@agent-native/core 0.154.4 → 0.155.0

package/corpus/templates/clips/server/routes/api/public-meeting.get.ts

@@ -6,7 +6,11 @@
  * of that share and is omitted unless the meeting owner enables it.
  */
 
-import { getSession, runWithRequestContext } from "@agent-native/core/server";
+import {
+  getSession,
+  runWithRequestContext,
+  verifyScopedAgentAccessToken,
+} from "@agent-native/core/server";
 import { resolveAccess } from "@agent-native/core/sharing";
 import { eq } from "drizzle-orm";
 import {
@@ -16,6 +20,10 @@ import {
   setResponseStatus,
 } from "h3";
 
+import {
+  CLIPS_MEETING_AGENT_ACCESS_PARAM,
+  CLIPS_MEETING_AGENT_RESOURCE_KIND,
+} from "../../../shared/meeting-agent-access.js";
 import {
   normalizeTranscriptSegments,
   parseTranscriptSegments,
@@ -43,17 +51,31 @@ function parseBullets(raw: string | null | undefined): Bullet[] {
   }
 }
 
+function queryString(value: unknown): string {
+  if (typeof value === "string") return value;
+  if (Array.isArray(value) && typeof value[0] === "string") return value[0];
+  return "";
+}
+
 export default defineEventHandler(async (event) => {
   setResponseHeader(event, "Cache-Control", "private, max-age=0, no-store");
   setResponseHeader(event, "Referrer-Policy", "no-referrer");
 
   const query = getQuery(event);
-  const meetingId = typeof query.id === "string" ? query.id : "";
+  const meetingId = queryString(query.id);
   if (!meetingId) {
     setResponseStatus(event, 400);
     return { error: "id is required" };
   }
 
+  const agentAccessToken = queryString(query[CLIPS_MEETING_AGENT_ACCESS_PARAM]);
+  const tokenAccess = agentAccessToken
+    ? verifyScopedAgentAccessToken(agentAccessToken, {
+        resourceKind: CLIPS_MEETING_AGENT_RESOURCE_KIND,
+        resourceId: meetingId,
+      })
+    : null;
+
   const session = await getSession(event).catch(() => null);
   const accessContext = {
     userEmail: session?.email,
@@ -61,14 +83,25 @@ export default defineEventHandler(async (event) => {
   };
 
   return runWithRequestContext(accessContext, async () => {
-    const access = await resolveAccess("meeting", meetingId, accessContext);
+    let db: ReturnType<typeof getDb> | undefined;
+    const access = tokenAccess?.ok
+      ? await (async () => {
+          db = getDb();
+          const [resource] = await db
+            .select()
+            .from(schema.meetings)
+            .where(eq(schema.meetings.id, meetingId))
+            .limit(1);
+          return resource ? { role: "viewer" as const, resource } : null;
+        })()
+      : await resolveAccess("meeting", meetingId, accessContext);
     const meeting = access?.resource;
     if (!meeting || meeting.trashedAt) {
       setResponseStatus(event, 404);
       return { error: "Not found" };
     }
 
-    const db = getDb();
+    db ??= getDb();
     const [participants, actionItems, transcriptRows] = await Promise.all([
       db
         .select({

package/corpus/templates/clips/server/routes/api/public-recording.get.ts

@@ -58,6 +58,7 @@ import {
   parseSpaceIds,
   type RecordingVisibility,
 } from "../../lib/recordings.js";
+import { isSeekableRepairPending } from "../../lib/seekable-media-state.js";
 import { verifySharePassword } from "../../lib/share-password.js";
 
 function appPath(path: string): string {
@@ -406,11 +407,19 @@ export default defineEventHandler(async (event) => {
   // Referer of any outbound link the share page renders.
   setResponseHeader(event, "Referrer-Policy", "no-referrer");
   const transcriptPresentation = resolveTranscriptPresentation(transcript);
-  const verificationPending = await isMediaVerificationPending({
-    ownerEmail: rec.ownerEmail,
-    recordingId,
-    recordingStatus: rec.status,
-  });
+  const [verificationPending, seekableRepairPending] = await Promise.all([
+    isMediaVerificationPending({
+      ownerEmail: rec.ownerEmail,
+      recordingId,
+      recordingStatus: rec.status,
+    }),
+    isSeekableRepairPending({
+      ownerEmail: rec.ownerEmail,
+      recordingId,
+      recordingStatus: rec.status,
+      videoUrl: rec.videoUrl,
+    }),
+  ]);
 
   const [viewCount, agentViewCount] = await Promise.all([
     countRecordingViews(recordingId),
@@ -454,12 +463,14 @@ export default defineEventHandler(async (event) => {
       videoUrl: playbackVideoUrl,
       videoFormat: rec.videoFormat,
       videoSizeBytes: rec.videoSizeBytes ?? null,
+      mediaUpdatedAt: rec.mediaUpdatedAt,
       width: rec.width,
       height: rec.height,
       hasAudio: Boolean(rec.hasAudio),
       hasCamera: Boolean(rec.hasCamera),
       status: rec.status,
       verificationPending,
+      seekableRepairPending,
       uploadProgress: rec.uploadProgress,
       failureReason: rec.failureReason,
       // Don't leak the password to clients; just indicate whether one was set.

package/corpus/templates/clips/shared/clips-ai-prefs.ts

@@ -37,6 +37,9 @@ export type ClipsUserPrefs = ClipsAiPrefs & {
 /** Visibility applied to new recordings unless the creator picks another. */
 export type ClipsDefaultVisibility = "private" | "org" | "public";
 
+export const DEFAULT_CLIPS_RECORDING_VISIBILITY: ClipsDefaultVisibility =
+  "public";
+
 export function isIncludeFullVideoInAiEnabled(
   prefs: ClipsAiPrefs | Record<string, unknown> | null | undefined,
 ): boolean {

package/corpus/templates/clips/shared/meeting-agent-access.ts

@@ -0,0 +1,5 @@
+import { AGENT_ACCESS_PARAM } from "@agent-native/core/shared";
+
+export const CLIPS_MEETING_AGENT_RESOURCE_KIND = "clips:meeting";
+export const CLIPS_MEETING_AGENT_CONTEXT_ENDPOINT = "/api/public-meeting";
+export const CLIPS_MEETING_AGENT_ACCESS_PARAM = AGENT_ACCESS_PARAM;

package/corpus/templates/content/.agents/skills/content/SKILL.md

@@ -121,8 +121,8 @@ For a named intake workflow:
    when the database has no form contract and all required values have already
    been confirmed.
 8. Treat submission as complete only when the successful result includes a
-   `createdDocumentId` and verification. Return the exact `url` or `urlPath`
-   from the result. The canonical Content row route is `/page/<createdDocumentId>`;
+   stable row IDs and verified read-back. Return the exact `url` or `urlPath`
+   from the result. The canonical Content row route is `/page/<documentId>`;
    never invent a different path, slug, ID, or host.
 
 When the user supplies a complete description in one message, do not force a

package/corpus/templates/content/.agents/skills/document-editing/references/databases.md

@@ -117,7 +117,9 @@ checkbox filters as initial property values, resolving option labels back to
 stable option IDs for select, status, and multi-select filters, so a row
 created under "Status is Published" remains visible instead of immediately
 disappearing. Agents can mirror that behavior by passing
-`--propertyValues '{"propertyId":"value"}'` to `add-database-item`. Filter
+the discovered property IDs in `propertyValues` to `add-database-item`. The
+action also requires the exact space/database/backing-page target, current
+schema revision, and a caller-stable idempotency key. Filter
 controls are type-aware: option properties choose from their configured
 options, option value editors can search existing options or create a new
 option from the typed query, and property settings can rename option labels
@@ -168,8 +170,10 @@ memberships, but they are references: moving one never reparents, transfers,
 or changes access to the referenced page. Files sidebar Custom order is
 different again: persist it per user and per database view with
 `update-content-database-personal-view`, without changing the shared Files
-membership order. Creating a database row returns the created item IDs and
-opens the new row page in the side preview. Duplicating a database row
+membership order. Creating a database row returns a receipt with stable item
+and document IDs, row link, revisions, affected fields, idempotency outcome,
+and verified read-back, then opens the new row page in the side preview.
+Duplicating a database row
 returns the duplicate item IDs and opens the copied row in the side preview
 so users can continue editing the new page immediately, including from
 table, list, and gallery row action menus. Board, calendar, and timeline
@@ -227,13 +231,25 @@ property definition.
 
 Use `create-content-database`, `create-inline-content-database`,
 `get-content-database`, `list-trashed-content-databases`,
-`restore-content-database`, `add-database-item`, `duplicate-database-item`,
+`restore-content-database`, `add-database-item`, `update-database-item`,
+`upsert-database-item-by-key`, `duplicate-database-item`,
 `duplicate-database-items`, `remove-database-items`, `move-database-item`,
 `update-content-database-view`, `list-document-properties`,
 `configure-document-property`, `set-document-property`,
 `duplicate-document-property`, and `delete-document-property`; do not edit
 property rows or view config via raw SQL when an action can do it.
 
+Read `get-content-database.mutationContract` immediately before a single-row
+mutation. Pass its exact target and schema revision to create, exact item and
+document IDs plus the current row revision to sparse update, and a fresh
+idempotency key for each intended effect. Reusing the same key with the same
+payload replays the durable receipt; reusing it with a different payload fails.
+Configure at most one ordinary text property as the database's natural key,
+then use `upsert-database-item-by-key` with that property. Natural-key upsert
+never accepts an arbitrary property name or silently chooses a field. Blocks,
+computed, system, source-managed, unknown, and relation properties are not
+writable through these actions; use their owning surfaces instead.
+
 For a bounded migration that must rewrite every existing row body while adding
 new property definitions and values, use `migrate-content-database-rows` rather
 than looping the single-row actions. Its `validate` phase is read-only; `apply`