@agent-native/core 0.203.0-nightly-20261007064822 → 0.203.0

package/dist/client/chat/agentkit-protocol.js

@@ -790,6 +790,7 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
     }
     const sessions = new Map();
     const runs = new Map();
+    const runtimeRunAliases = new Map();
     const disposedSessions = new WeakSet();
     let retentionTimer;
     let disposed = false;
@@ -805,6 +806,53 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
         const parsed = Date.parse(value);
         return Number.isFinite(parsed) ? parsed : Date.now();
     }
+    function runtimeRunAliasKey(threadId, runtimeRunId) {
+        return JSON.stringify([threadId, runtimeRunId]);
+    }
+    function findRun(threadId, runId) {
+        const run = runs.get(runId);
+        if (run?.threadId === threadId)
+            return run;
+        const aliasKey = runtimeRunAliasKey(threadId, runId);
+        const aliasedRun = runtimeRunAliases.get(aliasKey);
+        if (!aliasedRun)
+            return undefined;
+        if (runs.get(aliasedRun.runId) !== aliasedRun) {
+            runtimeRunAliases.delete(aliasKey);
+            return undefined;
+        }
+        return aliasedRun;
+    }
+    function indexRun(run, runtimeRunId = run.turn.runId ?? run.runId) {
+        const existingRun = runs.get(run.runId);
+        if (existingRun && existingRun !== run) {
+            throw new Error(`Duplicate AgentKit run id: ${run.runId}`);
+        }
+        if (runtimeRunId && runtimeRunId !== run.runId) {
+            const conflictingRun = runs.get(runtimeRunId);
+            if (conflictingRun?.threadId === run.threadId) {
+                throw new Error(`Runtime run id ${runtimeRunId} conflicts with an AgentKit run id.`);
+            }
+            const aliasKey = runtimeRunAliasKey(run.threadId, runtimeRunId);
+            const previousRun = runtimeRunAliases.get(aliasKey);
+            if (previousRun &&
+                previousRun !== run &&
+                runs.get(previousRun.runId) === previousRun &&
+                !previousRun.terminal) {
+                throw new Error(`Runtime run id ${runtimeRunId} is already owned by active AgentKit run ${previousRun.runId}.`);
+            }
+            runtimeRunAliases.set(aliasKey, run);
+        }
+        runs.set(run.runId, run);
+    }
+    function removeRun(run) {
+        if (runs.get(run.runId) === run)
+            runs.delete(run.runId);
+        for (const [aliasKey, aliasedRun] of runtimeRunAliases) {
+            if (aliasedRun === run)
+                runtimeRunAliases.delete(aliasKey);
+        }
+    }
     function touchRun(run) {
         run.lastAccessedAtMs = timeMs();
     }
@@ -840,7 +888,7 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
         for (const run of evictable) {
             if (run.terminalAtMs !== undefined &&
                 referenceTimeMs - run.terminalAtMs >= retainedRunTtlMs) {
-                runs.delete(run.runId);
+                removeRun(run);
             }
         }
         const retainedCompleted = [...runs.values()]
@@ -851,7 +899,7 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
         while (retainedCompleted.length > maxRetainedRuns) {
             const run = retainedCompleted.shift();
             if (run)
-                runs.delete(run.runId);
+                removeRun(run);
         }
         scheduleRetentionSweep(referenceTimeMs);
     }
@@ -1046,7 +1094,7 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
             ...(runAuthority ? { restoredWithoutStream: true } : {}),
             listeners: new Set(),
         };
-        runs.set(input.runId, run);
+        indexRun(run, input.runId);
         append(run, {
             type: "run.started",
             agentId: runtime.id,
@@ -2367,6 +2415,7 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
             run.successorWaitStartedAtMs = undefined;
         }
         run.turn = resumed;
+        indexRun(run, resumed.runId);
     }
     function ensurePump(run) {
         if (run.pumpPromise || run.streamClosed || run.terminal || !run.turn)
@@ -2574,7 +2623,7 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
                 throw new Error("The AgentKit adapter was disposed during turn creation.");
             }
             pruneRetainedRuns(run.lastAccessedAtMs);
-            runs.set(runId, run);
+            indexRun(run, turn.runId);
             append(run, {
                 type: "run.started",
                 agentId: runtime.id,
@@ -2586,10 +2635,11 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
         },
         async *subscribeToRun(input) {
             pruneRetainedRuns();
-            let run = runs.get(input.runId);
-            if (!run || run.threadId !== input.threadId) {
-                if (run)
+            let run = findRun(input.threadId, input.runId);
+            if (!run) {
+                if (runs.has(input.runId)) {
                     throw new Error(`Unknown AgentKit run: ${input.runId}`);
+                }
                 run = await restoreRunFromRuntime(input);
             }
             touchRun(run);
@@ -2598,8 +2648,8 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
         },
         async getRun(input) {
             pruneRetainedRuns();
-            const run = runs.get(input.runId);
-            if (!run || run.threadId !== input.threadId)
+            const run = findRun(input.threadId, input.runId);
+            if (!run)
                 return null;
             touchRun(run);
             return {
@@ -2617,8 +2667,8 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
         },
         async cancelRun(input) {
             pruneRetainedRuns();
-            let run = runs.get(input.runId);
-            if (run && run.threadId !== input.threadId) {
+            let run = findRun(input.threadId, input.runId);
+            if (!run && runs.has(input.runId)) {
                 throw new Error(`Unknown AgentKit run: ${input.runId}`);
             }
             if (!run) {
@@ -2634,7 +2684,6 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
                     }
                 }
                 run = await restoreRunFromRuntime(input);
-                runs.set(input.runId, run);
             }
             touchRun(run);
             if (run.terminal)
@@ -2799,8 +2848,8 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
     if (runtime.capabilities.tools?.approvals) {
         const resumeRun = async (input) => {
             pruneRetainedRuns();
-            const run = runs.get(input.runId);
-            if (!run || run.threadId !== input.threadId) {
+            const run = findRun(input.threadId, input.runId);
+            if (!run) {
                 throw new Error(`Unknown AgentKit run: ${input.runId}`);
             }
             touchRun(run);
@@ -2895,7 +2944,7 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
                 run.pendingApprovalId = undefined;
                 run.terminal = true;
                 run.terminalAtMs = timeMs();
-                runs.set(nextRunId, replacementRun);
+                indexRun(replacementRun, nextTurn.runId);
                 append(replacementRun, {
                     type: "run.started",
                     agentId: runtime.id,
@@ -2938,8 +2987,8 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
     if (runtime.capabilities.rich?.connectionRequests) {
         transport.resolveConnectionRequest = async (input) => {
             pruneRetainedRuns();
-            const run = runs.get(input.runId);
-            if (!run || run.threadId !== input.threadId) {
+            const run = findRun(input.threadId, input.runId);
+            if (!run) {
                 throw new Error(`Unknown AgentKit run: ${input.runId}`);
             }
             touchRun(run);
@@ -3006,6 +3055,7 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
                 run.waitingForContinuation = false;
                 run.pendingConnectionRequestId = undefined;
                 run.turn = nextTurn;
+                indexRun(run, nextTurn.runId);
                 run.streamClosed = false;
                 update(input.response.status);
                 append(run, { type: "run.status", status: "running" });

package/dist/collab/routes.d.ts

@@ -8,16 +8,16 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
     state: string;
 }>>;
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;
 }>>;
 export declare const postCollabText: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     ok?: undefined;
-    error: string;
     text?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/jobs/actions/manage-recurring-job.d.ts

@@ -11,9 +11,9 @@ declare const _default: import("../../action.js").ActionDefinition<{
     enabled?: undefined;
     nextRun?: undefined;
 } | {
-    deleted?: undefined;
     name: string;
     enabled: boolean;
     nextRun: string;
+    deleted?: undefined;
 }>;
 export default _default;

package/dist/mcp/build-server.d.ts

@@ -31,7 +31,7 @@ export interface MCPConfig {
      * no-op. See `external-agents` skill, "Dev vs production tool surface".
      */
     productionActions?: Record<string, ActionEntry>;
-    /** Hidden from tool discovery; used only when minting scoped widget tickets. */
+    /** Unlisted from this MCP surface; used only when minting scoped widget tickets. */
     widgetReadActions?: Record<string, ActionEntry>;
     askAgent?: (message: string) => Promise<string>;
     builtinCrossAppTools?: boolean;
@@ -61,6 +61,10 @@ export interface MCPConfig {
         widgetReadPublicActions?: readonly string[];
         /** Unlisted authenticated reads available only through a scoped widget ticket. */
         widgetReadPrivateActions?: readonly string[];
+        /** Authenticated reads surfaced on other agent profiles, but only scoped here. */
+        widgetReadAuthenticatedActions?: readonly string[];
+        /** Omit the one shared resource title when tools have distinct invocation labels. */
+        widgetResourceTitle?: string | false;
         keyToolNames?: readonly string[];
         toolDescriptions?: Record<string, string>;
         toolParameterDescriptions?: Record<string, Record<string, string>>;

package/dist/mcp/build-server.js

@@ -122,10 +122,10 @@ export function isMcpAppsInlineEnabled(identity) {
     }
     return false;
 }
-function isActionVisibleForOAuthScope(entry, scopes) {
+function isActionVisibleForOAuthScope(entry, scopes, readOnlyOverride = false) {
     if (!scopes)
         return true;
-    const required = entry.readOnly === true ? "mcp:read" : "mcp:write";
+    const required = entry.readOnly === true || readOnlyOverride ? "mcp:read" : "mcp:write";
     return hasMcpOAuthScope(scopes, required);
 }
 const TOOL_SEARCH_TOOL_NAME = "tool-search";
@@ -168,7 +168,11 @@ export function selectMcpActionSurface(config, requestMeta) {
 export function selectMcpDirectoryWidgetReadActions(profile, actions) {
     if (!profile)
         return undefined;
-    return Object.fromEntries((profile.widgetReadPrivateActions ?? [])
+    const names = new Set([
+        ...(profile.widgetReadPrivateActions ?? []),
+        ...(profile.widgetReadAuthenticatedActions ?? []),
+    ]);
+    return Object.fromEntries([...names]
         .map((name) => [name, actions[name]])
         .filter((entry) => Boolean(entry[1])));
 }
@@ -225,9 +229,11 @@ export function validateMcpDirectoryProfile(config, sourceActions = config.produ
     const widgetReadOnlyActions = new Set(profile?.widgetReadOnlyActions ?? []);
     const widgetReadPublicActions = new Set(profile?.widgetReadPublicActions ?? []);
     const widgetReadPrivateActions = new Set(profile?.widgetReadPrivateActions ?? []);
-    const unprofiledWidgetReadAction = Object.keys(config.widgetReadActions ?? {}).find((name) => !widgetReadPrivateActions.has(name));
+    const widgetReadAuthenticatedActions = new Set(profile?.widgetReadAuthenticatedActions ?? []);
+    const unprofiledWidgetReadAction = Object.keys(config.widgetReadActions ?? {}).find((name) => !widgetReadPrivateActions.has(name) &&
+        !widgetReadAuthenticatedActions.has(name));
     if (unprofiledWidgetReadAction) {
-        throw new McpDirectoryProfileValidationError(`[agent-native] MCP directory hidden widget read "${unprofiledWidgetReadAction}" must be listed in widgetReadPrivateActions.`);
+        throw new McpDirectoryProfileValidationError(`[agent-native] MCP directory widget read "${unprofiledWidgetReadAction}" must be listed in its scoped read category.`);
     }
     const widgetTargetNames = Object.keys(profile?.widgetTargets ?? {});
     if (profile && profile.widgets !== false && profile.widgetTargets) {
@@ -241,8 +247,10 @@ export function validateMcpDirectoryProfile(config, sourceActions = config.produ
         }
     }
     for (const name of widgetReadOnlyActions) {
-        const entry = actions[name];
-        if (!names.includes(name) ||
+        const entry = actions[name] ?? config.widgetReadActions?.[name];
+        if ((!names.includes(name) &&
+            !widgetReadAuthenticatedActions.has(name) &&
+            !widgetReadPrivateActions.has(name)) ||
             !profile?.widgetReadActionArguments?.[name] ||
             !entry ||
             entry.http === false ||
@@ -276,17 +284,34 @@ export function validateMcpDirectoryProfile(config, sourceActions = config.produ
             throw new McpDirectoryProfileValidationError(`[agent-native] MCP directory hidden widget read "${name}" must be an unlisted, authenticated, read-only GET action hidden from every agent tool surface.`);
         }
     }
+    for (const name of widgetReadAuthenticatedActions) {
+        const entry = actions[name] ?? config.widgetReadActions?.[name];
+        if (names.includes(name) ||
+            !profile?.widgetReadActionArguments?.[name] ||
+            !entry ||
+            (entry.readOnly !== true && !widgetReadOnlyActions.has(name)) ||
+            entry.http === false ||
+            entry.http?.method !== "GET" ||
+            entry.requiresAuth === false ||
+            isActionHiddenFromEveryAgentSurface(entry)) {
+            throw new McpDirectoryProfileValidationError(`[agent-native] MCP directory scoped authenticated widget read "${name}" must be unlisted, authenticated, read-only, and available on another agent surface.`);
+        }
+    }
     for (const [name, argumentMap] of Object.entries(profile?.widgetReadActionArguments ?? {})) {
         const scopedPrivateRead = widgetReadPrivateActions.has(name);
+        const scopedAuthenticatedRead = widgetReadAuthenticatedActions.has(name);
         const entry = actions[name] ?? config.widgetReadActions?.[name];
         const scopedPublicRead = widgetReadPublicActions.has(name);
-        if ((!names.includes(name) && !scopedPublicRead && !scopedPrivateRead) ||
+        if ((!names.includes(name) &&
+            !scopedPublicRead &&
+            !scopedPrivateRead &&
+            !scopedAuthenticatedRead) ||
             !entry ||
             (entry.readOnly !== true && !widgetReadOnlyActions.has(name)) ||
             entry.http === false ||
             entry.http?.method !== "GET" ||
             (entry.requiresAuth === false && !scopedPublicRead) ||
-            Object.keys(argumentMap).length === 0 ||
+            (Object.keys(argumentMap).length === 0 && !scopedAuthenticatedRead) ||
             Object.entries(argumentMap).some(([argumentName, argument]) => !MCP_DIRECTORY_WIDGET_ARGUMENT.test(argumentName) ||
                 (typeof argument === "string"
                     ? !MCP_DIRECTORY_WIDGET_ARGUMENT.test(argument)
@@ -822,15 +847,19 @@ function mcpDirectoryWidgetCapabilityForTool(config, resource, toolName, args, r
     for (const [actionName, argumentMap] of Object.entries(profile.widgetReadActionArguments ?? {})) {
         const scopedPublicRead = profile.widgetReadPublicActions?.includes(actionName);
         const scopedPrivateRead = profile.widgetReadPrivateActions?.includes(actionName);
+        const scopedAuthenticatedRead = profile.widgetReadAuthenticatedActions?.includes(actionName);
         const entry = actions[actionName] ??
-            (scopedPrivateRead ? config.widgetReadActions?.[actionName] : undefined);
+            (scopedPrivateRead || scopedAuthenticatedRead
+                ? config.widgetReadActions?.[actionName]
+                : undefined);
         if (!entry ||
             (!profile.connectorCatalog.includes(actionName) &&
                 !scopedPublicRead &&
-                !scopedPrivateRead) ||
+                !scopedPrivateRead &&
+                !scopedAuthenticatedRead) ||
             (entry.readOnly !== true &&
                 !profile.widgetReadOnlyActions?.includes(actionName)) ||
-            !isActionVisibleForOAuthScope(entry, oauthScopes) ||
+            !isActionVisibleForOAuthScope(entry, oauthScopes, profile.widgetReadOnlyActions?.includes(actionName) === true) ||
             entry.http === false ||
             entry.http?.method !== "GET" ||
             (entry.requiresAuth === false && !scopedPublicRead)) {
@@ -1348,12 +1377,26 @@ async function getMcpAppResources(config, actions, identity, requestMeta) {
     if (config.catalogMode !== "directory")
         return resolved;
     const seenUris = new Set();
-    return resolved.filter((resource) => {
+    const unique = resolved.filter((resource) => {
         if (seenUris.has(resource.uri))
             return false;
         seenUris.add(resource.uri);
         return true;
     });
+    const resourceTitle = config.directoryProfile?.widgetResourceTitle;
+    if (resourceTitle === undefined)
+        return unique;
+    return unique.map((resource) => {
+        const titled = { ...resource };
+        if (resourceTitle === false) {
+            titled.name = config.title ?? config.appId ?? resource.name;
+            delete titled.title;
+        }
+        else {
+            titled.title = resourceTitle;
+        }
+        return titled;
+    });
 }
 function renderMcpAppHtml(resource, actionName, config, requestMeta) {
     if (typeof resource.html === "function") {

package/dist/mcp/embed-app.js

@@ -1839,7 +1839,8 @@ export function embedApp(options = {}) {
 
     function updateTitle(data) {
       const record = objectValue(data);
-      const label = record.label || record.app || record.view || body.dataset.appTitle || "App";
+      const openLink = objectValue(toolResponseMetadata["agent-native/openLink"]);
+      const label = record.label || openLink.label || record.app || record.view || body.dataset.appTitle || "App";
       titleEl.textContent = String(label);
     }
 
@@ -1888,6 +1889,9 @@ export function embedApp(options = {}) {
       toolResultData = objectValue(data);
       openUrl = openLinkFrom(params, data);
       openStartUrl = embedStartUrlFrom(params, data);
+      const openLinkLabel = objectValue(
+        toolResponseMetadata["agent-native/openLink"],
+      ).label;
       // set_globals fires constantly, and this sync calls notifyHostHeight/
       // sendHostContext which the host echoes back as another set_globals — an
       // infinite storm. Only do the host round-trips + (re)launch when something
@@ -1900,6 +1904,7 @@ export function embedApp(options = {}) {
           toolResponseMetadata["agent-native/widgetSource"],
           openUrl,
           openStartUrl,
+          openLinkLabel,
           bridge.displayMode,
           bridge.theme,
           bridge.locale

package/dist/notifications/routes.d.ts

@@ -16,6 +16,6 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/observability/routes.d.ts

@@ -34,18 +34,18 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     id?: undefined;
     ok?: undefined;
 } | {
-    error?: undefined;
     message?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
+    error?: undefined;
     ok?: undefined;
 } | {
-    error?: undefined;
     message?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;
+    error?: undefined;
     ok?: undefined;
 } | {
     message?: undefined;
@@ -55,10 +55,10 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     error: any;
     ok?: undefined;
 } | {
-    error?: undefined;
     message?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
+    error?: undefined;
     ok: boolean;
 }>>;

package/dist/org/index.d.ts

@@ -177,10 +177,10 @@ export declare const getMyOrgHandler: import("h3").EventHandlerWithFetch<import(
     soloDeploymentAdmin: boolean | undefined;
 }>>;
 export declare const createOrgHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    role?: undefined;
-    id?: undefined;
     name?: undefined;
     success: boolean;
+    id?: undefined;
+    role?: undefined;
 } | {
     success?: undefined;
     id: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -311,7 +311,6 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
-        message?: undefined;
         deleted?: undefined;
         found?: undefined;
         providers: {
@@ -328,8 +327,8 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         registered?: undefined;
         id?: undefined;
         label?: undefined;
-    } | {
         message?: undefined;
+    } | {
         deleted?: undefined;
         count?: undefined;
         providers?: undefined;
@@ -338,8 +337,8 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         registered?: undefined;
         id?: undefined;
         label?: undefined;
-    } | {
         message?: undefined;
+    } | {
         deleted?: undefined;
         count?: undefined;
         providers?: undefined;
@@ -348,8 +347,8 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         id: string;
         registered?: undefined;
         label?: undefined;
-    } | {
         message?: undefined;
+    } | {
         count?: undefined;
         found?: undefined;
         providers?: undefined;
@@ -358,6 +357,7 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         id: string;
         registered?: undefined;
         label?: undefined;
+        message?: undefined;
     } | {
         deleted?: undefined;
         count?: undefined;

package/dist/resources/handlers.d.ts

@@ -39,8 +39,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
     error: string;
 }>;
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/server/agent-chat/mcp-options.d.ts

@@ -23,6 +23,10 @@ export interface AgentChatMcpOptions {
         widgetReadPublicActions?: readonly string[];
         /** Unlisted authenticated reads available only through a scoped widget ticket. */
         widgetReadPrivateActions?: readonly string[];
+        /** Authenticated reads surfaced on other agent profiles, but only scoped here. */
+        widgetReadAuthenticatedActions?: readonly string[];
+        /** Omit the one shared resource title when tools have distinct invocation labels. */
+        widgetResourceTitle?: string | false;
         keyToolNames?: readonly string[];
         toolDescriptions?: Record<string, string>;
         toolParameterDescriptions?: Record<string, Record<string, string>>;