@agent-native/core 0.169.0 → 0.170.0

package/agent-native.eject.json

@@ -40,7 +40,6 @@
         "common-room",
         "exa",
         "gong",
-        "google-workspace",
         "grafana",
         "intercom",
         "monday",
@@ -70,7 +69,11 @@
         "figma",
         "notion",
         "gmail",
+        "google_calendar",
+        "google_docs",
         "google_drive",
+        "google_sheets",
+        "google_slides",
         "hubspot",
         "salesforce",
         "jira",

package/bin/agent-native.js

@@ -2,6 +2,7 @@
 
 import { spawn } from "node:child_process";
 import { existsSync, statSync } from "node:fs";
+import { createRequire } from "node:module";
 import { dirname, join } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 
@@ -62,14 +63,31 @@ if (!useSourceFallback) {
 
   await import(pathToFileURL(distEntry).href);
 } else {
-  const child = spawn("tsx", [sourceEntry, ...process.argv.slice(2)], {
-    stdio: "inherit",
-    env: process.env,
-  });
+  // Resolve tsx from this package instead of trusting PATH: the fallback is
+  // also reached through `node packages/core/bin/agent-native.js`, which runs
+  // without node_modules/.bin on PATH.
+  let tsxCli;
+  try {
+    tsxCli = createRequire(import.meta.url).resolve("tsx/cli");
+  } catch (error) {
+    console.error(
+      `agent-native CLI source fallback could not resolve tsx (${error.message}). Run \`pnpm --filter @agent-native/core build\` and try again.`,
+    );
+    process.exit(1);
+  }
+
+  const child = spawn(
+    process.execPath,
+    [tsxCli, sourceEntry, ...process.argv.slice(2)],
+    {
+      stdio: "inherit",
+      env: process.env,
+    },
+  );
 
   child.on("error", (error) => {
     console.error(
-      `agent-native CLI build output is missing and the source fallback failed: ${error.message}`,
+      `agent-native CLI source fallback failed: ${error.message}. Run \`pnpm --filter @agent-native/core build\` and try again.`,
     );
     process.exit(1);
   });

package/corpus/README.md

@@ -31,4 +31,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- template files: 8522
+- template files: 8585

package/corpus/templates/analytics/.agents/skills/secrets/SKILL.md

@@ -19,10 +19,17 @@ data, and generated extension/app content may mention credential **names** such
 as `OPENAI_API_KEY`, but must not contain real API keys, tokens, webhook URLs,
 signing secrets, OAuth refresh tokens, or private Builder/customer data.
 
-Secret values are supplied at runtime through deployment configuration, the
-encrypted `app_secrets` vault, `saveCredential` / `resolveCredential`, OAuth, or
-`${keys.NAME}` substitution. Examples must use obvious placeholders such as
-`<OPENAI_API_KEY>` or `${keys.SLACK_WEBHOOK}`, not real-looking copied values.
+Provider secret values are supplied at runtime through the encrypted
+`app_secrets` vault, `saveCredential` / `resolveCredential`, OAuth, or
+`${keys.NAME}` substitution. Deployment configuration is reserved for
+deploy-level secrets and non-provider configuration. Examples must use obvious
+placeholders such as `<OPENAI_API_KEY>` or `${keys.SLACK_WEBHOOK}`, not
+real-looking copied values.
+
+Provider credentials and provider account identifiers are workspace data. Use
+standard workspace connections and org/workspace vault scopes; never put them
+in `.env` or deployment environment variables, and never add a provider-specific
+action or startup bootstrap just to write a credential for one organization.
 
 ## Credential Modeling Preflight
 

package/corpus/templates/analytics/actions/bigquery-table-info.ts

@@ -9,12 +9,12 @@ Use these sources of truth instead:
 
 - \`list-data-dictionary\` for approved metric, table, column, join, and caveat definitions configured by this organization.
 - \`data-source-status --key bigquery\` to confirm whether BigQuery credentials and a project are configured.
-- \`search-bigquery-schema\` to list configured datasets/tables or inspect exact table columns before writing SQL.
+- \`search-bigquery-schema\` to search the configured project by dataset, table, or column term, or inspect exact table columns before writing SQL.
 - The configured warehouse's \`INFORMATION_SCHEMA.COLUMNS\` tables when you need to discover actual datasets, tables, and columns.
 - \`@app_events\` as an optional placeholder for a default application events table in query-metrics examples. It defaults to \`<BIGQUERY_PROJECT_ID>.analytics.events_partitioned\` and can be overridden with \`ANALYTICS_BIGQUERY_EVENTS_TABLE\`; it is not the BigQuery connection status or a table catalog.
 - \`@project\` as the configured BigQuery project placeholder for fully-qualified table references.
 
-If no data-dictionary entry exists and schema discovery is unavailable, ask the user for the source table or metric definition before writing SQL. Never invent table names, column names, joins, or numbers.
+If no data-dictionary entry exists, search the configured project before asking about business meaning. Ask the user for a metric definition only after the configured schema and query actions prove that the source or metric is unavailable. Never ask the user to provide internal dataset, table, or column names that the schema action can discover, and never invent table names, column names, joins, or numbers.
 
 Preferred schema discovery:
 
@@ -22,6 +22,7 @@ Preferred schema discovery:
 pnpm action search-bigquery-schema
 pnpm action search-bigquery-schema --dataset=<dataset>
 pnpm action search-bigquery-schema --table=<dataset.table>
+pnpm action search-bigquery-schema --search=<metric-or-column-term>
 \`\`\`
 
 Example schema discovery query:

package/corpus/templates/analytics/actions/query-agent-native-analytics.ts

@@ -48,7 +48,7 @@ function toDataTableResult(result: {
 
 export default defineAction({
   description:
-    "Query the built-in first-party Analytics source: events recorded through this app's analytics collector endpoint (/track), compact daily rollups updated transactionally with new ingest, identifiable user-day rollups, and session replay summaries recorded through /api/analytics/replay. This source does not require an external provider connection. Use it for questions about app/site traffic, product events, template/app usage, conversions, session recordings, LLM/agent observability, model cost, token volume, latency, and other first-party data collected by this analytics app. Use source-specific actions such as BigQuery, GA4, Mixpanel, PostHog, or Amplitude when the user asks for those sources or the relevant data lives there. SQL may read analytics_events, analytics_event_daily_rollups, analytics_user_days, and session_recordings; session_replay_chunks is intentionally unavailable, and reads are automatically scoped to the current user/org. Prefer analytics_event_daily_rollups for event counts and analytics_user_days for active-user or retention questions. On the Builder.io production organization after the explicit BigQuery cutover, event and rollup reads use partitioned BigQuery tables/views while session_recordings remains in the SQL store; cross-backend joins are not supported. Before a large or historical query, call get-first-party-analytics-health and use a configured external backend when it recommends one: BigQuery supports warehouse SQL and historical analysis, while Amplitude supports product analytics, funnels, and retention. Connecting a backend does not automatically reroute /track events or copy existing Neon events; the migration action performs that explicit prepare, backfill, and cutover sequence. Aggregate, project only needed columns, use bounded recent drill-downs, and add a LIMIT for raw or high-cardinality reads; do not issue an unbounded raw-event scan or paginate a large cohort. An explicit all-time or lifetime request remains all-time, so do not invent a default lower time bound. Safe scoped results are cached for up to five minutes for this agent action. analytics_events columns include event_name, timestamp, event_date, user_id, anonymous_id, user_key, session_id, app, template, signed_in, url, path, hostname, referrer, properties, and context. analytics_event_daily_rollups columns include tenant_key, owner_email, org_id, event_date, event_name, app, template, and event_count. analytics_user_days columns include tenant_key, owner_email, org_id, event_date, and user_key. LLM observability events use event_name = '$ai_generation'; useful properties include $ai_trace_id/run_id, $ai_session_id/thread_id, $ai_model/model, $ai_provider/provider, $ai_input_tokens/input_tokens, $ai_output_tokens/output_tokens, cache_read_tokens, cache_write_tokens, cost_cents_x100, $ai_total_cost_usd/cost_usd, duration_ms/$ai_latency, status, tool_calls, successful_tools, failed_tools, tools, tools_truncated, delegated, delegation_protocol, caller_app, delegation_task_id, a2a_task_id, parent_run_id, parent_turn_id, and error_message/$ai_error. Agent Teams child runs use delegation_protocol = 'agent-team' and retain their own run_id while linking to the launching run through parent_run_id. The bounded tools array contains names, relative start times, durations, statuses, and coarse error classes only, never args or results; failed runs and interrupted tools remain queryable. session_recordings columns include id, session_id, user_id, anonymous_id, user_key, started_at, ended_at, duration_ms, chunk_count, event_count, page_count, error_count, rage_click_count, app, template, status, first_url, last_url, path, hostname, referrer, and metadata.",
+    "Query the built-in first-party Analytics source: events recorded through this app's analytics collector endpoint (/track), compact daily rollups updated transactionally with new ingest, identifiable user-day rollups, and session replay summaries recorded through /api/analytics/replay. This source does not require an external provider connection. Use it for questions about app/site traffic, product events, template/app usage, conversions, session recordings, LLM/agent observability, model cost, token volume, latency, and other first-party data collected by this analytics app. Use source-specific actions such as BigQuery, GA4, Mixpanel, PostHog, or Amplitude when the user asks for those sources or the relevant data lives there. SQL may read analytics_events, analytics_event_daily_rollups, analytics_user_days, and session_recordings; session_replay_chunks is intentionally unavailable, and reads are automatically scoped to the current user/org. Prefer analytics_event_daily_rollups for event counts and analytics_user_days for active-user or retention questions. On the Builder.io production organization after the explicit BigQuery cutover, event and rollup reads use partitioned BigQuery tables/views while session_recordings remains in the SQL store; cross-backend joins are not supported. Before a large or historical query, call get-first-party-analytics-health and use a configured external backend when it recommends one: BigQuery supports warehouse SQL and historical analysis, while Amplitude supports product analytics, funnels, and retention. Connecting a backend does not automatically reroute /track events or copy existing Neon events; the migration action performs that explicit prepare, backfill, and cutover sequence. Aggregate, project only needed columns, use bounded recent drill-downs, and add a LIMIT for raw or high-cardinality reads; do not issue an unbounded raw-event scan or paginate a large cohort. An explicit all-time or lifetime request remains all-time, so do not invent a default lower time bound. Safe scoped results are cached for up to five minutes for this agent action. analytics_events columns include event_name, timestamp, event_date, user_id, anonymous_id, user_key, session_id, app, template, signed_in, url, path, hostname, referrer, properties, and context. analytics_event_daily_rollups columns include tenant_key, owner_email, org_id, event_date, event_name, app, template, and event_count. analytics_user_days columns include tenant_key, owner_email, org_id, event_date, and user_key. LLM observability events use event_name = '$ai_generation'; useful properties include $ai_trace_id/run_id, $ai_session_id/thread_id, $ai_model/model, $ai_provider/provider, $ai_input_tokens/input_tokens, $ai_output_tokens/output_tokens, cache_read_tokens, cache_write_tokens, cost_cents_x100, $ai_total_cost_usd/cost_usd, duration_ms (full run, milliseconds), $ai_latency (model time in seconds, run minus tool time), status, tool_calls, successful_tools, failed_tools, tools, tools_truncated, delegated, delegation_protocol, caller_app, delegation_task_id, a2a_task_id, parent_run_id, parent_turn_id, and error_message/$ai_error. Agent Teams child runs use delegation_protocol = 'agent-team' and retain their own run_id while linking to the launching run through parent_run_id. The bounded tools array contains names, relative start times, durations, statuses, and coarse error classes only, never args or results; failed runs and interrupted tools remain queryable. session_recordings columns include id, session_id, user_id, anonymous_id, user_key, started_at, ended_at, duration_ms, chunk_count, event_count, page_count, error_count, rage_click_count, app, template, status, first_url, last_url, path, hostname, referrer, and metadata.",
   schema: z.object({
     sql: z
       .string()

package/corpus/templates/analytics/actions/search-bigquery-schema.ts

@@ -35,6 +35,15 @@ interface TableListResponse {
   }>;
 }
 
+interface BigQueryTableSummary {
+  projectId?: string;
+  datasetId?: string;
+  tableId?: string;
+  type?: string;
+  friendlyName?: string;
+  labels?: Record<string, string>;
+}
+
 interface TableMetadata {
   tableReference?: {
     projectId?: string;
@@ -54,6 +63,9 @@ interface TableMetadata {
 
 const PROJECT_RE = /^[A-Za-z][A-Za-z0-9-]{4,61}[A-Za-z0-9]$/;
 const ID_RE = /^[A-Za-z0-9_]+$/;
+const GLOBAL_SEARCH_DATASET_LIMIT = 100;
+const GLOBAL_SEARCH_TABLE_LIMIT = 250;
+const GLOBAL_SEARCH_METADATA_BATCH_SIZE = 20;
 
 function assertIdentifier(
   label: string,
@@ -183,7 +195,12 @@ function compactTable(meta: TableMetadata, includeColumns: boolean) {
 }
 
 function matchesSearch(meta: TableMetadata, search: string): boolean {
-  const q = search.toLowerCase();
+  const terms = search
+    .toLowerCase()
+    .replace(/[._-]+/g, " ")
+    .split(/\s+/)
+    .filter(Boolean);
+  if (!terms.length) return true;
   const ref = meta.tableReference ?? {};
   const haystack = [
     ref.projectId,
@@ -199,8 +216,9 @@ function matchesSearch(meta: TableMetadata, search: string): boolean {
   ]
     .filter(Boolean)
     .join(" ")
-    .toLowerCase();
-  return haystack.includes(q);
+    .toLowerCase()
+    .replace(/[._-]+/g, " ");
+  return terms.every((term) => haystack.includes(term));
 }
 
 async function listDatasets(projectId: string, limit: number, search: string) {
@@ -245,6 +263,111 @@ async function listTables(projectId: string, datasetId: string, limit: number) {
   }));
 }
 
+async function searchAcrossDatasets(
+  projectId: string,
+  search: string,
+  limit: number,
+) {
+  const datasets = await listDatasets(
+    projectId,
+    GLOBAL_SEARCH_DATASET_LIMIT + 1,
+    "",
+  );
+  const scannableDatasets = datasets.slice(0, GLOBAL_SEARCH_DATASET_LIMIT);
+  const tables: BigQueryTableSummary[] = [];
+  const datasetCount = scannableDatasets.filter(
+    (dataset) => typeof dataset.datasetId === "string" && dataset.datasetId,
+  ).length;
+  let datasetsScanned = 0;
+  let truncated = datasets.length > GLOBAL_SEARCH_DATASET_LIMIT;
+
+  for (const dataset of scannableDatasets) {
+    const datasetId = dataset.datasetId;
+    if (!datasetId) continue;
+    if (tables.length >= GLOBAL_SEARCH_TABLE_LIMIT) {
+      truncated = true;
+      break;
+    }
+
+    datasetsScanned += 1;
+    const remaining = GLOBAL_SEARCH_TABLE_LIMIT - tables.length;
+    const listed = await listTables(
+      projectId,
+      datasetId,
+      Math.min(remaining, GLOBAL_SEARCH_TABLE_LIMIT),
+    );
+    tables.push(...listed);
+  }
+
+  if (datasetsScanned < datasetCount) truncated = true;
+
+  // Inspect table metadata in bounded batches so a search can match columns,
+  // not only table names, without issuing an unbounded burst of requests.
+  const matches: ReturnType<typeof compactTable>[] = [];
+  const errors: Array<{
+    projectId?: string;
+    datasetId?: string;
+    tableId?: string;
+    error: string;
+  }> = [];
+
+  for (
+    let offset = 0;
+    offset < tables.length;
+    offset += GLOBAL_SEARCH_METADATA_BATCH_SIZE
+  ) {
+    const batch = tables.slice(
+      offset,
+      offset + GLOBAL_SEARCH_METADATA_BATCH_SIZE,
+    );
+    const settled = await Promise.allSettled(
+      batch.map(async (table) => {
+        if (!table.datasetId || !table.tableId) return null;
+        const metadata = await getTableMetadata(
+          projectId,
+          table.datasetId,
+          table.tableId,
+        );
+        return matchesSearch(metadata, search)
+          ? compactTable(metadata, true)
+          : null;
+      }),
+    );
+
+    settled.forEach((result, index) => {
+      const table = batch[index];
+      if (result.status === "fulfilled") {
+        if (result.value) matches.push(result.value);
+        return;
+      }
+      errors.push({
+        projectId: table?.projectId ?? projectId,
+        datasetId: table?.datasetId,
+        tableId: table?.tableId,
+        error:
+          result.reason instanceof Error
+            ? result.reason.message
+            : String(result.reason),
+      });
+    });
+  }
+
+  return {
+    mode: "table-search",
+    projectId,
+    search,
+    datasetsScanned,
+    tablesScanned: tables.length,
+    truncated,
+    tables: matches.slice(0, limit),
+    ...(errors.length
+      ? { errors: errors.slice(0, 12), errorCount: errors.length }
+      : {}),
+    nextStep:
+      "Use table=dataset.table for full metadata. Global search is bounded; pass a returned dataset/table reference for a complete inspection.",
+  };
+}
+
 async function getTableMetadata(
   projectId: string,
   datasetId: string,
@@ -256,7 +379,7 @@ async function getTableMetadata(
 
 export default defineAction({
   description:
-    "Search or describe BigQuery metadata for the configured warehouse. Use before writing SQL when the data dictionary does not already name the dataset, table, and columns. With no args, lists datasets. With dataset, lists tables. With dataset + table or a dataset.table value, returns columns for that table.",
+    "Search or describe BigQuery metadata for the configured warehouse. Use before writing SQL when the data dictionary does not already name the dataset, table, and columns. With no args, lists datasets. With search and no dataset, searches accessible tables and columns across the configured project so the user does not need to provide internal table names. With dataset, lists tables. With dataset + table or a dataset.table value, returns columns for that table.",
   schema: z.object({
     dataset: z
       .string()
@@ -307,6 +430,9 @@ export default defineAction({
     }
 
     if (!args.dataset) {
+      if (search) {
+        return searchAcrossDatasets(configuredProjectId, search, limit);
+      }
       return {
         mode: "datasets",
         projectId: configuredProjectId,

package/corpus/templates/analytics/agent-native.config.ts

@@ -1,5 +1,6 @@
 import { defineAgentNativeConfig } from "@agent-native/core/config";
 
 export default defineAgentNativeConfig({
+  changelog: { enabled: true },
   harness: true,
 });

package/corpus/templates/analytics/app/components/layout/Sidebar.tsx

@@ -46,6 +46,11 @@ import { toast } from "sonner";
 
 import { useAuth } from "@/components/auth/AuthProvider";
 import { ANALYTICS_CHAT_STORAGE_KEY } from "@/lib/chat-handoff";
+import {
+  matchesDashboardVisibilityFilter,
+  type DashboardVisibility,
+  type DashboardVisibilityFilter,
+} from "@/lib/dashboard-visibility";
 import { cn, shortcutModifierLabel } from "@/lib/utils";
 import {
   dashboards,
@@ -63,6 +68,7 @@ type SidebarDashboard = {
   source: "static" | "sql" | "analysis";
   resourceId?: string;
   visibility?: Visibility;
+  ownerEmail?: string | null;
   /** Id of the dashboard this one nests under in the sidebar, if any. */
   parentId?: string;
 };
@@ -162,7 +168,7 @@ const SIDEBAR_SKELETON_CLASS =
   "bg-sidebar-foreground/12 dark:bg-sidebar-foreground/10";
 
 type SidebarSortMode = "most-used" | "alphabetical" | "manual";
-type SidebarVisibilityFilter = "all" | "private" | "shared";
+type SidebarVisibilityFilter = DashboardVisibilityFilter;
 
 import {
   DndContext,
@@ -258,14 +264,11 @@ function isVisibility(value: unknown): value is Visibility {
 }
 
 export function matchesVisibilityFilter(
-  item: { visibility?: Visibility },
+  item: { visibility?: Visibility; ownerEmail?: string | null },
   filter: SidebarVisibilityFilter,
+  currentUserEmail?: string | null,
 ): boolean {
-  if (filter === "all") return true;
-  if (filter === "private") {
-    return item.visibility !== "org" && item.visibility !== "public";
-  }
-  return item.visibility === "org" || item.visibility === "public";
+  return matchesDashboardVisibilityFilter(item, filter, currentUserEmail);
 }
 
 export function threadMatchesVisibilityFilter(
@@ -447,7 +450,7 @@ function SidebarSectionSettingsPopover({
 
 // --- Visibility types and helpers ---
 
-type Visibility = "private" | "org" | "public";
+type Visibility = DashboardVisibility;
 
 // --- Shared sortable row (used by both dashboards and analyses) ---
 
@@ -1143,6 +1146,7 @@ type SqlDashboardListItem = {
   id: string;
   name: string;
   visibility?: Visibility;
+  ownerEmail?: string | null;
   parentId?: string;
 };
 
@@ -1160,18 +1164,25 @@ async function fetchSqlDashboards(
           d.visibility === "org" ||
           d.visibility === "public"),
     )
-    .map((d: any) => ({
-      id: d.id,
-      name:
-        typeof d.name === "string" && d.name.trim().length > 0
-          ? d.name
-          : t("sidebar.untitledDashboard"),
-      visibility: d.visibility as Visibility,
-      parentId:
-        typeof d.parentId === "string" && d.parentId.trim().length > 0
-          ? d.parentId
-          : undefined,
-    }));
+    .map((d: any) => {
+      const ownerEmail =
+        typeof d.ownerEmail === "string" && d.ownerEmail.trim().length > 0
+          ? d.ownerEmail
+          : undefined;
+      return {
+        id: d.id,
+        name:
+          typeof d.name === "string" && d.name.trim().length > 0
+            ? d.name
+            : t("sidebar.untitledDashboard"),
+        visibility: d.visibility as Visibility,
+        ...(ownerEmail ? { ownerEmail } : {}),
+        parentId:
+          typeof d.parentId === "string" && d.parentId.trim().length > 0
+            ? d.parentId
+            : undefined,
+      };
+    });
 }
 
 async function fetchSidebarAnalyses(t: (key: string) => string): Promise<
@@ -1525,7 +1536,8 @@ export function Sidebar({ mobile }: { mobile?: boolean } = {}) {
       activeDashboardId !== null,
   );
   const [dashShowAll, setDashShowAll] = useState(false);
-  const [dashFilter, setDashFilter] = useState<SidebarVisibilityFilter>("all");
+  const [dashFilter, setDashFilter] =
+    useState<SidebarVisibilityFilter>("private");
   const [dashboardSortMode, setDashboardSortModeState] =
     useState<SidebarSortMode>(() => getStoredSortMode(DASHBOARD_SORT_MODE_KEY));
   const { data: popularity, isReady: popularityReady } = usePopularity();
@@ -1749,6 +1761,7 @@ export function Sidebar({ mobile }: { mobile?: boolean } = {}) {
       name: d.name,
       source: "sql",
       visibility: d.visibility,
+      ownerEmail: d.ownerEmail,
       parentId: d.parentId,
     }));
     const analysisItems: SidebarDashboard[] = analysesList.map((a) => ({
@@ -1802,9 +1815,9 @@ export function Sidebar({ mobile }: { mobile?: boolean } = {}) {
   const filteredDashboards = useMemo(
     () =>
       visibleDashboards.filter((dashboard) =>
-        matchesVisibilityFilter(dashboard, dashFilter),
+        matchesVisibilityFilter(dashboard, dashFilter, auth?.email),
       ),
-    [visibleDashboards, dashFilter],
+    [auth?.email, visibleDashboards, dashFilter],
   );
 
   // Group dashboards that declare a parentId beneath their parent. Nesting is

package/corpus/templates/analytics/app/i18n-data.ts

@@ -468,6 +468,9 @@ const enUS = {
     adminOnlyTitle: "Admin access required",
     adminOnlyDescription:
       "Only organization owners and admins can open Analytics admin tools.",
+    roleUnavailableTitle: "Couldn't verify your access",
+    roleUnavailableDescription:
+      "We couldn't check your organization role: {{message}}",
     notTracked: "Not tracked",
     visibilityprivate: "Private",
     visibilityorg: "Shared with org",
@@ -13018,6 +13021,8 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "需要管理员权限",
       adminOnlyDescription:
         "只有组织所有者和管理员可以打开 Analytics 管理工具。",
+      roleUnavailableTitle: "无法验证你的访问权限",
+      roleUnavailableDescription: "无法检查你的组织角色：{{message}}",
       notTracked: "未跟踪",
       visibilityprivate: "私有",
       visibilityorg: "与组织共享",
@@ -13066,6 +13071,9 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "Se requiere acceso de administrador",
       adminOnlyDescription:
         "Solo los propietarios y administradores de la organización pueden abrir las herramientas de administración de Analytics.",
+      roleUnavailableTitle: "No se pudo verificar tu acceso",
+      roleUnavailableDescription:
+        "No pudimos comprobar tu rol en la organización: {{message}}",
       notTracked: "No registrado",
       visibilityprivate: "Privado",
       visibilityorg: "Compartido con la organización",
@@ -13114,6 +13122,9 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "Accès administrateur requis",
       adminOnlyDescription:
         "Seuls les propriétaires et administrateurs de l'organisation peuvent ouvrir les outils d'administration Analytics.",
+      roleUnavailableTitle: "Impossible de vérifier votre accès",
+      roleUnavailableDescription:
+        "Nous n'avons pas pu vérifier votre rôle dans l'organisation : {{message}}",
       notTracked: "Non suivi",
       visibilityprivate: "Privé",
       visibilityorg: "Partagé avec l'organisation",
@@ -13162,6 +13173,9 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "Adminzugriff erforderlich",
       adminOnlyDescription:
         "Nur Organisationsinhaber und Administratoren können Analytics-Admin-Tools öffnen.",
+      roleUnavailableTitle: "Zugriff konnte nicht überprüft werden",
+      roleUnavailableDescription:
+        "Deine Organisationsrolle konnte nicht überprüft werden: {{message}}",
       notTracked: "Nicht erfasst",
       visibilityprivate: "Privat",
       visibilityorg: "Mit Organisation geteilt",
@@ -13210,6 +13224,9 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "管理者アクセスが必要です",
       adminOnlyDescription:
         "組織の所有者と管理者のみが Analytics 管理ツールを開けます。",
+      roleUnavailableTitle: "アクセス権を確認できませんでした",
+      roleUnavailableDescription:
+        "組織内のロールを確認できませんでした: {{message}}",
       notTracked: "未追跡",
       visibilityprivate: "非公開",
       visibilityorg: "組織と共有",
@@ -13257,6 +13274,9 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "관리자 권한 필요",
       adminOnlyDescription:
         "조직 소유자와 관리자만 Analytics 관리 도구를 열 수 있습니다.",
+      roleUnavailableTitle: "접근 권한을 확인할 수 없습니다",
+      roleUnavailableDescription:
+        "조직 역할을 확인하지 못했습니다: {{message}}",
       notTracked: "추적 안 됨",
       visibilityprivate: "비공개",
       visibilityorg: "조직과 공유됨",
@@ -13305,6 +13325,9 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "Acesso de administrador necessário",
       adminOnlyDescription:
         "Somente proprietários e administradores da organização podem abrir as ferramentas administrativas do Analytics.",
+      roleUnavailableTitle: "Não foi possível verificar seu acesso",
+      roleUnavailableDescription:
+        "Não conseguimos verificar sua função na organização: {{message}}",
       notTracked: "Não rastreado",
       visibilityprivate: "Privado",
       visibilityorg: "Compartilhado com a organização",
@@ -13352,6 +13375,9 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "एडमिन access आवश्यक है",
       adminOnlyDescription:
         "केवल organization owners और admins Analytics admin tools खोल सकते हैं।",
+      roleUnavailableTitle: "आपका access सत्यापित नहीं किया जा सका",
+      roleUnavailableDescription:
+        "हम आपकी organization role जांच नहीं सके: {{message}}",
       notTracked: "ट्रैक नहीं किया गया",
       visibilityprivate: "निजी",
       visibilityorg: "संगठन के साथ साझा",
@@ -13400,6 +13426,8 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "مطلوب وصول مسؤول",
       adminOnlyDescription:
         "يمكن لمالكي المؤسسة والمسؤولين فقط فتح أدوات إدارة Analytics.",
+      roleUnavailableTitle: "تعذر التحقق من وصولك",
+      roleUnavailableDescription: "تعذر التحقق من دورك في المؤسسة: {{message}}",
       notTracked: "غير متتبع",
       visibilityprivate: "خاص",
       visibilityorg: "مشترك مع المؤسسة",

package/corpus/templates/analytics/app/lib/dashboard-visibility.ts

@@ -0,0 +1,41 @@
+export type DashboardVisibility = "private" | "org" | "public";
+export type DashboardVisibilityFilter = "all" | "private" | "shared";
+
+export type DashboardVisibilityItem = {
+  visibility?: DashboardVisibility;
+  ownerEmail?: string | null;
+};
+
+function normalizeEmail(email: string | null | undefined): string | null {
+  const normalized = email?.trim().toLowerCase();
+  return normalized ? normalized : null;
+}
+
+export function isDashboardMine(
+  item: DashboardVisibilityItem,
+  currentUserEmail?: string | null,
+): boolean {
+  if (item.visibility === "org" || item.visibility === "public") {
+    return false;
+  }
+
+  if ("ownerEmail" in item) {
+    const ownerEmail = normalizeEmail(item.ownerEmail);
+    const viewerEmail = normalizeEmail(currentUserEmail);
+    return Boolean(ownerEmail && viewerEmail && ownerEmail === viewerEmail);
+  }
+
+  // Older dashboard-shaped items do not always carry ownership metadata.
+  return true;
+}
+
+export function matchesDashboardVisibilityFilter(
+  item: DashboardVisibilityItem,
+  filter: DashboardVisibilityFilter,
+  currentUserEmail?: string | null,
+): boolean {
+  if (filter === "all") return true;
+  return filter === "private"
+    ? isDashboardMine(item, currentUserEmail)
+    : !isDashboardMine(item, currentUserEmail);
+}

package/corpus/templates/analytics/app/pages/Agents.tsx

@@ -428,7 +428,11 @@ function UsageStatCard({
 
 export default function AgentsPage() {
   const t = useT();
-  const { canManageOrg, isLoading: orgRoleLoading } = useOrgRole();
+  const {
+    canManageOrg,
+    isLoading: orgRoleLoading,
+    error: orgRoleError,
+  } = useOrgRole();
   const [searchParams, setSearchParams] = useSearchParams();
   const view = parseView(searchParams.get("view"));
   const selectedConnectionId = searchParams.get("db");
@@ -461,6 +465,26 @@ export default function AgentsPage() {
     );
   }
 
+  if (orgRoleError && isAdminView) {
+    return (
+      <div className="mx-auto flex h-full w-full max-w-7xl items-center justify-center px-4 py-5 lg:px-6">
+        <div className="max-w-sm rounded-lg border bg-background p-6 text-center">
+          <div className="mx-auto mb-3 flex h-10 w-10 items-center justify-center rounded-full bg-muted">
+            <IconAlertTriangle className="h-5 w-5 text-muted-foreground" />
+          </div>
+          <h1 className="text-sm font-semibold">
+            {t("agents.roleUnavailableTitle")}
+          </h1>
+          <p className="mt-1.5 text-sm leading-6 text-muted-foreground">
+            {t("agents.roleUnavailableDescription", {
+              message: orgRoleError.message,
+            })}
+          </p>
+        </div>
+      </div>
+    );
+  }
+
   if (!canManageOrg && isAdminView) {
     return (
       <div className="mx-auto flex h-full w-full max-w-7xl items-center justify-center px-4 py-5 lg:px-6">