@agent-native/core 0.205.0 → 0.206.0-nightly-20261009011246

package/dist/jobs/backfill-run-history-ownership.d.ts

@@ -0,0 +1,12 @@
+import type { DbExec } from "../db/client.js";
+export interface HistoryOwnershipBackfillCounts {
+    organizationRows: number;
+    eligibleRows: number;
+    organizationJobRows: number;
+    ambiguousRows: number;
+    deferredRows: number;
+    movedRows: number;
+}
+export declare function backfillRunHistoryOwnership(db: DbExec, options?: {
+    apply?: boolean;
+}): Promise<HistoryOwnershipBackfillCounts>;

package/dist/jobs/backfill-run-history-ownership.js

@@ -0,0 +1,87 @@
+const LINEAGE = `
+  WITH lineage AS (
+    SELECT h.id, h.owner AS source_owner, h.scope AS source_scope,
+      h.org_id AS source_org_id, h.status, h.dispatch_pending,
+      count(DISTINCT NULLIF(s.metadata::jsonb ->> 'automationId', '')) AS job_ids,
+      count(DISTINCT s.user_id) AS actors,
+      min(r.owner) AS resource_owner,
+      min(r.id) AS resource_id,
+      bool_and(COALESCE(
+        r.owner = s.user_id AND NOT starts_with(r.owner, '__')
+        AND s.org_id = h.org_id AND r.path = h.path
+        AND r.created_at <= h.started_at, false
+      )) AS personal_match,
+      bool_and(COALESCE(
+        r.owner = h.owner AND s.org_id = h.org_id
+        AND r.path = h.path AND r.created_at <= h.started_at, false
+      )) AS organization_match
+    FROM automation_runs h
+    LEFT JOIN agent_trace_spans s ON s.run_id = h.run_id
+      AND s.span_type = 'agent_run'
+      AND starts_with(s.name, 'background_automation_run:')
+    LEFT JOIN resources r ON r.id = s.metadata::jsonb ->> 'automationId'
+    WHERE starts_with(h.owner, '__organization__:')
+    GROUP BY h.id, h.owner, h.scope, h.org_id, h.status, h.dispatch_pending
+  ), candidates AS (
+    SELECT * FROM lineage
+    WHERE job_ids = 1 AND actors = 1 AND personal_match
+      AND source_scope = 'organization' AND source_org_id IS NOT NULL
+      AND status IN ('success', 'error', 'interrupted', 'skipped') AND dispatch_pending = 0
+  )`;
+export async function backfillRunHistoryOwnership(db, options = {}) {
+    if (!db.transaction)
+        throw new Error("History backfill requires transactions.");
+    return db.transaction(async (tx) => {
+        await tx.execute("SET TRANSACTION ISOLATION LEVEL REPEATABLE READ");
+        if (!options.apply)
+            await tx.execute("SET TRANSACTION READ ONLY");
+        await tx.execute("SET LOCAL statement_timeout = '30s'");
+        if (options.apply) {
+            // A terminal run's trace can still be amended. Freeze trace writers before
+            // taking the first data snapshot, including inserts that row locks miss.
+            await tx.execute("SET LOCAL lock_timeout = '2s'");
+            await tx.execute("LOCK TABLE agent_trace_spans IN SHARE MODE");
+            // Lock the resource identity until commit so a concurrent ownership change
+            // cannot invalidate the provenance used to select the personal recipient.
+            await tx.execute(`${LINEAGE}, locked_resources AS (
+        SELECT r.id FROM resources r
+        WHERE r.id IN (SELECT resource_id FROM candidates)
+        FOR SHARE
+      ) SELECT count(*) FROM locked_resources`);
+        }
+        const result = await tx.execute(`${LINEAGE}
+      SELECT count(*)::int AS organization_rows,
+        (SELECT count(*)::int FROM candidates) AS eligible_rows,
+        count(*) FILTER (WHERE job_ids = 1 AND organization_match)::int AS organization_job_rows,
+        count(*) FILTER (WHERE NOT (job_ids = 1 AND personal_match)
+          AND NOT (job_ids = 1 AND organization_match))::int AS ambiguous_rows,
+        count(*) FILTER (WHERE job_ids = 1 AND personal_match
+          AND id NOT IN (SELECT id FROM candidates))::int AS deferred_rows
+      FROM lineage`);
+        const row = result.rows[0];
+        if (!row)
+            throw new Error("History backfill count query returned no row.");
+        let movedRows = 0;
+        if (options.apply) {
+            const updated = await tx.execute(`${LINEAGE}
+        UPDATE automation_runs h
+        SET owner = c.resource_owner, scope = 'personal', org_id = NULL
+        FROM candidates c
+        WHERE h.id = c.id AND h.owner = c.source_owner
+          AND h.scope = c.source_scope AND h.org_id = c.source_org_id
+        RETURNING h.id`);
+            movedRows = updated.rows.length;
+            if (movedRows !== row.eligible_rows) {
+                throw new Error("History changed during backfill; transaction rolled back.");
+            }
+        }
+        return {
+            organizationRows: row.organization_rows,
+            eligibleRows: row.eligible_rows,
+            organizationJobRows: row.organization_job_rows,
+            ambiguousRows: row.ambiguous_rows,
+            deferredRows: row.deferred_rows,
+            movedRows,
+        };
+    });
+}

package/dist/jobs/background-automation-runner.js

@@ -13,7 +13,7 @@ import { lookupOwnerAccount, resolveAutomationExecutionIdentity, } from "../auto
 import { createThread, getThread, updateThreadData, withThreadDataLock, } from "../chat-threads/store.js";
 import { automationOutcomeMessagesForUser } from "../localization/automation-outcome-messages.js";
 import { queryOrgMembers } from "../org/context.js";
-import { organizationIdFromResourceOwner, organizationResourceOwner, } from "../resources/store.js";
+import { organizationIdFromResourceOwner, } from "../resources/store.js";
 import { captureError } from "../server/capture-error.js";
 import { BuilderCredentialLookupError, CredentialStoreUnavailableError, } from "../server/credential-provider.js";
 import { runWithRequestContext, } from "../server/request-context.js";
@@ -22,6 +22,7 @@ import automationNoOpAction, { AUTOMATION_NO_OP_TOOL, automationNoOpSchema, } fr
 import { applyAutomationFailure, automationOwnerKind, classifyAutomationFailure, CONFIG_INVALID_ERROR_CODE, MISSING_TOOLS_ERROR_CODE, OWNER_MISSING_ERROR_CODE, pausedMessage, withDeliveryNote, } from "./automation-outcome.js";
 import { effectiveTimezone } from "./cron.js";
 import { recoveredFactoryOwnerOrgId, } from "./frontmatter.js";
+import { automationRunOwnership } from "./run-history-ownership.js";
 import { attachAutomationRunThread, finishAutomationRun, startAutomationRun, } from "./run-history.js";
 export const BACKGROUND_RUN_HARD_TIMEOUT_MS = 10 * 60_000;
 export class BackgroundAutomationRunError extends Error {
@@ -293,17 +294,10 @@ export async function runBackgroundAutomation(options, deps) {
     }
     else {
         try {
-            const historyOwner = options.orgId
-                ? organizationResourceOwner(options.orgId)
-                : automation.resource.owner === "__shared__"
-                    ? options.ownerEmail
-                    : automation.resource.owner;
             historyId = await startAutomationRun({
-                owner: historyOwner,
+                ...automationRunOwnership(automation.resource.owner, options.ownerEmail, options.orgId),
                 automation: automation.name,
                 path: automation.resource.path,
-                scope: options.orgId ? "organization" : "personal",
-                orgId: options.orgId ?? null,
                 appId: deps.appId,
                 notificationEmail: await notificationEmailFor(automation.name, options.ownerEmail, automation.meta.createdBy, options.orgId),
             });

package/dist/jobs/remote-execution.js

@@ -1,7 +1,8 @@
 import { enqueueRemoteCommand, getRemoteCommand, getRemoteCommandByIdempotencyKey, } from "../integrations/remote-commands-store.js";
 import { getRemoteDeviceForOwner, getRemoteExecutionCapabilities, } from "../integrations/remote-devices-store.js";
-import { organizationResourceOwner, resourceGetByPath, resourcePutIfCurrent, } from "../resources/store.js";
+import { resourceGetByPath, resourcePutIfCurrent, } from "../resources/store.js";
 import { parseJobResource, patchJobFrontmatterFields, } from "./frontmatter.js";
+import { automationRunOwnership } from "./run-history-ownership.js";
 import { finishAutomationRun, startAutomationRun } from "./run-history.js";
 export const REMOTE_AUTOMATION_MAX_ACTIVE_MS = 24 * 60 * 60_000;
 function isRecord(value) {
@@ -103,17 +104,10 @@ export async function dispatchRemoteAutomation(input) {
     let createdHistory = false;
     if (!automationRunId) {
         try {
-            const historyOwner = input.orgId
-                ? organizationResourceOwner(input.orgId)
-                : input.resource.owner === "__shared__"
-                    ? input.ownerEmail
-                    : input.resource.owner;
             automationRunId = await startAutomationRun({
-                owner: historyOwner,
+                ...automationRunOwnership(input.resource.owner, input.ownerEmail, input.orgId),
                 automation: automationName(input.resource.path),
                 path: input.resource.path,
-                scope: input.orgId ? "organization" : "personal",
-                orgId: input.orgId ?? null,
                 appId: input.appId,
                 notificationEmail: input.ownerEmail,
             });

package/dist/jobs/run-history-ownership.d.ts

@@ -0,0 +1,5 @@
+export declare function automationRunOwnership(resourceOwner: string, executionOwner: string, executionOrgId?: string | null): {
+    owner: string;
+    scope: "personal" | "organization";
+    orgId: string | null;
+};

package/dist/jobs/run-history-ownership.js

@@ -0,0 +1,16 @@
+import { organizationIdFromResourceOwner, organizationResourceOwner, SHARED_OWNER, } from "../resources/store.js";
+export function automationRunOwnership(resourceOwner, executionOwner, executionOrgId) {
+    // Legacy shared resources have no organization in their owner. Personal
+    // resources can carry an execution org without belonging to that org.
+    const orgId = organizationIdFromResourceOwner(resourceOwner) ??
+        (resourceOwner === SHARED_OWNER ? (executionOrgId ?? null) : null);
+    return {
+        owner: resourceOwner === SHARED_OWNER
+            ? orgId
+                ? organizationResourceOwner(orgId)
+                : executionOwner
+            : resourceOwner,
+        scope: orgId ? "organization" : "personal",
+        orgId,
+    };
+}

package/dist/jobs/run-now.js

@@ -4,6 +4,7 @@ import { isLocalDatabase } from "../db/client.js";
 import { organizationResourceOwner, resourceGetByPath, } from "../resources/store.js";
 import { fireInternalDispatch } from "../server/self-dispatch.js";
 import { parseJobResource } from "./frontmatter.js";
+import { automationRunOwnership } from "./run-history-ownership.js";
 import { listUnclaimedAutomationRuns, startAutomationRun, } from "./run-history.js";
 async function dispatchAutomationRun(historyId, requestHeaders) {
     const dispatchPath = resolveAgentChatProcessRunDispatchPath();
@@ -87,11 +88,9 @@ export async function queueAutomationRunNow(input) {
         console.warn("[automations] Could not sweep queued runs before run-now:", error);
     });
     const historyId = await startAutomationRun({
-        owner: resource.owner,
+        ...automationRunOwnership(resource.owner, input.userEmail, input.orgId),
         automation: name,
         path: resource.path,
-        scope: input.scope,
-        orgId: input.scope === "organization" ? input.orgId : null,
         appId: input.appId,
         // The person who asked for the run, already authorized above; a stored
         // `createdBy` may have left the organization.

package/dist/localization/agent-resources-messages.d.ts

@@ -7,6 +7,9 @@ export interface AgentResourcePackMessages {
     importPackSuccess: string;
     importPackFailed: string;
     importPackInvalid: string;
+    builderModelFallback: string;
+    defaultModel: string;
+    modelOptionsUnavailable: string;
 }
 export declare const AGENT_RESOURCE_PACK_MESSAGES: Record<BuiltinLocaleCode, AgentResourcePackMessages>;
 export declare function agentResourcePackMessagesForLocale(locale: LocaleCode): AgentResourcePackMessages;

package/dist/localization/agent-resources-messages.js

@@ -8,6 +8,9 @@ export const AGENT_RESOURCE_PACK_MESSAGES = {
         importPackSuccess: "Imported {{imported}} files, skipped {{skipped}}",
         importPackFailed: "Could not import pack",
         importPackInvalid: "That file is not a valid resource pack",
+        builderModelFallback: "Builder fallback",
+        defaultModel: "Default model",
+        modelOptionsUnavailable: "Model options unavailable",
     },
     "es-ES": {
         exportPack: "Exportar paquete",
@@ -17,6 +20,9 @@ export const AGENT_RESOURCE_PACK_MESSAGES = {
         importPackSuccess: "Se importaron {{imported}} archivos y se omitieron {{skipped}}",
         importPackFailed: "No se pudo importar el paquete",
         importPackInvalid: "Ese archivo no es un paquete de recursos válido",
+        builderModelFallback: "Alternativa de Builder",
+        defaultModel: "Modelo predeterminado",
+        modelOptionsUnavailable: "Opciones de modelo no disponibles",
     },
     "fr-FR": {
         exportPack: "Exporter le pack",
@@ -26,6 +32,9 @@ export const AGENT_RESOURCE_PACK_MESSAGES = {
         importPackSuccess: "{{imported}} fichiers importés, {{skipped}} ignorés",
         importPackFailed: "Impossible d'importer le pack",
         importPackInvalid: "Ce fichier n'est pas un pack de ressources valide",
+        builderModelFallback: "Solution de repli Builder",
+        defaultModel: "Modèle par défaut",
+        modelOptionsUnavailable: "Options de modèle indisponibles",
     },
     "de-DE": {
         exportPack: "Paket exportieren",
@@ -35,6 +44,9 @@ export const AGENT_RESOURCE_PACK_MESSAGES = {
         importPackSuccess: "{{imported}} Dateien importiert, {{skipped}} übersprungen",
         importPackFailed: "Paket konnte nicht importiert werden",
         importPackInvalid: "Diese Datei ist kein gültiges Ressourcenpaket",
+        builderModelFallback: "Builder-Fallback",
+        defaultModel: "Standardmodell",
+        modelOptionsUnavailable: "Modelloptionen nicht verfügbar",
     },
     "pt-BR": {
         exportPack: "Exportar pacote",
@@ -44,6 +56,9 @@ export const AGENT_RESOURCE_PACK_MESSAGES = {
         importPackSuccess: "{{imported}} arquivos importados, {{skipped}} ignorados",
         importPackFailed: "Não foi possível importar o pacote",
         importPackInvalid: "Esse arquivo não é um pacote de recursos válido",
+        builderModelFallback: "Alternativa do Builder",
+        defaultModel: "Modelo padrão",
+        modelOptionsUnavailable: "Opções de modelo indisponíveis",
     },
     "zh-CN": {
         exportPack: "导出资源包",
@@ -53,6 +68,9 @@ export const AGENT_RESOURCE_PACK_MESSAGES = {
         importPackSuccess: "已导入 {{imported}} 个文件，已跳过 {{skipped}} 个",
         importPackFailed: "无法导入资源包",
         importPackInvalid: "该文件不是有效的资源包",
+        builderModelFallback: "Builder 回退模型",
+        defaultModel: "默认模型",
+        modelOptionsUnavailable: "模型选项不可用",
     },
     "zh-TW": {
         exportPack: "匯出資源包",
@@ -62,6 +80,9 @@ export const AGENT_RESOURCE_PACK_MESSAGES = {
         importPackSuccess: "已匯入 {{imported}} 個檔案，已略過 {{skipped}} 個",
         importPackFailed: "無法匯入資源包",
         importPackInvalid: "該檔案不是有效的資源包",
+        builderModelFallback: "Builder 備援模型",
+        defaultModel: "預設模型",
+        modelOptionsUnavailable: "模型選項無法使用",
     },
     "ja-JP": {
         exportPack: "パックを書き出す",
@@ -71,6 +92,9 @@ export const AGENT_RESOURCE_PACK_MESSAGES = {
         importPackSuccess: "{{imported}} 件のファイルをインポートし、{{skipped}} 件をスキップしました",
         importPackFailed: "パックを読み込めませんでした",
         importPackInvalid: "このファイルは有効なリソースパックではありません",
+        builderModelFallback: "Builder のフォールバック",
+        defaultModel: "既定のモデル",
+        modelOptionsUnavailable: "モデルの選択肢を利用できません",
     },
     "ko-KR": {
         exportPack: "팩 내보내기",
@@ -80,6 +104,9 @@ export const AGENT_RESOURCE_PACK_MESSAGES = {
         importPackSuccess: "파일 {{imported}}개를 가져왔고 {{skipped}}개를 건너뛰었습니다",
         importPackFailed: "팩을 가져오지 못했습니다",
         importPackInvalid: "이 파일은 유효한 리소스 팩이 아닙니다",
+        builderModelFallback: "Builder 대체 모델",
+        defaultModel: "기본 모델",
+        modelOptionsUnavailable: "모델 옵션을 사용할 수 없습니다",
     },
     "hi-IN": {
         exportPack: "पैक निर्यात करें",
@@ -89,6 +116,9 @@ export const AGENT_RESOURCE_PACK_MESSAGES = {
         importPackSuccess: "{{imported}} फ़ाइलें आयात हुईं, {{skipped}} छोड़ी गईं",
         importPackFailed: "पैक आयात नहीं हो सका",
         importPackInvalid: "यह फ़ाइल एक मान्य संसाधन पैक नहीं है",
+        builderModelFallback: "Builder फ़ॉलबैक",
+        defaultModel: "डिफ़ॉल्ट मॉडल",
+        modelOptionsUnavailable: "मॉडल विकल्प उपलब्ध नहीं हैं",
     },
     "ar-SA": {
         exportPack: "تصدير الحزمة",
@@ -98,6 +128,9 @@ export const AGENT_RESOURCE_PACK_MESSAGES = {
         importPackSuccess: "تم استيراد {{imported}} من الملفات وتخطي {{skipped}}",
         importPackFailed: "تعذر استيراد الحزمة",
         importPackInvalid: "هذا الملف ليس حزمة موارد صالحة",
+        builderModelFallback: "البديل الاحتياطي من Builder",
+        defaultModel: "النموذج الافتراضي",
+        modelOptionsUnavailable: "خيارات النماذج غير متاحة",
     },
 };
 export function agentResourcePackMessagesForLocale(locale) {

package/dist/mcp/actions/create-org-service-token.js

@@ -25,10 +25,9 @@ import { z } from "zod";
 import { defineAction } from "../../action.js";
 import { orgAdminAudit } from "../../audit/org-admin.js";
 import { getServicePrincipalPolicy, upsertServicePrincipalPolicy, } from "../../org/service-principal-policy.js";
-import { getAppProductionUrl } from "../../server/app-url.js";
 import { CREDENTIAL_MEMBERSHIP_UNAVAILABLE_MESSAGE } from "../../server/credential-membership-unavailable.js";
 import { getRequestContext } from "../../server/request-context.js";
-import { mintOrgServiceToken } from "../connect-route.js";
+import { mintOrgServiceToken, OrgServiceTokenAppUrlError, } from "../connect-route.js";
 import { MAX_SERVICE_TOKEN_TTL_DAYS, revokeOrgServiceToken, } from "../connect-store.js";
 import { McpCredentialIssuanceError } from "../credential-issuance.js";
 import { allowedActionsSchema, assertOwnerIsOrgMember, normalizeAllowedActions, ownerEmailSchema, parseServiceName, purposeSchema, riskTierSchema, teamSchema, } from "./service-principal-input.js";
@@ -96,10 +95,6 @@ export default defineAction({
         if (args.allowedActions !== undefined) {
             policyInput.allowedActions = normalizeAllowedActions(args.allowedActions);
         }
-        const appUrl = (getRequestContext()?.requestOrigin || getAppProductionUrl()).replace(/\/+$/, "");
-        if (!appUrl && !process.env.A2A_SECRET?.trim()) {
-            throw new ServiceTokenError("Could not determine the app URL needed to mint a token. Set APP_URL on the deployment.", 500);
-        }
         let minted;
         try {
             minted = await mintOrgServiceToken({
@@ -107,10 +102,13 @@ export default defineAction({
                 orgId: caller.orgId,
                 createdBy: caller.email,
                 ttlDays: args.ttlDays,
-                appUrl,
+                appUrl: getRequestContext()?.requestOrigin?.replace(/\/+$/, ""),
             });
         }
         catch (error) {
+            if (error instanceof OrgServiceTokenAppUrlError) {
+                throw new ServiceTokenError(error.message, 500);
+            }
             if (!(error instanceof McpCredentialIssuanceError))
                 throw error;
             throw error.reason === "not-member"

package/dist/mcp/build-server.d.ts

@@ -1,5 +1,6 @@
 import "../authorization/check-action.js";
 import type { ActionEntry } from "../agent/production-agent.js";
+import type { BearerCredentialRefusal } from "../server/bearer-credential-refusal.js";
 import { type McpDirectoryWidgetReadArgument } from "../shared/embed-auth.js";
 import type { ExternalAgentPolicy } from "./external-agent-policy.js";
 export interface MCPConfig {
@@ -138,38 +139,42 @@ export type VerifyAuthResult = {
     fullCatalog?: boolean;
     /**
      * The token verified, but its standing could not be checked: the
-     * connect-token revocation or org lookup, the retired-address check, or the
+     * connect-token lookup, the retired-address check, or the
      * membership check hit a database or identity-authority error. Answer with
      * a retryable error, not an auth challenge: signing in again would not help.
      */
     unavailable?: true;
+    /**
+     * Why a presented bearer token was refused. Absent when no token was
+     * presented, and when the refusal is `unavailable`.
+     */
+    refusal?: BearerCredentialRefusal;
 };
 /**
  * Verify the inbound auth header. Returns:
- *   - { authed: true, identity } when verified. A deployment-secret JWT may
+ *   - { authed: true, identity } when verified. A credential this app issued
+ *     (an MCP OAuth access token or a connect token) supplies its subject and
+ *     org, checked against live membership. A deployment-secret A2A JWT may
  *     supply its asserted user (`sub`), while an org-secret JWT supplies only
- *     verified organization scope. Legacy connect tokens recover stored org
- *     scope. Static-token auth gets identity from `AGENT_NATIVE_OWNER_EMAIL`
- *     or `X-Agent-Native-Owner-Email` (the `agent-native mcp install` flow).
- *     `identity` is undefined only for true dev-open with no owner hint.
- *   - { authed: false } on rejection.
+ *     verified organization scope. Static-token auth gets identity from
+ *     `AGENT_NATIVE_OWNER_EMAIL` or `X-Agent-Native-Owner-Email` (the
+ *     `agent-native mcp install` flow). `identity` is undefined only for true
+ *     dev-open with no owner hint.
+ *   - { authed: false, refusal? } on rejection; `refusal` is set whenever a
+ *     presented token was refused.
  *
- * A deployment-secret A2A JWT can supply its trusted `sub` (caller email).
- * An org-secret JWT never supplies a user identity; both paths bind
- * `org_domain` to local organization metadata. Legacy connect tokens can use
- * a stored-org fallback. The MCP endpoint wraps tool runs in
- * `runWithRequestContext({ userEmail, orgId })`. Without that wrap, the
- * MCP endpoint loses tenant identity and downstream `accessFilter` /
- * `resolveCredential` calls fall back to platform-wide defaults.
+ * Credentials this app issued are recognized and verified before any A2A
+ * rule runs, so a change to cross-app trust cannot reclassify them. Both A2A
+ * paths bind `org_domain` to local organization metadata. The MCP endpoint
+ * wraps tool runs in `runWithRequestContext({ userEmail, orgId })`. Without
+ * that wrap, the MCP endpoint loses tenant identity and downstream
+ * `accessFilter` / `resolveCredential` calls fall back to platform-wide
+ * defaults.
  *
  * `ownerEmailHeader` is the forwarded `X-Agent-Native-Owner-Email` value; it
  * is consulted ONLY on the static-token / dev-open path (never to influence
  * verified JWT identity), so the install flow runs tools as the configured
  * owner instead of an unscoped anonymous caller.
- *
- * A credential this app issued that names an organization is admitted only
- * while its subject is still a member, and none is admitted for an address an
- * email change retired after signing (see `admitIssuedCredential`).
  */
 export declare function verifyAuth(authHeader: string | undefined, ownerEmailHeader?: string, options?: {
     allowDevOpen?: boolean;