@agent-native/core 0.45.1 → 0.47.1

package/dist/secrets/register-framework-secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register-framework-secrets.d.ts","sourceRoot":"","sources":["../../src/secrets/register-framework-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,wBAAgB,wBAAwB,IAAI,IAAI,CAI/C"}
+{"version":3,"file":"register-framework-secrets.d.ts","sourceRoot":"","sources":["../../src/secrets/register-framework-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,wBAAgB,wBAAwB,IAAI,IAAI,CA6C/C"}

package/dist/secrets/register-framework-secrets.js

@@ -14,9 +14,42 @@
  * gateway (or Groq as a BYOK fallback), so the framework no longer registers
  * the OpenAI key. Templates that need it (e.g. Clips) register it themselves.
  */
+import { getRequiredSecret, registerRequiredSecret } from "./register.js";
 export function registerFrameworkSecrets() {
-    // No framework-level secrets at this time.
-    // Templates register their own keys via `registerRequiredSecret` in
-    // their own `register-secrets.ts`.
+    // Web-search tool backends — optional; the tool selects the first
+    // configured key at call time (Brave → Tavily → Exa).
+    const webSearchKeys = [
+        {
+            key: "BRAVE_SEARCH_API_KEY",
+            label: "Brave Search API Key",
+            description: "Enables the web-search agent tool via Brave Search. At least one of BRAVE_SEARCH_API_KEY, TAVILY_API_KEY, or EXA_API_KEY is needed.",
+            docsUrl: "https://brave.com/search/api/",
+        },
+        {
+            key: "TAVILY_API_KEY",
+            label: "Tavily API Key",
+            description: "Enables the web-search agent tool via Tavily. Used as fallback when BRAVE_SEARCH_API_KEY is not set.",
+            docsUrl: "https://tavily.com/",
+        },
+        {
+            key: "EXA_API_KEY",
+            label: "Exa API Key",
+            description: "Enables the web-search agent tool via Exa. Used as fallback when neither BRAVE_SEARCH_API_KEY nor TAVILY_API_KEY is set.",
+            docsUrl: "https://exa.ai/",
+        },
+    ];
+    for (const entry of webSearchKeys) {
+        if (!getRequiredSecret(entry.key)) {
+            registerRequiredSecret({
+                key: entry.key,
+                label: entry.label,
+                description: entry.description,
+                docsUrl: entry.docsUrl,
+                scope: "workspace",
+                kind: "api-key",
+                required: false,
+            });
+        }
+    }
 }
 //# sourceMappingURL=register-framework-secrets.js.map

package/dist/secrets/register-framework-secrets.js.map

@@ -1 +1 @@
-{"version":3,"file":"register-framework-secrets.js","sourceRoot":"","sources":["../../src/secrets/register-framework-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,UAAU,wBAAwB;IACtC,2CAA2C;IAC3C,oEAAoE;IACpE,mCAAmC;AACrC,CAAC","sourcesContent":["/**\n * Framework-level secret registrations.\n *\n * Side-effect module — imported by the core-routes plugin at boot so the\n * sidebar settings UI and the `/_agent-native/secrets` list route surface the\n * relevant keys in every template.\n *\n * Each call uses a `getRequiredSecret` guard so a template that has already\n * registered the same key (often with stricter settings like `required: true`)\n * wins — the framework registration is a fallback, not an override.\n *\n * NOTE: The framework previously registered OPENAI_API_KEY here for Whisper\n * voice transcription. Voice transcription now routes through the Builder.io\n * gateway (or Groq as a BYOK fallback), so the framework no longer registers\n * the OpenAI key. Templates that need it (e.g. Clips) register it themselves.\n */\n\nexport function registerFrameworkSecrets(): void {\n  // No framework-level secrets at this time.\n  // Templates register their own keys via `registerRequiredSecret` in\n  // their own `register-secrets.ts`.\n}\n"]}
+{"version":3,"file":"register-framework-secrets.js","sourceRoot":"","sources":["../../src/secrets/register-framework-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAE1E,MAAM,UAAU,wBAAwB;IACtC,kEAAkE;IAClE,sDAAsD;IACtD,MAAM,aAAa,GAKd;QACH;YACE,GAAG,EAAE,sBAAsB;YAC3B,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EACT,qIAAqI;YACvI,OAAO,EAAE,+BAA+B;SACzC;QACD;YACE,GAAG,EAAE,gBAAgB;YACrB,KAAK,EAAE,gBAAgB;YACvB,WAAW,EACT,sGAAsG;YACxG,OAAO,EAAE,qBAAqB;SAC/B;QACD;YACE,GAAG,EAAE,aAAa;YAClB,KAAK,EAAE,aAAa;YACpB,WAAW,EACT,0HAA0H;YAC5H,OAAO,EAAE,iBAAiB;SAC3B;KACF,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,sBAAsB,CAAC;gBACrB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,WAAW;gBAClB,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * Framework-level secret registrations.\n *\n * Side-effect module — imported by the core-routes plugin at boot so the\n * sidebar settings UI and the `/_agent-native/secrets` list route surface the\n * relevant keys in every template.\n *\n * Each call uses a `getRequiredSecret` guard so a template that has already\n * registered the same key (often with stricter settings like `required: true`)\n * wins — the framework registration is a fallback, not an override.\n *\n * NOTE: The framework previously registered OPENAI_API_KEY here for Whisper\n * voice transcription. Voice transcription now routes through the Builder.io\n * gateway (or Groq as a BYOK fallback), so the framework no longer registers\n * the OpenAI key. Templates that need it (e.g. Clips) register it themselves.\n */\n\nimport { getRequiredSecret, registerRequiredSecret } from \"./register.js\";\n\nexport function registerFrameworkSecrets(): void {\n  // Web-search tool backends — optional; the tool selects the first\n  // configured key at call time (Brave → Tavily → Exa).\n  const webSearchKeys: Array<{\n    key: string;\n    label: string;\n    description: string;\n    docsUrl: string;\n  }> = [\n    {\n      key: \"BRAVE_SEARCH_API_KEY\",\n      label: \"Brave Search API Key\",\n      description:\n        \"Enables the web-search agent tool via Brave Search. At least one of BRAVE_SEARCH_API_KEY, TAVILY_API_KEY, or EXA_API_KEY is needed.\",\n      docsUrl: \"https://brave.com/search/api/\",\n    },\n    {\n      key: \"TAVILY_API_KEY\",\n      label: \"Tavily API Key\",\n      description:\n        \"Enables the web-search agent tool via Tavily. Used as fallback when BRAVE_SEARCH_API_KEY is not set.\",\n      docsUrl: \"https://tavily.com/\",\n    },\n    {\n      key: \"EXA_API_KEY\",\n      label: \"Exa API Key\",\n      description:\n        \"Enables the web-search agent tool via Exa. Used as fallback when neither BRAVE_SEARCH_API_KEY nor TAVILY_API_KEY is set.\",\n      docsUrl: \"https://exa.ai/\",\n    },\n  ];\n\n  for (const entry of webSearchKeys) {\n    if (!getRequiredSecret(entry.key)) {\n      registerRequiredSecret({\n        key: entry.key,\n        label: entry.label,\n        description: entry.description,\n        docsUrl: entry.docsUrl,\n        scope: \"workspace\",\n        kind: \"api-key\",\n        required: false,\n      });\n    }\n  }\n}\n"]}

package/dist/server/agent-chat-plugin.d.ts

@@ -198,6 +198,42 @@ export interface AgentChatPluginOptions {
         context: import("../a2a/types.js").A2AHandlerContext;
         userEmail: string | undefined;
     }) => import("../a2a/types.js").Message | string | null | undefined | Promise<import("../a2a/types.js").Message | string | null | undefined>;
+    /**
+     * Code-execution capability for the production agent.
+     *
+     * - `"off"` (default) — no code-execution tools in production.
+     * - `"sandboxed"` — registers the `run-code` tool (isolated Node.js sandbox
+     *   with a bridge to allowlisted registered tools). Safe for shared or
+     *   hosted deployments.
+     * - `"trusted"` — registers both the full coding tool registry
+     *   (bash / read / edit / write) and the `run-code` sandbox. Only use in
+     *   single-tenant or operator-controlled deployments where full shell access
+     *   to the host machine is intentional.
+     *
+     * The `AGENT_PROD_CODE_EXECUTION` environment variable (`"trusted"`,
+     * `"sandboxed"`, or `"off"`) takes precedence over this option, allowing
+     * per-deployment overrides without code changes.
+     *
+     * Dev-mode behavior is unchanged — both the coding tools and `run-code` are
+     * always available when the environment allows toggling.
+     */
+    codeExecution?: {
+        production?: "off" | "sandboxed" | "trusted";
+        /**
+         * Extra registered-tool names the sandbox bridge may forward (beyond the
+         * default allowlist: provider-api-request, provider-api-docs,
+         * provider-api-catalog, web-request).
+         */
+        bridgeTools?: string[];
+    };
+    /**
+     * App-level default tool-call limits. Individual actions override these with
+     * their own `timeoutMs` / `maxResultChars` declarations.
+     */
+    toolLimits?: {
+        timeoutMs?: number;
+        maxResultChars?: number;
+    };
 }
 export declare const _agentChatPromptSectionsForTests: {
     frameworkCore: string;

package/dist/server/agent-chat-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-chat-plugin.d.ts","sourceRoot":"","sources":["../../src/server/agent-chat-plugin.ts"],"names":[],"mappings":"AAcA,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,8BAA8B,CAAC;AAqBtC,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAElB,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,gBAAgB,EAcjB,MAAM,wBAAwB,CAAC;AA6EhC,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EAC1B,MAAM,6BAA6B,CAAC;AA+WrC,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,KAAK,CAAC;IACP,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;CACzC,CAAC,CASD;AAmBD,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,SAAS,cAAc,EAAE,EACjC,WAAW,EAAE,SAAS,oBAAoB,EAAE,EAC5C,OAAO,GAAE,0BAA0B,GAAG;IAAE,KAAK,CAAC,EAAE,GAAG,CAAA;CAAO,GACzD;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAO7C;AAw/CD,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9D,MAAM,WAAW,sBAAsB;IACrC,+DAA+D;IAC/D,OAAO,CAAC,EACJ,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9C,wCAAwC;IACxC,OAAO,CAAC,EACJ,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9C,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;sDAGkD;IAClD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EACH,OAAO,0BAA0B,EAAE,WAAW,GAC9C,MAAM,GACN;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACtD,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,gBAAgB,CAAC,EACb,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAC/B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IAClD,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,aAAa,CAAC,EAAE;QACd,mEAAmE;QACnE,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,uEAAuE;QACvE,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gFAAgF;QAChF,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,gFAAgF;QAChF,KAAK,CAAC,EAAE,KAAK,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;YACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YACjB,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;SAC1B,CAAC,CAAC;KACJ,CAAC;IACF;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACtE;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxE;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,EAAE,CACb,KAAK,EAAE,GAAG,EACV,KAAK,EAAE,MAAM,KACV,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,8BAA8B,EAAE,2BAA2B,CAAC;IACxF;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE;QACzB,KAAK,EAAE,GAAG,CAAC;QACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,mBAAmB,EAAE,CAAC;QACnC,UAAU,EAAE,kBAAkB,EAAE,CAAC;QACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;KACtB,KACG,IAAI,GACJ;QACE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;KACrC,GACD,OAAO,CAAC,IAAI,GAAG;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;KACrC,CAAC,CAAC;IACP;;;;;;;;;;;;;;OAcG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;;;;;;;;;;;;OAkBG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC7B,OAAO,EAAE,OAAO,iBAAiB,EAAE,OAAO,CAAC;QAC3C,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,iBAAiB,EAAE,iBAAiB,CAAC;QACrD,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;KAC/B,KACG,OAAO,iBAAiB,EAAE,OAAO,GACjC,MAAM,GACN,IAAI,GACJ,SAAS,GACT,OAAO,CAAC,OAAO,iBAAiB,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CAC5E;AA6dD,eAAO,MAAM,gCAAgC;;;;CAI5C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,MAAM,EACb,OAAO,UAAQ,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CAmLjB;AA0ND,wBAAgB,sCAAsC,CAAC,KAAK,EAAE;IAC5D,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,GAAG,OAAO,CA2BV;AAED,wBAAgB,qBAAqB,CACnC,OAAO,CAAC,EAAE,sBAAsB,GAC/B,cAAc,CAijHhB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAwC,CAAC;AAa9E,yEAAyE;AACzE,wBAAgB,mBAAmB,IAAI,gBAAgB,GAAG,IAAI,CAE7D"}
+{"version":3,"file":"agent-chat-plugin.d.ts","sourceRoot":"","sources":["../../src/server/agent-chat-plugin.ts"],"names":[],"mappings":"AAcA,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,8BAA8B,CAAC;AAqBtC,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAElB,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,gBAAgB,EAcjB,MAAM,wBAAwB,CAAC;AA6EhC,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EAC1B,MAAM,6BAA6B,CAAC;AA+WrC,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,KAAK,CAAC;IACP,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;CACzC,CAAC,CASD;AAmBD,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,SAAS,cAAc,EAAE,EACjC,WAAW,EAAE,SAAS,oBAAoB,EAAE,EAC5C,OAAO,GAAE,0BAA0B,GAAG;IAAE,KAAK,CAAC,EAAE,GAAG,CAAA;CAAO,GACzD;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAO7C;AAw/CD,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9D,MAAM,WAAW,sBAAsB;IACrC,+DAA+D;IAC/D,OAAO,CAAC,EACJ,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9C,wCAAwC;IACxC,OAAO,CAAC,EACJ,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9C,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;sDAGkD;IAClD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EACH,OAAO,0BAA0B,EAAE,WAAW,GAC9C,MAAM,GACN;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACtD,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,gBAAgB,CAAC,EACb,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAC/B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IAClD,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,aAAa,CAAC,EAAE;QACd,mEAAmE;QACnE,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,uEAAuE;QACvE,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gFAAgF;QAChF,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,gFAAgF;QAChF,KAAK,CAAC,EAAE,KAAK,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;YACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YACjB,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;SAC1B,CAAC,CAAC;KACJ,CAAC;IACF;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACtE;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxE;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,EAAE,CACb,KAAK,EAAE,GAAG,EACV,KAAK,EAAE,MAAM,KACV,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,8BAA8B,EAAE,2BAA2B,CAAC;IACxF;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE;QACzB,KAAK,EAAE,GAAG,CAAC;QACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,mBAAmB,EAAE,CAAC;QACnC,UAAU,EAAE,kBAAkB,EAAE,CAAC;QACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;KACtB,KACG,IAAI,GACJ;QACE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;KACrC,GACD,OAAO,CAAC,IAAI,GAAG;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;KACrC,CAAC,CAAC;IACP;;;;;;;;;;;;;;OAcG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;;;;;;;;;;;;OAkBG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC7B,OAAO,EAAE,OAAO,iBAAiB,EAAE,OAAO,CAAC;QAC3C,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,iBAAiB,EAAE,iBAAiB,CAAC;QACrD,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;KAC/B,KACG,OAAO,iBAAiB,EAAE,OAAO,GACjC,MAAM,GACN,IAAI,GACJ,SAAS,GACT,OAAO,CAAC,OAAO,iBAAiB,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAE3E;;;;;;;;;;;;;;;;;;OAkBG;IACH,aAAa,CAAC,EAAE;QACd,UAAU,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,SAAS,CAAC;QAC7C;;;;WAIG;QACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IAEF;;;OAGG;IACH,UAAU,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9D;AA6dD,eAAO,MAAM,gCAAgC;;;;CAI5C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,MAAM,EACb,OAAO,UAAQ,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CAmLjB;AA0ND,wBAAgB,sCAAsC,CAAC,KAAK,EAAE;IAC5D,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,GAAG,OAAO,CA2BV;AAED,wBAAgB,qBAAqB,CACnC,OAAO,CAAC,EAAE,sBAAsB,GAC/B,cAAc,CAwrHhB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAwC,CAAC;AAa9E,yEAAyE;AACzE,wBAAgB,mBAAmB,IAAI,gBAAgB,GAAG,IAAI,CAE7D"}

package/dist/server/agent-chat-plugin.js

@@ -2821,6 +2821,23 @@ export function createAgentChatPlugin(options) {
                 });
             }
             catch { }
+            let webSearchTool = {};
+            try {
+                const { createWebSearchToolEntry } = await import("../extensions/web-search-tool.js");
+                const { resolveCredential } = await import("../credentials/index.js");
+                const { getCredentialContext: getCredCtx } = await import("./request-context.js");
+                webSearchTool = createWebSearchToolEntry({
+                    resolveCredential,
+                    getCredentialContext: () => getCredCtx(),
+                });
+            }
+            catch { }
+            let workspaceFilesTool = {};
+            try {
+                const { createWorkspaceFilesTool } = await import("../workspace-files/tool.js");
+                workspaceFilesTool = createWorkspaceFilesTool();
+            }
+            catch { }
             let toolActions = {};
             try {
                 const { createExtensionActionEntries } = await import("../extensions/actions.js");
@@ -2865,6 +2882,7 @@ export function createAgentChatPlugin(options) {
                     ...notificationTools,
                     ...progressTools,
                     ...fetchTool,
+                    ...webSearchTool,
                     ...toolActions,
                     ...browserSessionTools,
                     ...browserTools,
@@ -2885,6 +2903,7 @@ export function createAgentChatPlugin(options) {
                     ...notificationTools,
                     ...progressTools,
                     ...fetchTool,
+                    ...webSearchTool,
                     ...toolActions,
                     ...browserSessionTools,
                     ...browserTools,
@@ -2916,6 +2935,7 @@ export function createAgentChatPlugin(options) {
                     ...notificationTools,
                     ...progressTools,
                     ...fetchTool,
+                    ...webSearchTool,
                     ...toolActions,
                     ...browserSessionTools,
                     ...browserTools,
@@ -3699,6 +3719,77 @@ export function createAgentChatPlugin(options) {
             // Code-mode toggle), so the agent has the same DB-admin capability the UI
             // does whenever it is available — true agent/UI parity, in App or Code mode.
             const dbAdminScripts = process.env.NODE_ENV === "development" ? createDbAdminAgentTools() : {};
+            // -----------------------------------------------------------------------
+            // Production code-execution mode resolution.
+            //
+            // Priority (highest → lowest):
+            //   1. AGENT_PROD_CODE_EXECUTION env var ("trusted" | "sandboxed" | "off")
+            //   2. options.codeExecution.production
+            //   3. Default: "off"
+            //
+            // Dev mode ignores this entirely — dev always gets the full coding surface.
+            // -----------------------------------------------------------------------
+            const rawEnvCodeExec = (process.env.AGENT_PROD_CODE_EXECUTION ?? "")
+                .toLowerCase()
+                .trim();
+            const resolvedProdCodeExec = rawEnvCodeExec === "trusted"
+                ? "trusted"
+                : rawEnvCodeExec === "sandboxed"
+                    ? "sandboxed"
+                    : rawEnvCodeExec === "off"
+                        ? "off"
+                        : (options?.codeExecution?.production ?? "off");
+            // Forward-declaration for the production run-code bridge supplier.
+            // Must come before createRunCodeEntry so the closure can capture it.
+            let prodRunCodeToolActions = {};
+            // Sandboxed run-code tool — available in "sandboxed" or "trusted" prod
+            // modes and always in dev mode.
+            const runCodeTool = {};
+            try {
+                const { createRunCodeEntry } = await import("../coding-tools/run-code.js");
+                runCodeTool["run-code"] = createRunCodeEntry(
+                // Supplier is evaluated at invocation time so runtime additions to
+                // prodActions (e.g. MCP sync) are visible to the bridge.
+                () => prodRunCodeToolActions, { bridgeTools: options?.codeExecution?.bridgeTools });
+            }
+            catch {
+                // Module unavailable (e.g. bundled browser build) — skip silently.
+            }
+            // Full coding tool registry (bash/read/edit/write) for "trusted" prod.
+            // In dev mode this is handled separately via devHandler below.
+            const prodCodingTools = {};
+            if (resolvedProdCodeExec === "trusted" && !canToggle) {
+                try {
+                    const { createCodingToolRegistry } = await import("../coding-tools/index.js");
+                    const codingRegistry = createCodingToolRegistry({
+                        cwd: process.cwd(),
+                        beforeBash: async ({ command }) => {
+                            // In plan mode the agent loop blocks via isPlanModeToolCallAllowed;
+                            // this hook is a belt-and-suspenders guard inside "trusted" production.
+                            return null;
+                        },
+                    });
+                    Object.assign(prodCodingTools, codingRegistry);
+                }
+                catch {
+                    // Coding tools unavailable — skip silently.
+                }
+            }
+            // Forward-declaration: populated after devActions is assembled below.
+            // Must be declared BEFORE devRunCodeTool so the closure can close over it.
+            let devRunCodeToolActions = {};
+            // Always register run-code in dev mode (when the coding module loads).
+            const devRunCodeTool = {};
+            if (canToggle) {
+                try {
+                    const { createRunCodeEntry } = await import("../coding-tools/run-code.js");
+                    // devActions is not yet defined at this point; we use a late-binding
+                    // supplier so devRunCodeTool can reference the devActions registry
+                    // once it is built below (see devHandler block).
+                    devRunCodeTool["run-code"] = createRunCodeEntry(() => devRunCodeToolActions, { bridgeTools: options?.codeExecution?.bridgeTools });
+                }
+                catch { }
+            }
             const prodActions = attachToolSearch({
                 ...templateScripts,
                 ...resourceScripts,
@@ -3716,11 +3807,20 @@ export function createAgentChatPlugin(options) {
                 ...notificationTools,
                 ...progressTools,
                 ...fetchTool,
+                ...webSearchTool,
+                ...workspaceFilesTool,
                 ...toolActions,
                 ...browserSessionTools,
                 ...browserTools,
                 ...mcpActionEntries,
+                // Sandboxed run-code tool in production when mode allows it.
+                ...(resolvedProdCodeExec !== "off" && !canToggle ? runCodeTool : {}),
+                // Full coding tools in production when mode is "trusted".
+                ...(!canToggle ? prodCodingTools : {}),
             });
+            // Wire the prod run-code bridge supplier so it sees the fully-assembled
+            // prodActions registry (including MCP entries added at runtime).
+            prodRunCodeToolActions = prodActions;
             // Keep the prod action dict's MCP entries in sync when the manager's
             // server set changes at runtime (e.g. a user adds a remote MCP server
             // through the settings UI). getEngineTools() in production-agent re-reads
@@ -3797,6 +3897,12 @@ When the user asks to add a feature, edit a component, fix a bug in the app itse
 
 Non-code requests are still fine on this surface: read data, navigate the UI, summarize, search, create/update extensions (sandboxed Alpine.js mini-apps stored in SQL), and call template actions. The restriction is specifically about direct edits to the host app's own source files.
 </app-rendered-chat-no-direct-code-edits>`;
+            // System-prompt note appended when production code execution is enabled.
+            const prodCodeExecPromptNote = !canToggle && resolvedProdCodeExec !== "off"
+                ? resolvedProdCodeExec === "trusted"
+                    ? "\n\n<code-execution-mode>Full shell access is enabled (trusted mode). You have bash, read, edit, write, and run-code tools available. Use bash for file discovery, running tests and builds, and project CLIs. Use run-code for sandboxed JavaScript analytics. Use `pnpm action <name>` in bash to invoke registered app actions from the shell.</code-execution-mode>"
+                    : "\n\n<code-execution-mode>Sandboxed code execution is enabled. The run-code tool lets you execute isolated JavaScript (ESM, top-level await) to fetch, aggregate, and reduce data. Use providerFetch() and webFetch() inside run-code for authenticated provider calls.</code-execution-mode>"
+                : "";
             const prodHandler = createProductionAgentHandler({
                 actions: leanPrompt ? leanActions : prodActions,
                 systemPrompt: async (event) => {
@@ -3809,6 +3915,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                         return setSystemPromptOnContext(leanBasePrompt +
                             runtimeContext +
                             codeEditingSurfaceRestriction +
+                            prodCodeExecPromptNote +
                             extra);
                     }
                     const resources = await loadResourcesForPrompt(owner, lazyContext, options?.appId);
@@ -3822,6 +3929,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                         resources +
                         schemaBlock +
                         codeEditingSurfaceRestriction +
+                        prodCodeExecPromptNote +
                         extra);
                 },
                 model: options?.model,
@@ -3831,6 +3939,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                 finalResponseGuard: options?.finalResponseGuard,
                 prepareRequest: options?.prepareRequest,
                 skipFilesContext: leanPrompt,
+                ...(options?.toolLimits ? { toolLimits: options.toolLimits } : {}),
                 onEngineResolved: (engine, model) => {
                     const runCtx = ensureRequestRunContext();
                     if (runCtx) {
@@ -3923,6 +4032,8 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             ...notificationTools,
                             ...progressTools,
                             ...fetchTool,
+                            ...webSearchTool,
+                            ...workspaceFilesTool,
                             ...toolActions,
                             ...browserSessionTools,
                             ...browserTools,
@@ -3931,7 +4042,12 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             // Full-database admin tools (NODE_ENV=development gate — see
                             // dbAdminScripts; also in prodActions so App mode has them too).
                             ...dbAdminScripts,
+                            // run-code sandbox is always available in dev mode.
+                            ...devRunCodeTool,
                         });
+                // Wire the late-binding supplier for devRunCodeTool so the bridge can
+                // call back into the fully-assembled devActions registry.
+                devRunCodeToolActions = devActions;
                 // Keep dev action dict in sync with runtime MCP additions. When
                 // native-actions mode is on (lean or `nativeActionsInDev`), devActions
                 // === prodActions so the prod listener already covers it.
@@ -3961,6 +4077,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                     finalResponseGuard: options?.finalResponseGuard,
                     prepareRequest: options?.prepareRequest,
                     skipFilesContext: leanPrompt,
+                    ...(options?.toolLimits ? { toolLimits: options.toolLimits } : {}),
                     onEngineResolved: (engine, model) => {
                         const runCtx = ensureRequestRunContext();
                         if (runCtx) {
@@ -5407,6 +5524,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                         ...notificationTools,
                         ...progressTools,
                         ...fetchTool,
+                        ...webSearchTool,
                         ...toolActions,
                     }),
                     getSystemPrompt: async (owner) => {
@@ -5449,6 +5567,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                         ...notificationTools,
                         ...progressTools,
                         ...fetchTool,
+                        ...webSearchTool,
                         ...toolActions,
                     }),
                     getSystemPrompt: async (owner) => {