@agent-native/core 0.211.0 → 0.212.0-nightly-20261021010049

package/dist/db/client.js

@@ -1720,12 +1720,32 @@ export function annotateMissingTable(err, sql) {
     return err;
 }
 const scopedDbExec = new AsyncLocalStorage();
+const transactionCallbacks = new AsyncLocalStorage();
 export function withDbExec(exec, run) {
     return scopedDbExec.run(guardSchemaMutations(exec), run);
 }
 export function getScopedDbExec() {
     return scopedDbExec.getStore();
 }
+/**
+ * True while a `getDbExec().transaction()` callback runs. That callback leaves
+ * `getScopedDbExec()` unset, so code that must not run inside a caller's
+ * transaction asks this as well.
+ */
+export function insideDbTransactionCallback() {
+    return transactionCallbacks.getStore()?.active === true;
+}
+async function inTransactionCallback(run) {
+    const callback = { active: true };
+    try {
+        return await transactionCallbacks.run(callback, run);
+    }
+    finally {
+        // Work the callback started and left running inherits this store; once
+        // the callback settles, that work is no longer inside the transaction.
+        callback.active = false;
+    }
+}
 export function getDbExec() {
     const scoped = scopedDbExec.getStore();
     if (scoped)
@@ -1784,13 +1804,13 @@ export function getDbExec() {
                     if (!currentExec.transaction) {
                         throw new Error("This database does not support transactions.");
                     }
-                    return currentExec.transaction((tx) => fn({
+                    return currentExec.transaction((tx) => inTransactionCallback(() => fn({
                         execute: (s) => {
                             assertSchemaMutationAllowed(s);
                             return tx.execute(sanitize(s));
                         },
                         transaction: tx.transaction?.bind(tx),
-                    }));
+                    })));
                 }
                 : undefined,
         };
@@ -1806,19 +1826,19 @@ export function getDbExec() {
             const exec = await initializeProxy();
             Object.assign(proxy, createInitializedProxy(exec));
             if (exec.transaction) {
-                return exec.transaction((tx) => fn({
+                return exec.transaction((tx) => inTransactionCallback(() => fn({
                     execute: (s) => {
                         assertSchemaMutationAllowed(s);
                         return tx.execute(sanitize(s));
                     },
                     transaction: tx.transaction?.bind(tx),
-                }));
+                })));
             }
             if (exec.atomicBatch) {
                 throw new Error("This database supports atomic batches, not interactive transactions.");
             }
             const wrapper = createInitializedProxy(exec);
-            return explicitTransaction(wrapper.execute.bind(wrapper))(fn);
+            return explicitTransaction(wrapper.execute.bind(wrapper))((tx) => inTransactionCallback(() => fn(tx)));
         },
         async atomicBatch(statements) {
             for (const statement of statements) {

package/dist/deploy/build.js

@@ -28,6 +28,7 @@ import { AGENT_NATIVE_SOCIAL_IMAGE_ALT, AGENT_NATIVE_SOCIAL_IMAGE_CACHE_BUSTER,
 import { workspaceAppAudienceFromEnv, workspaceAppAudienceFromPackageJson, workspaceAppRouteAccessFromEnv, workspaceAppRouteAccessFromPackageJson, } from "../shared/workspace-app-audience.js";
 import { generateActionRegistryForProject } from "../vite/action-types-plugin.js";
 import { createAgentNativeConfigContext, loadResolvedAgentNativeConfig, readAgentNativeBuildConfigMarker, resolveFirstRunOnboardingBuildReplacement, resolveHarnessBuildReplacement, } from "../vite/agent-native-config-loader.js";
+import { boundedTaskSourcePlugin } from "../vite/bounded-task-plugin.js";
 import { createSentryServerSourceMapUploadPlugins } from "../vite/sentry-source-maps.js";
 import { cloneServerBundleForFunction, copyDir, pruneSsrIslandFromRewritingClone, readPackageManifest, SERVERLESS_BROWSER_RUNTIME_PACKAGES, } from "./function-bundle.js";
 import { collectImmutableAssetPaths, IMMUTABLE_ASSET_CACHE_CONTROL, IMMUTABLE_ASSET_CACHE_HEADERS, prefixAssetPath, } from "./immutable-assets.js";
@@ -4863,6 +4864,7 @@ export default bundle;
                     ? [createCloudflareModuleStubPlugin()]
                     : []),
                 createBrowserOnlyServerStubPlugin(),
+                boundedTaskSourcePlugin(),
                 ...sentryServerSourceMapPlugins,
                 ...(enterpriseAuthAdaptersEnabled
                     ? []

package/dist/extensions/actions.js

@@ -905,6 +905,7 @@ export function createExtensionActionEntries() {
                     items: result.rows ?? [],
                 };
             },
+            readOnly: true,
         },
         "delete-extension": {
             tool: {

package/dist/jobs/actions/manage-recurring-job.d.ts

@@ -11,9 +11,9 @@ declare const _default: import("../../action.js").ActionDefinition<{
     enabled?: undefined;
     nextRun?: undefined;
 } | {
-    deleted?: undefined;
     name: string;
     enabled: boolean;
     nextRun: string;
+    deleted?: undefined;
 }>;
 export default _default;

package/dist/mcp/agent-connected.js

@@ -3,6 +3,7 @@ import { CLIENTS } from "../cli/mcp-config-writers.js";
 import { mutateSetting } from "../settings/store.js";
 import { normalizeTrackingDimension } from "../shared/analytics-events.js";
 import { resolveMcpConnectHostId } from "../shared/mcp-connect-content.js";
+import { AGENT_NATIVE_ANALYTICS_PROVIDER } from "../tracking/providers.js";
 import { isTrackingSuppressed, listTrackingProviders, track, } from "../tracking/registry.js";
 import { detectVendorClient } from "./analytics.js";
 import { connectAppLabel, connectEnvironment } from "./connect-app-label.js";
@@ -21,7 +22,10 @@ export async function trackAgentConnected(input) {
     // Everything runs inside the try: the connection is already committed, so a
     // tracking or configuration failure must not turn it into a failed response.
     try {
-        if (listTrackingProviders().length === 0 ||
+        // The claim is permanent, so take it only when first-party analytics will
+        // receive the event; a vendor-only claim would hide every later reconnect
+        // from first-party analytics once it is enabled.
+        if (!listTrackingProviders().includes(AGENT_NATIVE_ANALYTICS_PROVIDER) ||
             isTrackingSuppressed(input.email))
             return "disabled";
         const app = connectionApp(input.origin, input.appId);

package/dist/mcp/build-server.js

@@ -132,8 +132,11 @@ function scopeToolSearchToAdvertised(advertised, advertisable) {
         },
     };
 }
-function withoutExternalOptOuts(actions) {
-    return Object.fromEntries(Object.entries(actions).filter(([, entry]) => isActionExposedToExternalAgents(entry)));
+// The operator's `denyActions` veto lives here with the action's own opt-out,
+// so no catalog branch, `tool-search` or `tools/call` path has to remember it.
+function withoutExternalOptOuts(config, actions) {
+    const denyNames = externalAgentDenySet(config);
+    return Object.fromEntries(Object.entries(actions).filter(([name, entry]) => !denyNames.has(name) && isActionExposedToExternalAgents(entry)));
 }
 /**
  * Converts an action's input schema the first time a request needs it, and
@@ -211,7 +214,7 @@ export function validateMcpDirectoryProfile(config, sourceActions = config.produ
     if (new Set(names).size !== names.length) {
         throw new McpDirectoryProfileValidationError("[agent-native] MCP directory catalog cannot contain duplicate tool names.");
     }
-    const actions = withoutExternalOptOuts(withoutToolSearch(sourceActions));
+    const actions = withoutExternalOptOuts(config, withoutToolSearch(sourceActions));
     const reserved = new Set([
         ...COMPACT_MCP_APP_CATALOG_BUILTINS,
         "ask-agent",
@@ -249,6 +252,20 @@ export function validateMcpDirectoryProfile(config, sourceActions = config.produ
         }
     }
     const profile = config.directoryProfile;
+    // Widget grants can name actions hidden from the agent surface, which the
+    // filter above never sees.
+    const denyNames = externalAgentDenySet(config);
+    const deniedWidgetAction = [
+        ...(profile?.widgetReadOnlyActions ?? []),
+        ...(profile?.widgetReadPublicActions ?? []),
+        ...(profile?.widgetReadPrivateActions ?? []),
+        ...(profile?.widgetReadAuthenticatedActions ?? []),
+        ...Object.keys(profile?.widgetReadActionArguments ?? {}),
+        ...Object.keys(profile?.widgetWriteActionArguments ?? {}),
+    ].find((name) => denyNames.has(name));
+    if (deniedWidgetAction) {
+        throw new McpDirectoryProfileValidationError(`[agent-native] MCP directory widget action "${deniedWidgetAction}" is listed in externalAgents.denyActions.`);
+    }
     const widgetActionNames = names.filter((name) => Boolean(actions[name]?.mcpApp?.resource));
     const widgetReadOnlyActions = new Set(profile?.widgetReadOnlyActions ?? []);
     const widgetReadPublicActions = new Set(profile?.widgetReadPublicActions ?? []);
@@ -1962,7 +1979,13 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
     const mergedActions = appCatalog || directoryCatalog
         ? baseActions
         : mergeBuiltinTools(config, baseActions, requestMeta);
-    const actions = withoutExternalOptOuts(flatCatalog ? withoutToolSearch(mergedActions) : mergedActions);
+    const actions = withoutExternalOptOuts(config, flatCatalog ? withoutToolSearch(mergedActions) : mergedActions);
+    // Tools built outside the action map (`ask-agent`, `create_embed_session`)
+    // never pass through the filter above, so tools/list and tools/call refuse a
+    // denied name too. `ask-agent` runs `ask_app`, so denying either removes it.
+    const deniedToolNames = externalAgentDenySet(config);
+    if (deniedToolNames.has("ask_app"))
+        deniedToolNames.add("ask-agent");
     const { isAdvertisable, advertisable, inputSchema: advertisedInputSchema, } = advertisedInputSchemas(actions);
     const scopeVisibleActions = Object.fromEntries(Object.entries(actions).filter(([, entry]) => isActionVisibleForOAuthScope(entry, effectiveIdentity?.oauthScopes)));
     const orgIdPromise = resolveMcpIdentityOrgId(effectiveIdentity);
@@ -1996,7 +2019,6 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
             ...declaredMcpToolNames(visibleActions),
             ...autoReadNames,
         ]);
-    const denyNames = externalAgentDenySet(config);
     const automaticConnectorPolicyActive = config.externalAgents?.authenticatedReads === "auto";
     const connectorCatalogActive = !appCatalog &&
         !fullCatalogRequested &&
@@ -2006,15 +2028,12 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
     const writesAreAskAppOnly = externalAgentWritesAreAskAppOnly(config);
     const preserveCompactActions = config.connectorCatalog === undefined && !automaticConnectorPolicyActive;
     const advertisedActionsBeforeToolSearchScope = appCatalog
-        ? Object.fromEntries(Object.entries(visibleActions).filter(([name]) => !denyNames.has(name)))
+        ? visibleActions
         : directoryCatalog
             ? Object.fromEntries(Object.entries(visibleActions).filter(([name, entry]) => connectorNames.has(name) &&
-                !denyNames.has(name) &&
                 (!writesAreAskAppOnly || isMcpReadOnlyTool(entry))))
             : connectorCatalogActive
                 ? Object.fromEntries(Object.entries(visibleActions).filter(([name, entry]) => {
-                    if (denyNames.has(name))
-                        return false;
                     if (COMPACT_MCP_APP_CATALOG_BUILTINS.has(name))
                         return true;
                     if (!connectorNames.has(name) &&
@@ -2326,7 +2345,7 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
                 });
             }
             tools.sort((a, b) => compareMcpCatalogValues(a.name, b.name));
-            return { tools };
+            return { tools: tools.filter((tool) => !deniedToolNames.has(tool.name)) };
         });
         trackMcpToolsList(analyticsContext(request, ctx), {
             toolNames: result.tools.map((tool) => tool.name),
@@ -2368,6 +2387,16 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
                     : undefined;
         const result = await withToolCallContext(async () => {
             const { name, arguments: args } = request.params;
+            if (deniedToolNames.has(name)) {
+                failure = {
+                    errorType: "unknown_tool",
+                    errorMessage: `Unknown tool: ${name}`,
+                };
+                return {
+                    content: [{ type: "text", text: `Unknown tool: ${name}` }],
+                    isError: true,
+                };
+            }
             try {
                 const { allowedActions } = await resolveServiceGrant();
                 assertServicePrincipalMayCall(allowedActions, name);

package/dist/notifications/routes.d.ts

@@ -16,6 +16,6 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/observability/routes.d.ts

@@ -64,6 +64,6 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     message?: undefined;
     summary?: undefined;
     spans?: undefined;
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;

package/dist/org/index.d.ts

@@ -162,10 +162,10 @@ export declare const getMyOrgHandler: import("h3").EventHandlerWithFetch<import(
     soloDeploymentAdmin: boolean;
 }>>;
 export declare const createOrgHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    success: boolean;
     name?: undefined;
-    role?: undefined;
+    success: boolean;
     id?: undefined;
+    role?: undefined;
 } | {
     success?: undefined;
     id: string;

package/dist/progress/routes.d.ts

@@ -2,6 +2,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,8 +75,11 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    message?: undefined;
     id?: undefined;
+    provider?: undefined;
+    message?: undefined;
+    deleted?: undefined;
+    found?: undefined;
     providers: {
         id: string;
         label: string;
@@ -87,47 +90,44 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         updatedAt: number;
     }[];
     count: number;
-    provider?: undefined;
-    found?: undefined;
-    deleted?: undefined;
     registered?: undefined;
     label?: undefined;
 } | {
-    message?: undefined;
     id?: undefined;
-    providers?: undefined;
     count?: undefined;
+    message?: undefined;
+    deleted?: undefined;
+    providers?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
-    deleted?: undefined;
     registered?: undefined;
     label?: undefined;
 } | {
+    provider?: undefined;
+    count?: undefined;
     message?: undefined;
+    deleted?: undefined;
     providers?: undefined;
-    count?: undefined;
-    provider?: undefined;
     found: boolean;
     id: string;
-    deleted?: undefined;
     registered?: undefined;
     label?: undefined;
 } | {
-    message?: undefined;
-    providers?: undefined;
-    count?: undefined;
     provider?: undefined;
+    count?: undefined;
+    message?: undefined;
     found?: undefined;
+    providers?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
 } | {
-    providers?: undefined;
-    count?: undefined;
     provider?: undefined;
-    found?: undefined;
+    count?: undefined;
     deleted?: undefined;
+    found?: undefined;
+    providers?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -316,9 +316,9 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
-        provider?: undefined;
         id?: undefined;
         deleted?: undefined;
+        found?: undefined;
         providers: {
             id: string;
             label: string;
@@ -329,46 +329,46 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
-        found?: undefined;
+        provider?: undefined;
         registered?: undefined;
         label?: undefined;
         message?: undefined;
     } | {
         id?: undefined;
+        count?: undefined;
         deleted?: undefined;
         providers?: undefined;
-        count?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
         registered?: undefined;
         label?: undefined;
         message?: undefined;
     } | {
-        provider?: undefined;
+        count?: undefined;
         deleted?: undefined;
         providers?: undefined;
-        count?: undefined;
+        provider?: undefined;
         found: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
         message?: undefined;
     } | {
-        provider?: undefined;
-        providers?: undefined;
         count?: undefined;
         found?: undefined;
+        providers?: undefined;
+        provider?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
         message?: undefined;
     } | {
-        provider?: undefined;
-        deleted?: undefined;
-        providers?: undefined;
         count?: undefined;
+        deleted?: undefined;
         found?: undefined;
+        providers?: undefined;
+        provider?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/server/agent-chat-plugin.js

@@ -33,7 +33,7 @@ import { attachToolSearch } from "../agent/tool-search.js";
 import { getAppConfig } from "../app-config/index.js";
 import { readAppStateForCurrentTab } from "../application-state/script-helpers.js";
 import { runChatThreadDataMigrations } from "../chat-threads/migrations.js";
-import { InlineAttachmentDataNotPersistableError, QueuedSubmissionAdmissionError, adoptThreadScopeIfUnscoped, blockQueuedSubmissionReceipt, clearQueuedSubmissionInterruptRun, createThread, forkThread, getThread, getQueuedSubmissionReceipt, listQueuedSubmissionReceipts, markQueuedSubmissionSubmitted, queuedSubmissionBehaviorMatches, recordQueuedSubmissionInterruptRun, renewQueuedSubmissionInterruptClaim, registerChatThreadsShareable, retryQueuedSubmissionReceipt, resolveRunThreadScope, resolveThreadAccess, listThreads, searchThreads, renameThread, createThreadShareLink, getThreadByShareToken, getThreadShareState, revokeThreadShareLink, setThreadArchived, setThreadPinned, setThreadScope, updateThreadData, withThreadDataLock, deleteThread, mutateThreadQueuedMessages, setThreadSourceIfMissing, isAppOwnedChatScope, threadScopeMismatch, } from "../chat-threads/store.js";
+import { InlineAttachmentDataNotPersistableError, QueuedSubmissionAdmissionError, adoptThreadScopeIfUnscoped, blockQueuedSubmissionReceipt, clearQueuedSubmissionInterruptRun, createThread, forkThread, getThread, getQueuedSubmissionReceipt, listQueuedSubmissionReceipts, markQueuedSubmissionSubmitted, queuedSubmissionBehaviorMatches, recordQueuedSubmissionInterruptRun, renewQueuedSubmissionInterruptClaim, registerChatThreadsShareable, retryQueuedSubmissionReceipt, resolveRunThreadScope, resolveThreadAccess, listThreads, searchThreads, renameThread, createThreadShareLink, getThreadByShareToken, getThreadShareState, revokeThreadShareLink, setThreadArchived, setThreadPinned, setThreadScope, updateThreadData, withThreadDataLock, deleteThread, mutateThreadQueuedMessages, setThreadSourceIfMissing, isAppOwnedChatScope, isChatThreadOwnership, threadScopeMismatch, } from "../chat-threads/store.js";
 import { isCheckpointRestorePath } from "../checkpoints/route-match.js";
 import { createDbAdminAgentTools } from "../db-admin/agent-tools.js";
 import { isTransientDatabaseError } from "../db/client.js";
@@ -5396,10 +5396,41 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                     const pendingConnectionRequestId = includePendingConnectionRequest
                         ? await getRunPendingConnectionRequestId(run.id)
                         : undefined;
+                    const record = (value) => value && typeof value === "object" && !Array.isArray(value)
+                        ? value
+                        : undefined;
+                    const customMetadata = (message) => record(record(record(message)?.metadata)?.custom);
+                    const thread = await getThread(threadId);
+                    const threadData = record(JSON.parse(thread?.threadData || "{}"));
+                    const messages = Array.isArray(threadData?.messages)
+                        ? threadData.messages
+                        : [];
+                    const matchingTurnMessages = run.turnId
+                        ? messages.filter((message) => {
+                            const messageRecord = record(message);
+                            const custom = customMetadata(message);
+                            return (messageRecord?.role === "user" &&
+                                custom?.submittedTurnId === run.turnId);
+                        })
+                        : [];
+                    const matchingMessages = matchingTurnMessages.length > 0
+                        ? matchingTurnMessages
+                        : messages.filter((message) => {
+                            const messageRecord = record(message);
+                            const custom = customMetadata(message);
+                            return (messageRecord?.role === "user" &&
+                                custom?.submittedRunId === run.id);
+                        });
+                    const startMessageId = matchingMessages.length === 1
+                        ? customMetadata(matchingMessages[0])?.agentKitMessageId
+                        : undefined;
                     return {
                         runId: run.id,
                         threadId: run.threadId,
                         turnId: run.turnId ?? null,
+                        ...(typeof startMessageId === "string" && startMessageId.trim()
+                            ? { startMessageId }
+                            : {}),
                         startedAt: run.startedAt,
                         status: run.status,
                         heartbeatAt: run.heartbeatAt,
@@ -5630,6 +5661,19 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                 const label = q.scopeLabel ? String(q.scopeLabel) : undefined;
                 return label ? { type, id, label } : { type, id };
             };
+            // Absent -> the default; present but not a whole number -> null, so the
+            // caller can answer 400 instead of silently paging from somewhere else.
+            const parseNonNegativeInteger = (raw, fallback) => {
+                if (raw === undefined)
+                    return fallback;
+                if (typeof raw !== "string")
+                    return null;
+                const text = raw.trim();
+                if (!/^\d+$/.test(text))
+                    return null;
+                const value = Number(text);
+                return Number.isSafeInteger(value) ? value : null;
+            };
             const parseScopeFromBody = (raw) => {
                 if (raw == null)
                     return null;
@@ -6303,31 +6347,50 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                 // ── Thread list: GET/POST /threads ──
                 if (method === "GET") {
                     const query = getQuery(event);
-                    const limit = Math.min(parseInt(String(query.limit ?? "50"), 10) || 50, 200);
+                    const requestedLimit = parseNonNegativeInteger(query.limit, 50);
+                    const requestedOffset = parseNonNegativeInteger(query.offset, 0);
+                    if (requestedLimit === null ||
+                        requestedLimit < 1 ||
+                        requestedOffset === null) {
+                        setResponseStatus(event, 400);
+                        return { error: "Invalid limit or offset" };
+                    }
+                    const limit = Math.min(requestedLimit, 200);
                     const q = query.q ? String(query.q).trim() : "";
                     const scope = parseScopeFromQuery(query);
                     const unscopedOnly = String(query.unscoped ?? "") === "1";
                     const includeExternal = String(query.includeExternal ?? "") === "1";
-                    if (q) {
-                        const threads = await searchThreads(owner, q, limit, {
+                    const ownership = query.ownership === undefined ? "all" : query.ownership;
+                    if (!isChatThreadOwnership(ownership)) {
+                        setResponseStatus(event, 400);
+                        return { error: "Invalid ownership filter" };
+                    }
+                    const offset = requestedOffset;
+                    // Fetch one extra row so the page can say whether another exists
+                    // without a count query.
+                    const fetched = q
+                        ? await searchThreads(owner, q, limit + 1, {
                             scope: scope ?? undefined,
                             orgId,
                             includeExternal,
                             sourceAppId: options?.appId ?? null,
+                            ownership,
+                            offset,
+                        })
+                        : await listThreads(owner, {
+                            limit: limit + 1,
+                            offset,
+                            scope: scope ?? undefined,
+                            unscopedOnly,
+                            orgId,
+                            includeExternal,
+                            sourceAppId: options?.appId ?? null,
+                            ownership,
                         });
-                        return { threads };
-                    }
-                    const offset = parseInt(String(query.offset ?? "0"), 10) || 0;
-                    const threads = await listThreads(owner, {
-                        limit,
-                        offset,
-                        scope: scope ?? undefined,
-                        unscopedOnly,
-                        orgId,
-                        includeExternal,
-                        sourceAppId: options?.appId ?? null,
-                    });
-                    return { threads };
+                    return {
+                        threads: fetched.slice(0, limit),
+                        hasMore: fetched.length > limit,
+                    };
                 }
                 if (method === "POST") {
                     const body = await readBody(event);

package/dist/server/agent-engine-api-key-route.d.ts

@@ -66,6 +66,7 @@ export declare function createAgentEngineApiKeyHandler(): import("h3").EventHand
     error: any;
     code: any;
 } | {
+    error?: undefined;
     errorCode?: undefined;
     code?: undefined;
     ok: boolean;
@@ -73,6 +74,5 @@ export declare function createAgentEngineApiKeyHandler(): import("h3").EventHand
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
     defaultModel?: import("./agent-engine-default-model-route.js").SavedKeyDefaultModelOutcome;
-    error?: undefined;
 }>>;
 export {};

package/dist/server/agent-engine-default-model-route.d.ts

@@ -8,8 +8,8 @@ export declare const AGENT_ENGINE_API_KEY_ACTION_NAME = "agent-engine-api-key";
  * resolveEngine's credential detection.
  */
 export declare function createAgentEngineDisconnectHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
     scope?: undefined;
 } | {
     ok: boolean;

package/dist/server/analytics.d.ts

@@ -1,4 +1,5 @@
 export declare function getAgentNativeAnalyticsConfigScript(): string | null;
+export declare function getHeadScriptTag(): string | null;
 export declare function getGaInlineConfigScriptBody(options?: {
     dataLayerName?: string;
     sendPageView?: boolean;

package/dist/server/analytics.js

@@ -54,6 +54,19 @@ export function getAgentNativeAnalyticsConfigScript() {
         ");</script>",
     ].join("");
 }
+function escapeHtmlAttribute(value) {
+    return value
+        .replace(/&/g, "&amp;")
+        .replace(/"/g, "&quot;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;");
+}
+export function getHeadScriptTag() {
+    const src = getAppConfig().analytics.headScriptSrc;
+    if (!src)
+        return null;
+    return `<script src="${escapeHtmlAttribute(src)}" defer data-agent-native-head-script></script>`;
+}
 export function getGaInlineConfigScriptBody(options) {
     const id = getGaMeasurementId();
     if (!id)
@@ -111,6 +124,7 @@ function getGtmBodyFallback(containerId) {
 }
 function getAnalyticsInjection() {
     const agentNativeAnalytics = getAgentNativeAnalyticsConfigScript();
+    const headScript = getHeadScriptTag();
     const containerId = getGtmContainerId();
     if (containerId) {
         return {
@@ -118,6 +132,7 @@ function getAnalyticsInjection() {
                 agentNativeAnalytics,
                 getGtmHeadScript(containerId),
                 getGtmGaFallbackScript(),
+                headScript,
             ]
                 .filter(Boolean)
                 .join(""),
@@ -125,7 +140,9 @@ function getAnalyticsInjection() {
         };
     }
     const gaScript = getGaScript();
-    const head = [agentNativeAnalytics, gaScript].filter(Boolean).join("");
+    const head = [agentNativeAnalytics, gaScript, headScript]
+        .filter(Boolean)
+        .join("");
     return head ? { head, body: "" } : null;
 }
 const HEAD_CLOSE_PATTERN = /<\/head>/i;