@agent-native/core 0.79.25 → 0.79.27

package/corpus/core/src/client/resources/mcp-integration-catalog.ts

@@ -0,0 +1,239 @@
+import {
+  normalizeMcpIntegrationsConfig,
+  type McpIntegrationsConfigInput,
+  type NormalizedMcpIntegrationsConfig,
+} from "../../shared/mcp-integration-config.js";
+
+export type McpIntegrationAuthMode = "none" | "headers" | "oauth";
+
+declare const __AGENT_NATIVE_MCP_INTEGRATIONS_CONFIG__:
+  | NormalizedMcpIntegrationsConfig
+  | undefined;
+
+export interface DefaultMcpIntegration {
+  id: string;
+  name: string;
+  provider: string;
+  description: string;
+  descriptionKey: string;
+  useCase: string;
+  useCaseKey: string;
+  url: string;
+  authMode: McpIntegrationAuthMode;
+  docsUrl?: string;
+  headerPlaceholder?: string;
+  keywords: string[];
+}
+
+export interface McpIntegrationFormDefaults {
+  name: string;
+  url: string;
+  description: string;
+  headersText: string;
+}
+
+export const DEFAULT_MCP_INTEGRATIONS: DefaultMcpIntegration[] = [
+  {
+    id: "context7",
+    name: "Context7",
+    provider: "context7",
+    description: "Fetch current library docs in agent chats.",
+    descriptionKey: "mcpIntegrations.catalog.context7.description",
+    useCase: "documentation, technical reference, API docs, framework guides",
+    useCaseKey: "mcpIntegrations.catalog.context7.useCase",
+    url: "https://mcp.context7.com/mcp",
+    authMode: "none",
+    docsUrl: "https://context7.com/",
+    keywords: ["docs", "documentation", "libraries", "frameworks"],
+  },
+  {
+    id: "sentry",
+    name: "Sentry",
+    provider: "sentry",
+    description: "Inspect issues, events, and debugging data.",
+    descriptionKey: "mcpIntegrations.catalog.sentry.description",
+    useCase: "error monitoring, debugging, performance, crash reports",
+    useCaseKey: "mcpIntegrations.catalog.sentry.useCase",
+    url: "https://mcp.sentry.dev/mcp",
+    authMode: "headers",
+    docsUrl: "https://docs.sentry.io/product/sentry-mcp/",
+    headerPlaceholder: "Authorization: Bearer <sentry-token>",
+    keywords: ["errors", "monitoring", "debugging", "issues"],
+  },
+  {
+    id: "notion",
+    name: "Notion",
+    provider: "notion",
+    description: "Search pages and team knowledge.",
+    descriptionKey: "mcpIntegrations.catalog.notion.description",
+    useCase: "documentation, knowledge management, notes, content creation",
+    useCaseKey: "mcpIntegrations.catalog.notion.useCase",
+    url: "https://mcp.notion.com/sse",
+    authMode: "oauth",
+    docsUrl: "https://developers.notion.com/docs/mcp",
+    keywords: ["docs", "knowledge", "notes", "pages"],
+  },
+  {
+    id: "semgrep",
+    name: "Semgrep",
+    provider: "semgrep",
+    description: "Scan code for security findings.",
+    descriptionKey: "mcpIntegrations.catalog.semgrep.description",
+    useCase: "security scanning, vulnerability detection, code analysis",
+    useCaseKey: "mcpIntegrations.catalog.semgrep.useCase",
+    url: "https://mcp.semgrep.ai/mcp",
+    authMode: "none",
+    docsUrl: "https://github.com/semgrep/mcp#readme",
+    keywords: ["security", "sast", "code scanning", "vulnerabilities"],
+  },
+  {
+    id: "linear",
+    name: "Linear",
+    provider: "linear",
+    description: "Read and write Linear issues.",
+    descriptionKey: "mcpIntegrations.catalog.linear.description",
+    useCase: "project management, issue tracking, planning, bug reports",
+    useCaseKey: "mcpIntegrations.catalog.linear.useCase",
+    url: "https://mcp.linear.app/sse",
+    authMode: "oauth",
+    docsUrl: "https://www.builder.io/c/docs/fusion-connect-to-linear",
+    keywords: ["issues", "tickets", "planning", "project management"],
+  },
+  {
+    id: "supabase",
+    name: "Supabase",
+    provider: "supabase",
+    description: "Manage data, auth, and backend services.",
+    descriptionKey: "mcpIntegrations.catalog.supabase.description",
+    useCase: "database, authentication, storage, edge functions",
+    useCaseKey: "mcpIntegrations.catalog.supabase.useCase",
+    url: "https://mcp.supabase.com/mcp",
+    authMode: "oauth",
+    docsUrl: "https://www.builder.io/c/docs/fusion-connect-to-supabase",
+    keywords: ["database", "auth", "postgres", "storage"],
+  },
+  {
+    id: "neon",
+    name: "Neon",
+    provider: "neon",
+    description: "Work with serverless Postgres projects.",
+    descriptionKey: "mcpIntegrations.catalog.neon.description",
+    useCase: "database management, serverless postgres, data storage",
+    useCaseKey: "mcpIntegrations.catalog.neon.useCase",
+    url: "https://mcp.neon.tech/sse",
+    authMode: "oauth",
+    docsUrl: "https://www.builder.io/c/docs/fusion-connect-to-neon",
+    keywords: ["database", "postgres", "serverless", "backend"],
+  },
+  {
+    id: "stripe",
+    name: "Stripe",
+    provider: "stripe",
+    description: "Manage payments, subscriptions, and customers.",
+    descriptionKey: "mcpIntegrations.catalog.stripe.description",
+    useCase: "payments, subscriptions, invoicing, customer management",
+    useCaseKey: "mcpIntegrations.catalog.stripe.useCase",
+    url: "https://mcp.stripe.com",
+    authMode: "oauth",
+    docsUrl: "https://docs.stripe.com/mcp",
+    keywords: ["payments", "billing", "subscriptions", "customers"],
+  },
+];
+
+function readRuntimeMcpIntegrationsConfig(): NormalizedMcpIntegrationsConfig {
+  try {
+    if (typeof __AGENT_NATIVE_MCP_INTEGRATIONS_CONFIG__ !== "undefined") {
+      return normalizeMcpIntegrationsConfig(
+        __AGENT_NATIVE_MCP_INTEGRATIONS_CONFIG__,
+      );
+    }
+  } catch {
+    // Test and non-Vite contexts may not define the compile-time constant.
+  }
+  return normalizeMcpIntegrationsConfig();
+}
+
+function normalizePresetConfig(
+  config?: McpIntegrationsConfigInput | NormalizedMcpIntegrationsConfig,
+): NormalizedMcpIntegrationsConfig {
+  if (config === undefined) return readRuntimeMcpIntegrationsConfig();
+  return normalizeMcpIntegrationsConfig(config);
+}
+
+export function getDefaultMcpIntegrations(
+  config?: McpIntegrationsConfigInput | NormalizedMcpIntegrationsConfig,
+): DefaultMcpIntegration[] {
+  const normalized = normalizePresetConfig(config);
+  if (!normalized.enabled || !normalized.defaults.enabled) return [];
+
+  const include = normalized.defaults.include
+    ? new Set(normalized.defaults.include)
+    : null;
+  const exclude = new Set(normalized.defaults.exclude);
+  return DEFAULT_MCP_INTEGRATIONS.filter((integration) => {
+    const id = integration.id.toLowerCase();
+    if (include && !include.has(id)) return false;
+    return !exclude.has(id);
+  });
+}
+
+export function isCustomMcpIntegrationEnabled(
+  config?: McpIntegrationsConfigInput | NormalizedMcpIntegrationsConfig,
+): boolean {
+  const normalized = normalizePresetConfig(config);
+  return normalized.enabled && normalized.custom;
+}
+
+export function isMcpIntegrationCatalogAvailable(
+  config?: McpIntegrationsConfigInput | NormalizedMcpIntegrationsConfig,
+): boolean {
+  const normalized = normalizePresetConfig(config);
+  if (!normalized.enabled) return false;
+  return normalized.custom || getDefaultMcpIntegrations(normalized).length > 0;
+}
+
+export function mcpIntegrationAuthLabel(mode: McpIntegrationAuthMode): string {
+  if (mode === "none") return "No auth";
+  if (mode === "headers") return "Header";
+  return "OAuth";
+}
+
+export function filterMcpIntegrations(
+  query: string,
+  integrations: DefaultMcpIntegration[] = getDefaultMcpIntegrations(),
+): DefaultMcpIntegration[] {
+  const needle = query.trim().toLowerCase();
+  if (!needle) return integrations;
+  return integrations.filter((integration) => {
+    const haystack = [
+      integration.name,
+      integration.provider,
+      integration.description,
+      integration.useCase,
+      integration.url,
+      ...integration.keywords,
+    ]
+      .join(" ")
+      .toLowerCase();
+    return haystack.includes(needle);
+  });
+}
+
+export function createMcpIntegrationFormDefaults(
+  integration?: DefaultMcpIntegration | null,
+): McpIntegrationFormDefaults {
+  if (!integration) {
+    return {
+      name: "",
+      url: "",
+      description: "",
+      headersText: "",
+    };
+  }
+  return {
+    name: integration.name,
+    url: integration.url,
+    description: integration.description,
+    headersText: "",
+  };
+}

package/corpus/core/src/client/settings/SettingsPanel.tsx

@@ -1534,7 +1534,7 @@ function EmailSectionInner({
     <SettingsSection
       icon={<IconMail size={14} />}
       title="Email"
-      subtitle="Needed before deploy for password resets, team invitations, and share notifications. Local development can run without it."
+      subtitle="Needed before deploy for password resets, team invitations, share notifications, and dashboard email reports. Local development can run without it."
       connected={!envLoaded ? undefined : anyConfigured}
       open={open}
       onToggle={onToggle}

package/corpus/core/src/client/use-chat-models.ts

@@ -6,14 +6,13 @@ import {
   type ReasoningEffort,
 } from "../shared/reasoning-effort.js";
 import { agentNativePath } from "./api-path.js";
+import {
+  buildChatModelGroups,
+  type EngineModelGroup,
+} from "./chat-model-groups.js";
 import { callAction } from "./use-action.js";
 
-export interface EngineModelGroup {
-  engine: string;
-  label: string;
-  models: string[];
-  configured: boolean;
-}
+export type { EngineModelGroup } from "./chat-model-groups.js";
 
 export interface UseChatModelsResult {
   availableModels: EngineModelGroup[];
@@ -160,104 +159,13 @@ export function useChatModels({
           enginesData.current?.engine;
         const currentModel: string | undefined = enginesData.current?.model;
 
-        let groups: EngineModelGroup[];
-
-        if (builderConnected) {
-          const builderEngine = enginesData.engines.find(
-            (e: any) => e.name === "builder",
-          );
-          const builderModels: string[] = builderEngine?.supportedModels ?? [];
-          const claude = builderModels.filter((m: string) =>
-            m.startsWith("claude-"),
-          );
-          const openai = builderModels.filter((m: string) =>
-            m.startsWith("gpt-"),
-          );
-          const gemini = builderModels.filter((m: string) =>
-            m.startsWith("gemini-"),
-          );
-          const other = builderModels.filter(
-            (m: string) =>
-              !m.startsWith("claude-") &&
-              !m.startsWith("gpt-") &&
-              !m.startsWith("gemini-"),
-          );
-
-          groups = [
-            ...(claude.length
-              ? [
-                  {
-                    engine: "builder",
-                    label: "Claude",
-                    models: claude,
-                    configured: true,
-                  },
-                ]
-              : []),
-            ...(openai.length
-              ? [
-                  {
-                    engine: "builder",
-                    label: "OpenAI",
-                    models: openai,
-                    configured: true,
-                  },
-                ]
-              : []),
-            ...(gemini.length
-              ? [
-                  {
-                    engine: "builder",
-                    label: "Gemini",
-                    models: gemini,
-                    configured: true,
-                  },
-                ]
-              : []),
-            ...(other.length
-              ? [
-                  {
-                    engine: "builder",
-                    label: "More",
-                    models: other,
-                    configured: true,
-                  },
-                ]
-              : []),
-          ];
-        } else {
-          const allowedEngines = new Set([
-            "anthropic",
-            "ai-sdk:openai",
-            "ai-sdk:google",
-          ]);
-          groups = enginesData.engines
-            .filter(
-              (e: any) =>
-                allowedEngines.has(e.name) && e.packageInstalled !== false,
-            )
-            .map((e: any) => {
-              const models = [...e.supportedModels];
-              if (
-                e.name === currentEngineName &&
-                currentModel &&
-                !models.includes(currentModel)
-              ) {
-                models.unshift(currentModel);
-              }
-              return {
-                engine: e.name,
-                label: e.label,
-                models,
-                configured:
-                  e.requiredEnvVars.length === 0 ||
-                  e.requiredEnvVars.some((v: string) =>
-                    configuredKeys.has(v),
-                  ) ||
-                  e.name === currentEngineName,
-              };
-            });
-        }
+        const groups = buildChatModelGroups({
+          engines: enginesData.engines,
+          configuredKeys,
+          builderConnected,
+          currentEngineName,
+          currentModel,
+        });
         const nextDefaultModel = currentModel ?? DEFAULT_MODEL;
         setAvailableModels(groups);
         setDefaultModel(nextDefaultModel);

package/corpus/core/src/db/client.ts

@@ -474,11 +474,6 @@ export function sqliteToPostgresParams(sql: string): string {
 
     if (mode === "single") {
       out += ch;
-      if (ch === "\\" && next) {
-        out += next;
-        i += 2;
-        continue;
-      }
       if (ch === "'" && next === "'") {
         out += next;
         i += 2;

package/corpus/core/src/integrations/adapters/email.ts

@@ -38,7 +38,7 @@ let _resendUnverifiedWarned = false;
 let _sendgridUnverifiedWarned = false;
 
 function escapeLike(value: string): string {
-  return value.replace(/([\\%_])/g, "\\$1");
+  return value.replace(/[!%_]/g, (match) => `!${match}`);
 }
 
 /**
@@ -742,7 +742,7 @@ async function isRateLimited(senderEmail: string): Promise<boolean> {
           FROM integration_pending_tasks
          WHERE platform = ?
            AND created_at >= ?
-           AND payload LIKE ? ESCAPE '\\'
+           AND payload LIKE ? ESCAPE '!'
       `,
       args: ["email", cutoff, `%"senderId":"${escapeLike(senderEmail)}"%`],
     });

package/corpus/core/src/local-artifacts/index.ts

@@ -12,6 +12,7 @@ export interface AgentNativeManifestRoot {
   name?: string;
   path: string;
   kind?: string;
+  profile?: string;
   extensions?: string[];
   include?: string[];
   hide?: string[];
@@ -19,6 +20,7 @@ export interface AgentNativeManifestRoot {
 
 export interface AgentNativeManifestApp {
   mode?: AgentNativeDataMode;
+  profile?: string;
   roots?: AgentNativeManifestRoot[];
   components?: string | string[];
   extensions?: string | string[];
@@ -39,6 +41,7 @@ export interface LoadedAgentNativeManifest {
 
 export interface LocalArtifactAppDefaults {
   mode?: AgentNativeDataMode;
+  profile?: string;
   roots: AgentNativeManifestRoot[];
   hide?: string[];
   components?: string | string[];
@@ -66,6 +69,7 @@ export interface LoadedLocalArtifactRoot {
   path: string;
   absolutePath: string;
   kind?: string;
+  profile?: string;
   extensions: string[];
   hide: string[];
   include: string[];
@@ -74,6 +78,7 @@ export interface LoadedLocalArtifactRoot {
 export interface LoadedLocalArtifactApp {
   appId: string;
   mode: AgentNativeDataMode;
+  profile?: string;
   manifestPath: string | null;
   workspaceRoot: string;
   roots: LoadedLocalArtifactRoot[];
@@ -88,6 +93,7 @@ export interface LocalArtifactFileMeta {
   rootName: string;
   rootPath: string;
   kind?: string;
+  profile?: string;
   extension: string;
   contentType: string;
   sizeBytes: number;
@@ -200,6 +206,12 @@ function normalizeMode(value: unknown): AgentNativeDataMode | undefined {
   return undefined;
 }
 
+function normalizeProfile(value: unknown): string | undefined {
+  if (typeof value !== "string") return undefined;
+  const trimmed = value.trim();
+  return trimmed || undefined;
+}
+
 function normalizeSlash(filePath: string): string {
   return filePath.replace(/\\/g, "/");
 }
@@ -259,6 +271,7 @@ function normalizeManifestRoot(value: unknown): AgentNativeManifestRoot | null {
     name: typeof value.name === "string" ? value.name : undefined,
     path: value.path,
     kind: typeof value.kind === "string" ? value.kind : undefined,
+    profile: normalizeProfile(value.profile),
     extensions: normalizeExtensions(value.extensions),
     include: asStringArray(value.include),
     hide: asStringArray(value.hide),
@@ -281,6 +294,7 @@ function normalizeManifestApp(value: unknown): AgentNativeManifestApp {
     : [];
   return {
     mode: normalizeMode(value.mode),
+    profile: normalizeProfile(value.profile),
     roots,
     components:
       typeof value.components === "string" || Array.isArray(value.components)
@@ -415,6 +429,7 @@ function mergeAppConfig(
 ): AgentNativeManifestApp {
   return {
     mode: manifestApp?.mode ?? defaults?.mode,
+    profile: manifestApp?.profile ?? defaults?.profile,
     roots:
       manifestApp?.roots && manifestApp.roots.length > 0
         ? manifestApp.roots
@@ -464,6 +479,7 @@ export async function getLocalArtifactApp(
       path: safePath,
       absolutePath,
       kind: root.kind,
+      profile: root.profile ?? app.profile,
       extensions,
       hide: [...DEFAULT_HIDE_PATTERNS, ...asStringArray(root.hide)],
       include: asStringArray(root.include),
@@ -473,6 +489,7 @@ export async function getLocalArtifactApp(
   return {
     appId: options.appId,
     mode,
+    profile: app.profile,
     manifestPath: loaded?.path ?? null,
     workspaceRoot,
     roots,
@@ -597,6 +614,7 @@ async function fileMetaForPath(
     rootName: root.name,
     rootPath: root.path,
     kind: root.kind,
+    profile: root.profile,
     extension,
     contentType: contentTypeForExtension(extension),
     sizeBytes: Buffer.byteLength(content, "utf8"),

package/corpus/core/src/localization/default-messages.ts

@@ -431,6 +431,87 @@ const messages = {
     sharedMessaging:
       "Need one shared messaging surface for your workspace? Connect Slack or Telegram to a dispatch app and let it delegate to other agents over A2A.",
   },
+  mcpIntegrations: {
+    menuLabel: "Integrations",
+    menuDescription: "Connect MCP tools to the agent",
+    title: "Connect integrations",
+    description: "Choose a default MCP integration or add a custom server.",
+    searchPlaceholder: "Search integrations",
+    addYourOwn: "Add your own",
+    noMatches: "No integrations match that search.",
+    connected: "Connected",
+    configure: "Configure",
+    connect: "Connect",
+    backToIntegrations: "Back to integrations",
+    customTitle: "Add custom MCP server",
+    configureTitle: "Configure {{name}}",
+    presetNoAuthDescription:
+      "Preset values are filled in. Test the endpoint or connect it now.",
+    presetAuthDescription:
+      "Preset values are filled in. Add any required authorization details before connecting.",
+    customDescription:
+      "Paste a Streamable HTTP or SSE MCP endpoint and optional headers.",
+    oauthNotice:
+      "This provider usually requires an OAuth setup. Follow the provider docs, or add an Authorization header if your endpoint supports token-based access.",
+    personal: "Personal",
+    organization: "Organization",
+    orgNoOrg: "Join an organization to share MCP servers",
+    orgAdminOnly: "Only owners and admins can add org-scope servers",
+    serverName: "Server name",
+    url: "URL",
+    fieldDescription: "Description",
+    headers: "Headers",
+    serverNamePlaceholder: "Server name",
+    urlPlaceholder: "https://mcp.example.com/mcp",
+    descriptionPlaceholder: "Description (optional)",
+    headersPlaceholder: "Authorization: Bearer <token>",
+    openSetupDocs: "Open setup docs",
+    test: "Test",
+    toolsAvailable_one: "{{count}} tool available",
+    toolsAvailable_other: "{{count}} tools available",
+    failed: "Failed",
+    docsLabel: "{{name}} docs",
+    catalog: {
+      context7: {
+        description: "Fetch current library docs in agent chats.",
+        useCase:
+          "Documentation, technical reference, API docs, framework guides",
+      },
+      sentry: {
+        description: "Inspect issues, events, and debugging data.",
+        useCase: "Error monitoring, debugging, performance, crash reports",
+      },
+      notion: {
+        description: "Search pages and team knowledge.",
+        useCase: "Documentation, knowledge management, notes, content creation",
+      },
+      semgrep: {
+        description: "Scan code for security findings.",
+        useCase: "Security scanning, vulnerability detection, code analysis",
+      },
+      linear: {
+        description: "Read and write Linear issues.",
+        useCase: "Project management, issue tracking, planning, bug reports",
+      },
+      supabase: {
+        description: "Manage data, auth, and backend services.",
+        useCase: "Database, authentication, storage, edge functions",
+      },
+      neon: {
+        description: "Work with serverless Postgres projects.",
+        useCase: "Database management, serverless Postgres, data storage",
+      },
+      stripe: {
+        description: "Manage payments, subscriptions, and customers.",
+        useCase: "Payments, subscriptions, invoicing, customer management",
+      },
+    },
+    auth: {
+      none: "No auth",
+      headers: "Header",
+      oauth: "OAuth",
+    },
+  },
   observability: {
     noData: "No data available",
     noConversations: "No conversations recorded yet",

package/corpus/core/src/localization/shared.ts

@@ -1,13 +1,13 @@
 export const SUPPORTED_LOCALES = [
   "en-US",
-  "zh-CN",
-  "zh-TW",
   "es-ES",
   "fr-FR",
   "de-DE",
+  "pt-BR",
+  "zh-CN",
+  "zh-TW",
   "ja-JP",
   "ko-KR",
-  "pt-BR",
   "hi-IN",
   "ar-SA",
 ] as const;

package/corpus/core/src/org/handlers.ts

@@ -203,7 +203,7 @@ export const listMembersHandler = defineEventHandler(async (event: H3Event) => {
   const args: unknown[] = [ctx.orgId];
   let sql = `SELECT email, role, joined_at AS "joinedAt" FROM org_members WHERE org_id = ?`;
   if (search) {
-    sql += ` AND LOWER(email) LIKE ? ESCAPE '\\'`;
+    sql += ` AND LOWER(email) LIKE ? ESCAPE '!'`;
     args.push(`%${escapeLike(search)}%`);
   }
   sql += ` ORDER BY LOWER(email) ASC`;
@@ -242,7 +242,7 @@ function clampInteger(
 }
 
 function escapeLike(value: string): string {
-  return value.replace(/[\\%_]/g, (match) => `\\${match}`);
+  return value.replace(/[!%_]/g, (match) => `!${match}`);
 }
 
 function normalizeInviteRole(input: unknown): "member" | "admin" {

package/corpus/core/src/resources/store.ts

@@ -32,7 +32,7 @@ export const SHARED_OWNER = "__shared__";
 export const WORKSPACE_OWNER = "__workspace__";
 
 function escapeLike(value: string): string {
-  return value.replace(/[\\%_]/g, (char) => `\\${char}`);
+  return value.replace(/[!%_]/g, (char) => `!${char}`);
 }
 
 function prefixLike(value: string): string {
@@ -635,7 +635,7 @@ async function selectGrantedWorkspaceResourceRows(input: {
     args.push(input.path);
   }
   if (input.pathPrefix) {
-    conditions.push("wr.path LIKE ? ESCAPE '\\'");
+    conditions.push("wr.path LIKE ? ESCAPE '!'");
     args.push(prefixLike(input.pathPrefix));
   }
 
@@ -1358,7 +1358,7 @@ export async function resourceList(
 
   if (pathPrefix) {
     const { rows } = await client.execute({
-      sql: `SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '\\'${visibilitySql}`,
+      sql: `SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '!'${visibilitySql}`,
       args: [owner, prefixLike(pathPrefix)],
     });
     const resources = rows.map(rowToMeta);
@@ -1406,11 +1406,11 @@ export async function resourceListAccessible(
 
   if (pathPrefix) {
     const { rows } = await client.execute({
-      sql: `SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '\\'${visibilitySql}
+      sql: `SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '!'${visibilitySql}
             UNION
-            SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '\\'${visibilitySql}
+            SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '!'${visibilitySql}
             UNION
-            SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '\\'${visibilitySql}`,
+            SELECT ${RESOURCE_META_SELECT} FROM resources WHERE owner = ? AND path LIKE ? ESCAPE '!'${visibilitySql}`,
       args: [
         userEmail,
         prefixLike(pathPrefix),
@@ -1534,7 +1534,7 @@ export async function resourceListAllOwners(
   await ensureTable();
   const client = getDbExec();
   const { rows } = await client.execute({
-    sql: `SELECT * FROM resources WHERE path LIKE ? ESCAPE '\\'`,
+    sql: `SELECT * FROM resources WHERE path LIKE ? ESCAPE '!'`,
     args: [prefixLike(pathPrefix)],
   });
   const localResources = (