@agent-native/core 0.203.0-nightly-20261007064822 → 0.203.0

package/dist/server/agent-chat-plugin.js

@@ -1,7 +1,7 @@
 import crypto from "node:crypto";
 import nodePath from "node:path";
 import { AgentProtocolValidationError, parseAgentRunOptions, } from "@agent-native/agentkit/protocol";
-import { createError, defineEventHandler, setResponseStatus, setResponseHeader, getMethod, getQuery, getHeader, getRequestIP, } from "h3";
+import { createError, defineEventHandler, setResponseStatus, setResponseHeader, getMethod, getQuery, getHeader, getRequestIP, readBody as readH3Body, } from "h3";
 import { applyA2AAgentActivityEvent, buildA2AAgentActivityPart, createA2AAgentActivityState, } from "../a2a/activity.js";
 import { appendA2AArtifactLinks, buildA2ARecoverableArtifactMessage, } from "../a2a/artifact-response.js";
 import { hasConfiguredA2ASecret, isLoopbackAddress, isTrustedLocalRuntime, } from "../a2a/auth-policy.js";
@@ -2620,6 +2620,7 @@ export function createAgentChatPlugin(options) {
                         ? Object.fromEntries(Object.entries(mcpOptions.directoryProfile.widgetReadActionArguments ?? {})
                             .filter(([name]) => (mcpOptions.directoryProfile?.connectorCatalog.includes(name) ||
                             mcpOptions.directoryProfile?.widgetReadPublicActions?.includes(name) ||
+                            mcpOptions.directoryProfile?.widgetReadAuthenticatedActions?.includes(name) ||
                             mcpOptions.directoryProfile?.widgetReadPrivateActions?.includes(name)) &&
                             httpActions[name] &&
                             (httpActions[name]?.readOnly === true ||
@@ -5333,7 +5334,14 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                         // run could clobber the assistant message the server just
                         // appended (and vice versa).
                         return await withThreadDataLock(threadId, async () => {
-                            const body = await readBody(event);
+                            const rawBody = await readH3Body(event);
+                            if (!rawBody ||
+                                typeof rawBody !== "object" ||
+                                Array.isArray(rawBody)) {
+                                setResponseStatus(event, 400);
+                                return { error: "Invalid request body" };
+                            }
+                            const body = rawBody;
                             const bodyIncludesScope = Boolean(body &&
                                 typeof body === "object" &&
                                 Object.prototype.hasOwnProperty.call(body, "scope"));
@@ -5360,12 +5368,37 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                                 setResponseStatus(event, 404);
                                 return { error: "Thread not found" };
                             }
-                            let newThreadData = body.threadData || thread.threadData;
-                            let newMessageCount = body.messageCount ?? thread.messageCount;
+                            const hasThreadDataField = Boolean(body &&
+                                typeof body === "object" &&
+                                Object.prototype.hasOwnProperty.call(body, "threadData"));
+                            const incomingThreadData = body.threadData;
+                            if (hasThreadDataField &&
+                                typeof incomingThreadData !== "string") {
+                                setResponseStatus(event, 400);
+                                return { error: "Invalid threadData JSON" };
+                            }
+                            // Empty threadData is the existing metadata-only save sentinel.
+                            const hasThreadData = typeof incomingThreadData === "string" &&
+                                incomingThreadData.length > 0;
+                            let newThreadData = hasThreadData
+                                ? incomingThreadData
+                                : thread.threadData;
+                            const requestedMessageCount = body.messageCount;
+                            if (Object.prototype.hasOwnProperty.call(body, "messageCount") &&
+                                (typeof requestedMessageCount !== "number" ||
+                                    !Number.isSafeInteger(requestedMessageCount) ||
+                                    requestedMessageCount < 0)) {
+                                setResponseStatus(event, 400);
+                                return { error: "Invalid request body" };
+                            }
+                            let newMessageCount = typeof requestedMessageCount === "number"
+                                ? requestedMessageCount
+                                : thread.messageCount;
                             let nextTitle = typeof body.title === "string" ? body.title : thread.title;
                             const nextPreview = typeof body.preview === "string"
                                 ? body.preview
                                 : thread.preview;
+                            const annotationConflicts = [];
                             const preserveTitleOverride = (repo) => {
                                 if (repo &&
                                     typeof repo === "object" &&
@@ -5377,14 +5410,51 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                                         nextTitle = meta.title;
                                 }
                             };
-                            // Merge the incoming full-thread blob over the current SQL
-                            // copy. Periodic saves can be stale relative to server-side
-                            // run completion, and threadRuntime.export() does not carry
-                            // queuedMessages.
-                            if (body.threadData) {
+                            let isSnapshotDelta = false;
+                            let existing;
+                            try {
+                                existing = JSON.parse(thread.threadData);
+                            }
+                            catch {
+                                setResponseStatus(event, 500);
+                                return { error: "Stored thread data is invalid JSON" };
+                            }
+                            if (!existing ||
+                                typeof existing !== "object" ||
+                                Array.isArray(existing)) {
+                                setResponseStatus(event, 500);
+                                return { error: "Stored thread data is invalid JSON" };
+                            }
+                            // Merge the incoming snapshot delta over the current SQL copy.
+                            // Let updateThreadData apply delta markers to each latest
+                            // revision if its compare-and-swap needs to retry.
+                            if (hasThreadData) {
+                                let incoming;
                                 try {
-                                    const existing = JSON.parse(thread.threadData);
-                                    const incoming = JSON.parse(newThreadData);
+                                    incoming = JSON.parse(incomingThreadData);
+                                }
+                                catch {
+                                    setResponseStatus(event, 400);
+                                    return { error: "Invalid threadData JSON" };
+                                }
+                                if (!incoming ||
+                                    typeof incoming !== "object" ||
+                                    Array.isArray(incoming)) {
+                                    setResponseStatus(event, 400);
+                                    return { error: "Invalid threadData JSON" };
+                                }
+                                const incomingAgentKit = incoming
+                                    .agentKit;
+                                isSnapshotDelta =
+                                    incomingAgentKit !== null &&
+                                        typeof incomingAgentKit === "object" &&
+                                        !Array.isArray(incomingAgentKit) &&
+                                        incomingAgentKit
+                                            ._snapshotDelta === true;
+                                if (isSnapshotDelta) {
+                                    preserveTitleOverride(existing);
+                                }
+                                else {
                                     const merged = mergeThreadDataForClientSave(existing, incoming);
                                     newThreadData = JSON.stringify(merged);
                                     if (Array.isArray(merged.messages)) {
@@ -5392,19 +5462,18 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                                     }
                                     preserveTitleOverride(merged);
                                 }
-                                catch {
-                                    // Invalid JSON in either side — fall back to raw body blob.
-                                }
                             }
                             else {
-                                try {
-                                    preserveTitleOverride(JSON.parse(newThreadData));
-                                }
-                                catch {
-                                    // Invalid JSON — keep the title supplied by the client.
-                                }
+                                preserveTitleOverride(existing);
+                            }
+                            const updated = await updateThreadData(threadId, newThreadData, nextTitle, nextPreview, newMessageCount, {
+                                preserveCurrentTitleAndPreview: isSnapshotDelta,
+                                onAnnotationConflict: (conflict) => annotationConflicts.push(conflict),
+                            });
+                            if (!updated) {
+                                setResponseStatus(event, 404);
+                                return { error: "Thread not found" };
                             }
-                            await updateThreadData(threadId, newThreadData, nextTitle, nextPreview, newMessageCount);
                             // Scope updates piggyback on the PUT — the client uses this
                             // path for detach and for claiming a legacy unscoped thread.
                             // A scoped thread cannot be retagged across resources here.
@@ -5416,7 +5485,13 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             // between the read above and this save), so the client records
                             // what the server holds instead of guessing from the page.
                             const saved = await resolveThreadAccess(owner, threadId, "editor", { orgId });
-                            return { ok: true, scope: saved?.scope ?? null };
+                            return {
+                                ok: true,
+                                scope: saved?.scope ?? null,
+                                ...(annotationConflicts.length > 0
+                                    ? { annotationConflicts }
+                                    : {}),
+                            };
                         });
                     }
                     // POST /threads/:id/queued — apply a single queue mutation against

package/dist/server/agent-engine-default-model-route.d.ts

@@ -8,17 +8,17 @@ export declare const AGENT_ENGINE_API_KEY_ACTION_NAME = "agent-engine-api-key";
  * resolveEngine's credential detection.
  */
 export declare function createAgentEngineDisconnectHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
     scope?: undefined;
+    ok?: undefined;
 } | {
     ok: boolean;
     error: any;
     scope?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     scope: "org" | "user";
+    error?: undefined;
 }>>;
 export interface DefaultModelSelectionRequest {
     engine: string;

package/dist/server/onboarding-html.js

@@ -1837,7 +1837,7 @@ export function getOnboardingHtml(opts = {}) {
   .auth-wave-background {
     position: fixed;
     inset: 0;
-    transform: translateY(-9vh);
+    transform: translateY(-15vh);
     z-index: 0;
     pointer-events: none;
   }

package/dist/server/realtime-token.d.ts

@@ -54,8 +54,8 @@ export declare function createRealtimeTokenHandler(): import("h3").EventHandlerW
     expiresAt?: undefined;
     ttlSeconds?: undefined;
 } | {
+    error?: undefined;
     token: string;
     expiresAt: string;
     ttlSeconds: number;
-    error?: undefined;
 }>>;

package/dist/server/transcribe-voice.d.ts

@@ -20,6 +20,6 @@ export declare function createTranscribeVoiceHandler(): import("h3").EventHandle
     error: string;
     text?: undefined;
 } | {
-    text: string;
     error?: undefined;
+    text: string;
 }>>;

package/dist/shared/embed-auth.js

@@ -77,7 +77,7 @@ function isWidgetReadCapability(value) {
     return (actions.length > 0 &&
         actions.length <= 32 &&
         actions.every(([actionName, args]) => MCP_DIRECTORY_ACTION_NAME.test(actionName) &&
-            isWidgetReadArgumentRecord(args)));
+            isWidgetReadArgumentRecord(args, { minEntries: 0 })));
 }
 function decodeMcpDirectoryWidgetReadCapability(scope) {
     if (!scope.startsWith(MCP_DIRECTORY_WIDGET_READ_CAPABILITY_PREFIX) ||
@@ -134,7 +134,7 @@ export function createMcpDirectoryWidgetReadCapability(input) {
     if (actionEntries.length === 0 ||
         actionEntries.length > 32 ||
         actionEntries.some(([actionName, args]) => !MCP_DIRECTORY_ACTION_NAME.test(actionName) ||
-            !isWidgetReadArgumentRecord(args))) {
+            !isWidgetReadArgumentRecord(args, { minEntries: 0 }))) {
         return undefined;
     }
     const capability = {
@@ -186,8 +186,9 @@ export function normalizeMcpDirectoryWidgetReadActionArguments(scope, input) {
     const includesResourceBinding = suppliedArgs.some(([name, value]) => typeof expectedArgs[name] === "string" && expectedArgs[name] === value);
     if (hasSchemaArgument && !includesResourceBinding)
         return undefined;
-    if (suppliedArgs.length === 0)
-        return undefined;
+    if (suppliedArgs.length === 0) {
+        return Object.keys(expectedArgs).length === 0 ? {} : undefined;
+    }
     const normalizedArgs = [];
     for (const [name, value] of suppliedArgs) {
         if (!Object.hasOwn(expectedArgs, name))

package/dist/sharing/actions/list-resource-shares.d.ts

@@ -2,7 +2,6 @@ declare const _default: import("../../action.js").ActionDefinition<{
     resourceType: string;
     resourceId: string;
 }, {
-    role?: undefined;
     ownerEmail: any;
     visibility: any;
     shares: any[];
@@ -12,6 +11,7 @@ declare const _default: import("../../action.js").ActionDefinition<{
         supportsGroupShares?: boolean;
     };
     orgId?: undefined;
+    role?: undefined;
     agentReadable?: undefined;
 } | {
     ownerEmail: string;

package/dist/templates/factory/.agents/skills/review-latest-feedback/SKILL.md

@@ -1,12 +1,10 @@
 ---
 name: review-latest-feedback
 description: >-
-  Sweep recent Slack, GitHub issues, Sentry, Agent-Native Analytics errors,
-  actionable automated diagnostics, and linked-tracker feedback: answer
-  reporters first, then fix verified bugs and actionable
-  objective UI defects at the owning boundary, require human signoff for
-  subjective UI changes, build features the invoking user endorsed with an
-  :upvote:, and recap every disposition. Use for scheduled or manual sweeps.
+  Sweep Slack, GitHub, Sentry, Analytics, trackers, and automated diagnostics,
+  plus app/template, desktop, and package deploy/release/publish lanes. Fix
+  verified defects, verify recovery targets, and recap. Use for scheduled or
+  manual sweeps.
 user-invocable: true
 scope: dev
 metadata:
@@ -326,6 +324,16 @@ correlation. Apply the same local-first rule. Fix worthwhile repo-owned failures
 at their boundary; record external, deployment, or unclear issues without
 inventing a fix.
 
+### Deployment, release, and publish failures
+
+Scan app/template, desktop build/release, and package-publish lanes on every
+sweep, even without a linked report. Include queued/running runs, run-only
+failures, and missing/stale artifacts; carry active run IDs and rows across
+cursors. Fix verified repo-owned causes; record external/manual causes with the
+next owner/action. Use [`deployment-recovery.md`](references/deployment-recovery.md)
+for lane-specific recovery and target proof. Green CI or merged source
+does not prove delivery.
+
 ## Phase 2: fix
 
 Before changing code, read `fix-at-the-boundary`, `verifying-changes`, and
@@ -426,24 +434,16 @@ pre-existing.
 
 ### Npx and package reports have a release follow-up
 
-Npx scaffolds are versioned. Record pinned/filed versions, fresh npm cache/no
-local override, candidate result, release, and existing-app path (`pnpm add
-@agent-native/core@<version>` or hand edit).
-
-Local proof, beta promises, and scaffolds aren't **Shipped**/**Live verified**
-until published. A verified merge is **Fixed**; follow the issue-closure rule
-above. Record merge proof, release, verification, and bump/re-scaffold
-follow-up. Unknown package/endpoint context is a release follow-up. Ask only if
-scope or reporter input is unclear. Missing evidence alone doesn't keep a
-verified merge open.
-Merge/beta is not npx delivery.
+Use [`deployment-recovery.md`](references/deployment-recovery.md) for npx
+version evidence, registry proof, publication status, and existing-app upgrade
+verification. A verified merge may be **Fixed** under the issue-closure rule
+above while its delivery row stays open; a local scaffold or beta promise is not
+delivery.
 
 ### Documentation has a runnable proof obligation
 
-For each docs row, copy commands into a clean temporary scaffold; verify every
-referenced file, directory, script, env var, deploy target, link, and fence
-order. A docs diff/build is not enough. Update configured locales and run
-`guard:i18n-catalogs` plus `guard:i18n-changed-copy`.
+For each docs row, use [`documentation-proof.md`](references/documentation-proof.md).
+A docs diff/build alone isn't proof.
 
 Choose the narrowest seam the evidence supports:
 
@@ -577,14 +577,16 @@ message details.
 Start cursors: product [Slack message](...) · QA [Slack message](...) · dev [Slack message](...)
 Reply cursors (reuse next run): product <timestamp> · QA <timestamp> · dev <timestamp>
 Messages: product N · QA N · dev N (total N)
+Deployment cursor: <timestamp> · carried active run IDs/rows: <ids/count>
+Release lanes: N inspected · failed/stale N · target verified N
 Reaction-gated skips: N · claimed N · answered N
 Questions asked: N/3 · Dropped at 4 days: N
 Repeats of a prior Fixed claim: N (each with its earlier thread and failed fix)
 Upvoted items in scope: N (built: N)
 
-| Tracker/source | Reporter | Status | Repro (expected/actual) | Pre/post | Runtime proof | Locales | Handoff (action/owner/ticket) | Replied | Reactions |
+| Tracker/source or workflow run | Reporter/owner | Status | Repro or failed step | Pre/post/recovery | Run/SHA/target/version/artifact/runtime proof | Locales | Handoff (action/owner/ticket) | Replied | Reactions |
 | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
-| 18 / [thread](...) | ... | <disposition> | steps; expected/actual | before/after | source/tests/build/URL | updated/N/A/pending | none or action/owner/[ticket](...) | yes/no | 👀 claim; ✅ Fixed; 🎫 ticketed only |
+| 18 / [thread](...) or [workflow run](...) | ... | <disposition> | steps; expected/actual or failed job/step | before/after/recovery run | source/tests/build/run/SHA/target/version/URL | updated/N/A/pending | none or action/owner/[ticket](...) | yes/no | 👀 claim; ✅ Fixed; 🎫 ticketed only |
 
 Sibling sweep: <fingerprint> - N hits, M fixed, K triaged
 Tracker: <sheet/export and bounded range> - N rows enumerated, N ledgers complete
@@ -601,4 +603,4 @@ cursor stated.
 ## Related skills
 
 `address-feedback`, `address-feedback-with-replies`, `fix-at-the-boundary`,
-`concurrent-agents`, `verifying-changes`, `ship`
+`concurrent-agents`, `verifying-changes`, `ship`, `ship-and-monitor`

package/dist/templates/factory/.agents/skills/review-latest-feedback/references/deployment-recovery.md

@@ -0,0 +1,53 @@
+# Deployment, release, and publish recovery
+
+Use this guide for each `review-latest-feedback` sweep, even when no report
+links a failed run.
+
+## Scan and classify
+
+- Inspect recent deploy, release, desktop build/sign/notarize/update, and
+  package-publish runs since the previous deployment cursor; on the first run,
+  use the last 7 days for completed-run history and independently include every
+  nonterminal run regardless of age. Seed the carried-run list with all active
+  runs before advancing the cursor. Include queued, approval-waiting, and
+  running jobs, and recheck them regardless of age. Finish all result pages
+  before advancing the cursor. Cover app/template beta, docs, and production
+  lanes where configured. Use current workflow/target maps and provider or
+  registry state.
+- Check deployed app revisions, desktop release assets, and package versions
+  for missing or stale artifacts, including when a workflow reports success.
+- For each failure or target mismatch, inspect authoritative logs. Record the
+  run URL, workflow, failed job/step, target/platform/package/version, source
+  SHA, and error in the ledger.
+- Separate repo-owned source/workflow/config defects from provider errors,
+  skipped or manual gates, cancellations, and superseded runs. Fix confirmed
+  repo-owned causes at their owning boundary. Record an external owner and exact
+  next action when the cause is outside the repo.
+
+## Recover and verify
+
+Use the lane's normal workflow and the invocation's applicable publish/deploy
+authority. Recover only affected lanes. Read `ship` for PR/push/merge work and
+`ship-and-monitor` for beta, docs, release-tail, or manual-production proof.
+If a required release action is not authorized, keep its operational row active
+with the exact next action.
+
+Verify the intended source and delivery artifact at the target:
+
+- **Apps:** confirm the target has the intended revision and smoke-test the
+  affected URL or health path, including cache behavior when relevant.
+- **Desktop:** confirm the expected version and platform assets exist, then
+  exercise the affected install or update path through launch.
+- **Packages:** confirm the exact version is in the registry and install or
+  scaffold it from a clean cache. For npx, record pinned/filed versions, remove
+  local overrides, verify the candidate and published release, and check the
+  existing-app upgrade path (for example, `pnpm add
+@agent-native/core@<version>` or the documented hand edit).
+
+A green workflow, merged source, beta promise, or local scaffold alone does not
+prove delivery. Keep carrying each operational row and nonterminal run ID until
+the intended artifact is present and its target check passes; a linked source issue can be **Fixed**
+while the operational row remains open. Run-only failures get a ledger row, not
+a fabricated Slack reaction. Local proof is not **Shipped**/**Live verified**
+until the relevant artifact is published and its delivery/runtime bar passes.
+Link the merge, release, verification, and any bump/re-scaffold follow-up.

package/dist/templates/factory/.agents/skills/review-latest-feedback/references/documentation-proof.md

@@ -0,0 +1,7 @@
+# Documentation proof checklist
+
+For each documentation row, copy its commands into a clean temporary scaffold.
+Verify referenced files, directories, scripts, environment variables, deploy
+targets, links, and fenced-command order. Update configured locales when source
+meaning changes. Run `guard:i18n-catalogs` and `guard:i18n-changed-copy`; a docs
+diff or build alone is not proof.