@agent-native/core 0.115.4 → 0.117.0

package/corpus/templates/brain/actions/rotate-source-ingest-token.ts

@@ -0,0 +1,77 @@
+import { defineAction } from "@agent-native/core";
+import { assertAccess } from "@agent-native/core/sharing";
+import { eq } from "drizzle-orm";
+import { z } from "zod";
+
+import { getDb, schema } from "../server/db/index.js";
+import {
+  nanoid,
+  nowIso,
+  parseJson,
+  serializeSource,
+  sha256Hex,
+  stableJson,
+} from "../server/lib/brain.js";
+
+function sourceKeyFor(source: {
+  sourceKey?: string | null;
+  configJson?: string | null;
+}) {
+  const columnValue = source.sourceKey?.trim();
+  if (columnValue) return columnValue;
+  const config = parseJson<Record<string, unknown>>(source.configJson, {});
+  const configValue = config.sourceKey;
+  return typeof configValue === "string" && configValue.trim()
+    ? configValue.trim()
+    : null;
+}
+
+export default defineAction({
+  description:
+    "Rotate the signed ingest token for a configured Clips or generic Brain source. The new token is returned once so it can be saved in the sending app.",
+  agentTool: false,
+  toolCallable: false,
+  schema: z.object({
+    sourceId: z.string().min(1),
+  }),
+  run: async ({ sourceId }) => {
+    const access = await assertAccess("brain-source", sourceId, "admin");
+    const existing = access.resource;
+    if (existing.provider !== "clips" && existing.provider !== "generic") {
+      throw new Error(
+        "Only configured Clips or generic sources can rotate an ingest token.",
+      );
+    }
+
+    const sourceKey = sourceKeyFor(existing);
+    if (!sourceKey) {
+      throw new Error("This source is missing a signed-ingest source key.");
+    }
+
+    const ingestToken = `brain_${nanoid(32)}`;
+    const ingestTokenHash = await sha256Hex(ingestToken);
+    const config = {
+      ...parseJson<Record<string, unknown>>(existing.configJson, {}),
+      sourceKey,
+      ingestTokenHash,
+    };
+    const db = getDb();
+    await db
+      .update(schema.brainSources)
+      .set({
+        sourceKey,
+        ingestTokenHash,
+        configJson: stableJson(config),
+        updatedAt: nowIso(),
+      })
+      .where(eq(schema.brainSources.id, sourceId));
+    const [source] = await db
+      .select()
+      .from(schema.brainSources)
+      .where(eq(schema.brainSources.id, sourceId))
+      .limit(1);
+    if (!source) throw new Error(`Brain source ${sourceId} was not found`);
+
+    return { source: serializeSource(source), ingestToken };
+  },
+});

package/corpus/templates/brain/app/components/layout/Layout.tsx

@@ -44,7 +44,11 @@ export function Layout({ children }: { children: React.ReactNode }) {
     activePath: location.pathname,
     enabled: !isAskRoute,
   });
-  useAgentChatHomeHandoffLinks({ storageKey: "brain", chatPath: "/" });
+  useAgentChatHomeHandoffLinks({
+    storageKey: "brain",
+    chatPath: "/",
+    requireActiveHandoff: false,
+  });
 
   useEffect(() => {
     setMobileSidebarOpen(false);

package/corpus/templates/brain/app/components/layout/Sidebar.tsx

@@ -10,13 +10,12 @@ import { useT } from "@agent-native/core/client/i18n";
 import { OrgSwitcher } from "@agent-native/core/client/org";
 import { FeedbackButton } from "@agent-native/core/client/ui";
 import {
-  ChatHistoryList,
+  ChatHistoryRail,
   type ChatHistoryItem,
 } from "@agent-native/toolkit/chat-history";
 import {
   IconLayoutSidebarLeftCollapse,
   IconLayoutSidebarLeftExpand,
-  IconPlus,
 } from "@tabler/icons-react";
 import { useEffect, useMemo } from "react";
 import { Link, NavLink, useLocation, useNavigate } from "react-router";
@@ -102,8 +101,7 @@ function BrainChatsSection() {
     () =>
       threads
         .filter((thread) => thread.messageCount > 0 && !thread.archivedAt)
-        .sort(compareThreads)
-        .slice(0, 8),
+        .sort(compareThreads),
     [threads],
   );
   const chatItems = useMemo<ChatHistoryItem[]>(
@@ -178,50 +176,37 @@ function BrainChatsSection() {
 
   return (
     <div className="mt-2 border-s border-sidebar-border/70 ps-3">
-      <div className="mb-1 flex h-7 items-center gap-2 pe-1">
-        <div className="min-w-0 flex-1 text-xs font-medium text-sidebar-foreground/70">
-          {t("chat.chats")}
-        </div>
-        <Tooltip>
-          <TooltipTrigger asChild>
-            <button
-              type="button"
-              onClick={handleNewChat}
-              className="flex size-6 shrink-0 items-center justify-center rounded-md text-sidebar-foreground/65 transition-colors hover:bg-sidebar-accent hover:text-sidebar-accent-foreground"
-              aria-label={t("chat.newBrainChat")}
-            >
-              <IconPlus className="size-3.5" />
-            </button>
-          </TooltipTrigger>
-          <TooltipContent>{t("chat.newChat")}</TooltipContent>
-        </Tooltip>
-      </div>
-      {visibleThreads.length > 0 && (
-        <ChatHistoryList
-          items={chatItems}
-          activeId={activeThreadId}
-          onSelect={openThread}
-          onTogglePin={(threadId) => {
-            const thread = visibleThreads.find((item) => item.id === threadId);
-            if (thread) void pinThread(threadId, !thread.pinnedAt);
-          }}
-          onRename={handleRenameThread}
-          renameMaxLength={160}
-          onDelete={(threadId) => void handleArchiveThread(threadId)}
-          labels={{
-            options: (item) =>
-              t("chat.optionsFor", { title: item.titleText ?? "" }),
-            renameInput: (item) =>
-              t("chat.renameThread", { title: item.titleText ?? "" }),
-            rename: t("chat.renameChat"),
-            pin: t("chat.pinChat"),
-            unpin: t("chat.unpinChat"),
-            delete: t("chat.archiveChat"),
-          }}
-          variant="rail"
-          className="min-w-0"
-        />
-      )}
+      <ChatHistoryRail
+        items={chatItems}
+        activeId={activeThreadId}
+        onSelect={openThread}
+        onNewChat={() => void handleNewChat()}
+        railLabels={{
+          newChat: t("chat.newChat"),
+          showMore: t("chat.chats"),
+          showLess: t("chat.chats"),
+        }}
+        previewCount={5}
+        expandedCount={15}
+        onTogglePin={(threadId) => {
+          const thread = visibleThreads.find((item) => item.id === threadId);
+          if (thread) void pinThread(threadId, !thread.pinnedAt);
+        }}
+        onRename={handleRenameThread}
+        renameMaxLength={160}
+        onDelete={(threadId) => void handleArchiveThread(threadId)}
+        labels={{
+          options: (item) =>
+            t("chat.optionsFor", { title: item.titleText ?? "" }),
+          renameInput: (item) =>
+            t("chat.renameThread", { title: item.titleText ?? "" }),
+          rename: t("chat.renameChat"),
+          pin: t("chat.pinChat"),
+          unpin: t("chat.unpinChat"),
+          delete: t("chat.archiveChat"),
+        }}
+        className="min-w-0"
+      />
     </div>
   );
 }
@@ -312,7 +297,6 @@ export function Sidebar({
             </p>
           </div>
         </Link>
-        {!collapsed ? collapseButton : null}
       </div>
 
       <nav
@@ -394,11 +378,14 @@ export function Sidebar({
         {!collapsed ? (
           <div className="px-3 py-2">
             <DevDatabaseLink />
-            <FeedbackButton />
+            <div className="flex items-center justify-end gap-1">
+              <FeedbackButton className="min-w-0 flex-1" side="right" />
+              {collapseButton}
+            </div>
           </div>
         ) : null}
 
-        {collapseButton ? (
+        {collapsed && collapseButton ? (
           <div className="flex justify-center px-2 py-2">{collapseButton}</div>
         ) : null}
       </div>

package/corpus/templates/brain/app/hooks/use-navigation-state.ts

@@ -1,7 +1,4 @@
-import {
-  isAgentChatHomeHandoffActive,
-  markAgentChatHomeHandoff,
-} from "@agent-native/core/client/agent-chat";
+import { markAgentChatHomeHandoff } from "@agent-native/core/client/agent-chat";
 import { appBasePath, appPath } from "@agent-native/core/client/api-path";
 import { useAgentRouteState } from "@agent-native/core/client/navigation";
 import { useLocation } from "react-router";
@@ -109,11 +106,7 @@ export function useNavigationState() {
       return `${path}${params.size ? `?${params.toString()}` : ""}`;
     },
     onNavigate: (_command, path) => {
-      if (
-        location.pathname === "/" &&
-        pathnameFromPath(path) !== "/" &&
-        isAgentChatHomeHandoffActive("brain")
-      ) {
+      if (location.pathname === "/" && pathnameFromPath(path) !== "/") {
         markAgentChatHomeHandoff("brain");
       }
     },

package/corpus/templates/brain/app/i18n-data.ts

@@ -403,6 +403,18 @@ const enUS = {
     noCapturesTitle: "No captures match this view",
     noCapturesDetail:
       "Try another status, run a source sync, or import a transcript.",
+    rotateIngestToken: "Rotate ingest token",
+    connectIngestSource: "Connect {{source}}",
+    ingestHandoffDescription:
+      "Save these values in the sending app now. The ingest token is shown only once and cannot be recovered after this dialog closes.",
+    endpoint: "Endpoint",
+    sourceKey: "Source key",
+    ingestToken: "Ingest token",
+    copied: "Copied",
+    copy: "Copy",
+    ingestTokenSecurity:
+      "For security, Brain stores only a hash of this token. Rotate the token whenever the receiving app needs a new credential.",
+    ingestHandoffSaved: "I saved these values",
     tuneSource: "Tune source",
     setupDescription:
       "Configure what Brain may ingest. Credentials stay in the workspace credential store; this form only saves allow-lists, cursors, and review rules.",
@@ -3052,6 +3064,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "جرب حالة أخرى، أو قم بتشغيل مزامنة المصدر، أو قم باستيراد نص.",
       noCapturesTitle: "لا توجد لقطات تطابق هذا الرأي",
+      rotateIngestToken: "تدوير رمز الإدخال",
+      connectIngestSource: "ربط {{source}}",
+      ingestHandoffDescription:
+        "احفظ هذه القيم في التطبيق المرسل الآن. سيُعرض رمز الإدخال مرة واحدة فقط ولا يمكن استعادته بعد إغلاق هذا الحوار.",
+      endpoint: "نقطة النهاية",
+      sourceKey: "مفتاح المصدر",
+      ingestToken: "رمز الإدخال",
+      copied: "تم النسخ",
+      copy: "نسخ",
+      ingestTokenSecurity:
+        "لأسباب أمنية، يخزّن Brain تجزئة هذا الرمز فقط. أدر الرمز كلما احتاج التطبيق المستلم إلى بيانات اعتماد جديدة.",
+      ingestHandoffSaved: "حفظت هذه القيم",
       noConnectionProviders:
         "لا يتوفر أي موفري اتصال Brain من الكتالوج المشترك.",
       noCredentialKeysRequired: "لا توجد مفاتيح الاعتماد المطلوبة",
@@ -3467,6 +3491,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "Versuchen Sie es mit einem anderen Status, führen Sie eine Quellsynchronisierung durch oder importieren Sie ein Transkript.",
       noCapturesTitle: "Keine Aufnahmen stimmen mit dieser Ansicht überein",
+      rotateIngestToken: "Aufnahmetoken drehen",
+      connectIngestSource: "{{source}} verbinden",
+      ingestHandoffDescription:
+        "Speichern Sie diese Werte jetzt in der sendenden App. Das Aufnahmetoken wird nur einmal angezeigt und kann nach dem Schließen dieses Dialogs nicht wiederhergestellt werden.",
+      endpoint: "Endpunkt",
+      sourceKey: "Quellschlüssel",
+      ingestToken: "Aufnahmetoken",
+      copied: "Kopiert",
+      copy: "Kopieren",
+      ingestTokenSecurity:
+        "Aus Sicherheitsgründen speichert Brain nur einen Hash dieses Tokens. Drehen Sie das Token, sobald die empfangende App neue Anmeldedaten benötigt.",
+      ingestHandoffSaved: "Ich habe diese Werte gespeichert",
       noConnectionProviders:
         "Im freigegebenen Katalog sind keine Brain-Verbindungsanbieter verfügbar.",
       noCredentialKeysRequired:
@@ -3891,6 +3927,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "Pruebe con otro estado, ejecute una sincronización de origen o importe una transcripción.",
       noCapturesTitle: "Ninguna captura coincide con esta vista.",
+      rotateIngestToken: "Rotar token de ingesta",
+      connectIngestSource: "Conectar {{source}}",
+      ingestHandoffDescription:
+        "Guarde estos valores ahora en la aplicación emisora. El token de ingesta se muestra una sola vez y no se puede recuperar después de cerrar este diálogo.",
+      endpoint: "Punto final",
+      sourceKey: "Clave de origen",
+      ingestToken: "Token de ingesta",
+      copied: "Copiado",
+      copy: "Copiar",
+      ingestTokenSecurity:
+        "Por seguridad, Brain solo almacena un hash de este token. Rote el token cuando la aplicación receptora necesite una credencial nueva.",
+      ingestHandoffSaved: "He guardado estos valores",
       noConnectionProviders:
         "No hay proveedores de conexión Brain disponibles en el catálogo compartido.",
       noCredentialKeysRequired: "No se requieren claves de credenciales",
@@ -4316,6 +4364,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "Essayez un autre statut, exécutez une synchronisation source ou importez une transcription.",
       noCapturesTitle: "Aucune capture ne correspond à cette vue",
+      rotateIngestToken: "Faire pivoter le jeton d’ingestion",
+      connectIngestSource: "Connecter {{source}}",
+      ingestHandoffDescription:
+        "Enregistrez maintenant ces valeurs dans l’application émettrice. Le jeton d’ingestion ne s’affiche qu’une seule fois et ne peut pas être récupéré après la fermeture de cette boîte de dialogue.",
+      endpoint: "Point de terminaison",
+      sourceKey: "Clé de source",
+      ingestToken: "Jeton d’ingestion",
+      copied: "Copié",
+      copy: "Copier",
+      ingestTokenSecurity:
+        "Pour des raisons de sécurité, Brain ne stocke que le hachage de ce jeton. Faites pivoter le jeton lorsque l’application destinataire a besoin d’un nouvel identifiant.",
+      ingestHandoffSaved: "J’ai enregistré ces valeurs",
       noConnectionProviders:
         "Aucun fournisseur de connexion Brain n’est disponible dans le catalogue partagé.",
       noCredentialKeysRequired: "Aucune clé d'identification requise",
@@ -4717,6 +4777,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "कोई अन्य स्थिति आज़माएँ, स्रोत सिंक चलाएँ, या एक प्रतिलेख आयात करें।",
       noCapturesTitle: "कोई भी कैप्चर इस दृश्य से मेल नहीं खाता",
+      rotateIngestToken: "इंजेस्ट टोकन घुमाएँ",
+      connectIngestSource: "कनेक्ट करें: {{source}}",
+      ingestHandoffDescription:
+        "इन मानों को अभी भेजने वाले ऐप में सहेजें। इंजेस्ट टोकन केवल एक बार दिखाया जाता है और यह संवाद बंद होने के बाद इसे पुनर्प्राप्त नहीं किया जा सकता।",
+      endpoint: "एंडपॉइंट",
+      sourceKey: "सोर्स कुंजी",
+      ingestToken: "इंजेस्ट टोकन",
+      copied: "कॉपी किया गया",
+      copy: "कॉपी करें",
+      ingestTokenSecurity:
+        "सुरक्षा के लिए, Brain इस टोकन का केवल हैश संग्रहीत करता है। जब प्राप्त करने वाले ऐप को नए क्रेडेंशियल की आवश्यकता हो, तब टोकन घुमाएँ।",
+      ingestHandoffSaved: "मैंने ये मान सहेज लिए हैं",
       noConnectionProviders: "साझा कैटलॉग से कोई Brain कनेक्शन प्रदाता उपलब्ध नहीं हैं।",
       noCredentialKeysRequired: "किसी क्रेडेंशियल कुंजी की आवश्यकता नहीं है",
       noCredentialRefs: "इस संबंध पर कोई क्रेडेंशियल संदर्भ नहीं है",
@@ -5111,6 +5183,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "別のステータスを試すか、ソース同期を実行するか、トランスクリプトをインポートしてください。",
       noCapturesTitle: "このビューに一致するキャプチャはありません",
+      rotateIngestToken: "取り込みトークンをローテーション",
+      connectIngestSource: "「{{source}}」を接続",
+      ingestHandoffDescription:
+        "これらの値を今すぐ送信元アプリに保存してください。取り込みトークンは一度しか表示されず、このダイアログを閉じると復元できません。",
+      endpoint: "エンドポイント",
+      sourceKey: "ソースキー",
+      ingestToken: "取り込みトークン",
+      copied: "コピーしました",
+      copy: "コピー",
+      ingestTokenSecurity:
+        "セキュリティのため、Brain はこのトークンのハッシュのみを保存します。受信アプリに新しい認証情報が必要になったら、トークンをローテーションしてください。",
+      ingestHandoffSaved: "これらの値を保存しました",
       noConnectionProviders:
         "共有カタログから使用できる Brain 接続プロバイダーはありません。",
       noCredentialKeysRequired: "認証キーは必要ありません",
@@ -5511,6 +5595,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "다른 상태를 시도하거나, 소스 동기화를 실행하거나, 스크립트를 가져오세요.",
       noCapturesTitle: "이 보기와 일치하는 캡처가 없습니다.",
+      rotateIngestToken: "수집 토큰 교체",
+      connectIngestSource: "{{source}} 연결",
+      ingestHandoffDescription:
+        "지금 이 값을 보내는 앱에 저장하세요. 수집 토큰은 한 번만 표시되며 이 대화상자를 닫으면 복구할 수 없습니다.",
+      endpoint: "엔드포인트",
+      sourceKey: "소스 키",
+      ingestToken: "수집 토큰",
+      copied: "복사됨",
+      copy: "복사",
+      ingestTokenSecurity:
+        "보안을 위해 Brain은 이 토큰의 해시만 저장합니다. 수신 앱에 새 자격 증명이 필요할 때 토큰을 교체하세요.",
+      ingestHandoffSaved: "이 값을 저장했습니다",
       noConnectionProviders:
         "공유 카탈로그에서는 Brain 연결 공급자를 사용할 수 없습니다.",
       noCredentialKeysRequired: "자격 증명 키가 필요하지 않습니다",
@@ -5921,6 +6017,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "Tente outro status, execute uma sincronização de origem ou importe uma transcrição.",
       noCapturesTitle: "Nenhuma captura corresponde a esta visualização",
+      rotateIngestToken: "Alternar token de ingestão",
+      connectIngestSource: "Conectar {{source}}",
+      ingestHandoffDescription:
+        "Salve estes valores agora no aplicativo emissor. O token de ingestão é exibido apenas uma vez e não pode ser recuperado depois que esta caixa de diálogo for fechada.",
+      endpoint: "Endpoint",
+      sourceKey: "Chave da fonte",
+      ingestToken: "Token de ingestão",
+      copied: "Copiado",
+      copy: "Copiar",
+      ingestTokenSecurity:
+        "Por segurança, o Brain armazena apenas um hash deste token. Alterne o token sempre que o aplicativo receptor precisar de uma nova credencial.",
+      ingestHandoffSaved: "Salvei estes valores",
       noConnectionProviders:
         "Nenhum provedor de conexão Brain está disponível no catálogo compartilhado.",
       noCredentialKeysRequired: "Nenhuma chave de credencial necessária",
@@ -6300,6 +6408,18 @@ const exactEnglishDebtOverrides: Partial<
       noBrainSourcesYet: "还没有 Brain 来源",
       noCapturesDetail: "尝试其他状态、运行源同步或导入转录本。",
       noCapturesTitle: "没有与此视图匹配的捕获",
+      rotateIngestToken: "轮换摄取令牌",
+      connectIngestSource: "连接 {{source}}",
+      ingestHandoffDescription:
+        "现在将这些值保存到发送应用中。摄取令牌只显示一次，关闭此对话框后将无法恢复。",
+      endpoint: "端点",
+      sourceKey: "源密钥",
+      ingestToken: "摄取令牌",
+      copied: "已复制",
+      copy: "复制",
+      ingestTokenSecurity:
+        "出于安全考虑，Brain 只存储此令牌的哈希值。当接收应用需要新的凭据时，请轮换令牌。",
+      ingestHandoffSaved: "我已保存这些值",
       noConnectionProviders: "共享目录中没有可用的 Brain 连接提供程序。",
       noCredentialKeysRequired: "无需凭证密钥",
       noCredentialRefs: "此连接上没有凭据参考",