@agent-native/core 0.106.3 → 0.107.0

package/corpus/templates/assets/changelog/2026-07-17-you-can-add-exact-approved-artifact-versions-to-governed-cre.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-07-17
+---
+
+You can add exact, approved artifact versions to governed Creative Contexts for safe reuse.

package/corpus/templates/assets/server/lib/native-creative-context.ts

@@ -0,0 +1,198 @@
+import { createHash } from "node:crypto";
+
+import { putPrivateBlob } from "@agent-native/core/private-blob";
+import { accessFilter } from "@agent-native/core/sharing";
+import {
+  serializePrivateBlobHandle,
+  type NativeResourceCaptureAdapter,
+} from "@agent-native/creative-context/server";
+import { and, eq, inArray } from "drizzle-orm";
+
+import {
+  getAssetOrThrow,
+  requireLibraryAccess,
+} from "../../actions/_helpers.js";
+import { getDb, schema } from "../db/index.js";
+import { getObject } from "./storage.js";
+
+export const nativeAssetCreativeContextAdapter: NativeResourceCaptureAdapter = {
+  appId: "assets",
+  resourceType: "asset",
+  async listResourceVersions(resourceIds) {
+    if (!resourceIds.length) return [];
+    return getDb()
+      .select({
+        resourceId: schema.assets.id,
+        sourceModifiedAt: schema.assets.updatedAt,
+      })
+      .from(schema.assets)
+      .innerJoin(
+        schema.assetLibraries,
+        eq(schema.assetLibraries.id, schema.assets.libraryId),
+      )
+      .where(
+        and(
+          inArray(schema.assets.id, [...resourceIds]),
+          accessFilter(schema.assetLibraries, schema.assetLibraryShares),
+        ),
+      );
+  },
+  async capture(reference) {
+    const asset = await getAssetOrThrow(reference.resourceId);
+    const libraryAccess = await requireLibraryAccess(asset.libraryId);
+    const library = libraryAccess.resource;
+    if (
+      reference.expectedUpdatedAt &&
+      reference.expectedUpdatedAt !== asset.updatedAt
+    )
+      throw new Error("Asset changed before it could be submitted to Context.");
+    const bytes = await getObject(asset.objectKey);
+    const contentHash = createHash("sha256").update(bytes).digest("hex");
+    const extension = asset.mimeType.split("/").pop() ?? "asset";
+    const handle = await putPrivateBlob({
+      data: bytes,
+      filename: asset.title ?? `${asset.id}.${extension}`,
+      mimeType: asset.mimeType,
+      key: `creative-context/assets/${asset.id}/${contentHash}`,
+      metadata: {
+        appId: "assets",
+        resourceType: "asset",
+        resourceId: asset.id,
+        contentHash,
+      },
+    });
+    if (!handle)
+      throw new Error(
+        "Private blob storage is required to submit an asset to Context.",
+      );
+    const previewIsThumbnail = Boolean(
+      asset.mediaType === "video" && asset.thumbnailObjectKey,
+    );
+    const previewBytes = previewIsThumbnail
+      ? await getObject(asset.thumbnailObjectKey!)
+      : bytes;
+    const previewMimeType = previewIsThumbnail ? "image/webp" : asset.mimeType;
+    const previewHandle = await putPrivateBlob({
+      data: previewBytes,
+      filename: previewIsThumbnail
+        ? `${asset.id}.preview.webp`
+        : `${asset.id}.${extension}`,
+      mimeType: previewMimeType,
+      key: `creative-context/assets/${asset.id}/${contentHash}.preview`,
+      metadata: {
+        appId: "assets",
+        resourceType: "asset-preview",
+        resourceId: asset.id,
+        contentHash,
+      },
+    });
+    if (!previewHandle) {
+      throw new Error(
+        "Private blob storage is required to preview an asset in Context.",
+      );
+    }
+    const safeDescription = [
+      asset.title,
+      asset.description,
+      asset.altText,
+      asset.prompt,
+    ]
+      .filter(Boolean)
+      .join("\n");
+    return {
+      artifactKey: `assets:asset:${asset.id}`,
+      source: {
+        name: "Assets",
+        kind: "native-app",
+        externalRef: asset.id,
+        access: {
+          visibility: library.visibility ?? "private",
+          canManage:
+            libraryAccess.role === "owner" || libraryAccess.role === "admin",
+        },
+      },
+      items: [
+        {
+          externalId: `native:assets:asset:${asset.id}`,
+          kind: asset.mediaType,
+          title: asset.title ?? "Untitled asset",
+          canonicalUrl: `/asset/${asset.id}`,
+          mimeType: asset.mimeType,
+          content: safeDescription.slice(0, 12_000),
+          summary:
+            safeDescription.slice(0, 500) ||
+            `Immutable ${asset.mediaType} asset.`,
+          contentHash,
+          sourceModifiedAt: asset.updatedAt,
+          sourceVersion: contentHash,
+          metadata: {
+            preview: {
+              type: "asset",
+              mediaType: asset.mediaType,
+              width: asset.width,
+              height: asset.height,
+              durationSeconds: asset.durationSeconds,
+            },
+          },
+          media: [
+            {
+              kind:
+                previewIsThumbnail || asset.mediaType !== "video"
+                  ? "image"
+                  : "video",
+              mimeType: previewMimeType,
+              accessMode: "private",
+              storageKey: serializePrivateBlobHandle(previewHandle),
+              altText: asset.altText ?? asset.title ?? undefined,
+              contentHash: createHash("sha256")
+                .update(previewBytes)
+                .digest("hex"),
+              width: asset.width ?? undefined,
+              height: asset.height ?? undefined,
+              durationMs:
+                asset.durationSeconds != null
+                  ? Math.round(asset.durationSeconds * 1_000)
+                  : undefined,
+              metadata: { role: previewIsThumbnail ? "thumbnail" : "preview" },
+            },
+            ...(previewIsThumbnail
+              ? [
+                  {
+                    kind: "video" as const,
+                    mimeType: asset.mimeType,
+                    accessMode: "private" as const,
+                    storageKey: serializePrivateBlobHandle(handle),
+                    altText: asset.altText ?? asset.title ?? undefined,
+                    contentHash,
+                    durationMs:
+                      asset.durationSeconds != null
+                        ? Math.round(asset.durationSeconds * 1_000)
+                        : undefined,
+                    metadata: { role: "playback" },
+                  },
+                ]
+              : []),
+          ],
+        },
+      ],
+      privateMetadata: {
+        nativeResource: {
+          appId: "assets",
+          resourceType: "asset",
+          resourceId: asset.id,
+          expectedUpdatedAt: reference.expectedUpdatedAt,
+        },
+        clone: {
+          handle,
+          appId: "assets",
+          resourceType: "asset",
+          resourceId: asset.id,
+          contentHash,
+          sourceVersion: contentHash,
+          updatedAt: asset.updatedAt,
+          libraryId: asset.libraryId,
+        },
+      },
+    };
+  },
+};

package/corpus/templates/assets/server/plugins/creative-context.ts

@@ -6,6 +6,7 @@ import {
   getRequestUserEmail,
 } from "@agent-native/core/server/request-context";
 import {
+  registerNativeResourceCaptureAdapter,
   readCreativeContextMedia,
   setupCreativeContext,
   type CreativeContextProjectionAdapters,
@@ -20,6 +21,7 @@ import { getDb, schema } from "../db/index.js";
 import { createAssetFromBuffer } from "../lib/assets.js";
 import { seedDefaultGenerationPresets } from "../lib/generation-presets.js";
 import { nowIso, parseJson, stringifyJson } from "../lib/json.js";
+import { nativeAssetCreativeContextAdapter } from "../lib/native-creative-context.js";
 
 const IMPORT_LIBRARY_TITLE = "Creative context imports";
 
@@ -202,4 +204,6 @@ registerOnboardingStep({
   },
 });
 
+registerNativeResourceCaptureAdapter(nativeAssetCreativeContextAdapter);
+
 export default setupCreativeContext({ appId: "assets", projections });

package/corpus/templates/brain/actions/provider-api-request.ts

@@ -197,6 +197,7 @@ export default defineAction({
       ),
   }),
   http: false,
+  toolCallable: false,
   run: async (args) => {
     if (args.stageAs) {
       const ctx = getCredentialContext();

package/corpus/templates/calendar/actions/provider-api-request.ts

@@ -204,6 +204,7 @@ export default defineAction({
       ),
   }),
   http: false,
+  toolCallable: false,
   run: async (args) => {
     if (args.stageAs) {
       const ctx = getCredentialContext();

package/corpus/templates/clips/actions/get-recording-insights.ts

@@ -16,6 +16,7 @@ import { eq } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
+import { clampCompletionPct } from "../shared/view-analytics.js";
 
 export default defineAction({
   description:
@@ -46,8 +47,10 @@ export default defineAction({
     const completionRate =
       viewerRows.length === 0
         ? 0
-        : viewerRows.reduce((acc, v) => acc + (v.completedPct ?? 0), 0) /
-          viewerRows.length;
+        : viewerRows.reduce(
+            (acc, v) => acc + clampCompletionPct(v.completedPct),
+            0,
+          ) / viewerRows.length;
 
     // Drop-off: 100 buckets across the video's duration.
     // Use the recording's duration as the denominator.
@@ -64,7 +67,7 @@ export default defineAction({
     }));
 
     for (const v of viewerRows) {
-      const pct = Math.min(100, Math.max(0, v.completedPct ?? 0));
+      const pct = clampCompletionPct(v.completedPct);
       // Each viewer contributes to all buckets up to their max reached.
       for (let i = 0; i < pct; i++) {
         buckets[i].watching += 1;
@@ -84,7 +87,7 @@ export default defineAction({
         viewerEmail: v.viewerEmail,
         viewerName: v.viewerName,
         totalWatchMs: v.totalWatchMs ?? 0,
-        completedPct: v.completedPct ?? 0,
+        completedPct: clampCompletionPct(v.completedPct),
       }));
 
     return {

package/corpus/templates/clips/actions/list-recordings.ts

@@ -16,6 +16,7 @@ import {
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
+import { resolvePlayerVideoUrl } from "../server/lib/player-video-url.js";
 import {
   getActiveOrganizationId,
   ownerEmailMatches,
@@ -26,6 +27,39 @@ function escapeLike(s: string): string {
   return s.replace(/([\\%_])/g, "\\$1");
 }
 
+type RecordingMediaFields = {
+  id: string;
+  sourceAppName?: string | null;
+  sourceWindowTitle?: string | null;
+  videoUrl?: string | null;
+  videoFormat?: string | null;
+};
+
+export function resolveListRecordingMedia(
+  recording: RecordingMediaFields,
+  includeMedia: boolean,
+): { videoUrl: string | null; videoFormat: "webm" | "mp4" | null } {
+  if (!includeMedia) {
+    return { videoUrl: null, videoFormat: null };
+  }
+
+  return {
+    videoUrl: resolvePlayerVideoUrl(
+      {
+        id: recording.id,
+        sourceAppName: recording.sourceAppName,
+        sourceWindowTitle: recording.sourceWindowTitle,
+        videoUrl: recording.videoUrl,
+      },
+      { proxyRemoteMedia: true },
+    ),
+    videoFormat:
+      recording.videoFormat === "webm" || recording.videoFormat === "mp4"
+        ? recording.videoFormat
+        : null,
+  };
+}
+
 export default defineAction({
   description:
     "List recordings visible to the current user. Supports filtering by view (library/shared/space/archive/trash/all), folder, space, tag, free-text, and sort. The shared view returns accessible recordings owned by someone else.",
@@ -67,6 +101,13 @@ export default defineAction({
       )
       .default(false)
       .describe("Return only the total count, skipping the row payload"),
+    includeMedia: z
+      .preprocess(
+        (v) => (typeof v === "string" ? v === "true" : v),
+        z.boolean(),
+      )
+      .default(false)
+      .describe("Include playable media fields for editor workflows"),
   }),
   http: { method: "GET" },
   run: async (args) => {
@@ -225,6 +266,12 @@ export default defineAction({
           hasCamera: schema.recordings.hasCamera,
           width: schema.recordings.width,
           height: schema.recordings.height,
+          videoUrl: args.includeMedia
+            ? schema.recordings.videoUrl
+            : sql<string | null>`NULL`,
+          videoFormat: args.includeMedia
+            ? schema.recordings.videoFormat
+            : sql<string | null>`NULL`,
         },
         transcriptStatus: schema.recordingTranscripts.status,
         // Compute the has-text signal in SQL instead of shipping the full
@@ -313,6 +360,7 @@ export default defineAction({
         hasCamera: Boolean(r.hasCamera),
         width: r.width,
         height: r.height,
+        ...resolveListRecordingMedia(r, args.includeMedia),
         transcriptStatus: row.transcriptStatus ?? null,
         transcriptHasText: Number(row.transcriptHasText ?? 0) > 0,
       };

package/corpus/templates/clips/actions/list-viewers.ts

@@ -11,6 +11,7 @@ import { eq } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
+import { clampCompletionPct } from "../shared/view-analytics.js";
 
 export default defineAction({
   description:
@@ -38,7 +39,7 @@ export default defineAction({
         viewerEmail: v.viewerEmail,
         viewerName: v.viewerName,
         totalWatchMs: v.totalWatchMs ?? 0,
-        completedPct: v.completedPct ?? 0,
+        completedPct: clampCompletionPct(v.completedPct),
         countedView: Boolean(v.countedView),
         ctaClicked: Boolean(v.ctaClicked),
         firstViewedAt: v.firstViewedAt,

package/corpus/templates/clips/app/components/editor/stitch-manager.tsx

@@ -70,7 +70,9 @@ export function StitchManager({
   const [title, setTitle] = useState(t("stitchManager.defaultTitle"));
   const [dragIndex, setDragIndex] = useState<number | null>(null);
 
-  const listQuery = useActionQuery("list-recordings", {});
+  const listQuery = useActionQuery("list-recordings", {
+    includeMedia: true,
+  });
   const stitch = useActionMutation("stitch-recordings");
 
   useEffect(() => {

package/corpus/templates/clips/app/components/player/share-dialog.tsx

@@ -386,9 +386,7 @@ function LinkTab({
             : t("shareDialog.shareWithHumans")
         }
         value={shareUrl}
-        disabled={
-          visibilityPending || !sharesLoaded || (!isPublic && canManage)
-        }
+        disabled={visibilityPending || !sharesLoaded}
       />
 
       {!isPublic ? (

package/corpus/templates/clips/app/hooks/use-desktop-promo.ts

@@ -2,8 +2,8 @@ import { useCallback, useEffect, useState } from "react";
 
 import { useIsMobile } from "@/hooks/use-mobile";
 import {
-  hasDismissedDesktopPromo,
-  markDesktopPromoDismissed,
+  hasDownloadedDesktopApp,
+  markDesktopAppDownloaded,
 } from "@/lib/capture-install-options";
 
 function detectDesktopApp(): boolean {
@@ -23,23 +23,28 @@ function detectDesktopApp(): boolean {
 export function useDesktopPromo() {
   const isMobile = useIsMobile();
   const [isDesktopApp, setIsDesktopApp] = useState(false);
+  const [runtimeDetected, setRuntimeDetected] = useState(false);
   const [dismissed, setDismissed] = useState(false);
 
   useEffect(() => {
     setIsDesktopApp(detectDesktopApp());
-    setDismissed(hasDismissedDesktopPromo());
+    setDismissed(hasDownloadedDesktopApp());
+    // Keep desktop prompts hidden until the client runtime is known. This
+    // prevents the web CTA from flashing in the desktop shell's first render.
+    setRuntimeDetected(true);
   }, []);
 
   const dismiss = useCallback(() => {
     setDismissed(true);
-    markDesktopPromoDismissed();
+    markDesktopAppDownloaded();
   }, []);
 
   return {
     isDesktopApp,
     isMobile,
-    shouldShowPromo: !isMobile && !isDesktopApp && !dismissed,
-    shouldShowSidebarLink: !isMobile && !isDesktopApp,
+    shouldShowPromo:
+      runtimeDetected && !isMobile && !isDesktopApp && !dismissed,
+    shouldShowSidebarLink: runtimeDetected && !isMobile && !isDesktopApp,
     dismiss,
   };
 }

package/corpus/templates/clips/app/hooks/use-view-tracking.ts

@@ -1,6 +1,8 @@
 import { appBasePath } from "@agent-native/core/client";
 import { useEffect, useRef } from "react";
 
+import { clampCompletionPct } from "../../shared/view-analytics";
+
 const SESSION_KEY = "clips-view-session-id";
 
 function getSessionId(): string {
@@ -107,7 +109,10 @@ export function useViewTracking(opts: UseViewTrackingOpts) {
       if (!v) return;
       const completedPct =
         durationMs > 0 ? (watchMsRef.current / durationMs) * 100 : 0;
-      maxPctRef.current = Math.max(maxPctRef.current, completedPct);
+      maxPctRef.current = Math.max(
+        maxPctRef.current,
+        clampCompletionPct(completedPct),
+      );
       fetch(`${appBasePath()}/api/view-event`, {
         method: "POST",
         keepalive: kind === "watch-progress" || kind === "pause",

package/corpus/templates/clips/app/lib/ffmpeg-export.ts

@@ -164,15 +164,17 @@ export async function exportMp4(
   onProgress?.({ progress: 0, stage: "loading-ffmpeg" });
   // Stable reference so we can remove it in `finally` — without this the
   // listener piles up across exports and ffmpeg log lines fan out N×.
+  let lastProgress = 0;
   const onLog = (msg: string) => {
-    onProgress?.({ progress: -1, stage: "encoding", message: msg });
+    onProgress?.({ progress: lastProgress, stage: "encoding", message: msg });
   };
   const ffmpeg = await loadFfmpeg(onLog);
 
   // Hook ffmpeg progress events — they fire per frame written.
   const handleProgress = ({ progress }: { progress: number }) => {
+    lastProgress = Math.max(0, Math.min(1, progress));
     onProgress?.({
-      progress: Math.max(0, Math.min(1, progress)),
+      progress: lastProgress,
       stage: "encoding",
     });
   };

package/corpus/templates/clips/app/routes/share.$shareId.tsx

@@ -40,6 +40,7 @@ import { CaptureInstallButton } from "@/components/capture-install-options";
 import { AccessPasswordPrompt } from "@/components/player/access-password-prompt";
 import { CommentsPanel } from "@/components/player/comments-panel";
 import { RecordingOptionsMenu } from "@/components/player/delete-recording-menu";
+import { InsightsPanel } from "@/components/player/insights-panel";
 import { ReactionsTray } from "@/components/player/reactions-tray";
 import { ShareRecordingPopover } from "@/components/player/share-dialog";
 import { SignInPromptDialog } from "@/components/player/sign-in-prompt-dialog";
@@ -484,7 +485,17 @@ export default function ShareRoute() {
     dataQ.data?.data?.transcript?.failureReason ?? null;
   const ctas = dataQ.data?.data?.ctas ?? [];
   const firstCta = ctas[0] ?? null;
-  const viewerCanEdit = Boolean(dataQ.data?.data?.viewer?.canEdit);
+  const viewerRole = dataQ.data?.data?.viewer?.role as
+    | "owner"
+    | "admin"
+    | "editor"
+    | "viewer"
+    | undefined;
+  const viewerCanEdit =
+    Boolean(dataQ.data?.data?.viewer?.canEdit) ||
+    viewerRole === "owner" ||
+    viewerRole === "admin" ||
+    viewerRole === "editor";
   const viewerIsOwner = Boolean(dataQ.data?.data?.viewer?.isOwner);
   const showTitleSkeleton = recording
     ? shouldShowGeneratedTitleSkeleton(recording, transcriptStatus)
@@ -945,7 +956,7 @@ export default function ShareRoute() {
               durationMs={recording.durationMs}
               editsJson={recording.editsJson}
               thumbnailUrl={recording.thumbnailUrl}
-              role={viewerCanEdit ? "owner" : "viewer"}
+              role={viewerRole ?? (viewerCanEdit ? "owner" : "viewer")}
               defaultSpeed={parsePlaybackSpeed(recording.defaultSpeed) ?? 1.2}
               comments={comments}
               chapters={chapters}
@@ -1123,7 +1134,14 @@ export default function ShareRoute() {
             value="insights"
             className="mt-3 min-h-0 flex-1 data-[state=inactive]:hidden"
           >
-            <PublicInsightsState />
+            {viewerCanEdit ? (
+              <InsightsPanel
+                recordingId={recording.id}
+                durationMs={recording.durationMs}
+              />
+            ) : (
+              <PublicInsightsState />
+            )}
           </TabsContent>
         </Tabs>
       </aside>

package/corpus/templates/clips/changelog/2026-07-17-dictation-keeps-sentence-spacing-and-no-longer-crashes-when-.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-17
+---
+
+Dictation keeps sentence spacing and no longer crashes when submitted mid-capture

package/corpus/templates/clips/changelog/2026-07-17-shared-clips-now-preserve-editor-access-and-show-editor-insi.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-17
+---
+
+Shared Clips now preserve Editor access and show editor insights

package/corpus/templates/clips/changelog/2026-07-17-stitching-clips-no-longer-fails-when-editor-media-metadata-i.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-17
+---
+
+Stitching clips no longer fails when editor media metadata is loaded

package/corpus/templates/clips/server/routes/api/public-recording.get.ts

@@ -6,11 +6,11 @@
  * authenticated `/_agent-native/actions/get-recording-player-data` route.
  *
  * Only returns data when:
- *   - recording.visibility === 'public' (or the signed-in viewer is owner), AND
+ *   - recording.visibility === 'public', or the signed-in viewer has org/share access, AND
  *   - either no password is set, the viewer is owner, or the provided password matches
  *
- * For `org` or `private` visibility, returns 401 (viewer must sign in and use
- * the authenticated player route).
+ * For `org` or `private` visibility, signed-in org members and explicit shares
+ * may load the same player payload as the authenticated route.
  */
 
 import {
@@ -467,11 +467,17 @@ export default defineEventHandler(async (event) => {
       placement: c.placement,
     })),
     viewer: session?.email
-      ? {
-          canEdit: viewerIsOwner,
-          isOwner: viewerIsOwner,
-          role: viewerIsOwner ? "owner" : "viewer",
-        }
+      ? (() => {
+          const role =
+            viewerAccess?.role ?? (viewerIsOrgMember ? "viewer" : null);
+          const canEdit =
+            role === "owner" || role === "admin" || role === "editor";
+          return {
+            canEdit,
+            isOwner: role === "owner",
+            role: role ?? "viewer",
+          };
+        })()
       : null,
   };
 });

package/corpus/templates/clips/shared/view-analytics.ts

@@ -0,0 +1,4 @@
+export function clampCompletionPct(value: number | null | undefined): number {
+  if (typeof value !== "number" || !Number.isFinite(value)) return 0;
+  return Math.min(100, Math.max(0, value));
+}

package/corpus/templates/content/.agents/skills/creative-context/SKILL.md

@@ -35,9 +35,11 @@ role cannot silently stand in for another:
 
 1. Follow the user's explicit instructions and the object currently selected in
    the app.
-2. Read the `creative-context` application-state record. If
-   `pinnedPackId` is set, prefer that immutable pack. Otherwise use
-   `currentPackId` when it records context already selected for this session.
+2. Read the `creative-context` application-state record. If `pinnedPackId` is
+   set, replay that immutable pack. Otherwise honor `selectedContextId`; when it
+   is unset, let retrieval use Default plus at most one app-bound or
+   semantically matching specialty context. `currentPackId` is the receipt from
+   the latest materialized generation, not a replacement for context selection.
 3. Call `search-creative-context` with a narrow query for exact facts, visual
    language, audience guidance, prior decisions, or reusable references.
 4. Call `get-context-item` only for the specific search result versions
@@ -60,6 +62,7 @@ The single state key is `creative-context`:
 ```json
 {
   "contextMode": "auto",
+  "selectedContextId": null,
   "currentPackId": null,
   "pinnedPackId": null
 }
@@ -83,3 +86,9 @@ versions may support factual claims. Preserve the returned `contextPackId`
 and short reuse labels with the document generation provenance. A published
 brand profile can guide tone automatically; it never overrides the user's
 current brief, and it must not turn an unsupported prior claim into a fact.
+
+When an approved app-created document already fits, call
+`clone-creative-context-document` with its exact item and version ids before
+rewriting from excerpts. The typed action resolves the approved private
+Markdown/document payload through Content's normal create path; generic context
+actions never expose that payload.

package/corpus/templates/content/AGENTS.md

@@ -43,6 +43,11 @@ Detailed document editing, Notion, storage, and UI rules live in
   document first, then a pinned/current pack, then narrow library search.
   Respect `creative-context.contextMode: "off"` without silently restoring a
   pack.
+- To submit a document to a governed Creative Context, use the Context tab or
+  `manage-context-membership`; the app flushes live collaboration and captures
+  one immutable Markdown version. Reuse only its opaque native clone reference.
+  Use `operation="submit-latest"` with a Library membership id when its native
+  update status reports `update-available`.
 
 - `navigation` exposes document, selected block, comment, media, and Notion view
   context.