@agent-native/core 0.98.5 → 0.98.6

package/dist/mcp/external-agent-policy.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Policy for the default authenticated external-agent connector surface.
+ *
+ * The policy is intentionally narrow: "auto" only discovers actions that
+ * explicitly opt into authenticated, read-only public-agent exposure. It
+ * never makes an unannotated action callable and never grants writes.
+ */
+export interface ExternalAgentPolicy {
+    /** Automatically advertise authenticated GET/read-only public-agent actions. */
+    authenticatedReads?: "off" | "auto";
+    /**
+     * Keep writes behind `ask_app` by default. `allowlisted` preserves explicit
+     * connectorCatalog write exposure for apps that intentionally need it.
+     */
+    writes?: "ask_app_only" | "allowlisted";
+    /** Explicit action names to remove from the derived connector surface. */
+    denyActions?: string[];
+}
+//# sourceMappingURL=external-agent-policy.d.ts.map

package/dist/mcp/external-agent-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-agent-policy.d.ts","sourceRoot":"","sources":["../../src/mcp/external-agent-policy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACpC;;;OAGG;IACH,MAAM,CAAC,EAAE,cAAc,GAAG,aAAa,CAAC;IACxC,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB"}

package/dist/mcp/external-agent-policy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=external-agent-policy.js.map

package/dist/mcp/external-agent-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-agent-policy.js","sourceRoot":"","sources":["../../src/mcp/external-agent-policy.ts"],"names":[],"mappings":"","sourcesContent":["/**\n * Policy for the default authenticated external-agent connector surface.\n *\n * The policy is intentionally narrow: \"auto\" only discovers actions that\n * explicitly opt into authenticated, read-only public-agent exposure. It\n * never makes an unannotated action callable and never grants writes.\n */\nexport interface ExternalAgentPolicy {\n  /** Automatically advertise authenticated GET/read-only public-agent actions. */\n  authenticatedReads?: \"off\" | \"auto\";\n  /**\n   * Keep writes behind `ask_app` by default. `allowlisted` preserves explicit\n   * connectorCatalog write exposure for apps that intentionally need it.\n   */\n  writes?: \"ask_app_only\" | \"allowlisted\";\n  /** Explicit action names to remove from the derived connector surface. */\n  denyActions?: string[];\n}\n"]}

package/dist/mcp/index.d.ts

@@ -2,6 +2,7 @@ export { mountMCP } from "./server.js";
 export type { MCPConfig } from "./server.js";
 export { createMCPServerForRequest, verifyAuth, getAccessTokens, resolveOrgIdFromDomain, buildLinkArtifacts, } from "./build-server.js";
 export type { MCPCallerIdentity, MCPRequestMeta } from "./build-server.js";
+export type { ExternalAgentPolicy } from "./external-agent-policy.js";
 export { runMCPStdio } from "./stdio.js";
 export type { RunMCPStdioOptions } from "./stdio.js";
 export { runScreenMemoryMCPStdio } from "./screen-memory-stdio.js";

package/dist/mcp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAG7C,OAAO,EACL,yBAAyB,EACzB,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAG3E,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,YAAY,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,YAAY,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAG/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EACL,QAAQ,EACR,iCAAiC,EACjC,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,UAAU,EACV,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EACL,YAAY,EACZ,yBAAyB,EACzB,KAAK,MAAM,GACZ,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAG7C,OAAO,EACL,yBAAyB,EACzB,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC3E,YAAY,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAGtE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,YAAY,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,YAAY,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAG/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EACL,QAAQ,EACR,iCAAiC,EACjC,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,UAAU,EACV,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EACL,YAAY,EACZ,yBAAyB,EACzB,KAAK,MAAM,GACZ,MAAM,oBAAoB,CAAC"}

package/dist/mcp/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,iFAAiF;AACjF,OAAO,EACL,yBAAyB,EACzB,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAG3B,4DAA4D;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAGnE,6EAA6E;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EACL,QAAQ,EACR,iCAAiC,GAElC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,UAAU,GAKX,MAAM,kBAAkB,CAAC;AAE1B,kDAAkD;AAClD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,YAAY,EACZ,yBAAyB,GAE1B,MAAM,oBAAoB,CAAC","sourcesContent":["export { mountMCP } from \"./server.js\";\nexport type { MCPConfig } from \"./server.js\";\n\n// Shared MCP server builder (also re-exported from ./server.js for back-compat).\nexport {\n  createMCPServerForRequest,\n  verifyAuth,\n  getAccessTokens,\n  resolveOrgIdFromDomain,\n  buildLinkArtifacts,\n} from \"./build-server.js\";\nexport type { MCPCallerIdentity, MCPRequestMeta } from \"./build-server.js\";\n\n// stdio transport for `agent-native mcp serve` (Node-only).\nexport { runMCPStdio } from \"./stdio.js\";\nexport type { RunMCPStdioOptions } from \"./stdio.js\";\nexport { runScreenMemoryMCPStdio } from \"./screen-memory-stdio.js\";\nexport type { RunScreenMemoryMCPStdioOptions } from \"./screen-memory-stdio.js\";\n\n// Generic cross-app builtin tools (merged into the registry, template wins).\nexport { getBuiltinCrossAppTools } from \"./builtin-tools.js\";\nexport {\n  embedApp,\n  MCP_APP_REQUEST_ORIGIN_CSP_SOURCE,\n  type EmbedAppOptions,\n} from \"./embed-app.js\";\nexport {\n  embedRoute,\n  type EmbedRouteContext,\n  type EmbedRouteOptions,\n  type EmbedRoutePathBuilder,\n  type EmbedRouteResult,\n} from \"./embed-route.js\";\n\n// Workspace / app resolution helpers (Node-only).\nexport {\n  resolveWorkspace,\n  resolveLocalAppOrigin,\n  findWorkspaceRoot,\n} from \"./workspace-resolve.js\";\nexport type { ResolvedApp, ResolvedWorkspace } from \"./workspace-resolve.js\";\nexport {\n  fetchOrgApps,\n  resolveOrgDirectoryOrigin,\n  type OrgApp,\n} from \"./org-directory.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,iFAAiF;AACjF,OAAO,EACL,yBAAyB,EACzB,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAI3B,4DAA4D;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAGnE,6EAA6E;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EACL,QAAQ,EACR,iCAAiC,GAElC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,UAAU,GAKX,MAAM,kBAAkB,CAAC;AAE1B,kDAAkD;AAClD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,YAAY,EACZ,yBAAyB,GAE1B,MAAM,oBAAoB,CAAC","sourcesContent":["export { mountMCP } from \"./server.js\";\nexport type { MCPConfig } from \"./server.js\";\n\n// Shared MCP server builder (also re-exported from ./server.js for back-compat).\nexport {\n  createMCPServerForRequest,\n  verifyAuth,\n  getAccessTokens,\n  resolveOrgIdFromDomain,\n  buildLinkArtifacts,\n} from \"./build-server.js\";\nexport type { MCPCallerIdentity, MCPRequestMeta } from \"./build-server.js\";\nexport type { ExternalAgentPolicy } from \"./external-agent-policy.js\";\n\n// stdio transport for `agent-native mcp serve` (Node-only).\nexport { runMCPStdio } from \"./stdio.js\";\nexport type { RunMCPStdioOptions } from \"./stdio.js\";\nexport { runScreenMemoryMCPStdio } from \"./screen-memory-stdio.js\";\nexport type { RunScreenMemoryMCPStdioOptions } from \"./screen-memory-stdio.js\";\n\n// Generic cross-app builtin tools (merged into the registry, template wins).\nexport { getBuiltinCrossAppTools } from \"./builtin-tools.js\";\nexport {\n  embedApp,\n  MCP_APP_REQUEST_ORIGIN_CSP_SOURCE,\n  type EmbedAppOptions,\n} from \"./embed-app.js\";\nexport {\n  embedRoute,\n  type EmbedRouteContext,\n  type EmbedRouteOptions,\n  type EmbedRoutePathBuilder,\n  type EmbedRouteResult,\n} from \"./embed-route.js\";\n\n// Workspace / app resolution helpers (Node-only).\nexport {\n  resolveWorkspace,\n  resolveLocalAppOrigin,\n  findWorkspaceRoot,\n} from \"./workspace-resolve.js\";\nexport type { ResolvedApp, ResolvedWorkspace } from \"./workspace-resolve.js\";\nexport {\n  fetchOrgApps,\n  resolveOrgDirectoryOrigin,\n  type OrgApp,\n} from \"./org-directory.js\";\n"]}

package/dist/notifications/routes.d.ts

@@ -28,7 +28,7 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/progress/routes.d.ts

@@ -15,7 +15,7 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/provider-api/corpus-jobs.d.ts

@@ -73,6 +73,7 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     offset?: unknown;
     limit?: unknown;
 }, {
+    deleted?: undefined;
     jobs: {
         id: string;
         name: string;
@@ -83,7 +84,6 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
         updatedAt: string;
     }[];
     total: number;
-    deleted?: undefined;
     jobId?: undefined;
 } | {
     jobs?: undefined;
@@ -91,9 +91,9 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     deleted: boolean;
     jobId: string;
 } | {
+    deleted?: undefined;
     jobs?: undefined;
     total?: undefined;
-    deleted?: undefined;
     jobId?: undefined;
     hits: Record<string, unknown>[];
     offset: number;

package/dist/resources/handlers.d.ts

@@ -49,11 +49,11 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>;
 /** POST /_agent-native/resources/upload — upload a file as a resource */
 export declare function handleUploadResource(event: any): Promise<import("./store.js").Resource | {
@@ -74,10 +74,10 @@ export declare function handleUploadResource(event: any): Promise<import("./stor
     runId: string | null;
     expiresAt: number | null;
     metadata: string | null;
-    error?: undefined;
     url: string;
     provider: string;
     storageSetupRequired?: undefined;
+    error?: undefined;
 } | {
     error: string;
     storageSetupRequired: boolean;

package/dist/server/agent-chat/plugin-options.d.ts

@@ -1,6 +1,7 @@
 import type { ActionEntry } from "../../agent/production-agent.js";
 import type { AgentLoopFinalResponseGuard } from "../../agent/production-agent.js";
 import type { AgentChatAttachment, AgentChatReference, MentionProvider } from "../../agent/types.js";
+import type { ExternalAgentPolicy } from "../../mcp/external-agent-policy.js";
 import type { DatabaseToolsOption } from "../../scripts/db/tool-mode.js";
 import type { PromptExamples } from "../prompts/index.js";
 /** Shape of a Nitro plugin function: receives the Nitro app instance at
@@ -264,7 +265,9 @@ export interface AgentChatPluginOptions {
      * browser-session tools) from connectors. It is no longer gated behind an
      * environment variable, and the catalog is never inferred from the client.
      *
-     * `tool-search` stays available so any trimmed tool is reachable on demand.
+     * `tool-search` stays available for discovery; a trimmed action still needs
+     * the connector catalog, authenticated-read policy, or full-catalog opt-in
+     * before an external caller can execute it.
      * Callers who need the full surface up front opt in explicitly with
      * `agent-native connect --full-catalog` (embeds a `catalog_scope: "full"`
      * claim in their connect-minted JWT) or the deployment-wide
@@ -273,6 +276,13 @@ export interface AgentChatPluginOptions {
      * Declare here rather than in MCPConfig directly; the plugin copies it through.
      */
     connectorCatalog?: string[];
+    /**
+     * Default authenticated external-agent policy. In `auto` read mode, every
+     * action explicitly marked as GET + readOnly + publicAgent.requiresAuth is
+     * added to the connector surface automatically. Writes remain ask_app-only
+     * unless `writes: "allowlisted"` is explicitly selected.
+     */
+    externalAgents?: ExternalAgentPolicy;
     /**
      * Skip mounting the remote MCP protocol route.
      *

package/dist/server/agent-chat/plugin-options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-options.d.ts","sourceRoot":"","sources":["../../../src/server/agent-chat/plugin-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AACnF,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D;4EAC4E;AAC5E,MAAM,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAErE,MAAM,WAAW,sBAAsB;IACrC,+DAA+D;IAC/D,OAAO,CAAC,EACJ,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9C,wCAAwC;IACxC,OAAO,CAAC,EACJ,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9C,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;sDAGkD;IAClD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EACH,OAAO,6BAA6B,EAAE,WAAW,GACjD,MAAM,GACN;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACtD,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,gBAAgB,CAAC,EACb,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAC/B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IAClD,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,aAAa,CAAC,EAAE;QACd,mEAAmE;QACnE,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,uEAAuE;QACvE,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gFAAgF;QAChF,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,gFAAgF;QAChF,KAAK,CAAC,EAAE,KAAK,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;YACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YACjB,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;SAC1B,CAAC,CAAC;KACJ,CAAC;IACF;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACtE;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxE;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,EAAE,CACb,KAAK,EAAE,GAAG,EACV,KAAK,EAAE,MAAM,KACV,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,2BAA2B,CAAC;IACjD;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE;QACzB,KAAK,EAAE,GAAG,CAAC;QACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,mBAAmB,EAAE,CAAC;QACnC,UAAU,EAAE,kBAAkB,EAAE,CAAC;QACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;KACtB,KACG,IAAI,GACJ;QACE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;KACrC,GACD,OAAO,CAAC,IAAI,GAAG;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;KACrC,CAAC,CAAC;IACP;;;;;;;;;;;;;;OAcG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;;;;;;;;;;;;OAkBG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC7B,OAAO,EAAE,OAAO,oBAAoB,EAAE,OAAO,CAAC;QAC9C,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,oBAAoB,EAAE,iBAAiB,CAAC;QACxD,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;KAC/B,KACG,OAAO,oBAAoB,EAAE,OAAO,GACpC,MAAM,GACN,IAAI,GACJ,SAAS,GACT,OAAO,CAAC,OAAO,oBAAoB,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAC9E;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB;;;;;;;;;;;;;;;;;;OAkBG;IACH,aAAa,CAAC,EAAE;QACd,UAAU,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,SAAS,CAAC;QAC7C;;;;WAIG;QACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IAEF;;;OAGG;IACH,UAAU,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9D"}
+{"version":3,"file":"plugin-options.d.ts","sourceRoot":"","sources":["../../../src/server/agent-chat/plugin-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AACnF,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D;4EAC4E;AAC5E,MAAM,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAErE,MAAM,WAAW,sBAAsB;IACrC,+DAA+D;IAC/D,OAAO,CAAC,EACJ,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9C,wCAAwC;IACxC,OAAO,CAAC,EACJ,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9C,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;sDAGkD;IAClD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EACH,OAAO,6BAA6B,EAAE,WAAW,GACjD,MAAM,GACN;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACtD,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,gBAAgB,CAAC,EACb,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAC/B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IAClD,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,aAAa,CAAC,EAAE;QACd,mEAAmE;QACnE,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,uEAAuE;QACvE,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gFAAgF;QAChF,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,gFAAgF;QAChF,KAAK,CAAC,EAAE,KAAK,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;YACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YACjB,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;SAC1B,CAAC,CAAC;KACJ,CAAC;IACF;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACtE;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxE;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,EAAE,CACb,KAAK,EAAE,GAAG,EACV,KAAK,EAAE,MAAM,KACV,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,2BAA2B,CAAC;IACjD;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE;QACzB,KAAK,EAAE,GAAG,CAAC;QACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,mBAAmB,EAAE,CAAC;QACnC,UAAU,EAAE,kBAAkB,EAAE,CAAC;QACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;KACtB,KACG,IAAI,GACJ;QACE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;KACrC,GACD,OAAO,CAAC,IAAI,GAAG;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;KACrC,CAAC,CAAC;IACP;;;;;;;;;;;;;;OAcG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;;;;;;;;;;;;OAkBG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC7B,OAAO,EAAE,OAAO,oBAAoB,EAAE,OAAO,CAAC;QAC9C,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,oBAAoB,EAAE,iBAAiB,CAAC;QACxD,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;KAC/B,KACG,OAAO,oBAAoB,EAAE,OAAO,GACpC,MAAM,GACN,IAAI,GACJ,SAAS,GACT,OAAO,CAAC,OAAO,oBAAoB,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAC9E;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,mBAAmB,CAAC;IAErC;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB;;;;;;;;;;;;;;;;;;OAkBG;IACH,aAAa,CAAC,EAAE;QACd,UAAU,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,SAAS,CAAC;QAC7C;;;;WAIG;QACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IAEF;;;OAGG;IACH,UAAU,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9D"}

package/dist/server/agent-chat/plugin-options.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-options.js","sourceRoot":"","sources":["../../../src/server/agent-chat/plugin-options.ts"],"names":[],"mappings":"","sourcesContent":["import type { ActionEntry } from \"../../agent/production-agent.js\";\nimport type { AgentLoopFinalResponseGuard } from \"../../agent/production-agent.js\";\nimport type {\n  AgentChatAttachment,\n  AgentChatReference,\n  MentionProvider,\n} from \"../../agent/types.js\";\nimport type { DatabaseToolsOption } from \"../../scripts/db/tool-mode.js\";\nimport type { PromptExamples } from \"../prompts/index.js\";\n\n/** Shape of a Nitro plugin function: receives the Nitro app instance at\n * startup and may register routes/hooks synchronously or asynchronously. */\nexport type NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\nexport interface AgentChatPluginOptions {\n  /** Template-specific actions (email ops, booking ops, etc.) */\n  actions?:\n    | Record<string, ActionEntry>\n    | (() =>\n        | Record<string, ActionEntry>\n        | Promise<Record<string, ActionEntry>>);\n  /** @deprecated Use `actions` instead */\n  scripts?:\n    | Record<string, ActionEntry>\n    | (() =>\n        | Record<string, ActionEntry>\n        | Promise<Record<string, ActionEntry>>);\n  /** System prompt for the agent. A sensible default is provided. */\n  systemPrompt?: string;\n  /** Additional system prompt prepended in dev mode */\n  devSystemPrompt?: string;\n  /** Model to use. Defaults to the resolved engine's default model. */\n  model?: string;\n  /** Optional per-app agent run chunk budget in milliseconds. Defaults to\n   * AGENT_RUN_SOFT_TIMEOUT_MS when set, otherwise no framework-imposed\n   * timeout. When reached, long runs continue through the hidden continuation\n   * path instead of surfacing a timeout warning. */\n  runSoftTimeoutMs?: number;\n  /** Optional per-app run-manager no-progress watchdog in milliseconds. */\n  runNoProgressTimeoutMs?: number;\n  /**\n   * Opt this app into Netlify durable background-function agent-chat runs. This\n   * gives hosted agent turns the 15-minute async-function budget when the app's\n   * Netlify build also emits the background function.\n   */\n  durableBackgroundRuns?: boolean;\n  /** Anthropic API key. Falls back to ANTHROPIC_API_KEY env var */\n  apiKey?: string;\n  /**\n   * Agent engine to use. Can be a pre-constructed AgentEngine, a registered\n   * engine name (e.g. \"anthropic\", \"ai-sdk:openai\"), or an object with name\n   * and config. Defaults to the \"anthropic\" engine using ANTHROPIC_API_KEY.\n   */\n  engine?:\n    | import(\"../../agent/engine/types.js\").AgentEngine\n    | string\n    | { name: string; config: Record<string, unknown> };\n  /** Route path. Default: /_agent-native/agent-chat */\n  path?: string;\n  /** Custom mention providers for @-tagging template entities */\n  mentionProviders?:\n    | Record<string, MentionProvider>\n    | (() =>\n        | Record<string, MentionProvider>\n        | Promise<Record<string, MentionProvider>>);\n  /** App ID used to exclude self from agent discovery (e.g., \"mail\", \"calendar\") */\n  appId?: string;\n  /** Optional MCP server branding surfaced during the initialize handshake. */\n  mcpServerInfo?: {\n    /** Human-facing title. Defaults to the capitalized app id/name. */\n    title?: string;\n    /** Host-facing description. Defaults to \"Agent-native <app> agent\". */\n    description?: string;\n    /** Canonical app URL. Relative URLs are resolved against the request origin. */\n    websiteUrl?: string;\n    /** App icons. Relative `src` values are resolved against the request origin. */\n    icons?: Array<{\n      src: string;\n      mimeType?: string;\n      sizes?: string[];\n      theme?: \"light\" | \"dark\";\n    }>;\n  };\n  /**\n   * Optional callback to resolve the org ID for the current request.\n   * When provided, the resolved value is set as AGENT_ORG_ID env var so\n   * that db-query/db-exec automatically scope by org_id in addition to\n   * owner_email.\n   *\n   * If not provided, the framework automatically uses `session.orgId` from\n   * Better Auth's active organization. Only provide this callback when you\n   * need custom org resolution logic (e.g., Atlassian org mapping).\n   */\n  resolveOrgId?: (event: any) => string | null | Promise<string | null>;\n  /**\n   * Optional owner resolver for public/anonymous chat surfaces. When the\n   * normal app session is missing, this callback may return a synthetic\n   * owner id for a narrowly-scoped public request (for example, a public\n   * shared document page). Anonymous requests use a read-only tool set by\n   * default so public viewers cannot mutate app data through the agent.\n   */\n  anonymousOwner?: (event: any) => string | null | Promise<string | null>;\n  /**\n   * Keep anonymous-owner requests on read-only template actions. Defaults to\n   * true. Only disable for single-tenant apps that intentionally allow public\n   * agent mutations.\n   */\n  anonymousReadOnly?: boolean;\n  /**\n   * Optional callback to append template-specific context to the system\n   * prompt on each request. Runs after AGENTS.md / skills / memory are\n   * loaded and before the schema block — use it to inject dynamic SQL\n   * context like a data dictionary, active feature flags, or whatever\n   * the agent should know about *right now* for this user/org.\n   *\n   * Return `null` or an empty string to skip. The string you return is\n   * appended verbatim, so wrap it in your own XML tags (e.g.\n   * `<data-dictionary>…</data-dictionary>`) to keep the prompt scannable.\n   *\n   * Called on every request in every prompt variant (lean, lazy, full).\n   * Templates that want to suppress it in a particular mode should return\n   * `null` from the callback based on their own logic.\n   */\n  extraContext?: (\n    event: any,\n    owner: string,\n  ) => string | null | Promise<string | null>;\n  /**\n   * Optional final-answer guard. Templates can use this to require a\n   * corrective retry before accepting a text-only final answer, e.g. forcing\n   * real data-source tool calls for analytics requests.\n   */\n  finalResponseGuard?: AgentLoopFinalResponseGuard;\n  /**\n   * Optional per-template request normalizer. Runs after authentication and\n   * before the model sees the message, so apps can translate chat attachments\n   * into template-native file handles while preserving the user's visible text.\n   */\n  prepareRequest?: (details: {\n    event: any;\n    ownerEmail: string | null;\n    message: string;\n    displayMessage?: string;\n    attachments: AgentChatAttachment[];\n    references: AgentChatReference[];\n    threadId?: string;\n    internalContinuation?: boolean;\n    mode: \"act\" | \"plan\";\n  }) =>\n    | void\n    | {\n        message?: string;\n        displayMessage?: string;\n        attachments?: AgentChatAttachment[];\n      }\n    | Promise<void | {\n        message?: string;\n        displayMessage?: string;\n        attachments?: AgentChatAttachment[];\n      }>;\n  /**\n   * Use ONLY the template's `systemPrompt` and the actions list — skip the\n   * framework prompt wrapper, resource loading (AGENTS.md/LEARNINGS.md/\n   * memory), the SQL schema block, and the workspace files/skills/agents\n   * inventory. Intended for minimal or voice-first apps where a long,\n   * generic preamble adds latency and iteration noise without adding value.\n   *\n   * When set, the same lean prompt is used in both dev and prod modes. In\n   * dev mode the tool registry is ALSO swapped to the template's actions\n   * (same set as prod) — the dev-only bash/db-exec/file-system tools\n   * and the resource/docs/chat/team/job/browser scripts are dropped. The\n   * lean system prompt has no bash-usage guidance, so routing actions\n   * through bash would break. If you need the full dev tool surface,\n   * leave this off.\n   */\n  leanPrompt?: boolean;\n  /**\n   * Skip auto-injecting the workspace files/skills/agents inventory on the\n   * first message of a conversation while keeping the normal prompt, resources,\n   * and tool surface. Use this for domain-focused apps where broad workspace\n   * inventory is mostly latency/noise unless the user explicitly references it.\n   *\n   * `leanPrompt: true` and the default `lazyContext` mode imply this because\n   * those catalogs are already discoverable through resources, docs-search,\n   * tool-search, and the compact resource indexes. Set `false` explicitly only\n   * when a workspace-wide inventory is central to the app's first-turn job.\n   */\n  skipFilesContext?: boolean;\n  /**\n   * Initial native tool schemas to send to the LLM provider. When set, the\n   * agent starts with only these tools plus `tool-search`; the live registry\n   * remains searchable, and matching schemas from `tool-search` results are\n   * loaded into the next model request. Use this for domain-focused apps that\n   * have a few common actions and many rare framework utilities. Common\n   * discovery and resource-reading tools are promoted automatically when\n   * present. Provider, MCP, extension, and code-execution schemas stay behind\n   * tool-search unless the app explicitly includes them in this list.\n   */\n  initialToolNames?: string[];\n  /**\n   * Use a compact system prompt with on-demand context loading. The system\n   * prompt includes essential behavioral rules and action signatures, but\n   * defers verbose framework details, SQL schema, skills, learnings, and\n   * memory behind tools (`get-framework-context`, `db-schema`,\n   * `resources` (action: read)). The agent fetches these on-demand when needed.\n   *\n   * This reduces the system prompt by ~60-70%, significantly improving\n   * time-to-first-token and reducing \"thinking\" time. The agent retains\n   * all capabilities — it just loads context lazily instead of upfront.\n   *\n   * Defaults to `true`. Set to `false` to use the original full prompt.\n   * Ignored when `leanPrompt` is set (lean mode is even more minimal).\n   */\n  lazyContext?: boolean;\n  /**\n   * In dev mode, register the template's actions as native tools the agent\n   * can call directly with structured JSON args — skipping the default\n   * `bash(command=\"pnpm action <name> ...\")` indirection.\n   *\n   * The default dev behavior shells out because it \"mirrors how Claude Code\n   * works locally\" and reduces empty-object tool calls for templates with\n   * simple string args. But templates whose actions take structured data\n   * (objects, arrays, nested JSON) can't round-trip those cleanly through\n   * the CLI parser — stringified JSON on the way in, loss of type fidelity\n   * on the way out.\n   *\n   * Set to `true` to get the same tool surface in dev that production uses.\n   * `leanPrompt: true` implies this already (lean mode has no bash-usage\n   * guidance, so actions must be native). Set this flag without\n   * `leanPrompt` when you want native actions AND the full system prompt.\n   *\n   * Defaults to `false`.\n   */\n  nativeActionsInDev?: boolean;\n  /**\n   * Expose raw SQL/native database tools to the app agent.\n   *\n   * Defaults to `\"read\"`: `db-schema`/`db-query` are available for inspection,\n   * while writes route through typed app actions. Set to `\"write\"` (also\n   * `true`) to expose `db-exec`/`db-patch` for scoped raw SQL maintenance.\n   * Set to `\"off\"` (also `false`) for chat-first apps that want agents to use\n   * typed actions only.\n   */\n  databaseTools?: DatabaseToolsOption;\n  /**\n   * Expose framework extension management actions (`create-extension`,\n   * `update-extension`, `list-extensions`, etc.) to the app agent. Defaults to\n   * true. Set to false for apps that do not want the LLM to create or manage\n   * sandboxed extension mini-apps, even though the core extension routes may\n   * still be mounted for other surfaces.\n   */\n  extensionTools?: boolean;\n  /**\n   * Optional A2A-only deterministic response path. Runs after inbound A2A text\n   * and user context are resolved, but before an agent engine/model is loaded.\n   * Return a message to complete the A2A task without invoking the LLM, or\n   * null/undefined to continue through the normal agent loop.\n   */\n  a2aMessageFallback?: (details: {\n    message: import(\"../../a2a/types.js\").Message;\n    text: string;\n    context: import(\"../../a2a/types.js\").A2AHandlerContext;\n    userEmail: string | undefined;\n  }) =>\n    | import(\"../../a2a/types.js\").Message\n    | string\n    | null\n    | undefined\n    | Promise<import(\"../../a2a/types.js\").Message | string | null | undefined>;\n  /**\n   * Optional injectable prompt examples for core rules (rule 5 auto-refresh\n   * examples and rule 8 external provider names). When absent, generic\n   * placeholders are used so no template-specific names appear in the core\n   * prompt by default.\n   *\n   * - `providerActions`: external provider action names this template exposes\n   *   (e.g. `[\"warehouse-query\", \"crm-records\"]` for a template).\n   * - `appActions`: representative template action names for rule 5's refresh\n   *   examples (e.g. `[\"log-meal\", \"update-form\"]` for a forms template).\n   */\n  promptExamples?: PromptExamples;\n  /**\n   * Curated allow-list of action names to serve external **connector** clients\n   * on a hosted multi-tenant deployment.\n   *\n   * Whenever this list is non-empty it is active by default for **every**\n   * caller (hosted connectors, code/stdio clients, and the local CLI): external\n   * MCP clients see (and can call) only these actions plus the builtin\n   * cross-app tools (`list_apps`, `open_app`, `ask_app`, `create_embed_session`).\n   * Calls to any tool outside the list are rejected with \"Unknown tool\".\n   * This prevents the full ~105-tool catalog from bloating external-agent\n   * context windows and removes footguns (db-exec, seed-*, extension suite,\n   * browser-session tools) from connectors. It is no longer gated behind an\n   * environment variable, and the catalog is never inferred from the client.\n   *\n   * `tool-search` stays available so any trimmed tool is reachable on demand.\n   * Callers who need the full surface up front opt in explicitly with\n   * `agent-native connect --full-catalog` (embeds a `catalog_scope: \"full\"`\n   * claim in their connect-minted JWT) or the deployment-wide\n   * `AGENT_NATIVE_MCP_FULL_CATALOG=1` env override.\n   *\n   * Declare here rather than in MCPConfig directly; the plugin copies it through.\n   */\n  connectorCatalog?: string[];\n\n  /**\n   * Skip mounting the remote MCP protocol route.\n   *\n   * Most apps should leave this off so agent chat, A2A, and MCP share one\n   * runtime. Hosted apps with a dedicated early MCP plugin can set this to\n   * true so their external connector does not depend on the heavier chat\n   * plugin initialization path.\n   */\n  disableMcp?: boolean;\n\n  /**\n   * Code-execution capability for the production agent.\n   *\n   * - `\"off\"` (default) — no code-execution tools in production.\n   * - `\"sandboxed\"` — registers the `run-code` tool (isolated Node.js sandbox\n   *   with a bridge to allowlisted registered tools). Safe for shared or\n   *   hosted deployments.\n   * - `\"trusted\"` — registers both the full coding tool registry\n   *   (bash / read / edit / write) and the `run-code` sandbox. Only use in\n   *   single-tenant or operator-controlled deployments where full shell access\n   *   to the host machine is intentional.\n   *\n   * The `AGENT_PROD_CODE_EXECUTION` environment variable (`\"trusted\"`,\n   * `\"sandboxed\"`, or `\"off\"`) takes precedence over this option, allowing\n   * per-deployment overrides without code changes.\n   *\n   * Dev-mode behavior is unchanged — both the coding tools and `run-code` are\n   * always available when the environment allows toggling.\n   */\n  codeExecution?: {\n    production?: \"off\" | \"sandboxed\" | \"trusted\";\n    /**\n     * Extra registered-tool names the sandbox bridge may forward (beyond the\n     * default allowlist: provider-api-request, provider-api-docs,\n     * provider-api-catalog, web-request).\n     */\n    bridgeTools?: string[];\n  };\n\n  /**\n   * App-level default tool-call limits. Individual actions override these with\n   * their own `timeoutMs` / `maxResultChars` declarations.\n   */\n  toolLimits?: { timeoutMs?: number; maxResultChars?: number };\n}\n"]}
+{"version":3,"file":"plugin-options.js","sourceRoot":"","sources":["../../../src/server/agent-chat/plugin-options.ts"],"names":[],"mappings":"","sourcesContent":["import type { ActionEntry } from \"../../agent/production-agent.js\";\nimport type { AgentLoopFinalResponseGuard } from \"../../agent/production-agent.js\";\nimport type {\n  AgentChatAttachment,\n  AgentChatReference,\n  MentionProvider,\n} from \"../../agent/types.js\";\nimport type { ExternalAgentPolicy } from \"../../mcp/external-agent-policy.js\";\nimport type { DatabaseToolsOption } from \"../../scripts/db/tool-mode.js\";\nimport type { PromptExamples } from \"../prompts/index.js\";\n\n/** Shape of a Nitro plugin function: receives the Nitro app instance at\n * startup and may register routes/hooks synchronously or asynchronously. */\nexport type NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\nexport interface AgentChatPluginOptions {\n  /** Template-specific actions (email ops, booking ops, etc.) */\n  actions?:\n    | Record<string, ActionEntry>\n    | (() =>\n        | Record<string, ActionEntry>\n        | Promise<Record<string, ActionEntry>>);\n  /** @deprecated Use `actions` instead */\n  scripts?:\n    | Record<string, ActionEntry>\n    | (() =>\n        | Record<string, ActionEntry>\n        | Promise<Record<string, ActionEntry>>);\n  /** System prompt for the agent. A sensible default is provided. */\n  systemPrompt?: string;\n  /** Additional system prompt prepended in dev mode */\n  devSystemPrompt?: string;\n  /** Model to use. Defaults to the resolved engine's default model. */\n  model?: string;\n  /** Optional per-app agent run chunk budget in milliseconds. Defaults to\n   * AGENT_RUN_SOFT_TIMEOUT_MS when set, otherwise no framework-imposed\n   * timeout. When reached, long runs continue through the hidden continuation\n   * path instead of surfacing a timeout warning. */\n  runSoftTimeoutMs?: number;\n  /** Optional per-app run-manager no-progress watchdog in milliseconds. */\n  runNoProgressTimeoutMs?: number;\n  /**\n   * Opt this app into Netlify durable background-function agent-chat runs. This\n   * gives hosted agent turns the 15-minute async-function budget when the app's\n   * Netlify build also emits the background function.\n   */\n  durableBackgroundRuns?: boolean;\n  /** Anthropic API key. Falls back to ANTHROPIC_API_KEY env var */\n  apiKey?: string;\n  /**\n   * Agent engine to use. Can be a pre-constructed AgentEngine, a registered\n   * engine name (e.g. \"anthropic\", \"ai-sdk:openai\"), or an object with name\n   * and config. Defaults to the \"anthropic\" engine using ANTHROPIC_API_KEY.\n   */\n  engine?:\n    | import(\"../../agent/engine/types.js\").AgentEngine\n    | string\n    | { name: string; config: Record<string, unknown> };\n  /** Route path. Default: /_agent-native/agent-chat */\n  path?: string;\n  /** Custom mention providers for @-tagging template entities */\n  mentionProviders?:\n    | Record<string, MentionProvider>\n    | (() =>\n        | Record<string, MentionProvider>\n        | Promise<Record<string, MentionProvider>>);\n  /** App ID used to exclude self from agent discovery (e.g., \"mail\", \"calendar\") */\n  appId?: string;\n  /** Optional MCP server branding surfaced during the initialize handshake. */\n  mcpServerInfo?: {\n    /** Human-facing title. Defaults to the capitalized app id/name. */\n    title?: string;\n    /** Host-facing description. Defaults to \"Agent-native <app> agent\". */\n    description?: string;\n    /** Canonical app URL. Relative URLs are resolved against the request origin. */\n    websiteUrl?: string;\n    /** App icons. Relative `src` values are resolved against the request origin. */\n    icons?: Array<{\n      src: string;\n      mimeType?: string;\n      sizes?: string[];\n      theme?: \"light\" | \"dark\";\n    }>;\n  };\n  /**\n   * Optional callback to resolve the org ID for the current request.\n   * When provided, the resolved value is set as AGENT_ORG_ID env var so\n   * that db-query/db-exec automatically scope by org_id in addition to\n   * owner_email.\n   *\n   * If not provided, the framework automatically uses `session.orgId` from\n   * Better Auth's active organization. Only provide this callback when you\n   * need custom org resolution logic (e.g., Atlassian org mapping).\n   */\n  resolveOrgId?: (event: any) => string | null | Promise<string | null>;\n  /**\n   * Optional owner resolver for public/anonymous chat surfaces. When the\n   * normal app session is missing, this callback may return a synthetic\n   * owner id for a narrowly-scoped public request (for example, a public\n   * shared document page). Anonymous requests use a read-only tool set by\n   * default so public viewers cannot mutate app data through the agent.\n   */\n  anonymousOwner?: (event: any) => string | null | Promise<string | null>;\n  /**\n   * Keep anonymous-owner requests on read-only template actions. Defaults to\n   * true. Only disable for single-tenant apps that intentionally allow public\n   * agent mutations.\n   */\n  anonymousReadOnly?: boolean;\n  /**\n   * Optional callback to append template-specific context to the system\n   * prompt on each request. Runs after AGENTS.md / skills / memory are\n   * loaded and before the schema block — use it to inject dynamic SQL\n   * context like a data dictionary, active feature flags, or whatever\n   * the agent should know about *right now* for this user/org.\n   *\n   * Return `null` or an empty string to skip. The string you return is\n   * appended verbatim, so wrap it in your own XML tags (e.g.\n   * `<data-dictionary>…</data-dictionary>`) to keep the prompt scannable.\n   *\n   * Called on every request in every prompt variant (lean, lazy, full).\n   * Templates that want to suppress it in a particular mode should return\n   * `null` from the callback based on their own logic.\n   */\n  extraContext?: (\n    event: any,\n    owner: string,\n  ) => string | null | Promise<string | null>;\n  /**\n   * Optional final-answer guard. Templates can use this to require a\n   * corrective retry before accepting a text-only final answer, e.g. forcing\n   * real data-source tool calls for analytics requests.\n   */\n  finalResponseGuard?: AgentLoopFinalResponseGuard;\n  /**\n   * Optional per-template request normalizer. Runs after authentication and\n   * before the model sees the message, so apps can translate chat attachments\n   * into template-native file handles while preserving the user's visible text.\n   */\n  prepareRequest?: (details: {\n    event: any;\n    ownerEmail: string | null;\n    message: string;\n    displayMessage?: string;\n    attachments: AgentChatAttachment[];\n    references: AgentChatReference[];\n    threadId?: string;\n    internalContinuation?: boolean;\n    mode: \"act\" | \"plan\";\n  }) =>\n    | void\n    | {\n        message?: string;\n        displayMessage?: string;\n        attachments?: AgentChatAttachment[];\n      }\n    | Promise<void | {\n        message?: string;\n        displayMessage?: string;\n        attachments?: AgentChatAttachment[];\n      }>;\n  /**\n   * Use ONLY the template's `systemPrompt` and the actions list — skip the\n   * framework prompt wrapper, resource loading (AGENTS.md/LEARNINGS.md/\n   * memory), the SQL schema block, and the workspace files/skills/agents\n   * inventory. Intended for minimal or voice-first apps where a long,\n   * generic preamble adds latency and iteration noise without adding value.\n   *\n   * When set, the same lean prompt is used in both dev and prod modes. In\n   * dev mode the tool registry is ALSO swapped to the template's actions\n   * (same set as prod) — the dev-only bash/db-exec/file-system tools\n   * and the resource/docs/chat/team/job/browser scripts are dropped. The\n   * lean system prompt has no bash-usage guidance, so routing actions\n   * through bash would break. If you need the full dev tool surface,\n   * leave this off.\n   */\n  leanPrompt?: boolean;\n  /**\n   * Skip auto-injecting the workspace files/skills/agents inventory on the\n   * first message of a conversation while keeping the normal prompt, resources,\n   * and tool surface. Use this for domain-focused apps where broad workspace\n   * inventory is mostly latency/noise unless the user explicitly references it.\n   *\n   * `leanPrompt: true` and the default `lazyContext` mode imply this because\n   * those catalogs are already discoverable through resources, docs-search,\n   * tool-search, and the compact resource indexes. Set `false` explicitly only\n   * when a workspace-wide inventory is central to the app's first-turn job.\n   */\n  skipFilesContext?: boolean;\n  /**\n   * Initial native tool schemas to send to the LLM provider. When set, the\n   * agent starts with only these tools plus `tool-search`; the live registry\n   * remains searchable, and matching schemas from `tool-search` results are\n   * loaded into the next model request. Use this for domain-focused apps that\n   * have a few common actions and many rare framework utilities. Common\n   * discovery and resource-reading tools are promoted automatically when\n   * present. Provider, MCP, extension, and code-execution schemas stay behind\n   * tool-search unless the app explicitly includes them in this list.\n   */\n  initialToolNames?: string[];\n  /**\n   * Use a compact system prompt with on-demand context loading. The system\n   * prompt includes essential behavioral rules and action signatures, but\n   * defers verbose framework details, SQL schema, skills, learnings, and\n   * memory behind tools (`get-framework-context`, `db-schema`,\n   * `resources` (action: read)). The agent fetches these on-demand when needed.\n   *\n   * This reduces the system prompt by ~60-70%, significantly improving\n   * time-to-first-token and reducing \"thinking\" time. The agent retains\n   * all capabilities — it just loads context lazily instead of upfront.\n   *\n   * Defaults to `true`. Set to `false` to use the original full prompt.\n   * Ignored when `leanPrompt` is set (lean mode is even more minimal).\n   */\n  lazyContext?: boolean;\n  /**\n   * In dev mode, register the template's actions as native tools the agent\n   * can call directly with structured JSON args — skipping the default\n   * `bash(command=\"pnpm action <name> ...\")` indirection.\n   *\n   * The default dev behavior shells out because it \"mirrors how Claude Code\n   * works locally\" and reduces empty-object tool calls for templates with\n   * simple string args. But templates whose actions take structured data\n   * (objects, arrays, nested JSON) can't round-trip those cleanly through\n   * the CLI parser — stringified JSON on the way in, loss of type fidelity\n   * on the way out.\n   *\n   * Set to `true` to get the same tool surface in dev that production uses.\n   * `leanPrompt: true` implies this already (lean mode has no bash-usage\n   * guidance, so actions must be native). Set this flag without\n   * `leanPrompt` when you want native actions AND the full system prompt.\n   *\n   * Defaults to `false`.\n   */\n  nativeActionsInDev?: boolean;\n  /**\n   * Expose raw SQL/native database tools to the app agent.\n   *\n   * Defaults to `\"read\"`: `db-schema`/`db-query` are available for inspection,\n   * while writes route through typed app actions. Set to `\"write\"` (also\n   * `true`) to expose `db-exec`/`db-patch` for scoped raw SQL maintenance.\n   * Set to `\"off\"` (also `false`) for chat-first apps that want agents to use\n   * typed actions only.\n   */\n  databaseTools?: DatabaseToolsOption;\n  /**\n   * Expose framework extension management actions (`create-extension`,\n   * `update-extension`, `list-extensions`, etc.) to the app agent. Defaults to\n   * true. Set to false for apps that do not want the LLM to create or manage\n   * sandboxed extension mini-apps, even though the core extension routes may\n   * still be mounted for other surfaces.\n   */\n  extensionTools?: boolean;\n  /**\n   * Optional A2A-only deterministic response path. Runs after inbound A2A text\n   * and user context are resolved, but before an agent engine/model is loaded.\n   * Return a message to complete the A2A task without invoking the LLM, or\n   * null/undefined to continue through the normal agent loop.\n   */\n  a2aMessageFallback?: (details: {\n    message: import(\"../../a2a/types.js\").Message;\n    text: string;\n    context: import(\"../../a2a/types.js\").A2AHandlerContext;\n    userEmail: string | undefined;\n  }) =>\n    | import(\"../../a2a/types.js\").Message\n    | string\n    | null\n    | undefined\n    | Promise<import(\"../../a2a/types.js\").Message | string | null | undefined>;\n  /**\n   * Optional injectable prompt examples for core rules (rule 5 auto-refresh\n   * examples and rule 8 external provider names). When absent, generic\n   * placeholders are used so no template-specific names appear in the core\n   * prompt by default.\n   *\n   * - `providerActions`: external provider action names this template exposes\n   *   (e.g. `[\"warehouse-query\", \"crm-records\"]` for a template).\n   * - `appActions`: representative template action names for rule 5's refresh\n   *   examples (e.g. `[\"log-meal\", \"update-form\"]` for a forms template).\n   */\n  promptExamples?: PromptExamples;\n  /**\n   * Curated allow-list of action names to serve external **connector** clients\n   * on a hosted multi-tenant deployment.\n   *\n   * Whenever this list is non-empty it is active by default for **every**\n   * caller (hosted connectors, code/stdio clients, and the local CLI): external\n   * MCP clients see (and can call) only these actions plus the builtin\n   * cross-app tools (`list_apps`, `open_app`, `ask_app`, `create_embed_session`).\n   * Calls to any tool outside the list are rejected with \"Unknown tool\".\n   * This prevents the full ~105-tool catalog from bloating external-agent\n   * context windows and removes footguns (db-exec, seed-*, extension suite,\n   * browser-session tools) from connectors. It is no longer gated behind an\n   * environment variable, and the catalog is never inferred from the client.\n   *\n   * `tool-search` stays available for discovery; a trimmed action still needs\n   * the connector catalog, authenticated-read policy, or full-catalog opt-in\n   * before an external caller can execute it.\n   * Callers who need the full surface up front opt in explicitly with\n   * `agent-native connect --full-catalog` (embeds a `catalog_scope: \"full\"`\n   * claim in their connect-minted JWT) or the deployment-wide\n   * `AGENT_NATIVE_MCP_FULL_CATALOG=1` env override.\n   *\n   * Declare here rather than in MCPConfig directly; the plugin copies it through.\n   */\n  connectorCatalog?: string[];\n\n  /**\n   * Default authenticated external-agent policy. In `auto` read mode, every\n   * action explicitly marked as GET + readOnly + publicAgent.requiresAuth is\n   * added to the connector surface automatically. Writes remain ask_app-only\n   * unless `writes: \"allowlisted\"` is explicitly selected.\n   */\n  externalAgents?: ExternalAgentPolicy;\n\n  /**\n   * Skip mounting the remote MCP protocol route.\n   *\n   * Most apps should leave this off so agent chat, A2A, and MCP share one\n   * runtime. Hosted apps with a dedicated early MCP plugin can set this to\n   * true so their external connector does not depend on the heavier chat\n   * plugin initialization path.\n   */\n  disableMcp?: boolean;\n\n  /**\n   * Code-execution capability for the production agent.\n   *\n   * - `\"off\"` (default) — no code-execution tools in production.\n   * - `\"sandboxed\"` — registers the `run-code` tool (isolated Node.js sandbox\n   *   with a bridge to allowlisted registered tools). Safe for shared or\n   *   hosted deployments.\n   * - `\"trusted\"` — registers both the full coding tool registry\n   *   (bash / read / edit / write) and the `run-code` sandbox. Only use in\n   *   single-tenant or operator-controlled deployments where full shell access\n   *   to the host machine is intentional.\n   *\n   * The `AGENT_PROD_CODE_EXECUTION` environment variable (`\"trusted\"`,\n   * `\"sandboxed\"`, or `\"off\"`) takes precedence over this option, allowing\n   * per-deployment overrides without code changes.\n   *\n   * Dev-mode behavior is unchanged — both the coding tools and `run-code` are\n   * always available when the environment allows toggling.\n   */\n  codeExecution?: {\n    production?: \"off\" | \"sandboxed\" | \"trusted\";\n    /**\n     * Extra registered-tool names the sandbox bridge may forward (beyond the\n     * default allowlist: provider-api-request, provider-api-docs,\n     * provider-api-catalog, web-request).\n     */\n    bridgeTools?: string[];\n  };\n\n  /**\n   * App-level default tool-call limits. Individual actions override these with\n   * their own `timeoutMs` / `maxResultChars` declarations.\n   */\n  toolLimits?: { timeoutMs?: number; maxResultChars?: number };\n}\n"]}

package/dist/server/agent-chat/script-entries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"script-entries.d.ts","sourceRoot":"","sources":["../../../src/server/agent-chat/script-entries.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAQnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AA6CvE;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,GAAE,iBAA0B,EAChC,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,GACzC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CA4ItC;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CACtD,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CAwEA;AAED;;GAEG;AACH,wBAAgB,qCAAqC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAW3E;AAED,wBAAsB,2BAA2B,IAAI,OAAO,CAC1D,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CAuPA;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CACtD,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CAqJA;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAqBtC;AAED;;;GAGG;AACH,wBAAsB,oCAAoC,IAAI,OAAO,CACnE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CAUA;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAYtC"}
+{"version":3,"file":"script-entries.d.ts","sourceRoot":"","sources":["../../../src/server/agent-chat/script-entries.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAQnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAwDvE;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,GAAE,iBAA0B,EAChC,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,GACzC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAkJtC;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CACtD,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CAwEA;AAED;;GAEG;AACH,wBAAgB,qCAAqC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAW3E;AAED,wBAAsB,2BAA2B,IAAI,OAAO,CAC1D,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CAuPA;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CACtD,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CAqJA;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAqBtC;AAED;;;GAGG;AACH,wBAAsB,oCAAoC,IAAI,OAAO,CACnE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAC5B,CAUA;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAYtC"}

package/dist/server/agent-chat/script-entries.js

@@ -21,6 +21,14 @@ function wrapCliScript(tool, cliDefault, opts) {
         run: async (args) => {
             const cliArgs = [];
             for (const [k, v] of Object.entries(args)) {
+                // MCP input schemas are descriptive and some hosts can still send
+                // undeclared keys. The externally exposed DB readers must never accept
+                // the CLI-only `--db` escape hatch, which could point at another local
+                // SQLite file. Keep their runtime surface identical to the advertised
+                // schema instead of trusting the client to validate it.
+                if (opts?.allowedArgs && !opts.allowedArgs.includes(k)) {
+                    throw new Error(`Unknown argument: ${k}`);
+                }
                 const raw = v;
                 const value = raw != null && typeof raw === "object"
                     ? JSON.stringify(raw)
@@ -72,7 +80,10 @@ export async function createDbScriptEntries(mode = "read", options = {}) {
                         },
                     },
                 },
-            }, schemaMod.default, { readOnly: true }),
+            }, schemaMod.default, {
+                allowedArgs: ["format"],
+                readOnly: true,
+            }),
             "db-query": wrapCliScript({
                 description: `Read from the app's own SQL database ONLY. Runs a SELECT against the app's internal tables (settings, application_state, template tables). Results are auto-scoped to the current user/org. IMPORTANT: This tool CANNOT access external data sources like data warehouses, CRMs, issue trackers, analytics platforms, calendars, mail, docs, or other third-party services. For those, use the relevant template/provider action, MCP connector, or provider-api-catalog/provider-api-docs/provider-api-request when available. If the user names a provider, that named provider wins; do not substitute a warehouse or app database copy unless they explicitly ask for it. If a table isn't in the app schema, don't try db-query — use the data-source-specific action. ${extensionQueryGuidance}`,
                 parameters: {
@@ -98,7 +109,10 @@ export async function createDbScriptEntries(mode = "read", options = {}) {
                     },
                     required: ["sql"],
                 },
-            }, queryMod.default, { readOnly: true }),
+            }, queryMod.default, {
+                allowedArgs: ["sql", "args", "format", "limit"],
+                readOnly: true,
+            }),
         };
         if (execMod && patchMod) {
             entries["db-exec"] = wrapCliScript({

package/dist/server/agent-chat/script-entries.js.map

@@ -1 +1 @@
-{"version":3,"file":"script-entries.js","sourceRoot":"","sources":["../../../src/server/agent-chat/script-entries.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,GAChB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,8EAA8E;AAC9E,qEAAqE;AACrE,0EAA0E;AAC1E,2EAA2E;AAC3E,sEAAsE;AACtE,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,aAAa,CACpB,IAAgB,EAChB,UAA6C,EAC7C,IAA6B;IAE7B,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,EAAE,KAAK,EAAE,IAA4B,EAAmB,EAAE;YAC3D,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,CAAY,CAAC;gBACzB,MAAM,KAAK,GACT,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;oBACpC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;oBACrB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,gBAAgB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAI,GAAsB,MAAM,EAChC,OAAO,GAAiC,EAAE;IAE1C,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,sBAAsB,GAC1B,OAAO,CAAC,cAAc,KAAK,KAAK;YAC9B,CAAC,CAAC,sHAAsH;YACxH,CAAC,CAAC,kJAAkJ,CAAC;QACzJ,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,MAAM,CAAC,4BAA4B,CAAC;YACpC,MAAM,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GACvB,IAAI,KAAK,OAAO;YACd,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,MAAM,CAAC,0BAA0B,CAAC;gBAClC,MAAM,CAAC,2BAA2B,CAAC;aACpC,CAAC;YACJ,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEnB,MAAM,OAAO,GAAgC;YAC3C,WAAW,EAAE,aAAa,CACxB;gBACE,WAAW,EACT,2IAA2I;gBAC7I,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iDAAiD;4BAC9D,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;yBACvB;qBACF;iBACF;aACF,EACD,SAAS,CAAC,OAAO,EACjB,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB;YACD,UAAU,EAAE,aAAa,CACvB;gBACE,WAAW,EAAE,+uBAA+uB,sBAAsB,EAAE;gBACpxB,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,GAAG,EAAE;4BACH,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,gGAAgG;yBACnG;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,+GAA+G;yBAClH;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iDAAiD;4BAC9D,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;yBACvB;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,sDAAsD;yBACzD;qBACF;oBACD,QAAQ,EAAE,CAAC,KAAK,CAAC;iBAClB;aACF,EACD,QAAQ,CAAC,OAAO,EAChB,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB;SACF,CAAC;QAEF,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;YACxB,OAAO,CAAC,SAAS,CAAC,GAAG,aAAa,CAChC;gBACE,WAAW,EACT,6uBAA6uB;gBAC/uB,UAAU,EAAE,oBAAoB,EAAE;aACnC,EACD,OAAO,CAAC,OAAO,CAChB,CAAC;YACF,OAAO,CAAC,UAAU,CAAC,GAAG,aAAa,CACjC;gBACE,WAAW,EACT,2oBAA2oB;gBAC7oB,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,8BAA8B;yBAC5C;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uDAAuD;yBAC1D;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uFAAuF;yBAC1F;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,wSAAwS;yBAC3S;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,kCAAkC;yBAChD;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,8IAA8I;yBACjJ;wBACD,UAAU,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,iiBAAiiB;yBACpiB;wBACD,GAAG,EAAE;4BACH,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,0GAA0G;4BAC5G,IAAI,EAAE,CAAC,MAAM,CAAC;yBACf;qBACF;oBACD,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC;iBACvC;aACF,EACD,QAAQ,CAAC,OAAO,CACjB,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAG3C,MAAM,OAAO,GAAgC,EAAE,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;QACzD,OAAO,CAAC,aAAa,CAAC,GAAG,aAAa,CACpC;YACE,WAAW,EACT,iOAAiO;YACnO,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,kFAAkF;qBACrF;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,iFAAiF;qBACpF;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,+CAA+C;wBAC5D,IAAI,EAAE,CAAC,MAAM,CAAC;qBACf;iBACF;aACF;SACF,EACD,GAAG,CAAC,OAAO,EACX,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;IAC9E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAChE,OAAO,CAAC,eAAe,CAAC,GAAG,aAAa,CACtC;YACE,WAAW,EACT,mMAAmM;YACrM,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,8GAA8G;qBACjH;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,4GAA4G;qBAC/G;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,uCAAuC;wBACpD,IAAI,EAAE,CAAC,MAAM,CAAC;qBACf;iBACF;aACF;SACF,EACD,GAAG,CAAC,OAAO,EACX,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qCAAqC,CAAC,IAAY;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,CACL,UAAU,KAAK,WAAW;QAC1B,UAAU,KAAK,cAAc;QAC7B,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAChC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAChC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;QAC9B,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAChC,UAAU,CAAC,UAAU,CAAC,gBAAgB,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAG/C,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,GAC/D,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,MAAM,CAAC,iCAAiC,CAAC;YACzC,MAAM,CAAC,iCAAiC,CAAC;YACzC,MAAM,CAAC,sCAAsC,CAAC;YAC9C,MAAM,CAAC,kCAAkC,CAAC;YAC1C,MAAM,CAAC,mCAAmC,CAAC;YAC3C,MAAM,CAAC,wCAAwC,CAAC;YAChD,MAAM,CAAC,0CAA0C,CAAC;YAClD,MAAM,CAAC,0BAA0B,CAAC;SACnC,CAAC,CAAC;QAEL,wEAAwE;QACxE,MAAM,SAAS,GAAG,aAAa,CAC7B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,IAAI,CAAC,OAAO,EACZ,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;QACF,MAAM,SAAS,GAAG,aAAa,CAC7B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,IAAI,CAAC,OAAO,EACZ,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;QACF,MAAM,UAAU,GAAG,aAAa,CAC9B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,KAAK,CAAC,OAAO,CACd,CAAC;QACF,MAAM,cAAc,GAAG,aAAa,CAClC;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,SAAS,CAAC,OAAO,EACjB,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;QACF,MAAM,WAAW,GAAG,aAAa,CAC/B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,GAAG,CAAC,OAAO,CACZ,CAAC;QAEF,OAAO;YACL,SAAS,EAAE;gBACT,IAAI,EAAE;oBACJ,WAAW,EACT,uiBAAuiB;oBACziB,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,0BAA0B;gCACvC,IAAI,EAAE;oCACJ,MAAM;oCACN,MAAM;oCACN,WAAW;oCACX,OAAO;oCACP,SAAS;oCACT,QAAQ;iCACT;6BACF;4BACD,IAAI,EAAE;gCACJ,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,wFAAwF;6BAC3F;4BACD,OAAO,EAAE;gCACP,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,uCAAuC;6BACrD;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,6NAA6N;gCAC/N,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC;6BACjD;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,oDAAoD;6BACvD;4BACD,IAAI,EAAE;gCACJ,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,wDAAwD;6BAC3D;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,0DAA0D;gCAC5D,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;6BACvB;4BACD,UAAU,EAAE;gCACV,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,sLAAsL;gCACxL,IAAI,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;6BACrC;4BACD,mBAAmB,EAAE;gCACnB,IAAI,EAAE,SAAS;gCACf,WAAW,EAAE,kDAAkD;6BAChE;yBACF;wBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;qBACrB;iBACF;gBACD,GAAG,EAAE,KAAK,EAAE,IAA4B,EAAE,EAAE;oBAC1C,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;oBACpC,IAAI,CAAC,KAAK,MAAM;wBAAE,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC7C,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;wBACjB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,kCAAkC,CAAC;wBAC1D,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC;oBACD,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;wBACtB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,uCAAuC,CAAC;wBAC/D,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAClC,CAAC;oBACD,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;wBAClB,IACE,CAAC,IAAI,CAAC,IAAI;4BACV,IAAI,CAAC,OAAO,KAAK,SAAS;4BAC1B,IAAI,CAAC,OAAO,KAAK,IAAI;4BAErB,OAAO,gDAAgD,CAAC;wBAC1D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;wBACzB,IAAI,CAAC,UAAU;4BACb,IAAI,CAAC,UAAU;gCACf,CAAC,qCAAqC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oCACvD,CAAC,CAAC,WAAW;oCACb,CAAC,CAAC,eAAe,CAAC,CAAC;wBACvB,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;wBACtC,IAAI,MAAM,EAAE,QAAQ;4BAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;wBACtD,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC9B,CAAC;oBACD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;wBACpB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,qCAAqC,CAAC;wBAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC;wBACvC,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;4BAC7C,OAAO,uDAAuD,CAAC;wBACjE,CAAC;wBACD,MAAM,KAAK,GACT,KAAK,KAAK,QAAQ;4BAChB,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,eAAe,EAAE,CAAC;4BAC9C,CAAC,CAAC,CAAC,oBAAoB,EAAE,EAAE,KAAK;gCAC9B,mBAAmB,EAAE;gCACrB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;wBACpC,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,OAAO,+CAA+C,CAAC;wBACzD,CAAC;wBACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAC5C,KAAK,EACL,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAClB,CAAC;wBACF,IAAI,CAAC,QAAQ,EAAE,CAAC;4BACd,OAAO,uBAAuB,IAAI,CAAC,IAAI,EAAE,CAAC;wBAC5C,CAAC;wBACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CACtC,KAAK,EACL,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,QAAQ,EACjB;4BACE,SAAS,EAAE,QAAQ,CAAC,SAAS;4BAC7B,UAAU,EAAE,WAAW;4BACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;4BAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;4BACrB,SAAS,EAAE,IAAI;4BACf,QAAQ,EAAE,QAAQ,CAAC,QAAQ;yBAC5B,CACF,CAAC;wBACF,OAAO,sBAAsB,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAC/C,CAAC;oBACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;wBACnB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,oCAAoC,CAAC;wBAC5D,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC/B,CAAC;oBACD,OAAO,0BAA0B,CAAC,4CAA4C,CAAC;gBACjF,CAAC;aACF;YACD,aAAa,EAAE,aAAa,CAC1B;gBACE,WAAW,EACT,wLAAwL;gBAC1L,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,4FAA4F;yBAC/F;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iBAAiB;4BAC9B,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC;yBACnD;wBACD,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,kEAAkE;yBACrE;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,2FAA2F;yBAC9F;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC;iBACrD;aACF,EACD,OAAO,CAAC,OAAO,CAChB;YACD,eAAe,EAAE,aAAa,CAC5B;gBACE,WAAW,EACT,4DAA4D;gBAC9D,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iDAAiD;yBAC/D;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;iBACnB;aACF,EACD,MAAM,CAAC,OAAO,CACf;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAG3C,IAAI,CAAC;QACH,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7C,MAAM,CAAC,oCAAoC,CAAC;YAC5C,MAAM,CAAC,iCAAiC,CAAC;SAC1C,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,aAAa,CAC/B;YACE,WAAW,EAAE,yCAAyC;YACtD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,yDAAyD;qBAC5D;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,qCAAqC;qBACnD;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,eAAe;wBAC5B,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;qBACvB;oBACD,eAAe,EAAE;wBACf,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,qFAAqF;qBACxF;iBACF;aACF;SACF,EACD,SAAS,CAAC,OAAO,CAClB,CAAC;QAEF,MAAM,SAAS,GAAG,aAAa,CAC7B;YACE,WAAW,EAAE,+BAA+B;YAC5C,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,EAAE,EAAE;wBACF,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,4BAA4B;qBAC1C;iBACF;gBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;aACjB;SACF,EACD,OAAO,CAAC,OAAO,CAChB,CAAC;QAEF,OAAO;YACL,cAAc,EAAE;gBACd,IAAI,EAAE;oBACJ,WAAW,EACT,4LAA4L;oBAC9L,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,0BAA0B;gCACvC,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC;6BAC9D;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,kEAAkE;6BACrE;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,8CAA8C;6BAC5D;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,wBAAwB;gCACrC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;6BACvB;4BACD,eAAe,EAAE;gCACf,IAAI,EAAE,SAAS;gCACf,WAAW,EACT,uJAAuJ;6BAC1J;4BACD,EAAE,EAAE;gCACF,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,kEAAkE;6BACrE;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,yBAAyB;6BACvC;yBACF;wBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;qBACrB;iBACF;gBACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;oBAClB,IAAI,IAAI,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;wBAC5B,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC;oBACD,IACE,IAAI,EAAE,MAAM,KAAK,QAAQ;wBACzB,IAAI,EAAE,MAAM,KAAK,KAAK;wBACtB,IAAI,EAAE,MAAM,KAAK,OAAO;wBACxB,IAAI,EAAE,MAAM,KAAK,SAAS,EAC1B,CAAC;wBACD,MAAM,EAAE,GAAG,OAAO,IAAI,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvD,IAAI,CAAC,EAAE;4BAAE,OAAO,sBAAsB,CAAC;wBACvC,MAAM,KAAK,GACT,oBAAoB,EAAE,EAAE,KAAK,IAAI,mBAAmB,EAAE,IAAI,EAAE,CAAC;wBAC/D,IAAI,CAAC,KAAK;4BAAE,OAAO,qCAAqC,CAAC;wBACzD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE;4BAC5D,KAAK,EAAE,eAAe,EAAE;yBACzB,CAAC,CAAC;wBACH,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,OAAO,gBAAgB,EAAE,cAAc,CAAC;wBAC1C,CAAC;wBACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,IAAI,YAAY,CAAC;wBAC7D,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;4BAC7B,MAAM,SAAS,GACb,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;gCAC7B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gCACtD,CAAC,CAAC,EAAE,CAAC;4BACT,IAAI,CAAC,SAAS;gCAAE,OAAO,yBAAyB,CAAC;4BACjD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;4BAClD,IAAI,CAAC,OAAO;gCAAE,OAAO,gBAAgB,EAAE,yBAAyB,CAAC;4BACjE,OAAO,iBAAiB,KAAK,SAAS,SAAS,IAAI,CAAC;wBACtD,CAAC;wBACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;4BAC9B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;4BACnD,IAAI,CAAC,QAAQ;gCACX,OAAO,gBAAgB,EAAE,0BAA0B,CAAC;4BACtD,OAAO,kBAAkB,KAAK,EAAE,CAAC;wBACnC,CAAC;wBACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;wBAChE,IAAI,CAAC,MAAM;4BAAE,OAAO,gBAAgB,EAAE,yBAAyB,CAAC;wBAChE,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,UAAU,KAAK,EAAE,CAAC;oBAC3E,CAAC;oBACD,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC/B,CAAC;aACF;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAAc;IAEd,IAAI,CAAC;QACH,MAAM,GAAG,GACP,MAAM,MAAM,CAAC,oDAAoD,CAAC,CAAC;QAErE,OAAO;YACL,qBAAqB,EAAE;gBACrB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CACZ,GAAG,CAAC,GAAG,CAAC;oBACN,GAAG,IAAI;oBACP,KAAK,EACH,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;wBACjD,CAAC,CAAC,IAAI,CAAC,KAAK;wBACZ,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;iBACpB,CAAC;aACL;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oCAAoC;IAGxD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,6CAA6C,CAAC,CAAC;QAExE,OAAO;YACL,4BAA4B,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;SAC/D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,SAAkB;IAElB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACxD,OAAO;YACL,YAAY,EAAE;gBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,GAAG,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC;aAC1D;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import type { ActionEntry } from \"../../agent/production-agent.js\";\nimport type { ActionTool } from \"../../agent/types.js\";\nimport {\n  renameThread,\n  resolveThreadAccess,\n  setThreadArchived,\n  setThreadPinned,\n} from \"../../chat-threads/store.js\";\nimport type { DatabaseToolsMode } from \"../../scripts/db/tool-mode.js\";\nimport { dbExecToolParameters } from \"../../scripts/db/tool-schemas.js\";\nimport { captureCliOutput } from \"../cli-capture.js\";\nimport {\n  getRequestOrgId,\n  getRequestRunContext,\n  getRequestUserEmail,\n} from \"../request-context.js\";\n\n// ---------------------------------------------------------------------------\n// CLI-script-backed action entries: db-*, docs-search/source-search,\n// resources/save-memory/delete-memory, chat-history, manage-agent-engine,\n// manage-agent-loop-settings, and call-agent. Each wraps a core CLI script\n// (that writes to console.log) as an ActionEntry via `wrapCliScript`.\n// ---------------------------------------------------------------------------\n\n/**\n * Wraps a core CLI script (that writes to console.log) as a ActionEntry\n * by capturing stdout. Uses an AsyncLocalStorage-backed capture so\n * concurrent tool calls do not corrupt the global console/stdout pointers\n * (see `cli-capture.ts`).\n */\nfunction wrapCliScript(\n  tool: ActionTool,\n  cliDefault: (args: string[]) => Promise<void>,\n  opts?: { readOnly?: boolean },\n): ActionEntry {\n  return {\n    tool,\n    ...(opts?.readOnly ? { readOnly: true as const } : {}),\n    run: async (args: Record<string, string>): Promise<string> => {\n      const cliArgs: string[] = [];\n      for (const [k, v] of Object.entries(args)) {\n        const raw = v as unknown;\n        const value =\n          raw != null && typeof raw === \"object\"\n            ? JSON.stringify(raw)\n            : String(raw);\n        cliArgs.push(`--${k}`, value);\n      }\n      return captureCliOutput(() => cliDefault(cliArgs));\n    },\n  };\n}\n\n/**\n * Creates db-* tools (db-query, db-exec, db-patch, db-schema) as native tools.\n * By default these let the agent inspect the app's own SQL database; raw SQL\n * writes are only exposed when the app explicitly opts into write mode.\n * Scoping to the current user/org is enforced automatically in production via\n * temp views.\n *\n * In dev mode template actions are invoked via bash and the agent can call\n * `pnpm action db-query ...` — but in production there is no bash, so these\n * must be registered as native tools for the agent to reach the app DB at all.\n */\nexport async function createDbScriptEntries(\n  mode: DatabaseToolsMode = \"read\",\n  options: { extensionTools?: boolean } = {},\n): Promise<Record<string, ActionEntry>> {\n  try {\n    if (mode === \"off\") return {};\n    const extensionQueryGuidance =\n      options.extensionTools === false\n        ? \"Extension management tools are disabled for this app; do not query or mutate the legacy tools table as a workaround.\"\n        : \"For extension management, use list-extensions, update-extension, hide-extension, or delete-extension instead of querying the legacy tools table.\";\n    const [schemaMod, queryMod] = await Promise.all([\n      import(\"../../scripts/db/schema.js\"),\n      import(\"../../scripts/db/query.js\"),\n    ]);\n    const [execMod, patchMod] =\n      mode === \"write\"\n        ? await Promise.all([\n            import(\"../../scripts/db/exec.js\"),\n            import(\"../../scripts/db/patch.js\"),\n          ])\n        : [null, null];\n\n    const entries: Record<string, ActionEntry> = {\n      \"db-schema\": wrapCliScript(\n        {\n          description:\n            \"Show the app's SQL schema — all tables, columns, types, indexes, and foreign keys. Use this to understand the data model before querying.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              format: {\n                type: \"string\",\n                description: 'Output format: \"json\" or \"text\" (default: text)',\n                enum: [\"json\", \"text\"],\n              },\n            },\n          },\n        },\n        schemaMod.default,\n        { readOnly: true },\n      ),\n      \"db-query\": wrapCliScript(\n        {\n          description: `Read from the app's own SQL database ONLY. Runs a SELECT against the app's internal tables (settings, application_state, template tables). Results are auto-scoped to the current user/org. IMPORTANT: This tool CANNOT access external data sources like data warehouses, CRMs, issue trackers, analytics platforms, calendars, mail, docs, or other third-party services. For those, use the relevant template/provider action, MCP connector, or provider-api-catalog/provider-api-docs/provider-api-request when available. If the user names a provider, that named provider wins; do not substitute a warehouse or app database copy unless they explicitly ask for it. If a table isn't in the app schema, don't try db-query — use the data-source-specific action. ${extensionQueryGuidance}`,\n          parameters: {\n            type: \"object\",\n            properties: {\n              sql: {\n                type: \"string\",\n                description:\n                  \"SELECT query to run, e.g. \\\"SELECT key, value FROM settings WHERE key LIKE 'sql-dashboard-%'\\\"\",\n              },\n              args: {\n                type: \"string\",\n                description:\n                  'Optional JSON array of positional bind args for parameterized placeholders. Example: \\'[\"draft\",\"form-123\"]\\'',\n              },\n              format: {\n                type: \"string\",\n                description: 'Output format: \"json\" or \"text\" (default: text)',\n                enum: [\"json\", \"text\"],\n              },\n              limit: {\n                type: \"string\",\n                description:\n                  \"Append LIMIT N if the query doesn't already have one\",\n              },\n            },\n            required: [\"sql\"],\n          },\n        },\n        queryMod.default,\n        { readOnly: true },\n      ),\n    };\n\n    if (execMod && patchMod) {\n      entries[\"db-exec\"] = wrapCliScript(\n        {\n          description:\n            \"Write to the app's own SQL database ONLY. Runs INSERT / UPDATE / DELETE / REPLACE against the app's internal tables. For multiple related writes, pass `statements` so they run sequentially in one transaction instead of issuing several db-exec calls. Writes are auto-scoped to the current user/org, and `owner_email` / `org_id` are auto-injected on INSERT. Schema changes (CREATE/ALTER/DROP) are blocked. Never use this to backfill missing data for a read/analysis request or to create/modify users, members, roles, permissions, admin flags, or ownership; use a dedicated app action or reviewed code. IMPORTANT: This tool CANNOT write to external data sources like BigQuery, HubSpot, etc. For external services, use the appropriate template action.\",\n          parameters: dbExecToolParameters(),\n        },\n        execMod.default,\n      );\n      entries[\"db-patch\"] = wrapCliScript(\n        {\n          description:\n            \"Surgical patch on a large text/JSON column in the app's SQL database. Two modes: (1) text find/replace via `find`/`replace`/`edits` — best for small edits to documents, slide HTML, etc. (2) structural JSON ops via `json-ops` — STRONGLY PREFERRED when the column is JSON (dashboard configs, form schemas, slide decks) because it avoids all the brace/quote/comma surgery that text find/replace requires. Use `json-ops` to set/remove values at a JSON Pointer path, or to move/insert array items — e.g. reorder dashboard panels, add a filter, rename a field. Targets exactly one row (narrow `where` by primary key). Same per-user/org scoping as db-exec.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              table: {\n                type: \"string\",\n                description: \"Table name (e.g. 'settings')\",\n              },\n              column: {\n                type: \"string\",\n                description:\n                  \"Text/JSON column to patch (e.g. 'value' for settings)\",\n              },\n              where: {\n                type: \"string\",\n                description:\n                  \"WHERE clause that matches exactly one row (e.g. \\\"key = 'o:org1:sql-dashboard-foo'\\\")\",\n              },\n              find: {\n                type: \"string\",\n                description:\n                  \"Text mode: substring to find. Must match EXACTLY ONE occurrence by default (like Claude Code's Edit tool). If 0 matches, you get 'NOT FOUND'. If >1 matches, you get surrounding context for each match — widen `find` with unique context and retry. Use `all: \\\"true\\\"` to replace every occurrence.\",\n              },\n              replace: {\n                type: \"string\",\n                description: \"Text mode: replacement substring\",\n              },\n              edits: {\n                type: \"string\",\n                description:\n                  'Text mode batch: JSON array of {find, replace} pairs. Same uniqueness rule applies to each `find`. Example: \\'[{\"find\":\"a\",\"replace\":\"b\"}]\\'',\n              },\n              \"json-ops\": {\n                type: \"string\",\n                description:\n                  'JSON mode: JSON array of structural ops. Each op is {op, path, value?, from?}. `op` is one of \"set\", \"remove\", \"insert\", \"move\", \"move-before\". `path` / `from` use JSON Pointer (\"/panels/3/title\"). Examples — reorder: \\'[{\"op\":\"move\",\"from\":\"/panels/7\",\"path\":\"/panels/1\"}]\\'; edit field: \\'[{\"op\":\"set\",\"path\":\"/panels/0/title\",\"value\":\"New\"}]\\'; delete filter: \\'[{\"op\":\"remove\",\"path\":\"/filters/2\"}]\\'; add panel: \\'[{\"op\":\"insert\",\"path\":\"/panels/0\",\"value\":{\"id\":\"p\",\"title\":\"...\"}}]\\'. Much safer than text find/replace for JSON columns.',\n              },\n              all: {\n                type: \"string\",\n                description:\n                  'Text mode: set to \"true\" to replace every occurrence of each `find` (default requires exactly one match)',\n                enum: [\"true\"],\n              },\n            },\n            required: [\"table\", \"column\", \"where\"],\n          },\n        },\n        patchMod.default,\n      );\n    }\n\n    return entries;\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates read-only package lookup tools so agents can inspect version-matched\n * framework docs and source bundled in @agent-native/core at runtime.\n */\nexport async function createDocsScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  const entries: Record<string, ActionEntry> = {};\n\n  try {\n    const mod = await import(\"../../scripts/docs/search.js\");\n    entries[\"docs-search\"] = wrapCliScript(\n      {\n        description:\n          \"Search and read agent-native framework documentation, bundled AGENTS.md, and codebase skills. Use --list to see all pages, --query to search, --slug to read a specific page. Codebase skill pages use slugs like skill-<name>.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            query: {\n              type: \"string\",\n              description:\n                \"Search term to find relevant docs (e.g. 'actions', 'authentication', 'database')\",\n            },\n            slug: {\n              type: \"string\",\n              description:\n                \"Read a specific doc page by slug (e.g. 'actions', 'authentication', 'database')\",\n            },\n            list: {\n              type: \"string\",\n              description: 'Set to \"true\" to list all available doc pages',\n              enum: [\"true\"],\n            },\n          },\n        },\n      },\n      mod.default,\n      { readOnly: true },\n    );\n  } catch {\n    // Keep source-search available if docs-search fails during a partial build.\n  }\n\n  try {\n    const mod = await import(\"../../scripts/docs/source-search.js\");\n    entries[\"source-search\"] = wrapCliScript(\n      {\n        description:\n          \"Search and read the packaged Agent Native source corpus under node_modules/@agent-native/core/corpus. Use --list for sections, --query to search core/template source, and --path to read a file.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            query: {\n              type: \"string\",\n              description:\n                \"Search term to find relevant core or template source (e.g. 'defineAction', 'useActionQuery', 'view-screen').\",\n            },\n            path: {\n              type: \"string\",\n              description:\n                \"Read a specific corpus file or list a directory (e.g. 'templates/plan/AGENTS.md' or 'core/src/action.ts').\",\n            },\n            list: {\n              type: \"string\",\n              description: 'Set to \"true\" to list corpus sections',\n              enum: [\"true\"],\n            },\n          },\n        },\n      },\n      mod.default,\n      { readOnly: true },\n    );\n  } catch {\n    // Older package installs may not have the corpus/search script yet.\n  }\n\n  return entries;\n}\n\n/**\n * Creates resource ScriptEntries available in both prod and dev modes.\n */\nexport function shouldDefaultResourceWriteToWorkspace(path: string): boolean {\n  const normalized = path.replace(/^\\/+/, \"\");\n  return (\n    normalized === \"AGENTS.md\" ||\n    normalized === \"LEARNINGS.md\" ||\n    normalized.startsWith(\"memory/\") ||\n    normalized.startsWith(\"skills/\") ||\n    normalized.startsWith(\"jobs/\") ||\n    normalized.startsWith(\"agents/\") ||\n    normalized.startsWith(\"remote-agents/\")\n  );\n}\n\nexport async function createResourceScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  try {\n    const [list, read, effective, write, del, saveMem, delMem, store] =\n      await Promise.all([\n        import(\"../../scripts/resources/list.js\"),\n        import(\"../../scripts/resources/read.js\"),\n        import(\"../../scripts/resources/effective.js\"),\n        import(\"../../scripts/resources/write.js\"),\n        import(\"../../scripts/resources/delete.js\"),\n        import(\"../../scripts/resources/save-memory.js\"),\n        import(\"../../scripts/resources/delete-memory.js\"),\n        import(\"../../resources/store.js\"),\n      ]);\n\n    // Wrap each CLI runner so it captures stdout and converts args properly\n    const listEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      list.default,\n      { readOnly: true },\n    );\n    const readEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      read.default,\n      { readOnly: true },\n    );\n    const writeEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      write.default,\n    );\n    const effectiveEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      effective.default,\n      { readOnly: true },\n    );\n    const deleteEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      del.default,\n    );\n\n    return {\n      resources: {\n        tool: {\n          description:\n            'Manage workspace resources. Actions: \"list\" (browse visible files), \"read\" (get contents), \"effective\" (show workspace -> organization/app -> personal inheritance for a path), \"write\" (create/update personal or shared; workspace only for local file mode control files), \"promote\" (make agent scratch visible), \"delete\" (remove personal or shared; workspace only for local file mode control files). Agent scratch writes are hidden from the Workspace view by default; use visibility=\"workspace\" only for files the user explicitly wants to keep/manage.',\n          parameters: {\n            type: \"object\",\n            properties: {\n              action: {\n                type: \"string\",\n                description: \"The operation to perform\",\n                enum: [\n                  \"list\",\n                  \"read\",\n                  \"effective\",\n                  \"write\",\n                  \"promote\",\n                  \"delete\",\n                ],\n              },\n              path: {\n                type: \"string\",\n                description:\n                  \"Resource path (e.g. 'LEARNINGS.md', 'notes/ideas.md'). Required for read/write/delete.\",\n              },\n              content: {\n                type: \"string\",\n                description: \"Content to write. Required for write.\",\n              },\n              scope: {\n                type: \"string\",\n                description:\n                  \"personal, shared, workspace, or all (default varies by action). Workspace is read-only when inherited from Dispatch; in local file mode AGENTS.md, agent-native.json, mcp.config.json, .mcp.json, and skills/ are writable.\",\n                enum: [\"personal\", \"shared\", \"workspace\", \"all\"],\n              },\n              prefix: {\n                type: \"string\",\n                description:\n                  \"Filter by path prefix when listing (e.g. 'notes/')\",\n              },\n              mime: {\n                type: \"string\",\n                description:\n                  \"MIME type for write (default: inferred from extension)\",\n              },\n              format: {\n                type: \"string\",\n                description:\n                  'Output format for list: \"json\" or \"text\" (default: text)',\n                enum: [\"json\", \"text\"],\n              },\n              visibility: {\n                type: \"string\",\n                description:\n                  'Visibility for write: \"agent_scratch\" for internal working files, \"workspace\" for user-requested files. Defaults to agent_scratch except durable instruction/skill/job/memory paths.',\n                enum: [\"workspace\", \"agent_scratch\"],\n              },\n              includeAgentScratch: {\n                type: \"boolean\",\n                description: \"Include hidden agent scratch files when listing.\",\n              },\n            },\n            required: [\"action\"],\n          },\n        },\n        run: async (args: Record<string, string>) => {\n          const { action: a, ...rest } = args;\n          if (a === \"list\") return listEntry.run(rest);\n          if (a === \"read\") {\n            if (!rest.path) return \"Error: path is required for read\";\n            return readEntry.run(rest);\n          }\n          if (a === \"effective\") {\n            if (!rest.path) return \"Error: path is required for effective\";\n            return effectiveEntry.run(rest);\n          }\n          if (a === \"write\") {\n            if (\n              !rest.path ||\n              rest.content === undefined ||\n              rest.content === null\n            )\n              return \"Error: path and content are required for write\";\n            rest.createdBy = \"agent\";\n            rest.visibility =\n              rest.visibility ??\n              (shouldDefaultResourceWriteToWorkspace(String(rest.path))\n                ? \"workspace\"\n                : \"agent_scratch\");\n            const runCtx = getRequestRunContext();\n            if (runCtx?.threadId) rest.threadId = runCtx.threadId;\n            return writeEntry.run(rest);\n          }\n          if (a === \"promote\") {\n            if (!rest.path) return \"Error: path is required for promote\";\n            const scope = rest.scope ?? \"personal\";\n            if (scope === \"workspace\" || scope === \"all\") {\n              return \"Error: promote supports personal or shared scope only\";\n            }\n            const owner =\n              scope === \"shared\"\n                ? store.sharedResourceOwner(getRequestOrgId())\n                : (getRequestRunContext()?.owner ??\n                  getRequestUserEmail() ??\n                  process.env.AGENT_USER_EMAIL);\n            if (!owner) {\n              return \"Error: promote requires an authenticated user\";\n            }\n            const resource = await store.resourceGetByPath(\n              owner,\n              String(rest.path),\n            );\n            if (!resource) {\n              return `Resource not found: ${rest.path}`;\n            }\n            const promoted = await store.resourcePut(\n              owner,\n              resource.path,\n              resource.content,\n              resource.mimeType,\n              {\n                createdBy: resource.createdBy,\n                visibility: \"workspace\",\n                threadId: resource.threadId,\n                runId: resource.runId,\n                expiresAt: null,\n                metadata: resource.metadata,\n              },\n            );\n            return `Promoted resource: ${promoted.path}`;\n          }\n          if (a === \"delete\") {\n            if (!rest.path) return \"Error: path is required for delete\";\n            return deleteEntry.run(rest);\n          }\n          return `Error: unknown action \"${a}\". Use: list, read, write, promote, delete`;\n        },\n      },\n      \"save-memory\": wrapCliScript(\n        {\n          description:\n            \"Save a memory for future conversations. Creates or updates a memory file and its index entry. Use proactively when you learn preferences, corrections, project context, or references.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              name: {\n                type: \"string\",\n                description:\n                  \"Short kebab-case identifier (e.g. 'coding-style', 'deploy-process'). Used as the filename.\",\n              },\n              type: {\n                type: \"string\",\n                description: \"Memory category\",\n                enum: [\"user\", \"feedback\", \"project\", \"reference\"],\n              },\n              description: {\n                type: \"string\",\n                description:\n                  \"One-line summary shown in the memory index (keep under 80 chars)\",\n              },\n              content: {\n                type: \"string\",\n                description:\n                  \"The memory content in markdown. For updates, read first and provide full updated content.\",\n              },\n            },\n            required: [\"name\", \"type\", \"description\", \"content\"],\n          },\n        },\n        saveMem.default,\n      ),\n      \"delete-memory\": wrapCliScript(\n        {\n          description:\n            \"Delete a memory entry and remove it from the memory index.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              name: {\n                type: \"string\",\n                description: \"The memory name to delete (e.g. 'coding-style')\",\n              },\n            },\n            required: [\"name\"],\n          },\n        },\n        delMem.default,\n      ),\n    };\n  } catch {\n    // Resources not available — skip silently\n    return {};\n  }\n}\n\n/**\n * Creates a unified chat-history ActionEntry that dispatches to search, open,\n * rename, or lightweight organization actions.\n */\nexport async function createChatScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  try {\n    const [searchMod, openMod] = await Promise.all([\n      import(\"../../scripts/chat/search-chats.js\"),\n      import(\"../../scripts/chat/open-chat.js\"),\n    ]);\n\n    const searchEntry = wrapCliScript(\n      {\n        description: \"Search or list past agent chat threads.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            query: {\n              type: \"string\",\n              description:\n                \"Search term to find chats by title, preview, or content\",\n            },\n            limit: {\n              type: \"string\",\n              description: \"Max number of results (default: 20)\",\n            },\n            format: {\n              type: \"string\",\n              description: \"Output format\",\n              enum: [\"json\", \"text\"],\n            },\n            includeArchived: {\n              type: \"boolean\",\n              description:\n                \"Also include archived chats in the results. Archived chats are excluded by default.\",\n            },\n          },\n        },\n      },\n      searchMod.default,\n    );\n\n    const openEntry = wrapCliScript(\n      {\n        description: \"Open a chat thread in the UI.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            id: {\n              type: \"string\",\n              description: \"The chat thread ID to open\",\n            },\n          },\n          required: [\"id\"],\n        },\n      },\n      openMod.default,\n    );\n\n    return {\n      \"chat-history\": {\n        tool: {\n          description:\n            \"Manage past agent chat threads. Use action 'search' to find previous conversations by keyword, 'open' to open a thread in the UI, or 'rename'/'pin'/'unpin'/'archive' to organize history.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              action: {\n                type: \"string\",\n                description: \"The operation to perform\",\n                enum: [\"search\", \"open\", \"rename\", \"pin\", \"unpin\", \"archive\"],\n              },\n              query: {\n                type: \"string\",\n                description:\n                  \"(search) Search term to find chats by title, preview, or content\",\n              },\n              limit: {\n                type: \"string\",\n                description: \"(search) Max number of results (default: 20)\",\n              },\n              format: {\n                type: \"string\",\n                description: \"(search) Output format\",\n                enum: [\"json\", \"text\"],\n              },\n              includeArchived: {\n                type: \"boolean\",\n                description:\n                  \"(search) Also include archived chats in the results. Archived chats are excluded by default, matching the 'archive' action's effect on the chat list.\",\n              },\n              id: {\n                type: \"string\",\n                description:\n                  \"(open, rename, pin, unpin, archive) The chat thread ID to manage\",\n              },\n              title: {\n                type: \"string\",\n                description: \"(rename) New chat title\",\n              },\n            },\n            required: [\"action\"],\n          },\n        },\n        run: async (args) => {\n          if (args?.action === \"open\") {\n            return openEntry.run(args);\n          }\n          if (\n            args?.action === \"rename\" ||\n            args?.action === \"pin\" ||\n            args?.action === \"unpin\" ||\n            args?.action === \"archive\"\n          ) {\n            const id = typeof args?.id === \"string\" ? args.id : \"\";\n            if (!id) return \"Missing required id.\";\n            const owner =\n              getRequestRunContext()?.owner ?? getRequestUserEmail() ?? \"\";\n            if (!owner) return \"No authenticated user is available.\";\n            const thread = await resolveThreadAccess(owner, id, \"editor\", {\n              orgId: getRequestOrgId(),\n            });\n            if (!thread) {\n              return `Chat thread \"${id}\" not found.`;\n            }\n            const title = thread.title || thread.preview || \"(untitled)\";\n            if (args.action === \"rename\") {\n              const nextTitle =\n                typeof args?.title === \"string\"\n                  ? args.title.replace(/\\s+/g, \" \").trim().slice(0, 160)\n                  : \"\";\n              if (!nextTitle) return \"Missing required title.\";\n              const renamed = await renameThread(id, nextTitle);\n              if (!renamed) return `Chat thread \"${id}\" could not be renamed.`;\n              return `Renamed chat \"${title}\" to \"${nextTitle}\".`;\n            }\n            if (args.action === \"archive\") {\n              const archived = await setThreadArchived(id, true);\n              if (!archived)\n                return `Chat thread \"${id}\" could not be archived.`;\n              return `Archived chat: ${title}`;\n            }\n            const pinned = await setThreadPinned(id, args.action === \"pin\");\n            if (!pinned) return `Chat thread \"${id}\" could not be updated.`;\n            return `${args.action === \"pin\" ? \"Pinned\" : \"Unpinned\"} chat: ${title}`;\n          }\n          return searchEntry.run(args);\n        },\n      },\n    };\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates the consolidated manage-agent-engine tool (list / set / test).\n * Let the agent inspect and configure the active LLM engine.\n */\nexport async function createAgentEngineScriptEntries(\n  appId?: string,\n): Promise<Record<string, ActionEntry>> {\n  try {\n    const mod =\n      await import(\"../../scripts/agent-engines/manage-agent-engine.js\");\n\n    return {\n      \"manage-agent-engine\": {\n        tool: mod.tool,\n        run: (args) =>\n          mod.run({\n            ...args,\n            appId:\n              typeof args.appId === \"string\" && args.appId.trim()\n                ? args.appId\n                : (appId ?? \"\"),\n          }),\n      },\n    };\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates the manage-agent-loop-settings tool. Lets the agent inspect and\n * configure the loop step limit it may hit on long-running work.\n */\nexport async function createAgentLoopSettingsScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  try {\n    const mod = await import(\"../../scripts/manage-agent-loop-settings.js\");\n\n    return {\n      \"manage-agent-loop-settings\": { tool: mod.tool, run: mod.run },\n    };\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates the call-agent ActionEntry for cross-agent A2A communication.\n * Binds selfAppId so the agent cannot call itself via call-agent.\n */\nexport async function createCallAgentScriptEntry(\n  selfAppId?: string,\n): Promise<Record<string, ActionEntry>> {\n  try {\n    const mod = await import(\"../../scripts/call-agent.js\");\n    return {\n      \"call-agent\": {\n        tool: mod.tool,\n        run: (args, context) => mod.run(args, context, selfAppId),\n      },\n    };\n  } catch {\n    return {};\n  }\n}\n"]}
+{"version":3,"file":"script-entries.js","sourceRoot":"","sources":["../../../src/server/agent-chat/script-entries.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,GAChB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,8EAA8E;AAC9E,qEAAqE;AACrE,0EAA0E;AAC1E,2EAA2E;AAC3E,sEAAsE;AACtE,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,aAAa,CACpB,IAAgB,EAChB,UAA6C,EAC7C,IAGC;IAED,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,EAAE,KAAK,EAAE,IAA4B,EAAmB,EAAE;YAC3D,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,kEAAkE;gBAClE,uEAAuE;gBACvE,uEAAuE;gBACvE,sEAAsE;gBACtE,wDAAwD;gBACxD,IAAI,IAAI,EAAE,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;gBAC5C,CAAC;gBACD,MAAM,GAAG,GAAG,CAAY,CAAC;gBACzB,MAAM,KAAK,GACT,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;oBACpC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;oBACrB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,gBAAgB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAI,GAAsB,MAAM,EAChC,OAAO,GAAiC,EAAE;IAE1C,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,sBAAsB,GAC1B,OAAO,CAAC,cAAc,KAAK,KAAK;YAC9B,CAAC,CAAC,sHAAsH;YACxH,CAAC,CAAC,kJAAkJ,CAAC;QACzJ,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,MAAM,CAAC,4BAA4B,CAAC;YACpC,MAAM,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GACvB,IAAI,KAAK,OAAO;YACd,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,MAAM,CAAC,0BAA0B,CAAC;gBAClC,MAAM,CAAC,2BAA2B,CAAC;aACpC,CAAC;YACJ,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEnB,MAAM,OAAO,GAAgC;YAC3C,WAAW,EAAE,aAAa,CACxB;gBACE,WAAW,EACT,2IAA2I;gBAC7I,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iDAAiD;4BAC9D,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;yBACvB;qBACF;iBACF;aACF,EACD,SAAS,CAAC,OAAO,EACjB;gBACE,WAAW,EAAE,CAAC,QAAQ,CAAC;gBACvB,QAAQ,EAAE,IAAI;aACf,CACF;YACD,UAAU,EAAE,aAAa,CACvB;gBACE,WAAW,EAAE,+uBAA+uB,sBAAsB,EAAE;gBACpxB,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,GAAG,EAAE;4BACH,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,gGAAgG;yBACnG;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,+GAA+G;yBAClH;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iDAAiD;4BAC9D,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;yBACvB;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,sDAAsD;yBACzD;qBACF;oBACD,QAAQ,EAAE,CAAC,KAAK,CAAC;iBAClB;aACF,EACD,QAAQ,CAAC,OAAO,EAChB;gBACE,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;gBAC/C,QAAQ,EAAE,IAAI;aACf,CACF;SACF,CAAC;QAEF,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;YACxB,OAAO,CAAC,SAAS,CAAC,GAAG,aAAa,CAChC;gBACE,WAAW,EACT,6uBAA6uB;gBAC/uB,UAAU,EAAE,oBAAoB,EAAE;aACnC,EACD,OAAO,CAAC,OAAO,CAChB,CAAC;YACF,OAAO,CAAC,UAAU,CAAC,GAAG,aAAa,CACjC;gBACE,WAAW,EACT,2oBAA2oB;gBAC7oB,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,8BAA8B;yBAC5C;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uDAAuD;yBAC1D;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,uFAAuF;yBAC1F;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,wSAAwS;yBAC3S;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,kCAAkC;yBAChD;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,8IAA8I;yBACjJ;wBACD,UAAU,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,iiBAAiiB;yBACpiB;wBACD,GAAG,EAAE;4BACH,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,0GAA0G;4BAC5G,IAAI,EAAE,CAAC,MAAM,CAAC;yBACf;qBACF;oBACD,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC;iBACvC;aACF,EACD,QAAQ,CAAC,OAAO,CACjB,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAG3C,MAAM,OAAO,GAAgC,EAAE,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;QACzD,OAAO,CAAC,aAAa,CAAC,GAAG,aAAa,CACpC;YACE,WAAW,EACT,iOAAiO;YACnO,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,kFAAkF;qBACrF;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,iFAAiF;qBACpF;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,+CAA+C;wBAC5D,IAAI,EAAE,CAAC,MAAM,CAAC;qBACf;iBACF;aACF;SACF,EACD,GAAG,CAAC,OAAO,EACX,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;IAC9E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAChE,OAAO,CAAC,eAAe,CAAC,GAAG,aAAa,CACtC;YACE,WAAW,EACT,mMAAmM;YACrM,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,8GAA8G;qBACjH;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,4GAA4G;qBAC/G;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,uCAAuC;wBACpD,IAAI,EAAE,CAAC,MAAM,CAAC;qBACf;iBACF;aACF;SACF,EACD,GAAG,CAAC,OAAO,EACX,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qCAAqC,CAAC,IAAY;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,CACL,UAAU,KAAK,WAAW;QAC1B,UAAU,KAAK,cAAc;QAC7B,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAChC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAChC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;QAC9B,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAChC,UAAU,CAAC,UAAU,CAAC,gBAAgB,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAG/C,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,GAC/D,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,MAAM,CAAC,iCAAiC,CAAC;YACzC,MAAM,CAAC,iCAAiC,CAAC;YACzC,MAAM,CAAC,sCAAsC,CAAC;YAC9C,MAAM,CAAC,kCAAkC,CAAC;YAC1C,MAAM,CAAC,mCAAmC,CAAC;YAC3C,MAAM,CAAC,wCAAwC,CAAC;YAChD,MAAM,CAAC,0CAA0C,CAAC;YAClD,MAAM,CAAC,0BAA0B,CAAC;SACnC,CAAC,CAAC;QAEL,wEAAwE;QACxE,MAAM,SAAS,GAAG,aAAa,CAC7B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,IAAI,CAAC,OAAO,EACZ,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;QACF,MAAM,SAAS,GAAG,aAAa,CAC7B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,IAAI,CAAC,OAAO,EACZ,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;QACF,MAAM,UAAU,GAAG,aAAa,CAC9B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,KAAK,CAAC,OAAO,CACd,CAAC;QACF,MAAM,cAAc,GAAG,aAAa,CAClC;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,SAAS,CAAC,OAAO,EACjB,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;QACF,MAAM,WAAW,GAAG,aAAa,CAC/B;YACE,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;SACxD,EACD,GAAG,CAAC,OAAO,CACZ,CAAC;QAEF,OAAO;YACL,SAAS,EAAE;gBACT,IAAI,EAAE;oBACJ,WAAW,EACT,uiBAAuiB;oBACziB,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,0BAA0B;gCACvC,IAAI,EAAE;oCACJ,MAAM;oCACN,MAAM;oCACN,WAAW;oCACX,OAAO;oCACP,SAAS;oCACT,QAAQ;iCACT;6BACF;4BACD,IAAI,EAAE;gCACJ,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,wFAAwF;6BAC3F;4BACD,OAAO,EAAE;gCACP,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,uCAAuC;6BACrD;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,6NAA6N;gCAC/N,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC;6BACjD;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,oDAAoD;6BACvD;4BACD,IAAI,EAAE;gCACJ,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,wDAAwD;6BAC3D;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,0DAA0D;gCAC5D,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;6BACvB;4BACD,UAAU,EAAE;gCACV,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,sLAAsL;gCACxL,IAAI,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;6BACrC;4BACD,mBAAmB,EAAE;gCACnB,IAAI,EAAE,SAAS;gCACf,WAAW,EAAE,kDAAkD;6BAChE;yBACF;wBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;qBACrB;iBACF;gBACD,GAAG,EAAE,KAAK,EAAE,IAA4B,EAAE,EAAE;oBAC1C,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;oBACpC,IAAI,CAAC,KAAK,MAAM;wBAAE,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC7C,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;wBACjB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,kCAAkC,CAAC;wBAC1D,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC;oBACD,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;wBACtB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,uCAAuC,CAAC;wBAC/D,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAClC,CAAC;oBACD,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;wBAClB,IACE,CAAC,IAAI,CAAC,IAAI;4BACV,IAAI,CAAC,OAAO,KAAK,SAAS;4BAC1B,IAAI,CAAC,OAAO,KAAK,IAAI;4BAErB,OAAO,gDAAgD,CAAC;wBAC1D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;wBACzB,IAAI,CAAC,UAAU;4BACb,IAAI,CAAC,UAAU;gCACf,CAAC,qCAAqC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oCACvD,CAAC,CAAC,WAAW;oCACb,CAAC,CAAC,eAAe,CAAC,CAAC;wBACvB,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;wBACtC,IAAI,MAAM,EAAE,QAAQ;4BAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;wBACtD,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC9B,CAAC;oBACD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;wBACpB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,qCAAqC,CAAC;wBAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC;wBACvC,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;4BAC7C,OAAO,uDAAuD,CAAC;wBACjE,CAAC;wBACD,MAAM,KAAK,GACT,KAAK,KAAK,QAAQ;4BAChB,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,eAAe,EAAE,CAAC;4BAC9C,CAAC,CAAC,CAAC,oBAAoB,EAAE,EAAE,KAAK;gCAC9B,mBAAmB,EAAE;gCACrB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;wBACpC,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,OAAO,+CAA+C,CAAC;wBACzD,CAAC;wBACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAC5C,KAAK,EACL,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAClB,CAAC;wBACF,IAAI,CAAC,QAAQ,EAAE,CAAC;4BACd,OAAO,uBAAuB,IAAI,CAAC,IAAI,EAAE,CAAC;wBAC5C,CAAC;wBACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CACtC,KAAK,EACL,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,QAAQ,EACjB;4BACE,SAAS,EAAE,QAAQ,CAAC,SAAS;4BAC7B,UAAU,EAAE,WAAW;4BACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;4BAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;4BACrB,SAAS,EAAE,IAAI;4BACf,QAAQ,EAAE,QAAQ,CAAC,QAAQ;yBAC5B,CACF,CAAC;wBACF,OAAO,sBAAsB,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAC/C,CAAC;oBACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;wBACnB,IAAI,CAAC,IAAI,CAAC,IAAI;4BAAE,OAAO,oCAAoC,CAAC;wBAC5D,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC/B,CAAC;oBACD,OAAO,0BAA0B,CAAC,4CAA4C,CAAC;gBACjF,CAAC;aACF;YACD,aAAa,EAAE,aAAa,CAC1B;gBACE,WAAW,EACT,wLAAwL;gBAC1L,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,4FAA4F;yBAC/F;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iBAAiB;4BAC9B,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC;yBACnD;wBACD,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,kEAAkE;yBACrE;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,2FAA2F;yBAC9F;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC;iBACrD;aACF,EACD,OAAO,CAAC,OAAO,CAChB;YACD,eAAe,EAAE,aAAa,CAC5B;gBACE,WAAW,EACT,4DAA4D;gBAC9D,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iDAAiD;yBAC/D;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;iBACnB;aACF,EACD,MAAM,CAAC,OAAO,CACf;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAG3C,IAAI,CAAC;QACH,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7C,MAAM,CAAC,oCAAoC,CAAC;YAC5C,MAAM,CAAC,iCAAiC,CAAC;SAC1C,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,aAAa,CAC/B;YACE,WAAW,EAAE,yCAAyC;YACtD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,yDAAyD;qBAC5D;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,qCAAqC;qBACnD;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,eAAe;wBAC5B,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;qBACvB;oBACD,eAAe,EAAE;wBACf,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,qFAAqF;qBACxF;iBACF;aACF;SACF,EACD,SAAS,CAAC,OAAO,CAClB,CAAC;QAEF,MAAM,SAAS,GAAG,aAAa,CAC7B;YACE,WAAW,EAAE,+BAA+B;YAC5C,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,EAAE,EAAE;wBACF,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,4BAA4B;qBAC1C;iBACF;gBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;aACjB;SACF,EACD,OAAO,CAAC,OAAO,CAChB,CAAC;QAEF,OAAO;YACL,cAAc,EAAE;gBACd,IAAI,EAAE;oBACJ,WAAW,EACT,4LAA4L;oBAC9L,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,0BAA0B;gCACvC,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC;6BAC9D;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,kEAAkE;6BACrE;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,8CAA8C;6BAC5D;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,wBAAwB;gCACrC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;6BACvB;4BACD,eAAe,EAAE;gCACf,IAAI,EAAE,SAAS;gCACf,WAAW,EACT,uJAAuJ;6BAC1J;4BACD,EAAE,EAAE;gCACF,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,kEAAkE;6BACrE;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,yBAAyB;6BACvC;yBACF;wBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;qBACrB;iBACF;gBACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;oBAClB,IAAI,IAAI,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;wBAC5B,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC;oBACD,IACE,IAAI,EAAE,MAAM,KAAK,QAAQ;wBACzB,IAAI,EAAE,MAAM,KAAK,KAAK;wBACtB,IAAI,EAAE,MAAM,KAAK,OAAO;wBACxB,IAAI,EAAE,MAAM,KAAK,SAAS,EAC1B,CAAC;wBACD,MAAM,EAAE,GAAG,OAAO,IAAI,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvD,IAAI,CAAC,EAAE;4BAAE,OAAO,sBAAsB,CAAC;wBACvC,MAAM,KAAK,GACT,oBAAoB,EAAE,EAAE,KAAK,IAAI,mBAAmB,EAAE,IAAI,EAAE,CAAC;wBAC/D,IAAI,CAAC,KAAK;4BAAE,OAAO,qCAAqC,CAAC;wBACzD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE;4BAC5D,KAAK,EAAE,eAAe,EAAE;yBACzB,CAAC,CAAC;wBACH,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,OAAO,gBAAgB,EAAE,cAAc,CAAC;wBAC1C,CAAC;wBACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,IAAI,YAAY,CAAC;wBAC7D,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;4BAC7B,MAAM,SAAS,GACb,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;gCAC7B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gCACtD,CAAC,CAAC,EAAE,CAAC;4BACT,IAAI,CAAC,SAAS;gCAAE,OAAO,yBAAyB,CAAC;4BACjD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;4BAClD,IAAI,CAAC,OAAO;gCAAE,OAAO,gBAAgB,EAAE,yBAAyB,CAAC;4BACjE,OAAO,iBAAiB,KAAK,SAAS,SAAS,IAAI,CAAC;wBACtD,CAAC;wBACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;4BAC9B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;4BACnD,IAAI,CAAC,QAAQ;gCACX,OAAO,gBAAgB,EAAE,0BAA0B,CAAC;4BACtD,OAAO,kBAAkB,KAAK,EAAE,CAAC;wBACnC,CAAC;wBACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;wBAChE,IAAI,CAAC,MAAM;4BAAE,OAAO,gBAAgB,EAAE,yBAAyB,CAAC;wBAChE,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,UAAU,KAAK,EAAE,CAAC;oBAC3E,CAAC;oBACD,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC/B,CAAC;aACF;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAAc;IAEd,IAAI,CAAC;QACH,MAAM,GAAG,GACP,MAAM,MAAM,CAAC,oDAAoD,CAAC,CAAC;QAErE,OAAO;YACL,qBAAqB,EAAE;gBACrB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CACZ,GAAG,CAAC,GAAG,CAAC;oBACN,GAAG,IAAI;oBACP,KAAK,EACH,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;wBACjD,CAAC,CAAC,IAAI,CAAC,KAAK;wBACZ,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;iBACpB,CAAC;aACL;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oCAAoC;IAGxD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,6CAA6C,CAAC,CAAC;QAExE,OAAO;YACL,4BAA4B,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;SAC/D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,SAAkB;IAElB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACxD,OAAO;YACL,YAAY,EAAE;gBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,GAAG,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC;aAC1D;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import type { ActionEntry } from \"../../agent/production-agent.js\";\nimport type { ActionTool } from \"../../agent/types.js\";\nimport {\n  renameThread,\n  resolveThreadAccess,\n  setThreadArchived,\n  setThreadPinned,\n} from \"../../chat-threads/store.js\";\nimport type { DatabaseToolsMode } from \"../../scripts/db/tool-mode.js\";\nimport { dbExecToolParameters } from \"../../scripts/db/tool-schemas.js\";\nimport { captureCliOutput } from \"../cli-capture.js\";\nimport {\n  getRequestOrgId,\n  getRequestRunContext,\n  getRequestUserEmail,\n} from \"../request-context.js\";\n\n// ---------------------------------------------------------------------------\n// CLI-script-backed action entries: db-*, docs-search/source-search,\n// resources/save-memory/delete-memory, chat-history, manage-agent-engine,\n// manage-agent-loop-settings, and call-agent. Each wraps a core CLI script\n// (that writes to console.log) as an ActionEntry via `wrapCliScript`.\n// ---------------------------------------------------------------------------\n\n/**\n * Wraps a core CLI script (that writes to console.log) as a ActionEntry\n * by capturing stdout. Uses an AsyncLocalStorage-backed capture so\n * concurrent tool calls do not corrupt the global console/stdout pointers\n * (see `cli-capture.ts`).\n */\nfunction wrapCliScript(\n  tool: ActionTool,\n  cliDefault: (args: string[]) => Promise<void>,\n  opts?: {\n    allowedArgs?: readonly string[];\n    readOnly?: boolean;\n  },\n): ActionEntry {\n  return {\n    tool,\n    ...(opts?.readOnly ? { readOnly: true as const } : {}),\n    run: async (args: Record<string, string>): Promise<string> => {\n      const cliArgs: string[] = [];\n      for (const [k, v] of Object.entries(args)) {\n        // MCP input schemas are descriptive and some hosts can still send\n        // undeclared keys. The externally exposed DB readers must never accept\n        // the CLI-only `--db` escape hatch, which could point at another local\n        // SQLite file. Keep their runtime surface identical to the advertised\n        // schema instead of trusting the client to validate it.\n        if (opts?.allowedArgs && !opts.allowedArgs.includes(k)) {\n          throw new Error(`Unknown argument: ${k}`);\n        }\n        const raw = v as unknown;\n        const value =\n          raw != null && typeof raw === \"object\"\n            ? JSON.stringify(raw)\n            : String(raw);\n        cliArgs.push(`--${k}`, value);\n      }\n      return captureCliOutput(() => cliDefault(cliArgs));\n    },\n  };\n}\n\n/**\n * Creates db-* tools (db-query, db-exec, db-patch, db-schema) as native tools.\n * By default these let the agent inspect the app's own SQL database; raw SQL\n * writes are only exposed when the app explicitly opts into write mode.\n * Scoping to the current user/org is enforced automatically in production via\n * temp views.\n *\n * In dev mode template actions are invoked via bash and the agent can call\n * `pnpm action db-query ...` — but in production there is no bash, so these\n * must be registered as native tools for the agent to reach the app DB at all.\n */\nexport async function createDbScriptEntries(\n  mode: DatabaseToolsMode = \"read\",\n  options: { extensionTools?: boolean } = {},\n): Promise<Record<string, ActionEntry>> {\n  try {\n    if (mode === \"off\") return {};\n    const extensionQueryGuidance =\n      options.extensionTools === false\n        ? \"Extension management tools are disabled for this app; do not query or mutate the legacy tools table as a workaround.\"\n        : \"For extension management, use list-extensions, update-extension, hide-extension, or delete-extension instead of querying the legacy tools table.\";\n    const [schemaMod, queryMod] = await Promise.all([\n      import(\"../../scripts/db/schema.js\"),\n      import(\"../../scripts/db/query.js\"),\n    ]);\n    const [execMod, patchMod] =\n      mode === \"write\"\n        ? await Promise.all([\n            import(\"../../scripts/db/exec.js\"),\n            import(\"../../scripts/db/patch.js\"),\n          ])\n        : [null, null];\n\n    const entries: Record<string, ActionEntry> = {\n      \"db-schema\": wrapCliScript(\n        {\n          description:\n            \"Show the app's SQL schema — all tables, columns, types, indexes, and foreign keys. Use this to understand the data model before querying.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              format: {\n                type: \"string\",\n                description: 'Output format: \"json\" or \"text\" (default: text)',\n                enum: [\"json\", \"text\"],\n              },\n            },\n          },\n        },\n        schemaMod.default,\n        {\n          allowedArgs: [\"format\"],\n          readOnly: true,\n        },\n      ),\n      \"db-query\": wrapCliScript(\n        {\n          description: `Read from the app's own SQL database ONLY. Runs a SELECT against the app's internal tables (settings, application_state, template tables). Results are auto-scoped to the current user/org. IMPORTANT: This tool CANNOT access external data sources like data warehouses, CRMs, issue trackers, analytics platforms, calendars, mail, docs, or other third-party services. For those, use the relevant template/provider action, MCP connector, or provider-api-catalog/provider-api-docs/provider-api-request when available. If the user names a provider, that named provider wins; do not substitute a warehouse or app database copy unless they explicitly ask for it. If a table isn't in the app schema, don't try db-query — use the data-source-specific action. ${extensionQueryGuidance}`,\n          parameters: {\n            type: \"object\",\n            properties: {\n              sql: {\n                type: \"string\",\n                description:\n                  \"SELECT query to run, e.g. \\\"SELECT key, value FROM settings WHERE key LIKE 'sql-dashboard-%'\\\"\",\n              },\n              args: {\n                type: \"string\",\n                description:\n                  'Optional JSON array of positional bind args for parameterized placeholders. Example: \\'[\"draft\",\"form-123\"]\\'',\n              },\n              format: {\n                type: \"string\",\n                description: 'Output format: \"json\" or \"text\" (default: text)',\n                enum: [\"json\", \"text\"],\n              },\n              limit: {\n                type: \"string\",\n                description:\n                  \"Append LIMIT N if the query doesn't already have one\",\n              },\n            },\n            required: [\"sql\"],\n          },\n        },\n        queryMod.default,\n        {\n          allowedArgs: [\"sql\", \"args\", \"format\", \"limit\"],\n          readOnly: true,\n        },\n      ),\n    };\n\n    if (execMod && patchMod) {\n      entries[\"db-exec\"] = wrapCliScript(\n        {\n          description:\n            \"Write to the app's own SQL database ONLY. Runs INSERT / UPDATE / DELETE / REPLACE against the app's internal tables. For multiple related writes, pass `statements` so they run sequentially in one transaction instead of issuing several db-exec calls. Writes are auto-scoped to the current user/org, and `owner_email` / `org_id` are auto-injected on INSERT. Schema changes (CREATE/ALTER/DROP) are blocked. Never use this to backfill missing data for a read/analysis request or to create/modify users, members, roles, permissions, admin flags, or ownership; use a dedicated app action or reviewed code. IMPORTANT: This tool CANNOT write to external data sources like BigQuery, HubSpot, etc. For external services, use the appropriate template action.\",\n          parameters: dbExecToolParameters(),\n        },\n        execMod.default,\n      );\n      entries[\"db-patch\"] = wrapCliScript(\n        {\n          description:\n            \"Surgical patch on a large text/JSON column in the app's SQL database. Two modes: (1) text find/replace via `find`/`replace`/`edits` — best for small edits to documents, slide HTML, etc. (2) structural JSON ops via `json-ops` — STRONGLY PREFERRED when the column is JSON (dashboard configs, form schemas, slide decks) because it avoids all the brace/quote/comma surgery that text find/replace requires. Use `json-ops` to set/remove values at a JSON Pointer path, or to move/insert array items — e.g. reorder dashboard panels, add a filter, rename a field. Targets exactly one row (narrow `where` by primary key). Same per-user/org scoping as db-exec.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              table: {\n                type: \"string\",\n                description: \"Table name (e.g. 'settings')\",\n              },\n              column: {\n                type: \"string\",\n                description:\n                  \"Text/JSON column to patch (e.g. 'value' for settings)\",\n              },\n              where: {\n                type: \"string\",\n                description:\n                  \"WHERE clause that matches exactly one row (e.g. \\\"key = 'o:org1:sql-dashboard-foo'\\\")\",\n              },\n              find: {\n                type: \"string\",\n                description:\n                  \"Text mode: substring to find. Must match EXACTLY ONE occurrence by default (like Claude Code's Edit tool). If 0 matches, you get 'NOT FOUND'. If >1 matches, you get surrounding context for each match — widen `find` with unique context and retry. Use `all: \\\"true\\\"` to replace every occurrence.\",\n              },\n              replace: {\n                type: \"string\",\n                description: \"Text mode: replacement substring\",\n              },\n              edits: {\n                type: \"string\",\n                description:\n                  'Text mode batch: JSON array of {find, replace} pairs. Same uniqueness rule applies to each `find`. Example: \\'[{\"find\":\"a\",\"replace\":\"b\"}]\\'',\n              },\n              \"json-ops\": {\n                type: \"string\",\n                description:\n                  'JSON mode: JSON array of structural ops. Each op is {op, path, value?, from?}. `op` is one of \"set\", \"remove\", \"insert\", \"move\", \"move-before\". `path` / `from` use JSON Pointer (\"/panels/3/title\"). Examples — reorder: \\'[{\"op\":\"move\",\"from\":\"/panels/7\",\"path\":\"/panels/1\"}]\\'; edit field: \\'[{\"op\":\"set\",\"path\":\"/panels/0/title\",\"value\":\"New\"}]\\'; delete filter: \\'[{\"op\":\"remove\",\"path\":\"/filters/2\"}]\\'; add panel: \\'[{\"op\":\"insert\",\"path\":\"/panels/0\",\"value\":{\"id\":\"p\",\"title\":\"...\"}}]\\'. Much safer than text find/replace for JSON columns.',\n              },\n              all: {\n                type: \"string\",\n                description:\n                  'Text mode: set to \"true\" to replace every occurrence of each `find` (default requires exactly one match)',\n                enum: [\"true\"],\n              },\n            },\n            required: [\"table\", \"column\", \"where\"],\n          },\n        },\n        patchMod.default,\n      );\n    }\n\n    return entries;\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates read-only package lookup tools so agents can inspect version-matched\n * framework docs and source bundled in @agent-native/core at runtime.\n */\nexport async function createDocsScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  const entries: Record<string, ActionEntry> = {};\n\n  try {\n    const mod = await import(\"../../scripts/docs/search.js\");\n    entries[\"docs-search\"] = wrapCliScript(\n      {\n        description:\n          \"Search and read agent-native framework documentation, bundled AGENTS.md, and codebase skills. Use --list to see all pages, --query to search, --slug to read a specific page. Codebase skill pages use slugs like skill-<name>.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            query: {\n              type: \"string\",\n              description:\n                \"Search term to find relevant docs (e.g. 'actions', 'authentication', 'database')\",\n            },\n            slug: {\n              type: \"string\",\n              description:\n                \"Read a specific doc page by slug (e.g. 'actions', 'authentication', 'database')\",\n            },\n            list: {\n              type: \"string\",\n              description: 'Set to \"true\" to list all available doc pages',\n              enum: [\"true\"],\n            },\n          },\n        },\n      },\n      mod.default,\n      { readOnly: true },\n    );\n  } catch {\n    // Keep source-search available if docs-search fails during a partial build.\n  }\n\n  try {\n    const mod = await import(\"../../scripts/docs/source-search.js\");\n    entries[\"source-search\"] = wrapCliScript(\n      {\n        description:\n          \"Search and read the packaged Agent Native source corpus under node_modules/@agent-native/core/corpus. Use --list for sections, --query to search core/template source, and --path to read a file.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            query: {\n              type: \"string\",\n              description:\n                \"Search term to find relevant core or template source (e.g. 'defineAction', 'useActionQuery', 'view-screen').\",\n            },\n            path: {\n              type: \"string\",\n              description:\n                \"Read a specific corpus file or list a directory (e.g. 'templates/plan/AGENTS.md' or 'core/src/action.ts').\",\n            },\n            list: {\n              type: \"string\",\n              description: 'Set to \"true\" to list corpus sections',\n              enum: [\"true\"],\n            },\n          },\n        },\n      },\n      mod.default,\n      { readOnly: true },\n    );\n  } catch {\n    // Older package installs may not have the corpus/search script yet.\n  }\n\n  return entries;\n}\n\n/**\n * Creates resource ScriptEntries available in both prod and dev modes.\n */\nexport function shouldDefaultResourceWriteToWorkspace(path: string): boolean {\n  const normalized = path.replace(/^\\/+/, \"\");\n  return (\n    normalized === \"AGENTS.md\" ||\n    normalized === \"LEARNINGS.md\" ||\n    normalized.startsWith(\"memory/\") ||\n    normalized.startsWith(\"skills/\") ||\n    normalized.startsWith(\"jobs/\") ||\n    normalized.startsWith(\"agents/\") ||\n    normalized.startsWith(\"remote-agents/\")\n  );\n}\n\nexport async function createResourceScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  try {\n    const [list, read, effective, write, del, saveMem, delMem, store] =\n      await Promise.all([\n        import(\"../../scripts/resources/list.js\"),\n        import(\"../../scripts/resources/read.js\"),\n        import(\"../../scripts/resources/effective.js\"),\n        import(\"../../scripts/resources/write.js\"),\n        import(\"../../scripts/resources/delete.js\"),\n        import(\"../../scripts/resources/save-memory.js\"),\n        import(\"../../scripts/resources/delete-memory.js\"),\n        import(\"../../resources/store.js\"),\n      ]);\n\n    // Wrap each CLI runner so it captures stdout and converts args properly\n    const listEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      list.default,\n      { readOnly: true },\n    );\n    const readEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      read.default,\n      { readOnly: true },\n    );\n    const writeEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      write.default,\n    );\n    const effectiveEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      effective.default,\n      { readOnly: true },\n    );\n    const deleteEntry = wrapCliScript(\n      {\n        description: \"\",\n        parameters: { type: \"object\" as const, properties: {} },\n      },\n      del.default,\n    );\n\n    return {\n      resources: {\n        tool: {\n          description:\n            'Manage workspace resources. Actions: \"list\" (browse visible files), \"read\" (get contents), \"effective\" (show workspace -> organization/app -> personal inheritance for a path), \"write\" (create/update personal or shared; workspace only for local file mode control files), \"promote\" (make agent scratch visible), \"delete\" (remove personal or shared; workspace only for local file mode control files). Agent scratch writes are hidden from the Workspace view by default; use visibility=\"workspace\" only for files the user explicitly wants to keep/manage.',\n          parameters: {\n            type: \"object\",\n            properties: {\n              action: {\n                type: \"string\",\n                description: \"The operation to perform\",\n                enum: [\n                  \"list\",\n                  \"read\",\n                  \"effective\",\n                  \"write\",\n                  \"promote\",\n                  \"delete\",\n                ],\n              },\n              path: {\n                type: \"string\",\n                description:\n                  \"Resource path (e.g. 'LEARNINGS.md', 'notes/ideas.md'). Required for read/write/delete.\",\n              },\n              content: {\n                type: \"string\",\n                description: \"Content to write. Required for write.\",\n              },\n              scope: {\n                type: \"string\",\n                description:\n                  \"personal, shared, workspace, or all (default varies by action). Workspace is read-only when inherited from Dispatch; in local file mode AGENTS.md, agent-native.json, mcp.config.json, .mcp.json, and skills/ are writable.\",\n                enum: [\"personal\", \"shared\", \"workspace\", \"all\"],\n              },\n              prefix: {\n                type: \"string\",\n                description:\n                  \"Filter by path prefix when listing (e.g. 'notes/')\",\n              },\n              mime: {\n                type: \"string\",\n                description:\n                  \"MIME type for write (default: inferred from extension)\",\n              },\n              format: {\n                type: \"string\",\n                description:\n                  'Output format for list: \"json\" or \"text\" (default: text)',\n                enum: [\"json\", \"text\"],\n              },\n              visibility: {\n                type: \"string\",\n                description:\n                  'Visibility for write: \"agent_scratch\" for internal working files, \"workspace\" for user-requested files. Defaults to agent_scratch except durable instruction/skill/job/memory paths.',\n                enum: [\"workspace\", \"agent_scratch\"],\n              },\n              includeAgentScratch: {\n                type: \"boolean\",\n                description: \"Include hidden agent scratch files when listing.\",\n              },\n            },\n            required: [\"action\"],\n          },\n        },\n        run: async (args: Record<string, string>) => {\n          const { action: a, ...rest } = args;\n          if (a === \"list\") return listEntry.run(rest);\n          if (a === \"read\") {\n            if (!rest.path) return \"Error: path is required for read\";\n            return readEntry.run(rest);\n          }\n          if (a === \"effective\") {\n            if (!rest.path) return \"Error: path is required for effective\";\n            return effectiveEntry.run(rest);\n          }\n          if (a === \"write\") {\n            if (\n              !rest.path ||\n              rest.content === undefined ||\n              rest.content === null\n            )\n              return \"Error: path and content are required for write\";\n            rest.createdBy = \"agent\";\n            rest.visibility =\n              rest.visibility ??\n              (shouldDefaultResourceWriteToWorkspace(String(rest.path))\n                ? \"workspace\"\n                : \"agent_scratch\");\n            const runCtx = getRequestRunContext();\n            if (runCtx?.threadId) rest.threadId = runCtx.threadId;\n            return writeEntry.run(rest);\n          }\n          if (a === \"promote\") {\n            if (!rest.path) return \"Error: path is required for promote\";\n            const scope = rest.scope ?? \"personal\";\n            if (scope === \"workspace\" || scope === \"all\") {\n              return \"Error: promote supports personal or shared scope only\";\n            }\n            const owner =\n              scope === \"shared\"\n                ? store.sharedResourceOwner(getRequestOrgId())\n                : (getRequestRunContext()?.owner ??\n                  getRequestUserEmail() ??\n                  process.env.AGENT_USER_EMAIL);\n            if (!owner) {\n              return \"Error: promote requires an authenticated user\";\n            }\n            const resource = await store.resourceGetByPath(\n              owner,\n              String(rest.path),\n            );\n            if (!resource) {\n              return `Resource not found: ${rest.path}`;\n            }\n            const promoted = await store.resourcePut(\n              owner,\n              resource.path,\n              resource.content,\n              resource.mimeType,\n              {\n                createdBy: resource.createdBy,\n                visibility: \"workspace\",\n                threadId: resource.threadId,\n                runId: resource.runId,\n                expiresAt: null,\n                metadata: resource.metadata,\n              },\n            );\n            return `Promoted resource: ${promoted.path}`;\n          }\n          if (a === \"delete\") {\n            if (!rest.path) return \"Error: path is required for delete\";\n            return deleteEntry.run(rest);\n          }\n          return `Error: unknown action \"${a}\". Use: list, read, write, promote, delete`;\n        },\n      },\n      \"save-memory\": wrapCliScript(\n        {\n          description:\n            \"Save a memory for future conversations. Creates or updates a memory file and its index entry. Use proactively when you learn preferences, corrections, project context, or references.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              name: {\n                type: \"string\",\n                description:\n                  \"Short kebab-case identifier (e.g. 'coding-style', 'deploy-process'). Used as the filename.\",\n              },\n              type: {\n                type: \"string\",\n                description: \"Memory category\",\n                enum: [\"user\", \"feedback\", \"project\", \"reference\"],\n              },\n              description: {\n                type: \"string\",\n                description:\n                  \"One-line summary shown in the memory index (keep under 80 chars)\",\n              },\n              content: {\n                type: \"string\",\n                description:\n                  \"The memory content in markdown. For updates, read first and provide full updated content.\",\n              },\n            },\n            required: [\"name\", \"type\", \"description\", \"content\"],\n          },\n        },\n        saveMem.default,\n      ),\n      \"delete-memory\": wrapCliScript(\n        {\n          description:\n            \"Delete a memory entry and remove it from the memory index.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              name: {\n                type: \"string\",\n                description: \"The memory name to delete (e.g. 'coding-style')\",\n              },\n            },\n            required: [\"name\"],\n          },\n        },\n        delMem.default,\n      ),\n    };\n  } catch {\n    // Resources not available — skip silently\n    return {};\n  }\n}\n\n/**\n * Creates a unified chat-history ActionEntry that dispatches to search, open,\n * rename, or lightweight organization actions.\n */\nexport async function createChatScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  try {\n    const [searchMod, openMod] = await Promise.all([\n      import(\"../../scripts/chat/search-chats.js\"),\n      import(\"../../scripts/chat/open-chat.js\"),\n    ]);\n\n    const searchEntry = wrapCliScript(\n      {\n        description: \"Search or list past agent chat threads.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            query: {\n              type: \"string\",\n              description:\n                \"Search term to find chats by title, preview, or content\",\n            },\n            limit: {\n              type: \"string\",\n              description: \"Max number of results (default: 20)\",\n            },\n            format: {\n              type: \"string\",\n              description: \"Output format\",\n              enum: [\"json\", \"text\"],\n            },\n            includeArchived: {\n              type: \"boolean\",\n              description:\n                \"Also include archived chats in the results. Archived chats are excluded by default.\",\n            },\n          },\n        },\n      },\n      searchMod.default,\n    );\n\n    const openEntry = wrapCliScript(\n      {\n        description: \"Open a chat thread in the UI.\",\n        parameters: {\n          type: \"object\",\n          properties: {\n            id: {\n              type: \"string\",\n              description: \"The chat thread ID to open\",\n            },\n          },\n          required: [\"id\"],\n        },\n      },\n      openMod.default,\n    );\n\n    return {\n      \"chat-history\": {\n        tool: {\n          description:\n            \"Manage past agent chat threads. Use action 'search' to find previous conversations by keyword, 'open' to open a thread in the UI, or 'rename'/'pin'/'unpin'/'archive' to organize history.\",\n          parameters: {\n            type: \"object\",\n            properties: {\n              action: {\n                type: \"string\",\n                description: \"The operation to perform\",\n                enum: [\"search\", \"open\", \"rename\", \"pin\", \"unpin\", \"archive\"],\n              },\n              query: {\n                type: \"string\",\n                description:\n                  \"(search) Search term to find chats by title, preview, or content\",\n              },\n              limit: {\n                type: \"string\",\n                description: \"(search) Max number of results (default: 20)\",\n              },\n              format: {\n                type: \"string\",\n                description: \"(search) Output format\",\n                enum: [\"json\", \"text\"],\n              },\n              includeArchived: {\n                type: \"boolean\",\n                description:\n                  \"(search) Also include archived chats in the results. Archived chats are excluded by default, matching the 'archive' action's effect on the chat list.\",\n              },\n              id: {\n                type: \"string\",\n                description:\n                  \"(open, rename, pin, unpin, archive) The chat thread ID to manage\",\n              },\n              title: {\n                type: \"string\",\n                description: \"(rename) New chat title\",\n              },\n            },\n            required: [\"action\"],\n          },\n        },\n        run: async (args) => {\n          if (args?.action === \"open\") {\n            return openEntry.run(args);\n          }\n          if (\n            args?.action === \"rename\" ||\n            args?.action === \"pin\" ||\n            args?.action === \"unpin\" ||\n            args?.action === \"archive\"\n          ) {\n            const id = typeof args?.id === \"string\" ? args.id : \"\";\n            if (!id) return \"Missing required id.\";\n            const owner =\n              getRequestRunContext()?.owner ?? getRequestUserEmail() ?? \"\";\n            if (!owner) return \"No authenticated user is available.\";\n            const thread = await resolveThreadAccess(owner, id, \"editor\", {\n              orgId: getRequestOrgId(),\n            });\n            if (!thread) {\n              return `Chat thread \"${id}\" not found.`;\n            }\n            const title = thread.title || thread.preview || \"(untitled)\";\n            if (args.action === \"rename\") {\n              const nextTitle =\n                typeof args?.title === \"string\"\n                  ? args.title.replace(/\\s+/g, \" \").trim().slice(0, 160)\n                  : \"\";\n              if (!nextTitle) return \"Missing required title.\";\n              const renamed = await renameThread(id, nextTitle);\n              if (!renamed) return `Chat thread \"${id}\" could not be renamed.`;\n              return `Renamed chat \"${title}\" to \"${nextTitle}\".`;\n            }\n            if (args.action === \"archive\") {\n              const archived = await setThreadArchived(id, true);\n              if (!archived)\n                return `Chat thread \"${id}\" could not be archived.`;\n              return `Archived chat: ${title}`;\n            }\n            const pinned = await setThreadPinned(id, args.action === \"pin\");\n            if (!pinned) return `Chat thread \"${id}\" could not be updated.`;\n            return `${args.action === \"pin\" ? \"Pinned\" : \"Unpinned\"} chat: ${title}`;\n          }\n          return searchEntry.run(args);\n        },\n      },\n    };\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates the consolidated manage-agent-engine tool (list / set / test).\n * Let the agent inspect and configure the active LLM engine.\n */\nexport async function createAgentEngineScriptEntries(\n  appId?: string,\n): Promise<Record<string, ActionEntry>> {\n  try {\n    const mod =\n      await import(\"../../scripts/agent-engines/manage-agent-engine.js\");\n\n    return {\n      \"manage-agent-engine\": {\n        tool: mod.tool,\n        run: (args) =>\n          mod.run({\n            ...args,\n            appId:\n              typeof args.appId === \"string\" && args.appId.trim()\n                ? args.appId\n                : (appId ?? \"\"),\n          }),\n      },\n    };\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates the manage-agent-loop-settings tool. Lets the agent inspect and\n * configure the loop step limit it may hit on long-running work.\n */\nexport async function createAgentLoopSettingsScriptEntries(): Promise<\n  Record<string, ActionEntry>\n> {\n  try {\n    const mod = await import(\"../../scripts/manage-agent-loop-settings.js\");\n\n    return {\n      \"manage-agent-loop-settings\": { tool: mod.tool, run: mod.run },\n    };\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Creates the call-agent ActionEntry for cross-agent A2A communication.\n * Binds selfAppId so the agent cannot call itself via call-agent.\n */\nexport async function createCallAgentScriptEntry(\n  selfAppId?: string,\n): Promise<Record<string, ActionEntry>> {\n  try {\n    const mod = await import(\"../../scripts/call-agent.js\");\n    return {\n      \"call-agent\": {\n        tool: mod.tool,\n        run: (args, context) => mod.run(args, context, selfAppId),\n      },\n    };\n  } catch {\n    return {};\n  }\n}\n"]}

package/dist/server/agent-chat-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-chat-plugin.d.ts","sourceRoot":"","sources":["../../src/server/agent-chat-plugin.ts"],"names":[],"mappings":"AA0IA,OAAO,EACL,yBAAyB,EACzB,KAAK,6BAA6B,EACnC,MAAM,+BAA+B,CAAC;AAoCvC,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,YAAY,EAAE,6BAA6B,EAAE,CAAC;AAmB9C,OAAO,EACL,0BAA0B,EAK1B,eAAe,EACf,wBAAwB,EACxB,yBAAyB,EAE1B,MAAM,oCAAoC,CAAC;AAW5C,OAAO,EACL,gCAAgC,EAOjC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,yCAAyC,EAAE,MAAM,qCAAqC,CAAC;AAChG,OAAO,EACL,sBAAsB,EAEvB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iCAAiC,EAAE,MAAM,wCAAwC,CAAC;AAC3F,OAAO,EAEL,sCAAsC,EACvC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAYxE,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,gCAAgC,EAAE,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,CAAC;AACpC,YAAY,EAAE,sBAAsB,EAAE,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,CAAC;AACtC,OAAO,EAAE,sCAAsC,EAAE,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,iCAAiC,EAAE,CAAC;AAC7C,OAAO,EAAE,yCAAyC,EAAE,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,uCAAuC,CAC3D,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,OAAO,CAAC,CAUlB;AAaD,wBAAgB,qBAAqB,CACnC,OAAO,CAAC,EAAE,sBAAsB,GAC/B,cAAc,CAi5JhB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAwC,CAAC;AAE9E,OAAO,EAEL,mBAAmB,EACnB,uBAAuB,EAGxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,CAAC"}
+{"version":3,"file":"agent-chat-plugin.d.ts","sourceRoot":"","sources":["../../src/server/agent-chat-plugin.ts"],"names":[],"mappings":"AA0IA,OAAO,EACL,yBAAyB,EACzB,KAAK,6BAA6B,EACnC,MAAM,+BAA+B,CAAC;AAoCvC,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,YAAY,EAAE,6BAA6B,EAAE,CAAC;AAmB9C,OAAO,EACL,0BAA0B,EAK1B,eAAe,EACf,wBAAwB,EACxB,yBAAyB,EAE1B,MAAM,oCAAoC,CAAC;AAW5C,OAAO,EACL,gCAAgC,EAOjC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,yCAAyC,EAAE,MAAM,qCAAqC,CAAC;AAChG,OAAO,EACL,sBAAsB,EAEvB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iCAAiC,EAAE,MAAM,wCAAwC,CAAC;AAC3F,OAAO,EAEL,sCAAsC,EACvC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAYxE,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,gCAAgC,EAAE,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,CAAC;AACpC,YAAY,EAAE,sBAAsB,EAAE,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,CAAC;AACtC,OAAO,EAAE,sCAAsC,EAAE,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAClC,OAAO,EAAE,iCAAiC,EAAE,CAAC;AAC7C,OAAO,EAAE,yCAAyC,EAAE,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,uCAAuC,CAC3D,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,OAAO,CAAC,CAUlB;AAaD,wBAAgB,qBAAqB,CACnC,OAAO,CAAC,EAAE,sBAAsB,GAC/B,cAAc,CAo5JhB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAwC,CAAC;AAE9E,OAAO,EAEL,mBAAmB,EACnB,uBAAuB,EAGxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/server/agent-chat-plugin.js

@@ -1156,6 +1156,9 @@ export function createAgentChatPlugin(options) {
                     ...(options?.connectorCatalog
                         ? { connectorCatalog: options.connectorCatalog }
                         : {}),
+                    ...(options?.externalAgents
+                        ? { externalAgents: options.externalAgents }
+                        : {}),
                     askAgent: async (message) => {
                         const mcpEngine = await resolveEngine({
                             engineOption: options?.engine,