@agent-native/core-corpus 0.201.0-nightly-20261005153421 → 0.201.0

package/corpus/templates/slides/app/pages/Index.tsx

@@ -23,8 +23,6 @@ import {
 } from "@agent-native/toolkit/agentkit";
 import {
   PromptHome,
-  PromptHomeLibrary,
-  type PromptHomeLibraryTab,
   useHomeSearchShortcut,
   useSetHeaderActions,
   useSetPageTitle,
@@ -89,6 +87,10 @@ import PromptPopover, {
 } from "@/components/editor/PromptDialog";
 import { useSlidesComposerContext } from "@/components/editor/SlidesComposerContext";
 import { usePromptImport } from "@/components/editor/use-prompt-import";
+import {
+  SlidesHomeLibrary,
+  type SlidesHomeLibraryTab,
+} from "@/components/home/SlidesHomeLibrary";
 import { HomeHeaderActions } from "@/components/layout/Header";
 import { useOpenMobileSidebar } from "@/components/layout/Layout";
 import { DeckTemplateLibrary } from "@/components/templates/DeckTemplateLibrary";
@@ -202,7 +204,6 @@ function HomeChrome({ title, actions }: { title: string; actions: ReactNode }) {
   return null;
 }
 const NEW_DECK_DRAFT_SCOPE = "slides-new-deck";
-const HOME_LIBRARY_TAB_STORAGE_KEY = "slides:home-library-tab";
 const PENDING_PROMPT_KEY = "slides:pending-deck-prompt";
 const PENDING_PROMPT_CONTEXT_KEY = "slides:pending-deck-prompt-context";
 const PENDING_PROMPT_MODEL_SELECTION_KEY =
@@ -210,24 +211,6 @@ const PENDING_PROMPT_MODEL_SELECTION_KEY =
 const PENDING_PROMPT_REFERENCE_SELECTION_KEY =
   "slides:pending-deck-reference-selection";
 
-function readStoredHomeLibraryTab(): PromptHomeLibraryTab | undefined {
-  try {
-    const tab = window.localStorage.getItem(HOME_LIBRARY_TAB_STORAGE_KEY);
-    return tab === "templates" || tab === "recent" ? tab : undefined;
-  } catch {
-    // coercion-ok: the tab preference is optional when browser storage is unavailable.
-    return undefined;
-  }
-}
-
-function writeStoredHomeLibraryTab(tab: PromptHomeLibraryTab): void {
-  try {
-    window.localStorage.setItem(HOME_LIBRARY_TAB_STORAGE_KEY, tab);
-  } catch {
-    // coercion-ok: an unavailable preference store preserves the in-memory selection.
-  }
-}
-
 type DeckModelSelection = Pick<
   PromptComposerSubmitOptions,
   "model" | "engine" | "effort"
@@ -639,7 +622,6 @@ export default function Index({ active = true }: { active?: boolean }) {
           prompt,
         }));
   const navigate = useNavigate();
-  useHomeSearchShortcut(isHome);
   const [searchParams, setSearchParams] = useSearchParams();
   const [deckToDelete, setDeckToDelete] = useState<string | null>(null);
   const [workspaceDefaultCandidate, setWorkspaceDefaultCandidate] =
@@ -701,30 +683,20 @@ export default function Index({ active = true }: { active?: boolean }) {
     string | null
   >(null);
   const [deckSearch, setDeckSearch] = useState("");
-  const storedHomeLibraryTab = readStoredHomeLibraryTab();
-  const [homeSection, setHomeSection] = useState<PromptHomeLibraryTab>(
-    storedHomeLibraryTab ?? "templates",
-  );
-  const homeLibraryTabWasSelectedRef = useRef(
-    storedHomeLibraryTab !== undefined,
-  );
+  const [homeSection, setHomeSection] =
+    useState<SlidesHomeLibraryTab>("templates");
+  const homeLibraryTabWasSelectedRef = useRef(false);
   const deckFilterWasSelectedRef = useRef(false);
+  const revealRecentSearch = useCallback(() => {
+    if (decks.length === 0) return false;
+    homeLibraryTabWasSelectedRef.current = true;
+    setHomeSection("recent");
+    return true;
+  }, [decks.length]);
+  useHomeSearchShortcut(isHome, revealRecentSearch);
   useEffect(() => {
     if (deckSearch.trim()) setHomeSection("recent");
   }, [deckSearch]);
-  useEffect(() => {
-    if (
-      isHome &&
-      !homeLibraryTabWasSelectedRef.current &&
-      !loading &&
-      !loadError &&
-      decks.length > 0
-    ) {
-      setHomeSection("recent");
-      writeStoredHomeLibraryTab("recent");
-      homeLibraryTabWasSelectedRef.current = true;
-    }
-  }, [decks.length, isHome, loadError, loading]);
   const [storedDeckFilter, setStoredDeckFilter] = useState<DeckFilter>("mine");
   const referenceDeckAutoRef = useRef(true);
   const [showSignInDialog, setShowSignInDialog] = useState(false);
@@ -779,6 +751,7 @@ export default function Index({ active = true }: { active?: boolean }) {
       sortDecksByRecency(
         decks.filter((deck) => {
           if (deckFilter === "mine" && !deck.createdByMe) return false;
+          if (deckFilter === "not-mine" && deck.createdByMe) return false;
           return (
             normalizedDeckSearch.length === 0 ||
             deck.title.toLowerCase().includes(normalizedDeckSearch)
@@ -879,7 +852,8 @@ export default function Index({ active = true }: { active?: boolean }) {
 
   const setDeckFilter = useCallback(
     (value: string) => {
-      const nextFilter = value === "mine" ? "mine" : "all";
+      const nextFilter: DeckFilter =
+        value === "mine" || value === "not-mine" ? value : "all";
       deckFilterWasSelectedRef.current = true;
       setStoredDeckFilter(nextFilter);
       writeStoredDeckFilter(nextFilter);
@@ -888,6 +862,8 @@ export default function Index({ active = true }: { active?: boolean }) {
           const next = new URLSearchParams(prev);
           if (nextFilter === "mine") {
             next.set("createdBy", "me");
+          } else if (nextFilter === "not-mine") {
+            next.set("createdBy", "not-me");
           } else {
             next.delete("createdBy");
           }
@@ -2372,23 +2348,25 @@ export default function Index({ active = true }: { active?: boolean }) {
     deckCount: decks.length,
   });
   const hasDecks = viewState === "decks";
+  useEffect(() => {
+    if (viewState === "loading") return;
+    if (!hasDecks) {
+      setHomeSection("templates");
+      homeLibraryTabWasSelectedRef.current = false;
+      return;
+    }
+    if (homeLibraryTabWasSelectedRef.current) return;
+
+    setHomeSection("recent");
+    homeLibraryTabWasSelectedRef.current = true;
+  }, [hasDecks, viewState]);
   const homeHeaderActions = useMemo(
     () => (
-      <HomeHeaderActions
-        search={
-          hasDecks ? (
-            <DeckSearchInput
-              value={deckSearch}
-              onChange={setDeckSearch}
-              className="w-full"
-            />
-          ) : null
-        }
-      >
+      <HomeHeaderActions>
         <ImportDeckButton controller={deckImport} />
       </HomeHeaderActions>
     ),
-    [deckImport, deckSearch, hasDecks, setDeckSearch],
+    [deckImport],
   );
   if (isStartingNewDeck) {
     return (
@@ -2423,13 +2401,6 @@ export default function Index({ active = true }: { active?: boolean }) {
                 <IconMenu2 className="size-4" aria-hidden="true" />
               </button>
             ) : null}
-            {hasDecks ? (
-              <DeckSearchInput
-                value={deckSearch}
-                onChange={setDeckSearch}
-                className="slides-home-mobile-search min-w-0 flex-1"
-              />
-            ) : null}
             <div className="slides-home-mobile-import">
               <ImportDeckButton controller={deckImport} />
             </div>
@@ -2613,11 +2584,15 @@ export default function Index({ active = true }: { active?: boolean }) {
         </div>
       ) : null}
       <ClientOnly>
-        <PromptHomeLibrary
-          value={homeSection}
+        <SlidesHomeLibrary
+          recentVisible={hasDecks}
+          value={
+            hasDecks && !homeLibraryTabWasSelectedRef.current
+              ? "recent"
+              : homeSection
+          }
           onValueChange={(value) => {
             homeLibraryTabWasSelectedRef.current = true;
-            writeStoredHomeLibraryTab(value);
             setHomeSection(value);
           }}
           labels={{
@@ -2632,6 +2607,15 @@ export default function Index({ active = true }: { active?: boolean }) {
               </Link>
             </Button>
           }
+          search={
+            hasDecks ? (
+              <DeckSearchInput
+                value={deckSearch}
+                onChange={setDeckSearch}
+                className="w-full sm:w-64 sm:shrink-0"
+              />
+            ) : null
+          }
           recentActions={
             hasDecks ? (
               <DeckFilterMenu value={deckFilter} onChange={setDeckFilter} />
@@ -2639,28 +2623,35 @@ export default function Index({ active = true }: { active?: boolean }) {
           }
           templates={<DeckTemplateLibrary enabled={isHome} />}
           recent={
-            <div className="agent-template-library-grid">
-              {visibleDecks.map((deck) => (
-                <DeckCard
-                  key={deck.id}
-                  deck={deck}
-                  onDelete={(id) => setDeckToDelete(id)}
-                  onRename={handleRename}
-                  onDuplicate={handleDuplicate}
-                  onToggleStar={handleToggleStar}
-                  isWorkspaceDefault={workspaceReferenceDeck?.id === deck.id}
-                  canSetWorkspaceDefault={canManageWorkspaceDefaults}
-                  onSetWorkspaceDefault={handleSetWorkspaceDefaultDeck}
-                />
-              ))}
-              {visibleDecks.length === 0 && (
-                <div className="rounded-xl bg-card p-6 text-sm text-muted-foreground">
-                  {normalizedDeckSearch
-                    ? t("home.noDecksMatchSearch")
-                    : t("home.noMineDecks")}
-                </div>
-              )}
-            </div>
+            viewState === "loading" ? (
+              <DeckListLoadingSkeleton />
+            ) : viewState === "error" ? null : (
+              <div className="agent-template-library-grid">
+                {visibleDecks.map((deck) => (
+                  <DeckCard
+                    key={deck.id}
+                    deck={deck}
+                    onDelete={(id) => setDeckToDelete(id)}
+                    onRename={handleRename}
+                    onDuplicate={handleDuplicate}
+                    onToggleStar={handleToggleStar}
+                    isWorkspaceDefault={workspaceReferenceDeck?.id === deck.id}
+                    canSetWorkspaceDefault={canManageWorkspaceDefaults}
+                    onSetWorkspaceDefault={handleSetWorkspaceDefaultDeck}
+                  />
+                ))}
+                {visibleDecks.length === 0 &&
+                  (normalizedDeckSearch ? (
+                    <div className="rounded-xl bg-card p-6 text-sm text-muted-foreground">
+                      {t("home.noDecksMatchSearch")}
+                    </div>
+                  ) : (
+                    <div className="rounded-xl bg-card p-6 text-sm text-muted-foreground">
+                      {t("home.noDecksMatchFilter")}
+                    </div>
+                  ))}
+              </div>
+            )
           }
         />
       </ClientOnly>
@@ -2827,6 +2818,29 @@ export default function Index({ active = true }: { active?: boolean }) {
   );
 }
 
+function DeckListLoadingSkeleton() {
+  return (
+    <div className="agent-template-library-grid" aria-busy="true">
+      {Array.from({ length: 8 }, (_, index) => (
+        <div
+          key={index}
+          className="agent-template-library-card group relative min-w-0"
+          aria-hidden="true"
+        >
+          <div className="agent-template-library-primary overflow-hidden rounded-xl border border-border bg-card">
+            <div className="agent-template-library-preview bg-muted/30">
+              <Skeleton className="size-full rounded-none" />
+            </div>
+            <div className="agent-template-library-caption">
+              <Skeleton className="h-4 w-3/4" />
+            </div>
+          </div>
+        </div>
+      ))}
+    </div>
+  );
+}
+
 function DeckSearchInput({
   value,
   onChange,
@@ -2850,7 +2864,7 @@ function DeckSearchInput({
         placeholder={t("root.searchDecks")}
         aria-label={t("root.searchDecks")}
         data-home-search="true"
-        className="h-8 pe-3 ps-9"
+        className="h-9 pe-3 ps-9"
       />
     </div>
   );

package/corpus/templates/slides/changelog/2026-10-01-filter-decks-by-owner.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-10-01
+---
+
+Filter decks by owner with an option to view items shared with me.

package/corpus/templates/slides/changelog/2026-10-02-hide-recent-until-decks-available.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-10-02
+---
+
+Recent appears when you have accessible decks, and shared decks are shown when you have none of your own.

package/corpus/templates/slides/changelog/2026-10-05-the-recent-tab-shows-loading-placeholders-until-your-decks-a.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-10-05
+---
+
+The Recent tab shows loading placeholders until your decks are ready.

package/corpus/templates/slides/package.json

@@ -17,6 +17,7 @@
   "dependencies": {
     "@agent-native/core": "workspace:*",
     "@agent-native/creative-context": "workspace:*",
+    "@agent-native/otel": "workspace:*",
     "@agent-native/toolkit": "workspace:*",
     "@ai-sdk/openai": "^4.0.51",
     "@dnd-kit/core": "^6.3.1",

package/corpus/templates/slides/server/handlers/request-auth-context.ts

@@ -2,6 +2,7 @@ import { getOrgContext } from "@agent-native/core/org";
 import {
   getMcpOAuthBearerSession,
   getSession,
+  isCredentialMembershipUnavailable,
   runWithRequestContext,
 } from "@agent-native/core/server";
 import type { H3Event } from "h3";
@@ -47,6 +48,13 @@ export async function resolveSlidesRequestAuthContext(
       throw new SlidesSessionLookupError(err);
     }
   }
+  // A bearer token that verified but whose organization membership could not
+  // be checked is not an anonymous caller. Answer the retryable 503.
+  if (!session?.email && isCredentialMembershipUnavailable(event)) {
+    throw new SlidesSessionLookupError(
+      new Error("Organization membership could not be verified"),
+    );
+  }
 
   let orgId: string | undefined;
   if (session?.email && !mcpSession?.email) {

package/corpus/templates/slides/server/plugins/auth.ts

@@ -6,7 +6,8 @@ export default createAuthPlugin({
   workspaceAppPublicPaths: ["/"],
   marketing: {
     appName: "Slides",
-    learnMoreUrl: "https://agent-native.com/apps/slides",
+    learnMoreUrl:
+      "https://agent-native.com/apps/slides?utm_source=app&utm_medium=product&utm_content=onboarding-learn-more",
     tagline:
       "Your AI agent builds, edits, and refines presentations alongside you.",
     features: [

package/corpus/templates/slides/server/plugins/otel.ts

@@ -0,0 +1,6 @@
+import { defineNitroPlugin } from "@agent-native/core/server";
+import { startAgentNativeOtel } from "@agent-native/otel";
+
+export default defineNitroPlugin(() => {
+  startAgentNativeOtel();
+});

package/corpus/templates/tasks/.agents/skills/security/SKILL.md

@@ -290,9 +290,16 @@ export default defineEventHandler(async (event) => {
 
 ## Data Scoping
 
-In production, the framework automatically restricts all agent SQL queries to the current user's data using temporary views. This is enforced at the SQL level — the agent cannot bypass it.
+In production, the framework automatically restricts all agent SQL queries to the current user's data using temporary views, and checks every statement before it runs so it can only reach those views.
 
-The `db-query` / `db-exec` tools (and the extension SQL bridge, which shares the same path) reject schema-qualified table references like `public.<table>` — a qualified name resolves to the base table and would skip the temp view. Use bare table names; scoping is applied automatically.
+The `db-query` / `db-exec` / `db-patch` tools (and the extension SQL bridge, which shares the same path) read each statement the way Postgres does and refuse anything that could reach data around the temp views:
+
+- schema- or database-qualified names like `public.<table>`, which resolve to the base table;
+- names that resolve to anything other than the current user's temp views, such as materialized views or tables the scoping does not cover;
+- app-defined SQL or PL/pgSQL functions and operators, whose bodies read tables without the views;
+- built-ins that run SQL text, change session settings, or reach outside the database (`query_to_xml`, `set_config`, `dblink`, most `pg_*` functions).
+
+`db-query` runs in a read-only transaction, and an `INSERT` must list its columns when the table has access-control columns. Use bare table names and plain expressions; scoping is applied automatically. When the agent needs data the views do not expose, add an app action with its own access checks.
 
 ### Per-User Scoping (`owner_email`)
 

package/corpus/templates/tasks/.agents/skills/storing-data/SKILL.md

@@ -75,10 +75,11 @@ state their PostgreSQL types directly.
 
 Member offboarding and email changes refuse to run while any column named
 `email`, `*_email`, `*scope_id`, `created_by`, `updated_by`, `invited_by`,
-`owner`, `principal_id`, `session_id`, or `user_id` has no policy. `owner_email`
-and `createSharesTable()` tables are handled for you. Declare every other one,
-including columns that are not member identities, from the app's database
-plugin graph (Clips does it in `server/db/index.ts`):
+`owner`, `principal_id`, `session_id`, or `user_id` has no policy.
+`createSharesTable()` tables are handled for you, and undeclared `owner_email`
+columns transfer to the successor, which is right only for owned content.
+Declare every other one, including columns that are not member identities, from
+the app's database plugin graph (Clips does it in `server/db/index.ts`):
 
 ```ts
 import { registerIdentityColumns } from "@agent-native/core/org";
@@ -88,13 +89,17 @@ registerIdentityColumns([
   { table: "space_members", column: "email", emailChange: "rekey", offboard: "delete", orgScope: { column: "space_id", references: { table: "spaces", column: "id", orgColumn: "org_id" } }, reason: "Space membership grants access." },
   // Someone else's address: never rewritten.
   { table: "meeting_participants", column: "email", emailChange: "retain", offboard: "retain", reason: "Attendee address from the calendar provider." },
+  // A credential in an owner_email table: never handed to the successor.
+  { table: "api_keys", column: "owner_email", emailChange: "rekey", offboard: "revoke", reason: "Bearer keys act as their owner." },
 ]);
 ```
 
-Choose `delete` for grants, credentials, and pending tokens; `retain` for
+Choose `delete` for grants, credentials, and pending tokens, or `revoke` (sets
+`revoked_at`) when a reader treats a missing row as "not revoked"; `retain` for
 attribution, history, and third-party addresses; `transfer` only for owned
-data. A table without `org_id` needs `orgScope` or an organization-scoped
-removal leaves its rows alone.
+data. Declare `owner_email` tables that hold credentials or grants, or
+offboarding hands them to the successor. A table without `org_id` needs
+`orgScope` or an organization-scoped removal leaves its rows alone.
 
 | Template     | Tables                                        |
 | ------------ | --------------------------------------------- |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core-corpus",
-  "version": "0.201.0-nightly-20261005153421",
+  "version": "0.201.0",
   "description": "Opt-in source corpus for Agent-Native Core source-search.",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {