@agent-native/core 0.157.3 → 0.157.4

package/corpus/README.md

@@ -31,4 +31,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- template files: 8242
+- template files: 8249

package/corpus/templates/analytics/.agents/skills/agent-native-toolkit/SKILL.md

@@ -182,6 +182,11 @@ in the moment of agent use.
   five-item sidebar preview and a footer row with New chat followed by an
   ellipsis disclosure up to fifteen. Apps inject routing, labels, and domain
   actions.
+- **Data grid kit**: provider-agnostic spreadsheet mechanics belong in
+  `@agent-native/toolkit/data-grid`. Apps provide rows, typed columns, editor
+  slots, selection and width state, persistence callbacks, and product-level
+  row/body slots. Keep database models, access checks, grouping, drag/drop,
+  and domain actions in the app adapter.
 - **Agent page kit**: the full-page `/agent` surface (`AgentTabsPage` from
   `@agent-native/core/client`) with Context, Files, Connections, Jobs, and
   Access tabs plus a Personal/Organization scope toggle. The canonical home

package/corpus/templates/analytics/.agents/skills/sharing/SKILL.md

@@ -184,6 +184,27 @@ import { ShareButton } from "@agent-native/core/client/sharing";
 
 For list views, show `<VisibilityBadge visibility={row.visibility} />` next to each resource.
 
+## Standard share surface
+
+All app share popovers should use the same compact surface contract:
+
+- Use the text-only `ShareTrigger` from `@agent-native/toolkit/sharing`.
+- Render ordinary links with `ShareCopyRow`, which exposes a Copy action without
+  printing the raw URL.
+- Keep general access and individual people access in the standard Core sharing
+  flow. The people flow supports email invites, roles, notifications, and
+  removal through the shared share actions.
+- Add `ShareAgentsSection` only when the resource has a real agent-readable
+  link or prompt. Keep it collapsed by default and supply domain-specific
+  content through the shared section shell.
+- App-specific tabs or controls may remain when they represent a real domain
+  action (for example, an embed-code editor), but they should retain the same
+  trigger, copy-row, access, and spacing language.
+
+`ShareDisclosureSection` is the toolkit-owned shell for optional expandable
+share details; use its `ShareAgentsSection` or `SharePeopleSection` wrappers
+instead of creating another collapsible share panel in a template.
+
 ## Actions available everywhere
 
 The framework auto-mounts these actions in every template — no per-template boilerplate:

package/corpus/templates/analytics/server/lib/first-party-analytics-backend.ts

@@ -651,6 +651,45 @@ function rewriteSqlFunctionCalls(
   return match ? result : result + sql.slice(cursor);
 }
 
+function coerceEventDateComparisonOperands(sql: string): string {
+  const comparisonRe =
+    /\b(?:[A-Za-z_][A-Za-z0-9_]*\.)?event_date\s*(?:<=|>=|<>|=|<|>)\s*/gi;
+  let cursor = 0;
+  let result = "";
+  let match = comparisonRe.exec(sql);
+  while (match) {
+    const operandStart = match.index + match[0].length;
+    const formatMatch = /^FORMAT_DATE\s*\(/i.exec(sql.slice(operandStart));
+    if (formatMatch) {
+      const openIndex = operandStart + formatMatch[0].lastIndexOf("(");
+      const closeIndex = findMatchingSqlParen(sql, openIndex);
+      if (closeIndex === -1) {
+        throw new Error(
+          "First-party BigQuery query has an unterminated FORMAT_DATE call",
+        );
+      }
+      const args = splitTopLevelSqlArgs(sql.slice(openIndex + 1, closeIndex));
+      if (args.length === 2 && /^'%Y-%m-%d'$/i.test(args[0] ?? "")) {
+        result += sql.slice(cursor, operandStart) + (args[1] ?? "");
+        cursor = closeIndex + 1;
+        comparisonRe.lastIndex = cursor;
+        match = comparisonRe.exec(sql);
+        continue;
+      }
+    }
+    const matchEnd = match.index + match[0].length;
+    result += sql.slice(cursor, matchEnd);
+    cursor = matchEnd;
+    comparisonRe.lastIndex = cursor;
+    match = comparisonRe.exec(sql);
+  }
+  result += sql.slice(cursor);
+  return result.replace(
+    /(\b(?:[A-Za-z_][A-Za-z0-9_]*\.)?event_date\s*(?:<=|>=|<>|=|<|>)\s*)'(\d{4}-\d{2}-\d{2})'/gi,
+    "$1DATE '$2'",
+  );
+}
+
 function replacePostgresCastsInCode(code: string): string {
   const castType = new RegExp(
     "::\\s*(date|timestamp|timestamptz|int|int2|int4|int8|integer|float|float4|float8|double\\s+precision|numeric|text|varchar|boolean|bool|json|jsonb)\\b",
@@ -936,7 +975,7 @@ export function renderFirstPartyAnalyticsBigQuerySql(
     translateFirstPartyAnalyticsBigQuerySql(normalizedScopeSql);
   const bound = bindSqlArguments(translated, args);
   return addPartitionPrunedEventDeduplication(
-    qualifyQuerySources(bound, table),
+    coerceEventDateComparisonOperands(qualifyQuerySources(bound, table)),
     table,
   );
 }

package/corpus/templates/assets/.agents/skills/agent-native-toolkit/SKILL.md

@@ -182,6 +182,11 @@ in the moment of agent use.
   five-item sidebar preview and a footer row with New chat followed by an
   ellipsis disclosure up to fifteen. Apps inject routing, labels, and domain
   actions.
+- **Data grid kit**: provider-agnostic spreadsheet mechanics belong in
+  `@agent-native/toolkit/data-grid`. Apps provide rows, typed columns, editor
+  slots, selection and width state, persistence callbacks, and product-level
+  row/body slots. Keep database models, access checks, grouping, drag/drop,
+  and domain actions in the app adapter.
 - **Agent page kit**: the full-page `/agent` surface (`AgentTabsPage` from
   `@agent-native/core/client`) with Context, Files, Connections, Jobs, and
   Access tabs plus a Personal/Organization scope toggle. The canonical home

package/corpus/templates/assets/.agents/skills/sharing/SKILL.md

@@ -184,6 +184,27 @@ import { ShareButton } from "@agent-native/core/client/sharing";
 
 For list views, show `<VisibilityBadge visibility={row.visibility} />` next to each resource.
 
+## Standard share surface
+
+All app share popovers should use the same compact surface contract:
+
+- Use the text-only `ShareTrigger` from `@agent-native/toolkit/sharing`.
+- Render ordinary links with `ShareCopyRow`, which exposes a Copy action without
+  printing the raw URL.
+- Keep general access and individual people access in the standard Core sharing
+  flow. The people flow supports email invites, roles, notifications, and
+  removal through the shared share actions.
+- Add `ShareAgentsSection` only when the resource has a real agent-readable
+  link or prompt. Keep it collapsed by default and supply domain-specific
+  content through the shared section shell.
+- App-specific tabs or controls may remain when they represent a real domain
+  action (for example, an embed-code editor), but they should retain the same
+  trigger, copy-row, access, and spacing language.
+
+`ShareDisclosureSection` is the toolkit-owned shell for optional expandable
+share details; use its `ShareAgentsSection` or `SharePeopleSection` wrappers
+instead of creating another collapsible share panel in a template.
+
 ## Actions available everywhere
 
 The framework auto-mounts these actions in every template — no per-template boilerplate:

package/corpus/templates/brain/.agents/skills/agent-native-toolkit/SKILL.md

@@ -182,6 +182,11 @@ in the moment of agent use.
   five-item sidebar preview and a footer row with New chat followed by an
   ellipsis disclosure up to fifteen. Apps inject routing, labels, and domain
   actions.
+- **Data grid kit**: provider-agnostic spreadsheet mechanics belong in
+  `@agent-native/toolkit/data-grid`. Apps provide rows, typed columns, editor
+  slots, selection and width state, persistence callbacks, and product-level
+  row/body slots. Keep database models, access checks, grouping, drag/drop,
+  and domain actions in the app adapter.
 - **Agent page kit**: the full-page `/agent` surface (`AgentTabsPage` from
   `@agent-native/core/client`) with Context, Files, Connections, Jobs, and
   Access tabs plus a Personal/Organization scope toggle. The canonical home

package/corpus/templates/brain/.agents/skills/sharing/SKILL.md

@@ -184,6 +184,27 @@ import { ShareButton } from "@agent-native/core/client/sharing";
 
 For list views, show `<VisibilityBadge visibility={row.visibility} />` next to each resource.
 
+## Standard share surface
+
+All app share popovers should use the same compact surface contract:
+
+- Use the text-only `ShareTrigger` from `@agent-native/toolkit/sharing`.
+- Render ordinary links with `ShareCopyRow`, which exposes a Copy action without
+  printing the raw URL.
+- Keep general access and individual people access in the standard Core sharing
+  flow. The people flow supports email invites, roles, notifications, and
+  removal through the shared share actions.
+- Add `ShareAgentsSection` only when the resource has a real agent-readable
+  link or prompt. Keep it collapsed by default and supply domain-specific
+  content through the shared section shell.
+- App-specific tabs or controls may remain when they represent a real domain
+  action (for example, an embed-code editor), but they should retain the same
+  trigger, copy-row, access, and spacing language.
+
+`ShareDisclosureSection` is the toolkit-owned shell for optional expandable
+share details; use its `ShareAgentsSection` or `SharePeopleSection` wrappers
+instead of creating another collapsible share panel in a template.
+
 ## Actions available everywhere
 
 The framework auto-mounts these actions in every template — no per-template boilerplate:

package/corpus/templates/calendar/.agents/skills/agent-native-toolkit/SKILL.md

@@ -182,6 +182,11 @@ in the moment of agent use.
   five-item sidebar preview and a footer row with New chat followed by an
   ellipsis disclosure up to fifteen. Apps inject routing, labels, and domain
   actions.
+- **Data grid kit**: provider-agnostic spreadsheet mechanics belong in
+  `@agent-native/toolkit/data-grid`. Apps provide rows, typed columns, editor
+  slots, selection and width state, persistence callbacks, and product-level
+  row/body slots. Keep database models, access checks, grouping, drag/drop,
+  and domain actions in the app adapter.
 - **Agent page kit**: the full-page `/agent` surface (`AgentTabsPage` from
   `@agent-native/core/client`) with Context, Files, Connections, Jobs, and
   Access tabs plus a Personal/Organization scope toggle. The canonical home

package/corpus/templates/calendar/.agents/skills/sharing/SKILL.md

@@ -184,6 +184,27 @@ import { ShareButton } from "@agent-native/core/client/sharing";
 
 For list views, show `<VisibilityBadge visibility={row.visibility} />` next to each resource.
 
+## Standard share surface
+
+All app share popovers should use the same compact surface contract:
+
+- Use the text-only `ShareTrigger` from `@agent-native/toolkit/sharing`.
+- Render ordinary links with `ShareCopyRow`, which exposes a Copy action without
+  printing the raw URL.
+- Keep general access and individual people access in the standard Core sharing
+  flow. The people flow supports email invites, roles, notifications, and
+  removal through the shared share actions.
+- Add `ShareAgentsSection` only when the resource has a real agent-readable
+  link or prompt. Keep it collapsed by default and supply domain-specific
+  content through the shared section shell.
+- App-specific tabs or controls may remain when they represent a real domain
+  action (for example, an embed-code editor), but they should retain the same
+  trigger, copy-row, access, and spacing language.
+
+`ShareDisclosureSection` is the toolkit-owned shell for optional expandable
+share details; use its `ShareAgentsSection` or `SharePeopleSection` wrappers
+instead of creating another collapsible share panel in a template.
+
 ## Actions available everywhere
 
 The framework auto-mounts these actions in every template — no per-template boilerplate:

package/corpus/templates/calendar/app/components/layout/AppLayout.tsx

@@ -2,6 +2,7 @@ import {
   AgentSidebar,
   AgentToggleButton,
 } from "@agent-native/core/client/agent-chat";
+import { usePerAppChatOpen } from "@agent-native/core/client/hooks";
 import { useT } from "@agent-native/core/client/i18n";
 import { InvitationBanner } from "@agent-native/core/client/org";
 import { useAppearanceSync } from "@agent-native/core/client/ui";
@@ -234,6 +235,7 @@ export function AppLayout({ children }: AppLayoutProps) {
   const [sidebarOpen, setSidebarOpen] = useState(false);
   const [sidebarCollapsed, setSidebarCollapsed] =
     useState(readSidebarCollapsed);
+  const perAppChatOpen = usePerAppChatOpen();
   const [selectedDate, setSelectedDate] = useState(new Date());
   const [viewMode, setViewMode] = useState<ViewMode>(isMobile ? "day" : "week");
   const [peopleSearchOpen, setPeopleSearchOpen] = useState(false);
@@ -387,7 +389,7 @@ export function AppLayout({ children }: AppLayoutProps) {
             <Sidebar
               open={sidebarOpen}
               onClose={() => setSidebarOpen(false)}
-              collapsed={!isMobile && sidebarCollapsed}
+              collapsed={!isMobile && (sidebarCollapsed || perAppChatOpen)}
               onCollapsedChange={isMobile ? undefined : setSidebarCollapsed}
             />
             <AgentSidebar

package/corpus/templates/chat/.agents/skills/agent-native-toolkit/SKILL.md

@@ -182,6 +182,11 @@ in the moment of agent use.
   five-item sidebar preview and a footer row with New chat followed by an
   ellipsis disclosure up to fifteen. Apps inject routing, labels, and domain
   actions.
+- **Data grid kit**: provider-agnostic spreadsheet mechanics belong in
+  `@agent-native/toolkit/data-grid`. Apps provide rows, typed columns, editor
+  slots, selection and width state, persistence callbacks, and product-level
+  row/body slots. Keep database models, access checks, grouping, drag/drop,
+  and domain actions in the app adapter.
 - **Agent page kit**: the full-page `/agent` surface (`AgentTabsPage` from
   `@agent-native/core/client`) with Context, Files, Connections, Jobs, and
   Access tabs plus a Personal/Organization scope toggle. The canonical home

package/corpus/templates/chat/.agents/skills/sharing/SKILL.md

@@ -184,6 +184,27 @@ import { ShareButton } from "@agent-native/core/client/sharing";
 
 For list views, show `<VisibilityBadge visibility={row.visibility} />` next to each resource.
 
+## Standard share surface
+
+All app share popovers should use the same compact surface contract:
+
+- Use the text-only `ShareTrigger` from `@agent-native/toolkit/sharing`.
+- Render ordinary links with `ShareCopyRow`, which exposes a Copy action without
+  printing the raw URL.
+- Keep general access and individual people access in the standard Core sharing
+  flow. The people flow supports email invites, roles, notifications, and
+  removal through the shared share actions.
+- Add `ShareAgentsSection` only when the resource has a real agent-readable
+  link or prompt. Keep it collapsed by default and supply domain-specific
+  content through the shared section shell.
+- App-specific tabs or controls may remain when they represent a real domain
+  action (for example, an embed-code editor), but they should retain the same
+  trigger, copy-row, access, and spacing language.
+
+`ShareDisclosureSection` is the toolkit-owned shell for optional expandable
+share details; use its `ShareAgentsSection` or `SharePeopleSection` wrappers
+instead of creating another collapsible share panel in a template.
+
 ## Actions available everywhere
 
 The framework auto-mounts these actions in every template — no per-template boilerplate:

package/corpus/templates/clips/.agents/skills/agent-native-toolkit/SKILL.md

@@ -182,6 +182,11 @@ in the moment of agent use.
   five-item sidebar preview and a footer row with New chat followed by an
   ellipsis disclosure up to fifteen. Apps inject routing, labels, and domain
   actions.
+- **Data grid kit**: provider-agnostic spreadsheet mechanics belong in
+  `@agent-native/toolkit/data-grid`. Apps provide rows, typed columns, editor
+  slots, selection and width state, persistence callbacks, and product-level
+  row/body slots. Keep database models, access checks, grouping, drag/drop,
+  and domain actions in the app adapter.
 - **Agent page kit**: the full-page `/agent` surface (`AgentTabsPage` from
   `@agent-native/core/client`) with Context, Files, Connections, Jobs, and
   Access tabs plus a Personal/Organization scope toggle. The canonical home

package/corpus/templates/clips/.agents/skills/meetings/SKILL.md

@@ -78,7 +78,7 @@ When meetings are enabled, the Clips desktop app also watches for native Zoom (`
 | `list-meetings`           | Upcoming + past, scoped via `accessFilter`; reads connected Google Calendar live |
 | `get-meeting`             | One meeting + participants + segments + notes                         |
 | `create-meeting`          | Create a meeting row (`source`: `calendar` / `adhoc` / `manual`); desktop adhoc Zoom/Teams detection passes `source: "adhoc"` |
-| `update-meeting`          | Inline title/notes edits; owners/admins can opt the full transcript into or out of the meeting share link with `shareTranscript` |
+| `update-meeting`          | Inline title/notes edits and owner/admin visibility changes; meeting share links include the full transcript whenever one exists |
 | `delete-meeting`          | Soft-delete a meeting from the visible list; linked recordings and calendar events stay intact |
 | `start-meeting-recording` | Begin native macOS transcript stream + create the linked recording   |
 | `stop-meeting-recording`  | End the active capture                                                |
@@ -103,11 +103,11 @@ sharing/status boundary.
 ## Sharing meeting notes and transcripts
 
 Meeting share links always include generated notes: the summary, key points,
-and action items. Full transcripts are more sensitive and stay excluded by
-default. Owners and share admins can call `update-meeting` with
-`shareTranscript=true|false` or use the Share popover's transcript switch.
-The setting controls only the meeting share payload; it must not change the
-linked recording's visibility or expose recording media and comments.
+action items, and the full transcript whenever a linked transcript exists.
+There is no transcript-sharing toggle. The legacy `share_transcript` column is
+retained for database compatibility, but it is no longer a control and does not
+change the meeting share payload. Sharing a meeting still must not expose the
+linked recording's media or comments.
 
 ## Cleanup credential order
 
@@ -139,7 +139,7 @@ The app exposes `view`, `meetingId`, and `dictationId` so the agent always knows
     "scheduledStart": "...",
     "scheduledEnd": "...",
     "transcriptStatus": "ready",
-    "shareTranscript": false,
+    "shareTranscript": true,
     "participants": [{ "email": "alice@ex.com", "name": "Alice" }, ...],
     "actionItems": [{ "assigneeEmail": "alice@ex.com", "text": "..." }, ...],
     "hasRecording": true,

package/corpus/templates/clips/actions/approve-recording-access-request.ts

@@ -0,0 +1,147 @@
+import { defineAction } from "@agent-native/core";
+import { verifyScopedAgentAccessToken } from "@agent-native/core/server";
+import {
+  getRequestOrgId,
+  getRequestUserEmail,
+} from "@agent-native/core/server/request-context";
+import { resolveAccess } from "@agent-native/core/sharing";
+import shareResource from "@agent-native/core/sharing/actions/share-resource";
+import { and, eq, sql } from "drizzle-orm";
+import { z } from "zod";
+
+import { getDb, schema } from "../server/db/index.js";
+import { normalizeOwnerEmail } from "../server/lib/recordings.js";
+import { CLIPS_ACCESS_APPROVAL_TOKEN_PREFIX } from "../shared/recording-link.js";
+
+function httpError(message: string, statusCode: number): Error {
+  return Object.assign(new Error(message), { statusCode });
+}
+
+export default defineAction({
+  description:
+    "Approve a private Clips access request and add the requester as a viewer in the recording's standard sharing list.",
+  schema: z.object({
+    recordingId: z.string().min(1).describe("Recording ID to share."),
+    approvalToken: z
+      .string()
+      .trim()
+      .min(1)
+      .describe("Signed approval capability from the owner email."),
+  }),
+  agentTool: false,
+  run: async ({ recordingId, approvalToken }) => {
+    const approverEmail = getRequestUserEmail();
+    if (!approverEmail) {
+      throw httpError("Sign in as the clip owner to allow access.", 401);
+    }
+
+    const token = verifyScopedAgentAccessToken(approvalToken, {
+      resourceKind: CLIPS_ACCESS_APPROVAL_TOKEN_PREFIX,
+      resourceId: recordingId,
+    });
+    if (!token.ok || !token.viewerEmail) {
+      throw httpError("This access request is invalid or expired.", 404);
+    }
+
+    const normalizedApproverEmail = normalizeOwnerEmail(approverEmail);
+    const access = await resolveAccess("recording", recordingId, {
+      userEmail: normalizedApproverEmail,
+      orgId: getRequestOrgId() ?? undefined,
+    });
+    if (!access || !["owner", "admin"].includes(access.role)) {
+      throw httpError("Only a clip owner or admin can allow access.", 403);
+    }
+
+    const db = getDb();
+    const [recording] = await db
+      .select({
+        id: schema.recordings.id,
+        title: schema.recordings.title,
+        visibility: schema.recordings.visibility,
+        trashedAt: schema.recordings.trashedAt,
+      })
+      .from(schema.recordings)
+      .where(eq(schema.recordings.id, recordingId))
+      .limit(1);
+    if (
+      !recording ||
+      recording.trashedAt ||
+      recording.visibility === "public"
+    ) {
+      throw httpError(`Recording ${recordingId} not found`, 404);
+    }
+
+    const requesterEmail = normalizeOwnerEmail(token.viewerEmail);
+    const accessRequests = await db
+      .select({ payload: schema.recordingEvents.payload })
+      .from(schema.recordingEvents)
+      .where(
+        and(
+          eq(schema.recordingEvents.recordingId, recordingId),
+          eq(schema.recordingEvents.kind, "access-request"),
+        ),
+      );
+    const request = accessRequests.find((event) => {
+      try {
+        const payload = JSON.parse(event.payload) as {
+          requesterEmail?: string;
+        };
+        return (
+          typeof payload.requesterEmail === "string" &&
+          normalizeOwnerEmail(payload.requesterEmail) === requesterEmail
+        );
+      } catch {
+        // coercion-ok: malformed historical event payload cannot authorize a share.
+        return false;
+      }
+    });
+    if (!request) {
+      throw httpError("This access request is invalid or expired.", 404);
+    }
+
+    const [existingShare] = await db
+      .select({ id: schema.recordingShares.id })
+      .from(schema.recordingShares)
+      .where(
+        and(
+          eq(schema.recordingShares.resourceId, recordingId),
+          eq(schema.recordingShares.principalType, "user"),
+          // Share email principals are normalized on write, but this keeps
+          // approval idempotent for rows created before that convention.
+          sql`lower(${schema.recordingShares.principalId}) = ${requesterEmail}`,
+        ),
+      )
+      .limit(1);
+    if (existingShare) {
+      return {
+        ok: true as const,
+        alreadyAllowed: true,
+        requesterEmail,
+        recordingId,
+        recordingTitle: recording.title,
+        shareId: existingShare.id,
+        message: "Access was already granted to this requester.",
+      };
+    }
+
+    const shareResult = (await shareResource.run({
+      resourceType: "recording",
+      resourceId: recordingId,
+      principalType: "user",
+      principalId: requesterEmail,
+      role: "viewer",
+      notify: false,
+    })) as { id: string };
+    const shareId = shareResult.id;
+
+    return {
+      ok: true as const,
+      alreadyAllowed: false,
+      requesterEmail,
+      recordingId,
+      recordingTitle: recording.title,
+      shareId,
+      message: "Access granted. This requester can now view the clip.",
+    };
+  },
+});