@agent-native/core 0.141.3 → 0.141.4

package/corpus/README.md

@@ -31,4 +31,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- template files: 7644
+- template files: 7678

package/corpus/templates/analytics/.agents/skills/analysis-workspace/SKILL.md

@@ -59,7 +59,7 @@ operation. The child must read that staged input before making provider calls.
   not re-page the provider endpoint to recreate the same corpus.
 - If the named staged input is missing or unreadable, stop with an explicit
   missing-input error. Do not silently fall back to a full provider sweep.
-- For more than 500 Gong records, do not use `gong-calls(exhaustive=true)`, a
+- For 500 or more Gong records, do not use `gong-calls(exhaustive=true)`, a
   per-call transcript loop, or a single `provider-api-request` `fetchAllPages`
   call as the analysis itself. If the term is a configured keyword tracker,
   stage `/calls/extensive` tracker results and reduce them with a Data Program

package/corpus/templates/analytics/actions/gong-calls.ts

@@ -203,12 +203,20 @@ function transcriptRowsByCallId(payload: unknown): Map<string, unknown> {
   return rows;
 }
 
-async function fetchTranscriptBatch(calls: GongCall[]): Promise<{
+async function fetchTranscriptBatch(
+  calls: GongCall[],
+  signal?: AbortSignal,
+): Promise<{
   payloads: Map<string, unknown>;
   errors: TranscriptSearchError[];
 }> {
   try {
-    const payload = await getCallTranscripts(calls.map((call) => call.id));
+    const payload = signal
+      ? await getCallTranscripts(
+          calls.map((call) => call.id),
+          { signal },
+        )
+      : await getCallTranscripts(calls.map((call) => call.id));
     const payloads = transcriptRowsByCallId(payload);
     const errors: TranscriptSearchError[] = [];
     for (const call of calls) {
@@ -223,6 +231,7 @@ async function fetchTranscriptBatch(calls: GongCall[]): Promise<{
     }
     return { payloads, errors };
   } catch (err) {
+    if (signal?.aborted) throw err;
     return {
       payloads: new Map(),
       errors: calls.map((call) => ({
@@ -235,7 +244,10 @@ async function fetchTranscriptBatch(calls: GongCall[]): Promise<{
   }
 }
 
-async function fetchTranscriptBatches(calls: GongCall[]): Promise<
+async function fetchTranscriptBatches(
+  calls: GongCall[],
+  signal?: AbortSignal,
+): Promise<
   Array<{
     calls: GongCall[];
     result: Awaited<ReturnType<typeof fetchTranscriptBatch>>;
@@ -257,7 +269,7 @@ async function fetchTranscriptBatches(calls: GongCall[]): Promise<
           .slice(index, index + TRANSCRIPT_BATCH_CONCURRENCY)
           .map(async (batch) => ({
             calls: batch,
-            result: await fetchTranscriptBatch(batch),
+            result: await fetchTranscriptBatch(batch, signal),
           })),
       )),
     );
@@ -270,6 +282,7 @@ async function searchTranscriptEvidence(
   query: string,
   scanLimit: number,
   maxChars: number,
+  signal?: AbortSignal,
 ): Promise<{
   inspectedCalls: number;
   matches: TranscriptSearchMatch[];
@@ -284,7 +297,7 @@ async function searchTranscriptEvidence(
   for (const {
     calls: batch,
     result: batchResult,
-  } of await fetchTranscriptBatches(callsToScan)) {
+  } of await fetchTranscriptBatches(callsToScan, signal)) {
     errors.push(...batchResult.errors);
 
     for (const call of batch) {
@@ -420,13 +433,14 @@ async function loadTranscriptEvidence(
   calls: GongCall[],
   limit: number,
   maxChars: number,
+  signal?: AbortSignal,
 ): Promise<TranscriptEvidence[]> {
   const evidence: TranscriptEvidence[] = [];
   const callsToLoad = calls.slice(0, limit);
   for (const {
     calls: batch,
     result: batchResult,
-  } of await fetchTranscriptBatches(callsToLoad)) {
+  } of await fetchTranscriptBatches(callsToLoad, signal)) {
     const errorByCallId = new Map(
       batchResult.errors.map((error) => [error.callId, error.error]),
     );
@@ -486,7 +500,7 @@ export default defineAction({
   // model round trips while still staying well below the model context limit.
   maxResultChars: 100_000,
   description:
-    "Query bounded Gong sales-call evidence. Pass --users for the user list, --transcript for one transcript, or --company for a bounded search by company/domain/person/email. Without --company, the action lists calls in the date window; set exhaustive=true for every page of a small bounded cohort (up to 500 records), not a broad org-wide export. For account-level transcript mention questions, transcriptQuery performs a case-insensitive local scan after batched transcript retrieval and returns coverage counts plus snippets; it is not Gong's server-side keyword search. Use includeTranscripts=true for bounded qualitative context. For broad keyword, tracker, cross-account, or absence-sensitive work, use provider-api-catalog/provider-api-docs, stage the raw Gong API response, then use query-staged-dataset or a Data Program; use provider-corpus-job only when raw transcript bodies are required.",
+    "Query bounded Gong sales-call evidence. Pass --users for the user list, --transcript for one transcript, or --company for a bounded search by company/domain/person/email. Without --company, the action lists calls in the date window; set exhaustive=true only for a small bounded cohort of fewer than 500 records, not a broad org-wide export. For account-level transcript mention questions, transcriptQuery performs a case-insensitive local scan after batched transcript retrieval and returns coverage counts plus snippets; it is not Gong's server-side keyword search. Use includeTranscripts=true for bounded qualitative context. For broad keyword, tracker, cross-account, or absence-sensitive work, use provider-api-catalog/provider-api-docs, stage the raw Gong API response, then use query-staged-dataset or a Data Program; use provider-corpus-job only when raw transcript bodies are required.",
   schema: z.object({
     users: cliBoolean.optional().describe("Set to true to list Gong users"),
     transcript: z.string().optional().describe("Call ID to get transcript"),
@@ -553,7 +567,7 @@ export default defineAction({
     exhaustive: cliBoolean
       .optional()
       .describe(
-        "Return EVERY matching call in the window instead of stopping at `limit`; without company, return every call page for a small bounded cohort of at most 500 records. Larger cohorts fail closed with guidance to use provider-api-request staging and query-staged-dataset or a Data Program. By default this is metadata-only. With includeTranscripts=true, transcripts are fetched in batches and explicit coverage is returned. For broad or absence-sensitive work, prefer the raw Gong API tracker/staging path plus query-staged-dataset or a Data Program; use provider-corpus-job for durable raw-transcript scans. Always bound this with after/before or a small days window.",
+        "Return EVERY matching call in the window instead of stopping at `limit`; without company, return every call page only for a small bounded cohort of fewer than 500 records. Cohorts at or above 500 fail closed with guidance to use provider-api-request staging and query-staged-dataset or a Data Program. By default this is metadata-only. With includeTranscripts=true, transcripts are fetched in batches and explicit coverage is returned. For broad or absence-sensitive work, prefer the raw Gong API tracker/staging path plus query-staged-dataset or a Data Program; use provider-corpus-job for durable raw-transcript scans. Always bound this with after/before or a small days window.",
       ),
     after: z
       .string()
@@ -569,12 +583,15 @@ export default defineAction({
       ),
   }),
   http: { method: "GET" },
-  run: async (args) => {
+  run: async (args, ctx) => {
+    const requestOptions = ctx?.signal ? { signal: ctx.signal } : undefined;
     if (args.users) {
       const users = await getUsers();
       return { users, total: users.length };
     } else if (args.transcript) {
-      const transcript = await getCallTranscript(args.transcript);
+      const transcript = requestOptions
+        ? await getCallTranscript(args.transcript, requestOptions)
+        : await getCallTranscript(args.transcript);
       const transcriptText = extractTranscriptText(
         transcript,
         args.transcriptMaxChars,
@@ -600,6 +617,7 @@ export default defineAction({
         exhaustive,
         ...(fromDateTime ? { fromDateTime } : {}),
         ...(toDateTime ? { toDateTime } : {}),
+        ...(requestOptions ?? {}),
       });
       const shouldLoadTranscripts = Boolean(args.includeTranscripts);
       const transcriptLimit = normalizeBoundedInt(
@@ -644,6 +662,7 @@ export default defineAction({
             transcriptQuery,
             transcriptScanLimit,
             transcriptSearchMaxChars,
+            requestOptions?.signal,
           )
         : undefined;
       const transcripts = shouldLoadTranscripts
@@ -651,6 +670,7 @@ export default defineAction({
             result.calls,
             transcriptLimit,
             boundedTranscriptExcerptMaxChars,
+            requestOptions?.signal,
           )
         : undefined;
       const transcriptErrors =
@@ -726,14 +746,30 @@ export default defineAction({
         new Date(Date.now() - days * 24 * 60 * 60 * 1000).toISOString();
       const toDateTime = normalizeGongDate(args.before, "end");
       const result = exhaustive
-        ? await getAllCalls({
-            fromDateTime,
-            ...(toDateTime ? { toDateTime } : {}),
-          })
-        : await getCalls({
-            fromDateTime,
-            ...(toDateTime ? { toDateTime } : {}),
-          });
+        ? requestOptions
+          ? await getAllCalls(
+              {
+                fromDateTime,
+                ...(toDateTime ? { toDateTime } : {}),
+              },
+              requestOptions,
+            )
+          : await getAllCalls({
+              fromDateTime,
+              ...(toDateTime ? { toDateTime } : {}),
+            })
+        : requestOptions
+          ? await getCalls(
+              {
+                fromDateTime,
+                ...(toDateTime ? { toDateTime } : {}),
+              },
+              requestOptions,
+            )
+          : await getCalls({
+              fromDateTime,
+              ...(toDateTime ? { toDateTime } : {}),
+            });
       const limited = limitGongCalls(result.calls, limit);
       const returnedCalls = exhaustive ? result.calls : limited.calls;
       const truncated =
@@ -776,6 +812,7 @@ export default defineAction({
             transcriptQuery,
             transcriptScanLimit,
             transcriptSearchMaxChars,
+            requestOptions?.signal,
           )
         : undefined;
       const transcripts = shouldLoadTranscripts
@@ -783,6 +820,7 @@ export default defineAction({
             returnedCalls,
             transcriptLimit,
             boundedTranscriptExcerptMaxChars,
+            requestOptions?.signal,
           )
         : undefined;
 

package/corpus/templates/analytics/changelog/2026-08-05-analytics-queries-keep-every-table-tenant-scoped.md

@@ -0,0 +1,6 @@
+---
+type: security
+date: 2026-08-05
+---
+
+Analytics dashboard queries keep every table tenant-scoped.

package/corpus/templates/analytics/changelog/2026-08-05-fixed-sign-in-and-dashboard-requests-failing-when-background.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-05
+---
+
+Fixed sign-in and dashboard requests failing when background jobs start

package/corpus/templates/analytics/changelog/2026-08-05-historical-rollups-stay-complete-while-live-events-arrive.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-05
+---
+
+Historical analytics rollups stay complete while live events arrive.

package/corpus/templates/analytics/server/db/schema.ts

@@ -299,6 +299,7 @@ export const analyticsQueryPressureDaily = table(
     tenantKey: text("tenant_key").notNull(),
     ownerEmail: text("owner_email").notNull(),
     orgId: text("org_id"),
+    /** UTC day bucket; lastSeenAt carries the timestamp for trailing-window reads. */
     eventDate: text("event_date").notNull(),
     queryClass: text("query_class").notNull(),
     slowQueryCount: integer("slow_query_count").notNull().default(0),

package/corpus/templates/analytics/server/lib/dashboard-report.ts

@@ -18,6 +18,7 @@ import {
   type DashboardReportCaptureOutcome,
   type DashboardReportSubscription,
 } from "./dashboard-report-subscriptions";
+import { ANALYTICS_DASHBOARD_REPORT_EMAIL_ID } from "./emails";
 
 const DATE_FILTER_TYPES: ReadonlySet<FilterType> = new Set([
   "date",
@@ -326,6 +327,7 @@ export async function sendDashboardReportSubscription(
         ? { attachments: rendered.attachments }
         : {}),
       timeoutMs: emailTimeoutMs,
+      templateId: ANALYTICS_DASHBOARD_REPORT_EMAIL_ID,
     });
   }
 

package/corpus/templates/analytics/server/lib/emails.ts

@@ -0,0 +1,51 @@
+/**
+ * Catalog entries for the transactional emails Analytics sends.
+ *
+ * Registered from `server/plugins/transactional-emails.ts` so Dispatch can list
+ * and preview them without the app having sent anything yet.
+ */
+
+import { defineTransactionalEmail } from "@agent-native/core/email-catalog";
+import { emailStrong, renderEmail } from "@agent-native/core/server";
+
+export const ANALYTICS_DASHBOARD_REPORT_EMAIL_ID = "analytics.dashboard-report";
+
+let registered = false;
+
+export function registerAnalyticsEmails(): void {
+  if (registered) return;
+  registered = true;
+
+  defineTransactionalEmail({
+    id: ANALYTICS_DASHBOARD_REPORT_EMAIL_ID,
+    name: "Scheduled dashboard report",
+    trigger:
+      "A dashboard report subscription comes due and at least one panel produced usable data. A run where every queried panel failed throws instead of mailing, and a degraded run is skipped when the subscription asks for complete reports only.",
+    recipientLabel: "Subscription recipients",
+    recipient:
+      "The normalized recipient list stored on the subscription. One email per address, all carrying the same rendered snapshot.",
+    senderLabel: "Default sender",
+    sender:
+      "The configured default sender. This call site sets no `from`, `fromName`, `replyTo`, or `appSender`.",
+    // The real renderer runs every panel query and rasterizes charts, so it
+    // cannot back a preview that must stay offline. This shows the frame a
+    // recipient sees; the panel body is whatever that run produced.
+    preview: () => ({
+      subject: "Daily dashboard: Growth overview — 3/4/2025",
+      ...renderEmail({
+        preheader: "Your daily Growth overview report is ready.",
+        heading: "Daily dashboard: Growth overview",
+        paragraphs: [
+          `This report renders each panel of ${emailStrong("Growth overview")} as of the run time, with charts drawn server-side and attached inline.`,
+          "Panels that could not be queried are called out in place rather than dropped, so a partial report never reads as a complete one.",
+        ],
+        cta: {
+          label: "Open dashboard",
+          url: "https://example.com/dashboards/dash_sample",
+        },
+        footer:
+          "You received this because you are on the recipient list for this dashboard report.",
+      }),
+    }),
+  });
+}

package/corpus/templates/analytics/server/lib/first-party-analytics-health.ts

@@ -73,10 +73,6 @@ function nowIso(): string {
   return new Date().toISOString();
 }
 
-function todayIsoDate(): string {
-  return nowIso().slice(0, 10);
-}
-
 function tenantKey(scope: AnalyticsScope): string {
   return scope.orgId ? `org:${scope.orgId}` : `user:${scope.userEmail}`;
 }
@@ -152,7 +148,8 @@ export async function recordFirstPartyAnalyticsQueryPressure(
   if (!shouldRecordPressure(event)) return;
 
   const durationMs = normalizedDurationMs(event.durationMs);
-  const eventDate = todayIsoDate();
+  const eventTimestamp = nowIso();
+  const eventDate = eventTimestamp.slice(0, 10);
   const key = tenantKey(scope);
   const table = schema.analyticsQueryPressureDaily;
   const db = getDb() as any;
@@ -174,7 +171,7 @@ export async function recordFirstPartyAnalyticsQueryPressure(
       errorCount: event.outcome === "error" ? 1 : 0,
       totalDurationMs: durationMs,
       maxDurationMs: durationMs,
-      lastSeenAt: nowIso(),
+      lastSeenAt: eventTimestamp,
     })
     .onConflictDoUpdate({
       target: [table.tenantKey, table.eventDate, table.queryClass],
@@ -184,7 +181,7 @@ export async function recordFirstPartyAnalyticsQueryPressure(
         errorCount: sql`${table.errorCount} + ${event.outcome === "error" ? 1 : 0}`,
         totalDurationMs: sql`${table.totalDurationMs} + ${durationMs}`,
         maxDurationMs: sql`CASE WHEN ${table.maxDurationMs} > ${durationMs} THEN ${table.maxDurationMs} ELSE ${durationMs} END`,
-        lastSeenAt: nowIso(),
+        lastSeenAt: eventTimestamp,
       },
     });
 }
@@ -250,9 +247,8 @@ export async function getFirstPartyAnalyticsHealth(
 ): Promise<FirstPartyAnalyticsHealth> {
   const now = new Date();
   const today = now.toISOString().slice(0, 10);
-  const since24h = new Date(now.getTime() - 86_400_000)
-    .toISOString()
-    .slice(0, 10);
+  const nowTimestamp = now.toISOString();
+  const since24h = new Date(now.getTime() - 86_400_000).toISOString();
   const keys = scope.orgId
     ? [`org:${scope.orgId}`, `user:${scope.userEmail}`]
     : [`user:${scope.userEmail}`];
@@ -284,8 +280,8 @@ export async function getFirstPartyAnalyticsHealth(
       .where(
         and(
           inArray(pressure.tenantKey, keys),
-          gte(pressure.eventDate, since24h),
-          lte(pressure.eventDate, today),
+          gte(pressure.lastSeenAt, since24h),
+          lte(pressure.lastSeenAt, nowTimestamp),
         ),
       ),
     bigQueryStatus(scope),

package/corpus/templates/analytics/server/lib/first-party-analytics-rollups.ts

@@ -23,6 +23,15 @@ export interface FirstPartyAnalyticsRollupResult {
   userDayCount: number;
 }
 
+/**
+ * Shared with the historical backfill so live ingest and migration work hold
+ * the same transaction-scoped Postgres lock while they update rollups.
+ */
+export const FIRST_PARTY_ANALYTICS_ROLLUP_LOCK_KEY =
+  "agent-native:analytics-rollup-backfill";
+export const FIRST_PARTY_ANALYTICS_ROLLUP_LOCK_SQL =
+  "SELECT pg_advisory_xact_lock(hashtextextended(?, 0::bigint))";
+
 interface DailyRollupRow {
   id: string;
   tenantKey: string;