@agent-native/core 0.103.1 → 0.105.0

package/corpus/core/src/client/session-replay.ts

@@ -69,6 +69,7 @@ interface SessionReplayState {
   startGeneration: number;
   replayId: string | null;
   startedAtMs: number | null;
+  replayLinkBaseUrl: string | null;
   sequence: number;
   /** Pre-serialized + scrubbed event JSON strings, ready to splice at flush. */
   queue: QueuedReplayEvent[];
@@ -117,6 +118,7 @@ interface StoredReplaySession {
   replayId?: string;
   startedAtMs?: number;
   sequence?: number;
+  linkBaseUrl?: string;
 }
 
 /** Broadcast on `SESSION_REPLAY_BROADCAST_CHANNEL_NAME` by a tab resuming a
@@ -183,6 +185,8 @@ export interface SessionReplayOptions {
   shouldStart?: () => boolean;
   publicKey?: string;
   endpoint?: string;
+  /** Analytics app origin used to build timestamped replay links. */
+  linkBaseUrl?: string;
   requireSignedInUser?: boolean;
   sampleRate?: number;
   samplingSalt?: string;
@@ -234,6 +238,22 @@ export interface SessionReplayOptions {
     | (() => Record<string, unknown> | undefined);
 }
 
+export interface SessionReplayContext {
+  replayId: string;
+  sessionId: string;
+  startedAtMs: number;
+  startedAt: string;
+  linkBaseUrl: string | null;
+  active: boolean;
+}
+
+export interface SessionReplayLinkOptions {
+  /** Event time to seek to when the replay link opens. */
+  at?: Date | number | string;
+  /** Overrides the configured Analytics app origin for this link. */
+  linkBaseUrl?: string;
+}
+
 export interface SessionReplayStartResult {
   started: boolean;
   reason?:
@@ -255,6 +275,7 @@ export interface SessionReplayStartResult {
 interface NormalizedSessionReplayOptions {
   publicKey: string;
   endpoint: string;
+  linkBaseUrl: string | null;
   requireSignedInUser: boolean;
   sampleRate: number;
   samplingSalt: string;
@@ -439,6 +460,7 @@ function getState(): SessionReplayState {
       startGeneration: 0,
       replayId: null,
       startedAtMs: null,
+      replayLinkBaseUrl: null,
       sequence: 0,
       queue: [],
       queuedBytes: 0,
@@ -472,6 +494,7 @@ function getState(): SessionReplayState {
   state.pendingFlushWaiters ??= [];
   state.awaitingFullSnapshot ??= false;
   state.startGeneration ??= 0;
+  state.replayLinkBaseUrl ??= null;
   return state;
 }
 
@@ -579,10 +602,14 @@ function removeStoredReplaySession(replayId: string): void {
  * `sessionStorage` snapshot, which is what the `BroadcastChannel` claim
  * check in `startSessionReplayRecorder` guards against.
  */
-function getOrCreateReplaySession(sessionId: string): {
+function getOrCreateReplaySession(
+  sessionId: string,
+  linkBaseUrl?: string | null,
+): {
   replayId: string;
   startedAtMs: number;
   sequence: number;
+  linkBaseUrl?: string;
   /** True when resuming a session found in this tab's `sessionStorage`
    * (e.g. a reload), as opposed to minting a brand-new id. Only the resumed
    * case needs the duplicated-tab claim check -- a fresh id can never
@@ -604,12 +631,34 @@ function getOrCreateReplaySession(sessionId: string): {
       parsed.sequence >= 0
         ? Math.floor(parsed.sequence)
         : 0;
-    return { replayId: parsed.replayId, startedAtMs, sequence, resumed: true };
+    const resolvedLinkBaseUrl = linkBaseUrl ?? parsed.linkBaseUrl;
+    if (linkBaseUrl && parsed.linkBaseUrl !== linkBaseUrl) {
+      writeStoredReplaySession({ ...parsed, linkBaseUrl });
+    }
+    return {
+      replayId: parsed.replayId,
+      startedAtMs,
+      sequence,
+      ...(resolvedLinkBaseUrl ? { linkBaseUrl: resolvedLinkBaseUrl } : {}),
+      resumed: true,
+    };
   }
   const replayId = generateReplayId();
   const startedAtMs = Date.now();
-  writeStoredReplaySession({ sessionId, replayId, startedAtMs, sequence: 0 });
-  return { replayId, startedAtMs, sequence: 0, resumed: false };
+  writeStoredReplaySession({
+    sessionId,
+    replayId,
+    startedAtMs,
+    sequence: 0,
+    ...(linkBaseUrl ? { linkBaseUrl } : {}),
+  });
+  return {
+    replayId,
+    startedAtMs,
+    sequence: 0,
+    ...(linkBaseUrl ? { linkBaseUrl } : {}),
+    resumed: false,
+  };
 }
 
 /**
@@ -732,12 +781,17 @@ function persistReplaySequence(
   replayId: string,
   startedAtMs: number | null,
   sequence: number,
+  linkBaseUrl?: string | null,
 ): void {
+  const existing = readStoredReplaySession();
   writeStoredReplaySession({
     sessionId,
     replayId,
     startedAtMs: startedAtMs ?? Date.now(),
     sequence,
+    ...(linkBaseUrl || existing?.linkBaseUrl
+      ? { linkBaseUrl: linkBaseUrl ?? existing?.linkBaseUrl }
+      : {}),
   });
 }
 
@@ -820,6 +874,22 @@ function defaultReplayEndpoint(): string {
     : DEFAULT_REPLAY_PATH;
 }
 
+function normalizeReplayLinkBaseUrl(value?: string): string | null {
+  const raw =
+    value?.trim() ||
+    readEnvString("VITE_AGENT_NATIVE_ANALYTICS_APP_URL") ||
+    (typeof window !== "undefined" ? window.location.origin : "");
+  if (!raw) return null;
+  try {
+    return new URL(
+      raw,
+      typeof window !== "undefined" ? window.location.href : undefined,
+    ).origin;
+  } catch {
+    return null;
+  }
+}
+
 export function getSessionReplaySamplingScore(
   sessionId: string,
   salt = DEFAULT_SAMPLING_SALT,
@@ -886,6 +956,7 @@ function normalizeOptions(
   return {
     publicKey,
     endpoint,
+    linkBaseUrl: normalizeReplayLinkBaseUrl(options.linkBaseUrl),
     requireSignedInUser:
       options.requireSignedInUser ??
       readEnvBoolean("VITE_AGENT_NATIVE_SESSION_REPLAY_REQUIRE_AUTH") ??
@@ -1694,6 +1765,7 @@ function advanceReplaySequence(
     payload.replayId,
     state.startedAtMs,
     state.sequence,
+    state.replayLinkBaseUrl,
   );
 }
 
@@ -1709,6 +1781,7 @@ function rollbackReplaySequenceReservation(
     payload.replayId,
     state.startedAtMs,
     state.sequence,
+    state.replayLinkBaseUrl,
   );
 }
 
@@ -2988,7 +3061,10 @@ async function startSessionReplayRecorder(
     return { started: false, reason: "disabled", sessionId, sampled };
   }
 
-  let replaySession = getOrCreateReplaySession(sessionId);
+  let replaySession = getOrCreateReplaySession(
+    sessionId,
+    normalized.linkBaseUrl,
+  );
   const instanceNonce = generateReplayId();
   const { channel: replayChannel, probeClaim } = createReplayClaimChannel(
     state,
@@ -3007,11 +3083,17 @@ async function startSessionReplayRecorder(
         replayId: freshReplayId,
         startedAtMs: freshStartedAtMs,
         sequence: 0,
+        ...(normalized.linkBaseUrl
+          ? { linkBaseUrl: normalized.linkBaseUrl }
+          : {}),
       });
       replaySession = {
         replayId: freshReplayId,
         startedAtMs: freshStartedAtMs,
         sequence: 0,
+        ...(normalized.linkBaseUrl
+          ? { linkBaseUrl: normalized.linkBaseUrl }
+          : {}),
         resumed: false,
       };
     }
@@ -3033,6 +3115,8 @@ async function startSessionReplayRecorder(
   state.options = normalized;
   state.replayId = replaySession.replayId;
   state.startedAtMs = replaySession.startedAtMs;
+  state.replayLinkBaseUrl =
+    replaySession.linkBaseUrl ?? normalized.linkBaseUrl ?? null;
   state.sequence = replaySession.sequence;
   state.queue = [];
   state.queuedBytes = 0;
@@ -3195,6 +3279,75 @@ export function getSessionReplayId(): string | null {
   return stored?.replayId ?? null;
 }
 
+/**
+ * Return the replay identity associated with this browser tab. The context is
+ * intentionally small so it can be attached to analytics events without
+ * exposing replay content or credentials.
+ */
+export function getSessionReplayContext(): SessionReplayContext | null {
+  const state = getState();
+  if (state.active && state.replayId && state.startedAtMs) {
+    const sessionId = getOrCreateAnalyticsSessionId();
+    if (!sessionId) return null;
+    return {
+      replayId: state.replayId,
+      sessionId,
+      startedAtMs: state.startedAtMs,
+      startedAt: new Date(state.startedAtMs).toISOString(),
+      linkBaseUrl: state.replayLinkBaseUrl,
+      active: true,
+    };
+  }
+
+  const stored = readStoredReplaySession();
+  if (!stored?.replayId || !stored.sessionId || !stored.startedAtMs) {
+    return null;
+  }
+  return {
+    replayId: stored.replayId,
+    sessionId: stored.sessionId,
+    startedAtMs: stored.startedAtMs,
+    startedAt: new Date(stored.startedAtMs).toISOString(),
+    linkBaseUrl: stored.linkBaseUrl ?? null,
+    active: false,
+  };
+}
+
+/**
+ * Build a scoped Analytics replay lookup link. The Analytics server resolves
+ * the client replay id to its server recording id and converts the event time
+ * into the replay player's offset before redirecting to the detail page.
+ */
+export function getSessionReplayUrl(
+  options: SessionReplayLinkOptions = {},
+): string | null {
+  const context = getSessionReplayContext();
+  if (!context) return null;
+  const base = normalizeReplayLinkBaseUrl(
+    options.linkBaseUrl ?? context.linkBaseUrl ?? undefined,
+  );
+  if (!base) return null;
+
+  try {
+    const url = new URL("/sessions/lookup", base);
+    url.searchParams.set("sessionId", context.sessionId);
+    url.searchParams.set("replayId", context.replayId);
+    const at = options.at === undefined ? Date.now() : options.at;
+    const timestamp =
+      typeof at === "number"
+        ? new Date(at)
+        : typeof at === "string"
+          ? new Date(at)
+          : at;
+    if (!Number.isNaN(timestamp.getTime())) {
+      url.searchParams.set("at", timestamp.toISOString());
+    }
+    return url.toString();
+  } catch {
+    return null;
+  }
+}
+
 /**
  * Surface a manually captured exception on the active session replay timeline
  * as an `agent-native.console` custom event, reusing the diagnostics contract

package/corpus/core/src/client/settings/AutomationsSection.tsx

@@ -9,15 +9,17 @@ import {
   IconPlus,
   IconTrash,
 } from "@tabler/icons-react";
-import { useCallback, useState } from "react";
+import { useCallback, useState, type ReactNode } from "react";
 
 import { sendToAgentChat } from "../agent-chat.js";
+import { AgentEmptyState } from "../agent-page/AgentEmptyState.js";
 import {
   useAutomations,
   useManageAutomation,
   type Automation,
   type JobsScope,
 } from "../agent-page/use-jobs.js";
+import { AgentAskPopover } from "../AgentAskPopover.js";
 import { agentNativePath } from "../api-path.js";
 import {
   Dialog,
@@ -39,6 +41,7 @@ export interface AutomationsListProps {
   scope?: JobsScope;
   compact?: boolean;
   emptyMessage?: string;
+  emptyState?: ReactNode;
 }
 
 export const AUTOMATION_CREATION_SCOPE = "personal" as const;
@@ -51,6 +54,7 @@ export function AutomationsList({
   scope = "user",
   compact = false,
   emptyMessage,
+  emptyState,
 }: AutomationsListProps) {
   const t = useT();
   const { formatDate } = useFormatters();
@@ -93,14 +97,31 @@ export function AutomationsList({
 
   const automations = query.data ?? [];
   if (automations.length === 0) {
+    if (emptyState) return emptyState;
     return (
-      <p className="text-sm text-muted-foreground">
-        {emptyMessage ??
-          t("jobs.automationsEmpty", {
-            defaultValue:
-              "No automations yet. Ask the agent to set up an event-triggered or scheduled task.",
-          })}
-      </p>
+      <AgentEmptyState
+        icon={IconBolt}
+        title={t("jobs.automationsEmptyTitle", {
+          defaultValue: "No automations yet",
+        })}
+        description={
+          emptyMessage ??
+          t("jobs.automationsEmptyDescription", {
+            defaultValue: "Describe what should happen and when.",
+          })
+        }
+        action={
+          <AgentAskPopover
+            context={automationCreationContext()}
+            prompt={t("jobs.automationPrompt", {
+              defaultValue: "Create an automation that does this: ",
+            })}
+            title={t("jobs.automationsCreateTitle", {
+              defaultValue: "Create an automation",
+            })}
+          />
+        }
+      />
     );
   }
 
@@ -487,8 +508,7 @@ export function AutomationsSection() {
         scope="user"
         compact
         emptyMessage={t("jobs.automationsEmptySettings", {
-          defaultValue:
-            'No automations yet. Click "New automation" or ask the agent to set one up.',
+          defaultValue: "Describe what should happen and when.",
         })}
       />
     </div>

package/corpus/core/src/client/settings/SettingsPanel.tsx

@@ -5,6 +5,7 @@ import {
   IconCheck,
   IconExternalLink,
   IconBrain,
+  IconHierarchy2,
   IconBrowser,
   IconGitBranch,
   IconCloud,
@@ -3104,7 +3105,7 @@ export function useAgentSettingsTabs(): SettingsTabItem[] {
       id: "agent" | "connections" | "organization" | "workspace",
     ) => {
       const tab = searchTabs.find((candidate) => candidate.id === id);
-      if (!tab) throw new Error(`Missing agent settings tab: ${id}`);
+      if (!tab) throw new Error(`Missing agent workspace tab: ${id}`);
       return tab;
     };
     const agent = searchTab("agent");
@@ -3114,7 +3115,7 @@ export function useAgentSettingsTabs(): SettingsTabItem[] {
     return [
       {
         ...agent,
-        icon: IconBrain,
+        icon: IconHierarchy2,
         group: "agent",
         content: (
           <SettingsPanelContent

package/corpus/core/src/client/settings/SettingsTabsPage.tsx

@@ -49,6 +49,8 @@ export interface SettingsTabItem {
   label: string;
   icon?: SettingsTabIcon;
   content: ReactNode;
+  /** Whether a parent surface may expose a personal/organization scope for this tab. */
+  scopeAware?: boolean;
   /**
    * Optional visual navigation group. Adjacent tabs with the same group render
    * together; a quiet divider separates each group on desktop while mobile

package/corpus/core/src/client/settings/agent-settings-search.ts

@@ -194,8 +194,8 @@ export function getAgentSettingsSearchTabs(): AgentSettingsSearchTab[] {
   return [
     {
       id: "agent",
-      label: "Agent",
-      keywords: "agent model llm limits voice automations",
+      label: "Agent workspace",
+      keywords: "agent workspace model llm limits voice automations",
       searchEntries: buildSectionSearchEntries(AGENT_SETTINGS_SECTIONS),
     },
     {

package/corpus/core/src/client/use-chat-threads.ts

@@ -6,6 +6,8 @@ export interface ChatThreadScope {
   type: string;
   id: string;
   label?: string;
+  /** Composer context key used by ambient resource context adapters. */
+  contextKey?: string;
 }
 
 export interface ChatThreadSummary {

package/corpus/core/src/connections/catalog.ts

@@ -22,6 +22,7 @@ export type WorkspaceConnectionTemplateUse =
 export type WorkspaceConnectionProviderId =
   | "slack"
   | "github"
+  | "figma"
   | "notion"
   | "gmail"
   | "google_drive"
@@ -44,6 +45,13 @@ export interface WorkspaceConnectionProvider {
   credentialKeys: readonly WorkspaceConnectionCredentialKey[];
   capabilities: readonly WorkspaceConnectionCapability[];
   recommendedTemplateUses: readonly WorkspaceConnectionTemplateUse[];
+  oauth?: {
+    provider: string;
+    authorizationUrl: string;
+    tokenUrl: string;
+    refreshUrl?: string;
+    scopes: readonly string[];
+  };
 }
 
 export interface ListWorkspaceConnectionProvidersOptions {
@@ -93,19 +101,47 @@ export const WORKSPACE_CONNECTION_PROVIDERS = [
     recommendedTemplateUses: ["brain", "analytics", "dispatch"],
   }),
   defineWorkspaceConnectionProvider({
-    id: "notion",
-    label: "Notion",
+    id: "figma",
+    label: "Figma",
     description:
-      "Workspace docs, wikis, pages, and databases for knowledge capture and search.",
+      "Design files, frames, components, rendered previews, and library context for creative workflows.",
     credentialKeys: [
       {
-        key: "NOTION_API_KEY",
-        label: "Notion API key",
+        key: "FIGMA_ACCESS_TOKEN",
+        label: "Figma personal access token (fallback)",
         description:
-          "Integration secret with access to the pages or databases shared with the integration.",
-        required: true,
+          "Optional fallback for local or individual use. Workspace OAuth is preferred.",
+        required: false,
       },
     ],
+    oauth: {
+      provider: "figma",
+      authorizationUrl: "https://www.figma.com/oauth",
+      tokenUrl: "https://api.figma.com/v1/oauth/token",
+      refreshUrl: "https://api.figma.com/v1/oauth/token",
+      scopes: [
+        "current_user:read",
+        "file_content:read",
+        "file_metadata:read",
+        "projects:read",
+      ],
+    },
+    capabilities: ["search", "import", "docs"],
+    recommendedTemplateUses: ["brain", "design", "slides", "content"],
+  }),
+  defineWorkspaceConnectionProvider({
+    id: "notion",
+    label: "Notion",
+    description:
+      "Workspace docs, wikis, pages, and databases for knowledge capture and search.",
+    credentialKeys: [],
+    oauth: {
+      provider: "notion",
+      authorizationUrl: "https://api.notion.com/v1/oauth/authorize",
+      tokenUrl: "https://api.notion.com/v1/oauth/token",
+      refreshUrl: "https://api.notion.com/v1/oauth/token",
+      scopes: [],
+    },
     capabilities: ["search", "import", "docs"],
     recommendedTemplateUses: ["brain", "content", "dispatch"],
   }),
@@ -148,6 +184,12 @@ export const WORKSPACE_CONNECTION_PROVIDERS = [
     ],
     capabilities: ["search", "import", "docs"],
     recommendedTemplateUses: ["brain", "content", "slides", "dispatch"],
+    oauth: {
+      provider: "google",
+      authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
+      tokenUrl: "https://oauth2.googleapis.com/token",
+      scopes: ["https://www.googleapis.com/auth/drive.file"],
+    },
   }),
   defineWorkspaceConnectionProvider({
     id: "hubspot",

package/corpus/core/src/db/index.ts

@@ -31,11 +31,16 @@ export async function createDb(config: DbConfig) {
 export type DrizzleDb = Awaited<ReturnType<typeof createDb>>;
 
 export { createGetDb } from "./create-get-db.js";
-export { runMigrations } from "./migrations.js";
+export {
+  runMigrations,
+  type MigrationEntry,
+  type MigrationSql,
+} from "./migrations.js";
 export {
   getDbExec,
   createDbExec,
   getDialect,
+  isLocalDatabase,
   isPostgres,
   intType,
   closeDbExec,

package/corpus/core/src/deploy/build.ts

@@ -2519,6 +2519,14 @@ function hasUnsupportedYjsSubpathImport(source: string): boolean {
   );
 }
 
+function hasBundledVitestRuntime(source: string): boolean {
+  return (
+    /["'`]@vitest\//.test(source) ||
+    /["'`]vitest\/(?:dist|src)\//.test(source) ||
+    /__vitest_\d+__/.test(source)
+  );
+}
+
 function walkServerJavaScriptFiles(
   dir: string,
   onFile: (filePath: string) => void,
@@ -2734,6 +2742,21 @@ export function assertSingleTemplateNetlifyBuildOutput(
     );
   }
 
+  // React Router's filesystem route discovery can accidentally treat a
+  // co-located *.test.ts route as production code. That bundles Vitest into
+  // SSR and only fails when the first request executes the test helpers.
+  const bundledVitestRuntime: string[] = [];
+  walkServerJavaScriptFiles(serverDir, (filePath) => {
+    if (hasBundledVitestRuntime(fs.readFileSync(filePath, "utf-8"))) {
+      bundledVitestRuntime.push(path.relative(projectCwd, filePath));
+    }
+  });
+  if (bundledVitestRuntime.length > 0) {
+    failures.push(
+      `Netlify server bundle contains Vitest test runtime code: ${bundledVitestRuntime.join(", ")}`,
+    );
+  }
+
   if (isDurableBackgroundDeployEnabled()) {
     const backgroundDir = path.join(
       internalDir,