@agent-native/core 0.206.0-nightly-20261009153146 → 0.206.0

package/dist/action.d.ts

@@ -3,7 +3,7 @@ import { type ActionChatUIConfig } from "./action-ui.js";
 import type { ActionTool, AgentChatAttachment, AgentChatEvent } from "./agent/types.js";
 import type { ActionAuditConfig } from "./audit/types.js";
 import { type ActionAccessConfig } from "./authorization/action-access-runtime.js";
-export type ActionCaller = "tool" | "http" | "frontend" | "mcp-widget" | "cli" | "mcp" | "webmcp" | "a2a" | "automation";
+export type ActionCaller = "tool" | "http" | "frontend" | "mcp-widget" | "mcp-widget-write" | "cli" | "mcp" | "webmcp" | "a2a" | "automation";
 export interface ActionAutomationContext {
     triggerId: string;
     triggerName: string;
@@ -38,6 +38,12 @@ export interface ActionRunContext {
     actionName?: string;
     /** Present only on frontend GETs authorized by a scoped directory-widget read capability. */
     mcpDirectoryWidgetReadOnly?: true;
+    /** Present only on frontend mutations authorized by a scoped directory-widget write capability. */
+    mcpDirectoryWidgetWrite?: {
+        appId: string;
+        resourceIds: Record<string, string>;
+        actionNames: readonly string[];
+    };
     threadId?: string;
     runId?: string;
     turnId?: string;

package/dist/client/agent-chat/index.d.ts

@@ -13,7 +13,7 @@ export { useSendToAgentChat } from "../use-send-to-agent-chat.js";
 export { DEFAULT_MODEL, CHAT_MODEL_SELECTION_CHANGED_EVENT, chatModelSelectionStorageKey, loadChatModelCatalog, useChatModels, type UseChatModelsResult, type UseChatModelsOptions, type PersistedModelSelection, type EngineModelGroup, } from "../use-chat-models.js";
 export { fetchAgentEngineConfiguredState, useAgentEngineConfigured, type AgentEngineConfiguredState, type FetchAgentEngineConfiguredStateOptions, type UseAgentEngineConfiguredResult, } from "../use-agent-engine-configured.js";
 export { AGENT_CHAT_AI_SETUP_REQUIRED_CODE, AgentChatAiSetupRequiredError, ensureAgentEngineReadiness, getAgentEngineReadiness, invalidateAgentEngineReadiness, isAgentChatAiSetupRequiredError, isLocalRuntimeEngine, requireAgentEngineConfiguredForDispatch, subscribeAgentEngineReadiness, LOCAL_RUNTIME_ENGINE_IDS, agentEngineStatusUrlForChatApi, type AgentEngineReadinessSource, } from "../agent-engine-readiness.js";
-export { AGENT_NATIVE_MCP_APP_HOST_MESSAGE_TYPES, getMcpAppHostContext, initializeMcpAppHost, isMcpAppWidgetEmbed, isOpenAiMcpAppHost, openMcpAppHostLink, requestMcpAppDisplayMode, sendMcpAppHostMessage, updateMcpAppModelContext, useIsMcpAppWidgetEmbed, useMcpAppHostContext, type AgentNativeMcpAppHostMessageType, type McpAppDisplayMode, type McpAppHostChatMessage, type McpAppHostCapabilities, type McpAppHostContext, type McpAppHostInfo, type McpAppHostContextSnapshot, type McpAppModelContextContentPart, type McpAppModelContextUpdate, } from "../mcp-app-host.js";
+export { AGENT_NATIVE_MCP_APP_HOST_MESSAGE_TYPES, getMcpAppHostContext, initializeMcpAppHost, isMcpAppWidgetEmbed, isOpenAiMcpAppHost, openMcpAppHostLink, requestMcpAppDisplayMode, sendMcpAppHostMessage, updateMcpAppModelContext, useIsMcpAppWidgetEmbed, useIsMcpDirectoryWidgetReadOnlyEmbed, useIsMcpDirectoryWidgetWriteEmbed, useMcpAppHostContext, type AgentNativeMcpAppHostMessageType, type McpAppDisplayMode, type McpAppHostChatMessage, type McpAppHostCapabilities, type McpAppHostContext, type McpAppHostInfo, type McpAppHostContextSnapshot, type McpAppModelContextContentPart, type McpAppModelContextUpdate, } from "../mcp-app-host.js";
 export { buildDynamicAgentSuggestions, dedupeSuggestions, mergeAgentSuggestions, normalizeAgentDynamicSuggestionsConfig, useAgentDynamicSuggestions, useAgentDynamicSuggestionsResult, type AgentDynamicSuggestionContext, type AgentDynamicSuggestionsConfig, type AgentDynamicSuggestionsOption, } from "../dynamic-suggestions.js";
 export { clearChatStorage } from "../chat/storage.js";
 export { isAssistantChatHistoryVersion, coerceAssistantChatHistoryDate, type AssistantChatHistoryDate, type AssistantChatHistoryVersion, } from "../chat/assistant-chat-history-version.js";

package/dist/client/agent-chat/index.js

@@ -13,7 +13,7 @@ export { useSendToAgentChat } from "../use-send-to-agent-chat.js";
 export { DEFAULT_MODEL, CHAT_MODEL_SELECTION_CHANGED_EVENT, chatModelSelectionStorageKey, loadChatModelCatalog, useChatModels, } from "../use-chat-models.js";
 export { fetchAgentEngineConfiguredState, useAgentEngineConfigured, } from "../use-agent-engine-configured.js";
 export { AGENT_CHAT_AI_SETUP_REQUIRED_CODE, AgentChatAiSetupRequiredError, ensureAgentEngineReadiness, getAgentEngineReadiness, invalidateAgentEngineReadiness, isAgentChatAiSetupRequiredError, isLocalRuntimeEngine, requireAgentEngineConfiguredForDispatch, subscribeAgentEngineReadiness, LOCAL_RUNTIME_ENGINE_IDS, agentEngineStatusUrlForChatApi, } from "../agent-engine-readiness.js";
-export { AGENT_NATIVE_MCP_APP_HOST_MESSAGE_TYPES, getMcpAppHostContext, initializeMcpAppHost, isMcpAppWidgetEmbed, isOpenAiMcpAppHost, openMcpAppHostLink, requestMcpAppDisplayMode, sendMcpAppHostMessage, updateMcpAppModelContext, useIsMcpAppWidgetEmbed, useMcpAppHostContext, } from "../mcp-app-host.js";
+export { AGENT_NATIVE_MCP_APP_HOST_MESSAGE_TYPES, getMcpAppHostContext, initializeMcpAppHost, isMcpAppWidgetEmbed, isOpenAiMcpAppHost, openMcpAppHostLink, requestMcpAppDisplayMode, sendMcpAppHostMessage, updateMcpAppModelContext, useIsMcpAppWidgetEmbed, useIsMcpDirectoryWidgetReadOnlyEmbed, useIsMcpDirectoryWidgetWriteEmbed, useMcpAppHostContext, } from "../mcp-app-host.js";
 export { buildDynamicAgentSuggestions, dedupeSuggestions, mergeAgentSuggestions, normalizeAgentDynamicSuggestionsConfig, useAgentDynamicSuggestions, useAgentDynamicSuggestionsResult, } from "../dynamic-suggestions.js";
 export { clearChatStorage } from "../chat/storage.js";
 export { isAssistantChatHistoryVersion, coerceAssistantChatHistoryDate, } from "../chat/assistant-chat-history-version.js";

package/dist/client/embed-auth.d.ts

@@ -11,12 +11,14 @@ export declare function getEmbedAuthToken(): string | null;
  * allowed.
  */
 export declare function hasMcpDirectoryWidgetCapabilityToken(): boolean;
+export declare function hasMcpDirectoryWidgetWriteCapabilityToken(): boolean;
 /**
  * True when this document is the app nested in an MCP App widget shell (the
  * chat bridge is active) on a directory-widget read capability, which the
  * server limits to the widget's own resource reads.
  */
 export declare function isMcpDirectoryWidgetReadOnlyEmbed(): boolean;
+export declare function isMcpDirectoryWidgetWriteEmbed(): boolean;
 export declare function isEmbedAuthActive(): boolean;
 export declare function _resetEmbedAuthForTests(): void;
 /**

package/dist/client/embed-auth.js

@@ -1,5 +1,5 @@
-import { EMBED_MODE_QUERY_PARAM, EMBED_START_PATH, EMBED_TARGET_HEADER, EMBED_TARGET_QUERY_PARAM, EMBED_TOKEN_QUERY_PARAM, MCP_APP_CHAT_BRIDGE_QUERY_PARAM, } from "../shared/embed-auth.js";
-import { isMcpDirectoryWidgetReadCapabilityScope } from "../shared/embed-auth.js";
+import { EMBED_MODE_QUERY_PARAM, EMBED_START_PATH, EMBED_TARGET_HEADER, EMBED_TARGET_QUERY_PARAM, EMBED_TOKEN_QUERY_PARAM, MCP_APP_CHAT_BRIDGE_QUERY_PARAM, MCP_DIRECTORY_WIDGET_SESSION_EXPIRED_HEADER, } from "../shared/embed-auth.js";
+import { isMcpDirectoryWidgetReadCapabilityScope, isMcpDirectoryWidgetWriteCapabilityScope, } from "../shared/embed-auth.js";
 import { FRAMEWORK_INTERNAL_ROUTE_PREFIX } from "../shared/framework-route-prefix.js";
 import { MCP_APP_HOST_FILL_ATTRIBUTE } from "../shared/mcp-app-display.js";
 import { EMBED_TOKEN_STORAGE_KEY, MCP_CHAT_BRIDGE_STORAGE_KEY, } from "../shared/mcp-app-widget-embed.js";
@@ -7,11 +7,16 @@ import { SIGN_IN_ENTRY_PATH, SIGN_IN_LEGACY_ENTRY_PATH, } from "../shared/sign-i
 import { frameworkRoutePrefix } from "./api-path.js";
 let installed = false;
 let memoryToken = null;
+let renewedFromUrlToken = null;
+let pendingWidgetSessionRenewal = null;
+let widgetSessionRenewalRequestId = 0;
 let mcpChatBridgeActive = false;
 let mcpChatBridgeScope = null;
 const AUTH_FAILURE_COOLDOWN_MS = 60_000;
 const GUARDED_METHODS = new Set(["GET", "HEAD"]);
 const AUTH_FAILURE_HEADER = "x-agent-native-auth-circuit-breaker";
+const EMBED_TOKEN_RENEWED_FROM_STORAGE_KEY = `${EMBED_TOKEN_STORAGE_KEY}:renewed-from`;
+const EMBED_SESSION_RENEWAL_TIMEOUT_MS = 15_000;
 const MCP_CHAT_BRIDGE_VIEWPORT_STYLE_ID = "agent-native-mcp-chat-bridge-viewport";
 const MCP_CHAT_BRIDGE_VIEWPORT_HEIGHT = 560;
 let pendingMcpChatBridgeViewportNotification = null;
@@ -43,7 +48,7 @@ export function readEmbedMcpChatBridgeFlagFromUrl() {
     return value === "1" || value === "true";
 }
 function currentMcpChatBridgeScope(win) {
-    return readTokenFromUrl(win) ?? memoryToken ?? storedToken(win);
+    return getEmbedAuthToken() ?? memoryToken ?? storedToken(win);
 }
 function clearMcpChatBridge(win) {
     mcpChatBridgeActive = false;
@@ -142,6 +147,31 @@ export function getEmbedAuthToken() {
         return null;
     const fromUrl = readTokenFromUrl(win);
     if (fromUrl) {
+        let renewedFrom = renewedFromUrlToken;
+        if (!renewedFrom) {
+            try {
+                renewedFrom =
+                    win.sessionStorage?.getItem(EMBED_TOKEN_RENEWED_FROM_STORAGE_KEY) ??
+                        null;
+            }
+            catch {
+                renewedFrom = null;
+            }
+        }
+        if (renewedFrom === fromUrl) {
+            const refreshed = memoryToken ?? storedToken(win);
+            if (refreshed && refreshed !== fromUrl)
+                return refreshed;
+        }
+        if (renewedFrom && renewedFrom !== fromUrl) {
+            renewedFromUrlToken = null;
+            try {
+                win.sessionStorage?.removeItem(EMBED_TOKEN_RENEWED_FROM_STORAGE_KEY);
+            }
+            catch {
+                // coercion-ok: cleanup is best-effort; the refreshed URL token still supersedes this marker.
+            }
+        }
         storeToken(fromUrl, win);
         return fromUrl;
     }
@@ -160,7 +190,7 @@ function readEmbedTokenScope(token) {
         return undefined;
     }
 }
-let readOnlyScopeCache = null;
+let widgetScopeCache = null;
 /**
  * True when the embed credential is a directory-widget read capability, which
  * only the MCP App widget flows mint. It stays readable after a client
@@ -173,13 +203,29 @@ export function hasMcpDirectoryWidgetCapabilityToken() {
     const token = getEmbedAuthToken();
     if (!token)
         return false;
-    if (readOnlyScopeCache?.token !== token) {
-        readOnlyScopeCache = {
+    if (widgetScopeCache?.token !== token) {
+        const scope = readEmbedTokenScope(token);
+        widgetScopeCache = {
             token,
-            readOnly: isMcpDirectoryWidgetReadCapabilityScope(readEmbedTokenScope(token)),
+            readOnly: isMcpDirectoryWidgetReadCapabilityScope(scope),
+            writable: isMcpDirectoryWidgetWriteCapabilityScope(scope),
         };
     }
-    return readOnlyScopeCache.readOnly;
+    return widgetScopeCache.readOnly || widgetScopeCache.writable;
+}
+export function hasMcpDirectoryWidgetWriteCapabilityToken() {
+    const token = getEmbedAuthToken();
+    if (!token)
+        return false;
+    if (widgetScopeCache?.token !== token) {
+        const scope = readEmbedTokenScope(token);
+        widgetScopeCache = {
+            token,
+            readOnly: isMcpDirectoryWidgetReadCapabilityScope(scope),
+            writable: isMcpDirectoryWidgetWriteCapabilityScope(scope),
+        };
+    }
+    return widgetScopeCache.writable;
 }
 /**
  * True when this document is the app nested in an MCP App widget shell (the
@@ -187,7 +233,21 @@ export function hasMcpDirectoryWidgetCapabilityToken() {
  * server limits to the widget's own resource reads.
  */
 export function isMcpDirectoryWidgetReadOnlyEmbed() {
-    return hasMcpDirectoryWidgetCapabilityToken() && isEmbedMcpChatBridgeActive();
+    const token = getEmbedAuthToken();
+    if (!token)
+        return false;
+    if (widgetScopeCache?.token !== token) {
+        const scope = readEmbedTokenScope(token);
+        widgetScopeCache = {
+            token,
+            readOnly: isMcpDirectoryWidgetReadCapabilityScope(scope),
+            writable: isMcpDirectoryWidgetWriteCapabilityScope(scope),
+        };
+    }
+    return widgetScopeCache.readOnly && isEmbedMcpChatBridgeActive();
+}
+export function isMcpDirectoryWidgetWriteEmbed() {
+    return (hasMcpDirectoryWidgetWriteCapabilityToken() && isEmbedMcpChatBridgeActive());
 }
 export function isEmbedAuthActive() {
     const win = browserWindow();
@@ -303,7 +363,10 @@ export function _resetEmbedAuthForTests() {
     }
     installed = false;
     memoryToken = null;
-    readOnlyScopeCache = null;
+    renewedFromUrlToken = null;
+    pendingWidgetSessionRenewal = null;
+    widgetSessionRenewalRequestId = 0;
+    widgetScopeCache = null;
     mcpChatBridgeActive = false;
     mcpChatBridgeScope = null;
     authFailureCache.clear();
@@ -526,6 +589,63 @@ function requestUrlAndKey(input, init, win) {
         shouldGuard: shouldGuardAuthFailure(method, url),
     };
 }
+function requestWidgetSessionRenewal(win) {
+    if (pendingWidgetSessionRenewal)
+        return pendingWidgetSessionRenewal;
+    if (!win.parent || win.parent === win)
+        return Promise.resolve(false);
+    widgetSessionRenewalRequestId += 1;
+    const requestId = `embed-renewal-${Date.now()}-${widgetSessionRenewalRequestId}`;
+    const renewal = new Promise((resolve) => {
+        let settled = false;
+        let timeoutId = null;
+        const finish = (succeeded) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timeoutId !== null)
+                win.clearTimeout(timeoutId);
+            win.removeEventListener("message", onMessage);
+            resolve(succeeded);
+        };
+        const onMessage = (event) => {
+            if (event.source !== win.parent)
+                return;
+            const message = event.data;
+            const data = message && typeof message === "object" ? message.data : null;
+            if (message?.type !== "agentNative.embedSessionRenewed" ||
+                data?.requestId !== requestId) {
+                return;
+            }
+            if (data.ok !== true) {
+                finish(false);
+                return;
+            }
+            try {
+                win.parent.postMessage({ type: "agentNative.embedSessionRenewalApplied", requestId }, "*");
+            }
+            catch (error) {
+                console.warn("[agent-native] could not acknowledge embedded session renewal", error);
+            }
+            finish(true);
+        };
+        win.addEventListener("message", onMessage);
+        timeoutId = win.setTimeout(() => finish(false), EMBED_SESSION_RENEWAL_TIMEOUT_MS);
+        try {
+            win.parent.postMessage({
+                type: "agentNative.embedSessionExpired",
+                data: { requestId },
+            }, "*");
+        }
+        catch {
+            finish(false);
+        }
+    }).finally(() => {
+        pendingWidgetSessionRenewal = null;
+    });
+    pendingWidgetSessionRenewal = renewal;
+    return renewal;
+}
 export function ensureEmbedAuthFetchInterceptor() {
     const win = browserWindow();
     if (!win)
@@ -534,7 +654,7 @@ export function ensureEmbedAuthFetchInterceptor() {
         markEmbedMcpChatBridgeActive();
     const urlToken = readTokenFromUrl(win);
     if (urlToken) {
-        storeToken(urlToken, win);
+        getEmbedAuthToken();
         stripTokenFromUrl(win);
     }
     ensureMcpChatBridgeViewportClamp(win);
@@ -562,7 +682,35 @@ export function ensureEmbedAuthFetchInterceptor() {
         if (token && sameOrigin(input, win)) {
             [fetchInput, fetchInit] = withEmbedAuthHeaders(input, init, token, win);
         }
-        const response = await originalFetch(fetchInput, fetchInit);
+        const canRenewWidgetSession = Boolean(token) &&
+            isMcpDirectoryWidgetWriteEmbed() &&
+            request &&
+            sameOrigin(input, win);
+        let replayRequest = null;
+        let firstRequest = null;
+        if (canRenewWidgetSession) {
+            try {
+                firstRequest = new Request(fetchInput, fetchInit);
+                replayRequest = firstRequest.clone();
+            }
+            catch {
+                // coercion-ok: non-cloneable streamed writes retain their original response and are not replayed.
+            }
+        }
+        let response = firstRequest
+            ? await originalFetch(firstRequest)
+            : await originalFetch(fetchInput, fetchInit);
+        if (response.status === 401 && canRenewWidgetSession) {
+            const sessionExpired = response.headers.get(MCP_DIRECTORY_WIDGET_SESSION_EXPIRED_HEADER) ===
+                "1";
+            if (sessionExpired && replayRequest && token) {
+                const renewed = await requestWidgetSessionRenewal(win);
+                if (renewed) {
+                    const [retryInput, retryInit] = withEmbedAuthHeaders(replayRequest, undefined, token, win);
+                    response = await originalFetch(retryInput, retryInit);
+                }
+            }
+        }
         if (request?.shouldGuard && isAuthFailureStatus(response.status)) {
             await recordAuthFailure(request.key, response);
         }

package/dist/client/host/index.d.ts

@@ -1,6 +1,6 @@
 export { initializeAgentNativeClient } from "../client-bootstrap.js";
 export { agentNativeApiDisabledReason, AgentNativeApiDisabledError, setAgentNativeApiDisabled, } from "../api-surface.js";
-export { ensureEmbedAuthFetchInterceptor, getEmbedAuthToken, isEmbedAuthActive, isEmbedMcpChatBridgeActive, isMcpDirectoryWidgetReadOnlyEmbed, } from "../embed-auth.js";
+export { ensureEmbedAuthFetchInterceptor, getEmbedAuthToken, isEmbedAuthActive, isEmbedMcpChatBridgeActive, isMcpDirectoryWidgetReadOnlyEmbed, isMcpDirectoryWidgetWriteEmbed, } from "../embed-auth.js";
 export { sendToFrame, onFrameMessage, requestUserInfo, getFrameOrigin, getFramePostMessageTargetOrigin, getCallbackOrigin, oauthRedirectUri, isInFrame, isTrustedFrameMessage, enterStyleEditing, enterTextEditing, exitSelectionMode, type UserInfo, } from "../frame.js";
 export { getBuilderParentOrigin, isInBuilderFrame, sendToBuilderChat, shouldParentFrameOwnAgentPanel, isTrustedBuilderMessage, tryDelegateBuildRequestToBuilder, type BuilderChatMessage, } from "../builder-frame.js";
 export { getClientSurface, type ClientSurface } from "../client-surface.js";

package/dist/client/host/index.js

@@ -1,6 +1,6 @@
 export { initializeAgentNativeClient } from "../client-bootstrap.js";
 export { agentNativeApiDisabledReason, AgentNativeApiDisabledError, setAgentNativeApiDisabled, } from "../api-surface.js";
-export { ensureEmbedAuthFetchInterceptor, getEmbedAuthToken, isEmbedAuthActive, isEmbedMcpChatBridgeActive, isMcpDirectoryWidgetReadOnlyEmbed, } from "../embed-auth.js";
+export { ensureEmbedAuthFetchInterceptor, getEmbedAuthToken, isEmbedAuthActive, isEmbedMcpChatBridgeActive, isMcpDirectoryWidgetReadOnlyEmbed, isMcpDirectoryWidgetWriteEmbed, } from "../embed-auth.js";
 export { sendToFrame, onFrameMessage, requestUserInfo, getFrameOrigin, getFramePostMessageTargetOrigin, getCallbackOrigin, oauthRedirectUri, isInFrame, isTrustedFrameMessage, enterStyleEditing, enterTextEditing, exitSelectionMode, } from "../frame.js";
 export { getBuilderParentOrigin, isInBuilderFrame, sendToBuilderChat, shouldParentFrameOwnAgentPanel, isTrustedBuilderMessage, tryDelegateBuildRequestToBuilder, } from "../builder-frame.js";
 export { getClientSurface } from "../client-surface.js";

package/dist/client/mcp-app-host.d.ts

@@ -64,6 +64,7 @@ export declare function useIsMcpAppWidgetEmbed(): boolean;
  * instead of showing errors for requests that can never land.
  */
 export declare function useIsMcpDirectoryWidgetReadOnlyEmbed(): boolean;
+export declare function useIsMcpDirectoryWidgetWriteEmbed(): boolean;
 export declare function isOpenAiMcpAppHost(): boolean;
 export declare function initializeMcpAppHost(): Promise<boolean>;
 export declare function sendMcpAppHostMessage(chat: McpAppHostChatMessage): Promise<boolean | null> | false;

package/dist/client/mcp-app-host.js

@@ -2,7 +2,7 @@ import { useSyncExternalStore } from "react";
 import { EMBED_MODE_QUERY_PARAM, EMBED_TOKEN_QUERY_PARAM, MCP_APP_CHAT_BRIDGE_QUERY_PARAM, } from "../shared/embed-auth.js";
 import { MCP_APP_HOST_FILL_ATTRIBUTE, mcpAppHostFillsContainer, } from "../shared/mcp-app-display.js";
 import { MCP_APP_WIDGET_EMBED_ATTRIBUTE } from "../shared/mcp-app-widget-embed.js";
-import { getEmbedAuthToken, hasMcpDirectoryWidgetCapabilityToken, isEmbedAuthActive, markEmbedMcpChatBridgeActive, isEmbedMcpChatBridgeActive, isMcpDirectoryWidgetReadOnlyEmbed, readEmbedMcpChatBridgeFlagFromUrl, } from "./embed-auth.js";
+import { getEmbedAuthToken, hasMcpDirectoryWidgetCapabilityToken, isEmbedAuthActive, markEmbedMcpChatBridgeActive, isEmbedMcpChatBridgeActive, isMcpDirectoryWidgetReadOnlyEmbed, isMcpDirectoryWidgetWriteEmbed, readEmbedMcpChatBridgeFlagFromUrl, } from "./embed-auth.js";
 import { getFrameOrigin } from "./frame.js";
 export const AGENT_NATIVE_MCP_APP_HOST_MESSAGE_TYPES = {
     HOST_CONTEXT: "agentNative.mcpHostContext",
@@ -410,6 +410,9 @@ export function useIsMcpAppWidgetEmbed() {
 export function useIsMcpDirectoryWidgetReadOnlyEmbed() {
     return useSyncExternalStore(() => () => { }, isMcpDirectoryWidgetReadOnlyEmbed, () => false);
 }
+export function useIsMcpDirectoryWidgetWriteEmbed() {
+    return useSyncExternalStore(() => () => { }, isMcpDirectoryWidgetWriteEmbed, () => false);
+}
 export function isOpenAiMcpAppHost() {
     return (isInChildFrame() && isMcpAppBridgeEnabled() && readOpenAiBridge() !== null);
 }

package/dist/collab/routes.d.ts

@@ -13,8 +13,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
     };
 }>>;
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/file-upload/actions/upload-image.d.ts

@@ -33,9 +33,9 @@ declare const _default: import("../../action.js").ActionDefinition<{
     idempotencyKey: string;
     deleted: boolean;
 } | {
+    id?: undefined;
     error: string;
     url?: undefined;
-    id?: undefined;
     provider?: undefined;
     configured?: undefined;
 } | {
@@ -45,8 +45,8 @@ declare const _default: import("../../action.js").ActionDefinition<{
     configured?: undefined;
     error?: undefined;
 } | {
-    url?: undefined;
     id?: undefined;
+    url?: undefined;
     provider?: undefined;
     error: string;
     configured: boolean;

package/dist/mcp/build-server.d.ts

@@ -34,6 +34,8 @@ export interface MCPConfig {
     productionActions?: Record<string, ActionEntry>;
     /** Unlisted from this MCP surface; used only when minting scoped widget tickets. */
     widgetReadActions?: Record<string, ActionEntry>;
+    /** Unlisted from this MCP surface; editor mutations callable only by scoped widget grants. */
+    widgetWriteActions?: Record<string, ActionEntry>;
     askAgent?: (message: string) => Promise<string>;
     builtinCrossAppTools?: boolean;
     /**
@@ -55,7 +57,15 @@ export interface MCPConfig {
         widgets?: boolean;
         widgetDomain?: string;
         widgetTargets?: Record<string, (args: Record<string, unknown>, result: unknown) => McpDirectoryWidgetTarget | null>;
+        authorizeWidgetWrite?: (input: {
+            toolName: string;
+            args: Record<string, unknown>;
+            result: unknown;
+            target: McpDirectoryWidgetTarget;
+            identity: MCPCallerIdentity;
+        }) => boolean | Promise<boolean>;
         widgetReadActionArguments?: Record<string, Record<string, McpDirectoryWidgetReadArgument>>;
+        widgetWriteActionArguments?: Record<string, Record<string, McpDirectoryWidgetReadArgument>>;
         /** Actions whose capability-backed `mcp-widget` execution is strictly read-only. */
         widgetReadOnlyActions?: readonly string[];
         /** Unlisted public reads that are available only through a scoped widget ticket. */
@@ -79,10 +89,14 @@ export interface MCPConfig {
 export interface McpDirectoryWidgetTarget {
     targetPath: string;
     resourceIds: Record<string, string>;
+    /** Mutations available to this artifact's editor, selected from the profile allowlist. */
+    writeActions?: readonly string[];
 }
 export interface MCPCallerIdentity {
     userEmail: string | undefined;
     identityAssurance?: "user" | "organization" | "service";
+    /** Issue time, in milliseconds, from a verified app-issued MCP credential. */
+    mcpCredentialIssuedAtMs?: number;
     orgId?: string | null;
     orgDomain: string | undefined;
     oauthScopes?: string[];
@@ -108,6 +122,7 @@ export declare class McpDirectoryProfileValidationError extends Error {
 }
 export declare function selectMcpActionSurface(config: MCPConfig, requestMeta?: MCPRequestMeta): Record<string, ActionEntry>;
 export declare function selectMcpDirectoryWidgetReadActions(profile: MCPConfig["directoryProfile"] | undefined, actions: Record<string, ActionEntry>): Record<string, ActionEntry> | undefined;
+export declare function selectMcpDirectoryWidgetWriteActions(profile: MCPConfig["directoryProfile"] | undefined, actions: Record<string, ActionEntry>): Record<string, ActionEntry> | undefined;
 export declare function getConfiguredMcpOwnerEmail(): string | undefined;
 export declare function validateMcpDirectoryProfile(config: MCPConfig, sourceActions?: Record<string, ActionEntry>): void;
 export declare function validateMcpDirectoryWidgetDomain(domain: string | undefined): void;