@agent-native/core 0.79.16 → 0.79.18

package/corpus/core/src/templates/workspace-root/scripts/repair-workspace-org.ts

@@ -1,6 +1,5 @@
 #!/usr/bin/env tsx
 
-import crypto from "node:crypto";
 import fs from "node:fs";
 import path from "node:path";
 
@@ -10,8 +9,6 @@ interface Options {
   ownerEmail?: string;
   a2aSecret?: string;
   envPath: string;
-  force: boolean;
-  dryRun: boolean;
   setDispatchDefaultOwner: boolean;
 }
 
@@ -22,10 +19,10 @@ Options:
   --name <value>                 Sets WORKSPACE_ORG_NAME
   --domain <value>               Sets WORKSPACE_ORG_DOMAIN
   --owner-email <value>          Sets WORKSPACE_OWNER_EMAIL
-  --a2a-secret <value>           Sets A2A_SECRET (generated when omitted)
-  --env <path>                   Env file to update (default: .env)
-  --force                        Overwrite existing non-empty values
-  --dry-run                      Print the changes without writing
+  --a2a-secret <value>           Reads A2A_SECRET for validation
+  --env <path>                   Env file to read for fallback values (default: .env)
+  --force                        Accepted for compatibility; no file is written
+  --dry-run                      Accepted for compatibility; no file is written
   --set-dispatch-default-owner   Also set DISPATCH_DEFAULT_OWNER_EMAIL
 `;
 
@@ -41,8 +38,6 @@ type RequiredKey = (typeof REQUIRED_KEYS)[number];
 function parseArgs(argv: string[]): Options {
   const opts: Options = {
     envPath: ".env",
-    force: false,
-    dryRun: false,
     setDispatchDefaultOwner: false,
   };
 
@@ -78,10 +73,8 @@ function parseArgs(argv: string[]): Options {
         opts.envPath = value();
         break;
       case "--force":
-        opts.force = true;
         break;
       case "--dry-run":
-        opts.dryRun = true;
         break;
       case "--set-dispatch-default-owner":
         opts.setDispatchDefaultOwner = true;
@@ -147,47 +140,6 @@ function validateEmail(email: string): void {
   }
 }
 
-function formatEnvValue(value: string): string {
-  if (/^[A-Za-z0-9_@./:+-]+$/.test(value)) return value;
-  return JSON.stringify(value);
-}
-
-function upsertEnvValue(
-  content: string,
-  key: string,
-  value: string,
-  force: boolean,
-): { content: string; changed: boolean; skipped: boolean } {
-  const lines = content.length > 0 ? content.split(/\r?\n/) : [];
-  let found = false;
-  let changed = false;
-  let skipped = false;
-
-  const next = lines.map((line) => {
-    const match = line.match(/^(\s*)([A-Z0-9_]+)(\s*=\s*)(.*)$/);
-    if (!match || match[2] !== key) return line;
-
-    found = true;
-    const existing = unquote(match[4]);
-    if (existing && !force) {
-      skipped = true;
-      return line;
-    }
-
-    const replacement = `${match[1]}${key}${match[3]}${formatEnvValue(value)}`;
-    if (replacement !== line) changed = true;
-    return replacement;
-  });
-
-  if (!found) {
-    if (next.length > 0 && next[next.length - 1] !== "") next.push("");
-    next.push(`${key}=${formatEnvValue(value)}`);
-    changed = true;
-  }
-
-  return { content: next.join("\n"), changed, skipped };
-}
-
 function firstValue(...values: Array<string | undefined>): string | undefined {
   return values.map((v) => v?.trim()).find(Boolean);
 }
@@ -213,13 +165,21 @@ function main(): void {
     process.env.WORKSPACE_OWNER_EMAIL,
     current.WORKSPACE_OWNER_EMAIL,
   )?.toLowerCase();
-  const a2aSecret =
-    firstValue(opts.a2aSecret, process.env.A2A_SECRET, current.A2A_SECRET) ??
-    crypto.randomBytes(32).toString("hex");
+  const a2aSecret = firstValue(
+    opts.a2aSecret,
+    process.env.A2A_SECRET,
+    current.A2A_SECRET,
+  );
 
   if (!name) fail("--name or WORKSPACE_ORG_NAME is required.");
   if (!rawDomain) fail("--domain or WORKSPACE_ORG_DOMAIN is required.");
   if (!ownerEmail) fail("--owner-email or WORKSPACE_OWNER_EMAIL is required.");
+  if (!a2aSecret) {
+    fail(
+      "--a2a-secret or A2A_SECRET is required. This script reads existing " +
+        "configuration but does not write env files.",
+    );
+  }
 
   const domain = normalizeDomain(rawDomain);
   validateDomain(domain);
@@ -232,52 +192,31 @@ function main(): void {
     A2A_SECRET: a2aSecret,
   };
 
-  let next = original.trimEnd();
-  const changed: string[] = [];
-  const skipped: string[] = [];
-
-  for (const key of REQUIRED_KEYS) {
-    const result = upsertEnvValue(next, key, desired[key], opts.force);
-    next = result.content;
-    if (result.changed) changed.push(key);
-    if (result.skipped) skipped.push(key);
-  }
-
+  const displayEntries: Array<[string, string]> = REQUIRED_KEYS.map((key) => [
+    key,
+    key === "A2A_SECRET" ? "[configured]" : desired[key],
+  ]);
   if (opts.setDispatchDefaultOwner) {
-    const result = upsertEnvValue(
-      next,
-      "DISPATCH_DEFAULT_OWNER_EMAIL",
-      ownerEmail,
-      opts.force,
-    );
-    next = result.content;
-    if (result.changed) changed.push("DISPATCH_DEFAULT_OWNER_EMAIL");
-    if (result.skipped) skipped.push("DISPATCH_DEFAULT_OWNER_EMAIL");
-  }
-
-  next = next.trimEnd() + "\n";
-
-  if (opts.dryRun) {
-    console.log(next);
-  } else {
-    fs.writeFileSync(envPath, next);
+    displayEntries.push(["DISPATCH_DEFAULT_OWNER_EMAIL", ownerEmail]);
   }
 
   console.log(
-    `${opts.dryRun ? "Validated" : "Updated"} ${path.relative(process.cwd(), envPath) || envPath}.`,
+    `Validated workspace org settings from ${path.relative(process.cwd(), envPath) || envPath}.`,
   );
-  if (changed.length > 0) console.log(`Changed: ${changed.join(", ")}`);
-  if (skipped.length > 0) {
-    console.log(
-      `Kept existing values: ${skipped.join(", ")} (use --force to overwrite)`,
-    );
+  console.log("No env files were written.");
+  console.log("");
+  console.log("Resolved configuration:");
+  for (const [key, value] of displayEntries) {
+    console.log(`- ${key}: ${value}`);
   }
   console.log("");
   console.log("Next steps:");
   console.log("1. Sign in as WORKSPACE_OWNER_EMAIL.");
   console.log("2. Create or select the org named by WORKSPACE_ORG_NAME.");
   console.log("3. Set the org allowed domain to WORKSPACE_ORG_DOMAIN.");
-  console.log("4. Set or sync the org A2A secret from A2A_SECRET across apps.");
+  console.log(
+    "4. Configure A2A_SECRET through the scoped secret/deployment secret manager for apps that need cross-app A2A.",
+  );
 }
 
 main();

package/corpus/core/src/terminal/pty-server.ts

@@ -30,14 +30,6 @@ async function getChildProcess(): Promise<typeof import("child_process")> {
   return _cp;
 }
 
-let _fs: typeof import("fs") | undefined;
-async function getFs(): Promise<typeof import("fs")> {
-  if (!_fs) {
-    _fs = await import("node:fs");
-  }
-  return _fs;
-}
-
 /**
  * Kill a process and all its descendants.
  * node-pty's kill() only sends a signal to the shell, but child processes
@@ -314,10 +306,10 @@ export async function createPtyWebSocketServer(
           msg.type === "agentNative.setEnvVars" &&
           Array.isArray(msg.data?.vars)
         ) {
-          const envPath = path.join(resolvedAppDir, ".env");
           const vars: Array<{ key: string; value: string }> = msg.data.vars;
 
-          // Validate env var names and sanitize values
+          // Legacy bridge message. Keep validating the keys, but do not persist
+          // them to .env or process.env; key storage is DB-scoped.
           const validKeyPattern = /^[A-Za-z_][A-Za-z0-9_]*$/;
           const sanitizedVars = vars.filter(({ key }) => {
             if (!validKeyPattern.test(key)) {
@@ -327,39 +319,12 @@ export async function createPtyWebSocketServer(
             return true;
           });
 
-          const fs = await getFs();
-          let lines: string[] = [];
-          try {
-            lines = fs.readFileSync(envPath, "utf-8").split("\n");
-          } catch {}
-
-          for (const { key, value } of sanitizedVars) {
-            // Strip newlines/null bytes to prevent line injection
-            const safeValue = value.replace(/[\r\n\0]/g, "");
-            // Quote values containing #, spaces, or quotes so dotenv parses correctly
-            const needsQuoting = /[# "']/.test(safeValue);
-            const quotedValue = needsQuoting
-              ? `"${safeValue.replace(/"/g, '\\"')}"`
-              : safeValue;
-            const idx = lines.findIndex((l) => l.startsWith(`${key}=`));
-            const entry = `${key}=${quotedValue}`;
-            if (idx !== -1) {
-              lines[idx] = entry;
-            } else {
-              lines.push(entry);
-            }
-          }
-
-          while (lines.length > 0 && lines[lines.length - 1] === "") {
-            lines.pop();
-          }
-          fs.writeFileSync(envPath, lines.join("\n") + "\n", "utf-8");
-
           if (ws.readyState === WebSocket.OPEN) {
             ws.send(
               JSON.stringify({
                 type: "env-vars-saved",
                 keys: sanitizedVars.map((v) => v.key),
+                storage: "scoped-secrets",
               }),
             );
           }

package/corpus/core/src/triggers/dispatcher.ts

@@ -257,8 +257,7 @@ async function handleEvent(
       // Resolve API key for condition evaluation
       const owner = meta.createdBy || resource.owner;
       const userApiKey = await getOwnerActiveApiKey(owner);
-      const apiKey =
-        userApiKey || _deps.apiKey || process.env.ANTHROPIC_API_KEY;
+      const apiKey = userApiKey || _deps.apiKey;
       if (!apiKey) {
         console.warn(
           `[triggers] No API key for trigger "${resource.path}" — skipping`,

package/corpus/templates/.retired/issues/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "issues",
+  "private": true,
+  "scripts": {
+    "build": "node ../../../scripts/build-retired-netlify-site.ts issues"
+  }
+}

package/corpus/templates/.retired/meeting-notes/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "meeting-notes",
+  "private": true,
+  "scripts": {
+    "build": "node ../../../scripts/build-retired-netlify-site.ts meeting-notes"
+  }
+}

package/corpus/templates/.retired/recruiting/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "recruiting",
+  "private": true,
+  "scripts": {
+    "build": "node ../../../scripts/build-retired-netlify-site.ts recruiting"
+  }
+}

package/corpus/templates/.retired/scheduling/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "scheduling",
+  "private": true,
+  "scripts": {
+    "build": "node ../../../scripts/build-retired-netlify-site.ts scheduling"
+  }
+}

package/corpus/templates/.retired/voice/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "voice",
+  "private": true,
+  "scripts": {
+    "build": "node ../../../scripts/build-retired-netlify-site.ts voice"
+  }
+}

package/corpus/templates/analytics/app/components/layout/Header.tsx

@@ -21,7 +21,6 @@ const pageTitleKeys: Record<string, string> = {
   "/analyses": "navigation.analyses",
   "/sessions": "navigation.sessions",
   "/dashboards/explorer": "navigation.explorer",
-  "/team": "navigation.team",
   "/settings": "navigation.settings",
 };
 

package/corpus/templates/analytics/app/components/layout/Sidebar.tsx

@@ -10,11 +10,9 @@ import {
   IconGripVertical,
   IconBook2,
   IconDatabase,
-  IconUsers,
   IconReportAnalytics,
   IconSearch,
   IconArchive,
-  IconTemplate,
   IconBuilding,
   IconLock,
   IconLink,
@@ -144,7 +142,6 @@ import {
 import { CSS } from "@dnd-kit/utilities";
 
 const bottomItems = [
-  { icon: IconUsers, labelKey: "navigation.team", href: "/team" },
   { icon: IconSettings, labelKey: "navigation.settings", href: "/settings" },
 ];
 
@@ -1962,20 +1959,6 @@ export function Sidebar({ mobile }: { mobile?: boolean } = {}) {
             {t("navigation.dataDictionary")}
           </Link>
 
-          {/* Catalog link */}
-          <Link
-            to="/catalog"
-            className={cn(
-              "flex items-center gap-3 rounded-lg px-3 py-2 transition-all hover:text-primary",
-              location.pathname === "/catalog"
-                ? "bg-sidebar-accent text-sidebar-accent-foreground"
-                : "text-muted-foreground hover:bg-sidebar-accent/50",
-            )}
-          >
-            <IconTemplate className="h-4 w-4" />
-            {t("navigation.templateCatalog")}
-          </Link>
-
           {/* Dashboards section */}
           <div className="group/section min-w-0 space-y-1">
             <div

package/corpus/templates/analytics/app/i18n/zh-TW.ts

@@ -1,4 +1,7 @@
 const messages = {
+  root: {
+    whatsNew: "最新消息",
+  },
   navigation: {
     brand: "Analytics",
     ask: "提問",
@@ -102,6 +105,9 @@ const messages = {
     credentials: "資料來源憑證",
     credentialsDescription: "API 金鑰和憑證在資料來源頁面管理。",
     manageDataSources: "管理資料來源",
+    dashboardTemplates: "儀表板範本",
+    dashboardTemplatesDescription: "需要起點時，可安裝來源程式碼控制的儀表板。",
+    openDashboardTemplates: "開啟目錄",
     languageTitle: "語言",
     languageLabel: "介面語言",
     about: "關於",
@@ -795,7 +801,7 @@ const messages = {
     time: "時間",
   },
   catalog: {
-    description: "來源程式碼控制的儀表板可隨時安裝到您的工作空間中。",
+    description: "需要起點時，可安裝儀表板範本。",
     noTemplatesFound: "沒有找到範本",
     tryDifferentCategory: "嘗試不同的目錄類別。",
     templatesCount: "{{count}} 個範本",

package/corpus/templates/analytics/app/i18n-data.ts

@@ -3,6 +3,9 @@ import type { LocaleCode } from "@agent-native/core/client";
 import zhTW from "./i18n/zh-TW";
 
 const enUS = {
+  root: {
+    whatsNew: "What's new",
+  },
   navigation: {
     brand: "Analytics",
     ask: "Ask",
@@ -135,6 +138,10 @@ const enUS = {
     credentialsDescription:
       "API keys and credentials are managed on the Data Sources page.",
     manageDataSources: "Manage Data Sources",
+    dashboardTemplates: "Dashboard templates",
+    dashboardTemplatesDescription:
+      "Install a source-controlled dashboard when you need a starting point.",
+    openDashboardTemplates: "Open catalog",
     languageTitle: "Language",
     languageLabel: "Interface language",
     about: "About",
@@ -832,8 +839,7 @@ const enUS = {
     time: "Time",
   },
   catalog: {
-    description:
-      "Source-controlled dashboards ready to install into your workspace.",
+    description: "Install a dashboard template when you need a starting point.",
     noTemplatesFound: "No templates found",
     tryDifferentCategory: "Try a different catalog category.",
     templatesCount: "{{count}} templates",
@@ -3327,6 +3333,7 @@ function mergeMessages(overrides: {
   [K in Section]?: Partial<Messages[K]>;
 }): Messages {
   return {
+    root: { ...enUS.root, ...overrides.root },
     navigation: { ...enUS.navigation, ...overrides.navigation },
     dashboardHeader: { ...enUS.dashboardHeader, ...overrides.dashboardHeader },
     sidebar: { ...enUS.sidebar, ...overrides.sidebar },
@@ -3368,6 +3375,9 @@ export const messagesByLocale = {
   "zh-TW": mergeMessages(zhTW),
   "zh-CN": mergeMessages({
     ...analyticsSliceTranslations["zh-CN"],
+    root: {
+      whatsNew: "新增内容",
+    },
     navigation: {
       brand: "Analytics",
       ask: "提问",
@@ -3494,6 +3504,9 @@ export const messagesByLocale = {
       credentials: "数据源凭据",
       credentialsDescription: "API 密钥和凭据在数据源页面管理。",
       manageDataSources: "管理数据源",
+      dashboardTemplates: "仪表板模板",
+      dashboardTemplatesDescription: "需要起点时，安装受源码管理的仪表板。",
+      openDashboardTemplates: "打开目录",
       languageTitle: "语言",
       languageLabel: "界面语言",
       about: "关于",
@@ -3537,6 +3550,9 @@ export const messagesByLocale = {
   }),
   "es-ES": mergeMessages({
     ...analyticsSliceTranslations["es-ES"],
+    root: {
+      whatsNew: "Novedades",
+    },
     navigation: {
       ask: "Preguntar",
       overview: "Resumen",
@@ -3667,6 +3683,10 @@ export const messagesByLocale = {
       credentialsDescription:
         "Las claves API y credenciales se gestionan en la página Fuentes de datos.",
       manageDataSources: "Gestionar fuentes de datos",
+      dashboardTemplates: "Plantillas de paneles",
+      dashboardTemplatesDescription:
+        "Instala un panel controlado por código fuente cuando necesites un punto de partida.",
+      openDashboardTemplates: "Abrir catálogo",
       languageTitle: "Idioma",
       languageLabel: "Idioma de la interfaz",
       about: "Acerca de",
@@ -3712,6 +3732,9 @@ export const messagesByLocale = {
   }),
   "fr-FR": mergeMessages({
     ...analyticsSliceTranslations["fr-FR"],
+    root: {
+      whatsNew: "Nouveautés",
+    },
     navigation: {
       ask: "Demander",
       overview: "Vue d'ensemble",
@@ -3843,6 +3866,10 @@ export const messagesByLocale = {
       credentialsDescription:
         "Les clés API et identifiants sont gérés sur la page Sources de données.",
       manageDataSources: "Gérer les sources de données",
+      dashboardTemplates: "Modèles de tableaux de bord",
+      dashboardTemplatesDescription:
+        "Installez un tableau de bord suivi dans le code source lorsque vous avez besoin d'un point de départ.",
+      openDashboardTemplates: "Ouvrir le catalogue",
       languageTitle: "Langue",
       languageLabel: "Langue de l'interface",
       about: "À propos",
@@ -3893,6 +3920,9 @@ export const messagesByLocale = {
   }),
   "de-DE": mergeMessages({
     ...analyticsSliceTranslations["de-DE"],
+    root: {
+      whatsNew: "Neuigkeiten",
+    },
     navigation: {
       ask: "Fragen",
       overview: "Übersicht",
@@ -4028,6 +4058,10 @@ export const messagesByLocale = {
       credentialsDescription:
         "API-Schlüssel und Anmeldedaten werden auf der Seite Datenquellen verwaltet.",
       manageDataSources: "Datenquellen verwalten",
+      dashboardTemplates: "Dashboard-Vorlagen",
+      dashboardTemplatesDescription:
+        "Installiere ein quellkontrolliertes Dashboard, wenn du einen Ausgangspunkt brauchst.",
+      openDashboardTemplates: "Katalog öffnen",
       languageTitle: "Sprache",
       languageLabel: "Oberflächensprache",
       about: "Info",
@@ -4074,6 +4108,9 @@ export const messagesByLocale = {
   }),
   "ja-JP": mergeMessages({
     ...analyticsSliceTranslations["ja-JP"],
+    root: {
+      whatsNew: "新着情報",
+    },
     navigation: {
       ask: "質問",
       overview: "概要",
@@ -4205,6 +4242,10 @@ export const messagesByLocale = {
       credentialsDescription:
         "API キーと認証情報はデータソースページで管理します。",
       manageDataSources: "データソースを管理",
+      dashboardTemplates: "ダッシュボードテンプレート",
+      dashboardTemplatesDescription:
+        "出発点が必要なときは、ソース管理されたダッシュボードをインストールします。",
+      openDashboardTemplates: "カタログを開く",
       languageTitle: "言語",
       languageLabel: "インターフェース言語",
       about: "概要",
@@ -4251,6 +4292,9 @@ export const messagesByLocale = {
   }),
   "ko-KR": mergeMessages({
     ...analyticsSliceTranslations["ko-KR"],
+    root: {
+      whatsNew: "새로운 기능",
+    },
     navigation: {
       ask: "질문",
       overview: "개요",
@@ -4382,6 +4426,10 @@ export const messagesByLocale = {
       credentialsDescription:
         "API 키와 자격 증명은 데이터 소스 페이지에서 관리합니다.",
       manageDataSources: "데이터 소스 관리",
+      dashboardTemplates: "대시보드 템플릿",
+      dashboardTemplatesDescription:
+        "시작점이 필요할 때 소스 제어된 대시보드를 설치하세요.",
+      openDashboardTemplates: "카탈로그 열기",
       languageTitle: "언어",
       languageLabel: "인터페이스 언어",
       about: "정보",
@@ -4427,6 +4475,9 @@ export const messagesByLocale = {
   }),
   "pt-BR": mergeMessages({
     ...analyticsSliceTranslations["pt-BR"],
+    root: {
+      whatsNew: "Novidades",
+    },
     navigation: {
       ask: "Perguntar",
       overview: "Visão geral",
@@ -4560,6 +4611,10 @@ export const messagesByLocale = {
       credentialsDescription:
         "Chaves de API e credenciais são gerenciadas na página Fontes de dados.",
       manageDataSources: "Gerenciar fontes de dados",
+      dashboardTemplates: "Modelos de dashboard",
+      dashboardTemplatesDescription:
+        "Instale um dashboard controlado por código-fonte quando precisar de um ponto de partida.",
+      openDashboardTemplates: "Abrir catálogo",
       languageTitle: "Idioma",
       languageLabel: "Idioma da interface",
       about: "Sobre",
@@ -4608,6 +4663,9 @@ export const messagesByLocale = {
   }),
   "hi-IN": mergeMessages({
     ...analyticsSliceTranslations["hi-IN"],
+    root: {
+      whatsNew: "नया क्या है",
+    },
     navigation: {
       ask: "पूछें",
       overview: "अवलोकन",
@@ -4736,6 +4794,10 @@ export const messagesByLocale = {
       credentialsDescription:
         "API कुंजियां और क्रेडेंशियल डेटा स्रोत पेज पर प्रबंधित होते हैं।",
       manageDataSources: "डेटा स्रोत प्रबंधित करें",
+      dashboardTemplates: "डैशबोर्ड टेम्पलेट",
+      dashboardTemplatesDescription:
+        "जब आपको शुरुआत का आधार चाहिए, तो स्रोत-नियंत्रित डैशबोर्ड इंस्टॉल करें।",
+      openDashboardTemplates: "कैटलॉग खोलें",
       languageTitle: "भाषा",
       languageLabel: "इंटरफ़ेस भाषा",
       about: "परिचय",
@@ -4782,6 +4844,9 @@ export const messagesByLocale = {
   }),
   "ar-SA": mergeMessages({
     ...analyticsSliceTranslations["ar-SA"],
+    root: {
+      whatsNew: "ما الجديد",
+    },
     navigation: {
       ask: "اسأل",
       overview: "نظرة عامة",
@@ -4910,6 +4975,10 @@ export const messagesByLocale = {
       credentialsDescription:
         "تتم إدارة مفاتيح API وبيانات الاعتماد من صفحة مصادر البيانات.",
       manageDataSources: "إدارة مصادر البيانات",
+      dashboardTemplates: "قوالب لوحات المعلومات",
+      dashboardTemplatesDescription:
+        "ثبّت لوحة معلومات مضبوطة في المصدر عندما تحتاج إلى نقطة بداية.",
+      openDashboardTemplates: "افتح الكتالوج",
       languageTitle: "اللغة",
       languageLabel: "لغة الواجهة",
       about: "حول",