@agent-native/core 0.149.5 → 0.151.0

package/corpus/templates/clips/desktop/src-tauri/src/native_speech.rs

@@ -144,7 +144,7 @@ pub(crate) mod macos {
         kAudioObjectPropertyElementMain, kAudioObjectPropertyScopeGlobal, kAudioObjectSystemObject,
         AudioObjectGetPropertyData, AudioObjectID, AudioObjectPropertyAddress,
     };
-    use objc2_foundation::{NSArray, NSError, NSLocale, NSString};
+    use objc2_foundation::{NSArray, NSBundle, NSError, NSLocale, NSString};
     use objc2_speech::{
         SFSpeechAudioBufferRecognitionRequest, SFSpeechRecognitionResult, SFSpeechRecognitionTask,
         SFSpeechRecognizer, SFSpeechRecognizerAuthorizationStatus,
@@ -154,6 +154,29 @@ pub(crate) mod macos {
 
     use screencapturekit::audio_devices::AudioInputDevice;
 
+    const SPEECH_USAGE_DESCRIPTION_KEY: &str = "NSSpeechRecognitionUsageDescription";
+    const SPEECH_USAGE_DESCRIPTION_ERROR: &str =
+        "Clips cannot start macOS speech recognition because the app bundle is missing NSSpeechRecognitionUsageDescription.";
+
+    pub(crate) fn has_speech_usage_description() -> bool {
+        let bundle = NSBundle::mainBundle();
+        let Some(info) = bundle.infoDictionary() else {
+            return false;
+        };
+        let key = NSString::from_str(SPEECH_USAGE_DESCRIPTION_KEY);
+        info.objectForKey(&*key)
+            .and_then(|value| value.downcast::<NSString>().ok())
+            .is_some_and(|value| !value.is_empty())
+    }
+
+    fn ensure_speech_usage_description() -> Result<(), String> {
+        if has_speech_usage_description() {
+            Ok(())
+        } else {
+            Err(SPEECH_USAGE_DESCRIPTION_ERROR.into())
+        }
+    }
+
     /// Who owns an in-flight `SpeechSession`. Meetings fall back to this
     /// mic-only engine when whisper fails; a Fn/dictation press must not be
     /// able to silently kill a meeting's live capture (D10). Priority rule:
@@ -416,6 +439,11 @@ pub(crate) mod macos {
     /// system has an answer. The handler itself only sends a value on a
     /// channel; no ObjC interop, no UI work.
     fn ensure_authorized() -> Result<(), String> {
+        // macOS aborts the process, rather than returning an error, when
+        // Speech.framework is touched without this usage description. This
+        // guard keeps `tauri dev` and malformed bundles recoverable.
+        ensure_speech_usage_description()?;
+
         // Fast path: already known.
         let current = unsafe { SFSpeechRecognizer::authorizationStatus() };
         if current == SFSpeechRecognizerAuthorizationStatus::Authorized {
@@ -1548,6 +1576,20 @@ pub(crate) mod macos {
         Ok(())
     }
 
+    pub fn shutdown() {
+        let session = match session_slot().lock() {
+            Ok(mut slot) => slot.take(),
+            Err(poisoned) => poisoned.into_inner().take(),
+        };
+        if let Some(session) = session {
+            session.cancelled.store(true, Ordering::SeqCst);
+            session.stopped.store(true, Ordering::SeqCst);
+            unsafe { session.task.cancel() };
+            stop_engine_and_remove_tap(&session);
+        }
+        clear_warmed_raw_mic_engine();
+    }
+
     #[cfg(test)]
     mod tests {
         use super::{native_speech_voice_processing_mode, MicVoiceProcessingMode, SessionOwner};
@@ -1569,3 +1611,8 @@ pub(crate) mod macos {
         }
     }
 }
+
+pub fn shutdown() {
+    #[cfg(target_os = "macos")]
+    macos::shutdown();
+}

package/corpus/templates/clips/desktop/src-tauri/src/permission_status.rs

@@ -75,6 +75,9 @@ mod macos {
     }
 
     fn check_speech() -> bool {
+        if !crate::native_speech::macos::has_speech_usage_description() {
+            return false;
+        }
         unsafe {
             SFSpeechRecognizer::authorizationStatus()
                 == SFSpeechRecognizerAuthorizationStatus::Authorized

package/corpus/templates/clips/desktop/src-tauri/src/whisper_speech.rs

@@ -123,6 +123,11 @@ pub async fn whisper_transcription_stop(app: AppHandle) -> Result<(), String> {
     }
 }
 
+pub fn shutdown(app: &AppHandle) {
+    #[cfg(target_os = "macos")]
+    macos::stop(app);
+}
+
 #[tauri::command]
 pub async fn whisper_transcription_reset_timeline() -> Result<(), String> {
     #[cfg(target_os = "macos")]

package/corpus/templates/clips/server/plugins/auth.ts

@@ -5,6 +5,9 @@ import { PRERENDERED_PUBLIC_PAGE_PATHS } from "../../shared/prerendered-public-p
 // Clips has public share pages, embeds, and view-event tracking that must
 // reach unauthenticated viewers. Everything else sits behind auth.
 export default createAuthPlugin({
+  // Keep the native tray token and the Better Auth cookie useful between
+  // infrequent recording sessions without making them permanent.
+  maxAge: 60 * 60 * 24 * 90,
   // Clips owns `/_agent-native/google/*` so the same registered Google
   // callback can handle both normal sign-in and the Calendar connect flow.
   mountGoogleOAuthRoutes: false,

package/corpus/templates/content/.agents/skills/delegate-to-agent/SKILL.md

@@ -49,6 +49,34 @@ sendToAgentChat({
 });
 ```
 
+### Keep user text separate from injected context
+
+Treat the visible `message` as the user's request or the shortest clear
+description of an app-initiated operation. Put context the user did not type —
+IDs, URLs, filenames, current selection or screen state, serialized records,
+upload instructions, and bounded source excerpts — in the `context` field.
+`context` is model input carried through the agent turn; it is stripped from
+the rendered user message, so do not concatenate it into `message` with labels,
+blank-line sections, or `<context>` tags yourself.
+
+Use the related surface for each kind of supporting input:
+
+| Surface | Use for |
+| --- | --- |
+| `message` | User-authored intent or a concise app action description |
+| `context` | Derived metadata and bounded text needed to carry out that intent |
+| `setAgentChatContextItem` | Context staged for a later user-submitted prompt; keep it keyed so updates replace stale context |
+| `images`, `referenceImagePaths`, attachments | Binary or visual inputs; describe only the handling instructions in `context` |
+
+If an app builds a prompt from a form, selection, upload, or editor state, keep
+the visible message short and pass the assembled details as `context`. Preserve
+the user's actual freeform text in `message` when it is the request; do not
+restate it as metadata in `context` unless the agent needs a structured copy.
+
+This boundary applies to auto-submitted turns and prefills. A hidden context
+field is not a license to send unbounded records or secrets: cap excerpts,
+prefer stable IDs and URLs, and use an action or resource lookup for full data.
+
 **From the UI, in the background:**
 
 ```ts

package/corpus/templates/content/.agents/skills/frontend-design/SKILL.md

@@ -168,6 +168,11 @@ the useful information remains dense and scannable.
 - Do not build custom dropdowns, menus, popovers, modals, or confirmations with manual absolute positioning and click-outside effects.
 - Never use browser dialogs (`window.alert`, `window.confirm`, `window.prompt`). Use `AlertDialog`, `Dialog`, or app-specific confirmation UI.
 - Use Tabler icons for all first-party UI icons. Do not add Lucide, Heroicons, inline SVG icon sets, or emoji icons.
+- Never guess a Tabler icon name. Names like `IconPartyPopper` or `IconConfettiCannon` feel
+  plausible but don't exist and crash Vite with a "Named export not found" error. Before importing
+  an icon you haven't used elsewhere in this app, confirm it exists by grepping
+  `node_modules/@tabler/icons-react/dist/tabler-icons-react.d.ts` (or the package's icon list)
+  for the exact name, and pick the closest real match if your first guess isn't there.
 - Keep inline help/info glyphs next to labels at `size-3` (12px) or smaller than the adjacent text. Preserve a larger hit area on the trigger, not the glyph. Use `guard:allow-large-help-icon` only for deliberate heading documentation or menu action exceptions.
 - Use `useActionQuery` and `useActionMutation` from `@agent-native/core/client` for action-backed UI. Standard CRUD should go through actions, not custom `/api/` routes.
 - Keep UI optimistic where possible: update cache and navigation immediately, then reconcile or roll back on mutation result.

package/corpus/templates/content/actions/_document-discovery-query.ts

@@ -0,0 +1,127 @@
+import { accessFilter } from "@agent-native/core/sharing";
+import {
+  and,
+  eq,
+  exists,
+  isNotNull,
+  isNull,
+  notExists,
+  or,
+  type SQL,
+} from "drizzle-orm";
+
+import { getDb, schema } from "../server/db/index.js";
+import { documentDiscoveryFilter } from "../server/lib/documents.js";
+
+export const DOCUMENT_DISCOVERY_MAX_LIMIT = 200;
+export const DOCUMENT_DISCOVERY_DEFAULT_LIMIT = 50;
+
+export type DocumentDiscoveryType = "page" | "database";
+
+export interface DocumentDiscoveryFilters {
+  userEmail: string | null | undefined;
+  authorizedOrgIds: string[];
+  exactTitle?: string;
+  parentId?: string | null;
+  spaceId?: string;
+  documentType?: DocumentDiscoveryType;
+  additional?: SQL;
+}
+
+export function documentDiscoveryWhere({
+  userEmail,
+  authorizedOrgIds,
+  exactTitle,
+  parentId,
+  spaceId,
+  documentType,
+  additional,
+}: DocumentDiscoveryFilters) {
+  const db = getDb();
+  const accessContexts = [
+    { userEmail: userEmail ?? undefined },
+    ...authorizedOrgIds.map((orgId) => ({
+      userEmail: userEmail ?? undefined,
+      orgId,
+    })),
+  ];
+  const activeDatabaseDocument = db
+    .select({ id: schema.contentDatabases.id })
+    .from(schema.contentDatabases)
+    .where(
+      and(
+        eq(schema.contentDatabases.documentId, schema.documents.id),
+        isNull(schema.contentDatabases.deletedAt),
+      ),
+    );
+  const deletedDatabaseDocument = db
+    .select({ id: schema.contentDatabases.id })
+    .from(schema.contentDatabases)
+    .where(
+      and(
+        eq(schema.contentDatabases.documentId, schema.documents.id),
+        isNotNull(schema.contentDatabases.deletedAt),
+      ),
+    );
+  const deletedDatabaseMembership = db
+    .select({ id: schema.contentDatabaseItems.id })
+    .from(schema.contentDatabaseItems)
+    .innerJoin(
+      schema.contentDatabases,
+      eq(schema.contentDatabases.id, schema.contentDatabaseItems.databaseId),
+    )
+    .where(
+      and(
+        eq(schema.contentDatabaseItems.documentId, schema.documents.id),
+        isNotNull(schema.contentDatabases.deletedAt),
+      ),
+    );
+
+  return and(
+    or(
+      ...accessContexts.map((context) =>
+        accessFilter(schema.documents, schema.documentShares, context),
+      ),
+    ),
+    isNull(schema.documents.trashedAt),
+    documentDiscoveryFilter({
+      userEmail,
+      orgIds: authorizedOrgIds,
+    }),
+    notExists(deletedDatabaseDocument),
+    notExists(deletedDatabaseMembership),
+    exactTitle === undefined
+      ? undefined
+      : eq(schema.documents.title, exactTitle),
+    parentId === undefined
+      ? undefined
+      : parentId === null
+        ? isNull(schema.documents.parentId)
+        : eq(schema.documents.parentId, parentId),
+    spaceId === undefined ? undefined : eq(schema.documents.spaceId, spaceId),
+    documentType === "database"
+      ? exists(activeDatabaseDocument)
+      : documentType === "page"
+        ? notExists(activeDatabaseDocument)
+        : undefined,
+    additional,
+  );
+}
+
+export function documentDiscoveryPagination(args: {
+  offset: number;
+  limit: number;
+  totalItems: number;
+  returnedItems: number;
+}) {
+  const nextOffset = args.offset + args.returnedItems;
+  const hasMore = nextOffset < args.totalItems;
+  return {
+    offset: args.offset,
+    limit: args.limit,
+    totalItems: args.totalItems,
+    returnedItems: args.returnedItems,
+    hasMore,
+    nextOffset: hasMore ? nextOffset : null,
+  };
+}