@agent-native/core 0.130.2 → 0.131.2

package/corpus/core/src/templates/default/app/i18n/en-US.ts

@@ -71,6 +71,23 @@ const messages = {
       suggestionGrantKey: "Grant my OpenAI key to this app",
     },
     pages: {
+      browserChatUnavailableTitle: "Browser chat session unavailable",
+      browserChatUnavailableDescription:
+        "Reconnect from the Agent-Native browser extension.",
+      browserChatPlaceholder: "Ask about this page…",
+      browserChatAttachedPlaceholder: "Ask about {{page}}…",
+      browserConnectTitle: "Connect browser chat",
+      browserConnectDescription:
+        "Allow the Agent-Native Chrome extension to open this Dispatch chat session. The connection uses a one-time, short-lived ticket.",
+      browserConnectInvalid:
+        "This connection request is invalid. Start again from the extension.",
+      browserConnectConnected:
+        "Browser chat connected. You can close this tab.",
+      browserConnectConnecting: "Connecting…",
+      browserConnectButton: "Connect",
+      browserConnectOpenFromExtension:
+        "Open this page from the Agent-Native Chrome extension.",
+      browserConnectFailed: "The browser extension did not connect.",
       appsDescription:
         "Open workspace apps and start new app creation from Dispatch.",
       appsDescriptionWithWorkspace:
@@ -356,6 +373,16 @@ const messages = {
     deleting: "Archiving...",
     openFullView: "Open full view",
     removeFromWidgetArea: "Remove from this widget area",
+    customBlockSandboxed: "Custom block · sandboxed",
+    sandboxedCustomBlock: "Sandboxed SQL custom block",
+    sandboxedCustomBlockCreatedBy:
+      "Sandboxed SQL custom block created by {{email}}",
+    promoteToAppCode: "Promote to app code",
+    historyShowsSourceVersions: "History shows source versions",
+    createdByHistoryShowsSourceVersions:
+      "Created by {{email}}. History shows source versions.",
+    createdByHistoryShowsSourceVersionsCompact:
+      "Created by {{email}} · History shows source versions",
     deleteExtensionEllipsis: "Archive extension...",
     removeFromMyListEllipsis: "Remove from my list...",
     removeFromWidgetAreaForMe: "Remove from this widget area (for me)",

package/corpus/core/src/templates/default/app/i18n/es-ES.ts

@@ -73,6 +73,24 @@ const messages = {
       suggestionGrantKey: "Otorgar mi clave OpenAI a esta aplicación",
     },
     pages: {
+      browserChatUnavailableTitle:
+        "La sesión de chat del navegador no está disponible",
+      browserChatUnavailableDescription:
+        "Vuelve a conectarte desde la extensión Agent-Native.",
+      browserChatPlaceholder: "Pregunta sobre esta página…",
+      browserChatAttachedPlaceholder: "Pregunta sobre {{page}}…",
+      browserConnectTitle: "Conectar el chat del navegador",
+      browserConnectDescription:
+        "Permite que la extensión de Chrome Agent-Native abra esta sesión de Dispatch. La conexión usa un ticket único y de corta duración.",
+      browserConnectInvalid:
+        "Esta solicitud de conexión no es válida. Vuelve a empezar desde la extensión.",
+      browserConnectConnected:
+        "El chat del navegador está conectado. Puedes cerrar esta pestaña.",
+      browserConnectConnecting: "Conectando…",
+      browserConnectButton: "Conectar",
+      browserConnectOpenFromExtension:
+        "Abre esta página desde la extensión de Chrome Agent-Native.",
+      browserConnectFailed: "La extensión del navegador no se conectó.",
       appsDescription:
         "Abra las aplicaciones del espacio de trabajo y comience la creación de nuevas aplicaciones desde Dispatch.",
       appsDescriptionWithWorkspace:
@@ -368,6 +386,16 @@ const messages = {
     deleting: "Archivando...",
     openFullView: "Abrir vista completa",
     removeFromWidgetArea: "Eliminar de esta área de widgets",
+    customBlockSandboxed: "Bloque personalizado · aislado",
+    sandboxedCustomBlock: "Bloque SQL personalizado y aislado",
+    sandboxedCustomBlockCreatedBy:
+      "Bloque SQL personalizado y aislado creado por {{email}}",
+    promoteToAppCode: "Promover a código de aplicación",
+    historyShowsSourceVersions: "El historial muestra versiones del código",
+    createdByHistoryShowsSourceVersions:
+      "Creado por {{email}}. El historial muestra versiones del código.",
+    createdByHistoryShowsSourceVersionsCompact:
+      "Creado por {{email}} · El historial muestra versiones del código",
     deleteExtensionEllipsis: "Archivar extensión...",
     removeFromMyListEllipsis: "Quitar de mi lista...",
     removeFromWidgetAreaForMe: "Remove from this widget area (for me)",

package/corpus/core/src/templates/default/app/i18n/fr-FR.ts

@@ -74,6 +74,24 @@ const messages = {
       suggestionGrantKey: "Accorder ma clé OpenAI à cette application",
     },
     pages: {
+      browserChatUnavailableTitle:
+        "La session de chat du navigateur est indisponible",
+      browserChatUnavailableDescription:
+        "Reconnectez-vous depuis l’extension Agent-Native.",
+      browserChatPlaceholder: "Posez une question sur cette page…",
+      browserChatAttachedPlaceholder: "Posez une question sur {{page}}…",
+      browserConnectTitle: "Connecter le chat du navigateur",
+      browserConnectDescription:
+        "Autorisez l’extension Chrome Agent-Native à ouvrir cette session Dispatch. La connexion utilise un ticket unique de courte durée.",
+      browserConnectInvalid:
+        "Cette demande de connexion est invalide. Recommencez depuis l’extension.",
+      browserConnectConnected:
+        "Le chat du navigateur est connecté. Vous pouvez fermer cet onglet.",
+      browserConnectConnecting: "Connexion…",
+      browserConnectButton: "Connecter",
+      browserConnectOpenFromExtension:
+        "Ouvrez cette page depuis l’extension Chrome Agent-Native.",
+      browserConnectFailed: "L’extension du navigateur ne s’est pas connectée.",
       appsDescription:
         "Ouvrez les applications de l'espace de travail et démarrez la création d'une nouvelle application à partir de Dispatch.",
       appsDescriptionWithWorkspace:
@@ -367,6 +385,16 @@ const messages = {
     deleting: "Archivage...",
     openFullView: "Ouvrir la vue complète",
     removeFromWidgetArea: "Supprimer de cette zone de widget",
+    customBlockSandboxed: "Bloc personnalisé · isolé",
+    sandboxedCustomBlock: "Bloc SQL personnalisé et isolé",
+    sandboxedCustomBlockCreatedBy:
+      "Bloc SQL personnalisé et isolé créé par {{email}}",
+    promoteToAppCode: "Promouvoir vers le code de l’application",
+    historyShowsSourceVersions: "L’historique affiche les versions du code",
+    createdByHistoryShowsSourceVersions:
+      "Créé par {{email}}. L’historique affiche les versions du code.",
+    createdByHistoryShowsSourceVersionsCompact:
+      "Créé par {{email}} · L’historique affiche les versions du code",
     deleteExtensionEllipsis: "Archiver l'extension...",
     removeFromMyListEllipsis: "Supprimer de ma liste...",
     removeFromWidgetAreaForMe: "Remove from this widget area (for me)",

package/corpus/core/src/templates/default/app/i18n/hi-IN.ts

@@ -70,6 +70,21 @@ const messages = {
       suggestionGrantKey: "इस ऐप को मेरी OpenAI कुंजी प्रदान करें",
     },
     pages: {
+      browserChatUnavailableTitle: "ब्राउज़र चैट सत्र उपलब्ध नहीं है",
+      browserChatUnavailableDescription:
+        "Agent-Native ब्राउज़र एक्सटेंशन से फिर से कनेक्ट करें।",
+      browserChatPlaceholder: "इस पेज के बारे में पूछें…",
+      browserChatAttachedPlaceholder: "{{page}} के बारे में पूछें…",
+      browserConnectTitle: "ब्राउज़र चैट कनेक्ट करें",
+      browserConnectDescription:
+        "Agent-Native Chrome एक्सटेंशन को यह Dispatch चैट सत्र खोलने दें। कनेक्शन एक बार उपयोग होने वाला अल्पकालिक टिकट इस्तेमाल करता है।",
+      browserConnectInvalid: "यह कनेक्शन अनुरोध अमान्य है। एक्सटेंशन से फिर शुरू करें।",
+      browserConnectConnected: "ब्राउज़र चैट कनेक्ट हो गई है। आप यह टैब बंद कर सकते हैं।",
+      browserConnectConnecting: "कनेक्ट हो रहा है…",
+      browserConnectButton: "कनेक्ट करें",
+      browserConnectOpenFromExtension:
+        "यह पेज Agent-Native Chrome एक्सटेंशन से खोलें।",
+      browserConnectFailed: "ब्राउज़र एक्सटेंशन कनेक्ट नहीं हुआ।",
       appsDescription: "वर्कस्पेस ऐप्स खोलें और Dispatch से नए ऐप निर्माण शुरू करें।",
       appsDescriptionWithWorkspace:
         'Apps in the "{{workspace}}" workspace. Each app gets its own route under this workspace and shares its database, auth, and agent chat.',
@@ -351,6 +366,16 @@ const messages = {
     deleting: "संग्रहित किया जा रहा है...",
     openFullView: "पूरा दृश्य खोलें",
     removeFromWidgetArea: "इस विजेट क्षेत्र से हटाएँ",
+    customBlockSandboxed: "कस्टम ब्लॉक · सैंडबॉक्स",
+    sandboxedCustomBlock: "सैंडबॉक्स किया गया SQL कस्टम ब्लॉक",
+    sandboxedCustomBlockCreatedBy:
+      "{{email}} द्वारा बनाया गया सैंडबॉक्स SQL कस्टम ब्लॉक",
+    promoteToAppCode: "ऐप कोड में प्रमोट करें",
+    historyShowsSourceVersions: "इतिहास स्रोत संस्करण दिखाता है",
+    createdByHistoryShowsSourceVersions:
+      "{{email}} द्वारा बनाया गया। इतिहास स्रोत संस्करण दिखाता है।",
+    createdByHistoryShowsSourceVersionsCompact:
+      "{{email}} द्वारा बनाया गया · इतिहास स्रोत संस्करण दिखाता है",
     deleteExtensionEllipsis: "एक्सटेंशन संग्रहित करें...",
     removeFromMyListEllipsis: "मेरी सूची से हटाएं...",
     removeFromWidgetAreaForMe: "Remove from this widget area (for me)",

package/corpus/core/src/templates/default/app/i18n/ja-JP.ts

@@ -71,6 +71,23 @@ const messages = {
       suggestionGrantKey: "このアプリに OpenAI キーを付与します",
     },
     pages: {
+      browserChatUnavailableTitle: "ブラウザーチャットを利用できません",
+      browserChatUnavailableDescription:
+        "Agent-Native ブラウザー拡張機能から再接続してください。",
+      browserChatPlaceholder: "このページについて質問…",
+      browserChatAttachedPlaceholder: "{{page}} について質問…",
+      browserConnectTitle: "ブラウザーチャットを接続",
+      browserConnectDescription:
+        "Agent-Native Chrome 拡張機能がこの Dispatch チャットを開くことを許可します。接続には一度だけ使える短期チケットを使用します。",
+      browserConnectInvalid:
+        "この接続リクエストは無効です。拡張機能からやり直してください。",
+      browserConnectConnected:
+        "ブラウザーチャットに接続しました。このタブを閉じられます。",
+      browserConnectConnecting: "接続中…",
+      browserConnectButton: "接続",
+      browserConnectOpenFromExtension:
+        "Agent-Native Chrome 拡張機能からこのページを開いてください。",
+      browserConnectFailed: "ブラウザー拡張機能に接続できませんでした。",
       appsDescription:
         "ワークスペース アプリを開き、Dispatch から新しいアプリの作成を開始します。",
       appsDescriptionWithWorkspace:
@@ -357,6 +374,16 @@ const messages = {
     deleting: "アーカイブ中...",
     openFullView: "フルビューを開く",
     removeFromWidgetArea: "このウィジェット領域から削除する",
+    customBlockSandboxed: "カスタムブロック · サンドボックス",
+    sandboxedCustomBlock: "サンドボックス化された SQL カスタムブロック",
+    sandboxedCustomBlockCreatedBy:
+      "{{email}} が作成したサンドボックス SQL カスタムブロック",
+    promoteToAppCode: "アプリコードに昇格",
+    historyShowsSourceVersions: "履歴でソースのバージョンを確認できます",
+    createdByHistoryShowsSourceVersions:
+      "{{email}} が作成。履歴でソースのバージョンを確認できます。",
+    createdByHistoryShowsSourceVersionsCompact:
+      "{{email}} が作成 · 履歴でソースのバージョンを確認できます",
     deleteExtensionEllipsis: "拡張機能をアーカイブ...",
     removeFromMyListEllipsis: "リストから削除...",
     removeFromWidgetAreaForMe: "Remove from this widget area (for me)",

package/corpus/core/src/templates/default/app/i18n/ko-KR.ts

@@ -70,6 +70,23 @@ const messages = {
       suggestionGrantKey: "이 앱에 내 OpenAI 키를 부여하세요.",
     },
     pages: {
+      browserChatUnavailableTitle: "브라우저 채팅 세션을 사용할 수 없음",
+      browserChatUnavailableDescription:
+        "Agent-Native 브라우저 확장 프로그램에서 다시 연결하세요.",
+      browserChatPlaceholder: "이 페이지에 대해 질문…",
+      browserChatAttachedPlaceholder: "{{page}}에 대해 질문…",
+      browserConnectTitle: "브라우저 채팅 연결",
+      browserConnectDescription:
+        "Agent-Native Chrome 확장 프로그램이 이 Dispatch 채팅 세션을 열도록 허용합니다. 연결에는 일회용 단기 티켓이 사용됩니다.",
+      browserConnectInvalid:
+        "잘못된 연결 요청입니다. 확장 프로그램에서 다시 시작하세요.",
+      browserConnectConnected:
+        "브라우저 채팅이 연결되었습니다. 이 탭을 닫아도 됩니다.",
+      browserConnectConnecting: "연결 중…",
+      browserConnectButton: "연결",
+      browserConnectOpenFromExtension:
+        "Agent-Native Chrome 확장 프로그램에서 이 페이지를 여세요.",
+      browserConnectFailed: "브라우저 확장 프로그램이 연결되지 않았습니다.",
       appsDescription:
         "작업 공간 앱을 열고 Dispatch에서 새 앱 생성을 시작하세요.",
       appsDescriptionWithWorkspace:
@@ -350,6 +367,16 @@ const messages = {
     deleting: "보관 중...",
     openFullView: "전체 보기 열기",
     removeFromWidgetArea: "이 위젯 영역에서 제거",
+    customBlockSandboxed: "커스텀 블록 · 샌드박스",
+    sandboxedCustomBlock: "샌드박스 SQL 커스텀 블록",
+    sandboxedCustomBlockCreatedBy:
+      "{{email}} 님이 만든 샌드박스 SQL 커스텀 블록",
+    promoteToAppCode: "앱 코드로 승격",
+    historyShowsSourceVersions: "기록에서 소스 버전을 확인할 수 있습니다",
+    createdByHistoryShowsSourceVersions:
+      "{{email}} 님이 만들었습니다. 기록에서 소스 버전을 확인할 수 있습니다.",
+    createdByHistoryShowsSourceVersionsCompact:
+      "{{email}} 님이 만듦 · 기록에서 소스 버전 확인",
     deleteExtensionEllipsis: "확장 프로그램 보관...",
     removeFromMyListEllipsis: "내 목록에서 제거...",
     removeFromWidgetAreaForMe: "Remove from this widget area (for me)",

package/corpus/core/src/templates/default/app/i18n/pt-BR.ts

@@ -74,6 +74,23 @@ const messages = {
       suggestionGrantKey: "Conceda minha chave OpenAI para este aplicativo",
     },
     pages: {
+      browserChatUnavailableTitle: "Sessão de chat do navegador indisponível",
+      browserChatUnavailableDescription:
+        "Reconecte pela extensão Agent-Native.",
+      browserChatPlaceholder: "Pergunte sobre esta página…",
+      browserChatAttachedPlaceholder: "Pergunte sobre {{page}}…",
+      browserConnectTitle: "Conectar chat do navegador",
+      browserConnectDescription:
+        "Permita que a extensão Agent-Native do Chrome abra esta sessão do Dispatch. A conexão usa um ticket único e de curta duração.",
+      browserConnectInvalid:
+        "Esta solicitação de conexão é inválida. Recomece pela extensão.",
+      browserConnectConnected:
+        "Chat do navegador conectado. Você pode fechar esta aba.",
+      browserConnectConnecting: "Conectando…",
+      browserConnectButton: "Conectar",
+      browserConnectOpenFromExtension:
+        "Abra esta página pela extensão Agent-Native do Chrome.",
+      browserConnectFailed: "A extensão do navegador não se conectou.",
       appsDescription:
         "Abra aplicativos de espaço de trabalho e inicie a criação de novos aplicativos em Dispatch.",
       appsDescriptionWithWorkspace:
@@ -366,6 +383,16 @@ const messages = {
     deleting: "Arquivando...",
     openFullView: "Abrir visualização completa",
     removeFromWidgetArea: "Remover desta área de widget",
+    customBlockSandboxed: "Bloco personalizado · isolado",
+    sandboxedCustomBlock: "Bloco SQL personalizado e isolado",
+    sandboxedCustomBlockCreatedBy:
+      "Bloco SQL personalizado e isolado criado por {{email}}",
+    promoteToAppCode: "Promover para código do aplicativo",
+    historyShowsSourceVersions: "O histórico mostra versões do código",
+    createdByHistoryShowsSourceVersions:
+      "Criado por {{email}}. O histórico mostra versões do código.",
+    createdByHistoryShowsSourceVersionsCompact:
+      "Criado por {{email}} · O histórico mostra versões do código",
     deleteExtensionEllipsis: "Arquivar extensão...",
     removeFromMyListEllipsis: "Remover da minha lista...",
     removeFromWidgetAreaForMe: "Remove from this widget area (for me)",

package/corpus/core/src/templates/default/app/i18n/zh-CN.ts

@@ -68,6 +68,21 @@ const messages = {
       suggestionGrantKey: "将我的 OpenAI 密钥授予此应用程序",
     },
     pages: {
+      browserChatUnavailableTitle: "浏览器聊天会话不可用",
+      browserChatUnavailableDescription:
+        "请从 Agent-Native 浏览器扩展重新连接。",
+      browserChatPlaceholder: "询问此页面…",
+      browserChatAttachedPlaceholder: "询问 {{page}}…",
+      browserConnectTitle: "连接浏览器聊天",
+      browserConnectDescription:
+        "允许 Agent-Native Chrome 扩展打开此 Dispatch 聊天会话。连接使用一次性的短期票据。",
+      browserConnectInvalid: "此连接请求无效。请从扩展重新开始。",
+      browserConnectConnected: "浏览器聊天已连接。你可以关闭此标签页。",
+      browserConnectConnecting: "正在连接…",
+      browserConnectButton: "连接",
+      browserConnectOpenFromExtension:
+        "请从 Agent-Native Chrome 扩展打开此页面。",
+      browserConnectFailed: "浏览器扩展未能连接。",
       appsDescription: "打开工作区应用程序并从 Dispatch 开始创建新应用程序。",
       appsDescriptionWithWorkspace:
         'Apps in the "{{workspace}}" workspace. Each app gets its own route under this workspace and shares its database, auth, and agent chat.',
@@ -342,6 +357,15 @@ const messages = {
     deleting: "正在归档...",
     openFullView: "打开全视图",
     removeFromWidgetArea: "从此小部件区域中删除",
+    customBlockSandboxed: "自定义块 · 沙盒",
+    sandboxedCustomBlock: "沙盒 SQL 自定义块",
+    sandboxedCustomBlockCreatedBy: "由 {{email}} 创建的沙盒 SQL 自定义块",
+    promoteToAppCode: "升级为应用代码",
+    historyShowsSourceVersions: "历史记录包含源代码版本",
+    createdByHistoryShowsSourceVersions:
+      "由 {{email}} 创建。历史记录包含源代码版本。",
+    createdByHistoryShowsSourceVersionsCompact:
+      "由 {{email}} 创建 · 历史记录包含源代码版本",
     deleteExtensionEllipsis: "归档扩展...",
     removeFromMyListEllipsis: "从我的列表中删除...",
     removeFromWidgetAreaForMe: "Remove from this widget area (for me)",

package/corpus/core/src/templates/default/app/i18n/zh-TW.ts

@@ -68,6 +68,21 @@ const messages = {
       suggestionGrantKey: "將我的 OpenAI 金鑰授予此應用程式",
     },
     pages: {
+      browserChatUnavailableTitle: "瀏覽器聊天工作階段無法使用",
+      browserChatUnavailableDescription:
+        "請從 Agent-Native 瀏覽器擴充功能重新連線。",
+      browserChatPlaceholder: "詢問此頁面…",
+      browserChatAttachedPlaceholder: "詢問 {{page}}…",
+      browserConnectTitle: "連接瀏覽器聊天",
+      browserConnectDescription:
+        "允許 Agent-Native Chrome 擴充功能開啟此 Dispatch 聊天工作階段。連線使用一次性的短期票證。",
+      browserConnectInvalid: "此連線要求無效。請從擴充功能重新開始。",
+      browserConnectConnected: "瀏覽器聊天已連線。你可以關閉此分頁。",
+      browserConnectConnecting: "連線中…",
+      browserConnectButton: "連線",
+      browserConnectOpenFromExtension:
+        "請從 Agent-Native Chrome 擴充功能開啟此頁面。",
+      browserConnectFailed: "瀏覽器擴充功能未能連線。",
       appsDescription: "開啟工作區應用程式並從 Dispatch 開始建立新應用程式。",
       appsDescriptionWithWorkspace:
         "「{{workspace}}」工作區中的應用程式。每個應用程式都會在此工作區下取得自己的路由，並共用資料庫、驗證與代理聊天。",
@@ -342,6 +357,15 @@ const messages = {
     deleting: "正在封存...",
     openFullView: "開啟全檢視",
     removeFromWidgetArea: "從此小工具區域中刪除",
+    customBlockSandboxed: "自訂區塊 · 沙盒",
+    sandboxedCustomBlock: "沙盒 SQL 自訂區塊",
+    sandboxedCustomBlockCreatedBy: "由 {{email}} 建立的沙盒 SQL 自訂區塊",
+    promoteToAppCode: "升級為應用程式碼",
+    historyShowsSourceVersions: "歷史記錄包含原始碼版本",
+    createdByHistoryShowsSourceVersions:
+      "由 {{email}} 建立。歷史記錄包含原始碼版本。",
+    createdByHistoryShowsSourceVersionsCompact:
+      "由 {{email}} 建立 · 歷史記錄包含原始碼版本",
     deleteExtensionEllipsis: "封存擴充功能...",
     removeFromMyListEllipsis: "從我的清單中刪除...",
     removeFromWidgetAreaForMe: "從這個小工具區域移除（只套用於我）",

package/corpus/core/src/templates/headless/.agents/skills/agent-native-toolkit/SKILL.md

@@ -117,6 +117,11 @@ in the moment of agent use.
   missing-secret states, OAuth grants, and provider connection health.
 - **Agent UX kit**: sidebar, composer, staged context, mentions, voice, human
   approval, generative UI, progress, and screen-state exposure.
+- **Custom block kit**: optional extension creation, viewer chrome, slots, and
+  promotion affordances. Apps must opt in; Core keeps the sandbox, SQL storage,
+  access checks, and compatibility routes, while Toolkit owns reusable adoption
+  UI. Analytics may expose this as one-off **Custom Blocks**; durable behavior
+  should be promoted to app code.
 - **Chat history kit**: presentational chat lists and recent-chat rails belong
   in Toolkit; Core keeps thread persistence, agent execution, transport, and
   page-to-sidebar handoff. Use Toolkit's `ChatHistoryRail` for the standard

package/corpus/core/src/templates/workspace-core/.agents/skills/agent-native-toolkit/SKILL.md

@@ -117,6 +117,11 @@ in the moment of agent use.
   missing-secret states, OAuth grants, and provider connection health.
 - **Agent UX kit**: sidebar, composer, staged context, mentions, voice, human
   approval, generative UI, progress, and screen-state exposure.
+- **Custom block kit**: optional extension creation, viewer chrome, slots, and
+  promotion affordances. Apps must opt in; Core keeps the sandbox, SQL storage,
+  access checks, and compatibility routes, while Toolkit owns reusable adoption
+  UI. Analytics may expose this as one-off **Custom Blocks**; durable behavior
+  should be promoted to app code.
 - **Chat history kit**: presentational chat lists and recent-chat rails belong
   in Toolkit; Core keeps thread persistence, agent execution, transport, and
   page-to-sidebar handoff. Use Toolkit's `ChatHistoryRail` for the standard

package/corpus/core/src/templates/workspace-core/.agents/skills/agent-page/SKILL.md

@@ -1,8 +1,8 @@
 ---
 name: agent-page
 description: >-
-  The full-page Agent surface (/agent) with Context, Files, Connections, Jobs,
-  and Access tabs. Use when mounting the Agent page in a template, adding an
+  The full-page Agent surface (/agent) with Context, Files, Connections,
+  Automations, and Access tabs. Use when mounting the Agent page in a template, adding an
   app-specific tab, surfacing context transparency, MCP servers, A2A agents,
   recurring jobs, or external-client connect flows in the UI.
 metadata:
@@ -32,7 +32,7 @@ everything that can influence the agent. Design principles:
 | `context` | System-vs-conversation split meter, provenance-grouped system sections (governance tiers: required/inherited/user), live-thread manifest. Backed by `context-preview-get` / `context-manifest-get` (see `context-xray` skill). |
 | `files` | ResourcesPanel (skills, instructions, memory, uploads) with the virtual `mcp-servers/` folder hidden (`showMcpServers={false}`). |
 | `connections` | MCP server management (both scopes, admin-gated org writes) plus A2A remote agents this app can call. |
-| `jobs` | Recurring jobs (personal + org) and automations (personal) with pause/resume/delete (see `recurring-jobs` skill). |
+| `jobs` | **Automations**: personal and organization Scheduled/Event tasks with pause/resume/delete. The `jobs` hash is stable for compatibility (see `automations` and `recurring-jobs`). |
 | `access` | Copyable MCP URL and A2A agent-card URL, per-client connect steps (Claude, ChatGPT, Cursor, Claude Code, Codex, Other) from `packages/core/src/shared/mcp-connect-content.ts` (shared with the `/mcp/connect` route — edit the shared module, never fork copy), static-token fallback link. Grants/scopes/revocation UI is future work. |
 
 ## Mounting In A Template
@@ -53,7 +53,10 @@ everything that can influence the agent. Design principles:
 
 ## Scope
 
-The page-level Personal/Organization toggle passes `scope` (and
-`canManageOrg`) to every tab via `AgentPageTabProps`. Hide nothing silently:
-if a capability is personal-only today (e.g. automations), the org view says
-so honestly instead of faking an org variant.
+The page currently passes personal `scope` (and `canManageOrg`) to tabs via
+`AgentPageTabProps`; it does not expose a page-level Personal/Organization
+toggle. A tab may render its own scoped sections where the underlying actions
+support them. The Automations tab shows personal and organization sections for
+both Scheduled and Event triggers. Organization event automations remain
+creator-run: administrators can manage them, but cannot retarget the creator's
+identity.

package/corpus/core/src/templates/workspace-core/.agents/skills/automations/SKILL.md

@@ -12,7 +12,17 @@ metadata:
 
 ## Rule
 
-Automations are agent-executed tasks that fire in response to events or on a cron schedule. Each automation is a markdown resource under `jobs/` with YAML frontmatter describing when and how it fires, and a body containing natural-language instructions the agent follows. Automations extend the recurring-jobs system with event triggers, natural-language condition evaluation, and outbound HTTP via the `web-request` tool.
+Automations are the user-facing umbrella for agent-executed tasks that fire in
+response to events or on a cron schedule. **Scheduled** and **Event** are the
+two trigger types. Each automation is a markdown resource under `jobs/` with
+YAML frontmatter describing when and how it fires, and a body containing
+natural-language instructions the agent follows.
+
+Recurring Jobs is the legacy name and API for scheduled automations.
+`manage-jobs`, `jobs/`, and `/agent#jobs` remain stable compatibility surfaces.
+Use `manage-automations` for new personal or organization automations, including
+per-automation model overrides and MCP allowlists. Keep `manage-jobs` for
+existing schedule-only integrations and delivery metadata.
 
 ## The Two Trigger Types
 
@@ -29,15 +39,24 @@ Event triggers can optionally include a `condition` -- a natural-language string
 2. Agent calls `manage-automations` with `action=list-events` to discover available events.
 3. Agent calls `manage-automations` with `action=define` to write a `jobs/<name>.md` resource.
 4. The trigger dispatcher subscribes to the event on the bus.
-5. When the event fires, the dispatcher loads all matching triggers, evaluates conditions via Haiku, and dispatches matching ones.
-6. In `agentic` mode, the dispatcher runs a full `runAgentLoop` with the automation body as the prompt and the event payload as context.
+5. When the event fires, the dispatcher loads all matching triggers, enforces
+   owner and organization scope, and evaluates conditions via Haiku.
+6. Event and cron acquisition converge on the shared background-automation
+   runner, which validates identity, resolves the configured model and MCP
+   allowlist, runs the agent loop, handles continuation and delivery, and
+   records usage.
 7. Status (`lastRun`, `lastStatus`, `lastError`) is written back to the resource frontmatter.
 
+Trigger acquisition stays separate by design: the scheduler decides when a cron
+expression is due, while the event dispatcher matches event names, owners, and
+conditions. Everything after a trigger is accepted uses the same execution
+lifecycle.
+
 ## Markdown Format
 
 ```yaml
 ---
-schedule: "0 9 * * 1-5"
+schedule: ""
 enabled: true
 triggerType: event
 event: calendar.booking.created
@@ -64,9 +83,10 @@ Use the web-request tool with ${keys.SLACK_WEBHOOK}.
 | `mode`        | `"agentic"`                    | Full agent loop (only supported mode; `"deterministic"` was removed — never implemented, rejected at define time) |
 | `model`       | `string?`                      | Override the model for this trigger's agent loop       |
 | `domain`      | `string?`                      | Grouping tag (mail, calendar, clips, etc.)             |
-| `createdBy`   | `string?`                      | Owner email                                            |
-| `orgId`       | `string?`                      | Org scope                                              |
-| `runAs`       | `"creator" \| "shared"`        | Whose API key and permissions to use                   |
+| `createdBy`   | `string?`                      | Creator email; required for organization event automations |
+| `orgId`       | `string?`                      | Organization scope                                     |
+| `runAs`       | `"creator" \| "shared"`        | Execution identity; trigger-aware automations use `creator` |
+| `mcpTools`    | `string[]?`                    | Exact MCP tool allowlist for this automation           |
 | `lastRun`     | `string?`                      | ISO timestamp of last execution                        |
 | `lastStatus`  | `string?`                      | `success`, `error`, `running`, or `skipped`            |
 | `lastError`   | `string?`                      | Error message from last failed run                     |
@@ -86,6 +106,26 @@ All automation operations are accessed through a single `manage-automations` too
 
 Additional tool: `web-request` — outbound HTTP with `${keys.NAME}` substitution.
 
+`manage-automations` accepts personal or organization scope and supports
+`model` and `mcpTools` on define/update. An MCP allowlist is enforced, not
+advisory: every named tool must resolve in the creator's request context or the
+run fails clearly, and the runner never widens access beyond the configured
+names.
+
+## Organization Event Automations
+
+Organization event automations are visible to organization members but always
+run as their creator:
+
+- `createdBy` is required and `runAs` must be `creator`.
+- An organization event automation matches only events emitted for that
+  creator. Organization visibility does not turn an event into a broadcast.
+- Organization admins may update or delete an automation, but cannot replace
+  its creator or retarget its execution identity.
+- Before every run, the framework verifies that the creator still exists and is
+  still a member of the organization. A removed creator or unreadable
+  membership state prevents execution.
+
 ## The Event Bus
 
 Integrations register events at module load time. The bus validates payloads against Standard Schema definitions and dispatches to subscribers.
@@ -157,7 +197,11 @@ Automations use the `web-request` tool for outbound HTTP. It supports `${keys.NA
 
 ## UI
 
-Automations appear in the settings panel under an "Automations" section. Users can view, enable/disable, and delete automations from there. Creation typically happens through the agent chat.
+The full-page Agent surface's **Automations** tab is the primary management
+surface for scheduled and event-triggered automations. Users can view status,
+enable/disable, inspect, and delete automations there. Its URL remains
+`/agent#jobs` for compatibility even though the visible tab is Automations.
+Creation typically happens through the agent chat.
 
 ## Example
 
@@ -183,6 +227,7 @@ Agent flow:
 | `packages/core/src/triggers/types.ts`          | `TriggerFrontmatter` interface                   |
 | `packages/core/src/triggers/actions.ts`        | Agent tools (define, list, update, delete, test)  |
 | `packages/core/src/triggers/dispatcher.ts`     | Event subscription and agentic dispatch          |
+| `packages/core/src/jobs/background-automation-runner.ts` | Shared schedule/event execution lifecycle |
 | `packages/core/src/triggers/condition-evaluator.ts` | Haiku condition classification with caching |
 | `packages/core/src/event-bus/`                 | Event bus (register, emit, subscribe)            |
 | `packages/core/src/tools/fetch-tool.ts`        | `web-request` tool with key substitution         |