@agent-native/core 0.227.0 → 0.228.0-nightly-20261111004142

package/dist/secrets/substitution.js

@@ -26,7 +26,9 @@
  */
 import { resolveCredentialForScope } from "../credentials/index.js";
 import { orderCredentialScopes } from "../server/credential-read-order.js";
+import { isLoopbackHost } from "../server/origin-allowlist.js";
 import { getRequestOrgId, getRequestUserEmail, } from "../server/request-context.js";
+import { getRequiredSecret } from "./register.js";
 import { readAppSecret, readAppSecretMeta } from "./storage.js";
 const KEY_REFERENCE_REGEX = /\$\{keys\.([A-Za-z0-9_-]+)\}/g;
 function isWorkspaceFallbackEnabled() {
@@ -153,24 +155,71 @@ function requestSecretCandidates(userScopeId) {
         { scope: "workspace", scopeId: `solo:${email}` },
     ];
 }
+const DEFAULT_PROVIDER_ORIGINS = {
+    OPENAI_API_KEY: ["https://api.openai.com"],
+    ANTHROPIC_API_KEY: ["https://api.anthropic.com"],
+    GITHUB_TOKEN: ["https://api.github.com"],
+    STRIPE_SECRET_KEY: ["https://api.stripe.com"],
+    SLACK_BOT_TOKEN: ["https://slack.com"],
+    NOTION_API_KEY: ["https://api.notion.com"],
+    BUILDER_PUBLIC_KEY: ["https://cdn.builder.io"],
+    HUBSPOT_PRIVATE_APP_TOKEN: ["https://api.hubapi.com"],
+    HUBSPOT_ACCESS_TOKEN: ["https://api.hubapi.com"],
+    CLAY_PUBLIC_API_KEY: ["https://api.clay.com"],
+    GONG_ACCESS_KEY: ["https://api.gong.io"],
+    GONG_ACCESS_SECRET: ["https://api.gong.io"],
+    SENTRY_AUTH_TOKEN: ["https://sentry.io"],
+    TWITTER_BEARER_TOKEN: ["https://api.x.com", "https://api.twitter.com"],
+};
+export function registeredUrlAllowlist(name) {
+    const configured = getRequiredSecret(name)?.urlAllowlist;
+    const origins = configured ??
+        (Object.hasOwn(DEFAULT_PROVIDER_ORIGINS, name)
+            ? DEFAULT_PROVIDER_ORIGINS[name]
+            : undefined);
+    return origins ? [...origins] : null;
+}
 export function validateUrlAllowlist(url, allowlist) {
     if (!allowlist || allowlist.length === 0)
-        return true;
+        return false;
     let origin;
     try {
-        origin = new URL(url).origin;
+        const target = new URL(url);
+        if (!usesSecureSecretTransport(target))
+            return false;
+        origin = target.origin;
     }
     catch {
         return false;
     }
-    return allowlist.some((entry) => {
+    let matched = false;
+    for (const entry of allowlist) {
         try {
-            return new URL(entry).origin === origin;
+            const policyUrl = new URL(entry);
+            if (!usesSecureSecretTransport(policyUrl) ||
+                policyUrl.username ||
+                policyUrl.password) {
+                return false;
+            }
+            matched ||= policyUrl.origin === origin;
         }
         catch {
             return false;
         }
-    });
+    }
+    return matched;
+}
+function usesSecureSecretTransport(url) {
+    return (url.protocol === "https:" ||
+        (url.protocol === "http:" && isLoopbackHost(url.host)));
+}
+function effectiveUrlAllowlist(name, stored) {
+    const registered = registeredUrlAllowlist(name);
+    if (!registered)
+        return stored ?? null;
+    if (!stored)
+        return registered;
+    return stored.filter((origin) => validateUrlAllowlist(origin, registered));
 }
 /**
  * Convenience helper: look up a key's allowlist by name+scope. Returns null
@@ -191,7 +240,7 @@ export async function getKeyAllowlist(name, scope, scopeId) {
             scopeId: getWorkspaceScopeId(scopeId),
         });
     }
-    return meta?.urlAllowlist ?? null;
+    return effectiveUrlAllowlist(name, meta?.urlAllowlist);
 }
 export async function getResolvedKeyAllowlist(ref) {
     const meta = await readAppSecretMeta({
@@ -199,7 +248,7 @@ export async function getResolvedKeyAllowlist(ref) {
         scope: ref.scope,
         scopeId: ref.scopeId,
     });
-    return meta?.urlAllowlist ?? null;
+    return effectiveUrlAllowlist(ref.name, meta?.urlAllowlist);
 }
 function getWorkspaceScopeId(userScopeId) {
     const orgId = getRequestOrgId();

package/dist/server/action-discovery.js

@@ -305,6 +305,7 @@ export const ALWAYS_ON_CORE_ACTIONS = new Set([
     "call-mcp-tool",
     // Connection setup UI needs the workspace prerequisite even in minimal apps.
     "get-managed-mcp-oauth-readiness",
+    "list-mcp-client-connections",
     // Any app calling a provider API needs to see which scopes its connection holds.
     "list-workspace-connection-scopes",
     "get-agentkit-capabilities",
@@ -861,6 +862,10 @@ export function coreActionLoaderEntries() {
             "create-org-service-token",
             () => import("../mcp/actions/create-org-service-token.js"),
         ],
+        [
+            "list-mcp-client-connections",
+            () => import("../mcp/actions/list-mcp-client-connections.js"),
+        ],
         [
             "list-org-service-tokens",
             () => import("../mcp/actions/list-org-service-tokens.js"),

package/dist/server/action-routes.js

@@ -9,6 +9,7 @@ import { assertActionAccess } from "../authorization/check-action.js";
 import { isTransientDatabaseError } from "../db/client.js";
 import { declaresFeatureFlagDelegation } from "../feature-flags/a2a-action-route.js";
 import { isFeatureFlagAdminEmail } from "../feature-flags/permissions.js";
+import { mcpCallAttribution } from "../mcp/call-attribution.js";
 import { hasForbiddenOrgScope, hasOrgScopeResolutionUnavailable, isFederationMembershipValidatedForEvent, resolveOrgIdForEmail, resolveOrgScopeForEmail, } from "../org/context.js";
 import { isWorkspaceAppAccessUnavailable, workspaceAppAccessUnavailableBody, } from "../org/workspace-app-access-outcome.js";
 import { checkWorkspaceAppAccessForRequest } from "../org/workspace-app-access-request.js";
@@ -1162,12 +1163,13 @@ function mountActionRoutesInternal(nitroApp, actions, options) {
                                 : {}),
                             ...(event.req?.signal ? { signal: event.req.signal } : {}),
                             actionName: name,
-                            ...(caller === "mcp" && mcpCredential?.oauthClientId
-                                ? {
-                                    mcpClient: {
-                                        oauthClientId: mcpCredential.oauthClientId,
-                                    },
-                                }
+                            ...(caller === "mcp"
+                                ? mcpCallAttribution({
+                                    request: undefined,
+                                    envelope: undefined,
+                                    oauthClientId: mcpCredential?.oauthClientId,
+                                    userAgent: getHeader(event, "user-agent"),
+                                })
                                 : {}),
                             ...(resolvedCaller?.delegationJti
                                 ? {

package/dist/server/agent-chat/prompt-resources.js

@@ -1,6 +1,7 @@
 import { JEV_TIMEOUT_MS, rankJevCandidatesWithStatus, } from "../../agent/jev-tool-prefetch.js";
+import { getAppConfig } from "../../app-config/index.js";
 import { frameworkGroupEnabled, } from "../../framework-tools.js";
-import { getFrontmatterValue, getSkillNameFromPath, parseFrontmatter, } from "../../resources/metadata.js";
+import { getFrontmatterValue, getSkillNameFromPath, isSkillPath, parseFrontmatter, } from "../../resources/metadata.js";
 import { ensurePersonalDefaults, isWorkspaceResourceOwner, organizationIdFromResourceOwner, resourceGet, resourceGetByPath, resourceList, resourceListAccessible, SHARED_OWNER, sharedResourceOwner, WORKSPACE_OWNER, workspaceResourceOwner, } from "../../resources/store.js";
 import { discoverAgentContextAgentsWithDirectoryStatus } from "../agent-context-agents.js";
 import { getRequestOrgId, getRequestContext, getRequestRunContext, getRequestUserEmail, } from "../request-context.js";
@@ -70,7 +71,9 @@ export function compactPromptLine(value, maxChars) {
 }
 const SHARED_RESOURCE_INDEX_LIMIT = 40;
 const PROMPT_SKILL_SUMMARY_LIMIT = 40;
-const PROMPT_SKILL_METADATA_READ_LIMIT = 80;
+const PROMPT_SKILL_READ_BATCH_SIZE = 40;
+const PROMPT_SKILL_MAX_READ_BATCHES = 5;
+const PROMPT_SKILL_READ_BUDGET_MS = 2_000;
 const PROMPT_INSTRUCTION_SUMMARY_LIMIT = 20;
 const PROMPT_SUMMARY_DESCRIPTION_MAX_CHARS = 180;
 const JEV_CONTEXT_ITEM_MAX_CHARS = 10_000;
@@ -503,7 +506,7 @@ class RequiredSkillLabsReadError extends Error {
         this.name = "RequiredSkillLabsReadError";
     }
 }
-async function loadResourceSkillPromptEntries(owner, orgId) {
+async function loadResourceSkillPromptEntries(owner, orgId, includeSupportingFiles = true) {
     try {
         const resources = owner === SHARED_OWNER
             ? [
@@ -511,59 +514,79 @@ async function loadResourceSkillPromptEntries(owner, orgId) {
                 ...(await resourceList(WORKSPACE_OWNER, "skills/", { orgId })),
             ]
             : await resourceListAccessible(owner, "skills/", { orgId });
-        const sorted = sortResourceSkills(resources, { owner, orgId });
-        const skillCandidates = sorted.slice(0, PROMPT_SKILL_METADATA_READ_LIMIT);
-        const loaded = await Promise.all(skillCandidates.map(async (resource) => ({
-            resource,
-            // coercion-ok: an unreadable optional skill is absent from Jev's catalog, not a required prompt failure.
-            full: await resourceGet(resource.id, { orgId }).catch(() => null),
-        })));
-        const parsed = loaded.map(({ resource, full }) => ({
-            resource,
-            full,
-            meta: full?.content ? parseSkillFrontmatter(full.content) : null,
-        }));
-        const requiredLabs = parsed.flatMap(({ meta }) => meta?.requiresLab ? [meta.requiresLab] : []);
-        const enabledLabs = requiredLabs.length
-            ? await import("../agents-bundle.js")
-                .then(({ getEnabledSkillLabsForUser }) => getEnabledSkillLabsForUser(requiredLabs, owner === SHARED_OWNER
-                ? (getRequestUserEmail() ?? getRequestRunContext()?.owner)
-                : owner))
-                .catch((error) => {
-                throw new RequiredSkillLabsReadError(error);
-            })
-            : new Set();
+        const sorted = sortResourceSkills(includeSupportingFiles
+            ? resources
+            : resources.filter((resource) => isSkillPath(resource.path)), { owner, ...(orgId !== undefined ? { orgId } : {}) });
         const seen = new Set();
         const entries = [];
-        for (const { resource, full, meta } of parsed) {
-            if (!full?.content || !meta)
-                continue;
-            if (meta.userInvocable === false)
-                continue;
-            if (!isRuntimeVisibleScope(meta.scope))
-                continue;
-            if (meta.requiresLab && !enabledLabs.has(meta.requiresLab))
-                continue;
-            const name = meta.name || getSkillNameFromPath(resource.path);
-            if (!name || seen.has(name))
-                continue;
-            seen.add(name);
-            const scope = resourceScopeForOwner(resource.owner, owner);
-            const description = compactPromptLine(meta.description || "(no description)", PROMPT_SUMMARY_DESCRIPTION_MAX_CHARS);
-            entries.push({ resource, full, name, description, scope });
+        let metadataRead = 0;
+        let hasOmittedSkills = false;
+        const deadlineAt = Date.now() + PROMPT_SKILL_READ_BUDGET_MS;
+        for (let batch = 0; batch < PROMPT_SKILL_MAX_READ_BATCHES &&
+            metadataRead < sorted.length &&
+            entries.length < PROMPT_SKILL_SUMMARY_LIMIT &&
+            (batch === 0 || Date.now() < deadlineAt); batch++) {
+            const skillCandidates = sorted.slice(metadataRead, metadataRead + PROMPT_SKILL_READ_BATCH_SIZE);
+            metadataRead += skillCandidates.length;
+            const loaded = await Promise.all(skillCandidates.map(async (resource) => ({
+                resource,
+                full: await resourceGet(resource.id, {
+                    ...(orgId !== undefined ? { orgId } : {}),
+                }).catch(() => null), // coercion-ok: an unreadable optional skill is absent from Jev's catalog, not a required prompt failure.
+            })));
+            const parsed = loaded.map(({ resource, full }) => ({
+                resource,
+                full,
+                meta: full?.content ? parseSkillFrontmatter(full.content) : null,
+            }));
+            const requiredLabs = parsed.flatMap(({ meta }) => meta?.requiresLab ? [meta.requiresLab] : []);
+            const enabledLabs = requiredLabs.length
+                ? await import("../agents-bundle.js")
+                    .then(({ getEnabledSkillLabsForUser }) => getEnabledSkillLabsForUser(requiredLabs, owner === SHARED_OWNER
+                    ? (getRequestUserEmail() ?? getRequestRunContext()?.owner)
+                    : owner))
+                    .catch((error) => {
+                    throw new RequiredSkillLabsReadError(error);
+                })
+                : new Set();
+            for (const { resource, full, meta } of parsed) {
+                if (!full?.content || !meta)
+                    continue;
+                if (meta.userInvocable === false)
+                    continue;
+                if (!isRuntimeVisibleScope(meta.scope))
+                    continue;
+                if (meta.requiresLab && !enabledLabs.has(meta.requiresLab))
+                    continue;
+                const name = meta.name || getSkillNameFromPath(resource.path);
+                if (!name || seen.has(name))
+                    continue;
+                if (entries.length >= PROMPT_SKILL_SUMMARY_LIMIT) {
+                    hasOmittedSkills = true;
+                    continue;
+                }
+                seen.add(name);
+                const scope = resourceScopeForOwner(resource.owner, owner);
+                const description = compactPromptLine(meta.description || "(no description)", PROMPT_SUMMARY_DESCRIPTION_MAX_CHARS);
+                entries.push({ resource, full, name, description, scope });
+            }
         }
-        return { entries, total: sorted.length, metadataRead: loaded.length };
+        return { entries, total: sorted.length, metadataRead, hasOmittedSkills };
     }
     catch (error) {
         if (error instanceof RequiredSkillLabsReadError)
             throw error;
-        return { entries: [], total: 0, metadataRead: 0 };
+        return { entries: [], total: 0, metadataRead: 0, hasOmittedSkills: false };
     }
 }
-async function loadResourceSkillsPromptBlock(owner, orgId, runtimeToolHints = true) {
-    const { entries, total, metadataRead } = await loadResourceSkillPromptEntries(owner, orgId);
+async function loadResourceSkillsPromptBlock(owner, orgId, runtimeToolHints = true, includeSupportingFiles = true) {
+    const { entries, total, metadataRead, hasOmittedSkills } = await loadResourceSkillPromptEntries(owner, orgId, includeSupportingFiles);
+    const inspectionLimited = total > metadataRead;
+    const inspectionNotice = inspectionLimited
+        ? `Skill inspection is incomplete after ${metadataRead} candidate read attempts; uninspected candidates remain.`
+        : null;
     if (!runtimeToolHints) {
-        return (entries
+        const blocks = entries
             .slice(0, PROMPT_SKILL_SUMMARY_LIMIT)
             .map(({ resource, full, scope }) => promptResourceBlock({
             name: resource.path,
@@ -573,18 +596,32 @@ async function loadResourceSkillsPromptBlock(owner, orgId, runtimeToolHints = tr
             maxChars: COMPACT_PROMPT_RESOURCE_MAX_CHARS,
             readHint: null,
         }))
-            .filter(Boolean)
-            .join("\n\n") || null);
+            .filter(Boolean);
+        const notices = [
+            hasOmittedSkills
+                ? "...more skills omitted from the startup summary."
+                : null,
+            inspectionNotice,
+        ].filter(Boolean);
+        if (notices.length > 0)
+            blocks.push(`<resource-skills>\n${notices.join("\n")}\n</resource-skills>`);
+        return blocks.join("\n\n") || null;
     }
     const lines = entries
         .slice(0, PROMPT_SKILL_SUMMARY_LIMIT)
         .map(({ resource, name, description, scope }) => `- \`${name}\` at resource \`${resource.path}\` (${scope}) - ${ensureSentence(description)} ${resourceToolHint("read", `\`path: "${resource.path}"\` and \`scope: "${scope}"\` before starting a task it applies to`)}`);
-    if (lines.length === 0)
+    if (lines.length === 0 && !inspectionNotice)
         return null;
-    if (total > metadataRead || metadataRead > PROMPT_SKILL_SUMMARY_LIMIT) {
+    if (inspectionNotice) {
+        lines.push(`- ${inspectionNotice} ${resourceToolHint("list", '`prefix: "skills/"` to inspect the full catalog')}`);
+    }
+    if (hasOmittedSkills) {
         lines.push(`- ...more skills omitted from the startup summary. ${resourceToolHint("list", '`prefix: "skills/"` to inspect the full catalog')}`);
     }
-    return `<resource-skills>\nThe following workspace skills are available in addition to codebase skills. They may come from SQL resources, Dispatch workspace resources, or local file mode. Read a matching skill before starting a task it applies to.\n\n${lines.join("\n")}\n</resource-skills>`;
+    const introduction = entries.length > 0
+        ? "The following workspace skills are available in addition to codebase skills. They may come from SQL resources, Dispatch workspace resources, or local file mode. Read a matching skill before starting a task it applies to.\n\n"
+        : "";
+    return `<resource-skills>\n${introduction}${lines.join("\n")}\n</resource-skills>`;
 }
 async function loadResourceIndexForPrompt(owner, scope, orgId) {
     const resources = (await resourceList(owner, undefined, { orgId }))
@@ -1348,6 +1385,7 @@ export async function preloadJevContextWithStatus(options) {
  * the bundle in dev so changes land instantly.
  */
 export async function loadResourcesForPrompt(owner, compact = false, selfAppId, orgId = getRequestOrgId() ?? null, opts) {
+    const { includeSupportingFiles } = getAppConfig().agent.promptSkills;
     const promptPreloadDeadlineAt = opts?.promptPreloadDeadlineAt ?? Date.now() + JEV_PRELOAD_BUDGET_MS;
     await ensurePersonalDefaults(owner);
     const skillReadTool = opts?.skillReadTool === undefined ? "docs-search" : opts.skillReadTool;
@@ -1398,7 +1436,9 @@ export async function loadResourcesForPrompt(owner, compact = false, selfAppId,
         ? (getRequestUserEmail() ?? getRequestRunContext()?.owner)
         : owner);
     if (!compact && (runtimeToolHints || skillReadTool)) {
-        const skillsBlock = generateSkillsPromptBlock(bundle, runtimeSkills);
+        const skillsBlock = generateSkillsPromptBlock(bundle, runtimeSkills, {
+            includeSupportingFiles,
+        });
         addSection(skillsBlock);
     }
     else if (skillReadTool) {
@@ -1454,7 +1494,29 @@ export async function loadResourcesForPrompt(owner, compact = false, selfAppId,
             }), "required");
         }
     }
-    const resourceSkillsBlock = await loadResourceSkillsPromptBlock(owner, orgId, runtimeToolHints);
+    const appDiscoveryPromise = frameworkGroupEnabled(opts?.disabledFrameworkGroups, "workspaceApps")
+        ? (async () => {
+            try {
+                const appRead = await withinPromptBudget(() => discoverAgentContextAgentsWithDirectoryStatus(selfAppId, {
+                    includePersonalAgents: owner !== SHARED_OWNER &&
+                        getRequestContext()?.userEmail === owner,
+                }), promptPreloadDeadlineAt);
+                if (appRead.status === "completed")
+                    return appRead.value;
+                return {
+                    agents: [],
+                    directory: { status: "unavailable", reason: "discovery-timed-out" },
+                };
+            }
+            catch {
+                return {
+                    agents: [],
+                    directory: { status: "unavailable", reason: "discovery-failed" },
+                };
+            }
+        })()
+        : undefined;
+    const resourceSkillsBlock = await loadResourceSkillsPromptBlock(owner, orgId, runtimeToolHints, includeSupportingFiles);
     addSection(resourceSkillsBlock);
     let sharedLearnings = null;
     try {
@@ -1530,32 +1592,8 @@ export async function loadResourcesForPrompt(owner, compact = false, selfAppId,
         selfAppId,
         orgId,
     }));
-    if (frameworkGroupEnabled(opts?.disabledFrameworkGroups, "workspaceApps")) {
-        let discovery = {
-            agents: [],
-            directory: { status: "unavailable", reason: "discovery-timed-out" },
-        };
-        try {
-            const appRead = await withinPromptBudget(() => discoverAgentContextAgentsWithDirectoryStatus(selfAppId, {
-                includePersonalAgents: owner !== SHARED_OWNER &&
-                    getRequestContext()?.userEmail === owner,
-            }), promptPreloadDeadlineAt);
-            if (appRead.status === "completed") {
-                discovery = appRead.value;
-            }
-            else {
-                discovery = {
-                    agents: [],
-                    directory: { status: "unavailable", reason: "discovery-timed-out" },
-                };
-            }
-        }
-        catch {
-            discovery = {
-                agents: [],
-                directory: { status: "unavailable", reason: "discovery-failed" },
-            };
-        }
+    if (appDiscoveryPromise) {
+        const discovery = await appDiscoveryPromise;
         try {
             const selection = selectWorkspaceAppCandidates(discovery.agents, opts?.requestText ?? getRequestRunContext()?.appDiscoveryQuery ?? "", 30);
             const agents = selection.agents;

package/dist/server/agent-chat/script-entries.js

@@ -319,7 +319,7 @@ export async function createResourceScriptEntries() {
                             },
                             path: {
                                 type: "string",
-                                description: "Resource path (e.g. 'LEARNINGS.md', 'notes/ideas.md'). Required for read/write/delete.",
+                                description: "Resource path (e.g. 'notes/ideas.md'). Required for read/write/delete.",
                             },
                             content: {
                                 type: "string",
@@ -327,7 +327,7 @@ export async function createResourceScriptEntries() {
                             },
                             offset: {
                                 type: "string",
-                                description: "read: start character (default 0); use the partial header's next offset.",
+                                description: "read: start character; list: start entry. Use the next offset given.",
                             },
                             length: {
                                 type: "string",
@@ -340,17 +340,21 @@ export async function createResourceScriptEntries() {
                             },
                             prefix: {
                                 type: "string",
-                                description: "Filter by path prefix when listing (e.g. 'notes/')",
+                                description: "list: path prefix filter (e.g. 'notes/')",
                             },
                             mime: {
                                 type: "string",
-                                description: "MIME type for write (default: inferred from extension)",
+                                description: "write: MIME type (default: from extension)",
                             },
                             format: {
                                 type: "string",
-                                description: 'Output format for list: "json" or "text" (default: text)',
+                                description: "list output format (default: text)",
                                 enum: ["json", "text"],
                             },
+                            limit: {
+                                type: "number",
+                                description: "list: page size, 1-100.",
+                            },
                             visibility: {
                                 type: "string",
                                 description: 'Visibility for write: "agent_scratch" for internal working files, "workspace" for user-requested files. Defaults to agent_scratch except durable instruction/skill/job/memory paths.',
@@ -358,7 +362,7 @@ export async function createResourceScriptEntries() {
                             },
                             includeAgentScratch: {
                                 type: "boolean",
-                                description: "Include hidden agent scratch files when listing.",
+                                description: "list: include hidden agent scratch files.",
                             },
                         },
                         required: ["action"],
@@ -377,8 +381,11 @@ export async function createResourceScriptEntries() {
                 allowPersistentApproval: false,
                 run: async (args, context) => {
                     const { action: a, ...rest } = args;
-                    if (a === "list")
-                        return listEntry.run(rest);
+                    if (a === "list") {
+                        // The CLI keeps unpaged json as a bare array; the agent always pages.
+                        const noPageArgs = !rest.limit && !rest.offset;
+                        return listEntry.run(noPageArgs ? { ...rest, offset: "0" } : rest);
+                    }
                     if (a === "read") {
                         if (!rest.path)
                             return "Error: path is required for read";

package/dist/server/agent-chat-plugin.js

@@ -1439,7 +1439,7 @@ export function createAgentChatPlugin(options) {
                         validateUrl: async (url, usedKeys, resolvedKeys) => {
                             for (const keyName of usedKeys) {
                                 const allowlist = await resolveFetchToolKeyAllowlist(keyName, resolvedKeys, requireCurrentRunOwner("validate URL allowlist"), { getKeyAllowlist, getResolvedKeyAllowlist });
-                                if (allowlist && !validateUrlAllowlist(url, allowlist)) {
+                                if (!validateUrlAllowlist(url, allowlist)) {
                                     return false;
                                 }
                             }
@@ -5682,9 +5682,14 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                 if (backgroundEventsMatch && method === "GET") {
                     const runId = decodeURIComponent(backgroundEventsMatch[1]);
                     const { getAgentTeamBackgroundRun, listAgentTeamBackgroundTranscriptEvents, } = await import("./agent-teams.js");
-                    const run = await runWithRequestContext({ userEmail: owner }, () => getAgentTeamBackgroundRun(runId));
-                    if (run) {
-                        const events = await runWithRequestContext({ userEmail: owner }, () => listAgentTeamBackgroundTranscriptEvents(runId));
+                    const scope = { ownerEmail: owner, orgId: orgId ?? null };
+                    const requestScope = {
+                        userEmail: owner,
+                        ...(orgId !== undefined ? { orgId } : {}),
+                    };
+                    const run = await runWithRequestContext(requestScope, () => getAgentTeamBackgroundRun(runId, scope));
+                    if (run && (await canViewThread(run.sourceRecord.threadId))) {
+                        const events = await runWithRequestContext(requestScope, () => listAgentTeamBackgroundTranscriptEvents(runId, scope));
                         return { status: "ok", runId, events };
                     }
                     const { getAgentHarnessBackgroundRun, listAgentHarnessBackgroundTranscriptEvents, } = await import("../agent/harness/background.js");

package/dist/server/agent-engine-api-key-route.d.ts

@@ -66,8 +66,8 @@ export declare function createAgentEngineApiKeyHandler(): import("h3").EventHand
     error: string;
     code: ProviderKeyCheckCode;
 } | {
-    errorCode?: undefined;
     error?: undefined;
+    errorCode?: undefined;
     code?: undefined;
     ok: boolean;
     key: string;

package/dist/server/agent-engine-ollama-models-route.d.ts

@@ -1,6 +1,6 @@
 export declare function createAgentEngineOllamaModelsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
     models?: undefined;
 } | {
     error?: undefined;

package/dist/server/agents-bundle.d.ts

@@ -44,6 +44,8 @@ export declare function getEnabledSkillLabsForUser(requiredLabs: Iterable<string
 export declare function getDevelopmentSkills(bundle: AgentsBundle): Skill[];
 export declare function skillDocsSlug(name: string): string;
 export declare function skillSubfileDocsSlug(skillName: string, relPath: string): string;
-export declare function generateSkillsPromptBlock(bundle: AgentsBundle, runtimeSkills?: Skill[]): string;
+export declare function generateSkillsPromptBlock(bundle: AgentsBundle, runtimeSkills?: Skill[], options?: {
+    includeSupportingFiles?: boolean;
+}): string;
 export declare function generateDevelopmentSkillsPromptBlock(bundle: AgentsBundle): string;
 export declare function __resetAgentsBundleCache(): void;

package/dist/server/agents-bundle.js

@@ -324,12 +324,12 @@ function subfileSlugSuffix(relPath) {
 export function skillSubfileDocsSlug(skillName, relPath) {
     return `${skillDocsSlug(skillName)}--${subfileSlugSuffix(relPath)}`;
 }
-function generateSkillsPromptBlockForEntries(entries, mode) {
+function generateSkillsPromptBlockForEntries(entries, mode, includeSupportingFiles = true) {
     if (entries.length === 0)
         return "";
     const lines = entries.map((s) => {
         let extras = "";
-        if (s.extraFiles.length > 0) {
+        if (includeSupportingFiles && s.extraFiles.length > 0) {
             if (mode === "runtime") {
                 const readable = s.extraFiles.filter((f) => f in s.files);
                 const unreadable = s.extraFiles.filter((f) => !(f in s.files));
@@ -367,8 +367,8 @@ Available skills:
 ${lines.join("\n")}
 </skills>`;
 }
-export function generateSkillsPromptBlock(bundle, runtimeSkills = getRuntimeSkills(bundle)) {
-    return generateSkillsPromptBlockForEntries(runtimeSkills, "runtime");
+export function generateSkillsPromptBlock(bundle, runtimeSkills = getRuntimeSkills(bundle), options) {
+    return generateSkillsPromptBlockForEntries(runtimeSkills, "runtime", options?.includeSupportingFiles);
 }
 export function generateDevelopmentSkillsPromptBlock(bundle) {
     return generateSkillsPromptBlockForEntries(getDevelopmentSkills(bundle), "development");

package/dist/server/csrf.js

@@ -65,6 +65,7 @@ import { getConfiguredAppBasePath } from "./app-base-path.js";
  * and cookie-authenticated control routes share one subtree.
  */
 const CSRF_PROTECTED_PREFIXES = [
+    "/auth/logout-all",
     // Remote-device relay. The device's own routes (poll/result/heartbeat)
     // authenticate with a bearer token and send no cookies, so they never reach
     // the check; the sibling routes (register, enqueue, computer/approvals,

package/dist/server/dev-action-bridge.d.ts

@@ -27,6 +27,8 @@ export declare const DEV_DB_MIGRATE_ROUTE = "/_agent-native/dev/db-migrate";
 export declare const DEV_ACTION_TOKEN_HEADER = "x-agent-native-dev-token";
 export declare const DEV_ACTION_USER_HEADER = "x-agent-native-dev-user";
 export declare const DEV_ACTION_ORG_HEADER = "x-agent-native-dev-org";
+/** "personal" when the CLI caller acts in no org; see AGENT_ORG_SCOPE_ENV. */
+export declare const DEV_ACTION_ORG_SCOPE_HEADER = "x-agent-native-dev-org-scope";
 export { readDevActionDiscoveryFile } from "./dev-action-discovery.js";
 export declare function hashDatabaseKey(databaseUrl: string): string;
 export declare function isLoopbackDevActionOrigin(origin: string): boolean;