@agent-native/core 0.225.2-nightly-20261106152255 → 0.226.0

package/dist/localization/workspace-integration-messages.js

@@ -0,0 +1,132 @@
+import { getUserSetting } from "../settings/user-settings.js";
+import { DEFAULT_LOCALE, SUPPORTED_LOCALES, LOCALIZATION_SETTING_KEY, normalizeLocalizationPreference, } from "./shared.js";
+const messages = {
+    "en-US": {
+        composerReferenceAuthentication: "Sign in to add a reference.",
+        composerReferenceInvalid: "Choose a valid reference before sending.",
+        composerReferenceUnavailable: "A selected reference is no longer available. Remove it or choose it again.",
+        referenceUnknown: "Unknown workspace reference source.",
+        referenceSignIn: "Sign in to search workspace references.",
+        referenceUnavailable: "Could not load workspace references.",
+        limit: "Too many selected integrations.",
+        invalid: "Choose a connected integration before sending.",
+        unavailable: "A selected integration is no longer available to this app. Reconnect it or remove its reference before sending.",
+    },
+    "fr-FR": {
+        composerReferenceAuthentication: "Connectez-vous pour ajouter une référence.",
+        composerReferenceInvalid: "Choisissez une référence valide avant l’envoi.",
+        composerReferenceUnavailable: "Une référence sélectionnée n’est plus disponible. Supprimez-la ou sélectionnez-la à nouveau.",
+        referenceUnknown: "Source de référence de l’espace de travail inconnue.",
+        referenceSignIn: "Connectez-vous pour rechercher des références de l’espace de travail.",
+        referenceUnavailable: "Impossible de charger les références de l’espace de travail.",
+        limit: "Trop d’intégrations sélectionnées.",
+        invalid: "Choisissez une intégration connectée avant l’envoi.",
+        unavailable: "Une intégration sélectionnée n’est plus accessible à cette application. Reconnectez-la ou supprimez sa référence avant l’envoi.",
+    },
+    "de-DE": {
+        composerReferenceAuthentication: "Melde dich an, um eine Referenz hinzuzufügen.",
+        composerReferenceInvalid: "Wähle vor dem Senden eine gültige Referenz.",
+        composerReferenceUnavailable: "Eine ausgewählte Referenz ist nicht mehr verfügbar. Entferne sie oder wähle sie erneut.",
+        referenceUnknown: "Unbekannte Quelle für Arbeitsbereichsreferenzen.",
+        referenceSignIn: "Melden Sie sich an, um Arbeitsbereichsreferenzen zu suchen.",
+        referenceUnavailable: "Arbeitsbereichsreferenzen konnten nicht geladen werden.",
+        limit: "Zu viele ausgewählte Integrationen.",
+        invalid: "Wählen Sie vor dem Senden eine verbundene Integration.",
+        unavailable: "Eine ausgewählte Integration ist für diese App nicht mehr verfügbar. Verbinden Sie sie erneut oder entfernen Sie ihren Verweis vor dem Senden.",
+    },
+    "es-ES": {
+        composerReferenceAuthentication: "Inicia sesión para añadir una referencia.",
+        composerReferenceInvalid: "Elige una referencia válida antes de enviar.",
+        composerReferenceUnavailable: "Una referencia seleccionada ya no está disponible. Elimínala o selecciónala de nuevo.",
+        referenceUnknown: "Fuente de referencias del espacio de trabajo desconocida.",
+        referenceSignIn: "Inicia sesión para buscar referencias del espacio de trabajo.",
+        referenceUnavailable: "No se pudieron cargar las referencias del espacio de trabajo.",
+        limit: "Demasiadas integraciones seleccionadas.",
+        invalid: "Elige una integración conectada antes de enviar.",
+        unavailable: "Una integración seleccionada ya no está disponible para esta aplicación. Vuelve a conectarla o elimina su referencia antes de enviar.",
+    },
+    "pt-BR": {
+        composerReferenceAuthentication: "Entre para adicionar uma referência.",
+        composerReferenceInvalid: "Escolha uma referência válida antes de enviar.",
+        composerReferenceUnavailable: "Uma referência selecionada não está mais disponível. Remova-a ou selecione-a novamente.",
+        referenceUnknown: "Fonte de referências do espaço de trabalho desconhecida.",
+        referenceSignIn: "Entre para pesquisar referências do espaço de trabalho.",
+        referenceUnavailable: "Não foi possível carregar as referências do espaço de trabalho.",
+        limit: "Muitas integrações selecionadas.",
+        invalid: "Escolha uma integração conectada antes de enviar.",
+        unavailable: "Uma integração selecionada não está mais disponível para este aplicativo. Reconecte-a ou remova sua referência antes de enviar.",
+    },
+    "ja-JP": {
+        composerReferenceAuthentication: "参照を追加するにはログインしてください。",
+        composerReferenceInvalid: "送信する前に有効な参照を選択してください。",
+        composerReferenceUnavailable: "選択した参照は利用できなくなりました。削除するか、もう一度選択してください。",
+        referenceUnknown: "不明なワークスペース参照元です。",
+        referenceSignIn: "ワークスペースの参照を検索するにはログインしてください。",
+        referenceUnavailable: "ワークスペースの参照を読み込めませんでした。",
+        limit: "選択した連携が多すぎます。",
+        invalid: "送信前に接続済みの連携を選択してください。",
+        unavailable: "選択した連携はこのアプリで利用できなくなりました。再接続するか、参照を削除してから送信してください。",
+    },
+    "ko-KR": {
+        composerReferenceAuthentication: "참조를 추가하려면 로그인하세요.",
+        composerReferenceInvalid: "전송하기 전에 유효한 참조를 선택하세요.",
+        composerReferenceUnavailable: "선택한 참조를 더 이상 사용할 수 없습니다. 제거하거나 다시 선택하세요.",
+        referenceUnknown: "알 수 없는 워크스페이스 참조 소스입니다.",
+        referenceSignIn: "워크스페이스 참조를 검색하려면 로그인하세요.",
+        referenceUnavailable: "워크스페이스 참조를 불러오지 못했습니다.",
+        limit: "선택한 통합이 너무 많습니다.",
+        invalid: "전송 전에 연결된 통합을 선택하세요.",
+        unavailable: "선택한 통합을 이 앱에서 더 이상 사용할 수 없습니다. 다시 연결하거나 참조를 제거한 후 전송하세요.",
+    },
+    "zh-CN": {
+        composerReferenceAuthentication: "登录以添加引用。",
+        composerReferenceInvalid: "发送前请选择有效的引用。",
+        composerReferenceUnavailable: "所选引用已不可用。请移除或重新选择。",
+        referenceUnknown: "未知的工作区引用来源。",
+        referenceSignIn: "请登录以搜索工作区引用。",
+        referenceUnavailable: "无法加载工作区引用。",
+        limit: "选择的集成过多。",
+        invalid: "请在发送前选择已连接的集成。",
+        unavailable: "所选集成已无法在此应用中使用。请重新连接或移除其引用后再发送。",
+    },
+    "zh-TW": {
+        composerReferenceAuthentication: "登入以新增引用。",
+        composerReferenceInvalid: "傳送前請選擇有效的引用。",
+        composerReferenceUnavailable: "所選引用已無法使用。請移除或重新選擇。",
+        referenceUnknown: "未知的工作區參照來源。",
+        referenceSignIn: "請登入以搜尋工作區參照。",
+        referenceUnavailable: "無法載入工作區參照。",
+        limit: "選取的整合項目過多。",
+        invalid: "請在傳送前選擇已連線的整合項目。",
+        unavailable: "此應用程式已無法使用選取的整合項目。請重新連線或移除其參照後再傳送。",
+    },
+    "hi-IN": {
+        composerReferenceAuthentication: "संदर्भ जोड़ने के लिए साइन इन करें।",
+        composerReferenceInvalid: "भेजने से पहले एक मान्य संदर्भ चुनें।",
+        composerReferenceUnavailable: "चुना गया संदर्भ अब उपलब्ध नहीं है। उसे हटाएँ या फिर से चुनें।",
+        referenceUnknown: "कार्यस्थान संदर्भ का अज्ञात स्रोत।",
+        referenceSignIn: "कार्यस्थान संदर्भ खोजने के लिए साइन इन करें।",
+        referenceUnavailable: "कार्यस्थान संदर्भ लोड नहीं हो सके।",
+        limit: "बहुत अधिक एकीकरण चुने गए हैं।",
+        invalid: "भेजने से पहले कोई जुड़ा हुआ एकीकरण चुनें।",
+        unavailable: "चुना गया एकीकरण अब इस ऐप के लिए उपलब्ध नहीं है। उसे फिर जोड़ें या भेजने से पहले उसका संदर्भ हटाएँ।",
+    },
+    "ar-SA": {
+        composerReferenceAuthentication: "سجّل الدخول لإضافة مرجع.",
+        composerReferenceInvalid: "اختر مرجعًا صالحًا قبل الإرسال.",
+        composerReferenceUnavailable: "لم يعد المرجع المحدد متاحًا. أزله أو اختره مرة أخرى.",
+        referenceUnknown: "مصدر مراجع مساحة العمل غير معروف.",
+        referenceSignIn: "سجّل الدخول للبحث في مراجع مساحة العمل.",
+        referenceUnavailable: "تعذر تحميل مراجع مساحة العمل.",
+        limit: "تم تحديد عدد كبير جدًا من عمليات التكامل.",
+        invalid: "اختر تكاملًا متصلًا قبل الإرسال.",
+        unavailable: "لم يعد أحد التكاملات المحددة متاحًا لهذا التطبيق. أعد توصيله أو أزل مرجعه قبل الإرسال.",
+    },
+};
+export async function workspaceIntegrationMessagesForUser(userEmail) {
+    const preference = normalizeLocalizationPreference(userEmail
+        ? await getUserSetting(userEmail, LOCALIZATION_SETTING_KEY)
+        : undefined);
+    const locale = SUPPORTED_LOCALES.find((candidate) => candidate === preference.locale);
+    return messages[locale ?? DEFAULT_LOCALE];
+}

package/dist/mcp/screen-memory-stdio.d.ts

@@ -283,20 +283,20 @@ export declare function screenMemoryMcpToolDefinitions(): ({
                 type: string;
             };
             startAt: {
-                description?: undefined;
                 type: string;
+                description?: undefined;
             };
             endAt: {
-                description?: undefined;
                 type: string;
+                description?: undefined;
             };
             count: {
                 type: string;
                 description: string;
             };
             reason: {
-                description?: undefined;
                 type: string;
+                description?: undefined;
             };
             includeMicrophone?: undefined;
             includeSystemAudio?: undefined;

package/dist/notifications/routes.d.ts

@@ -1,18 +1,18 @@
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
     error?: undefined;
+    ok?: undefined;
     count: number;
     updated?: undefined;
-    ok?: undefined;
 } | {
     error?: undefined;
+    ok?: undefined;
     count?: undefined;
     updated: number;
-    ok?: undefined;
 } | {
+    ok?: undefined;
     count?: undefined;
     updated?: undefined;
     error: string;
-    ok?: undefined;
 } | {
     error?: undefined;
     count?: undefined;

package/dist/org/index.d.ts

@@ -180,9 +180,9 @@ export declare const getMyOrgHandler: import("h3").EventHandlerWithFetch<import(
     soloDeploymentAdmin: boolean | undefined;
 }>>;
 export declare const createOrgHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    success: boolean;
     id?: undefined;
     name?: undefined;
+    success: boolean;
     role?: undefined;
 } | {
     success?: undefined;

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,7 +75,9 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
+    id?: undefined;
     message?: undefined;
+    found?: undefined;
     providers: {
         id: string;
         label: string;
@@ -87,12 +89,11 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     }[];
     count: number;
     provider?: undefined;
-    found?: undefined;
     deleted?: undefined;
     registered?: undefined;
-    id?: undefined;
     label?: undefined;
 } | {
+    id?: undefined;
     message?: undefined;
     providers?: undefined;
     count?: undefined;
@@ -100,7 +101,6 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     provider: import("../custom-registry.js").CustomProviderConfig;
     deleted?: undefined;
     registered?: undefined;
-    id?: undefined;
     label?: undefined;
 } | {
     message?: undefined;
@@ -114,19 +114,19 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     label?: undefined;
 } | {
     message?: undefined;
+    found?: undefined;
     providers?: undefined;
     count?: undefined;
     provider?: undefined;
-    found?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
 } | {
+    found?: undefined;
     providers?: undefined;
     count?: undefined;
     provider?: undefined;
-    found?: undefined;
     deleted?: undefined;
     registered: boolean;
     id: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -317,6 +317,7 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         scope?: "org" | "user" | undefined;
     }, {
         message?: undefined;
+        found?: undefined;
         id?: undefined;
         providers: {
             id: string;
@@ -329,7 +330,6 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         }[];
         count: number;
         provider?: undefined;
-        found?: undefined;
         deleted?: undefined;
         registered?: undefined;
         label?: undefined;
@@ -356,18 +356,18 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
     } | {
         count?: undefined;
         message?: undefined;
+        found?: undefined;
         providers?: undefined;
         provider?: undefined;
-        found?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
     } | {
         count?: undefined;
+        found?: undefined;
         providers?: undefined;
         provider?: undefined;
-        found?: undefined;
         deleted?: undefined;
         registered: boolean;
         id: string;

package/dist/provider-api/actions/provider-api.js

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { defineAction, } from "../../action.js";
 import { getCredentialContext } from "../../server/request-context.js";
 import { assertAgentProviderRequestAllowed } from "../agent-request-policy.js";
+import { registerProviderApiActionRuntime } from "../index.js";
 import { isReadOnlyProviderPost } from "../read-only-requests.js";
 import { rejectFailedProviderResult } from "../result-outcome.js";
 import { stagingExecuteRequest } from "../staging.js";
@@ -211,6 +212,7 @@ function rethrowStagingError(error) {
     throw error;
 }
 export function createProviderApiRequestAction(runtime, options = {}) {
+    registerProviderApiActionRuntime(runtime);
     const schema = options.schema ?? createProviderApiRequestSchema();
     return defineAction({
         description: options.description ??

package/dist/provider-api/index.d.ts

@@ -405,7 +405,7 @@ export declare function getProviderApiConfig(provider: ProviderApiId | string, o
 export declare function isValidProviderApiBaseUrl(provider: ProviderApiId | string, value: string, overrides?: readonly ProviderApiConfig[]): boolean;
 export declare function mergeProviderApiConfigs(overrides?: readonly ProviderApiConfig[]): ProviderApiConfig[];
 export declare function isProviderApiId(provider: string): provider is ProviderApiId;
-export declare function listProviderApiIdsForTemplateUse(templateUse: WorkspaceConnectionTemplateUse, overrides?: readonly ProviderApiConfig[]): ProviderApiId[];
+export declare function listProviderApiIdsForTemplateUse(templateUse: string, overrides?: readonly ProviderApiConfig[]): ProviderApiId[];
 export declare function listProviderApiCatalog(provider?: ProviderApiId | string, options?: {
     providerIds?: readonly (ProviderApiId | string)[];
     providerOverrides?: readonly ProviderApiConfig[];
@@ -428,6 +428,12 @@ export declare function listProviderApiCatalog(provider?: ProviderApiId | string
     corpusRecipes: readonly ProviderApiCorpusRecipe[];
     templateUses: readonly WorkspaceConnectionTemplateUse[];
 }[];
+export declare function registerProviderApiActionRuntime(runtime: object): void;
+export declare function getRegisteredProviderApiRuntimeOptions(appId: string): ProviderApiRuntimeOptions | undefined;
+export declare function listRegisteredCustomProviderCapabilities(appId: string, context: CredentialContext): Promise<{
+    id: string;
+    label: string;
+}[]>;
 export declare function createProviderApiRuntime(options: ProviderApiRuntimeOptions): ProviderApiRuntime;
 export declare function fetchProviderApiDocs(options: ProviderApiDocsOptions, runtime?: ProviderApiRuntimeOptions): Promise<{
     provider: string;

package/dist/provider-api/index.js

@@ -1344,7 +1344,7 @@ export function isProviderApiId(provider) {
 }
 export function listProviderApiIdsForTemplateUse(templateUse, overrides = []) {
     const configs = new Map(mergeProviderApiConfigs(overrides).map((config) => [config.id, config]));
-    return PROVIDER_API_IDS.filter((id) => (configs.get(id)?.templateUses ?? []).includes(templateUse));
+    return PROVIDER_API_IDS.filter((id) => (configs.get(id)?.templateUses ?? []).some((use) => use === templateUse));
 }
 export function listProviderApiCatalog(provider, options = {}) {
     const providerIds = normalizeProviderIds(options.providerIds);
@@ -1374,6 +1374,44 @@ export function listProviderApiCatalog(provider, options = {}) {
         templateUses: config.templateUses ?? [],
     }));
 }
+const registeredProviderApiRuntimes = new Map();
+const providerApiRuntimeOptions = new WeakMap();
+export function registerProviderApiActionRuntime(runtime) {
+    const options = providerApiRuntimeOptions.get(runtime);
+    if (options)
+        registeredProviderApiRuntimes.set(options.appId, options);
+}
+export function getRegisteredProviderApiRuntimeOptions(appId) {
+    return registeredProviderApiRuntimes.get(appId);
+}
+export async function listRegisteredCustomProviderCapabilities(appId, context) {
+    const runtime = getRegisteredProviderApiRuntimeOptions(appId);
+    if (!runtime?.getCustomProviders)
+        return [];
+    const providers = await runtime.getCustomProviders();
+    const result = [];
+    for (const provider of providers) {
+        if (!((provider.scope === "org" && provider.scopeId === context.orgId) ||
+            (provider.scope === "user" && provider.scopeId === context.userEmail)))
+            continue;
+        const keys = extractCredentialKeysFromCustomAuth(provider.auth);
+        const credentials = await Promise.all(keys.map((key) => (runtime.resolveCredential ?? defaultProviderApiCredentialResolver)({
+            appId,
+            provider: provider.id,
+            key,
+            ctx: context,
+            localCredentialSource: runtime.localCredentialSource ?? "app_local",
+        })));
+        if (credentials.some((credential) => !credential))
+            continue;
+        for (const credential of credentials) {
+            if (credential)
+                assertCredentialCanReachEndpoint({ scope: provider.scope, scopeId: provider.scopeId }, credential, credential.key);
+        }
+        result.push({ id: provider.id, label: provider.label });
+    }
+    return result;
+}
 export function createProviderApiRuntime(options) {
     mergeProviderApiConfigs(options.providerOverrides);
     const providerIds = normalizeProviderIds(options.providerIds);
@@ -1382,7 +1420,7 @@ export function createProviderApiRuntime(options) {
         providerIds,
         localCredentialSource: options.localCredentialSource ?? "app_local",
     };
-    return {
+    const runtime = {
         providerIds,
         listCatalog: (provider) => listProviderApiCatalogWithCustom(provider, { providerIds, providerOverrides: options.providerOverrides }, runtimeOptions),
         fetchDocs: (docsOptions) => fetchProviderApiDocs(docsOptions, runtimeOptions),
@@ -1394,6 +1432,8 @@ export function createProviderApiRuntime(options) {
         writeGitHubRepositoryFile: (args) => writeGitHubRepositoryFile(args, runtimeOptions),
         deleteGitHubRepositoryFile: (args) => deleteGitHubRepositoryFile(args, runtimeOptions),
     };
+    providerApiRuntimeOptions.set(runtime, runtimeOptions);
+    return runtime;
 }
 export async function fetchProviderApiDocs(options, runtime = { appId: "app" }) {
     await assertProviderAllowedAsync(options.provider, runtime);

package/dist/scripts/resources/read.d.ts

@@ -1 +1,6 @@
-export default function resourceReadScript(args: string[]): Promise<void>;
+export declare const RESOURCE_READ_PAGE_CHARS = 40000;
+export declare class ResourceReadResultLimitError extends Error {
+}
+export default function resourceReadScript(args: string[], options?: {
+    maxResultChars?: number;
+}): Promise<void>;

package/dist/scripts/resources/read.js

@@ -41,11 +41,82 @@ async function requireSkillLabAccess(resource, resourcePath, owner, orgId) {
         fail(`Cannot read "${resourcePath}": the skill requires the "${requiredLab}" Lab to be enabled.`, { errorCode: "skill_lab_required", statusCode: 403 });
     }
 }
-async function writeResource(resource, resourcePath, owner, orgId) {
+export const RESOURCE_READ_PAGE_CHARS = 40_000;
+export class ResourceReadResultLimitError extends Error {
+}
+function parseRangeArg(name, value) {
+    if (value === undefined)
+        return undefined;
+    const n = Number(value);
+    if (!Number.isInteger(n) || n < (name === "length" ? 1 : 0)) {
+        fail(`--${name} must be ${name === "length" ? "a positive" : "a non-negative"} integer.`);
+    }
+    return n;
+}
+function isInsideSurrogatePair(content, offset) {
+    const previous = content.charCodeAt(offset - 1);
+    const current = content.charCodeAt(offset);
+    return (previous >= 0xd800 &&
+        previous <= 0xdbff &&
+        current >= 0xdc00 &&
+        current <= 0xdfff);
+}
+async function writeResource(resource, resourcePath, owner, orgId, range, maxResultChars) {
     await requireSkillLabAccess(resource, resourcePath, owner, orgId);
-    process.stdout.write(resource.content);
+    const { content } = resource;
+    const offset = range.offset ?? 0;
+    const length = Math.min(range.length ?? RESOURCE_READ_PAGE_CHARS, RESOURCE_READ_PAGE_CHARS);
+    if (offset === 0 &&
+        content.length <= length &&
+        content.length <= maxResultChars) {
+        process.stdout.write(content);
+        return;
+    }
+    if (offset >= content.length) {
+        fail(`--offset ${offset} is past the end of "${resourcePath}" (${content.length} chars).`);
+    }
+    if (isInsideSurrogatePair(content, offset)) {
+        fail(`--offset ${offset} falls inside a surrogate pair in "${resourcePath}".`);
+    }
+    let end = Math.min(offset + length, content.length);
+    if (isInsideSurrogatePair(content, end)) {
+        end += end - offset === 1 ? 1 : -1;
+    }
+    const header = (pageEnd) => {
+        const status = pageEnd < content.length
+            ? `partial - read again with offset=${pageEnd} for the rest`
+            : "end of resource";
+        return `[chars ${offset}-${pageEnd} of ${content.length}; ${status}]\n`;
+    };
+    if (header(end).length + end - offset > maxResultChars) {
+        let low = offset + 1;
+        let high = Math.min(end, content.length - 1);
+        let fittingEnd = offset;
+        while (low <= high) {
+            const mid = Math.floor((low + high) / 2);
+            if (header(mid).length + mid - offset <= maxResultChars) {
+                fittingEnd = mid;
+                low = mid + 1;
+            }
+            else {
+                high = mid - 1;
+            }
+        }
+        end = fittingEnd;
+        if (isInsideSurrogatePair(content, end))
+            end--;
+        if (end === offset) {
+            throw new ResourceReadResultLimitError("Resource read result limit is too small for a page header and one character.");
+        }
+    }
+    process.stdout.write(header(end) + content.slice(offset, end));
 }
-export default async function resourceReadScript(args) {
+export default async function resourceReadScript(args, options = {}) {
+    const maxResultChars = options.maxResultChars ?? Infinity;
+    if (maxResultChars !== Infinity &&
+        (!Number.isSafeInteger(maxResultChars) || maxResultChars < 0)) {
+        throw new ResourceReadResultLimitError("Invalid resource read result limit.");
+    }
     const parsed = parseArgs(args);
     if (parsed.help === "true") {
         console.log(`Usage: pnpm action resource-read --path <path> [options]
@@ -54,6 +125,8 @@ Options:
   --path <path>            Resource path (required)
   --scope personal|shared|workspace
                            Scope to read from (default: personal, falls back to shared then workspace)
+  --offset <n>             Start at this character (default: 0)
+  --length <n>             Characters to return (max ${RESOURCE_READ_PAGE_CHARS}; larger resources are returned in pages)
   --help                   Show this help message`);
         return;
     }
@@ -61,6 +134,10 @@ Options:
     if (!resourcePath) {
         fail("--path is required. Example: --path LEARNINGS.md");
     }
+    const range = {
+        offset: parseRangeArg("offset", parsed.offset),
+        length: parseRangeArg("length", parsed.length),
+    };
     const scope = parsed.scope;
     const owner = getRequestUserEmail() ?? getAmbientUserEmail();
     if (!owner) {
@@ -78,7 +155,7 @@ Options:
             console.log(`Resource not found: ${resourcePath} (scope: workspace). Workspace resources are managed from Dispatch.`);
             return;
         }
-        await writeResource(resource, resourcePath, owner, orgId);
+        await writeResource(resource, resourcePath, owner, orgId, range, maxResultChars);
         return;
     }
     if (scope === "shared") {
@@ -92,12 +169,12 @@ Options:
             console.log(`Resource not found: ${resourcePath} (scope: shared). You can create it with resource-write.`);
             return;
         }
-        await writeResource(resource, resourcePath, owner, orgId);
+        await writeResource(resource, resourcePath, owner, orgId, range, maxResultChars);
         return;
     }
     const personal = await resourceGetByPath(owner, resourcePath);
     if (personal) {
-        await writeResource(personal, resourcePath, owner, getRequestOrgId() ?? null);
+        await writeResource(personal, resourcePath, owner, getRequestOrgId() ?? null, range, maxResultChars);
         return;
     }
     if (scope === "personal") {
@@ -111,14 +188,14 @@ Options:
             ? null
             : await resourceGetByPath(SHARED_OWNER, resourcePath, { orgId }));
     if (shared) {
-        await writeResource(shared, resourcePath, owner, orgId);
+        await writeResource(shared, resourcePath, owner, orgId, range, maxResultChars);
         return;
     }
     const workspace = await resourceGetByPath(WORKSPACE_OWNER, resourcePath, {
         orgId,
     });
     if (workspace) {
-        await writeResource(workspace, resourcePath, owner, orgId);
+        await writeResource(workspace, resourcePath, owner, orgId, range, maxResultChars);
         return;
     }
     console.log(`Resource not found: ${resourcePath}. You can create it with resource-write.`);

package/dist/secrets/routes.d.ts

@@ -55,8 +55,8 @@ export declare function createWriteSecretHandler(): import("h3").EventHandlerWit
     errorCode: "secret_managed_elsewhere";
     managedBy: SecretManagedBy;
 } | {
-    errorCode?: undefined;
     error: string;
+    errorCode?: undefined;
     ok?: undefined;
     status?: undefined;
 } | {
@@ -65,8 +65,8 @@ export declare function createWriteSecretHandler(): import("h3").EventHandlerWit
     ok?: undefined;
     status?: undefined;
 } | {
-    errorCode?: undefined;
     error?: undefined;
+    errorCode?: undefined;
     ok: boolean;
     status: string;
 } | {

package/dist/server/agent-chat/script-entries.js

@@ -286,10 +286,6 @@ export async function createResourceScriptEntries() {
             description: "",
             parameters: { type: "object", properties: {} },
         }, list.default, { readOnly: true });
-        const readEntry = wrapCliScript({
-            description: "",
-            parameters: { type: "object", properties: {} },
-        }, read.default, { readOnly: true });
         const writeEntry = wrapCliScript({
             description: "",
             parameters: { type: "object", properties: {} },
@@ -329,6 +325,14 @@ export async function createResourceScriptEntries() {
                                 type: "string",
                                 description: "Content to write. Required for write.",
                             },
+                            offset: {
+                                type: "string",
+                                description: "read: start character (default 0); use the partial header's next offset.",
+                            },
+                            length: {
+                                type: "string",
+                                description: "read: max chars (default/max 40000).",
+                            },
                             scope: {
                                 type: "string",
                                 description: "personal, shared, workspace, or all (default varies by action). Workspace is read-only when inherited from Dispatch; in local file mode AGENTS.md, agent-native.json, mcp.config.json, .mcp.json, and skills/ are writable.",
@@ -371,14 +375,31 @@ export async function createResourceScriptEntries() {
                 },
                 needsApproval: requiresSharedResourceApproval,
                 allowPersistentApproval: false,
-                run: async (args) => {
+                run: async (args, context) => {
                     const { action: a, ...rest } = args;
                     if (a === "list")
                         return listEntry.run(rest);
                     if (a === "read") {
                         if (!rest.path)
                             return "Error: path is required for read";
-                        return readEntry.run(rest);
+                        let limitError;
+                        const result = await captureCliOutput(async () => {
+                            try {
+                                await read.default(serializeCliArgs(rest), {
+                                    ...(context?.maxResultChars !== undefined && {
+                                        maxResultChars: context.maxResultChars,
+                                    }),
+                                });
+                            }
+                            catch (error) {
+                                if (!(error instanceof read.ResourceReadResultLimitError))
+                                    throw error;
+                                limitError = error;
+                            }
+                        });
+                        if (limitError)
+                            throw limitError;
+                        return result;
                     }
                     if (a === "effective") {
                         if (!rest.path)