@agent-native/core 0.211.0 → 0.212.0-nightly-20261021010049

package/README.md

@@ -280,7 +280,7 @@ Explore the [full app gallery](https://agent-native.com/apps?utm_source=npm&utm_
 
 ## Contributing
 
-Working on this repository itself? See [DEVELOPMENT.md](./DEVELOPMENT.md) for local setup, workspace structure, and guard scripts.
+Want to send a change back? Start with [CONTRIBUTING.md](./CONTRIBUTING.md). [DEVELOPMENT.md](./DEVELOPMENT.md) covers local setup, workspace structure, and guard scripts.
 
 ## License
 

package/dist/app-config/analytics.d.ts

@@ -3,4 +3,5 @@ export declare const analyticsConfig: z.ZodObject<{
     authSessionReplay: z.ZodDefault<z.ZodBoolean>;
     agentNativePublicKey: z.ZodOptional<z.ZodString>;
     agentNativeEndpoint: z.ZodDefault<z.ZodString>;
+    headScriptSrc: z.ZodOptional<z.ZodURL>;
 }, z.core.$strip>;

package/dist/app-config/analytics.js

@@ -27,4 +27,11 @@ export const analyticsConfig = z.object({
         ],
         doc: "Endpoint for first-party Agent-Native Analytics events.",
     }),
+    headScriptSrc: z
+        .url({ protocol: /^https$/ })
+        .optional()
+        .meta({
+        env: "AGENT_NATIVE_HEAD_SCRIPT_SRC",
+        doc: "HTTPS URL of a script loaded with `defer` on every server-rendered page, for deployment-specific tooling such as support or feedback widgets.",
+    }),
 });

package/dist/app-config/schema.d.ts

@@ -44,6 +44,7 @@ export declare const appConfigSchema: z.ZodObject<{
         authSessionReplay: z.ZodDefault<z.ZodBoolean>;
         agentNativePublicKey: z.ZodOptional<z.ZodString>;
         agentNativeEndpoint: z.ZodDefault<z.ZodString>;
+        headScriptSrc: z.ZodOptional<z.ZodURL>;
     }, z.core.$strip>>;
     app: z.ZodPrefault<z.ZodObject<{
         id: z.ZodOptional<z.ZodString>;

package/dist/chat-threads/store.d.ts

@@ -58,8 +58,24 @@ export interface ChatThread {
     orgId: string | null;
     visibility: "private" | "org" | "public";
 }
+/**
+ * Which of the caller's lists a thread belongs to. `mine` is ownership alone,
+ * so a chat the caller owns stays in it however widely it is shared; `shared`
+ * is accessible-but-owned-by-someone-else.
+ */
+export type ChatThreadOwnership = "all" | "mine" | "shared";
+export declare const CHAT_THREAD_OWNERSHIPS: readonly ChatThreadOwnership[];
+export declare function isChatThreadOwnership(value: unknown): value is ChatThreadOwnership;
+/**
+ * Why the caller can see a thread. A direct per-user grant outranks
+ * organization access when both apply, so revoking the organization grant never
+ * looks like it removed access the person was given by name.
+ */
+export type ChatThreadAccessBasis = "owner" | "direct" | "organization";
 export interface ChatThreadSummary {
     id: string;
+    ownerEmail?: string;
+    accessBasis?: ChatThreadAccessBasis;
     title: string;
     preview: string;
     messageCount: number;
@@ -72,6 +88,11 @@ export interface ChatThreadSummary {
     orgId: string | null;
     visibility: "private" | "org" | "public";
 }
+/** List and search rows always include the caller's ownership and access basis. */
+export interface ChatThreadListRow extends ChatThreadSummary {
+    ownerEmail: string;
+    accessBasis: ChatThreadAccessBasis;
+}
 export interface ForkThreadSourceSnapshot {
     threadData: string;
     title?: string;
@@ -148,8 +169,10 @@ export interface ListThreadsOptions {
     includeExternal?: boolean;
     /** Current app id used by the local-only view. */
     sourceAppId?: string | null;
+    /** Defaults to `all`. Narrowed in SQL, so LIMIT/OFFSET page within the list. */
+    ownership?: ChatThreadOwnership;
 }
-export declare function listThreads(ownerEmail: string, options?: ListThreadsOptions | number, legacyOffset?: number): Promise<ChatThreadSummary[]>;
+export declare function listThreads(ownerEmail: string, options?: ListThreadsOptions | number, legacyOffset?: number): Promise<ChatThreadListRow[]>;
 export declare function searchThreads(ownerEmail: string, query: string, limit?: number, options?: {
     scope?: {
         type: string;
@@ -162,7 +185,10 @@ export declare function searchThreads(ownerEmail: string, query: string, limit?:
     includeExternal?: boolean;
     /** Current app id used by the local-only view. */
     sourceAppId?: string | null;
-}): Promise<ChatThreadSummary[]>;
+    /** See `ListThreadsOptions.ownership`. */
+    ownership?: ChatThreadOwnership;
+    offset?: number;
+}): Promise<ChatThreadListRow[]>;
 /**
  * Scope a thread should carry after a run inside a resource: adopt when it has
  * none, otherwise keep what it has. An unscoped thread reads as general, and a

package/dist/chat-threads/store.js

@@ -12,7 +12,7 @@ import { fromMigrationEntries } from "../db/versioned-store-migrations.js";
 import { widenIntColumnsToBigInt } from "../db/widen-columns.js";
 import { getRequestOrgId } from "../server/request-context.js";
 import { assertNoInlineImageBytes, stripInlineBytes, } from "../shared/inline-bytes.js";
-import { resolveAccess } from "../sharing/access.js";
+import { hasCurrentOrgMembership, resolveAccess, } from "../sharing/access.js";
 import { registerShareableResource } from "../sharing/registry.js";
 import { roleSatisfies } from "../sharing/schema.js";
 import { emitChatThreadChange } from "./emitter.js";
@@ -226,6 +226,14 @@ export function threadScopeMismatch(existing, incoming) {
         return isAppOwnedChatScope(existing);
     return existing.type !== incoming.type || existing.id !== incoming.id;
 }
+export const CHAT_THREAD_OWNERSHIPS = [
+    "all",
+    "mine",
+    "shared",
+];
+export function isChatThreadOwnership(value) {
+    return CHAT_THREAD_OWNERSHIPS.includes(value);
+}
 function readScope(r) {
     const type = r.scope_type;
     const id = r.scope_id;
@@ -629,6 +637,12 @@ function rowToThread(r) {
         visibility: readVisibility(r.visibility),
     };
 }
+function readAccessBasis(value) {
+    if (value === "owner" || value === "direct" || value === "organization") {
+        return value;
+    }
+    throw new Error(`Unexpected chat thread access basis: ${String(value)}`);
+}
 function rowToSummary(r) {
     // The summary path never loads `thread_data`; the count comes from the
     // dedicated `message_count` column maintained on write. Empty threads are
@@ -638,6 +652,8 @@ function rowToSummary(r) {
         return null;
     return {
         id: r.id,
+        ownerEmail: r.owner_email,
+        accessBasis: readAccessBasis(r.access_basis),
         title: r.title,
         preview: r.preview,
         messageCount,
@@ -712,7 +728,7 @@ const THREAD_COLUMNS = `id, owner_email, title, preview, thread_data, message_co
 // from the blob anymore — preview and message_count are dedicated columns
 // (message_count is maintained on write). The detail path (`THREAD_COLUMNS` /
 // `getThread`) still returns the full blob.
-const SUMMARY_COLUMNS = `id, title, preview, message_count, created_at, updated_at, scope_type, scope_id, scope_label, pinned_at, archived_at, source_platform, source_app_id, source_url, org_id, visibility`;
+const SUMMARY_COLUMNS = `id, owner_email, title, preview, message_count, created_at, updated_at, scope_type, scope_id, scope_label, pinned_at, archived_at, source_platform, source_app_id, source_url, org_id, visibility`;
 export function registerChatThreadsShareable() {
     registerShareableResource({
         type: "chat_thread",
@@ -756,7 +772,7 @@ export async function resolveThreadsAccess(userEmail, threadIds, ctx = {}) {
     if (!userEmail || ids.length === 0)
         return threads;
     await ensureTable();
-    const access = chatThreadAccessSql(userEmail, ctx.orgId);
+    const access = await chatThreadAccessSql(userEmail, ctx.orgId);
     const client = getDbExec();
     const placeholders = ids.map(() => "?").join(", ");
     const { rows } = await client.execute({
@@ -896,14 +912,15 @@ export async function forkThread(sourceId, ownerEmail, opts) {
         visibility: "private",
     };
 }
-function chatThreadAccessSql(userEmail, orgId) {
-    const normalizedEmail = userEmail.trim().toLowerCase();
+async function chatThreadAccessSql(userEmail, orgId) {
+    const normalizedEmail = normalizeAccessEmail(userEmail);
     const clauses = [
         `LOWER(owner_email) = ?`,
         `EXISTS (SELECT 1 FROM chat_thread_shares WHERE chat_thread_shares.resource_id = chat_threads.id AND chat_thread_shares.principal_type = 'user' AND LOWER(chat_thread_shares.principal_id) = ?)`,
     ];
     const args = [normalizedEmail, normalizedEmail];
-    if (orgId) {
+    if (orgId &&
+        (await hasCurrentOrgMembership({ getDb: getChatThreadsDb }, orgId, normalizedEmail, { userEmail: normalizedEmail, orgId }))) {
         clauses.push(`(visibility = 'org' AND org_id = ?)`);
         args.push(orgId);
         clauses.push(`EXISTS (SELECT 1 FROM chat_thread_shares WHERE chat_thread_shares.resource_id = chat_threads.id AND chat_thread_shares.principal_type = 'org' AND chat_thread_shares.principal_id = ?)`);
@@ -911,6 +928,33 @@ function chatThreadAccessSql(userEmail, orgId) {
     }
     return { sql: `(${clauses.join(" OR ")})`, args };
 }
+function normalizeAccessEmail(userEmail) {
+    return userEmail.trim().toLowerCase();
+}
+/**
+ * Summary projection plus the caller's access basis, derived from the same
+ * owner and per-user-share comparisons the ACL uses. Anything that is neither
+ * owned nor directly granted reached the caller through the organization.
+ */
+function chatThreadSummarySelect(userEmail) {
+    const normalizedEmail = normalizeAccessEmail(userEmail);
+    return {
+        sql: `${SUMMARY_COLUMNS}, CASE WHEN LOWER(owner_email) = ? THEN 'owner' WHEN EXISTS (SELECT 1 FROM chat_thread_shares WHERE chat_thread_shares.resource_id = chat_threads.id AND chat_thread_shares.principal_type = 'user' AND LOWER(chat_thread_shares.principal_id) = ?) THEN 'direct' ELSE 'organization' END AS access_basis`,
+        args: [normalizedEmail, normalizedEmail],
+    };
+}
+function chatThreadOwnershipSql(userEmail, ownership) {
+    if (ownership === undefined || ownership === "all")
+        return null;
+    const normalizedEmail = normalizeAccessEmail(userEmail);
+    if (ownership === "mine") {
+        return { sql: `LOWER(owner_email) = ?`, args: [normalizedEmail] };
+    }
+    if (ownership === "shared") {
+        return { sql: `LOWER(owner_email) <> ?`, args: [normalizedEmail] };
+    }
+    throw new Error(`Unknown chat thread ownership: ${String(ownership)}`);
+}
 export async function listThreads(ownerEmail, options = {}, legacyOffset) {
     await ensureTable();
     // Back-compat shim: previous signature was (owner, limit, offset).
@@ -926,9 +970,15 @@ export async function listThreads(ownerEmail, options = {}, legacyOffset) {
     // column, so nothing here may filter on `thread_data`. Matching that blob
     // detoasts the whole message history for every scanned row — before LIMIT
     // applies — which is what made this list cost seconds instead of milliseconds.
-    const access = chatThreadAccessSql(ownerEmail, opts.orgId ?? getRequestOrgId());
+    const access = await chatThreadAccessSql(ownerEmail, opts.orgId === undefined ? getRequestOrgId() : opts.orgId);
+    const ownershipFilter = chatThreadOwnershipSql(ownerEmail, opts.ownership);
+    const select = chatThreadSummarySelect(ownerEmail);
     const filters = [access.sql, `message_count > 0`];
-    const args = [...access.args];
+    const args = [...select.args, ...access.args];
+    if (ownershipFilter) {
+        filters.push(ownershipFilter.sql);
+        args.push(...ownershipFilter.args);
+    }
     if (!opts.includeArchived) {
         filters.push(`archived_at IS NULL`);
     }
@@ -948,7 +998,7 @@ export async function listThreads(ownerEmail, options = {}, legacyOffset) {
     }
     args.push(limit, offset);
     const { rows } = await client.execute({
-        sql: `SELECT ${SUMMARY_COLUMNS} FROM chat_threads WHERE ${filters.join(" AND ")} ORDER BY CASE WHEN pinned_at IS NULL THEN 1 ELSE 0 END, pinned_at DESC, updated_at DESC LIMIT ? OFFSET ?`,
+        sql: `SELECT ${select.sql} FROM chat_threads WHERE ${filters.join(" AND ")} ORDER BY CASE WHEN pinned_at IS NULL THEN 1 ELSE 0 END, pinned_at DESC, updated_at DESC, id ASC LIMIT ? OFFSET ?`,
         args,
     });
     return rows
@@ -965,13 +1015,25 @@ export async function searchThreads(ownerEmail, query, limit = 50, options = {})
     // The count-guard uses the maintained `message_count` column (same as
     // listThreads). The content match still scans `thread_data` — search
     // legitimately needs to look inside message history.
-    const access = chatThreadAccessSql(ownerEmail, options.orgId ?? getRequestOrgId());
+    const access = await chatThreadAccessSql(ownerEmail, options.orgId === undefined ? getRequestOrgId() : options.orgId);
+    const ownershipFilter = chatThreadOwnershipSql(ownerEmail, options.ownership);
+    const select = chatThreadSummarySelect(ownerEmail);
     const filters = [
         access.sql,
         `message_count > 0`,
         `(title LIKE ? ESCAPE '!' OR preview LIKE ? ESCAPE '!' OR thread_data LIKE ? ESCAPE '!')`,
     ];
-    const args = [...access.args, pattern, pattern, pattern];
+    const args = [
+        ...select.args,
+        ...access.args,
+        pattern,
+        pattern,
+        pattern,
+    ];
+    if (ownershipFilter) {
+        filters.push(ownershipFilter.sql);
+        args.push(...ownershipFilter.args);
+    }
     if (!options.includeArchived) {
         filters.push(`archived_at IS NULL`);
     }
@@ -986,9 +1048,9 @@ export async function searchThreads(ownerEmail, query, limit = 50, options = {})
         filters.push(`scope_type = ? AND scope_id = ?`);
         args.push(options.scope.type, options.scope.id);
     }
-    args.push(limit);
+    args.push(limit, options.offset ?? 0);
     const { rows } = await client.execute({
-        sql: `SELECT ${SUMMARY_COLUMNS} FROM chat_threads WHERE ${filters.join(" AND ")} ORDER BY CASE WHEN pinned_at IS NULL THEN 1 ELSE 0 END, pinned_at DESC, updated_at DESC LIMIT ?`,
+        sql: `SELECT ${select.sql} FROM chat_threads WHERE ${filters.join(" AND ")} ORDER BY CASE WHEN pinned_at IS NULL THEN 1 ELSE 0 END, pinned_at DESC, updated_at DESC, id ASC LIMIT ? OFFSET ?`,
         args,
     });
     return rows

package/dist/cli/template-baseline.js

@@ -10,6 +10,7 @@ const GIT_IDENTITY = {
     GIT_COMMITTER_NAME: "agent-native",
     GIT_COMMITTER_EMAIL: "noreply@agent-native.com",
 };
+const KEEP_LINE_ENDINGS = ["-c", "core.autocrlf=false", "-c", "core.eol=lf"];
 export function resolveBaselineStore(appDir) {
     const resolved = realpath(path.resolve(appDir));
     const gitDir = findGitDir(resolved);
@@ -67,10 +68,15 @@ export function writeBaseline(store, sourceDir, slot, meta) {
         copyPlainTree(sourceDir, target);
         const indexFile = path.join(stage, "index");
         const env = { ...process.env, ...GIT_IDENTITY, GIT_INDEX_FILE: indexFile };
-        git(store, ["--work-tree", stageRoot, "add", "-A", "--force", "."], {
-            cwd: stageRoot,
-            env,
-        });
+        git(store, [
+            ...KEEP_LINE_ENDINGS,
+            "--work-tree",
+            stageRoot,
+            "add",
+            "-A",
+            "--force",
+            ".",
+        ], { cwd: stageRoot, env });
         const tree = git(store, ["write-tree"], { cwd: stageRoot, env }).trim();
         const ref = baselineRefName(store, slot);
         const parent = revParse(store, ref);
@@ -142,7 +148,14 @@ export function materializeBaseline(store, slot) {
             return null;
         }
         const tarPath = path.join(out, ".baseline.tar");
-        const args = ["archive", "--format=tar", "-o", tarPath, ref];
+        const args = [
+            ...KEEP_LINE_ENDINGS,
+            "archive",
+            "--format=tar",
+            "-o",
+            tarPath,
+            ref,
+        ];
         if (store.prefix)
             args.push("--", store.prefix);
         git(store, args);

package/dist/cli/template-sync.js

@@ -149,12 +149,13 @@ export function mergeTemplateTrees(appDir, baseDir, theirsDir, options = {}) {
         manual: [],
         keptLocal: [],
     };
-    const paths = new Set([
+    const paths = Array.from(new Set([
         ...listMergeableFiles(baseDir),
         ...listMergeableFiles(theirsDir),
         ...listMergeableFiles(appDir),
-    ]);
-    for (const rel of Array.from(paths).sort()) {
+    ])).sort();
+    const normalized = crlfNormalizedPaths(appDir, paths);
+    for (const rel of paths) {
         const oursPath = path.join(appDir, rel);
         if (isLocalSymlink(oursPath)) {
             result.manual.push(`${rel} (local symlink)`);
@@ -162,7 +163,9 @@ export function mergeTemplateTrees(appDir, baseDir, theirsDir, options = {}) {
         }
         const base = readFileOrNull(path.join(baseDir, rel));
         const theirs = readFileOrNull(path.join(theirsDir, rel));
-        const ours = readFileOrNull(oursPath);
+        const app = readAppFile(oursPath, normalized.has(rel) ? (base ?? theirs) : null);
+        const ours = app.content;
+        const writeOurs = (content) => writeFile(oursPath, app.crlf ? withCrlf(content) : content);
         if (equalBuffers(base, theirs))
             continue;
         if (theirs === null) {
@@ -193,7 +196,7 @@ export function mergeTemplateTrees(appDir, baseDir, theirsDir, options = {}) {
             continue;
         if (equalBuffers(ours, base)) {
             if (!options.dryRun)
-                writeFile(oursPath, theirs);
+                writeOurs(theirs);
             result.updated.push(rel);
             continue;
         }
@@ -206,8 +209,9 @@ export function mergeTemplateTrees(appDir, baseDir, theirsDir, options = {}) {
             result.manual.push(`${rel} (merge failed)`);
             continue;
         }
-        if (!options.dryRun)
-            writeFile(oursPath, merged.content);
+        if (!options.dryRun && !equalBuffers(merged.content, ours)) {
+            writeOurs(merged.content);
+        }
         if (merged.conflicts > 0)
             result.conflicted.push(rel);
         else
@@ -475,19 +479,21 @@ async function statusCommand(target, flags, io) {
         try {
             const local = countLocallyModified(target.appDir, baseDir);
             lines.push(`  locally modified files: ${local}`);
-            const targetRef = flags.to ?? target.provenance.templateRef ?? latest;
-            const theirs = await materializeForTarget(target, flags, targetRef);
             try {
-                const changed = countUpstreamChanged(baseDir, theirs.dir);
-                lines.push(`  upstream-changed files: ${changed} (at ${theirs.ref})`);
+                const targetRef = flags.to ?? target.provenance.templateRef ?? latest;
+                const theirs = await materializeForTarget(target, flags, targetRef);
+                try {
+                    const changed = countUpstreamChanged(baseDir, theirs.dir);
+                    lines.push(`  upstream-changed files: ${changed} (at ${theirs.ref})`);
+                }
+                finally {
+                    fs.rmSync(theirs.dir, { recursive: true, force: true });
+                }
             }
-            finally {
-                fs.rmSync(theirs.dir, { recursive: true, force: true });
+            catch (err) {
+                lines.push(`  upstream-changed files: unavailable (${err instanceof Error ? err.message.split("\n")[0] : String(err)})`);
             }
         }
-        catch (err) {
-            lines.push(`  upstream-changed files: unavailable (${err instanceof Error ? err.message.split("\n")[0] : String(err)})`);
-        }
         finally {
             fs.rmSync(baseDir, { recursive: true, force: true });
         }
@@ -648,13 +654,19 @@ function backfillProvenance(target, template, materialized) {
         shape: target.shape,
     };
     pkg["agent-native"] = agentNative;
-    fs.writeFileSync(pkgPath, `${JSON.stringify(pkg, null, 2)}\n`);
+    const json = Buffer.from(`${JSON.stringify(pkg, null, 2)}\n`);
+    const app = readAppFile(pkgPath, json);
+    if (equalBuffers(app.content, json))
+        return;
+    fs.writeFileSync(pkgPath, app.crlf ? withCrlf(json) : json);
 }
 function countLocallyModified(appDir, baseDir) {
     let count = 0;
-    for (const rel of listMergeableFiles(baseDir)) {
+    const paths = Array.from(listMergeableFiles(baseDir));
+    const normalized = crlfNormalizedPaths(appDir, paths);
+    for (const rel of paths) {
         const base = readFileOrNull(path.join(baseDir, rel));
-        const ours = readFileOrNull(path.join(appDir, rel));
+        const ours = readAppFile(path.join(appDir, rel), normalized.has(rel) ? base : null).content;
         if (!equalBuffers(base, ours))
             count++;
     }
@@ -809,6 +821,75 @@ function equalBuffers(a, b) {
         return a === b;
     return a.equals(b);
 }
+// CRLF that git normalizes on add is not a local edit.
+function readAppFile(file, template) {
+    const content = readFileOrNull(file);
+    if (content === null ||
+        template === null ||
+        template.includes(0x0d) ||
+        !isTextBuffer(content) ||
+        !isTextBuffer(template)) {
+        return { content, crlf: false };
+    }
+    const text = content.toString("utf-8");
+    if (!text.includes("\r\n") || /\r(?!\n)/.test(text)) {
+        return { content, crlf: false };
+    }
+    return {
+        content: Buffer.from(text.replace(/\r\n/g, "\n")),
+        crlf: !/(^|[^\r])\n/.test(text),
+    };
+}
+// Paths whose CRLF git turns into LF on add; anywhere else a CR is content.
+function crlfNormalizedPaths(appDir, rels) {
+    const normalized = new Set();
+    if (!resolveBaselineStore(appDir).gitDir)
+        return normalized;
+    const res = spawnSync("git", ["check-attr", "-z", "--stdin", "text", "crlf", "eol"], {
+        cwd: appDir,
+        input: rels.join("\0"),
+        encoding: "utf-8",
+        maxBuffer: 64 * 1024 * 1024,
+    });
+    if (res.status !== 0) {
+        throw new Error(`git check-attr failed in ${appDir}: ${res.stderr || res.error?.message}`);
+    }
+    const config = spawnSync("git", ["config", "--get", "core.autocrlf"], {
+        cwd: appDir,
+        encoding: "utf-8",
+    });
+    if (config.status !== 0 && config.status !== 1) {
+        throw new Error(`git config core.autocrlf failed in ${appDir}: ${config.stderr || config.error?.message}`);
+    }
+    const byConfig = ["true", "yes", "on", "1", "input"].includes(config.stdout.trim().toLowerCase());
+    const attrs = new Map();
+    const fields = res.stdout.split("\0");
+    for (let i = 0; i + 2 < fields.length; i += 3) {
+        attrs.set(fields[i], {
+            ...attrs.get(fields[i]),
+            [fields[i + 1]]: fields[i + 2],
+        });
+    }
+    for (const [rel, { text, crlf, eol }] of attrs) {
+        const byAttrs = conversion(text) ??
+            conversion(crlf) ??
+            (eol === "lf" || eol === "crlf" ? true : null);
+        if (byAttrs ?? byConfig)
+            normalized.add(rel);
+    }
+    return normalized;
+}
+// A text or crlf attribute as git reads it: convert, keep bytes, or no say.
+function conversion(value) {
+    if (value === "set" || value === "auto" || value === "input")
+        return true;
+    return value === "unset" ? false : null;
+}
+function withCrlf(content) {
+    if (!isTextBuffer(content))
+        return content;
+    return Buffer.from(content.toString("utf-8").replace(/\r?\n/g, "\r\n"));
+}
 function isTextBuffer(buf) {
     if (buf === null)
         return true;

package/dist/client/agent-chat/index.d.ts

@@ -17,7 +17,8 @@ export { AGENT_NATIVE_MCP_APP_HOST_MESSAGE_TYPES, getMcpAppHostContext, initiali
 export { buildDynamicAgentSuggestions, dedupeSuggestions, mergeAgentSuggestions, normalizeAgentDynamicSuggestionsConfig, useAgentDynamicSuggestions, useAgentDynamicSuggestionsResult, type AgentDynamicSuggestionContext, type AgentDynamicSuggestionsConfig, type AgentDynamicSuggestionsOption, } from "../dynamic-suggestions.js";
 export { clearChatStorage } from "../chat/storage.js";
 export { isAssistantChatHistoryVersion, coerceAssistantChatHistoryDate, type AssistantChatHistoryDate, type AssistantChatHistoryVersion, } from "../chat/assistant-chat-history-version.js";
-export { useChatThreads, type ChatThreadScope, type ChatThreadSnapshot, type ChatThreadSummary, type ChatThreadData, type ChatThreadShareLink, type ChatThreadShareState, type UseChatThreadsOptions, } from "../use-chat-threads.js";
+export { ChatThreadListConfigError, useChatThreadList, type UseChatThreadListOptions, type UseChatThreadListResult, } from "../use-chat-thread-list.js";
+export { ChatThreadListError, fetchChatThreadListPage, notifyChatThreadsUpdated, useChatThreads, type ChatThreadAccessBasis, type ChatThreadListPage, type ChatThreadListRow, type ChatThreadListPageRequest, type ChatThreadOwnership, type ChatThreadVisibility, type ChatThreadScope, type ChatThreadSnapshot, type ChatThreadSummary, type ChatThreadData, type ChatThreadShareLink, type ChatThreadShareState, type UseChatThreadsOptions, } from "../use-chat-threads.js";
 export { type AgentCallProgress, type ContentPart, } from "../sse-event-processor.js";
 export { useRunStuckDetection, useAbortRun, type RunStuckState, type UseRunStuckDetectionOptions, } from "../use-run-stuck-detection.js";
 export { AGENT_CHAT_HOME_HANDOFF_TTL_MS, AGENT_CHAT_VIEW_TRANSITION_CLASS, AGENT_CHAT_VIEW_TRANSITION_NAME, consumeAgentChatHomeHandoff, getAgentChatViewTransitionStyle, isAgentChatHomeHandoffActive, markAgentChatHomeHandoff, navigateWithAgentChatViewTransition, startAgentChatViewTransition, supportsAgentChatViewTransition, type AgentChatHomeHandoffOptions, type AgentChatViewTransition, type AgentChatViewTransitionOptions, } from "../chat-view-transition.js";

package/dist/client/agent-chat/index.js

@@ -17,7 +17,8 @@ export { AGENT_NATIVE_MCP_APP_HOST_MESSAGE_TYPES, getMcpAppHostContext, initiali
 export { buildDynamicAgentSuggestions, dedupeSuggestions, mergeAgentSuggestions, normalizeAgentDynamicSuggestionsConfig, useAgentDynamicSuggestions, useAgentDynamicSuggestionsResult, } from "../dynamic-suggestions.js";
 export { clearChatStorage } from "../chat/storage.js";
 export { isAssistantChatHistoryVersion, coerceAssistantChatHistoryDate, } from "../chat/assistant-chat-history-version.js";
-export { useChatThreads, } from "../use-chat-threads.js";
+export { ChatThreadListConfigError, useChatThreadList, } from "../use-chat-thread-list.js";
+export { ChatThreadListError, fetchChatThreadListPage, notifyChatThreadsUpdated, useChatThreads, } from "../use-chat-threads.js";
 export { useRunStuckDetection, useAbortRun, } from "../use-run-stuck-detection.js";
 export { AGENT_CHAT_HOME_HANDOFF_TTL_MS, AGENT_CHAT_VIEW_TRANSITION_CLASS, AGENT_CHAT_VIEW_TRANSITION_NAME, consumeAgentChatHomeHandoff, getAgentChatViewTransitionStyle, isAgentChatHomeHandoffActive, markAgentChatHomeHandoff, navigateWithAgentChatViewTransition, startAgentChatViewTransition, supportsAgentChatViewTransition, } from "../chat-view-transition.js";
 export { useAgentChatHomeHandoff, useAgentChatHomeHandoffLinks, } from "../use-agent-chat-home-handoff.js";

package/dist/client/chat/agentkit-protocol.js

@@ -1442,6 +1442,9 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
             runId: input.runId,
             threadId: input.threadId,
             session,
+            ...(state?.status !== "missing" && state?.startMessageId
+                ? { startMessageId: state.startMessageId }
+                : {}),
             turn: runAuthority
                 ? turn
                 : {
@@ -1520,6 +1523,9 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
             runId,
             threadId,
             session,
+            ...(start.messageId === undefined
+                ? {}
+                : { startMessageId: start.messageId }),
             turn,
             events: [],
             firstRetainedSequence: 1,
@@ -1550,6 +1556,15 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
             ? findRun(threadId, runId)
             : undefined;
         if (existingRun) {
+            if (start.messageId === undefined ||
+                existingRun.startMessageId !== start.messageId) {
+                await closeDiscardedTurnEvents(turn);
+                throw new Error(`Duplicate AgentKit run id: ${runId}`);
+            }
+            if (turn.id !== undefined && existingRun.turn.id === turn.id) {
+                await closeDiscardedTurnEvents(turn);
+                return existingRun.runId;
+            }
             // A duplicate queued submission is answered with the run that already
             // took it, replayed from its first event. This adapter reads that run
             // already, so the replay is drained rather than indexed a second time.
@@ -3125,6 +3140,7 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
                 });
                 return openStartedRun(input.threadId, session, turn, turnMetadata, undefined, {
                     attachReplayedRun: true,
+                    messageId: latestUserMessage?.id,
                 });
             };
             if (!queuePromotionKey) {
@@ -3427,6 +3443,9 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
                     runId: nextRunId,
                     threadId: input.threadId,
                     session: run.session,
+                    ...(run.startMessageId === undefined
+                        ? {}
+                        : { startMessageId: run.startMessageId }),
                     turn: nextTurn,
                     events: [],
                     firstRetainedSequence: 1,
@@ -3541,7 +3560,8 @@ export function createAgentKitProtocolAdapter(runtime, options = {}) {
                 ...(attachments.length ? { attachments } : {}),
                 abortSignal: readers.signal,
             });
-            const runId = await openStartedRun(input.threadId, session, turn, undefined, { continuedRunId: input.runId });
+            const startMessageId = local?.startMessageId ?? state.startMessageId;
+            const runId = await openStartedRun(input.threadId, session, turn, undefined, { continuedRunId: input.runId }, startMessageId === undefined ? {} : { messageId: startMessageId });
             return { runId, capabilities };
         };
     }

package/dist/client/chat/run-outcome.d.ts

@@ -65,6 +65,7 @@ export type ServerRunState = {
     readonly status: "running" | "completed" | "truncated" | "errored" | "aborted";
     readonly runId: string;
     readonly turnId?: string;
+    readonly startMessageId?: string;
     /** Server clock, epoch ms. */
     readonly startedAt?: number;
     readonly dispatchMode?: string;

package/dist/client/chat/runtime.js

@@ -3459,10 +3459,15 @@ export function createAgentNativeChatRuntime(options = {}) {
             throw unreadable(`Agent chat run state is unreadable (run ${String(runId)}, status ${String(status)}).`, response.status);
         }
         const pendingConnectionRequestId = value?.pendingConnectionRequestId;
+        const startMessageId = value?.startMessageId;
         if (input.includePendingConnectionRequest &&
             (!value || !Object.hasOwn(value, "pendingConnectionRequestId"))) {
             throw unreadable("Agent chat run state is unreadable (pending connection request was not returned).", response.status);
         }
+        if (startMessageId !== undefined &&
+            (typeof startMessageId !== "string" || !startMessageId.trim())) {
+            throw unreadable("Agent chat run state is unreadable (start message ID is invalid).", response.status);
+        }
         if (pendingConnectionRequestId !== undefined &&
             pendingConnectionRequestId !== null &&
             (typeof pendingConnectionRequestId !== "string" ||
@@ -3475,6 +3480,7 @@ export function createAgentNativeChatRuntime(options = {}) {
             ...(typeof value?.turnId === "string" && value.turnId
                 ? { turnId: value.turnId }
                 : {}),
+            ...(typeof startMessageId === "string" ? { startMessageId } : {}),
             ...(typeof value?.startedAt === "number" &&
                 Number.isFinite(value.startedAt)
                 ? { startedAt: value.startedAt }

package/dist/client/sharing/index.d.ts

@@ -3,4 +3,5 @@ export { useAccessRequestDecisions, useAccessRequestReview, useResourceAccessReq
 export { useResourceAccessGate, type ResourceAccessGateController, type ResourceAccessGateOptions, type ResourceAccessGateRequest, type ResourceAccessRequestFailure, type ResourceAccessGateRole, type ResourceAccessGateState, type ResourceAccessGateStatus, } from "./useResourceAccessGate.js";
 export { useShareButtonController, type ShareButtonController, type ShareButtonControllerOptions, type ShareButtonOrgMember, type ShareButtonOrgMemberSearch, type ShareButtonRole, type ShareButtonShare, type ShareButtonSharesResponse, type ShareButtonVisibility, } from "./useShareButtonController.js";
 export { useShareDialogController, type ResourceShare, type ResourceSharesResponse, type ShareDialogController, type ShareDialogControllerOptions, type ShareDialogPerson, type ShareDialogTab, type ShareOption, type ShareRole, type ShareVisibility, } from "./useShareDialogController.js";
-export { createShareQueryKey, createShareQueryParams, extractShareErrorMessage, fetchOrgMemberPage, mergeOrgMembers, normalizeOrgMembers, optimisticallyUpdateShareCache, rollbackShareCache, useShareMutationGuard, useShareMutations, useShareOrgMemberSearch, useShareQuery, type OrgMemberPage, type ShareOrgMember, type ShareOrgMemberSearchResult, type ShareQueryKey, type ShareQueryParams, } from "./share-controller-helpers.js";
+export { ShareVisibilityNotSavedError, useShareVisibilityTransition, visibilityNeedsConfirmation, type ShareVisibilityTransition, type ShareVisibilityTransitionOptions, type ShareVisibilityTransitionRequest, } from "./useShareVisibilityTransition.js";
+export { createShareQueryKey, createShareQueryParams, extractShareErrorMessage, fetchOrgMemberPage, mergeOrgMembers, normalizeOrgMembers, notifyShareChanged, optimisticallyUpdateShareCache, rollbackShareCache, useShareMutationGuard, useShareMutations, useShareOrgMemberSearch, useShareQuery, type OrgMemberPage, type ShareOrgMember, type ShareOrgMemberSearchResult, type ShareQueryKey, type ShareQueryParams, } from "./share-controller-helpers.js";

package/dist/client/sharing/index.js

@@ -3,4 +3,5 @@ export { useAccessRequestDecisions, useAccessRequestReview, useResourceAccessReq
 export { useResourceAccessGate, } from "./useResourceAccessGate.js";
 export { useShareButtonController, } from "./useShareButtonController.js";
 export { useShareDialogController, } from "./useShareDialogController.js";
-export { createShareQueryKey, createShareQueryParams, extractShareErrorMessage, fetchOrgMemberPage, mergeOrgMembers, normalizeOrgMembers, optimisticallyUpdateShareCache, rollbackShareCache, useShareMutationGuard, useShareMutations, useShareOrgMemberSearch, useShareQuery, } from "./share-controller-helpers.js";
+export { ShareVisibilityNotSavedError, useShareVisibilityTransition, visibilityNeedsConfirmation, } from "./useShareVisibilityTransition.js";
+export { createShareQueryKey, createShareQueryParams, extractShareErrorMessage, fetchOrgMemberPage, mergeOrgMembers, normalizeOrgMembers, notifyShareChanged, optimisticallyUpdateShareCache, rollbackShareCache, useShareMutationGuard, useShareMutations, useShareOrgMemberSearch, useShareQuery, } from "./share-controller-helpers.js";