@agent-native/core 0.165.3 → 0.167.0

package/corpus/templates/content/app/components/editor/database/settings.tsx

@@ -45,7 +45,6 @@ import {
 import {
   useEffect,
   useMemo,
-  useRef,
   useState,
   type MouseEvent as ReactMouseEvent,
   type ReactNode,
@@ -2460,20 +2459,6 @@ function SourceChangeSetReviewCard({
   );
 }
 
-function SourceMetadataRow({ label, value }: { label: string; value: string }) {
-  return (
-    <div className="flex min-w-0 items-start justify-between gap-3 text-xs">
-      <span className="shrink-0 text-muted-foreground">{label}</span>
-      <span
-        className="min-w-0 max-w-[65%] break-words text-right"
-        title={value}
-      >
-        {value}
-      </span>
-    </div>
-  );
-}
-
 function sourceRiskClass(risk: ContentDatabaseSourceChangeSet["riskLevel"]) {
   return cn(
     "rounded border px-1.5 py-0.5",
@@ -2573,14 +2558,6 @@ function formatRelativeSyncTime(value: string | null): string | null {
   return `${Math.floor(hours / 24)}d ago`;
 }
 
-function sourceBuilderReadModeSummary(source: ContentDatabaseSource) {
-  if (source.metadata.liveReadConfigured) return "Builder API read-only";
-  if (source.metadata.readMode === "fixture") {
-    return "Local fixture; Builder credentials unavailable";
-  }
-  return "Local fixture";
-}
-
 function sourcePushModeLabel(
   mode: ContentDatabaseSource["metadata"]["pushMode"] | null | undefined,
 ) {

package/corpus/templates/content/app/components/editor/database/sidebar.tsx

@@ -5,7 +5,6 @@ import type {
   ContentDatabasePersonalViewOverrides,
   ContentDatabaseResponse,
   ContentDatabaseViewConfig,
-  ContentSidebarOrderMode,
   ContentSidebarViewOrder,
 } from "@shared/api";
 import {

package/corpus/templates/content/app/components/sidebar/DocumentSidebar.tsx

@@ -11,28 +11,12 @@ import { useT } from "@agent-native/core/client/i18n";
 import { OrgSwitcher } from "@agent-native/core/client/org";
 import { FeedbackButton } from "@agent-native/core/client/ui";
 import { SidebarFooterActions } from "@agent-native/toolkit/app-shell";
-import {
-  closestCenter,
-  DndContext,
-  KeyboardSensor,
-  PointerSensor,
-  useSensor,
-  useSensors,
-  type DragEndEvent,
-} from "@dnd-kit/core";
-import {
-  arrayMove,
-  SortableContext,
-  sortableKeyboardCoordinates,
-  verticalListSortingStrategy,
-} from "@dnd-kit/sortable";
 import type {
   ContentDatabaseItem,
   ContentDatabasePersonalViewOverrides,
   ContentDatabaseResponse,
   ContentSidebarViewOrder,
   Document,
-  DocumentTreeNode,
 } from "@shared/api";
 import { CONTENT_DATABASE_PERSONAL_VIEW_OVERRIDES_VERSION } from "@shared/api";
 import {
@@ -49,19 +33,11 @@ import {
   IconLayoutSidebarLeftExpand,
   IconChevronDown,
   IconChevronRight,
-  IconDots,
   IconTrash,
   IconGitBranch,
 } from "@tabler/icons-react";
 import { useQueryClient } from "@tanstack/react-query";
-import {
-  useCallback,
-  useEffect,
-  useMemo,
-  useRef,
-  useState,
-  type ReactNode,
-} from "react";
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { Link, useLocation, useNavigate } from "react-router";
 import { toast } from "sonner";
 
@@ -87,7 +63,6 @@ import {
   DropdownMenuItem,
   DropdownMenuRadioGroup,
   DropdownMenuRadioItem,
-  DropdownMenuSeparator,
   DropdownMenuTrigger,
 } from "@/components/ui/dropdown-menu";
 import { ScrollArea } from "@/components/ui/scroll-area";
@@ -121,11 +96,9 @@ import {
   useCreateDocument,
   useDeleteDocument,
   usePermanentlyDeleteDocument,
-  useMoveDocument,
   useRestoreDocument,
   useTrashedDocuments,
   useUpdateDocument,
-  buildDocumentTree,
   filterDocumentTreeDocuments,
   documentQueryFilter,
   rollbackOptimisticCreatedDocument,
@@ -148,11 +121,8 @@ import {
 } from "@/lib/optimistic-document";
 import { cn } from "@/lib/utils";
 
-import {
-  getDocumentSidebarSections,
-  isDirectLocalDocument,
-} from "./document-sidebar-sections";
-import { DocumentSidebarIcon, DocumentTreeItem } from "./DocumentTreeItem";
+import { getDocumentSidebarSections } from "./document-sidebar-sections";
+import { DocumentSidebarIcon } from "./DocumentTreeItem";
 import {
   firstLocalSourceDocumentId,
   localSourceItemIdentity,
@@ -903,13 +873,13 @@ export function DocumentSidebar({
     [t],
   );
   const documentsQuery = useDocuments();
-  const { data: documents = [], isLoading } = documentsQuery;
+  const { data: documents = [] } = documentsQuery;
   const createDocument = useCreateDocument();
   const createDatabase = useCreateContentDatabase(null);
   const deleteContentDatabase = useDeleteContentDatabase();
   const deleteDocument = useDeleteDocument();
   const permanentlyDeleteDocument = usePermanentlyDeleteDocument();
-  const moveDocument = useMoveDocument();
+
   const restoreDocument = useRestoreDocument();
   const { data: trashedDocuments } = useTrashedDocuments();
   const restoreContentDatabase = useRestoreContentDatabase();
@@ -1176,7 +1146,6 @@ export function DocumentSidebar({
   // Track user-expanded nodes only; active ancestors are derived below so they
   // do not stay open after navigation unless the user explicitly expanded them.
   const expandedIdsRef = useRef(new Set<string>());
-  const [, forceUpdate] = useState(0);
   const [isResizing, setIsResizing] = useState(false);
   const [storedCollapsedSections, setStoredCollapsedSections] = useLocalStorage<
     Partial<Record<SidebarSectionId, boolean>>
@@ -1208,14 +1177,6 @@ export function DocumentSidebar({
   } | null>(null);
   const confirmedDeleteIdRef = useRef<string | null>(null);
   const settingsActive = location.pathname.startsWith("/settings");
-  const sensors = useSensors(
-    useSensor(PointerSensor, {
-      activationConstraint: { distance: 6 },
-    }),
-    useSensor(KeyboardSensor, {
-      coordinateGetter: sortableKeyboardCoordinates,
-    }),
-  );
 
   const handleMouseDown = useCallback(
     (e: React.MouseEvent) => {
@@ -1247,20 +1208,9 @@ export function DocumentSidebar({
   );
 
   const treeDocuments = filterDocumentTreeDocuments(documents);
-  const {
-    localFileMode,
-    localSourceDocuments,
-    databaseDocuments,
-    showFavorites,
-  } = getDocumentSidebarSections(documents, treeDocuments);
-  const localFileTree = buildDocumentTree(localSourceDocuments);
-  const databaseTree = buildDocumentTree(databaseDocuments);
-  const importedLocalFileCount = localFileMode
-    ? 0
-    : localSourceDocuments.filter(
-        (document) => document.source?.kind !== "folder",
-      ).length;
-  const canRemoveLocalFiles = localFileMode || importedLocalFileCount > 0;
+  const { localFileMode, databaseDocuments, showFavorites } =
+    getDocumentSidebarSections(documents, treeDocuments);
+
   const activeDocument = activeDocumentId
     ? documents.find((doc) => doc.id === activeDocumentId)
     : null;
@@ -1286,19 +1236,6 @@ export function DocumentSidebar({
   const expandedIds = new Set(expandedIdsRef.current);
   for (const id of activeAncestorIds) expandedIds.add(id);
 
-  const handleToggleExpanded = useCallback(
-    (id: string) => {
-      if (activeAncestorIds.has(id)) return;
-      if (expandedIdsRef.current.has(id)) {
-        expandedIdsRef.current.delete(id);
-      } else {
-        expandedIdsRef.current.add(id);
-      }
-      forceUpdate((n) => n + 1);
-    },
-    [activeAncestorIds],
-  );
-
   const navigateToDocument = useCallback(
     (id: string) => {
       navigate(`/page/${id}`, { flushSync: true });
@@ -1587,89 +1524,6 @@ export function DocumentSidebar({
     });
   }, []);
 
-  const handleReorderPage = useCallback(
-    async (id: string, overId: string) => {
-      if (id === overId) return;
-      const current = documents.find((doc) => doc.id === id);
-      const target = documents.find((doc) => doc.id === overId);
-      if (!current || !target) return;
-      if (current.parentId !== target.parentId) {
-        return;
-      }
-
-      const siblings = documents
-        .filter((doc) => doc.parentId === current.parentId)
-        .sort(compareDocumentsByPosition);
-      const currentIndex = siblings.findIndex((doc) => doc.id === id);
-      const nextIndex = siblings.findIndex((doc) => doc.id === overId);
-      if (currentIndex < 0 || nextIndex < 0 || currentIndex === nextIndex) {
-        return;
-      }
-
-      const reordered = arrayMove(siblings, currentIndex, nextIndex);
-      const nextPositionById = new Map(
-        reordered.map((doc, index) => [doc.id, index]),
-      );
-      const changed = reordered.filter(
-        (doc) => doc.position !== nextPositionById.get(doc.id),
-      );
-      if (changed.length === 0) return;
-      if (changed.some((doc) => doc.canEdit === false)) {
-        toast.error(t("sidebar.cannotReorderPages"), {
-          description: t("sidebar.oneAffectedPageReadOnly"),
-        });
-        return;
-      }
-
-      queryClient.setQueryData(LIST_DOCUMENTS_QUERY_KEY, (old: unknown) => {
-        const cachedDocs: Document[] =
-          (old as { documents?: Document[] })?.documents ??
-          (Array.isArray(old) ? old : documents);
-        const nextDocs = cachedDocs.map((doc) => {
-          const nextPosition = nextPositionById.get(doc.id);
-          return nextPosition === undefined
-            ? doc
-            : { ...doc, position: nextPosition };
-        });
-        return withDocumentsCacheShape(old, nextDocs);
-      });
-
-      try {
-        await Promise.all(
-          changed.map((doc) =>
-            moveDocument.mutateAsync({
-              id: doc.id,
-              position: nextPositionById.get(doc.id)!,
-            }),
-          ),
-        );
-      } catch (err) {
-        queryClient.invalidateQueries({
-          queryKey: ["action", "list-documents"],
-        });
-        toast.error(t("sidebar.failedMovePage"), {
-          description:
-            err instanceof Error ? err.message : t("empty.genericError"),
-        });
-      }
-    },
-    [documents, moveDocument, queryClient],
-  );
-
-  const handleDragEnd = useCallback(
-    (event: DragEndEvent) => {
-      const { active, over } = event;
-      const activeId = String(active.id);
-      const overId = over ? String(over.id) : null;
-      if (!overId || activeId === overId) return;
-      if (parentByDocumentId.get(activeId) !== parentByDocumentId.get(overId)) {
-        return;
-      }
-      void handleReorderPage(activeId, overId);
-    },
-    [handleReorderPage, parentByDocumentId],
-  );
-
   const handlePinnedReorder = useCallback(
     (_itemIds: string[], moved: { itemId: string; position: number }) => {
       if (!favoritesDatabaseId) return;
@@ -1829,33 +1683,6 @@ export function DocumentSidebar({
       )
     : null;
 
-  const renderDocumentTree = (nodes: DocumentTreeNode[]) => (
-    <SortableContext
-      items={nodes.map((node) => node.id)}
-      strategy={verticalListSortingStrategy}
-    >
-      {nodes.map((node) => (
-        <DocumentTreeItem
-          key={node.id}
-          node={node}
-          depth={0}
-          sidebarWidth={width}
-          activeId={activeDocumentId}
-          expandedIds={expandedIds}
-          onToggleExpanded={handleToggleExpanded}
-          onSelect={(id) => {
-            navigateToDocument(id);
-            onNavigate?.();
-          }}
-          onCreateChildPage={(parentId) => handleCreatePage(parentId)}
-          onCreateChildDatabase={(parentId) => handleCreateDatabase(parentId)}
-          onDelete={requestDelete}
-          onToggleFavorite={handleToggleFavorite}
-        />
-      ))}
-    </SortableContext>
-  );
-
   const renderNewButton = (space = selectedSpace) =>
     space ? (
       <button
@@ -1989,78 +1816,6 @@ export function DocumentSidebar({
     });
   };
 
-  const renderLocalFilesSectionActions = () => (
-    <DropdownMenu>
-      <Tooltip>
-        <TooltipTrigger asChild>
-          <DropdownMenuTrigger asChild>
-            <button
-              type="button"
-              aria-label={t("sidebar.localFilesActions")}
-              className="flex size-6 shrink-0 items-center justify-center rounded-md text-muted-foreground hover:bg-accent hover:text-foreground"
-            >
-              <IconDots size={14} />
-            </button>
-          </DropdownMenuTrigger>
-        </TooltipTrigger>
-        <TooltipContent>{t("sidebar.localFilesActions")}</TooltipContent>
-      </Tooltip>
-      <DropdownMenuContent align="end" className="w-56">
-        <DropdownMenuItem asChild>
-          <Link to="/local-files">
-            <IconFolderOpen className="me-2 size-4" />
-            {t("sidebar.manageLocalFolders")}
-          </Link>
-        </DropdownMenuItem>
-        {canRemoveLocalFiles && (
-          <>
-            <DropdownMenuSeparator />
-            <DropdownMenuItem
-              className="text-destructive focus:text-destructive"
-              disabled={removeLocalFileSource.isPending}
-              onSelect={(event) => {
-                event.preventDefault();
-                setRemoveLocalFilesDialogOpen(true);
-              }}
-            >
-              <IconTrash className="me-2 size-4" />
-              {t("sidebar.removeLocalFilesFromSidebar")}
-            </DropdownMenuItem>
-          </>
-        )}
-      </DropdownMenuContent>
-    </DropdownMenu>
-  );
-
-  const renderSectionHeader = (
-    id: SidebarSectionId,
-    label: string,
-    actions?: ReactNode,
-  ) => {
-    const collapsed = collapsedSections[id];
-    return (
-      <div className="flex min-w-0 items-center gap-1 px-1">
-        <button
-          type="button"
-          aria-expanded={!collapsed}
-          className="flex min-w-0 flex-1 items-center gap-1 rounded-md px-2 py-1.5 text-start text-[10px] font-semibold uppercase tracking-wider text-muted-foreground hover:bg-accent/40 hover:text-foreground"
-          onClick={() => toggleSection(id)}
-        >
-          <IconChevronRight
-            size={12}
-            className={cn(
-              "shrink-0 transition-transform",
-              !collapsed && "rotate-90",
-              "rtl:-scale-x-100",
-            )}
-          />
-          <span className="min-w-0 flex-1 truncate">{label}</span>
-        </button>
-        {actions}
-      </div>
-    );
-  };
-
   const renderTreeSkeleton = () => (
     <div aria-hidden="true" className="grid gap-1 px-3 py-1">
       {[70, 55, 85, 60, 45].map((w, i) => (
@@ -2075,57 +1830,6 @@ export function DocumentSidebar({
     </div>
   );
 
-  const renderTreeSection = ({
-    id,
-    label,
-    nodes,
-    emptyLabel,
-    className,
-    headerActions,
-    footer,
-  }: {
-    id: SidebarSectionId;
-    label: string;
-    nodes: DocumentTreeNode[];
-    emptyLabel: string;
-    className?: string;
-    headerActions?: ReactNode;
-    footer?: ReactNode;
-  }) => {
-    const collapsed = collapsedSections[id];
-    return (
-      <div className={className}>
-        {renderSectionHeader(id, label, headerActions)}
-        {!collapsed && (
-          <>
-            <DndContext
-              sensors={sensors}
-              collisionDetection={closestCenter}
-              onDragEnd={handleDragEnd}
-            >
-              {isLoading ? (
-                renderTreeSkeleton()
-              ) : documentsQuery.isError ? (
-                <QueryErrorState
-                  compact
-                  onRetry={() => void documentsQuery.refetch()}
-                  retrying={documentsQuery.isFetching}
-                />
-              ) : nodes.length === 0 ? (
-                <div className="px-3 py-4 text-center text-sm text-muted-foreground">
-                  {emptyLabel}
-                </div>
-              ) : (
-                renderDocumentTree(nodes)
-              )}
-            </DndContext>
-            {footer}
-          </>
-        )}
-      </div>
-    );
-  };
-
   const renderWorkspaceRoot = (
     space: ContentSpaceSummary,
     reorder?: ContentFilesSidebarRenderReorder,

package/corpus/templates/content/app/hooks/use-documents.ts

@@ -23,7 +23,6 @@ import { toast } from "sonner";
 import type { DocumentUpdateConflictResponse } from "../../actions/update-document";
 import {
   documentQueryFilter,
-  documentQueryKey,
   type DocumentQueryContext,
 } from "../lib/document-query";
 import {

package/corpus/templates/content/shared/api.ts

@@ -1,7 +1,6 @@
 import type { BlocksFieldIdentity } from "./blocks-field-identity";
 import type {
   DocumentPropertyOptions,
-  DocumentPropertyOption,
   DocumentPropertyType,
   DocumentPropertyValue,
   DocumentPropertyVisibility,

package/corpus/templates/content/shared/builder-mdx.ts

@@ -18,7 +18,6 @@ import {
 } from "./nfm-registry";
 import type {
   SourceComponentData,
-  SourceComponentPreview,
   SourceComponentPreviewTable,
 } from "./source-component-block";
 

package/corpus/templates/content/shared/nfm.ts

@@ -42,7 +42,7 @@
  */
 
 import { matchInlineMathAt } from "./inline-math.js";
-import { isRegistryBlockTag, registryBlockSpecByTag } from "./nfm-registry.js";
+import { registryBlockSpecByTag } from "./nfm-registry.js";
 
 // ── Shared PM JSON types ────────────────────────────────────────────
 export interface PMMark {
@@ -945,11 +945,6 @@ function serializeBlock(node: PMNode, indent: number): string[] {
   }
 }
 
-function serializeChildrenAfterFirst(node: PMNode, indent: number): string[] {
-  const children = (node.content || []).slice(1);
-  return serializeBlocks(children, indent);
-}
-
 function serializeQuote(node: PMNode, ind: number): string[] {
   const textPara = firstParagraph(node);
   const out: string[] = [];
@@ -1998,7 +1993,6 @@ function parseContainer(
     return { nodes: [withIndentAttr(node)], end: start + 1 };
   }
   const closeIdx = i;
-  const innerEnd = closeIdx;
 
   // <details> with a <summary> on the next line.
   if (tagKey === "<details") {

package/corpus/templates/crm/.agents/skills/secrets/SKILL.md

@@ -38,7 +38,11 @@ connection exists:
   register a `kind: "oauth"` entry so the shared UI renders Connect and the
   runtime owns status, refresh, and reauthorization.
 - **Deploy- or app-level configuration** - use deployment/runtime
-  configuration, not a per-user secret row.
+  configuration, not a per-user secret row. For a non-secret public setting
+  already represented by `AgentNativeConfig`, put the default in
+  `agent-native.config.ts` and use its `AGENT_NATIVE_CONFIG_<PATH>` alias only
+  for a deployment override. Never put a credential or provider key in that
+  public namespace.
 - **Account, customer, manager, or other non-secret identifier** - store it as
   scoped connection metadata or app data, not as a masked secret field.
 

package/corpus/templates/crm/.agents/skills/workspace-conventions/SKILL.md

@@ -55,7 +55,10 @@ Preview before `--apply`, commit `agent-native.ejections.json`, and never edit
   ZIPs, screenshots, thumbnails, session replay chunks) in configured file/blob
   storage and persist only URLs, ids, or handles.
 - Store shared runtime configuration in the workspace root `.env`; use
-  `apps/<app>/.env` only for app-specific overrides. Never hardcode API keys,
+  `apps/<app>/.env` only for app-specific overrides. For public app behavior,
+  prefer the default in `agent-native.config.ts` and use the deterministic
+  `AGENT_NATIVE_CONFIG_<UPPER_SNAKE_PATH>` alias only when a non-secret value
+  needs a deployment override. Never hardcode API keys,
   tokens, webhook URLs, signing secrets, private Builder/internal data, customer
   data, or credential-looking literals in source, docs, prompts, fixtures,
   application state, action responses, or generated app content. Use

package/corpus/templates/crm/CHANGELOG.md

@@ -1,7 +1,5 @@
 # CRM changelog
 
-Older updates live in [the changelog folder](./changelog/) and are included in the in-app "What's new" view.
-
 ## 2026-08-11
 
 ### Improved
@@ -35,3 +33,34 @@ Older updates live in [the changelog folder](./changelog/) and are included in t
 ### Improved
 
 - Sidebar footers now keep Feedback, Search, and Collapse together, with language preferences available in Settings.
+
+## 2026-07-26
+
+### Added
+
+- Any list or view can be shown as a board grouped by stage, so a pipeline can be dragged through its stages instead of edited row by row.
+- CRM now finds likely duplicate records and tells you exactly why each pair matched, then merges them into the record you choose without losing anything from either side.
+- Enrichment now shows what a run will cost before it starts, gathers free evidence first, and only spends on the records you approved.
+- Lists turn any set of records into a pipeline with its own stage and fields, and they stay yours even when the records come from HubSpot or Salesforce.
+- Opening a record now shows one page with its fields, the lists it belongs to, its activity and evidence, and the full change history of any single value.
+- Press Cmd+K to jump to any record, list, view or setting, and use keyboard shortcuts to move through the grid without reaching for the mouse.
+- Record reference fields like Account can now be linked from the record page: search records in a popover and see the link as a chip you can remove.
+- Records now use typed fields — currency, dates, ratings, status, select, references and more — and every field remembers who changed it, when, and what it was before.
+- Settings now has Fields and Lists tabs for adding fields, editing their allowed options and stage targets, and archiving what you no longer use.
+- The record grid is now a real spreadsheet: filter, sort and page over the full data set, edit in place, and copy or paste ranges straight to a spreadsheet.
+
+### Improved
+
+- Provider record edits now show an exact before/after diff and open the record in HubSpot or Salesforce to finish the change, instead of reporting a failure
+- Record page attribute labels now read in full instead of being cut off, and the Highlights panel starts from a curated set per record type.
+
+### Fixed
+
+- A half-typed number or date no longer saves as empty — the field says it cannot read the value and keeps what the record already had.
+- A new pipeline board now opens with stage columns, a summable amount, and each card's values copied from the record it was added from
+- Moving a record or list entry into a stage that was retired or never declared is now refused with the reason and the stages you can pick, and a stage somebody else moved in the meantime is reported instead of being overwritten
+- Retyping a record field now replaces the old value instead of appending to it, wherever the field is edited.
+- Retyping a value on the record page now replaces it instead of merging with the old text.
+- The proposal review now shows the field that actually changed instead of reading "Empty" on both sides.
+
+For the full list of updates, see the [changelog folder](./changelog/).

package/corpus/templates/crm/actions/merge-crm-records.ts

@@ -46,10 +46,6 @@ class CrmMergeError extends CrmAttributeValueError {
   }
 }
 
-type CrmTransaction = Parameters<
-  Parameters<ReturnType<typeof getDb>["transaction"]>[0]
->[0];
-
 interface StoredValue {
   stringValue: string | null;
   numberValue: number | null;

package/corpus/templates/crm/app/components/crm/record/RecordLists.tsx

@@ -16,7 +16,6 @@ import { useState } from "react";
 import { Link } from "react-router";
 import { toast } from "sonner";
 
-import { Button } from "@/components/ui/button";
 import {
   Select,
   SelectContent,

package/corpus/templates/crm/server/crm/hubspot-adapter.ts

@@ -13,7 +13,6 @@ import type {
   CrmFieldDefinition,
   CrmObjectDefinition,
   CrmObjectKind,
-  CrmObjectRef,
   CrmProvenance,
   CrmRecord,
   CrmRecordRef,

package/corpus/templates/crm/server/crm/salesforce-adapter.ts

@@ -14,7 +14,6 @@ import type {
   CrmFieldDefinition,
   CrmObjectDefinition,
   CrmObjectKind,
-  CrmProvenance,
   CrmRecord,
   CrmRecordRef,
   CrmRelationship,

package/corpus/templates/crm/server/db/crm-store.ts

@@ -1,4 +1,4 @@
-import { accessFilter, assertAccess } from "@agent-native/core/sharing";
+import { accessFilter } from "@agent-native/core/sharing";
 import { and, asc, desc, eq, exists, inArray, isNull, like } from "drizzle-orm";
 
 import type {

package/corpus/templates/design/.agents/skills/secrets/SKILL.md

@@ -38,7 +38,11 @@ connection exists:
   register a `kind: "oauth"` entry so the shared UI renders Connect and the
   runtime owns status, refresh, and reauthorization.
 - **Deploy- or app-level configuration** - use deployment/runtime
-  configuration, not a per-user secret row.
+  configuration, not a per-user secret row. For a non-secret public setting
+  already represented by `AgentNativeConfig`, put the default in
+  `agent-native.config.ts` and use its `AGENT_NATIVE_CONFIG_<PATH>` alias only
+  for a deployment override. Never put a credential or provider key in that
+  public namespace.
 - **Account, customer, manager, or other non-secret identifier** - store it as
   scoped connection metadata or app data, not as a masked secret field.
 

package/corpus/templates/design/.agents/skills/workspace-conventions/SKILL.md

@@ -55,7 +55,10 @@ Preview before `--apply`, commit `agent-native.ejections.json`, and never edit
   ZIPs, screenshots, thumbnails, session replay chunks) in configured file/blob
   storage and persist only URLs, ids, or handles.
 - Store shared runtime configuration in the workspace root `.env`; use
-  `apps/<app>/.env` only for app-specific overrides. Never hardcode API keys,
+  `apps/<app>/.env` only for app-specific overrides. For public app behavior,
+  prefer the default in `agent-native.config.ts` and use the deterministic
+  `AGENT_NATIVE_CONFIG_<UPPER_SNAKE_PATH>` alias only when a non-secret value
+  needs a deployment override. Never hardcode API keys,
   tokens, webhook URLs, signing secrets, private Builder/internal data, customer
   data, or credential-looking literals in source, docs, prompts, fixtures,
   application state, action responses, or generated app content. Use