@agent-native/core 0.222.0-nightly-20261029004912 → 0.222.0

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -77,7 +77,6 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
 }, z.core.$strip>>, {
     id?: undefined;
     deleted?: undefined;
-    provider?: undefined;
     message?: undefined;
     found?: undefined;
     providers: {
@@ -90,44 +89,45 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         updatedAt: number;
     }[];
     count: number;
+    provider?: undefined;
     registered?: undefined;
     label?: undefined;
 } | {
     id?: undefined;
+    count?: undefined;
     deleted?: undefined;
     message?: undefined;
     providers?: undefined;
-    count?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
     registered?: undefined;
     label?: undefined;
 } | {
+    count?: undefined;
     deleted?: undefined;
-    provider?: undefined;
     message?: undefined;
     providers?: undefined;
-    count?: undefined;
+    provider?: undefined;
     found: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
 } | {
-    provider?: undefined;
+    count?: undefined;
     message?: undefined;
     found?: undefined;
     providers?: undefined;
-    count?: undefined;
+    provider?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
 } | {
+    count?: undefined;
     deleted?: undefined;
-    provider?: undefined;
     found?: undefined;
     providers?: undefined;
-    count?: undefined;
+    provider?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -319,7 +319,6 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         id?: undefined;
         message?: undefined;
         found?: undefined;
-        deleted?: undefined;
         providers: {
             id: string;
             label: string;
@@ -331,26 +330,27 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         }[];
         count: number;
         provider?: undefined;
+        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
     } | {
         id?: undefined;
         count?: undefined;
         message?: undefined;
-        deleted?: undefined;
         providers?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
+        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
     } | {
         count?: undefined;
         message?: undefined;
-        deleted?: undefined;
         providers?: undefined;
         provider?: undefined;
         found: boolean;
         id: string;
+        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
     } | {
@@ -366,9 +366,9 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
     } | {
         count?: undefined;
         found?: undefined;
-        deleted?: undefined;
         providers?: undefined;
         provider?: undefined;
+        deleted?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/provider-api/actions/provider-api.js

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { defineAction, } from "../../action.js";
 import { getCredentialContext } from "../../server/request-context.js";
+import { assertAgentProviderRequestAllowed } from "../agent-request-policy.js";
 import { isReadOnlyProviderPost } from "../read-only-requests.js";
 import { rejectFailedProviderResult } from "../result-outcome.js";
 import { stagingExecuteRequest } from "../staging.js";
@@ -261,6 +262,7 @@ export function createProviderApiRequestAction(runtime, options = {}) {
         grounding: true,
         run: async (rawArgs) => {
             const args = rawArgs;
+            assertAgentProviderRequestAllowed(args);
             if (args.stageAs) {
                 if (!options.appId) {
                     throw new Error("createProviderApiRequestAction requires appId when stageAs is used.");

package/dist/provider-api/agent-request-policy.d.ts

@@ -0,0 +1,13 @@
+/** Whether agent-supplied provider requests are limited to reads for a provider. */
+export declare function providerApiAgentRequestsReadOnly(provider: string): boolean;
+/**
+ * Refuse a write in a request an agent supplied for a read-only provider.
+ * Every agent-facing action that forwards a caller-built request (request,
+ * corpus jobs) calls this before executing or storing it.
+ */
+export declare function assertAgentProviderRequestAllowed(request: {
+    provider: string;
+    method?: string | null;
+    path: string;
+    body?: unknown;
+}): void;

package/dist/provider-api/agent-request-policy.js

@@ -0,0 +1,31 @@
+import { fail } from "../action.js";
+import { isReadOnlyProviderPost } from "./read-only-requests.js";
+/**
+ * Built-in providers the generic agent request tools may only read. Writes go
+ * through the provider's MCP tools or app-defined actions, which can enforce
+ * their own limits; server code calling `executeRequest` is unaffected.
+ *
+ * Kept out of `./index.js` so the shared request action only needs types from
+ * the runtime module, and template specs that mock it keep working.
+ */
+const AGENT_READ_ONLY_PROVIDERS = new Set(["hubspot"]);
+/** Whether agent-supplied provider requests are limited to reads for a provider. */
+export function providerApiAgentRequestsReadOnly(provider) {
+    return AGENT_READ_ONLY_PROVIDERS.has(provider);
+}
+/**
+ * Refuse a write in a request an agent supplied for a read-only provider.
+ * Every agent-facing action that forwards a caller-built request (request,
+ * corpus jobs) calls this before executing or storing it.
+ */
+export function assertAgentProviderRequestAllowed(request) {
+    if (!providerApiAgentRequestsReadOnly(String(request.provider)))
+        return;
+    const method = String(request.method ?? "GET").toUpperCase();
+    if (method === "GET" ||
+        method === "HEAD" ||
+        isReadOnlyProviderPost(request)) {
+        return;
+    }
+    fail(`${String(request.provider)} requests from agent tools are read-only. Make the change with the provider's MCP tools or an app action built for it.`, { errorCode: "provider_writes_not_allowed", statusCode: 403 });
+}

package/dist/provider-api/corpus-jobs.d.ts

@@ -73,6 +73,7 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     offset?: unknown;
     limit?: unknown;
 }, {
+    deleted?: undefined;
     jobs: {
         id: string;
         name: string;
@@ -83,7 +84,6 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
         updatedAt: string;
     }[];
     total: number;
-    deleted?: undefined;
     jobId?: undefined;
 } | {
     jobs?: undefined;
@@ -91,9 +91,9 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     deleted: boolean;
     jobId: string;
 } | {
+    deleted?: undefined;
     jobs?: undefined;
     total?: undefined;
-    deleted?: undefined;
     jobId?: undefined;
     hits: Record<string, unknown>[];
     offset: number;

package/dist/provider-api/corpus-jobs.js

@@ -2,6 +2,7 @@ import { randomUUID } from "node:crypto";
 import { z } from "zod";
 import { defineAction } from "../action.js";
 import { getCredentialContext } from "../server/request-context.js";
+import { assertAgentProviderRequestAllowed } from "./agent-request-policy.js";
 import { appendProviderCorpusJobHits, createProviderCorpusJob, deleteProviderCorpusJob, getProviderCorpusJob, getProviderCorpusJobHits, listProviderCorpusJobs, updateProviderCorpusJob, } from "./corpus-jobs-store.js";
 import { setBodyValueAtPath } from "./request-body.js";
 import { getStagedDatasetMeta, getStagedDatasetRows, stagedDatasetVersion, } from "./staged-datasets-store.js";
@@ -325,6 +326,7 @@ async function startJob(args, appId, ownerEmail) {
         throw new Error("start requires mode.");
     if (!args.request)
         throw new Error("start requires request.");
+    assertAgentProviderRequestAllowed(args.request);
     const search = args.search ?? {};
     if (!hasSearchNeedle(search)) {
         throw new Error("start requires search.query, search.queries, search.terms, or search.regex.");
@@ -666,7 +668,11 @@ async function pauseForBudget(job, checkpoint) {
     })) ?? job);
 }
 async function callProvider(runtime, request) {
-    const raw = (await runtime.executeRequest(cleanRequest(request)));
+    // Also checked here, not only at start: a job stored before a provider
+    // became read-only must not replay its write on continue.
+    const cleaned = cleanRequest(request);
+    assertAgentProviderRequestAllowed(cleaned);
+    const raw = (await runtime.executeRequest(cleaned));
     const response = raw.response;
     if (!response) {
         return { body: raw };

package/dist/provider-api/index.d.ts

@@ -527,7 +527,10 @@ export declare function executeProviderApiRequest(args: ProviderApiRequestArgs,
 /**
  * Resolve a provider OAuth token for a trusted server-side integration bridge
  * such as a CRM adapter or Google Picker. Callers must keep the result out of
- * agent, MCP, A2A, logs, persistence, and extension/tool surfaces.
+ * agent, MCP, A2A, logs, persistence, and extension/tool surfaces. The one
+ * exception is the provider's own remote MCP endpoint, which may receive it as
+ * a per-request bearer (`mcp-client/workspace-connection-servers.ts`); it is
+ * still never stored on the server config or shown to the agent.
  */
 export declare function resolveProviderApiOAuthAccessToken(args: {
     provider: ProviderApiId;

package/dist/provider-api/index.js

@@ -1722,7 +1722,10 @@ function providerAccessErrorGuidance(config, status) {
 /**
  * Resolve a provider OAuth token for a trusted server-side integration bridge
  * such as a CRM adapter or Google Picker. Callers must keep the result out of
- * agent, MCP, A2A, logs, persistence, and extension/tool surfaces.
+ * agent, MCP, A2A, logs, persistence, and extension/tool surfaces. The one
+ * exception is the provider's own remote MCP endpoint, which may receive it as
+ * a per-request bearer (`mcp-client/workspace-connection-servers.ts`); it is
+ * still never stored on the server config or shown to the agent.
  */
 export async function resolveProviderApiOAuthAccessToken(args, runtime) {
     await assertProviderAllowedAsync(args.provider, runtime);

package/dist/provider-api/read-only-requests.js

@@ -44,17 +44,26 @@ const READ_ONLY_POST_RULES = [
         // extract jobs make no such promise.
         body: (body) => isDryRunQueryJob(body.configuration),
     },
+    // HubSpot paths carry `v3`/`v4` or a date-based version such as `2026-09`,
+    // which HubSpot accepts on either side of the API name
+    // (`/crm/objects/2026-09/...` and `/crm/2026-09/objects/...`).
     {
         provider: "hubspot",
         basePath: "",
         hostSuffixes: ["hubapi.com"],
-        path: /^\/crm\/v3\/(?:objects\/[^/]+\/(?:search|batch\/read)|properties\/[^/]+\/batch\/read)$/,
+        path: /^\/crm\/(?:(?:v3|\d{4}-\d{2})\/objects|objects\/\d{4}-\d{2})\/[^/]+\/(?:search|batch\/read)$/,
     },
     {
         provider: "hubspot",
         basePath: "",
         hostSuffixes: ["hubapi.com"],
-        path: /^\/crm\/v[34]\/associations\/[^/]+\/[^/]+\/batch\/read$/,
+        path: /^\/crm\/(?:(?:v3|\d{4}-\d{2})\/properties|properties\/\d{4}-\d{2})\/[^/]+\/batch\/read$/,
+    },
+    {
+        provider: "hubspot",
+        basePath: "",
+        hostSuffixes: ["hubapi.com"],
+        path: /^\/crm\/(?:(?:v[34]|\d{4}-\d{2})\/associations|associations\/\d{4}-\d{2})\/[^/]+\/[^/]+\/batch\/read$/,
     },
     {
         provider: "gong",

package/dist/resources/handlers.d.ts

@@ -49,6 +49,7 @@ export declare function handleUploadResource(event: any): Promise<import("./stor
     error: string;
     storageSetupRequired?: undefined;
 } | {
+    error?: undefined;
     id: string;
     path: string;
     owner: string;
@@ -63,7 +64,6 @@ export declare function handleUploadResource(event: any): Promise<import("./stor
     runId: string | null;
     expiresAt: number | null;
     metadata: string | null;
-    error?: undefined;
     url: string;
     provider: string;
     storageSetupRequired?: undefined;

package/dist/secrets/routes.d.ts

@@ -55,18 +55,18 @@ export declare function createWriteSecretHandler(): import("h3").EventHandlerWit
     errorCode: "secret_managed_elsewhere";
     managedBy: SecretManagedBy;
 } | {
-    errorCode?: undefined;
-    error: string;
     ok?: undefined;
+    error: string;
+    errorCode?: undefined;
     status?: undefined;
 } | {
+    ok?: undefined;
     error: string;
     errorCode: string;
-    ok?: undefined;
     status?: undefined;
 } | {
-    errorCode?: undefined;
     error?: undefined;
+    errorCode?: undefined;
     ok: boolean;
     status: string;
 } | {

package/dist/server/action-discovery.js

@@ -289,6 +289,8 @@ export const ALWAYS_ON_CORE_ACTIONS = new Set([
     "call-mcp-tool",
     // Connection setup UI needs the workspace prerequisite even in minimal apps.
     "get-managed-mcp-oauth-readiness",
+    // Any app calling a provider API needs to see which scopes its connection holds.
+    "list-workspace-connection-scopes",
     "get-agentkit-capabilities",
     "get-hosted-harness-config",
     "set-hosted-harness-enabled",
@@ -437,6 +439,10 @@ export function coreActionLoaderEntries() {
             "list-workspace-user-groups",
             () => import("../workspace-connections/actions/list-workspace-user-groups.js"),
         ],
+        [
+            "list-workspace-connection-scopes",
+            () => import("../workspace-connections/actions/list-workspace-connection-scopes.js"),
+        ],
         [
             "upsert-workspace-user-group",
             () => import("../workspace-connections/actions/upsert-workspace-user-group.js"),

package/dist/server/agent-chat/process-run-failure.js

@@ -1,11 +1,67 @@
 import { CLAIMED_BACKGROUND_WORKER_FAILED_ERROR_EVENT, finalizeClaimedBackgroundRunFailure, readBackgroundRunClaim, recordRunDiagnostic, RUN_DIAG_STAGE, } from "../../agent/run-store.js";
+function safeDiagnosticToken(value) {
+    return typeof value === "string" && /^[A-Za-z0-9_]{1,64}$/.test(value)
+        ? value
+        : undefined;
+}
+function readFailureMessage(err) {
+    try {
+        return {
+            message: err instanceof Error ? err.message : String(err),
+            readable: true,
+        };
+    }
+    catch {
+        return { message: "unreadable thrown value", readable: false };
+    }
+}
+function routeFailureEvidence(err, message, messageReadable) {
+    try {
+        const error = err;
+        const cause = error?.cause;
+        const errorName = safeDiagnosticToken(error?.name) ??
+            (err instanceof Error ? "unknown" : "NonError");
+        const errorCode = safeDiagnosticToken(error?.code) ?? safeDiagnosticToken(cause?.code);
+        const causeName = safeDiagnosticToken(cause?.name);
+        const errorMessage = /^Background worker returned HTTP ([45]\d\d)(?: code=([A-Za-z0-9_]{1,64}))?$/.exec(message);
+        const evidence = {
+            format: "route_failure_v1",
+            ...(!messageReadable ? { errorMetadata: "unreadable" } : {}),
+            errorName,
+            ...(errorCode
+                ? { errorCode }
+                : errorMessage?.[2]
+                    ? { errorCode: errorMessage[2] }
+                    : {}),
+            ...(errorMessage?.[1] ? { httpStatus: errorMessage[1] } : {}),
+            ...(causeName ? { causeName } : {}),
+        };
+        const tokens = [
+            ...(evidence.errorMetadata
+                ? [`errorMetadata=${evidence.errorMetadata}`]
+                : []),
+            ...(evidence.errorName ? [`errorName=${evidence.errorName}`] : []),
+            ...(evidence.httpStatus ? [`httpStatus=${evidence.httpStatus}`] : []),
+            ...(evidence.errorCode ? [`errorCode=${evidence.errorCode}`] : []),
+            ...(evidence.causeName ? [`causeName=${evidence.causeName}`] : []),
+        ];
+        return { detail: `${tokens.join(" ")} failure=${message}`, evidence };
+    }
+    catch {
+        return {
+            detail: `errorMetadata=unreadable failure=${message}`,
+            evidence: { format: "route_failure_v1", errorMetadata: "unreadable" },
+        };
+    }
+}
 export async function finalizeClaimedAgentChatProcessRunFailure(runId, err, deps = {}) {
     const readClaim = deps.readBackgroundRunClaim ?? readBackgroundRunClaim;
     const record = deps.recordRunDiagnostic ?? recordRunDiagnostic;
     const finalizeFailure = deps.finalizeClaimedBackgroundRunFailure ??
         finalizeClaimedBackgroundRunFailure;
-    const message = err instanceof Error ? err.message : String(err);
-    await record(runId, RUN_DIAG_STAGE.routeThrew, message).catch(() => { });
+    const { message, readable } = readFailureMessage(err);
+    const diagnostic = routeFailureEvidence(err, message, readable);
+    await record(runId, RUN_DIAG_STAGE.routeThrew, diagnostic.detail, diagnostic.evidence).catch(() => { });
     const claim = await readClaim(runId);
     if (claim?.status !== "running" ||
         claim.dispatchMode !== "background-processing") {

package/dist/server/agent-engine-api-key-route.d.ts

@@ -54,21 +54,21 @@ export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scop
     error: string;
 }>;
 export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     errorCode?: undefined;
     code?: undefined;
+    error: string;
 } | {
+    code?: undefined;
     error: string;
     errorCode: string;
-    code?: undefined;
 } | {
     errorCode?: undefined;
     error: string;
     code: ProviderKeyCheckCode;
 } | {
-    error?: undefined;
     errorCode?: undefined;
     code?: undefined;
+    error?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string | undefined;

package/dist/server/workspace-provider-oauth.d.ts

@@ -85,6 +85,7 @@ export declare function isWorkspaceProviderOAuthFlowValid(input: {
 }): boolean;
 export declare function canConnectWorkspaceProviderOAuth(orgId: string | null | undefined, role: string | null | undefined): boolean;
 export declare function scopedOAuthAccountId(provider: GenericWorkspaceOAuthProvider, owner: string, accountId: string): string;
+export declare function tokenScopes(tokens: Record<string, unknown>, fallback: readonly string[]): string[];
 export declare function mergeWorkspaceOAuthValues(existing: readonly string[], incoming: readonly string[]): string[];
 export declare function resolveSalesforceOAuthLoginUrl(environment: string | undefined): string | null;
 export declare function salesforceOAuthEndpoint(loginUrl: string, phase: "authorize" | "token"): string;

package/dist/server/workspace-provider-oauth.js

@@ -1202,9 +1202,17 @@ async function fetchBoundedProviderJsonValue(url, init, providerLabel) {
         return { response, body: {} };
     }
 }
-function tokenScopes(tokens, fallback) {
+export function tokenScopes(tokens, fallback) {
     const scope = text(tokens.scope);
-    return scope ? scope.split(/[ ,]+/).filter(Boolean) : [...fallback];
+    if (scope)
+        return scope.split(/[ ,]+/).filter(Boolean);
+    // HubSpot's token endpoint returns the granted scopes as a `scopes` array.
+    if (Array.isArray(tokens.scopes)) {
+        const scopes = tokens.scopes.filter((value) => typeof value === "string" && value !== "");
+        if (scopes.length)
+            return scopes;
+    }
+    return [...fallback];
 }
 export function mergeWorkspaceOAuthValues(existing, incoming) {
     return [...new Set([...existing, ...incoming])];

package/dist/templates/chat/.agents/skills/actions/references/provider-apis.md

@@ -93,3 +93,16 @@ cross-source joins, multi-page provider sweeps, and heavy analysis scripts;
 keep quick scripts in the default foreground mode. Agents should continue
 other work between polls, and on `failed`/`timed_out` split the computation or
 persist intermediate progress with `workspaceWrite` and re-run.
+
+## HubSpot API versions
+
+Write new HubSpot code against a date-based API version (2026-09 or later),
+for example `POST /crm/objects/2026-09/contacts`, not `/crm/v3/...`. Only the
+date-based versions apply the portal's required-property rules to API writes:
+a create that leaves out a property the portal's create form requires, or a
+stage change missing a conditionally required property, is rejected with a
+400, while the same request on `/crm/v3/` succeeds. HubSpot also stops
+supporting v1-v3 after September 2027. Moving existing write code to a dated
+version changes its behavior, because writes that pass today can start failing
+validation, so migrate one app at a time and surface those 400s to the user.
+Reads behave the same on either version.

package/dist/templates/default/.agents/skills/actions/references/provider-apis.md

@@ -93,3 +93,16 @@ cross-source joins, multi-page provider sweeps, and heavy analysis scripts;
 keep quick scripts in the default foreground mode. Agents should continue
 other work between polls, and on `failed`/`timed_out` split the computation or
 persist intermediate progress with `workspaceWrite` and re-run.
+
+## HubSpot API versions
+
+Write new HubSpot code against a date-based API version (2026-09 or later),
+for example `POST /crm/objects/2026-09/contacts`, not `/crm/v3/...`. Only the
+date-based versions apply the portal's required-property rules to API writes:
+a create that leaves out a property the portal's create form requires, or a
+stage change missing a conditionally required property, is rejected with a
+400, while the same request on `/crm/v3/` succeeds. HubSpot also stops
+supporting v1-v3 after September 2027. Moving existing write code to a dated
+version changes its behavior, because writes that pass today can start failing
+validation, so migrate one app at a time and surface those 400s to the user.
+Reads behave the same on either version.

package/dist/templates/factory/.agents/skills/review-latest-feedback/SKILL.md

@@ -21,6 +21,10 @@ not judged by ledgers, receipts, or checker output, so don't produce them.
 
 ## The contract
 
+The detailed Slack reaction and reply rules are in
+[slack-reaction-replies.md](references/slack-reaction-replies.md); read it before
+marking, replying to, or closing any Slack report.
+
 Slack reactions on a report's root message mean exactly this:
 
 | Mark | Meaning                                   | When to add                                                                                      |
@@ -43,7 +47,8 @@ might need to take back. Every 👀 you add ends the run with a reply, plus
 either ✅ or 🎫, or a fix PR that is still open and lists the report (its
 merge adds the ✅). A 👀 with no follow-up is the most common complaint about this workflow.
 
-Every claimed report gets **one** reply in its thread per outcome. People
+Every claimed report gets **one** reply in its thread per outcome. The one exception is
+the merged `✅` close-out after an in-review reply, which gets no second reply. People
 have pushed back on replies that were long, technical, condescending, vague
 about who does what next, or that handed them work. Each reply must be:
 
@@ -261,9 +266,10 @@ apart from Steve's own 👀.
 - **Prove it.** The check has to fail with the fix's source changes put
   back to `main` and pass with them. A check that passes without your fix
   doesn't test the bug: write one that does. Tests that read source text
-  never count. For a purely visual fix, a before and after screenshot of the
-  signed-in app stands in. Put the proof under the report in the PR's
-  `Reports` section.
+  never count. For a purely visual fix, before and after screenshots are
+  evidence for a person to inspect, not automated proof. Before merging, a
+  human must open both images and confirm they show the reported change. Put
+  the evidence under the report in the PR's `Reports` section.
 - **Two misses, then stop guessing.** If two attempts don't turn the check
   green, stop editing and capture the real failure first (stack, logs, the
   reporter's actual data). If that doesn't settle it within about 30