@agent-native/core 0.106.1 → 0.106.3

package/corpus/templates/clips/desktop/src-tauri/src/lib.rs

@@ -48,6 +48,15 @@ use util::{
 // should replace with their real icon.
 pub(crate) const TRAY_PNG: &[u8] = include_bytes!("../icons/tray.png");
 
+fn present_popover(app: &tauri::AppHandle) {
+    if let Some(window) = app.get_webview_window("popover") {
+        set_capture_included(&window);
+        configure_overlay_behavior(&window);
+        position_popover(app, &window);
+        present_interactive_window(&window);
+    }
+}
+
 #[cfg_attr(mobile, tauri::mobile_entry_point)]
 pub fn run() {
     sentry_report::init();
@@ -57,12 +66,7 @@ pub fn run() {
             // Second launch just focuses the popover of the already-running
             // instance. Prevents the "two tray icons" UX where clicks fight
             // over focus and neither popover shows.
-            if let Some(window) = app.get_webview_window("popover") {
-                set_capture_included(&window);
-                configure_overlay_behavior(&window);
-                position_popover(app, &window);
-                present_interactive_window(&window);
-            }
+            present_popover(app);
         }))
         .invoke_handler(tauri::generate_handler![
             // clips commands
@@ -189,6 +193,7 @@ pub fn run() {
             logfile::open_logs,
         ])
         .plugin(tauri_plugin_shell::init())
+        .plugin(tauri_plugin_deep_link::init())
         .plugin(tauri_plugin_process::init())
         .plugin(tauri_plugin_fs::init())
         .plugin(
@@ -236,6 +241,36 @@ pub fn run() {
                 err
             })?;
 
+            // clips:// deep-link handler — a web "Open desktop app" click
+            // launches or focuses the running tray popover (same as a second
+            // launch). macOS registers the scheme via Info.plist at build time;
+            // Windows/Linux register it at runtime below.
+            {
+                use tauri_plugin_deep_link::DeepLinkExt;
+                let dl_handle = app.handle().clone();
+                app.deep_link().on_open_url(move |event| {
+                    let urls: Vec<String> =
+                        event.urls().iter().map(|u| u.to_string()).collect();
+                    dlog!("[clips-tray] deep link opened: {:?}", urls);
+                    present_popover(&dl_handle);
+                    let _ = dl_handle.emit("clips:deep-link", urls);
+                });
+                #[cfg(any(windows, target_os = "linux"))]
+                if let Err(err) = app.deep_link().register_all() {
+                    eprintln!("[clips-tray] deep link register_all failed: {err}");
+                }
+                // On Linux/Windows a cold launch from clips:// arrives as startup
+                // arguments rather than an on_open_url event. Consume it here so
+                // the popover appears and the browser does not hit its fallback.
+                if let Ok(Some(urls)) = app.deep_link().get_current() {
+                    let url_strings: Vec<String> =
+                        urls.iter().map(|u| u.to_string()).collect();
+                    dlog!("[clips-tray] deep link cold start: {:?}", url_strings);
+                    present_popover(app.handle());
+                    let _ = app.handle().emit("clips:deep-link", url_strings);
+                }
+            }
+
             if let Err(err) = notifications::show_meeting_notification_window(app.handle()) {
                 println!("[clips-tray] show meeting notification failed: {err}");
             }

package/corpus/templates/clips/desktop/src-tauri/tauri.conf.json

@@ -39,6 +39,11 @@
     }
   },
   "plugins": {
+    "deep-link": {
+      "desktop": {
+        "schemes": ["clips"]
+      }
+    },
     "shell": {
       "open": "(((mailto:\\w+)|(tel:\\w+)|(https?://\\w+)).+|(zoommtg://([A-Za-z0-9-]+\\.)*zoom\\.us/join\\?.+)|(ms-settings:[A-Za-z0-9._?=&-]+))"
     },

package/corpus/templates/content/.agents/skills/content/SKILL.md

@@ -137,6 +137,37 @@ intent:
   explicitly asks for a new artifact. Do not blindly submit another row merely
   because a new Slack message arrived.
 
+For a correction to an existing artifact, treat Slack history as identity and
+intent context, not as the current record state. A title captured when the row
+was created is a historical title: it may help locate the stable document ID,
+but it is not authoritative after the row has been renamed in Content. Once the
+stable ID is known, an external Slack or A2A correction must call
+`pull-document` first to flush any open collaborative editor state; fail closed
+if that flush/read cannot complete. Then read the canonical database row from
+Content immediately before building the update. Treat those freshly read
+values as authoritative for every field the correction does not explicitly
+change.
+
+Build corrections as sparse patches:
+
+- Include only fields the user explicitly asks to change. "Keep," "preserve,"
+  "leave as is," and "unchanged" are constraints, not new values; omit those
+  fields from the mutation so a newer Content-side value cannot be overwritten
+  by stale Slack context.
+- Omission and clearing are different operations. An omitted field keeps its
+  live Content value. Clear a field only when the user explicitly asks to
+  remove, unset, or clear it, and use the empty representation accepted by the
+  current database schema.
+- Never reconstruct a full-row update from the original Slack request. Derive
+  the patch from the correction message and the freshly read canonical row,
+  while preserving the stable document ID.
+- After the mutation, read the row again and verify that the requested fields
+  changed and the mutation did not include omitted fields. Post-write
+  verification is not compare-and-swap: it can reveal an unexpected result but
+  cannot prevent a concurrent edit between the read and a blind metadata or
+  property write. Report an action-provided conflict when one exists; otherwise
+  keep the patch minimal and do not claim the write was conflict-safe.
+
 Apply people fields from verified identity and intent, not from convenient
 guesswork:
 

package/corpus/templates/content/changelog/2026-07-16-slack-corrections-now-preserve-newer-content-values-unless-y.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-16
+---
+
+Slack corrections now preserve newer Content values unless you explicitly change or clear them.

package/dist/a2a/artifact-response.d.ts

@@ -1,6 +1,8 @@
 export interface A2AToolResultSummary {
     tool: string;
     result: string;
+    isError?: boolean;
+    completedSideEffect?: boolean;
 }
 export interface A2AArtifactResponseOptions {
     baseUrl?: string;
@@ -23,4 +25,11 @@ export declare function stripA2APersistedArtifactMarkers(text: string): string;
 export declare function extractA2AArtifactIdentities(results: A2AToolResultSummary[]): A2AArtifactIdentity[];
 export declare function appendA2AArtifactLinks(responseText: string, toolResults: A2AToolResultSummary[], options?: A2AArtifactResponseOptions): string;
 export declare function buildA2ARecoverableArtifactMessage(toolResults: A2AToolResultSummary[], options?: A2AArtifactResponseOptions): string | null;
+/**
+ * Build a bounded participant-facing receipt from authenticated artifact writes.
+ * Unlike generic artifact recovery, this only trusts identities extracted from
+ * successful write actions (or a signed downstream write ledger), so a read or
+ * an unverified URL cannot be rounded up to a successful mutation.
+ */
+export declare function buildA2AVerifiedMutationReceipt(toolResults: A2AToolResultSummary[], options?: A2AArtifactResponseOptions): string | null;
 //# sourceMappingURL=artifact-response.d.ts.map

package/dist/a2a/artifact-response.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-response.d.ts","sourceRoot":"","sources":["../../src/a2a/artifact-response.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,8BAA8B,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EACR,UAAU,GACV,MAAM,GACN,WAAW,GACX,UAAU,GACV,OAAO,GACP,QAAQ,GACR,SAAS,GACT,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAgGD,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErE;AA8tBD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,oBAAoB,EAAE,GAC9B,mBAAmB,EAAE,CAmGvB;AA2YD,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,oBAAoB,EAAE,EACnC,OAAO,GAAE,0BAA+B,GACvC,MAAM,CA8IR;AAED,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,oBAAoB,EAAE,EACnC,OAAO,GAAE,0BAA+B,GACvC,MAAM,GAAG,IAAI,CA8Bf"}
+{"version":3,"file":"artifact-response.d.ts","sourceRoot":"","sources":["../../src/a2a/artifact-response.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,8BAA8B,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EACR,UAAU,GACV,MAAM,GACN,WAAW,GACX,UAAU,GACV,OAAO,GACP,QAAQ,GACR,SAAS,GACT,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAiGD,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErE;AA4uBD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,oBAAoB,EAAE,GAC9B,mBAAmB,EAAE,CAqGvB;AA2YD,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,oBAAoB,EAAE,EACnC,OAAO,GAAE,0BAA+B,GACvC,MAAM,CA8IR;AAED,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,oBAAoB,EAAE,EACnC,OAAO,GAAE,0BAA+B,GACvC,MAAM,GAAG,IAAI,CA8Bf;AAmCD;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC7C,WAAW,EAAE,oBAAoB,EAAE,EACnC,OAAO,GAAE,0BAA+B,GACvC,MAAM,GAAG,IAAI,CAqBf"}

package/dist/a2a/artifact-response.js

@@ -6,6 +6,7 @@ const ARTIFACT_IDENTITY_WRITE_TOOLS = new Set([
     "add-database-item",
     "create-document",
     "update-document",
+    "set-document-property",
     "create-deck",
     "duplicate-deck",
     "add-slide",
@@ -367,6 +368,8 @@ function collectArtifacts(results) {
     const monitors = new Map();
     const forms = new Map();
     for (const toolResult of results) {
+        if (toolResult.isError === true || toolResult.completedSideEffect === false)
+            continue;
         if (toolResult.tool === "call-agent") {
             for (const artifact of parseDownstreamArtifactBlock(toolResult.result)) {
                 if (artifact.kind === "deck") {
@@ -452,6 +455,8 @@ function collectArtifacts(results) {
         }
         if (toolResult.tool === "create-document" ||
             toolResult.tool === "update-document") {
+            if (parsed.conflict === true)
+                continue;
             const id = stringValue(parsed.id);
             if (id) {
                 documents.set(id, {
@@ -462,6 +467,16 @@ function collectArtifacts(results) {
             }
             continue;
         }
+        if (toolResult.tool === "set-document-property") {
+            const id = stringValue(parsed.documentId);
+            if (id) {
+                documents.set(id, {
+                    id,
+                    url: stringValue(parsed.url) ?? stringValue(parsed.urlPath),
+                });
+            }
+            continue;
+        }
         if (toolResult.tool === "get-document" ||
             toolResult.tool === "get-content-document") {
             const document = asRecord(parsed.document);
@@ -658,6 +673,8 @@ export function extractA2AArtifactIdentities(results) {
         identities.set(`${identity.resourceType}:${identity.id}`, identity);
     };
     for (const result of results) {
+        if (result.isError === true || result.completedSideEffect === false)
+            continue;
         if (result.tool === "call-agent") {
             for (const identity of persistedArtifactIdentitiesFromMarker(result.result)) {
                 remember({ ...identity, sourceAction: "call-agent" });
@@ -1153,4 +1170,55 @@ export function buildA2ARecoverableArtifactMessage(toolResults, options = {}) {
         ...lines,
     ].join("\n");
 }
+function mutationReceiptUrl(identity, baseUrl) {
+    if (identity.sourceAction === "call-agent" &&
+        (!identity.url || identity.url.startsWith("/"))) {
+        return undefined;
+    }
+    if (identity.url) {
+        return identity.url.startsWith("/")
+            ? artifactUrl(baseUrl, identity.url)
+            : identity.url;
+    }
+    const path = identity.resourceType === "document"
+        ? `/page/${identity.id}`
+        : identity.resourceType === "deck"
+            ? `/deck/${identity.id}`
+            : identity.resourceType === "dashboard"
+                ? `/adhoc/${identity.id}`
+                : identity.resourceType === "analysis"
+                    ? `/analyses/${identity.id}`
+                    : identity.resourceType === "image"
+                        ? `/image/${identity.id}`
+                        : identity.resourceType === "design"
+                            ? `/design/${identity.id}`
+                            : undefined;
+    return path ? artifactUrl(baseUrl, path) : undefined;
+}
+/**
+ * Build a bounded participant-facing receipt from authenticated artifact writes.
+ * Unlike generic artifact recovery, this only trusts identities extracted from
+ * successful write actions (or a signed downstream write ledger), so a read or
+ * an unverified URL cannot be rounded up to a successful mutation.
+ */
+export function buildA2AVerifiedMutationReceipt(toolResults, options = {}) {
+    const baseUrl = normalizeBaseUrl(options.baseUrl);
+    const identities = extractA2AArtifactIdentities(toolResults);
+    if (identities.length === 0)
+        return null;
+    const lines = identities.map((identity) => {
+        const label = identity.resourceType.charAt(0).toUpperCase() +
+            identity.resourceType.slice(1);
+        const url = mutationReceiptUrl(identity, baseUrl);
+        return url
+            ? `- ${label}: ${url} (ID: ${identity.id})`
+            : `- ${label} ID: ${identity.id}`;
+    });
+    return [
+        "A verified change was saved, but I couldn't generate the detailed summary.",
+        "",
+        "Saved artifacts:",
+        ...lines,
+    ].join("\n");
+}
 //# sourceMappingURL=artifact-response.js.map