@agent-native/core 0.203.2-nightly-20261007213109 → 0.204.0

package/dist/cli/connect.js

@@ -1695,7 +1695,7 @@ export async function runServiceTokenMint(parsed, deps = {}) {
     const serviceName = parsed.serviceToken?.trim() ?? "";
     if (!parsed.url) {
         logErr("  --service-token requires the app URL.");
-        logErr("  Usage: npx @agent-native/core@latest connect <url> --service-token <name> [--ttl-days <1-365>]");
+        logErr("  Usage: npx @agent-native/core@latest connect <url> --service-token <name> [--ttl-days <1-3650>]");
         return false;
     }
     if (!serviceName) {
@@ -1790,7 +1790,7 @@ Usage:
       No-browser fallback. Skip the device flow and write the entry with
       the supplied token (get it from the app's Connect page).
 
-  npx @agent-native/core@latest connect <url> --service-token <name> [--ttl-days <1-365>]
+  npx @agent-native/core@latest connect <url> --service-token <name> [--ttl-days <1-3650>]
       Mint an ORG service token for CI (e.g. the PLAN_RECAP_TOKEN secret for
       PR Visual Recap). Authenticates you via the browser device flow, then
       mints a token owned by your ORGANIZATION — it keeps working if you
@@ -1831,6 +1831,11 @@ export async function runConnect(args, deps = {}) {
             return;
         }
         const parsed = parseConnectArgs(args);
+        if (parsed.ttlDays !== undefined && parsed.serviceToken === undefined) {
+            logErr("  --ttl-days is only supported with --service-token. Set a personal token lifetime on the app's Connect page.");
+            process.exitCode = 1;
+            return;
+        }
         if (parsed.mode) {
             let ok;
             if (parsed.mode === "reconnect" || parsed.mode === "reauth") {

package/dist/client/use-db-sync.d.ts

@@ -21,6 +21,19 @@ export declare function registerCollabActivityResource(resource: {
     resourceType: string;
     resourceId: string;
 }): () => void;
+type CollabActivityEvent = {
+    source?: string;
+    resourceType?: string;
+    resourceId?: string;
+    requestSource?: string;
+};
+/**
+ * For a collab connection's own ~12 s poll. A viewer on a screen nobody else
+ * is on has no presence to notice, but that poll still carries the design's
+ * resource-scoped events from the other screens, and the shared transport is
+ * asleep on the 1-5 minute idle cadence until something wakes it.
+ */
+export declare function noteCollabPollActivity(events: readonly CollabActivityEvent[]): void;
 /**
  * Declare that another person is working on the same resource as this tab.
  * While any lease is held, the shared transport polls every 2.5 s whenever no

package/dist/client/use-db-sync.js

@@ -72,11 +72,20 @@ function collabBoostWanted() {
     }
     return ((collabBoostLeases > 0 && collabBoostFresh()) || hasRecentResourceActivity);
 }
+// The server mirrors every saved file into its Yjs doc under the "agent"
+// source, so a lone editor's own save comes back as a collab event that is not
+// from anyone else. Only a Yjs update a browser tab posted names its sender.
+function isHumanCollabUpdate(event) {
+    return (event.source === "collab" &&
+        typeof event.requestSource === "string" &&
+        event.requestSource !== "" &&
+        event.requestSource !== "agent");
+}
 function noteCollaboratorActivity(events) {
     const ownSource = getBrowserTabId();
     const until = Date.now() + COLLAB_ACTIVITY_WINDOW_MS;
     for (const event of events) {
-        if (event.source !== "action" ||
+        if ((event.source !== "action" && !isHumanCollabUpdate(event)) ||
             typeof event.resourceType !== "string" ||
             event.resourceType === "" ||
             typeof event.resourceId !== "string" ||
@@ -89,6 +98,18 @@ function noteCollaboratorActivity(events) {
         }
     }
 }
+/**
+ * For a collab connection's own ~12 s poll. A viewer on a screen nobody else
+ * is on has no presence to notice, but that poll still carries the design's
+ * resource-scoped events from the other screens, and the shared transport is
+ * asleep on the 1-5 minute idle cadence until something wakes it.
+ */
+export function noteCollabPollActivity(events) {
+    const wasWanted = collabBoostWanted();
+    noteCollaboratorActivity(events);
+    if (!wasWanted && collabBoostWanted())
+        notifyCollabBoostChange();
+}
 function collabBoostFresh() {
     return Date.now() - collabBoostActivityAt <= COLLAB_BOOST_IDLE_CEILING_MS;
 }

package/dist/coding-tools/run-code.js

@@ -31,6 +31,7 @@
 import crypto from "node:crypto";
 import http from "node:http";
 import { createRunner, RunError } from "run";
+import { parseServiceIdentityEmail } from "../org/service-identity.js";
 import { getRequestContext, getRequestRunContext, getRequestUserEmail, runWithRequestContext, } from "../server/request-context.js";
 import { failExpiredSandboxExecution, getSandboxExecutionForOwner, } from "./sandbox/executions-store.js";
 import { BACKGROUND_DEFAULT_TIMEOUT_MS, BACKGROUND_MAX_TIMEOUT_MS, SANDBOX_EXECUTION_REDRIVE_AFTER_MS, driveSandboxExecution, enqueueSandboxExecution, getSandboxAdapter, isQueuedSandboxAdapter, registerSandboxExecutionRunner, resolveExecutionSandboxAdapter, } from "./sandbox/index.js";
@@ -501,8 +502,22 @@ function createBridgeInvoker(options) {
         if (callBudget)
             callBudget.count += 1;
         usedTools.add(toolName);
+        let servicePrincipalRefusedError;
         try {
-            const run = () => entry.run(childArgs, options.context);
+            const context = options.context;
+            if (context && parseServiceIdentityEmail(context.userEmail)) {
+                const guard = await import("../org/service-principal-guard.js");
+                servicePrincipalRefusedError = guard.ServicePrincipalRefusedError;
+                await guard.enforceServicePrincipalActionGrant({
+                    email: context.userEmail,
+                    orgId: context.orgId,
+                    actionName: toolName,
+                    caller: context.caller,
+                });
+            }
+            // Name the child, not `run-code`: a service principal's grant is checked
+            // against the action actually being run.
+            const run = () => entry.run(childArgs, options.context && { ...options.context, actionName: toolName });
             const result = options.context?.credentialScope === "org"
                 ? await runWithRequestContext({
                     ...getRequestContext(),
@@ -516,6 +531,12 @@ function createBridgeInvoker(options) {
             return formatBridgeResult(result);
         }
         catch (error) {
+            if (error instanceof BridgeInvocationError)
+                throw error;
+            if (servicePrincipalRefusedError &&
+                error instanceof servicePrincipalRefusedError) {
+                throw new BridgeInvocationError(error.statusCode, error.message);
+            }
             throw new BridgeInvocationError(500, error instanceof Error ? error.message : String(error));
         }
     };

package/dist/coding-tools/sandbox/local-child-process-adapter.js

@@ -21,6 +21,7 @@ function sandboxWriteAllowPaths(tmpDir) {
     return [...paths];
 }
 let cachedPermissionFlag;
+let cachedNetPermissionSupport;
 function resolvePermissionFlag() {
     if (cachedPermissionFlag !== undefined)
         return cachedPermissionFlag;
@@ -42,6 +43,19 @@ function resolvePermissionFlag() {
     cachedPermissionFlag = null;
     return null;
 }
+function supportsNetPermissionFlag(permissionFlag) {
+    if (cachedNetPermissionSupport !== undefined) {
+        return cachedNetPermissionSupport;
+    }
+    try {
+        const probe = spawnSync(process.execPath, [permissionFlag, "--allow-net", "-e", "process.exit(0)"], { timeout: 10_000, stdio: "ignore" });
+        cachedNetPermissionSupport = probe.status === 0;
+    }
+    catch {
+        cachedNetPermissionSupport = false;
+    }
+    return cachedNetPermissionSupport;
+}
 export class LocalChildProcessAdapter {
     id = "local-child-process";
     async run(request) {
@@ -60,6 +74,12 @@ export class LocalChildProcessAdapter {
             const nodeArgs = permissionFlag
                 ? [
                     permissionFlag,
+                    // Node 25+ also denies network under --permission. The sandbox
+                    // bridge uses loopback HTTP, and direct outbound requests are
+                    // already part of its unauthenticated execution contract.
+                    ...(supportsNetPermissionFlag(permissionFlag)
+                        ? ["--allow-net"]
+                        : []),
                     ...sandboxReadAllowPaths(tmpDir).map((allowedPath) => `--allow-fs-read=${allowedPath}`),
                     ...sandboxWriteAllowPaths(tmpDir).map((allowedPath) => `--allow-fs-write=${allowedPath}`),
                     tmpFile,

package/dist/collab/client.js

@@ -3,7 +3,7 @@ import { Awareness } from "y-protocols/awareness";
 import * as Y from "yjs";
 import { agentNativePath } from "../client/api-path.js";
 import { useAvatarUrl } from "../client/use-avatar.js";
-import { acquireCollabPollBoost, registerCollabActivityResource, subscribeSyncEvents, } from "../client/use-db-sync.js";
+import { acquireCollabPollBoost, noteCollabPollActivity, registerCollabActivityResource, subscribeSyncEvents, } from "../client/use-db-sync.js";
 import { REALTIME_CAP_NO_AWARENESS, REALTIME_CAP_POLL_LIVE, } from "../realtime-protocol.js";
 import { dedupeCollabUsersByEmail } from "./types.js";
 export { dedupeCollabUsersByEmail, emailToColor, emailToName, } from "./types.js";
@@ -151,6 +151,8 @@ class CollabDocConnection {
     pollCycleCount = 0;
     pollVersion = 0;
     lastPolledVersion = 0;
+    pollCursor = null;
+    pollActivityBaselineReady = false;
     stateVectorFetch = null;
     stateVectorAbortControllers = new Set();
     sseActive = false;
@@ -415,7 +417,9 @@ class CollabDocConnection {
         });
     }
     fetchInitialState() {
-        fetch(`${this.baseUrl}/${this.docId}/state`).then(async (res) => {
+        fetch(`${this.baseUrl}/${this.docId}/state`, {
+            headers: { "X-Agent-Native-Poll-Baseline": "1" },
+        }).then(async (res) => {
             if (this.disposed)
                 return;
             if (res.status === 404 || res.status === 403) {
@@ -433,6 +437,17 @@ class CollabDocConnection {
                 this.markInitializationFailed("invalid-payload");
                 return;
             }
+            const baseline = data.activityBaseline;
+            if (baseline?.status === "ready" &&
+                Number.isSafeInteger(baseline.version) &&
+                baseline.version >= 0 &&
+                typeof baseline.cursor === "string" &&
+                baseline.cursor.length > 0) {
+                this.pollVersion = baseline.version;
+                this.lastPolledVersion = baseline.version;
+                this.pollCursor = baseline.cursor;
+                this.pollActivityBaselineReady = true;
+            }
             if (data.state) {
                 try {
                     const binary = base64ToUint8Array(data.state);
@@ -807,12 +822,16 @@ class CollabDocConnection {
             return;
         this.flushPendingUpdates();
         try {
-            const res = await fetch(agentNativePath(`/_agent-native/poll?since=${this.pollVersion}`));
+            const pollUrl = this.pollCursor
+                ? `/_agent-native/poll?cursor=${encodeURIComponent(this.pollCursor)}`
+                : `/_agent-native/poll?since=${this.pollVersion}`;
+            const res = await fetch(agentNativePath(pollUrl));
             if (!res.ok)
                 throw new Error("HTTP " + res.status);
             const data = await res.json();
             if (!this.syncActive || this.disposed)
                 return;
+            const hadActivityBaseline = this.pollActivityBaselineReady;
             const { version, events } = data;
             const versionGap = version - this.lastPolledVersion;
             const hadGap = versionGap > POLL_RING_BUFFER_SIZE;
@@ -832,6 +851,20 @@ class CollabDocConnection {
                     }
                 }
             }
+            if (hadActivityBaseline) {
+                noteCollabPollActivity(events);
+            }
+            else {
+                const reconciliation = await this.fetchStateVector();
+                if (reconciliation.status !== "synced") {
+                    throw reconciliation.status === "failed"
+                        ? reconciliation.error
+                        : new Error("Could not reconcile state without an activity baseline");
+                }
+            }
+            this.pollActivityBaselineReady = true;
+            if (typeof data.cursor === "string")
+                this.pollCursor = data.cursor;
             this.pollVersion = version;
             this.lastPolledVersion = version;
             this.pollCycleCount++;

package/dist/collab/routes.d.ts

@@ -1,23 +1,28 @@
 export declare const getCollabState: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    docId?: undefined;
-    state?: undefined;
 } | {
     error?: undefined;
     docId: string;
     state: string;
+    activityBaseline?: {
+        status: "ready";
+        version: number;
+        cursor: string;
+    } | {
+        status: "unavailable";
+    };
 }>>;
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;
 }>>;
 export declare const postCollabText: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    text?: undefined;
     ok?: undefined;
     error: string;
+    text?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/collab/routes.js

@@ -1,4 +1,4 @@
-import { defineEventHandler, setResponseStatus, setResponseHeader, getRouterParam, getQuery, } from "h3";
+import { defineEventHandler, setResponseStatus, setResponseHeader, getRouterParam, getQuery, getRequestHeader, } from "h3";
 import { readBody } from "../server/h3-helpers.js";
 import { uint8ArrayToBase64, base64ToUint8Array } from "./storage.js";
 import * as manager from "./ydoc-manager.js";
@@ -25,6 +25,19 @@ export const getCollabState = defineEventHandler(async (event) => {
     }
     const query = getQuery(event);
     const encodedStateVector = typeof query.stateVector === "string" ? query.stateVector : null;
+    let activityBaseline;
+    if (getRequestHeader(event, "x-agent-native-poll-baseline") === "1") {
+        try {
+            const { getCurrentPollBaseline } = await import("../server/poll.js");
+            activityBaseline = {
+                status: "ready",
+                ...(await getCurrentPollBaseline()),
+            };
+        }
+        catch {
+            activityBaseline = { status: "unavailable" };
+        }
+    }
     let state;
     if (encodedStateVector) {
         try {
@@ -41,6 +54,7 @@ export const getCollabState = defineEventHandler(async (event) => {
     return {
         docId,
         state: uint8ArrayToBase64(state),
+        ...(activityBaseline ? { activityBaseline } : {}),
     };
 });
 export const postCollabUpdate = defineEventHandler(async (event) => {

package/dist/collab/struct-routes.d.ts

@@ -1,6 +1,6 @@
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/deploy/build.js

@@ -984,6 +984,18 @@ export function generateWorkerEntry(routes, pluginPaths, defaultPluginStems = []
         { status: 405, headers: { "Content-Type": "application/json" } }
       );
     }
+    const actionSession = ${varName}.requiresAuth === true
+      ? await getGeneratedSession(event)
+      : undefined;
+    const actionContext = uiActionContext ?? (actionSession?.email
+      ? { userEmail: actionSession.email, orgId: actionSession.orgId ?? null }
+      : undefined);
+    if (${varName}.requiresAuth === true && !actionContext?.userEmail) {
+      return new Response(
+        JSON.stringify({ error: "Unauthorized" }),
+        { status: 401, headers: { "Content-Type": "application/json" } },
+      );
+    }
     const params = ${a.method === "get" ? "parseActionSearchParams(event.url.searchParams)" : "(await readBody(event)) ?? {}"};
     try {
       const caller =
@@ -994,16 +1006,11 @@ export function generateWorkerEntry(routes, pluginPaths, defaultPluginStems = []
         caller,
         requestHeaders: event.req.headers,
         actionName: ${JSON.stringify(a.name)},
-        ...(uiActionContext
-          ? {
-              userEmail: uiActionContext.userEmail,
-              orgId: uiActionContext.orgId ?? null,
-            }
-          : {}),
+        ...(actionContext ?? {}),
       };
       const runAction = () => ${varName}.run(params, actionRunContext);
-      const result = actionIsUiOnly
-        ? await runWithGeneratedRequestContext(uiActionContext, runAction)
+      const result = actionContext
+        ? await runWithGeneratedRequestContext(actionContext, runAction)
         : await runAction();
       if (typeof result === "string") { try { return JSON.parse(result); } catch { return result; } }
       return result;

package/dist/deploy/workspace-deploy.js

@@ -64,19 +64,97 @@ function builtinAgentsEnvSnippet() {
 `;
 }
 function workspaceDirectoryEnvSnippet(workspaceApps) {
-    const orgDirectoryUrl = getAppConfig().workspace.orgDirectoryUrl?.trim();
-    if (!orgDirectoryUrl && !workspaceApps.some((app) => app.isDispatch)) {
+    const configuredOrgDirectoryUrl = getAppConfig().workspace.orgDirectoryUrl?.trim();
+    const dispatchApp = workspaceApps.find((app) => app.isDispatch);
+    if (!configuredOrgDirectoryUrl && !dispatchApp) {
         return builtinAgentsEnvSnippet();
     }
+    const runtimeDirectoryResolver = dispatchApp
+        ? `
+  function logInvalidDirectoryBase() {
+    const logKey = Symbol.for("agent-native.workspace.invalid-directory-base");
+    if (globalThis[logKey]) return;
+    globalThis[logKey] = true;
+    console.error("[workspace] Invalid organization directory base URL");
+  }
+
+  function resolveRuntimeDirectoryUrl() {
+    const isVercelProduction =
+      processRef.env.VERCEL_ENV?.trim().toLowerCase() === "production";
+    const vercelCandidates = processRef.env.VERCEL
+      ? (isVercelProduction
+          ? [
+              processRef.env.VERCEL_PROJECT_PRODUCTION_URL,
+              processRef.env.VERCEL_URL,
+              processRef.env.VERCEL_BRANCH_URL,
+            ]
+          : [processRef.env.VERCEL_URL, processRef.env.VERCEL_BRANCH_URL]
+        )
+          .filter(Boolean)
+          .map((candidate) =>
+            /^https?:\\/\\//i.test(candidate)
+              ? candidate
+              : "https://" + candidate,
+          )
+      : [];
+    const candidates = [
+      processRef.env.APP_URL,
+      processRef.env.URL,
+      processRef.env.DEPLOY_URL,
+      processRef.env.BETTER_AUTH_URL,
+      ...vercelCandidates,
+      processRef.env.WORKSPACE_GATEWAY_URL,
+      processRef.env.VITE_WORKSPACE_GATEWAY_URL,
+    ].filter(Boolean);
+    let loopbackUrl;
+    for (const candidate of candidates) {
+      let baseUrl;
+      try {
+        baseUrl = new URL(candidate);
+      } catch {
+        logInvalidDirectoryBase();
+        continue;
+      }
+      if (baseUrl.protocol !== "http:" && baseUrl.protocol !== "https:") {
+        logInvalidDirectoryBase();
+        continue;
+      }
+      const directoryUrl = new URL(${JSON.stringify(dispatchApp.path)}, baseUrl)
+      .toString()
+      .replace(/\\/$/, "");
+      const hostname = baseUrl.hostname.toLowerCase().replace(/\\.$/, "");
+      const mappedIpv4 = hostname.match(
+        /^\\[::ffff:([0-9a-f]{1,4}):[0-9a-f]{1,4}\\]$/,
+      );
+      const isMappedIpv4Loopback =
+        mappedIpv4 !== null &&
+        (Number.parseInt(mappedIpv4[1], 16) >> 8) === 0x7f;
+      if (
+        hostname === "localhost" ||
+        hostname.endsWith(".localhost") ||
+        /^127(?:\\.\\d{1,3}){3}$/.test(hostname) ||
+        /^0(?:\\.\\d{1,3}){3}$/.test(hostname) ||
+        hostname === "[::1]" ||
+        hostname === "::1" ||
+        hostname === "[::]" ||
+        hostname === "::" ||
+        isMappedIpv4Loopback
+      ) {
+        loopbackUrl ??= directoryUrl;
+        continue;
+      }
+      return directoryUrl;
+    }
+    return loopbackUrl ?? null;
+  }
+`
+        : "";
     return `${builtinAgentsEnvSnippet()}
+${runtimeDirectoryResolver}
   const directoryOrigin =
     processRef.env.AGENT_NATIVE_ORG_DIRECTORY_URL ||
-    ${JSON.stringify(orgDirectoryUrl ?? null)} ||
-    processRef.env.WORKSPACE_GATEWAY_URL ||
-    processRef.env.APP_URL ||
-    processRef.env.URL ||
-    processRef.env.DEPLOY_URL ||
-    processRef.env.BETTER_AUTH_URL;
+    ${JSON.stringify(configuredOrgDirectoryUrl ?? null)} ||
+    ${dispatchApp ? "resolveRuntimeDirectoryUrl()" : "null"};
   if (directoryOrigin) {
     processRef.env.AGENT_NATIVE_ORG_DIRECTORY_URL = directoryOrigin;
   }
@@ -167,11 +245,8 @@ function buildOneApp(workspaceRoot, appsDir, app, preset, execFile, workspaceApp
     const appDir = path.join(appsDir, app);
     const workspaceAppAudience = workspaceAppAudienceForApp(workspaceApps, app);
     const workspaceAppRouteAccess = workspaceAppRouteAccessForApp(workspaceApps, app);
-    const workspaceGatewayUrl = process.env.VITE_WORKSPACE_GATEWAY_URL || workspaceBaseUrl();
-    const orgDirectoryUrl = getAppConfig().workspace.orgDirectoryUrl?.trim() ||
-        (workspaceApps.some((entry) => entry.isDispatch)
-            ? workspaceGatewayUrl
-            : null);
+    const workspaceGatewayUrl = workspaceBaseUrl();
+    const orgDirectoryUrl = getAppConfig().workspace.orgDirectoryUrl?.trim();
     const workspaceOAuthUrl = workspaceOAuthOrigin(workspaceGatewayUrl);
     const frameworkRoutePrefix = workspaceFrameworkRoutePrefixEnv();
     const env = {

package/dist/file-upload/actions/upload-image.d.ts

@@ -42,8 +42,8 @@ declare const _default: import("../../action.js").ActionDefinition<{
     url: string;
     id: string;
     provider: string;
-    error?: undefined;
     configured?: undefined;
+    error?: undefined;
 } | {
     url?: undefined;
     id?: undefined;

package/dist/file-upload/builder.js

@@ -12,8 +12,22 @@ function makeBody(bytes, mimeType) {
         ? new Blob([bytes], { type: mimeType })
         : bytes;
 }
+// Builder's `/api/v1/upload` endpoint sniffs these two Content-Types as a
+// JSON-bodied request (its legacy `{ image: "data:..." }` upload shape)
+// instead of raw file bytes, so it responds 400 "No image specified" for any
+// real `application/json` or `text/plain` file — even though every other
+// mimetype in `UPLOAD_ALLOWED_MIME_PREFIXES` (csv, pdf, zip, docs, video,
+// octet-stream, other text/* subtypes) uploads through it without issue. The
+// signed-URL flow PUTs raw bytes straight to GCS, so it never hits that
+// body-sniffing path.
+function builderMisparsesContentTypeAsJsonBody(mimeType) {
+    const normalized = mimeType.toLowerCase();
+    return normalized === "application/json" || normalized === "text/plain";
+}
 function shouldUseSignedUrlUpload(bytes, mimeType) {
-    return (bytes.byteLength > LARGE_FILE_THRESHOLD_BYTES || /^video\//i.test(mimeType));
+    return (bytes.byteLength > LARGE_FILE_THRESHOLD_BYTES ||
+        /^video\//i.test(mimeType) ||
+        builderMisparsesContentTypeAsJsonBody(mimeType));
 }
 function fetchWithTimeout(url, init) {
     const controller = new AbortController();
@@ -75,10 +89,10 @@ async function withAssetAuthorization(run, held = {}) {
         }
     }
 }
-async function uploadLargeFileViaSignedUrl(input, held, bareMimeType, bytes) {
+async function uploadViaSignedUrl(input, held, bareMimeType, bytes) {
     const name = input.filename ?? "upload";
     const mb = (bytes.byteLength / (1024 * 1024)).toFixed(1);
-    console.log(`[builder-upload] large-file path: ${name} ${mb}MB ${bareMimeType}`);
+    console.log(`[builder-upload] signed-url path: ${name} ${mb}MB ${bareMimeType}`);
     console.log(`[builder-upload] step 1: requesting signed URL`);
     const { uploadUrl, assetId, requiredHeaders } = await withAssetAuthorization(({ authorization, apiKey }) => requestBuilderSignedUrl(authorization, apiKey, name, bareMimeType, bytes.byteLength), held);
     console.log(`[builder-upload] step 1 ok: assetId=${assetId}`);
@@ -228,7 +242,7 @@ export const builderFileUploadProvider = {
         const bytes = data instanceof Uint8Array ? data : new Uint8Array(data);
         const mb = (bytes.byteLength / (1024 * 1024)).toFixed(1);
         if (shouldUseSignedUrlUpload(bytes, bareMimeType)) {
-            return uploadLargeFileViaSignedUrl(input, held, bareMimeType, bytes);
+            return uploadViaSignedUrl(input, held, bareMimeType, bytes);
         }
         console.log(`[builder-upload] small-file path: ${filename ?? "upload"} ${mb}MB ${bareMimeType}`);
         const response = await withAssetAuthorization(({ authorization, apiKey }) => {

package/dist/framework-tools.js

@@ -165,6 +165,7 @@ export const CORE_ACTION_GROUPS = {
     "list-audit-events": "audit",
     "get-audit-event": "audit",
     "export-audit-events": "audit",
+    "export-audit-ocsf": "audit",
     // Observability promotion reuses `labs` until a dedicated group exists.
     // A new FRAMEWORK_TOOL_GROUPS member is filtered at thirteen composition
     // sites; do not add `observability` in the same change as this action.
@@ -189,6 +190,8 @@ export const CORE_ACTION_GROUPS = {
     "create-org-service-token": "orgServiceTokens",
     "list-org-service-tokens": "orgServiceTokens",
     "revoke-org-service-token": "orgServiceTokens",
+    "set-service-principal-policy": "orgServiceTokens",
+    "set-service-principal-lifecycle": "orgServiceTokens",
     "list-review-comments": "review",
     "create-review-comment": "review",
     "reply-review-comment": "review",

package/dist/identity/rekey.js

@@ -112,6 +112,12 @@ export const IDENTITY_REKEY_COLUMNS = [
     // A missing connect-token row reads as "not revoked", so revoke, never delete.
     { table: "mcp_connect_tokens", column: "owner_email", offboard: "revoke" },
     { table: "mcp_connect_tokens", column: "created_by" },
+    // The accountable owner outlives their account: the principal stays governed and its owner reads as stale.
+    {
+        table: "service_principal_policies",
+        column: "owner_email",
+        offboard: "retain",
+    },
     { table: "mcp_oauth_codes", column: "owner_email", offboard: "delete" },
     {
         table: "mcp_oauth_codes",

package/dist/jobs/actions/manage-recurring-job.d.ts

@@ -11,9 +11,9 @@ declare const _default: import("../../action.js").ActionDefinition<{
     enabled?: undefined;
     nextRun?: undefined;
 } | {
+    deleted?: undefined;
     name: string;
     enabled: boolean;
     nextRun: string;
-    deleted?: undefined;
 }>;
 export default _default;

package/dist/localization/core-messages/supplemental/ar-SA.js

@@ -54,6 +54,21 @@ export const mcpConnectMessages = {
     couldNotCreate: "تعذر إنشاء الرمز.",
     networkError: "حدث خطأ في الشبكة. حاول مرة أخرى.",
     urlTitle: "عنوان MCP الخاص بك",
+    servicePrincipals: "كيانات الخدمة",
+    principalUngoverned: "غير خاضع للحوكمة",
+    principalActive: "نشط",
+    principalSuspended: "معلّق",
+    principalRetired: "متقاعد",
+    principalUngovernedHint: "لم يتم تعيين مالك أو إذن للإجراءات.",
+    principalOwner: "المالك",
+    principalRisk: "المخاطر",
+    riskLow: "منخفضة",
+    riskMedium: "متوسطة",
+    riskHigh: "عالية",
+    suspend: "تعليق",
+    resume: "استئناف",
+    couldNotUpdatePrincipal: "تعذّر تحديث كيان الخدمة.",
+    containmentIncomplete: "تم التحديث، لكن تعذّر إيقاف بعض عمليات التشغيل أو الرموز. حاول مرة أخرى.",
 };
 export const mcpSettingsMessages = {
     mcpTitle: "MCP",

package/dist/localization/core-messages/supplemental/de-DE.js

@@ -54,6 +54,21 @@ export const mcpConnectMessages = {
     couldNotCreate: "Token konnte nicht erstellt werden.",
     networkError: "Netzwerkfehler. Bitte versuche es erneut.",
     urlTitle: "Deine MCP-URL",
+    servicePrincipals: "Dienstprinzipale",
+    principalUngoverned: "Nicht verwaltet",
+    principalActive: "Aktiv",
+    principalSuspended: "Gesperrt",
+    principalRetired: "Stillgelegt",
+    principalUngovernedHint: "Kein Eigentümer und keine Aktionsfreigabe festgelegt.",
+    principalOwner: "Eigentümer",
+    principalRisk: "Risiko",
+    riskLow: "niedrig",
+    riskMedium: "mittel",
+    riskHigh: "hoch",
+    suspend: "Sperren",
+    resume: "Fortsetzen",
+    couldNotUpdatePrincipal: "Der Dienstprinzipal konnte nicht aktualisiert werden.",
+    containmentIncomplete: "Aktualisiert, aber einige Ausführungen oder Token konnten nicht gestoppt werden. Versuche es erneut.",
 };
 export const mcpSettingsMessages = {
     mcpTitle: "MCP",