@agent-native/core 0.211.0 → 0.212.0-nightly-20261021010049

package/docs/content/deployment-environment-variables.mdx

@@ -20,6 +20,7 @@ hosting behavior.
 | `APP_URL`                                   | Optional canonical public origin. Checked ahead of `BETTER_AUTH_URL` when resolving the A2A JWT audience, the OAuth public origin, self-dispatch webhook targets, and generated resource links. Set it explicitly on preview/staging deploys where the request host is unreliable.                                                                                      |
 | `AGENT_PROD_CODE_EXECUTION`                 | Optional production code-execution mode: `off` (default), `sandboxed`, or `trusted`. See [Production Code Execution](/docs/actions-agent-tools#production-code-execution).                                                                                                                                                                                              |
 | `AGENT_NATIVE_SSR_CACHE`                    | Deployment-wide SSR shell cache policy: unset/`on` keeps the default hard-cache, `off` sends `no-store`, or a duration such as `30s` / `5m` sets a shorter freshness. See [SSR Caching](/docs/ssr-caching).                                                                                                                                                             |
+| `AGENT_NATIVE_HEAD_SCRIPT_SRC`              | Optional HTTPS URL of a script loaded with `defer` in the `<head>` of every server-rendered page. Use it for deployment-specific tooling such as an internal feedback widget, without changing app source. Non-HTTPS URLs fail config validation.                                                                                                                       |
 | `AGENT_NATIVE_ENABLE_KEEP_WARM`             | Opt into the Netlify keep-warm scheduled function. Unset by default. See [Keep-warm](/docs/netlify#netlify-keep-warm).                                                                                                                                                                                                                                                  |
 | `AGENT_NATIVE_DISABLE_KEEP_WARM`            | Compatibility kill switch for the Netlify keep-warm scheduled function. See [Keep-warm](/docs/netlify#netlify-keep-warm).                                                                                                                                                                                                                                               |
 | `AGENT_NATIVE_KEEP_WARM_SCHEDULE`           | Override the keep-warm cadence with a 5-field cron expression (default `* * * * *` when enabled). An unparseable value fails the build. See [Keep-warm](/docs/netlify#netlify-keep-warm).                                                                                                                                                                               |

package/docs/content/environment-variables.mdx

@@ -95,6 +95,7 @@ public app behavior, use the config paths above instead.
 | `ACCESS_TOKEN` / `ACCESS_TOKENS`               | Static bearer fallback for MCP and Connect clients.                                                                                                                            | One token or a delimited token list; these are not browser auth.                                                        |
 | `AGENT_PROD_CODE_EXECUTION`                    | Production code-execution policy.                                                                                                                                              | `off`, `sandboxed`, or `trusted`. See [Production Code Execution](/docs/actions-agent-tools#production-code-execution). |
 | `AGENT_NATIVE_SSR_CACHE`                       | Deployment-wide public SSR shell cache policy.                                                                                                                                 | Unset/`on`, `off`, or a duration such as `30s` or `5m`. See [SSR Caching](/docs/ssr-caching).                           |
+| `AGENT_NATIVE_HEAD_SCRIPT_SRC`                 | Extra script injected into every server-rendered page head with `defer`.                                                                                                       | An absolute `https://` URL; non-HTTPS values fail config validation.                                                    |
 | `AGENT_NATIVE_ENABLE_KEEP_WARM`                | Opts into the Netlify keep-warm scheduled function; unset by default.                                                                                                          | `1`; see [Keep-warm](/docs/netlify#netlify-keep-warm).                                                                  |
 | `AGENT_NATIVE_DISABLE_KEEP_WARM`               | Compatibility kill switch for the Netlify keep-warm scheduled function.                                                                                                        | `1`; see [Keep-warm](/docs/netlify#netlify-keep-warm).                                                                  |
 | `AGENT_NATIVE_KEEP_WARM_SCHEDULE`              | Keep-warm cadence override when enabled.                                                                                                                                       | A 5-field cron expression such as `*/5 * * * *`; an unparseable value fails the build.                                  |

package/docs/content/sharing.mdx

@@ -135,6 +135,8 @@ Every shareable resource gets a share button in its header. Clicking it opens a
 - General access: visibility selector (`Private` / `Organization` / `Public link`).
 - A copy-link button that respects the current visibility.
 
+Moving a resource from `Private` to `Organization` asks for confirmation first. Nothing changes until the user confirms. Cancel or Escape keeps the current access. If saving fails, the dialog shows the error and the user can try again. Other visibility changes save at once. The confirmation lives in the share UI only. `set-resource-visibility` is unchanged, so the agent and any other caller still change visibility directly and the resource's sharing policy still decides what is allowed.
+
 <WireframeBlock id="doc-block-sharing2">
   <Screen
     surface="popover"
@@ -158,6 +160,40 @@ import { ShareButton } from "@agent-native/toolkit/app/sharing";
 
 For lists, drop a `<VisibilityBadge visibility={row.visibility} />` next to each row so users can see at a glance what's private vs. shared.
 
+## Shared chats {#shared-chats}
+
+Agent chat threads use the same model. A new or forked chat is private to its owner, and sharing a chat follows the rules above.
+
+Each chat in a history list carries two fields so a row can say whose chat it is and why you can see it:
+
+| Field         | Value                                                                                                             |
+| ------------- | ----------------------------------------------------------------------------------------------------------------- |
+| `ownerEmail`  | The chat's owner.                                                                                                 |
+| `accessBasis` | `owner`, `direct` (a grant to you by name), or `organization`. `direct` wins over `organization` when both apply. |
+
+History lists and search take an `ownership` filter:
+
+- `all` (default) lists every chat you can access.
+- `mine` lists chats you own, even when they are shared with the organization.
+- `shared` lists chats you can access that someone else owns.
+
+The server applies `ownership` before pagination, so `limit`, `offset`, and `hasMore` describe the filtered list. Search takes the same filter. An unknown value is rejected with a 400 instead of falling back to `all`. Access rules do not change, and listing never loads transcripts.
+
+Migration: custom history list and search callers must send a positive integer `limit` and a non-negative integer `offset`, or omit them to use the defaults. Malformed values now return HTTP 400 instead of being coerced. Valid limits above 200 are capped at 200.
+
+In client code, `useChatThreadList()` from `@agent-native/core/client` pages one list at a time:
+
+```tsx
+import { useChatThreadList } from "@agent-native/core/client";
+
+const shared = useChatThreadList({ ownership: "shared", pageSize: 50 });
+// shared.threads, shared.hasMore, shared.loadMore(), shared.error
+```
+
+`refreshOnThreadUpdates` defaults to `true`. Set it to `false` to skip refreshes triggered by `notifyChatThreadsUpdated()`. Initial loading, manual `refresh()`, paging, and reloading after an Activity resumes still work. Changing this option preserves loaded rows and does not fetch by itself.
+
+A failed request sets `error` and keeps the rows already loaded. It never looks like an empty list. `<ShareButton>` and `<ShareDialog>` refresh mounted chat lists after they save. If you change a chat's sharing some other way, call `notifyChatThreadsUpdated()` so mounted lists refetch.
+
 ## Same model, agent and UI {#agent-and-ui}
 
 The framework auto-mounts these actions in every template — the agent calls them as tools, and the UI calls them through `useActionQuery` / `useActionMutation`:

package/docs/content/toolkit-sharing.mdx

@@ -64,8 +64,10 @@ registerShareableResource({
 Render the standard controls where users decide access:
 
 ```tsx
-import { ShareButton } from "@agent-native/toolkit/app/sharing";
-import { VisibilityBadge } from "@agent-native/toolkit/sharing";
+import {
+  ShareButton,
+  VisibilityBadge,
+} from "@agent-native/toolkit/app/sharing";
 
 <VisibilityBadge visibility={dashboard.visibility} />;
 <ShareButton resourceType="dashboard" resourceId={dashboard.id} />;
@@ -93,18 +95,39 @@ or mutations; core and app wrappers inject data and callbacks.
   />
 </WireframeBlock>
 
-The most common low-level import is:
-
-```tsx
-import { VisibilityBadge } from "@agent-native/toolkit/sharing";
-```
-
-`<ShareButton>` and `<ShareDialog>` are Toolkit UI exported from
-`@agent-native/toolkit/app/sharing`. They use Core client hooks and the shared
-sharing actions. When building custom sharing UI, import
-`useShareButtonController` and `useShareDialogController` from
+`<ShareButton>`, `<ShareDialog>`, and `<VisibilityBadge>` are exported from
+`@agent-native/toolkit/app/sharing`. They use Core client hooks, the shared
+sharing actions, and the app's localized text. When building custom sharing UI,
+import `useShareButtonController` and `useShareDialogController` from
 `@agent-native/core/client/sharing`.
 
+The presentational pieces in `@agent-native/toolkit/sharing` take their text
+from the app. `VisibilityBadge` there accepts a `labels` object with `private`,
+`org`, and `public` text. Any label you leave out falls back to the legacy
+English default ("Private", "Org", "Public"), so existing callers keep their
+text. `OwnershipFilter` requires labels for `all`, `mine`, and `shared`. The
+`@agent-native/toolkit/app/sharing` versions always fill those labels from the
+app's localized text, so use them unless you supply the copy yourself.
+
+Moving a resource from Private to Organization in `<ShareButton>` or
+`<ShareDialog>` opens a confirmation first. Nothing is saved until the user
+confirms, and Cancel or Escape keeps the current access. The confirmation is UI
+intent only. The share actions and their policy checks are unchanged for the
+agent. For chat threads, both components refresh mounted chat lists after they
+save.
+
+Custom surfaces get the same confirmation through
+`useShareButtonController().visibilityTransition` (`request`, `confirm`,
+`cancel`) and render it with `ShareVisibilityConfirmDialog`. `request` returns a
+promise that resolves once the change is saved. A direct change rejects with
+the save's error. A held change whose confirmation fails keeps the error and
+the retry in the dialog and its promise stays pending until a retry succeeds,
+or rejects with `ShareVisibilityNotSavedError` when it is cancelled or
+invalidated, so a held change is never reported as saved. The
+older `handleVisibilityChange` is a deprecated alias for `request` and never
+skips the confirmation. Requests from a closed surface are ignored, and a
+pending change is dropped when the resource changes.
+
 ### Toolkit vs Core {#toolkit-vs-core}
 
 Toolkit sharing UI renders badges, rows, base dialogs, and role pickers when
@@ -113,6 +136,69 @@ request context, org membership lookups, share tables, resource registration,
 access filters, visibility changes, invites, roles, and the private access
 tokens that back agent-readable public surfaces.
 
+## Shared chat history {#shared-chat-history}
+
+`@agent-native/toolkit/chat-history` renders the chat sidebar. Core supplies the
+rows and Toolkit renders them, so an app can show My chats and Shared with you
+as separate sections. See [Sharing & Privacy](/docs/sharing#shared-chats) for
+the `ownership` filter and the `ownerEmail` and `accessBasis` fields.
+
+`<ChatHistoryRail>` accepts `sections` as well as a flat `items` list. Each
+section previews five rows and has its own **Show all** and **Show less**
+control, loading, error, and empty states, and optional load-more:
+
+```tsx
+import { ChatHistoryRail } from "@agent-native/toolkit/chat-history";
+import { useChatThreadList } from "@agent-native/core/client";
+
+const mine = useChatThreadList({ ownership: "mine" });
+const shared = useChatThreadList({ ownership: "shared" });
+
+<ChatHistoryRail
+  onNewChat={startChat}
+  railLabels={{
+    newChat: t("newChat"),
+    showMore: t("showMore"),
+    showLess: t("showLess"),
+    sections: {
+      showAll: t("showAll"),
+      showLess: t("showLess"),
+      loadMore: t("loadMore"),
+      loadingMore: t("loadingMore"),
+      retry: t("retry"),
+    },
+  }}
+  sections={[
+    { id: "mine", label: t("myChats"), items: toItems(mine.threads) },
+    {
+      id: "shared",
+      label: t("sharedWithYou"),
+      items: toItems(shared.threads),
+      hasMore: shared.hasMore,
+      loadingMore: shared.loadingMore,
+      onLoadMore: shared.loadMore,
+      loading: shared.loading,
+      error: shared.error ? t("loadFailed") : undefined,
+      onRetry: shared.refresh,
+    },
+  ]}
+/>;
+```
+
+With `sections`, `railLabels.sections` is required and has no defaults. Pass
+`showAll`, `showLess`, `loadMore`, `loadingMore`, and `retry` as translated text,
+and override them per section with `section.labels` when needed.
+
+Show all reveals the rows already loaded. When the server has more, a disclosed
+section also offers Load more. A failed load shows above the rows that already
+loaded, so it never reads as an empty section.
+
+Rows can show who owns a chat and why the viewer can see it. Set `ownerLabel`,
+`accessLabel`, and `accessBasis` on a `ChatHistoryItem`. The app passes
+translated text, because the Toolkit list ships none. Shared rows should show a
+direct grant over organization access when both apply, which is how Core
+reports `accessBasis`.
+
 ## What's next
 
 - [**Sharing & Privacy**](/docs/sharing) — the framework-level access model

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.211.0",
+  "version": "0.212.0-nightly-20261021010049",
   "description": "The agentic application framework for building autonomous agents with intuitive UIs",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -403,6 +403,7 @@
     },
     "./router": "./dist/router/index.js",
     "./collab": "./dist/collab/index.js",
+    "./collab/live-copy-tasks": "./dist/collab/live-copy-tasks.js",
     "./a2a": "./dist/a2a/index.js",
     "./mcp": "./dist/mcp/index.js",
     "./mcp/fetch": "./dist/mcp/fetch-handler.js",
@@ -554,6 +555,7 @@
     "./client/sharing/useResourceAccessGate": "./dist/client/sharing/useResourceAccessGate.js",
     "./client/sharing/useShareButtonController": "./dist/client/sharing/useShareButtonController.js",
     "./client/sharing/useShareDialogController": "./dist/client/sharing/useShareDialogController.js",
+    "./client/sharing/useShareVisibilityTransition": "./dist/client/sharing/useShareVisibilityTransition.js",
     "./client/sign-in-return": "./dist/client/sign-in-return.js",
     "./client/sign-out": "./dist/client/sign-out.js",
     "./client/tool-display": "./dist/client/tool-display.js",
@@ -711,7 +713,7 @@
     "yaml": "^2.9.0",
     "yjs": "^13.6.33",
     "zod": "^4.3.6",
-    "@agent-native/agentkit": "^0.211.0",
+    "@agent-native/agentkit": "^0.212.0-nightly-20261021010049",
     "@agent-native/recap-cli": "^0.5.78"
   },
   "devDependencies": {
@@ -782,7 +784,7 @@
     "xlsx": "^0.18.5"
   },
   "peerDependencies": {
-    "@agent-native/core-corpus": ">=0.196.0",
+    "@agent-native/core-corpus": "0.212.0-nightly-20261021010049",
     "@ai-sdk/anthropic": ">=3",
     "@ai-sdk/cohere": ">=3",
     "@ai-sdk/google": ">=3",