@agent-native/core 0.164.3 → 0.164.11

package/corpus/templates/clips/server/lib/slack-unfurls.ts

@@ -6,6 +6,7 @@ import { eq } from "drizzle-orm";
 import {
   clipsShareDescription,
   displayRecordingTitle,
+  resolveClipsSocialImageUrl,
 } from "../../shared/share-meta.js";
 import { getDb, schema } from "../db/index.js";
 
@@ -191,15 +192,6 @@ function appPath(path: string, basePath: string): string {
   return base ? `/${base}${path}` : path;
 }
 
-function absoluteUrl(value: string | null | undefined, origin: string): string {
-  if (!value) return AGENT_NATIVE_DEFAULT_SOCIAL_IMAGE;
-  try {
-    return new URL(value, origin).toString();
-  } catch {
-    return AGENT_NATIVE_DEFAULT_SOCIAL_IMAGE;
-  }
-}
-
 function isExpired(value: string | null): boolean {
   if (!value) return false;
   const expires = new Date(value).getTime();
@@ -255,10 +247,12 @@ export function buildSlackVideoBlock(options: {
   const description = duration
     ? `${duration} · ${shareDescription}`
     : shareDescription;
-  const thumbnailUrl = absoluteUrl(
-    recording.thumbnailUrl || recording.animatedThumbnailUrl,
-    origin,
-  );
+  const thumbnailUrl =
+    resolveClipsSocialImageUrl({
+      recording,
+      origin,
+      basePath,
+    }) ?? AGENT_NATIVE_DEFAULT_SOCIAL_IMAGE;
 
   return {
     type: "video",

package/corpus/templates/clips/server/routes/[base]/_agent-native/google/auth-url.post.ts

@@ -0,0 +1 @@
+export { default } from "../../../_agent-native/google/auth-url.get.js";

package/corpus/templates/clips/server/routes/_agent-native/google/auth-url.get.ts

@@ -4,10 +4,14 @@ import {
   isElectron,
   resolveGoogleSignInCredentials,
   resolveOAuthRedirectUri,
+  registerDesktopExchange,
+  prepareDesktopOAuthBrowserBinding,
   safeReturnPath,
 } from "@agent-native/core/server";
 import {
   defineEventHandler,
+  getHeader,
+  getMethod,
   getQuery,
   setResponseStatus,
   type H3Event,
@@ -54,11 +58,39 @@ export default defineEventHandler(async (event: H3Event) => {
       isElectron(event) || q.desktop === "1" || q.desktop === "true";
     const flowId =
       desktop && typeof q.flow_id === "string" ? q.flow_id : undefined;
+    if (getMethod(event) === "POST" && (!desktop || !flowId)) {
+      setResponseStatus(event, 400);
+      return { error: "Invalid desktop exchange challenge." };
+    }
+    const calendarConnect =
+      q.calendar === "1" || q.calendar === "true" || q.product === "calendar";
+    let desktopVerifierHash: string | undefined;
+    let desktopBrowserBindingHash: string | undefined;
+    if (flowId && !calendarConnect) {
+      if (getMethod(event) !== "POST" || q.redirect !== undefined) {
+        setResponseStatus(event, 400);
+        return { error: "Invalid desktop exchange challenge." };
+      }
+      const verifier = getHeader(event, "x-agent-native-desktop-verifier");
+      if (!verifier || q.verifier !== undefined) {
+        setResponseStatus(event, 400);
+        return { error: "Invalid desktop exchange challenge." };
+      }
+      try {
+        desktopBrowserBindingHash = prepareDesktopOAuthBrowserBinding(event);
+        desktopVerifierHash = await registerDesktopExchange(
+          flowId,
+          verifier,
+          desktopBrowserBindingHash,
+        );
+      } catch {
+        setResponseStatus(event, 400);
+        return { error: "Invalid desktop exchange challenge." };
+      }
+    }
     const requestedReturn =
       typeof q.return === "string" ? safeReturnPath(q.return) : "/";
     const returnUrl = requestedReturn !== "/" ? requestedReturn : undefined;
-    const calendarConnect =
-      q.calendar === "1" || q.calendar === "true" || q.product === "calendar";
     const credentials = calendarConnect
       ? ((await resolveGoogleOAuthCredentialCandidates())[0] ?? null)
       : resolveGoogleSignInCredentials();
@@ -84,10 +116,16 @@ export default defineEventHandler(async (event: H3Event) => {
       redirectUri,
       owner,
       desktop,
+      desktopWebview: desktop && q.webview === "1" && !calendarConnect,
       addAccount: calendarConnect,
       app: CLIPS_GOOGLE_OAUTH_APP_ID,
-      returnUrl,
+      returnUrl:
+        desktop && q.webview === "1" && !calendarConnect
+          ? "/?desktop_auth=complete"
+          : returnUrl,
       flowId: calendarConnect ? undefined : flowId,
+      desktopVerifierHash,
+      desktopBrowserBindingHash,
     });
 
     const params = new URLSearchParams({

package/corpus/templates/clips/server/routes/_agent-native/google/auth-url.post.ts

@@ -0,0 +1 @@
+export { default } from "./auth-url.get.js";

package/corpus/templates/clips/server/routes/_agent-native/google/callback.get.ts

@@ -6,6 +6,7 @@ import {
   oauthErrorPage,
   resolveGoogleSignInCredentials,
   resolveOAuthOwner,
+  matchesDesktopOAuthBrowserBinding,
   setDesktopExchange,
   type OAuthStatePayload,
 } from "@agent-native/core/server";
@@ -31,6 +32,17 @@ async function handleGoogleSignInCallback(
 ) {
   const desktop = state.desktop;
   const flowId = state.flowId;
+  if (
+    flowId &&
+    (!state.desktopVerifierHash ||
+      !state.desktopBrowserBindingHash ||
+      !matchesDesktopOAuthBrowserBinding(
+        event,
+        state.desktopBrowserBindingHash,
+      ))
+  ) {
+    return oauthErrorPage("Desktop OAuth browser binding is invalid.");
+  }
 
   try {
     const query = getQuery(event);
@@ -107,12 +119,21 @@ async function handleGoogleSignInCallback(
     });
 
     if (flowId && sessionToken) {
-      setDesktopExchange(flowId, sessionToken, email);
+      if (!state.desktopVerifierHash) {
+        throw new Error("Missing desktop exchange challenge.");
+      }
+      await setDesktopExchange(
+        flowId,
+        sessionToken,
+        email,
+        state.desktopVerifierHash,
+      );
     }
 
     return oauthCallbackResponse(event, email, {
       sessionToken,
       desktop,
+      desktopWebview: state.desktopWebview,
       returnUrl: state.returnUrl,
       flowId,
       appName: "Clips",

package/corpus/templates/clips/server/routes/api/clips-updater.json.get.ts

@@ -1,17 +1,23 @@
-import { defineEventHandler, setResponseHeaders } from "h3";
+import { defineEventHandler, getQuery, setResponseHeaders } from "h3";
 
 /**
  * Tauri updater manifest endpoint for the Clips desktop app.
  *
  * The installed app only needs this endpoint to be valid JSON when no signed
- * updater bundle is available. If the `clips-latest` GitHub pointer release
- * exists, we proxy its signed manifest. If it does not, return a deliberately
- * old no-update manifest so the desktop UI stays quiet instead of surfacing a
+ * updater bundle is available. If the channel's GitHub pointer release exists,
+ * we proxy its signed manifest. If it does not, return a deliberately old
+ * no-update manifest so the desktop UI stays quiet instead of surfacing a
  * release-channel setup error to end users.
  */
 
-const GITHUB_MANIFEST_URL =
-  "https://github.com/BuilderIO/agent-native/releases/download/clips-latest/clips-latest.json";
+type ClipsUpdateChannel = "production" | "nightly";
+
+const GITHUB_MANIFEST_URL: Record<ClipsUpdateChannel, string> = {
+  production:
+    "https://github.com/BuilderIO/agent-native/releases/download/clips-latest/clips-latest.json",
+  nightly:
+    "https://github.com/BuilderIO/agent-native/releases/download/clips-nightly-latest/clips-nightly-latest.json",
+};
 const CACHE_TTL_MS = 5 * 60_000;
 
 // Tauri throws a red-banner error if the requesting client's target triple is
@@ -48,8 +54,8 @@ export const INERT_MANIFEST = {
   },
 };
 
-let cache: { data: unknown; ts: number } | null = null;
-let inFlight: Promise<unknown> | null = null;
+const cache = new Map<ClipsUpdateChannel, { data: unknown; ts: number }>();
+const inFlight = new Map<ClipsUpdateChannel, Promise<unknown>>();
 
 function isManifestLike(value: unknown): value is Record<string, unknown> {
   if (!value || typeof value !== "object") return false;
@@ -72,8 +78,10 @@ export function hasAllRequiredPlatforms(value: unknown): boolean {
   return REQUIRED_PLATFORM_KEYS.every((k) => k in platforms);
 }
 
-async function fetchSignedManifest(): Promise<unknown> {
-  const res = await fetch(GITHUB_MANIFEST_URL, {
+async function fetchSignedManifest(
+  channel: ClipsUpdateChannel,
+): Promise<unknown> {
+  const res = await fetch(GITHUB_MANIFEST_URL[channel], {
     headers: {
       accept: "application/json",
       "user-agent": "clips-updater-manifest",
@@ -94,38 +102,49 @@ async function fetchSignedManifest(): Promise<unknown> {
   return json;
 }
 
-async function getManifest(): Promise<unknown> {
+function normalizeChannel(value: unknown): ClipsUpdateChannel {
+  return value === "nightly" ? "nightly" : "production";
+}
+
+async function getManifest(
+  channel: ClipsUpdateChannel = "production",
+): Promise<unknown> {
   const now = Date.now();
-  if (cache && now - cache.ts < CACHE_TTL_MS) return cache.data;
-  if (inFlight) return inFlight;
-  inFlight = (async () => {
+  const cached = cache.get(channel);
+  if (cached && now - cached.ts < CACHE_TTL_MS) return cached.data;
+  const pending = inFlight.get(channel);
+  if (pending) return pending;
+  const request = (async () => {
     try {
-      const data = await fetchSignedManifest();
-      cache = { data, ts: Date.now() };
+      const data = await fetchSignedManifest(channel);
+      cache.set(channel, { data, ts: Date.now() });
       return data;
     } catch {
       // A validation or network failure may serve the last good manifest (or
       // inert fallback), but it must not make that fallback fresh again.
       // Otherwise an incomplete release manifest can indefinitely extend the
       // stale cache window on every failed refresh.
-      return cache?.data ?? INERT_MANIFEST;
+      return cache.get(channel)?.data ?? INERT_MANIFEST;
     } finally {
-      inFlight = null;
+      inFlight.delete(channel);
     }
   })();
-  return inFlight;
+  inFlight.set(channel, request);
+  return request;
 }
 
 export const __clipsUpdaterTest = {
   getManifest,
   reset() {
-    cache = null;
-    inFlight = null;
+    cache.clear();
+    inFlight.clear();
   },
 };
 
 export default defineEventHandler(async (event) => {
-  const manifest = await getManifest();
+  const query = getQuery(event);
+  const channel = normalizeChannel(query.channel);
+  const manifest = await getManifest(channel);
   setResponseHeaders(event, {
     "content-type": "application/json; charset=utf-8",
     "cache-control": "public, max-age=60",

package/corpus/templates/clips/shared/share-meta.ts

@@ -8,15 +8,25 @@ import {
   type SocialMetaDescriptor,
 } from "@agent-native/core/shared";
 
+import { buildAgentApiUrls } from "./agent-context";
+
 export const CLIPS_DEFAULT_TITLE = "Untitled recording";
 
 export type ClipsShareMetaRecording = {
+  id?: string | null;
   title?: string | null;
   description?: string | null;
   thumbnailUrl?: string | null;
   animatedThumbnailUrl?: string | null;
+  visibility?: string | null;
+  status?: string | null;
+  hasPassword?: boolean;
+  archivedAt?: string | null;
+  trashedAt?: string | null;
 };
 
+const SOCIAL_FRAME_AT_MS = 350;
+
 export type PreferredThumbnailVariant = "still" | "animated";
 
 export function preferredThumbnailVariant(
@@ -81,16 +91,70 @@ function absoluteUrl(value: string, origin: string | null): string {
   }
 }
 
+function appPath(path: string, basePath: string): string {
+  const normalizedBasePath = basePath.trim().replace(/\/+$/, "");
+  return normalizedBasePath ? `${normalizedBasePath}${path}` : path;
+}
+
+function canUseGeneratedSocialFrame(
+  recording: ClipsShareMetaRecording | null,
+): recording is ClipsShareMetaRecording & {
+  id: string;
+  visibility: "public";
+  status: "ready";
+} {
+  return Boolean(
+    recording?.id &&
+    recording.visibility === "public" &&
+    recording.status === "ready" &&
+    !recording.hasPassword &&
+    !recording.archivedAt &&
+    !recording.trashedAt,
+  );
+}
+
+export function resolveClipsSocialImageUrl(options: {
+  recording: ClipsShareMetaRecording | null;
+  origin?: string | null;
+  basePath?: string;
+}): string | undefined {
+  const { recording, origin = null, basePath = "" } = options;
+  if (recording?.hasPassword) return undefined;
+
+  const storedImage = preferredSocialImage(recording);
+
+  if (storedImage) {
+    if (recording?.id && recording.visibility === "public") {
+      return absoluteUrl(
+        appPath(`/api/thumbnail/${encodeURIComponent(recording.id)}`, basePath),
+        origin,
+      );
+    }
+    return absoluteUrl(storedImage, origin);
+  }
+
+  if (!origin || !canUseGeneratedSocialFrame(recording)) return undefined;
+
+  return buildAgentApiUrls(recording.id, {
+    origin,
+    basePath,
+  }).frameUrl(SOCIAL_FRAME_AT_MS);
+}
+
 export function buildClipsShareMeta(options: {
   recording: ClipsShareMetaRecording | null;
   origin?: string | null;
+  basePath?: string;
   shareUrl?: string | null;
 }): SocialMetaDescriptor[] {
-  const { recording, origin = null, shareUrl = null } = options;
+  const { recording, origin = null, basePath = "", shareUrl = null } = options;
   const title = clipsSharePageTitle(recording?.title);
   const description = clipsShareDescription(recording);
-  const image = preferredSocialImage(recording);
-  const absoluteImage = image ? absoluteUrl(image, origin) : undefined;
+  const absoluteImage = resolveClipsSocialImageUrl({
+    recording,
+    origin,
+    basePath,
+  });
   const alt = hasGeneratedTitle(recording?.title)
     ? recording!.title!.trim()
     : AGENT_NATIVE_SOCIAL_IMAGE_ALT;

package/corpus/templates/content/actions/list-content-databases.ts

@@ -1,10 +1,12 @@
 import { defineAction } from "@agent-native/core";
+import { getRequestUserEmail } from "@agent-native/core/server/request-context";
 import { accessFilter } from "@agent-native/core/sharing";
 import {
   and,
   asc,
   eq,
   inArray,
+  isNotNull,
   isNull,
   notInArray,
   or,
@@ -15,6 +17,11 @@ import { z } from "zod";
 import { getDb, schema } from "../server/db/index.js";
 import { documentDiscoveryFilter } from "../server/lib/documents.js";
 import type { ListContentDatabasesResponse } from "../shared/api.js";
+import {
+  listContentOrganizationMemberships,
+  normalizeContentSpaceEmail,
+  resolveContentSpaceAccess,
+} from "./_content-space-access.js";
 import { documentDiscoveryPagination } from "./_document-discovery-query.js";
 
 const DEFAULT_CONTENT_DATABASE_DISCOVERY_LIMIT = 50;
@@ -27,7 +34,7 @@ export class ContentDatabaseResolutionError extends Error {}
 
 export default defineAction({
   description:
-    "Discover one bounded page of ordinary Content databases the user can access from their live title and user-authored description. Returns stable database, document, and space IDs with explicit pagination; follow nextOffset until hasMore is false. Use exact filters before reading a selected database's schema.",
+    "Discover one bounded page of ordinary Content databases the user can access from their live title and user-authored description. Returns stable database, document, and space IDs with explicit pagination; follow nextOffset until hasMore is false. Use exact filters before reading a selected database's schema. Set includeSystemCollections to classify Files, Favorites, Workspaces, and other system chrome separately from ordinary databases.",
   schema: z.object({
     spaceId: z
       .string()
@@ -39,6 +46,12 @@ export default defineAction({
       .min(1)
       .optional()
       .describe("Exact Content database ID to resolve."),
+    includeSystemCollections: z
+      .boolean()
+      .optional()
+      .describe(
+        "Return system-role databases in systemCollections instead of treating them as ordinary databases.",
+      ),
     documentId: z
       .string()
       .min(1)
@@ -80,7 +93,21 @@ export default defineAction({
   readOnly: true,
   publicAgent: { expose: true, readOnly: true, requiresAuth: true },
   run: async (args): Promise<ListContentDatabasesResponse> => {
+    if (args.includeSystemCollections && !args.spaceId) {
+      throw new ContentDatabaseResolutionError(
+        "An exact spaceId is required to inventory system collections.",
+      );
+    }
     const db = getDb();
+    const requestUserEmail = getRequestUserEmail();
+    if (!requestUserEmail) throw new Error("no authenticated user");
+    const normalizedUserEmail = normalizeContentSpaceEmail(requestUserEmail);
+    const authorizedOrganizationIds = (
+      await listContentOrganizationMemberships(normalizedUserEmail)
+    ).map((membership) => membership.orgId);
+    if (args.spaceId) {
+      await resolveContentSpaceAccess(args.spaceId, "viewer", { db });
+    }
     const query = args.query?.trim();
     const pattern = query ? `%${escapeLike(query.toLowerCase())}%` : null;
     const exactTitle = args.title?.toLowerCase();
@@ -160,6 +187,19 @@ export default defineAction({
         isNull(schema.documents.hideFromSearch),
       ),
       isNull(schema.contentDatabases.deletedAt),
+      isNull(schema.contentSpaces.archivedAt),
+      or(
+        isNull(schema.contentDatabases.spaceId),
+        and(
+          isNotNull(schema.contentSpaces.id),
+          or(
+            sql`LOWER(${schema.contentSpaces.ownerEmail}) = ${normalizedUserEmail}`,
+            authorizedOrganizationIds.length > 0
+              ? inArray(schema.contentSpaces.orgId, authorizedOrganizationIds)
+              : undefined,
+          ),
+        ),
+      ),
       isNull(schema.contentDatabases.systemRole),
       args.spaceId
         ? eq(schema.contentDatabases.spaceId, args.spaceId)
@@ -206,6 +246,10 @@ export default defineAction({
           schema.documents,
           eq(schema.contentDatabases.documentId, schema.documents.id),
         )
+        .leftJoin(
+          schema.contentSpaces,
+          eq(schema.contentDatabases.spaceId, schema.contentSpaces.id),
+        )
         .where(where)
         .orderBy(
           asc(schema.documents.position),
@@ -252,10 +296,51 @@ export default defineAction({
                 schema.documents,
                 eq(schema.contentDatabases.documentId, schema.documents.id),
               )
+              .leftJoin(
+                schema.contentSpaces,
+                eq(schema.contentDatabases.spaceId, schema.contentSpaces.id),
+              )
               .where(where)
           )[0]?.count ?? 0,
         );
 
+    const systemCollections = args.includeSystemCollections
+      ? await db
+          .select({
+            databaseId: schema.contentDatabases.id,
+            documentId: schema.contentDatabases.documentId,
+            title: schema.documents.title,
+            spaceId: schema.contentDatabases.spaceId,
+            spaceName: schema.contentSpaces.name,
+            spaceKind: schema.contentSpaces.kind,
+            systemRole: schema.contentDatabases.systemRole,
+          })
+          .from(schema.contentDatabases)
+          .innerJoin(
+            schema.documents,
+            eq(schema.contentDatabases.documentId, schema.documents.id),
+          )
+          .leftJoin(
+            schema.contentSpaces,
+            eq(schema.contentDatabases.spaceId, schema.contentSpaces.id),
+          )
+          .where(
+            and(
+              accessFilter(schema.documents, schema.documentShares),
+              isNull(schema.documents.trashedAt),
+              isNull(schema.contentDatabases.deletedAt),
+              isNull(schema.contentSpaces.archivedAt),
+              isNotNull(schema.contentSpaces.id),
+              isNotNull(schema.contentDatabases.systemRole),
+              eq(schema.contentDatabases.spaceId, args.spaceId!),
+            ),
+          )
+          .orderBy(
+            asc(schema.documents.position),
+            asc(schema.contentDatabases.id),
+          )
+      : undefined;
+
     return {
       databases,
       pagination: documentDiscoveryPagination({
@@ -264,6 +349,15 @@ export default defineAction({
         totalItems,
         returnedItems: databases.length,
       }),
+      ...(systemCollections
+        ? {
+            systemCollections: systemCollections.map((collection) => ({
+              ...collection,
+              title: collection.title ?? "Untitled database",
+              systemRole: collection.systemRole!,
+            })),
+          }
+        : {}),
     };
   },
 });

package/corpus/templates/content/changelog/2026-08-11-content-mutations-delegated-from-verified-slack-dms-now-use-.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-11
+---
+
+Content mutations delegated from verified Slack DMs now use the member's exact Personal scope and return verified row receipts.

package/corpus/templates/content/shared/api.ts

@@ -1082,6 +1082,16 @@ export interface ContentDatabaseSummary {
   description: string;
 }
 
+export interface ContentSystemCollectionSummary {
+  databaseId: string;
+  documentId: string;
+  title: string;
+  spaceId: string | null;
+  spaceName: string | null;
+  spaceKind: string | null;
+  systemRole: string;
+}
+
 export interface ContentDatabaseDescriptionResponse {
   database: ContentDatabase;
   contextPath: ContentContextPathEntry[];
@@ -1091,6 +1101,7 @@ export interface ContentDatabaseDescriptionResponse {
 export interface ListContentDatabasesResponse {
   databases: ContentDatabaseSummary[];
   pagination: DocumentDiscoveryPagination;
+  systemCollections?: ContentSystemCollectionSummary[];
 }
 
 export interface TrashedContentDatabaseSummary {

package/corpus/templates/factory/AGENTS.md

@@ -63,7 +63,7 @@ decisions, feedback, agent runs, and provider audit records.
 | `evaluate-triage-item` | Append a decision. |
 | `record-triage-feedback` | Capture human correction for learning. |
 | `approve-factory-item` | Explicitly authorize one bounded run. |
-| `start-builder-for-item` | Govern clear-bug dispatch through Slack or Builder API. |
+| `start-builder-for-item` | Govern clear-bug dispatch through Slack or Builder API, or record a skip reason. |
 | `govern-agent-native-pull-request` | Apply PR evidence and ownership gates. |
 | `list-factory-automations` / `save-factory-automation` / `run-factory-automation` | Inspect or edit org-owned automations. |
 | `list-factory-audit` | Inspect automation runs, evidence, decisions, and provider actions. |

package/corpus/templates/factory/actions/list-factory-automations.ts

@@ -41,6 +41,10 @@ export default defineAction({
           timezone: meta.timezone ?? null,
           condition: meta.condition ?? null,
           createdBy: meta.createdBy ?? null,
+          updatedAt:
+            Number.isFinite(resource.updatedAt) && resource.updatedAt > 0
+              ? new Date(resource.updatedAt).toISOString()
+              : null,
           canUpdate,
           runs: await listAutomationRuns({
             owners: [resource.owner],