@agent-native/core-corpus 0.216.0 → 0.217.0

package/corpus/templates/analytics/shared/output-use.ts

@@ -0,0 +1,205 @@
+/**
+ * "Made it, didn't use it": per app, the output a person makes, the events
+ * that say they made one, and the events that say they used it. Opening an
+ * output never counts as using it; a use shows the output to people or takes
+ * it out of the app.
+ */
+
+/** A use counts only within this many days of the output being made. */
+export const OUTPUT_USE_WINDOW_DAYS = 7;
+export const OUTPUT_USE_WINDOW_MS = OUTPUT_USE_WINDOW_DAYS * 24 * 60 * 60_000;
+/** A presentation shorter than this was a look, not a talk. */
+export const MIN_PRESENTATION_MS = 30_000;
+/** The most outputs one recording lists; the rest are counted, not listed. */
+export const MAX_OUTPUTS_PER_RECORDING = 10;
+/** Output ids are skipped past this length, never cut, like session ids. */
+export const MAX_OUTPUT_ID_LENGTH = 256;
+/** The Sessions URL param naming the app whose unused outputs to find. */
+export const UNUSED_OUTPUT_PARAM = "unused";
+/** Every generator sends this when it makes an output, so it marks an app that makes them. */
+export const OUTPUT_MADE_EVENT = "generation_completed";
+
+type EventProperties = Readonly<Record<string, unknown>>;
+
+export interface OutputUseEvent {
+  eventName: string;
+  qualifies: (properties: EventProperties) => boolean;
+}
+
+export interface OutputUseRule {
+  outputType: string;
+  madeEvents: readonly string[];
+  usedEvents: readonly OutputUseEvent[];
+  /** The output's page, relative to its app's origin. */
+  outputPath: (outputId: string) => string;
+}
+
+/** A missing or non-numeric property never proves a use. */
+function atLeast(value: unknown, minimum: number): boolean {
+  return (
+    typeof value === "number" && Number.isFinite(value) && value >= minimum
+  );
+}
+
+export const OUTPUT_USE_RULES = {
+  slides: {
+    outputType: "deck",
+    madeEvents: [OUTPUT_MADE_EVENT],
+    usedEvents: [
+      {
+        // Moving forward at least once means two or more slides were shown,
+        // even when the presentation started mid-deck.
+        eventName: "presentation_ended",
+        qualifies: (properties) =>
+          atLeast(properties.slides_advanced, 1) &&
+          atLeast(properties.duration_ms, MIN_PRESENTATION_MS),
+      },
+      {
+        // `slide_export_started` fires before the export runs, so only a
+        // finished export of a deck with slides counts.
+        eventName: "deck_exported",
+        qualifies: (properties) =>
+          properties.status === "completed" &&
+          atLeast(properties.slide_count, 1),
+      },
+    ],
+    outputPath: (outputId) => `/deck/${encodeURIComponent(outputId)}`,
+  },
+} as const satisfies Record<string, OutputUseRule>;
+
+export type OutputUseApp = keyof typeof OUTPUT_USE_RULES;
+
+export const OUTPUT_USE_APPS = Object.keys(OUTPUT_USE_RULES) as [
+  OutputUseApp,
+  ...OutputUseApp[],
+];
+
+export function isOutputUseApp(value: unknown): value is OutputUseApp {
+  return (
+    typeof value === "string" &&
+    Object.prototype.hasOwnProperty.call(OUTPUT_USE_RULES, value)
+  );
+}
+
+export function outputUseRule(
+  app: string | null | undefined,
+): OutputUseRule | null {
+  return isOutputUseApp(app) ? OUTPUT_USE_RULES[app] : null;
+}
+
+/** Every event name any rule reads, for the catalog and for ingest. */
+export const OUTPUT_USE_EVENT_NAMES: ReadonlySet<string> = new Set(
+  Object.values(OUTPUT_USE_RULES).flatMap((rule: OutputUseRule) => [
+    ...rule.madeEvents,
+    ...rule.usedEvents.map((used) => used.eventName),
+  ]),
+);
+
+export function outputIdOf(properties: EventProperties): string | null {
+  const value = properties.output_id;
+  if (typeof value !== "string") return null;
+  const outputId = value.trim();
+  return outputId && outputId.length <= MAX_OUTPUT_ID_LENGTH ? outputId : null;
+}
+
+/** Where a recording's session ran, as far as the recording shows. */
+export interface OutputRecordingPages {
+  firstUrl: string | null;
+  lastUrl: string | null;
+  /**
+   * Origins the recording's replay key lists. An empty list accepts uploads
+   * from anywhere, so it vouches for no origin and yields no link.
+   */
+  allowedOrigins: readonly string[];
+}
+
+function recordedPage(value: string | null): URL | null {
+  if (!value) return null;
+  try {
+    const url = new URL(value);
+    return url.origin === "null" ? null : url;
+    // coercion-ok: a recording without a parseable URL has no app to link to; the output id still shows.
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Where a session's output opens: the app origin the session was recorded on,
+ * its mount path, and the output's page. The app checks access when it opens.
+ * A recording's URLs are whatever its uploader sent, so only an origin the
+ * replay key's owner allowed becomes a link; otherwise this is null.
+ */
+export function outputUrl(
+  app: string,
+  outputId: string,
+  recording: OutputRecordingPages,
+): string | null {
+  const rule = outputUseRule(app);
+  if (!rule) return null;
+  const pages = [recording.firstUrl, recording.lastUrl].flatMap((value) => {
+    const page = recordedPage(value);
+    return page ? [page] : [];
+  });
+  // A recording's id lives in its tab's sessionStorage, which is per origin,
+  // so a real recording never spans origins; pages on two came from a forged
+  // upload, and neither can be trusted.
+  const origin = pages[0]?.origin;
+  if (
+    !origin ||
+    pages.some((page) => page.origin !== origin) ||
+    !recording.allowedOrigins.includes(origin)
+  ) {
+    return null;
+  }
+  // A workspace deploy mounts each app at `/<app id>` on one origin, and a
+  // tab's recording follows it from app to app, so either page may show the
+  // mount. Reading that prefix as the mount assumes the app has no route of
+  // its own there (Slides has none). The recording's app label can't decide
+  // it: without a declared app it is the hostname's first label.
+  const mount = `/${app}`;
+  const mounted = pages.some(
+    (page) => page.pathname === mount || page.pathname.startsWith(`${mount}/`),
+  );
+  return `${origin}${mounted ? mount : ""}${rule.outputPath(outputId)}`;
+}
+
+/**
+ * What became of one output made in a session. `open` means the use window
+ * has not closed yet; `unmeasured` means a failed write may have dropped a
+ * use, so it cannot be called unused.
+ */
+export type SessionOutputStatus = "used" | "unused" | "open" | "unmeasured";
+
+export interface SessionOutput {
+  app: OutputUseApp;
+  outputType: string;
+  outputId: string;
+  madeAt: string;
+  useBy: string;
+  status: SessionOutputStatus;
+  /** The first qualifying use's event name, when it was used in time. */
+  usedEvent: string | null;
+  usedAt: string | null;
+  url: string | null;
+}
+
+export interface SessionRecordingOutputs {
+  /**
+   * By recording id, for each requested recording the viewer can read: its
+   * outputs, [] when it made none since coverage began, or null when they
+   * are unknown: it was shared from another tenant, whose events a share does
+   * not grant, its tenant has not started output tracking, or a batch lost in
+   * ingest overlapped it and may have held an output it made. Ids the viewer
+   * cannot read are absent.
+   */
+  outputs: Record<string, SessionOutput[] | null>;
+  /**
+   * How many more outputs a recording made than `outputs` lists, by
+   * recording id; absent when none were left out. Unused outputs are listed
+   * first.
+   */
+  omittedOutputs: Record<string, number>;
+  /** When the viewer's output tracking began, or null before it has. */
+  coverageStartedAt: string | null;
+}

package/corpus/templates/analytics/shared/session-events.ts

@@ -54,6 +54,8 @@ export interface EventCatalogEntry {
   description: string | null;
   automatic: boolean;
   stoppedFiring: boolean;
+  /** Whether "made it, didn't use it" reads this event as making or using its app's output. */
+  outputRole: "made" | "used" | null;
 }
 
 export interface EventCatalogApp {
@@ -61,6 +63,10 @@ export interface EventCatalogApp {
   eventCount: number;
   volume: number;
   onlyAutomaticEvents: boolean;
+  /** The app sent `generation_completed` in range, so it makes outputs. */
+  makesOutputs: boolean;
+  /** Events that count as using this app's output; empty for an app that makes outputs is a catalog gap. */
+  usedItEvents: string[];
 }
 
 export interface EventCatalogResult {

package/corpus/templates/calendar/CHANGELOG.md

@@ -3,6 +3,12 @@
 All notable user-facing changes to Agent-Native Calendar are documented here. Open it any
 time from the command menu (Cmd+K → "What's new") or from Settings.
 
+## 2026-10-21
+
+### Fixed
+
+- Calendar skips notification approval for solo events while preserving it for guest invitations and cancellations.
+
 ## 2026-10-19
 
 ### Changed

package/corpus/templates/calendar/actions/create-event.ts

@@ -338,10 +338,8 @@ export default defineAction({
       ),
   }),
   needsApproval: ({ sendUpdates, attendees, eventType, autoDeclineMode }) =>
-    sendUpdates === "all" ||
-    sendUpdates === "externalOnly" ||
-    (sendUpdates === undefined &&
-      (normalizeAttendees(attendees)?.length ?? 0) > 0) ||
+    ((normalizeAttendees(attendees)?.length ?? 0) > 0 &&
+      sendUpdates !== "none") ||
     (eventType === "outOfOffice" && autoDeclineMode !== "declineNone"),
   run: async (args, actionContext?: ActionRunContext) => {
     const email = getRequestUserEmail();

package/corpus/templates/calendar/actions/update-event.ts

@@ -224,16 +224,45 @@ export default defineAction({
       ),
   }),
   toolCallable: false,
-  needsApproval: ({
+  needsApproval: async ({
+    id,
+    accountEmail: requestedAccountEmail,
+    scope,
     sendUpdates,
     notificationMessage,
     targetAccountEmail,
+    attendees,
     addAttendees,
-  }) =>
-    targetAccountEmail !== undefined ||
-    sendUpdates === "all" ||
-    !!notificationMessage?.trim() ||
-    (sendUpdates === undefined && namesGuests(addAttendees)),
+  }) => {
+    if (targetAccountEmail !== undefined || !!notificationMessage?.trim()) {
+      return true;
+    }
+    if (sendUpdates === "none") return false;
+    if (sendUpdates === undefined) return namesGuests(addAttendees);
+
+    if (namesGuests(attendees) || namesGuests(addAttendees)) return true;
+
+    // An empty replacement can still send cancellation notices to removed guests.
+    const ownerEmail = requireActionUserEmail();
+    const accountEmail = await resolveOwnedAccountEmail(
+      resolveGoogleEventAccountEmail(id, requestedAccountEmail),
+      ownerEmail,
+    );
+    let event = await googleCalendar.getEvent(
+      normalizeWritableGoogleEventId(id),
+      {
+        ownerEmail,
+        accountEmail,
+      },
+    );
+    if (scope === "all" && event.recurringEventId) {
+      event = await googleCalendar.getEvent(event.recurringEventId, {
+        ownerEmail,
+        accountEmail,
+      });
+    }
+    return (event.attendees?.length ?? 0) > 0;
+  },
   run: async (args, actionContext?: ActionRunContext) => {
     const ownerEmail = requireActionUserEmail();
     if (args.addGoogleMeet && args.addZoom) {

package/corpus/templates/calendar/changelog/2026-10-21-solo-events-avoid-notification-approval.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-10-21
+---
+
+Calendar skips notification approval for solo events while preserving it for guest invitations and cancellations.

package/corpus/templates/community/qr/package.json

@@ -11,7 +11,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@agent-native/core": "^0.216.0",
+    "@agent-native/core": "^0.217.0",
     "postgres": "^3.4.9",
     "qrcode": "^1.5.4",
     "zod": "^4.6.7"

package/corpus/templates/content/.agents/skills/document-editing/references/databases.md

@@ -244,9 +244,12 @@ supports searching property types by label or machine name.
 List views can save an item layout (`itemLayout`) that decides what each row
 shows: a start slot (page icon, a checkbox property, a status property, or
 nothing), the title weight, line 2 (a text, URL, or non-body Blocks property,
-clamped to 1-3 lines), and ordered property IDs for line 3 and the end of the
-row; end values move under the title on narrow screens and empty values take
-no space. Ticking a row's checkbox writes the property through
+or with `source: "page"` the first lines of each row's page, clamped to 1-3
+lines), and ordered property IDs for line 3 and the end of the row; end values
+move under the title on narrow screens and empty values take no space. While
+any list view shows page text, collection reads give each item an `excerpt`
+with the start of its page as plain text; other collections leave page bodies
+out of row reads. Ticking a row's checkbox writes the property through
 `set-document-property` and strikes the title through without moving the row.
 A view without `itemLayout` keeps the default rows. Agents update it with an
 `update-content-database-view` `update` patch on the list view: pass

package/corpus/templates/content/CHANGELOG.md

@@ -7,6 +7,7 @@ time from the command menu (Cmd+K → "What's new").
 
 ### Improved
 
+- A collection linked to a big GitHub folder fills faster, and pushes to other linked collections aren't held up while it does
 - Accept remaining and Reject remaining show the result for every suggested edit at once
 - Accepting a group of suggested edits saves faster and adds one page version
 
@@ -18,6 +19,10 @@ time from the command menu (Cmd+K → "What's new").
 
 ## 2026-10-21
 
+### Added
+
+- List rows can show the first lines of each page under its title: pick **Page text** for Line 2
+
 ### Improved
 
 - Suggested edits show an agent's whole reason: open a group to read past the first two lines, and lone edits show the reason above the change
@@ -37,6 +42,7 @@ time from the command menu (Cmd+K → "What's new").
 
 ### Fixed
 
+- Builder content sync keeps read and write status accurate when API responses fail.
 - HTML table cells preserve a trailing backslash when opening Markdown.
 - Preserve empty paragraph colors and refuse unsupported inline image and oversized math formatting before content is stored.
 
@@ -67,6 +73,7 @@ time from the command menu (Cmd+K → "What's new").
 
 ### Added
 
+- Fill a collection from a GitHub folder through its Sources settings, which an empty collection links to from under its title and which say up front when GitHub can't link and what to do instead. A short preview comes before linking, the collection shows where its pages come from and when they last updated, with a link back to its folder in Sources, and unlinking asks first
 - Connected AI assistants can make a collection from a GitHub folder, or link an empty one: each Markdown file becomes a view-only page, and a sync brings in the latest pushes
 - Make a collection from a GitHub folder in the sidebar's New menu, or fill an empty one from its Sources settings, which say up front when GitHub can't link and what to do instead. A short preview comes before linking, the collection shows where its pages come from and when they last updated, and unlinking asks first
 - Connected AI assistants can link a new collection to a GitHub folder: each Markdown file becomes a view-only page, and a sync brings in the latest pushes
@@ -91,6 +98,7 @@ time from the command menu (Cmd+K → "What's new").
 
 ### Fixed
 
+- Builder Content avoids retrying a write when Builder accepted it but the response could not be saved.
 - Agents reading a page you have open no longer wait or fail when your edits are already saved
 
 ## 2026-10-16

package/corpus/templates/content/actions/_browser-document-save-attempt.ts

@@ -4,13 +4,15 @@ import { ActionContractError } from "@agent-native/core";
 import { and, eq } from "drizzle-orm";
 
 import { getDb, schema } from "../server/db/index.js";
+import type { LiveCopyBodySave } from "../shared/api.js";
 
 export interface BrowserSaveAttemptConfirmation {
   attemptId: string;
-  result: "applied" | "replayed";
+  result: "applied" | "replayed" | "live_copy";
   revision: string;
   updatedAt: string;
   softDeletedDatabaseIds?: string[];
+  bodySave?: LiveCopyBodySave;
 }
 
 export interface BrowserSaveAttemptPreservation {
@@ -72,6 +74,7 @@ export function readBrowserSaveAttempt(
     reason?: unknown;
     checkpointId?: unknown;
     softDeletedDatabaseIds?: unknown;
+    bodySave?: unknown;
   };
   if (
     typeof result.revision !== "string" ||
@@ -119,6 +122,12 @@ export function readBrowserSaveAttempt(
       { errorCode: "BROWSER_SAVE_RECEIPT_INVALID", statusCode: 500 },
     );
   }
+  if (result.bodySave !== undefined && !isLiveCopyBodySave(result.bodySave)) {
+    throw new ActionContractError(
+      "The stored browser save receipt has an invalid live-copy body save.",
+      { errorCode: "BROWSER_SAVE_RECEIPT_INVALID", statusCode: 500 },
+    );
+  }
   return {
     attemptId: stored.attemptId,
     result: "replayed",
@@ -127,5 +136,18 @@ export function readBrowserSaveAttempt(
     softDeletedDatabaseIds: result.softDeletedDatabaseIds as
       | string[]
       | undefined,
+    ...(result.bodySave ? { bodySave: result.bodySave } : {}),
   };
 }
+
+function isLiveCopyBodySave(value: unknown): value is LiveCopyBodySave {
+  const save = value as Partial<LiveCopyBodySave> | null;
+  return (
+    typeof save === "object" &&
+    save !== null &&
+    save.status === "live_copy" &&
+    typeof save.matchesLiveCopy === "boolean" &&
+    Number.isSafeInteger(save.bodyRevision) &&
+    Number.isSafeInteger(save.collabVersion)
+  );
+}