@agent-native/core 0.149.6 → 0.151.0

package/corpus/templates/clips/desktop/src/lib/updater.ts

@@ -31,6 +31,11 @@ let lastCheckStartedAt = 0;
 
 const UPDATE_CHECK_INTERVAL_MS = 60 * 60 * 1000;
 const UPDATE_FOCUS_CHECK_MIN_INTERVAL_MS = 15 * 60 * 1000;
+const UPDATE_RETRY_DELAYS_MS = [1000, 3000];
+
+function waitForRetry(delayMs: number) {
+  return new Promise<void>((resolve) => setTimeout(resolve, delayMs));
+}
 
 function canRunUpdateChecks() {
   // Dev and local release builds are for testing the current checkout. Do not
@@ -43,6 +48,44 @@ function setStatus(next: UpdateStatus) {
   for (const l of listeners) l(next);
 }
 
+async function runCheckAttempt(staged: string | null) {
+  if (!staged) setStatus({ state: "checking" });
+  const update = await check();
+  if (!update) {
+    // The endpoint answering "current" while a newer bundle sits staged is a
+    // contradiction, not a reason to drop the download. Keep it staged.
+    if (!staged) setStatus({ state: "not-available" });
+    return;
+  }
+  if (staged && update.version === staged) return;
+  const version = update.version;
+  const notes = update.body ?? undefined;
+  setStatus({ state: "available", version, notes });
+
+  // Download ONLY — do not install here. On macOS `install` swaps the .app
+  // bundle on disk while this process keeps running, which invalidates the
+  // running process's Screen Recording (TCC) grant and breaks capture until
+  // relaunch. We defer the swap to `installAndRestart()` so a downloaded-but-
+  // not-yet-installed update leaves the running app fully functional; the
+  // user records normally until they choose to restart.
+  let total = 0;
+  let downloaded = 0;
+  await update.download((event) => {
+    if (event.event === "Started") {
+      total = event.data.contentLength ?? 0;
+      downloaded = 0;
+      setStatus({ state: "downloading", version, notes, percent: 0 });
+    } else if (event.event === "Progress") {
+      downloaded += event.data.chunkLength;
+      const percent =
+        total > 0 ? Math.min(100, Math.round((downloaded / total) * 100)) : 0;
+      setStatus({ state: "downloading", version, notes, percent });
+    }
+  });
+  pendingUpdate = update;
+  setStatus({ state: "downloaded", version, notes });
+}
+
 async function runCheck() {
   if (checkInFlight) return checkInFlight;
 
@@ -56,44 +99,16 @@ async function runCheck() {
   lastCheckStartedAt = Date.now();
   checkInFlight = (async () => {
     try {
-      if (!staged) setStatus({ state: "checking" });
-      const update = await check();
-      if (!update) {
-        // The endpoint answering "current" while a newer bundle sits staged is
-        // a contradiction, not a reason to drop the download. Keep it staged.
-        if (!staged) setStatus({ state: "not-available" });
-        return;
-      }
-      if (staged && update.version === staged) return;
-      pendingUpdate = update;
-      const version = update.version;
-      const notes = update.body ?? undefined;
-      setStatus({ state: "available", version, notes });
-
-      // Download ONLY — do not install here. On macOS `install` swaps the .app
-      // bundle on disk while this process keeps running, which invalidates the
-      // running process's Screen Recording (TCC) grant and breaks capture until
-      // relaunch. We defer the swap to `installAndRestart()` so a downloaded-but-
-      // not-yet-installed update leaves the running app fully functional; the
-      // user records normally until they choose to restart.
-      let total = 0;
-      let downloaded = 0;
-      await update.download((event) => {
-        if (event.event === "Started") {
-          total = event.data.contentLength ?? 0;
-          downloaded = 0;
-          setStatus({ state: "downloading", version, notes, percent: 0 });
-        } else if (event.event === "Progress") {
-          downloaded += event.data.chunkLength;
-          const percent =
-            total > 0
-              ? Math.min(100, Math.round((downloaded / total) * 100))
-              : 0;
-          setStatus({ state: "downloading", version, notes, percent });
-        } else if (event.event === "Finished") {
-          setStatus({ state: "downloaded", version, notes });
+      for (let attempt = 0; ; attempt += 1) {
+        try {
+          await runCheckAttempt(staged);
+          return;
+        } catch (err) {
+          const delay = UPDATE_RETRY_DELAYS_MS[attempt];
+          if (delay === undefined) throw err;
+          await waitForRetry(delay);
         }
-      });
+      }
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       setStatus({ state: "error", message });

package/corpus/templates/clips/desktop/src/styles.css

@@ -1010,8 +1010,7 @@ body[data-clips-route="recording-pill"] #root {
   line-height: 1;
 }
 
-.readiness-action svg,
-.rewind-home-state svg {
+.readiness-action svg {
   width: 11px;
   height: 11px;
 }
@@ -1386,110 +1385,6 @@ body[data-clips-route="recording-pill"] #root {
   font-size: 11px;
 }
 
-/* Rewind is a calm everyday status first; configuration is a drill-in. */
-.rewind-home-card {
-  display: grid;
-  gap: 0;
-  padding: 0;
-  border: none;
-  border-radius: 0;
-  background: transparent;
-}
-
-.rewind-home-summary {
-  display: grid;
-  grid-template-columns: minmax(0, 1fr) auto;
-  align-items: center;
-  gap: 8px;
-  width: 100%;
-  min-height: 36px;
-  padding: 7px 12px;
-  border: none;
-  border-radius: var(--radius-sm);
-  background: transparent;
-  color: var(--fg-muted);
-  cursor: pointer;
-  text-align: left;
-  transition: color 120ms;
-}
-
-.rewind-home-summary:hover,
-.rewind-home-summary:focus-visible {
-  color: var(--fg);
-}
-
-.rewind-home-summary:focus-visible {
-  outline: none;
-  box-shadow: 0 0 0 3px var(--brand-ring);
-}
-
-.rewind-home-title {
-  font-size: 13px;
-  font-weight: 500;
-  line-height: 1;
-}
-
-.rewind-home-state {
-  display: inline-flex;
-  align-items: center;
-  gap: 4px;
-  color: inherit;
-  font-size: 11px;
-  font-weight: 600;
-  line-height: 1;
-}
-
-.rewind-home-details {
-  display: grid;
-  gap: 10px;
-  padding: 0 12px 10px;
-}
-
-.rewind-home-details p {
-  margin: 0;
-  color: var(--fg-muted);
-  font-size: 11px;
-  line-height: 1.4;
-}
-
-.rewind-home-detail-actions {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  gap: 10px;
-}
-
-.rewind-home-controls {
-  display: inline-flex;
-  align-items: center;
-  gap: 8px;
-  margin-left: auto;
-}
-
-.rewind-docs-link {
-  display: inline-flex;
-  align-items: center;
-  gap: 4px;
-  padding: 0;
-  border: none;
-  background: transparent;
-  color: var(--fg-muted);
-  cursor: pointer;
-  font-size: 11px;
-  font-weight: 600;
-  white-space: nowrap;
-}
-
-.rewind-docs-link:hover {
-  color: var(--fg);
-}
-
-.rewind-docs-link:focus-visible {
-  outline: none;
-  box-shadow: 0 0 0 3px var(--brand-ring);
-  border-radius: 4px;
-}
-
 .rewind-settings-entry-main {
   display: grid;
   grid-template-columns: auto minmax(0, 1fr);
@@ -1497,7 +1392,6 @@ body[data-clips-route="recording-pill"] #root {
   gap: 9px;
 }
 
-.rewind-home-lock-note,
 .rewind-capture-lock-note {
   margin: 0;
   color: var(--fg-muted);
@@ -1511,28 +1405,6 @@ body[data-clips-route="recording-pill"] #root {
   background: var(--surface);
 }
 
-.rewind-agent-prompt-copy {
-  width: 28px;
-  height: 28px;
-  display: grid;
-  place-items: center;
-  padding: 0;
-  border: none;
-  border-radius: 7px;
-  background: transparent;
-  color: var(--fg-muted);
-  cursor: pointer;
-}
-
-.rewind-agent-prompt-copy:hover {
-  color: var(--fg);
-}
-
-.rewind-agent-prompt-copy:focus-visible {
-  outline: none;
-  box-shadow: 0 0 0 3px var(--brand-ring);
-}
-
 .rewind-home-dot {
   width: 9px;
   height: 9px;
@@ -1548,38 +1420,6 @@ body[data-clips-route="recording-pill"] #root {
   box-shadow: 0 0 0 4px color-mix(in srgb, var(--status-ok) 15%, transparent);
 }
 
-.rewind-home-actions {
-  display: grid;
-  grid-template-columns: repeat(3, minmax(0, 1fr));
-  gap: 6px;
-}
-
-.rewind-home-actions button {
-  min-width: 0;
-  min-height: 31px;
-  display: inline-flex;
-  align-items: center;
-  justify-content: center;
-  gap: 5px;
-  border: 1px solid var(--border-strong);
-  border-radius: var(--radius-sm);
-  background: var(--bg);
-  color: var(--fg);
-  cursor: pointer;
-  font-size: 10.5px;
-  font-weight: 600;
-}
-
-.rewind-home-actions button:hover:not(:disabled) {
-  background: var(--surface-hover);
-}
-
-.rewind-home-actions button:disabled {
-  opacity: 0.42;
-  cursor: default;
-}
-
-.rewind-home-actions button:focus-visible,
 .rewind-consent-choices button:focus-visible,
 .rewind-consent-primary:focus-visible,
 .rewind-quiet-button:focus-visible,
@@ -1594,11 +1434,6 @@ body[data-clips-route="recording-pill"] #root {
   box-shadow: 0 0 0 3px var(--brand-ring);
 }
 
-.rewind-home-actions .icon {
-  width: 14px;
-  height: 14px;
-}
-
 .rewind-consent {
   min-height: 430px;
   align-items: center;

package/corpus/templates/clips/desktop/src-tauri/Cargo.toml

@@ -99,6 +99,8 @@ unicode-segmentation = "1.13"
 # Powers the "browser" voice-dictation provider (free, instant, no API
 # key, no server round-trip — same engine WisprFlow uses for offline).
 objc2-foundation = { version = "0.3", features = [
+  "NSBundle",
+  "NSDictionary",
   "NSString",
   "NSError",
   "NSLocale",

package/corpus/templates/clips/desktop/src-tauri/Info.plist

@@ -8,6 +8,10 @@
     <string>Clips uses your microphone to record audio with screen recordings.</string>
     <key>NSScreenCaptureUsageDescription</key>
     <string>Clips records your screen and system audio when you start a Clip.</string>
+    <key>NSCalendarsUsageDescription</key>
+    <string>Clips uses your calendars to show upcoming meetings and offer meeting capture.</string>
+    <key>NSCalendarsFullAccessUsageDescription</key>
+    <string>Clips uses your calendars to show upcoming meetings and offer meeting capture.</string>
     <key>NSSpeechRecognitionUsageDescription</key>
     <string>Clips uses speech recognition for on-device voice dictation.</string>
     <key>NSAccessibilityUsageDescription</key>

package/corpus/templates/clips/desktop/src-tauri/src/eventkit.rs

@@ -73,13 +73,38 @@ mod macos {
     use objc2::rc::Retained;
     use objc2::runtime::{AnyClass, AnyObject, Bool};
     use objc2::{class, msg_send};
-    use objc2_foundation::{NSArray, NSString};
+    use objc2_foundation::{NSArray, NSBundle, NSString};
     use tauri::AppHandle;
 
     use super::EventKitEvent;
 
     /// EKEntityType::Event == 0
     const EK_ENTITY_TYPE_EVENT: usize = 0;
+    const CALENDAR_USAGE_DESCRIPTION_KEYS: [&str; 2] = [
+        "NSCalendarsUsageDescription",
+        "NSCalendarsFullAccessUsageDescription",
+    ];
+
+    fn has_calendar_usage_descriptions() -> bool {
+        let bundle = NSBundle::mainBundle();
+        let Some(info) = bundle.infoDictionary() else {
+            return false;
+        };
+        CALENDAR_USAGE_DESCRIPTION_KEYS.iter().all(|key| {
+            let key = NSString::from_str(key);
+            info.objectForKey(&*key)
+                .and_then(|value| value.downcast::<NSString>().ok())
+                .is_some_and(|value| !value.is_empty())
+        })
+    }
+
+    fn ensure_calendar_usage_descriptions() -> Result<(), String> {
+        if has_calendar_usage_descriptions() {
+            Ok(())
+        } else {
+            Err("Clips cannot access macOS calendars because the app bundle is missing calendar usage descriptions.".into())
+        }
+    }
 
     /// Returns Some(NSObject*) for the given class name, or None if the
     /// runtime doesn't know about it (e.g. the EventKit framework is not
@@ -104,6 +129,7 @@ mod macos {
     }
 
     pub async fn request_access_impl(_app: AppHandle) -> Result<bool, String> {
+        ensure_calendar_usage_descriptions()?;
         let store =
             unsafe { new_event_store() }.ok_or_else(|| "EventKit not available".to_string())?;
         let (tx, rx) = mpsc::sync_channel::<bool>(1);
@@ -141,6 +167,7 @@ mod macos {
         _app: AppHandle,
         within_hours: u32,
     ) -> Result<Vec<EventKitEvent>, String> {
+        ensure_calendar_usage_descriptions()?;
         unsafe {
             let store = new_event_store().ok_or_else(|| "EventKit not available".to_string())?;
 

package/corpus/templates/clips/desktop/src-tauri/src/lib.rs

@@ -553,6 +553,8 @@ pub fn run() {
             // otherwise skips Rust destructors — make sure a live
             // `screencapture` fallback child doesn't survive us.
             if let tauri::RunEvent::Exit = _event {
+                whisper_speech::shutdown(_app_handle);
+                native_speech::shutdown();
                 let state = _app_handle.state::<native_screen::NativeFullscreenRecordingState>();
                 native_screen::kill_active_screencapture_child(&state);
             }

package/corpus/templates/clips/desktop/src-tauri/src/native_speech.rs

@@ -144,7 +144,7 @@ pub(crate) mod macos {
         kAudioObjectPropertyElementMain, kAudioObjectPropertyScopeGlobal, kAudioObjectSystemObject,
         AudioObjectGetPropertyData, AudioObjectID, AudioObjectPropertyAddress,
     };
-    use objc2_foundation::{NSArray, NSError, NSLocale, NSString};
+    use objc2_foundation::{NSArray, NSBundle, NSError, NSLocale, NSString};
     use objc2_speech::{
         SFSpeechAudioBufferRecognitionRequest, SFSpeechRecognitionResult, SFSpeechRecognitionTask,
         SFSpeechRecognizer, SFSpeechRecognizerAuthorizationStatus,
@@ -154,6 +154,29 @@ pub(crate) mod macos {
 
     use screencapturekit::audio_devices::AudioInputDevice;
 
+    const SPEECH_USAGE_DESCRIPTION_KEY: &str = "NSSpeechRecognitionUsageDescription";
+    const SPEECH_USAGE_DESCRIPTION_ERROR: &str =
+        "Clips cannot start macOS speech recognition because the app bundle is missing NSSpeechRecognitionUsageDescription.";
+
+    pub(crate) fn has_speech_usage_description() -> bool {
+        let bundle = NSBundle::mainBundle();
+        let Some(info) = bundle.infoDictionary() else {
+            return false;
+        };
+        let key = NSString::from_str(SPEECH_USAGE_DESCRIPTION_KEY);
+        info.objectForKey(&*key)
+            .and_then(|value| value.downcast::<NSString>().ok())
+            .is_some_and(|value| !value.is_empty())
+    }
+
+    fn ensure_speech_usage_description() -> Result<(), String> {
+        if has_speech_usage_description() {
+            Ok(())
+        } else {
+            Err(SPEECH_USAGE_DESCRIPTION_ERROR.into())
+        }
+    }
+
     /// Who owns an in-flight `SpeechSession`. Meetings fall back to this
     /// mic-only engine when whisper fails; a Fn/dictation press must not be
     /// able to silently kill a meeting's live capture (D10). Priority rule:
@@ -416,6 +439,11 @@ pub(crate) mod macos {
     /// system has an answer. The handler itself only sends a value on a
     /// channel; no ObjC interop, no UI work.
     fn ensure_authorized() -> Result<(), String> {
+        // macOS aborts the process, rather than returning an error, when
+        // Speech.framework is touched without this usage description. This
+        // guard keeps `tauri dev` and malformed bundles recoverable.
+        ensure_speech_usage_description()?;
+
         // Fast path: already known.
         let current = unsafe { SFSpeechRecognizer::authorizationStatus() };
         if current == SFSpeechRecognizerAuthorizationStatus::Authorized {
@@ -1548,6 +1576,20 @@ pub(crate) mod macos {
         Ok(())
     }
 
+    pub fn shutdown() {
+        let session = match session_slot().lock() {
+            Ok(mut slot) => slot.take(),
+            Err(poisoned) => poisoned.into_inner().take(),
+        };
+        if let Some(session) = session {
+            session.cancelled.store(true, Ordering::SeqCst);
+            session.stopped.store(true, Ordering::SeqCst);
+            unsafe { session.task.cancel() };
+            stop_engine_and_remove_tap(&session);
+        }
+        clear_warmed_raw_mic_engine();
+    }
+
     #[cfg(test)]
     mod tests {
         use super::{native_speech_voice_processing_mode, MicVoiceProcessingMode, SessionOwner};
@@ -1569,3 +1611,8 @@ pub(crate) mod macos {
         }
     }
 }
+
+pub fn shutdown() {
+    #[cfg(target_os = "macos")]
+    macos::shutdown();
+}

package/corpus/templates/clips/desktop/src-tauri/src/permission_status.rs

@@ -75,6 +75,9 @@ mod macos {
     }
 
     fn check_speech() -> bool {
+        if !crate::native_speech::macos::has_speech_usage_description() {
+            return false;
+        }
         unsafe {
             SFSpeechRecognizer::authorizationStatus()
                 == SFSpeechRecognizerAuthorizationStatus::Authorized

package/corpus/templates/clips/desktop/src-tauri/src/whisper_speech.rs

@@ -123,6 +123,11 @@ pub async fn whisper_transcription_stop(app: AppHandle) -> Result<(), String> {
     }
 }
 
+pub fn shutdown(app: &AppHandle) {
+    #[cfg(target_os = "macos")]
+    macos::stop(app);
+}
+
 #[tauri::command]
 pub async fn whisper_transcription_reset_timeline() -> Result<(), String> {
     #[cfg(target_os = "macos")]

package/corpus/templates/clips/server/plugins/auth.ts

@@ -5,6 +5,9 @@ import { PRERENDERED_PUBLIC_PAGE_PATHS } from "../../shared/prerendered-public-p
 // Clips has public share pages, embeds, and view-event tracking that must
 // reach unauthenticated viewers. Everything else sits behind auth.
 export default createAuthPlugin({
+  // Keep the native tray token and the Better Auth cookie useful between
+  // infrequent recording sessions without making them permanent.
+  maxAge: 60 * 60 * 24 * 90,
   // Clips owns `/_agent-native/google/*` so the same registered Google
   // callback can handle both normal sign-in and the Calendar connect flow.
   mountGoogleOAuthRoutes: false,

package/corpus/templates/content/.agents/skills/delegate-to-agent/SKILL.md

@@ -49,6 +49,34 @@ sendToAgentChat({
 });
 ```
 
+### Keep user text separate from injected context
+
+Treat the visible `message` as the user's request or the shortest clear
+description of an app-initiated operation. Put context the user did not type —
+IDs, URLs, filenames, current selection or screen state, serialized records,
+upload instructions, and bounded source excerpts — in the `context` field.
+`context` is model input carried through the agent turn; it is stripped from
+the rendered user message, so do not concatenate it into `message` with labels,
+blank-line sections, or `<context>` tags yourself.
+
+Use the related surface for each kind of supporting input:
+
+| Surface | Use for |
+| --- | --- |
+| `message` | User-authored intent or a concise app action description |
+| `context` | Derived metadata and bounded text needed to carry out that intent |
+| `setAgentChatContextItem` | Context staged for a later user-submitted prompt; keep it keyed so updates replace stale context |
+| `images`, `referenceImagePaths`, attachments | Binary or visual inputs; describe only the handling instructions in `context` |
+
+If an app builds a prompt from a form, selection, upload, or editor state, keep
+the visible message short and pass the assembled details as `context`. Preserve
+the user's actual freeform text in `message` when it is the request; do not
+restate it as metadata in `context` unless the agent needs a structured copy.
+
+This boundary applies to auto-submitted turns and prefills. A hidden context
+field is not a license to send unbounded records or secrets: cap excerpts,
+prefer stable IDs and URLs, and use an action or resource lookup for full data.
+
 **From the UI, in the background:**
 
 ```ts

package/corpus/templates/content/app/components/editor/CommentsSidebar.tsx

@@ -435,7 +435,8 @@ export function CommentsSidebar({
       ? `${t("comments.agentRegardingText", { text: thread.quotedText })}\n\n`
       : "";
     sendToAgentChat({
-      message: `${context}${t("comments.agentThreadHeader")}\n${commentTexts}\n\n${t("comments.agentHelp")}`,
+      message: t("comments.agentHelp"),
+      context: `${context}${t("comments.agentThreadHeader")}\n${commentTexts}`,
     });
   };
 

package/corpus/templates/design/.agents/skills/delegate-to-agent/SKILL.md

@@ -49,6 +49,34 @@ sendToAgentChat({
 });
 ```
 
+### Keep user text separate from injected context
+
+Treat the visible `message` as the user's request or the shortest clear
+description of an app-initiated operation. Put context the user did not type —
+IDs, URLs, filenames, current selection or screen state, serialized records,
+upload instructions, and bounded source excerpts — in the `context` field.
+`context` is model input carried through the agent turn; it is stripped from
+the rendered user message, so do not concatenate it into `message` with labels,
+blank-line sections, or `<context>` tags yourself.
+
+Use the related surface for each kind of supporting input:
+
+| Surface | Use for |
+| --- | --- |
+| `message` | User-authored intent or a concise app action description |
+| `context` | Derived metadata and bounded text needed to carry out that intent |
+| `setAgentChatContextItem` | Context staged for a later user-submitted prompt; keep it keyed so updates replace stale context |
+| `images`, `referenceImagePaths`, attachments | Binary or visual inputs; describe only the handling instructions in `context` |
+
+If an app builds a prompt from a form, selection, upload, or editor state, keep
+the visible message short and pass the assembled details as `context`. Preserve
+the user's actual freeform text in `message` when it is the request; do not
+restate it as metadata in `context` unless the agent needs a structured copy.
+
+This boundary applies to auto-submitted turns and prefills. A hidden context
+field is not a license to send unbounded records or secrets: cap excerpts,
+prefer stable IDs and URLs, and use an action or resource lookup for full data.
+
 **From the UI, in the background:**
 
 ```ts

package/corpus/templates/design/app/pages/DesignSystemSetup.tsx

@@ -555,9 +555,13 @@ export default function DesignSystemSetup() {
       }. Present a summary for review.`,
     );
 
+    const message =
+      parts[0] ?? "Set up a design system from the selected sources.";
+    const context = parts.slice(1).join("\n");
     openAgentSidebar();
     sendToDesignAgentChat({
-      message: parts.join("\n"),
+      message,
+      context,
       submit: true,
       newTab: true,
     });

package/corpus/templates/design/changelog/2026-08-11-design-agent-prompts-copy-successfully-in-the-desktop-app.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-11
+---
+
+Design agent prompts copy successfully in the desktop app.

package/corpus/templates/dispatch/.agents/skills/delegate-to-agent/SKILL.md

@@ -49,6 +49,34 @@ sendToAgentChat({
 });
 ```
 
+### Keep user text separate from injected context
+
+Treat the visible `message` as the user's request or the shortest clear
+description of an app-initiated operation. Put context the user did not type —
+IDs, URLs, filenames, current selection or screen state, serialized records,
+upload instructions, and bounded source excerpts — in the `context` field.
+`context` is model input carried through the agent turn; it is stripped from
+the rendered user message, so do not concatenate it into `message` with labels,
+blank-line sections, or `<context>` tags yourself.
+
+Use the related surface for each kind of supporting input:
+
+| Surface | Use for |
+| --- | --- |
+| `message` | User-authored intent or a concise app action description |
+| `context` | Derived metadata and bounded text needed to carry out that intent |
+| `setAgentChatContextItem` | Context staged for a later user-submitted prompt; keep it keyed so updates replace stale context |
+| `images`, `referenceImagePaths`, attachments | Binary or visual inputs; describe only the handling instructions in `context` |
+
+If an app builds a prompt from a form, selection, upload, or editor state, keep
+the visible message short and pass the assembled details as `context`. Preserve
+the user's actual freeform text in `message` when it is the request; do not
+restate it as metadata in `context` unless the agent needs a structured copy.
+
+This boundary applies to auto-submitted turns and prefills. A hidden context
+field is not a license to send unbounded records or secrets: cap excerpts,
+prefer stable IDs and URLs, and use an action or resource lookup for full data.
+
 **From the UI, in the background:**
 
 ```ts

package/corpus/templates/dispatch/app/global.css

@@ -29,7 +29,7 @@
   --ring: 0 0% 40%;
   --radius: 0.5rem;
   --sidebar-background: 0 0% 97%;
-  --sidebar-foreground: 0 0% 45%;
+  --sidebar-foreground: 0 0% 43%;
   --sidebar-primary: 0 0% 15%;
   --sidebar-primary-foreground: 0 0% 100%;
   --sidebar-accent: 0 0% 95%;
@@ -60,7 +60,7 @@
   --ring: 0 0% 60%;
   --radius: 0.5rem;
   --sidebar-background: 0 0% 10%;
-  --sidebar-foreground: 0 0% 60%;
+  --sidebar-foreground: 0 0% 62%;
   --sidebar-primary: 0 0% 75%;
   --sidebar-primary-foreground: 0 0% 10%;
   --sidebar-accent: 0 0% 16%;