@agent-native/core 0.106.3 → 0.107.0

package/corpus/templates/design/app/pages/Index.tsx

@@ -8,6 +8,7 @@ import {
   injectSessionReplayIframeBootstrap,
   SESSION_REPLAY_IFRAME_ATTRIBUTE,
 } from "@agent-native/core/client";
+import { CreativeContextShareSheet } from "@agent-native/creative-context/client";
 import {
   useSetHeaderActions,
   useSetPageTitle,
@@ -109,6 +110,7 @@ export default function Index() {
   );
   const [renameId, setRenameId] = useState<string | null>(null);
   const [renameDraft, setRenameDraft] = useState("");
+  const [contextDesigns, setContextDesigns] = useState<Design[]>([]);
 
   const anchorElRef = useRef<HTMLElement | null>(null);
   const anchorRef = useRef<HTMLElement | null>(null);
@@ -809,6 +811,21 @@ export default function Index() {
                     </TooltipTrigger>
                     <TooltipContent>{t("home.clearSelection")}</TooltipContent>
                   </Tooltip>
+                  <Button
+                    variant="outline"
+                    size="sm"
+                    onClick={() =>
+                      setContextDesigns(
+                        designs.filter((design) =>
+                          selectedDesignIds.has(design.id),
+                        ),
+                      )
+                    }
+                    className="cursor-pointer"
+                  >
+                    <IconPlus className="w-3.5 h-3.5" />
+                    {t("creativeContext.addToContext" /* i18n-key-ignore */)}
+                  </Button>
                   <Button
                     variant="destructive"
                     size="sm"
@@ -936,6 +953,18 @@ export default function Index() {
                             <IconCopy className="w-3.5 h-3.5 me-2" />
                             {t("home.duplicate")}
                           </DropdownMenuItem>
+                          <DropdownMenuItem
+                            onSelect={(event) => {
+                              event.preventDefault();
+                              setContextDesigns([design]);
+                            }}
+                            className="cursor-pointer"
+                          >
+                            <IconPlus className="w-3.5 h-3.5 me-2" />
+                            {t(
+                              "creativeContext.addToContext" /* i18n-key-ignore */,
+                            )}
+                          </DropdownMenuItem>
                           <DropdownMenuItem
                             onClick={() => setDeleteId(design.id)}
                             className="text-red-400 focus:text-red-400 cursor-pointer"
@@ -954,6 +983,21 @@ export default function Index() {
         )}
       </main>
 
+      <CreativeContextShareSheet
+        open={contextDesigns.length > 0}
+        onOpenChange={(open) => {
+          if (!open) setContextDesigns([]);
+        }}
+        resources={contextDesigns.map((design) => ({
+          appId: "design",
+          resourceType: "design",
+          resourceId: design.id,
+          title: design.title,
+          updatedAt: design.updatedAt ?? design.createdAt,
+          preview: { kind: "document", label: "Design" },
+        }))}
+      />
+
       <PromptPopover
         open={showNewPrompt}
         onOpenChange={handleNewPromptOpenChange}

package/corpus/templates/design/app/pages/design-editor/types.ts

@@ -52,6 +52,7 @@ export type DesignAccessRole = "owner" | "admin" | "editor" | "viewer";
 export interface DesignData {
   id: string;
   title: string;
+  updatedAt: string;
   description?: string;
   projectType: string;
   designSystemId?: string | null;

package/corpus/templates/design/changelog/2026-07-17-library-now-flags-published-designs-with-newer-versions-and-.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-17
+---
+
+Library now flags published designs with newer versions and lets you submit the update in place.

package/corpus/templates/design/changelog/2026-07-17-resources-can-be-added-to-creative-context-from-their-action.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-07-17
+---
+
+Resources can be added to Creative Context from their action menus.

package/corpus/templates/design/changelog/2026-07-17-you-can-add-exact-approved-artifact-versions-to-governed-cre.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-07-17
+---
+
+You can add exact, approved artifact versions to governed Creative Contexts for safe reuse.

package/corpus/templates/design/server/lib/native-creative-context.ts

@@ -0,0 +1,265 @@
+import { createHash } from "node:crypto";
+
+import { putPrivateBlob } from "@agent-native/core/private-blob";
+import { accessFilter, resolveAccess } from "@agent-native/core/sharing";
+import {
+  renderSafeNativeHtmlPreviews,
+  serializePrivateBlobHandle,
+  type NativeResourceCaptureAdapter,
+} from "@agent-native/creative-context/server";
+import { and, inArray } from "drizzle-orm";
+import { nanoid } from "nanoid";
+
+import { getDb, schema } from "../db/index.js";
+import { buildDesignSnapshot } from "./design-snapshot.js";
+
+function previewText(value: string, limit = 280) {
+  return value
+    .replace(/<[^>]+>/g, " ")
+    .replace(/\s+/g, " ")
+    .trim()
+    .slice(0, limit);
+}
+
+async function captureDesignPreviewMedia(input: {
+  designId: string;
+  ownerEmail: string;
+  files: Array<{
+    id: string;
+    filename: string;
+    fileType: string;
+    content: string;
+  }>;
+}) {
+  const previewFiles = input.files
+    .filter((file) => file.fileType === "html")
+    .slice(0, 12);
+  const rendered = await renderSafeNativeHtmlPreviews(
+    previewFiles.map((file) => ({
+      id: file.id,
+      html: file.content,
+      width: 1_280,
+      height: 800,
+    })),
+  );
+  const media = new Map<
+    string,
+    {
+      kind: "image";
+      mimeType: "image/png";
+      accessMode: "private";
+      storageKey: string;
+      altText: string;
+      contentHash: string;
+      width: number;
+      height: number;
+      metadata: { role: "design-preview"; fileId: string };
+    }
+  >();
+  await Promise.all(
+    rendered.map(async (preview) => {
+      const contentHash = createHash("sha256")
+        .update(preview.data)
+        .digest("hex");
+      const handle = await putPrivateBlob({
+        data: preview.data,
+        filename: `${input.designId}-${preview.id}.preview.png`,
+        mimeType: "image/png",
+        ownerEmail: input.ownerEmail,
+        key: `creative-context/design/${input.designId}/previews/${contentHash}.png`,
+        metadata: {
+          appId: "design",
+          resourceType: "design-preview",
+          resourceId: input.designId,
+          contentHash,
+        },
+      }).catch(() => null);
+      if (!handle) return;
+      const file = previewFiles.find(
+        (candidate) => candidate.id === preview.id,
+      );
+      media.set(preview.id, {
+        kind: "image",
+        mimeType: "image/png",
+        accessMode: "private",
+        storageKey: serializePrivateBlobHandle(handle),
+        altText: file?.filename ?? "Design preview",
+        contentHash,
+        width: preview.width,
+        height: preview.height,
+        metadata: { role: "design-preview", fileId: preview.id },
+      });
+    }),
+  );
+  return media;
+}
+
+export const nativeDesignCreativeContextAdapter: NativeResourceCaptureAdapter =
+  {
+    appId: "design",
+    resourceType: "design",
+    async listResourceVersions(resourceIds) {
+      if (!resourceIds.length) return [];
+      return getDb()
+        .select({
+          resourceId: schema.designs.id,
+          sourceModifiedAt: schema.designs.updatedAt,
+        })
+        .from(schema.designs)
+        .where(
+          and(
+            inArray(schema.designs.id, [...resourceIds]),
+            accessFilter(schema.designs, schema.designShares),
+          ),
+        );
+    },
+    async capture(reference) {
+      const access = await resolveAccess("design", reference.resourceId);
+      if (!access) throw new Error("Design not found");
+      const design = access.resource as typeof schema.designs.$inferSelect;
+      if (
+        reference.expectedUpdatedAt &&
+        reference.expectedUpdatedAt !== design.updatedAt
+      )
+        throw new Error(
+          "Design changed before it could be submitted to Context.",
+        );
+      const snapshot = await buildDesignSnapshot(design.id, design.data);
+      const payload = JSON.stringify({
+        designId: design.id,
+        designData: design.data,
+        files: snapshot.files,
+        tweaks: snapshot.tweaks,
+        appliedTweaks: snapshot.appliedTweaks,
+        resolvedCssVars: snapshot.resolvedCssVars,
+      });
+      const contentHash = createHash("sha256").update(payload).digest("hex");
+      const versionId = nanoid();
+      await getDb().insert(schema.designVersions).values({
+        id: versionId,
+        designId: design.id,
+        label: "Creative Context submission",
+        snapshot: payload,
+        createdAt: new Date().toISOString(),
+      });
+      const handle = await putPrivateBlob({
+        data: Buffer.from(payload),
+        filename: `${design.id}.design.json`,
+        mimeType: "application/json",
+        ownerEmail: design.ownerEmail,
+        key: `creative-context/design/${design.id}/${contentHash}.json`,
+        metadata: {
+          appId: "design",
+          resourceType: "design",
+          resourceId: design.id,
+          contentHash,
+        },
+      });
+      if (!handle)
+        throw new Error(
+          "Private blob storage is required to submit a design to Context.",
+        );
+      const previewMedia = await captureDesignPreviewMedia({
+        designId: design.id,
+        ownerEmail: design.ownerEmail,
+        files: snapshot.files,
+      });
+      const sourceModifiedAt = design.updatedAt ?? undefined;
+      return {
+        artifactKey: `design:design:${design.id}`,
+        source: {
+          name: "Design",
+          kind: "native-app",
+          externalRef: design.id,
+          access: {
+            visibility: design.visibility ?? "private",
+            canManage: access.role === "owner" || access.role === "admin",
+          },
+        },
+        items: [
+          {
+            externalId: `native:design:design:${design.id}`,
+            kind: "design-project",
+            title: design.title,
+            canonicalUrl: `/design/${design.id}`,
+            mimeType: "application/json",
+            content: snapshot.files
+              .map(
+                (file) =>
+                  `${file.filename}\n${file.content.replace(/<[^>]+>/g, " ").replace(/\s+/g, " ")}`,
+              )
+              .join("\n")
+              .slice(0, 40_000),
+            summary: `${snapshot.files.length} saved design files captured as an immutable version.`,
+            contentHash,
+            sourceModifiedAt,
+            sourceVersion: versionId,
+            metadata: {
+              preview: {
+                type: "design",
+                fileCount: snapshot.files.length,
+                frames: snapshot.files.slice(0, 24).map((file) => ({
+                  title: file.filename.slice(0, 160),
+                  fileType: file.fileType.slice(0, 80),
+                  excerpt: previewText(file.content),
+                })),
+              },
+            },
+            media: [...previewMedia.values()],
+            edges: snapshot.files.map((file) => ({
+              relation: "contains",
+              toExternalId: `native:design:design:${design.id}:frame:${file.id}`,
+            })),
+          },
+          ...snapshot.files.map((file) => {
+            const content = file.content
+              .replace(/<[^>]+>/g, " ")
+              .replace(/\s+/g, " ")
+              .trim();
+            return {
+              externalId: `native:design:design:${design.id}:frame:${file.id}`,
+              kind: "design-frame",
+              title: file.filename,
+              canonicalUrl: `/design/${design.id}`,
+              mimeType: "text/html",
+              content,
+              summary: content.slice(0, 500),
+              contentHash: createHash("sha256")
+                .update(file.content)
+                .digest("hex"),
+              sourceModifiedAt,
+              sourceVersion: versionId,
+              metadata: {
+                preview: {
+                  type: "design-frame",
+                  title: file.filename.slice(0, 160),
+                  fileType: file.fileType.slice(0, 80),
+                  excerpt: previewText(file.content),
+                },
+              },
+              media: previewMedia.has(file.id)
+                ? [previewMedia.get(file.id)!]
+                : undefined,
+            };
+          }),
+        ],
+        privateMetadata: {
+          nativeResource: {
+            appId: "design",
+            resourceType: "design",
+            resourceId: design.id,
+            expectedUpdatedAt: reference.expectedUpdatedAt,
+          },
+          clone: {
+            handle,
+            appId: "design",
+            resourceType: "design",
+            resourceId: design.id,
+            contentHash,
+            sourceVersion: versionId,
+            updatedAt: design.updatedAt,
+          },
+        },
+      };
+    },
+  };

package/corpus/templates/design/server/plugins/creative-context.ts

@@ -1,7 +1,12 @@
 import { registerOnboardingStep } from "@agent-native/core/onboarding";
-import { setupCreativeContext } from "@agent-native/creative-context/server";
+import {
+  registerNativeResourceCaptureAdapter,
+  setupCreativeContext,
+} from "@agent-native/creative-context/server";
 import { listContextSources } from "@agent-native/creative-context/store";
 
+import { nativeDesignCreativeContextAdapter } from "../lib/native-creative-context.js";
+
 registerOnboardingStep({
   id: "creative-context-library",
   order: 18,
@@ -28,4 +33,6 @@ registerOnboardingStep({
   },
 });
 
+registerNativeResourceCaptureAdapter(nativeDesignCreativeContextAdapter);
+
 export default setupCreativeContext({ appId: "design" });

package/corpus/templates/dispatch/actions/provider-api-request.ts

@@ -196,6 +196,7 @@ export default defineAction({
       ),
   }),
   http: false,
+  toolCallable: false,
   run: async (args) => {
     if (args.stageAs) {
       const ctx = getCredentialContext();

package/corpus/templates/mail/actions/provider-api-request.ts

@@ -205,6 +205,7 @@ export default defineAction({
       ),
   }),
   http: false,
+  toolCallable: false,
   run: async (args) => {
     if (args.stageAs) {
       const ctx = getCredentialContext();

package/corpus/templates/slides/.agents/skills/creative-context/SKILL.md

@@ -35,9 +35,11 @@ role cannot silently stand in for another:
 
 1. Follow the user's explicit instructions and the object currently selected in
    the app.
-2. Read the `creative-context` application-state record. If
-   `pinnedPackId` is set, prefer that immutable pack. Otherwise use
-   `currentPackId` when it records context already selected for this session.
+2. Read the `creative-context` application-state record. If `pinnedPackId` is
+   set, replay that immutable pack. Otherwise honor `selectedContextId`; when it
+   is unset, let retrieval use Default plus at most one app-bound or
+   semantically matching specialty context. `currentPackId` is the receipt from
+   the latest materialized generation, not a replacement for context selection.
 3. Call `search-creative-context` with a narrow query for exact facts, visual
    language, audience guidance, prior decisions, or reusable references.
 4. Call `get-context-item` only for the specific search result versions
@@ -60,6 +62,7 @@ The single state key is `creative-context`:
 ```json
 {
   "contextMode": "auto",
+  "selectedContextId": null,
   "currentPackId": null,
   "pinnedPackId": null
 }
@@ -120,3 +123,8 @@ If `nativeCode.content` is `null` and `oversized` is true, use the named
 `get-context-item`, but the inline content is only the validated manifest shell.
 Never concatenate a truncated fragment or use delimited `version.content` as
 HTML.
+
+For an app-created deck snapshot, use `clone-creative-context-deck` instead.
+That typed action resolves the exact approved private deck payload and runs it
+through Slides' normal deck creation and sanitization path. Generic context
+actions must never receive or return that payload.

package/corpus/templates/slides/AGENTS.md

@@ -44,6 +44,11 @@ Detailed deck, slide-editing, image, design-system, and export workflows live in
   `.agents/skills/creative-context/SKILL.md`: explicit request and current deck
   first, then a pinned/current pack, then narrow library search. Respect
   `creative-context.contextMode: "off"` without silently restoring a pack.
+- To submit a deck to a governed Creative Context, use the Context tab or
+  `manage-context-membership`; it captures one immutable deck version. Reuse
+  only a returned opaque native clone reference through the Slides clone action.
+  Use `operation="submit-latest"` with a Library membership id when its native
+  update status reports `update-available`.
 
 ## Persistence Model
 

package/corpus/templates/slides/actions/clone-creative-context-deck.ts

@@ -0,0 +1,96 @@
+import { createHash } from "node:crypto";
+
+import { defineAction } from "@agent-native/core";
+import {
+  readPrivateBlob,
+  type PrivateBlobHandle,
+} from "@agent-native/core/private-blob";
+import {
+  getRequestOrgId,
+  getRequestUserEmail,
+} from "@agent-native/core/server/request-context";
+import { resolveNativeContextCloneReference } from "@agent-native/creative-context/server";
+import { eq } from "drizzle-orm";
+import { nanoid } from "nanoid";
+import { z } from "zod";
+
+import { getDb, schema } from "../server/db/index.js";
+import { getDeckUrl } from "./_app-url.js";
+
+export default defineAction({
+  description:
+    "Clone one exact governed Slides deck version without exposing its native payload.",
+  schema: z.object({
+    contextId: z.string(),
+    artifactKey: z.string(),
+    resourceId: z.string(),
+    expectedUpdatedAt: z.string().optional(),
+    title: z.string().optional(),
+  }),
+  publicAgent: { expose: true, readOnly: false, requiresAuth: true },
+  run: async (args) => {
+    const reference = await resolveNativeContextCloneReference({
+      appId: "slides",
+      resourceType: "deck",
+      resourceId: args.resourceId,
+      expectedUpdatedAt: args.expectedUpdatedAt,
+      contextId: args.contextId,
+      artifactKey: args.artifactKey,
+    });
+    const raw = await readPrivateBlob(
+      reference.cloneHandle as PrivateBlobHandle,
+    );
+    const data = Buffer.from(raw.data).toString("utf8");
+    const contentHash = createHash("sha256").update(data).digest("hex");
+    if (
+      raw.metadata?.appId !== "slides" ||
+      raw.metadata?.resourceType !== "deck" ||
+      raw.metadata?.resourceId !== args.resourceId ||
+      raw.metadata?.contentHash !== contentHash
+    )
+      throw new Error(
+        "Governed deck clone payload failed integrity verification.",
+      );
+    const deck = JSON.parse(data) as Record<string, unknown> & {
+      slides?: Array<Record<string, unknown>>;
+      title?: string;
+      designSystemId?: string;
+    };
+    const email = getRequestUserEmail();
+    if (!email) throw new Error("no authenticated user");
+    const id = `deck-${nanoid()}`;
+    const now = new Date().toISOString();
+    const title = args.title?.trim() || `Copy of ${deck.title ?? "deck"}`;
+    deck.title = title;
+    deck.createdAt = now;
+    deck.updatedAt = now;
+    deck.slides = (deck.slides ?? []).map((slide) => ({
+      ...slide,
+      id: `slide-${nanoid(8)}`,
+    }));
+    await getDb()
+      .insert(schema.decks)
+      .values({
+        id,
+        title,
+        data: JSON.stringify(deck),
+        designSystemId: deck.designSystemId ?? null,
+        ownerEmail: email,
+        orgId: getRequestOrgId() ?? null,
+        createdAt: now,
+        updatedAt: now,
+      });
+    const [saved] = await getDb()
+      .select({ id: schema.decks.id, title: schema.decks.title })
+      .from(schema.decks)
+      .where(eq(schema.decks.id, id));
+    if (!saved) throw new Error("Deck clone did not persist.");
+    return {
+      id: saved.id,
+      title: saved.title,
+      slideCount: deck.slides.length,
+      url: getDeckUrl(id),
+      clonedExactVersion: reference.publishedItemVersionId,
+    };
+  },
+});

package/corpus/templates/slides/actions/extract-pdf.ts

@@ -10,13 +10,14 @@ export default async function (args: string[]) {
   }
 
   const buf = fs.readFileSync(pdfPath);
-  const { CanvasFactory } = await import("pdf-parse/worker");
+  const { CanvasFactory, getData } = await import("pdf-parse/worker");
   const { PDFParse } = await import("pdf-parse");
+  PDFParse.setWorker(getData());
   const pdf = new PDFParse({
     data: new Uint8Array(buf),
     CanvasFactory,
   });
-  const result = await pdf.getText();
+  const result = await pdf.getText().finally(() => pdf.destroy());
   const pages = result.pages || [];
   console.log("Total pages:", pages.length);
   pages.forEach((page: { num: number; text: string }) => {

package/corpus/templates/slides/actions/import-file.ts

@@ -211,15 +211,16 @@ export default defineAction({
     }
 
     if (detectedFormat === "pdf") {
-      const { CanvasFactory } = await import("pdf-parse/worker");
+      const { CanvasFactory, getData } = await import("pdf-parse/worker");
       const { PDFParse } = await import("pdf-parse");
+      PDFParse.setWorker(getData());
       const { convertSectionsToSlides } =
         await import("../server/handlers/import/html-converter.js");
       const pdf = new PDFParse({
         data: new Uint8Array(fileBuffer),
         CanvasFactory,
       });
-      const result = await pdf.getText();
+      const result = await pdf.getText().finally(() => pdf.destroy());
       const pages = normalizePdfPages(result);
       const textPages = pages.filter((p) => p.text.trim());
       const title = titleFromPath(filename);

package/corpus/templates/slides/actions/provider-api-request.ts

@@ -204,6 +204,7 @@ export default defineAction({
       ),
   }),
   http: false,
+  toolCallable: false,
   run: async (args) => {
     if (args.stageAs) {
       const ctx = getCredentialContext();

package/corpus/templates/slides/app/components/deck/DeckCard.tsx

@@ -1,10 +1,12 @@
 import { VisibilityBadge, useT } from "@agent-native/core/client";
+import { CreativeContextShareSheet } from "@agent-native/creative-context/client";
 import {
   IconDots,
   IconTrash,
   IconCopy,
   IconPencil,
   IconPalette,
+  IconPlus,
 } from "@tabler/icons-react";
 import { useState, useRef, useEffect } from "react";
 import { Link } from "react-router";
@@ -42,6 +44,7 @@ export default function DeckCard({
   const [isRenaming, setIsRenaming] = useState(false);
   const [menuOpen, setMenuOpen] = useState(false);
   const [renameValue, setRenameValue] = useState(deck.title);
+  const [contextOpen, setContextOpen] = useState(false);
   const inputRef = useRef<HTMLInputElement>(null);
   const pendingRenameRef = useRef(false);
 
@@ -188,6 +191,16 @@ export default function DeckCard({
               <IconCopy className="w-3.5 h-3.5 me-2" />
               {isDuplicating ? "Duplicating..." : "Duplicate"}
             </DropdownMenuItem>
+            <DropdownMenuItem
+              onSelect={(event) => {
+                event.preventDefault();
+                setMenuOpen(false);
+                setContextOpen(true);
+              }}
+            >
+              <IconPlus className="w-3.5 h-3.5 me-2" />
+              {t("creativeContext.addToContext" /* i18n-key-ignore */)}
+            </DropdownMenuItem>
             <DropdownMenuSeparator />
             <DropdownMenuItem
               onClick={(e) => {
@@ -203,6 +216,20 @@ export default function DeckCard({
           </DropdownMenuContent>
         </DropdownMenu>
       </div>
+      <CreativeContextShareSheet
+        open={contextOpen}
+        onOpenChange={setContextOpen}
+        resource={{
+          appId: "slides",
+          resourceType: "deck",
+          resourceId: deck.id,
+          title: deck.title,
+          updatedAt: deck.updatedAt,
+          visibility: deck.visibility,
+          preview: { kind: "document", label: "Deck" },
+        }}
+        canManage={deck.createdByMe}
+      />
     </div>
   );
 }