@agent-native/core 0.153.2 → 0.153.4

package/corpus/README.md

@@ -31,4 +31,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- template files: 8185
+- template files: 8189

package/corpus/templates/analytics/AGENTS.md

@@ -48,6 +48,10 @@ Read the relevant skill before deeper work:
   sibling-invocable because this app owns schema, source selection, and tools.
   Prefer natural-language delegation; shaped reads are stable contracts, not
   delegation workarounds.
+- Analytics owns first-party product usage, app/template events, agent-native
+  signups, conversions, and other curated product metrics. Answer sibling-app
+  delegations with the built-in source and query catalog; sibling agents should
+  send a natural-language question, never SQL.
 - For open-ended delegated requests, choose a safe default and label partial.
 - Data integrity first. Never invent numbers, dimensions, filters, or source
   semantics; only present values you actually retrieved, and state uncertainty.

package/corpus/templates/analytics/server/plugins/agent-chat.ts

@@ -105,6 +105,7 @@ export const ANALYTICS_OBSERVABILITY_INCIDENT_GUIDANCE =
   "OBSERVABILITY INCIDENT WORKFLOW — For a named user's session or error question, resolve the user's email from context, then use list-session-recordings with userId over a bounded recent window to discover the relevant sessions. Do not require hasErrors=true for this initial lookup: replay/network/stuck-run evidence can exist while the recording's JavaScript errorCount is zero. Use hasErrors=true only when the user specifically asks for recordings with captured JavaScript errors or the recording metadata confirms that filter is appropriate. Use list-error-issues with userId or sessionRecordingId to identify a grouped issue, then get-error-issue for stack, breadcrumbs, occurrences, and linked recordings. For console diagnostics or failed network requests, create-session-replay-agent-link first and use its scoped diagnostics endpoint for detailed error text, stacks, request metadata, and bounded 5xx snippets; enumerate with kind/limit and fromMs/toMs or offset when needed. Use get-session-replay-summary and get-session-replay-timeline for the page-navigation and click sequence, and use get-session-replay-events only for additional bounded replay-event details. If no grouped error exists, correlate first-party observability events such as agent_chat_stuck_detected with query-agent-native-analytics. This and other read-only investigation tools remain available in Plan mode; run the query instead of deferring it to execution mode. Prefer these first-party actions over generic SQL. Report the matching evidence and do not claim a root cause without a corroborating error, event, or replay signal. ";
 
 export const ANALYTICS_CROSS_APP_ROUTING_GUIDANCE =
+  "WORKSPACE APP ROUTING — Analytics is the sibling app for first-party product usage, app/template events, agent-native signups, conversions, and other curated product metrics. When another app delegates one of these questions with `call-agent`, answer it here using the built-in first-party source and query catalog; do not send the user back to another app or ask the caller to invent SQL. " +
   "WORKSPACE APP ROUTING — Brain is the sibling app that owns company knowledge and indexed Slack context. Brain is not an Analytics extension and will not appear in `list-extensions`. When the user asks about company knowledge, decisions, meeting context, or Slack messages/context such as a named channel or thread, use `call-agent` with agent `brain` and a narrow natural-language question. Use `describe-workspace-apps` only when you need to confirm the sibling capability. Do not use `list-extensions` to find Brain, and do not use `provider-api-request` to call Brain. If Brain reports an access or source error, preserve that exact error; do not infer that the Slack bot is absent from a channel or tell the user to re-invite it. Stay in Analytics for metrics and aggregates over a named provider. ";
 
 export const NON_ANALYTICS_REQUEST_GUIDANCE =

package/corpus/templates/clips/desktop/src-tauri/src/native_screen.rs

@@ -4486,8 +4486,8 @@ pub(crate) fn persist_shared_clip_recording(
     server_url: &str,
     recording_id: &str,
     duration_ms: u128,
-    width: u32,
-    height: u32,
+    width: Option<u32>,
+    height: Option<u32>,
     include_mic: bool,
     include_system_audio: bool,
     has_camera: bool,
@@ -4506,8 +4506,8 @@ pub(crate) fn persist_shared_clip_recording(
         segment_paths: Vec::new(),
         mime_type: MP4_RECORDING_MIME_TYPE.to_string(),
         duration_ms,
-        width: Some(width),
-        height: Some(height),
+        width,
+        height,
         bytes,
         has_audio: include_mic || include_system_audio,
         mic_captured: include_mic,
@@ -4532,8 +4532,11 @@ pub(crate) fn clear_shared_clip_recording(app: &AppHandle, recording_id: &str, p
     let saved = read_saved_recording_metadata(app, recording_id).ok();
     if let Some(saved) = saved {
         clear_saved_recording_after_success(app, &saved);
-    } else if let Err(error) = remove_saved_file(path, "shared Clip temporary artifact") {
-        eprintln!("[clips-tray] shared Clip cleanup failed: {error}");
+    } else {
+        remove_recording_intent(path);
+        if let Err(error) = remove_saved_file(path, "shared Clip temporary artifact") {
+            eprintln!("[clips-tray] shared Clip cleanup failed: {error}");
+        }
     }
     let _ = app.emit("clips:pending-uploads-changed", ());
 }

package/corpus/templates/clips/desktop/src-tauri/src/rewind_clip.rs

@@ -1038,6 +1038,7 @@ fn materialize(
     label: &str,
     include_mic: bool,
     include_system_audio: bool,
+    recovery: Option<(&str, &str, bool)>,
 ) -> Result<FinalizedNativeArtifact, String> {
     let active = take_active(state)?;
     let mut intervals = active.intervals.clone();
@@ -1112,10 +1113,25 @@ fn materialize(
         }
         let output = artifact_path(app, label)?;
         let audio = select_audio(&active.sources, include_mic, include_system_audio)?;
-        native_screen::materialize_mp4_slices_exact(&slices, &output, audio)?;
         let first = first_segment
             .as_ref()
             .ok_or_else(|| "no Rewind media selected".to_string())?;
+        if let Some((server_url, recording_id, has_camera)) = recovery {
+            native_screen::persist_recording_intent(
+                &output,
+                recording_id,
+                server_url,
+                native_screen::MP4_RECORDING_MIME_TYPE,
+                first.width,
+                first.height,
+                include_mic || include_system_audio,
+                include_mic,
+                include_system_audio,
+                has_camera,
+                true,
+            )?;
+        }
+        native_screen::materialize_mp4_slices_exact(&slices, &output, audio)?;
         Ok(FinalizedNativeArtifact::rewind_mp4(
             output,
             duration_ms,
@@ -1199,8 +1215,8 @@ pub(crate) async fn rewind_clip_stop_and_upload(
                         &server_url,
                         &recording_id,
                         logical_duration_ms as u128,
-                        sink_width,
-                        sink_height,
+                        Some(sink_width),
+                        Some(sink_height),
                         include_mic,
                         include_system_audio,
                         has_camera,
@@ -1230,8 +1246,8 @@ pub(crate) async fn rewind_clip_stop_and_upload(
                 &server_url,
                 &recording_id,
                 result.duration_ms as u128,
-                result.width,
-                result.height,
+                Some(result.width),
+                Some(result.height),
                 include_mic,
                 include_system_audio,
                 has_camera,
@@ -1257,8 +1273,8 @@ pub(crate) async fn rewind_clip_stop_and_upload(
                         &server_url,
                         &recording_id,
                         result.duration_ms as u128,
-                        result.width,
-                        result.height,
+                        Some(result.width),
+                        Some(result.height),
                         include_mic,
                         include_system_audio,
                         has_camera,
@@ -1314,19 +1330,62 @@ pub(crate) async fn rewind_clip_stop_and_upload(
         &recording_id,
         include_mic,
         include_system_audio,
+        Some((&server_url, &recording_id, has_camera)),
+    )?;
+    native_screen::persist_shared_clip_recording(
+        &app,
+        &artifact.path,
+        &server_url,
+        &recording_id,
+        artifact.duration_ms,
+        artifact.width,
+        artifact.height,
+        include_mic,
+        include_system_audio,
+        has_camera,
+        None,
     )?;
-    native_screen::upload_finalized_native_artifact(
+    let recovery_server_url = server_url.clone();
+    let recovery_recording_id = recording_id.clone();
+    let artifact_path = artifact.path.clone();
+    let result = native_screen::upload_finalized_native_artifact(
         &app,
         &artifact,
         server_url,
-        recording_id,
+        recording_id.clone(),
         auth_token.unwrap_or_default(),
         cookie.unwrap_or_default(),
         NativeUploadMode::from_option(upload_mode),
         include_mic || include_system_audio,
         has_camera,
     )
-    .await
+    .await;
+    match &result {
+        Ok(upload) if !upload.verification_pending => {
+            native_screen::clear_shared_clip_recording(
+                &app,
+                &recovery_recording_id,
+                &artifact_path,
+            );
+        }
+        Err(error) => {
+            let _ = native_screen::persist_shared_clip_recording(
+                &app,
+                &artifact_path,
+                &recovery_server_url,
+                &recovery_recording_id,
+                artifact.duration_ms,
+                artifact.width,
+                artifact.height,
+                include_mic,
+                include_system_audio,
+                has_camera,
+                Some(error),
+            );
+        }
+        _ => {}
+    }
+    result
 }
 
 #[tauri::command]
@@ -1390,6 +1449,7 @@ pub(crate) async fn rewind_clip_stop_and_save(
         &folder_name,
         include_mic,
         include_system_audio,
+        None,
     )?;
     native_screen::save_finalized_native_artifact_to_local_export(
         &app,

package/corpus/templates/forms/AGENTS.md

@@ -32,6 +32,12 @@ Read the relevant skill before deeper work:
   combined dashboard/report requests.
 - For form setup/configuration previews, call `preview-form`. It returns a
   native inline summary/table and an "Open editor" expansion path.
+- For product usage, agent-native signup, conversion, app-wide event, or other
+  data-owned-by-sibling questions, use `describe-workspace-apps` when ownership
+  is unclear, then delegate a narrow natural-language question with `call-agent`
+  to the owning app. In workspaces with Analytics, it normally owns first-party
+  signup, conversion, and app-usage metrics. Do not invent SQL or query another
+  app's database.
 - For an anonymous feedback form or survey, create all fields in one
   `create-form` call with `status: "published"`, verify the persisted form, and
   copy the returned `publicUrl` verbatim. Never derive the link from `slug` or

package/corpus/templates/forms/server/plugins/agent-chat.ts

@@ -25,6 +25,7 @@ Core rules:
 - Use the framework sharing actions for form and response resources.
 - Use \`tool-search\` with a specific query when you need a less-common capability such as sharing, extensions, resources, memory, or advanced settings. Search results load matching tool schemas into the next step.
 - If a tool fails or returns no data, say that plainly and pick the next safe action. Never fabricate success from a tool error.
+- When a question is about product usage, agent-native signups, conversions, app-wide events, or data owned by another workspace app, use \`describe-workspace-apps\` if ownership is unclear, then delegate a narrow natural-language question with \`call-agent\` to the owning app. In workspaces with Analytics, it normally owns first-party signup, conversion, and app-usage metrics. Do not invent SQL or query another app's database.
 
 Form UX guidance: keep forms focused with clear labels, sensible validation, minimal required fields, and progressive disclosure for advanced settings.`;
 

package/corpus/templates/mail/AGENTS.md

@@ -26,9 +26,10 @@ Read the relevant skill before deeper work:
   is connected, synthetic `local-emails` data otherwise. Call actions the same
   way either way, and never claim fallback data or a fallback send touched the
   user's real inbox.
-- Never send mail unless the user explicitly asks. Draft or queue for review by
-  default; `send-email` is `needsApproval: true`. Use `queue-email-draft` for
-  teammate or Slack-originated send requests.
+- Interactive sends require explicit user approval. Draft or queue for review by
+  default; automation-triggered sends remain approval-gated unless the owner
+  opts into Mail's "Allow automations to send emails automatically" setting.
+  Use `queue-email-draft` for teammate or Slack-originated send requests.
 - Resolve people with `find-contact` before drafting or sending. Never guess an
   address pattern; if it returns zero matches, tell the user.
 - Read `get-mail-settings` before drafting. Use the configured `signature`
@@ -66,7 +67,7 @@ Read the relevant skill before deeper work:
 | `get-hubspot-contact` | HubSpot contact + deals + tickets by email. |
 | `create-attachment-upload` | Short-lived upload URL for an attachment. |
 | `manage-draft` | Create/update/delete a `compose-{id}` draft. |
-| `send-email` | Real send; `needsApproval: true`. |
+| `send-email` | Real send; interactive calls require approval, while automation calls require the Mail opt-in setting. |
 | `queue-email-draft` / `list-queued-drafts` / `update-queued-draft` / `open-queued-draft` / `send-queued-drafts` | Teammate/Slack draft review. |
 | `mark-read` / `mark-thread-read` / `star-email` / `archive-email` / `unarchive-email` / `trash-email` / `untrash-email` / `move-email` | Message/thread state; `mark-read` does bulk cleanup. |
 | `send-scheduled-email-now` / `cancel-scheduled-email` | Send or cancel a scheduled send. |

package/corpus/templates/mail/actions/get-automation-settings.ts

@@ -4,10 +4,14 @@ import { getUserSetting } from "@agent-native/core/settings";
 import { z } from "zod";
 
 import { resolveAutomationModelSettings } from "../server/lib/automation-model.js";
+import {
+  allowsAutomationSends,
+  type MailAutomationSettings,
+} from "../server/lib/automation-settings.js";
 
 export default defineAction({
   description:
-    "Read the engine and model used to evaluate inbox automation rules, falling back to the app's configured agent engine.",
+    "Read the engine, model, and email-send permission used by inbox automations, falling back to the app's configured agent engine.",
   schema: z.object({}),
   http: { method: "GET" },
   agentTool: false,
@@ -15,10 +19,17 @@ export default defineAction({
     const ownerEmail = getRequestUserEmail();
     if (!ownerEmail) throw new Error("Unauthenticated");
 
-    const data = (await getUserSetting(ownerEmail, "automation-settings")) as {
-      engine?: string;
-      model?: string;
-    } | null;
-    return resolveAutomationModelSettings(ownerEmail, data);
+    const data = (await getUserSetting(
+      ownerEmail,
+      "automation-settings",
+    )) as MailAutomationSettings | null;
+    const modelSettings = await resolveAutomationModelSettings(
+      ownerEmail,
+      data,
+    );
+    return {
+      ...modelSettings,
+      allowAutomationSends: allowsAutomationSends(data),
+    };
   },
 });

package/corpus/templates/mail/actions/send-email.ts

@@ -1,4 +1,5 @@
 import { defineAction } from "@agent-native/core";
+import type { ActionRunContext } from "@agent-native/core/action";
 import { writeAppState } from "@agent-native/core/application-state";
 import { emit } from "@agent-native/core/event-bus";
 import { setOAuthDisplayName } from "@agent-native/core/oauth-tokens";
@@ -8,6 +9,7 @@ import { getUserSetting } from "@agent-native/core/settings";
 import { nanoid } from "nanoid";
 import { z } from "zod";
 
+import { requiresEmailSendApproval } from "../server/lib/automation-settings.js";
 import {
   collectLinks,
   newClickToken,
@@ -109,7 +111,7 @@ const attachmentSchema = z.object({
 
 export default defineAction({
   description:
-    "Send an email via Gmail. IMPORTANT: Never call this unless the user explicitly asks to send — always draft first and show the content to the user for review before sending.",
+    "Send an email via Gmail. Interactive sends require approval. Automation-triggered sends require the owner to opt in through Mail settings; otherwise they remain approval-gated.",
   schema: z.object({
     to: z.string().describe("Recipient email(s), comma-separated"),
     subject: z.string().describe("Email subject"),
@@ -135,16 +137,22 @@ export default defineAction({
         "Files to attach. Each entry must reference a previously-uploaded file by its server-side `filename`. The upload must have been created via the media-upload endpoint before calling this action.",
       ),
   }),
-  // Human-in-the-loop gate: actually sending an email is outward-facing and
-  // hard to undo, so the agent can never send without a human approving the
-  // specific call. The loop pauses with `approval_required`; the user approves
-  // before the message goes out. Drafting/queueing is unaffected — only the
-  // real send is gated. This is the canonical (and intentionally rare) use of
-  // `needsApproval` in the framework.
-  needsApproval: true,
-  run: async (args) => {
+  // Interactive sends stay human-approved. Event-triggered automations may
+  // opt out through the owner's Mail Automation settings, which are read from
+  // trusted action context rather than from tool input.
+  needsApproval: (_args, ctx?: ActionRunContext) =>
+    requiresEmailSendApproval(ctx),
+  run: async (args, ctx) => {
     const ownerEmail = getRequestUserEmail();
     if (!ownerEmail) throw new Error("no authenticated user");
+    if (
+      ctx?.caller === "automation" &&
+      (await requiresEmailSendApproval(ctx))
+    ) {
+      throw new Error(
+        "Automation email sending is disabled. Enable it in Mail settings to send automatically.",
+      );
+    }
     const settings = await readSettings();
 
     // Resolve attachments eagerly — fail before touching Gmail if any are missing.

package/corpus/templates/mail/actions/send-queued-drafts.ts

@@ -1,6 +1,8 @@
 import { defineAction } from "@agent-native/core";
+import type { ActionRunContext } from "@agent-native/core/action";
 import { z } from "zod";
 
+import { requiresEmailSendApproval } from "../server/lib/automation-settings.js";
 import {
   claimQueuedDraftForSending,
   listQueuedDrafts,
@@ -32,7 +34,10 @@ type SendOutcome =
   | { outcome: "skipped"; id: string; reason: string }
   | { outcome: "failed"; id: string; error: string };
 
-async function sendOne(id: string): Promise<SendOutcome> {
+async function sendOne(
+  id: string,
+  actionContext?: ActionRunContext,
+): Promise<SendOutcome> {
   const claim = await claimQueuedDraftForSending(id);
   if (!claim.claimed) {
     if (claim.reason === "sent") {
@@ -50,14 +55,17 @@ async function sendOne(id: string): Promise<SendOutcome> {
 
   const { ctx, draft, claimId, priorStatus } = claim;
   try {
-    const result = await (sendEmailAction as any).run({
-      to: draft.to,
-      cc: draft.cc || undefined,
-      bcc: draft.bcc || undefined,
-      subject: draft.subject,
-      body: draft.body,
-      account: draft.accountEmail || undefined,
-    });
+    const result = await sendEmailAction.run(
+      {
+        to: draft.to,
+        cc: draft.cc || undefined,
+        bcc: draft.bcc || undefined,
+        subject: draft.subject,
+        body: draft.body,
+        account: draft.accountEmail || undefined,
+      },
+      actionContext,
+    );
 
     if (typeof result === "string" && result.startsWith("Error")) {
       throw new Error(result);
@@ -95,7 +103,9 @@ export default defineAction({
       .optional()
       .describe("Maximum drafts to send when all=true"),
   }),
-  run: async (args) => {
+  needsApproval: (_args, ctx?: ActionRunContext) =>
+    requiresEmailSendApproval(ctx),
+  run: async (args, ctx) => {
     let ids: string[] = [];
 
     if (args.all) {
@@ -127,7 +137,7 @@ export default defineAction({
     const failed: Array<{ id: string; error: string }> = [];
 
     for (const id of ids) {
-      const result = await sendOne(id);
+      const result = await sendOne(id, ctx);
       if (result.outcome === "sent") {
         sent.push(result);
       } else if (result.outcome === "failed") {

package/corpus/templates/mail/actions/update-automation-settings.ts

@@ -3,12 +3,18 @@ import { getRequestUserEmail } from "@agent-native/core/server";
 import { getUserSetting, putUserSetting } from "@agent-native/core/settings";
 import { z } from "zod";
 
+import type { MailAutomationSettings } from "../server/lib/automation-settings.js";
+
 export default defineAction({
   description:
-    "Set the engine and model used to evaluate inbox automation rules.",
+    "Set the engine and model used to evaluate inbox automation rules, and choose whether automations may send email without per-message approval.",
   schema: z.object({
     engine: z.string().optional().describe("Agent engine id"),
     model: z.string().optional().describe("Model id for that engine"),
+    allowAutomationSends: z
+      .boolean()
+      .optional()
+      .describe("Allow automation-triggered emails to send without approval"),
   }),
   http: { method: "PUT" },
   agentTool: false,
@@ -17,17 +23,25 @@ export default defineAction({
     if (!ownerEmail) throw new Error("Unauthenticated");
 
     const existing =
-      ((await getUserSetting(ownerEmail, "automation-settings")) as {
-        engine?: string;
-        model?: string;
-      } | null) || {};
+      ((await getUserSetting(
+        ownerEmail,
+        "automation-settings",
+      )) as MailAutomationSettings | null) || {};
     const updated = {
       ...existing,
       ...(args.engine ? { engine: args.engine } : {}),
       ...(args.model ? { model: args.model } : {}),
+      ...(args.allowAutomationSends !== undefined
+        ? { allowAutomationSends: args.allowAutomationSends }
+        : {}),
     };
     await putUserSetting(ownerEmail, "automation-settings", updated);
 
-    return { success: true, engine: updated.engine, model: updated.model };
+    return {
+      success: true,
+      engine: updated.engine,
+      model: updated.model,
+      allowAutomationSends: updated.allowAutomationSends === true,
+    };
   },
 });

package/corpus/templates/mail/app/i18n/en-US.ts

@@ -478,6 +478,11 @@ const messages = {
     lastRun: "Last run:",
     automationsDescription:
       "Rules that automatically process new inbox emails using AI.",
+    allowAutomationSends: "Allow automations to send emails automatically",
+    allowAutomationSendsDescription:
+      "Off by default. Turn this on when you want automations to send emails without asking for approval each time.",
+    automationSendSettingSaveFailed:
+      "Could not save the automation email setting.",
     loadingModels: "Loading models",
     newRule: "New rule",
     noAutomationRules: "No automation rules yet.",

package/corpus/templates/mail/app/pages/SettingsPage.tsx

@@ -868,6 +868,12 @@ function TriggersSubsection() {
 
 // ─── Automations Section ─────────────────────────────────────────────────────
 
+type AutomationSettings = {
+  engine?: string;
+  model?: string;
+  allowAutomationSends: boolean;
+};
+
 function AutomationsSection() {
   const t = useT();
   const { data: rules = [], isLoading } = useAutomations();
@@ -896,9 +902,9 @@ function AutomationsSection() {
   // Refetch on any settings write or agent action so agent-driven changes
   // (e.g. update-automation-settings) show up without a manual refresh.
   const settingsSync = useChangeVersions(["settings", "action"]);
-  const { data: autoSettings } = useQuery({
+  const { data: autoSettings } = useQuery<AutomationSettings>({
     queryKey: ["automation-settings", settingsSync],
-    queryFn: async () => {
+    queryFn: async (): Promise<AutomationSettings> => {
       try {
         return await callAction(
           "get-automation-settings",
@@ -906,7 +912,7 @@ function AutomationsSection() {
           { method: "GET" },
         );
       } catch {
-        return { model: defaultModel };
+        return { model: defaultModel, allowAutomationSends: false };
       }
     },
     staleTime: 30_000,
@@ -914,6 +920,7 @@ function AutomationsSection() {
   });
 
   const queryClient = useQueryClient();
+  const [isSavingAutomationSends, setIsSavingAutomationSends] = useState(false);
   const selectedModel = autoSettings?.model || defaultModel;
   const selectedEngine =
     autoSettings?.engine ||
@@ -930,7 +937,13 @@ function AutomationsSection() {
   const handleModelChange = async (value: string) => {
     const [engine, model] = value.split("::");
     if (!engine || !model) return;
-    queryClient.setQueryData(["automation-settings"], { engine, model });
+    queryClient.setQueriesData<AutomationSettings>(
+      { queryKey: ["automation-settings"] },
+      (current) =>
+        current
+          ? { ...current, engine, model }
+          : { engine, model, allowAutomationSends: false },
+    );
     await callAction(
       "update-automation-settings",
       { engine, model },
@@ -938,6 +951,40 @@ function AutomationsSection() {
     );
   };
 
+  const handleAutomationSendsChange = async (enabled: boolean) => {
+    if (!autoSettings || isSavingAutomationSends) return;
+    const previous = autoSettings.allowAutomationSends;
+    queryClient.setQueriesData<AutomationSettings>(
+      { queryKey: ["automation-settings"] },
+      (current) =>
+        current ? { ...current, allowAutomationSends: enabled } : current,
+    );
+    setIsSavingAutomationSends(true);
+    try {
+      await callAction(
+        "update-automation-settings",
+        { allowAutomationSends: enabled },
+        { method: "PUT" },
+      );
+    } catch (error) {
+      queryClient.setQueriesData<AutomationSettings>(
+        { queryKey: ["automation-settings"] },
+        (current) =>
+          current ? { ...current, allowAutomationSends: previous } : current,
+      );
+      toast.error(
+        error instanceof Error
+          ? error.message
+          : t("settings.automationSendSettingSaveFailed"),
+      );
+    } finally {
+      setIsSavingAutomationSends(false);
+      await queryClient.invalidateQueries({
+        queryKey: ["automation-settings"],
+      });
+    }
+  };
+
   const handleCreate = (data: {
     name: string;
     condition: string;
@@ -996,6 +1043,20 @@ function AutomationsSection() {
         </Button>
       </div>
 
+      <div className="max-w-2xl mb-6">
+        {autoSettings ? (
+          <SettingsSwitchRow
+            title={t("settings.allowAutomationSends")}
+            description={t("settings.allowAutomationSendsDescription")}
+            checked={autoSettings.allowAutomationSends}
+            disabled={isSavingAutomationSends}
+            onCheckedChange={handleAutomationSendsChange}
+          />
+        ) : (
+          <Skeleton className="h-16 w-full" />
+        )}
+      </div>
+
       {/* Content */}
       <div className="max-w-2xl space-y-2">
         {/* New rule form */}
@@ -1219,7 +1280,7 @@ function DraftingSection() {
   );
 }
 
-function TrackingRow({
+function SettingsSwitchRow({
   title,
   description,
   checked,
@@ -1281,13 +1342,13 @@ function TrackingSection() {
           </>
         ) : (
           <>
-            <TrackingRow
+            <SettingsSwitchRow
               title={t("settings.trackEmailOpens")}
               description={t("settings.trackEmailOpensDescription")}
               checked={tracking.opens}
               onCheckedChange={(v) => update({ opens: v })}
             />
-            <TrackingRow
+            <SettingsSwitchRow
               title={t("settings.trackLinkClicks")}
               description={t("settings.trackLinkClicksDescription")}
               checked={tracking.clicks}

package/corpus/templates/mail/server/lib/automation-settings.ts

@@ -0,0 +1,27 @@
+import type { ActionRunContext } from "@agent-native/core/action";
+import { getUserSetting } from "@agent-native/core/settings";
+
+export type MailAutomationSettings = {
+  engine?: string;
+  model?: string;
+  allowAutomationSends?: boolean;
+};
+
+export function allowsAutomationSends(settings: unknown): boolean {
+  return (
+    typeof settings === "object" &&
+    settings !== null &&
+    "allowAutomationSends" in settings &&
+    (settings as { allowAutomationSends?: unknown }).allowAutomationSends ===
+      true
+  );
+}
+
+export async function requiresEmailSendApproval(
+  ctx?: ActionRunContext,
+): Promise<boolean> {
+  if (ctx?.caller !== "automation" || !ctx.userEmail) return true;
+
+  const settings = await getUserSetting(ctx.userEmail, "automation-settings");
+  return !allowsAutomationSends(settings);
+}

package/corpus/templates/mail/server/plugins/agent-chat.ts

@@ -151,6 +151,8 @@ Be concise and helpful. When summarizing emails, include sender, subject, and a
 You can create and manage email automation rules that process new inbox emails automatically using AI.
 Use manage-automations to create rules like "auto-label newsletters", "star emails from my boss", etc.
 
+Sending email from an automation is opt-in. Mail keeps "Allow automations to send emails automatically" off by default. When it is off, an automation may draft or queue an email, but a real send remains approval-gated. Turning it on lets event-triggered automations send without asking for approval each time; it does not remove approval from normal interactive sends.
+
 Examples:
 - User says "auto-label newsletters" \u2192 create rule with condition "from a newsletter or marketing mailing list" and action label:"newsletters"
 - User says "archive marketing emails" \u2192 create rule with condition "marketing or promotional email" and action archive

package/corpus/templates/slides/app/components/editor/EditorSidebar.tsx

@@ -441,9 +441,9 @@ export default function EditorSidebar({
         const nextSlideId = slides[nextIndex].id;
         onSelectSlide(nextSlideId);
         requestAnimationFrame(() => {
-          slideButtonRefs.current.get(nextSlideId)?.focus({
-            preventScroll: true,
-          });
+          const nextButton = slideButtonRefs.current.get(nextSlideId);
+          nextButton?.focus({ preventScroll: true });
+          nextButton?.scrollIntoView({ block: "nearest" });
         });
       }
     };

package/corpus/templates/slides/app/components/presentation/PresentationView.tsx

@@ -239,6 +239,17 @@ export default function PresentationView({
 
   const isShared = deckId.startsWith("__shared__/");
 
+  // Exit handlers read these instead of closing over `currentIndex`/`deckId`/
+  // `isShared` so the mount-only fullscreenchange listener still lands on the
+  // right deck and slide even if this component is reused for a different
+  // deck without remounting (e.g. an agent-driven navigation).
+  const currentIndexRef = useRef(currentIndex);
+  currentIndexRef.current = currentIndex;
+  const deckIdRef = useRef(deckId);
+  deckIdRef.current = deckId;
+  const isSharedRef = useRef(isShared);
+  isSharedRef.current = isShared;
+
   useEffect(() => {
     setCurrentIndex((prev) => clampIndex(prev));
     setPrevIndex((prev) =>
@@ -348,7 +359,7 @@ export default function PresentationView({
       const token = deckId.replace("__shared__/", "");
       navigate(`/share/${token}`);
     } else {
-      navigate(`/deck/${deckId}`);
+      navigate(`/deck/${deckId}?slide=${currentIndexRef.current + 1}`);
     }
   }, [navigate, deckId, isShared]);
 
@@ -465,11 +476,13 @@ export default function PresentationView({
       // fullscreen first — otherwise the gesture-fallback overlay handles it.
       if (enteredFullscreenRef.current && !document.fullscreenElement) {
         enteredFullscreenRef.current = false;
-        if (isShared) {
-          const token = deckId.replace("__shared__/", "");
+        if (isSharedRef.current) {
+          const token = deckIdRef.current.replace("__shared__/", "");
           navigate(`/share/${token}`);
         } else {
-          navigate(`/deck/${deckId}`);
+          navigate(
+            `/deck/${deckIdRef.current}?slide=${currentIndexRef.current + 1}`,
+          );
         }
       }
     };

package/corpus/templates/slides/app/context/DeckContext.tsx

@@ -223,7 +223,7 @@ interface DeckContextType {
     options?: UpdateSlideOptions,
   ) => void;
   deleteSlide: (deckId: string, slideId: string) => void;
-  duplicateSlide: (deckId: string, slideId: string) => void;
+  duplicateSlide: (deckId: string, slideId: string) => string | undefined;
   reorderSlides: (deckId: string, oldIndex: number, newIndex: number) => void;
   setDeckSlides: (deckId: string, slides: Slide[]) => void;
   /**
@@ -2223,7 +2223,7 @@ export function DeckProvider({ children }: { children: ReactNode }) {
     (deckId: string, slideId: string) => {
       const before = decksRef.current.find((d) => d.id === deckId);
       const original = before?.slides.find((slide) => slide.id === slideId);
-      if (!before || !original) return;
+      if (!before || !original) return undefined;
 
       markDeckDirty(deckId);
       const copiedSlide: Slide = { ...original, id: nanoid(8) };
@@ -2254,6 +2254,7 @@ export function DeckProvider({ children }: { children: ReactNode }) {
       };
       enqueueDeckOp(deckId, op);
       recordUndo(before, op, { label: "Duplicate slide" });
+      return copiedSlide.id;
     },
     [markDeckDirty, recordUndo, setDecksLocal],
   );

package/corpus/templates/slides/app/pages/DeckEditor.tsx

@@ -807,6 +807,50 @@ export default function DeckEditor() {
     return () => document.removeEventListener("keydown", handleKeyDown);
   }, [deck, id, activeSlideId, deleteSlideWithUndo, pinMode, drawMode]);
 
+  // Cmd/Ctrl+C then Cmd/Ctrl+V duplicates a slide thumbnail in the film
+  // strip. Scoped to an actually-focused thumbnail (rather than "no other
+  // handler claimed it", like the Delete-key handler below) so the shortcut
+  // can't fire from an unrelated toolbar button, dialog, or menu.
+  const copiedSlideIdRef = useRef<string | null>(null);
+  useEffect(() => {
+    const handleKeyDown = (e: KeyboardEvent) => {
+      if (!deck || !id) return;
+      if (!(e.metaKey || e.ctrlKey) || e.altKey) return;
+      const key = e.key.toLowerCase();
+      if (key !== "c" && key !== "v") return;
+      if (pinMode || drawMode) return;
+      if (
+        document.querySelector(
+          "[role='dialog'], [role='menu'], [role='listbox']",
+        )
+      ) {
+        return;
+      }
+      if (!canEdit) return;
+      const focusedThumbnail = document.activeElement?.closest(
+        "[data-slide-thumbnail-id]",
+      );
+      if (!focusedThumbnail) return;
+      const focusedSlideId = focusedThumbnail.getAttribute(
+        "data-slide-thumbnail-id",
+      );
+      if (!focusedSlideId) return;
+
+      if (key === "c") {
+        copiedSlideIdRef.current = focusedSlideId;
+        return;
+      }
+      const copiedSlideId = copiedSlideIdRef.current;
+      if (!copiedSlideId) return;
+      if (!deck.slides.some((s) => s.id === copiedSlideId)) return;
+      e.preventDefault();
+      const newSlideId = duplicateSlide(id, copiedSlideId);
+      if (newSlideId) setActiveSlideId(newSlideId);
+    };
+    document.addEventListener("keydown", handleKeyDown);
+    return () => document.removeEventListener("keydown", handleKeyDown);
+  }, [deck, id, duplicateSlide, canEdit, pinMode, drawMode]);
+
   // Resolve the active slide from URL/deck state. Imports replace slide IDs, so
   // keep this valid after deck contents change instead of only on first load.
   // Track the last URL ?slide param we processed so we can tell "the URL changed

package/corpus/templates/slides/changelog/2026-08-12-arrow-key-navigation-in-the-slide-film-strip-now-scrolls-sli.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-12
+---
+
+Arrow-key navigation in the slide film strip now scrolls slides below the fold into view

package/corpus/templates/slides/changelog/2026-08-12-duplicate-a-slide-from-the-film-strip-with-cmd-ctrl-c-then-c.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-08-12
+---
+
+Duplicate a slide from the film strip with Cmd/Ctrl+C then Cmd/Ctrl+V

package/corpus/templates/slides/changelog/2026-08-12-presenting-a-deck-now-returns-you-to-the-slide-you-were-view.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-12
+---
+
+Presenting a deck now returns you to the slide you were viewing when you exit

package/dist/client/resources/mcp-integration-catalog.d.ts

@@ -39,6 +39,13 @@ export interface DefaultMcpIntegration {
     brandAliases?: string[];
     aliases?: string[];
     keywords: string[];
+    /**
+     * Overrides `name` for prose intent matching in `findMcpIntegrationForText`
+     * when the display name is a common English word (e.g. "Box") that would
+     * otherwise false-positive on unrelated text. Leave unset unless the name
+     * itself is the ambiguous term; `brandAliases` still apply.
+     */
+    promptAliases?: string[];
 }
 export interface McpIntegrationFormDefaults {
     name: string;

package/dist/client/resources/mcp-integration-catalog.js

@@ -675,6 +675,16 @@ export const DEFAULT_MCP_INTEGRATIONS = [
         docsUrl: "https://developer.box.com/guides/box-mcp",
         setupNoteKey: "mcpIntegrations.catalog.box.setupNote",
         keywords: ["files", "folders", "documents", "enterprise content"],
+        // "Box" alone collides with everyday nouns (text box, checkbox, bounding
+        // box), so require a qualified phrase before suggesting the connection.
+        promptAliases: [
+            "Box.com",
+            "Box file",
+            "Box files",
+            "Box folder",
+            "Box folders",
+            "Box drive",
+        ],
     },
     {
         id: "builder-cms",
@@ -947,7 +957,10 @@ export function findMcpIntegrationForText(text, integrations = getDefaultMcpInte
         isMcpConnectionFailureText(normalizedText);
     if (!hasResourceIntent)
         return null;
-    const matchesCanonicalName = (integration) => [integration.name, ...(integration.brandAliases ?? [])].some((alias) => textContainsTerm(normalizedText, alias));
+    const matchesCanonicalName = (integration) => [
+        ...(integration.promptAliases ?? [integration.name]),
+        ...(integration.brandAliases ?? []),
+    ].some((alias) => textContainsTerm(normalizedText, alias));
     const canonicalMatch = integrations.find(matchesCanonicalName);
     if (canonicalMatch)
         return canonicalMatch;

package/dist/client/settings/AgentsSection.js

@@ -165,12 +165,20 @@ function AgentAddPopover({ initialName = "", initialUrl = "", initialDescription
         if (!trimmedName || !trimmedUrl)
             return;
         const trimmedDescription = description.trim();
-        const ok = await onAdd(trimmedName, trimmedUrl, trimmedDescription);
-        if (ok) {
-            setAdded({
-                name: trimmedName,
-                url: trimmedUrl,
-                description: trimmedDescription,
+        try {
+            const ok = await onAdd(trimmedName, trimmedUrl, trimmedDescription);
+            if (ok) {
+                setAdded({
+                    name: trimmedName,
+                    url: trimmedUrl,
+                    description: trimmedDescription,
+                });
+            }
+        }
+        catch (error) {
+            setCheck({
+                status: "error",
+                message: error instanceof Error ? error.message : "Could not add agent",
             });
         }
     };
@@ -236,8 +244,12 @@ export function AgentsSection() {
     const [showAdd, setShowAdd] = useState(false);
     const [prefill, setPrefill] = useState(null);
     const [probeById, setProbeById] = useState(null);
-    const { data: org } = useOrg();
+    const orgQuery = useOrg();
+    const { data: org } = orgQuery;
     const syncSecret = useSyncA2ASecret();
+    const canManageSharedAgents = !orgQuery.isLoading &&
+        !orgQuery.isError &&
+        (!org?.orgId || org.role === "owner" || org.role === "admin");
     // Landing from a peer's "register back" deep link (see
     // buildPeerRegisterBackLink): the open route only echoes `f_*` params onto
     // the redirect URL, so read those here and open the Add popover prefilled.
@@ -343,26 +355,30 @@ export function AgentsSection() {
             url,
             color: "#6B7280",
         }, null, 2);
-        try {
-            const res = await fetch(agentNativePath("/_agent-native/resources"), {
-                method: "POST",
-                headers: { "Content-Type": "application/json" },
-                body: JSON.stringify({
-                    path: remoteAgentResourcePath(id),
-                    content: agentJson,
-                    shared: true,
-                }),
-            });
-            // Deliberately don't close the popover here — a successful add shows a
-            // follow-up state (registration is one-way; the peer doesn't know
-            // about us yet) that the user dismisses explicitly.
-            if (res.ok)
-                fetchAgents();
-            return res.ok;
-        }
-        catch {
-            return false;
+        const res = await fetch(agentNativePath("/_agent-native/resources"), {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({
+                path: remoteAgentResourcePath(id),
+                content: agentJson,
+                shared: true,
+            }),
+        });
+        if (!res.ok) {
+            let body;
+            try {
+                body = (await res.json());
+            }
+            catch {
+                throw new Error(`Add failed (${res.status})`);
+            }
+            throw new Error(body?.error ?? body?.message ?? `Add failed (${res.status})`);
         }
+        // Deliberately don't close the popover here — a successful add shows a
+        // follow-up state (registration is one-way; the peer doesn't know
+        // about us yet) that the user dismisses explicitly.
+        fetchAgents();
+        return true;
     };
     const handleSave = async (agent) => {
         const agentJson = JSON.stringify({
@@ -398,13 +414,13 @@ export function AgentsSection() {
         }
         catch { }
     };
-    return (_jsxs("div", { children: [_jsx("div", { className: "mb-3 flex flex-wrap items-center justify-end gap-3", children: _jsxs("div", { className: "relative", children: [_jsxs("button", { onClick: () => {
+    return (_jsxs("div", { children: [_jsx("div", { className: "mb-3 flex flex-wrap items-center justify-end gap-3", children: canManageSharedAgents ? (_jsxs("div", { className: "relative", children: [_jsxs("button", { onClick: () => {
                                 setShowAdd(!showAdd);
                                 setEditingAgent(null);
                             }, className: "inline-flex items-center gap-1.5 rounded-md border border-border px-3 py-1.5 text-xs font-medium text-foreground hover:bg-accent", children: [showAdd ? _jsx(IconX, { size: 13 }) : _jsx(IconPlus, { size: 13 }), showAdd ? "Cancel" : "Connect agent"] }), showAdd && (_jsx(AgentAddPopover, { initialName: prefill?.name, initialUrl: prefill?.url, initialDescription: prefill?.description, secretSet: org?.a2aSecretSet, syncSecret: syncSecret, onAdd: handleAdd, onClose: () => {
                                 setShowAdd(false);
                                 setPrefill(null);
-                            } }))] }) }), _jsx(A2ASecretStatusRow, { org: org, syncSecret: syncSecret }), loading ? (_jsxs("div", { className: "space-y-1.5", role: "status", "aria-busy": "true", "aria-label": "Loading connected agents", children: [_jsx(Skeleton, { className: "h-6 w-full bg-muted/50" }), _jsx(Skeleton, { className: "h-6 w-3/4 bg-muted/50" })] })) : agents.length === 0 ? (_jsxs("div", { className: "flex flex-col items-center rounded-xl border border-border/70 bg-card px-5 py-8 text-center", children: [_jsx("span", { className: "mb-2 flex size-9 items-center justify-center rounded-full bg-muted text-muted-foreground", children: _jsx(IconTopologyRing2, { size: 17 }) }), _jsx("p", { className: "text-sm font-medium text-foreground", children: "No connected agents yet" }), _jsx("p", { className: "mt-1 max-w-sm text-xs leading-5 text-muted-foreground", children: "Connect an A2A agent to delegate work from chat." }), _jsxs("button", { onClick: () => setShowAdd(true), className: "mt-4 inline-flex items-center gap-1.5 rounded-md border border-border px-3 py-1.5 text-xs font-medium text-foreground hover:bg-accent", children: [_jsx(IconPlus, { size: 13 }), "Connect agent"] })] })) : (_jsx("div", { className: "overflow-hidden rounded-xl border border-border/70 bg-card text-card-foreground", children: _jsx("div", { className: "divide-y divide-border/60 px-4", children: agents.map((agent) => {
+                            } }))] })) : !orgQuery.isLoading ? (_jsx("span", { className: "text-[10px] text-muted-foreground", children: "Only workspace owners and admins can connect agents." })) : null }), _jsx(A2ASecretStatusRow, { org: org, syncSecret: syncSecret }), loading ? (_jsxs("div", { className: "space-y-1.5", role: "status", "aria-busy": "true", "aria-label": "Loading connected agents", children: [_jsx(Skeleton, { className: "h-6 w-full bg-muted/50" }), _jsx(Skeleton, { className: "h-6 w-3/4 bg-muted/50" })] })) : agents.length === 0 ? (_jsxs("div", { className: "flex flex-col items-center rounded-xl border border-border/70 bg-card px-5 py-8 text-center", children: [_jsx("span", { className: "mb-2 flex size-9 items-center justify-center rounded-full bg-muted text-muted-foreground", children: _jsx(IconTopologyRing2, { size: 17 }) }), _jsx("p", { className: "text-sm font-medium text-foreground", children: "No connected agents yet" }), _jsx("p", { className: "mt-1 max-w-sm text-xs leading-5 text-muted-foreground", children: "Connect an A2A agent to delegate work from chat." }), canManageSharedAgents ? (_jsxs("button", { onClick: () => setShowAdd(true), className: "mt-4 inline-flex items-center gap-1.5 rounded-md border border-border px-3 py-1.5 text-xs font-medium text-foreground hover:bg-accent", children: [_jsx(IconPlus, { size: 13 }), "Connect agent"] })) : !orgQuery.isLoading ? (_jsx("p", { className: "mt-4 text-xs text-muted-foreground", children: "Ask a workspace owner or admin to connect an agent." })) : null] })) : (_jsx("div", { className: "overflow-hidden rounded-xl border border-border/70 bg-card text-card-foreground", children: _jsx("div", { className: "divide-y divide-border/60 px-4", children: agents.map((agent) => {
                         const probe = probeById?.get(getRemoteAgentIdFromPath(agent.path).toLowerCase());
                         const dotState = !probe
                             ? null
@@ -413,9 +429,9 @@ export function AgentsSection() {
                                 : "warn";
                         return (_jsxs("div", { className: "group relative", children: [_jsxs("div", { className: "flex w-full items-center gap-3 py-4", children: [_jsx("span", { className: "flex size-8 shrink-0 items-center justify-center rounded-lg border border-border bg-background text-muted-foreground", children: _jsx(IconTopologyRing2, { size: 15 }) }), dotState ? (_jsxs(Tooltip, { children: [_jsx(TooltipTrigger, { asChild: true, children: _jsx("span", { className: `h-1.5 w-1.5 shrink-0 rounded-full ${dotState === "ok"
                                                             ? "bg-primary"
-                                                            : "bg-destructive"}` }) }), _jsx(TooltipContent, { children: probe && describeProbeTooltip(probe) })] })) : (_jsx("span", { className: "h-1.5 w-1.5 shrink-0 rounded-full bg-transparent" })), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("span", { className: "block truncate text-sm font-medium text-foreground", children: agent.name }), _jsx("span", { className: "mt-0.5 block truncate text-xs text-muted-foreground", children: agent.url })] }), _jsx("button", { onClick: () => {
+                                                            : "bg-destructive"}` }) }), _jsx(TooltipContent, { children: probe && describeProbeTooltip(probe) })] })) : (_jsx("span", { className: "h-1.5 w-1.5 shrink-0 rounded-full bg-transparent" })), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("span", { className: "block truncate text-sm font-medium text-foreground", children: agent.name }), _jsx("span", { className: "mt-0.5 block truncate text-xs text-muted-foreground", children: agent.url })] }), canManageSharedAgents ? (_jsx("button", { onClick: () => {
                                                 setEditingAgent(editingAgent === agent.id ? null : agent.id);
                                                 setShowAdd(false);
-                                            }, className: "shrink-0 rounded-md border border-border px-2.5 py-1.5 text-xs font-medium text-foreground hover:bg-accent", children: "Manage" })] }), editingAgent === agent.id && (_jsx(AgentEditPopover, { agent: agent, onSave: handleSave, onDelete: handleDelete, onClose: () => setEditingAgent(null) }))] }, agent.id));
+                                            }, className: "shrink-0 rounded-md border border-border px-2.5 py-1.5 text-xs font-medium text-foreground hover:bg-accent", children: "Manage" })) : null] }), canManageSharedAgents && editingAgent === agent.id && (_jsx(AgentEditPopover, { agent: agent, onSave: handleSave, onDelete: handleDelete, onClose: () => setEditingAgent(null) }))] }, agent.id));
                     }) }) }))] }));
 }

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/notifications/routes.d.ts

@@ -28,6 +28,6 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;

package/dist/observability/routes.d.ts

@@ -42,22 +42,22 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     avgEvalScore: number;
 } | {
     error?: undefined;
+    ok?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
-    ok?: undefined;
 } | {
     error?: undefined;
+    ok?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;
-    ok?: undefined;
 } | {
+    ok?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
     error: any;
-    ok?: undefined;
 } | {
     error?: undefined;
     summary?: undefined;

package/dist/progress/routes.d.ts

@@ -15,6 +15,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/secrets/routes.d.ts

@@ -34,37 +34,37 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    status?: undefined;
     ok?: undefined;
+    status?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     status: string;
-    error?: undefined;
 } | {
+    ok?: undefined;
     error: string;
     removed?: undefined;
-    ok?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
  * or the current stored value without changing anything.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+    ok?: undefined;
     error: string;
     note?: undefined;
-    ok?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note?: undefined;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note: string;
-    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,11 +95,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;

package/dist/server/agent-chat-plugin.js

@@ -2285,6 +2285,7 @@ export function createAgentChatPlugin(options) {
             const leanActionEntries = {
                 ...templateScripts,
                 ...resourceScripts,
+                ...workspaceFileActions,
                 ...refreshScreenTool,
                 ...urlTools,
                 ...chatScripts,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.153.2",
+  "version": "0.153.4",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {