@agent-native/core 0.206.0 → 0.206.1-nightly-20261009213000

package/dist/agent/production-agent.js

@@ -45,6 +45,7 @@ import { ANALYTICS_CLIENT_PLATFORM_BODY_FIELD } from "../shared/analytics-platfo
 import { isContextDegraded, preloadedContextUnavailableNote, readReportedContextStatus, screenContextUnavailableNote, SELECTION_CONTEXT_UNAVAILABLE_NOTE, worstContextStatus, } from "../shared/context-status.js";
 import { parseBase64DataUrl } from "../shared/data-url.js";
 import { stripDiagnosticSnippets } from "../shared/diagnostic-snippet.js";
+import { DurableAttachmentReferenceRequiredError, stripInlineBytes, } from "../shared/inline-bytes.js";
 import { isReasoningEffort, normalizeReasoningEffortForRequest, stepDownReasoningEffort, } from "../shared/reasoning-effort.js";
 import { SYNTHETIC_TRAFFIC_BETA_E2E, SYNTHETIC_TRAFFIC_HEADER, } from "../shared/test-traffic.js";
 import { actionPreparationContinuationNote } from "./action-continuation-guidance.js";
@@ -53,17 +54,17 @@ import { CONTINUE_UNAVAILABLE_CODE, } from "./auto-continue.js";
 import { clipHead } from "./clip-text.js";
 import { connectionRequiredMessage, priorConnectionContextNote, resolvePriorConnectionNote, } from "./connection-required-note.js";
 import { buildSystemManifestSections, readContextXraySystemSections, } from "./context-xray/manifest.js";
-import { AGENT_CHAT_BACKGROUND_RUN_FIELD, AGENT_CHAT_PROCESS_RUN_PATH, backgroundRuntimeDiagnosticDetail, dispatchPathTargetsNetlifyBackgroundFunction, isAgentChatDurableBackgroundEnabled, isAgentChatForegroundSelfChainEnabled, isInBackgroundFunctionRuntime, resolveAgentChatProcessRunDispatchPath, shouldUseBackgroundFunctionTimeoutForWorker, } from "./durable-background.js";
+import { AGENT_CHAT_BROWSER_SESSION_ID_FIELD, AGENT_CHAT_BACKGROUND_RUN_FIELD, AGENT_CHAT_PROCESS_RUN_PATH, backgroundRuntimeDiagnosticDetail, dispatchPathTargetsNetlifyBackgroundFunction, isAgentChatDurableBackgroundEnabled, isAgentChatForegroundSelfChainEnabled, isInBackgroundFunctionRuntime, resolveAgentChatProcessRunDispatchPath, shouldUseBackgroundFunctionTimeoutForWorker, } from "./durable-background.js";
 import { applyContextXrayTransformForIteration } from "./engine/context-directives-transform.js";
 import { attemptContinuationDispatch } from "./engine/continuation-dispatch-retry.js";
 import { formatLlmCredentialErrorMessage, LLM_MISSING_CREDENTIALS_ERROR_CODE, LLM_MISSING_CREDENTIALS_MESSAGE, userFacingLlmCredentialError, } from "./engine/credential-errors.js";
-import { BUILDER_GATEWAY_INTERNAL_ERROR_CODE, isContextOverflowCode, isContextOverflowMessage, isProviderConnectionErrorMessage, PROVIDER_RATE_LIMITED_ERROR_CODE, PROVIDER_TRANSIENT_REJECTION_ERROR_CODE, } from "./engine/error-detail.js";
+import { BUILDER_GATEWAY_INTERNAL_ERROR_CODE, isContextOverflowCode, isContextOverflowMessage, isInvalidAttachmentProviderMessage, isProviderConnectionErrorMessage, PROVIDER_RATE_LIMITED_ERROR_CODE, PROVIDER_TRANSIENT_REJECTION_ERROR_CODE, } from "./engine/error-detail.js";
 import { resolveEngine, explicitEngineName, registerBuiltinEngines, getStoredModelForEngine, normalizeModelForEngine, isResolvedEngineUsableForRequest, } from "./engine/index.js";
 import { limitProviderTools, MAX_PROVIDER_TOOLS, } from "./engine/limit-provider-tools.js";
 import { resolveEmptyResponseRetryMaxOutputTokens, resolveMainChatMaxOutputTokens, resolveMaxOutputTokensForEngine, } from "./engine/output-tokens.js";
 import { PROVIDER_TO_ENV } from "./engine/provider-env-vars.js";
 import { JOURNALED_TOOL_REPLAY_PREFIX, RECOVERED_TOOL_REPLAY_PREFIX, loadedSkillPagesContext, loadPriorTurnToolCallJournal, seedRepeatedToolErrorCountsFromJournal, seedRepeatedToolCallCountsFromJournal, } from "./engine/tool-call-journal-seed.js";
-import { backfillEngineMessagesToolResults, stringifyToolUseInputForGateway, unmatchedToolResultReplayText, } from "./engine/translate-anthropic.js";
+import { backfillEngineMessagesToolResults, INTERRUPTED_TOOL_RESULT_MARKER, isInterruptedToolResult, stringifyToolUseInputForGateway, unmatchedToolResultReplayText, } from "./engine/translate-anthropic.js";
 import { EngineError } from "./engine/types.js";
 import { FOLLOW_UP_SUGGESTIONS_COMPLETION_SYSTEM_PROMPT, FOLLOW_UP_SUGGESTIONS_INSTRUCTION, FOLLOW_UP_SUGGESTIONS_MAX_OUTPUT_TOKENS, FOLLOW_UP_SUGGESTIONS_TOOL_NAME, buildFollowUpCompletionMessages, followUpSuggestionsTool, identifyFollowUpSuggestions, parseFollowUpSuggestions, } from "./follow-up-suggestions.js";
 import { filterHostedHarnessToolNames, normalizeHostedHarnessRuntime, } from "./harness/hosted.js";
@@ -1100,6 +1101,26 @@ const MAX_SELECTION_CONTEXT_CHARS = 8_000;
 const MAX_RESOURCE_INVENTORY_ITEMS = 40;
 const MAX_RESOURCE_INVENTORY_DESCRIPTION_CHARS = 160;
 const MAX_INLINE_SKILL_REFERENCE_CHARS = 40_000;
+const MAX_LOADED_SKILL_SLUGS = 16;
+const LOADED_SKILL_SLUG_PATTERN = /^skill-[a-z0-9]+(?:-+[a-z0-9]+)*$/;
+export function normalizeLoadedSkillSlugs(value) {
+    if (!Array.isArray(value))
+        return [];
+    const slugs = value.filter((slug) => typeof slug === "string" &&
+        slug.length <= 200 &&
+        LOADED_SKILL_SLUG_PATTERN.test(slug));
+    return [...new Set(slugs.reverse())]
+        .slice(0, MAX_LOADED_SKILL_SLUGS)
+        .reverse();
+}
+function skillPageIntactInHistory(messages, slug, page) {
+    const ending = page.trimEnd().slice(-200);
+    return messages.some((message) => message.content.some((part) => part.type === "tool-result" &&
+        part.toolName === "docs-search" &&
+        !part.isError &&
+        part.toolInput.includes(JSON.stringify(slug)) &&
+        part.content.includes(ending)));
+}
 export function resolveSourceSweepToolCallThreshold() {
     return getAppConfig().agent.sourceSweepToolCallThreshold;
 }
@@ -1139,59 +1160,9 @@ function limitInventoryLines(lines, label) {
 function generateRunId() {
     return `run-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
 }
-export class DurableAttachmentReferenceRequiredError extends Error {
-    code = "attachment_storage_required";
-    constructor() {
-        super("An attachment has inline bytes but no durable file URL. Configure file storage and retry this background run.");
-        this.name = "DurableAttachmentReferenceRequiredError";
-    }
-}
-function isDataUrlReference(value) {
-    return typeof value === "string" && /^\s*data:/i.test(value);
-}
-function hasDurableAttachmentUrl(value) {
-    return (typeof value === "string" &&
-        value.trim().length > 0 &&
-        !isDataUrlReference(value));
-}
-function sanitizeDurableAttachment(value, attachmentContext = false) {
-    if (Array.isArray(value)) {
-        return value.map((item) => sanitizeDurableAttachment(item));
-    }
-    if (!value || typeof value !== "object")
-        return value;
-    const item = value;
-    const isAttachment = attachmentContext ||
-        item.type === "image" ||
-        item.type === "file" ||
-        item.type === "document";
-    if (isAttachment &&
-        (isDataUrlReference(item.url) || isDataUrlReference(item.referenceUrl))) {
-        throw new DurableAttachmentReferenceRequiredError();
-    }
-    const hasInlineData = isAttachment && item.data !== undefined;
-    if (hasInlineData &&
-        !hasDurableAttachmentUrl(item.url) &&
-        !hasDurableAttachmentUrl(item.referenceUrl)) {
-        throw new DurableAttachmentReferenceRequiredError();
-    }
-    const sanitized = {};
-    for (const [key, child] of Object.entries(item)) {
-        if (key === "data" && hasInlineData)
-            continue;
-        if (key === "attachments" || key === "requestAttachments") {
-            sanitized[key] = Array.isArray(child)
-                ? child.map((attachment) => sanitizeDurableAttachment(attachment, true))
-                : sanitizeDurableAttachment(child);
-        }
-        else {
-            sanitized[key] = sanitizeDurableAttachment(child);
-        }
-    }
-    return sanitized;
-}
+export { DurableAttachmentReferenceRequiredError };
 export function serializeDurableDispatchPayload(body) {
-    const payload = JSON.stringify(sanitizeDurableAttachment(body));
+    const payload = JSON.stringify(stripInlineBytes(body, "reject"));
     if (typeof payload !== "string") {
         throw new TypeError("Durable dispatch payload could not be serialized");
     }
@@ -1550,6 +1521,51 @@ export function buildUserContentWithAttachments(opts) {
     });
     return userContent;
 }
+/** Images reach only a model that reads them; the model learns one was withheld. */
+function replaceImagesForModelWithoutVision(messages, model) {
+    const note = `<chat-attachment-processing-error code="model-without-vision" model="${escapeAttachmentAttribute(model)}">An attached image was not sent because the active model cannot read images. Do not infer or describe its contents. Tell the user to switch to a vision-capable model if the image matters.</chat-attachment-processing-error>`;
+    return messages.map((message) => message.content.some((part) => part.type === "image")
+        ? {
+            ...message,
+            content: message.content.map((part) => part.type === "image"
+                ? { type: "text", text: note }
+                : part),
+        }
+        : message);
+}
+/**
+ * Every engine's stop error passes through here with the request in hand, so
+ * this is where a provider's rejection of an inline attachment becomes the
+ * non-retryable `invalid_attachment`: resending the same bytes fails the same
+ * way, and an `http_400` lets Retry loop on it.
+ */
+function engineStopError(event, messages) {
+    const error = event.error ?? "Engine stream error";
+    const parts = messages.flatMap((message) => message.content);
+    const hasInlineAttachment = parts.some((part) => part.type === "image" ||
+        part.type === "file" ||
+        (part.type === "tool-result" && (part.images?.length ?? 0) > 0));
+    const attachmentRejected = event.errorCode === "invalid_attachment" ||
+        (hasInlineAttachment &&
+            (event.statusCode === 413 ||
+                ((event.statusCode === undefined ||
+                    event.statusCode === 400 ||
+                    event.statusCode === 422) &&
+                    isInvalidAttachmentProviderMessage(error))));
+    const names = parts.flatMap((part) => part.type === "file" && part.filename ? [`"${part.filename}"`] : []);
+    return new EngineError(attachmentRejected
+        ? `The model provider rejected an attachment in this request${names.length > 0 ? ` (${names.join(", ")})` : ""}: ${error}`
+        : error, {
+        errorCode: attachmentRejected ? "invalid_attachment" : event.errorCode,
+        upgradeUrl: event.upgradeUrl,
+        statusCode: event.statusCode,
+        providerRetryable: attachmentRejected ? false : event.providerRetryable,
+        contextOverflow: event.contextOverflow,
+        requestId: event.requestId,
+        requestShape: event.requestShape,
+        retryAfterMs: event.retryAfterMs,
+    });
+}
 export function appendRequestAttachmentContextToResumedHistory(messages, attachments) {
     if (!attachments?.length)
         return;
@@ -2448,7 +2464,6 @@ export function isCachedToolResultVisibleInContext(contextMessages, toolCall, ca
     }
     return false;
 }
-const INTERRUPTED_TOOL_RESULT_MARKER = "Interrupted before this tool returned a result.";
 const INTERRUPTED_TOOL_LEDGER_RECOVERY_TIMEOUT_MS = 5_000;
 const MAX_IDENTICAL_TOOL_ERRORS = 3;
 export const MAX_SAME_ERROR_ACROSS_ARGUMENTS = 3;
@@ -2535,9 +2550,10 @@ function seedWriteToolInterruptionsFromHistory(messages, actions) {
             const call = pendingToolCalls.get(part.toolCallId);
             if (!call)
                 continue;
-            if (typeof part.content === "string" &&
-                (part.content === INTERRUPTED_TOOL_RESULT_MARKER ||
-                    (part.isError === true && isToolCallTimeoutResult(part.content)))) {
+            if (isInterruptedToolResult(part.content) ||
+                (part.isError === true &&
+                    typeof part.content === "string" &&
+                    isToolCallTimeoutResult(part.content))) {
                 const key = toolCallCacheKey(call.name, call.input);
                 interruptions.set(key, (interruptions.get(key) ?? 0) + 1);
             }
@@ -3744,7 +3760,8 @@ export async function runAgentLoop(opts) {
     const toolCallJournal = journalRead.status === "read" ? journalRead.toolCallJournal : null;
     const journaledPriorToolCalls = journalRead.status === "read" ? journalRead.priorToolCalls : [];
     const journaledPriorToolResults = journalRead.status === "read" ? journalRead.priorToolResults : [];
-    let loadedSkillsContext = "";
+    let threadSkillPages = new Map();
+    let currentJournalSkillBodies = new Map();
     const hasLoadedSkillPage = journaledPriorToolResults.some((result) => {
         const input = result.input && typeof result.input === "object"
             ? result.input
@@ -3755,14 +3772,29 @@ export async function runAgentLoop(opts) {
             input.slug.startsWith("skill-") &&
             result.content.startsWith("# Skill:"));
     });
-    if (isInternalContinuationTurn(messages) && hasLoadedSkillPage) {
-        const { loadAgentsBundle, getRuntimeSkillsForUser, skillDocsSlug } = await import("../server/agents-bundle.js");
-        const runtimeSkills = await getRuntimeSkillsForUser(await loadAgentsBundle(), opts.ownerEmail ?? getRequestUserEmail());
-        loadedSkillsContext = loadedSkillPagesContext(journaledPriorToolResults, new Set(runtimeSkills.map((skill) => skillDocsSlug(skill.meta.name))));
-    }
-    const continuationSystemPrompt = loadedSkillsContext
-        ? `${systemPrompt}\n\n${loadedSkillsContext}`
-        : systemPrompt;
+    const reuseJournaledSkillPages = isInternalContinuationTurn(messages) && hasLoadedSkillPage;
+    const threadSkillSlugs = opts.loadedSkillSlugs ?? [];
+    if (reuseJournaledSkillPages || threadSkillSlugs.length > 0) {
+        const skillUserEmail = opts.ownerEmail ?? getRequestUserEmail();
+        const { loadSkillDocPages } = await import("../scripts/docs/search.js");
+        threadSkillPages = await loadSkillDocPages(threadSkillSlugs, skillUserEmail);
+        if (reuseJournaledSkillPages) {
+            const { loadAgentsBundle, getRuntimeSkillsForUser, skillDocsSlug } = await import("../server/agents-bundle.js");
+            const runtimeSkills = await getRuntimeSkillsForUser(await loadAgentsBundle(), skillUserEmail);
+            currentJournalSkillBodies = new Map(runtimeSkills.map((skill) => [
+                skillDocsSlug(skill.meta.name),
+                skill.content,
+            ]));
+        }
+    }
+    // Dedupe against the messages the model actually receives: memory
+    // compaction and retry trimming can remove a page that `messages` still has.
+    const continuationSystemPromptFor = (sentMessages) => {
+        const loadedSkillsContext = loadedSkillPagesContext(reuseJournaledSkillPages ? journaledPriorToolResults : [], threadSkillPages, currentJournalSkillBodies, (slug, page) => skillPageIntactInHistory(sentMessages, slug, page));
+        return loadedSkillsContext
+            ? `${systemPrompt}\n\n${loadedSkillsContext}`
+            : systemPrompt;
+    };
     toolCallHistory.push(...journaledPriorToolCalls);
     toolResultHistory.push(...journaledPriorToolResults);
     const unreadableJournalStop = journalRead.status === "unreadable" && isInternalContinuationTurn(messages)
@@ -3930,12 +3962,15 @@ export async function runAgentLoop(opts) {
                     const { thinking: _thinking, ...anthropic } = providerOptions.anthropic;
                     providerOptions = { ...providerOptions, anthropic };
                 }
+                const engineMessages = engine.capabilities.vision === false
+                    ? replaceImagesForModelWithoutVision(contextMessages, model)
+                    : contextMessages;
                 const streamOpts = {
                     model,
                     systemPrompt: completingFollowUpSuggestions
                         ? FOLLOW_UP_SUGGESTIONS_COMPLETION_SYSTEM_PROMPT
-                        : continuationSystemPrompt,
-                    messages: contextMessages,
+                        : continuationSystemPromptFor(engineMessages),
+                    messages: engineMessages,
                     tools: loopBreakerCloseout
                         ? []
                         : completingFollowUpSuggestions
@@ -3954,7 +3989,7 @@ export async function runAgentLoop(opts) {
                     providerOptions,
                 };
                 usage.llmCalls = (usage.llmCalls ?? 0) + 1;
-                notifyModelInputObserver(opts.onModelInput, contextMessages);
+                notifyModelInputObserver(opts.onModelInput, engineMessages);
                 const eventStream = engine.stream(streamOpts);
                 let thinkingBuffer = "";
                 const toolInputNames = new Map();
@@ -4224,16 +4259,7 @@ export async function runAgentLoop(opts) {
                         else if (event.type === "stop") {
                             terminalStopReason = event.reason;
                             if (event.reason === "error") {
-                                throw new EngineError(event.error ?? "Engine stream error", {
-                                    errorCode: event.errorCode,
-                                    upgradeUrl: event.upgradeUrl,
-                                    statusCode: event.statusCode,
-                                    providerRetryable: event.providerRetryable,
-                                    contextOverflow: event.contextOverflow,
-                                    requestId: event.requestId,
-                                    requestShape: event.requestShape,
-                                    retryAfterMs: event.retryAfterMs,
-                                });
+                                throw engineStopError(event, engineMessages);
                             }
                         }
                         if (hasNoProgressStalled()) {
@@ -6500,11 +6526,20 @@ async function readAdmittedQueuedMessagePromotion(opts) {
         ...(options ? { options: options } : {}),
     };
 }
-function queuedPromotionAttachments(attachments) {
+/** @internal exported for unit tests only */
+export function queuedPromotionAttachments(attachments) {
     return attachments.map((value) => {
         const file = queuedPromotionRecord(value);
+        // A saved queue entry is always a file part; the media type decides whether
+        // the model sees pixels (image) or a file reference.
+        const isImage = typeof file.mediaType === "string" &&
+            file.mediaType
+                .split(";", 1)[0]
+                .trim()
+                .toLowerCase()
+                .startsWith("image/");
         return {
-            type: "file",
+            type: isImage ? "image" : "file",
             name: file.name,
             ...(typeof file.fileId === "string" ? { id: file.fileId } : {}),
             ...(typeof file.mediaType === "string"
@@ -6944,7 +6979,7 @@ export function createProductionAgentHandler(options) {
                 return { error: "Invalid request body" };
             }
         }
-        const { message, history: submittedHistory = [], structuredHistory: submittedStructuredHistory, references: submittedReferences = [], threadId, attachments, displayMessage, parentId, queuedMessageId, queuedMessageClaimId, agentKitMessageId: requestedAgentKitMessageId, internalContinuation: submittedInternalContinuation, autoContinueOfRunId: requestedAutoContinueOfRunId, continueOfRunId: requestedContinueOfRunId, turnId: requestTurnId, model: submittedModel, engine: submittedEngine, effort: submittedEffort, browserTabId, scope, harness: submittedHarness, trackInRunsTray, skipPendingSelectionContext, } = body;
+        const { message, history: submittedHistory = [], structuredHistory: submittedStructuredHistory, loadedSkillSlugs: requestedLoadedSkillSlugs, references: submittedReferences = [], threadId, attachments, displayMessage, parentId, queuedMessageId, queuedMessageClaimId, agentKitMessageId: requestedAgentKitMessageId, internalContinuation: submittedInternalContinuation, autoContinueOfRunId: requestedAutoContinueOfRunId, continueOfRunId: requestedContinueOfRunId, turnId: requestTurnId, model: submittedModel, engine: submittedEngine, effort: submittedEffort, browserTabId, scope, harness: submittedHarness, trackInRunsTray, skipPendingSelectionContext, } = body;
         let requestHistory = submittedHistory;
         let requestStructuredHistory = submittedStructuredHistory;
         let requestReferences = submittedReferences;
@@ -7063,6 +7098,9 @@ export function createProductionAgentHandler(options) {
             });
         const mutableBody = body;
         if (!isBackgroundWorker) {
+            // A client can submit this private field, so overwrite it at the boundary.
+            mutableBody[AGENT_CHAT_BROWSER_SESSION_ID_FIELD] =
+                getRequestContext()?.browserSessionId ?? null;
             delete mutableBody[ANALYTICS_CLIENT_PLATFORM_BODY_FIELD];
         }
         if (dispatchToBackground) {
@@ -7531,7 +7569,9 @@ export function createProductionAgentHandler(options) {
         const turnUsageLabel = normalizeUsageLabel(body.usageLabel);
         let experimentAssignments = [];
         try {
-            if (ownerEmail) {
+            // A pinned request model suppresses the experiment's model override, so
+            // resolving would assign (and persist) a variant this turn never ran.
+            if (ownerEmail && !requestModelIsExplicit) {
                 const { resolveActiveExperimentConfig } = await import("../observability/experiments.js");
                 const expConfig = await resolveActiveExperimentConfig(ownerEmail);
                 if (expConfig) {
@@ -8926,6 +8966,7 @@ export function createProductionAgentHandler(options) {
                 maxIterations: loopSettings.maxIterations,
                 maxRunInputTokens: loopSettings.maxRunInputTokens,
                 priorTurnInputTokens: turnInputTokens,
+                loadedSkillSlugs: normalizeLoadedSkillSlugs(requestedLoadedSkillSlugs),
                 finalResponseGuard: options.finalResponseGuard,
                 finalResponseGuardRequestText: messageToPersist,
                 ...(resolvedRunSoftTimeoutMs > 0

package/dist/agent/run-store.js

@@ -5,6 +5,7 @@ import { ensureColumnExists, ensureTableExists } from "../db/ddl-guard.js";
 import { widenIntColumnsToBigInt } from "../db/widen-columns.js";
 import { lockAndAssertServicePrincipalMayStartRun, prepareServicePrincipalRunStart, recordServicePrincipalDenial, } from "../org/service-principal-guard.js";
 import { captureError } from "../server/capture-error.js";
+import { stripInlineBytes, stripInlineBytesFromJson, } from "../shared/inline-bytes.js";
 import { isRequestedStopAbortReason } from "./abort-reasons.js";
 import { admitAutoContinue, admitManualContinue, } from "./auto-continue.js";
 import { LLM_MISSING_CREDENTIALS_ERROR_CODE, LLM_MISSING_CREDENTIALS_MESSAGE, } from "./engine/credential-errors.js";
@@ -1335,7 +1336,7 @@ function staleRecoveryDispatchPayload(payload) {
             return payload;
         }
         return JSON.stringify({
-            ...parsed,
+            ...stripInlineBytes(parsed, "placeholder"),
             internalContinuation: true,
         });
     }
@@ -1823,7 +1824,13 @@ export async function insertRunEvent(runId, seq, eventData) {
         WHERE id = ? AND status <> 'running'
       )
       ON CONFLICT (run_id, seq) DO NOTHING`,
-        args: [runId, seq, Date.now(), eventData, runId],
+        args: [
+            runId,
+            seq,
+            Date.now(),
+            stripInlineBytesFromJson(eventData, "placeholder"),
+            runId,
+        ],
     });
 }
 export const CHECKPOINT_TERMINAL_EVENT_SEQ = 1_000_000_000;
@@ -2479,6 +2486,11 @@ async function appendTerminalRunEvent(runId, event) {
     const nextSeq = last ? Number(last.seq ?? -1) + 1 : 0;
     await client.execute({
         sql: `INSERT INTO agent_run_events (run_id, seq, event_at, event_data) VALUES (?, ?, ?, ?) ON CONFLICT (run_id, seq) DO NOTHING`,
-        args: [runId, nextSeq, Date.now(), JSON.stringify(event)],
+        args: [
+            runId,
+            nextSeq,
+            Date.now(),
+            stripInlineBytesFromJson(JSON.stringify(event), "placeholder"),
+        ],
     });
 }

package/dist/agent/thread-data-builder.js

@@ -4,10 +4,9 @@ import { isCredentialGapCodeAgentEvent, normalizeCodeAgentTranscript, } from "..
 import { stripAgentChatContextFromMessage } from "../shared/agent-chat-context.js";
 import { RUN_NOT_STARTED_METADATA_KEY, } from "../shared/agent-chat-run-not-started.js";
 import { BUILDER_GATEWAY_INTERNAL_ERROR_CODE } from "./engine/error-detail.js";
-import { stringifyToolUseInputForGateway } from "./engine/translate-anthropic.js";
+import { INTERRUPTED_TOOL_RESULT_MARKER as INTERRUPTED_TOOL_RESULT, stringifyToolUseInputForGateway, } from "./engine/translate-anthropic.js";
 import { parseFollowUpSuggestions } from "./follow-up-suggestions.js";
 import { isContinuationTerminalReason } from "./types.js";
-const INTERRUPTED_TOOL_RESULT = "Interrupted before this tool returned a result.";
 const INTERRUPTED_ACTIVITY_RESULT = "Stopped before this action started.";
 export const ASSISTANT_RUN_DURATION_METADATA_KEY = "agentNativeRunDurationMs";
 const MAX_STORED_ATTACHMENT_CHARS = 60_000;

package/dist/agent/types.d.ts

@@ -163,6 +163,7 @@ export interface AgentChatRequest {
     displayMessage?: string;
     history?: AgentMessage[];
     structuredHistory?: AgentChatStructuredMessage[];
+    loadedSkillSlugs?: string[];
     references?: AgentChatReference[];
     threadId?: string;
     parentId?: string | null;

package/dist/automation/index.d.ts

@@ -139,8 +139,8 @@ export declare function createAutomationCallbackHandler(runtime: AutomationRunti
     duplicate?: undefined;
     eventId?: undefined;
 } | {
-    error?: undefined;
     accepted: boolean;
     duplicate: boolean;
     eventId: string;
+    error?: undefined;
 }>;

package/dist/chat-threads/store.js

@@ -7,6 +7,7 @@ import { createGetDb } from "../db/create-get-db.js";
 import { ensureColumnExists, ensureIndexExists, ensureTableExists, } from "../db/ddl-guard.js";
 import { widenIntColumnsToBigInt } from "../db/widen-columns.js";
 import { getRequestOrgId } from "../server/request-context.js";
+import { stripInlineBytes } from "../shared/inline-bytes.js";
 import { resolveAccess } from "../sharing/access.js";
 import { registerShareableResource } from "../sharing/registry.js";
 import { roleSatisfies } from "../sharing/schema.js";
@@ -808,7 +809,7 @@ export async function forkThread(sourceId, ownerEmail, opts) {
         return null;
     }
     const id = opts?.id ?? generateId();
-    const threadData = forkThreadData(source.threadData, id, snapshot?.fromMessageId);
+    const threadData = JSON.stringify(stripInlineBytes(JSON.parse(forkThreadData(source.threadData, id, snapshot?.fromMessageId)), "placeholder"));
     const now = Date.now();
     const title = source.title ? `${source.title} (fork)` : "";
     const client = getDbExec();
@@ -1096,7 +1097,10 @@ export async function updateThreadData(id, threadData, title, preview, messageCo
                 preserveExistingTopLevelKeys: options.preserveExistingTopLevelKeys ?? true,
                 onAnnotationConflict: (conflict) => annotationConflicts.push(conflict),
             });
-            nextThreadData = JSON.stringify(merged);
+            // Client snapshots can predate their upload URL, so inline bytes become a
+            // visible placeholder rather than failing the save; legacy rows are
+            // scrubbed on their next write.
+            nextThreadData = JSON.stringify(stripInlineBytes(merged, "placeholder"));
             nextMessageCount = countThreadMessages(merged, messageCount);
             const nextUpdatedAt = Math.max(Date.now(), current.updatedAt + 1);
             // Completion persistence can race the separate generated-title save.

package/dist/cli/design-connect.d.ts

@@ -75,6 +75,7 @@ export interface DesignConnectBridgeOptions {
  * ensuring a leaked preview credential cannot be promoted into write access.
  */
 export declare function deriveDesignPreviewToken(bridgeToken: string): string;
+export declare function deriveDesignScopedReadOnlyPreviewToken(bridgeToken: string, designId: string): string;
 export declare function deriveDesignScopedLiveEditCapability(bridgeToken: string, designId: string): string;
 export declare function deriveDesignScopedLiveEditRegistrationCapability(bridgeToken: string, designId: string): string;
 export declare function deriveDesignPreviewAttestationSignature(bridgeToken: string, challenge: string): string;

package/dist/cli/design-connect.js

@@ -88,6 +88,8 @@ async function resolveBridgeToken(rootPath, configuredToken, persist = true) {
     return bridgeToken;
 }
 const PREVIEW_TOKEN_DOMAIN = "agent-native-design-preview-v1\0";
+const DESIGN_SCOPED_READ_ONLY_PREVIEW_TOKEN_DOMAIN = "agent-native-design-public-preview-v1\0";
+const DESIGN_SCOPED_READ_ONLY_PREVIEW_TOKEN_PREFIX = "design-public-preview-v1";
 const LIVE_EDIT_CAPABILITY_DOMAIN = "agent-native-live-edit-design-v1\0";
 const LIVE_EDIT_REGISTRATION_CAPABILITY_DOMAIN = "agent-native-live-edit-registration-v1\0";
 const PREVIEW_ATTESTATION_DOMAIN = "agent-native-design-preview-attestation-v1\0";
@@ -108,6 +110,31 @@ export function deriveDesignPreviewToken(bridgeToken) {
         .update(bridgeToken)
         .digest("hex");
 }
+export function deriveDesignScopedReadOnlyPreviewToken(bridgeToken, designId) {
+    const encodedDesignId = Buffer.from(designId, "utf8").toString("base64url");
+    const signature = crypto
+        .createHmac("sha256", bridgeToken)
+        .update(DESIGN_SCOPED_READ_ONLY_PREVIEW_TOKEN_DOMAIN)
+        .update(designId)
+        .digest("hex");
+    return `${DESIGN_SCOPED_READ_ONLY_PREVIEW_TOKEN_PREFIX}.${encodedDesignId}.${signature}`;
+}
+function designIdFromScopedReadOnlyPreviewToken(bridgeToken, token) {
+    const [prefix, encodedDesignId, signature, extra] = token.split(".");
+    if (prefix !== DESIGN_SCOPED_READ_ONLY_PREVIEW_TOKEN_PREFIX ||
+        !encodedDesignId ||
+        !signature ||
+        extra !== undefined) {
+        return null;
+    }
+    const designId = Buffer.from(encodedDesignId, "base64url").toString("utf8");
+    if (!designId ||
+        Buffer.from(designId, "utf8").toString("base64url") !== encodedDesignId ||
+        !constantTimeTokenMatches(token, deriveDesignScopedReadOnlyPreviewToken(bridgeToken, designId))) {
+        return null;
+    }
+    return designId;
+}
 export function deriveDesignScopedLiveEditCapability(bridgeToken, designId) {
     return crypto
         .createHmac("sha256", bridgeToken)
@@ -1035,10 +1062,7 @@ function keyedFrameNavigation(requestUrl, referer, bridgeUrl) {
         const bridgeKey = bridgeKeyFromUrl(url);
         if (!bridgeKey)
             continue;
-        return {
-            bridgeKey,
-            previewToken: url.searchParams.get("previewToken")?.trim() ?? "",
-        };
+        return { bridgeKey };
     }
     return null;
 }
@@ -2172,8 +2196,11 @@ export async function startDesignConnectBridge(manifest, seedOrOptions) {
         const providedPreviewToken = explicitPreviewToken ||
             readRequestCookie(req, PREVIEW_SESSION_COOKIE_NAME) ||
             "";
-        const previewTokenValid = constantTimeTokenMatches(providedPreviewToken, previewToken);
-        const explicitPreviewTokenValid = constantTimeTokenMatches(explicitPreviewToken, previewToken);
+        const scopedReadOnlyPreviewDesignId = designIdFromScopedReadOnlyPreviewToken(bridgeToken, providedPreviewToken);
+        const previewTokenValid = constantTimeTokenMatches(providedPreviewToken, previewToken) ||
+            scopedReadOnlyPreviewDesignId !== null;
+        const explicitPreviewTokenValid = constantTimeTokenMatches(explicitPreviewToken, previewToken) ||
+            designIdFromScopedReadOnlyPreviewToken(bridgeToken, explicitPreviewToken) !== null;
         const corsApproved = configureBridgeCors(req, res, configuredOrigins, explicitPreviewTokenValid && readHeader(req, "origin") === "null");
         const requestOrigin = readHeader(req, "origin");
         const crossSiteRequest = readHeader(req, "sec-fetch-site").trim().toLowerCase() === "cross-site";
@@ -2183,6 +2210,17 @@ export async function startDesignConnectBridge(manifest, seedOrOptions) {
                 : { ok: false, error: "origin is not allowed by this bridge" });
             return;
         }
+        if (scopedReadOnlyPreviewDesignId !== null &&
+            req.method &&
+            !["GET", "HEAD"].includes(req.method) &&
+            pathname !== "/live-edit-bridge") {
+            req.resume();
+            sendJson(res, 403, {
+                ok: false,
+                error: "design-scoped read-only preview tokens cannot mutate the app",
+            });
+            return;
+        }
         const rejectInvalidPreviewToken = () => {
             if (previewTokenValid)
                 return false;
@@ -2293,6 +2331,8 @@ export async function startDesignConnectBridge(manifest, seedOrOptions) {
                         : "";
                     if (!designId ||
                         !bridgeKey ||
+                        (scopedReadOnlyPreviewDesignId !== null &&
+                            scopedReadOnlyPreviewDesignId !== designId) ||
                         (!isValidLiveEditCapability(req, designId) &&
                             !isValidLiveEditRegistrationCapability(req, designId))) {
                         sendJson(res, 403, {
@@ -2583,13 +2623,16 @@ export async function startDesignConnectBridge(manifest, seedOrOptions) {
                         : targetParsed.search;
                     const targetPath = `${targetParsed.pathname}${targetSearch}` || "/";
                     const html = injectLiveEditBridge(snapshot.html, new URL("/", manifest.bridgeUrl).toString(), includeEditorBridge ? editorBridgeScript : "", targetPath, requestedBridgeKey
-                        ? { bridgeKey: requestedBridgeKey, previewToken }
-                        : { previewToken });
+                        ? {
+                            bridgeKey: requestedBridgeKey,
+                            previewToken: providedPreviewToken,
+                        }
+                        : { previewToken: providedPreviewToken });
                     sendText(res, snapshot.status >= 400 ? snapshot.status : 200, html, snapshot.contentType.includes("html")
                         ? snapshot.contentType
                         : "text/html; charset=utf-8", [
                         ...snapshot.setCookieHeaders,
-                        previewSessionSetCookie(previewToken),
+                        previewSessionSetCookie(providedPreviewToken),
                     ], BRIDGE_FRAME_HEADERS);
                 }
                 catch (err) {
@@ -2852,9 +2895,7 @@ export async function startDesignConnectBridge(manifest, seedOrOptions) {
                             const next = new URL("/live-edit", manifest.bridgeUrl);
                             next.searchParams.set("url", targetUrl);
                             next.searchParams.set("bridgeKey", keyed.bridgeKey);
-                            if (keyed.previewToken) {
-                                next.searchParams.set("previewToken", keyed.previewToken);
-                            }
+                            next.searchParams.set("previewToken", providedPreviewToken);
                             res.writeHead(302, {
                                 location: next.toString(),
                                 ...BRIDGE_FRAME_HEADERS,
@@ -2901,10 +2942,16 @@ export async function startDesignConnectBridge(manifest, seedOrOptions) {
                                 ? appendQueryPair(search, FRAME_BRIDGE_KEY_PARAM, keyed.bridgeKey)
                                 : search}` || "/");
                         })(), keyed
-                            ? { bridgeKey: keyed.bridgeKey, previewToken }
+                            ? {
+                                bridgeKey: keyed.bridgeKey,
+                                previewToken: providedPreviewToken,
+                            }
                             : method === "GET"
-                                ? { recoverTargetUrl: targetUrl, previewToken }
-                                : { previewToken }))
+                                ? {
+                                    recoverTargetUrl: targetUrl,
+                                    previewToken: providedPreviewToken,
+                                }
+                                : { previewToken: providedPreviewToken }))
                         : proxied.body;
                     const headStylesheetProbe = method === "HEAD" &&
                         previewTokenValid &&
@@ -2921,11 +2968,11 @@ export async function startDesignConnectBridge(manifest, seedOrOptions) {
                     const shouldRewriteOpaqueFrameResources = previewTokenValid &&
                         (opaqueFrameStylesheet || opaqueFrameJavaScript);
                     const rewrittenResourceText = opaqueFrameJavaScript
-                        ? addOpaqueFrameJavaScriptResourceTokens(responseText, previewToken)
+                        ? addOpaqueFrameJavaScriptResourceTokens(responseText, providedPreviewToken)
                         : responseText;
                     const opaqueFrameResponseBody = shouldRewriteOpaqueFrameResources
                         ? Buffer.from(opaqueFrameStylesheet
-                            ? addOpaqueFrameResourceTokens(rewrittenResourceText, previewToken)
+                            ? addOpaqueFrameResourceTokens(rewrittenResourceText, providedPreviewToken)
                             : rewrittenResourceText)
                         : responseBody;
                     const advertisedContentLength = method === "HEAD" && !shouldRewriteOpaqueFrameResources
@@ -2973,10 +3020,16 @@ export async function startDesignConnectBridge(manifest, seedOrOptions) {
         const isViteHmrSocket = readHeader(req, "sec-websocket-protocol")
             .split(",")
             .some((protocol) => protocol.trim() === "vite-hmr");
-        if (!constantTimeTokenMatches(providedPreviewToken, previewToken)) {
+        const scopedReadOnlyPreviewDesignId = designIdFromScopedReadOnlyPreviewToken(bridgeToken, providedPreviewToken);
+        if (!constantTimeTokenMatches(providedPreviewToken, previewToken) &&
+            scopedReadOnlyPreviewDesignId === null) {
             clientSocket.end("HTTP/1.1 401 Unauthorized\r\nConnection: close\r\nContent-Length: 0\r\n\r\n");
             return;
         }
+        if (scopedReadOnlyPreviewDesignId !== null && !isViteHmrSocket) {
+            clientSocket.end("HTTP/1.1 403 Forbidden\r\nConnection: close\r\nContent-Length: 0\r\n\r\n");
+            return;
+        }
         let targetUrl;
         try {
             targetUrl = new URL(resolvePreviewProxyUrl(manifest.devServerUrl, `${requestUrl.pathname}${stripPreviewTokenQueryParam(requestUrl.search)}`));
@@ -3031,7 +3084,7 @@ export async function startDesignConnectBridge(manifest, seedOrOptions) {
                     const payload = webSocketDataBuffer(data);
                     const rewritten = isBinary
                         ? undefined
-                        : rewriteViteHmrUpdate(payload, previewToken);
+                        : rewriteViteHmrUpdate(payload, providedPreviewToken);
                     browserSocket.send(rewritten ?? payload, { binary: isBinary });
                 });
                 browserSocket.once("close", () => upstreamSocket.terminate());