@agent-native/core 0.122.3 → 0.123.0

package/corpus/templates/calendar/server/handlers/events.ts

@@ -11,11 +11,6 @@ import {
 
 import { ensureOrganizerInAttendees } from "../../actions/event-action-helpers.js";
 import type { CalendarEvent } from "../../shared/api.js";
-import { getGoogleEventColorHex } from "../../shared/google-event-colors.js";
-import {
-  normalizeGuestNotificationMessage,
-  sendEventGuestNotificationNote,
-} from "../lib/event-guest-notifications.js";
 import {
   prepareZoomMeetingPatch,
   shouldAutoAddGoogleMeet,
@@ -144,119 +139,6 @@ export const listEvents = defineEventHandler(async (event: H3Event) => {
   }
 });
 
-export const getEvent = defineEventHandler(async (event: H3Event) => {
-  try {
-    const email = await uEmail(event);
-    const id = getRouterParam(event, "id") as string;
-
-    if (!id.startsWith("google-")) {
-      setResponseStatus(event, 404);
-      return { error: "Event not found" };
-    }
-
-    const googleEventId = id.replace(/^google-/, "");
-
-    const clients = await googleCalendar.getClients(email);
-    for (const { email: acctEmail, accessToken } of clients) {
-      try {
-        const { calendarGetEvent } = await import("../lib/google-api.js");
-        const evt = await calendarGetEvent(
-          accessToken,
-          "primary",
-          googleEventId,
-        );
-        const selfAttendee = evt.attendees?.find((a: any) => a.self === true);
-        const calEvent: CalendarEvent = {
-          id: `google-${evt.id}`,
-          title: evt.summary || "Untitled",
-          description: evt.description || "",
-          start: evt.start?.dateTime || evt.start?.date || "",
-          end: evt.end?.dateTime || evt.end?.date || "",
-          startTimeZone: evt.start?.timeZone || undefined,
-          endTimeZone: evt.end?.timeZone || undefined,
-          location: evt.location || "",
-          allDay: !evt.start?.dateTime,
-          source: "google",
-          googleEventId: evt.id || undefined,
-          htmlLink: evt.htmlLink || undefined,
-          accountEmail: acctEmail,
-          responseStatus: selfAttendee?.responseStatus || undefined,
-          transparency: evt.transparency || undefined,
-          colorId: evt.colorId || undefined,
-          color: getGoogleEventColorHex(evt.colorId),
-          eventType: evt.eventType || "default",
-          attendees: evt.attendees?.map((a: any) => ({
-            email: a.email,
-            displayName: a.displayName || undefined,
-            comment: a.comment || undefined,
-            responseStatus: a.responseStatus || undefined,
-            organizer: a.organizer || undefined,
-            self: a.self || undefined,
-            optional: a.optional === true ? true : undefined,
-          })),
-          remindersUseDefault: evt.reminders?.useDefault ?? true,
-          reminders: evt.reminders?.overrides?.map((r: any) => ({
-            method: r.method,
-            minutes: r.minutes,
-          })),
-          recurrence: evt.recurrence || undefined,
-          recurringEventId: evt.recurringEventId || undefined,
-          hangoutLink: evt.hangoutLink || undefined,
-          conferenceData: evt.conferenceData
-            ? {
-                entryPoints: evt.conferenceData.entryPoints?.map((ep: any) => ({
-                  entryPointType: ep.entryPointType,
-                  uri: ep.uri,
-                  label: ep.label || undefined,
-                  pin: ep.pin || undefined,
-                  passcode: ep.passcode || undefined,
-                })),
-                conferenceSolution: evt.conferenceData.conferenceSolution
-                  ? {
-                      name: evt.conferenceData.conferenceSolution.name,
-                      iconUri:
-                        evt.conferenceData.conferenceSolution.iconUri ||
-                        undefined,
-                    }
-                  : undefined,
-              }
-            : undefined,
-          attachments: evt.attachments?.map((a: any) => ({
-            fileUrl: a.fileUrl,
-            title: a.title || "Untitled",
-            mimeType: a.mimeType || undefined,
-            iconLink: a.iconLink || undefined,
-            fileId: a.fileId || undefined,
-          })),
-          visibility: evt.visibility || undefined,
-          status: evt.status || undefined,
-          outOfOfficeProperties: evt.outOfOfficeProperties || undefined,
-          focusTimeProperties: evt.focusTimeProperties || undefined,
-          workingLocationProperties: evt.workingLocationProperties || undefined,
-          organizer: evt.organizer
-            ? {
-                email: evt.organizer.email,
-                displayName: evt.organizer.displayName || undefined,
-                self: evt.organizer.self || undefined,
-              }
-            : undefined,
-          createdAt: evt.created || new Date().toISOString(),
-          updatedAt: evt.updated || new Date().toISOString(),
-        };
-        return calEvent;
-      } catch {
-        continue;
-      }
-    }
-
-    setResponseStatus(event, 404);
-    return { error: "Event not found" };
-  } catch (error: any) {
-    setResponseStatus(event, 500);
-    return { error: error.message };
-  }
-});
-
 export const createEvent = defineEventHandler(async (event: H3Event) => {
   try {
     const email = await uEmail(event);
@@ -337,252 +219,6 @@ export const createEvent = defineEventHandler(async (event: H3Event) => {
   }
 });
 
-export const updateEvent = defineEventHandler(async (event: H3Event) => {
-  try {
-    const email = await uEmail(event);
-    const id = getRouterParam(event, "id") as string;
-    const body = await readBody(event);
-
-    if (!id.startsWith("google-")) {
-      setResponseStatus(event, 404);
-      return { error: "Event not found" };
-    }
-
-    const googleEventId = id.replace(/^google-/, "");
-
-    if (!(await googleCalendar.isConnected(email))) {
-      setResponseStatus(event, 400);
-      return { error: "Google Calendar not connected" };
-    }
-
-    const acctEmail = await resolveAccountEmail(body.accountEmail, email);
-    const {
-      addGoogleMeet,
-      addZoom,
-      sendUpdates,
-      notificationMessage,
-      scope,
-      ...rawUpdates
-    } = body;
-    const updateScope = scope === "all" ? "all" : "single";
-    const guestNotificationMessage = normalizeGuestNotificationMessage(
-      typeof notificationMessage === "string" ? notificationMessage : undefined,
-    );
-    if (addGoogleMeet === true && addZoom === true) {
-      setResponseStatus(event, 400);
-      return { error: "Choose either Google Meet or Zoom, not both." };
-    }
-
-    const updates: Partial<CalendarEvent> = {
-      ...rawUpdates,
-      accountEmail: acctEmail,
-    };
-
-    let existingEvent: CalendarEvent | undefined;
-    const loadExistingEvent = async () => {
-      existingEvent ??= await googleCalendar.getEvent(googleEventId, {
-        ownerEmail: email,
-        accountEmail: acctEmail,
-      });
-      return existingEvent;
-    };
-
-    let zoomMeetingLink: string | undefined;
-    let zoomAlreadyPresent = false;
-    if (addZoom === true) {
-      const existingEvent = await loadExistingEvent();
-      const eventForZoom: CalendarEvent = {
-        ...existingEvent,
-        ...updates,
-        title: updates.title ?? existingEvent.title,
-        description: updates.description ?? existingEvent.description,
-        location: updates.location ?? existingEvent.location,
-        start: updates.start ?? existingEvent.start,
-        end: updates.end ?? existingEvent.end,
-      };
-      const zoom = await prepareZoomMeetingPatch(email, eventForZoom);
-      zoomMeetingLink = zoom.meetingLink;
-      zoomAlreadyPresent = zoom.alreadyPresent;
-      Object.assign(updates, zoom.patch);
-    }
-
-    const eventForNotification = guestNotificationMessage
-      ? await loadExistingEvent()
-      : undefined;
-
-    const updatedKeys = Object.keys(updates).filter(
-      (key) => key !== "accountEmail",
-    );
-    if (updatedKeys.length === 0 && zoomAlreadyPresent) {
-      return {
-        success: true,
-        id,
-        googleEventId,
-        accountEmail: acctEmail,
-        meetingLink: zoomMeetingLink,
-        updatedAt: new Date().toISOString(),
-      };
-    }
-
-    try {
-      const result = await googleCalendar.updateEvent(googleEventId, updates, {
-        account: { ownerEmail: email, accountEmail: acctEmail },
-        sendUpdates:
-          sendUpdates ?? (guestNotificationMessage ? "all" : undefined),
-        addGoogleMeet: addGoogleMeet === true,
-        scope: updateScope,
-      });
-      if (result.htmlLink) updates.htmlLink = result.htmlLink;
-      if (result.meetLink) updates.hangoutLink = result.meetLink;
-      if (result.conferenceData) updates.conferenceData = result.conferenceData;
-      if (zoomMeetingLink) updates.meetingLink = zoomMeetingLink;
-    } catch (error: any) {
-      setResponseStatus(event, 500);
-      return { error: `Failed to update Google event: ${error.message}` };
-    }
-
-    const updated = {
-      ...updates,
-      id,
-      googleEventId,
-      updatedAt: new Date().toISOString(),
-    };
-
-    const guestNotification =
-      guestNotificationMessage && eventForNotification
-        ? await sendEventGuestNotificationNote({
-            event: {
-              ...eventForNotification,
-              ...updated,
-              id,
-              googleEventId,
-              accountEmail: acctEmail,
-            },
-            organizerEmail: email,
-            message: guestNotificationMessage,
-            kind: "update",
-          })
-        : undefined;
-
-    try {
-      emit(
-        "calendar.event.updated",
-        {
-          eventId: id,
-          title: updates.title ?? "",
-          startTime: updates.start ?? "",
-          endTime: updates.end ?? "",
-          attendees: updates.attendees ?? [],
-          updatedBy: email,
-        },
-        { owner: email },
-      );
-    } catch {
-      // best-effort
-    }
-
-    return {
-      ...updated,
-      ...(guestNotification ? { guestNotification } : {}),
-    };
-  } catch (error: any) {
-    return handleError(event, error);
-  }
-});
-
-export const deleteEvent = defineEventHandler(async (event: H3Event) => {
-  try {
-    const email = await uEmail(event);
-    const id = getRouterParam(event, "id") as string;
-
-    if (!id.startsWith("google-")) {
-      setResponseStatus(event, 404);
-      return { error: "Event not found" };
-    }
-
-    const googleEventId = id.replace(/^google-/, "");
-
-    if (!(await googleCalendar.isConnected(email))) {
-      setResponseStatus(event, 400);
-      return { error: "Google Calendar not connected" };
-    }
-
-    const query = getQuery(event);
-    const body = await readBody(event).catch(() => ({}));
-
-    const accountEmail = await resolveAccountEmail(
-      (body?.accountEmail || query.accountEmail) as string | undefined,
-      email,
-    );
-
-    const scope = (body?.scope || query.scope || "single") as
-      | "single"
-      | "all"
-      | "thisAndFollowing";
-    const sendUpdates = (body?.sendUpdates || query.sendUpdates || "none") as
-      | "all"
-      | "none";
-    const guestNotificationMessage = normalizeGuestNotificationMessage(
-      typeof body?.notificationMessage === "string"
-        ? body.notificationMessage
-        : typeof query.notificationMessage === "string"
-          ? query.notificationMessage
-          : undefined,
-    );
-    const removeOnly = body?.removeOnly === true;
-    const shouldNotifyGuests = !!guestNotificationMessage && !removeOnly;
-    const effectiveSendUpdates = removeOnly ? "none" : sendUpdates;
-    const eventForNotification = shouldNotifyGuests
-      ? await googleCalendar.getEvent(googleEventId, {
-          ownerEmail: email,
-          accountEmail,
-        })
-      : undefined;
-
-    try {
-      if (removeOnly) {
-        // Non-organizer: decline the event to remove from calendar
-        await googleCalendar.removeEventFromCalendar(
-          googleEventId,
-          { ownerEmail: email, accountEmail },
-          { scope, sendUpdates: effectiveSendUpdates },
-        );
-      } else {
-        // Organizer: actually delete the event
-        await googleCalendar.deleteEvent(
-          googleEventId,
-          { ownerEmail: email, accountEmail },
-          {
-            scope,
-            sendUpdates: effectiveSendUpdates,
-          },
-        );
-      }
-    } catch (error: any) {
-      setResponseStatus(event, 500);
-      return { error: `Failed to delete Google event: ${error.message}` };
-    }
-
-    const guestNotification =
-      shouldNotifyGuests && guestNotificationMessage && eventForNotification
-        ? await sendEventGuestNotificationNote({
-            event: eventForNotification,
-            organizerEmail: email,
-            message: guestNotificationMessage,
-            kind: "cancellation",
-            scope,
-          })
-        : undefined;
-
-    return {
-      success: true,
-      ...(guestNotification ? { guestNotification } : {}),
-    };
-  } catch (error: any) {
-    return handleError(event, error);
-  }
-});
-
 export const rsvpEvent = defineEventHandler(async (event: H3Event) => {
   try {
     const email = await uEmail(event);

package/corpus/templates/chat/.agents/skills/actions/SKILL.md

@@ -18,6 +18,8 @@ Actions in `actions/` are the **single source of truth** for app operations. The
 
 Before creating any custom REST/API route for app data, inspect `actions/` and the action table in `AGENTS.md`. If an action already exists, call it directly from the agent or with `useActionQuery` / `useActionMutation` from the UI. If the capability is missing, create or update a `defineAction`. Do not add `/api/*`, `server/routes/*`, or other pass-through endpoints whose main job is to call, repackage, or re-export an action.
 
+**Stop trigger:** the moment you are about to create a file under `server/routes/api/` — or add server middleware to guard one — stop and check it against the exception list in *When You Still Need Custom `/api/` Routes* below. If it is not on that list, write a `defineAction` instead. This applies even when you already started the route; abandoning a half-written action to hand-roll routes is the exact failure this rule exists to prevent.
+
 ## Why
 
 Actions give the agent callable tools with structured input/output, AND they give the frontend a typed client contract through hooks. One implementation serves both the agent and the UI. They keep the agent's chat context clean, they're reusable, and they can be tested independently.
@@ -390,12 +392,28 @@ This is the canonical approach for new apps. Action names must be lowercase with
 
 ## When You Still Need Custom `/api/` Routes
 
-Most operations should be actions. You only need custom routes in `server/routes/api/` for:
+This is the complete exception list. A route in `server/routes/api/` is only
+justified when the caller is not your own UI or agent, or when the payload is
+not JSON:
 
 - **File uploads** — actions receive JSON params, not multipart form data
 - **Streaming responses** — SSE or chunked responses that need direct H3 control
 - **Webhooks** — external services POST to a specific URL
 - **OAuth callbacks** — redirect-based flows that need specific URL patterns
+- **Public unauthenticated endpoints** — SEO/OG images, share links, and other
+  URLs opened directly by a browser or crawler
+- **Binary or non-JSON responses** — media, exports, generated assets
+
+Everything else is an action: CRUD, settings, search, list/detail reads, auth
+state, and anything the UI fetches as JSON. If a route needs new middleware to
+scope it to the current user, that is a signal it should be an action — actions
+already run inside request context with access checks.
+
+Existing first-party templates still contain a shrinking, explicitly
+grandfathered set of older `/api/*` CRUD routes for app data. The repository's
+`guard:no-action-twin-routes` CI check ratchets that baseline down across the
+first-party template route trees (with the separately owned Plan template
+fenced out); it is not a substitute for keeping generated apps action-first.
 
 When the agent needs a durable image or file URL, call the core `upload-image`
 action or use `uploadFile()` in server code. Do not write base64 into SQL,

package/corpus/templates/chat/.agents/skills/adding-a-feature/SKILL.md

@@ -14,6 +14,8 @@ metadata:
 
 Every new feature MUST update all four areas. Skipping any one breaks the agent-native contract — the agent and UI must always be equal partners.
 
+Scope check first: this is the checklist for a feature that adds app data or a new capability. A restyle, a copy change, or a screen with no new data model and no new agent-visible operation only needs the areas it actually touches — do not manufacture actions, state keys, or a skill for it.
+
 ## Why
 
 Agent-native apps are defined by parity: everything the UI can do, the agent can do, and vice versa. A feature that only has UI is invisible to the agent. A feature that only has scripts is invisible to the user. A feature without app-state sync means the agent is blind to what the user is doing.

package/corpus/templates/chat/.agents/skills/frontend-design/SKILL.md

@@ -1,14 +1,17 @@
 ---
 name: frontend-design
 description: >-
-  Create distinctive, production-grade frontend interfaces with high design
-  quality. Use when building web components, pages, artifacts, posters, or
-  applications (websites, landing pages, dashboards, React components,
-  HTML/CSS layouts, or when styling/beautifying any web UI). Generates
-  creative, polished UI that avoids generic AI aesthetics.
+  Sets the visual direction for a new or redesigned surface, with production
+  quality that avoids generic AI aesthetics. Use when building a new page,
+  app, or marketing surface, defining visual identity, or doing a design pass
+  ("make this look good"). Do not load it for routine UI edits: adding a field
+  to an existing form, fixing spacing, wiring a button, or changing copy.
 scope: dev
 license: Complete terms in LICENSE.txt
 source: https://github.com/anthropics/skills/blob/main/skills/frontend-design/SKILL.md
+local-changes: >-
+  Description narrowed and Verification rescoped deliberately; an upstream sync
+  must not restore the broad auto-load triggers or screenshot-everything step.
 metadata:
   internal: true
 ---
@@ -141,11 +144,22 @@ Avoid:
 
 ## Verification
 
+Match verification effort to the size of the change. For one component, one
+form, one page, or a restyle, run the app's existing checks — formatter,
+`pnpm typecheck`, existing tests — and stop there.
+
+Escalate to browser verification only when the user asks for it, or when the
+change is a multi-step user-visible flow that cannot be confirmed any other
+way. Never author a new Playwright/Puppeteer script, add a browser-automation
+dependency, or stand up an e2e harness to check work the user did not ask you
+to test that way; use an available browser tool, or say what you could not
+verify.
+
 For substantial frontend work:
 
 1. Run the relevant formatter/checks.
 2. Start the dev server when the app needs one.
-3. Verify with browser screenshots at desktop and mobile widths.
+3. Verify with the available browser tooling at desktop and mobile widths.
 4. Check interactive states: hover, focus, loading, empty, error, and destructive confirmations.
 5. When registering or changing a company adapter, run
    `@agent-native/toolkit/conformance`, including mixed-overlay focus,

package/corpus/templates/chat/.agents/skills/security/SKILL.md

@@ -127,6 +127,8 @@ Two more CI guards (also wired into `pnpm prep`) target the 2026-04 cross-tenant
 - `scripts/guard-no-env-mutation.mjs` — bans `process.env.<KEY> = …` (and bracket / compound forms) anywhere in production code. On serverless, every warm container handles many concurrent requests in one Node process, so `process.env` mutation leaks across in-flight requests (the "restore" line at the end of a handler races and never helps — most recently the Zoom webhook). Use `runWithRequestContext({ userEmail, orgId, timezone }, fn)` from `@agent-native/core/server` instead — it's AsyncLocalStorage-backed and per-request safe. Allowlisted paths: `scripts/`, `*.spec.ts` / `*.test.ts`, `packages/core/src/dev**`, `templates/*/test/`, anything under `/cli/` or `/scaffold/`. Per-line opt-out: `process.env.X = y // guard:allow-env-mutation — <reason>`.
 - `scripts/guard-no-localhost-fallback.mjs` — bans the literal `"local@localhost"` / `'local@localhost'` / `` `local@localhost` `` in production code. The bug class: `getRequestUserEmail() ?? "local@localhost"` silently pools every unauthenticated request into a single shared tenant, leaking credentials, tools, and `application_state` rows between accounts. The right behavior is to throw / 401 when there's no session. Allowlisted paths: the dev-mode auth shim (`packages/core/src/server/auth.ts`), `packages/core/src/dev**`, tests, `scripts/`, `seed/` / `seeds/`, plus a few framework helpers that intentionally inspect or migrate the dev identity. SQL DDL `DEFAULT 'local@localhost'` and the Drizzle helper `.default('local@localhost')` are skipped per-line — schema column defaults are intentional dev fixtures, not the dangerous fallback pattern. Per-line opt-out: `email ?? "local@localhost" // guard:allow-localhost-fallback — <reason>`.
 
+  The same guard also bans the **ambient process identity** as a request-scoped fallback: `?? process.env.AGENT_USER_EMAIL`, `|| process.env.WORKSPACE_OWNER_EMAIL`, and `?? getAmbientUserEmail()`. Those name the identity of the *deployment*, not the caller, so a handler reading one authorizes whoever the deploy env names rather than whoever signed in — it fails open toward more privilege. Exempt paths are the ones with no request by construction: `scripts/` (including `templates/*/scripts/`), `src/cli/`, `src/scripts/`, `script-helpers.ts` / `script-entries.ts`, tests, and seeds. It deliberately matches only the `??` / `||` fallback position, so reading the same env var to build an admin allowlist (`envEmails("WORKSPACE_OWNER_EMAIL").includes(email)`) is untouched. Known gaps, both requiring dataflow analysis the guard does not do: an env read aliased through a local (`const fallback = process.env.AGENT_USER_EMAIL; … ?? fallback`) and a destructured `const { AGENT_USER_EMAIL } = process.env`.
+
 ## Auth
 
 - All actions are protected by the auth guard automatically.

package/corpus/templates/chat/.agents/skills/self-modifying-code/SKILL.md

@@ -1,9 +1,10 @@
 ---
 name: self-modifying-code
 description: >-
-  How the agent can modify the app's own source code. Use when the agent needs
-  to edit components, routes, styles, or scripts, when designing UI for agent
-  editability, or when deciding what the agent should and shouldn't modify.
+  Tiers, checkpoints, and off-limits paths for an agent editing the app's own
+  source. Use when designing UI for agent editability, deciding whether a file
+  is safe for the agent to change, or when tempted to patch config, `.env`, or
+  an `@agent-native/*` package. Do not load it for ordinary source edits.
 scope: dev
 metadata:
   internal: true

package/corpus/templates/chat/.agents/skills/shadcn-ui/SKILL.md

@@ -1,11 +1,15 @@
 ---
 name: shadcn-ui
 description: >-
-  Use when adding, updating, debugging, styling, or composing shadcn/ui
-  components, forms, dialogs, menus, charts, sidebars, themes, registries, or
-  any project with a components.json file.
+  The shadcn CLI, component composition, theming, and registry workflow. Use
+  when adding, replacing, upgrading, or debugging a shadcn/ui primitive itself,
+  or when changing a theme or registry. Do not load it for ordinary edits to a
+  file that happens to import a shadcn component.
 scope: dev
 source: https://ui.shadcn.com/docs/skills
+local-changes: >-
+  Description narrowed deliberately; an upstream sync must not restore the
+  "any project with a components.json file" trigger.
 metadata:
   internal: true
 ---