@agent-native/core 0.90.1 → 0.90.3

package/corpus/core/src/client/setup-connections/SetupConnectionsPage.tsx

@@ -0,0 +1,94 @@
+import type { ReactNode } from "react";
+
+import { IntegrationsPanel } from "../integrations/IntegrationsPanel.js";
+import { OnboardingPanel } from "../onboarding/OnboardingPanel.js";
+import { SecretsSection } from "../settings/SecretsSection.js";
+import { cn } from "../utils.js";
+import { BuilderConnectCard } from "./BuilderConnectCard.js";
+
+export interface SetupConnectionsPageProps {
+  title?: string;
+  description?: string;
+  onboardingTitle?: string;
+  focusSecretKey?: string;
+  providerReadiness?: ReactNode;
+  workspaceConnections?: ReactNode;
+  children?: ReactNode;
+  showOnboarding?: boolean;
+  showBuilderConnect?: boolean;
+  showSecrets?: boolean;
+  showIntegrations?: boolean;
+  className?: string;
+}
+
+export function SetupConnectionsPage({
+  title = "Setup & connections",
+  description = "Manage setup status, Builder connect, app secrets, and workspace connections from one standard surface.",
+  onboardingTitle = "Setup checklist",
+  focusSecretKey,
+  providerReadiness,
+  workspaceConnections,
+  children,
+  showOnboarding = true,
+  showBuilderConnect = true,
+  showSecrets = true,
+  showIntegrations = false,
+  className,
+}: SetupConnectionsPageProps) {
+  return (
+    <div className={cn("min-h-full bg-background p-4 sm:p-6", className)}>
+      <div className="mx-auto flex w-full max-w-6xl flex-col gap-5">
+        <header className="space-y-1">
+          <h1 className="text-2xl font-semibold tracking-normal text-foreground">
+            {title}
+          </h1>
+          <p className="max-w-3xl text-sm leading-6 text-muted-foreground">
+            {description}
+          </p>
+        </header>
+
+        <div className="grid gap-4 lg:grid-cols-[minmax(0,1fr)_360px]">
+          <main className="flex min-w-0 flex-col gap-4">
+            {showOnboarding ? (
+              <OnboardingPanel title={onboardingTitle} />
+            ) : null}
+            {workspaceConnections ? (
+              <section className="rounded-lg border border-border bg-background p-4 shadow-sm">
+                {workspaceConnections}
+              </section>
+            ) : null}
+            {providerReadiness ? (
+              <section className="rounded-lg border border-border bg-background p-4 shadow-sm">
+                {providerReadiness}
+              </section>
+            ) : null}
+            {children}
+          </main>
+
+          <aside className="flex min-w-0 flex-col gap-4">
+            {showBuilderConnect ? <BuilderConnectCard /> : null}
+            {showSecrets ? (
+              <section className="rounded-lg border border-border bg-background p-4 shadow-sm">
+                <div className="mb-3">
+                  <h2 className="text-sm font-semibold text-foreground">
+                    Secrets
+                  </h2>
+                  <p className="mt-1 text-xs leading-5 text-muted-foreground">
+                    Registered keys and OAuth credentials are stored in the
+                    scoped secrets store.
+                  </p>
+                </div>
+                <SecretsSection focusKey={focusSecretKey} />
+              </section>
+            ) : null}
+            {showIntegrations ? (
+              <section className="rounded-lg border border-border bg-background p-4 shadow-sm">
+                <IntegrationsPanel />
+              </section>
+            ) : null}
+          </aside>
+        </div>
+      </div>
+    </div>
+  );
+}

package/corpus/core/src/client/setup-connections/index.ts

@@ -0,0 +1,46 @@
+export {
+  BuilderConnectCard,
+  type BuilderConnectCardProps,
+} from "./BuilderConnectCard.js";
+export {
+  ProviderReadinessBadge,
+  type ProviderReadinessBadgeProps,
+} from "./ProviderReadinessBadge.js";
+export {
+  SetupConnectionsPage,
+  type SetupConnectionsPageProps,
+} from "./SetupConnectionsPage.js";
+export {
+  OnboardingBanner,
+  OnboardingPanel,
+  SetupButton,
+  useOnboarding,
+  useOnboardingPreviewMode,
+  type OnboardingFormField,
+  type OnboardingMethod,
+  type OnboardingMethodBadge,
+  type OnboardingStep,
+  type OnboardingStepStatus,
+  type UseOnboardingResult,
+} from "../onboarding/index.js";
+export {
+  SecretsSection,
+  SettingsPanel,
+  SettingsTabsPage,
+  openBuilderConnectPopup,
+  useBuilderConnectFlow,
+  useBuilderStatus,
+  type BuilderConnectFlow,
+  type BuilderConnectFlowOptions,
+  type BuilderStatus,
+  type OpenBuilderConnectPopupOptions,
+  type SecretsSectionProps,
+  type SettingsPanelProps,
+  type SettingsTabItem,
+  type SettingsTabsPageProps,
+} from "../settings/index.js";
+export {
+  IntegrationsPanel,
+  useIntegrationStatus,
+  type IntegrationStatus,
+} from "../integrations/index.js";

package/corpus/core/src/client/sharing/ShareButton.tsx

@@ -1,7 +1,6 @@
 import * as Select from "@radix-ui/react-select";
 import {
   IconLock,
-  IconBuilding,
   IconWorld,
   IconTrash,
   IconCheck,
@@ -11,6 +10,7 @@ import {
   IconSearch,
   IconSearchOff,
   IconShare3,
+  IconUsersGroup,
 } from "@tabler/icons-react";
 import { useQueryClient } from "@tanstack/react-query";
 import {
@@ -46,11 +46,11 @@ export interface ShareButtonProps {
   /** @deprecated No longer affects rendering — trigger always says
    *  "Share". Kept for callsite compatibility. */
   variant?: "compact" | "label";
-  /** Optional trigger style. Defaults to the Google-Docs-style "Share" label.
-   *  Use "label-icon" to render a leading share glyph alongside the label so
-   *  the trigger matches adjacent icon+label buttons; "icon" is icon-only. */
+  /** Optional trigger style. Defaults to the Google-Docs-style "Share" label
+   *  with a leading visibility icon. "label-icon" is kept for callsites that
+   *  want to explicitly opt into icon+label parity; "icon" is icon-only. */
   trigger?: "label" | "icon" | "label-icon";
-  /** @deprecated Label triggers no longer render a visibility/share glyph. */
+  /** @deprecated No longer affects rendering — triggers show visibility state. */
   hideTriggerIcon?: boolean;
   /** Optional className applied to the trigger button. */
   triggerClassName?: string;
@@ -197,7 +197,7 @@ const VIS_META: Record<
   org: {
     label: "Organization",
     description: "Anyone in your organization can view",
-    Icon: IconBuilding,
+    Icon: IconUsersGroup,
   },
   public: {
     label: "Public",
@@ -356,10 +356,17 @@ export function ShareButton(props: ShareButtonProps) {
     });
   };
 
-  // The default trigger stays text-only; the icon trigger keeps the share glyph.
-  // "label-icon" renders the glyph alongside the label for icon+label parity.
+  const triggerVisibility =
+    pendingVisibility ??
+    (sharesQuery.data
+      ? ((sharesQuery.data.visibility as Visibility | null) ?? "private")
+      : null);
+  const triggerMeta = triggerVisibility
+    ? visibilityMeta(triggerVisibility, props.visibilityCopy)
+    : null;
+  const TriggerIcon = triggerMeta?.Icon ?? IconShare3;
+  const triggerLabel = triggerMeta ? `Share (${triggerMeta.label})` : "Share";
   const iconOnly = props.trigger === "icon";
-  const showLabelIcon = props.trigger === "label-icon";
 
   return (
     <Popover open={open} onOpenChange={handleOpenChange}>
@@ -370,11 +377,10 @@ export function ShareButton(props: ShareButtonProps) {
             iconOnly ? BUTTON_GHOST_ICON : BUTTON_OUTLINE_SM,
             props.triggerClassName,
           )}
-          aria-label={iconOnly ? "Share" : undefined}
+          aria-label={triggerLabel}
+          title={triggerLabel}
         >
-          {iconOnly || showLabelIcon ? (
-            <IconShare3 size={16} strokeWidth={1.75} />
-          ) : null}
+          <TriggerIcon size={16} strokeWidth={1.75} />
           {!iconOnly && <span>Share</span>}
         </button>
       </PopoverTrigger>
@@ -1663,7 +1669,7 @@ function Avatar({ label, org }: { label: string; org?: boolean }) {
       aria-hidden
       className="inline-flex h-7 w-7 shrink-0 items-center justify-center rounded-full bg-muted text-[11px] font-semibold text-muted-foreground"
     >
-      {org ? <IconBuilding size={14} strokeWidth={1.75} /> : initials(label)}
+      {org ? <IconUsersGroup size={14} strokeWidth={1.75} /> : initials(label)}
     </span>
   );
 }

package/corpus/core/src/client/sharing/ShareDialog.tsx

@@ -3,7 +3,6 @@ import {
   IconX,
   IconTrash,
   IconLock,
-  IconBuilding,
   IconWorld,
   IconCheck,
   IconCopy,
@@ -11,6 +10,7 @@ import {
   IconMail,
   IconCode,
   IconChevronDown,
+  IconUsersGroup,
 } from "@tabler/icons-react";
 import { useEffect, useState, type ReactNode } from "react";
 import { createPortal } from "react-dom";
@@ -117,7 +117,7 @@ const BUTTON_GHOST_ICON = cn(
 
 const VIS_ICONS: Record<Visibility, typeof IconLock> = {
   private: IconLock,
-  org: IconBuilding,
+  org: IconUsersGroup,
   public: IconWorld,
 };
 
@@ -824,7 +824,7 @@ function Avatar({ label, org }: { label: string; org?: boolean }) {
       className="inline-flex h-7 w-7 shrink-0 items-center justify-center rounded-full bg-muted text-[11px] font-semibold text-muted-foreground"
     >
       {org ? (
-        <IconBuilding size={14} strokeWidth={1.75} />
+        <IconUsersGroup size={14} strokeWidth={1.75} />
       ) : (
         (label.split("@")[0]?.[0] ?? label[0] ?? "?").toUpperCase()
       )}

package/corpus/core/src/client/use-action.ts

@@ -68,9 +68,41 @@ export function defaultActionQueryRetry(
   // A timeout already made the user wait the full timeout window once;
   // silently retrying would multiply that wait. Surface it instead.
   if (isActionTimeout(error)) return false;
+  if (isBrowserResourceExhaustion(error)) return false;
+  // Network-level failures never carry an HTTP `status` (actionFetch only
+  // sets it after a response arrives). Chrome reports connection-pool
+  // exhaustion (net::ERR_INSUFFICIENT_RESOURCES) as a generic "Failed to
+  // fetch", indistinguishable from a transient blip — allow one retry, not
+  // three, so an exhausted tab cannot sustain its own fetch storm.
+  if (isNetworkLevelFailure(error)) return failureCount < 1;
   return failureCount < 3;
 }
 
+/** @internal alias kept for existing specs. */
+export const shouldRetryActionQueryForError = defaultActionQueryRetry;
+
+function isBrowserResourceExhaustion(error: unknown): boolean {
+  const message =
+    error instanceof Error
+      ? error.message
+      : typeof error === "string"
+        ? error
+        : "";
+  return /ERR_INSUFFICIENT_RESOURCES|insufficient resources/i.test(message);
+}
+
+function isNetworkLevelFailure(error: unknown): boolean {
+  // Match the exact shape actionFetch produces for fetch-level failures (its
+  // catch wraps the cause as "Action <name> failed: <cause>" and never sets a
+  // status). Other status-less errors (test doubles, transport internals)
+  // keep the standard three-retry policy.
+  return (
+    error instanceof Error &&
+    (error as { status?: unknown }).status === undefined &&
+    /^Action .+ failed: /.test(error.message)
+  );
+}
+
 /**
  * Default retry backoff for action queries. React Query's stock retryDelay
  * (1s → 2s → 4s) makes a failing query sit on a spinner for ~7s before the
@@ -436,12 +468,14 @@ export function useActionMutation<
     "mutationFn"
   > & {
     method?: "POST" | "PUT" | "DELETE";
+    skipActionQueryInvalidation?: boolean;
   },
 ) {
   const queryClient = useQueryClient();
   const {
     method: methodOpt,
     onSuccess,
+    skipActionQueryInvalidation = false,
     ...restOptions
   } = options ?? ({} as any);
   const method = methodOpt ?? "POST";
@@ -454,8 +488,11 @@ export function useActionMutation<
     mutationFn: (params) =>
       actionFetch<D>(actionName, method, params as Record<string, any>),
     onSuccess: (...args: [any, any, any]) => {
-      // Invalidate related action queries
-      queryClient.invalidateQueries({ queryKey: ["action"] });
+      // Most mutations change app data broadly. High-volume background
+      // mutations can opt out and perform narrower invalidation in onSuccess.
+      if (!skipActionQueryInvalidation) {
+        queryClient.invalidateQueries({ queryKey: ["action"] });
+      }
       (onSuccess as Function)?.(...args);
     },
   });

package/corpus/core/src/client/use-db-sync.ts

@@ -561,6 +561,9 @@ export function subscribeSyncEvents(
  *   compatibility invalidate triggered by `action` events. Use this to keep
  *   expensive active queries on explicit-refresh semantics while still letting
  *   normal source-versioned queries react through `useChangeVersion`.
+ * @param options.suppressActionInvalidationFor - Action names whose sync events
+ *   should not invalidate all action queries. Use only for high-volume
+ *   background actions that perform their own narrow client invalidation.
  */
 export function useDbSync(
   options: {
@@ -576,6 +579,7 @@ export function useDbSync(
     pauseWhenHidden?: boolean;
     ignoreSource?: string;
     actionInvalidatePredicate?: (query: Query) => boolean;
+    suppressActionInvalidationFor?: string[];
   } = {},
 ): void {
   const {
@@ -599,6 +603,11 @@ export function useDbSync(
     options.actionInvalidatePredicate,
   );
   actionInvalidatePredicateRef.current = options.actionInvalidatePredicate;
+  const suppressActionInvalidationForRef = useRef(
+    options.suppressActionInvalidationFor,
+  );
+  suppressActionInvalidationForRef.current =
+    options.suppressActionInvalidationFor;
 
   useEffect(() => {
     const id = Symbol("useDbSync");
@@ -621,6 +630,18 @@ export function useDbSync(
       const relevant = ignore
         ? events.filter((e) => e.requestSource !== ignore)
         : events;
+      const suppressedActions = new Set(
+        suppressActionInvalidationForRef.current ?? [],
+      );
+      const isSuppressedActionEvent = (evt: SyncEvent) =>
+        evt.source === "action" &&
+        typeof evt.key === "string" &&
+        suppressedActions.has(evt.key);
+      const nonAwareness = relevant.filter((e) => e.source !== "awareness");
+      const suppressesWholeBatch =
+        nonAwareness.length > 0 &&
+        nonAwareness.every((evt) => evt.source === "action") &&
+        nonAwareness.every(isSuppressedActionEvent);
 
       // Bump per-source change counters. Components that read these via
       // `useChangeVersion(source)` and fold the value into a React Query
@@ -642,7 +663,7 @@ export function useDbSync(
 
       if (invalidating.length > 0 && queryClient) {
         const hasActionEvent = invalidating.some(
-          (evt) => evt.source === "action",
+          (evt) => evt.source === "action" && !isSuppressedActionEvent(evt),
         );
         if (hasActionEvent) {
           // Custom apps frequently start with raw `useQuery` calls before
@@ -661,23 +682,28 @@ export function useDbSync(
         // etc.). Templates' own data queries do NOT live here — they react
         // through `useChangeVersion(source)` in their query keys instead, so
         // a single change event doesn't fan out into "refetch everything".
-        queryClient.invalidateQueries({ queryKey: ["action"] });
-        queryClient.invalidateQueries({ queryKey: ["extension"] });
-        queryClient.invalidateQueries({ queryKey: ["extensions"] });
-        queryClient.invalidateQueries({ queryKey: ["extension-slots"] });
-        queryClient.invalidateQueries({ queryKey: ["slot-installs"] });
-        queryClient.invalidateQueries({ queryKey: ["slot-available"] });
-        queryClient.invalidateQueries({ queryKey: ["tool"] });
-        queryClient.invalidateQueries({ queryKey: ["tools"] });
-        queryClient.invalidateQueries({ queryKey: ["app-state"] });
-        if (hasAppStateEvent(invalidating, "navigate")) {
-          queryClient.invalidateQueries({ queryKey: ["navigate-command"] });
-        }
-        if (hasAppStateEvent(invalidating, "show-questions")) {
-          queryClient.invalidateQueries({ queryKey: ["show-questions"] });
-        }
-        if (hasAppStateEvent(invalidating, "__set_url__")) {
-          queryClient.invalidateQueries({ queryKey: ["__set_url__"] });
+        // Suppressed-action-only batches skip this whole list (their
+        // mutations perform their own narrow invalidation) — but events must
+        // STILL reach the onEvent forwarding below, so guard, don't return.
+        if (!suppressesWholeBatch) {
+          queryClient.invalidateQueries({ queryKey: ["action"] });
+          queryClient.invalidateQueries({ queryKey: ["extension"] });
+          queryClient.invalidateQueries({ queryKey: ["extensions"] });
+          queryClient.invalidateQueries({ queryKey: ["extension-slots"] });
+          queryClient.invalidateQueries({ queryKey: ["slot-installs"] });
+          queryClient.invalidateQueries({ queryKey: ["slot-available"] });
+          queryClient.invalidateQueries({ queryKey: ["tool"] });
+          queryClient.invalidateQueries({ queryKey: ["tools"] });
+          queryClient.invalidateQueries({ queryKey: ["app-state"] });
+          if (hasAppStateEvent(invalidating, "navigate")) {
+            queryClient.invalidateQueries({ queryKey: ["navigate-command"] });
+          }
+          if (hasAppStateEvent(invalidating, "show-questions")) {
+            queryClient.invalidateQueries({ queryKey: ["show-questions"] });
+          }
+          if (hasAppStateEvent(invalidating, "__set_url__")) {
+            queryClient.invalidateQueries({ queryKey: ["__set_url__"] });
+          }
         }
       }
 

package/corpus/core/src/command-navigation/actions.ts

@@ -0,0 +1,100 @@
+import { z } from "zod";
+
+import { defineAction } from "../action.js";
+import { readAppState, writeAppState } from "../application-state/index.js";
+
+const navigateSchema = z
+  .object({
+    view: z.string().optional().describe("View name to navigate to"),
+    path: z.string().optional().describe("URL path to navigate to"),
+  })
+  .passthrough();
+
+export interface CreateNavigateActionOptions {
+  description?: string;
+  stateKey?: string;
+  normalize?: (
+    args: z.infer<typeof navigateSchema>,
+  ) => Record<string, unknown> | Promise<Record<string, unknown>>;
+  describeResult?: (
+    navigation: Record<string, unknown>,
+    args: z.infer<typeof navigateSchema>,
+  ) => string;
+}
+
+export interface CreateViewScreenActionOptions {
+  description?: string;
+  navigationStateKey?: string;
+  extraStateKeys?: string[];
+  describeResult?: (
+    screen: Record<string, unknown>,
+  ) =>
+    | Record<string, unknown>
+    | string
+    | Promise<Record<string, unknown> | string>;
+}
+
+function writeId(): string {
+  return `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+}
+
+export function createNavigateAction(
+  options: CreateNavigateActionOptions = {},
+) {
+  const stateKey = options.stateKey ?? "navigate";
+  return defineAction({
+    description:
+      options.description ??
+      "Navigate the UI to a specific view or path. Writes a navigate command to application state which the UI reads and auto-deletes.",
+    schema: navigateSchema,
+    http: false,
+    run: async (args) => {
+      if (!args.view && !args.path) {
+        throw new Error("At least --view or --path is required.");
+      }
+      const navigation = options.normalize
+        ? await options.normalize(args)
+        : ({
+            ...(args.view ? { view: args.view } : null),
+            ...(args.path ? { path: args.path } : null),
+          } as Record<string, unknown>);
+      navigation._writeId = writeId();
+      await writeAppState(stateKey, navigation);
+      return (
+        options.describeResult?.(navigation, args) ??
+        `Navigating to ${String(args.view || args.path)}`
+      );
+    },
+  });
+}
+
+export function createViewScreenAction(
+  options: CreateViewScreenActionOptions = {},
+) {
+  const navigationStateKey = options.navigationStateKey ?? "navigation";
+  return defineAction({
+    description:
+      options.description ??
+      "See what the user is currently looking at on screen. Returns the current navigation state.",
+    schema: z.object({}),
+    http: false,
+    readOnly: true,
+    run: async () => {
+      const screen: Record<string, unknown> = {};
+      const navigation = await readAppState(navigationStateKey);
+      if (navigation) screen.navigation = navigation;
+
+      for (const key of options.extraStateKeys ?? []) {
+        const value = await readAppState(key);
+        if (value !== null && value !== undefined) screen[key] = value;
+      }
+
+      if (Object.keys(screen).length === 0) {
+        return "No application state found. Is the app running?";
+      }
+      return options.describeResult
+        ? await options.describeResult(screen)
+        : screen;
+    },
+  });
+}

package/corpus/core/src/command-navigation/index.ts

@@ -0,0 +1,12 @@
+export * from "../navigation/index.js";
+export * from "./actions.js";
+export {
+  buildDeepLink,
+  toAbsoluteOpenUrl,
+  toDesktopOpenUrl,
+  toVsCodeOpenUrl,
+  DESKTOP_OPEN_URL,
+  OPEN_ROUTE_SUBPATH,
+  VSCODE_OPEN_URL,
+  type DeepLinkInput,
+} from "../server/deep-link.js";

package/corpus/core/src/comments-review/index.ts

@@ -0,0 +1 @@
+export * from "../review/index.js";

package/corpus/core/src/db/create-get-db.ts

@@ -1,3 +1,5 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+
 import { drizzle as drizzleD1 } from "drizzle-orm/d1";
 import type { LibSQLDatabase } from "drizzle-orm/libsql";
 
@@ -320,15 +322,26 @@ function getBetterSqliteDrizzle() {
  * The patched transaction also patches the tx object it passes to the callback
  * so that nested async calls (tx.transaction(async …)) work recursively.
  */
-function patchBetterSqliteTransactions<
+/** @internal exported for the async-tx concurrency spec */
+export function patchBetterSqliteTransactions<
   DB extends { transaction: (...args: any[]) => any; session: any },
 >(db: DB, sqlite: { inTransaction: boolean; exec: (sql: string) => void }): DB {
   let savepointSeq = 0;
+  // Concurrent TOP-LEVEL async transactions on the single better-sqlite3
+  // connection must not interleave: a second transaction starting while the
+  // first is open would see `inTransaction` and open a savepoint INSIDE the
+  // first transaction, which then commits out from under it ("no such
+  // savepoint"). Serialize top-level transactions through a promise chain;
+  // genuine same-task nesting (tx.transaction or db.transaction inside an
+  // open callback) is detected via AsyncLocalStorage and keeps the direct
+  // savepoint path so it cannot deadlock on the queue.
+  const txContext = new AsyncLocalStorage<boolean>();
+  let txChain: Promise<unknown> = Promise.resolve();
 
   function makeAsyncTransaction(
     originalTransaction: (...args: any[]) => any,
   ): (...args: any[]) => Promise<unknown> {
-    return async function asyncTransaction(
+    async function runTransactionBody(
       cb: (tx: unknown) => unknown,
     ): Promise<unknown> {
       // Extract the drizzle tx proxy synchronously — call the original with a
@@ -392,6 +405,23 @@ function patchBetterSqliteTransactions<
         }
         throw err;
       }
+    }
+
+    return function asyncTransaction(
+      cb: (tx: unknown) => unknown,
+    ): Promise<unknown> {
+      if (txContext.getStore()) {
+        // Same-task nesting: run directly (savepoint path inside the open
+        // transaction). Queueing here would deadlock behind the outer tx.
+        return runTransactionBody(cb);
+      }
+      const run = () => txContext.run(true, () => runTransactionBody(cb));
+      const next = txChain.then(run, run);
+      txChain = next.then(
+        () => undefined,
+        () => undefined,
+      );
+      return next;
     };
   }