@agent-native/core 0.152.0 → 0.153.0

package/dist/automations/service.js

@@ -4,6 +4,8 @@ import { buildJobResourceContent, jobBelongsToApp, normalizeJobMcpTools, parseJo
 import { deleteAutomationRuns } from "../jobs/run-history.js";
 import { resolveUserSchedulingTimezone } from "../localization/user-timezone.js";
 import { organizationIdFromResourceOwner, organizationResourceOwner, resourceDelete, resourceGetByPath, resourceList, resourcePut, } from "../resources/store.js";
+/** Conservative default for new scheduled automations when no cadence is given. */
+export const DEFAULT_AUTOMATION_SCHEDULE = "0 * * * *";
 function httpError(message, statusCode) {
     return Object.assign(new Error(message), { statusCode });
 }
@@ -181,7 +183,9 @@ export async function defineAutomation(actorInput, input) {
     const body = input.body.trim();
     if (!body)
         throw httpError("body is required.", 400);
-    const schedule = input.schedule?.trim() ?? "";
+    const schedule = input.triggerType === "schedule"
+        ? input.schedule?.trim() || DEFAULT_AUTOMATION_SCHEDULE
+        : "";
     const event = input.event?.trim() ?? "";
     if (input.triggerType === "schedule" && !isValidCron(schedule)) {
         throw httpError(schedule

package/dist/chat-threads/schema.d.ts

@@ -441,14 +441,14 @@ export declare const chatThreadShares: import("drizzle-orm/sqlite-core").SQLiteT
             tableName: string;
             dataType: "string";
             columnType: "SQLiteText";
-            data: "admin" | "editor" | "viewer";
+            data: "admin" | "commenter" | "editor" | "viewer";
             driverParam: string;
             notNull: true;
             hasDefault: true;
             isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
-            enumValues: ["viewer", "editor", "admin"];
+            enumValues: ["viewer", "commenter", "editor", "admin"];
             baseColumn: never;
             identity: undefined;
             generated: undefined;

package/dist/cli/changelog.js

@@ -15,6 +15,7 @@
 import fs from "fs";
 import path from "path";
 import { parsePendingEntry, parseChangelog, rollupChangelog, changelogSlug, CHANGELOG_HEADER, } from "../changelog/parse.js";
+import { createAgentNativeConfigContext, loadResolvedAgentNativeConfig, } from "../vite/agent-native-config-loader.js";
 const CHANGELOG_FILE = "CHANGELOG.md";
 const PENDING_DIR = "changelog";
 function todayIso() {
@@ -61,9 +62,23 @@ function printUsage() {
         "",
         "Entries are user-facing notes. `add` writes a pending file under",
         `  ${PENDING_DIR}/; \`release\` rolls all pending files into ${CHANGELOG_FILE}.`,
+        "Generation requires changelog.enabled: true in agent-native.config.ts.",
     ].join("\n"));
 }
-function cmdAdd(args) {
+async function changelogGenerationEnabled() {
+    const config = await loadResolvedAgentNativeConfig(process.cwd(), createAgentNativeConfigContext("serve", "cli"));
+    return config.changelog?.enabled === true;
+}
+async function requireChangelogGeneration(operation) {
+    if (await changelogGenerationEnabled())
+        return true;
+    console.error(`Changelog ${operation} is disabled by default. Set ` +
+        `changelog: { enabled: true } in agent-native.config.ts to enable it.`);
+    return false;
+}
+async function cmdAdd(args) {
+    if (!(await requireChangelogGeneration("add")))
+        return 1;
     const { flags, rest } = parseFlags(args);
     const summary = rest.join(" ").trim();
     if (!summary) {
@@ -101,7 +116,9 @@ function readPending() {
         content: fs.readFileSync(path.join(dir, f), "utf-8"),
     }));
 }
-function cmdRelease(args) {
+async function cmdRelease(args) {
+    if (!(await requireChangelogGeneration("release")))
+        return 1;
     const { flags } = parseFlags(args);
     const date = flags.date?.match(/\d{4}-\d{2}-\d{2}/)?.[0] ?? todayIso();
     const pendingFiles = readPending();
@@ -144,9 +161,9 @@ export async function runChangelog(args) {
     const rest = args.slice(1);
     switch (sub) {
         case "add":
-            return cmdAdd(rest);
+            return await cmdAdd(rest);
         case "release":
-            return cmdRelease(rest);
+            return await cmdRelease(rest);
         case "list":
             return cmdList();
         case undefined:

package/dist/cli/create.d.ts

@@ -156,11 +156,21 @@ export declare function detectWorkspace(startDir: string): {
 } | null;
 export { parseWorkspaceScope };
 /** @internal — exported for E2E tests */
-export { scaffoldWorkspaceRoot as _scaffoldWorkspaceRoot, ensureGuardedScaffold as _ensureGuardedScaffold, scaffoldAppTemplate as _scaffoldAppTemplate, scaffoldRequiredPackages as _scaffoldRequiredPackages, postProcessStandalone as _postProcessStandalone, loadCatalog as _loadCatalog, fixPackageJsonName as _fixPackageJsonName, renameGitignore as _renameGitignore, rewriteNetlifyToml as _rewriteNetlifyToml, getCoreDependencyVersion as _getCoreDependencyVersion, getDispatchDependencyVersion as _getDispatchDependencyVersion, getToolkitDependencyVersion as _getToolkitDependencyVersion, getCorePackageVersion as _getCorePackageVersion, getGitHubTemplateRef as _getGitHubTemplateRef, getGitHubTemplateRefCandidates as _getGitHubTemplateRefCandidates, githubTarballUrl as _githubTarballUrl, findLocalTemplateFrom as _findLocalTemplateFrom, workspaceAppNameForTemplateSelection as _workspaceAppNameForTemplateSelection, startShapePromptOptions as _startShapePromptOptions, standaloneTemplatePromptOptions as _standaloneTemplatePromptOptions, parseCommunityTemplateSelection as _parseCommunityTemplateSelection, communityTemplateTrustMessage as _communityTemplateTrustMessage, communityTemplateTarballUrl as _communityTemplateTarballUrl, assertCommunityTemplateRoot as _assertCommunityTemplateRoot, assertSafeCommunityArchiveListing as _assertSafeCommunityArchiveListing, validateCommunityArchive as _validateCommunityArchive, resolveCommunityTemplateSource as _resolveCommunityTemplateSource, discoverCommunityWorkspaceApps as _discoverCommunityWorkspaceApps, normalizeCommunityWorkspaceAppDependencies as _normalizeCommunityWorkspaceAppDependencies, shouldSkipScaffoldEntry as _shouldSkipScaffoldEntry, tarExtractArgs as _tarExtractArgs, downloadGitHubSubdir as _downloadGitHubSubdir, findLocalTemplate as _findLocalTemplate, templateSourceName as _templateSourceName, normalizeTemplateName as _normalizeTemplateName, appTitleForScaffold as _appTitleForScaffold, replacePlaceholders as _replacePlaceholders, rewriteTrackingAppId as _rewriteTrackingAppId, rewriteAgentChatAppId as _rewriteAgentChatAppId, applyScaffoldIdentity as _applyScaffoldIdentity, fixWebManifestName as _fixWebManifestName, copyDir as _copyDir, localTemplateSourceKind as _localTemplateSourceKind, REPO as _REPO, TEMPLATES_DIR as _TEMPLATES_DIR, };
+export { scaffoldWorkspaceRoot as _scaffoldWorkspaceRoot, ensureGuardedScaffold as _ensureGuardedScaffold, scaffoldAppTemplate as _scaffoldAppTemplate, scaffoldRequiredPackages as _scaffoldRequiredPackages, postProcessStandalone as _postProcessStandalone, loadCatalog as _loadCatalog, fixPackageJsonName as _fixPackageJsonName, renameGitignore as _renameGitignore, rewriteNetlifyToml as _rewriteNetlifyToml, getCoreDependencyVersion as _getCoreDependencyVersion, getDispatchDependencyVersion as _getDispatchDependencyVersion, getToolkitDependencyVersion as _getToolkitDependencyVersion, getCorePackageVersion as _getCorePackageVersion, getGitHubTemplateRef as _getGitHubTemplateRef, getGitHubTemplateRefCandidates as _getGitHubTemplateRefCandidates, githubTarballUrl as _githubTarballUrl, findLocalTemplateFrom as _findLocalTemplateFrom, workspaceAppNameForTemplateSelection as _workspaceAppNameForTemplateSelection, startShapePromptOptions as _startShapePromptOptions, standaloneTemplatePromptOptions as _standaloneTemplatePromptOptions, parseCommunityTemplateSelection as _parseCommunityTemplateSelection, communityTemplateTrustMessage as _communityTemplateTrustMessage, communityTemplateTarballUrl as _communityTemplateTarballUrl, assertCommunityTemplateRoot as _assertCommunityTemplateRoot, assertSafeCommunityArchiveListing as _assertSafeCommunityArchiveListing, validateCommunityArchive as _validateCommunityArchive, resolveCommunityTemplateSource as _resolveCommunityTemplateSource, discoverCommunityWorkspaceApps as _discoverCommunityWorkspaceApps, normalizeCommunityWorkspaceAppDependencies as _normalizeCommunityWorkspaceAppDependencies, shouldSkipScaffoldEntry as _shouldSkipScaffoldEntry, tarExtractArgs as _tarExtractArgs, extractTarball as _extractTarball, materializeArchiveSymlinks as _materializeArchiveSymlinks, downloadGitHubSubdir as _downloadGitHubSubdir, findLocalTemplate as _findLocalTemplate, templateSourceName as _templateSourceName, normalizeTemplateName as _normalizeTemplateName, appTitleForScaffold as _appTitleForScaffold, replacePlaceholders as _replacePlaceholders, rewriteTrackingAppId as _rewriteTrackingAppId, rewriteAgentChatAppId as _rewriteAgentChatAppId, applyScaffoldIdentity as _applyScaffoldIdentity, fixWebManifestName as _fixWebManifestName, copyDir as _copyDir, localTemplateSourceKind as _localTemplateSourceKind, REPO as _REPO, TEMPLATES_DIR as _TEMPLATES_DIR, };
 declare function tarExtractArgs(tarPath: string, destDir: string, options?: {
     skipAgentSymlinks?: boolean;
     untrustedCommunityArchive?: boolean;
+    additionalExcludes?: string[];
 }): string[];
+interface ArchiveSymlink {
+    archivePath: string;
+    target: string;
+}
+declare function materializeArchiveSymlinks(destDir: string, symlinks: ArchiveSymlink[]): void;
+declare function extractTarball(tarPath: string, destDir: string, options?: {
+    skipAgentSymlinks?: boolean;
+    untrustedCommunityArchive?: boolean;
+}): void;
 declare function validateCommunityArchive(tarPath: string): void;
 declare function assertSafeCommunityArchiveListing(listing: string): void;
 /** Resolves to the ref that actually succeeded so callers can record it. */
@@ -227,5 +237,6 @@ declare function renameGitignore(dir: string): void;
 declare function replacePlaceholders(dir: string, appName: string, appTitle: string, workspaceName?: string): void;
 declare function copyDir(src: string, dest: string, root?: string, opts?: {
     skipExisting?: boolean;
+    materializeSymlinks?: boolean;
 }): void;
 declare function shouldSkipScaffoldEntry(name: string, srcPath?: string): boolean;

package/dist/cli/create.js

@@ -1700,7 +1700,7 @@ export function detectWorkspace(startDir) {
 }
 export { parseWorkspaceScope };
 /** @internal — exported for E2E tests */
-export { scaffoldWorkspaceRoot as _scaffoldWorkspaceRoot, ensureGuardedScaffold as _ensureGuardedScaffold, scaffoldAppTemplate as _scaffoldAppTemplate, scaffoldRequiredPackages as _scaffoldRequiredPackages, postProcessStandalone as _postProcessStandalone, loadCatalog as _loadCatalog, fixPackageJsonName as _fixPackageJsonName, renameGitignore as _renameGitignore, rewriteNetlifyToml as _rewriteNetlifyToml, getCoreDependencyVersion as _getCoreDependencyVersion, getDispatchDependencyVersion as _getDispatchDependencyVersion, getToolkitDependencyVersion as _getToolkitDependencyVersion, getCorePackageVersion as _getCorePackageVersion, getGitHubTemplateRef as _getGitHubTemplateRef, getGitHubTemplateRefCandidates as _getGitHubTemplateRefCandidates, githubTarballUrl as _githubTarballUrl, findLocalTemplateFrom as _findLocalTemplateFrom, workspaceAppNameForTemplateSelection as _workspaceAppNameForTemplateSelection, startShapePromptOptions as _startShapePromptOptions, standaloneTemplatePromptOptions as _standaloneTemplatePromptOptions, parseCommunityTemplateSelection as _parseCommunityTemplateSelection, communityTemplateTrustMessage as _communityTemplateTrustMessage, communityTemplateTarballUrl as _communityTemplateTarballUrl, assertCommunityTemplateRoot as _assertCommunityTemplateRoot, assertSafeCommunityArchiveListing as _assertSafeCommunityArchiveListing, validateCommunityArchive as _validateCommunityArchive, resolveCommunityTemplateSource as _resolveCommunityTemplateSource, discoverCommunityWorkspaceApps as _discoverCommunityWorkspaceApps, normalizeCommunityWorkspaceAppDependencies as _normalizeCommunityWorkspaceAppDependencies, shouldSkipScaffoldEntry as _shouldSkipScaffoldEntry, tarExtractArgs as _tarExtractArgs, downloadGitHubSubdir as _downloadGitHubSubdir, findLocalTemplate as _findLocalTemplate, templateSourceName as _templateSourceName, normalizeTemplateName as _normalizeTemplateName, appTitleForScaffold as _appTitleForScaffold, replacePlaceholders as _replacePlaceholders, rewriteTrackingAppId as _rewriteTrackingAppId, rewriteAgentChatAppId as _rewriteAgentChatAppId, applyScaffoldIdentity as _applyScaffoldIdentity, fixWebManifestName as _fixWebManifestName, copyDir as _copyDir, localTemplateSourceKind as _localTemplateSourceKind, REPO as _REPO, TEMPLATES_DIR as _TEMPLATES_DIR, };
+export { scaffoldWorkspaceRoot as _scaffoldWorkspaceRoot, ensureGuardedScaffold as _ensureGuardedScaffold, scaffoldAppTemplate as _scaffoldAppTemplate, scaffoldRequiredPackages as _scaffoldRequiredPackages, postProcessStandalone as _postProcessStandalone, loadCatalog as _loadCatalog, fixPackageJsonName as _fixPackageJsonName, renameGitignore as _renameGitignore, rewriteNetlifyToml as _rewriteNetlifyToml, getCoreDependencyVersion as _getCoreDependencyVersion, getDispatchDependencyVersion as _getDispatchDependencyVersion, getToolkitDependencyVersion as _getToolkitDependencyVersion, getCorePackageVersion as _getCorePackageVersion, getGitHubTemplateRef as _getGitHubTemplateRef, getGitHubTemplateRefCandidates as _getGitHubTemplateRefCandidates, githubTarballUrl as _githubTarballUrl, findLocalTemplateFrom as _findLocalTemplateFrom, workspaceAppNameForTemplateSelection as _workspaceAppNameForTemplateSelection, startShapePromptOptions as _startShapePromptOptions, standaloneTemplatePromptOptions as _standaloneTemplatePromptOptions, parseCommunityTemplateSelection as _parseCommunityTemplateSelection, communityTemplateTrustMessage as _communityTemplateTrustMessage, communityTemplateTarballUrl as _communityTemplateTarballUrl, assertCommunityTemplateRoot as _assertCommunityTemplateRoot, assertSafeCommunityArchiveListing as _assertSafeCommunityArchiveListing, validateCommunityArchive as _validateCommunityArchive, resolveCommunityTemplateSource as _resolveCommunityTemplateSource, discoverCommunityWorkspaceApps as _discoverCommunityWorkspaceApps, normalizeCommunityWorkspaceAppDependencies as _normalizeCommunityWorkspaceAppDependencies, shouldSkipScaffoldEntry as _shouldSkipScaffoldEntry, tarExtractArgs as _tarExtractArgs, extractTarball as _extractTarball, materializeArchiveSymlinks as _materializeArchiveSymlinks, downloadGitHubSubdir as _downloadGitHubSubdir, findLocalTemplate as _findLocalTemplate, templateSourceName as _templateSourceName, normalizeTemplateName as _normalizeTemplateName, appTitleForScaffold as _appTitleForScaffold, replacePlaceholders as _replacePlaceholders, rewriteTrackingAppId as _rewriteTrackingAppId, rewriteAgentChatAppId as _rewriteAgentChatAppId, applyScaffoldIdentity as _applyScaffoldIdentity, fixWebManifestName as _fixWebManifestName, copyDir as _copyDir, localTemplateSourceKind as _localTemplateSourceKind, REPO as _REPO, TEMPLATES_DIR as _TEMPLATES_DIR, };
 /* ─────────────────────────────────────────────────────────────────────────
  * Download / copy helpers
  * ───────────────────────────────────────────────────────────────────────── */
@@ -1712,12 +1712,14 @@ function validateRepoName(repo) {
     }
 }
 function tarExtractArgs(tarPath, destDir, options = {}) {
-    const excludes = options.skipAgentSymlinks
-        ? FIRST_PARTY_TARBALL_SYMLINK_EXCLUDES.flatMap((pattern) => [
-            "--exclude",
-            pattern,
-        ])
-        : [];
+    const excludePatterns = [
+        ...(options.skipAgentSymlinks ? FIRST_PARTY_TARBALL_SYMLINK_EXCLUDES : []),
+        ...(options.additionalExcludes ?? []),
+    ];
+    const excludes = [...new Set(excludePatterns)].flatMap((pattern) => [
+        "--exclude",
+        pattern,
+    ]);
     const safeOwnership = options.untrustedCommunityArchive
         ? ["--no-same-owner", "--no-same-permissions"]
         : [];
@@ -1731,6 +1733,79 @@ function tarExtractArgs(tarPath, destDir, options = {}) {
         destDir,
     ];
 }
+function archiveSymlinksForExtraction(tarPath) {
+    const listing = execFileSync("tar", ["tvzf", tarPath], {
+        encoding: "utf-8",
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+    return listing.split(/\r?\n/).flatMap((line) => {
+        if (!line.startsWith("l"))
+            return [];
+        const match = line.match(/\s(\S+)\s+->\s+(\S+)\s*$/);
+        return match ? [{ archivePath: match[1], target: match[2] }] : [];
+    });
+}
+function archivePathAfterStrip(archivePath) {
+    const parts = archivePath.split("/");
+    return parts.length > 1 ? parts.slice(1).join("/") : archivePath;
+}
+function isPathWithin(root, candidate) {
+    const relative = path.relative(root, candidate);
+    return (relative === "" ||
+        (!relative.startsWith(`..${path.sep}`) &&
+            relative !== ".." &&
+            !path.isAbsolute(relative)));
+}
+function materializeArchiveSymlinks(destDir, symlinks) {
+    const links = new Map(symlinks.map((link) => [archivePathAfterStrip(link.archivePath), link]));
+    const active = new Set();
+    const materialize = (relativeLinkPath) => {
+        const link = links.get(relativeLinkPath);
+        if (!link)
+            return;
+        if (active.has(relativeLinkPath)) {
+            throw new Error(`Cannot materialize cyclic archive symlink "${relativeLinkPath}".`);
+        }
+        const linkPath = path.resolve(destDir, relativeLinkPath);
+        if (!isPathWithin(path.resolve(destDir), linkPath)) {
+            throw new Error(`Cannot materialize archive symlink outside the extraction directory: "${relativeLinkPath}".`);
+        }
+        if (fs.existsSync(linkPath))
+            return;
+        const resolvedTarget = path.resolve(path.dirname(linkPath), link.target);
+        if (!isPathWithin(path.resolve(destDir), resolvedTarget)) {
+            throw new Error(`Archive symlink "${relativeLinkPath}" points outside the extraction directory.`);
+        }
+        active.add(relativeLinkPath);
+        try {
+            const targetRelativePath = path.relative(path.resolve(destDir), resolvedTarget);
+            if (links.has(targetRelativePath) && !fs.existsSync(resolvedTarget)) {
+                materialize(targetRelativePath);
+            }
+            if (!fs.existsSync(resolvedTarget)) {
+                throw new Error(`Archive symlink "${relativeLinkPath}" points to a missing target.`);
+            }
+            fs.mkdirSync(path.dirname(linkPath), { recursive: true });
+            const targetStat = fs.statSync(resolvedTarget);
+            if (targetStat.isDirectory()) {
+                copyDir(resolvedTarget, linkPath, undefined, {
+                    materializeSymlinks: true,
+                });
+            }
+            else {
+                fs.copyFileSync(resolvedTarget, linkPath);
+            }
+        }
+        finally {
+            active.delete(relativeLinkPath);
+        }
+    };
+    // Resolve deeper links first so links such as `.claude/skills` see the
+    // regularized skill directories they point at.
+    for (const relativeLinkPath of [...links.keys()].sort((a, b) => b.length - a.length)) {
+        materialize(relativeLinkPath);
+    }
+}
 function execFileBuffer(command, args, options) {
     return new Promise((resolve, reject) => {
         execFile(command, args, { ...options, encoding: "buffer" }, (error, stdout, stderr) => {
@@ -1745,6 +1820,20 @@ function execFileBuffer(command, args, options) {
         });
     });
 }
+function extractTarball(tarPath, destDir, options = {}) {
+    const symlinks = options.skipAgentSymlinks || options.untrustedCommunityArchive
+        ? archiveSymlinksForExtraction(tarPath)
+        : [];
+    execFileSync("tar", tarExtractArgs(tarPath, destDir, {
+        ...options,
+        additionalExcludes: symlinks.map((link) => link.archivePath),
+    }), {
+        stdio: "pipe",
+    });
+    if (symlinks.length > 0) {
+        materializeArchiveSymlinks(destDir, symlinks);
+    }
+}
 async function downloadAndExtract(url, destDir, options = {}) {
     fs.mkdirSync(destDir, { recursive: true });
     // --fail-with-body so curl exits non-zero on HTTP 4xx/5xx instead of writing
@@ -1767,9 +1856,7 @@ async function downloadAndExtract(url, destDir, options = {}) {
         if (options.untrustedCommunityArchive) {
             validateCommunityArchive(tarPath);
         }
-        execFileSync("tar", tarExtractArgs(tarPath, destDir, options), {
-            stdio: "pipe",
-        });
+        extractTarball(tarPath, destDir, options);
     }
     finally {
         fs.unlinkSync(tarPath);
@@ -2854,7 +2941,8 @@ function copyDir(src, dest, root, opts) {
         if (entry.isSymbolicLink()) {
             const target = fs.readlinkSync(srcPath);
             const resolvedTarget = path.resolve(path.dirname(srcPath), target);
-            if (resolvedTarget.startsWith(resolvedRoot)) {
+            if (!opts?.materializeSymlinks &&
+                isPathWithin(resolvedRoot, resolvedTarget)) {
                 fs.symlinkSync(target, destPath);
             }
             else {

package/dist/cli/index.js

@@ -7,6 +7,7 @@ import { fileURLToPath } from "url";
 import * as Sentry from "@sentry/node";
 import { clearAgentNativeNitroPresetMarker, resolveAgentNativeNitroPreset, } from "../deploy/nitro-preset.js";
 import { resolveDeployPostBuildInvocation } from "./deploy-build.js";
+import { cliSpawnOptions } from "./process.js";
 import { shouldTrackCliRun } from "./telemetry-routing.js";
 import { createCliTelemetry } from "./telemetry.js";
 // Resolve version once at module scope — used by both --version and --help
@@ -381,11 +382,7 @@ function extractNodeInspectFlag(args) {
     return { inspectFlag, rest };
 }
 function run(cmd, cmdArgs, opts) {
-    const child = spawn(cmd, cmdArgs, {
-        stdio: opts?.stdio ?? "inherit",
-        shell: process.platform === "win32",
-        env: opts?.env ?? process.env,
-    });
+    const child = spawn(cmd, cmdArgs, cliSpawnOptions(opts));
     child.on("exit", (code) => process.exit(code ?? 0));
     // Forward signals to child so Cmd+C doesn't leave zombie processes holding ports
     for (const sig of ["SIGINT", "SIGTERM", "SIGHUP"]) {
@@ -564,7 +561,10 @@ switch (command) {
             NITRO_DEV_RUNNER: process.env.NITRO_DEV_RUNNER ?? "node-process",
         };
         console.log(`[agent-native] API server debugger listening on ${target}`);
-        run(process.execPath, ["--import", preload, viteJsEntry, ...rest], { env });
+        run(process.execPath, ["--import", preload, viteJsEntry, ...rest], {
+            env,
+            shell: false,
+        });
         break;
     }
     case "workspace-dev": {

package/dist/cli/process.d.ts

@@ -0,0 +1,7 @@
+import type { SpawnOptions } from "node:child_process";
+/**
+ * Keep Windows command-name launches compatible with `.cmd` shims while
+ * allowing callers that already have a real executable path to opt out of the
+ * shell. The latter is important for paths such as `C:\\Program Files\\nodejs\\node.exe`.
+ */
+export declare function cliSpawnOptions(options?: Pick<SpawnOptions, "env" | "shell" | "stdio">, platform?: NodeJS.Platform): Pick<SpawnOptions, "env" | "shell" | "stdio">;

package/dist/cli/process.js

@@ -0,0 +1,12 @@
+/**
+ * Keep Windows command-name launches compatible with `.cmd` shims while
+ * allowing callers that already have a real executable path to opt out of the
+ * shell. The latter is important for paths such as `C:\\Program Files\\nodejs\\node.exe`.
+ */
+export function cliSpawnOptions(options = {}, platform = process.platform) {
+    return {
+        stdio: options.stdio ?? "inherit",
+        shell: options.shell ?? platform === "win32",
+        env: options.env ?? process.env,
+    };
+}

package/dist/cli/workspace-skill-policy.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Skills every generated workspace app can use without an app-local copy.
+ *
+ * Keep this list deliberately small. Skills outside this list remain available
+ * in the framework source and can be opted into by adding them to the
+ * workspace core or to the app that actually needs them.
+ */
+export declare const DEFAULT_WORKSPACE_SKILLS: readonly ["actions", "adding-a-feature", "agent-native-docs", "agent-native-toolkit", "context-awareness", "customizing-agent-native", "delegate-to-agent", "frontend-design", "turn-into-app", "turn-into-skill", "real-time-sync", "secrets", "security", "self-modifying-code", "shadcn-ui", "sharing", "storing-data", "portability", "workspace-conventions"];
+/**
+ * Framework skills that templates may carry before they are transformed into
+ * workspace apps. Workspacify removes these copies because the workspace core
+ * owns the inherited skill surface. App-specific skill names are intentionally
+ * not listed here and remain local.
+ */
+export declare const FRAMEWORK_TEMPLATE_SHARED_SKILLS: readonly ["actions", "agent-native-docs", "agent-native-toolkit", "adding-a-feature", "capture-learnings", "client-methods", "create-skill", "customizing-agent-native", "delegate-to-agent", "frontend-design", "feature-flags", "integration-webhooks", "internationalization", "onboarding", "performance", "real-time-collab", "real-time-sync", "security", "self-modifying-code", "shadcn-ui", "secrets", "storing-data", "sharing", "turn-into-app", "turn-into-skill", "upgrade-agent-native"];

package/dist/cli/workspace-skill-policy.js

@@ -0,0 +1,62 @@
+/**
+ * Skills every generated workspace app can use without an app-local copy.
+ *
+ * Keep this list deliberately small. Skills outside this list remain available
+ * in the framework source and can be opted into by adding them to the
+ * workspace core or to the app that actually needs them.
+ */
+export const DEFAULT_WORKSPACE_SKILLS = [
+    "actions",
+    "adding-a-feature",
+    "agent-native-docs",
+    "agent-native-toolkit",
+    "context-awareness",
+    "customizing-agent-native",
+    "delegate-to-agent",
+    "frontend-design",
+    "turn-into-app",
+    "turn-into-skill",
+    "real-time-sync",
+    "secrets",
+    "security",
+    "self-modifying-code",
+    "shadcn-ui",
+    "sharing",
+    "storing-data",
+    "portability",
+    "workspace-conventions",
+];
+/**
+ * Framework skills that templates may carry before they are transformed into
+ * workspace apps. Workspacify removes these copies because the workspace core
+ * owns the inherited skill surface. App-specific skill names are intentionally
+ * not listed here and remain local.
+ */
+export const FRAMEWORK_TEMPLATE_SHARED_SKILLS = [
+    "actions",
+    "agent-native-docs",
+    "agent-native-toolkit",
+    "adding-a-feature",
+    "capture-learnings",
+    "client-methods",
+    "create-skill",
+    "customizing-agent-native",
+    "delegate-to-agent",
+    "frontend-design",
+    "feature-flags",
+    "integration-webhooks",
+    "internationalization",
+    "onboarding",
+    "performance",
+    "real-time-collab",
+    "real-time-sync",
+    "security",
+    "self-modifying-code",
+    "shadcn-ui",
+    "secrets",
+    "storing-data",
+    "sharing",
+    "turn-into-app",
+    "turn-into-skill",
+    "upgrade-agent-native",
+];

package/dist/cli/workspacify.js

@@ -22,6 +22,7 @@
  */
 import fs from "fs";
 import path from "path";
+import { DEFAULT_WORKSPACE_SKILLS, FRAMEWORK_TEMPLATE_SHARED_SKILLS, } from "./workspace-skill-policy.js";
 const POSTGRES_DEPENDENCY_VERSION = "^3.4.9";
 const REACT_ROUTER_BUILD_DEPENDENCIES = [
     "@react-router/dev",
@@ -113,6 +114,11 @@ export function workspacifyApp(opts) {
             // Non-fatal: leave the file in place.
         }
     }
+    // Workspace-core owns framework skills. Keep only app-specific skill
+    // directories here, and expose the small inherited default set as symlinks
+    // so coding agents launched from this app see the same workspace guidance
+    // without another hard copy. Runtime agents inherit workspace-core directly.
+    linkInheritedWorkspaceSkills(opts);
     // 3) Templates document action commands from the framework repo layout.
     //    Workspace apps live under apps/<name>, so point every agent at the
     //    generated app directory instead.
@@ -137,6 +143,36 @@ export function workspacifyApp(opts) {
         writeInheritedChatAgentChatPlugin(appDir, workspaceCoreName, opts.appName);
     }
 }
+function linkInheritedWorkspaceSkills(opts) {
+    const appSkillsDir = path.join(opts.appDir, ".agents", "skills");
+    const workspaceSkillsDir = path.join(opts.workspaceRoot, ".agents", "skills");
+    if (!fs.existsSync(workspaceSkillsDir))
+        return;
+    fs.mkdirSync(appSkillsDir, { recursive: true });
+    for (const skill of FRAMEWORK_TEMPLATE_SHARED_SKILLS) {
+        const localPath = path.join(appSkillsDir, skill);
+        if (fs.existsSync(localPath) ||
+            fs.lstatSync(localPath, { throwIfNoEntry: false })) {
+            fs.rmSync(localPath, { recursive: true, force: true });
+        }
+    }
+    for (const skill of DEFAULT_WORKSPACE_SKILLS) {
+        const inheritedPath = path.join(workspaceSkillsDir, skill);
+        if (!fs.existsSync(inheritedPath))
+            continue;
+        const linkPath = path.join(appSkillsDir, skill);
+        if (fs.existsSync(linkPath) ||
+            fs.lstatSync(linkPath, { throwIfNoEntry: false })) {
+            fs.rmSync(linkPath, { recursive: true, force: true });
+        }
+        try {
+            fs.symlinkSync(path.relative(appSkillsDir, inheritedPath), linkPath, "dir");
+        }
+        catch (error) {
+            throw new Error(`Could not link inherited workspace skill ${skill} into ${appSkillsDir}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+        }
+    }
+}
 /**
  * The version an existing workspace already pins for a framework package.
  *

package/dist/client/AgentPanel.d.ts

@@ -26,6 +26,9 @@ import type { AssistantChatProps } from "./AssistantChat.js";
 import type { MultiTabAssistantChatHeaderProps, MultiTabAssistantChatProps } from "./MultiTabAssistantChat.js";
 type PanelMode = "chat" | "cli" | "resources" | "settings";
 export declare function normalizeAgentPanelModeForSurface(mode: PanelMode, allowSettingsMode: boolean, chatOnly?: boolean): PanelMode;
+export declare function deferAgentPanelOverlayOpen(event: {
+    preventDefault: () => void;
+}, closeMenu: () => void, openOverlay: () => void): void;
 export declare function getAgentPanelChatTabGroups(tabs: MultiTabAssistantChatHeaderProps["tabs"], activeTabId: string): {
     activeTab: import("./MultiTabAssistantChat.js").ChatTab | undefined;
     childTabs: import("./MultiTabAssistantChat.js").ChatTab[];
@@ -39,6 +42,13 @@ export declare function shouldShowAgentPanelPageNewChatButton(tabs: MultiTabAssi
 export declare function shouldShowAgentPanelCliTabBar(cliTabs: string[]): boolean;
 export declare function shouldShowAgentPanelModeButtons(isSidebar: boolean): boolean;
 export declare function shouldShowAgentPanelFullViewAction(agentPageHref: string | undefined, mode: PanelMode, isSidebar?: boolean, currentPath?: string): boolean;
+export declare function resolveAgentPanelFullViewAction(agentPageHref: string | undefined, onFullViewRequest: (() => void) | undefined, mode: PanelMode, isSidebar?: boolean, currentPath?: string): {
+    readonly kind: "callback";
+    readonly href?: undefined;
+} | {
+    readonly kind: "link";
+    readonly href: string;
+} | null;
 export declare function getAgentPanelShortcutHints(isMac: boolean): {
     closeTab: string;
     closeAllTabs: string;
@@ -76,6 +86,8 @@ export interface AgentPanelProps extends Omit<AssistantChatProps, "onSwitchToCli
     isFullscreen?: boolean;
     /** @deprecated Fullscreen sidebar controls are no longer rendered. */
     onToggleFullscreen?: () => void;
+    /** Called when the user selects the full-view action from a sidebar chat. */
+    onFullViewRequest?: () => void;
     /** Called when the user asks the sidebar to use the wide chat width preset. */
     onSnapTo75Percent?: () => void;
     /** Whether the sidebar is currently using the wide fixed drawer presentation. */
@@ -186,7 +198,7 @@ export interface AgentSidebarProps {
     storageKey?: string;
     /** Open the sidebar when a chat run is active or reconnects. */
     openOnChatRunning?: boolean;
-    /** @deprecated Fullscreen sidebar actions are no longer rendered. */
+    /** Called when the user selects the full-view action from the chat sidebar. */
     onFullscreenRequest?: () => void;
     /** Ambient resource context rendered as a composer chip. */
     scope?: import("./use-chat-threads.js").ChatThreadScope | null;
@@ -205,7 +217,7 @@ export interface AgentSidebarProps {
  * Wraps app content with a toggleable agent sidebar.
  * Use AgentToggleButton in your header to open/close it.
  */
-export declare function AgentSidebar({ children, emptyStateText, suggestions, dynamicSuggestions, composerToolbarSlot, composerSlot, onComposerTextChange, imageModelMenu, threadFooterSlot, defaultSidebarWidth, sidebarWidth, position, defaultOpen, animateMobile, animateDesktop, chatViewTransition, chatViewTransitionHandoff, storageKey, openOnChatRunning, scope, showScopeBadge, browserTabId, threadUrlSync, agentPageHref, suppressFirstRunOnboarding, }: AgentSidebarProps): React.JSX.Element;
+export declare function AgentSidebar({ children, emptyStateText, suggestions, dynamicSuggestions, composerToolbarSlot, composerSlot, onComposerTextChange, imageModelMenu, threadFooterSlot, defaultSidebarWidth, sidebarWidth, position, defaultOpen, animateMobile, animateDesktop, chatViewTransition, chatViewTransitionHandoff, storageKey, openOnChatRunning, onFullscreenRequest, scope, showScopeBadge, browserTabId, threadUrlSync, agentPageHref, suppressFirstRunOnboarding, }: AgentSidebarProps): React.JSX.Element;
 /**
  * Focus the agent chat composer input.
  * Opens the sidebar if closed, then focuses the text input.