@agent-native/core-corpus 0.212.1 → 0.213.1

package/corpus/templates/content/server/lib/github-source-client.ts

@@ -1,3 +1,8 @@
+import {
+  ActionContractError,
+  isAgentConnectionRequiredError,
+} from "@agent-native/core/action";
+
 import type { GitHubSourceProblemCode } from "../../shared/github-source.js";
 import { executeGitHubSourceRequest } from "./provider-api.js";
 
@@ -201,7 +206,19 @@ async function githubGet(
     if (target.signal && (target.signal.aborted || endedBySignal(error))) {
       throw new GitHubSourceDeadlineError();
     }
-    throw error;
+    // A missing connection is the caller's to explain. Anything else the
+    // provider client throws, like a dropped connection, means GitHub never
+    // answered.
+    if (
+      isAgentConnectionRequiredError(error) ||
+      error instanceof ActionContractError
+    ) {
+      throw error;
+    }
+    throw Object.assign(
+      new GitHubSourceError("unavailable", "GitHub couldn't be reached."),
+      { cause: error },
+    );
   }
   const result = asRecord(raw);
   const response = asRecord(result.response) as unknown as ProviderResponse;
@@ -301,6 +318,38 @@ async function refineNotFound(
   throw new GitHubSourceError(inside, message, 404);
 }
 
+/** How long the connection check waits for GitHub before giving up. */
+const CONNECTION_CHECK_MS = 5_000;
+
+/**
+ * Whether the person has a GitHub connection Content can read through. It
+ * asks for the rate limit, which reads no repository and costs none of it.
+ * Null means GitHub couldn't be asked, so the caller shouldn't say either way.
+ */
+export async function readGitHubConnected(
+  connectionId?: string | null,
+): Promise<boolean | null> {
+  try {
+    const raw = await executeGitHubSourceRequest({
+      provider: "github",
+      method: "GET",
+      path: "/rate_limit",
+      connectionId: connectionId ?? undefined,
+      signal: AbortSignal.timeout(CONNECTION_CHECK_MS),
+    });
+    const status = asRecord(asRecord(raw).response).status;
+    if (typeof status !== "number") return null;
+    return status !== 401;
+  } catch (error) {
+    if (isAgentConnectionRequiredError(error)) return false;
+    console.warn(
+      "[github-source] connection check failed:",
+      error instanceof Error ? error.message : String(error),
+    );
+    return null;
+  }
+}
+
 /** The branch a repository URL without `/tree/` means. */
 export async function readGitHubDefaultBranch(
   target: GitHubRepositoryTarget,

package/corpus/templates/content/shared/api.ts

@@ -1005,7 +1005,10 @@ export interface ContentGitHubSourceStatus {
   pendingCommitSha: string | null;
   progress: { done: number; total: number } | null;
   files: number;
+  /** Up to 50 of the skipped files, with why each was skipped. */
   skipped: Array<{ path: string; reason: GitHubSourceSkipReason }>;
+  /** How many files were skipped in all. */
+  skippedCount: number;
   /** Images not shown yet because file storage isn't set up. */
   imagesWaiting: number;
   problem: {

package/corpus/templates/content/shared/github-source.ts

@@ -165,6 +165,14 @@ export function githubFolderLabel(location: GitHubFolderLocation): string {
   return `${location.owner}/${location.repo}${folder ? `/${folder}` : ""}`;
 }
 
+/** What people call the folder: its own name, or the repository's at the root. */
+export function githubFolderName(
+  location: Pick<GitHubFolderLocation, "repo" | "path">,
+): string {
+  const folder = normalizeGitHubFolderPath(location.path);
+  return folder ? folder.slice(folder.lastIndexOf("/") + 1) : location.repo;
+}
+
 /** Joins a folder-relative path back onto the folder for its repository path. */
 export function githubRepoPath(folder: string, relativePath: string): string {
   const base = normalizeGitHubFolderPath(folder);
@@ -176,6 +184,8 @@ export type GitHubSourceSkipReason = "mdx" | "too-large" | "not-text";
 /**
  * What went wrong reading a linked folder, in terms a status line can explain
  * and fix: reconnect, regain access, restore the branch or folder, or wait.
+ * `unavailable` is GitHub not answering; `sync_failed` is a failure in
+ * Content itself, like a database error.
  */
 export type GitHubSourceProblemCode =
   | "connection"
@@ -186,6 +196,7 @@ export type GitHubSourceProblemCode =
   | "rate_limited"
   | "too_large"
   | "unavailable"
+  | "sync_failed"
   | "storage_unavailable";
 
 export type GitHubSourceFileClass =
@@ -229,6 +240,31 @@ export type GitHubFieldType = Extract<
   "text" | "number" | "checkbox" | "date" | "url" | "select" | "multi_select"
 >;
 
+/** What a folder would become if linked, from a dry run of the link. */
+export interface GitHubFolderPreview {
+  location: GitHubFolderLocation;
+  label: string;
+  folderUrl: string;
+  commitSha: string;
+  markdownFiles: number;
+  skipped: Array<{ path: string; reason: GitHubSourceSkipReason }>;
+  /** Columns the frontmatter would become, with the type each would get. */
+  fields: Array<{ key: string; type: GitHubFieldType; examples: string[] }>;
+  sample: Array<{ path: string; title: string }>;
+  /** How many files the field types were read from. */
+  sampledFiles: number;
+  /** Image files in the folder, which pages show from Content's file storage. */
+  images: number;
+  /** Whether file storage is set up to hold those images. */
+  storageReady: boolean;
+}
+
+/** Why a collection can't be linked: it has pages, a source, or a system role. */
+export type GitHubLinkBlockedReason =
+  | "collection-has-rows"
+  | "already-linked"
+  | "system-collection";
+
 const SELECT_KEY_RE =
   /^(status|state|stage|category|type|kind|section|level|priority|visibility|difficulty|audience)$/i;
 const DATE_RE =
@@ -299,6 +335,38 @@ export function inferGitHubFieldType(
   return "text";
 }
 
+const GITHUB_EXAMPLE_LENGTH = 80;
+
+/**
+ * Up to three example values for a column, as the link preview shows them:
+ * blank values and empty lists are skipped, and a long value ends in "…".
+ */
+export function githubFieldExamples(values: readonly unknown[]): string[] {
+  const examples: string[] = [];
+  for (const value of values) {
+    if (examples.length === 3) break;
+    if (value === null || value === undefined) continue;
+    const text = (
+      typeof value === "string"
+        ? value
+        : Array.isArray(value)
+          ? value
+              .map((entry) =>
+                typeof entry === "string" ? entry : JSON.stringify(entry),
+              )
+              .join(", ")
+          : JSON.stringify(value)
+    ).trim();
+    if (!text) continue;
+    examples.push(
+      text.length > GITHUB_EXAMPLE_LENGTH
+        ? `${text.slice(0, GITHUB_EXAMPLE_LENGTH - 1).trimEnd()}…`
+        : text,
+    );
+  }
+  return examples;
+}
+
 /** Whether a frontmatter value can be stored in a column of this type unchanged. */
 export function fitsGitHubFieldType(
   type: GitHubFieldType,

package/corpus/templates/design/CHANGELOG.md

@@ -7,6 +7,7 @@ from the command menu (Cmd+K → "What's new") or from Settings.
 
 ### Fixed
 
+- Journey canvases accept partial Analytics samples when replay counts are unknown
 - Design generation now counts file renames and type changes as saved output.
 - Design reports uncertain generation outcomes clearly and confirms completed file deletions
 - Generation offers a retry when a completed run saved no design files

package/corpus/templates/design/actions/connect-assets-mcp.ts

@@ -1,5 +1,4 @@
 import { defineAction } from "@agent-native/core/action";
-import { getDbExec } from "@agent-native/core/db";
 import { fetchOrgApps } from "@agent-native/core/mcp";
 import {
   addFirstPartyRemoteServer,
@@ -7,7 +6,10 @@ import {
   listRemoteServers,
   removeRemoteServer,
 } from "@agent-native/core/mcp-client";
-import { refreshMcpManagerForPrincipal } from "@agent-native/core/server";
+import {
+  readOrgMemberRole,
+  refreshMcpManagerForPrincipal,
+} from "@agent-native/core/server";
 import {
   getRequestOrgId,
   getRequestUserEmail,
@@ -41,13 +43,7 @@ async function listAssetsServers(orgId: string) {
 }
 
 async function assertCanManageOrgMcp(orgId: string, userEmail: string) {
-  const result = await getDbExec().execute({
-    sql: `SELECT role FROM org_members WHERE org_id = $1 AND LOWER(email) = $2 LIMIT 1`,
-    args: [orgId, userEmail.toLowerCase()],
-  });
-  const role = String(
-    (result.rows[0] as { role?: unknown } | undefined)?.role,
-  ).toLowerCase();
+  const role = await readOrgMemberRole(orgId, userEmail);
   if (role !== "owner" && role !== "admin") {
     throw new Error(
       "Only organization owners and admins can connect org-scoped MCP servers.",

package/corpus/templates/design/changelog/2026-10-21-journey-canvases-accept-partial-analytics-samples-when-repla.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-10-21
+---
+
+Journey canvases accept partial Analytics samples when replay counts are unknown

package/corpus/templates/design/shared/journey-canvas.ts

@@ -147,7 +147,7 @@ export const journeyExampleSchema = z.object({
     .describe(
       "SHA-256 hash used only to compare anonymous identity when available.",
     ),
-  recordingId: z.string().max(256).nullable(),
+  recordingId: z.string().max(256).nullable().optional(),
   ts: isoTimestamp,
   offsetMs: z.number().min(0).nullable(),
   viewport: z.object({ width: pixels, height: pixels }).nullable(),
@@ -298,7 +298,7 @@ export const journeyTreeSchema = z
       .describe("Per-app root denominators for separate app-band layouts."),
     coverage: z.object({
       sessionsWithEvents: count,
-      sessionsWithReplay: count,
+      sessionsWithReplay: count.nullable(),
       truncated: z.boolean(),
     }),
     nodes: z.array(journeyNodeSchema).min(1).max(MAX_JOURNEY_NODES),
@@ -1406,7 +1406,7 @@ export interface PlannedScreen {
   provenance?: {
     eventAt: string;
     dateLabel: string;
-    recordingId: string | null;
+    recordingId?: string | null;
     recordingStartedAt?: string;
     offsetMs: number | null;
     offsetIsObserved: boolean;
@@ -2315,7 +2315,9 @@ export function planJourneyCanvas(
                 candidate.caption.evidenceAt !== undefined,
               messages,
             ),
-            recordingId: candidateExample.recordingId,
+            ...(candidateExample.recordingId !== undefined
+              ? { recordingId: candidateExample.recordingId }
+              : {}),
             ...(candidate.recordingStartedAt
               ? {
                   recordingStartedAt: utcTimestamp(

package/corpus/templates/dispatch/.agents/skills/a2a-protocol/SKILL.md

@@ -144,14 +144,17 @@ The framework supports two credential scopes:
 | Secret | Scope | How it is set |
 | --- | --- | --- |
 | `A2A_SECRET` | User identity across a deployment | env var, **never auto-generated** |
-| org `a2a_secret` | Organization principal only | auto-generated on org creation; Team page UI |
+| org `a2a_secret` | Organization principal, with optional current-member delegation | auto-generated on org creation; Team page UI |
 
-An org-secret JWT proves only that the caller holds the organization's shared
-credential. Its `sub` or email claims are ignored; do not use it to read
+An ordinary org-secret JWT proves only that the caller holds the organization's
+shared credential. Its `sub` or email claims are ignored; do not use it to read
 person-owned data, claim a user's task, invoke a user-scoped action, or carry a
-human approval. Organization-scoped operations can run with this principal.
-Use an `A2A_SECRET`-signed user identity for user-owned operations and
-approval continuations. MCP applies the same distinction.
+human approval. A separate `agent-native-org-member-delegation` assertion may
+carry the identity of any current receiver-org member to a caller holding that
+shared secret, but only when the receiver's owner enables the setting, the org
+secret differs from `A2A_SECRET`, and the audience and short expiry verify. The
+receiver checks the live roster, and delegated org actions are always capped at
+`member`. MCP requests remain organization-scoped.
 
 Organization IDs are local to each app's database. For calls to a peer app,
 bind the token to the trusted `org_domain` and the peer's canonical audience;
@@ -161,16 +164,16 @@ ID. An ID-only token is valid only when both sides intentionally share the same
 local organization ID, such as a credential scoped to one local database.
 
 The org secret is managed at **Team page → A2A secret** (owner only), where it
-can be revealed, copied, regenerated, and pushed to discovered peers. It is a
-fallback for organization-scoped calls, not a fallback user identity.
+can be revealed, copied, regenerated, and pushed to discovered peers. Its
+member-identity delegation setting is owner-only and defaults off.
 
 `A2A_SECRET` is the deploy-level path. `workspace-deploy` refuses a production
 workspace deploy without it and prints the generator command. Peers that must
-trust user identity assertions need the *same* value on both sides. Keep it
-different from every org `a2a_secret`; a shared value cannot distinguish a
-user assertion from an organization credential. An org secret equal to
-`A2A_SECRET`, or a user token signed only with the org secret, is verified as an
-organization principal and reaches the caller as the typed
+trust deployment-secret user assertions need the *same* value on both sides.
+Keep it different from every org `a2a_secret`; a shared value cannot
+distinguish a deployment user assertion from an organization credential. An
+org secret equal to `A2A_SECRET` is verified as an organization principal and
+reaches the caller as the typed
 `permanent_precondition` error ("no verified user"): an admin/ops fix, never a
 retry. Mismatched `A2A_SECRET` values are rejected with `401`
 (`a2a_auth_rejected`).

package/corpus/templates/dispatch/CHANGELOG.md

@@ -5,6 +5,10 @@ time from the command menu (Cmd+K → "What's new").
 
 ## 2026-10-21
 
+### Improved
+
+- Customer AI credit questions route to account health instead of workspace spend metrics.
+
 ### Fixed
 
 - Workspace apps load reliably with organization sign-in, and failures identify the request and status

package/corpus/templates/dispatch/changelog/2026-10-21-customer-ai-credit-questions-route-to-account-health-instead.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-10-21
+---
+
+Customer AI credit questions route to account health instead of workspace spend metrics.

package/corpus/templates/factory/server/lib/require-workspace-member.ts

@@ -1,12 +1,10 @@
 import type { ActionRunContext } from "@agent-native/core/action";
-import { orgMembers, resolveOrgIdForEmail } from "@agent-native/core/org";
+import { resolveOrgIdForEmail } from "@agent-native/core/org";
+import { readOrgMemberRole } from "@agent-native/core/server";
 import {
   getRequestOrgId,
   getRequestUserEmail,
 } from "@agent-native/core/server/request-context";
-import { and, eq, sql } from "drizzle-orm";
-
-import { getDb } from "../db/index.js";
 
 export type WorkspaceMemberIdentity = {
   userEmail: string;
@@ -38,18 +36,8 @@ export async function requireWorkspaceMember(
   const orgId = requestOrgId || (await resolveOrgIdForEmail(userEmail));
   if (!orgId) throw new Error("Active workspace organization required");
 
-  const rows = await getDb()
-    .select({ role: orgMembers.role })
-    .from(orgMembers)
-    .where(
-      and(
-        eq(orgMembers.orgId, orgId),
-        eq(sql`lower(${orgMembers.email})`, userEmail),
-      ),
-    )
-    .limit(1);
-
-  if (!rows[0]) throw new Error("Workspace membership required");
+  const role = await readOrgMemberRole(orgId, userEmail);
+  if (!role) throw new Error("Workspace membership required");
 
-  return { userEmail, orgId, role: rows[0].role };
+  return { userEmail, orgId, role };
 }

package/corpus/templates/mail/server/lib/queued-drafts.ts

@@ -5,6 +5,7 @@ import {
   getAppProductionUrl,
   getRequestOrgId,
   getRequestUserEmail,
+  readOrgMemberRole,
   withConfiguredAppBasePath,
 } from "@agent-native/core/server";
 import { getUserSetting } from "@agent-native/core/settings";
@@ -107,9 +108,9 @@ export function buildQueuedDraftUrl(id: string): string {
 async function getMembership(
   orgId: string,
   email: string,
-): Promise<{ email: string; role: string } | null> {
+): Promise<{ email: string } | null> {
   const [row] = await getDb()
-    .select({ email: orgMembers.email, role: orgMembers.role })
+    .select({ email: orgMembers.email })
     .from(orgMembers)
     .where(
       and(
@@ -119,7 +120,7 @@ async function getMembership(
     )
     .limit(1);
   if (!row) return null;
-  return { email: row.email, role: row.role };
+  return { email: row.email };
 }
 
 export async function requireQueueContext(): Promise<QueueContext> {
@@ -136,11 +137,15 @@ export async function requireQueueContext(): Promise<QueueContext> {
   if (!membership) {
     throw new Error("Only members of this organization can queue drafts.");
   }
+  const role = await readOrgMemberRole(orgId, userEmail);
+  if (!role) {
+    throw new Error("Only members of this organization can queue drafts.");
+  }
 
   return {
     userEmail: normalizeEmail(membership.email),
     orgId,
-    role: membership.role,
+    role,
   };
 }
 

package/corpus/templates/slides/server/workspace-defaults.ts

@@ -1,6 +1,8 @@
 import { fail } from "@agent-native/core/action";
-import { canManageOrg, orgMembers, type OrgRole } from "@agent-native/core/org";
+import { canManageOrg, type OrgRole } from "@agent-native/core/org";
+import { readOrgMemberRole } from "@agent-native/core/server";
 import {
+  getRequestContext,
   getRequestOrgId,
   getRequestUserEmail,
 } from "@agent-native/core/server/request-context";
@@ -41,20 +43,15 @@ export async function getCallerOrgRole(): Promise<OrgRole | null> {
   const orgId = getRequestOrgId();
   const email = getRequestUserEmail();
   if (!orgId || !email) return null;
-  const rows = await getDb()
-    .select({ role: orgMembers.role })
-    .from(orgMembers)
-    .where(
-      and(
-        eq(orgMembers.orgId, orgId),
-        eq(sql`lower(${orgMembers.email})`, email.toLowerCase()),
-      ),
-    )
-    .limit(1);
-  const role = rows[0]?.role;
-  return role === "owner" || role === "admin" || role === "member"
-    ? role
-    : null;
+  const request = getRequestContext();
+  if (
+    request?.a2aIdentityAssurance === "org-member" &&
+    (request.orgId?.trim() !== orgId.trim() ||
+      request.userEmail?.trim().toLowerCase() !== email.trim().toLowerCase())
+  ) {
+    return null;
+  }
+  return readOrgMemberRole(orgId, email);
 }
 
 export async function canManageWorkspaceDefaults(): Promise<boolean> {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core-corpus",
-  "version": "0.212.1",
+  "version": "0.213.1",
   "description": "Opt-in source corpus for Agent-Native Core source-search.",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {