@agent-native/core 0.219.0 → 0.220.0-nightly-20261023212848

package/dist/server/agent-chat/script-entries.js

@@ -1,4 +1,4 @@
-import { renameThread, resolveThreadAccess, setThreadArchived, setThreadPinned, } from "../../chat-threads/store.js";
+import { renameThread, resolveThreadAccess, setThreadArchived, setThreadPinned, setThreadHidden, } from "../../chat-threads/store.js";
 import { assertCanManageSharedResource } from "../../resources/script-helpers.js";
 import { dbExecToolParameters } from "../../scripts/db/tool-schemas.js";
 import { serializeCliArgs } from "../../scripts/parse-args.js";
@@ -515,6 +515,10 @@ export async function createChatScriptEntries() {
                         description: "Output format",
                         enum: ["json", "text"],
                     },
+                    includeHidden: {
+                        type: "boolean",
+                        description: "Also include chats hidden by you. Hidden chats are excluded by default.",
+                    },
                     includeArchived: {
                         type: "boolean",
                         description: "Also include archived chats in the results. Archived chats are excluded by default.",
@@ -538,14 +542,23 @@ export async function createChatScriptEntries() {
         return {
             "chat-history": {
                 tool: {
-                    description: "Manage past agent chat threads. Use action 'search' to find previous conversations by keyword, 'open' to open a thread in the UI, or 'rename'/'pin'/'unpin'/'archive' to organize history.",
+                    description: "Manage past agent chat threads. Use action 'search' to find previous conversations by keyword, 'open' to open a thread in the UI, or 'pin'/'unpin' to pin for yourself, 'hide'/'unhide' to remove or restore shared chats in your lists. Only owners can rename or archive; owners archive instead of hiding.",
                     parameters: {
                         type: "object",
                         properties: {
                             action: {
                                 type: "string",
                                 description: "The operation to perform",
-                                enum: ["search", "open", "rename", "pin", "unpin", "archive"],
+                                enum: [
+                                    "search",
+                                    "open",
+                                    "rename",
+                                    "pin",
+                                    "unpin",
+                                    "archive",
+                                    "hide",
+                                    "unhide",
+                                ],
                             },
                             query: {
                                 type: "string",
@@ -560,13 +573,17 @@ export async function createChatScriptEntries() {
                                 description: "(search) Output format",
                                 enum: ["json", "text"],
                             },
+                            includeHidden: {
+                                type: "boolean",
+                                description: "(search) Include chats hidden by you, with your hiddenAt timestamp.",
+                            },
                             includeArchived: {
                                 type: "boolean",
                                 description: "(search) Also include archived chats in the results. Archived chats are excluded by default, matching the 'archive' action's effect on the chat list.",
                             },
                             id: {
                                 type: "string",
-                                description: "(open, rename, pin, unpin, archive) The chat thread ID to manage",
+                                description: "(open, rename, pin, unpin, archive, hide, unhide) The chat thread ID to manage",
                             },
                             title: {
                                 type: "string",
@@ -588,14 +605,16 @@ export async function createChatScriptEntries() {
                     if (args?.action === "rename" ||
                         args?.action === "pin" ||
                         args?.action === "unpin" ||
-                        args?.action === "archive") {
+                        args?.action === "archive" ||
+                        args?.action === "hide" ||
+                        args?.action === "unhide") {
                         const id = typeof args?.id === "string" ? args.id : "";
                         if (!id)
                             return "Missing required id.";
                         const owner = getRequestRunContext()?.owner ?? getRequestUserEmail() ?? "";
                         if (!owner)
                             return "No authenticated user is available.";
-                        const thread = await resolveThreadAccess(owner, id, "editor", {
+                        const thread = await resolveThreadAccess(owner, id, "viewer", {
                             orgId: getRequestOrgId(),
                         });
                         if (!thread) {
@@ -608,18 +627,34 @@ export async function createChatScriptEntries() {
                                 : "";
                             if (!nextTitle)
                                 return "Missing required title.";
-                            const renamed = await renameThread(id, nextTitle);
+                            const renamed = await renameThread(id, nextTitle, {
+                                ownerEmail: owner,
+                            });
                             if (!renamed)
                                 return `Chat thread "${id}" could not be renamed.`;
                             return `Renamed chat "${title}" to "${nextTitle}".`;
                         }
                         if (args.action === "archive") {
-                            const archived = await setThreadArchived(id, true);
+                            const archived = await setThreadArchived(id, true, {
+                                ownerEmail: owner,
+                            });
                             if (!archived)
                                 return `Chat thread "${id}" could not be archived.`;
                             return `Archived chat: ${title}`;
                         }
-                        const pinned = await setThreadPinned(id, args.action === "pin");
+                        if (args.action === "hide" || args.action === "unhide") {
+                            const hidden = await setThreadHidden(id, args.action === "hide", {
+                                ownerEmail: owner,
+                                orgId: getRequestOrgId(),
+                            });
+                            if (!hidden)
+                                return `Chat thread "${id}" could not be updated.`;
+                            return `${args.action === "hide" ? "Hidden" : "Unhidden"} chat: ${title}`;
+                        }
+                        const pinned = await setThreadPinned(id, args.action === "pin", {
+                            ownerEmail: owner,
+                            orgId: getRequestOrgId(),
+                        });
                         if (!pinned)
                             return `Chat thread "${id}" could not be updated.`;
                         return `${args.action === "pin" ? "Pinned" : "Unpinned"} chat: ${title}`;

package/dist/server/agent-chat-plugin.d.ts

@@ -14,6 +14,8 @@ type AgentChatRunTrackingSource = Pick<TrackingMeta, "userId" | "authUserId" | "
     isSyntheticTraffic?: boolean;
 };
 export declare function trackAgentChatRunLifecycle(event: "run_started" | "run_finished" | "run_no_reply", threadId: string | undefined, attemptId: string | undefined, userId?: string, properties?: Record<string, unknown>, appId?: string, trackingSource?: AgentChatRunTrackingSource): void;
+/** `run_started` from every agent-chat entry point, keyed to its turn. */
+export declare function trackAgentChatRunStarted(threadId: string, runId: string, turnId: string, owner: string | undefined, appId: string | undefined): void;
 import { buildSelectedA2AReceiverContext, createA2AEngineToolSurface, DEFAULT_DELEGATED_MAX_ITERATIONS, DEFAULT_DELEGATED_MAX_RUN_INPUT_TOKENS, DEFAULT_DELEGATED_MAX_TOOL_RESULT_CHARS, isSelectedA2AReceiver, runA2AAgentLoop, runMCPAgentLoop, assembleA2AFinalResponse, buildPublicAgentA2ASkills } from "./agent-chat/action-filters-a2a.js";
 import { _agentChatPromptSectionsForTests } from "./agent-chat/framework-prompts.js";
 import { type AgentChatPluginOptions, type NitroPluginDef } from "./agent-chat/plugin-options.js";

package/dist/server/agent-chat-plugin.js

@@ -7,7 +7,7 @@ import { appendA2AArtifactLinks, buildA2ARecoverableArtifactMessage, } from "../
 import { hasConfiguredA2ASecret, isLoopbackAddress, isTrustedLocalRuntime, } from "../a2a/auth-policy.js";
 import { sanitizeA2ACorrelationId, sanitizeA2ACorrelationMetadata, } from "../a2a/correlation.js";
 import { createA2AApproval, a2aTaskLeaseThreadId, A2A_TASK_CLAIM_LOST_ERROR_CODE, updateTaskStatusMessage, } from "../a2a/task-store.js";
-import { clientAbortReason } from "../agent/abort-reasons.js";
+import { clientAbortReason, EXECUTION_LEASE_LOST_ABORT_REASON, } from "../agent/abort-reasons.js";
 import { canUpdateAgentAppModelDefaultSettings, normalizeAgentAppModelDefaultAppId, readAgentAppModelDefaultSettings, resetAgentAppModelDefaultSettings, writeAgentAppModelDefaultSettings, } from "../agent/app-model-defaults.js";
 import { approvalKeyWithArguments } from "../agent/approval-key.js";
 import { CHATGPT_SUBSCRIPTION_ENGINE_NAME } from "../agent/chatgpt-subscription-contract.js";
@@ -33,7 +33,7 @@ import { attachToolSearch } from "../agent/tool-search.js";
 import { getAppConfig } from "../app-config/index.js";
 import { readAppStateForCurrentTab } from "../application-state/script-helpers.js";
 import { runChatThreadDataMigrations } from "../chat-threads/migrations.js";
-import { InlineAttachmentDataNotPersistableError, QueuedSubmissionAdmissionError, adoptThreadScopeIfUnscoped, blockQueuedSubmissionReceipt, clearQueuedSubmissionInterruptRun, createThread, forkThread, getThread, getQueuedSubmissionReceipt, getQueuedSubmissionReceiptStatus, listQueuedSubmissionReceipts, markQueuedSubmissionSubmitted, queuedSubmissionBehaviorMatches, recordQueuedSubmissionInterruptRun, renewQueuedSubmissionInterruptClaim, registerChatThreadsShareable, retryQueuedSubmissionReceipt, resolveRunThreadScope, resolveThreadAccess, resolveThreadAccessScope, listThreads, searchThreads, renameThread, createThreadShareLink, getThreadByShareToken, getThreadShareState, revokeThreadShareLink, setThreadArchived, setThreadPinned, setThreadScope, updateThreadData, withThreadDataLock, deleteThread, mutateThreadQueuedMessages, setThreadSourceIfMissing, isAppOwnedChatScope, isChatThreadOwnership, threadScopeMismatch, } from "../chat-threads/store.js";
+import { InlineAttachmentDataNotPersistableError, QueuedSubmissionAdmissionError, adoptThreadScopeIfUnscoped, blockQueuedSubmissionReceipt, clearQueuedSubmissionInterruptRun, createThread, forkThread, getThread, getQueuedSubmissionReceipt, getQueuedSubmissionReceiptStatus, listQueuedSubmissionReceipts, markQueuedSubmissionSubmitted, queuedSubmissionBehaviorMatches, recordQueuedSubmissionInterruptRun, renewQueuedSubmissionInterruptClaim, registerChatThreadsShareable, retryQueuedSubmissionReceipt, resolveRunThreadScope, resolveThreadAccess, resolveThreadAccessScope, listThreads, searchThreads, renameThread, assertThreadOwner, createThreadShareLink, getThreadByShareToken, getThreadShareState, revokeThreadShareLink, setThreadArchived, setThreadPinned, setThreadHidden, setThreadScope, updateThreadData, withThreadDataLock, deleteThread, mutateThreadQueuedMessages, setThreadSourceIfMissing, isAppOwnedChatScope, isChatThreadOwnership, threadScopeMismatch, } from "../chat-threads/store.js";
 import { isCheckpointRestorePath } from "../checkpoints/route-match.js";
 import { createDbAdminAgentTools } from "../db-admin/agent-tools.js";
 import { isTransientDatabaseError } from "../db/client.js";
@@ -97,6 +97,10 @@ export function trackAgentChatRunLifecycle(event, threadId, attemptId, userId, p
         attempt_id: attemptId,
     }, trackingSource ?? runLifecycleTrackingSource(userId));
 }
+/** `run_started` from every agent-chat entry point, keyed to its turn. */
+export function trackAgentChatRunStarted(threadId, runId, turnId, owner, appId) {
+    trackAgentChatRunLifecycle("run_started", threadId, runId, owner, { turn_id: turnId }, appId);
+}
 /**
  * The run's owner is set on the run context only once its system prompt is
  * built, after `run_started`, and a durable worker has no browser session at
@@ -458,8 +462,8 @@ export async function runA2AAgentLoopWithRunManager(runOptions, pluginOptions, t
             : undefined;
         if (reasonCode === "stale_execution_fence" ||
             reasonCode === A2A_TASK_CLAIM_LOST_ERROR_CODE) {
-            run.abortReason = "execution_lease_lost";
-            run.abort.abort("execution_lease_lost");
+            run.abortReason = EXECUTION_LEASE_LOST_ABORT_REASON;
+            run.abort.abort(EXECUTION_LEASE_LOST_ABORT_REASON);
             return;
         }
         cancellation = abortRunDurably(runId, clientAbortReason(reason)).then((aborted) => ({ status: "fulfilled", aborted }), (error) => ({ status: "rejected", error }));
@@ -3994,7 +3998,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                 },
                 onRunPrepared: persistSubmittedUserMessage,
                 onRunNotStarted: recordUnstartedTurn,
-                onRunStart: async (send, threadId, runId) => {
+                onRunStart: async (send, threadId, runId, turnId) => {
                     await recordPreRunGitStatus(threadId);
                     _runSendByThread.set(threadId, send);
                     const runCtx = ensureRequestRunContext();
@@ -4002,7 +4006,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                         runCtx.threadId = threadId;
                         runCtx.runId = runId;
                     }
-                    trackAgentChatRunLifecycle("run_started", threadId, runId, runCtx?.owner, {}, options?.appId);
+                    trackAgentChatRunStarted(threadId, runId, turnId, runCtx?.owner, options?.appId);
                     await runPreAgentTurnAutosave(options?.onAgentTurnStart, runCtx?.chatScope, { threadId, runId });
                 },
                 onRunComplete: async (run, threadId, trackingSource) => {
@@ -4050,7 +4054,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                     },
                     onRunPrepared: persistSubmittedUserMessage,
                     onRunNotStarted: recordUnstartedTurn,
-                    onRunStart: async (send, threadId, runId) => {
+                    onRunStart: async (send, threadId, runId, turnId) => {
                         await recordPreRunGitStatus(threadId);
                         _runSendByThread.set(threadId, send);
                         const runCtx = ensureRequestRunContext();
@@ -4058,7 +4062,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             runCtx.threadId = threadId;
                             runCtx.runId = runId;
                         }
-                        trackAgentChatRunLifecycle("run_started", threadId, runId, runCtx?.owner, {}, options?.appId);
+                        trackAgentChatRunStarted(threadId, runId, turnId, runCtx?.owner, options?.appId);
                     },
                     onRunComplete: async (run, threadId, trackingSource) => {
                         if (threadId)
@@ -4237,7 +4241,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                     },
                     onRunPrepared: persistSubmittedUserMessage,
                     onRunNotStarted: recordUnstartedTurn,
-                    onRunStart: async (send, threadId, runId) => {
+                    onRunStart: async (send, threadId, runId, turnId) => {
                         await recordPreRunGitStatus(threadId);
                         _runSendByThread.set(threadId, send);
                         const runCtx = ensureRequestRunContext();
@@ -4245,7 +4249,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             runCtx.threadId = threadId;
                             runCtx.runId = runId;
                         }
-                        trackAgentChatRunLifecycle("run_started", threadId, runId, runCtx?.owner, {}, options?.appId);
+                        trackAgentChatRunStarted(threadId, runId, turnId, runCtx?.owner, options?.appId);
                         await runPreAgentTurnAutosave(options?.onAgentTurnStart, runCtx?.chatScope, { threadId, runId });
                     },
                     onRunComplete: async (run, threadId, trackingSource) => {
@@ -6029,6 +6033,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             // Merge the incoming snapshot delta over the current SQL copy.
                             // Let updateThreadData apply delta markers to each latest
                             // revision if its compare-and-swap needs to retry.
+                            let titleOverrideChanged = false;
                             if (hasThreadData) {
                                 let incoming;
                                 try {
@@ -6044,6 +6049,10 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                                     setResponseStatus(event, 400);
                                     return { error: "Invalid threadData JSON" };
                                 }
+                                titleOverrideChanged =
+                                    Object.prototype.hasOwnProperty.call(incoming, "_titleOverride") &&
+                                        incoming._titleOverride !==
+                                            existing._titleOverride;
                                 if (containsInlineAttachmentPayload(incoming)) {
                                     setResponseStatus(event, 400);
                                     return {
@@ -6075,9 +6084,21 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             else {
                                 preserveTitleOverride(existing);
                             }
+                            // Content saves carry the client's cached title, which can be
+                            // stale, and the store keeps the owner's title for a shared
+                            // editor. Only an override change or a title-only request is a
+                            // rename.
+                            if (titleOverrideChanged ||
+                                (!hasThreadData &&
+                                    typeof body.title === "string" &&
+                                    body.title !== thread.title)) {
+                                assertThreadOwner(thread, owner);
+                            }
                             let updated;
                             try {
                                 updated = await updateThreadData(threadId, newThreadData, nextTitle, nextPreview, newMessageCount, {
+                                    preserveCurrentTitle: thread.ownerEmail.toLowerCase() !==
+                                        owner.trim().toLowerCase(),
                                     preserveCurrentTitleAndPreview: isSnapshotDelta,
                                     onAnnotationConflict: (conflict) => annotationConflicts.push(conflict),
                                 });
@@ -6317,7 +6338,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                         };
                     }
                     if (method === "POST" && isThreadSubroute("rename")) {
-                        const thread = await resolveThreadAccess(owner, threadId, "editor", { orgId });
+                        const thread = await resolveThreadAccess(owner, threadId, "viewer", { orgId });
                         if (!thread || !threadMatchesRequestedScope(thread)) {
                             setResponseStatus(event, 404);
                             return { error: "Thread not found" };
@@ -6330,7 +6351,9 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             setResponseStatus(event, 400);
                             return { error: "Title is required" };
                         }
-                        const renamed = await renameThread(threadId, title);
+                        const renamed = await renameThread(threadId, title, {
+                            ownerEmail: owner,
+                        });
                         if (!renamed) {
                             setResponseStatus(event, 404);
                             return { error: "Thread not found" };
@@ -6338,7 +6361,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                         return { ok: true };
                     }
                     if (method === "POST" && isThreadSubroute("pin")) {
-                        const thread = await resolveThreadAccess(owner, threadId, "editor", { orgId });
+                        const thread = await resolveThreadAccess(owner, threadId, "viewer", { orgId });
                         if (!thread || !threadMatchesRequestedScope(thread)) {
                             setResponseStatus(event, 404);
                             return { error: "Thread not found" };
@@ -6348,15 +6371,39 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             setResponseStatus(event, 400);
                             return { error: "pinned boolean is required" };
                         }
-                        const pinned = await setThreadPinned(threadId, body.pinned);
+                        const pinned = await setThreadPinned(threadId, body.pinned, {
+                            ownerEmail: owner,
+                            orgId,
+                        });
                         if (!pinned) {
                             setResponseStatus(event, 404);
                             return { error: "Thread not found" };
                         }
                         return { ok: true };
                     }
+                    if (method === "POST" && isThreadSubroute("hide")) {
+                        const thread = await resolveThreadAccessScope(owner, threadId, "viewer", { orgId });
+                        if (!thread || !threadMatchesRequestedScope(thread)) {
+                            setResponseStatus(event, 404);
+                            return { error: "Thread not found" };
+                        }
+                        const body = await readBody(event);
+                        if (typeof body?.hidden !== "boolean") {
+                            setResponseStatus(event, 400);
+                            return { error: "hidden boolean is required" };
+                        }
+                        const hidden = await setThreadHidden(threadId, body.hidden, {
+                            ownerEmail: owner,
+                            orgId,
+                        });
+                        if (!hidden) {
+                            setResponseStatus(event, 404);
+                            return { error: "Thread not found" };
+                        }
+                        return { ok: true };
+                    }
                     if (method === "POST" && isThreadSubroute("archive")) {
-                        const thread = await resolveThreadAccess(owner, threadId, "editor", { orgId });
+                        const thread = await resolveThreadAccess(owner, threadId, "viewer", { orgId });
                         if (!thread || !threadMatchesRequestedScope(thread)) {
                             setResponseStatus(event, 404);
                             return { error: "Thread not found" };
@@ -6366,7 +6413,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             setResponseStatus(event, 400);
                             return { error: "archived boolean is required" };
                         }
-                        const archived = await setThreadArchived(threadId, body.archived);
+                        const archived = await setThreadArchived(threadId, body.archived, { ownerEmail: owner });
                         if (!archived) {
                             setResponseStatus(event, 404);
                             return { error: "Thread not found" };
@@ -6480,6 +6527,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                     const unscopedOnly = String(query.unscoped ?? "") === "1";
                     const includeExternal = String(query.includeExternal ?? "") === "1";
                     const includeArchived = String(query.includeArchived ?? "") === "1";
+                    const includeHidden = String(query.includeHidden ?? "") === "1";
                     const ownership = query.ownership === undefined ? "all" : query.ownership;
                     if (!isChatThreadOwnership(ownership)) {
                         setResponseStatus(event, 400);
@@ -6494,6 +6542,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             orgId,
                             includeExternal,
                             includeArchived,
+                            includeHidden,
                             sourceAppId: options?.appId ?? null,
                             ownership,
                             offset,
@@ -6506,6 +6555,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             orgId,
                             includeExternal,
                             includeArchived,
+                            includeHidden,
                             sourceAppId: options?.appId ?? null,
                             ownership,
                         });

package/dist/server/agent-engine-api-key-route.d.ts

@@ -67,12 +67,12 @@ export declare function createAgentEngineApiKeyHandler(): import("h3").EventHand
     code: any;
 } | {
     errorCode?: undefined;
+    error?: undefined;
     code?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
     defaultModel?: import("./agent-engine-default-model-route.js").SavedKeyDefaultModelOutcome;
-    error?: undefined;
 }>>;
 export {};

package/dist/server/agent-engine-default-model-route.d.ts

@@ -8,8 +8,8 @@ export declare const AGENT_ENGINE_API_KEY_ACTION_NAME = "agent-engine-api-key";
  * resolveEngine's credential detection.
  */
 export declare function createAgentEngineDisconnectHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
     scope?: undefined;
 } | {
     ok: boolean;

package/dist/server/first-touch-route.d.ts

@@ -17,8 +17,8 @@ export type FirstTouchSyncResult = {
  * browser's `an_ft` and `an_lt` again, so Safari keeps them their 30 days.
  */
 export declare function createFirstTouchHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     reason?: undefined;
+    error: string;
     stored?: undefined;
     firstTouch?: undefined;
 } | {
@@ -32,8 +32,8 @@ export declare function createFirstTouchHandler(): import("h3").EventHandlerWith
     reason: "expired";
     firstTouch?: undefined;
 } | {
-    error?: undefined;
     reason?: undefined;
+    error?: undefined;
     stored: true;
     firstTouch: FirstTouchAttribution;
 }>>;

package/dist/shared/route-chunk-recovery-bootstrap.d.ts

@@ -6,5 +6,14 @@ export declare const CHUNK_RECOVERY_CACHE_BUSTER_PARAM = "__agentNativeChunkReco
 export declare const CHUNK_RECOVERY_PATH_SUFFIX = "/__agent-native-chunk-recovery";
 export declare const CHUNK_RECOVERY_ORIGINAL_HASH_PARAM = "__agentNativeRecoveryOriginalHash";
 export declare const ROUTE_WARMUP_PRELOAD_ATTRIBUTE = "data-agent-native-route-warmup";
+export declare const EXTERNAL_EMBED_WINDOW_KEY = "__AGENT_NATIVE_EXTERNAL_EMBED";
+export declare const STALE_CHUNK_EXHAUSTED_KEY = "__agentNativeStaleChunkRecoveryExhausted";
+/**
+ * Fired on `window` the first time a stale chunk could not be recovered by a
+ * reload. The shared noise rules drop the raw dynamic-import failure because
+ * recovery handles it; this is the one signal that it did not, so a deploy whose
+ * chunks are gone for everyone stays visible.
+ */
+export declare const STALE_CHUNK_RECOVERY_EXHAUSTED_EVENT = "agent-native:stale-chunk-recovery-exhausted";
 export declare function isLegacyChunkRecoveryRequest(url: URL): boolean;
 export declare const ROUTE_CHUNK_RECOVERY_BOOTSTRAP_SCRIPT: string;

package/dist/shared/route-chunk-recovery-bootstrap.js

@@ -6,6 +6,20 @@ export const CHUNK_RECOVERY_CACHE_BUSTER_PARAM = "__agentNativeChunkRecoveryRequ
 export const CHUNK_RECOVERY_PATH_SUFFIX = "/__agent-native-chunk-recovery";
 export const CHUNK_RECOVERY_ORIGINAL_HASH_PARAM = "__agentNativeRecoveryOriginalHash";
 export const ROUTE_WARMUP_PRELOAD_ATTRIBUTE = "data-agent-native-route-warmup";
+// Set by embedApp's transplant path, which runs the app document inside the MCP
+// host's sandbox frame. There, every recovery URL is on the host's origin, so
+// recovery can only navigate the frame to a page the host blocks.
+export const EXTERNAL_EMBED_WINDOW_KEY = "__AGENT_NATIVE_EXTERNAL_EMBED";
+// Where recovery records that it gave up. The inline bootstrap writes it too, so
+// a failure before the client bundle loads is still reported once it does.
+export const STALE_CHUNK_EXHAUSTED_KEY = "__agentNativeStaleChunkRecoveryExhausted";
+/**
+ * Fired on `window` the first time a stale chunk could not be recovered by a
+ * reload. The shared noise rules drop the raw dynamic-import failure because
+ * recovery handles it; this is the one signal that it did not, so a deploy whose
+ * chunks are gone for everyone stays visible.
+ */
+export const STALE_CHUNK_RECOVERY_EXHAUSTED_EVENT = "agent-native:stale-chunk-recovery-exhausted";
 export function isLegacyChunkRecoveryRequest(url) {
     const values = url.searchParams.getAll(CHUNK_RECOVERY_QUERY_PARAM);
     return values.length === 1 && values[0] === CHUNK_RECOVERY_QUERY_VALUE;
@@ -18,12 +32,23 @@ const pathSuffix=${JSON.stringify(CHUNK_RECOVERY_PATH_SUFFIX)};
 const originalHashParam=${JSON.stringify(CHUNK_RECOVERY_ORIGINAL_HASH_PARAM)};
 const reloadKey=${JSON.stringify(STALE_CHUNK_RELOAD_AT_KEY)};
 const warmupAttr=${JSON.stringify(ROUTE_WARMUP_PRELOAD_ATTRIBUTE)};
+const externalEmbedKey=${JSON.stringify(EXTERNAL_EMBED_WINDOW_KEY)};
+const exhaustedKey=${JSON.stringify(STALE_CHUNK_EXHAUSTED_KEY)};
+const exhaustedEvent=${JSON.stringify(STALE_CHUNK_RECOVERY_EXHAUSTED_EVENT)};
 document.addEventListener("error",event=>{
 const target=event.target;
 const tag=target?.tagName?.toUpperCase();
 const failedModuleScript=tag==="SCRIPT"&&target.type?.toLowerCase()==="module";
 const failedModulePreload=tag==="LINK"&&/(?:^|\\s)modulepreload(?:\\s|$)/i.test(target.getAttribute?.("rel")||target.rel||"")&&!target.hasAttribute?.(warmupAttr);
 if(!failedModuleScript&&!failedModulePreload||/AgentNativeDesktop/i.test(navigator.userAgent))return;
+if(window[externalEmbedKey]){
+if(!window[exhaustedKey]){
+const detail={reason:"external-embed"};
+window[exhaustedKey]=detail;
+if(typeof window.dispatchEvent==="function"&&typeof CustomEvent==="function")window.dispatchEvent(new CustomEvent(exhaustedEvent,{detail}));
+}
+return;
+}
 if(/^(localhost|127\\.0\\.0\\.1|\\[::1\\])$/.test(location.hostname))return;
 const url=new URL(location.href);
 if(url.pathname.endsWith(pathSuffix)||url.pathname.endsWith(pathSuffix+"/")||url.searchParams.get(queryParam)===queryValue)return;

package/dist/sharing/actions/list-resource-shares.d.ts

@@ -2,6 +2,7 @@ declare const _default: import("../../action.js").ActionDefinition<{
     resourceType: string;
     resourceId: string;
 }, {
+    role?: undefined;
     ownerEmail: any;
     visibility: any;
     shares: any[];
@@ -11,7 +12,6 @@ declare const _default: import("../../action.js").ActionDefinition<{
         supportsGroupShares?: boolean;
     };
     orgId?: undefined;
-    role?: undefined;
     agentReadable?: undefined;
 } | {
     ownerEmail: string;

package/dist/templates/chat/.agents/skills/actions/SKILL.md

@@ -172,6 +172,7 @@ Everything else — CRUD, settings, search, list/detail reads, auth state, anyth
 - **Do** signal failure by throwing, using `fail()` for expected caller-readable failures. Never return `{ error: ... }` as a failure result: a normal return is treated as a successful action. Reserve bare errors for unexpected internal faults.
 - **Do** use `fail()` rather than a bare `Error` for caller-readable failures. It carries the action's message, `errorCode`, and `details` to the browser and to agents; unexpected errors become a generic 500. Reserve bare throws for internal faults.
 - **Do** give `fail()` the status that matches the cause: it defaults to `400`, and `useActionQuery` retries only `429`, `502`, `503`, and `504`. Mutations do not retry; use transient statuses only for retryable failures.
+- **Do** throw `NoWriteError(message, { errorCode, statusCode })` instead of `fail()` for a rejection raised before the action's first write, such as an edit that matches nothing or a missing target. The agent then retries with corrected arguments instead of stopping on a write whose outcome is unknown. Throw it only before the first write: the framework rejects the claim when a nested write action ran, but it cannot see the handler's own writes.
 - **Do** render `actionErrorMessage(error) ?? yourCopy` in UI, never bare `error.message`. The message keeps an `Action <name> failed:` prefix that belongs in a console, so a toast built from it reads "Action update-brand-kit failed: That name is taken." The helper returns only what the action wrote, and `undefined` when nothing did (network drop, proxy HTML page), which is why the fallback is not optional.
 - **Do** pass a real `errorCode` when the agent should branch on the failure rather than re-read it. Codes other than the default `action_failed` are appended to the tool result as `(errorCode: not_found)`, on both the in-app agent and MCP. `details` follow as an `Error details: {...}` JSON line, and as `structuredContent.error` over MCP, capped at 2,000 characters, so keep them to what the agent acts on next: ids, limits, field names. The status never reaches either.
 - **Don't** re-export actions as REST — `/_agent-native/actions/:name` is already the REST surface; duplicating it under `/api/*` hides the operation from agents.

package/dist/templates/default/.agents/skills/actions/SKILL.md

@@ -172,6 +172,7 @@ Everything else — CRUD, settings, search, list/detail reads, auth state, anyth
 - **Do** signal failure by throwing, using `fail()` for expected caller-readable failures. Never return `{ error: ... }` as a failure result: a normal return is treated as a successful action. Reserve bare errors for unexpected internal faults.
 - **Do** use `fail()` rather than a bare `Error` for caller-readable failures. It carries the action's message, `errorCode`, and `details` to the browser and to agents; unexpected errors become a generic 500. Reserve bare throws for internal faults.
 - **Do** give `fail()` the status that matches the cause: it defaults to `400`, and `useActionQuery` retries only `429`, `502`, `503`, and `504`. Mutations do not retry; use transient statuses only for retryable failures.
+- **Do** throw `NoWriteError(message, { errorCode, statusCode })` instead of `fail()` for a rejection raised before the action's first write, such as an edit that matches nothing or a missing target. The agent then retries with corrected arguments instead of stopping on a write whose outcome is unknown. Throw it only before the first write: the framework rejects the claim when a nested write action ran, but it cannot see the handler's own writes.
 - **Do** render `actionErrorMessage(error) ?? yourCopy` in UI, never bare `error.message`. The message keeps an `Action <name> failed:` prefix that belongs in a console, so a toast built from it reads "Action update-brand-kit failed: That name is taken." The helper returns only what the action wrote, and `undefined` when nothing did (network drop, proxy HTML page), which is why the fallback is not optional.
 - **Do** pass a real `errorCode` when the agent should branch on the failure rather than re-read it. Codes other than the default `action_failed` are appended to the tool result as `(errorCode: not_found)`, on both the in-app agent and MCP. `details` follow as an `Error details: {...}` JSON line, and as `structuredContent.error` over MCP, capped at 2,000 characters, so keep them to what the agent acts on next: ids, limits, field names. The status never reaches either.
 - **Don't** re-export actions as REST — `/_agent-native/actions/:name` is already the REST surface; duplicating it under `/api/*` hides the operation from agents.

package/dist/templates/factory/.agents/skills/review-prs/SKILL.md

@@ -287,6 +287,12 @@ not already settled by Steve's written direction, flag it to Steve and do not
 merge until he decides. A routine bug fix or bounded improvement within an
 established workflow is not a major decision.
 
+Keep the PR thread silent while a product, UX, or app-owner decision is
+unresolved. Do not comment or reply to request, announce, or explain that the
+decision is needed; record the gate only in the recap. This remains true after
+an author update, so do not send a thanks-only or status-only reply while the
+decision is pending.
+
 The app-owner map is for approval exceptions only; an owner approval is not a
 merge requirement:
 
@@ -455,12 +461,29 @@ code or screenshot requests. This also applies when another comment or bot
 event is newer than Steve's request; bot activity alone does not reopen the
 handoff.
 
+On a contributor-owned PR, do not draft a follow-up unless the author has made
+a substantive update since Steve's last message. Begin a first reply by
+thanking the author for the PR; if replying after an author update, begin by
+thanking them for that update. Never write “I have no further feedback” or
+another vague closing. State the disposition, the exact next action, and who
+owns it. If a product, UX, or app-owner decision is still needed, do not post
+an author-facing status comment or ask the author to get that review; keep the
+thread silent and report the decision gate in the recap. Never comment that a
+product owner needs to review the PR. For a contributor thread paused by an
+unresolved gate, an internal decision does not count as an author update, and
+an author update made while the decision is pending does not qualify for a
+follow-up. Keep the thread silent until the decision is resolved and the author
+makes a substantive update after resolution; then thank them for that update
+and state the resolved disposition, exact next action, and owner. This
+contributor-update gate does not govern review feedback on the active user's
+own PR; follow the own-PR review-update rule in `ship`.
+
 If no prior Steve request is awaiting an update and this would be Steve's first
 comment on that PR, begin the draft with a warm thank-you that tags the author
 using the exact GitHub `author.login` from the live PR metadata, for example:
 
 ```text
-Thanks for the contribution @username!
+Thanks for the PR, @username!
 
 Couple requests. Can you please [make the specific update] so [the intended
 behavior or outcome] is preserved?
@@ -473,8 +496,9 @@ the concrete request in a friendly, conversational way (for example, "Couple
 requests. Can you please ...?"). Keep the technical request specific,
 actionable, and supported by the diff or source evidence; ask for a regression
 test when appropriate to the code change rather than as a blanket requirement.
-Do not repeat a thank-you on a follow-up. Do not draft a duplicate request when
-an existing Steve comment already covers it; link or summarize that request
+For a follow-up after an author update, thank them for that update rather than
+repeating the first-contact thanks. Do not draft a duplicate request when an
+existing Steve comment already covers it; link or summarize that request
 instead. Drafts are for the user to review and are never posted by this skill
 unless the current invocation explicitly authorizes posting.
 

package/dist/templates/headless/.agents/skills/actions/SKILL.md

@@ -172,6 +172,7 @@ Everything else — CRUD, settings, search, list/detail reads, auth state, anyth
 - **Do** signal failure by throwing, using `fail()` for expected caller-readable failures. Never return `{ error: ... }` as a failure result: a normal return is treated as a successful action. Reserve bare errors for unexpected internal faults.
 - **Do** use `fail()` rather than a bare `Error` for caller-readable failures. It carries the action's message, `errorCode`, and `details` to the browser and to agents; unexpected errors become a generic 500. Reserve bare throws for internal faults.
 - **Do** give `fail()` the status that matches the cause: it defaults to `400`, and `useActionQuery` retries only `429`, `502`, `503`, and `504`. Mutations do not retry; use transient statuses only for retryable failures.
+- **Do** throw `NoWriteError(message, { errorCode, statusCode })` instead of `fail()` for a rejection raised before the action's first write, such as an edit that matches nothing or a missing target. The agent then retries with corrected arguments instead of stopping on a write whose outcome is unknown. Throw it only before the first write: the framework rejects the claim when a nested write action ran, but it cannot see the handler's own writes.
 - **Do** render `actionErrorMessage(error) ?? yourCopy` in UI, never bare `error.message`. The message keeps an `Action <name> failed:` prefix that belongs in a console, so a toast built from it reads "Action update-brand-kit failed: That name is taken." The helper returns only what the action wrote, and `undefined` when nothing did (network drop, proxy HTML page), which is why the fallback is not optional.
 - **Do** pass a real `errorCode` when the agent should branch on the failure rather than re-read it. Codes other than the default `action_failed` are appended to the tool result as `(errorCode: not_found)`, on both the in-app agent and MCP. `details` follow as an `Error details: {...}` JSON line, and as `structuredContent.error` over MCP, capped at 2,000 characters, so keep them to what the agent acts on next: ids, limits, field names. The status never reaches either.
 - **Don't** re-export actions as REST — `/_agent-native/actions/:name` is already the REST surface; duplicating it under `/api/*` hides the operation from agents.

package/dist/templates/workspace-core/.agents/skills/actions/SKILL.md

@@ -172,6 +172,7 @@ Everything else — CRUD, settings, search, list/detail reads, auth state, anyth
 - **Do** signal failure by throwing, using `fail()` for expected caller-readable failures. Never return `{ error: ... }` as a failure result: a normal return is treated as a successful action. Reserve bare errors for unexpected internal faults.
 - **Do** use `fail()` rather than a bare `Error` for caller-readable failures. It carries the action's message, `errorCode`, and `details` to the browser and to agents; unexpected errors become a generic 500. Reserve bare throws for internal faults.
 - **Do** give `fail()` the status that matches the cause: it defaults to `400`, and `useActionQuery` retries only `429`, `502`, `503`, and `504`. Mutations do not retry; use transient statuses only for retryable failures.
+- **Do** throw `NoWriteError(message, { errorCode, statusCode })` instead of `fail()` for a rejection raised before the action's first write, such as an edit that matches nothing or a missing target. The agent then retries with corrected arguments instead of stopping on a write whose outcome is unknown. Throw it only before the first write: the framework rejects the claim when a nested write action ran, but it cannot see the handler's own writes.
 - **Do** render `actionErrorMessage(error) ?? yourCopy` in UI, never bare `error.message`. The message keeps an `Action <name> failed:` prefix that belongs in a console, so a toast built from it reads "Action update-brand-kit failed: That name is taken." The helper returns only what the action wrote, and `undefined` when nothing did (network drop, proxy HTML page), which is why the fallback is not optional.
 - **Do** pass a real `errorCode` when the agent should branch on the failure rather than re-read it. Codes other than the default `action_failed` are appended to the tool result as `(errorCode: not_found)`, on both the in-app agent and MCP. `details` follow as an `Error details: {...}` JSON line, and as `structuredContent.error` over MCP, capped at 2,000 characters, so keep them to what the agent acts on next: ids, limits, field names. The status never reaches either.
 - **Don't** re-export actions as REST — `/_agent-native/actions/:name` is already the REST surface; duplicating it under `/api/*` hides the operation from agents.

package/dist/templates/workspace-core/.agents/skills/external-agents/references/mcp-apps-embedding.md

@@ -162,8 +162,15 @@ actions for Forms, Content, Clips, Slides, and Design. The action should return
 concise structured content plus the link; it should not dump large catalogs or
 HTML.
 
-Compatibility target: build to the standard once, not per-client shims. MCP
-Apps-capable hosts should include Claude/Claude Desktop/Claude Code, ChatGPT
-custom MCP apps, VS Code GitHub Copilot, Goose, Postman, MCPJam, Cursor, and
-any future host that follows the extension negotiation. Host support varies by
-plan, release channel, and client version, so keep the deep link fallback.
+Compatibility target: build to the standard once, not per-client shims.
+Hosts that render MCP Apps inline today include Claude chat on web, desktop, and
+mobile, plus the Claude Desktop Code tab; ChatGPT; VS Code GitHub Copilot (1.109+);
+Microsoft 365 Copilot; Cursor (2.6+); Goose; Postman; MCPJam; Codex Desktop (26.616+);
+and T3 Code (in Codex threads). Desktop Code rendering is observed in
+[widget bug reports](https://github.com/anthropics/claude-code/issues/103809).
+Treat the Claude Code terminal, Cowork, and Code on claude.ai web as link-out hosts.
+[Cowork doesn't declare MCP Apps yet](https://github.com/anthropics/claude-code/issues/103924),
+and using it on the same connector can make inline apps disappear in Chat until
+you reconnect the connector. Host support varies by plan, release channel, and client version,
+so keep the deep link fallback. See the community-maintained
+[MCP client matrix](https://modelcontextprotocol.io/extensions/client-matrix).