@agent-native/core-corpus 0.201.0-nightly-20261005153421 → 0.201.0

package/corpus/templates/analytics/server/lib/indexed-text.ts

@@ -0,0 +1,53 @@
+import { createHash } from "node:crypto";
+
+/**
+ * Postgres rejects an index entry over about 2.7 KB, and one rejected row fails
+ * its whole insert, so caller text stored in an indexed column is cut first.
+ * Lengths count UTF-16 code units, each at most three UTF-8 bytes, and are sized
+ * so the widest index, (org_id, path, event_name), stays under that limit.
+ */
+export const MAX_EVENT_NAME_LENGTH = 200;
+/** App and template names. */
+export const MAX_APP_LENGTH = 100;
+export const MAX_PATH_LENGTH = 500;
+export const MAX_USER_KEY_LENGTH = 256;
+/**
+ * Session and recording ids are rejected or skipped past this length, never
+ * cut, because a cut id could merge two sessions.
+ */
+export const MAX_SESSION_ID_LENGTH = 256;
+/**
+ * Row ids are primary keys, and percent-encoding can triple already bounded
+ * text, so a longer id is replaced by a hash of its parts.
+ */
+const MAX_ROW_ID_LENGTH = 512;
+
+/**
+ * Never ends on half of a surrogate pair, which Postgres would store as a
+ * replacement character.
+ */
+export function boundedText(
+  value: string | null | undefined,
+  maxLength: number,
+): string {
+  const text = value?.trim().slice(0, maxLength) ?? "";
+  return /[\uD800-\uDBFF]$/.test(text) ? text.slice(0, -1) : text;
+}
+
+/**
+ * For a value that identifies something, such as a user. A plain cut would
+ * merge every value sharing the kept prefix, so a value past the limit keeps a
+ * shorter prefix plus a hash of the whole value.
+ */
+export function boundedIdentity(value: string, maxLength: number): string {
+  const text = value.trim();
+  if (text.length <= maxLength) return text;
+  const digest = createHash("sha256").update(text).digest("hex").slice(0, 16);
+  return `${boundedText(text, maxLength - digest.length - 1)}~${digest}`;
+}
+
+export function indexedRowId(prefix: string, parts: readonly string[]): string {
+  const id = `${prefix}_${parts.map((part) => encodeURIComponent(part)).join("|")}`;
+  if (id.length <= MAX_ROW_ID_LENGTH) return id;
+  return `${prefix}_h_${createHash("sha256").update(JSON.stringify(parts)).digest("hex")}`;
+}

package/corpus/templates/analytics/server/lib/request-errors.ts

@@ -0,0 +1,73 @@
+/**
+ * An error raised for the caller carries a numeric statusCode and a message
+ * written to be returned. Any other error is unexpected, and its message can
+ * quote internal database details, so it is logged and the caller gets a
+ * generic reply.
+ */
+export function requestError(
+  message: string,
+  statusCode: number,
+): Error & { statusCode: number } {
+  return Object.assign(new Error(message), { statusCode });
+}
+
+export function parseJsonBody(raw: string): unknown {
+  try {
+    return JSON.parse(raw);
+  } catch {
+    throw requestError("Request body is not valid JSON", 400);
+  }
+}
+
+const NUL = /\u0000/g;
+const LONE_SURROGATE =
+  /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/g;
+
+/**
+ * Postgres rejects U+0000 in text and jsonb, and a lone surrogate in jsonb;
+ * stored JSON is read back with ::jsonb, and row ids encode values with
+ * encodeURIComponent, which throws on a lone surrogate. One such character
+ * would fail its write on every retry, or every query over it later, so an
+ * ingest body has every string and key cleaned once, as it is parsed.
+ */
+export function parseIngestBody(raw: unknown): unknown {
+  return postgresSafe(
+    typeof raw === "string" && raw.trim() ? parseJsonBody(raw) : raw,
+  );
+}
+
+function postgresSafe(value: unknown): unknown {
+  if (typeof value === "string") return postgresSafeString(value);
+  if (Array.isArray(value)) return value.map(postgresSafe);
+  if (value && typeof value === "object") {
+    const entries = Object.entries(value).map(([key, entry]) => [
+      postgresSafeString(key),
+      postgresSafe(entry),
+    ]);
+    // Two keys that clean to one would silently keep only one value.
+    if (new Set(entries.map(([key]) => key)).size < entries.length) {
+      throw requestError(
+        "Request body has keys that differ only by characters Postgres cannot store",
+        400,
+      );
+    }
+    return Object.fromEntries(entries);
+  }
+  return value;
+}
+
+function postgresSafeString(value: string): string {
+  return value.replace(NUL, "").replace(LONE_SURROGATE, "�");
+}
+
+export function errorReply(
+  error: unknown,
+  logPrefix: string,
+): { statusCode: number; error: string } {
+  const statusCode = (error as { statusCode?: unknown } | null)?.statusCode;
+  if (error instanceof Error && typeof statusCode === "number") {
+    return { statusCode, error: error.message };
+  }
+  console.error(`${logPrefix} Unexpected request failure:`, error);
+  return { statusCode: 500, error: "Internal server error" };
+}

package/corpus/templates/analytics/server/lib/session-event-index.ts

@@ -23,6 +23,12 @@ import {
   type SessionEventNameCount,
 } from "../../shared/session-events.js";
 import { getDb, schema } from "../db/index.js";
+import {
+  MAX_APP_LENGTH,
+  MAX_EVENT_NAME_LENGTH,
+  MAX_SESSION_ID_LENGTH,
+  boundedText,
+} from "./indexed-text.js";
 
 /**
  * Session event index.
@@ -54,9 +60,6 @@ export interface SessionEventScope {
 
 const MAX_PROPERTY_KEYS = 30;
 const PROPERTY_KEY_PATTERN = /^[A-Za-z0-9_.$:-]{1,64}$/;
-const MAX_EVENT_NAME_LENGTH = 200;
-const MAX_APP_LENGTH = 100;
-const MAX_SESSION_ID_LENGTH = 256;
 const STOPPED_FIRING_DAYS = 7;
 const SESSION_EVENT_INDEX_RETENTION_BUFFER_DAYS = 2;
 export const EVENT_CATALOG_RETENTION_DAYS = 180;
@@ -82,19 +85,6 @@ function viewerTenantKeys(scope: SessionEventScope): string[] {
     : [sessionEventTenantKey(scope.userEmail, null)];
 }
 
-/**
- * Unique indexes hold event names and apps raw, so both are cut to a length
- * that fits an index entry. Never ends on half of a surrogate pair, which
- * Postgres would store as a replacement character.
- */
-function boundedText(
-  value: string | null | undefined,
-  maxLength: number,
-): string {
-  const text = value?.trim().slice(0, maxLength) ?? "";
-  return /[\uD800-\uDBFF]$/.test(text) ? text.slice(0, -1) : text;
-}
-
 /**
  * An id too long for a unique index entry would fail the gap marker too, and
  * with it the batch. Such a session never gets an index row, so "didn't"

package/corpus/templates/analytics/server/lib/session-replay.ts

@@ -49,6 +49,8 @@ import {
   resolveAnalyticsEventDimensions,
   touchPublicKeyLastUsedAt,
 } from "./first-party-analytics.js";
+import { MAX_SESSION_ID_LENGTH } from "./indexed-text.js";
+import { parseIngestBody } from "./request-errors.js";
 import {
   pruneSessionEventIndex,
   sessionEventFilterConditions,
@@ -997,8 +999,7 @@ function deriveReplaySignals({
 export function parseSessionReplayIngestPayload(
   raw: unknown,
 ): ParsedSessionReplayIngest {
-  const body =
-    typeof raw === "string" && raw.trim() ? JSON.parse(raw) : replayRecord(raw);
+  const body = replayRecord(parseIngestBody(raw));
   const publicKey =
     replayString(body.publicKey) ||
     replayString(body.writeKey) ||
@@ -1026,6 +1027,15 @@ export function parseSessionReplayIngestPayload(
     replayString(body.recording_id) ||
     replayString(body.replayId) ||
     sessionId;
+  if (
+    sessionId.length > MAX_SESSION_ID_LENGTH ||
+    clientRecordingId.length > MAX_SESSION_ID_LENGTH
+  ) {
+    throw replayError(
+      `Replay session and recording ids must be at most ${MAX_SESSION_ID_LENGTH} characters`,
+      400,
+    );
+  }
   const metadata = replayRecord(body.metadata);
   assertReplayMetadataCap(metadata);
 

package/corpus/templates/analytics/server/plugins/auth.ts

@@ -34,7 +34,8 @@ const authPlugin = createAuthPlugin({
   publicCorsPaths: ["/track", "/api/analytics/track", "/api/analytics/replay"],
   marketing: {
     appName: "Analytics",
-    learnMoreUrl: "https://agent-native.com/apps/analytics",
+    learnMoreUrl:
+      "https://agent-native.com/apps/analytics?utm_source=app&utm_medium=product&utm_content=onboarding-learn-more",
     tagline:
       "Your AI agent queries your data sources, builds dashboards, and answers business questions alongside you.",
     features: [

package/corpus/templates/analytics/server/plugins/otel.ts

@@ -0,0 +1,6 @@
+import { defineNitroPlugin } from "@agent-native/core/server";
+import { startAgentNativeOtel } from "@agent-native/otel";
+
+export default defineNitroPlugin(() => {
+  startAgentNativeOtel();
+});

package/corpus/templates/assets/.agents/skills/security/SKILL.md

@@ -290,9 +290,16 @@ export default defineEventHandler(async (event) => {
 
 ## Data Scoping
 
-In production, the framework automatically restricts all agent SQL queries to the current user's data using temporary views. This is enforced at the SQL level — the agent cannot bypass it.
+In production, the framework automatically restricts all agent SQL queries to the current user's data using temporary views, and checks every statement before it runs so it can only reach those views.
 
-The `db-query` / `db-exec` tools (and the extension SQL bridge, which shares the same path) reject schema-qualified table references like `public.<table>` — a qualified name resolves to the base table and would skip the temp view. Use bare table names; scoping is applied automatically.
+The `db-query` / `db-exec` / `db-patch` tools (and the extension SQL bridge, which shares the same path) read each statement the way Postgres does and refuse anything that could reach data around the temp views:
+
+- schema- or database-qualified names like `public.<table>`, which resolve to the base table;
+- names that resolve to anything other than the current user's temp views, such as materialized views or tables the scoping does not cover;
+- app-defined SQL or PL/pgSQL functions and operators, whose bodies read tables without the views;
+- built-ins that run SQL text, change session settings, or reach outside the database (`query_to_xml`, `set_config`, `dblink`, most `pg_*` functions).
+
+`db-query` runs in a read-only transaction, and an `INSERT` must list its columns when the table has access-control columns. Use bare table names and plain expressions; scoping is applied automatically. When the agent needs data the views do not expose, add an app action with its own access checks.
 
 ### Per-User Scoping (`owner_email`)
 

package/corpus/templates/assets/.agents/skills/storing-data/SKILL.md

@@ -75,10 +75,11 @@ state their PostgreSQL types directly.
 
 Member offboarding and email changes refuse to run while any column named
 `email`, `*_email`, `*scope_id`, `created_by`, `updated_by`, `invited_by`,
-`owner`, `principal_id`, `session_id`, or `user_id` has no policy. `owner_email`
-and `createSharesTable()` tables are handled for you. Declare every other one,
-including columns that are not member identities, from the app's database
-plugin graph (Clips does it in `server/db/index.ts`):
+`owner`, `principal_id`, `session_id`, or `user_id` has no policy.
+`createSharesTable()` tables are handled for you, and undeclared `owner_email`
+columns transfer to the successor, which is right only for owned content.
+Declare every other one, including columns that are not member identities, from
+the app's database plugin graph (Clips does it in `server/db/index.ts`):
 
 ```ts
 import { registerIdentityColumns } from "@agent-native/core/org";
@@ -88,13 +89,17 @@ registerIdentityColumns([
   { table: "space_members", column: "email", emailChange: "rekey", offboard: "delete", orgScope: { column: "space_id", references: { table: "spaces", column: "id", orgColumn: "org_id" } }, reason: "Space membership grants access." },
   // Someone else's address: never rewritten.
   { table: "meeting_participants", column: "email", emailChange: "retain", offboard: "retain", reason: "Attendee address from the calendar provider." },
+  // A credential in an owner_email table: never handed to the successor.
+  { table: "api_keys", column: "owner_email", emailChange: "rekey", offboard: "revoke", reason: "Bearer keys act as their owner." },
 ]);
 ```
 
-Choose `delete` for grants, credentials, and pending tokens; `retain` for
+Choose `delete` for grants, credentials, and pending tokens, or `revoke` (sets
+`revoked_at`) when a reader treats a missing row as "not revoked"; `retain` for
 attribution, history, and third-party addresses; `transfer` only for owned
-data. A table without `org_id` needs `orgScope` or an organization-scoped
-removal leaves its rows alone.
+data. Declare `owner_email` tables that hold credentials or grants, or
+offboarding hands them to the successor. A table without `org_id` needs
+`orgScope` or an organization-scoped removal leaves its rows alone.
 
 | Template     | Tables                                        |
 | ------------ | --------------------------------------------- |

package/corpus/templates/assets/CHANGELOG.md

@@ -3,6 +3,13 @@
 All notable user-facing changes to Assets are documented here. Open it any
 time from the command menu (Cmd+K → "What's new") or from Settings.
 
+## 2026-10-02
+
+### Improved
+
+- Builder.io setup copy now clarifies account use and available credits.
+- Owners and admins can save image generation keys for the whole organization, which is now the default.
+
 ## 2026-10-01
 
 ### Fixed

package/corpus/templates/assets/README.md

@@ -4,7 +4,7 @@ An open-source, agent-native digital asset manager (DAM) and brand-image/video
 generation workspace — a self-hostable alternative to tools like Brandfolder and
 Air, with generation built in.
 
-**Live app: [assets.agent-native.com](https://assets.agent-native.com)**
+**Live app: [assets.agent-native.com](https://assets.agent-native.com?utm_source=github&utm_medium=referral&utm_content=assets-readme)**
 
 Organize uploaded and generated media into libraries and folders, then route
 image and video generation through the agent chat so every asset can be reviewed,
@@ -31,4 +31,4 @@ pnpm install
 pnpm dev
 ```
 
-Full docs: [agent-native.com/docs/template-assets](https://agent-native.com/docs/template-assets).
+Full docs: [agent-native.com/docs/template-assets](https://agent-native.com/docs/template-assets?utm_source=github&utm_medium=referral&utm_content=assets-readme).

package/corpus/templates/assets/package.json

@@ -16,6 +16,7 @@
   "dependencies": {
     "@agent-native/core": "workspace:*",
     "@agent-native/creative-context": "workspace:*",
+    "@agent-native/otel": "workspace:*",
     "@agent-native/toolkit": "workspace:*",
     "@electric-sql/pglite": "^0.5.8",
     "@fontsource-variable/inter": "^5.2.8",

package/corpus/templates/assets/server/plugins/auth.ts

@@ -4,7 +4,8 @@ export default createAuthPlugin({
   workspaceAppPublicPaths: ["/"],
   marketing: {
     appName: "Assets",
-    learnMoreUrl: "https://agent-native.com/apps/assets",
+    learnMoreUrl:
+      "https://agent-native.com/apps/assets?utm_source=app&utm_medium=product&utm_content=onboarding-learn-more",
     tagline:
       "Your AI agent creates, refines, and organizes on-brand assets alongside you.",
     features: [

package/corpus/templates/assets/server/plugins/otel.ts

@@ -0,0 +1,6 @@
+import { defineNitroPlugin } from "@agent-native/core/server";
+import { startAgentNativeOtel } from "@agent-native/otel";
+
+export default defineNitroPlugin(() => {
+  startAgentNativeOtel();
+});

package/corpus/templates/brain/.agents/skills/brain/RUNBOOK.md

@@ -113,7 +113,8 @@ pnpm --filter brain action create-source \
 The connector verifies each configured conversation before reading history and
 rejects DMs and MPIMs. Public discovery is opt-in and exclusion patterns are
 applied before capture. Private channels are never silently joined: an operator
-must manually invite the Slack app before validation and membership sync. Cursor
+must manually invite the Slack app before validation. Once invited, the
+channel's screened content is searchable org-wide. Cursor
 state is stored on the source so each sync can pick up where the last one
 stopped, including after Slack rate limiting.
 

package/corpus/templates/brain/.agents/skills/brain/SKILL.md

@@ -112,10 +112,11 @@ general model knowledge.
   `lanes.semantic.status` is `failed`, semantic matches are missing — say so.
   Use it as the default first search; narrow with `type: "knowledge" |
   "capture" | "source"` when you already know which record type you need.
-- Audience filtering happens before ranking. Public and organization sources
-  use the cheap organization audience; private channels and meetings use their
-  restricted audience. A multi-source answer must use the intersection of the
-  cited evidence audiences.
+- Audience filtering happens before ranking. Slack (public and invited private
+  channels) and Zoom use the organization audience; attendee-scoped meetings
+  (Granola) use their restricted audience; personal sources are additionally
+  limited to their owner and shares. A multi-source answer must use the
+  intersection of the cited evidence audiences.
 
 Follow `sourcePolicy` for how much of `search-everything`'s output an answer
 may lean on: `strict` means distilled knowledge only; `balanced` and

package/corpus/templates/brain/.agents/skills/security/SKILL.md

@@ -290,9 +290,16 @@ export default defineEventHandler(async (event) => {
 
 ## Data Scoping
 
-In production, the framework automatically restricts all agent SQL queries to the current user's data using temporary views. This is enforced at the SQL level — the agent cannot bypass it.
+In production, the framework automatically restricts all agent SQL queries to the current user's data using temporary views, and checks every statement before it runs so it can only reach those views.
 
-The `db-query` / `db-exec` tools (and the extension SQL bridge, which shares the same path) reject schema-qualified table references like `public.<table>` — a qualified name resolves to the base table and would skip the temp view. Use bare table names; scoping is applied automatically.
+The `db-query` / `db-exec` / `db-patch` tools (and the extension SQL bridge, which shares the same path) read each statement the way Postgres does and refuse anything that could reach data around the temp views:
+
+- schema- or database-qualified names like `public.<table>`, which resolve to the base table;
+- names that resolve to anything other than the current user's temp views, such as materialized views or tables the scoping does not cover;
+- app-defined SQL or PL/pgSQL functions and operators, whose bodies read tables without the views;
+- built-ins that run SQL text, change session settings, or reach outside the database (`query_to_xml`, `set_config`, `dblink`, most `pg_*` functions).
+
+`db-query` runs in a read-only transaction, and an `INSERT` must list its columns when the table has access-control columns. Use bare table names and plain expressions; scoping is applied automatically. When the agent needs data the views do not expose, add an app action with its own access checks.
 
 ### Per-User Scoping (`owner_email`)
 

package/corpus/templates/brain/.agents/skills/storing-data/SKILL.md

@@ -75,10 +75,11 @@ state their PostgreSQL types directly.
 
 Member offboarding and email changes refuse to run while any column named
 `email`, `*_email`, `*scope_id`, `created_by`, `updated_by`, `invited_by`,
-`owner`, `principal_id`, `session_id`, or `user_id` has no policy. `owner_email`
-and `createSharesTable()` tables are handled for you. Declare every other one,
-including columns that are not member identities, from the app's database
-plugin graph (Clips does it in `server/db/index.ts`):
+`owner`, `principal_id`, `session_id`, or `user_id` has no policy.
+`createSharesTable()` tables are handled for you, and undeclared `owner_email`
+columns transfer to the successor, which is right only for owned content.
+Declare every other one, including columns that are not member identities, from
+the app's database plugin graph (Clips does it in `server/db/index.ts`):
 
 ```ts
 import { registerIdentityColumns } from "@agent-native/core/org";
@@ -88,13 +89,17 @@ registerIdentityColumns([
   { table: "space_members", column: "email", emailChange: "rekey", offboard: "delete", orgScope: { column: "space_id", references: { table: "spaces", column: "id", orgColumn: "org_id" } }, reason: "Space membership grants access." },
   // Someone else's address: never rewritten.
   { table: "meeting_participants", column: "email", emailChange: "retain", offboard: "retain", reason: "Attendee address from the calendar provider." },
+  // A credential in an owner_email table: never handed to the successor.
+  { table: "api_keys", column: "owner_email", emailChange: "rekey", offboard: "revoke", reason: "Bearer keys act as their owner." },
 ]);
 ```
 
-Choose `delete` for grants, credentials, and pending tokens; `retain` for
+Choose `delete` for grants, credentials, and pending tokens, or `revoke` (sets
+`revoked_at`) when a reader treats a missing row as "not revoked"; `retain` for
 attribution, history, and third-party addresses; `transfer` only for owned
-data. A table without `org_id` needs `orgScope` or an organization-scoped
-removal leaves its rows alone.
+data. Declare `owner_email` tables that hold credentials or grants, or
+offboarding hands them to the successor. A table without `org_id` needs
+`orgScope` or an organization-scoped removal leaves its rows alone.
 
 | Template     | Tables                                        |
 | ------------ | --------------------------------------------- |

package/corpus/templates/brain/CHANGELOG.md

@@ -3,6 +3,12 @@
 All notable user-facing changes to Agent-Native Brain are documented here. Open it any
 time from the command menu (Cmd+K → "What's new") or from Settings.
 
+## 2026-10-05
+
+### Improved
+
+- Messages from private Slack channels the Brain app is invited to are now searchable by everyone in the org once they pass sensitivity screening. Syncs no longer look up channel members, so a member without a visible email no longer stops a channel from syncing. Personal sources stay visible only to their owner and the people they are shared with.
+
 ## 2026-10-02
 
 ### Improved

package/corpus/templates/brain/README.md

@@ -4,13 +4,14 @@ An open-source, agent-native alternative to Glean — clean company chat backed
 cited institutional knowledge. Ask a plain-English question and get an answer
 from approved company knowledge, with links back to the source.
 
-**Live app: [brain.agent-native.com](https://brain.agent-native.com)**
+**Live app: [brain.agent-native.com](https://brain.agent-native.com?utm_source=github&utm_medium=referral&utm_content=brain-readme)**
 
 Brain ingests approved Slack channels, meetings, transcripts, GitHub issues/PRs,
 and webhook captures, distills them into reviewable knowledge, and answers with
-exact evidence quotes and source links instead of guesses. It can search both
-organization-wide material and explicitly invited private channels or
-attendee-scoped meetings without widening their audience.
+exact evidence quotes and source links instead of guesses. Messages from public
+channels and explicitly invited private channels are searchable org-wide once
+they pass sensitivity screening; attendee-scoped meetings keep their audience,
+and personal sources stay limited to their owner and shares.
 
 ## Features
 
@@ -21,8 +22,8 @@ attendee-scoped meetings without widening their audience.
   privacy classifier for richer review decisions.
 - Hybrid full-text and semantic search over allowed captures and knowledge,
   filtered by the requesting user's evidence audience before ranking.
-- Private-channel and meeting evidence stays audience-scoped; multi-source
-  answers use only the intersection of their evidence audiences.
+- Attendee-scoped meeting evidence and personal sources stay restricted;
+  multi-source answers use only the intersection of their evidence audiences.
 - Sensitive sources are suppressed or quarantined before search, citations,
   distillation, and source editors can see their content.
 - Read-only, citation-backed retrieval exposed to other apps over A2A.
@@ -33,7 +34,10 @@ attendee-scoped meetings without widening their audience.
 
 Brain never treats a connected provider as permission to index everything.
 Slack public-channel discovery is configurable, while private channels require a
-manual app invite and membership sync. Meetings use their attendee audience.
+manual app invite. Content from an invited private channel that passes
+sensitivity screening is searchable by everyone in the org. Meetings from
+attendee-scoped connectors use their attendee audience, and personal sources
+stay limited to their owner and shares.
 
 Hard privacy categories such as performance discussions, layoffs, compensation,
 recruiting, health accommodations, investigations, privileged legal material,
@@ -63,4 +67,4 @@ pnpm install
 pnpm dev
 ```
 
-Full docs: [agent-native.com/docs/template-brain](https://agent-native.com/docs/template-brain).
+Full docs: [agent-native.com/docs/template-brain](https://agent-native.com/docs/template-brain?utm_source=github&utm_medium=referral&utm_content=brain-readme).

package/corpus/templates/brain/changelog/2026-10-05-private-slack-channels-are-searchable-org-wide.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-10-05
+---
+
+Messages from private Slack channels the Brain app is invited to are now searchable by everyone in the org once they pass sensitivity screening. Syncs no longer look up channel members, so a member without a visible email no longer stops a channel from syncing. Personal sources stay visible only to their owner and the people they are shared with.

package/corpus/templates/brain/package.json

@@ -21,6 +21,7 @@
   },
   "dependencies": {
     "@agent-native/core": "workspace:*",
+    "@agent-native/otel": "workspace:*",
     "@agent-native/toolkit": "workspace:*",
     "@electric-sql/pglite": "^0.5.8",
     "@fontsource-variable/inter": "^5.2.8",

package/corpus/templates/brain/server/lib/audiences.ts

@@ -3,25 +3,12 @@ import {
   getRequestUserEmail,
 } from "@agent-native/core/server/request-context";
 import { accessFilter } from "@agent-native/core/sharing";
-import { and, eq, gte, inArray, ne, or } from "drizzle-orm";
+import { and, eq, inArray, or } from "drizzle-orm";
 
 import { getDb, schema } from "../db/index.js";
 import { nanoid, nowIso } from "./brain.js";
 import type { BrainAudienceAssignment } from "./search-index-contracts.js";
 
-export const SLACK_PRIVATE_AUDIENCE_TTL_MS = 15 * 60 * 1000;
-
-export function isAudienceMembershipFresh(
-  kind: BrainAudienceAssignment["kind"],
-  lastSyncedAt: string,
-  nowMs = Date.now(),
-) {
-  return (
-    kind !== "slack-private-channel" ||
-    Date.parse(lastSyncedAt) >= nowMs - SLACK_PRIVATE_AUDIENCE_TTL_MS
-  );
-}
-
 async function sha256(value: string) {
   const digest = await crypto.subtle.digest(
     "SHA-256",
@@ -465,83 +452,6 @@ export function assertSingleEvidenceTenant(
   return Array.from(tenantKeys)[0]!;
 }
 
-export async function refreshSlackPrivateChannelAudience(input: {
-  source: typeof schema.brainSources.$inferSelect;
-  channelId: string;
-  memberEmails: string[];
-}) {
-  const members =
-    input.source.visibility === "private" && input.memberEmails.length
-      ? [normalizeEmail(input.source.ownerEmail)]
-      : Array.from(new Set(input.memberEmails.map(normalizeEmail))).sort();
-  const upstreamRefHash = await sha256(input.channelId);
-  const aclHash = await computeAudienceAclHash(
-    "slack-private-channel",
-    members,
-  );
-  const audienceId = await computeCaptureAudienceId({
-    sourceId: input.source.id,
-    kind: "slack-private-channel",
-    upstreamRefHash,
-    aclHash,
-  });
-  const db = getDb();
-  const [audience] = await db
-    .select({
-      aclHash: schema.brainAudiences.aclHash,
-      membershipState: schema.brainAudiences.membershipState,
-    })
-    .from(schema.brainAudiences)
-    .where(
-      and(
-        eq(schema.brainAudiences.id, audienceId),
-        eq(schema.brainAudiences.sourceId, input.source.id),
-        eq(schema.brainAudiences.kind, "slack-private-channel"),
-        eq(schema.brainAudiences.upstreamRefHash, upstreamRefHash),
-      ),
-    )
-    .limit(1);
-  if (!audience) return;
-
-  if (audience.aclHash !== aclHash || audience.membershipState !== "current") {
-    await replaceAudienceUserMembers(
-      audienceId,
-      members.map((email) => ({ email })),
-    );
-    return;
-  }
-  const now = nowIso();
-  await db
-    .update(schema.brainAudiences)
-    .set({ lastSyncedAt: now, updatedAt: now })
-    .where(
-      and(
-        eq(schema.brainAudiences.id, audienceId),
-        eq(schema.brainAudiences.aclHash, aclHash),
-      ),
-    );
-}
-
-export async function replaceAudienceUserMembers(
-  audienceId: string,
-  members: Array<{ email: string; upstreamPrincipalHash?: string }>,
-  options: { previousAclHash?: string } = {},
-) {
-  const db = getDb();
-  const invalidations: DeferredAudienceInvalidation[] = [];
-  const result = await db.transaction((tx) =>
-    replaceAudienceUserMembersMutation(
-      audienceId,
-      members,
-      options,
-      tx as unknown as BrainDb,
-      invalidations,
-    ),
-  );
-  await flushAudienceInvalidations(invalidations);
-  return result;
-}
-
 async function replaceAudienceUserMembersMutation(
   audienceId: string,
   members: Array<{ email: string; upstreamPrincipalHash?: string }>,
@@ -648,9 +558,6 @@ export async function listAccessibleAudienceIds(sourceIds?: string[]) {
       : undefined,
   );
   if (!principalFilter) return [];
-  const slackFreshnessCutoff = new Date(
-    Date.now() - SLACK_PRIVATE_AUDIENCE_TTL_MS,
-  ).toISOString();
   const rows = await getDb()
     .selectDistinct({
       id: schema.brainAudiences.id,
@@ -664,10 +571,6 @@ export async function listAccessibleAudienceIds(sourceIds?: string[]) {
     .where(
       and(
         eq(schema.brainAudiences.membershipState, "current"),
-        or(
-          ne(schema.brainAudiences.kind, "slack-private-channel"),
-          gte(schema.brainAudiences.lastSyncedAt, slackFreshnessCutoff),
-        ),
         eq(schema.brainAudienceMembers.status, "active"),
         principalFilter,
       ),