@agent-native/core 0.169.1 → 0.170.0

package/agent-native.eject.json

@@ -40,7 +40,6 @@
         "common-room",
         "exa",
         "gong",
-        "google-workspace",
         "grafana",
         "intercom",
         "monday",
@@ -70,7 +69,11 @@
         "figma",
         "notion",
         "gmail",
+        "google_calendar",
+        "google_docs",
         "google_drive",
+        "google_sheets",
+        "google_slides",
         "hubspot",
         "salesforce",
         "jira",

package/bin/agent-native.js

@@ -2,6 +2,7 @@
 
 import { spawn } from "node:child_process";
 import { existsSync, statSync } from "node:fs";
+import { createRequire } from "node:module";
 import { dirname, join } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 
@@ -62,14 +63,31 @@ if (!useSourceFallback) {
 
   await import(pathToFileURL(distEntry).href);
 } else {
-  const child = spawn("tsx", [sourceEntry, ...process.argv.slice(2)], {
-    stdio: "inherit",
-    env: process.env,
-  });
+  // Resolve tsx from this package instead of trusting PATH: the fallback is
+  // also reached through `node packages/core/bin/agent-native.js`, which runs
+  // without node_modules/.bin on PATH.
+  let tsxCli;
+  try {
+    tsxCli = createRequire(import.meta.url).resolve("tsx/cli");
+  } catch (error) {
+    console.error(
+      `agent-native CLI source fallback could not resolve tsx (${error.message}). Run \`pnpm --filter @agent-native/core build\` and try again.`,
+    );
+    process.exit(1);
+  }
+
+  const child = spawn(
+    process.execPath,
+    [tsxCli, sourceEntry, ...process.argv.slice(2)],
+    {
+      stdio: "inherit",
+      env: process.env,
+    },
+  );
 
   child.on("error", (error) => {
     console.error(
-      `agent-native CLI build output is missing and the source fallback failed: ${error.message}`,
+      `agent-native CLI source fallback failed: ${error.message}. Run \`pnpm --filter @agent-native/core build\` and try again.`,
     );
     process.exit(1);
   });

package/corpus/README.md

@@ -31,4 +31,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- template files: 8525
+- template files: 8585

package/corpus/templates/analytics/.agents/skills/secrets/SKILL.md

@@ -19,10 +19,17 @@ data, and generated extension/app content may mention credential **names** such
 as `OPENAI_API_KEY`, but must not contain real API keys, tokens, webhook URLs,
 signing secrets, OAuth refresh tokens, or private Builder/customer data.
 
-Secret values are supplied at runtime through deployment configuration, the
-encrypted `app_secrets` vault, `saveCredential` / `resolveCredential`, OAuth, or
-`${keys.NAME}` substitution. Examples must use obvious placeholders such as
-`<OPENAI_API_KEY>` or `${keys.SLACK_WEBHOOK}`, not real-looking copied values.
+Provider secret values are supplied at runtime through the encrypted
+`app_secrets` vault, `saveCredential` / `resolveCredential`, OAuth, or
+`${keys.NAME}` substitution. Deployment configuration is reserved for
+deploy-level secrets and non-provider configuration. Examples must use obvious
+placeholders such as `<OPENAI_API_KEY>` or `${keys.SLACK_WEBHOOK}`, not
+real-looking copied values.
+
+Provider credentials and provider account identifiers are workspace data. Use
+standard workspace connections and org/workspace vault scopes; never put them
+in `.env` or deployment environment variables, and never add a provider-specific
+action or startup bootstrap just to write a credential for one organization.
 
 ## Credential Modeling Preflight
 

package/corpus/templates/analytics/actions/query-agent-native-analytics.ts

@@ -48,7 +48,7 @@ function toDataTableResult(result: {
 
 export default defineAction({
   description:
-    "Query the built-in first-party Analytics source: events recorded through this app's analytics collector endpoint (/track), compact daily rollups updated transactionally with new ingest, identifiable user-day rollups, and session replay summaries recorded through /api/analytics/replay. This source does not require an external provider connection. Use it for questions about app/site traffic, product events, template/app usage, conversions, session recordings, LLM/agent observability, model cost, token volume, latency, and other first-party data collected by this analytics app. Use source-specific actions such as BigQuery, GA4, Mixpanel, PostHog, or Amplitude when the user asks for those sources or the relevant data lives there. SQL may read analytics_events, analytics_event_daily_rollups, analytics_user_days, and session_recordings; session_replay_chunks is intentionally unavailable, and reads are automatically scoped to the current user/org. Prefer analytics_event_daily_rollups for event counts and analytics_user_days for active-user or retention questions. On the Builder.io production organization after the explicit BigQuery cutover, event and rollup reads use partitioned BigQuery tables/views while session_recordings remains in the SQL store; cross-backend joins are not supported. Before a large or historical query, call get-first-party-analytics-health and use a configured external backend when it recommends one: BigQuery supports warehouse SQL and historical analysis, while Amplitude supports product analytics, funnels, and retention. Connecting a backend does not automatically reroute /track events or copy existing Neon events; the migration action performs that explicit prepare, backfill, and cutover sequence. Aggregate, project only needed columns, use bounded recent drill-downs, and add a LIMIT for raw or high-cardinality reads; do not issue an unbounded raw-event scan or paginate a large cohort. An explicit all-time or lifetime request remains all-time, so do not invent a default lower time bound. Safe scoped results are cached for up to five minutes for this agent action. analytics_events columns include event_name, timestamp, event_date, user_id, anonymous_id, user_key, session_id, app, template, signed_in, url, path, hostname, referrer, properties, and context. analytics_event_daily_rollups columns include tenant_key, owner_email, org_id, event_date, event_name, app, template, and event_count. analytics_user_days columns include tenant_key, owner_email, org_id, event_date, and user_key. LLM observability events use event_name = '$ai_generation'; useful properties include $ai_trace_id/run_id, $ai_session_id/thread_id, $ai_model/model, $ai_provider/provider, $ai_input_tokens/input_tokens, $ai_output_tokens/output_tokens, cache_read_tokens, cache_write_tokens, cost_cents_x100, $ai_total_cost_usd/cost_usd, duration_ms/$ai_latency, status, tool_calls, successful_tools, failed_tools, tools, tools_truncated, delegated, delegation_protocol, caller_app, delegation_task_id, a2a_task_id, parent_run_id, parent_turn_id, and error_message/$ai_error. Agent Teams child runs use delegation_protocol = 'agent-team' and retain their own run_id while linking to the launching run through parent_run_id. The bounded tools array contains names, relative start times, durations, statuses, and coarse error classes only, never args or results; failed runs and interrupted tools remain queryable. session_recordings columns include id, session_id, user_id, anonymous_id, user_key, started_at, ended_at, duration_ms, chunk_count, event_count, page_count, error_count, rage_click_count, app, template, status, first_url, last_url, path, hostname, referrer, and metadata.",
+    "Query the built-in first-party Analytics source: events recorded through this app's analytics collector endpoint (/track), compact daily rollups updated transactionally with new ingest, identifiable user-day rollups, and session replay summaries recorded through /api/analytics/replay. This source does not require an external provider connection. Use it for questions about app/site traffic, product events, template/app usage, conversions, session recordings, LLM/agent observability, model cost, token volume, latency, and other first-party data collected by this analytics app. Use source-specific actions such as BigQuery, GA4, Mixpanel, PostHog, or Amplitude when the user asks for those sources or the relevant data lives there. SQL may read analytics_events, analytics_event_daily_rollups, analytics_user_days, and session_recordings; session_replay_chunks is intentionally unavailable, and reads are automatically scoped to the current user/org. Prefer analytics_event_daily_rollups for event counts and analytics_user_days for active-user or retention questions. On the Builder.io production organization after the explicit BigQuery cutover, event and rollup reads use partitioned BigQuery tables/views while session_recordings remains in the SQL store; cross-backend joins are not supported. Before a large or historical query, call get-first-party-analytics-health and use a configured external backend when it recommends one: BigQuery supports warehouse SQL and historical analysis, while Amplitude supports product analytics, funnels, and retention. Connecting a backend does not automatically reroute /track events or copy existing Neon events; the migration action performs that explicit prepare, backfill, and cutover sequence. Aggregate, project only needed columns, use bounded recent drill-downs, and add a LIMIT for raw or high-cardinality reads; do not issue an unbounded raw-event scan or paginate a large cohort. An explicit all-time or lifetime request remains all-time, so do not invent a default lower time bound. Safe scoped results are cached for up to five minutes for this agent action. analytics_events columns include event_name, timestamp, event_date, user_id, anonymous_id, user_key, session_id, app, template, signed_in, url, path, hostname, referrer, properties, and context. analytics_event_daily_rollups columns include tenant_key, owner_email, org_id, event_date, event_name, app, template, and event_count. analytics_user_days columns include tenant_key, owner_email, org_id, event_date, and user_key. LLM observability events use event_name = '$ai_generation'; useful properties include $ai_trace_id/run_id, $ai_session_id/thread_id, $ai_model/model, $ai_provider/provider, $ai_input_tokens/input_tokens, $ai_output_tokens/output_tokens, cache_read_tokens, cache_write_tokens, cost_cents_x100, $ai_total_cost_usd/cost_usd, duration_ms (full run, milliseconds), $ai_latency (model time in seconds, run minus tool time), status, tool_calls, successful_tools, failed_tools, tools, tools_truncated, delegated, delegation_protocol, caller_app, delegation_task_id, a2a_task_id, parent_run_id, parent_turn_id, and error_message/$ai_error. Agent Teams child runs use delegation_protocol = 'agent-team' and retain their own run_id while linking to the launching run through parent_run_id. The bounded tools array contains names, relative start times, durations, statuses, and coarse error classes only, never args or results; failed runs and interrupted tools remain queryable. session_recordings columns include id, session_id, user_id, anonymous_id, user_key, started_at, ended_at, duration_ms, chunk_count, event_count, page_count, error_count, rage_click_count, app, template, status, first_url, last_url, path, hostname, referrer, and metadata.",
   schema: z.object({
     sql: z
       .string()

package/corpus/templates/analytics/app/i18n-data.ts

@@ -468,6 +468,9 @@ const enUS = {
     adminOnlyTitle: "Admin access required",
     adminOnlyDescription:
       "Only organization owners and admins can open Analytics admin tools.",
+    roleUnavailableTitle: "Couldn't verify your access",
+    roleUnavailableDescription:
+      "We couldn't check your organization role: {{message}}",
     notTracked: "Not tracked",
     visibilityprivate: "Private",
     visibilityorg: "Shared with org",
@@ -13018,6 +13021,8 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "需要管理员权限",
       adminOnlyDescription:
         "只有组织所有者和管理员可以打开 Analytics 管理工具。",
+      roleUnavailableTitle: "无法验证你的访问权限",
+      roleUnavailableDescription: "无法检查你的组织角色：{{message}}",
       notTracked: "未跟踪",
       visibilityprivate: "私有",
       visibilityorg: "与组织共享",
@@ -13066,6 +13071,9 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "Se requiere acceso de administrador",
       adminOnlyDescription:
         "Solo los propietarios y administradores de la organización pueden abrir las herramientas de administración de Analytics.",
+      roleUnavailableTitle: "No se pudo verificar tu acceso",
+      roleUnavailableDescription:
+        "No pudimos comprobar tu rol en la organización: {{message}}",
       notTracked: "No registrado",
       visibilityprivate: "Privado",
       visibilityorg: "Compartido con la organización",
@@ -13114,6 +13122,9 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "Accès administrateur requis",
       adminOnlyDescription:
         "Seuls les propriétaires et administrateurs de l'organisation peuvent ouvrir les outils d'administration Analytics.",
+      roleUnavailableTitle: "Impossible de vérifier votre accès",
+      roleUnavailableDescription:
+        "Nous n'avons pas pu vérifier votre rôle dans l'organisation : {{message}}",
       notTracked: "Non suivi",
       visibilityprivate: "Privé",
       visibilityorg: "Partagé avec l'organisation",
@@ -13162,6 +13173,9 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "Adminzugriff erforderlich",
       adminOnlyDescription:
         "Nur Organisationsinhaber und Administratoren können Analytics-Admin-Tools öffnen.",
+      roleUnavailableTitle: "Zugriff konnte nicht überprüft werden",
+      roleUnavailableDescription:
+        "Deine Organisationsrolle konnte nicht überprüft werden: {{message}}",
       notTracked: "Nicht erfasst",
       visibilityprivate: "Privat",
       visibilityorg: "Mit Organisation geteilt",
@@ -13210,6 +13224,9 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "管理者アクセスが必要です",
       adminOnlyDescription:
         "組織の所有者と管理者のみが Analytics 管理ツールを開けます。",
+      roleUnavailableTitle: "アクセス権を確認できませんでした",
+      roleUnavailableDescription:
+        "組織内のロールを確認できませんでした: {{message}}",
       notTracked: "未追跡",
       visibilityprivate: "非公開",
       visibilityorg: "組織と共有",
@@ -13257,6 +13274,9 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "관리자 권한 필요",
       adminOnlyDescription:
         "조직 소유자와 관리자만 Analytics 관리 도구를 열 수 있습니다.",
+      roleUnavailableTitle: "접근 권한을 확인할 수 없습니다",
+      roleUnavailableDescription:
+        "조직 역할을 확인하지 못했습니다: {{message}}",
       notTracked: "추적 안 됨",
       visibilityprivate: "비공개",
       visibilityorg: "조직과 공유됨",
@@ -13305,6 +13325,9 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "Acesso de administrador necessário",
       adminOnlyDescription:
         "Somente proprietários e administradores da organização podem abrir as ferramentas administrativas do Analytics.",
+      roleUnavailableTitle: "Não foi possível verificar seu acesso",
+      roleUnavailableDescription:
+        "Não conseguimos verificar sua função na organização: {{message}}",
       notTracked: "Não rastreado",
       visibilityprivate: "Privado",
       visibilityorg: "Compartilhado com a organização",
@@ -13352,6 +13375,9 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "एडमिन access आवश्यक है",
       adminOnlyDescription:
         "केवल organization owners और admins Analytics admin tools खोल सकते हैं।",
+      roleUnavailableTitle: "आपका access सत्यापित नहीं किया जा सका",
+      roleUnavailableDescription:
+        "हम आपकी organization role जांच नहीं सके: {{message}}",
       notTracked: "ट्रैक नहीं किया गया",
       visibilityprivate: "निजी",
       visibilityorg: "संगठन के साथ साझा",
@@ -13400,6 +13426,8 @@ const translatedDashboardAdminTranslations = {
       adminOnlyTitle: "مطلوب وصول مسؤول",
       adminOnlyDescription:
         "يمكن لمالكي المؤسسة والمسؤولين فقط فتح أدوات إدارة Analytics.",
+      roleUnavailableTitle: "تعذر التحقق من وصولك",
+      roleUnavailableDescription: "تعذر التحقق من دورك في المؤسسة: {{message}}",
       notTracked: "غير متتبع",
       visibilityprivate: "خاص",
       visibilityorg: "مشترك مع المؤسسة",

package/corpus/templates/analytics/app/pages/Agents.tsx

@@ -428,7 +428,11 @@ function UsageStatCard({
 
 export default function AgentsPage() {
   const t = useT();
-  const { canManageOrg, isLoading: orgRoleLoading } = useOrgRole();
+  const {
+    canManageOrg,
+    isLoading: orgRoleLoading,
+    error: orgRoleError,
+  } = useOrgRole();
   const [searchParams, setSearchParams] = useSearchParams();
   const view = parseView(searchParams.get("view"));
   const selectedConnectionId = searchParams.get("db");
@@ -461,6 +465,26 @@ export default function AgentsPage() {
     );
   }
 
+  if (orgRoleError && isAdminView) {
+    return (
+      <div className="mx-auto flex h-full w-full max-w-7xl items-center justify-center px-4 py-5 lg:px-6">
+        <div className="max-w-sm rounded-lg border bg-background p-6 text-center">
+          <div className="mx-auto mb-3 flex h-10 w-10 items-center justify-center rounded-full bg-muted">
+            <IconAlertTriangle className="h-5 w-5 text-muted-foreground" />
+          </div>
+          <h1 className="text-sm font-semibold">
+            {t("agents.roleUnavailableTitle")}
+          </h1>
+          <p className="mt-1.5 text-sm leading-6 text-muted-foreground">
+            {t("agents.roleUnavailableDescription", {
+              message: orgRoleError.message,
+            })}
+          </p>
+        </div>
+      </div>
+    );
+  }
+
   if (!canManageOrg && isAdminView) {
     return (
       <div className="mx-auto flex h-full w-full max-w-7xl items-center justify-center px-4 py-5 lg:px-6">

package/corpus/templates/analytics/app/routes/$.tsx

@@ -1,3 +1,5 @@
+import { data } from "react-router";
+
 import { messagesByLocale } from "@/i18n-data";
 import NotFound from "@/pages/NotFound";
 
@@ -5,6 +7,14 @@ export function meta() {
   return [{ title: messagesByLocale["en-US"].routeTitles.notFound }];
 }
 
+// The splat route matches every unmatched path, so React Router's "no routes
+// matched" 404 branch never fires here and the response defaults to 200. Set
+// the status explicitly so the shell is served (and CDN-cached) as the
+// not-found page it actually is.
+export function loader() {
+  return data(null, { status: 404 });
+}
+
 export default function CatchAllRoute() {
   return <NotFound />;
 }

package/corpus/templates/analytics/app/routes.ts

@@ -1,4 +1,6 @@
 import { type RouteConfig } from "@react-router/dev/routes";
 import { flatRoutes } from "@react-router/fs-routes";
 
-export default flatRoutes() satisfies RouteConfig;
+export default flatRoutes({
+  ignoredRouteFiles: ["**/*.test.{ts,tsx}", "**/*.spec.{ts,tsx}"],
+}) satisfies RouteConfig;

package/corpus/templates/analytics/changelog/2026-08-22-fixed-the-agent-native-templates-first-party-dashboard-panel.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-22
+---
+
+Fixed the Agent Native Templates (First-party) dashboard panels failing to load on a local SQLite database

package/corpus/templates/analytics/changelog/2026-08-22-org-admin-panels-no-longer-report-a-database-error-as-a-per.md

@@ -0,0 +1,9 @@
+---
+type: fixed
+date: 2026-08-22
+---
+
+Org admin panels no longer report a database error as a permission denial. A failed
+organization-role lookup now surfaces as a retryable error instead of silently reading
+as "you are not an owner or admin", which had been 403-ing the usage stats panel for
+real admins whenever the database was briefly unreachable.

package/corpus/templates/analytics/changelog/2026-08-22-slack-requests-report-invalid-inputs.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-22
+---
+
+Slack analytics requests now reject invalid workspaces and cursors with actionable errors instead of using the wrong workspace or returning a server failure.

package/corpus/templates/analytics/changelog/2026-08-22-unknown-analytics-links-now-return-a-real-not-found-status.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-22
+---
+
+Visiting a broken or mistyped Analytics link now returns a real not-found response instead of a silent success.

package/corpus/templates/analytics/docs/schemas/first-party-analytics.md

@@ -128,7 +128,8 @@ Useful query fields live in `properties`:
 | `cache_read_tokens`, `cache_write_tokens`        | Prompt-cache token counts                                                                         |
 | `$ai_total_cost_usd`, `cost_usd`                 | Estimated run cost in USD                                                                         |
 | `cost_cents_x100`                                | Estimated run cost in centicents                                                                  |
-| `$ai_latency`, `duration_ms`                     | Run duration in seconds / milliseconds                                                            |
+| `duration_ms`                                    | Run duration in milliseconds                                                                      |
+| `$ai_latency`                                    | Model time in seconds (run duration minus tool time), on `$ai_generation`                         |
 | `tool_calls`, `successful_tools`, `failed_tools` | Complete tool-call counts                                                                         |
 | `tools`, `tools_truncated`                       | First 50 tool names, offsets, durations, statuses, and error classes, including interrupted calls |
 | `delegated`, `delegation_protocol`, `caller_app` | Delegated-run attribution                                                                         |

package/corpus/templates/analytics/docs/schemas/tracked-events.md

@@ -29,6 +29,8 @@ Events tracked by application instrumentation and stored in the configured appli
   `$ai_model`, `$ai_provider`, `$ai_input_tokens`, `$ai_output_tokens`,
   `$ai_latency`, `$ai_total_cost_usd`, `run_id`, `thread_id`,
   `cost_cents_x100`, `duration_ms`, `tool_calls`, `status`, and error fields.
+  `$ai_latency` is model time in seconds; `duration_ms` is the full run in
+  milliseconds, and the two differ by the time spent in tools.
   A bounded `tools` array records only tool names, relative start times,
   durations, statuses, and coarse error classes; interrupted tools and failed
   runs remain visible, and `tools_truncated` marks runs above the 50-entry cap.

package/corpus/templates/analytics/scripts/emit-netlify-dashboard-report-cron.ts

@@ -5,7 +5,29 @@ import { existsSync, rmSync, writeFileSync, mkdirSync } from "node:fs";
 import path from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 
-import { cloneServerBundleForFunction } from "@agent-native/core/deploy/function-bundle";
+import {
+  cloneServerBundleForFunction,
+  pruneBrowserRuntimeFromNonAgentClone,
+  pruneSsrIslandFromRewritingClone,
+} from "@agent-native/core/deploy/function-bundle";
+
+/**
+ * Each sweep worker is a full clone of the server bundle, but its entry rewrites
+ * the pathname to one scheduled route. It can reach neither the SSR pages nor an
+ * agent turn, yet it shipped both the page island and the 79MB browser runtime —
+ * six times over, and Netlify zips every function separately.
+ */
+function writeWorkerEntry(dest: string, name: string, source: string): void {
+  writeFileSync(path.join(dest, `${name}.mjs`), source);
+  const freed =
+    pruneSsrIslandFromRewritingClone(dest, source) +
+    pruneBrowserRuntimeFromNonAgentClone(dest, source);
+  if (freed > 0) {
+    console.log(
+      `[deploy] Pruned ${(freed / 1024 / 1024).toFixed(1)}MB of unreachable modules from ${name}.`,
+    );
+  }
+}
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const FUNCTIONS_DIR = path.join(ROOT, ".netlify", "functions-internal");
@@ -164,7 +186,7 @@ export const config = {
 };
 `;
 
-  writeFileSync(path.join(dest, `${WORKER_NAME}.mjs`), source);
+  writeWorkerEntry(dest, WORKER_NAME, source);
 }
 
 function emitAlertScheduledTrigger(token: string) {
@@ -282,7 +304,7 @@ export const config = {
 };
 `;
 
-  writeFileSync(path.join(dest, `${ALERT_WORKER_NAME}.mjs`), source);
+  writeWorkerEntry(dest, ALERT_WORKER_NAME, source);
 }
 
 function emitUptimeScheduledTrigger(token: string) {
@@ -400,7 +422,7 @@ export const config = {
 };
 `;
 
-  writeFileSync(path.join(dest, `${UPTIME_WORKER_NAME}.mjs`), source);
+  writeWorkerEntry(dest, UPTIME_WORKER_NAME, source);
 }
 
 function emitRollupScheduledTrigger(token: string) {
@@ -500,7 +522,7 @@ export const config = {
 };
 `;
 
-  writeFileSync(path.join(dest, `${ROLLUP_WORKER_NAME}.mjs`), source);
+  writeWorkerEntry(dest, ROLLUP_WORKER_NAME, source);
 }
 
 function emitBigQueryScheduledTrigger(token: string) {
@@ -600,7 +622,7 @@ export const config = {
 };
 `;
 
-  writeFileSync(path.join(dest, `${BIGQUERY_WORKER_NAME}.mjs`), source);
+  writeWorkerEntry(dest, BIGQUERY_WORKER_NAME, source);
 }
 
 function emitRetentionScheduledTrigger(token: string) {
@@ -702,7 +724,7 @@ export const config = {
 };
 `;
 
-  writeFileSync(path.join(dest, `${RETENTION_WORKER_NAME}.mjs`), source);
+  writeWorkerEntry(dest, RETENTION_WORKER_NAME, source);
 }
 
 function isDirectRun(): boolean {

package/corpus/templates/analytics/server/handlers/slack.ts

@@ -19,8 +19,57 @@ import {
   type SlackMessage,
 } from "../lib/slack";
 
-function parseWorkspace(raw?: string): Workspace {
-  return raw === "secondary" ? "secondary" : "primary";
+export function parseWorkspace(raw?: unknown): Workspace | null {
+  if (raw === undefined || raw === null || raw === "" || raw === "primary") {
+    return "primary";
+  }
+  if (raw === "secondary") return "secondary";
+  return null;
+}
+
+function invalidWorkspace(event: H3Event) {
+  setResponseStatus(event, 400);
+  return { error: "workspace must be primary or secondary" };
+}
+
+export function parseCursorMap(
+  raw?: unknown,
+): { ok: true; value: Record<string, string> } | { ok: false } {
+  if (raw === undefined || raw === null || raw === "") {
+    return { ok: true, value: {} };
+  }
+
+  try {
+    const parsed: unknown = JSON.parse(String(raw));
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      return { ok: false };
+    }
+    const entries = Object.entries(parsed);
+    if (
+      entries.some(
+        ([, value]) =>
+          typeof value !== "string" ||
+          !/^\d+(?:\.\d{1,6})?$/.test(value.trim()),
+      )
+    ) {
+      return { ok: false };
+    }
+    return {
+      ok: true,
+      value: Object.fromEntries(
+        entries.map(([channelId, value]) => [channelId, value.trim()]),
+      ),
+    };
+  } catch {
+    return { ok: false };
+  }
+}
+
+function invalidCursors(event: H3Event) {
+  setResponseStatus(event, 400);
+  return {
+    error: "cursors must be a JSON object of channel IDs to timestamps",
+  };
 }
 
 async function requireSlackCredential(event: H3Event, workspace: Workspace) {
@@ -34,6 +83,7 @@ export const handleSlackTeam = defineEventHandler((event) =>
     try {
       const { workspace: workspaceParam } = getQuery(event);
       const workspace = parseWorkspace(workspaceParam as string);
+      if (!workspace) return invalidWorkspace(event);
       const missing = await requireSlackCredential(event, workspace);
       if (missing) return missing;
       const team = await getTeamInfo(workspace);
@@ -51,6 +101,7 @@ export const handleSlackChannels = defineEventHandler((event) =>
     try {
       const { workspace: workspaceParam, cursor } = getQuery(event);
       const workspace = parseWorkspace(workspaceParam as string);
+      if (!workspace) return invalidWorkspace(event);
       const missing = await requireSlackCredential(event, workspace);
       if (missing) return missing;
       const result = await listChannelsWithCoverage(
@@ -102,6 +153,7 @@ export const handleSlackHistory = defineEventHandler((event) =>
         cursor,
       } = getQuery(event);
       const workspace = parseWorkspace(workspaceParam as string);
+      if (!workspace) return invalidWorkspace(event);
       const missing = await requireSlackCredential(event, workspace);
       if (missing) return missing;
       const limit = parseInt((limitParam as string) || "50", 10);
@@ -174,6 +226,7 @@ export const handleSlackMultiHistory = defineEventHandler((event) =>
         cursors: cursorsParam,
       } = getQuery(event);
       const workspace = parseWorkspace(workspaceParam as string);
+      if (!workspace) return invalidWorkspace(event);
       const missing = await requireSlackCredential(event, workspace);
       if (missing) return missing;
       // cursors is a JSON-encoded object: { channelId: timestamp }
@@ -188,9 +241,9 @@ export const handleSlackMultiHistory = defineEventHandler((event) =>
       const channelNamesList = namesParam
         ? (namesParam as string).split(",")
         : channelIds;
-      const cursors: Record<string, string> = cursorsParam
-        ? JSON.parse(cursorsParam as string)
-        : {};
+      const parsedCursors = parseCursorMap(cursorsParam);
+      if (!parsedCursors.ok) return invalidCursors(event);
+      const cursors = parsedCursors.value;
 
       // Fetch pageSize messages from each channel in parallel while preserving
       // partial results when the bot is not invited to one of the channels.
@@ -358,6 +411,7 @@ export const handleSlackSearch = defineEventHandler((event) =>
     try {
       const { workspace: workspaceParam, query } = getQuery(event);
       const workspace = parseWorkspace(workspaceParam as string);
+      if (!workspace) return invalidWorkspace(event);
       const missing = await requireSlackCredential(event, workspace);
       if (missing) return missing;
 

package/corpus/templates/analytics/server/lib/db-admin-connections.ts

@@ -69,15 +69,20 @@ async function resolveOrgRole(
   userEmail: string,
   orgId: string,
 ): Promise<string | null> {
-  try {
-    const { rows } = await getDbExec().execute({
+  // A failed lookup must never collapse into "no role": that reads downstream as
+  // a denial and 403s org owners whenever the database is briefly unreachable.
+  const { rows } = await getDbExec()
+    .execute({
       sql: `SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,
       args: [orgId, userEmail.toLowerCase()],
+    })
+    .catch((error: unknown) => {
+      throw new DbAdminConnectionError(
+        503,
+        `Couldn't verify your organization role: ${redactDbAdminError(error)}`,
+      );
     });
-    return readString((rows[0] ?? {}) as Record<string, unknown>, "role");
-  } catch {
-    return null;
-  }
+  return readString((rows[0] ?? {}) as Record<string, unknown>, "role");
 }
 
 export async function requireAnalyticsAdminContext(input?: {