@agent-native/core 0.140.0 → 0.141.0

package/corpus/README.md

@@ -31,4 +31,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- template files: 7658
+- template files: 7643

package/corpus/templates/analytics/actions/query-agent-native-analytics.ts

@@ -15,7 +15,7 @@ function resolveScope() {
 
 export default defineAction({
   description:
-    "Query the built-in first-party Analytics source: events recorded through this app's analytics collector endpoint (/track), compact daily rollups, identifiable user-day rollups, and session replay summaries recorded through /api/analytics/replay. This source does not require an external provider connection. Use it for questions about app/site traffic, product events, template/app usage, conversions, session recordings, LLM/agent observability, model cost, token volume, latency, and other first-party data collected by this analytics app. Use source-specific actions such as BigQuery, GA4, Mixpanel, PostHog, or Amplitude when the user asks for those sources or the relevant data lives there. SQL may read analytics_events, analytics_event_daily_rollups, analytics_user_days, and session_recordings; session_replay_chunks is intentionally unavailable, and reads are automatically scoped to the current user/org. Prefer analytics_event_daily_rollups for event counts and analytics_user_days for active-user or retention questions. Use analytics_events only for bounded recent drill-downs with an explicit event_date or timestamp range. Aggregate, project only needed columns, and add a LIMIT for raw or high-cardinality reads; do not issue an unbounded raw-event scan or paginate a large cohort. An explicit all-time or lifetime request remains all-time, so do not invent a default lower time bound. Safe scoped results are cached for up to five minutes for this agent action. analytics_events columns include event_name, timestamp, event_date, user_id, anonymous_id, user_key, session_id, app, template, signed_in, url, path, hostname, referrer, properties, and context. analytics_event_daily_rollups columns include tenant_key, owner_email, org_id, event_date, event_name, app, template, and event_count. analytics_user_days columns include tenant_key, owner_email, org_id, event_date, and user_key. LLM observability events use event_name = '$ai_generation'; useful properties include $ai_trace_id/run_id, $ai_session_id/thread_id, $ai_model/model, $ai_provider/provider, $ai_input_tokens/input_tokens, $ai_output_tokens/output_tokens, cache_read_tokens, cache_write_tokens, cost_cents_x100, $ai_total_cost_usd/cost_usd, duration_ms/$ai_latency, status, tool_calls, successful_tools, failed_tools, tools, tools_truncated, delegated, delegation_protocol, caller_app, delegation_task_id, a2a_task_id, parent_run_id, parent_turn_id, and error_message/$ai_error. Agent Teams child runs use delegation_protocol = 'agent-team' and retain their own run_id while linking to the launching run through parent_run_id. The bounded tools array contains names, relative start times, durations, statuses, and coarse error classes only, never args or results; failed runs and interrupted tools remain queryable. session_recordings columns include id, session_id, user_id, anonymous_id, user_key, started_at, ended_at, duration_ms, chunk_count, event_count, page_count, error_count, rage_click_count, app, template, status, first_url, last_url, path, hostname, referrer, and metadata.",
+    "Query the built-in first-party Analytics source: events recorded through this app's analytics collector endpoint (/track), compact daily rollups, identifiable user-day rollups, and session replay summaries recorded through /api/analytics/replay. This source does not require an external provider connection. Use it for questions about app/site traffic, product events, template/app usage, conversions, session recordings, LLM/agent observability, model cost, token volume, latency, and other first-party data collected by this analytics app. Use source-specific actions such as BigQuery, GA4, Mixpanel, PostHog, or Amplitude when the user asks for those sources or the relevant data lives there. SQL may read analytics_events, analytics_event_daily_rollups, analytics_user_days, and session_recordings; session_replay_chunks is intentionally unavailable, and reads are automatically scoped to the current user/org. Prefer analytics_event_daily_rollups for event counts and analytics_user_days for active-user or retention questions. The rollups are backfilled from existing analytics_events when this schema is upgraded and are updated transactionally with new ingest. Use analytics_events only for bounded recent drill-downs with an explicit event_date or timestamp range. Aggregate, project only needed columns, and add a LIMIT for raw or high-cardinality reads; do not issue an unbounded raw-event scan or paginate a large cohort. An explicit all-time or lifetime request remains all-time, so do not invent a default lower time bound. Safe scoped results are cached for up to five minutes for this agent action. analytics_events columns include event_name, timestamp, event_date, user_id, anonymous_id, user_key, session_id, app, template, signed_in, url, path, hostname, referrer, properties, and context. analytics_event_daily_rollups columns include tenant_key, owner_email, org_id, event_date, event_name, app, template, and event_count. analytics_user_days columns include tenant_key, owner_email, org_id, event_date, and user_key. LLM observability events use event_name = '$ai_generation'; useful properties include $ai_trace_id/run_id, $ai_session_id/thread_id, $ai_model/model, $ai_provider/provider, $ai_input_tokens/input_tokens, $ai_output_tokens/output_tokens, cache_read_tokens, cache_write_tokens, cost_cents_x100, $ai_total_cost_usd/cost_usd, duration_ms/$ai_latency, status, tool_calls, successful_tools, failed_tools, tools, tools_truncated, delegated, delegation_protocol, caller_app, delegation_task_id, a2a_task_id, parent_run_id, parent_turn_id, and error_message/$ai_error. Agent Teams child runs use delegation_protocol = 'agent-team' and retain their own run_id while linking to the launching run through parent_run_id. The bounded tools array contains names, relative start times, durations, statuses, and coarse error classes only, never args or results; failed runs and interrupted tools remain queryable. session_recordings columns include id, session_id, user_id, anonymous_id, user_key, started_at, ended_at, duration_ms, chunk_count, event_count, page_count, error_count, rage_click_count, app, template, status, first_url, last_url, path, hostname, referrer, and metadata.",
   schema: z.object({
     sql: z
       .string()

package/corpus/templates/analytics/changelog/2026-08-05-historical-analytics-rollups-stay-complete-and-atomic.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-05
+---
+
+Historical analytics events now populate rollups, and new events update raw data and rollups atomically.

package/corpus/templates/analytics/server/lib/dashboard-report.ts

@@ -18,7 +18,6 @@ import {
   type DashboardReportCaptureOutcome,
   type DashboardReportSubscription,
 } from "./dashboard-report-subscriptions";
-import { ANALYTICS_DASHBOARD_REPORT_EMAIL_ID } from "./emails";
 
 const DATE_FILTER_TYPES: ReadonlySet<FilterType> = new Set([
   "date",
@@ -327,7 +326,6 @@ export async function sendDashboardReportSubscription(
         ? { attachments: rendered.attachments }
         : {}),
       timeoutMs: emailTimeoutMs,
-      templateId: ANALYTICS_DASHBOARD_REPORT_EMAIL_ID,
     });
   }
 

package/corpus/templates/analytics/server/lib/first-party-analytics-rollups.ts

@@ -73,12 +73,12 @@ function stableId(prefix: string, parts: readonly string[]): string {
 }
 
 /**
- * Upsert compact rollups after the corresponding raw analytics rows commit.
- * The caller owns the raw insert; this function deliberately does not read or
- * write analytics_events, so ingestion can choose its own failure boundary.
+ * Upsert compact rollups for a normalized batch. When ingestion passes its
+ * transaction through, raw events and rollups share one commit boundary.
  */
 export async function upsertFirstPartyAnalyticsRollups(
   rows: readonly NormalizedFirstPartyAnalyticsEventRow[],
+  transaction?: any,
 ): Promise<FirstPartyAnalyticsRollupResult> {
   const dailyRollups = new Map<string, DailyRollupRow>();
   const userDays = new Map<string, UserDayRow>();
@@ -140,8 +140,7 @@ export async function upsertFirstPartyAnalyticsRollups(
     };
   }
 
-  const db = getDb() as any;
-  await db.transaction(async (tx: any) => {
+  const writeRollups = async (tx: any) => {
     const dailyRows = [...dailyRollups.values()];
     await tx
       .insert(schema.analyticsEventDailyRollups)
@@ -172,7 +171,13 @@ export async function upsertFirstPartyAnalyticsRollups(
           ],
         });
     }
-  });
+  };
+
+  if (transaction) {
+    await writeRollups(transaction);
+  } else {
+    await (getDb() as any).transaction(writeRollups);
+  }
 
   return {
     eventCount: rows.length,

package/corpus/templates/analytics/server/lib/first-party-analytics.ts

@@ -505,24 +505,14 @@ export async function recordAnalyticsEvents(
   });
 
   if (rows.length) {
-    await db.insert(schema.analyticsEvents).values(rows);
-    await db
-      .update(schema.analyticsPublicKeys)
-      .set({ lastUsedAt: receivedAt })
-      .where(eq(schema.analyticsPublicKeys.id, key.id));
-
-    try {
-      await upsertFirstPartyAnalyticsRollups(rows);
-    } catch (error) {
-      // Raw events are the durable ingest record. Keep /track available when
-      // a rollup write is temporarily unavailable; the warning preserves the
-      // failure signal for operators without turning a successful raw ingest
-      // into a client retry and duplicate event batch.
-      console.warn(
-        "[first-party-analytics] Rollup update failed after raw ingest:",
-        error,
-      );
-    }
+    await db.transaction(async (tx: any) => {
+      await tx.insert(schema.analyticsEvents).values(rows);
+      await tx
+        .update(schema.analyticsPublicKeys)
+        .set({ lastUsedAt: receivedAt })
+        .where(eq(schema.analyticsPublicKeys.id, key.id));
+      await upsertFirstPartyAnalyticsRollups(rows, tx);
+    });
   }
 
   // Fork captured exceptions into the dedicated error-capture tables. This is

package/corpus/templates/analytics/server/plugins/db.ts

@@ -1,6 +1,8 @@
 import {
   ensureAdditiveColumns,
+  getDialect,
   getDbExec,
+  isPostgres,
   runMigrations,
 } from "@agent-native/core/db";
 
@@ -28,6 +30,169 @@ function isDrizzleTable(value: unknown): value is object {
 
 const schemaTables = Object.values(schema).filter(isDrizzleTable);
 
+const ANALYTICS_ROLLUP_BACKFILL_STATEMENTS = {
+  postgres: [
+    `
+      INSERT INTO analytics_event_daily_rollups (
+        id, tenant_key, owner_email, org_id, event_date, event_name,
+        app, template, event_count
+      )
+      SELECT
+        md5(random()::text || clock_timestamp()::text), tenant_key,
+        MIN(owner_email), MIN(org_id), event_date, event_name, app, template,
+        COUNT(*)::INTEGER
+      FROM (
+        SELECT
+          CASE
+            WHEN org_id IS NOT NULL AND org_id <> '' THEN 'org:' || org_id
+            ELSE 'user:' || owner_email
+          END AS tenant_key,
+          owner_email,
+          org_id,
+          COALESCE(NULLIF(event_date, ''), substr(timestamp, 1, 10)) AS event_date,
+          event_name,
+          COALESCE(app, '') AS app,
+          COALESCE(template, '') AS template
+        FROM analytics_events
+      ) AS historical_events
+      WHERE event_date <> ''
+      GROUP BY tenant_key, event_date, event_name, app, template
+      ON CONFLICT (tenant_key, event_date, event_name, app, template)
+      DO UPDATE SET event_count = GREATEST(
+        analytics_event_daily_rollups.event_count,
+        EXCLUDED.event_count
+      )
+    `,
+    `
+      INSERT INTO analytics_user_days (
+        id, tenant_key, owner_email, org_id, event_date, user_key
+      )
+      SELECT
+        md5(random()::text || clock_timestamp()::text), tenant_key,
+        owner_email, org_id, event_date, user_key
+      FROM (
+        SELECT DISTINCT
+          CASE
+            WHEN org_id IS NOT NULL AND org_id <> '' THEN 'org:' || org_id
+            ELSE 'user:' || owner_email
+          END AS tenant_key,
+          owner_email,
+          org_id,
+          COALESCE(NULLIF(event_date, ''), substr(timestamp, 1, 10)) AS event_date,
+          user_key
+        FROM analytics_events
+        WHERE user_key IS NOT NULL AND TRIM(user_key) <> ''
+      ) AS historical_user_days
+      WHERE event_date <> ''
+      ON CONFLICT (tenant_key, event_date, user_key) DO NOTHING
+    `,
+  ],
+  sqlite: [
+    `
+      INSERT INTO analytics_event_daily_rollups (
+        id, tenant_key, owner_email, org_id, event_date, event_name,
+        app, template, event_count
+      )
+      SELECT
+        lower(hex(randomblob(16))), tenant_key, MIN(owner_email), MIN(org_id),
+        event_date, event_name, app, template, COUNT(*)
+      FROM (
+        SELECT
+          CASE
+            WHEN org_id IS NOT NULL AND org_id <> '' THEN 'org:' || org_id
+            ELSE 'user:' || owner_email
+          END AS tenant_key,
+          owner_email,
+          org_id,
+          COALESCE(NULLIF(event_date, ''), substr(timestamp, 1, 10)) AS event_date,
+          event_name,
+          COALESCE(app, '') AS app,
+          COALESCE(template, '') AS template
+        FROM analytics_events
+      ) AS historical_events
+      WHERE event_date <> ''
+      GROUP BY tenant_key, event_date, event_name, app, template
+      ON CONFLICT (tenant_key, event_date, event_name, app, template)
+      DO UPDATE SET event_count = excluded.event_count
+    `,
+    `
+      INSERT INTO analytics_user_days (
+        id, tenant_key, owner_email, org_id, event_date, user_key
+      )
+      SELECT
+        lower(hex(randomblob(16))), tenant_key, owner_email, org_id,
+        event_date, user_key
+      FROM (
+        SELECT DISTINCT
+          CASE
+            WHEN org_id IS NOT NULL AND org_id <> '' THEN 'org:' || org_id
+            ELSE 'user:' || owner_email
+          END AS tenant_key,
+          owner_email,
+          org_id,
+          COALESCE(NULLIF(event_date, ''), substr(timestamp, 1, 10)) AS event_date,
+          user_key
+        FROM analytics_events
+        WHERE user_key IS NOT NULL AND TRIM(user_key) <> ''
+      ) AS historical_user_days
+      WHERE event_date <> ''
+      ON CONFLICT (tenant_key, event_date, user_key) DO NOTHING
+    `,
+  ],
+} as const;
+
+async function runHistoricalAnalyticsRollupBackfill(): Promise<void> {
+  const db = getDbExec();
+
+  if (isPostgres()) {
+    if (!db.transaction) {
+      throw new Error(
+        "Analytics rollup backfill requires a Postgres transaction",
+      );
+    }
+
+    await db.transaction(async (tx) => {
+      // Only one serverless instance should perform the expensive scan. A
+      // try-lock is intentional: competing cold starts fail fast instead of
+      // holding pooled Neon connections while waiting for the winner. The
+      // monotonic rollup upsert below keeps a live increment from being
+      // overwritten if ingest commits during the historical snapshot.
+      const lockResult = await tx.execute({
+        sql: "SELECT pg_try_advisory_xact_lock(hashtextextended(?, 0::bigint)) AS acquired",
+        args: ["agent-native:analytics-rollup-backfill"],
+      });
+      const acquired = lockResult.rows[0]?.acquired;
+      if (acquired !== true && acquired !== "t") {
+        throw new Error(
+          "Analytics rollup backfill is already running on another instance",
+        );
+      }
+      for (const statement of ANALYTICS_ROLLUP_BACKFILL_STATEMENTS.postgres) {
+        await tx.execute(statement);
+      }
+    });
+    return;
+  }
+
+  const statements = ANALYTICS_ROLLUP_BACKFILL_STATEMENTS.sqlite;
+  if (getDialect() === "d1") {
+    if (!db.atomicBatch) {
+      throw new Error("D1 analytics rollup backfill requires an atomic batch");
+    }
+    await db.atomicBatch(statements);
+    return;
+  }
+
+  if (!db.transaction) {
+    throw new Error(
+      "Analytics rollup backfill requires a database transaction",
+    );
+  }
+  await db.transaction(async (tx) => {
+    for (const statement of statements) await tx.execute(statement);
+  });
+}
+
 // Convention: every new migration below MUST set a unique `name:` slug (see
 // packages/core/src/db/migrations.ts for the full rationale). Version numbers
 // alone are not a safe identity across parallel branches that each extend
@@ -1367,6 +1532,15 @@ const runAnalyticsMigrations = runMigrations(
       name: "analytics-query-pressure-daily-key-idx",
       sql: `CREATE UNIQUE INDEX IF NOT EXISTS analytics_query_pressure_daily_key_idx ON analytics_query_pressure_daily (tenant_key, event_date, query_class)`,
     },
+    // Rebuild the compact analytics rollups from raw history once when the
+    // tables first ship. The run-only migration takes the same write lock as
+    // ingest so a live increment cannot be overwritten by its snapshot.
+    {
+      version: 132,
+      name: "analytics-rollups-historical-backfill",
+      sql: {},
+      run: runHistoricalAnalyticsRollupBackfill,
+    },
   ],
   { table: "analytics_migrations" },
 );

package/corpus/templates/calendar/app/components/calendar/OutOfOfficeEvent.tsx

@@ -112,48 +112,48 @@ export function OutOfOfficeEvent({
           }}
         />
       </div>
-      <div
-        data-out-of-office-trigger={event.id}
-        className={`pointer-events-auto absolute ${
-          isBeingDragged && isDragging ? "z-[100]" : "z-40"
-        }`}
-        style={{
-          top: `${top + 4}px`,
-          right: `${4 + (compactMarker ? markerIndex * 24 : 0)}px`,
-          left: compactMarker ? undefined : `${4 + markerIndex * 12}px`,
-        }}
+      <EventDetailPopover
+        event={event}
+        onDelete={onDelete}
+        isDraft={isDraft}
+        defaultOpen={defaultOpen}
+        onTitleSave={onTitleSave}
+        onDismissNew={onDismissNew}
+        onDraftUpdate={onDraftUpdate}
+        onDraftCreate={onDraftCreate}
+        onDraftDiscard={onDraftDiscard}
+        onOpenChange={onOpenChange}
       >
-        <EventDetailPopover
-          event={event}
-          onDelete={onDelete}
-          isDraft={isDraft}
-          defaultOpen={defaultOpen}
-          onTitleSave={onTitleSave}
-          onDismissNew={onDismissNew}
-          onDraftUpdate={onDraftUpdate}
-          onDraftCreate={onDraftCreate}
-          onDraftDiscard={onDraftDiscard}
-          onOpenChange={onOpenChange}
-        >
-          <button
-            onPointerDown={(pointerEvent) =>
-              onMovePointerDown?.(pointerEvent, startsOnDay)
+        <button
+          type="button"
+          data-out-of-office-trigger={event.id}
+          onPointerDown={(pointerEvent) =>
+            onMovePointerDown?.(pointerEvent, startsOnDay)
+          }
+          onClick={(clickEvent) => {
+            if (shouldSuppressClick?.()) {
+              clickEvent.preventDefault();
+              clickEvent.stopPropagation();
             }
-            onClick={(clickEvent) => {
-              if (shouldSuppressClick?.()) {
-                clickEvent.preventDefault();
-                clickEvent.stopPropagation();
-              }
-            }}
-            className={`flex h-5 max-w-full items-center truncate rounded-sm text-[10px] font-medium text-foreground outline-none transition-[filter,box-shadow] hover:brightness-110 focus-visible:ring-1 focus-visible:ring-ring focus-visible:ring-offset-1 ${
+          }}
+          className={`pointer-events-auto absolute inset-x-0 block border-0 bg-transparent p-0 text-left outline-none ${
+            canManipulate ? "cursor-grab" : ""
+          } ${isBeingDragged && isDragging ? "cursor-grabbing" : ""}`}
+          aria-label={`${label}: ${title}`}
+          style={{ top: `${top}px`, height: `${height}px` }}
+        >
+          <span
+            className={`pointer-events-auto absolute top-1 z-40 flex h-5 max-w-full items-center truncate rounded-sm text-[10px] font-medium text-foreground outline-none transition-[filter,box-shadow] hover:brightness-110 focus-within:ring-1 focus-within:ring-ring focus-within:ring-offset-1 ${
+              isBeingDragged && isDragging ? "z-[100] shadow-lg" : ""
+            } ${
               compactMarker
                 ? "w-5 justify-center px-0"
                 : "gap-1 px-1.5 text-left"
-            } ${canManipulate ? "cursor-grab" : ""} ${
-              isBeingDragged && isDragging ? "cursor-grabbing shadow-lg" : ""
             }`}
-            aria-label={`${label}: ${title}`}
+            aria-hidden="true"
             style={{
+              right: compactMarker ? `${4 + markerIndex * 24}px` : undefined,
+              left: compactMarker ? undefined : `${4 + markerIndex * 12}px`,
               backgroundColor: `color-mix(in srgb, ${color} 20%, hsl(var(--background)))`,
               boxShadow: `0 0 0 1px color-mix(in srgb, ${color} 34%, transparent)`,
             }}
@@ -164,9 +164,9 @@ export function OutOfOfficeEvent({
               style={{ color }}
             />
             {!compactMarker && <span className="truncate">{title}</span>}
-          </button>
-        </EventDetailPopover>
-      </div>
+          </span>
+        </button>
+      </EventDetailPopover>
       {canManipulate && (
         <div
           data-resize-handle="true"

package/corpus/templates/calendar/changelog/2026-08-05-out-of-office-blocks-now-open-from-their-scheduled-time-rang.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-05
+---
+
+Out-of-office blocks now open from their scheduled time range instead of creating a new event.