@agent-native/core 0.115.4 → 0.116.0

package/corpus/templates/clips/server/jobs/brain-export.ts

@@ -0,0 +1,182 @@
+import { getDbExec } from "@agent-native/core/db";
+import { runWithRequestContext } from "@agent-native/core/server";
+import { and, eq, isNull } from "drizzle-orm";
+
+import exportToBrain from "../../actions/export-to-brain.js";
+import { getDb, schema } from "../db/index.js";
+import {
+  BRAIN_EXPORT_STATE_PREFIX,
+  parseBrainExportState,
+  writeBrainExportState,
+} from "../lib/brain-export-state.js";
+import { ownerEmailMatches } from "../lib/recordings.js";
+
+const SWEEP_INTERVAL_MS = 60_000;
+const MAX_ATTEMPTS = 8;
+const SWEEP_LIMIT = 4;
+const DISCOVERY_LIMIT = 20;
+const BACKFILL_DAYS = 7;
+let skippingLogged = false;
+
+async function seedRecentBrainExports(): Promise<void> {
+  const now = new Date();
+  const { rows } = await getDbExec().execute({
+    sql: `SELECT recordings.id, recordings.owner_email, recordings.org_id
+      FROM recordings
+      INNER JOIN recording_transcripts
+        ON recording_transcripts.recording_id = recordings.id
+      WHERE recordings.status = ?
+        AND recordings.trashed_at IS NULL
+        AND recordings.org_id IS NOT NULL
+        AND recordings.created_at >= ?
+        AND recording_transcripts.status = ?
+        AND LENGTH(TRIM(COALESCE(recording_transcripts.full_text, ''))) > 0
+        AND NOT EXISTS (
+          SELECT 1 FROM application_state
+          WHERE application_state.session_id = recordings.owner_email
+            AND application_state.key = ? || recordings.id
+        )
+      ORDER BY recordings.created_at DESC
+      LIMIT ?`,
+    args: [
+      "ready",
+      new Date(
+        now.getTime() - BACKFILL_DAYS * 24 * 60 * 60 * 1000,
+      ).toISOString(),
+      "ready",
+      BRAIN_EXPORT_STATE_PREFIX,
+      DISCOVERY_LIMIT,
+    ],
+  });
+  for (const row of rows as Array<{
+    id?: unknown;
+    owner_email?: unknown;
+    org_id?: unknown;
+  }>) {
+    const recordingId = typeof row.id === "string" ? row.id.trim() : "";
+    const ownerEmail =
+      typeof row.owner_email === "string" ? row.owner_email.trim() : "";
+    const orgId = typeof row.org_id === "string" ? row.org_id.trim() : "";
+    if (!recordingId || !ownerEmail || !orgId) continue;
+    await runWithRequestContext({ userEmail: ownerEmail, orgId }, () =>
+      writeBrainExportState({
+        recordingId,
+        status: "pending",
+        attempts: 0,
+        updatedAt: now.toISOString(),
+        nextAttemptAt: now.toISOString(),
+      }),
+    );
+  }
+}
+
+export async function runBrainExportSweepOnce(): Promise<void> {
+  await seedRecentBrainExports();
+  const { rows } = await getDbExec().execute({
+    sql: "SELECT session_id, key, value FROM application_state WHERE key LIKE ? AND (value LIKE ? OR value LIKE ?) ORDER BY updated_at ASC LIMIT ?",
+    args: [
+      `${BRAIN_EXPORT_STATE_PREFIX}%`,
+      '%"status":"pending"%',
+      '%"status":"failed"%',
+      SWEEP_LIMIT,
+    ],
+  });
+  const now = Date.now();
+  for (const row of rows as Array<{
+    session_id?: unknown;
+    key?: unknown;
+    value?: unknown;
+  }>) {
+    const ownerEmail =
+      typeof row.session_id === "string" ? row.session_id.trim() : "";
+    const key = typeof row.key === "string" ? row.key : "";
+    const recordingId = key.slice(BRAIN_EXPORT_STATE_PREFIX.length);
+    let raw: unknown;
+    try {
+      raw = JSON.parse(typeof row.value === "string" ? row.value : "");
+    } catch {
+      continue;
+    }
+    const state = parseBrainExportState(raw);
+    if (
+      !ownerEmail ||
+      !recordingId ||
+      !state ||
+      state.recordingId !== recordingId ||
+      !["pending", "failed"].includes(state.status) ||
+      state.attempts >= MAX_ATTEMPTS ||
+      Date.parse(state.nextAttemptAt ?? "") > now
+    )
+      continue;
+    try {
+      const [recording] = await getDb()
+        .select({
+          ownerEmail: schema.recordings.ownerEmail,
+          orgId: schema.recordings.orgId,
+        })
+        .from(schema.recordings)
+        .where(
+          and(
+            eq(schema.recordings.id, recordingId),
+            ownerEmailMatches(schema.recordings.ownerEmail, ownerEmail),
+            eq(schema.recordings.status, "ready"),
+            isNull(schema.recordings.trashedAt),
+          ),
+        )
+        .limit(1);
+      if (!recording) continue;
+      await runWithRequestContext(
+        {
+          userEmail: recording.ownerEmail,
+          orgId: recording.orgId ?? undefined,
+        },
+        () =>
+          exportToBrain.run({ recordingId, retryAttempt: state.attempts + 1 }),
+      );
+    } catch (error) {
+      const attempts = state.attempts + 1;
+      await runWithRequestContext({ userEmail: ownerEmail }, () =>
+        writeBrainExportState({
+          recordingId,
+          status: "failed",
+          attempts,
+          reason: "brain-export-worker-failed",
+          updatedAt: new Date().toISOString(),
+          nextAttemptAt: new Date(
+            Date.now() +
+              Math.min(15 * 60_000, 30_000 * 2 ** Math.max(0, attempts - 1)),
+          ).toISOString(),
+        }),
+      );
+      console.warn("[brain-export] sweep item failed", {
+        recordingId,
+        error: error instanceof Error ? error.message : String(error),
+      });
+    }
+  }
+}
+
+export default function registerBrainExportJob(): void {
+  if (process.env.NETLIFY === "true") return;
+  const enabled =
+    process.env.RUN_BACKGROUND_JOBS === "1" ||
+    (process.env.NODE_ENV === "production" &&
+      process.env.RUN_BACKGROUND_JOBS !== "0");
+  if (!enabled) {
+    if (process.env.DEBUG && !skippingLogged) {
+      console.log(
+        "[brain-export] Skipping background sweep (set RUN_BACKGROUND_JOBS=1 to enable in dev).",
+      );
+      skippingLogged = true;
+    }
+    return;
+  }
+  setInterval(() => {
+    runBrainExportSweepOnce().catch((error) =>
+      console.error("[brain-export] interval failed:", error),
+    );
+  }, SWEEP_INTERVAL_MS);
+  console.log(
+    `[brain-export] Recurring recovery sweep every ${SWEEP_INTERVAL_MS / 1000}s.`,
+  );
+}

package/corpus/templates/clips/server/lib/brain-export-state.ts

@@ -0,0 +1,42 @@
+import { writeAppState } from "@agent-native/core/application-state";
+
+export const BRAIN_EXPORT_STATE_PREFIX = "clips-brain-export-";
+
+export type BrainExportState = {
+  recordingId: string;
+  status: "pending" | "exported" | "quarantined" | "failed" | "skipped";
+  attempts: number;
+  updatedAt: string;
+  nextAttemptAt?: string;
+  captureId?: string;
+  sensitivityReceiptId?: string;
+  sensitivityDisposition?: string;
+  reason?: string;
+};
+
+export function brainExportStateKey(recordingId: string): string {
+  return `${BRAIN_EXPORT_STATE_PREFIX}${recordingId}`;
+}
+
+export async function writeBrainExportState(state: BrainExportState) {
+  await writeAppState(brainExportStateKey(state.recordingId), state);
+}
+
+export function parseBrainExportState(value: unknown): BrainExportState | null {
+  if (!value || typeof value !== "object") return null;
+  const state = value as Partial<BrainExportState>;
+  if (
+    typeof state.recordingId !== "string" ||
+    !state.recordingId ||
+    !["pending", "exported", "quarantined", "failed", "skipped"].includes(
+      String(state.status),
+    ) ||
+    typeof state.attempts !== "number" ||
+    !Number.isInteger(state.attempts) ||
+    state.attempts < 0 ||
+    typeof state.updatedAt !== "string"
+  ) {
+    return null;
+  }
+  return state as BrainExportState;
+}

package/corpus/templates/clips/server/lib/post-finalize-dispatch.ts

@@ -7,7 +7,11 @@ import {
   signScopedAgentAccessToken,
 } from "@agent-native/core/server";
 
-export type PostFinalizeJobKind = "media-ready" | "seekable" | "transcript";
+export type PostFinalizeJobKind =
+  | "media-ready"
+  | "seekable"
+  | "transcript"
+  | "brain-export";
 
 export const POST_FINALIZE_JOB_TOKEN_KIND = "clips-post-finalize-job";
 

package/corpus/templates/clips/server/plugins/calendar-jobs.ts

@@ -5,6 +5,7 @@
  * pattern).
  */
 
+import registerBrainExportJob from "../jobs/brain-export.js";
 import registerBuilderMediaCompressionJob from "../jobs/builder-media-compression.js";
 import registerMediaVerificationJob from "../jobs/media-verification.js";
 import registerMeetingRemindersJob from "../jobs/meeting-reminders.js";
@@ -17,6 +18,7 @@ export default () => {
   // background loop is off.
   registerMeetingRemindersJob();
   registerBuilderMediaCompressionJob();
+  registerBrainExportJob();
   registerMediaVerificationJob();
   registerPollCalendarsJob();
   registerStaleMeetingSweeperJob();

package/corpus/templates/clips/server/register-secrets.ts

@@ -219,6 +219,48 @@ registerRequiredSecret({
   required: false,
 });
 
+// ── Brain transcript ingest ──────────────────────────────────────────
+// Both values are workspace-scoped: every clip in the workspace must reach
+// the same Brain source, while the encrypted secret store keeps the token out
+// of action responses, application state, and client bundles.
+
+registerRequiredSecret({
+  key: "BRAIN_INGEST_URL",
+  label: "Brain ingest URL",
+  description:
+    "Signed Brain generic-ingest endpoint for ready Clips transcripts. Pair with BRAIN_INGEST_TOKEN.",
+  scope: "workspace",
+  kind: "api-key",
+  required: false,
+  validator: (value) => {
+    if (!value) return true;
+    try {
+      const url = new URL(value);
+      return url.protocol === "http:" || url.protocol === "https:"
+        ? true
+        : { ok: false, error: "Use an HTTP or HTTPS URL." };
+    } catch {
+      return { ok: false, error: "Enter a valid ingest URL." };
+    }
+  },
+});
+
+registerRequiredSecret({
+  key: "BRAIN_INGEST_TOKEN",
+  label: "Brain ingest token",
+  description:
+    "Bearer token for the configured Brain ingest URL. Stored encrypted and never returned to Clips clients or export receipts.",
+  scope: "workspace",
+  kind: "api-key",
+  required: false,
+  validator: (value) => {
+    if (!value) return true;
+    return typeof value === "string" && value.trim().length >= 8
+      ? true
+      : { ok: false, error: "Token looks too short." };
+  },
+});
+
 // ── Dark-launched media worker plumbing ──────────────────────────────
 // These are optional until the ai-services worker is deployed. When enabled,
 // Clips enqueues background video compression jobs there instead of using

package/corpus/templates/clips/server/routes/api/_agent-native-background/post-finalize-worker.post.ts

@@ -11,6 +11,7 @@ import {
 } from "h3";
 import { z } from "zod";
 
+import exportToBrain from "../../../../actions/export-to-brain.js";
 import finalizeRecording from "../../../../actions/finalize-recording.js";
 import { ensureRecordingSeekable } from "../../../../actions/lib/ensure-seekable-video.js";
 import requestTranscript from "../../../../actions/request-transcript.js";
@@ -23,7 +24,7 @@ import {
 
 const bodySchema = z.object({
   recordingId: z.string().min(1).max(200),
-  kind: z.enum(["media-ready", "seekable", "transcript"]),
+  kind: z.enum(["media-ready", "seekable", "transcript", "brain-export"]),
   token: z.string().min(1),
   delayMs: z.number().int().min(0).max(30_000).optional(),
   retryAttempt: z.number().int().min(1).max(10).optional(),
@@ -111,6 +112,14 @@ export default defineEventHandler(async (event: H3Event) => {
         return { ok: true, kind, result };
       }
 
+      if (kind === "brain-export") {
+        const result = await exportToBrain.run({
+          recordingId,
+          retryAttempt,
+        });
+        return { ok: true, kind, result };
+      }
+
       const result = await requestTranscript.run({
         recordingId,
         force: true,

package/corpus/templates/clips/server/routes/api/clips/brain-export/run.post.ts

@@ -0,0 +1,45 @@
+import { timingSafeEqual } from "node:crypto";
+
+import { createError, defineEventHandler, getHeader } from "h3";
+
+import { runBrainExportSweepOnce } from "../../../../jobs/brain-export.js";
+
+declare global {
+  var __AGENT_NATIVE_CLIPS_BRAIN_EXPORT_SCHEDULED_RUNTIME__:
+    | boolean
+    | undefined;
+}
+
+function productionLike() {
+  return (
+    process.env.NODE_ENV === "production" || process.env.NETLIFY === "true"
+  );
+}
+
+function headerMatchesSecret(header: string | undefined, secret: string) {
+  const expected = `Bearer ${secret}`;
+  const value = header?.trim() ?? "";
+  return (
+    value.length === expected.length &&
+    timingSafeEqual(Buffer.from(value), Buffer.from(expected))
+  );
+}
+
+export default defineEventHandler(async (event) => {
+  const scheduled =
+    globalThis.__AGENT_NATIVE_CLIPS_BRAIN_EXPORT_SCHEDULED_RUNTIME__ === true;
+  const secret = process.env.CLIPS_BRAIN_EXPORT_JOBS_SECRET?.trim(); // guard:allow-env-credential — deployment scheduler route secret
+  if (!secret && productionLike() && !scheduled)
+    throw createError({
+      statusCode: 503,
+      statusMessage: "CLIPS_BRAIN_EXPORT_JOBS_SECRET is required",
+    });
+  if (
+    secret &&
+    !scheduled &&
+    !headerMatchesSecret(getHeader(event, "authorization"), secret)
+  )
+    throw createError({ statusCode: 401, statusMessage: "Unauthorized" });
+  await runBrainExportSweepOnce();
+  return { ok: true };
+});

package/corpus/templates/content/.agents/skills/agent-native-toolkit/SKILL.md

@@ -85,7 +85,10 @@ in the moment of agent use.
   approval, generative UI, progress, and screen-state exposure.
 - **Chat history kit**: presentational chat lists and recent-chat rails belong
   in Toolkit; Core keeps thread persistence, agent execution, transport, and
-  page-to-sidebar handoff. Apps inject routing, labels, and domain actions.
+  page-to-sidebar handoff. Use Toolkit's `ChatHistoryRail` for the standard
+  five-item sidebar preview and a footer row with New chat followed by an
+  ellipsis disclosure up to fifteen. Apps inject routing, labels, and domain
+  actions.
 - **Agent page kit**: the full-page `/agent` surface (`AgentTabsPage` from
   `@agent-native/core/client`) with Context, Files, Connections, Jobs, and
   Access tabs plus a Personal/Organization scope toggle. The canonical home

package/corpus/templates/content/.agents/skills/real-time-sync/SKILL.md

@@ -72,7 +72,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
   });
   ```
 
-  `useDbSync` and every `subscribeSyncEvents` subscriber share one `EventSource` and one fallback poll loop per tab — this is how collaborative documents receive doc updates and cursor/awareness events.
+  `useDbSync` and every `subscribeSyncEvents` subscriber share one `EventSource` and one fallback poll loop per tab — this is how collaborative documents receive doc updates and cursor/awareness events. Hidden tabs keep that shared transport alive by default: SSE stays connected and active fallback polling relaxes to a 10-second floor (idle polling remains once per minute). Pass `pauseWhenHidden: true` only for a consumer that explicitly must stop all hidden-tab sync.
 
 ## Which sources to depend on
 

package/corpus/templates/content/app/components/sidebar/DocumentSidebar.tsx

@@ -2093,7 +2093,7 @@ export function DocumentSidebar({
       {/* Footer */}
       <div className="shrink-0 space-y-2 px-3 py-2">
         {isCodeMode ? <DevDatabaseLink /> : null}
-        <div className="flex items-center gap-1">
+        <div className="flex items-center justify-end gap-1">
           <FeedbackButton className="h-8 min-w-0 flex-1 gap-2 rounded-md px-2 py-0" />
           <div className="flex shrink-0 items-center gap-0.5">
             <NotionButton />

package/corpus/templates/content/server/plugins/collab.ts

@@ -5,5 +5,5 @@ export default createCollabPlugin({
   contentColumn: "content",
   idColumn: "id",
   autoSeed: false, // Seeding happens via edit-document action, not on startup
-  resourceType: "document",
+  access: { mode: "resource", resourceType: "document" },
 });

package/corpus/templates/crm/.agents/skills/agent-native-toolkit/SKILL.md

@@ -85,7 +85,10 @@ in the moment of agent use.
   approval, generative UI, progress, and screen-state exposure.
 - **Chat history kit**: presentational chat lists and recent-chat rails belong
   in Toolkit; Core keeps thread persistence, agent execution, transport, and
-  page-to-sidebar handoff. Apps inject routing, labels, and domain actions.
+  page-to-sidebar handoff. Use Toolkit's `ChatHistoryRail` for the standard
+  five-item sidebar preview and a footer row with New chat followed by an
+  ellipsis disclosure up to fifteen. Apps inject routing, labels, and domain
+  actions.
 - **Agent page kit**: the full-page `/agent` surface (`AgentTabsPage` from
   `@agent-native/core/client`) with Context, Files, Connections, Jobs, and
   Access tabs plus a Personal/Organization scope toggle. The canonical home

package/corpus/templates/crm/actions/_crm-data-program-actions.ts

@@ -0,0 +1,15 @@
+import { initDataPrograms } from "@agent-native/core/data-programs";
+
+import { CRM_APP_ID } from "../server/lib/provider-api.js";
+import getCrmPipelineData from "./get-crm-pipeline-data.js";
+
+export function getCrmDataProgramActions() {
+  return { "get-crm-pipeline-data": getCrmPipelineData };
+}
+
+export function initCrmDataPrograms(): void {
+  initDataPrograms({
+    appId: CRM_APP_ID,
+    getActions: getCrmDataProgramActions,
+  });
+}

package/corpus/templates/crm/actions/get-crm-dashboard-panel.ts

@@ -5,6 +5,7 @@ import { z } from "zod";
 import { crmDashboardStore } from "../server/db/index.js";
 import { CRM_APP_ID } from "../server/lib/provider-api.js";
 import { requireDashboardAccess } from "./_crm-dashboard.js";
+import { initCrmDataPrograms } from "./_crm-data-program-actions.js";
 
 const programResolver = createProgramPanelSourceResolver({ appId: CRM_APP_ID });
 
@@ -25,6 +26,7 @@ export default defineAction({
     if (!dashboard) throw new Error("CRM dashboard was not found.");
     const panel = dashboard.config.panels.find((item) => item.id === panelId);
     if (!panel) throw new Error("CRM dashboard panel was not found.");
+    initCrmDataPrograms();
     return programResolver.resolve(
       { source: panel.source, query: panel.query },
       { userEmail: access.userEmail, orgId: access.orgId ?? null },

package/corpus/templates/crm/actions/run.ts

@@ -1,11 +1,7 @@
-import { initDataPrograms } from "@agent-native/core/data-programs";
 import { runScript } from "@agent-native/core/scripts";
 
-import getCrmPipelineData from "./get-crm-pipeline-data.js";
+import { initCrmDataPrograms } from "./_crm-data-program-actions.js";
 
-initDataPrograms({
-  appId: "crm",
-  getActions: () => ({ "get-crm-pipeline-data": getCrmPipelineData }),
-});
+initCrmDataPrograms();
 
 runScript();

package/corpus/templates/crm/actions/update-crm-record.ts

@@ -272,9 +272,11 @@ export default defineAction({
       );
     });
     if (missing.length || blocked.length) {
-      throw new Error(
+      const error = new Error(
         `Only discovered, updateable CRM fields can be changed. Unsupported: ${[...new Set([...missing, ...blocked])].join(", ")}`,
-      );
+      ) as Error & { statusCode?: number };
+      error.statusCode = 422;
+      throw error;
     }
 
     const wrongAuthority = fieldNames.filter((fieldName) => {

package/corpus/templates/crm/app/components/layout/CrmLayout.tsx

@@ -4,6 +4,7 @@ import {
   focusAgentChat,
   navigateWithAgentChatViewTransition,
   useAgentChatHomeHandoff,
+  useAgentChatHomeHandoffLinks,
 } from "@agent-native/core/client/agent-chat";
 import { Button } from "@agent-native/toolkit/ui/button";
 import {
@@ -29,6 +30,11 @@ export function CrmLayout({ children }: { children: React.ReactNode }) {
     activePath: location.pathname,
     enabled: !isAskRoute,
   });
+  useAgentChatHomeHandoffLinks({
+    storageKey: "crm",
+    chatPath: "/ask",
+    requireActiveHandoff: false,
+  });
 
   useEffect(() => setMobileOpen(false), [location.pathname]);
 

package/corpus/templates/crm/changelog/2026-07-22-crm-field-validation-now-explains-which-fields-cannot-be-edi.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-22
+---
+
+CRM field validation now explains which fields cannot be edited instead of showing a generic error.

package/corpus/templates/crm/changelog/2026-07-22-fixed-hubspot-contact-syncs-missing-records-updated-after-th.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-22
+---
+
+Fixed HubSpot contact syncs missing records updated after the sync cursor.

package/corpus/templates/crm/changelog/2026-07-22-fixed-pipeline-dashboard-panels-so-their-opportunity-data-lo.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-22
+---
+
+Fixed Pipeline dashboard panels so their opportunity data loads reliably.

package/corpus/templates/crm/changelog/2026-07-22-full-page-chat-keeps-the-active-conversation-when-moving-to-.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-22
+---
+
+Full-page chat keeps the active conversation when moving to and from the sidebar.

package/corpus/templates/crm/server/crm/hubspot-adapter.ts

@@ -751,7 +751,10 @@ export class HubSpotCrmAdapter implements CrmAdapter {
     }
     if (scope.updatedAfter) {
       filters.push({
-        propertyName: "hs_lastmodifieddate",
+        propertyName:
+          scope.objectType.toLowerCase() === "contacts"
+            ? "lastmodifieddate"
+            : "hs_lastmodifieddate",
         operator: "GTE",
         value: scope.updatedAfter,
       });

package/corpus/templates/design/.agents/skills/agent-native-toolkit/SKILL.md

@@ -85,7 +85,10 @@ in the moment of agent use.
   approval, generative UI, progress, and screen-state exposure.
 - **Chat history kit**: presentational chat lists and recent-chat rails belong
   in Toolkit; Core keeps thread persistence, agent execution, transport, and
-  page-to-sidebar handoff. Apps inject routing, labels, and domain actions.
+  page-to-sidebar handoff. Use Toolkit's `ChatHistoryRail` for the standard
+  five-item sidebar preview and a footer row with New chat followed by an
+  ellipsis disclosure up to fifteen. Apps inject routing, labels, and domain
+  actions.
 - **Agent page kit**: the full-page `/agent` surface (`AgentTabsPage` from
   `@agent-native/core/client`) with Context, Files, Connections, Jobs, and
   Access tabs plus a Personal/Organization scope toggle. The canonical home

package/corpus/templates/design/app/components/layout/Sidebar.tsx

@@ -168,7 +168,7 @@ export function Sidebar() {
 
             <div className="px-3 py-2">
               <DevDatabaseLink />
-              <div className="flex items-center gap-1">
+              <div className="flex items-center justify-end gap-1">
                 <FeedbackButton className="min-w-0 flex-1" />
                 <ThemeToggle className="h-8 w-8 shrink-0" />
               </div>

package/corpus/templates/design/server/plugins/collab.ts

@@ -8,13 +8,16 @@ export default createCollabPlugin({
   contentColumn: "content",
   idColumn: "id",
   autoSeed: true,
-  resourceType: "design",
-  resolveResourceId: async (docId) => {
-    const db = getDb();
-    const [file] = await db
-      .select({ designId: schema.designFiles.designId })
-      .from(schema.designFiles)
-      .where(eq(schema.designFiles.id, docId));
-    return file?.designId ?? null;
+  access: {
+    mode: "resource",
+    resourceType: "design",
+    resolveResourceId: async (docId) => {
+      const db = getDb();
+      const [file] = await db
+        .select({ designId: schema.designFiles.designId })
+        .from(schema.designFiles)
+        .where(eq(schema.designFiles.id, docId));
+      return file?.designId ?? null;
+    },
   },
 });

package/corpus/templates/dispatch/.agents/skills/agent-native-toolkit/SKILL.md

@@ -85,7 +85,10 @@ in the moment of agent use.
   approval, generative UI, progress, and screen-state exposure.
 - **Chat history kit**: presentational chat lists and recent-chat rails belong
   in Toolkit; Core keeps thread persistence, agent execution, transport, and
-  page-to-sidebar handoff. Apps inject routing, labels, and domain actions.
+  page-to-sidebar handoff. Use Toolkit's `ChatHistoryRail` for the standard
+  five-item sidebar preview and a footer row with New chat followed by an
+  ellipsis disclosure up to fifteen. Apps inject routing, labels, and domain
+  actions.
 - **Agent page kit**: the full-page `/agent` surface (`AgentTabsPage` from
   `@agent-native/core/client`) with Context, Files, Connections, Jobs, and
   Access tabs plus a Personal/Organization scope toggle. The canonical home

package/corpus/templates/forms/.agents/skills/agent-native-toolkit/SKILL.md

@@ -85,7 +85,10 @@ in the moment of agent use.
   approval, generative UI, progress, and screen-state exposure.
 - **Chat history kit**: presentational chat lists and recent-chat rails belong
   in Toolkit; Core keeps thread persistence, agent execution, transport, and
-  page-to-sidebar handoff. Apps inject routing, labels, and domain actions.
+  page-to-sidebar handoff. Use Toolkit's `ChatHistoryRail` for the standard
+  five-item sidebar preview and a footer row with New chat followed by an
+  ellipsis disclosure up to fifteen. Apps inject routing, labels, and domain
+  actions.
 - **Agent page kit**: the full-page `/agent` surface (`AgentTabsPage` from
   `@agent-native/core/client`) with Context, Files, Connections, Jobs, and
   Access tabs plus a Personal/Organization scope toggle. The canonical home

package/corpus/templates/forms/.agents/skills/real-time-sync/SKILL.md

@@ -72,7 +72,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
   });
   ```
 
-  `useDbSync` and every `subscribeSyncEvents` subscriber share one `EventSource` and one fallback poll loop per tab — this is how collaborative documents receive doc updates and cursor/awareness events.
+  `useDbSync` and every `subscribeSyncEvents` subscriber share one `EventSource` and one fallback poll loop per tab — this is how collaborative documents receive doc updates and cursor/awareness events. Hidden tabs keep that shared transport alive by default: SSE stays connected and active fallback polling relaxes to a 10-second floor (idle polling remains once per minute). Pass `pauseWhenHidden: true` only for a consumer that explicitly must stop all hidden-tab sync.
 
 ## Which sources to depend on