@agent-native/core 0.117.1 → 0.117.2

package/corpus/core/src/extensions/actions.ts

@@ -839,7 +839,11 @@ export function createExtensionActionEntries(): Record<string, ActionEntry> {
 
         await ensureExtensionsTables();
         const access = await resolveAccess("extension", extensionId);
-        if (!access || access.role === "viewer")
+        if (
+          !access ||
+          (access.resource as ExtensionRow | undefined)?.archivedAt ||
+          access.role === "viewer"
+        )
           return `Error: editor access required for extension ${extensionId}.`;
 
         const userEmail = getRequestUserEmail()?.toLowerCase() ?? "";
@@ -942,7 +946,11 @@ export function createExtensionActionEntries(): Record<string, ActionEntry> {
 
         await ensureExtensionsTables();
         const access = await resolveAccess("extension", extensionId);
-        if (!access) return `Error: no access to extension ${extensionId}.`;
+        if (
+          !access ||
+          (access.resource as ExtensionRow | undefined)?.archivedAt
+        )
+          return `Error: no access to extension ${extensionId}.`;
 
         const userEmail = getRequestUserEmail()?.toLowerCase() ?? "";
         const scope = args?.scope ?? "user";
@@ -1012,14 +1020,14 @@ export function createExtensionActionEntries(): Record<string, ActionEntry> {
     "delete-extension": {
       tool: {
         description:
-          "Permanently delete an extension everywhere it is shared. Requires owner/admin access. If the user only wants a shared extension removed from their own sidebar/list, use hide-extension instead.",
+          "Archive an extension everywhere it is shared. Archiving is a soft delete: the extension and its history, data, sharing, and slot configuration are retained, but it disappears from normal lists. Requires owner/admin access. If the user only wants a shared extension removed from their own sidebar/list, use hide-extension instead.",
         parameters: {
           type: "object",
           properties: {
             id: {
               type: "string",
               description:
-                "Extension id to permanently delete. Use list-extensions first if you only know the display name.",
+                "Extension id to archive. Use list-extensions first if you only know the display name.",
             },
           },
           required: ["id"],
@@ -1036,7 +1044,7 @@ export function createExtensionActionEntries(): Record<string, ActionEntry> {
         try {
           const ok = await deleteExtension(id);
           if (!ok) return `Error: extension not found: ${id}`;
-          return { ok: true, deleted: summarizeDeletedExtension(extension) };
+          return { ok: true, archived: summarizeDeletedExtension(extension) };
         } catch (err: any) {
           return {
             ok: false,

package/corpus/core/src/extensions/local.ts

@@ -322,6 +322,7 @@ async function readLocalExtensionFolder(options: {
     icon: typeof manifest.icon === "string" ? manifest.icon : null,
     createdAt,
     updatedAt,
+    archivedAt: null,
     hiddenAt: null,
     hiddenBy: null,
     ownerEmail: "local-files",

package/corpus/core/src/extensions/routes.ts

@@ -227,8 +227,8 @@ async function dispatch(
     }
 
     const access = await resolveAccess("extension", parts[0]);
-    const extension = access?.resource;
-    if (!extension) {
+    const extension = access?.resource as ExtensionRow | undefined;
+    if (!access || !extension || extension.archivedAt) {
       setResponseStatus(event, 404);
       return { error: "Extension not found" };
     }
@@ -317,11 +317,12 @@ async function dispatch(
     }
 
     const access = await resolveAccess("extension", parts[0]);
-    if (!access) {
+    const extension = access?.resource as ExtensionRow | undefined;
+    if (!access || !extension || extension.archivedAt) {
       setResponseStatus(event, 404);
       return { error: "Extension not found" };
     }
-    return extensionResponse(access.resource as ExtensionRow, access.role);
+    return extensionResponse(extension, access.role);
   }
 
   // POST /:id/hide — remove from the current user's Extensions list/sidebar
@@ -433,7 +434,7 @@ async function dispatch(
       setResponseStatus(event, 404);
       return { error: "Extension not found" };
     }
-    return { ok: true };
+    return { ok: true, archived: true };
   }
 
   setResponseStatus(event, 404);
@@ -662,6 +663,10 @@ async function requireExtensionDataAccess(
   minRole: ShareRole,
 ): Promise<{ ok: true } | { ok: false; response: unknown }> {
   const access = await resolveAccess("extension", extensionId);
+  if (access?.resource && (access.resource as ExtensionRow).archivedAt) {
+    setResponseStatus(event, 404);
+    return { ok: false, response: { error: "Extension not found" } };
+  }
   if (access) {
     if (ROLE_RANK[access.role] < ROLE_RANK[minRole]) {
       setResponseStatus(event, 403);

package/corpus/core/src/extensions/schema.ts

@@ -27,6 +27,7 @@ export const extensions = table("tools", {
   icon: text("icon"),
   createdAt: text("created_at").notNull().default(now()),
   updatedAt: text("updated_at").notNull().default(now()),
+  archivedAt: text("archived_at"),
   hiddenAt: text("hidden_at"),
   hiddenBy: text("hidden_by"),
   ...ownableColumns(),
@@ -66,6 +67,7 @@ export const EXTENSIONS_CREATE_SQL = `CREATE TABLE IF NOT EXISTS tools (
   icon TEXT,
   created_at TEXT NOT NULL DEFAULT (datetime('now')),
   updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+  archived_at TEXT,
   hidden_at TEXT,
   hidden_by TEXT,
   owner_email TEXT NOT NULL DEFAULT 'local@localhost',
@@ -81,6 +83,7 @@ export const EXTENSIONS_CREATE_SQL_PG = `CREATE TABLE IF NOT EXISTS tools (
   icon TEXT,
   created_at TEXT NOT NULL DEFAULT now(),
   updated_at TEXT NOT NULL DEFAULT now(),
+  archived_at TEXT,
   hidden_at TEXT,
   hidden_by TEXT,
   owner_email TEXT NOT NULL DEFAULT 'local@localhost',
@@ -162,6 +165,8 @@ export const EXTENSION_DATA_DROP_OLD_INDEX_SQL_PG = `DROP INDEX IF EXISTS tool_d
 export const EXTENSIONS_OWNER_INDEX_SQL = `CREATE INDEX IF NOT EXISTS tools_owner_idx ON tools (owner_email)`;
 export const EXTENSIONS_ORG_INDEX_SQL = `CREATE INDEX IF NOT EXISTS tools_org_idx ON tools (org_id)`;
 export const EXTENSIONS_UPDATED_INDEX_SQL = `CREATE INDEX IF NOT EXISTS tools_updated_at_idx ON tools (updated_at)`;
+export const EXTENSIONS_ARCHIVED_AT_COLUMN_SQL = `ALTER TABLE tools ADD COLUMN IF NOT EXISTS archived_at TEXT`;
+export const EXTENSIONS_ARCHIVED_AT_INDEX_SQL = `CREATE INDEX IF NOT EXISTS tools_archived_at_idx ON tools (archived_at)`;
 
 // Global (admin) hide: when set, the extension row is hidden from EVERYONE's
 // list, distinct from the per-user `tool_hidden_extensions` table. Additive

package/corpus/core/src/extensions/slots/store.ts

@@ -1,6 +1,6 @@
 import { randomUUID } from "node:crypto";
 
-import { and, eq, inArray, sql } from "drizzle-orm";
+import { and, eq, inArray, isNull, sql } from "drizzle-orm";
 
 import { getDbExec, isPostgres } from "../../db/client.js";
 import { createGetDb } from "../../db/create-get-db.js";
@@ -203,7 +203,12 @@ export async function listExtensionsForSlot(slotId: string): Promise<
       icon: extensions.icon,
     })
     .from(extensions)
-    .where(accessFilter(extensions, extensionShares));
+    .where(
+      and(
+        accessFilter(extensions, extensionShares),
+        isNull(extensions.archivedAt),
+      ),
+    );
   const localRows = (await listLocalExtensions())
     .filter((extension) => extension.source.slots.includes(slotId))
     .map((extension) => ({
@@ -397,7 +402,12 @@ export async function listSlotInstallsForUser(slotId: string): Promise<
       updatedAt: extensions.updatedAt,
     })
     .from(extensions)
-    .where(accessFilter(extensions, extensionShares));
+    .where(
+      and(
+        accessFilter(extensions, extensionShares),
+        isNull(extensions.archivedAt),
+      ),
+    );
   const byId = new Map(accessible.map((t: any) => [t.id, t]));
 
   const sqlInstalls = (installs as ExtensionSlotInstallRow[])
@@ -419,7 +429,7 @@ export async function listSlotInstallsForUser(slotId: string): Promise<
   return [...localInstalls, ...sqlInstalls];
 }
 
-/** Delete every slot/install row referencing a extension. Called from deleteExtension. */
+/** Delete every slot/install row referencing an extension for maintenance. */
 export async function cascadeDeleteExtensionSlots(
   extensionId: string,
 ): Promise<void> {

package/corpus/core/src/extensions/store.ts

@@ -52,6 +52,8 @@ import {
   EXTENSIONS_OWNER_INDEX_SQL,
   EXTENSIONS_ORG_INDEX_SQL,
   EXTENSIONS_UPDATED_INDEX_SQL,
+  EXTENSIONS_ARCHIVED_AT_COLUMN_SQL,
+  EXTENSIONS_ARCHIVED_AT_INDEX_SQL,
   EXTENSIONS_HIDDEN_AT_COLUMN_SQL,
   EXTENSIONS_HIDDEN_BY_COLUMN_SQL,
   EXTENSIONS_HIDDEN_AT_INDEX_SQL,
@@ -103,6 +105,11 @@ export async function ensureExtensionsTables(): Promise<void> {
           "tools_updated_at_idx",
           EXTENSIONS_UPDATED_INDEX_SQL,
         );
+        await ensureExtensionsArchivedColumn(client, pg);
+        await ensureIndexExists(
+          "tools_archived_at_idx",
+          EXTENSIONS_ARCHIVED_AT_INDEX_SQL,
+        );
         await ensureExtensionsGlobalHideColumns(client, pg); // ADD COLUMN — guarded inside
         await ensureIndexExists(
           "tools_hidden_at_idx",
@@ -176,6 +183,10 @@ export async function ensureExtensionsTables(): Promise<void> {
       await retryOnDdlRace(() => client.execute(EXTENSIONS_OWNER_INDEX_SQL));
       await retryOnDdlRace(() => client.execute(EXTENSIONS_ORG_INDEX_SQL));
       await retryOnDdlRace(() => client.execute(EXTENSIONS_UPDATED_INDEX_SQL));
+      await ensureExtensionsArchivedColumn(client, pg);
+      await retryOnDdlRace(() =>
+        client.execute(EXTENSIONS_ARCHIVED_AT_INDEX_SQL),
+      );
       await ensureExtensionsGlobalHideColumns(client, pg);
       await retryOnDdlRace(() =>
         client.execute(EXTENSIONS_HIDDEN_AT_INDEX_SQL),
@@ -346,6 +357,31 @@ async function ensureExtensionsGlobalHideColumns(
   await addCol(EXTENSIONS_HIDDEN_BY_COLUMN_SQL, "hidden_by", "TEXT");
 }
 
+async function ensureExtensionsArchivedColumn(
+  client: ReturnType<typeof getDbExec>,
+  pg: boolean,
+): Promise<void> {
+  if (pg) {
+    await ensureColumnExists(
+      "tools",
+      "archived_at",
+      EXTENSIONS_ARCHIVED_AT_COLUMN_SQL,
+    );
+    return;
+  }
+  await client
+    .execute("ALTER TABLE tools ADD COLUMN archived_at TEXT")
+    .catch((err: any) => {
+      if (
+        !String(err?.message ?? err)
+          .toLowerCase()
+          .includes("duplicate")
+      ) {
+        throw err;
+      }
+    });
+}
+
 export function registerExtensionsShareable() {
   registerShareableResource({
     type: "extension",
@@ -373,6 +409,7 @@ export interface ExtensionRow {
   icon: string | null;
   createdAt: string;
   updatedAt: string;
+  archivedAt: string | null;
   hiddenAt: string | null;
   hiddenBy: string | null;
   ownerEmail: string;
@@ -881,9 +918,10 @@ export async function listExtensions(
   // on repeated `.where()` calls, so combine the access filter and the
   // global-hidden filter into one condition.
   const base = accessFilter(extensions, extensionShares);
+  const visible = and(base, isNull(extensions.archivedAt));
   const where = options.includeGloballyHidden
-    ? base
-    : and(base, isNull(extensions.hiddenAt));
+    ? visible
+    : and(visible, isNull(extensions.hiddenAt));
   const rows = (await db
     .select()
     .from(extensions)
@@ -899,7 +937,8 @@ export async function listExtensions(
 export async function getExtension(id: string): Promise<ExtensionRow | null> {
   await ensureExtensionsTables();
   const access = await resolveAccess("extension", id);
-  return (access?.resource as ExtensionRow | undefined) ?? null;
+  const resource = access?.resource as ExtensionRow | undefined;
+  return resource?.archivedAt ? null : (resource ?? null);
 }
 
 export interface ListExtensionHistoryOptions {
@@ -983,7 +1022,7 @@ export async function restoreExtensionHistoryVersion(
     .from(extensions)
     .where(eq(extensions.id, id));
   const existing = existingRows[0] as ExtensionRow | undefined;
-  if (!existing) return null;
+  if (!existing || existing.archivedAt) return null;
 
   await ensureExtensionHistoryBaseline(existing);
   const target = await getPersistedHistoryEntry(id, version, true);
@@ -1045,6 +1084,7 @@ export async function createExtension(
     icon: data.icon ?? null,
     createdAt: now,
     updatedAt: now,
+    archivedAt: null,
     hiddenAt: null,
     hiddenBy: null,
     ownerEmail: userEmail,
@@ -1098,6 +1138,7 @@ export async function findRecentDuplicateExtension(data: {
         eq(extensions.description, description),
         icon === null ? isNull(extensions.icon) : eq(extensions.icon, icon),
         gte(extensions.createdAt, fiveMinutesAgo),
+        isNull(extensions.archivedAt),
         isNull(extensions.hiddenAt),
       ),
     )
@@ -1146,7 +1187,7 @@ export async function updateExtension(
     .from(extensions)
     .where(eq(extensions.id, id));
   const existing = existingRows[0] as ExtensionRow | undefined;
-  if (!existing) return null;
+  if (!existing || existing.archivedAt) return null;
   await ensureExtensionHistoryBaseline(existing);
   await db.update(extensions).set(updates).where(eq(extensions.id, id));
   const rows = await db.select().from(extensions).where(eq(extensions.id, id));
@@ -1200,7 +1241,9 @@ export async function updateExtensionContent(
     .select()
     .from(extensions)
     .where(eq(extensions.id, id));
-  if (!existingRows[0]) return null;
+  if (!existingRows[0] || (existingRows[0] as ExtensionRow).archivedAt) {
+    return null;
+  }
   const existing = existingRows[0] as ExtensionRow;
   const existingContent = existing.content;
   await ensureExtensionHistoryBaseline(existing);
@@ -1234,20 +1277,13 @@ export async function deleteExtension(id: string): Promise<boolean> {
   const rows = await db.select().from(extensions).where(eq(extensions.id, id));
   const row = rows[0] as ExtensionRow | undefined;
   if (!row) return false;
+  if (row.archivedAt) return true;
   const targets = await extensionChangeTargetsForRow(row);
-  await db.delete(extensionShares).where(eq(extensionShares.resourceId, id));
-  await db.delete(extensionHides).where(eq(extensionHides.extensionId, id));
-  await getDbExec().execute({
-    sql: `DELETE FROM tool_data WHERE tool_id = ?`,
-    args: [id],
-  });
-  await getDbExec().execute({
-    sql: `DELETE FROM tool_history WHERE tool_id = ?`,
-    args: [id],
-  });
-  const { cascadeDeleteExtensionSlots } = await import("./slots/store.js");
-  await cascadeDeleteExtensionSlots(id);
-  await db.delete(extensions).where(eq(extensions.id, id));
+  const archivedAt = new Date().toISOString();
+  await db
+    .update(extensions)
+    .set({ archivedAt, updatedAt: archivedAt })
+    .where(eq(extensions.id, id));
   await notifyExtensionChanged(targets);
   return true;
 }

package/corpus/core/src/extensions/theme.ts

@@ -92,7 +92,7 @@ export function getThemeVars(_isDark?: boolean): string {
   --muted-foreground: 240 5% 64.9%;
   --accent: 240 3.7% 15.9%;
   --accent-foreground: 0 0% 98%;
-  --destructive: 0 62.8% 30.6%;
+  --destructive: 0 84% 60%;
   --destructive-foreground: 0 0% 98%;
   --border: 240 3.7% 15.9%;
   --input: 240 3.7% 15.9%;

package/corpus/core/src/file-upload/registry.ts

@@ -69,6 +69,15 @@ export async function getActiveFileUploadProviderForRequest(): Promise<FileUploa
   if (builderFileUploadProvider.isConfigured()) {
     return builderFileUploadProvider;
   }
+  try {
+    const { resolveHasBuilderPrivateKey } =
+      await import("../server/credential-provider.js");
+    if (await resolveHasBuilderPrivateKey()) {
+      return builderFileUploadProvider;
+    }
+  } catch {
+    // Treat failed scoped credential lookups as unavailable.
+  }
   return null;
 }
 

package/corpus/core/src/index.browser.ts

@@ -100,6 +100,11 @@ export {
   type ActionMcpAppResourceConfig,
   type ActionMcpAppResourceMeta,
 } from "./action.js";
+export {
+  normalizeUserProfileName,
+  USER_PROFILE_SETTING_KEY,
+  type UserProfile,
+} from "./user-profile/index.js";
 export {
   ACTION_CHAT_UI_DATA_CHART_RENDERER,
   ACTION_CHAT_UI_DATA_INSIGHTS_RENDERER,

package/corpus/core/src/index.ts

@@ -41,6 +41,7 @@ export {
   type ActionMcpAppResourceConfig,
   type ActionMcpAppResourceMeta,
 } from "./action.js";
+export * from "./user-profile/index.js";
 export {
   embedApp,
   MCP_APP_REQUEST_ORIGIN_CSP_SOURCE,

package/corpus/core/src/localization/default-messages.ts

@@ -32,6 +32,23 @@ const messages = {
     openTeamSettings: "Open team settings",
     openResourceSettings: "Open resource settings",
     backHome: "Back to home",
+    profileTitle: "Account",
+    profileDescription: "Your name, profile photo, and signed-in identity.",
+    profileLoading: "Loading...",
+    profileSignedOut: "Signed out",
+    profilePhotoUpdated: "Photo updated",
+    profilePhotoError: "Could not update photo",
+    profileUploading: "Uploading...",
+    profileChangePhoto: "Change photo",
+    profileNameLabel: "Name",
+    profileNamePlaceholder: "Your name",
+    profileNameDescription:
+      "This name is used when referring to you across Agent-Native apps.",
+    profileSave: "Save changes",
+    profileSaving: "Saving...",
+    profileSaved: "Profile updated",
+    profileSaveError: "Could not update profile",
+    profileMenuItem: "Profile",
   },
   agentResources: {
     openDocs: "Open {{section}} documentation",
@@ -634,23 +651,23 @@ const messages = {
     hideEveryone: "Hide from everyone",
     localFileDescription:
       "This extension is backed by {{entryPath}}. Edit or remove it from the workspace.",
-    deleteQuestion: "Delete {{name}}?",
+    deleteQuestion: "Archive {{name}}?",
     removeQuestion: "Remove {{name}}?",
     hideForYouDescription:
       "This hides it from your Extensions list without deleting it for anyone else.",
-    removeEverywhereDescription: "This removes it everywhere it is shared.",
+    removeEverywhereDescription: "This archives it everywhere it is shared.",
     cancel: "Cancel",
     remove: "Remove",
     removing: "Removing...",
-    delete: "Delete",
-    deleting: "Deleting...",
+    delete: "Archive",
+    deleting: "Archiving...",
     openFullView: "Open full view",
     removeFromWidgetArea: "Remove from this widget area",
-    deleteExtensionEllipsis: "Delete extension...",
+    deleteExtensionEllipsis: "Archive extension...",
     removeFromMyListEllipsis: "Remove from my list...",
     removeFromWidgetAreaForMe: "Remove from this widget area (for me)",
     deleteEverywhereConfirmation:
-      "This removes the extension everywhere, for everyone it's shared with.",
+      "This archives the extension everywhere, for everyone it's shared with.",
     addWidget: "Add widget",
     loading: "Loading...",
     noWidgetsAvailable: "No widgets available for this slot yet.",

package/corpus/core/src/server/action-discovery.ts

@@ -658,6 +658,14 @@ export async function mergeCoreSharingActions(
       "set-localization-preference",
       () => import("../localization/actions/set-localization-preference.js"),
     ],
+    [
+      "get-user-profile",
+      () => import("../user-profile/actions/get-user-profile.js"),
+    ],
+    [
+      "update-user-profile",
+      () => import("../user-profile/actions/update-user-profile.js"),
+    ],
     [
       "change-appearance",
       () => import("../appearance/actions/change-appearance.js"),

package/corpus/core/src/server/better-auth-instance.ts

@@ -740,8 +740,8 @@ export function getBetterAuthSync(): BetterAuthInstance | undefined {
  * The subset of Better Auth's internal adapter we use for federated-SSO
  * JIT account linking. Better Auth owns these writes (id + timestamp +
  * schema handling), so callers never hand-roll SQL against `user`/`account`.
- * Read-only lookups + strictly-additive `linkAccount`/`createUser` only — no
- * update/delete of existing identity rows.
+ * Read-only lookups plus account-linking and profile-update operations used by
+ * shared Core surfaces. Better Auth owns the actual identity writes.
  */
 export interface BetterAuthInternalAdapter {
   findUserByEmail: (
@@ -761,6 +761,11 @@ export interface BetterAuthInternalAdapter {
     name: string;
     emailVerified?: boolean;
   }) => Promise<{ id: string }>;
+  /** Optional because older/custom adapter shapes may not expose mutations. */
+  updateUser?: (
+    userId: string,
+    data: { name?: string; image?: string | null },
+  ) => Promise<unknown>;
 }
 
 /**

package/corpus/core/src/server/email-template.ts

@@ -18,6 +18,10 @@
  *   });
  */
 
+import { getAppName } from "./app-name.js";
+
+export const AGENT_NATIVE_EMAIL_LOGO_CONTENT_ID = "agent-native-logo";
+
 export interface EmailCta {
   label: string;
   url: string;
@@ -34,6 +38,8 @@ export interface RenderEmailArgs {
   cta?: EmailCta;
   /** Small muted text under the CTA (e.g. expiry note). */
   footer?: string;
+  /** Optional app name shown beside the framework logo. */
+  brandName?: string;
   /**
    * Optional brand hex color for the CTA button and inline links. Defaults to
    * a monochrome near-white button with dark text.
@@ -71,6 +77,7 @@ function sanitizeHexColor(input: string | undefined): string | undefined {
 export function renderEmail(args: RenderEmailArgs): RenderedEmail {
   const preheader = args.preheader || "";
   const brand = sanitizeHexColor(args.brandColor);
+  const brandName = args.brandName?.trim() || getAppName() || "Agent Native";
 
   // Monochrome default: near-white button with dark text. Brand override:
   // colored button with white text.
@@ -104,6 +111,16 @@ export function renderEmail(args: RenderEmailArgs): RenderedEmail {
     ? `<p style="margin:28px 0 0 0; font-size:13px; line-height:1.5; color:#71717a;">${escapeHtml(args.footer)}</p>`
     : "";
 
+  const brandHeaderHtml = `
+                <table role="presentation" cellpadding="0" cellspacing="0" border="0" width="100%" style="margin:0 0 28px 0; padding:0 0 24px 0; border-bottom:1px solid #27272a;">
+                  <tr>
+                    <td align="center">
+                      <img src="cid:${AGENT_NATIVE_EMAIL_LOGO_CONTENT_ID}" alt="${escapeAttr(brandName)}" width="28" height="28" style="display:inline-block; vertical-align:middle; width:28px; height:28px; margin:0 8px 0 0; border:0;" />
+                      <span style="font-size:18px; line-height:28px; font-weight:600; color:#fafafa; vertical-align:middle;">${escapeHtml(brandName)}</span>
+                    </td>
+                  </tr>
+                </table>`;
+
   const html = `<!DOCTYPE html>
 <html lang="en">
   <head>
@@ -129,6 +146,7 @@ export function renderEmail(args: RenderEmailArgs): RenderedEmail {
           <table role="presentation" cellpadding="0" cellspacing="0" border="0" width="100%" style="max-width:560px;">
             <tr>
               <td style="background-color:#141417; border:1px solid #27272a; border-radius:16px; padding:36px 36px 32px 36px;">
+                ${brandHeaderHtml}
                 <h1 style="margin:0 0 20px 0; font-size:24px; line-height:1.3; font-weight:600; color:#fafafa; letter-spacing:-0.02em;">
                   ${escapeHtml(args.heading)}
                 </h1>

package/corpus/core/src/server/email-templates.ts

@@ -58,6 +58,7 @@ export function renderInviteEmail(
   const onApp = appName ? ` on ${appName}` : "";
 
   const { html, text } = renderEmail({
+    brandName: appName,
     preheader: `${inviter} invited you to join ${orgName}${onApp}.`,
     heading: `You're invited to join ${orgName}`,
     paragraphs: [
@@ -95,6 +96,7 @@ export function renderVerifySignupEmail(
   const appName = resolveAppName();
 
   const { html, text } = renderEmail({
+    brandName: appName,
     preheader: `Confirm ${email} to finish setting up your ${appName} account.`,
     heading: `Verify your email for ${appName}`,
     paragraphs: [
@@ -130,6 +132,7 @@ export function renderResetPasswordEmail(
   const appName = resolveAppName();
 
   const { html, text } = renderEmail({
+    brandName: appName,
     preheader: `Reset the password for ${email}. This link expires in 1 hour.`,
     heading: `Reset your ${appName} password`,
     paragraphs: [

package/corpus/core/src/server/email.ts

@@ -10,7 +10,10 @@
  * so the reset-password flow still works end-to-end for local development.
  */
 
+import { readFileSync } from "node:fs";
+
 import { resolveSecret } from "./credential-provider.js";
+import { AGENT_NATIVE_EMAIL_LOGO_CONTENT_ID } from "./email-template.js";
 
 export type EmailProvider = "resend" | "sendgrid" | "dev";
 
@@ -35,6 +38,38 @@ export interface SendEmailArgs {
   attachments?: EmailAttachment[];
 }
 
+let cachedAgentNativeLogo: Buffer | undefined;
+
+function getAgentNativeLogoAttachment(): EmailAttachment {
+  cachedAgentNativeLogo ??= readFileSync(
+    new URL("../../src/assets/branding/favicon.png", import.meta.url),
+  );
+  return {
+    filename: "agent-native-logo.png",
+    content: cachedAgentNativeLogo,
+    contentType: "image/png",
+    contentId: AGENT_NATIVE_EMAIL_LOGO_CONTENT_ID,
+    disposition: "inline",
+  };
+}
+
+function resolveAttachments(
+  args: SendEmailArgs,
+): EmailAttachment[] | undefined {
+  if (!args.html.includes(`cid:${AGENT_NATIVE_EMAIL_LOGO_CONTENT_ID}`)) {
+    return args.attachments;
+  }
+  if (
+    args.attachments?.some(
+      (attachment) =>
+        attachment.contentId === AGENT_NATIVE_EMAIL_LOGO_CONTENT_ID,
+    )
+  ) {
+    return args.attachments;
+  }
+  return [...(args.attachments ?? []), getAgentNativeLogoAttachment()];
+}
+
 interface EmailTransportConfig {
   provider: EmailProvider;
   resendApiKey?: string;
@@ -94,6 +129,7 @@ export async function sendEmail(args: SendEmailArgs): Promise<void> {
   const config = await resolveEmailTransport();
   const provider = config.provider;
   const from = getFromAddress(config, args.from);
+  const attachments = resolveAttachments(args);
 
   if (provider === "resend") {
     const payload: Record<string, unknown> = {
@@ -105,8 +141,8 @@ export async function sendEmail(args: SendEmailArgs): Promise<void> {
     };
     if (args.cc) payload.cc = Array.isArray(args.cc) ? args.cc : [args.cc];
     if (args.replyTo) payload.reply_to = args.replyTo;
-    if (args.attachments?.length) {
-      payload.attachments = args.attachments.map((a) => ({
+    if (attachments?.length) {
+      payload.attachments = attachments.map((a) => ({
         filename: a.filename,
         content:
           typeof a.content === "string"
@@ -159,8 +195,8 @@ export async function sendEmail(args: SendEmailArgs): Promise<void> {
     if (args.inReplyTo) sgHeaders["In-Reply-To"] = args.inReplyTo;
     if (args.references) sgHeaders["References"] = args.references;
     if (Object.keys(sgHeaders).length) sgPayload.headers = sgHeaders;
-    if (args.attachments?.length) {
-      sgPayload.attachments = args.attachments.map((a) => ({
+    if (attachments?.length) {
+      sgPayload.attachments = attachments.map((a) => ({
         filename: a.filename,
         content:
           typeof a.content === "string"

package/corpus/core/src/sharing/actions/share-resource.ts

@@ -299,6 +299,7 @@ export default defineAction({
           process.env.APP_NAME || process.env.VITE_APP_NAME || "Agent Native";
         const subject = `${actor} shared "${resourceTitle}" with you on ${appName}`;
         const { html, text } = renderEmail({
+          brandName: appName,
           preheader: subject,
           heading: "You've been given access",
           paragraphs: [

package/corpus/core/src/templates/default/.agents/skills/agent-native-toolkit/SKILL.md

@@ -59,6 +59,12 @@ quick controls and deep links such as:
 - `/settings/usage`
 - `/settings/apps/:appId`
 
+The shared Account section is the canonical profile surface at
+`/settings#account`. It owns the editable display name and existing avatar
+control through the authenticated `get-user-profile` and `update-user-profile`
+actions. Shared workspace chrome such as `OrgSwitcher` should link to this
+surface rather than creating an app-local profile page.
+
 When adding a new API key, OAuth grant, provider connection, model selector, app
 preference, notification preference, or usage/billing surface, register it as a
 settings tab or app settings panel first. Only add sidebar UI when it is needed