@agent-native/core-corpus 0.212.1 → 0.214.0

package/corpus/templates/assets/server/lib/org-admin.ts

@@ -1,11 +1,9 @@
-import { orgMembers } from "@agent-native/core/org";
+import { readOrgMemberRole } from "@agent-native/core/server";
 import {
+  getRequestContext,
   getRequestUserEmail,
   getRequestOrgId,
-} from "@agent-native/core/server/request-context";
-import { and, eq, sql } from "drizzle-orm";
-
-import { getDb } from "../db/index.js";
+} from "@agent-native/core/server";
 
 export class ForbiddenAuditError extends Error {
   readonly statusCode = 403;
@@ -36,22 +34,28 @@ export async function assertOrgAdmin(): Promise<AdminScope> {
 
   const orgId = getRequestOrgId();
   if (!orgId) {
+    if (getRequestContext()?.a2aIdentityAssurance === "org-member") {
+      throw new ForbiddenAuditError(
+        "Could not verify the delegated organization scope; refusing audit access.",
+      );
+    }
     return { ownerEmail: email };
   }
 
+  const request = getRequestContext();
+  if (
+    request?.a2aIdentityAssurance === "org-member" &&
+    (request.orgId?.trim() !== orgId.trim() ||
+      request.userEmail?.trim().toLowerCase() !== email.trim().toLowerCase())
+  ) {
+    throw new ForbiddenAuditError(
+      "Could not verify the delegated organization scope; refusing audit access.",
+    );
+  }
+
   let role: string | null = null;
   try {
-    const [row] = await getDb()
-      .select({ role: orgMembers.role })
-      .from(orgMembers)
-      .where(
-        and(
-          eq(orgMembers.orgId, orgId),
-          sql`lower(${orgMembers.email}) = ${email.toLowerCase()}`,
-        ),
-      )
-      .limit(1);
-    role = row?.role?.toLowerCase() ?? null;
+    role = await readOrgMemberRole(orgId, email);
   } catch {
     throw new ForbiddenAuditError(
       "Could not verify org admin role; refusing audit access.",

package/corpus/templates/brain/server/lib/zoom-governance.ts

@@ -1,6 +1,7 @@
 import { fail } from "@agent-native/core/action";
-import { getDbExec } from "@agent-native/core/db";
+import { readOrgMemberRole } from "@agent-native/core/server";
 import {
+  getRequestContext,
   getRequestOrgId,
   getRequestUserEmail,
 } from "@agent-native/core/server/request-context";
@@ -21,11 +22,15 @@ export async function isBrainAdmin(
   const normalizedEmail = email?.trim();
   const normalizedOrgId = orgId?.trim();
   if (!normalizedEmail || !normalizedOrgId) return false;
-  const { rows } = await getDbExec().execute({
-    sql: `SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = LOWER(?) AND federation_removal_pending_at IS NULL LIMIT 1`,
-    args: [normalizedOrgId, normalizedEmail],
-  });
-  const role = (rows[0] as { role?: unknown } | undefined)?.role;
+  const request = getRequestContext();
+  if (
+    request?.a2aIdentityAssurance === "org-member" &&
+    (request.orgId?.trim() !== normalizedOrgId ||
+      request.userEmail?.trim().toLowerCase() !== normalizedEmail.toLowerCase())
+  ) {
+    return false;
+  }
+  const role = await readOrgMemberRole(normalizedOrgId, normalizedEmail);
   return role === "owner" || role === "admin";
 }
 

package/corpus/templates/clips/CHANGELOG.md

@@ -59,6 +59,7 @@ from the command menu (Cmd+K → "What's new") or from Settings.
 
 ### Improved
 
+- Rewind settings now show whether Rewind is remembering screen only or screen + audio.
 - Clips detects browser meetings more reliably and keeps notes until the meeting stop and transcript save are confirmed.
 - Clips detects browser meetings sooner, asks before starting when the active tab is unclear, and retries failed stops.
 - Desktop dictation confirms when text is pasted or copied and keeps transcripts available when saving fails.

package/corpus/templates/clips/changelog/2026-10-16-rewind-status-says-when-it-remembers-audio.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-10-16
+---
+
+Rewind settings now show whether Rewind is remembering screen only or screen + audio.

package/corpus/templates/clips/desktop/src/app.tsx

@@ -96,6 +96,7 @@ import {
   RecordingRecoveryPage,
   type RecordingRecoveryProps,
 } from "./components/RecordingRecovery";
+import { RewindCaptureStatus } from "./components/RewindCaptureStatus";
 import { ShortcutKeycaps } from "./components/ShortcutKeycaps";
 import { SourceRow, type CaptureSource } from "./components/SourceRow";
 import { Switch } from "./components/Switch";
@@ -8151,10 +8152,12 @@ function Setup({
               >
                 {screenMemoryMessage.text}
               </p>
-            ) : rewindOn && rewindStatusPresentation.hasError ? (
-              <p className="text-xs text-destructive">
-                {rewindStatusPresentation.detail}
-              </p>
+            ) : null}
+            {rewindOn ? (
+              <RewindCaptureStatus
+                status={screenMemoryStatus}
+                presentation={rewindStatusPresentation}
+              />
             ) : null}
           </SettingsRow>
           {rewindOn ? (

package/corpus/templates/clips/desktop/src/components/RewindCaptureStatus.tsx

@@ -0,0 +1,25 @@
+import type { RewindStatusPresentation } from "../lib/rewind-status";
+import type { ScreenMemoryStatus } from "../shared/config";
+
+export function RewindCaptureStatus({
+  status,
+  presentation,
+}: {
+  status: ScreenMemoryStatus | null;
+  presentation: RewindStatusPresentation;
+}) {
+  if (!status || presentation.kind === "off") return null;
+  return (
+    <>
+      <p className="flex items-center gap-2" role="status">
+        {presentation.isLive ? (
+          <span className="rec-dot" aria-hidden="true" />
+        ) : null}
+        {presentation.title}
+      </p>
+      {presentation.hasError ? (
+        <p className="text-xs text-destructive">{presentation.detail}</p>
+      ) : null}
+    </>
+  );
+}

package/corpus/templates/clips/desktop/src/lib/rewind-status.ts

@@ -70,9 +70,14 @@ export function getRewindStatusPresentation({
   }
 
   if (status?.state === "recording") {
+    // The active segment, not the setting: a clip or meeting notes can add
+    // audio while Remember is set to Screen only.
+    const capturesAudio = status.activeSegment?.captureMode === "visuals-audio";
     return {
       kind: "recording",
-      title: "Rewind is remembering",
+      title: capturesAudio
+        ? "Rewind is remembering screen + audio"
+        : "Rewind is remembering screen only",
       detail:
         status.lastError ||
         status.coverage ||

package/corpus/templates/clips/desktop/src/shared/config.ts

@@ -70,6 +70,9 @@ export interface ScreenMemoryActiveSegment {
   durationMs: number;
   width?: number | null;
   height?: number | null;
+  // What this segment captures. A clip or meeting can add audio while the
+  // configured mode is screen only.
+  captureMode: RewindCaptureMode;
 }
 
 export interface ScreenMemoryStatus {

package/corpus/templates/clips/desktop/src-tauri/src/screen_memory.rs

@@ -417,6 +417,7 @@ pub struct ScreenMemoryActiveSegment {
     pub duration_ms: u128,
     pub width: Option<u32>,
     pub height: Option<u32>,
+    pub capture_mode: RewindCaptureMode,
 }
 
 #[derive(Debug, Clone, Serialize)]
@@ -1134,6 +1135,7 @@ fn build_status(app: &AppHandle) -> Result<ScreenMemoryStatus, String> {
                     duration_ms: active.started_at.elapsed().as_millis(),
                     width: active.width,
                     height: active.height,
+                    capture_mode: active.capture_mode,
                 }),
             guard.last_error.clone(),
             guard.exclusion_active,

package/corpus/templates/clips/server/lib/recordings.ts

@@ -1,10 +1,6 @@
 import { readAppState } from "@agent-native/core/application-state";
-import {
-  implicitServiceOrgRole,
-  organizations,
-  orgMembers,
-} from "@agent-native/core/org";
-import { getSession } from "@agent-native/core/server";
+import { implicitServiceOrgRole, organizations } from "@agent-native/core/org";
+import { getSession, readOrgMemberRole } from "@agent-native/core/server";
 import {
   getRequestUserEmail,
   getRequestOrgId,
@@ -175,20 +171,9 @@ export async function getOrganizationRoleForEmail(
   organizationId: string,
   email: string,
 ): Promise<OrganizationAccessRole | null> {
-  const lowerEmail = email.toLowerCase();
-
   try {
-    const [row] = await getDb()
-      .select({ role: orgMembers.role })
-      .from(orgMembers)
-      .where(
-        and(
-          eq(orgMembers.orgId, organizationId),
-          sql`lower(${orgMembers.email}) = ${lowerEmail}`,
-        ),
-      )
-      .limit(1);
-    if (row?.role) return normalizeOrganizationRole(row.role);
+    const role = await readOrgMemberRole(organizationId, email);
+    if (role) return normalizeOrganizationRole(role);
   } catch {
     // org_members table may not exist yet on first boot before migrations finish.
   }

package/corpus/templates/community/qr/package.json

@@ -11,7 +11,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@agent-native/core": "^0.210.2",
+    "@agent-native/core": "^0.214.0",
     "postgres": "^3.4.9",
     "qrcode": "^1.5.4",
     "zod": "^4.6.7"

package/corpus/templates/content/.agents/skills/document-editing/references/databases.md

@@ -88,7 +88,7 @@ stable IDs identify edits. Sparse patches preserve omitted fields, and empty
 lists explicitly clear supported settings.
 
 Ordinary setup supports stored property types, additive options, metadata edits,
-the existing text natural key, and table presentation. It refuses destructive
+the existing text natural key, table presentation, and list row layouts. It refuses destructive
 type/option changes, source-managed schema edits, and relationship/computed-field
 authoring. Source status is readable, but this surface does not define joins,
 row unions, source bindings, or write-mode changes. Discovery of a source-backed
@@ -230,6 +230,20 @@ all fields for the current view, and it includes a New property control for
 adding fields without returning to the table header. The New property picker
 supports searching property types by label or machine name.
 
+List views can save an item layout (`itemLayout`) that decides what each row
+shows: a start slot (page icon, a checkbox property, a status property, or
+nothing), the title weight, line 2 (a text, URL, or non-body Blocks property,
+clamped to 1-3 lines), and ordered property IDs for line 3 and the end of the
+row; end values move under the title on narrow screens and empty values take
+no space. Ticking a row's checkbox writes the property through
+`set-document-property` and strikes the title through without moving the row.
+A view without `itemLayout` keeps the default rows. Agents update it with an
+`update-content-database-view` `update` patch on the list view: pass
+`itemLayoutPreset` (`checklist`, `reminders`, `tracker`, `digest`, or
+`default`), sparse `itemLayout` slots (omitted slots keep their value), or
+`itemLayout: null` to restore the default rows. List views accept only name,
+icon, and these layout fields on this path.
+
 In unconstrained table views, row drag handles can reorder collection item
 pages through `move-database-item`; pass both `databaseId` and `itemId` so the
 membership target is exact, and clear search, sort, and filters before manual

package/corpus/templates/content/CHANGELOG.md

@@ -3,8 +3,18 @@
 All notable user-facing changes to Agent-Native Content are documented here. Open it any
 time from the command menu (Cmd+K → "What's new").
 
+## 2026-10-21
+
+### Fixed
+
+- Organization favorites include documents shared with the current member
+
 ## 2026-10-19
 
+### Added
+
+- List rows can be customized: start from a preset like **Checklist**, then choose what shows before, under, and after each title
+
 ### Improved
 
 - You can comment on text in any Blocks field tab; each tab shows its open comments, and the Comments panel groups and filters them by tab
@@ -12,6 +22,7 @@ time from the command menu (Cmd+K → "What's new").
 
 ### Fixed
 
+- List views no longer run off the side of the screen on phones
 - Edits made from a block's menu or a table's row and column menus, such as deleting a table, adding a row or turning off the header row, are now saved instead of coming back after a reload
 - Starting a comment puts the cursor in the comment box, ready to type.
 - Table row and column options now appear for the row or column under the pointer, Escape selects the cell before leaving the editor, wide tables keep their add-column control on screen on phones, and a tap near a table's edge on a touch screen edits the cell there instead of adding a row or column
@@ -24,6 +35,8 @@ time from the command menu (Cmd+K → "What's new").
 
 ### Added
 
+- Connected AI assistants can make a collection from a GitHub folder, or link an empty one: each Markdown file becomes a view-only page, and a sync brings in the latest pushes
+- Make a collection from a GitHub folder in the sidebar's New menu, or fill an empty one from its Sources settings, which say up front when GitHub can't link and what to do instead. A short preview comes before linking, the collection shows where its pages come from and when they last updated, and unlinking asks first
 - Connected AI assistants can link a new collection to a GitHub folder: each Markdown file becomes a view-only page, and a sync brings in the latest pushes
 
 ### Improved

package/corpus/templates/content/actions/_content-space-access.ts

@@ -1,6 +1,10 @@
 import { ActionContractError } from "@agent-native/core/action";
 import { getDbExec, type DbExec } from "@agent-native/core/db";
-import { getRequestUserEmail } from "@agent-native/core/server/request-context";
+import { readOrgMemberRole } from "@agent-native/core/server";
+import {
+  getRequestContext,
+  getRequestUserEmail,
+} from "@agent-native/core/server/request-context";
 import { and, eq, isNull, sql } from "drizzle-orm";
 
 import { getDb, schema } from "../server/db/index.js";
@@ -13,6 +17,29 @@ export type ContentSpaceAccess = {
   role: ContentSpaceRole;
 };
 
+function isDelegatedIdentityMismatch(orgId: string, email: string): boolean {
+  const request = getRequestContext();
+  return (
+    request?.a2aIdentityAssurance === "org-member" &&
+    (request.orgId?.trim() !== orgId.trim() ||
+      request.userEmail?.trim().toLowerCase() !== email.trim().toLowerCase())
+  );
+}
+
+function preserveDelegatedMemberRole(
+  orgId: string,
+  email: string,
+  validatedRole: string,
+  verifiedRole: string,
+): string {
+  const request = getRequestContext();
+  return request?.a2aIdentityAssurance === "org-member" &&
+    request.orgId?.trim() === orgId.trim() &&
+    request.userEmail?.trim().toLowerCase() === email.trim().toLowerCase()
+    ? verifiedRole
+    : validatedRole;
+}
+
 type ContentOrganizationMembership = {
   role: string;
   name: string;
@@ -59,6 +86,11 @@ export async function getContentOrganizationMembership(
   userEmail: string,
   options: { db?: any } = {},
 ): Promise<{ role: string; name: string; createdBy: string } | null> {
+  if (isDelegatedIdentityMismatch(orgId, userEmail)) return null;
+
+  const verifiedRole = await readOrgMemberRole(orgId, userEmail);
+  if (!verifiedRole) return null;
+
   if (options.db) {
     const { organizations, orgMembers } =
       await import("@agent-native/core/org");
@@ -81,7 +113,7 @@ export async function getContentOrganizationMembership(
       )
       .limit(1);
     if (!row) return null;
-    return revalidateFederatedMembership(orgId, userEmail, {
+    const validated = await revalidateFederatedMembership(orgId, userEmail, {
       role: (typeof row.role === "string"
         ? row.role
         : (JSON.stringify(row.role) ?? "member")
@@ -91,6 +123,17 @@ export async function getContentOrganizationMembership(
       identityAuthority: row.identityAuthority,
       identityId: row.identityId,
     });
+    return validated
+      ? {
+          ...validated,
+          role: preserveDelegatedMemberRole(
+            orgId,
+            userEmail,
+            validated.role,
+            verifiedRole,
+          ),
+        }
+      : null;
   }
   const result = await getDbExec().execute({
     sql: `SELECT m.role AS role, o.name AS name, o.created_by AS "createdBy",
@@ -119,7 +162,7 @@ export async function getContentOrganizationMembership(
   ) {
     return null;
   }
-  return revalidateFederatedMembership(orgId, userEmail, {
+  const validated = await revalidateFederatedMembership(orgId, userEmail, {
     role: (typeof row.role === "string"
       ? row.role
       : (JSON.stringify(row.role) ?? "member")
@@ -129,12 +172,34 @@ export async function getContentOrganizationMembership(
     identityAuthority: row.identityAuthority,
     identityId: row.identityId,
   });
+  return validated
+    ? {
+        ...validated,
+        role: preserveDelegatedMemberRole(
+          orgId,
+          userEmail,
+          validated.role,
+          verifiedRole,
+        ),
+      }
+    : null;
 }
 
 export async function listContentOrganizationMemberships(
   userEmail: string,
   transaction?: DbExec,
 ) {
+  const request = getRequestContext();
+  const normalizedEmail = normalizeContentSpaceEmail(userEmail);
+  const delegated = request?.a2aIdentityAssurance === "org-member";
+  if (
+    delegated &&
+    (!request.orgId?.trim() ||
+      request.userEmail?.trim().toLowerCase() !== normalizedEmail)
+  ) {
+    return [];
+  }
+
   if (transaction) {
     const relation = await transaction.execute({
       sql: "SELECT to_regclass('org_members') AS relation",
@@ -153,8 +218,11 @@ export async function listContentOrganizationMemberships(
           INNER JOIN organizations o ON o.id = m.org_id
           WHERE LOWER(m.email) = $1
             AND m.federation_removal_pending_at IS NULL
+            ${delegated ? "AND m.org_id = $2" : ""}
           ORDER BY m.org_id ASC`,
-      args: [normalizeContentSpaceEmail(userEmail)],
+      args: delegated
+        ? [normalizedEmail, request!.orgId!.trim()]
+        : [normalizedEmail],
     });
   } catch (error) {
     if (error instanceof Error && error.message.includes("does not exist")) {
@@ -174,11 +242,21 @@ export async function listContentOrganizationMemberships(
       identityAuthority: row.identityAuthority ?? row.identity_authority,
       identityId: row.identityId ?? row.identity_id,
     }))
+    .map((row: ContentOrganizationMembership & { orgId?: string }) => ({
+      ...row,
+      role:
+        row.role === "owner" || row.role === "admin" || row.role === "member"
+          ? delegated
+            ? "member"
+            : row.role
+          : null,
+    }))
     .filter(
       (row): row is ContentOrganizationMembership & { orgId: string } =>
         typeof row.orgId === "string" &&
         typeof row.name === "string" &&
-        typeof row.createdBy === "string",
+        typeof row.createdBy === "string" &&
+        row.role !== null,
     );
   return Promise.all(
     memberships.map(async ({ orgId, ...membership }) => {
@@ -187,7 +265,18 @@ export async function listContentOrganizationMemberships(
         userEmail,
         membership,
       );
-      return validated ? { orgId, ...validated } : null;
+      return validated
+        ? {
+            orgId,
+            ...validated,
+            role: preserveDelegatedMemberRole(
+              orgId,
+              normalizedEmail,
+              validated.role,
+              membership.role,
+            ),
+          }
+        : null;
     }),
   ).then((validated) =>
     validated.filter(

package/corpus/templates/content/actions/_database-utils.ts

@@ -1018,23 +1018,27 @@ export async function getContentDatabasePageResponse(
                 items.map((item) => item.documentId),
               ),
               isNull(schema.documents.trashedAt),
-              database.systemRole === "workspaces"
-                ? workspacesVisibleDocumentIds?.length
-                  ? inArray(schema.documents.id, workspacesVisibleDocumentIds)
+              database.systemRole === "favorites"
+                ? favoritesVisibleDocumentQuery
+                  ? inArray(schema.documents.id, favoritesVisibleDocumentQuery)
                   : sql`1 = 0`
-                : database.systemRole === "files" && database.orgId
-                  ? and(
-                      eq(schema.documents.orgId, database.orgId),
-                      or(
-                        eq(schema.documents.visibility, "org"),
-                        eq(schema.documents.visibility, "public"),
-                      ),
-                      or(
-                        eq(schema.documents.hideFromSearch, 0),
-                        isNull(schema.documents.hideFromSearch),
-                      ),
-                    )
-                  : eq(schema.documents.ownerEmail, database.ownerEmail),
+                : database.systemRole === "workspaces"
+                  ? workspacesVisibleDocumentIds?.length
+                    ? inArray(schema.documents.id, workspacesVisibleDocumentIds)
+                    : sql`1 = 0`
+                  : database.systemRole === "files" && database.orgId
+                    ? and(
+                        eq(schema.documents.orgId, database.orgId),
+                        or(
+                          eq(schema.documents.visibility, "org"),
+                          eq(schema.documents.visibility, "public"),
+                        ),
+                        or(
+                          eq(schema.documents.hideFromSearch, 0),
+                          isNull(schema.documents.hideFromSearch),
+                        ),
+                      )
+                    : eq(schema.documents.ownerEmail, database.ownerEmail),
             ),
           )
       : [];