@agent-native/core 0.211.0 → 0.211.1-nightly-20261020213022

package/dist/db/client.js

@@ -1720,12 +1720,32 @@ export function annotateMissingTable(err, sql) {
     return err;
 }
 const scopedDbExec = new AsyncLocalStorage();
+const transactionCallbacks = new AsyncLocalStorage();
 export function withDbExec(exec, run) {
     return scopedDbExec.run(guardSchemaMutations(exec), run);
 }
 export function getScopedDbExec() {
     return scopedDbExec.getStore();
 }
+/**
+ * True while a `getDbExec().transaction()` callback runs. That callback leaves
+ * `getScopedDbExec()` unset, so code that must not run inside a caller's
+ * transaction asks this as well.
+ */
+export function insideDbTransactionCallback() {
+    return transactionCallbacks.getStore()?.active === true;
+}
+async function inTransactionCallback(run) {
+    const callback = { active: true };
+    try {
+        return await transactionCallbacks.run(callback, run);
+    }
+    finally {
+        // Work the callback started and left running inherits this store; once
+        // the callback settles, that work is no longer inside the transaction.
+        callback.active = false;
+    }
+}
 export function getDbExec() {
     const scoped = scopedDbExec.getStore();
     if (scoped)
@@ -1784,13 +1804,13 @@ export function getDbExec() {
                     if (!currentExec.transaction) {
                         throw new Error("This database does not support transactions.");
                     }
-                    return currentExec.transaction((tx) => fn({
+                    return currentExec.transaction((tx) => inTransactionCallback(() => fn({
                         execute: (s) => {
                             assertSchemaMutationAllowed(s);
                             return tx.execute(sanitize(s));
                         },
                         transaction: tx.transaction?.bind(tx),
-                    }));
+                    })));
                 }
                 : undefined,
         };
@@ -1806,19 +1826,19 @@ export function getDbExec() {
             const exec = await initializeProxy();
             Object.assign(proxy, createInitializedProxy(exec));
             if (exec.transaction) {
-                return exec.transaction((tx) => fn({
+                return exec.transaction((tx) => inTransactionCallback(() => fn({
                     execute: (s) => {
                         assertSchemaMutationAllowed(s);
                         return tx.execute(sanitize(s));
                     },
                     transaction: tx.transaction?.bind(tx),
-                }));
+                })));
             }
             if (exec.atomicBatch) {
                 throw new Error("This database supports atomic batches, not interactive transactions.");
             }
             const wrapper = createInitializedProxy(exec);
-            return explicitTransaction(wrapper.execute.bind(wrapper))(fn);
+            return explicitTransaction(wrapper.execute.bind(wrapper))((tx) => inTransactionCallback(() => fn(tx)));
         },
         async atomicBatch(statements) {
             for (const statement of statements) {

package/dist/deploy/build.js

@@ -28,6 +28,7 @@ import { AGENT_NATIVE_SOCIAL_IMAGE_ALT, AGENT_NATIVE_SOCIAL_IMAGE_CACHE_BUSTER,
 import { workspaceAppAudienceFromEnv, workspaceAppAudienceFromPackageJson, workspaceAppRouteAccessFromEnv, workspaceAppRouteAccessFromPackageJson, } from "../shared/workspace-app-audience.js";
 import { generateActionRegistryForProject } from "../vite/action-types-plugin.js";
 import { createAgentNativeConfigContext, loadResolvedAgentNativeConfig, readAgentNativeBuildConfigMarker, resolveFirstRunOnboardingBuildReplacement, resolveHarnessBuildReplacement, } from "../vite/agent-native-config-loader.js";
+import { boundedTaskSourcePlugin } from "../vite/bounded-task-plugin.js";
 import { createSentryServerSourceMapUploadPlugins } from "../vite/sentry-source-maps.js";
 import { cloneServerBundleForFunction, copyDir, pruneSsrIslandFromRewritingClone, readPackageManifest, SERVERLESS_BROWSER_RUNTIME_PACKAGES, } from "./function-bundle.js";
 import { collectImmutableAssetPaths, IMMUTABLE_ASSET_CACHE_CONTROL, IMMUTABLE_ASSET_CACHE_HEADERS, prefixAssetPath, } from "./immutable-assets.js";
@@ -4863,6 +4864,7 @@ export default bundle;
                     ? [createCloudflareModuleStubPlugin()]
                     : []),
                 createBrowserOnlyServerStubPlugin(),
+                boundedTaskSourcePlugin(),
                 ...sentryServerSourceMapPlugins,
                 ...(enterpriseAuthAdaptersEnabled
                     ? []

package/dist/extensions/actions.js

@@ -905,6 +905,7 @@ export function createExtensionActionEntries() {
                     items: result.rows ?? [],
                 };
             },
+            readOnly: true,
         },
         "delete-extension": {
             tool: {

package/dist/file-upload/actions/upload-image.d.ts

@@ -33,9 +33,9 @@ declare const _default: import("../../action.js").ActionDefinition<{
     idempotencyKey: string;
     deleted: boolean;
 } | {
+    id?: undefined;
     error: string;
     url?: undefined;
-    id?: undefined;
     provider?: undefined;
     configured?: undefined;
 } | {
@@ -45,8 +45,8 @@ declare const _default: import("../../action.js").ActionDefinition<{
     configured?: undefined;
     error?: undefined;
 } | {
-    url?: undefined;
     id?: undefined;
+    url?: undefined;
     provider?: undefined;
     error: string;
     configured: boolean;

package/dist/jobs/actions/manage-recurring-job.d.ts

@@ -11,9 +11,9 @@ declare const _default: import("../../action.js").ActionDefinition<{
     enabled?: undefined;
     nextRun?: undefined;
 } | {
-    deleted?: undefined;
     name: string;
     enabled: boolean;
     nextRun: string;
+    deleted?: undefined;
 }>;
 export default _default;

package/dist/mcp/agent-connected.js

@@ -3,6 +3,7 @@ import { CLIENTS } from "../cli/mcp-config-writers.js";
 import { mutateSetting } from "../settings/store.js";
 import { normalizeTrackingDimension } from "../shared/analytics-events.js";
 import { resolveMcpConnectHostId } from "../shared/mcp-connect-content.js";
+import { AGENT_NATIVE_ANALYTICS_PROVIDER } from "../tracking/providers.js";
 import { isTrackingSuppressed, listTrackingProviders, track, } from "../tracking/registry.js";
 import { detectVendorClient } from "./analytics.js";
 import { connectAppLabel, connectEnvironment } from "./connect-app-label.js";
@@ -21,7 +22,10 @@ export async function trackAgentConnected(input) {
     // Everything runs inside the try: the connection is already committed, so a
     // tracking or configuration failure must not turn it into a failed response.
     try {
-        if (listTrackingProviders().length === 0 ||
+        // The claim is permanent, so take it only when first-party analytics will
+        // receive the event; a vendor-only claim would hide every later reconnect
+        // from first-party analytics once it is enabled.
+        if (!listTrackingProviders().includes(AGENT_NATIVE_ANALYTICS_PROVIDER) ||
             isTrackingSuppressed(input.email))
             return "disabled";
         const app = connectionApp(input.origin, input.appId);

package/dist/mcp/build-server.js

@@ -132,8 +132,11 @@ function scopeToolSearchToAdvertised(advertised, advertisable) {
         },
     };
 }
-function withoutExternalOptOuts(actions) {
-    return Object.fromEntries(Object.entries(actions).filter(([, entry]) => isActionExposedToExternalAgents(entry)));
+// The operator's `denyActions` veto lives here with the action's own opt-out,
+// so no catalog branch, `tool-search` or `tools/call` path has to remember it.
+function withoutExternalOptOuts(config, actions) {
+    const denyNames = externalAgentDenySet(config);
+    return Object.fromEntries(Object.entries(actions).filter(([name, entry]) => !denyNames.has(name) && isActionExposedToExternalAgents(entry)));
 }
 /**
  * Converts an action's input schema the first time a request needs it, and
@@ -211,7 +214,7 @@ export function validateMcpDirectoryProfile(config, sourceActions = config.produ
     if (new Set(names).size !== names.length) {
         throw new McpDirectoryProfileValidationError("[agent-native] MCP directory catalog cannot contain duplicate tool names.");
     }
-    const actions = withoutExternalOptOuts(withoutToolSearch(sourceActions));
+    const actions = withoutExternalOptOuts(config, withoutToolSearch(sourceActions));
     const reserved = new Set([
         ...COMPACT_MCP_APP_CATALOG_BUILTINS,
         "ask-agent",
@@ -249,6 +252,20 @@ export function validateMcpDirectoryProfile(config, sourceActions = config.produ
         }
     }
     const profile = config.directoryProfile;
+    // Widget grants can name actions hidden from the agent surface, which the
+    // filter above never sees.
+    const denyNames = externalAgentDenySet(config);
+    const deniedWidgetAction = [
+        ...(profile?.widgetReadOnlyActions ?? []),
+        ...(profile?.widgetReadPublicActions ?? []),
+        ...(profile?.widgetReadPrivateActions ?? []),
+        ...(profile?.widgetReadAuthenticatedActions ?? []),
+        ...Object.keys(profile?.widgetReadActionArguments ?? {}),
+        ...Object.keys(profile?.widgetWriteActionArguments ?? {}),
+    ].find((name) => denyNames.has(name));
+    if (deniedWidgetAction) {
+        throw new McpDirectoryProfileValidationError(`[agent-native] MCP directory widget action "${deniedWidgetAction}" is listed in externalAgents.denyActions.`);
+    }
     const widgetActionNames = names.filter((name) => Boolean(actions[name]?.mcpApp?.resource));
     const widgetReadOnlyActions = new Set(profile?.widgetReadOnlyActions ?? []);
     const widgetReadPublicActions = new Set(profile?.widgetReadPublicActions ?? []);
@@ -1962,7 +1979,13 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
     const mergedActions = appCatalog || directoryCatalog
         ? baseActions
         : mergeBuiltinTools(config, baseActions, requestMeta);
-    const actions = withoutExternalOptOuts(flatCatalog ? withoutToolSearch(mergedActions) : mergedActions);
+    const actions = withoutExternalOptOuts(config, flatCatalog ? withoutToolSearch(mergedActions) : mergedActions);
+    // Tools built outside the action map (`ask-agent`, `create_embed_session`)
+    // never pass through the filter above, so tools/list and tools/call refuse a
+    // denied name too. `ask-agent` runs `ask_app`, so denying either removes it.
+    const deniedToolNames = externalAgentDenySet(config);
+    if (deniedToolNames.has("ask_app"))
+        deniedToolNames.add("ask-agent");
     const { isAdvertisable, advertisable, inputSchema: advertisedInputSchema, } = advertisedInputSchemas(actions);
     const scopeVisibleActions = Object.fromEntries(Object.entries(actions).filter(([, entry]) => isActionVisibleForOAuthScope(entry, effectiveIdentity?.oauthScopes)));
     const orgIdPromise = resolveMcpIdentityOrgId(effectiveIdentity);
@@ -1996,7 +2019,6 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
             ...declaredMcpToolNames(visibleActions),
             ...autoReadNames,
         ]);
-    const denyNames = externalAgentDenySet(config);
     const automaticConnectorPolicyActive = config.externalAgents?.authenticatedReads === "auto";
     const connectorCatalogActive = !appCatalog &&
         !fullCatalogRequested &&
@@ -2006,15 +2028,12 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
     const writesAreAskAppOnly = externalAgentWritesAreAskAppOnly(config);
     const preserveCompactActions = config.connectorCatalog === undefined && !automaticConnectorPolicyActive;
     const advertisedActionsBeforeToolSearchScope = appCatalog
-        ? Object.fromEntries(Object.entries(visibleActions).filter(([name]) => !denyNames.has(name)))
+        ? visibleActions
         : directoryCatalog
             ? Object.fromEntries(Object.entries(visibleActions).filter(([name, entry]) => connectorNames.has(name) &&
-                !denyNames.has(name) &&
                 (!writesAreAskAppOnly || isMcpReadOnlyTool(entry))))
             : connectorCatalogActive
                 ? Object.fromEntries(Object.entries(visibleActions).filter(([name, entry]) => {
-                    if (denyNames.has(name))
-                        return false;
                     if (COMPACT_MCP_APP_CATALOG_BUILTINS.has(name))
                         return true;
                     if (!connectorNames.has(name) &&
@@ -2326,7 +2345,7 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
                 });
             }
             tools.sort((a, b) => compareMcpCatalogValues(a.name, b.name));
-            return { tools };
+            return { tools: tools.filter((tool) => !deniedToolNames.has(tool.name)) };
         });
         trackMcpToolsList(analyticsContext(request, ctx), {
             toolNames: result.tools.map((tool) => tool.name),
@@ -2368,6 +2387,16 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
                     : undefined;
         const result = await withToolCallContext(async () => {
             const { name, arguments: args } = request.params;
+            if (deniedToolNames.has(name)) {
+                failure = {
+                    errorType: "unknown_tool",
+                    errorMessage: `Unknown tool: ${name}`,
+                };
+                return {
+                    content: [{ type: "text", text: `Unknown tool: ${name}` }],
+                    isError: true,
+                };
+            }
             try {
                 const { allowedActions } = await resolveServiceGrant();
                 assertServicePrincipalMayCall(allowedActions, name);

package/dist/mcp/screen-memory-stdio.d.ts

@@ -140,13 +140,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
             includeMicrophone?: undefined;
             includeSystemAudio?: undefined;
             requestId?: undefined;
+            count?: undefined;
         };
         required?: undefined;
     };
@@ -171,13 +171,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
             includeMicrophone?: undefined;
             includeSystemAudio?: undefined;
             requestId?: undefined;
+            count?: undefined;
         };
         required?: undefined;
     };
@@ -196,13 +196,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
             includeMicrophone?: undefined;
             includeSystemAudio?: undefined;
             requestId?: undefined;
+            count?: undefined;
         };
         required?: undefined;
     };
@@ -231,13 +231,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             };
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
             includeMicrophone?: undefined;
             includeSystemAudio?: undefined;
             requestId?: undefined;
+            count?: undefined;
         };
     };
 } | {
@@ -260,12 +260,12 @@ export declare function screenMemoryMcpToolDefinitions(): ({
                 description: string;
             };
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             includeMicrophone?: undefined;
             includeSystemAudio?: undefined;
             requestId?: undefined;
+            count?: undefined;
         };
     };
 } | {
@@ -317,7 +317,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt: {
                 type: string;
                 description: string;
@@ -337,6 +336,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
                 type: string;
             };
             requestId?: undefined;
+            count?: undefined;
         };
     };
 } | {
@@ -352,7 +352,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -361,6 +360,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             requestId: {
                 type: string;
             };
+            count?: undefined;
         };
     };
 })[];

package/dist/org/handlers.d.ts

@@ -73,9 +73,9 @@ export declare const setWorkspaceAppDefaultVisibilityHandler: import("h3").Event
 }>>;
 export declare const createOrgHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     success: boolean;
+    id?: undefined;
     name?: undefined;
     role?: undefined;
-    id?: undefined;
 } | {
     success?: undefined;
     id: string;

package/dist/org/index.d.ts

@@ -163,9 +163,9 @@ export declare const getMyOrgHandler: import("h3").EventHandlerWithFetch<import(
 }>>;
 export declare const createOrgHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     success: boolean;
+    id?: undefined;
     name?: undefined;
     role?: undefined;
-    id?: undefined;
 } | {
     success?: undefined;
     id: string;

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -77,6 +77,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
 }, z.core.$strip>>, {
     message?: undefined;
     id?: undefined;
+    deleted?: undefined;
+    found?: undefined;
     providers: {
         id: string;
         label: string;
@@ -88,46 +90,44 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     }[];
     count: number;
     provider?: undefined;
-    found?: undefined;
-    deleted?: undefined;
     registered?: undefined;
     label?: undefined;
 } | {
     message?: undefined;
     id?: undefined;
-    providers?: undefined;
     count?: undefined;
+    deleted?: undefined;
+    providers?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
-    deleted?: undefined;
     registered?: undefined;
     label?: undefined;
 } | {
     message?: undefined;
-    providers?: undefined;
     count?: undefined;
+    deleted?: undefined;
+    providers?: undefined;
     provider?: undefined;
     found: boolean;
     id: string;
-    deleted?: undefined;
     registered?: undefined;
     label?: undefined;
 } | {
     message?: undefined;
-    providers?: undefined;
     count?: undefined;
-    provider?: undefined;
     found?: undefined;
+    providers?: undefined;
+    provider?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
 } | {
-    providers?: undefined;
     count?: undefined;
-    provider?: undefined;
-    found?: undefined;
     deleted?: undefined;
+    found?: undefined;
+    providers?: undefined;
+    provider?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -316,9 +316,11 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
-        provider?: undefined;
         id?: undefined;
+        provider?: undefined;
+        message?: undefined;
         deleted?: undefined;
+        found?: undefined;
         providers: {
             id: string;
             label: string;
@@ -329,46 +331,44 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
-        found?: undefined;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
         id?: undefined;
+        count?: undefined;
+        message?: undefined;
         deleted?: undefined;
         providers?: undefined;
-        count?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
         provider?: undefined;
+        count?: undefined;
+        message?: undefined;
         deleted?: undefined;
         providers?: undefined;
-        count?: undefined;
         found: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
         provider?: undefined;
-        providers?: undefined;
         count?: undefined;
+        message?: undefined;
         found?: undefined;
+        providers?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
         provider?: undefined;
-        deleted?: undefined;
-        providers?: undefined;
         count?: undefined;
+        deleted?: undefined;
         found?: undefined;
+        providers?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/resources/handlers.d.ts

@@ -39,8 +39,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
     error: string;
 }>;
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/server/agent-engine-api-key-route.d.ts

@@ -67,12 +67,12 @@ export declare function createAgentEngineApiKeyHandler(): import("h3").EventHand
     code: any;
 } | {
     errorCode?: undefined;
+    error?: undefined;
     code?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
     defaultModel?: import("./agent-engine-default-model-route.js").SavedKeyDefaultModelOutcome;
-    error?: undefined;
 }>>;
 export {};

package/dist/server/agent-engine-ollama-models-route.d.ts

@@ -1,9 +1,9 @@
 export declare function createAgentEngineOllamaModelsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    ok?: undefined;
     models?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     models: string[];
+    error?: undefined;
 }>>;

package/dist/server/collab-plugin.d.ts

@@ -1,3 +1,4 @@
+import { LiveCopyError, type LiveCopyBinding } from "../collab/live-copy.js";
 import { type DbExec } from "../db/client.js";
 type NitroPluginDef = (nitroApp: any) => void | Promise<void>;
 export type CollabResourceIdResolver = (docId: string) => string | null | Promise<string | null>;
@@ -22,7 +23,14 @@ export interface CollabPluginOptions {
     idColumn?: string;
     autoSeed?: boolean;
     resolveSourceIdFromCollabDocumentId?: (docId: string) => string;
-    onContentSync?: (docId: string, text: string) => Promise<void>;
+    /**
+     * Documents this binding covers are live copies: each update commits with
+     * its derived text, and the text, JSON and search-replace routes refuse
+     * them. Requires `autoSeed: false`; seed with `seedLiveCopy`. Passing the
+     * binding here also imports it at server start, so the refusal holds from
+     * the first request rather than from whenever an action first loads it.
+     */
+    liveCopy?: LiveCopyBinding;
     contentType?: "text" | "json";
     jsonColumn?: string;
     access?: CollabAccess;
@@ -48,5 +56,6 @@ export declare function createCollabSourceSeeder(options: {
     seed: (docId: string, source: string, client?: DbExec) => Promise<void>;
     withLock?: (docId: string, run: (client?: DbExec) => Promise<void>) => Promise<void>;
 }): (docId: string) => Promise<void>;
+export declare function liveCopyErrorStatus(error: LiveCopyError): number;
 export declare function createCollabPlugin(options?: CollabPluginOptions): NitroPluginDef;
 export {};