/core` entry and
 // read through relative imports; a module-local map would split in two when

package/dist/file-upload/actions/upload-image.d.ts

@@ -42,8 +42,8 @@ declare const _default: import("../../action.js").ActionDefinition<{
     url: string;
     id: string;
     provider: string;
-    configured?: undefined;
     error?: undefined;
+    configured?: undefined;
 } | {
     url?: undefined;
     id?: undefined;

package/dist/framework-tools.js

@@ -101,6 +101,12 @@ export const CORE_ACTION_GROUPS = {
     "share-resource": "sharing",
     "unshare-resource": "sharing",
     "list-resource-shares": "sharing",
+    "get-resource-access-status": "sharing",
+    "request-resource-access": "sharing",
+    "get-resource-access-request": "sharing",
+    "list-resource-access-requests": "sharing",
+    "approve-resource-access-request": "sharing",
+    "decline-resource-access-request": "sharing",
     "set-resource-visibility": "sharing",
     "create-agent-resource-link": "sharing",
     "get-feature-flags": "featureFlags",

package/dist/identity/rekey.js

@@ -136,6 +136,15 @@ export const IDENTITY_REKEY_COLUMNS = [
     { table: "custom_api_providers", column: "scope_id", mode: "custom-scope" },
     { table: "staged_datasets", column: "owner_email" },
     { table: "resources", column: "owner", mode: "owner" },
+    // A request under an old address can't be approved for the new one, and a
+    // removed member's requests have no one to grant.
+    {
+        table: "resource_access_requests",
+        column: "requester_email",
+        emailChange: "delete",
+        offboard: "delete",
+    },
+    { table: "resource_access_requests", column: "owner_email" },
     { table: "agent_review_comments", column: "author_email" },
     { table: "agent_review_comments", column: "owner_email" },
     { table: "agent_review_notification_deliveries", column: "recipient_email" },

package/dist/jobs/run-history.d.ts

@@ -15,6 +15,10 @@ export interface AutomationRun {
     finishedAt: number | null;
     error: string | null;
     errorCode: string | null;
+    /** A queued "Run now" row that a worker claims before it starts. */
+    dispatchPending: boolean;
+    /** When a worker last claimed this queued dispatch, if ever. */
+    claimedAt: number | null;
 }
 export interface StartAutomationRunInput {
     owner: string;
@@ -28,6 +32,14 @@ export interface StartAutomationRunInput {
     threadId?: string | null;
     dispatchPending?: boolean;
 }
+/**
+ * How long a queued dispatch's claim stays valid before another worker may take
+ * it over (`claimAutomationRun`). The stale-lock recovery must leave a row
+ * inside this lease to its own worker.
+ */
+export declare function automationRunClaimLeaseMs(): number;
+/** How many runs each automation retains; pruning bounds unfinished rows to this. */
+export declare const RUNS_RETAINED_PER_AUTOMATION = 50;
 export declare const AUTOMATION_RUN_MIGRATIONS: MigrationEntry[];
 export declare function runAutomationRunMigrations(nitroApp: unknown): Promise<void>;
 export declare function ensureTable(): Promise<void>;
@@ -50,15 +62,22 @@ export declare function processPendingAutomationFailureAlerts(options?: {
     uncertain: number;
     failed: number;
 }>;
-export declare function finishAutomationRun(id: string, status: Exclude<AutomationRunStatus, "running">, error?: string, errorCode?: string, 
-/**
- * `notify: false` records the run without queueing the owner email. Used for
- * the early failures of a streak that will pause: the owner is told once,
- * by the run that pauses it.
- */
-options?: {
+export interface FinishAutomationRunOptions {
+    /**
+     * `notify: false` records the run without queueing the owner email. Used for
+     * the early failures of a streak that will pause: the owner is told once,
+     * by the run that pauses it.
+     */
     notify?: boolean;
-}): Promise<void>;
+    /**
+     * Finish only if the stored claim still equals this snapshot. The stale-lock
+     * recovery passes the `claimedAt` it read, so a worker that claims the run
+     * between that read and this write keeps its run instead of losing it to a
+     * stale terminal write.
+     */
+    expectedClaimedAt?: number | null;
+}
+export declare function finishAutomationRun(id: string, status: Exclude<AutomationRunStatus, "running">, error?: string, errorCode?: string, options?: FinishAutomationRunOptions): Promise<void>;
 export declare function attachAutomationRunThread(id: string, threadId: string, runId: string): Promise<void>;
 export declare function deleteAutomationRuns(owner: string, automation: string): Promise<void>;
 export declare function listAutomationRuns(options: {