@agent-native/core 0.0.0-beta-20260820200358 → 0.0.0-beta-20260820214042

package/corpus/README.md

@@ -31,4 +31,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- template files: 8489
+- template files: 8490

package/corpus/templates/analytics/.agents/skills/secrets/SKILL.md

@@ -38,7 +38,11 @@ connection exists:
   register a `kind: "oauth"` entry so the shared UI renders Connect and the
   runtime owns status, refresh, and reauthorization.
 - **Deploy- or app-level configuration** - use deployment/runtime
-  configuration, not a per-user secret row.
+  configuration, not a per-user secret row. For a non-secret public setting
+  already represented by `AgentNativeConfig`, put the default in
+  `agent-native.config.ts` and use its `AGENT_NATIVE_CONFIG_<PATH>` alias only
+  for a deployment override. Never put a credential or provider key in that
+  public namespace.
 - **Account, customer, manager, or other non-secret identifier** - store it as
   scoped connection metadata or app data, not as a masked secret field.
 

package/corpus/templates/analytics/.agents/skills/workspace-conventions/SKILL.md

@@ -55,7 +55,10 @@ Preview before `--apply`, commit `agent-native.ejections.json`, and never edit
   ZIPs, screenshots, thumbnails, session replay chunks) in configured file/blob
   storage and persist only URLs, ids, or handles.
 - Store shared runtime configuration in the workspace root `.env`; use
-  `apps/<app>/.env` only for app-specific overrides. Never hardcode API keys,
+  `apps/<app>/.env` only for app-specific overrides. For public app behavior,
+  prefer the default in `agent-native.config.ts` and use the deterministic
+  `AGENT_NATIVE_CONFIG_<UPPER_SNAKE_PATH>` alias only when a non-secret value
+  needs a deployment override. Never hardcode API keys,
   tokens, webhook URLs, signing secrets, private Builder/internal data, customer
   data, or credential-looking literals in source, docs, prompts, fixtures,
   application state, action responses, or generated app content. Use

package/corpus/templates/analytics/app/components/layout/Sidebar.tsx

@@ -15,7 +15,6 @@ import {
   IconArchive,
   IconActivity,
   IconHeartbeat,
-  IconPlus,
   IconLock,
   IconLink,
   IconMessageCircle,
@@ -46,7 +45,6 @@ import { Link, useLocation, useNavigate } from "react-router";
 import { toast } from "sonner";
 
 import { useAuth } from "@/components/auth/AuthProvider";
-import { getIdToken } from "@/lib/auth";
 import { ANALYTICS_CHAT_STORAGE_KEY } from "@/lib/chat-handoff";
 import { cn, shortcutModifierLabel } from "@/lib/utils";
 import {
@@ -121,7 +119,6 @@ import {
   DropdownMenuSeparator,
   DropdownMenuTrigger,
 } from "@/components/ui/dropdown-menu";
-import { Input } from "@/components/ui/input";
 import {
   Popover,
   PopoverTrigger,
@@ -256,7 +253,11 @@ function applyOrder<T extends { id: string }>(
   return ordered;
 }
 
-function matchesVisibilityFilter(
+function isVisibility(value: unknown): value is Visibility {
+  return value === "private" || value === "org" || value === "public";
+}
+
+export function matchesVisibilityFilter(
   item: { visibility?: Visibility },
   filter: SidebarVisibilityFilter,
 ): boolean {
@@ -267,6 +268,23 @@ function matchesVisibilityFilter(
   return item.visibility === "org" || item.visibility === "public";
 }
 
+export function threadMatchesVisibilityFilter(
+  thread: ChatThreadSummary,
+  filter: SidebarVisibilityFilter,
+): boolean {
+  const runtimeThread = thread as ChatThreadSummary & {
+    visibility?: unknown;
+  };
+  return matchesVisibilityFilter(
+    {
+      visibility: isVisibility(runtimeThread.visibility)
+        ? runtimeThread.visibility
+        : "private",
+    },
+    filter,
+  );
+}
+
 function SidebarSectionSettingsPopover({
   label,
   sortMode,
@@ -277,8 +295,8 @@ function SidebarSectionSettingsPopover({
   onShowHiddenChange,
 }: {
   label: string;
-  sortMode: SidebarSortMode;
-  onSortModeChange: (value: SidebarSortMode) => void;
+  sortMode?: SidebarSortMode;
+  onSortModeChange?: (value: SidebarSortMode) => void;
   visibilityFilter: SidebarVisibilityFilter;
   onVisibilityFilterChange: (value: SidebarVisibilityFilter) => void;
   showHidden?: boolean;
@@ -353,54 +371,56 @@ function SidebarSectionSettingsPopover({
               </Tooltip>
             </ToggleGroup>
           </div>
-          <div className="grid gap-1.5">
-            <p className="px-2 text-[11px] font-medium uppercase tracking-wide text-muted-foreground">
-              {t("sidebar.sortBy")}
-            </p>
-            <ToggleGroup
-              type="single"
-              value={sortMode}
-              onValueChange={(next) => {
-                if (
-                  next === "most-used" ||
-                  next === "alphabetical" ||
-                  next === "manual"
-                ) {
-                  onSortModeChange(next);
-                }
-              }}
-              className="grid grid-cols-3 gap-1 rounded-lg border border-border/60 bg-background/50 p-1"
-            >
-              <Tooltip>
-                <TooltipTrigger asChild>
-                  <ToggleGroupItem
-                    value="most-used"
-                    aria-label={t("sidebar.sortMostUsedPersonal")}
-                    className={segmentedItemClass}
-                  >
-                    {t("sidebar.used")}
-                  </ToggleGroupItem>
-                </TooltipTrigger>
-                <TooltipContent side="bottom">
-                  {t("sidebar.usedExplainer")}
-                </TooltipContent>
-              </Tooltip>
-              <ToggleGroupItem
-                value="alphabetical"
-                aria-label={t("sidebar.sortAlphabetically")}
-                className={segmentedItemClass}
-              >
-                {t("sidebar.alphabetical")}
-              </ToggleGroupItem>
-              <ToggleGroupItem
-                value="manual"
-                aria-label={t("sidebar.sortManually")}
-                className={segmentedItemClass}
+          {sortMode && onSortModeChange ? (
+            <div className="grid gap-1.5">
+              <p className="px-2 text-[11px] font-medium uppercase tracking-wide text-muted-foreground">
+                {t("sidebar.sortBy")}
+              </p>
+              <ToggleGroup
+                type="single"
+                value={sortMode}
+                onValueChange={(next) => {
+                  if (
+                    next === "most-used" ||
+                    next === "alphabetical" ||
+                    next === "manual"
+                  ) {
+                    onSortModeChange(next);
+                  }
+                }}
+                className="grid grid-cols-3 gap-1 rounded-lg border border-border/60 bg-background/50 p-1"
               >
-                {t("sidebar.manual")}
-              </ToggleGroupItem>
-            </ToggleGroup>
-          </div>
+                <Tooltip>
+                  <TooltipTrigger asChild>
+                    <ToggleGroupItem
+                      value="most-used"
+                      aria-label={t("sidebar.sortMostUsedPersonal")}
+                      className={segmentedItemClass}
+                    >
+                      {t("sidebar.used")}
+                    </ToggleGroupItem>
+                  </TooltipTrigger>
+                  <TooltipContent side="bottom">
+                    {t("sidebar.usedExplainer")}
+                  </TooltipContent>
+                </Tooltip>
+                <ToggleGroupItem
+                  value="alphabetical"
+                  aria-label={t("sidebar.sortAlphabetically")}
+                  className={segmentedItemClass}
+                >
+                  {t("sidebar.alphabetical")}
+                </ToggleGroupItem>
+                <ToggleGroupItem
+                  value="manual"
+                  aria-label={t("sidebar.sortManually")}
+                  className={segmentedItemClass}
+                >
+                  {t("sidebar.manual")}
+                </ToggleGroupItem>
+              </ToggleGroup>
+            </div>
+          ) : null}
           <div className="grid gap-1">
             {onShowHiddenChange && showHidden !== undefined && (
               <label
@@ -1288,9 +1308,11 @@ function persistedAnalyticsThreadId() {
 function AnalyticsChatsSection({
   isAskRoute,
   open,
+  visibilityFilter,
 }: {
   isAskRoute: boolean;
   open: boolean;
+  visibilityFilter: SidebarVisibilityFilter;
 }) {
   const navigate = useNavigate();
   const t = useT();
@@ -1312,10 +1334,15 @@ function AnalyticsChatsSection({
   const visibleThreads = useMemo(
     () =>
       threads
-        .filter((thread) => thread.messageCount > 0 && !thread.archivedAt)
+        .filter(
+          (thread) =>
+            thread.messageCount > 0 &&
+            !thread.archivedAt &&
+            threadMatchesVisibilityFilter(thread, visibilityFilter),
+        )
         .sort(compareThreads)
         .slice(0, 15),
-    [threads],
+    [threads, visibilityFilter],
   );
   const chatItems = useMemo<ChatHistoryItem[]>(
     () =>
@@ -1491,6 +1518,7 @@ export function Sidebar({ mobile }: { mobile?: boolean } = {}) {
   const [askOpen, setAskOpen] = useState(
     () => getStoredBooleanPreference(ASK_OPEN_KEY) ?? isAskRoute,
   );
+  const [askFilter, setAskFilter] = useState<SidebarVisibilityFilter>("all");
   const [dashOpen, setDashOpen] = useState(
     () =>
       getStoredBooleanPreference(DASHBOARDS_OPEN_KEY) ??
@@ -2298,6 +2326,11 @@ export function Sidebar({ mobile }: { mobile?: boolean } = {}) {
                       {t("navigation.ask")}
                     </span>
                   </Link>
+                  <SidebarSectionSettingsPopover
+                    label={t("navigation.ask")}
+                    visibilityFilter={askFilter}
+                    onVisibilityFilterChange={setAskFilter}
+                  />
                   <button
                     type="button"
                     onClick={toggleAskOpen}
@@ -2317,7 +2350,11 @@ export function Sidebar({ mobile }: { mobile?: boolean } = {}) {
                     />
                   </button>
                 </div>
-                <AnalyticsChatsSection isAskRoute={isAskRoute} open={askOpen} />
+                <AnalyticsChatsSection
+                  isAskRoute={isAskRoute}
+                  open={askOpen}
+                  visibilityFilter={askFilter}
+                />
               </div>
 
               {/* Sessions link */}

package/corpus/templates/analytics/app/i18n-data.ts

@@ -113,10 +113,10 @@ const enUS = {
       "Used, sort, and manual order are personal to this browser.",
     usedExplainer: "Counts how often you've opened each item in this browser.",
     visibilityAll: "All",
-    visibilityPrivateOnly: "Private",
+    visibilityPrivateOnly: "Mine",
     visibilitySharedOnly: "Shared",
     visibilityAllDescription: "Show all items",
-    visibilityPrivateOnlyDescription: "Show private items only",
+    visibilityPrivateOnlyDescription: "Show items visible only to you",
     visibilitySharedOnlyDescription: "Show org-shared and public items",
     hiddenAnalyses: "Hidden analyses",
     shareWithOrg: "Share with org",
@@ -5048,10 +5048,10 @@ export const messagesByLocale = {
       personalControlsNote: "排序、手动顺序和“常用”仅适用于此浏览器。",
       usedExplainer: "统计你在此浏览器中打开每个项目的次数。",
       visibilityAll: "全部",
-      visibilityPrivateOnly: "私有",
+      visibilityPrivateOnly: "我的",
       visibilitySharedOnly: "共享",
       visibilityAllDescription: "显示所有项目",
-      visibilityPrivateOnlyDescription: "仅显示私有项目",
+      visibilityPrivateOnlyDescription: "仅显示你可见的项目",
       visibilitySharedOnlyDescription: "显示组织共享和公开项目",
       hiddenAnalyses: "隐藏的分析",
       shareWithOrg: "与组织共享",
@@ -5258,10 +5258,11 @@ export const messagesByLocale = {
       usedExplainer:
         "Cuenta cuántas veces abriste cada elemento en este navegador.",
       visibilityAll: "Todo",
-      visibilityPrivateOnly: "Privado",
+      visibilityPrivateOnly: "Míos",
       visibilitySharedOnly: "Compartido",
       visibilityAllDescription: "Mostrar todos los elementos",
-      visibilityPrivateOnlyDescription: "Mostrar solo elementos privados",
+      visibilityPrivateOnlyDescription:
+        "Mostrar solo elementos visibles para ti",
       visibilitySharedOnlyDescription:
         "Mostrar elementos compartidos con la organización y públicos",
       hiddenAnalyses: "Análisis ocultos",
@@ -5478,11 +5479,11 @@ export const messagesByLocale = {
       usedExplainer:
         "Compte le nombre de fois où vous avez ouvert chaque élément dans ce navigateur.",
       visibilityAll: "Tous",
-      visibilityPrivateOnly: "Privé",
+      visibilityPrivateOnly: "À moi",
       visibilitySharedOnly: "Partagé",
       visibilityAllDescription: "Afficher tous les éléments",
       visibilityPrivateOnlyDescription:
-        "Afficher uniquement les éléments privés",
+        "Afficher uniquement les éléments visibles pour vous",
       visibilitySharedOnlyDescription:
         "Afficher les éléments partagés avec l’organisation et publics",
       hiddenAnalyses: "Analyses masquées",
@@ -5705,10 +5706,11 @@ export const messagesByLocale = {
       usedExplainer:
         "Zählt, wie oft du jedes Element in diesem Browser geöffnet hast.",
       visibilityAll: "Alle",
-      visibilityPrivateOnly: "Privat",
+      visibilityPrivateOnly: "Meine",
       visibilitySharedOnly: "Geteilt",
       visibilityAllDescription: "Alle Elemente anzeigen",
-      visibilityPrivateOnlyDescription: "Nur private Elemente anzeigen",
+      visibilityPrivateOnlyDescription:
+        "Nur für dich sichtbare Elemente anzeigen",
       visibilitySharedOnlyDescription:
         "Mit Organisation geteilte und öffentliche Elemente anzeigen",
       hiddenAnalyses: "Ausgeblendete Analysen",
@@ -5931,10 +5933,10 @@ export const messagesByLocale = {
         "並べ替え、手動順序、「使用」はこのブラウザーだけに保存されます。",
       usedExplainer: "このブラウザーで各項目を開いた回数を数えます。",
       visibilityAll: "すべて",
-      visibilityPrivateOnly: "非公開",
+      visibilityPrivateOnly: "自分の",
       visibilitySharedOnly: "共有",
       visibilityAllDescription: "すべての項目を表示",
-      visibilityPrivateOnlyDescription: "非公開の項目のみ表示",
+      visibilityPrivateOnlyDescription: "自分だけに表示される項目のみ表示",
       visibilitySharedOnlyDescription: "組織共有と公開の項目を表示",
       hiddenAnalyses: "非表示の分析",
       shareWithOrg: "組織と共有",
@@ -6149,10 +6151,10 @@ export const messagesByLocale = {
         "정렬, 수동 순서, 사용됨은 이 브라우저에만 적용됩니다.",
       usedExplainer: "이 브라우저에서 각 항목을 연 횟수를 계산합니다.",
       visibilityAll: "전체",
-      visibilityPrivateOnly: "비공개",
+      visibilityPrivateOnly: "내 항목",
       visibilitySharedOnly: "공유됨",
       visibilityAllDescription: "모든 항목 표시",
-      visibilityPrivateOnlyDescription: "비공개 항목만 표시",
+      visibilityPrivateOnlyDescription: "나에게만 표시되는 항목만 표시",
       visibilitySharedOnlyDescription: "조직 공유 및 공개 항목 표시",
       hiddenAnalyses: "숨긴 분석",
       shareWithOrg: "조직과 공유",
@@ -6368,10 +6370,11 @@ export const messagesByLocale = {
       usedExplainer:
         "Conta quantas vezes você abriu cada item neste navegador.",
       visibilityAll: "Tudo",
-      visibilityPrivateOnly: "Privado",
+      visibilityPrivateOnly: "Meus",
       visibilitySharedOnly: "Compartilhado",
       visibilityAllDescription: "Mostrar todos os itens",
-      visibilityPrivateOnlyDescription: "Mostrar apenas itens privados",
+      visibilityPrivateOnlyDescription:
+        "Mostrar apenas itens visíveis para você",
       visibilitySharedOnlyDescription:
         "Mostrar itens compartilhados com a organização e públicos",
       hiddenAnalyses: "Análises ocultas",
@@ -6592,10 +6595,10 @@ export const messagesByLocale = {
       personalControlsNote: "क्रम, मैन्युअल क्रम और उपयोग इस ब्राउज़र के लिए निजी हैं।",
       usedExplainer: "गिनता है कि आपने इस ब्राउज़र में हर आइटम कितनी बार खोला है।",
       visibilityAll: "सभी",
-      visibilityPrivateOnly: "निजी",
+      visibilityPrivateOnly: "मेरे",
       visibilitySharedOnly: "साझा",
       visibilityAllDescription: "सभी आइटम दिखाएं",
-      visibilityPrivateOnlyDescription: "केवल निजी आइटम दिखाएं",
+      visibilityPrivateOnlyDescription: "केवल आपको दिखाई देने वाले आइटम दिखाएं",
       visibilitySharedOnlyDescription: "संगठन से साझा और सार्वजनिक आइटम दिखाएं",
       hiddenAnalyses: "छिपे हुए विश्लेषण",
       shareWithOrg: "संगठन से साझा करें",
@@ -6807,10 +6810,10 @@ export const messagesByLocale = {
         "الفرز والترتيب اليدوي وخيار مستخدم شخصية لهذا المتصفح.",
       usedExplainer: "يحسب عدد مرات فتحك لكل عنصر في هذا المتصفح.",
       visibilityAll: "الكل",
-      visibilityPrivateOnly: "خاص",
+      visibilityPrivateOnly: "لي",
       visibilitySharedOnly: "مشترك",
       visibilityAllDescription: "عرض كل العناصر",
-      visibilityPrivateOnlyDescription: "عرض العناصر الخاصة فقط",
+      visibilityPrivateOnlyDescription: "عرض العناصر الظاهرة لك فقط",
       visibilitySharedOnlyDescription: "عرض عناصر المؤسسة المشتركة والعامة",
       hiddenAnalyses: "التحليلات المخفية",
       shareWithOrg: "مشاركة مع المؤسسة",

package/corpus/templates/analytics/app/pages/Settings.tsx

@@ -20,7 +20,6 @@ import { Link } from "react-router";
 import { toast } from "sonner";
 
 import { Button } from "@/components/ui/button";
-import { Label } from "@/components/ui/label";
 import { Switch } from "@/components/ui/switch";
 
 import changelog from "../../CHANGELOG.md?raw";

package/corpus/templates/analytics/app/pages/adhoc/explorer/index.tsx

@@ -21,7 +21,6 @@ import {
   AlertDialogTitle,
 } from "@/components/ui/alert-dialog";
 import { Button } from "@/components/ui/button";
-import { Card, CardContent } from "@/components/ui/card";
 import {
   Dialog,
   DialogContent,

package/corpus/templates/analytics/app/pages/adhoc/explorer-dashboard/index.tsx

@@ -201,7 +201,7 @@ export default function ExplorerDashboardPage() {
   );
   const [archivedAt, setArchivedAt] = useState<string | null>(null);
   const [hiddenAt, setHiddenAt] = useState<string | null>(null);
-  const [hiddenBy, setHiddenBy] = useState<string | null>(null);
+  const [, setHiddenBy] = useState<string | null>(null);
   const [resourceAccess, setResourceAccess] = useState<ResourceAccess | null>(
     null,
   );

package/corpus/templates/analytics/app/pages/adhoc/sql-dashboard/SqlChartCard.tsx

@@ -613,11 +613,12 @@ export function SqlChartCard({
             {panel.title}
           </CardTitle>
           <div className="flex items-center gap-1 opacity-0 transition-opacity group-hover:opacity-100 focus-within:opacity-100">
-            {editable && onSaveSql ? (
+            {!editable || onSaveSql ? (
               <ViewSqlPopover
                 panel={panel}
                 resolvedSql={resolvedSql}
                 onSaveSql={onSaveSql}
+                editable={editable}
               >
                 <button
                   className="p-1 rounded text-muted-foreground hover:text-foreground"

package/corpus/templates/analytics/app/pages/sessions/SessionsPage.tsx

@@ -21,7 +21,6 @@ import {
   IconServer,
   IconSettings,
 } from "@tabler/icons-react";
-import { useQuery } from "@tanstack/react-query";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { Link, useSearchParams } from "react-router";
 import { toast } from "sonner";

package/corpus/templates/analytics/server/lib/first-party-analytics-backend.ts

@@ -557,38 +557,6 @@ function maskSqlLiterals(sql: string): string {
   return chars.join("");
 }
 
-function rewriteOutsideSqlLiterals(
-  sql: string,
-  rewrite: (code: string) => string,
-): string {
-  let result = "";
-  let cursor = 0;
-  while (cursor < sql.length) {
-    const literalStart = sql.indexOf("'", cursor);
-    if (literalStart === -1) {
-      result += rewrite(sql.slice(cursor));
-      break;
-    }
-    result += rewrite(sql.slice(cursor, literalStart));
-    let literalEnd = literalStart + 1;
-    while (literalEnd < sql.length) {
-      if (sql[literalEnd] !== "'") {
-        literalEnd++;
-        continue;
-      }
-      if (sql[literalEnd + 1] === "'") {
-        literalEnd += 2;
-        continue;
-      }
-      literalEnd++;
-      break;
-    }
-    result += sql.slice(literalStart, literalEnd);
-    cursor = literalEnd;
-  }
-  return result;
-}
-
 const SQL_LITERAL_PLACEHOLDER_PREFIX = "_fpa_lit_";
 
 /**

package/corpus/templates/analytics/server/lib/session-replay.ts

@@ -8,11 +8,7 @@ import {
   readPrivateBlob,
   type PrivateBlobHandle,
 } from "@agent-native/core/private-blob";
-import {
-  getRequestUserEmail,
-  recordChange,
-  runWithRequestContext,
-} from "@agent-native/core/server";
+import { recordChange, runWithRequestContext } from "@agent-native/core/server";
 import {
   accessFilter,
   resolveAccess,

package/corpus/templates/assets/.agents/skills/secrets/SKILL.md

@@ -38,7 +38,11 @@ connection exists:
   register a `kind: "oauth"` entry so the shared UI renders Connect and the
   runtime owns status, refresh, and reauthorization.
 - **Deploy- or app-level configuration** - use deployment/runtime
-  configuration, not a per-user secret row.
+  configuration, not a per-user secret row. For a non-secret public setting
+  already represented by `AgentNativeConfig`, put the default in
+  `agent-native.config.ts` and use its `AGENT_NATIVE_CONFIG_<PATH>` alias only
+  for a deployment override. Never put a credential or provider key in that
+  public namespace.
 - **Account, customer, manager, or other non-secret identifier** - store it as
   scoped connection metadata or app data, not as a masked secret field.
 

package/corpus/templates/assets/.agents/skills/workspace-conventions/SKILL.md

@@ -55,7 +55,10 @@ Preview before `--apply`, commit `agent-native.ejections.json`, and never edit
   ZIPs, screenshots, thumbnails, session replay chunks) in configured file/blob
   storage and persist only URLs, ids, or handles.
 - Store shared runtime configuration in the workspace root `.env`; use
-  `apps/<app>/.env` only for app-specific overrides. Never hardcode API keys,
+  `apps/<app>/.env` only for app-specific overrides. For public app behavior,
+  prefer the default in `agent-native.config.ts` and use the deterministic
+  `AGENT_NATIVE_CONFIG_<UPPER_SNAKE_PATH>` alias only when a non-secret value
+  needs a deployment override. Never hardcode API keys,
   tokens, webhook URLs, signing secrets, private Builder/internal data, customer
   data, or credential-looking literals in source, docs, prompts, fixtures,
   application state, action responses, or generated app content. Use

package/corpus/templates/assets/actions/save-generated-image.ts

@@ -1,10 +1,5 @@
 import { defineAction } from "@agent-native/core";
 import type { ActionRunContext } from "@agent-native/core/action";
-import {
-  deleteAppState,
-  readAppState,
-  writeAppState,
-} from "@agent-native/core/application-state";
 import { z } from "zod";
 
 import { markAssetSaved } from "../server/handlers/assets.js";