@agent-native/core-corpus 0.210.2 → 0.211.0

package/corpus/templates/clips/desktop/src/lib/record-first.ts

@@ -8,16 +8,18 @@ export type VideoStorageStatus =
   | "missing"
   | "unavailable";
 
-/**
- * The local mode a recording actually uses. Recording never waits on
- * storage: until storage reads as connected, a cloud recording is written to
- * Movies/Clips first and uploads once storage connects.
- */
+export function shouldPollVideoStorageStatus(
+  authenticated: boolean,
+  status: VideoStorageStatus,
+): boolean {
+  return authenticated && status !== "configured";
+}
+
+/** Storage status never enables local recording when the configured mode is off. */
 export function effectiveLocalRecordingMode(
   mode: LocalRecordingMode,
-  storageStatus: VideoStorageStatus,
 ): LocalRecordingMode {
-  return mode === "off" && storageStatus !== "configured" ? "composed" : mode;
+  return mode;
 }
 
 /** A recording saved to disk because storage was not connected yet. */
@@ -32,31 +34,6 @@ export interface RecordFirstFile extends LocalExportedFile {
   stagedRecordingId?: string;
 }
 
-/**
- * What one file of a capture holds. A separate desktop file carries the
- * screen and the take's audio but no camera; a separate camera file holds
- * only camera video.
- */
-export function recordFirstMediaFlags(
-  role: string,
-  take: { hasAudio: boolean; hasCamera: boolean },
-): { hasAudio: boolean; hasCamera: boolean } {
-  if (role === "desktop") return { hasAudio: take.hasAudio, hasCamera: false };
-  if (role === "camera") return { hasAudio: false, hasCamera: true };
-  return take;
-}
-
-/**
- * The files a stopped record-first capture leaves to upload: its composed
- * file, or every file it wrote when there is none.
- */
-export function recordFirstFilesToQueue<T extends { role: string }>(
-  files: readonly T[],
-): T[] {
-  const composed = files.find((file) => file.role === "composed");
-  return composed ? [composed] : [...files];
-}
-
 /**
  * Per server and account, so a file only ever uploads to who recorded it. A
  * file saved while signed out (an expired session) goes under "unclaimed"

package/corpus/templates/clips/desktop/src/lib/recording-recovery.ts

@@ -1,5 +1,33 @@
 import type { PendingBrowserRecordingUpload } from "./recorder";
 
+export type RecordFirstFileUploadError = {
+  message: string;
+  missing: boolean;
+};
+
+export type LocalRecoveryFile = {
+  path: string;
+  fileName: string;
+  savedAt: string;
+  error?: string;
+  missing?: boolean;
+};
+
+export function mapRecordFirstFilesForRecovery(
+  files: readonly Pick<LocalRecoveryFile, "path" | "fileName" | "savedAt">[],
+  errors: Record<string, RecordFirstFileUploadError>,
+): LocalRecoveryFile[] {
+  return files.map((file) => {
+    const failure = errors[file.path];
+    return {
+      path: file.path,
+      fileName: file.fileName,
+      savedAt: file.savedAt,
+      ...(failure ? { error: failure.message, missing: failure.missing } : {}),
+    };
+  });
+}
+
 export interface PendingNativeUpload {
   kind: "native";
   recordingId: string;
@@ -37,8 +65,9 @@ export function recordingRecoveryKey(upload: PendingDesktopUpload): string {
 export function shouldShowRecordingRecoveryBanner(
   view: string,
   authenticated: boolean,
+  hasLocalFiles = false,
 ): boolean {
-  return authenticated && view === "recorder";
+  return view === "recorder" && (authenticated || hasLocalFiles);
 }
 
 export function classifyRecordingRecoveryError(

package/corpus/templates/clips/server/lib/agent-frame-request.ts

@@ -21,6 +21,7 @@ import {
   REDACTION_HOLD_MESSAGE,
 } from "./pending-redactions.js";
 import {
+  applyAgentJsonHeaders,
   CLIPS_AGENT_ACCESS_PARAM,
   describeAgentAccessFailure,
   loadPublicAgentAccess,
@@ -37,8 +38,10 @@ export function sendFrameJson<T>(
   headers: Record<string, string> = {},
 ): T {
   setResponseStatus(event, status);
-  setResponseHeader(event, "Content-Type", "application/json; charset=utf-8");
-  setResponseHeader(event, "X-Content-Type-Options", "nosniff");
+  // These paths end in .jpg, so an error without its own Cache-Control gets
+  // the CDN's 4-hour image default, and a client could keep a "still
+  // processing" answer after the clip is ready.
+  applyAgentJsonHeaders(event);
   for (const [name, value] of Object.entries(headers)) {
     setResponseHeader(event, name, value);
   }

package/corpus/templates/clips/server/lib/recording-upload-ticket.ts

@@ -27,6 +27,8 @@ export interface RecordingUploadTicket extends Record<string, unknown> {
   tokenHash: string;
   reservedAt: number;
   expiresAt: number;
+  /** The creator's auth user id, which a hosted-storage reservation is held under. */
+  authUserId?: string;
 }
 
 interface RecordingUploadTickets extends Record<string, unknown> {
@@ -37,6 +39,7 @@ export interface RecordingUploadTicketOwner {
   recordingId: string;
   ownerEmail: string;
   orgId: string;
+  authUserId?: string;
 }
 
 function tokenHash(token: string): string {
@@ -180,6 +183,7 @@ async function compareAndSwapTickets(
 export async function createRecordingUploadTicket(
   ownerEmail: string,
   recordingId: string,
+  authUserId?: string,
 ): Promise<RecordingUploadTicket & { token: string }> {
   const token = `${TOKEN_PREFIX}${encodeOwner(ownerEmail)}.${crypto.randomBytes(32).toString("base64url")}`;
   const reservedAt = Date.now();
@@ -188,6 +192,7 @@ export async function createRecordingUploadTicket(
     tokenHash: tokenHash(token),
     reservedAt,
     expiresAt: reservedAt + RECORDING_UPLOAD_TICKET_TTL_MS,
+    ...(authUserId ? { authUserId } : {}),
   };
 
   for (let attempt = 0; attempt < MAX_CAS_ATTEMPTS; attempt += 1) {
@@ -296,5 +301,8 @@ export async function requireRecordingUploadTicketOwner(
     recordingId,
     ownerEmail: verified.ownerEmail,
     orgId: recording.organizationId,
+    ...(typeof verified.ticket.authUserId === "string"
+      ? { authUserId: verified.ticket.authUserId }
+      : {}),
   };
 }

package/corpus/templates/clips/server/routes/api/uploads/[recordingId]/chunk.post.ts

@@ -510,6 +510,7 @@ export async function handleRecordingChunk(
     recordingId?: string;
     ownerEmail?: string;
     orgId?: string;
+    authUserId?: string;
   },
 ) {
   const recordingId =
@@ -579,6 +580,7 @@ export async function handleRecordingChunk(
   if (override?.ownerEmail) {
     ownerEmail = override.ownerEmail;
     orgId = override.orgId;
+    authUserId = override.authUserId;
   } else {
     try {
       const context = await getEventOwnerContext(event);

package/corpus/templates/content/.agents/skills/actions/references/action-fields.md

@@ -95,9 +95,9 @@ MCP clients see no `outputSchema` by default. Set `mcpOutputSchema: true` (requi
 
 `authorize` decides whether the caller may run the action at all. It wraps
 `run`, so it holds at **all six dispatch sites** — agent tool, HTTP, frontend
-hook, MCP, A2A, CLI — unlike `needsApproval`, which is honoured only in the
-agent loop. Use `authorize` for "not everyone may do this"; use `needsApproval`
-to ask a human to bless one call a permitted caller is already allowed to make.
+hook, MCP, A2A, CLI. Use `authorize` for "not everyone may do this"; use
+`needsApproval` to ask a human to bless one call a permitted caller is already
+allowed to make.
 
 ```ts
 import { coachAccess } from "../lib/access.js"; // defineAppRoles(...)
@@ -140,4 +140,6 @@ export default defineAction({
 
 When the gate is truthy and the call isn't yet approved, the loop emits an `approval_required` event and **stops the turn — `run()` never executes**. A predicate gates conditionally (e.g. only external recipients) and **fails closed**: a throw is treated as "approval required". It receives its own copy of the prepared snapshot of the validated arguments, defaults applied, and the approval binds to the snapshot's hash, so an approved call runs only with the arguments that were approved (a Date binds by its time). The human approves via the chat UI's Approve affordance, which re-issues the turn with the call's `approvalKey`, and only then does the action run.
 
+Approval is given in the app, so HTTP never grants it. The HTTP action route and the generated Workers entry run a gated call only for the proven app UI (a frontend call from the signed-in user, same origin, holding the short-lived UI capability; `isProvenUiRequest`, the proof `uiOnly` uses) or the app's MCP directory widget. Every other HTTP caller (bearer or API key, MCP OAuth token, org service token, A2A, extension iframe, mobile app) gets `409 approval_required`, and a service identity can never approve. The shared client presents the capability with every write from a signed-in session (minted once per user, reused for nine minutes, never for reads or public pages), so a gated button works on its first request. A call without proof gets `403 ui_capability_required`; the client then re-mints and retries once, which is only the fallback for an expired or rejected capability. Every surface evaluates the gate through `preparedCallNeedsApproval`, so a throwing predicate asks there too. A caller that must run unattended needs a different action, never a bypass of the gate.
+
 **Keep approvals rare** — the default is off and almost every action should leave it off. The canonical example is Mail's `send-email` (`needsApproval: true`). See the `security` skill and the Human Approval doc.

package/corpus/templates/content/CHANGELOG.md

@@ -5,6 +5,16 @@ time from the command menu (Cmd+K → "What's new").
 
 ## 2026-10-19
 
+### Improved
+
+- Database views can filter one property more than once, number filters add ≥ and ≤, and filter chips name their operator, like "Status: is not done".
+
+### Fixed
+
+- Edits made from a block's menu or a table's row and column menus, such as deleting a table, adding a row or turning off the header row, are now saved instead of coming back after a reload
+- Starting a comment puts the cursor in the comment box, ready to type.
+- Table row and column options now appear for the row or column under the pointer, Escape selects the cell before leaving the editor, wide tables keep their add-column control on screen on phones, and a tap near a table's edge on a touch screen edits the cell there instead of adding a row or column
+
 ### Changed
 
 - Apps no longer keep server functions and databases warm by default; set `AGENT_NATIVE_ENABLE_KEEP_WARM=1` to opt in.
@@ -32,6 +42,8 @@ time from the command menu (Cmd+K → "What's new").
 
 ### Fixed
 
+- Opening a page in a new tab while another tab is still saving no longer sends a second save or files a copy to History.
+- Typing steadily in one tab no longer makes another open tab show "This page changed elsewhere" after its edits saved.
 - Reopening a page after someone else renamed it no longer adds a copy of your edits to Version History
 
 ## 2026-10-12

package/corpus/templates/content/actions/_content-database-personal-view.ts

@@ -4,7 +4,10 @@ import { and, eq, isNull } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
-import { CONTENT_DATABASE_PERSONAL_VIEW_OVERRIDES_VERSION } from "../shared/api.js";
+import {
+  CONTENT_DATABASE_FILTER_OPERATORS,
+  CONTENT_DATABASE_PERSONAL_VIEW_OVERRIDES_VERSION,
+} from "../shared/api.js";
 import { resolveContentSpaceAccess } from "./_content-space-access.js";
 import { filesParentPropertyId } from "./_files-system-properties.js";
 
@@ -23,20 +26,7 @@ export const sortSchema = z.object({
 export const filterSchema = z.object({
   key: z.string(),
   label: z.string(),
-  operator: z.enum([
-    "contains",
-    "equals",
-    "does_not_equal",
-    "greater_than",
-    "less_than",
-    "before",
-    "after",
-    "between",
-    "is_checked",
-    "is_unchecked",
-    "is_empty",
-    "is_not_empty",
-  ]),
+  operator: z.enum(CONTENT_DATABASE_FILTER_OPERATORS),
   value: z.string(),
   filterGroupId: z.string().optional(),
   parentFilterGroupId: z.string().optional(),

package/corpus/templates/content/actions/_database-navigation.ts

@@ -29,6 +29,7 @@ import type {
   ContentDatabaseNavigationSort,
   ContentDatabasePersonalViewOverrides,
 } from "../shared/api.js";
+import { contentDatabaseFilterOperatorNeedsValue } from "../shared/database-query.js";
 import { favoritesSystemIds } from "./_content-favorites.js";
 import { softDeletedDatabaseDocumentExclusions } from "./_document-discovery-query.js";
 import { parseDatabaseViewConfig } from "./_property-utils.js";
@@ -114,9 +115,8 @@ function selectedFilterValues(value: string) {
 
 function activeNavigationFilter(filter: ContentDatabaseFilter) {
   return (
-    ["is_empty", "is_not_empty", "is_checked", "is_unchecked"].includes(
-      filter.operator,
-    ) || selectedFilterValues(filter.value).length > 0
+    !contentDatabaseFilterOperatorNeedsValue(filter.operator) ||
+    selectedFilterValues(filter.value).length > 0
   );
 }
 

package/corpus/templates/content/actions/_database-utils.ts

@@ -32,14 +32,15 @@ import {
   parseDocumentFavorite,
   parseDocumentHideFromSearch,
 } from "../server/lib/documents.js";
-import type {
-  ContentDatabaseBodyHydration,
-  ContentDatabaseItem,
-  ContentDatabaseMembership,
-  ContentDatabaseResponse,
-  ContentDatabaseTableQuery,
-  ContentSidebarViewOrder,
-  DocumentProperty,
+import {
+  CONTENT_DATABASE_FILTER_OPERATORS,
+  type ContentDatabaseBodyHydration,
+  type ContentDatabaseItem,
+  type ContentDatabaseMembership,
+  type ContentDatabaseResponse,
+  type ContentDatabaseTableQuery,
+  type ContentSidebarViewOrder,
+  type DocumentProperty,
 } from "../shared/api.js";
 import {
   applyContentDatabaseTableQuery,
@@ -147,20 +148,7 @@ export const contentDatabaseTableQuerySchema = z
         z.object({
           key: z.string(),
           label: z.string(),
-          operator: z.enum([
-            "contains",
-            "equals",
-            "does_not_equal",
-            "greater_than",
-            "less_than",
-            "before",
-            "after",
-            "between",
-            "is_checked",
-            "is_unchecked",
-            "is_empty",
-            "is_not_empty",
-          ]),
+          operator: z.enum(CONTENT_DATABASE_FILTER_OPERATORS),
           value: z.string(),
           filterGroupId: z.string().optional(),
           parentFilterGroupId: z.string().optional(),

package/corpus/templates/content/actions/_database-view-setup.ts

@@ -5,12 +5,13 @@ import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
 import { syncPrivateViewIconReferences } from "../server/lib/private-icon-references.js";
-import type {
-  ContentDatabaseFilter,
-  ContentDatabaseFilterOperator,
-  ContentDatabaseView,
-  ContentDatabaseViewConfig,
+import {
+  CONTENT_DATABASE_FILTER_OPERATORS,
+  type ContentDatabaseFilter,
+  type ContentDatabaseView,
+  type ContentDatabaseViewConfig,
 } from "../shared/api.js";
+import { contentDatabaseFilterOperatorsForType } from "../shared/database-query.js";
 import type { DocumentPropertyType } from "../shared/properties.js";
 import {
   runDatabaseSetupMutation,
@@ -31,20 +32,7 @@ const filterSchema = z
   .object({
     key: z.string().trim().min(1).max(200),
     label: z.string().max(500),
-    operator: z.enum([
-      "contains",
-      "equals",
-      "does_not_equal",
-      "greater_than",
-      "less_than",
-      "before",
-      "after",
-      "between",
-      "is_checked",
-      "is_unchecked",
-      "is_empty",
-      "is_not_empty",
-    ]),
+    operator: z.enum(CONTENT_DATABASE_FILTER_OPERATORS),
     value: z.string(),
     filterGroupId: z.string().max(200).optional(),
     parentFilterGroupId: z.string().max(200).optional(),
@@ -147,59 +135,6 @@ export type UpdateContentDatabaseViewAgentInput = z.infer<
   typeof updateContentDatabaseViewAgentSchema
 >;
 
-const operatorsByType: Partial<
-  Record<DocumentPropertyType, readonly ContentDatabaseFilterOperator[]>
-> = {
-  checkbox: ["is_checked", "is_unchecked"],
-  select: ["contains", "does_not_equal", "is_empty", "is_not_empty"],
-  status: ["contains", "does_not_equal", "is_empty", "is_not_empty"],
-  multi_select: ["contains", "does_not_equal", "is_empty", "is_not_empty"],
-  person: ["contains", "does_not_equal", "is_empty", "is_not_empty"],
-  number: [
-    "equals",
-    "does_not_equal",
-    "greater_than",
-    "less_than",
-    "is_empty",
-    "is_not_empty",
-  ],
-  date: [
-    "equals",
-    "does_not_equal",
-    "before",
-    "after",
-    "between",
-    "is_empty",
-    "is_not_empty",
-  ],
-  created_time: [
-    "equals",
-    "does_not_equal",
-    "before",
-    "after",
-    "between",
-    "is_empty",
-    "is_not_empty",
-  ],
-  last_edited_time: [
-    "equals",
-    "does_not_equal",
-    "before",
-    "after",
-    "between",
-    "is_empty",
-    "is_not_empty",
-  ],
-};
-
-const defaultOperators: readonly ContentDatabaseFilterOperator[] = [
-  "contains",
-  "equals",
-  "does_not_equal",
-  "is_empty",
-  "is_not_empty",
-];
-
 function uniqueReferences(values: readonly string[], field: string) {
   if (new Set(values).size !== values.length) {
     setupError(
@@ -228,9 +163,10 @@ function validateTablePatch(
     values: readonly string[] | undefined,
     allowed: ReadonlySet<string>,
     field: string,
+    { unique = true }: { unique?: boolean } = {},
   ) => {
     if (!values) return;
-    uniqueReferences(values, field);
+    if (unique) uniqueReferences(values, field);
     const invalid = values.find((value) => !allowed.has(value));
     if (invalid) {
       setupError(
@@ -248,10 +184,13 @@ function validateTablePatch(
     columnIds,
     "sorts",
   );
+  // A view may filter one property more than once ("Rank is not empty" and
+  // "Rank ≤ 25"), so filter keys only need to exist.
   assertReferences(
     patch.filters?.map((filter) => filter.key),
     columnIds,
     "filters",
+    { unique: false },
   );
   assertReferences(
     patch.columnWidths ? Object.keys(patch.columnWidths) : undefined,
@@ -277,8 +216,9 @@ function validateTablePatch(
   }
   for (const filter of patch.filters ?? []) {
     const type = filter.key === "name" ? "text" : typeById.get(filter.key)!;
-    const allowed = operatorsByType[type] ?? defaultOperators;
-    if (!allowed.includes(filter.operator)) {
+    if (
+      !contentDatabaseFilterOperatorsForType(type).includes(filter.operator)
+    ) {
       setupError(
         "INVALID_VIEW_REFERENCE",
         `Filter operator \"${filter.operator}\" is not valid for property \"${filter.key}\".`,
@@ -589,5 +529,5 @@ export function filterIsCompatible(
   filter: ContentDatabaseFilter,
   type: DocumentPropertyType,
 ) {
-  return (operatorsByType[type] ?? defaultOperators).includes(filter.operator);
+  return contentDatabaseFilterOperatorsForType(type).includes(filter.operator);
 }