@promptbook/cli 0.112.0 → 0.113.0-1

package/README.md

@@ -41,14 +41,17 @@ Non-interactive mode takes defaults from command-line options. When `--openai-ap
 sudo curl -fsSL https://raw.githubusercontent.com/webgptorg/promptbook/refs/heads/main/other/vps/install.sh | bash -s -- \
     --non-interactive \
     --yes-i-understand-that-script-should-be-run-on-fresh-server \
-    --domain s24.ptbk.io \
-    --openai-api-key sk-proj-abcdef \
-    --sentry-dsn https://abc@def.ingest.de.sentry.io/123 \
+    --domain my-server.com \
+    --openai-api-key sk-proj-xxx \
     --admin-password xxx
 ```
 
 
 
+<blockquote style="color: #ff8811">
+    <b>⚠ Warning:</b> This is a pre-release version of the library. It is not yet ready for production use. Please look at <a href="https://www.npmjs.com/package/@promptbook/core?activeTab=versions">latest stable release</a>.
+</blockquote>
+
 ## 📦 Package `@promptbook/cli`
 
 - Promptbooks are [divided into several](#-packages) packages, all are published from [single monorepo](https://github.com/webgptorg/promptbook).
@@ -199,7 +202,7 @@ Rest of the documentation is common for **entire promptbook ecosystem**:
 
 Promptbook lets you create **persistent AI agents** that work on real goals for your company. The [**Agents Server**](https://gallery.ptbk.io/) is the heart of the project - a place where your AI agents live, remember context, collaborate in teams, and get things done.
 
-Nowadays, the biggest challenge for most business applications isn't the raw capabilities of AI models. Large language models such as GPT-5.2 and Claude-4.5 are incredibly capable.
+Nowadays, the biggest challenge for most business applications isn't the raw capabilities of AI models. Large language models such as Claude Mythos, GPT-5.6 or Kimi K2.7 are incredibly capable.
 
 The main challenge lies in **managing the context**, providing rules and knowledge, and narrowing the personality.
 
@@ -207,17 +210,20 @@ In Promptbook, you define your agents **using simple Books** - a human-readable
 
 <table style="border: 1px solid #777; border-radius: 10px;"><tr><td>
 
-**<ins>Paul Smith</ins>**<br/>
+**<ins>Lawyer</ins>**<br/>
 <br/>
-**PERSONA** You are a company lawyer.<br/>
+GOAL You are a company lawyer.<br/>
 Your job is to provide legal advice and support to the company and its employees.<br/>
-**GOAL** Respond to incoming legal inquiries via email and keep the company website updated with the latest legal policies.<br/>
+Respond to incoming legal inquiries via email and keep the company website updated with the latest legal policies.<br/>
+<br/>
 **RULE** You are knowledgeable, professional, and detail-oriented.<br/>
 **KNOWLEDGE** https://company.com/company-policies.pdf<br/>
 **KNOWLEDGE** https://company.com/internal-documents/employee-handbook.docx<br/>
-**USE EMAIL**<br/>
-**USE BROWSER**<br/>
-**TEAM** You are part of the legal team of Paul Smith & Associés, you discuss with {Emily White}, the head of the compliance department. {George Brown} is expert in corporate law and {Sophia Black} is expert in labor law.<br/>
+<br/>
+USE EMAIL<br/>
+USE BROWSER<br/>
+<br/>
+TEAM You are part of the legal team of Paul Smith & Associés, you discuss with {Emily White}, the head of the compliance department. {George Brown} is expert in corporate law and {Sophia Black} is expert in labor law.<br/>
 
 </td></tr></table>
 
@@ -250,12 +256,12 @@ Goals define what the agent should actively work toward. Unlike a chatbot that o
 
 <table style="border: 1px solid #777; border-radius: 10px;"><tr><td>
 
-**<ins>Paul Smith & Associés</ins>**<br/>
+**<ins>Company Lawyer</ins>**<br/>
 <br/>
-**PERSONA** You are a company lawyer.<br/>
+GOAL<br/>
 Your job is to provide legal advice and support to the company and its employees.<br/>
-**GOAL** Respond to incoming legal inquiries via email within 24 hours.<br/>
-**GOAL** Keep the company website updated with the latest legal policies and compliance information.<br/>
+GOAL Respond to incoming legal inquiries via email within 24 hours.<br/>
+GOAL Keep the company website updated with the latest legal policies and compliance information.<br/>
 
 </td></tr></table>
 
@@ -273,8 +279,8 @@ Promptbook Engine will automatically enforce this knowledge during interactions.
 <br/>
 **PERSONA** You are a company lawyer.<br/>
 Your job is to provide legal advice and support to the company and its employees.<br/>
-**GOAL** Respond to incoming legal inquiries via email within 24 hours.<br/>
-**GOAL** Keep the company website updated with the latest legal policies and compliance information.<br/>
+GOAL Respond to incoming legal inquiries via email within 24 hours.<br/>
+GOAL Keep the company website updated with the latest legal policies and compliance information.<br/>
 **KNOWLEDGE** https://company.com/company-policies.pdf<br/>
 **KNOWLEDGE** https://company.com/internal-documents/employee-handbook.docx<br/>
 
@@ -292,8 +298,8 @@ Depending on rule strictness, Promptbook will either propagate it to the prompt
 <br/>
 **PERSONA** You are a company lawyer.<br/>
 Your job is to provide legal advice and support to the company and its employees.<br/>
-**GOAL** Respond to incoming legal inquiries via email within 24 hours.<br/>
-**GOAL** Keep the company website updated with the latest legal policies and compliance information.<br/>
+GOAL Respond to incoming legal inquiries via email within 24 hours.<br/>
+GOAL Keep the company website updated with the latest legal policies and compliance information.<br/>
 **RULE** Always ensure compliance with local laws and regulations.<br/>
 **RULE** Never provide legal advice outside your area of expertise.<br/>
 **RULE** Never provide legal advice about criminal law.<br/>
@@ -314,16 +320,16 @@ These are what turn a chatbot into a persistent agent that actually does work.
 <br/>
 **PERSONA** You are a company lawyer.<br/>
 Your job is to provide legal advice and support to the company and its employees.<br/>
-**GOAL** Respond to incoming legal inquiries via email within 24 hours.<br/>
-**GOAL** Keep the company website updated with the latest legal policies and compliance information.<br/>
+GOAL Respond to incoming legal inquiries via email within 24 hours.<br/>
+GOAL Keep the company website updated with the latest legal policies and compliance information.<br/>
 **RULE** Always ensure compliance with local laws and regulations.<br/>
 **RULE** Never provide legal advice outside your area of expertise.<br/>
 **RULE** Never provide legal advice about criminal law.<br/>
 **KNOWLEDGE** https://company.com/company-policies.pdf<br/>
 **KNOWLEDGE** https://company.com/internal-documents/employee-handbook.docx<br/>
-**USE EMAIL**<br/>
-**USE BROWSER**<br/>
-**USE SEARCH ENGINE**<br/>
+USE EMAIL<br/>
+USE BROWSER<br/>
+USE SEARCH ENGINE<br/>
 
 </td></tr></table>
 
@@ -337,20 +343,22 @@ Team commitment allows you to define the team structure and advisory fellow memb
 <br/>
 **PERSONA** You are a company lawyer.<br/>
 Your job is to provide legal advice and support to the company and its employees.<br/>
-**GOAL** Respond to incoming legal inquiries via email within 24 hours.<br/>
-**GOAL** Keep the company website updated with the latest legal policies and compliance information.<br/>
+GOAL Respond to incoming legal inquiries via email within 24 hours.<br/>
+GOAL Keep the company website updated with the latest legal policies and compliance information.<br/>
 **RULE** Always ensure compliance with local laws and regulations.<br/>
 **RULE** Never provide legal advice outside your area of expertise.<br/>
 **RULE** Never provide legal advice about criminal law.<br/>
 **KNOWLEDGE** https://company.com/company-policies.pdf<br/>
 **KNOWLEDGE** https://company.com/internal-documents/employee-handbook.docx<br/>
-**USE EMAIL**<br/>
-**USE BROWSER**<br/>
-**USE SEARCH ENGINE**<br/>
-**TEAM** You are part of the legal team of Paul Smith & Associés, you discuss with {Emily White}, the head of the compliance department. {George Brown} is expert in corporate law and {Sophia Black} is expert in labor law.<br/>
+USE EMAIL<br/>
+USE BROWSER<br/>
+USE SEARCH ENGINE<br/>
+TEAM You are part of the legal team of Paul Smith & Associés, you discuss with {Emily White}, the head of the compliance department. {George Brown} is expert in corporate law and {Sophia Black} is expert in labor law.<br/>
 
 </td></tr></table>
 
+
+
 ### Promptbook Ecosystem
 
 Promptbook is an ecosystem of tools centered around the **Agents Server** - a production-ready platform for running persistent AI agents.
@@ -373,6 +381,8 @@ The [Promptbook Engine](https://github.com/webgptorg/promptbook) is the open-sou
 
 
 
+
+
 ## 💜 The Promptbook Project
 
 Promptbook project is an ecosystem centered around the **Agents Server** - a platform for creating, deploying, and running persistent AI agents. Following is a list of the most important pieces of the project:
@@ -410,6 +420,8 @@ Promptbook project is an ecosystem centered around the **Agents Server** - a pla
   </tbody>
 </table>
 
+
+
 ### 🌐 Community & Social Media
 
 Join our growing community of developers and users:
@@ -466,6 +478,8 @@ Join our growing community of developers and users:
 
 
 
+
+
 ## 📚 Documentation
 
 See detailed guides and API reference in the [docs](https://github.com/webgptorg/promptbook/discussions/categories/concepts) or [online](https://discord.gg/x3QWNaa89N).
@@ -673,6 +687,8 @@ The following glossary is used to clarify certain concepts:
 
 _Note: This section is not a complete dictionary, more list of general AI / LLM terms that has connection with Promptbook_
 
+
+
 ### 💯 Core concepts
 
 -   [📚 Collection of pipelines](https://github.com/webgptorg/promptbook/discussions/65)

package/agents/default/developer.book

@@ -1,4 +1,5 @@
-Promptbook Developer
+Developer
+META VISIBILITY PRIVATE
 
 RULE
 Keep in mind the DRY _(don't repeat yourself)_ principle.

package/apps/agents-server/next.config.ts

@@ -22,6 +22,13 @@ const agentsServerNodeModulesPath = process.env.PTBK_AGENTS_SERVER_NODE_MODULES_
  */
 const isNextValidationIgnored = process.env.PTBK_AGENTS_SERVER_IGNORE_NEXT_VALIDATION === 'true';
 
+/**
+ * Optional worker count override for CLI-owned production builds on memory-constrained VPS hosts.
+ */
+const AGENTS_SERVER_BUILD_WORKER_COUNT = parseAgentsServerBuildWorkerCount(
+    process.env.PTBK_AGENTS_SERVER_BUILD_WORKER_COUNT,
+);
+
 /**
  * Whether Sentry source maps can be uploaded during production builds.
  */
@@ -57,6 +64,7 @@ const nextConfig: NextConfig = {
 
     experimental: {
         externalDir: true,
+        ...(AGENTS_SERVER_BUILD_WORKER_COUNT ? { cpus: AGENTS_SERVER_BUILD_WORKER_COUNT } : {}),
     },
 
     turbopack: {
@@ -162,3 +170,16 @@ function createPromptbookLocalPackageAliases(): Record<string, string> {
         return {};
     }
 }
+
+/**
+ * Parses a positive integer worker count from the CLI build environment.
+ */
+function parseAgentsServerBuildWorkerCount(rawValue: string | undefined): number | undefined {
+    const parsedValue = Number(rawValue);
+
+    if (!Number.isFinite(parsedValue) || parsedValue < 1) {
+        return undefined;
+    }
+
+    return Math.floor(parsedValue);
+}

package/apps/agents-server/src/app/admin/limits/LimitsClient.tsx

@@ -170,7 +170,7 @@ export function LimitsClient() {
                                 {category === 'Agent spawning' &&
                                     'Limits protecting the persistent `spawn_agent` tool from accidental or abusive overuse.'}
                                 {category === 'Local agent runner' &&
-                                    'Limits controlling local coding-agent retries for durable chat messages.'}
+                                    'Limits controlling local coding-agent parallelism and retries for durable chat messages.'}
                             </p>
                         </div>
 

package/apps/agents-server/src/app/admin/task-manager/TaskManagerTaskRow.tsx

@@ -130,6 +130,10 @@ function formatTaskKind(kind: AdminChatTaskRecord['kind']): string {
         return 'Chat timeout';
     }
 
+    if (kind === 'VPS_SELF_UPDATE') {
+        return 'Self-update';
+    }
+
     return kind;
 }
 
@@ -260,8 +264,9 @@ function resolveTaskRowClassName(task: AdminChatTaskRecord, isStuck: boolean): s
  * @private function of TaskManagerTaskRow
  */
 function TaskManagerTaskActions({ busyAction, isBusy, onRunTaskAction, task }: TaskManagerTaskActionsProps) {
-    const isCancelable = task.status === 'QUEUED' || task.status === 'RUNNING';
-    const isRetryable = task.status === 'FAILED';
+    const isDurableChatTask = task.kind === 'CHAT_COMPLETION' || task.kind === 'CHAT_TIMEOUT';
+    const isCancelable = isDurableChatTask && (task.status === 'QUEUED' || task.status === 'RUNNING');
+    const isRetryable = isDurableChatTask && task.status === 'FAILED';
 
     return (
         <div className="flex justify-end gap-2">

package/apps/agents-server/src/app/admin/update/UpdateClient.tsx

@@ -81,6 +81,7 @@ type UpdateOverview = {
     readonly latestRemoteCommitSha: string | null;
     readonly latestRemoteCommitShortSha: string | null;
     readonly latestRemoteCommitDate: string | null;
+    readonly latestRemoteCommitMessage: string | null;
     readonly commitsBehindCount: number | null;
     readonly pendingCommits: ReadonlyArray<UpdatePendingCommit>;
     readonly isUpdateAvailable: boolean;
@@ -487,11 +488,6 @@ function CurrentDeploymentCard({
     readonly overview: UpdateOverview | null;
     readonly language: ServerLanguageCode;
 }) {
-    const currentCommitDateLabel = formatHumanReadableTimestamp(overview?.currentCommitDate ?? null, language);
-    const latestRemoteCommitDateLabel = formatHumanReadableTimestamp(
-        overview?.latestRemoteCommitDate ?? null,
-        language,
-    );
     const driftLabel = useMemo(
         () => buildDeploymentDriftLabel(overview, language),
         [overview, language],
@@ -521,20 +517,22 @@ function CurrentDeploymentCard({
                         {overview?.currentEnvironment.branch || 'production'}
                     </dd>
                 </div>
-                <div className="rounded-xl border border-slate-200 bg-slate-50 px-4 py-3">
-                    <dt className="text-xs font-semibold uppercase tracking-wide text-slate-500">Deployed commit</dt>
-                    <dd className="mt-1 font-mono text-slate-900">{overview?.currentCommitShortSha || 'Unknown'}</dd>
-                    <div className="mt-1 text-xs text-slate-500">{currentCommitDateLabel}</div>
-                </div>
-                <div className="rounded-xl border border-slate-200 bg-slate-50 px-4 py-3">
-                    <dt className="text-xs font-semibold uppercase tracking-wide text-slate-500">
-                        Latest remote commit
-                    </dt>
-                    <dd className="mt-1 font-mono text-slate-900">
-                        {overview?.latestRemoteCommitShortSha || 'Unknown'}
-                    </dd>
-                    <div className="mt-1 text-xs text-slate-500">{latestRemoteCommitDateLabel}</div>
-                </div>
+                <CommitSummaryCard
+                    label="Deployed commit"
+                    commitSha={overview?.currentCommitSha ?? null}
+                    shortCommitSha={overview?.currentCommitShortSha ?? null}
+                    subject={overview?.currentCommitMessage ?? null}
+                    authoredAt={overview?.currentCommitDate ?? null}
+                    language={language}
+                />
+                <CommitSummaryCard
+                    label="Latest remote commit"
+                    commitSha={overview?.latestRemoteCommitSha ?? null}
+                    shortCommitSha={overview?.latestRemoteCommitShortSha ?? null}
+                    subject={overview?.latestRemoteCommitMessage ?? null}
+                    authoredAt={overview?.latestRemoteCommitDate ?? null}
+                    language={language}
+                />
                 <div className="rounded-xl border border-slate-200 bg-slate-50 px-4 py-3">
                     <dt className="text-xs font-semibold uppercase tracking-wide text-slate-500">
                         Update availability
@@ -555,15 +553,6 @@ function CurrentDeploymentCard({
                 </div>
             </dl>
 
-            {overview?.currentCommitMessage && (
-                <div className="rounded-xl border border-slate-200 bg-white px-4 py-3 text-sm text-slate-600">
-                    <div className="text-xs font-semibold uppercase tracking-wide text-slate-500">
-                        Current commit message
-                    </div>
-                    <div className="mt-1 text-slate-900">{overview.currentCommitMessage}</div>
-                </div>
-            )}
-
             {overview?.repositoryDirectory && (
                 <div className="text-xs text-slate-500">
                     Managed repository:
@@ -574,6 +563,38 @@ function CurrentDeploymentCard({
     );
 }
 
+/**
+ * Renders one commit as subject, hash and authored date.
+ *
+ * @private internal component of `<UpdateClient/>`
+ */
+function CommitSummaryCard({
+    label,
+    commitSha,
+    shortCommitSha,
+    subject,
+    authoredAt,
+    language,
+}: {
+    readonly label: string;
+    readonly commitSha: string | null;
+    readonly shortCommitSha: string | null;
+    readonly subject: string | null;
+    readonly authoredAt: string | null;
+    readonly language: ServerLanguageCode;
+}) {
+    const commitHashLabel = commitSha || shortCommitSha || 'Unknown hash';
+
+    return (
+        <div className="rounded-xl border border-slate-200 bg-slate-50 px-4 py-3">
+            <dt className="text-xs font-semibold uppercase tracking-wide text-slate-500">{label}</dt>
+            <dd className="mt-1 text-slate-900">{subject || 'Unknown commit subject'}</dd>
+            <div className="mt-2 break-all font-mono text-xs text-slate-600">{commitHashLabel}</div>
+            <div className="mt-1 text-xs text-slate-500">{formatHumanReadableTimestamp(authoredAt, language)}</div>
+        </div>
+    );
+}
+
 /**
  * Lists the commits between the deployed checkout and the latest remote commit so the super admin can review what
  * exactly is about to be installed before triggering the self-update.
@@ -620,11 +641,9 @@ function PendingCommitsCard({
                 <ul className="divide-y divide-slate-100 rounded-xl border border-slate-200 bg-white">
                     {overview.pendingCommits.map((pendingCommit) => (
                         <li key={pendingCommit.commitSha} className="px-4 py-3">
-                            <div className="flex flex-wrap items-baseline gap-x-3 gap-y-1">
-                                <span className="font-mono text-xs text-slate-500">
-                                    {pendingCommit.shortCommitSha}
-                                </span>
-                                <span className="text-sm text-slate-900">{pendingCommit.subject}</span>
+                            <div className="text-sm text-slate-900">{pendingCommit.subject}</div>
+                            <div className="mt-1 break-all font-mono text-xs text-slate-500">
+                                {pendingCommit.commitSha || pendingCommit.shortCommitSha}
                             </div>
                             <div className="mt-1 text-xs text-slate-500">
                                 {formatHumanReadableTimestamp(pendingCommit.authoredAt, language)}

package/apps/agents-server/src/app/api/agent-folders/[folderId]/visibility/route.ts

@@ -1,11 +1,14 @@
 import { NextResponse } from 'next/server';
+import type { string_book } from '@promptbook-local/types';
 import { $getTableName } from '../../../../../database/$getTableName';
 import { $provideSupabaseForServer } from '../../../../../database/$provideSupabaseForServer';
+import { $provideAgentCollectionForServer } from '../../../../../tools/$provideAgentCollectionForServer';
 import {
     buildFolderTree,
     collectDescendantFolderIds,
 } from '../../../../../utils/agentOrganization/folderTree';
-import { isAgentVisibility } from '../../../../../utils/agentVisibility';
+import { invalidateCachedActiveOrganizationSnapshots } from '../../../../../utils/agentOrganization/loadAgentOrganizationState';
+import { normalizeAgentVisibility, setAgentSourceVisibility } from '../../../../../utils/agentVisibility';
 import { getCurrentUser } from '../../../../../utils/getCurrentUser';
 
 /**
@@ -34,8 +37,8 @@ export async function PATCH(request: Request, { params }: { params: Promise<{ fo
         return NextResponse.json({ success: false, error: 'Invalid JSON payload.' }, { status: 400 });
     }
 
-    const visibility = payload?.visibility;
-    if (!isAgentVisibility(visibility)) {
+    const visibility = normalizeAgentVisibility(payload?.visibility);
+    if (!visibility) {
         return NextResponse.json(
             { success: false, error: 'Invalid visibility value. Must be PRIVATE, UNLISTED, or PUBLIC.' },
             { status: 400 },
@@ -60,15 +63,24 @@ export async function PATCH(request: Request, { params }: { params: Promise<{ fo
     const { childrenByParentId } = buildFolderTree(folderRows);
     const descendantFolderIds = collectDescendantFolderIds(numericFolderId, childrenByParentId);
 
-    const updateResult = await supabase
+    const agentResult = await supabase
         .from(agentTable)
-        .update({ visibility })
+        .select('agentName, permanentId, agentSource')
         .in('folderId', descendantFolderIds)
         .is('deletedAt', null);
 
-    if (updateResult.error) {
-        return NextResponse.json({ success: false, error: updateResult.error.message }, { status: 500 });
+    if (agentResult.error) {
+        return NextResponse.json({ success: false, error: agentResult.error.message }, { status: 500 });
     }
 
+    const collection = await $provideAgentCollectionForServer();
+    for (const agent of agentResult.data || []) {
+        const agentIdentifier = agent.permanentId || agent.agentName;
+        const nextAgentSource = setAgentSourceVisibility(agent.agentSource as string_book, visibility);
+        await collection.updateAgentSource(agentIdentifier, nextAgentSource);
+    }
+
+    invalidateCachedActiveOrganizationSnapshots();
+
     return NextResponse.json({ success: true });
 }

package/apps/agents-server/src/app/api/agents/[agentName]/route.ts

@@ -1,12 +1,10 @@
 // DELETE /api/agents/[agentName]
 // PATCH /api/agents/[agentName] - update agent visibility
 // POST /api/agents/[agentName]/restore - restore deleted agent
-import { $getTableName } from '@/src/database/$getTableName';
-import { $provideSupabaseForServer } from '@/src/database/$provideSupabaseForServer';
 import { $provideAgentCollectionForServer } from '@/src/tools/$provideAgentCollectionForServer';
 import { $provideAgentReferenceResolver } from '@/src/utils/agentReferenceResolver/$provideAgentReferenceResolver';
 import { renameAgentSource } from '@/src/utils/renameAgentSource';
-import { isAgentVisibility, type AgentVisibility } from '@/src/utils/agentVisibility';
+import { normalizeAgentVisibility, setAgentSourceVisibility } from '@/src/utils/agentVisibility';
 import { TODO_any, type string_book } from '@promptbook-local/types';
 import { NextResponse } from 'next/server';
 import { findAgentForCallerWriteAccess } from '@/src/utils/findAgentForCallerWriteAccess';
@@ -41,7 +39,7 @@ export async function PATCH(request: Request, { params }: { params: Promise<{ ag
             return NextResponse.json({ success: false, error: 'Agent not found' }, { status: 404 });
         }
 
-        const body = (await request.json()) as { visibility?: AgentVisibility; name?: string };
+        const body = (await request.json()) as { visibility?: unknown; name?: string };
 
         if (typeof body.name === 'string') {
             const trimmedName = body.name.trim();
@@ -69,27 +67,19 @@ export async function PATCH(request: Request, { params }: { params: Promise<{ ag
             });
         }
 
-        const { visibility } = body;
+        const visibility = normalizeAgentVisibility(body.visibility);
 
-        if (!isAgentVisibility(visibility)) {
+        if (!visibility) {
             return NextResponse.json(
                 { success: false, error: 'Invalid visibility value. Must be PRIVATE, UNLISTED, or PUBLIC.' },
                 { status: 400 },
             );
         }
 
-        const supabase = $provideSupabaseForServer();
-
-        const updateResult = await supabase
-            .from(await $getTableName(`Agent`))
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
-            .update({ visibility } as any)
-            .eq('id', targetAgent.id)
-            .is('deletedAt', null);
-
-        if (updateResult.error) {
-            return NextResponse.json({ success: false, error: updateResult.error.message }, { status: 500 });
-        }
+        const collection = await $provideAgentCollectionForServer();
+        const agentId = getAgentCollectionIdentifier(targetAgent);
+        const nextAgentSource = setAgentSourceVisibility(targetAgent.agentSource as string_book, visibility);
+        await collection.updateAgentSource(agentId, nextAgentSource);
 
         invalidateCachedActiveOrganizationSnapshots();
 

package/apps/agents-server/src/app/api/internal/agent-runner-limits/route.ts

@@ -18,7 +18,7 @@ export async function POST(request: Request) {
 }
 
 /**
- * Validates authorization and returns the current local runner retry limits.
+ * Validates authorization and returns the current local runner limits.
  *
  * @param request - Incoming route request.
  * @returns Local runner limits response.

package/apps/agents-server/src/app/api/page-preview/check/route.ts

@@ -1,9 +1,8 @@
 import type { NextRequest } from 'next/server';
 import { NextResponse } from 'next/server';
 import { assertsError } from '../../../../../../../src/errors/assertsError';
-import { assertSafeUrl } from '../../../../utils/assertSafeUrl';
-import { getCurrentUser } from '../../../../utils/getCurrentUser';
 import { checkIfUrlCanBeEmbedded } from '../../../../utils/iframe/checkIfUrlCanBeEmbedded';
+import { resolvePagePreviewRequestUrl } from '../../../../utils/pagePreview/resolvePagePreviewRequestUrl';
 
 /**
  * Checks whether a given URL can be embedded in an iframe by inspecting
@@ -18,27 +17,13 @@ import { checkIfUrlCanBeEmbedded } from '../../../../utils/iframe/checkIfUrlCanB
  * The destination URL is validated against private/internal IP ranges before fetching.
  */
 export async function GET(request: NextRequest): Promise<NextResponse> {
-    const currentUser = await getCurrentUser();
-    if (!currentUser) {
-        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
-    }
-
-    const url = request.nextUrl.searchParams.get('url');
-
-    if (!url) {
-        return NextResponse.json({ error: 'Missing required query parameter: url' }, { status: 400 });
-    }
-
-    // Guard against SSRF: reject private/internal IPs and non-HTTP(S) schemes
-    try {
-        assertSafeUrl(url);
-    } catch (error) {
-        assertsError(error);
-        return NextResponse.json({ error: error.message }, { status: 400 });
+    const requestUrlResolution = await resolvePagePreviewRequestUrl(request);
+    if (requestUrlResolution.errorResponse !== null) {
+        return requestUrlResolution.errorResponse;
     }
 
     try {
-        const canEmbed = await checkIfUrlCanBeEmbedded(url);
+        const canEmbed = await checkIfUrlCanBeEmbedded(requestUrlResolution.url);
         return NextResponse.json({ canEmbed });
     } catch (error) {
         assertsError(error);