@agent-native/core 0.164.3 → 0.164.4

package/corpus/README.md

@@ -31,4 +31,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- template files: 8445
+- template files: 8447

package/corpus/templates/clips/.agents/skills/video-sharing/SKILL.md

@@ -176,7 +176,7 @@ The playable Slack embed is deliberately narrower than the share page:
 
 - Only `ready` recordings with `visibility === "public"` can produce a video block.
 - Password-protected, expired, archived, trashed, private, org-only, or still-processing clips must not produce a playable Slack block.
-- Slack thumbnails use the stored thumbnail (or animated thumbnail as fallback) and normal share-page metadata remains the fallback when no Slack app is installed.
+- Slack thumbnails use the same-origin proxy for stored thumbnails, or a public video frame when no stored thumbnail exists; normal share-page metadata remains the fallback when no Slack app is installed.
 - Do not put passwords, short-lived share tokens, raw provider URLs, or transcript text in Slack unfurl payloads.
 
 Required Slack app setup:

package/corpus/templates/clips/app/routes/share.$shareId.tsx

@@ -124,6 +124,7 @@ type SharePageMetaRecording = {
   animatedThumbnailUrl: string | null;
   visibility: "private" | "org" | "public";
   status: "uploading" | "processing" | "ready" | "failed";
+  hasPassword: boolean;
   archivedAt: string | null;
   trashedAt: string | null;
 };
@@ -270,6 +271,7 @@ export async function loader({ params, url }: LoaderFunctionArgs) {
     animatedThumbnailUrl: null,
     visibility: rec.visibility,
     status: rec.status,
+    hasPassword: Boolean(rec.password),
     archivedAt: rec.archivedAt,
     trashedAt: rec.trashedAt,
   };
@@ -315,6 +317,7 @@ export const meta: MetaFunction<typeof loader> = ({ loaderData }) => {
   return buildClipsShareMeta({
     recording: loaderData?.recording ?? null,
     origin: loaderData?.origin ?? null,
+    basePath: appBasePath(),
     shareUrl: loaderData?.shareUrl ?? null,
   });
 };

package/corpus/templates/clips/changelog/2026-08-19-social-preview-video-frames.md

@@ -0,0 +1,5 @@
+---
+type: fixed
+date: 2026-08-19
+---
+Shared clips now show a video frame in social previews when no thumbnail is stored.

package/corpus/templates/clips/server/lib/slack-unfurls.ts

@@ -6,6 +6,7 @@ import { eq } from "drizzle-orm";
 import {
   clipsShareDescription,
   displayRecordingTitle,
+  resolveClipsSocialImageUrl,
 } from "../../shared/share-meta.js";
 import { getDb, schema } from "../db/index.js";
 
@@ -191,15 +192,6 @@ function appPath(path: string, basePath: string): string {
   return base ? `/${base}${path}` : path;
 }
 
-function absoluteUrl(value: string | null | undefined, origin: string): string {
-  if (!value) return AGENT_NATIVE_DEFAULT_SOCIAL_IMAGE;
-  try {
-    return new URL(value, origin).toString();
-  } catch {
-    return AGENT_NATIVE_DEFAULT_SOCIAL_IMAGE;
-  }
-}
-
 function isExpired(value: string | null): boolean {
   if (!value) return false;
   const expires = new Date(value).getTime();
@@ -255,10 +247,12 @@ export function buildSlackVideoBlock(options: {
   const description = duration
     ? `${duration} · ${shareDescription}`
     : shareDescription;
-  const thumbnailUrl = absoluteUrl(
-    recording.thumbnailUrl || recording.animatedThumbnailUrl,
-    origin,
-  );
+  const thumbnailUrl =
+    resolveClipsSocialImageUrl({
+      recording,
+      origin,
+      basePath,
+    }) ?? AGENT_NATIVE_DEFAULT_SOCIAL_IMAGE;
 
   return {
     type: "video",

package/corpus/templates/clips/shared/share-meta.ts

@@ -8,15 +8,25 @@ import {
   type SocialMetaDescriptor,
 } from "@agent-native/core/shared";
 
+import { buildAgentApiUrls } from "./agent-context";
+
 export const CLIPS_DEFAULT_TITLE = "Untitled recording";
 
 export type ClipsShareMetaRecording = {
+  id?: string | null;
   title?: string | null;
   description?: string | null;
   thumbnailUrl?: string | null;
   animatedThumbnailUrl?: string | null;
+  visibility?: string | null;
+  status?: string | null;
+  hasPassword?: boolean;
+  archivedAt?: string | null;
+  trashedAt?: string | null;
 };
 
+const SOCIAL_FRAME_AT_MS = 350;
+
 export type PreferredThumbnailVariant = "still" | "animated";
 
 export function preferredThumbnailVariant(
@@ -81,16 +91,70 @@ function absoluteUrl(value: string, origin: string | null): string {
   }
 }
 
+function appPath(path: string, basePath: string): string {
+  const normalizedBasePath = basePath.trim().replace(/\/+$/, "");
+  return normalizedBasePath ? `${normalizedBasePath}${path}` : path;
+}
+
+function canUseGeneratedSocialFrame(
+  recording: ClipsShareMetaRecording | null,
+): recording is ClipsShareMetaRecording & {
+  id: string;
+  visibility: "public";
+  status: "ready";
+} {
+  return Boolean(
+    recording?.id &&
+    recording.visibility === "public" &&
+    recording.status === "ready" &&
+    !recording.hasPassword &&
+    !recording.archivedAt &&
+    !recording.trashedAt,
+  );
+}
+
+export function resolveClipsSocialImageUrl(options: {
+  recording: ClipsShareMetaRecording | null;
+  origin?: string | null;
+  basePath?: string;
+}): string | undefined {
+  const { recording, origin = null, basePath = "" } = options;
+  if (recording?.hasPassword) return undefined;
+
+  const storedImage = preferredSocialImage(recording);
+
+  if (storedImage) {
+    if (recording?.id && recording.visibility === "public") {
+      return absoluteUrl(
+        appPath(`/api/thumbnail/${encodeURIComponent(recording.id)}`, basePath),
+        origin,
+      );
+    }
+    return absoluteUrl(storedImage, origin);
+  }
+
+  if (!origin || !canUseGeneratedSocialFrame(recording)) return undefined;
+
+  return buildAgentApiUrls(recording.id, {
+    origin,
+    basePath,
+  }).frameUrl(SOCIAL_FRAME_AT_MS);
+}
+
 export function buildClipsShareMeta(options: {
   recording: ClipsShareMetaRecording | null;
   origin?: string | null;
+  basePath?: string;
   shareUrl?: string | null;
 }): SocialMetaDescriptor[] {
-  const { recording, origin = null, shareUrl = null } = options;
+  const { recording, origin = null, basePath = "", shareUrl = null } = options;
   const title = clipsSharePageTitle(recording?.title);
   const description = clipsShareDescription(recording);
-  const image = preferredSocialImage(recording);
-  const absoluteImage = image ? absoluteUrl(image, origin) : undefined;
+  const absoluteImage = resolveClipsSocialImageUrl({
+    recording,
+    origin,
+    basePath,
+  });
   const alt = hasGeneratedTitle(recording?.title)
     ? recording!.title!.trim()
     : AGENT_NATIVE_SOCIAL_IMAGE_ALT;

package/corpus/templates/content/actions/list-content-databases.ts

@@ -1,10 +1,12 @@
 import { defineAction } from "@agent-native/core";
+import { getRequestUserEmail } from "@agent-native/core/server/request-context";
 import { accessFilter } from "@agent-native/core/sharing";
 import {
   and,
   asc,
   eq,
   inArray,
+  isNotNull,
   isNull,
   notInArray,
   or,
@@ -15,6 +17,11 @@ import { z } from "zod";
 import { getDb, schema } from "../server/db/index.js";
 import { documentDiscoveryFilter } from "../server/lib/documents.js";
 import type { ListContentDatabasesResponse } from "../shared/api.js";
+import {
+  listContentOrganizationMemberships,
+  normalizeContentSpaceEmail,
+  resolveContentSpaceAccess,
+} from "./_content-space-access.js";
 import { documentDiscoveryPagination } from "./_document-discovery-query.js";
 
 const DEFAULT_CONTENT_DATABASE_DISCOVERY_LIMIT = 50;
@@ -27,7 +34,7 @@ export class ContentDatabaseResolutionError extends Error {}
 
 export default defineAction({
   description:
-    "Discover one bounded page of ordinary Content databases the user can access from their live title and user-authored description. Returns stable database, document, and space IDs with explicit pagination; follow nextOffset until hasMore is false. Use exact filters before reading a selected database's schema.",
+    "Discover one bounded page of ordinary Content databases the user can access from their live title and user-authored description. Returns stable database, document, and space IDs with explicit pagination; follow nextOffset until hasMore is false. Use exact filters before reading a selected database's schema. Set includeSystemCollections to classify Files, Favorites, Workspaces, and other system chrome separately from ordinary databases.",
   schema: z.object({
     spaceId: z
       .string()
@@ -39,6 +46,12 @@ export default defineAction({
       .min(1)
       .optional()
       .describe("Exact Content database ID to resolve."),
+    includeSystemCollections: z
+      .boolean()
+      .optional()
+      .describe(
+        "Return system-role databases in systemCollections instead of treating them as ordinary databases.",
+      ),
     documentId: z
       .string()
       .min(1)
@@ -80,7 +93,21 @@ export default defineAction({
   readOnly: true,
   publicAgent: { expose: true, readOnly: true, requiresAuth: true },
   run: async (args): Promise<ListContentDatabasesResponse> => {
+    if (args.includeSystemCollections && !args.spaceId) {
+      throw new ContentDatabaseResolutionError(
+        "An exact spaceId is required to inventory system collections.",
+      );
+    }
     const db = getDb();
+    const requestUserEmail = getRequestUserEmail();
+    if (!requestUserEmail) throw new Error("no authenticated user");
+    const normalizedUserEmail = normalizeContentSpaceEmail(requestUserEmail);
+    const authorizedOrganizationIds = (
+      await listContentOrganizationMemberships(normalizedUserEmail)
+    ).map((membership) => membership.orgId);
+    if (args.spaceId) {
+      await resolveContentSpaceAccess(args.spaceId, "viewer", { db });
+    }
     const query = args.query?.trim();
     const pattern = query ? `%${escapeLike(query.toLowerCase())}%` : null;
     const exactTitle = args.title?.toLowerCase();
@@ -160,6 +187,19 @@ export default defineAction({
         isNull(schema.documents.hideFromSearch),
       ),
       isNull(schema.contentDatabases.deletedAt),
+      isNull(schema.contentSpaces.archivedAt),
+      or(
+        isNull(schema.contentDatabases.spaceId),
+        and(
+          isNotNull(schema.contentSpaces.id),
+          or(
+            sql`LOWER(${schema.contentSpaces.ownerEmail}) = ${normalizedUserEmail}`,
+            authorizedOrganizationIds.length > 0
+              ? inArray(schema.contentSpaces.orgId, authorizedOrganizationIds)
+              : undefined,
+          ),
+        ),
+      ),
       isNull(schema.contentDatabases.systemRole),
       args.spaceId
         ? eq(schema.contentDatabases.spaceId, args.spaceId)
@@ -206,6 +246,10 @@ export default defineAction({
           schema.documents,
           eq(schema.contentDatabases.documentId, schema.documents.id),
         )
+        .leftJoin(
+          schema.contentSpaces,
+          eq(schema.contentDatabases.spaceId, schema.contentSpaces.id),
+        )
         .where(where)
         .orderBy(
           asc(schema.documents.position),
@@ -252,10 +296,51 @@ export default defineAction({
                 schema.documents,
                 eq(schema.contentDatabases.documentId, schema.documents.id),
               )
+              .leftJoin(
+                schema.contentSpaces,
+                eq(schema.contentDatabases.spaceId, schema.contentSpaces.id),
+              )
               .where(where)
           )[0]?.count ?? 0,
         );
 
+    const systemCollections = args.includeSystemCollections
+      ? await db
+          .select({
+            databaseId: schema.contentDatabases.id,
+            documentId: schema.contentDatabases.documentId,
+            title: schema.documents.title,
+            spaceId: schema.contentDatabases.spaceId,
+            spaceName: schema.contentSpaces.name,
+            spaceKind: schema.contentSpaces.kind,
+            systemRole: schema.contentDatabases.systemRole,
+          })
+          .from(schema.contentDatabases)
+          .innerJoin(
+            schema.documents,
+            eq(schema.contentDatabases.documentId, schema.documents.id),
+          )
+          .leftJoin(
+            schema.contentSpaces,
+            eq(schema.contentDatabases.spaceId, schema.contentSpaces.id),
+          )
+          .where(
+            and(
+              accessFilter(schema.documents, schema.documentShares),
+              isNull(schema.documents.trashedAt),
+              isNull(schema.contentDatabases.deletedAt),
+              isNull(schema.contentSpaces.archivedAt),
+              isNotNull(schema.contentSpaces.id),
+              isNotNull(schema.contentDatabases.systemRole),
+              eq(schema.contentDatabases.spaceId, args.spaceId!),
+            ),
+          )
+          .orderBy(
+            asc(schema.documents.position),
+            asc(schema.contentDatabases.id),
+          )
+      : undefined;
+
     return {
       databases,
       pagination: documentDiscoveryPagination({
@@ -264,6 +349,15 @@ export default defineAction({
         totalItems,
         returnedItems: databases.length,
       }),
+      ...(systemCollections
+        ? {
+            systemCollections: systemCollections.map((collection) => ({
+              ...collection,
+              title: collection.title ?? "Untitled database",
+              systemRole: collection.systemRole!,
+            })),
+          }
+        : {}),
     };
   },
 });

package/corpus/templates/content/changelog/2026-08-11-content-mutations-delegated-from-verified-slack-dms-now-use-.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-11
+---
+
+Content mutations delegated from verified Slack DMs now use the member's exact Personal scope and return verified row receipts.

package/corpus/templates/content/shared/api.ts

@@ -1082,6 +1082,16 @@ export interface ContentDatabaseSummary {
   description: string;
 }
 
+export interface ContentSystemCollectionSummary {
+  databaseId: string;
+  documentId: string;
+  title: string;
+  spaceId: string | null;
+  spaceName: string | null;
+  spaceKind: string | null;
+  systemRole: string;
+}
+
 export interface ContentDatabaseDescriptionResponse {
   database: ContentDatabase;
   contextPath: ContentContextPathEntry[];
@@ -1091,6 +1101,7 @@ export interface ContentDatabaseDescriptionResponse {
 export interface ListContentDatabasesResponse {
   databases: ContentDatabaseSummary[];
   pagination: DocumentDiscoveryPagination;
+  systemCollections?: ContentSystemCollectionSummary[];
 }
 
 export interface TrashedContentDatabaseSummary {

package/dist/a2a/artifact-response.d.ts

@@ -9,6 +9,7 @@ export interface A2AArtifactResponseOptions {
     includeReferencedArtifacts?: boolean;
     includePersistedArtifactMarker?: boolean;
     persistedArtifactSecret?: string;
+    delegatedTaskId?: string;
 }
 export interface GuardedA2AArtifactResponse {
     text: string;
@@ -16,6 +17,7 @@ export interface GuardedA2AArtifactResponse {
 }
 export interface A2AArtifactIdentityOptions {
     persistedArtifactSecrets?: readonly string[];
+    expectedDelegatedTaskId?: string;
 }
 export interface A2AArtifactIdentity {
     resourceType: "document" | "deck" | "dashboard" | "analysis" | "image" | "design" | "monitor" | "form";
@@ -24,6 +26,48 @@ export interface A2AArtifactIdentity {
     titleAtAction?: string;
     url?: string;
 }
+export interface A2APersistedMutationReceipt {
+    receiptId: string;
+    sourceAction: string;
+    operation: string;
+    outcome: string;
+    target: {
+        authorityScopeKind: "personal" | "organization";
+        authorityScopeId: string;
+        spaceId: string;
+        databaseId: string;
+        databaseDocumentId: string;
+        itemId?: string;
+        rowDocumentId?: string;
+        propertyId?: string;
+    };
+    row: {
+        itemId?: string;
+        documentId: string;
+        urlPath: string;
+    };
+    idempotency: {
+        key: string;
+        result: "applied" | "replayed";
+        payloadDigest: string;
+    };
+    revisions: {
+        before?: string | null;
+        after?: string;
+        rowBefore?: string;
+        rowAfter?: string;
+        fieldBefore?: number;
+        fieldAfter?: number;
+    };
+    affected?: {
+        title?: boolean;
+        propertyIds?: string[];
+        blockIds?: string[];
+        deletedBlockIds?: string[];
+        order?: string[];
+    };
+    readbackVerified: true;
+}
 export declare function stripA2APersistedArtifactMarkers(text: string): string;
 /**
  * Extract a compact, verified identity ledger from successful artifact tools.
@@ -31,6 +75,12 @@ export declare function stripA2APersistedArtifactMarkers(text: string): string;
  * long-lived thread context and stable even when a resource is later renamed.
  */
 export declare function extractA2AArtifactIdentities(results: A2AToolResultSummary[], options?: A2AArtifactIdentityOptions): A2AArtifactIdentity[];
+/**
+ * Extract bounded, read-back-verified mutation receipts. Nested agent results
+ * are accepted only through the signed persisted ledger.
+ */
+export declare function extractA2APersistedMutationReceipts(results: A2AToolResultSummary[], options?: A2AArtifactIdentityOptions): A2APersistedMutationReceipt[];
+export declare function appendA2APersistedMutationReceipts(text: string, toolResults: A2AToolResultSummary[], options?: A2AArtifactResponseOptions): string;
 export declare function guardA2AArtifactResponse(responseText: string, toolResults: A2AToolResultSummary[], options?: A2AArtifactResponseOptions): GuardedA2AArtifactResponse;
 export declare function appendA2AArtifactLinks(responseText: string, toolResults: A2AToolResultSummary[], options?: A2AArtifactResponseOptions): string;
 export declare function buildA2ARecoverableArtifactMessage(toolResults: A2AToolResultSummary[], options?: A2AArtifactResponseOptions): string | null;