@agent-native/core 0.214.0 → 0.217.0

package/dist/observability/routes.d.ts

@@ -27,43 +27,43 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
+    ok?: undefined;
     error: string;
     message: string;
     summary?: undefined;
     spans?: undefined;
-    ok?: undefined;
 } | {
+    ok?: undefined;
     message?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     error?: undefined;
-    ok?: undefined;
 } | {
+    ok?: undefined;
     message?: undefined;
     summary?: undefined;
     spans?: undefined;
     traceMissing: true;
     id: string;
     error?: undefined;
-    ok?: undefined;
 } | {
+    ok?: undefined;
     message?: undefined;
     summary?: undefined;
     spans?: undefined;
     traceMissing?: undefined;
     id: string;
     error?: undefined;
-    ok?: undefined;
 } | {
+    ok?: undefined;
     message?: undefined;
     summary?: undefined;
     spans?: undefined;
     error: any;
-    ok?: undefined;
 } | {
     message?: undefined;
     summary?: undefined;
     spans?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/onboarding/index.d.ts

@@ -1,5 +1,6 @@
 export { registerOnboardingStep, listOnboardingSteps } from "./registry.js";
-export type { OnboardingStep, OnboardingMethod, OnboardingMethodBadge, OnboardingFormField, OnboardingStepStatus, OnboardingCapability, OnboardingAppProfile, WorkspaceBuilderIncludedServiceId, WorkspaceBuilderOnlyServiceId, WorkspaceProviderServiceId, WorkspaceServiceId, } from "./types.js";
+export { DEFAULT_ONBOARDING_CHECKLIST } from "./types.js";
+export type { OnboardingStep, OnboardingMethod, OnboardingMethodBadge, OnboardingFormField, OnboardingStepStatus, OnboardingResolveContext, OnboardingCapability, OnboardingAppProfile, WorkspaceBuilderIncludedServiceId, WorkspaceBuilderOnlyServiceId, WorkspaceProviderServiceId, WorkspaceServiceId, } from "./types.js";
 export { WORKSPACE_SERVICES, workspaceServiceForCapability, type WorkspaceService, type WorkspaceServiceKind, } from "./workspace-services.js";
 export { getOnboardingAppProfile, resolveOnboardingAppId, } from "./app-profile.js";
 export { getOnboardingAppProfileForId } from "./app-profile-data.js";

package/dist/onboarding/index.js

@@ -1,4 +1,5 @@
 export { registerOnboardingStep, listOnboardingSteps } from "./registry.js";
+export { DEFAULT_ONBOARDING_CHECKLIST } from "./types.js";
 export { WORKSPACE_SERVICES, workspaceServiceForCapability, } from "./workspace-services.js";
 export { getOnboardingAppProfile, resolveOnboardingAppId, } from "./app-profile.js";
 export { getOnboardingAppProfileForId } from "./app-profile-data.js";

package/dist/onboarding/plugin.js

@@ -11,11 +11,10 @@ import { getOnboardingRoleCategory, getOnboardingRoleTextForAnalytics, onboardin
 import { getUserProfile, updateUserOnboardingRole, } from "../user-profile/store.js";
 import { getOnboardingAppProfile } from "./app-profile.js";
 import { registerDefaultOnboardingSteps } from "./default-steps.js";
-import { listOnboardingSteps } from "./registry.js";
 import { SHARED_ONBOARDING_COOKIE, SHARED_ONBOARDING_COOKIE_MAX_AGE, decodeSharedOnboardingCookie, encodeSharedOnboardingCookie, hashOnboardingEmail, } from "./shared-cookie.js";
+import { getOnboardingStepStatuses, isValidOnboardingChecklistName, onboardingDismissedKey, onboardingOverrideKey, readOnboardingDismissed, } from "./status.js";
+import { DEFAULT_ONBOARDING_CHECKLIST, } from "./types.js";
 const ONBOARDING_PREFIX = "/_agent-native/onboarding";
-const OVERRIDE_KEY_PREFIX = "onboarding:override:";
-const DISMISSED_KEY = "onboarding:dismissed";
 async function resolveOnboardingContext(event) {
     const { getSession } = await import("../server/auth.js");
     const session = await getSession(event);
@@ -27,35 +26,15 @@ async function resolveOnboardingContext(event) {
         orgId: session.orgId ?? null,
     };
 }
-async function hasOverride(sessionId, stepId) {
-    const val = await appStateGet(sessionId, `${OVERRIDE_KEY_PREFIX}${stepId}`);
-    return !!(val && val.complete);
-}
-async function serializeSteps(context, options = {}) {
-    const steps = listOnboardingSteps();
-    const serialized = await Promise.all(steps.map(async (step) => {
-        if (!options.preview && step.isAvailable) {
-            if (!(await step.isAvailable(context)))
-                return null;
-        }
-        let complete = false;
-        if (!options.preview) {
-            complete = (await step.isComplete(context)) === true;
-            if (!complete) {
-                complete = await hasOverride(context.sessionId, step.id);
-            }
-        }
-        return {
-            id: step.id,
-            title: step.title,
-            description: step.description,
-            order: step.order,
-            required: step.required ?? false,
-            complete,
-            methods: step.methods,
-        };
-    }));
-    return serialized.filter((step) => step !== null);
+/** `undefined` when the request names no checklist; `null` when the name is invalid. */
+function readChecklistParam(event) {
+    const raw = getQuery(event).checklist;
+    if (raw === undefined)
+        return undefined;
+    if (typeof raw !== "string" || !isValidOnboardingChecklistName(raw)) {
+        return null;
+    }
+    return raw;
 }
 function withOnboardingRequestContext(context, fn) {
     return runWithRequestContext({
@@ -73,9 +52,10 @@ function roleTrackingProperties(role) {
 function allRequiredComplete(statuses) {
     return statuses.filter((s) => s.required).every((s) => s.complete);
 }
-async function readDismissedFlag(sessionId) {
-    const value = await appStateGet(sessionId, DISMISSED_KEY);
-    return !!(value && value.dismissed);
+// A progress checklist has no required steps, so "required complete" would be
+// vacuously true while steps are still open.
+function allStepsComplete(statuses) {
+    return statuses.length > 0 && statuses.every((s) => s.complete);
 }
 async function resolveSharedCompletionEnabled() {
     if (!getAppConfig().onboarding.sharedCompletion.enabled)
@@ -104,10 +84,15 @@ export function createOnboardingPlugin(options = {}) {
                     setResponseStatus(event, 405);
                     return { error: "Method not allowed" };
                 }
+                const checklist = readChecklistParam(event);
+                if (checklist === null) {
+                    setResponseStatus(event, 400);
+                    return { error: "Invalid checklist" };
+                }
                 const context = await resolveOnboardingContext(event);
                 const query = getQuery(event);
                 const preview = query.preview === "1" || query.preview === 1;
-                return withOnboardingRequestContext(context, () => serializeSteps(context, { preview }));
+                return withOnboardingRequestContext(context, () => getOnboardingStepStatuses(context, { preview, checklist }));
             }
             const [id, action] = trimmed.split("/");
             if (action === "complete") {
@@ -120,7 +105,7 @@ export function createOnboardingPlugin(options = {}) {
                     return { error: "id required" };
                 }
                 const { sessionId } = await resolveOnboardingContext(event);
-                await appStatePut(sessionId, `${OVERRIDE_KEY_PREFIX}${id}`, { complete: true }, { requestSource: "agent" });
+                await appStatePut(sessionId, onboardingOverrideKey(id), { complete: true }, { requestSource: "agent" });
                 return { ok: true, id };
             }
             return;
@@ -130,8 +115,14 @@ export function createOnboardingPlugin(options = {}) {
                 setResponseStatus(event, 405);
                 return { error: "Method not allowed" };
             }
+            const requested = readChecklistParam(event);
+            if (requested === null) {
+                setResponseStatus(event, 400);
+                return { error: "Invalid checklist" };
+            }
+            const checklist = requested ?? DEFAULT_ONBOARDING_CHECKLIST;
             const { sessionId } = await resolveOnboardingContext(event);
-            await appStatePut(sessionId, DISMISSED_KEY, { dismissed: true, at: new Date().toISOString() }, { requestSource: "agent" });
+            await appStatePut(sessionId, onboardingDismissedKey(checklist), { dismissed: true, at: new Date().toISOString() }, { requestSource: "agent" });
             return { ok: true };
         }));
         getH3App(nitroApp).use(`${ONBOARDING_PREFIX}/reopen`, defineEventHandler(async (event) => {
@@ -139,8 +130,14 @@ export function createOnboardingPlugin(options = {}) {
                 setResponseStatus(event, 405);
                 return { error: "Method not allowed" };
             }
+            const requested = readChecklistParam(event);
+            if (requested === null) {
+                setResponseStatus(event, 400);
+                return { error: "Invalid checklist" };
+            }
+            const checklist = requested ?? DEFAULT_ONBOARDING_CHECKLIST;
             const { sessionId } = await resolveOnboardingContext(event);
-            await appStatePut(sessionId, DISMISSED_KEY, { dismissed: false, at: new Date().toISOString() }, { requestSource: "agent" });
+            await appStatePut(sessionId, onboardingDismissedKey(checklist), { dismissed: false, at: new Date().toISOString() }, { requestSource: "agent" });
             return { ok: true };
         }));
         getH3App(nitroApp).use(`${ONBOARDING_PREFIX}/dismissed`, defineEventHandler(async (event) => {
@@ -148,15 +145,22 @@ export function createOnboardingPlugin(options = {}) {
                 setResponseStatus(event, 405);
                 return { error: "Method not allowed" };
             }
+            const checklist = readChecklistParam(event);
+            if (checklist === null) {
+                setResponseStatus(event, 400);
+                return { error: "Invalid checklist" };
+            }
             const context = await resolveOnboardingContext(event);
             return withOnboardingRequestContext(context, async () => {
-                const [statuses, value] = await Promise.all([
-                    serializeSteps(context),
-                    appStateGet(context.sessionId, DISMISSED_KEY),
+                const [statuses, dismissed] = await Promise.all([
+                    getOnboardingStepStatuses(context, { checklist }),
+                    readOnboardingDismissed(context.sessionId, checklist),
                 ]);
                 return {
-                    dismissed: !!(value && value.dismissed),
-                    allComplete: allRequiredComplete(statuses),
+                    dismissed,
+                    allComplete: checklist === undefined
+                        ? allRequiredComplete(statuses)
+                        : allStepsComplete(statuses),
                 };
             });
         }));
@@ -172,13 +176,18 @@ export function createOnboardingPlugin(options = {}) {
                 setResponseStatus(event, 405);
                 return { error: "Method not allowed" };
             }
+            const checklist = readChecklistParam(event);
+            if (checklist === null) {
+                setResponseStatus(event, 400);
+                return { error: "Invalid checklist" };
+            }
             const context = await resolveOnboardingContext(event);
             const query = getQuery(event);
             const preview = query.preview === "1" || query.preview === 1;
             return withOnboardingRequestContext(context, async () => {
                 const [steps, dismissed] = await Promise.all([
-                    serializeSteps(context, { preview }),
-                    readDismissedFlag(context.sessionId),
+                    getOnboardingStepStatuses(context, { preview, checklist }),
+                    readOnboardingDismissed(context.sessionId, checklist ?? DEFAULT_ONBOARDING_CHECKLIST),
                 ]);
                 return {
                     steps,

package/dist/onboarding/status.d.ts

@@ -0,0 +1,15 @@
+import { type OnboardingResolveContext, type OnboardingStepStatus } from "./types.js";
+export declare function isValidOnboardingChecklistName(name: string): boolean;
+/** The setup checklist keeps its original key so existing dismissals survive. */
+export declare function onboardingDismissedKey(checklist: string): string;
+export declare function onboardingOverrideKey(stepId: string): string;
+export declare function readOnboardingDismissed(sessionId: string, checklist?: string): Promise<boolean>;
+/**
+ * Resolves the steps of one checklist. A failing `isAvailable`, `isComplete`,
+ * or override read rejects instead of reporting a step as incomplete, so
+ * callers can tell "could not check" from "not done".
+ */
+export declare function getOnboardingStepStatuses(context: OnboardingResolveContext, options?: {
+    preview?: boolean;
+    checklist?: string;
+}): Promise<OnboardingStepStatus[]>;

package/dist/onboarding/status.js

@@ -0,0 +1,59 @@
+import { appStateGet } from "../application-state/store.js";
+import { listOnboardingSteps } from "./registry.js";
+import { DEFAULT_ONBOARDING_CHECKLIST, } from "./types.js";
+const OVERRIDE_KEY_PREFIX = "onboarding:override:";
+const DISMISSED_KEY = "onboarding:dismissed";
+const CHECKLIST_NAME_PATTERN = /^[a-z][a-z0-9-]{0,39}$/;
+export function isValidOnboardingChecklistName(name) {
+    return CHECKLIST_NAME_PATTERN.test(name);
+}
+/** The setup checklist keeps its original key so existing dismissals survive. */
+export function onboardingDismissedKey(checklist) {
+    return checklist === DEFAULT_ONBOARDING_CHECKLIST
+        ? DISMISSED_KEY
+        : `${DISMISSED_KEY}:${checklist}`;
+}
+export function onboardingOverrideKey(stepId) {
+    return `${OVERRIDE_KEY_PREFIX}${stepId}`;
+}
+async function hasOverride(sessionId, stepId) {
+    const val = await appStateGet(sessionId, onboardingOverrideKey(stepId));
+    return !!(val && val.complete);
+}
+export async function readOnboardingDismissed(sessionId, checklist = DEFAULT_ONBOARDING_CHECKLIST) {
+    const value = await appStateGet(sessionId, onboardingDismissedKey(checklist));
+    return !!(value && value.dismissed);
+}
+/**
+ * Resolves the steps of one checklist. A failing `isAvailable`, `isComplete`,
+ * or override read rejects instead of reporting a step as incomplete, so
+ * callers can tell "could not check" from "not done".
+ */
+export async function getOnboardingStepStatuses(context, options = {}) {
+    const checklist = options.checklist ?? DEFAULT_ONBOARDING_CHECKLIST;
+    const steps = listOnboardingSteps().filter((step) => (step.checklist ?? DEFAULT_ONBOARDING_CHECKLIST) === checklist);
+    const serialized = await Promise.all(steps.map(async (step) => {
+        if (!options.preview && step.isAvailable) {
+            if (!(await step.isAvailable(context)))
+                return null;
+        }
+        let complete = false;
+        if (!options.preview) {
+            complete = (await step.isComplete(context)) === true;
+            if (!complete) {
+                complete = await hasOverride(context.sessionId, step.id);
+            }
+        }
+        return {
+            id: step.id,
+            title: step.title,
+            description: step.description,
+            order: step.order,
+            required: step.required ?? false,
+            complete,
+            ...(step.href ? { href: step.href } : {}),
+            methods: step.methods,
+        };
+    }));
+    return serialized.filter((step) => step !== null);
+}

package/dist/onboarding/types.d.ts

@@ -45,12 +45,23 @@ export type OnboardingMethod = (OnboardingMethodBase & {
      */
     kind: "file-storage";
 });
+/** The checklist a step belongs to when it does not name one: credential and connection setup. */
+export declare const DEFAULT_ONBOARDING_CHECKLIST = "setup";
 export interface OnboardingStep {
     id: string;
     title: string;
     description: string;
     order: number;
     required?: boolean;
+    /**
+     * Named checklist the step belongs to. The setup checklist (the default)
+     * and a progress checklist such as `getting-started` never share rows:
+     * each is served only when asked for by name.
+     */
+    checklist?: string;
+    /** In-app path a progress row opens so the user can complete the step. */
+    href?: string;
+    /** Progress steps that need no setup form pass an empty list. */
     methods: OnboardingMethod[];
     isAvailable?: (context?: OnboardingResolveContext) => boolean | Promise<boolean>;
     isComplete: (context?: OnboardingResolveContext) => boolean | Promise<boolean>;
@@ -67,6 +78,7 @@ export interface OnboardingStepStatus {
     order: number;
     required: boolean;
     complete: boolean;
+    href?: string;
     methods: OnboardingMethod[];
 }
 /** Services whose provider is picked per service (`manage-service-providers`). */

package/dist/onboarding/types.js

@@ -1 +1,2 @@
-export {};
+/** The checklist a step belongs to when it does not name one: credential and connection setup. */
+export const DEFAULT_ONBOARDING_CHECKLIST = "setup";

package/dist/org/workspace-app-access.js

@@ -232,24 +232,28 @@ async function resolveHostedWorkspaceAppAuth(configuredDirectory, context, email
     const audience = canonicalA2AAudience(configuredDirectory);
     let stage = "org-domain-lookup-failed";
     try {
+        const requestContext = getRequestContext();
+        const delegatedMember = requestContext?.a2aIdentityAssurance === "org-member";
         const orgDomain = orgId ? await cachedOrgDomain(orgId) : null;
         const normalizedOrgDomain = orgDomain?.trim() || undefined;
         if (orgId && !normalizedOrgDomain) {
             return workspaceAppAccessUnavailable("org-domain-missing", { audience });
         }
-        stage = "org-a2a-secret-lookup-failed";
-        const orgSecret = orgId
+        stage = "token-signing-failed";
+        const deploymentSecret = readDeployCredentialEnv("A2A_SECRET")?.trim();
+        if (orgId && (delegatedMember || deploymentSecret)) {
+            stage = "org-a2a-secret-lookup-failed";
+        }
+        const orgSecret = orgId && (delegatedMember || deploymentSecret)
             ? (await cachedOrgA2ASecret(orgId))?.trim() || undefined
             : undefined;
-        const deploymentSecret = readDeployCredentialEnv("A2A_SECRET")?.trim();
-        const signingSecret = orgSecret || deploymentSecret;
+        stage = "token-signing-failed";
+        const signingSecret = delegatedMember ? orgSecret : deploymentSecret;
         if (!signingSecret) {
             return workspaceAppAccessUnavailable("a2a-secret-missing", { audience });
         }
-        stage = "token-signing-failed";
-        const requestContext = getRequestContext();
         let token;
-        if (requestContext?.a2aIdentityAssurance === "org-member") {
+        if (delegatedMember) {
             if (!orgId ||
                 !normalizedOrgDomain ||
                 requestContext.orgId?.trim() !== orgId ||
@@ -273,9 +277,15 @@ async function resolveHostedWorkspaceAppAuth(configuredDirectory, context, email
             token = await signA2AOrgMemberDelegationToken(email, normalizedOrgDomain, orgSecret, audience);
         }
         else {
-            token = await signA2AToken(email, normalizedOrgDomain, orgSecret, {
+            if (orgSecret && orgSecret === deploymentSecret) {
+                return workspaceAppAccessUnavailable("token-signing-failed", {
+                    audience,
+                    detail: "Organization and deployment A2A secrets must differ for user identity.",
+                });
+            }
+            token = await signA2AToken(email, normalizedOrgDomain, undefined, {
                 expiresIn: "1m",
-                preferGlobalSecret: false,
+                preferGlobalSecret: true,
                 audience,
                 extraClaims: {
                     jti: randomUUID(),

package/dist/progress/routes.d.ts

@@ -2,6 +2,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -76,7 +76,9 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     }>>;
 }, z.core.$strip>>, {
     message?: undefined;
-    found?: undefined;
+    id?: undefined;
+    provider?: undefined;
+    deleted?: undefined;
     providers: {
         id: string;
         label: string;
@@ -87,47 +89,45 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         updatedAt: number;
     }[];
     count: number;
-    provider?: undefined;
-    deleted?: undefined;
+    found?: undefined;
     registered?: undefined;
-    id?: undefined;
     label?: undefined;
 } | {
     message?: undefined;
-    providers?: undefined;
+    id?: undefined;
     count?: undefined;
+    deleted?: undefined;
+    providers?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
-    deleted?: undefined;
     registered?: undefined;
-    id?: undefined;
     label?: undefined;
 } | {
     message?: undefined;
-    providers?: undefined;
-    count?: undefined;
     provider?: undefined;
+    count?: undefined;
+    deleted?: undefined;
+    providers?: undefined;
     found: boolean;
     id: string;
-    deleted?: undefined;
     registered?: undefined;
     label?: undefined;
 } | {
     message?: undefined;
-    found?: undefined;
-    providers?: undefined;
-    count?: undefined;
     provider?: undefined;
+    count?: undefined;
+    providers?: undefined;
+    found?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
 } | {
-    found?: undefined;
-    providers?: undefined;
-    count?: undefined;
     provider?: undefined;
+    count?: undefined;
     deleted?: undefined;
+    providers?: undefined;
+    found?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -317,8 +317,8 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         scope?: "org" | "user" | undefined;
     }, {
         id?: undefined;
-        found?: undefined;
         deleted?: undefined;
+        provider?: undefined;
         providers: {
             id: string;
             label: string;
@@ -329,15 +329,15 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
-        provider?: undefined;
+        found?: undefined;
         registered?: undefined;
         label?: undefined;
         message?: undefined;
     } | {
         id?: undefined;
         deleted?: undefined;
-        providers?: undefined;
         count?: undefined;
+        providers?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
         registered?: undefined;
@@ -345,30 +345,30 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         message?: undefined;
     } | {
         deleted?: undefined;
-        providers?: undefined;
-        count?: undefined;
         provider?: undefined;
+        count?: undefined;
+        providers?: undefined;
         found: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
         message?: undefined;
     } | {
-        found?: undefined;
-        providers?: undefined;
-        count?: undefined;
         provider?: undefined;
+        count?: undefined;
+        providers?: undefined;
+        found?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
         message?: undefined;
     } | {
-        found?: undefined;
         deleted?: undefined;
-        providers?: undefined;
-        count?: undefined;
         provider?: undefined;
+        count?: undefined;
+        providers?: undefined;
+        found?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/provider-api/corpus-jobs.d.ts

@@ -73,6 +73,7 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     offset?: unknown;
     limit?: unknown;
 }, {
+    deleted?: undefined;
     jobs: {
         id: string;
         name: string;
@@ -83,7 +84,6 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
         updatedAt: string;
     }[];
     total: number;
-    deleted?: undefined;
     jobId?: undefined;
 } | {
     jobs?: undefined;
@@ -91,9 +91,9 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     deleted: boolean;
     jobId: string;
 } | {
+    deleted?: undefined;
     jobs?: undefined;
     total?: undefined;
-    deleted?: undefined;
     jobId?: undefined;
     hits: Record<string, unknown>[];
     offset: number;

package/dist/provider-api/index.js

@@ -787,7 +787,14 @@ const PROVIDER_CONFIGS = {
         docsUrls: ["https://developers.google.com/drive/api/reference/rest/v3"],
         specUrls: ["https://www.googleapis.com/discovery/v1/apis/drive/v3/rest"],
         allowedHostSuffixes: ["googleapis.com"],
-        templateUses: ["brain", "content", "slides", "dispatch", "analytics"],
+        templateUses: [
+            "brain",
+            "content",
+            "slides",
+            "slides-2",
+            "dispatch",
+            "analytics",
+        ],
         examples: [
             { label: "List files", method: "GET", path: "/files" },
             { label: "Get file metadata", method: "GET", path: "/files/{fileId}" },
@@ -843,7 +850,7 @@ const PROVIDER_CONFIGS = {
         ],
         specUrls: ["https://slides.googleapis.com/$discovery/rest?version=v1"],
         allowedHostSuffixes: ["googleapis.com"],
-        templateUses: ["brain", "content", "slides", "dispatch"],
+        templateUses: ["brain", "content", "slides", "slides-2", "dispatch"],
         examples: [
             {
                 label: "Get presentation with slides and speaker notes",

package/dist/resources/handlers.d.ts

@@ -39,8 +39,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
     error: string;
 }>;
 export declare function handleDeleteResource(event: any): Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/review/actions/consume-review-feedback.js

@@ -10,6 +10,11 @@ const schema = z.object({
 export default defineAction({
     description: "Mark review feedback as consumed by the agent or reviewer workflow.",
     schema,
+    mcpAnnotations: {
+        readOnlyHint: false,
+        destructiveHint: false,
+        openWorldHint: false,
+    },
     run: async (args, ctx) => {
         const actionCtx = ctx;
         await assertReviewableResourceAccess(args.resourceType, args.resourceId, actionCtx, "editor");

package/dist/review/actions/create-review-comment.js

@@ -40,6 +40,11 @@ const schema = z.object({
 export default defineAction({
     description: "Create an inline comment, annotation, or review thread for a resource. Body text supports inline Markdown without headings.",
     schema,
+    mcpAnnotations: {
+        readOnlyHint: false,
+        destructiveHint: false,
+        openWorldHint: true,
+    },
     run: async (args, ctx) => {
         const actionCtx = ctx;
         const access = await assertReviewableResourceAccess(args.resourceType, args.resourceId, actionCtx, "commenter");

package/dist/review/actions/delete-review-comment.js

@@ -12,6 +12,11 @@ const schema = z.object({
 export default defineAction({
     description: "Soft-delete a review comment.",
     schema,
+    mcpAnnotations: {
+        readOnlyHint: false,
+        destructiveHint: true,
+        openWorldHint: false,
+    },
     run: async (args, ctx) => {
         const actionCtx = ctx;
         const scope = {