@agent-native/core 0.0.0-beta-20260820194548 → 0.0.0-beta-20260820210146

package/corpus/README.md

@@ -31,4 +31,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- template files: 8489
+- template files: 8490

package/corpus/templates/analytics/.agents/skills/secrets/SKILL.md

@@ -38,7 +38,11 @@ connection exists:
   register a `kind: "oauth"` entry so the shared UI renders Connect and the
   runtime owns status, refresh, and reauthorization.
 - **Deploy- or app-level configuration** - use deployment/runtime
-  configuration, not a per-user secret row.
+  configuration, not a per-user secret row. For a non-secret public setting
+  already represented by `AgentNativeConfig`, put the default in
+  `agent-native.config.ts` and use its `AGENT_NATIVE_CONFIG_<PATH>` alias only
+  for a deployment override. Never put a credential or provider key in that
+  public namespace.
 - **Account, customer, manager, or other non-secret identifier** - store it as
   scoped connection metadata or app data, not as a masked secret field.
 

package/corpus/templates/analytics/.agents/skills/workspace-conventions/SKILL.md

@@ -55,7 +55,10 @@ Preview before `--apply`, commit `agent-native.ejections.json`, and never edit
   ZIPs, screenshots, thumbnails, session replay chunks) in configured file/blob
   storage and persist only URLs, ids, or handles.
 - Store shared runtime configuration in the workspace root `.env`; use
-  `apps/<app>/.env` only for app-specific overrides. Never hardcode API keys,
+  `apps/<app>/.env` only for app-specific overrides. For public app behavior,
+  prefer the default in `agent-native.config.ts` and use the deterministic
+  `AGENT_NATIVE_CONFIG_<UPPER_SNAKE_PATH>` alias only when a non-secret value
+  needs a deployment override. Never hardcode API keys,
   tokens, webhook URLs, signing secrets, private Builder/internal data, customer
   data, or credential-looking literals in source, docs, prompts, fixtures,
   application state, action responses, or generated app content. Use

package/corpus/templates/analytics/app/components/layout/Sidebar.tsx

@@ -15,7 +15,6 @@ import {
   IconArchive,
   IconActivity,
   IconHeartbeat,
-  IconPlus,
   IconLock,
   IconLink,
   IconMessageCircle,
@@ -46,7 +45,6 @@ import { Link, useLocation, useNavigate } from "react-router";
 import { toast } from "sonner";
 
 import { useAuth } from "@/components/auth/AuthProvider";
-import { getIdToken } from "@/lib/auth";
 import { ANALYTICS_CHAT_STORAGE_KEY } from "@/lib/chat-handoff";
 import { cn, shortcutModifierLabel } from "@/lib/utils";
 import {
@@ -121,7 +119,6 @@ import {
   DropdownMenuSeparator,
   DropdownMenuTrigger,
 } from "@/components/ui/dropdown-menu";
-import { Input } from "@/components/ui/input";
 import {
   Popover,
   PopoverTrigger,

package/corpus/templates/analytics/app/pages/Settings.tsx

@@ -20,7 +20,6 @@ import { Link } from "react-router";
 import { toast } from "sonner";
 
 import { Button } from "@/components/ui/button";
-import { Label } from "@/components/ui/label";
 import { Switch } from "@/components/ui/switch";
 
 import changelog from "../../CHANGELOG.md?raw";

package/corpus/templates/analytics/app/pages/adhoc/explorer/index.tsx

@@ -21,7 +21,6 @@ import {
   AlertDialogTitle,
 } from "@/components/ui/alert-dialog";
 import { Button } from "@/components/ui/button";
-import { Card, CardContent } from "@/components/ui/card";
 import {
   Dialog,
   DialogContent,

package/corpus/templates/analytics/app/pages/adhoc/explorer-dashboard/index.tsx

@@ -201,7 +201,7 @@ export default function ExplorerDashboardPage() {
   );
   const [archivedAt, setArchivedAt] = useState<string | null>(null);
   const [hiddenAt, setHiddenAt] = useState<string | null>(null);
-  const [hiddenBy, setHiddenBy] = useState<string | null>(null);
+  const [, setHiddenBy] = useState<string | null>(null);
   const [resourceAccess, setResourceAccess] = useState<ResourceAccess | null>(
     null,
   );

package/corpus/templates/analytics/app/pages/sessions/SessionsPage.tsx

@@ -21,7 +21,6 @@ import {
   IconServer,
   IconSettings,
 } from "@tabler/icons-react";
-import { useQuery } from "@tanstack/react-query";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { Link, useSearchParams } from "react-router";
 import { toast } from "sonner";

package/corpus/templates/analytics/server/lib/first-party-analytics-backend.ts

@@ -557,38 +557,6 @@ function maskSqlLiterals(sql: string): string {
   return chars.join("");
 }
 
-function rewriteOutsideSqlLiterals(
-  sql: string,
-  rewrite: (code: string) => string,
-): string {
-  let result = "";
-  let cursor = 0;
-  while (cursor < sql.length) {
-    const literalStart = sql.indexOf("'", cursor);
-    if (literalStart === -1) {
-      result += rewrite(sql.slice(cursor));
-      break;
-    }
-    result += rewrite(sql.slice(cursor, literalStart));
-    let literalEnd = literalStart + 1;
-    while (literalEnd < sql.length) {
-      if (sql[literalEnd] !== "'") {
-        literalEnd++;
-        continue;
-      }
-      if (sql[literalEnd + 1] === "'") {
-        literalEnd += 2;
-        continue;
-      }
-      literalEnd++;
-      break;
-    }
-    result += sql.slice(literalStart, literalEnd);
-    cursor = literalEnd;
-  }
-  return result;
-}
-
 const SQL_LITERAL_PLACEHOLDER_PREFIX = "_fpa_lit_";
 
 /**

package/corpus/templates/analytics/server/lib/session-replay.ts

@@ -8,11 +8,7 @@ import {
   readPrivateBlob,
   type PrivateBlobHandle,
 } from "@agent-native/core/private-blob";
-import {
-  getRequestUserEmail,
-  recordChange,
-  runWithRequestContext,
-} from "@agent-native/core/server";
+import { recordChange, runWithRequestContext } from "@agent-native/core/server";
 import {
   accessFilter,
   resolveAccess,

package/corpus/templates/assets/.agents/skills/secrets/SKILL.md

@@ -38,7 +38,11 @@ connection exists:
   register a `kind: "oauth"` entry so the shared UI renders Connect and the
   runtime owns status, refresh, and reauthorization.
 - **Deploy- or app-level configuration** - use deployment/runtime
-  configuration, not a per-user secret row.
+  configuration, not a per-user secret row. For a non-secret public setting
+  already represented by `AgentNativeConfig`, put the default in
+  `agent-native.config.ts` and use its `AGENT_NATIVE_CONFIG_<PATH>` alias only
+  for a deployment override. Never put a credential or provider key in that
+  public namespace.
 - **Account, customer, manager, or other non-secret identifier** - store it as
   scoped connection metadata or app data, not as a masked secret field.
 

package/corpus/templates/assets/.agents/skills/workspace-conventions/SKILL.md

@@ -55,7 +55,10 @@ Preview before `--apply`, commit `agent-native.ejections.json`, and never edit
   ZIPs, screenshots, thumbnails, session replay chunks) in configured file/blob
   storage and persist only URLs, ids, or handles.
 - Store shared runtime configuration in the workspace root `.env`; use
-  `apps/<app>/.env` only for app-specific overrides. Never hardcode API keys,
+  `apps/<app>/.env` only for app-specific overrides. For public app behavior,
+  prefer the default in `agent-native.config.ts` and use the deterministic
+  `AGENT_NATIVE_CONFIG_<UPPER_SNAKE_PATH>` alias only when a non-secret value
+  needs a deployment override. Never hardcode API keys,
   tokens, webhook URLs, signing secrets, private Builder/internal data, customer
   data, or credential-looking literals in source, docs, prompts, fixtures,
   application state, action responses, or generated app content. Use

package/corpus/templates/assets/actions/save-generated-image.ts

@@ -1,10 +1,5 @@
 import { defineAction } from "@agent-native/core";
 import type { ActionRunContext } from "@agent-native/core/action";
-import {
-  deleteAppState,
-  readAppState,
-  writeAppState,
-} from "@agent-native/core/application-state";
 import { z } from "zod";
 
 import { markAssetSaved } from "../server/handlers/assets.js";

package/corpus/templates/assets/app/routes/brand-kits.$id.tsx

@@ -34,7 +34,6 @@ import {
   IconSettings,
   IconTrash,
   IconUpload,
-  IconVideo,
   IconX,
 } from "@tabler/icons-react";
 import {
@@ -346,7 +345,7 @@ export function BrandKitDetailRoute({
   const urlTab = libraryTabFromValue(searchParams.get("tab"));
   const libraryId = explicitLibraryId ?? id!;
   const { data } = useActionQuery("get-library", { id: libraryId }) as any;
-  const updateLibrary = useActionMutation("update-library");
+
   const archiveLibrary = useActionMutation("archive-library");
   const duplicateLibrary = useActionMutation("duplicate-library");
   const updateAsset = useActionMutation("update-asset");
@@ -3483,265 +3482,6 @@ function AssetActionsMenu({
   );
 }
 
-function PendingUploadLaneTile({ upload }: { upload: PendingUpload }) {
-  const t = useT();
-  const isChecking = upload.status === "checking";
-  return (
-    <div className="w-36 shrink-0 overflow-hidden rounded-md border border-dashed border-border bg-background sm:w-39">
-      <div className="flex aspect-4/3 items-center justify-center bg-muted/30">
-        <div className="flex flex-col items-center gap-2 text-muted-foreground">
-          <Spinner className="h-5 w-5" />
-          <span className="text-xs font-medium">
-            {isChecking ? t("library.checking") : t("library.uploading")}
-          </span>
-        </div>
-      </div>
-      <div className="p-2.5">
-        <div className="flex items-center gap-2 truncate text-xs font-medium">
-          {upload.mediaType === "video" ? (
-            <IconVideo className="h-3.5 w-3.5 shrink-0 text-muted-foreground" />
-          ) : (
-            <IconPhoto className="h-3.5 w-3.5 shrink-0 text-muted-foreground" />
-          )}
-          <span className="truncate">{upload.name}</span>
-        </div>
-      </div>
-    </div>
-  );
-}
-
-function AssetLaneTile({
-  asset,
-  folders,
-  selected,
-  deleting,
-  saving,
-  promoting,
-  onToggle,
-  onDelete,
-  updateAsset,
-  onSave,
-  onMoveToReferences,
-}: {
-  asset: any;
-  folders: any[];
-  selected: boolean;
-  deleting?: boolean;
-  saving?: boolean;
-  promoting?: boolean;
-  onToggle: (checked: boolean) => void;
-  onDelete: () => void;
-  updateAsset: any;
-  onSave?: () => void;
-  onMoveToReferences?: () => void;
-}) {
-  const t = useT();
-  const [contextOpen, setContextOpen] = useState(false);
-  const displayTitle = assetDisplayTitle(asset);
-  const sourceText = assetLineageSourceText(asset);
-  const canMoveToReferences = Boolean(onMoveToReferences);
-  const hasPrimaryActions = Boolean(onSave || canMoveToReferences);
-  const categoryLabel = assetCategoryLabel(asset);
-  const busy = deleting || saving || promoting;
-
-  return (
-    <div
-      className={[
-        "group relative w-36 shrink-0 overflow-hidden rounded-md border bg-background transition sm:w-39",
-        selected
-          ? "border-primary ring-2 ring-primary/25"
-          : "border-border/80 hover:border-foreground/20",
-        deleting ? "opacity-60" : "",
-      ].join(" ")}
-      aria-busy={busy}
-    >
-      <div className="absolute left-2 top-2 z-10">
-        <Checkbox
-          checked={selected}
-          onCheckedChange={(checked) => onToggle(checked === true)}
-          aria-label={t("library.selectAsset", { title: displayTitle })}
-          className={[
-            "border-2 border-foreground/40 bg-background/90 shadow-sm opacity-100 transition sm:opacity-0 sm:group-hover:opacity-100 sm:focus-visible:opacity-100",
-            selected ? "sm:opacity-100" : "",
-          ].join(" ")}
-        />
-      </div>
-      <div className="absolute right-2 top-2 z-10">
-        <DropdownMenu>
-          <DropdownMenuTrigger asChild>
-            <Button
-              type="button"
-              variant="secondary"
-              size="icon"
-              className="h-8 w-8 shadow-sm opacity-100 sm:opacity-0 sm:group-hover:opacity-100 sm:focus-visible:opacity-100 data-[state=open]:opacity-100"
-              aria-label={t("library.assetActions")}
-              disabled={busy}
-            >
-              <IconDotsVertical className="h-4 w-4" />
-            </Button>
-          </DropdownMenuTrigger>
-          <DropdownMenuContent align="end">
-            <DropdownMenuItem asChild>
-              <Link to={`/asset/${asset.id}`}>
-                <IconArrowUpRight className="mr-2 h-4 w-4 shrink-0" />
-                {t("library.viewDetails")}
-              </Link>
-            </DropdownMenuItem>
-            <DropdownMenuItem
-              onSelect={(event) => {
-                event.preventDefault();
-                setContextOpen(true);
-              }}
-            >
-              <IconLink className="mr-2 h-4 w-4 shrink-0" />
-              Add to context
-              {/* i18n-ignore assets template UI is raw-English pending template i18n pass */}
-            </DropdownMenuItem>
-            {canMoveToReferences ? (
-              <DropdownMenuItem
-                onSelect={(event) => {
-                  event.preventDefault();
-                  onMoveToReferences?.();
-                }}
-              >
-                <IconPhotoPlus className="mr-2 h-4 w-4 shrink-0" />
-                {t("library.addToReferences")}
-              </DropdownMenuItem>
-            ) : null}
-            <DropdownMenuSub>
-              <DropdownMenuSubTrigger>
-                <IconFolder className="mr-2 h-4 w-4 shrink-0" />
-                {t("library.moveTo")}
-              </DropdownMenuSubTrigger>
-              <DropdownMenuSubContent>
-                <DropdownMenuItem
-                  onSelect={() =>
-                    updateAsset.mutate({
-                      id: asset.id,
-                      folderId: null,
-                    })
-                  }
-                >
-                  {t("library.unfiled")}
-                </DropdownMenuItem>
-                {folders.map((folder) => (
-                  <DropdownMenuItem
-                    key={folder.id}
-                    onSelect={() =>
-                      updateAsset.mutate({
-                        id: asset.id,
-                        folderId: folder.id,
-                      })
-                    }
-                  >
-                    {folder.title}
-                  </DropdownMenuItem>
-                ))}
-              </DropdownMenuSubContent>
-            </DropdownMenuSub>
-            <DropdownMenuSeparator />
-            <DropdownMenuItem
-              className="text-destructive focus:bg-destructive/10 focus:text-destructive"
-              onSelect={onDelete}
-            >
-              <IconTrash className="mr-2 h-4 w-4 shrink-0" />
-              {t("assetDetail.delete")}
-            </DropdownMenuItem>
-          </DropdownMenuContent>
-        </DropdownMenu>
-      </div>
-      <Link to={`/asset/${asset.id}`} className="block outline-none">
-        <div className="relative aspect-4/3 bg-muted">
-          <AssetPreview asset={asset} />
-          <div className="pointer-events-none absolute inset-x-0 bottom-0 bg-linear-to-t from-background via-background/90 to-transparent px-2 pb-2 pt-8">
-            <div className="flex items-center gap-1.5 truncate text-xs font-medium">
-              {asset.mediaType === "video" ? (
-                <IconVideo className="h-3.5 w-3.5 shrink-0 text-muted-foreground" />
-              ) : (
-                <IconPhoto className="h-3.5 w-3.5 shrink-0 text-muted-foreground" />
-              )}
-              <span className="truncate">{displayTitle}</span>
-            </div>
-            <div className="mt-1 flex min-w-0 items-center gap-1 overflow-hidden text-[10px] font-medium text-muted-foreground">
-              {sourceText ? (
-                <span className="truncate">{sourceText}</span>
-              ) : (
-                <>
-                  <span className="truncate">{asset.status}</span>
-                  {categoryLabel ? (
-                    <>
-                      <span className="shrink-0 text-muted-foreground/60">
-                        /
-                      </span>
-                      <span className="truncate">{categoryLabel}</span>
-                    </>
-                  ) : null}
-                </>
-              )}
-            </div>
-          </div>
-        </div>
-      </Link>
-      {hasPrimaryActions ? (
-        <div className="space-y-2 border-t border-border/70 p-2">
-          <div
-            className={
-              onSave && canMoveToReferences
-                ? "grid grid-cols-1 gap-2"
-                : "grid grid-cols-2 gap-2"
-            }
-          >
-            {onSave ? (
-              <Button
-                size="sm"
-                className="h-8 px-2 text-xs"
-                onClick={onSave}
-                disabled={busy}
-              >
-                {saving ? (
-                  <Spinner className="h-3.5 w-3.5" />
-                ) : (
-                  t("library.save")
-                )}
-              </Button>
-            ) : null}
-            {canMoveToReferences ? (
-              <Button
-                variant="outline"
-                size="sm"
-                className={
-                  onSave ? "h-8 px-2 text-xs" : "col-span-2 h-8 px-2 text-xs"
-                }
-                onClick={onMoveToReferences}
-                disabled={busy}
-                title={t("library.addToReferences")}
-              >
-                {promoting ? (
-                  <Spinner className="h-3.5 w-3.5" />
-                ) : (
-                  t("library.addToReferences")
-                )}
-              </Button>
-            ) : null}
-          </div>
-        </div>
-      ) : null}
-      <CreativeContextShareSheet
-        open={contextOpen}
-        onOpenChange={setContextOpen}
-        resource={{
-          appId: "assets",
-          resourceType: "asset",
-          resourceId: asset.id,
-          title: displayTitle,
-          updatedAt: asset.updatedAt,
-          preview: { kind: "document", label: "Asset" },
-        }}
-      />
-    </div>
-  );
-}
-
 export function LiveCandidatesStage({
   slots,
   draftAssets,
@@ -3784,7 +3524,7 @@ export function LiveCandidatesStage({
     asset?: any;
   } | null>(null);
   const dismissing = dismissSlot.isPending || deleteAsset.isPending;
-  const totalCount = slots.length + draftAssets.length;
+
   const [activeItemId, setActiveItemId] = useState<string | null>(null);
 
   async function handleDismissCandidate() {

package/corpus/templates/assets/app/routes/library.tsx

@@ -1155,7 +1155,7 @@ function AllAssetsBrowser({
   foldersByLibraryId?: Record<string, any[]>;
 }) {
   const t = useT();
-  const navigate = useNavigate();
+
   const queryClient = useQueryClient();
   const [searchParams, setSearchParams] = useSearchParams();
   const searchParamsKey = searchParams.toString();

package/corpus/templates/assets/app/routes/settings.tsx

@@ -582,9 +582,6 @@ function CredentialForm({
       });
 
       if (!response.ok) {
-        const data = (await response.json().catch(() => ({}))) as {
-          error?: string;
-        };
         throw new Error(`${t("settings.saveFailed")}: ${response.status}`);
       }
 

package/corpus/templates/brain/.agents/skills/secrets/SKILL.md

@@ -38,7 +38,11 @@ connection exists:
   register a `kind: "oauth"` entry so the shared UI renders Connect and the
   runtime owns status, refresh, and reauthorization.
 - **Deploy- or app-level configuration** - use deployment/runtime
-  configuration, not a per-user secret row.
+  configuration, not a per-user secret row. For a non-secret public setting
+  already represented by `AgentNativeConfig`, put the default in
+  `agent-native.config.ts` and use its `AGENT_NATIVE_CONFIG_<PATH>` alias only
+  for a deployment override. Never put a credential or provider key in that
+  public namespace.
 - **Account, customer, manager, or other non-secret identifier** - store it as
   scoped connection metadata or app data, not as a masked secret field.
 

package/corpus/templates/brain/.agents/skills/workspace-conventions/SKILL.md

@@ -55,7 +55,10 @@ Preview before `--apply`, commit `agent-native.ejections.json`, and never edit
   ZIPs, screenshots, thumbnails, session replay chunks) in configured file/blob
   storage and persist only URLs, ids, or handles.
 - Store shared runtime configuration in the workspace root `.env`; use
-  `apps/<app>/.env` only for app-specific overrides. Never hardcode API keys,
+  `apps/<app>/.env` only for app-specific overrides. For public app behavior,
+  prefer the default in `agent-native.config.ts` and use the deterministic
+  `AGENT_NATIVE_CONFIG_<UPPER_SNAKE_PATH>` alias only when a non-secret value
+  needs a deployment override. Never hardcode API keys,
   tokens, webhook URLs, signing secrets, private Builder/internal data, customer
   data, or credential-looking literals in source, docs, prompts, fixtures,
   application state, action responses, or generated app content. Use

package/corpus/templates/brain/actions/ask-brain.ts

@@ -17,7 +17,6 @@ import {
   compareEvaluatedSourcePolicies,
   evaluateSourceAnswerPolicy,
   loadAccessibleSourcePolicySnapshots,
-  type EvaluatedSourceAnswerPolicy,
   type SourcePolicySnapshot,
 } from "../server/lib/source-policy.js";
 

package/corpus/templates/brain/app/routes/sources.tsx

@@ -683,10 +683,6 @@ function scopedCredentialCount(provider: BrainConnectionProvider) {
   );
 }
 
-function countLabel(count: number, singular: string, plural = `${singular}s`) {
-  return `${count.toLocaleString()} ${count === 1 ? singular : plural}`;
-}
-
 function sharedConnectionReadiness(
   provider: BrainConnectionProvider,
   t: BrainT,

package/corpus/templates/brain/server/lib/capture-sanitization.ts

@@ -399,17 +399,6 @@ function buildClassifierSystemPrompt(settings: BrainSettings) {
     .join("\n");
 }
 
-function buildSanitizerUserPrompt(input: CaptureSanitizationInput) {
-  return [
-    `Source provider: ${input.source.provider}`,
-    `Capture title: ${sanitizeSensitiveText(input.title)}`,
-    "Raw capture text to filter:",
-    "```text",
-    input.content,
-    "```",
-  ].join("\n");
-}
-
 function modelInputLimit(input: CaptureSanitizationInput) {
   return (
     numberSetting(input.sourceConfig?.captureSanitizationMaxChars) ??

package/corpus/templates/calendar/.agents/skills/secrets/SKILL.md

@@ -38,7 +38,11 @@ connection exists:
   register a `kind: "oauth"` entry so the shared UI renders Connect and the
   runtime owns status, refresh, and reauthorization.
 - **Deploy- or app-level configuration** - use deployment/runtime
-  configuration, not a per-user secret row.
+  configuration, not a per-user secret row. For a non-secret public setting
+  already represented by `AgentNativeConfig`, put the default in
+  `agent-native.config.ts` and use its `AGENT_NATIVE_CONFIG_<PATH>` alias only
+  for a deployment override. Never put a credential or provider key in that
+  public namespace.
 - **Account, customer, manager, or other non-secret identifier** - store it as
   scoped connection metadata or app data, not as a masked secret field.
 

package/corpus/templates/calendar/.agents/skills/workspace-conventions/SKILL.md

@@ -55,7 +55,10 @@ Preview before `--apply`, commit `agent-native.ejections.json`, and never edit
   ZIPs, screenshots, thumbnails, session replay chunks) in configured file/blob
   storage and persist only URLs, ids, or handles.
 - Store shared runtime configuration in the workspace root `.env`; use
-  `apps/<app>/.env` only for app-specific overrides. Never hardcode API keys,
+  `apps/<app>/.env` only for app-specific overrides. For public app behavior,
+  prefer the default in `agent-native.config.ts` and use the deterministic
+  `AGENT_NATIVE_CONFIG_<UPPER_SNAKE_PATH>` alias only when a non-secret value
+  needs a deployment override. Never hardcode API keys,
   tokens, webhook URLs, signing secrets, private Builder/internal data, customer
   data, or credential-looking literals in source, docs, prompts, fixtures,
   application state, action responses, or generated app content. Use

package/corpus/templates/calendar/app/components/calendar/EventDetailPopover.tsx

@@ -10,7 +10,6 @@ import {
   IconClock,
   IconMapPin,
   IconVideo,
-  IconRefresh,
   IconBell,
   IconLayoutSidebarRight,
   IconFileText,
@@ -192,16 +191,6 @@ function formatDuration(start: string, end: string): string {
   return `${hours}h ${minutes}min`;
 }
 
-function formatTimeShort(dateStr: string): string {
-  const d = parseISO(dateStr);
-  const h = d.getHours();
-  const m = d.getMinutes();
-  const period = h >= 12 ? "PM" : "AM";
-  const hour12 = h % 12 || 12;
-  if (m === 0) return `${hour12} ${period}`;
-  return `${hour12}:${m.toString().padStart(2, "0")} ${period}`;
-}
-
 /** Extract a Zoom/Meet/Teams link from location or description */
 function extractMeetingLink(event: CalendarEvent): {
   url: string;
@@ -447,15 +436,6 @@ function toTimeInputValue(iso: string, timezone?: string): string {
   return format(d, "HH:mm");
 }
 
-function formatEventDateRange(start: string, end: string, allDay?: boolean) {
-  const startDate = parseISO(start);
-  const endDate = parseISO(end);
-  const displayEndDate = allDay ? new Date(endDate.getTime() - 1) : endDate;
-  const startLabel = format(startDate, "EEE MMM d");
-  const endLabel = format(displayEndDate, "EEE MMM d");
-  return startLabel === endLabel ? startLabel : `${startLabel} - ${endLabel}`;
-}
-
 interface EventDetailPopoverProps {
   event: CalendarEvent;
   children: React.ReactNode;

package/corpus/templates/calendar/app/pages/CalendarView.tsx

@@ -88,7 +88,6 @@ import {
 import {
   addCalendarDays,
   dateKeyToDate,
-  dateKeyToTimezoneIso,
   dateToCalendarDateKey,
   eventOverlapsCalendarDay,
   getBrowserTimezone,

package/corpus/templates/chat/.agents/skills/secrets/SKILL.md

@@ -38,7 +38,11 @@ connection exists:
   register a `kind: "oauth"` entry so the shared UI renders Connect and the
   runtime owns status, refresh, and reauthorization.
 - **Deploy- or app-level configuration** - use deployment/runtime
-  configuration, not a per-user secret row.
+  configuration, not a per-user secret row. For a non-secret public setting
+  already represented by `AgentNativeConfig`, put the default in
+  `agent-native.config.ts` and use its `AGENT_NATIVE_CONFIG_<PATH>` alias only
+  for a deployment override. Never put a credential or provider key in that
+  public namespace.
 - **Account, customer, manager, or other non-secret identifier** - store it as
   scoped connection metadata or app data, not as a masked secret field.